dsh-auto-review 0.12.3 → 0.12.5

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 All notable changes to `dsh-auto-review` are documented here. The repo is pre-release; versions follow the DeepSeek Harness `0.1.0-rc.x` target runtime and bump on every behavior change.
 
+## [0.12.5] - 2026-09-18
+
+### Changed
+
+- Land the eval fixtures on the alpha.2 model vocabulary: `eval/cordis.yml` and `eval/cases/demo.yaml` (plus the five README run examples) now name `deepseek-flash` instead of the removed `deepseek-v4-flash` id, and the compatibility row admits the `>=0.1.6-0 <0.2.0` peer segment.
+- Declare `dsh.manifestVersion: 1` and the canonical three-clause `engines.dsh` (G-3).
+
+### Notes
+
+- The A2 wrapper static assertion (a lint rule proving `src/session-events.ts` stays the only `snapshotEvents()` call site) is **not yet enforceable here**: this repo lints with oxlint (96 rules, no `typescript/no-deprecated` rule configured), so the card's precondition does not hold. The single call site is unchanged and documented; the assertion can land once the rule is enabled.
+- The resume round-trip criterion (`check-session-log.mjs` over a real log) still needs a real host log; the audit gate contract plus the existing regression tests pin the no-unmarked-append invariant in the meantime.
+
+## [0.12.4] - 2026-09-12
+
+### Fixed
+
+- Correct the host-capability documentation that claimed a later harness line could stamp the `ignorable` envelope marker from `Session.append`. **No published line can**, and the code was right all along. Verified three ways: the host source (`packages/core/session/src/index.ts:710-738` — the optional third parameter is `SurfaceIntent`, accepted for surface event types only, and the envelope is assembled from `{ type, seq, time, data }` plus `surfaceOp`/`sourceEventSeqs` alone), every relevant published tarball (`0.1.0-rc.2/3/6/7/8`, `0.1.1-rc.1/2`, `0.1.2-alpha.2–alpha.5`, `0.1.2-rc.1`, `0.1.3-alpha.2`, `0.1.5-rc.1`, `0.1.5-rc.2` — all build the same envelope), and a live append against the host's own built `Session` on the `0.1.5-rc.2` line, which returns keys `["type","seq","time","data"]` with `ignorable` undefined. The marker is reachable only through the seed/restore path, i.e. it is written by the harness that owns the log, never by a plugin appending to it. `isUnmarkedHostVersion` returning `true` for the whole published 0.1.x range is therefore accurate and not an over-reach; it is now pinned by a test so a future "narrow the bound" change cannot silently become the log pollution the guard exists to prevent. Reported with the opposite diagnosis on issue #38.
+- Rewrite the `auditDisabledNotice` (EN + ZH), the `warnUnmarkedAuditHost` warning, the `allowUnmarkedAudit` config doc, and the AGENTS.md audit bullet so they no longer say the host "predates" the marker or that unmarked events break resume only "on stricter harness builds". The unmarked event is refused by `validateStoredEvents` on **every** validating harness, reached from the ordinary local jsonl load path — and `allowUnmarkedAudit: true` is now stated as what it is: a switch that makes those sessions unloadable, not a compatibility workaround. The previous wording led a user to recommend it publicly as safe on `0.1.5-rc.2`.
+- Add a regression test that calls the installed peer's real `Session.append` with `{ ignorable: true }` on an out-of-tree type and asserts the returned envelope carries no marker, plus a table test over every published 0.1.x version string.
+
 ## [0.12.3] - 2026-09-12
 
 ### Changed

package/README-es.md

@@ -9,6 +9,7 @@
 > **Repositorio oficial.** Este es el único repositorio oficial de dsh-auto-review, mantenido por PerryLink. Los repositorios del mismo nombre bajo otras cuentas no están afiliados.
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-auto-review)
 [![DSH plugin](https://img.shields.io/badge/dsh--plugin-✅-green)](https://github.com/topics/dsh-plugin)
 [![dsh-doctor](https://raw.githubusercontent.com/PerryLink/dsh-plugin-doctor/main/badges/PerryLink__dsh-auto-review.svg)](https://github.com/PerryLink/dsh-plugin-doctor#verified-徽章)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-brightgreen.svg)](#)
@@ -27,7 +28,7 @@
 
 | Superficie | Estado |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (tag de GitHub, verificado el 2026-09-11). Soporte npm de doble línea: pins de desarrollo y dependencias de runtime `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0` — el código del plugin detecta ambas líneas de host publicadas (detección de características) y cada línea ejecuta la cadena completa de gates; las dependencias de runtime siguen la línea alpha para que una instalación en un perfil nunca sombree el árbol `0.1.5-rc.2` del host. |
+| Harness | DeepSeek Harness `dsh-v0.1.6-alpha.2` (verificado el 2026-09-18). Soporte npm de doble línea: pins de desarrollo y dependencias de runtime `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0 \|\| >=0.1.6-0 <0.2.0` — el código del plugin detecta las líneas de host publicadas (detección de características) y cada línea ejecuta la cadena completa de gates; las dependencias de runtime siguen la línea alpha para que una instalación en un perfil nunca sombree el árbol del host. En la línea alpha.2 los fixtures de eval fijan `deepseek-flash` (el id eliminado `deepseek-v4-flash` ya no aparece en `eval/`). |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (answerer de host; panel web opcional mediante la capacidad de proyección de sesión) |
 | Modelo | Cualquiera (el revisor hereda la ruta del agente de sesión; `reviewerModel` la reemplaza) |
@@ -227,7 +228,7 @@ suite:
 Ejecútalo (una clave de API de DeepSeek debe estar en el entorno):
 
 ```sh
-dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
 ```
 
 ### Familias de aserciones
@@ -264,7 +265,7 @@ Puerta de CI: el proceso sale con 0 solo cuando todos los casos de todas las sui
 
 ```yaml
 - name: dsh-eval
-  run: npx dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+  run: npx dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
   env:
     DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
 ```
@@ -354,7 +355,7 @@ El servidor es de solo lectura y determinista: sin red, sin modelo, sin escritur
 ```sh
 pnpm install                # node ^22.19 || >=24
 pnpm run typecheck          # tsc: src + tests contra el checkout local del harness
-pnpm test                   # vitest: 190 tests, 14 archivos
+pnpm test                   # vitest: 25 archivos spec
 pnpm run build              # declaraciones tsc + bundles tsdown (lib/, incluido el bundle de cliente)
 pnpm run verify:self-contained
 pnpm pack                   # el tarball publicado
@@ -374,7 +375,7 @@ Estructura del repositorio: `src/index.ts` (contrato del plugin) · `src/config.
 
 ## Familia de plugins DSH de PerryLink
 
-Este proyecto es uno de los [37 complementos de DeepSeek Harness](https://github.com/PerryLink) mantenidos por [PerryLink](https://github.com/PerryLink). Si este te ayuda, probablemente los demás también:
+Este proyecto es uno de los [40 complementos de DeepSeek Harness](https://github.com/PerryLink) mantenidos por [PerryLink](https://github.com/PerryLink). Si este te ayuda, probablemente los demás también:
 
 | Plugin | One-liner |
 |---|---|
@@ -413,7 +414,17 @@ Este proyecto es uno de los [37 complementos de DeepSeek Harness](https://github
 | **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | Pruebas de instalación y humo aisladas para plugins de DeepSeek Harness. | |
 | **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | Puente de tareas TickTick/Dida365: panel de cabecera de sesión + 11 herramientas |
 | **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | Traducción de parámetros entre proveedores y reparación determinista de JSON para DeepSeek Harness. | |
-| **[dsh-wechat](https://github.com/PerryLink/dsh-wechat)** | Puente WeChat ↔ DSH (bot Tencent iLink): texto/imagen/archivo/voz, aprobaciones en el chat |
+| **[dsh-wechat](https://github.com/pan17/dsh-wechat)** | Puente WeChat ↔ DSH (bot Tencent iLink): texto/imagen/archivo/voz, aprobaciones en el chat |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | Automatic strong/cheap model-tier routing with deterministic risk guards and a `/tier` command | |
+| **[dsh-catalog](https://github.com/PerryLink/dsh-catalog)** | DSH Desktop Market standard catalog source for the PerryLink family | |
+| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | Read-only MCP server exposing the certification registry: grades, snapshots and five-dimension evidence | |
+| **[dsh-kit](https://github.com/PerryLink/dsh-kit)** | One-command starter pack that installs the core family | |
+| **[dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification)** | Community certification registry with repro-checkable grades and badges | |
+| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | Shared zero-runtime-dependency toolkit for the PerryLink DSH plugins | |
+| **[dsh-plugin-portal](https://github.com/PerryLink/dsh-plugin-portal)** | Zero-dependency static portal rendering the whole plugin family as one page | |
+| **[dsh-plugin-upgrade-015](https://github.com/PerryLink/dsh-plugin-upgrade-015)** | Merged `0.1.3-alpha.1` → `0.1.5-rc.1` upgrade corridor card plus a zero-dependency seam scanner | |
+| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | Cross-session team rooms: shared message bus, task board and timeline | |
+| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | Zero-dependency static + sandbox smoke detector for DSH plugins | |
 
 ### Instalar desde el mercado de DSH Desktop
 

package/README-hi.md

@@ -9,6 +9,7 @@
 > **आधिकारिक रिपॉज़िटरी।** यह PerryLink द्वारा अनुरक्षित dsh-auto-review का एकमात्र आधिकारिक रिपॉज़िटरी है। अन्य खातों के समान-नाम रिपॉज़िटरी इससे संबद्ध नहीं हैं।
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-auto-review)
 [![DSH plugin](https://img.shields.io/badge/dsh--plugin-✅-green)](https://github.com/topics/dsh-plugin)
 [![dsh-doctor](https://raw.githubusercontent.com/PerryLink/dsh-plugin-doctor/main/badges/PerryLink__dsh-auto-review.svg)](https://github.com/PerryLink/dsh-plugin-doctor#verified-徽章)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-brightgreen.svg)](#)
@@ -27,7 +28,7 @@
 
 | सतह | स्थिति |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (GitHub tag, 2026-09-11 को सत्यापित)। दोहरी-लाइन npm समर्थन: dev पिन और रनटाइम निर्भरताएँ `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0` — प्लगइन कोड दोनों प्रकाशित होस्ट लाइनों को फ़ीचर-डिटेक्ट करता है और हर लाइन पूरी गेट श्रृंखला चलाती है; रनटाइम निर्भरताएँ alpha लाइन का पालन करती हैं ताकि प्रोफ़ाइल इंस्टॉल होस्ट के अपने `0.1.5-rc.2` ट्री को शैडो न करें। |
+| Harness | DeepSeek Harness `dsh-v0.1.6-alpha.2` (2026-09-18 को सत्यापित)। दोहरी-लाइन npm समर्थन: dev पिन और रनटाइम निर्भरताएँ `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0 \|\| >=0.1.6-0 <0.2.0` — प्लगइन कोड प्रकाशित होस्ट लाइनों को फ़ीचर-डिटेक्ट करता है और हर लाइन पूरी गेट श्रृंखला चलाती है; रनटाइम निर्भरताएँ alpha लाइन का पालन करती हैं ताकि प्रोफ़ाइल इंस्टॉल होस्ट के अपने ट्री को शैडो न करें। alpha.2 लाइन पर eval फ़िक्स्चर `deepseek-flash` पिन करते हैं (हटाया गया `deepseek-v4-flash` अब `eval/` में नहीं है)। |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | प्लेटफ़ॉर्म | सभी (होस्ट answerer; सत्र-प्रोजेक्शन क्षमता के ज़रिए वैकल्पिक वेब समीक्षा पैनल) |
 | मॉडल | कोई भी (समीक्षक सत्र एजेंट का मार्ग विरासत में लेता है; `reviewerModel` उसे बदल देता है) |
@@ -227,7 +228,7 @@ suite:
 इसे चलाएँ (वातावरण में एक DeepSeek API कुंजी होनी चाहिए):
 
 ```sh
-dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
 ```
 
 ### दावा परिवार
@@ -264,7 +265,7 @@ CI द्वार: प्रक्रिया केवल तभी 0 से
 
 ```yaml
 - name: dsh-eval
-  run: npx dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+  run: npx dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
   env:
     DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
 ```
@@ -354,7 +355,7 @@ Claude Desktop (`claude_desktop_config.json`) उदाहरण:
 ```sh
 pnpm install                # node ^22.19 || >=24
 pnpm run typecheck          # tsc: src + tests, स्थानीय harness checkout के विरुद्ध
-pnpm test                   # vitest: 190 परीक्षण, 14 फ़ाइलें
+pnpm test                   # vitest: 25 spec फ़ाइलें
 pnpm run build              # tsc घोषणाएँ + tsdown बंडल (lib/, क्लाइंट बंडल सहित)
 pnpm run verify:self-contained
 pnpm pack                   # प्रकाशित tarball
@@ -374,7 +375,7 @@ pnpm pack                   # प्रकाशित tarball
 
 ## PerryLink DSH प्लगइन परिवार
 
-यह प्रोजेक्ट [PerryLink](https://github.com/PerryLink) द्वारा अनुरक्षित [37 DeepSeek Harness प्लगइनों](https://github.com/PerryLink) में से एक है। अगर यह आपकी मदद करता है, तो बाकी भी करेंगे:
+यह प्रोजेक्ट [PerryLink](https://github.com/PerryLink) द्वारा अनुरक्षित [40 DeepSeek Harness प्लगइनों](https://github.com/PerryLink) में से एक है। अगर यह आपकी मदद करता है, तो बाकी भी करेंगे:
 
 | Plugin | One-liner |
 |---|---|
@@ -413,7 +414,17 @@ pnpm pack                   # प्रकाशित tarball
 | **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | DeepSeek Harness प्लगिनों के लिए पृथक इंस्टॉल-एंड-स्मोक टेस्ट ड्राइव। | |
 | **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | TickTick/Dida365 कार्य ब्रिज: सत्र-हेडर पैनल + 11 टूल |
 | **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | DeepSeek Harness के लिए वेंडर पैरामीटर अनुवाद और नियतात्मक JSON मरम्मत। | |
-| **[dsh-wechat](https://github.com/PerryLink/dsh-wechat)** | WeChat ↔ DSH ब्रिज (Tencent iLink bot): टेक्स्ट/इमेज/फ़ाइल/आवाज़, चैट में अनुमोदन |
+| **[dsh-wechat](https://github.com/pan17/dsh-wechat)** | WeChat ↔ DSH ब्रिज (Tencent iLink bot): टेक्स्ट/इमेज/फ़ाइल/आवाज़, चैट में अनुमोदन |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | Automatic strong/cheap model-tier routing with deterministic risk guards and a `/tier` command | |
+| **[dsh-catalog](https://github.com/PerryLink/dsh-catalog)** | DSH Desktop Market standard catalog source for the PerryLink family | |
+| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | Read-only MCP server exposing the certification registry: grades, snapshots and five-dimension evidence | |
+| **[dsh-kit](https://github.com/PerryLink/dsh-kit)** | One-command starter pack that installs the core family | |
+| **[dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification)** | Community certification registry with repro-checkable grades and badges | |
+| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | Shared zero-runtime-dependency toolkit for the PerryLink DSH plugins | |
+| **[dsh-plugin-portal](https://github.com/PerryLink/dsh-plugin-portal)** | Zero-dependency static portal rendering the whole plugin family as one page | |
+| **[dsh-plugin-upgrade-015](https://github.com/PerryLink/dsh-plugin-upgrade-015)** | Merged `0.1.3-alpha.1` → `0.1.5-rc.1` upgrade corridor card plus a zero-dependency seam scanner | |
+| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | Cross-session team rooms: shared message bus, task board and timeline | |
+| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | Zero-dependency static + sandbox smoke detector for DSH plugins | |
 
 ### DSH Desktop मार्केट से इंस्टॉल करें
 

package/README-pt.md

@@ -9,6 +9,7 @@
 > **Repositório oficial.** Este é o único repositório oficial do dsh-auto-review, mantido por PerryLink. Repositórios de mesmo nome sob outras contas não são afiliados.
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-auto-review)
 [![DSH plugin](https://img.shields.io/badge/dsh--plugin-✅-green)](https://github.com/topics/dsh-plugin)
 [![dsh-doctor](https://raw.githubusercontent.com/PerryLink/dsh-plugin-doctor/main/badges/PerryLink__dsh-auto-review.svg)](https://github.com/PerryLink/dsh-plugin-doctor#verified-徽章)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-brightgreen.svg)](#)
@@ -27,7 +28,7 @@
 
 | Superfície | Status |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (tag do GitHub, verificado em 2026-09-11). Suporte npm de linha dupla: pins de desenvolvimento e dependências de runtime `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0` — o código do plugin detecta ambas as linhas de host publicadas (detecção de recursos) e cada linha executa a cadeia completa de gates; as dependências de runtime seguem a linha alpha para que uma instalação em um perfil nunca sombreie a árvore `0.1.5-rc.2` do host. |
+| Harness | DeepSeek Harness `dsh-v0.1.6-alpha.2` (verificado em 2026-09-18). Suporte npm de linha dupla: pins de desenvolvimento e dependências de runtime `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0 \|\| >=0.1.6-0 <0.2.0` — o código do plugin detecta as linhas de host publicadas (detecção de recursos) e cada linha executa a cadeia completa de gates; as dependências de runtime seguem a linha alpha para que uma instalação em um perfil nunca sombreie a árvore do host. Na linha alpha.2 os fixtures de eval fixam `deepseek-flash` (o id removido `deepseek-v4-flash` não aparece mais em `eval/`). |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (answerer de host; painel web opcional via capacidade de projeção de sessão) |
 | Modelo | Qualquer (o revisor herda a rota do agente da sessão; `reviewerModel` sobrescreve) |
@@ -227,7 +228,7 @@ suite:
 Execute-o (uma chave de API da DeepSeek deve estar no ambiente):
 
 ```sh
-dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
 ```
 
 ### Famílias de asserção
@@ -264,7 +265,7 @@ Portão de CI: o processo sai com 0 somente quando todos os casos de todas as su
 
 ```yaml
 - name: dsh-eval
-  run: npx dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+  run: npx dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
   env:
     DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
 ```
@@ -354,7 +355,7 @@ O servidor é somente-leitura e determinista: sem rede, sem modelo, sem gravaç
 ```sh
 pnpm install                # node ^22.19 || >=24
 pnpm run typecheck          # tsc: src + tests contra o checkout local do harness
-pnpm test                   # vitest: 190 testes, 14 arquivos
+pnpm test                   # vitest: 25 arquivos spec
 pnpm run build              # declarações tsc + bundles tsdown (lib/, incluindo o bundle de cliente)
 pnpm run verify:self-contained
 pnpm pack                   # o tarball publicado
@@ -374,7 +375,7 @@ Layout do repositório: `src/index.ts` (contrato do plugin) · `src/config.ts` (
 
 ## Família de Plugins DSH PerryLink
 
-Este projeto é um dos [37 plugins de DeepSeek Harness](https://github.com/PerryLink) mantidos por [PerryLink](https://github.com/PerryLink). Se este ajuda você, os outros provavelmente também:
+Este projeto é um dos [40 plugins de DeepSeek Harness](https://github.com/PerryLink) mantidos por [PerryLink](https://github.com/PerryLink). Se este ajuda você, os outros provavelmente também:
 
 | Plugin | One-liner |
 |---|---|
@@ -413,11 +414,17 @@ Este projeto é um dos [37 plugins de DeepSeek Harness](https://github.com/Perry
 | **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | Test drives isolados de instalação e smoke para plugins de DeepSeek Harness. | |
 | **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | Ponte de tarefas TickTick/Dida365: painel no cabeçalho da sessão + 11 ferramentas |
 | **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | Tradução de parâmetros entre fornecedores e reparo determinístico de JSON para DeepSeek Harness. | |
-| **[dsh-wechat](https://github.com/PerryLink/dsh-wechat)** | Ponte WeChat ↔ DSH (bot Tencent iLink): texto/imagem/arquivo/voz, aprovações no chat |
-
-### Instalar a partir do mercado do DSH Desktop
-
-Todos os plugins PerryLink podem ser explorados no mercado integrado do DSH Desktop: **Market → Sources → add source → colar** `https://perrylink-dsh-catalog.perrylink.workers.dev/catalog-source.json` **→ selecionar**. A instalação continua passando pela verificação de identidade npm do mercado e pela sua confirmação.
+| **[dsh-wechat](https://github.com/pan17/dsh-wechat)** | Ponte WeChat ↔ DSH (bot Tencent iLink): texto/imagem/arquivo/voz, aprovações no chat |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | Automatic strong/cheap model-tier routing with deterministic risk guards and a `/tier` command | |
+| **[dsh-catalog](https://github.com/PerryLink/dsh-catalog)** | DSH Desktop Market standard catalog source for the PerryLink family | |
+| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | Read-only MCP server exposing the certification registry: grades, snapshots and five-dimension evidence | |
+| **[dsh-kit](https://github.com/PerryLink/dsh-kit)** | One-command starter pack that installs the core family | |
+| **[dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification)** | Community certification registry with repro-checkable grades and badges | |
+| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | Shared zero-runtime-dependency toolkit for the PerryLink DSH plugins | |
+| **[dsh-plugin-portal](https://github.com/PerryLink/dsh-plugin-portal)** | Zero-dependency static portal rendering the whole plugin family as one page | |
+| **[dsh-plugin-upgrade-015](https://github.com/PerryLink/dsh-plugin-upgrade-015)** | Merged `0.1.3-alpha.1` → `0.1.5-rc.1` upgrade corridor card plus a zero-dependency seam scanner | |
+| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | Cross-session team rooms: shared message bus, task board and timeline | |
+| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | Zero-dependency static + sandbox smoke detector for DSH plugins | |
 
 ## Licença
 

package/README-zh.md

@@ -9,6 +9,7 @@
 > **官方仓库。** 本仓库是 dsh-auto-review 的唯一官方仓库，由 PerryLink 维护。其他账号下的同名仓库与本项目无关。
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-auto-review)
 [![DSH plugin](https://img.shields.io/badge/dsh--plugin-✅-green)](https://github.com/topics/dsh-plugin)
 [![dsh-doctor](https://raw.githubusercontent.com/PerryLink/dsh-plugin-doctor/main/badges/PerryLink__dsh-auto-review.svg)](https://github.com/PerryLink/dsh-plugin-doctor#verified-徽章)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-brightgreen.svg)](#)
@@ -27,7 +28,7 @@
 
 | 方面 | 状态 |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.5-rc.2`（GitHub tag，2026-09-11 已核验）。双线 npm 支持：dev 钉号与运行时依赖均为 `0.1.5-rc.2`、peer 范围 `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0` —— 插件代码兼容两条已发布宿主线（特性探测），两线均跑完整门禁链；运行时依赖钉号随 alpha 线，避免 profile 安装遮蔽宿主自带的 `0.1.5-rc.2` 树。 |
+| Harness | DeepSeek Harness `dsh-v0.1.6-alpha.2`（2026-09-18 已核验）。双线 npm 支持：dev 钉号与运行时依赖均为 `0.1.5-rc.2`、peer 范围 `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0 \|\| >=0.1.6-0 <0.2.0` —— 插件代码兼容各已发布宿主线（特性探测），各线均跑完整门禁链；运行时依赖钉号随 alpha 线，避免 profile 安装遮蔽宿主自带树。alpha.2 线上 eval 夹具钉 `deepseek-flash`（已移除的 `deepseek-v4-flash` 不再出现在 `eval/`）。 |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | 平台 | 全部（宿主 answerer；可选 Web 审查面板，依赖会话投影能力） |
 | 模型 | 任意（审查器默认继承会话代理的路由；`reviewerModel` 可覆盖） |
@@ -227,7 +228,7 @@ suite:
 运行（环境需有 DeepSeek API 密钥）：
 
 ```sh
-dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
 ```
 
 ### 断言族
@@ -264,7 +265,7 @@ CI 门禁：仅当每个套件的每个用例都通过时，进程才以 0 退
 
 ```yaml
 - name: dsh-eval
-  run: npx dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+  run: npx dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
   env:
     DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
 ```
@@ -354,7 +355,7 @@ Claude Desktop（`claude_desktop_config.json`）配置示例：
 ```sh
 pnpm install                # node ^22.19 || >=24
 pnpm run typecheck          # tsc：src + tests，针对本地 harness 检出
-pnpm test                   # vitest：190 个测试，14 个文件
+pnpm test                   # vitest：25 个 spec 文件
 pnpm run build              # tsc 声明 + tsdown 打包（lib/，含客户端包）
 pnpm run verify:self-contained
 pnpm pack                   # 发布产物
@@ -374,7 +375,7 @@ pnpm pack                   # 发布产物
 
 ## PerryLink DSH 插件家族
 
-这是 [PerryLink](https://github.com/PerryLink) 维护的 [37 个 DeepSeek Harness 插件](https://github.com/PerryLink) 之一。如果它能帮到你，其他的也会：
+这是 [PerryLink](https://github.com/PerryLink) 维护的 [40 个 DeepSeek Harness 插件](https://github.com/PerryLink) 之一。如果它能帮到你，其他的也会：
 
 | Plugin | One-liner |
 |---|---|
@@ -404,6 +405,7 @@ pnpm pack                   # 发布产物
 | **[dsh-permission-rules](https://github.com/PerryLink/dsh-permission-rules)** | Claude Code 风格声明式 allow/deny/ask 权限规则，带审计 | |
 | **[dsh-personal-directive](https://github.com/PerryLink/dsh-personal-directive)** | 个人指令注入器：顶栏开关（框架版） |
 | **[dsh-plugin-guide](https://github.com/PerryLink/dsh-plugin-guide)** | 作为按需代理技能的插件开发知识库 | |
+| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | Zero-dependency static + sandbox smoke detector for DSH plugins | |
 | **[dsh-research-report](https://github.com/PerryLink/dsh-research-report)** | 可验证研究报告引擎：内容寻址证据账本与封存版本 | |
 | **[dsh-score](https://github.com/PerryLink/dsh-score)** | DeepSeek Harness 插件的多维质量评分。 | |
 | **[dsh-session-pin](https://github.com/PerryLink/dsh-session-pin)** | 在 Web 侧栏置顶会话，带持久排序 | |
@@ -413,7 +415,16 @@ pnpm pack                   # 发布产物
 | **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | DeepSeek Harness 插件的隔离试装冒烟。 | |
 | **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | TickTick/滴答清单任务桥接：会话头面板 + 11 个工具 |
 | **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | DeepSeek Harness 的厂商参数翻译与确定性 JSON 修复。 | |
-| **[dsh-wechat](https://github.com/PerryLink/dsh-wechat)** | 微信 ↔ DSH 桥接（Tencent iLink 机器人）：文本/图片/文件/语音，聊天内审批卡片 |
+| **[dsh-wechat](https://github.com/pan17/dsh-wechat)** | 微信 ↔ DSH 桥接（Tencent iLink 机器人）：文本/图片/文件/语音，聊天内审批卡片 |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | Automatic strong/cheap model-tier routing with deterministic risk guards and a `/tier` command | |
+| **[dsh-catalog](https://github.com/PerryLink/dsh-catalog)** | DSH Desktop Market standard catalog source for the PerryLink family | |
+| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | Read-only MCP server exposing the certification registry: grades, snapshots and five-dimension evidence | |
+| **[dsh-kit](https://github.com/PerryLink/dsh-kit)** | One-command starter pack that installs the core family | |
+| **[dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification)** | Community certification registry with repro-checkable grades and badges | |
+| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | Shared zero-runtime-dependency toolkit for the PerryLink DSH plugins | |
+| **[dsh-plugin-portal](https://github.com/PerryLink/dsh-plugin-portal)** | Zero-dependency static portal rendering the whole plugin family as one page | |
+| **[dsh-plugin-upgrade-015](https://github.com/PerryLink/dsh-plugin-upgrade-015)** | Merged `0.1.3-alpha.1` → `0.1.5-rc.1` upgrade corridor card plus a zero-dependency seam scanner | |
+| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | Cross-session team rooms: shared message bus, task board and timeline | |
 
 ### 从 DSH Desktop 市场安装
 

package/README.md

@@ -28,7 +28,7 @@
 
 | Surface | Status |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (GitHub tag, verified 2026-09-11). Dual-line npm support: dev pins and runtime deps `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0` — the plugin code feature-detects both published host lines and each line runs the full gate chain; the runtime dependency pins follow the alpha line so a profile install never shadows the host's own `0.1.5-rc.2` tree. |
+| Harness | DeepSeek Harness `dsh-v0.1.6-alpha.2` (verified 2026-09-18). Dual-line npm support: dev pins and runtime deps `0.1.5-rc.2`, peers `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0 \|\| >=0.1.6-0 <0.2.0` — the plugin code feature-detects the published host lines and each line runs the full gate chain; the runtime dependency pins follow the alpha line so a profile install never shadows the host's own tree. On the alpha.2 line the eval fixtures pin `deepseek-flash` (the removed `deepseek-v4-flash` id is gone from `eval/`). |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Platforms | All (host answerer; optional Web review panel via the session-projection capability) |
 | Model | Any (the reviewer inherits the session agent's route; `reviewerModel` overrides) |
@@ -229,7 +229,7 @@ suite:
 Run it (a DeepSeek API key must be in the environment):
 
 ```sh
-dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
 ```
 
 ### Assertion families
@@ -266,7 +266,7 @@ CI gate: the process exits 0 only when every case of every suite passed — fail
 
 ```yaml
 - name: dsh-eval
-  run: npx dsh-eval eval/cases --model deepseek-v4-flash --timeout-ms 240000 --out .eval-reports
+  run: npx dsh-eval eval/cases --model deepseek-flash --timeout-ms 240000 --out .eval-reports
   env:
     DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
 ```
@@ -356,7 +356,7 @@ The server is read-only and deterministic: no network, no model, no writes.
 ```sh
 pnpm install                # node ^22.19 || >=24
 pnpm run typecheck          # tsc: src + tests against the local harness checkout
-pnpm test                   # vitest: 233 tests, 20 files
+pnpm test                   # vitest: 25 spec files
 pnpm run build              # tsc declarations + tsdown bundles (lib/, incl. the client bundle)
 pnpm run verify:self-contained
 pnpm pack                   # the published tarball
@@ -376,7 +376,7 @@ Repository layout: `src/index.ts` (plugin contract) · `src/config.ts` (Schemast
 
 ## PerryLink DSH Plugin Family
 
-This project is one of the [37 DeepSeek Harness plugins](https://github.com/PerryLink) maintained by [PerryLink](https://github.com/PerryLink). If this one helps you, the others likely will too:
+This project is one of the [40 DeepSeek Harness plugins](https://github.com/PerryLink) maintained by [PerryLink](https://github.com/PerryLink). If this one helps you, the others likely will too:
 
 | Plugin | One-liner |
 |---|---|
@@ -406,6 +406,7 @@ This project is one of the [37 DeepSeek Harness plugins](https://github.com/Perr
 | **[dsh-permission-rules](https://github.com/PerryLink/dsh-permission-rules)** | Claude Code-style declarative allow/deny/ask permission rules with audit | |
 | **[dsh-personal-directive](https://github.com/PerryLink/dsh-personal-directive)** | Personal directive injector with top-bar toggle (framework edition) |
 | **[dsh-plugin-guide](https://github.com/PerryLink/dsh-plugin-guide)** | Plugin-development knowledge base as an on-demand agent skill | |
+| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | Zero-dependency static + sandbox smoke detector for DSH plugins | |
 | **[dsh-research-report](https://github.com/PerryLink/dsh-research-report)** | Verifiable research-report engine: content-addressed evidence ledger and sealed versions | |
 | **[dsh-score](https://github.com/PerryLink/dsh-score)** | Multi-dimensional quality scoring for DeepSeek Harness plugins. | |
 | **[dsh-session-pin](https://github.com/PerryLink/dsh-session-pin)** | Pin sessions in the Web sidebar with durable ordering | |
@@ -415,7 +416,16 @@ This project is one of the [37 DeepSeek Harness plugins](https://github.com/Perr
 | **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | Isolated install-and-smoke test drives for DeepSeek Harness plugins. | |
 | **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | TickTick/Dida365 task bridge: session-header panel + 11 tools |
 | **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | Vendor parameter translation and deterministic JSON repair for DeepSeek Harness. | |
-| **[dsh-wechat](https://github.com/PerryLink/dsh-wechat)** | WeChat ↔ DSH bridge (Tencent iLink bot): text/image/file/voice, approvals in chat |
+| **[dsh-wechat](https://github.com/pan17/dsh-wechat)** | WeChat ↔ DSH bridge (Tencent iLink bot): text/image/file/voice, approvals in chat |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | Automatic strong/cheap model-tier routing with deterministic risk guards and a `/tier` command | |
+| **[dsh-catalog](https://github.com/PerryLink/dsh-catalog)** | DSH Desktop Market standard catalog source for the PerryLink family | |
+| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | Read-only MCP server exposing the certification registry: grades, snapshots and five-dimension evidence | |
+| **[dsh-kit](https://github.com/PerryLink/dsh-kit)** | One-command starter pack that installs the core family | |
+| **[dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification)** | Community certification registry with repro-checkable grades and badges | |
+| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | Shared zero-runtime-dependency toolkit for the PerryLink DSH plugins | |
+| **[dsh-plugin-portal](https://github.com/PerryLink/dsh-plugin-portal)** | Zero-dependency static portal rendering the whole plugin family as one page | |
+| **[dsh-plugin-upgrade-015](https://github.com/PerryLink/dsh-plugin-upgrade-015)** | Merged `0.1.3-alpha.1` → `0.1.5-rc.1` upgrade corridor card plus a zero-dependency seam scanner | |
+| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | Cross-session team rooms: shared message bus, task board and timeline | |
 
 ### Install from the DSH Desktop Market
 

package/eval/cases/demo.yaml

@@ -1,7 +1,7 @@
 # dsh-eval demo suite — three cases that exercise this repository itself.
 #
 # Run from the repo root:
-#   dsh-eval eval/cases --model deepseek-v4-flash --out .eval-reports
+#   dsh-eval eval/cases --model deepseek-flash --out .eval-reports
 #
 # The cases need no hardcoded model/timeout here: the CLI (or a suite
 # override) supplies them; a case that resolves neither fails loudly.
@@ -11,7 +11,7 @@ suite:
   description: "The engine's own regression suite: output assertion, tool-trace assertion, and second-model review."
   models:
     tiers:
-      fast: deepseek-v4-flash
+      fast: deepseek-flash
       pro: deepseek-v4-pro
   concurrency: 1
   cases:

package/eval/cordis.yml

@@ -52,7 +52,7 @@
     models:
       - id: deepseek-v4-pro
         contextWindow: 128000
-      - id: deepseek-v4-flash
+      - id: deepseek-flash
         contextWindow: 128000
 
 # Plain-JSONL session persistence under the report directory: each case's

package/lib/index.js

@@ -8,18 +8,30 @@ import { assertObjectJsonSchema } from "@deepseek-ai/dsh-tools";
 /**
 * Host-capability detection for the `ignorable` audit-envelope marker.
 *
-* `Session.append(type, data, { ignorable: true })` stamps the envelope
-* marker on host builds that expose the surface (post-rc.6
-* `@deepseek-ai/dsh-session`); the `0.1.0-rc.6` line silently drops the
-* options bag, so audit events land unmarked and stricter hosts refuse to
-* resume those sessions (`SessionFormatUnsupportedError`). The published
-* `0.1.2-rc.1` and `0.1.3-alpha.2` hosts keep the `ignorable` field on
-* the event envelope but offer no append option to write it — the third
-* parameter is `SurfaceIntent`, accepted only for surface event types —
-* so `append` never stamps the marker there either. The runtime detects the host
-* before polluting a log: the installed peer version is checked against
-* the known-unmarked lines first, and an unknown (unresolvable) version is
-* verified by probing the FIRST appended event's returned envelope. The
+* **No published `@deepseek-ai/dsh-session` can stamp the `ignorable`
+* envelope marker through `append`** — verified three ways on 2026-09-12:
+* the host source (`packages/core/session/src/index.ts:710-738`: the
+* optional third parameter is `SurfaceIntent`, accepted for surface event
+* types only, and the envelope is built from `{ type, seq, time, data }`
+* plus `surfaceOp`/`sourceEventSeqs` alone); every relevant published
+* tarball (`0.1.0-rc.2/3/6/7/8`, `0.1.1-rc.1/2`, `0.1.2-alpha.2–alpha.5`,
+* `0.1.2-rc.1`, `0.1.3-alpha.2`, `0.1.5-rc.1`, `0.1.5-rc.2` — all build the
+* same envelope); and a live run against the host's own built `Session` on
+* the `0.1.5-rc.2` line, where `append('autoReview/verdict', data,
+* { ignorable: true })` returns an envelope whose keys are exactly
+* `["type","seq","time","data"]`. The marker is reachable only through the
+* seed/restore path, i.e. it is written by the harness that OWNS the log,
+* never by the plugin appending to it (`known-event-types.ts:8-20`).
+*
+* Consequence: an out-of-tree `autoReview/*` event appended on ANY published
+* host lands unmarked, and the persistence read path refuses unknown
+* unmarked types (`session-persistence/src/storage-contract.ts:75`, reached
+* from `session-persistence-jsonl/src/index.ts:627,758`), which makes the
+* session unresumable. The runtime therefore detects the host BEFORE
+* polluting a log: the installed peer version is checked against the
+* known-unmarked lines first, and an unrecognized version is verified by
+* probing the FIRST appended event's returned envelope (that probe is for a
+* FUTURE line that adds the append option — none has shipped). The
 * same discipline lives in `dsh-permission-rules` (its `AuditAppend` /
 * `isMarkedAuditEvent` pair).
 * @module dsh-auto-review/audit
@@ -38,14 +50,14 @@ function isMarkedAuditEvent(result) {
 }
 /**
 * Whether a `@deepseek-ai/dsh-session` version line lacks a safe audit
-* write path: every released rc line through `0.1.1-rc.2` silently drops
-* the marker from `Session.append` options (no release ever stamps it),
-* and the `0.1.2-rc.1` / `0.1.3-alpha.2` / `0.1.5-alpha.1` hosts keep the
-* `ignorable` field on the event envelope but have no append option that
-* writes it (the third parameter is `SurfaceIntent` for surface event types
-* only — the alpha.2 and alpha.5 `append` still assemble the envelope without
-* the marker, verified against the published tarballs), so writing
-* on those lines still lands an unmarked event. The persistence read path
+* write path. **Every published line lacks one**: no release ever stamps
+* the marker from `Session.append` options (see the module docstring), so
+* a `true` result here is the accurate classification for the whole
+* published 0.1.x range and not an over-reach — do not narrow the bound to
+* "fix" it. The `0.1.6+`/`0.2+` boundary below stays permissive in the
+* other direction on purpose: a future line that adds the append option
+* must be allowed through to the probe. Writing on a `true` line still
+* lands an unmarked event. The persistence read path
 * fails closed on unmarked unknown event types (`autoReview/*` is not in
 * `KNOWN_SESSION_EVENT_TYPES` on any published line), so writing there makes
 * sessions unresumable. Extend the bound when a new line ships that still
@@ -53,10 +65,11 @@ function isMarkedAuditEvent(result) {
 * unresolvable) versions are treated as possibly-marker-aware and verified
 * by the append probe.
 * @param version - the installed peer version string.
-* @returns true for the known-unmarked `0.1.0-rc.1–rc.8`, `0.1.1-rc.1–rc.2`,
-*   and the non-stamping `0.1.2+`/`0.1.3+`/`0.1.5+` prerelease lines
-*   (`0.1.2-alpha.1` through the published `0.1.2-rc.1`, `0.1.3-alpha.2`, and
-*   `0.1.5-alpha.1`).
+* @returns true for every published line — the `0.1.0-rc.1–rc.8` and
+*   `0.1.1-rc.1–rc.2` rc lines, `0.1.2-alpha.1` through the published
+*   `0.1.2-rc.1`, `0.1.3-alpha.2`, and the `0.1.5-alpha.1`/`0.1.5-rc.1`/
+*   `0.1.5-rc.2` line (every one of them assembles the append envelope
+*   without the marker).
 */
 function isUnmarkedHostVersion(version) {
 	const v = version.trim();
@@ -632,7 +645,7 @@ const MESSAGES = {
 		approveNone: (index, count) => `No recent denial #${index} in this session (${count} recorded).`,
 		approveInvalid: (arg) => `Invalid /auto-review approve index "${arg}". Usage: /auto-review approve [n]`,
 		circuitNotice: (kind, count) => `The AI auto-review rejection circuit breaker tripped (${kind}: ${count} denials). This turn is aborted because the agent kept proposing blocked actions. Adjust the sandbox boundary or the review policy, then continue.`,
-		auditDisabledNotice: "Session-log audit is disabled on this host: its Session.append predates the ignorable marker and unmarked audit events would make sessions unresumable on stricter harness builds. Set allowUnmarkedAudit: true to opt back in, and repair already-polluted logs with scripts/repair-session-logs.mjs from dsh-permission-rules."
+		auditDisabledNotice: "Session-log audit is disabled on this host: no published Session.append can write the ignorable marker, and an unmarked audit event makes the session unresumable on any harness that validates stored events. The in-memory mirror keeps budgets and verdicts for this session. allowUnmarkedAudit: true re-enables the log writes and WILL make these sessions unloadable; repair logs already written that way with scripts/repair-session-logs.mjs from dsh-permission-rules."
 	},
 	zh: {
 		usage: "用法：/auto-review on|off|status|approve [n]",
@@ -651,7 +664,7 @@ const MESSAGES = {
 		approveNone: (index, count) => `本会话没有第 ${index} 条近期拒绝记录（共 ${count} 条）。`,
 		approveInvalid: (arg) => `无效的 /auto-review approve 序号 "${arg}"。用法：/auto-review approve [n]`,
 		circuitNotice: (kind, count) => `AI 自动审查拒绝熔断器触发（${kind}：${count} 次拒绝）。由于代理持续提出被阻止的操作，本回合已中止。请调整沙箱边界或审查策略后继续。`,
-		auditDisabledNotice: "本宿主上会话日志审计已停用：其 Session.append 早于 ignorable 标记支持，未标记的审计事件会使会话在更严格的 harness 构建上无法恢复。设 allowUnmarkedAudit: true 可重新开启；已被污染的历史日志可用 dsh-permission-rules 的 scripts/repair-session-logs.mjs 修复。"
+		auditDisabledNotice: "本宿主上会话日志审计已停用：没有任何已发布版本的 Session.append 能写入 ignorable 标记，而未标记的审计事件会让会话在任何校验已存事件的 harness 上无法恢复。本会话的预算与裁决由内存镜像接管。设 allowUnmarkedAudit: true 会恢复日志写入，并会让这些会话无法再次加载；已按此写坏的日志可用 dsh-permission-rules 的 scripts/repair-session-logs.mjs 修复。"
 	}
 };
 /**
@@ -6390,7 +6403,7 @@ var AutoReviewRuntime = class AutoReviewRuntime {
 	warnUnmarkedAuditHost() {
 		if (this.warnedUnmarked) return;
 		this.warnedUnmarked = true;
-		this.ctx.logger.warn("auto-review: this host drops the ignorable marker on audit events or rejects unknown event types on read (Session.append predates the marker / fail-closed event vocabulary), which would make sessions unresumable — session-log audit is disabled and an in-memory mirror takes over; set allowUnmarkedAudit: true to opt back in, and repair already-polluted logs with scripts/repair-session-logs.mjs from dsh-permission-rules");
+		this.ctx.logger.warn("auto-review: no published Session.append can write the ignorable marker on audit events, and unmarked unknown event types are refused on read, which would make sessions unresumable — session-log audit is disabled and an in-memory mirror takes over. allowUnmarkedAudit: true forces the writes anyway and will make these sessions unloadable; repair logs already written that way with scripts/repair-session-logs.mjs from dsh-permission-rules");
 	}
 	/** The seq of the open turn/start, or undefined between turns (first-party events exist on every host). */
 	openTurnSeq(session) {