dsh-codex-connect 0.1.0-alpha.4.42 → 0.1.0-alpha.4.43

package/MIGRATION.md

@@ -1,5 +1,21 @@
 # Migrating from `dsh-codex`
 
+## Alpha 4.43 candidate: upgrade the Harness together
+
+This candidate targets DeepSeek Harness `0.1.7-rc.1` only. Upgrade the Harness
+and its profile runtime first, then install the matching Codex Connect release;
+this candidate is not compatible with the previously declared `0.1.2-rc.1` or
+`0.1.5` hosts. Keep the existing `llm-openai-codex` row and OAuth store. The DSH
+settings lifecycle, message-source types, and native-compaction integration have
+changed, but the migration does not require signing in again or editing
+credentials. This candidate is not published; do not use a public install
+command until its exact package/host pair is verified and released.
+DSH `0.1.7-rc.1` also changes the Session log format. Migration of an active
+task from the previously supported Harness versions to this target has not
+passed acceptance; do not treat same-host task recovery below as proof of a
+cross-Harness upgrade. Finish or safely stop active delegated tasks before
+changing the Harness until that migration is verified.
+
 ## Next release candidate: public task orchestration paused
 
 Task-level automatic model selection and read-only delegation are being withheld
@@ -9,7 +25,8 @@ published, installed, and loaded.
 
 A new ordinary conversation has no collaboration activation options. Cached
 clients cannot start, resume, upgrade or authorize delegation through the closed
-server route. Existing tasks keep authenticated readback, Stop and manual takeover;
+server route. On a supported same-version host, existing tasks keep authenticated
+readback, Stop and manual takeover;
 grants, original history and spent request counts are not deleted or reset.
 Manual model selection (including GPT-6/Astra), accounts, existing optional tools
 and native compaction settings are unchanged. Internal orchestration source and

package/NOTICE

@@ -18,3 +18,9 @@ This product also includes OAuth login and refresh code from earendil-works/pi
 (@earendil-works/pi-ai 0.84.4), under the MIT license reproduced in
 docs/licenses/pi-ai-oauth.txt. JWT payload decoding, callback connection cleanup
 and structured refresh rejection handling are modified.
+
+The standalone CLI bundles selected code from host and provider dependencies so
+it can run from an isolated DSH plugin-exec process without copying host peers.
+The bundled third-party package attributions and license texts are in
+docs/licenses/standalone-cli.txt. Runtime plugin imports continue to use the
+host's packages rather than these standalone CLI copies.

package/compatibility.json

@@ -4,12 +4,13 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "dshPluginApi": {
-    "version": "0.1.2-rc.1",
-    "versions": ["0.1.2-rc.1", "0.1.5-alpha.1", "0.1.5-rc.1", "0.1.5-rc.2"],
+    "version": "0.1.7-rc.1",
+    "versions": ["0.1.7-rc.1"],
     "packages": [
       "@deepseek-ai/dsh-agent",
       "@deepseek-ai/dsh-atomic-write",
       "@deepseek-ai/dsh-attachment",
+      "@deepseek-ai/dsh-compaction",
       "@deepseek-ai/dsh-home-paths",
       "@deepseek-ai/dsh-host-webserver",
       "@deepseek-ai/dsh-invariants",
@@ -25,6 +26,6 @@
   },
   "piAi": {
     "package": "@earendil-works/pi-ai",
-    "version": "^0.84.2 || 0.85.1"
+    "version": "0.85.1"
   }
 }

package/docs/agent-notes/dsh-017-stock-plugin-exec.md

@@ -0,0 +1,9 @@
+# DSH 0.1.7-rc.1 stock plugin-exec compatibility
+
+The stock `dsh plugin ... exec` launcher runs the installed plugin command in a separate Node process without DSH's process-local profile resolver. Codex Connect's previous `bin` output shared an eagerly imported chunk with its runtime entry, so even `doctor` failed during ESM linking on the first inaccessible host peer, `@deepseek-ai/schemastery`. The peer was present in the exact host; adding a package declaration, copying host packages into the profile, or retrying authentication would not repair that lookup. The earlier DSH alpha.2 local launcher patch used a fallback operation removed by rc.1, so this release does not depend on that patch or an upstream change.
+
+The command entry is now built separately and carries the libraries it needs in its own CLI output. The runtime entry still imports host peers externally, retaining Cordis and service identity. `doctor --install-anchor` reads version metadata relative to an explicitly named DSH `package.json` without loading host modules or returning the path; absent an anchor and visible peer metadata it reports `unknown`, not a false compatibility verdict. The isolated checker passes the exact host anchor to `doctor` and initializes DSH's own `PluginPackages` resolver before importing the installed runtime plugin. Neither checker creates manual peer links.
+
+Standalone diagnostics read the Codex model catalog without importing the runtime adapter. That keeps DSH's other model adapters and pi-ai's unrelated provider loaders out of the published CLI; the package check rejects their generated chunks. The remaining CodeQL password-hash alert also existed on `main` as alert #23: Reserve hashes an account/user identity pair for a private return-target match, not a password or credential verifier. It cannot authorize a backend request without the freshly captured OAuth token and server response. Alert #23 was dismissed as a false positive with this specific rationale; security scanning remains enabled.
+
+The exact stock DSH `0.1.7-rc.1` installation passed the Node 22 matrix using one packed plugin artifact. It verified ten prepared models, unchanged defaults, provider disposal, synthetic Reserve transitions, ten distinct native-compaction process phases across none/zstd, and synthetic image generation/download visibility; no real OAuth or provider request was made. The Node 22 complete source check passed 116 files and 1,307 tests; Chromium passed 60 tests. The source check under default Node 26 initially failed because that version rejects a probe's `--experimental-transform-types` option, while its sandboxed socket failures were caused by `listen EPERM`; the supported Node 22 host-permission run passed. The replacement installed Session gate targets rc.1 and verifies that the stock page shows the ordinary Composer without Task controls and that the signed Task route rejects activation. It does not claim migration of old Task grants across a Harness upgrade, real-account acceptance, merge, publication, or deployment.

package/docs/licenses/standalone-cli.txt

@@ -0,0 +1,115 @@
+Standalone CLI third-party notices
+
+The generated lib/bin.js and its helper chunks include portions of the
+packages listed below, except where marked as retained notices. The retained
+notices cover dependencies bundled by earlier Alpha 4.43 candidates but
+removed from the final standalone CLI. They do not change package licenses.
+
+MIT-licensed packages:
+- @deepseek-ai/dsh-atomic-write, dsh-home-paths, dsh-typert-protocol,
+  dsh-util-values, dsh-timeout, dsh-llm, and dsh-web: Copyright (c) 2026 DeepSeek.
+- @deepseek-ai/cosmokit, @deepseek-ai/cordis, and
+  @deepseek-ai/schemastery: Copyright (c) 2021-present Shigma.
+- @earendil-works/pi-ai: Copyright (c) 2025 Mario Zechner. Its OAuth
+  source notice is also retained in docs/licenses/pi-ai-oauth.txt.
+- partial-json: Copyright (c) 2023 Promplate Dev Team.
+
+Retained notices for packages no longer included in this CLI build:
+- @deepseek-ai/dsh-attachment, dsh-llm-pi-ai, and dsh-compaction:
+  Copyright (c) 2026 DeepSeek (MIT).
+- @anthropic-ai/sdk: Copyright 2023 Anthropic, PBC (MIT).
+- @stablelib/base64: Copyright (C) 2016 Dmitry Chestnykh (MIT).
+- standardwebhooks: Copyright Standard Webhooks (MIT).
+- openai: Copyright OpenAI (Apache-2.0).
+- neoqs: Copyright (c) 2014 Nathan LaFreniere and other contributors (BSD-3-Clause).
+- zod-to-json-schema: Copyright (c) 2020 Stefan Terdell (ISC).
+- fast-sha256: Unlicense.
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+openai is Copyright OpenAI and is licensed under Apache-2.0; the full license
+is included in this package's root LICENSE file.
+
+The OpenAI and Anthropic SDKs include portions of neoqs, Copyright (c) 2014
+Nathan LaFreniere and other contributors, under the BSD 3-Clause License:
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice,
+   this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+3. Neither the name of the copyright holder nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+The OpenAI SDK includes portions of zod-to-json-schema, Copyright (c) 2020
+Stefan Terdell, under the ISC License:
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
+SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
+OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+fast-sha256 1.3.0 is released under the Unlicense:
+
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or distribute
+this software, either in source code form or as a compiled binary, for any
+purpose, commercial or non-commercial, and by any means.
+
+In jurisdictions that recognize copyright laws, the author or authors of
+this software dedicate any and all copyright interest in the software to the
+public domain. We make this dedication for the benefit of the public at large
+and to the detriment of our heirs and successors. We intend this dedication
+to be an overt act of relinquishment in perpetuity of all present and future
+rights to this software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>.

package/docs/reference.i18n.yaml

@@ -1,4 +1,4 @@
 # Bilingual-pair consistency record for the operational reference. Re-record with:
 #   git hash-object docs/reference.md docs/reference.zh.md
-docs/reference.md: b6d177da34691432d0c39c27644ef4b083af0d2a
-docs/reference.zh.md: 926b475eb378191b56b9de6c386b7a03a9292d30
+docs/reference.md: c88cc935a90c206117a0497289f3fc885d61da85
+docs/reference.zh.md: 57da6063a2ea2663fcbdd50168558b944ef54c0d

package/docs/reference.md

@@ -142,6 +142,8 @@ Published Alpha 4.33 can fail to list or prepare Codex models on DSH `0.1.5-rc.1
 
 Run `dsh plugin --profile web exec dsh-codex-connect doctor --json` to inspect local installation metadata without a network request. Compatibility statuses mean: `compatible` matches the declared version requirements, not a behavioral test; `unverified` identifies package versions outside the declared support set; `unknown` means required version metadata is missing or unreadable; `incompatible` identifies a Node version outside the declared engine requirement. The aggregate prioritizes `incompatible`, then `unknown`, then `unverified`. Doctor exits `1` for any non-compatible result or unsafe credential-file metadata; this does not authorize or recommend changing DSH.
 
+For DSH `0.1.7-rc.1`, `plugin exec` starts a separate process without exposing the host's peer packages to ordinary module resolution. Alpha 4.43's CLI is self-contained, so all commands can start in that process. To make `doctor` assess the exact host package versions, pass `--install-anchor` with the absolute path to that DSH installation's `@deepseek-ai/dsh/package.json`; the flag reads package metadata only and does not print the path. Without an anchor, `doctor` reports `unknown` if it cannot resolve those versions; that is not evidence of runtime incompatibility. The installed-runtime checker independently starts DSH's own profile resolver before importing the plugin, preserving host package identity.
+
 The normal update card checks only Codex Connect releases. It reuses successful plugin-version checks for up to 24 hours and retries unavailable checks every five minutes while mounted; a manual check bypasses the cache. It neither queries host compatibility nor recommends host upgrades or downgrades. An unlisted DSH/plugin combination requires verification, not an assumption of failure.
 
 ### Capability probes

package/docs/reference.zh.md

@@ -142,6 +142,8 @@ Reserve 使用 Luna 目录中的 272,000 token 上下文窗口，不沿用原模
 
 运行 `dsh plugin --profile web exec dsh-codex-connect doctor --json` 可检查本地安装元数据，不会联网。兼容性状态含义：`compatible` 表示符合声明的版本要求，不是行为测试通过；`unverified` 表示包版本超出声明的支持集合；`unknown` 表示缺少必要版本元数据或无法读取；`incompatible` 表示 Node 版本不满足声明的 engine 要求。汇总状态依次优先采用 `incompatible`、`unknown`、`unverified`。任何非 compatible 结果或不安全的凭据文件元数据都会让 doctor 返回 `1`，但这并不授权或建议更改 DSH。
 
+DSH `0.1.7-rc.1` 的 `plugin exec` 会启动独立进程，普通模块解析无法看见宿主的 peer 包。Alpha 4.43 的 CLI 自带所需代码，因此所有命令都能在该进程中启动。若要让 `doctor` 核对确切宿主包版本，给 `--install-anchor` 传入该 DSH 安装中 `@deepseek-ai/dsh/package.json` 的绝对路径；该选项只读包元数据，也不会输出路径。未提供 anchor 且无法解析版本时，`doctor` 报 `unknown`，不能据此认定运行时不兼容。安装运行时检查另行启动 DSH 自身的 profile 解析器后再导入插件，保持宿主包身份一致。
+
 常规更新卡片只检查 Codex Connect 发布版本。插件版本检查成功后最多缓存 24 小时，页面挂载期间每五分钟重试不可用的检查；手动检查会绕过缓存。它不会查询宿主兼容性，也不会建议升级或降级宿主。未列入记录的 DSH/plugin 组合需要验证，不能据此认定无法运行。
 
 ### 能力探针

package/docs/release-notes/alpha-4.43.md

@@ -0,0 +1,17 @@
+# Codex Connect Alpha 4.43 — DSH 0.1.7-rc.1 compatibility
+
+## English
+
+This candidate updates the plugin runtime and UI integration for DeepSeek Harness `0.1.7-rc.1`. It follows the new volatile configuration and settings-form lifecycle, current message-source types, and the native-compaction provider API. DSH `0.1.7-rc.1` is the target pairing, not a verified support claim; older DSH versions are not supported by this candidate.
+
+Upgrade the Harness before installing the matching Codex Connect release. Existing provider configuration and OAuth credentials remain in place; signing in again is not required. This candidate has not been published, so the public installation recommendation remains unchanged.
+
+The unmodified DSH `0.1.7-rc.1` installation now passes `plugin doctor` and the installed runtime check. DSH's [plugin-exec peer-resolution issue](https://github.com/deepseek-ai/deepseek-harness/discussions/5537) remains upstream, but this plugin's standalone CLI no longer needs those peers in that subprocess; the installed-runtime checker uses DSH's own profile resolver and leaves shared runtime imports external. An explicit DSH installation anchor gives `doctor` exact host version metadata without importing host code. The CLI bundle includes third-party notices and excludes unused non-Codex model providers. On Node 22, the local check passes 116 files and 1,307 tests, the Chromium suite passes 60 tests, and the exact stock-host install matrix passes with unchanged defaults, ten process-restart native-compaction phases, and synthetic image checks. The current-host installed Session check passed its paused-Task safety checks; old-task migration across a Harness upgrade remains unverified. The public installation recommendation remains on the published pair until this candidate is released.
+
+## 中文
+
+本候选版更新了插件运行时及界面集成，目标是 DeepSeek Harness `0.1.7-rc.1`：迁移到新的 volatile 配置与设置表单生命周期、当前消息来源类型和原生压缩 Provider API。`0.1.7-rc.1` 是目标组合，不代表已验证支持；本候选版不支持较旧的 DSH 版本。
+
+请先升级 Harness，再安装对应的 Codex Connect 版本。已有 Provider 配置和 OAuth 凭据会保留，无需重新登录。本候选版尚未发布，公开安装建议保持不变。
+
+未修改的 DSH `0.1.7-rc.1` 隔离安装现已通过 `plugin doctor` 和已安装运行时检查。上游的[插件命令 peer 解析问题](https://github.com/deepseek-ai/deepseek-harness/discussions/5537)仍存在，但本插件的独立 CLI 不再需要该子进程能解析宿主 peer；安装运行时检查使用 DSH 自身的 profile 解析器，插件运行时仍复用宿主包。显式 DSH 安装 anchor 可让 `doctor` 只读确切宿主版本，不加载宿主代码。CLI bundle 附带第三方许可说明，且不再打入未使用的非 Codex 模型供应商代码。在 Node 22 上，本地完整检查通过 116 个文件、1,307 项测试，Chromium 套件通过 60 项测试，原版宿主隔离安装矩阵通过，覆盖默认设置保持不变、10 个跨进程原生压缩阶段和合成图片检查。当前宿主的已安装 Session 暂停 Task 安全检查也已通过；跨 Harness 版本的旧任务迁移尚未验证。候选版发布前，公开安装建议仍指向已发布的组合。