dsh-code-index 0.11.1 → 0.12.0

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 All notable changes to dsh-code-index are documented here.
 
+## 0.12.0 — Reliable Context & Evidence (prepared, not published)
+
+- Fix normal npm prerelease peer resolution for the verified DSH 0.2.1 and 0.2.2 RC groups; installation no longer needs --force. Keep the existing stable-version range and DSH runtime behavior.
+- Complete bounded real-Agent rechecks for change impact/candidate tests and zero static callers; retain earlier token, Host permission and transport failures in the evidence history.
+- Prepare local version metadata, bilingual Release Notes and PR text. Publication still requires final approval.
+
+- Improve deterministic Chinese task routing, distinguish path components from explicit identifiers, and prioritize task-relevant implementation source without increasing default budgets or graph limits.
+- Add optional bounded Evidence Summary to Context Packs and change context, with minimal X-Ray metadata reuse. Preserve exact / import-scoped / name-only and clearly label candidate tests, unknown targets and indexed-static scope.
+- Allow optional evidence to shrink or be omitted under the existing text/JSON cap; absence is not proof that no evidence gaps exist. Keep tool names, parameters and canonical string output compatible.
+- Fix English intent words inside source paths triggering unrelated change/test analysis; retain actual English change requests and explicit test-path routing.
+- Establish six historical quality regressions and record package, runtime and Agent gates separately. This entry prepares a local RC only; no publication or successful real-Agent acceptance is implied. See `docs/development/v0.12.0/INTEGRATION.zh-CN.md`.
+
+## 0.11.2 — DSH compatibility range
+
+- Allow DSH versions from `0.2.0-rc.2` onward, including prereleases, without claiming future versions have been verified.
+
 ## 0.11.1 — DSH rc.3 compatibility
 
 - Add the verified exact `@deepseek-ai/dsh-tools@0.2.1-rc.3` host group; retain `0.2.0-rc.2` and `0.2.1-rc.2` support without exemptions or an open-ended range.

package/README.md

@@ -5,36 +5,48 @@
 
 English | [中文](README.zh.md)
 
+## v0.12.0 release preparation — not published
+
+**Reliable Context & Evidence** is prepared on the local development branch. The package version is 0.12.0, but it has not been published. The current public stable release is v0.11.2; the installation examples below still refer to that release.
+
+- Deterministic Chinese task routing, path-aware identifier detection and source-first candidate selection improve Context Packs while retaining English task regressions.
+- Optional `ContextPack.evidence` describes indexed-file diagnostics, static relationship grades, candidate tests and detected gaps. `parsed` is not semantic completeness; zero static callers does not prove there are no callers.
+- Evidence may be compacted or omitted under the same text/JSON budget. Missing optional evidence means **not provided**, not “no gaps.” Default 5000 and 300–20000 character bounds remain unchanged.
+- Test associations are leads, not execution, passing tests or verified coverage. Real Agent validation is a separate release gate; unexecuted or blocked runs are never counted as passed.
+
+See the [candidate integration record](docs/development/v0.12.0/INTEGRATION.zh-CN.md) and [M2 evidence contract](docs/development/v0.12.0/M2.zh-CN.md) for actual methods, outcomes and limits.
+
+The [final release-blocker check](docs/development/v0.12.0/RELEASE_READINESS.zh-CN.md) records normal npm peer resolution and bounded real-Agent rechecks. Future RC groups are not automatically treated as verified.
+
 ## Impact X-Ray
 
 **See the blast radius before your AI edits the code.**
 
-A local plugin for [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness). See which callers, imports and tests may be affected by a code change, then click a relationship to inspect its actual source, file and line. Uncertain matches and missing evidence stay visible.
+A local [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) plugin that turns a code diff into an inspectable map of potentially affected callers, imports and test leads. Click a relationship to check its source file, line and evidence.
 
-**Try v0.11.1 in DSH Desktop 0.2.1-rc.2** using Desktop's bundled CLI:
+**For DSH users working with existing code:** inspect likely ripple effects before asking an AI agent to edit. Until v0.12.0 is published, install the stable **v0.11.2** in a compatible DSH profile:
 
 ```sh
-dsh plugin --profile desktop add dsh-code-index@0.11.1
+dsh plugin --profile desktop add dsh-code-index@0.11.2
 ```
 
-Restart Desktop after installation. [Other profiles and compatibility](#install).
+Restart Desktop after installation. v0.11.1 declares DSH `0.2.0-rc.2`, `0.2.1-rc.2` and `0.2.1-rc.3` host groups; for Desktop rc.3, the compatibility warning was reported gone, but full Electron Desktop feature and Agent acceptance is not claimed. [Install details](#install) · [v0.11.1 verification and limits](RELEASE_EVIDENCE_v0.11.1.md).
 
-**30-second real Desktop demo:** `normalize()` changes → inspect callers and tests → click an arrow for source evidence.
+**Watch the 30-second real Desktop demo:** a change to `normalize()` → inspect callers and a test lead → click a relationship to see the actual source location.
 
 ![Impact X-Ray in actual DSH Desktop: changed normalize function, callers, tests and clickable source evidence](assets/impact-xray-mvp.gif)
 
-[Full-size GIF](assets/impact-xray-mvp.gif) · [MP4](assets/impact-xray-mvp.mp4) · [Reproduce the demo](assets/impact-xray-mvp-demo.md) · [Report what helped or was missing](https://github.com/lemonxiny55/dsh-code-index/issues/new?template=feedback.yml)
+[Watch MP4](assets/impact-xray-mvp.mp4) · [Full-size GIF](assets/impact-xray-mvp.gif) · [Demo notes and reproduction](assets/impact-xray-mvp-demo.md) · [Install v0.11.1 from npm](https://www.npmjs.com/package/dsh-code-index/v/0.11.1) · [Project](https://github.com/lemonxiny55/dsh-code-index)
 
-The recording is the real `0.11.0-dev.0` MVP in Desktop 0.2.1-rc.2. Later first-screen improvements have separate [real Desktop screenshots](IMPACT_XRAY_RC.md#首屏与实机操作). Open the full-size media to read small source text.
+The recording is an actual DSH Desktop interaction with the `0.11.0-dev.0` MVP in Desktop 0.2.1-rc.2. It shows existing analysis and source evidence; it is not a model-driven Agent latency or success claim. See [recording provenance](assets/impact-xray-mvp-demo.md).
 
-- **Before AI edits your code:** start from a real working-tree Git diff, a supplied diff, or an explicitly labeled file/symbol selection.
-- **See what may break:** inspect changed declarations, direct callers, indirect paths, module imports and candidate tests.
-- **Inspect the evidence:** select a node or arrow to see its reason, provenance, file, line and actual source snapshot. Expand the view for a graph and evidence side by side; open current files in Desktop's native preview.
-- **Know what remains uncertain:** dotted amber `name-only` candidates, import scope, unmapped ranges, missing source and truncation stay visible. A test lead does not prove coverage or failure.
+- Start from a Git diff or an explicitly selected file/symbol; inspect callers, import dependents, paths and candidate tests.
+- Click a relationship to inspect its provenance and available source snapshot at a file and line.
+- Treat candidates as leads: `name-only` matches can be uncertain, and a test lead does not prove coverage or failure.
 
-This is an interactive presentation of the existing `code_change_context` analysis, with source from the existing reader. It does not introduce a new impact-analysis engine.
+Impact X-Ray is an interactive view of the existing `code_change_context` analysis and source reader; it does not add an impact-analysis engine. Relationships are static evidence, not guaranteed runtime impact.
 
-**Verified hosts:** Desktop 0.2.1-rc.2 received full Impact X-Ray UI verification. Desktop 0.2.0-rc.2 passed installation and ToolRuntime checks; its full X-Ray UI was not validated. v0.11.1 also verifies DSH Web/Host 0.2.1-rc.3 (all eight tools and Impact X-Ray; no model-driven Agent run). See [v0.11.1 evidence](RELEASE_EVIDENCE_v0.11.1.md). These three exact DSH/dsh-tools host groups are declared; keep each host's first-party packages on the same version. For local development, use Node 22/24 and pnpm 11. [Release evidence and limits](RELEASE_EVIDENCE_v0.11.0.md) · [Bilingual release notes](RELEASE_NOTES_v0.11.0.md).
+**Verified:** full X-Ray UI in Desktop 0.2.1-rc.2; Web/Host rc.3 verified for all eight tools and X-Ray (no model-driven Agent run). Desktop 0.2.0-rc.2 passed installation and ToolRuntime checks, not full X-Ray UI. Keep each host's first-party packages on the same declared version. [v0.11.1 evidence and limits](RELEASE_EVIDENCE_v0.11.1.md).
 
 Ask the Agent to call `code_change_context` with:
 
@@ -88,16 +100,16 @@ This supports syntax and static code context, without full HarmonyOS SDK semanti
 
 ## Quick start
 
-Requires Node 22/24 and a matching DSH `0.2.0-rc.2`, `0.2.1-rc.2` or `0.2.1-rc.3` host group. Install into an existing Desktop profile using its bundled `dsh` CLI:
+Requires Node 22/24. The v0.11.2 candidate allows DSH `>=0.2.0-rc.2`, including prereleases; matching first-party packages should be used. Later versions may attempt to load but have not all been verified. Install into an existing Desktop profile using its bundled `dsh` CLI:
 
 ```sh
-dsh plugin --profile desktop add dsh-code-index@0.11.1
+dsh plugin --profile desktop add dsh-code-index@0.11.2
 ```
 
 Restart Desktop after installation. For a matching Web profile:
 
 ```sh
-npx @deepseek-ai/dsh@0.2.1-rc.2 plugin --profile web add dsh-code-index@0.11.1
+npx @deepseek-ai/dsh@0.2.1-rc.2 plugin --profile web add dsh-code-index@0.11.2
 npx @deepseek-ai/dsh@0.2.1-rc.2 web
 ```
 
@@ -149,13 +161,13 @@ Plus an optional **auto-injected system prompt section** (`code-index:repo-map`,
 
 Requires `dsh` (any install path — npx, npm, or source) and Node ≥ 22.
 
-v0.11.1 extends the compatibility range to `@deepseek-ai/dsh-tools: 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3`. Use matching DSH/dsh-tools groups, rather than mixing first-party RC packages. The DSH plugin surface remains a preview API; other RCs and future releases are outside this compatibility declaration.
+The v0.11.2 candidate declares `@deepseek-ai/dsh-tools: >=0.2.0-rc.2`, with no upper bound. DSH includes prereleases when checking this range, so future DSH versions may attempt to load the plugin; this does not mean every version has been verified. Use matching DSH/dsh-tools groups. The plugin surface remains a preview API, and future releases may introduce incompatibilities.
 
-Desktop checks DSH peer requirements before activation. v0.10.0's exact `0.2.0-rc.2` pin is rejected by DSH `0.2.1-rc.2`; v0.10.1 enumerates the supported groups instead of requiring a version exemption or an unbounded range. Its development dependency stays on `0.2.0-rc.2` for backward API checks.
+Desktop checks DSH peer requirements before activation. v0.10.0's exact `0.2.0-rc.2` pin is rejected by DSH `0.2.1-rc.2`; v0.10.1 enumerated the then-supported groups; v0.11.2 removes that enumeration. Its development dependency stays on `0.2.0-rc.2` for backward API checks.
 
 ```sh
 # from npm (prebuilt)
-npx @deepseek-ai/dsh@0.2.0-rc.2 plugin --profile web add dsh-code-index@0.11.1
+npx @deepseek-ai/dsh@0.2.0-rc.2 plugin --profile web add dsh-code-index@0.11.2
 
 # or from a directory containing this checkout
 npx @deepseek-ai/dsh@0.2.0-rc.2 plugin --profile web add ./dsh-code-index
@@ -323,3 +335,4 @@ To make a report actionable, include the approximate repository size and languag
 
 MIT. Not affiliated with DeepSeek; built on the public `dsh` plugin surface.
 
+

package/README.zh.md

@@ -1,5 +1,18 @@
 # dsh-code-index
 
+## v0.12.0 发布准备——尚未发布
+
+**Reliable Context & Evidence** 已在本地开发分支准备，package 版本更新为 0.12.0，但尚未发布。当前公开正式版为 v0.11.2，下文安装示例仍指向该版本。
+
+- 确定性中文任务路由、路径与显式符号区分、源码优先的候选选择改进 Context Pack，并保留英文任务回归。
+- 可选 `ContextPack.evidence` 说明已索引文件诊断、静态关系等级、候选测试及实际检测到的缺口。parsed 不等于语义完整；零静态调用者不能证明不存在调用者。
+- evidence 可在同一 text/JSON 预算内缩减或省略；字段缺省表示**未提供**，不能解释为没有缺口。默认 5000、300～20000 字符边界不变。
+- 测试关联只是线索，不代表已执行、通过或覆盖已验证。真实 Agent 是单独的验收项，未运行或受阻的项目不会计为通过。
+
+实际方法、结果和边界见[候选集成验收记录](docs/development/v0.12.0/INTEGRATION.zh-CN.md)及 [M2 证据契约](docs/development/v0.12.0/M2.zh-CN.md)。
+
+[最后一轮阻断检查](docs/development/v0.12.0/RELEASE_READINESS.zh-CN.md)记录正常 npm peer 解析和有限真实 Agent 复验；未验证的未来 RC 版本组不会自动视为已验证。
+
 [English](README.md) | 中文
 
 ## Impact X-Ray
@@ -8,32 +21,31 @@
 
 **在 AI 修改代码前，看清潜在影响范围。**
 
-这是 [DeepSeek Harness（DSH）](https://github.com/deepseek-ai/deepseek-harness) 的本地插件。查看代码变更可能影响的调用者、导入和测试，再点击关系核对真实源码、文件与行号。不确定的匹配和缺失证据会明确显示。
+这是 [DeepSeek Harness（DSH）](https://github.com/deepseek-ai/deepseek-harness) 的本地插件：把代码 diff 呈现为一张可检查的潜在影响图，列出可能受影响的调用者、导入和测试线索。点击关系即可核对源码文件、行号与证据。
 
-**在 DSH Desktop 0.2.1-rc.2 中试用 v0.11.1**，使用 Desktop 自带的 CLI：
+**适合正在维护现有代码的 DSH 用户：** 在让 AI Agent 修改代码前，先查看可能的连带影响。v0.12.0 发布前仍使用正式稳定版 **v0.11.2**，安装到兼容的 DSH profile：
 
 ```sh
-dsh plugin --profile desktop add dsh-code-index@0.11.1
+dsh plugin --profile desktop add dsh-code-index@0.11.2
 ```
 
-安装后重启 Desktop。[其他 profile 与兼容范围](#安装)。
+安装后重启 Desktop。v0.11.1 声明支持 DSH `0.2.0-rc.2`、`0.2.1-rc.2` 和 `0.2.1-rc.3` 宿主版本组；Desktop rc.3 的兼容性提示据反馈已消失，但这不代表 Electron Desktop 全部功能或 Agent 验收通过。[安装说明](#安装) · [v0.11.1 验证与限制](RELEASE_EVIDENCE_v0.11.1.md)。
 
-**30 秒真实 Desktop 演示：**`normalize()` 发生修改 → 查看调用者和测试 → 点击箭头核对源码证据。
+**观看 30 秒真实 Desktop 演示：**`normalize()` 被修改 → 查看调用者与测试线索 → 点击关系查看真实源码位置。
 
 ![真实 DSH Desktop 中的 Impact X-Ray：变更的 normalize、调用者、测试与可点击的源码证据](assets/impact-xray-mvp.gif)
 
-[全尺寸 GIF](assets/impact-xray-mvp.gif) · [MP4 视频](assets/impact-xray-mvp.mp4) · [复现 Demo](assets/impact-xray-mvp-demo.md) · [反馈有帮助或遗漏的上下文](https://github.com/lemonxiny55/dsh-code-index/issues/new?template=feedback.yml)
+[观看 MP4](assets/impact-xray-mvp.mp4) · [全尺寸 GIF](assets/impact-xray-mvp.gif) · [演示说明与复现](assets/impact-xray-mvp-demo.md) · [从 npm 安装 v0.11.1](https://www.npmjs.com/package/dsh-code-index/v/0.11.1) · [项目主页](https://github.com/lemonxiny55/dsh-code-index)
 
-录屏来自真实 Desktop 0.2.1-rc.2 中的 `0.11.0-dev.0` MVP；后续首屏改进另有[真实 Desktop 截图](IMPACT_XRAY_RC.md#首屏与实机操作)。源码小字请打开全尺寸素材查看。
+录屏来自真实 DSH Desktop 0.2.1-rc.2 中的 `0.11.0-dev.0` MVP 操作，展示的是既有分析与源码证据；它不代表模型驱动 Agent 的耗时或成功率。详见[录制来源](assets/impact-xray-mvp-demo.md)。
 
-- **在 AI 修改之前：** 从真实工作区 Git diff、输入 diff，或明确标注的文件/符号选择开始。
-- **看清可能影响什么：** 检查变更声明、直接调用者、间接路径、模块导入和测试候选。
-- **检查真实证据：** 点击节点或箭头，查看纳入原因、关系来源、文件行号及实际源码快照。放大视图中图与证据并排展示，可打开 Desktop 原生文件预览。
-- **了解不确定性：** 黄色点线的 `name-only` 候选、导入范围、未映射行、缺失源码和裁剪均明确呈现；测试线索不证明覆盖率或必然失败。
+- 从 Git diff 或明确选定的文件/符号出发，查看调用者、导入依赖、影响路径和测试候选。
+- 点击关系，查看其来源，以及可用的文件行号和源码快照。
+- 把候选视为线索：`name-only` 匹配可能不确定；测试线索不证明覆盖率或测试失败。
 
-这是既有 `code_change_context` 分析和源码读取能力的交互展示，不是新开发的影响分析算法。
+Impact X-Ray 是既有 `code_change_context` 分析及源码读取能力的交互展示，并未新增影响分析引擎。关系属于静态证据，不保证运行时必然受影响。
 
-**实测宿主：** DSH Desktop 0.2.1-rc.2 已完成完整 Impact X-Ray UI 验证；0.2.0-rc.2 通过安装及 ToolRuntime 检查，但未完成完整 X-Ray UI 验收。v0.11.1 新增 DSH Web/Host 0.2.1-rc.3 的全部 8 个工具及 Impact X-Ray 验证（未进行模型驱动的 Agent 运行），详见 [v0.11.1 验证报告](RELEASE_EVIDENCE_v0.11.1.md)。仅声明这三个精确 DSH/dsh-tools 宿主组，每组第一方包必须同版。开发构建使用 Node 22/24 与 pnpm 11。[发布证据与已知限制](RELEASE_EVIDENCE_v0.11.0.md) · [中英文发布说明](RELEASE_NOTES_v0.11.0.md)。
+**验证范围：** Desktop 0.2.1-rc.2 完成完整 X-Ray UI 验证；Web/Host rc.3 完成全部八个工具及 X-Ray 验证（未运行模型驱动 Agent）；Desktop 0.2.0-rc.2 通过安装和 ToolRuntime 检查，未验证完整 X-Ray UI。宿主中的第一方包须使用同一已声明版本。[v0.11.1 验证与限制](RELEASE_EVIDENCE_v0.11.1.md)。
 
 让 Agent 调用 `code_change_context`：
 
@@ -87,16 +99,16 @@ node scripts/impact-xray-demo.mjs D:/absolute/path/to/new-demo-repo
 
 ## 快速开始
 
-需要 Node 22/24 与匹配的 DSH `0.2.0-rc.2`、`0.2.1-rc.2` 或 `0.2.1-rc.3` 宿主版本组。用 Desktop 自带的 `dsh` CLI 安装到现有 profile：
+需要 Node 22/24。v0.11.2 候选版本允许 DSH `>=0.2.0-rc.2`（包括预发布版本），第一方包应使用配套版本。后续版本可以尝试加载，但并不代表全部经过验证。用 Desktop 自带的 `dsh` CLI 安装到现有 profile：
 
 ```sh
-dsh plugin --profile desktop add dsh-code-index@0.11.1
+dsh plugin --profile desktop add dsh-code-index@0.11.2
 ```
 
 安装后重启 Desktop。匹配的 Web profile 可使用：
 
 ```sh
-npx @deepseek-ai/dsh@0.2.1-rc.2 plugin --profile web add dsh-code-index@0.11.1
+npx @deepseek-ai/dsh@0.2.1-rc.2 plugin --profile web add dsh-code-index@0.11.2
 npx @deepseek-ai/dsh@0.2.1-rc.2 web
 ```
 
@@ -148,13 +160,13 @@ npx @deepseek-ai/dsh@0.2.1-rc.2 web
 
 需要 `dsh`(任意安装方式——npx、npm 或源码)与 Node ≥ 22。
 
-v0.11.1 将兼容范围扩展为 `@deepseek-ai/dsh-tools: 0.2.0-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3`。使用配套的 DSH/dsh-tools 版本组，不混装第一方 RC 包。DSH 插件接口仍属于预览 API；其他 RC 和未来版本不在此兼容声明范围内。
+v0.11.2 候选版本声明 `@deepseek-ai/dsh-tools: >=0.2.0-rc.2`，不设置上限。DSH 检查范围时包含预发布版本，因此未来版本可以尝试加载插件，但这不代表每个版本都经过验证。请使用配套的 DSH/dsh-tools 版本组；插件接口仍是预览 API，未来版本可能产生兼容问题。
 
-Desktop 在激活前检查 DSH peer 约束。v0.10.0 的精确 `0.2.0-rc.2` pin 会被 DSH `0.2.1-rc.2` 拒绝；v0.10.1 明确列举支持组，不依赖版本豁免或无上限范围。开发依赖保留 `0.2.0-rc.2`，继续检查旧版 API。
+Desktop 在激活前检查 DSH peer 约束。v0.10.0 的精确 `0.2.0-rc.2` pin 会被 DSH `0.2.1-rc.2` 拒绝；v0.10.1 列举了当时支持的版本组；v0.11.2 移除这一枚举。开发依赖保留 `0.2.0-rc.2`，继续检查旧版 API。
 
 ```sh
 # 从 npm(预编译)
-npx @deepseek-ai/dsh@0.2.0-rc.2 plugin --profile web add dsh-code-index@0.11.1
+npx @deepseek-ai/dsh@0.2.0-rc.2 plugin --profile web add dsh-code-index@0.11.2
 
 # 或从包含本仓库检查副本的目录
 npx @deepseek-ai/dsh@0.2.0-rc.2 plugin --profile web add ./dsh-code-index
@@ -314,3 +326,4 @@ node.exe scripts\fix-wsl-links.mjs C:\Users\you\.dsh\profiles\web   # dsh profil
 
 MIT。与 DeepSeek 无关;基于公开的 `dsh` 插件接口构建。
 
+