dsh-codex-connect 0.1.0-alpha.4.52 → 0.1.0-alpha.4.54

package/INSTALL.md

@@ -1,10 +1,10 @@
 # Installation Runbook for CLI Agents
 
-Published Alpha 4.51 is verified with either exact DSH `0.1.7-rc.1` or `0.1.7-rc.2` and pi-ai `0.85.1`, using a consistent host package set. Earlier DSH pairings retain their separately published plugin versions below.
+Published Alpha 4.53 is verified with either exact DSH `0.1.7-rc.1` or `0.1.7-rc.2` and pi-ai `0.85.1`, using a consistent host package set. Earlier DSH pairings retain their separately published plugin versions below.
 
 Install `dsh-codex-connect` into one requested DeepSeek Harness profile without changing its current default model, search route, global configuration, or OAuth state.
 
-Channel snapshot on 2026-09-28: npm `alpha` points to `0.1.0-alpha.4.51`; `latest` remains `0.1.0-alpha.4.50`. Use the exact-version command for the installed DSH version; moving npm tags are not compatibility guarantees.
+Channel snapshot on 2026-09-29: npm `alpha` points to `0.1.0-alpha.4.53`; `latest` remains `0.1.0-alpha.4.50`. Use the exact-version command for the installed DSH version; moving npm tags are not compatibility guarantees.
 
 ## Safety requirements
 
@@ -30,16 +30,30 @@ Check `dsh --version` before changing the requested profile. Use `dsh --help` to
 | `0.1.5-alpha.1` | `0.1.0-alpha.4.41` |
 | `0.1.5-rc.1` | `0.1.0-alpha.4.41` |
 | `0.1.5-rc.2` | `0.1.0-alpha.4.41` |
-| `0.1.7-rc.1` | `0.1.0-alpha.4.51` |
-| `0.1.7-rc.2` | `0.1.0-alpha.4.51` |
+| `0.1.7-rc.1` | `0.1.0-alpha.4.53` |
+| `0.1.7-rc.2` | `0.1.0-alpha.4.53` |
 
 If your exact DSH version is unknown or not listed, preserve the installed host, report that the combination is unverified, and verify it before making installation changes. A missing record does not prove incompatibility, and the catalog's latest verified DSH version is not the latest upstream release. Do not recommend upgrading or downgrading DSH merely to match a row. Investigate any specific failure and seek verification of the installed combination. Do not blindly install `dsh-codex-connect@alpha`: `alpha` is a moving tag, not a compatibility guarantee. Do not infer support for newer DSH versions from these rows.
 
-Alpha 4.51 requires one consistent DSH `0.1.7-rc.1` or `0.1.7-rc.2` plugin API and pi-ai `0.85.1`; its direct runtime imports include `@deepseek-ai/schemastery` `3.18.4` and `@earendil-works/pi-ai` `0.85.1` so an isolated profile need not already provide them. Node.js remains `^22.19.0 || >=24.0.0`. It does not support the older DSH rows. Alpha 4.41 remains the choice for DSH `0.1.2-rc.1` with pi-ai `^0.84.2`, or `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` with pi-ai `0.85.1`. Mixed host versions and other DSH/pi-ai combinations remain unverified. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 for DSH `0.1.2-alpha.2`, Alpha 4.21 for DSH `0.1.1-rc.2`, and Alpha 4.14 for DSH `0.1.0-rc.7`. Changing DSH is a separate operation requiring the user's explicit request; a plugin update request does not authorize it. The repository's `pnpm --silent run check:compatibility` remains a strict development/release dependency gate, not a recommendation to change a user's host.
+Alpha 4.53 requires one consistent DSH `0.1.7-rc.1` or `0.1.7-rc.2` plugin API and pi-ai `0.85.1`; its direct runtime imports include `@deepseek-ai/schemastery` `3.18.4` and `@earendil-works/pi-ai` `0.85.1` so an isolated profile need not already provide them. Node.js remains `^22.19.0 || >=24.0.0`. It does not support the older DSH rows. Alpha 4.41 remains the choice for DSH `0.1.2-rc.1` with pi-ai `^0.84.2`, or `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` with pi-ai `0.85.1`. Mixed host versions and other DSH/pi-ai combinations remain unverified. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 for DSH `0.1.2-alpha.2`, Alpha 4.21 for DSH `0.1.1-rc.2`, and Alpha 4.14 for DSH `0.1.0-rc.7`. Changing DSH is a separate operation requiring the user's explicit request; a plugin update request does not authorize it. The repository's `pnpm --silent run check:compatibility` remains a strict development/release dependency gate, not a recommendation to change a user's host.
 
-### Alpha 4.51 published maintenance delivery
+### Alpha 4.53 core maintenance delivery
 
-The current recommendation follows [PR #283](https://github.com/franksong2702/dsh-codex-connect/pull/283), successful [exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36362680011), and independent final source review of the diagnostic type/lifecycle repair. Frozen local checks passed 127 files / 1,466 tests, Chromium 73 tests, and stock rc.1/rc.2 same-artifact installation/runtime checks. Experimental defaults and Task pause remain unchanged; no draft metrics/evaluation feature is included.
+[Alpha 4.53](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.53) delivers the maintenance scope, explicit Task policy wiring and frozen activation-form retirement from #288–#290, prepared by #292. Existing-task recovery and safety remain. Exact-main CI passed at `d15638b614cbc0b9388768aefd30c417afa79c5a`; local checks passed 1,537 unit tests, 53 browser tests and both same-artifact host installations. These are keyless checks, not real-account acceptance.
+
+The [original publication run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36558018123) uploaded npm but failed public readback. Recovery verified the npm archive against the original artifact (SHA-256 `1c83247e5c29fe3e9706960ad38beff2612c3a91be011b29c7ee20e70288a487`) and created only missing tag/prerelease records. No npm republish, old-tag movement or latest promotion occurred. Installation recommendations were updated only after version, alpha, tag and prerelease readback agreed.
+
+### Historical Alpha 4.52 request-metrics delivery
+
+[PR #284](https://github.com/franksong2702/dsh-codex-connect/pull/284) adds optional local request evidence and the offline report CLI, without the internal evaluation runner or a metrics panel. Upgrading alone does not enable collection. Configure a private directory only in the intended profile and restart that profile explicitly; [English](docs/request-metrics.md) and [Chinese](docs/request-metrics.zh.md) guides cover configuration, unknown usage, retention and disabling. Task remains paused.
+
+Fresh independent static source review found no blocker. Local checks passed 132 files / 1,533 tests, Chromium 73 tests, and both stock rc.1/rc.2 same-artifact installation/runtime checks including metrics startup/CLI tests. The final PR-head checks and [exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36366815118) passed. These are synthetic engineering checks, not new real-model/image/Reserve acceptance or evidence of savings.
+
+The original workflow uploaded npm but failed afterward. It was not rerun; recovery verified the original artifact byte-for-byte and created only missing tag/release records. [Original release run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36367211049); release commit `21504f83f0bed1d5737cb2b1972bcd3246b8d3a1`. Final independent read-only verification returned `already-complete`; the public npm archive exactly matched the original verified artifact (SHA-256 `5cab311ed632fb2156188a13633d0bf5ca4c569dad8415da4c95ad4d5063e4a4`). Version, alpha, tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.52) agree. latest remains 4.50. No duplicate upload, old-tag movement or daily-service upgrade occurred. [Publication record](docs/experiments/evidence/alpha-452-publication.json).
+
+### Historical Alpha 4.51 maintenance delivery
+
+The historical Alpha 4.51 recommendation followed [PR #283](https://github.com/franksong2702/dsh-codex-connect/pull/283), successful [exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36362680011), and independent final source review of the diagnostic type/lifecycle repair. Frozen local checks passed 127 files / 1,466 tests, Chromium 73 tests, and stock rc.1/rc.2 same-artifact installation/runtime checks. Experimental defaults and Task pause remain unchanged; no draft metrics/evaluation feature is included.
 
 The [original protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36363043413) uploaded npm successfully but failed public readback. It was not rerun. Recovery-only verification matched the public package byte-for-byte to the original artifact (SHA-256 `6d8ffe3b9335e0f874592f6d5f67d2fe872e809a24a4ae4e2c1d8f14e29857e6`), then created only the missing tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.51). Final independent verification returned `already-complete`: version, alpha, tag and release match commit `2ac612385ea3c3fcfc1078dc18619d7b1dc49b9a`; latest remains 4.50. See [the publication record](docs/experiments/evidence/alpha-451-publication.json). No duplicate npm upload, old-tag movement, daily-service upgrade or new real-model/image acceptance occurred.
 
@@ -100,10 +114,10 @@ Alpha 4.33 omits the `modelErrors` profile field required by RC model packages,
    dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.41
    ```
 
-   For either exact DSH `0.1.7-rc.1` or `0.1.7-rc.2` pairing, use Alpha 4.51:
+   For either exact DSH `0.1.7-rc.1` or `0.1.7-rc.2` pairing, use Alpha 4.53:
 
    ```sh
-   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.51
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.53
    ```
 
    For DSH `0.1.2-alpha.5`, use Alpha 4.25:
@@ -114,7 +128,7 @@ Alpha 4.33 omits the `modelErrors` profile field required by RC model packages,
 
    If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.41'` only for the DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` combinations, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.46'` only for DSH `0.1.7-rc.1`.
 
-   For the current DSH `0.1.7-rc.1` or `0.1.7-rc.2` pairing, if npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.51'`.
+   For the current DSH `0.1.7-rc.1` or `0.1.7-rc.2` pairing, if npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.53'`.
 
 3. Run `dsh web --help` once to compose the installed profile without starting the server. DSH `0.1.2-rc.1` prepares profile plugin dependency fallback during this step.
 4. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: 7b9aa304f7d633e074693082becafbb1c8bd7df4
-docs/README.zh.md: 70da4c6c973097893074cc57e5b7f8e1b411c535
+README.md: cb69c2d02d5fe51bac1376f042439a9fcd2675b0
+docs/README.zh.md: 604a2ae5a15227c3ce2398e4246df8eca912515e

package/README.md

@@ -16,21 +16,21 @@ This guide describes the published pairing below. Check `dsh --version` first an
 
 | Requirement | Verified pairing |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.51` |
+| Codex Connect | `0.1.0-alpha.4.53` |
 | DeepSeek Harness | `0.1.7-rc.1` or `0.1.7-rc.2` (consistent package set) |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | Account | ChatGPT OAuth with access to the requested Codex model; availability is decided by OpenAI |
 
-As of 2026-09-28, npm `alpha` points to 4.51 while `latest` remains 4.50; this maintenance publication did not promote `latest`. Use the exact version below for this DSH pairing; a moving npm tag is not a compatibility guarantee for other hosts.
+As of 2026-09-29, npm `alpha` points to 4.53 while `latest` remains 4.50; this publication did not promote `latest`. Use the exact version below for this DSH pairing; a moving npm tag is not a compatibility guarantee for other hosts.
 
-Alpha 4.51 prevents malformed diagnostic event types from interrupting responses and forwards cancellation/network errors through unread or paused responses. It does not include the draft request-metrics or evaluation functionality.
+Alpha 4.53 retires frozen Task activation/delegation forms and separates core request handling from implicit Task policy imports, while retaining existing-task recovery and safety checks. It preserves the 4.51 diagnostic fixes and 4.52 [opt-in local request metrics](docs/request-metrics.md). Collection stays off until a private directory is configured; unknown usage is not zero. No telemetry upload, internal evaluation runner, statistics panel or Task reopening is included.
 
 On stock DSH `0.1.7-rc.1` and `0.1.7-rc.2`, the package is installation/runtime-regression verified; Task controls remain paused: activation is rejected and fresh Sessions do not show them. Migration of earlier Task grants across a Harness upgrade is not verified. Older supported pairings and their task behavior are documented in [Installation and upgrades](INSTALL.md).
 
 ### 1. Install
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.51
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.53
 dsh web
 ```
 
@@ -69,6 +69,8 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 
 ## Optional capabilities
 
+Development now follows the [core maintenance scope](docs/maintenance-scope.md): maintain connection, compatibility, diagnostics and recovery; freeze Task orchestration and unproven optimization work. Existing published options are not removed or remotely disabled by this decision.
+
 **Earlier Alpha 4.40/4.41 pairings:** task-level model control is off by default. After explicit task authorization, GPT-5.6 Sol/Medium starts the task, and the active model may continue, change effort, or hand off the main task within the granted scope. The task shares one request ledger and budget; stopping, manual takeover, and restart recovery retain the grant boundary. Phase 2 read-only delegation requires separate consent and does not grant workers write access. Stock DSH `0.1.7-rc.1` with Alpha 4.43 keeps these Task controls paused; do not infer they are available from an older pairing. See [Phase 1](docs/experiments/adaptive-task-phase1.md) and [Phase 2 consent](docs/experiments/adaptive-task-phase2-consent.md).
 
 Alpha 4.40 also supplies `gpt-6-sol` and `gpt-6-luna` when older provider catalogs omit them, retaining native metadata when present. Both expose Low through Max (including Xhigh); Default omits an explicit effort. Codex Sol's Ultra orchestration mode is not implemented. New task grants can explicitly include these models, but existing grants, GPT-5.6 Sol/Medium startup and Luna Reserve remain unchanged. A catalog entry is not proof of account access. See [compatibility scope and validation](docs/experiments/gpt6-sol-luna-compatibility.md).
@@ -132,6 +134,7 @@ A missing entry in [verified-compatibility.json](verified-compatibility.json) me
 
 - [Installation and upgrades](INSTALL.md)
 - [Configuration, diagnostics, and recovery](docs/reference.md)
+- [Local request metrics: enable, report, and disable](docs/request-metrics.md)
 - [Migration from `dsh-codex`](MIGRATION.md)
 - [Architecture and security details](docs/design.md)
 - [Auto-review behavior](docs/auto-review.md)

package/compatibility.json

@@ -7,7 +7,9 @@
     "version": "0.1.7-rc.1",
     "versions": [
       "0.1.7-rc.1",
-      "0.1.7-rc.2"
+      "0.1.7-rc.2",
+      "0.2.0-rc.1",
+      "0.2.0-rc.2"
     ],
     "packages": [
       "@deepseek-ai/dsh-agent",

package/docs/README.zh.md

@@ -1,5 +1,7 @@
 # Codex Connect
 
+当前开发遵循[核心维护范围](maintenance-scope.md)：保留接入、兼容、诊断与恢复，冻结 Task 自动编排及未证明收益的优化。此决定不会删除已发布选项，也不会远程停用已有安装。
+
 [![npm version](https://img.shields.io/npm/v/dsh-codex-connect/alpha?label=npm%20alpha&color=cb3837)](https://www.npmjs.com/package/dsh-codex-connect)
 
 [English](../README.md) | 中文
@@ -16,21 +18,21 @@ Codex Connect 为标准 Harness agent loop 添加 `openai-codex` 模型提供方
 
 | 要求 | 已验证组合 |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.51` |
+| Codex Connect | `0.1.0-alpha.4.53` |
 | DeepSeek Harness | `0.1.7-rc.1` 或 `0.1.7-rc.2`（包版本必须一致） |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | 账户 | 通过 ChatGPT OAuth 使用所请求的 Codex 模型；可用性由 OpenAI 决定 |
 
-截至 2026-09-28，npm `alpha` 指向 4.51，`latest` 仍为 4.50；本次维护发布没有提升 `latest`。安装此 DSH 组合请使用下方精确版本命令；会移动的 npm tag 不保证其他宿主版本的兼容性。
+截至 2026-09-29，npm `alpha` 指向 4.53，`latest` 仍为 4.50；本次发布没有提升 `latest`。安装此 DSH 组合请使用下方精确版本命令；会移动的 npm tag 不保证其他宿主版本的兼容性。
 
-Alpha 4.51 修复异常诊断事件类型导致请求中断，以及未读取／暂停读取时取消或网络错误未及时传到外层的问题。本版本不包含草稿中的请求计量或评测功能。
+Alpha 4.53 移除已冻结的 Task 启动／委派表单，拆开核心请求处理与 Task 策略的隐式依赖，保留已有任务恢复与安全检查。继续保留 4.51 的诊断修复和 4.52 的[可选本地请求计量](request-metrics.zh.md)。配置私有目录后才采集；未知用量不当作零。不上传遥测，不包含内部评测运行器或统计面板，也不恢复 Task。
 
 该安装包已通过原版 DSH `0.1.7-rc.1` 和 `0.1.7-rc.2` 的安装及运行回归验证；Task 控件仍暂停：激活请求会被拒绝，新 Session 不显示这些控件。跨 Harness 升级迁移旧任务授权尚未验证。较旧组合及其任务行为见[安装与升级](../INSTALL.md)。
 
 ### 1. 安装
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.51
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.53
 dsh web
 ```
 
@@ -132,6 +134,7 @@ OAuth 凭据保存在运行 DSH 的主机上，由该主机用于向 OpenAI 认
 
 - [安装与升级](../INSTALL.md)
 - [配置、诊断与恢复](reference.zh.md)
+- [本地请求计量：启用、报告与停用](request-metrics.zh.md)
 - [从 `dsh-codex` 迁移](../MIGRATION.md)
 - [架构与安全细节](design.zh.md)
 - [自动审查行为](auto-review.zh.md)

package/docs/agent-notes/adaptive-runtime-status.md

@@ -1,3 +1,7 @@
+# Current planning decision — 2026-09-29
+
+The [core maintenance scope](../maintenance-scope.md) supersedes every proposed next step below. Task and automatic delegation are frozen; internal evaluation is archival work, not a prerequisite to reopening. Preserve historical evidence and shared safety/recovery obligations. The dated checkpoints below are not a live dashboard or authorization to resume.
+
 # Phase 1 merged / Phase 2 main-based review — 2026-09-23
 
 Phase 1 #236 was reviewed and squash-merged as `3c3d1762536efafaecefb36146e062dad5edd4f8`; its tree exactly equals reviewed `76c3c0c`. Main's active ruleset permits squash only. The Phase 2 branch retains its source history and connects that identical Phase 1 main tree without changing product bytes; #239 now proceeds through a main-based exact-head CI/CodeQL gate. Source branches remain intact. This supersedes the historical no-push/no-merge status below, not their evidence limitations.

package/docs/agent-notes/canary-maintenance-loop.md

@@ -0,0 +1,7 @@
+# Canary maintenance loop
+
+The daily canary now distinguishes skipped channels from executed checks in JSON and Actions summaries. Existing version trackers refresh their latest bounded evidence and respect explicit not-planned closure decisions. The run-health observer covers daily and weekly failures that have no complete set of version trackers, including failures before reports exist. It uses GitHub run/job metadata only and never executes a triggering revision or downloads its artifacts.
+
+The focused regression gate executes the observer's actual embedded script against a fake GitHub API. Scenarios include setup-like failures, cancellation, timeout, partial channel tracking, tracker-write failure, late completion, foreign branches/repositories, successful recovery and explicit maintainer closure decisions. Existing child-process fixtures verify that skipped versions do not launch checks and declared versions remain actively tested. These tests do not establish live GitHub delivery or full user acceptance.
+
+The periodic Codex Sweep owns investigation and local repair, with repository writes, pull requests, merging and publishing subject to the user's action-specific authorization. It also detects absent runs and observer failures; the observer cannot monitor its own outage. See the canonical procedure in `.github/UPSTREAM_DSH_CANARY.md`.

package/docs/agent-notes/core-transport-decoupling.md

@@ -0,0 +1,11 @@
+# Core transport separation — 2026-09-29
+
+Scope: remove implicit Task policy imports from the ordinary model adapter and backend governor. The product assembly explicitly supplies legacy provider policy and per-attempt accounting, preserving old grants, budget checks, cancellation and recovery. No default, saved state, authorization rule, supported version or public Task gate changes.
+
+The adapter's optional dispatch object supplies `wrapProvider`; ordinary profiles retain provider retry/session behavior. The governor accepts optional owner accounting before the existing auxiliary check and before the actual fetch; rejection releases admission without dispatch. Task-specific wiring belongs to the product assembly and historical task fixtures, not core transport imports.
+
+Verification requires a test that makes importing the Task scope fail while ordinary profile/governor requests still succeed, plus explicit-policy/refused-accounting cases and the existing real-host synthetic Task suites. Full repository checks, fresh-process accounting/recovery checks and exact-head CI remain required before merge. All fixtures use fake responses; no live acceptance is claimed.
+
+This is dependency separation, not complete runtime retirement. `src/index.ts` still constructs the legacy runtime to preserve saved-task ownership, recovery and accounting. It cannot simply be omitted based on a missing directory: lost task metadata and retained session markers must still fail closed. Full orchestration deletion requires a recovery-only replacement with equivalent historical-state checks; this change does not assert that replacement is complete.
+
+Local verification on Node 24.13.0: `pnpm run check` passed, including 133 files / 1,537 tests, lint/typecheck, normal build, built import/CLI/metrics checks and package validation. `check-adaptive-task-persistence.mjs` passed four fresh processes; `check-adaptive-task-delegation-crashes.mjs` passed 18 cases / 36 fresh processes with zero real provider requests. Initial sandbox-local HTTP binding was denied; the normal host execution passed. The initial Node 26 run failed because existing probe launchers use the removed `--experimental-transform-types` flag; this change does not repair or certify those Node 26 launchers.

package/docs/agent-notes/dsh-020-compatibility.md

@@ -0,0 +1,17 @@
+# DSH 0.2.0 candidate compatibility
+
+Alpha 4.54 is an unpublished candidate containing the compatibility repair merged in [PR #294](https://github.com/franksong2702/dsh-codex-connect/pull/294), main commit `355b9bce49fbec9d63b99458adbe68b8d30771e7`. The published Alpha 4.53 artifact supports only DSH 0.1.7-rc.1 and rc.2; do not apply the new candidate's results to that existing artifact. Catalog entries record exact installation/runtime checks and do not establish npm publication or full user acceptance. Public installation recommendations stay on Alpha 4.53 until independent publication readback confirms the new release.
+
+## Failure and repair
+
+Canary tracker [#291](https://github.com/franksong2702/dsh-codex-connect/issues/291) stopped at the installation version gate for 0.2.0-rc.1. A local candidate with expanded peers passed that host, but failed real assembled synthetic requests on 0.2.0-rc.2. The host's pi-ai 0.87 normalizes the system prompt and tool definitions into an initial system message before calling a provider. The plugin-owned pi-ai 0.85.1 provider expects those fields outside the transcript. Normal conversations failed before HTTP dispatch with `PI_AI_ERROR`; an empty-message probe did not detect the mismatch.
+
+The provider adapter translates only the initial system message back into the old provider vocabulary. It preserves prompt text, tools and remaining history without mutating the input. Old-host contexts pass through unchanged. Later system messages, sections, tool removals and mixed shorthand/transcript inputs fail explicitly rather than silently losing model instructions. Dynamic tool or system-message support is not added.
+
+The plugin's model library, OAuth implementation and frozen feature defaults are unchanged. The installed request probe now includes system instructions, a tool definition and a user message, asserts their outbound values, and runs before legacy recovery fixtures. No real account credentials or model requests are used.
+
+Diagnostics resolve DSH peers from the explicit host anchor, but resolve plugin-owned pi-ai from the plugin. Reading the host's pi-ai version against the plugin's pinned dependency previously produced a false unverified result when those versions diverged. The regression fixture places pi-ai 0.87.1 in the host and confirms that plugin diagnostics still report its own 0.85.1.
+
+## Verification boundary
+
+Run `pnpm run check`, `pnpm run test:browser` and `pnpm --silent run check:dsh-matrix` on the final candidate. The matrix covers exact hosts 0.1.7-rc.1, 0.1.7-rc.2, 0.2.0-rc.1 and 0.2.0-rc.2 using identical packed bytes. These checks establish keyless installation/runtime compatibility, not live OAuth, paid quota, full user acceptance or deployment. A new published version and separate deployment approval remain required before daily-service use.

package/docs/agent-notes/task-activation-ui-retirement.md

@@ -0,0 +1,11 @@
+# Retire experimental activation UI — 2026-09-29
+
+The public contribution is now structurally recovery-only, rather than choosing between recovery and the full experimental form. Remove `AdaptiveTaskControl.tsx`, `TaskDelegationConsent.tsx` and the two browser suites whose sole subject was that retired form. Their last retained source is available in the parent Git history and the maintainer's local research archive; historical evidence hashes are not rewritten.
+
+Dependency inspection found only the published conditional branch and those two test suites importing the removed form. No package dependency is exclusive to these React components; React and the host client packages remain required elsewhere. The recovery component, its bilingual/phone-width/late-response/no-replay tests, HTTP activation rejection, owner validation, existing task counters, backend runtime and all task lifecycle tests remain.
+
+The displayed explanation now says frozen, not awaiting acceptance. Old tasks keep authorized Stop/manual takeover and readback. Ordinary conversations remain entry-free. No configuration, saved grant, archive, checkpoint or session data is deleted. Restoring the obsolete form from Git does not authorize enabling it.
+
+Required checks are browser recovery regression, full repository check/build and packaged artifact validation, followed by normal exact-head CI. Removing this UI is not full server orchestration removal; the legacy server implementation still supports historical-state safety until a separately verified recovery-only replacement exists.
+
+Local Node 24.13.0 verification passed: `pnpm run check` (133 files / 1,537 tests, lint/typecheck/build, import/CLI/metrics and packaging) and `pnpm run test:browser` (11 files / 53 tests). The reduction from 73 browser tests is the deliberate retirement of 20 tests for the removed activation/consent forms, not weakened recovery assertions. The preserved recovery suite additionally verifies the frozen wording in both languages. No actual account/model requests or daily services were used.

package/docs/design.md

@@ -10,7 +10,9 @@ The Host registers `llm-openai-codex` as the plugin-owned capability settings na
 
 Fast Mode remains per-session process-local state. Separate default-off profile settings seed newly started top-level and subagent sessions through `agent/created`; resume, setting edits, and repeated startup notifications do not change an existing session's Composer choice. The adapter adds `service_tier: 'priority'` only on Codex requests for an enabled session.
 
-## Task-level model selection (unreleased Phase 1 candidate)
+## Task-level model selection: frozen
+
+Phase 1 #236 and Phase 2 #239 were merged; #248 subsequently paused public activation, which remains paused in Alpha 4.52. The [maintenance scope](maintenance-scope.md) freezes further orchestration development. Retain old-state readback and authorized safety exits. The two candidate descriptions below are historical architecture context, not current release status or instructions to finish acceptance.
 
 The optional conversation control grants a bounded main-model/effort scope to one task, initially Sol/Medium. The task runtime, adapter dispatch wrapper and existing backend governor share durable request accounting. There is no separate Think, Split or Remember product selector. Host-owned permissions, session history and compaction remain their existing owners; model choice grants no new tool authority. See [the consolidated contract and migration](experiments/adaptive-task-phase1.md) for source selection from #232–#235, cancellation, recovery and acceptance limits.
 
@@ -28,6 +30,8 @@ Browser account and update requests have a 45-second deadline covering response
 
 ## Backend request governance
 
+Ordinary adapter profiles and the backend governor do not import Task policy. The composition root explicitly supplies provider wrapping and pre-fetch accounting for retained legacy tasks; see [core transport separation](agent-notes/core-transport-decoupling.md). Removing experimental execution must preserve these historical-task safety obligations.
+
 Authenticated runtime traffic to `https://chatgpt.com/backend-api/` passes through one plugin-owned request governor before network dispatch. The governor fail-closes on any other origin/path, composes caller and route deadlines, keeps the existing Codex-only proxy scope alive for the complete logical direct request or provider stream, assigns a fresh `x-client-request-id` to every HTTP attempt, and bounds one plugin instance to eight concurrent backend requests. Concurrency is counted per HTTP attempt, not during authentication; even parallel fetches within one logical operation share that limit. Requests queued behind that limit remain cancellable and within route deadlines. Cancelling unread/paused bodies, response-hook failures and scope disposal releases resources; scope disposal runs before other plugin teardown waits. URL/header inputs are snapshotted before queue waits and authenticated requests never automatically follow redirects. HTTP `429` or `503` responses with a valid `Retry-After` create a lane-local cooldown that is rechecked on admission, never occupies a network slot while waiting, and honors longer service delays using timer slices of at most 15 minutes; the governor does not invent an account-block verdict or replay a failed model turn. Route-specific protocol retries remain with their existing owners, such as pi-ai model retry semantics and native-compaction's bounded retry loop.
 
 Direct plugin routes use the honest shared identity `originator: deepseek-harness` and `User-Agent: dsh-codex-connect`; Search, quota, image generation, Auto-review, and native compaction all use that policy. The pi-ai model route deliberately preserves pi-ai's provider identity rather than impersonating Codex CLI/Desktop, while still receiving the same attempt id, concurrency, proxy, cancellation, server-directed cooldown, and bounded HTTP diagnostic metadata. Native compaction travels through the provider fetch seam at runtime and therefore shares the model governor lane while retaining the direct-plugin identity on its own request. This split is explicit policy, not a claim about undocumented upstream risk controls.

package/docs/design.zh.md

@@ -8,6 +8,12 @@ bundle patch 只插入 `llm-openai-codex`，不会写入 `agent-default-model`
 
 Host 将 `llm-openai-codex` 注册为插件自有的能力 settings namespace。DSH 的 `llm-pi-ai` catalog 持有 `openai-codex` 可配置 provider 目录条目，Codex Connect 只注册实际 adapter，不重复声明该条目。浏览器通过 Harness settings-scope transport 绑定插件 namespace，把账户、额度以及带保存/放弃的能力配置放在现有“插件配置”卡片中。带 revision 防护的逐字段写入不会覆盖无关设置；提交后会即时协调搜索与图片能力的注册状态。插件绝不写入默认模型设置。
 
+## Task 开发冻结
+
+普通模型适配器与后端请求管理器不直接导入 Task 策略；产品组装处显式接入旧任务的 provider 包装和请求前计数。此拆分保留旧任务权限、取消与恢复，不等于已删除全部实验运行时。见[拆分记录](agent-notes/core-transport-decoupling.md)。
+
+维护范围现以[核心维护决定](maintenance-scope.md)为准：Task Phase 1/2 实现已经合并，但公开启动入口保持暂停，后续自动编排开发冻结。保留旧状态读取、经授权的停止与人工接管；历史候选验收计划不再是当前待办。
+
 ## OAuth 持久化
 
 插件使用 `$DSH_HOME/.openai-codex-auth.json`，与 Codex CLI/Desktop 状态分离。格式 version 2 最多保存 16 个 OAuth 账户，并明确指定唯一当前账户。原 version 1 文件仍可读取，第一次修改凭据时才迁移；迁移前会先生成仅所有者可读的 `.openai-codex-auth.json.v1-backup` 回退副本。若该副本已存在，它必须仅所有者可读且与当前 version 1 文件一致，否则迁移会在替换主文件前停止。移除任一账户或执行退出登录时会删除该副本，避免已移除凭据继续留存。文档大小上限为 512 KiB。POSIX 上拒绝组/其他用户可读文件，也拒绝非普通文件；写入采用原子替换，所有修改使用 Harness 跨进程文件锁，返回给调用方的是凭据副本。

package/docs/experiments/adaptive-task-phase2-design.md

@@ -23,7 +23,7 @@ The original design-only slice was followed by Phase 1 installed-page acceptance
 | `src/adaptive-task-scope.ts`, `src/backend-request.ts` | Exact scoped route, no automatic retry, existing governor | Reuse for child transport with one debit, no second request governor |
 | Host `dsh-agent` baseline types | Factory `create` with unpublished `setup`, publication `commit`, owned `AgentHandle.dispose()` | Use owned handle; creation signal is not a lifetime signal |
 | Old #200 `83f6a02`, `src/split-worker.ts` | Fixed worker, one pre-staged offer, rejects persistence-enabled hosts | Reference only; cannot become the new runtime by removing its guard |
-| `src/client/AdaptiveTaskControl.tsx` | One task model-choice surface | Optional delegation consent/status inside it, not a Split setting |
+| Retired `src/client/AdaptiveTaskControl.tsx` | Historical task model-choice surface | Removed under the maintenance freeze; current public UI is recovery-only, not delegation consent |
 
 Host evidence above is the installed baseline API, not a claim all four host versions have identical signatures. Exact-host create/setup/ownership and cleanup tests are implementation gates. The previous matrix already showed newer hosts need explicit parent ownership; capability adapters must preserve that distinction.
 

package/docs/experiments/evidence/alpha-452-publication.json

@@ -0,0 +1,58 @@
+{
+  "schemaVersion": 1,
+  "checkedAt": "2026-09-28",
+  "version": "0.1.0-alpha.4.52",
+  "pr": 284,
+  "prHead": "460897102971ca169bb2a856b0b3e1ebfa73a4fb",
+  "dailyServicesChanged": false,
+  "latestPromoted": false,
+  "realProductAcceptanceCalls": 0,
+  "prChecksPassed": 10,
+  "mergeCommit": "21504f83f0bed1d5737cb2b1972bcd3246b8d3a1",
+  "mainCiRun": 36366815118,
+  "releaseRun": "36367211049",
+  "originalRunConclusion": "failure",
+  "recoveryPreflight": {
+    "status": "verified-recovery-needed",
+    "version": "0.1.0-alpha.4.52",
+    "runId": "36367211049",
+    "sha": "21504f83f0bed1d5737cb2b1972bcd3246b8d3a1",
+    "sha256": "5cab311ed632fb2156188a13633d0bf5ca4c569dad8415da4c95ad4d5063e4a4",
+    "npmRepublished": false,
+    "tagsPromoted": false
+  },
+  "recovery": {
+    "status": "recovered",
+    "version": "0.1.0-alpha.4.52",
+    "runId": "36367211049",
+    "sha": "21504f83f0bed1d5737cb2b1972bcd3246b8d3a1",
+    "sha256": "5cab311ed632fb2156188a13633d0bf5ca4c569dad8415da4c95ad4d5063e4a4",
+    "npmRepublished": false,
+    "tagsPromoted": false,
+    "releaseId": 397895899
+  },
+  "finalReadOnlyVerification": {
+    "status": "already-complete",
+    "version": "0.1.0-alpha.4.52",
+    "runId": "36367211049",
+    "sha": "21504f83f0bed1d5737cb2b1972bcd3246b8d3a1",
+    "sha256": "5cab311ed632fb2156188a13633d0bf5ca4c569dad8415da4c95ad4d5063e4a4",
+    "npmRepublished": false,
+    "tagsPromoted": false,
+    "releaseId": 397895899
+  },
+  "channels": {
+    "latest": "0.1.0-alpha.4.50",
+    "alpha": "0.1.0-alpha.4.52"
+  },
+  "tagCommit": "21504f83f0bed1d5737cb2b1972bcd3246b8d3a1",
+  "release": {
+    "isDraft": false,
+    "isPrerelease": true,
+    "publishedAt": "2026-09-28T01:52:28Z",
+    "tagName": "v0.1.0-alpha.4.52",
+    "targetCommitish": "21504f83f0bed1d5737cb2b1972bcd3246b8d3a1",
+    "url": "https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.52"
+  },
+  "verified": true
+}

package/docs/maintenance-scope.md

@@ -0,0 +1,59 @@
+# Core maintenance scope — 2026-09-29
+
+This maintainer-approved scope supersedes earlier roadmap directions to complete experimental acceptance or reopen Task. Historical results remain evidence, not a backlog or authorization to resume. This document changes development priorities, not installed packages or running services.
+
+## Product promise and admission
+
+Maintain authorization/accounts, ordinary manual model use, installation, exact-version compatibility, Canary alert handling, diagnostics, request cancellation/resource safety and necessary recovery. Keep DSH ownership of permissions, session persistence and lifecycle. Local request metrics remains an optional diagnostic capability, not a new evaluation platform or statistics UI.
+
+A proposal needs an identifiable user problem, repeatable supporting evidence and an acceptable maintenance/host-dependency cost before entering the next roadmap. Missing evidence is grounds to defer, not an instruction to build more experiment infrastructure. Reconsideration requires an explicit maintainer decision; green CI or a scheduled reminder cannot reopen a frozen track.
+
+## Disposition
+
+| Surface | Disposition | Retained obligations |
+| --- | --- | --- |
+| Authorization, manual models, installation, compatibility, Canary, diagnostics | Maintain | Scoped defect fixes and supported-version evidence; no automatic expansion of support |
+| Backend governor, cancellation, proxy lifetime, quota cache, request metrics | Maintain | Shared safety and diagnostics; metrics does not establish task cost or savings |
+| Adaptive Task model/effort changes and read-only delegation | Freeze | Public gate stays closed; preserve old-state readback, authorized Stop/manual takeover, accounting and ownership checks |
+| Cross-browser Task recovery and restricted research entry | Freeze development | Preserve local work; any demonstrated safety defect becomes a separate core repair, not a reason to finish orchestration |
+| Internal autonomy evaluation, container runners, grading and budget experiments | Archive research | Preserve source, unfinished changes and dated evidence outside public delivery; no new scenarios, live A/B or pilot work |
+| Retired Think/Split stacks | Historical archive | Do not rebase, reopen or restore as active roadmap work |
+| Native compaction / Remember | Freeze expansion | Preserve existing checkpoint decoding/replay, fallback and recovery; address concrete safety defects without a broad quality study |
+| Luna Reserve | Freeze expansion | Keep default-off and existing safety checks; no manufactured exhaustion or new eligibility experiment |
+| Speculative routing and unproven optimizations | Exclude from roadmap | No distinct speculative-routing implementation was located in the inspected main source/scripts/docs; no deletion target is asserted |
+| Published Search, images, Auto-review and Fast Mode | Existing maintenance only | No new features or silent disablement in this scope change |
+
+Task Phase 1/2 are merged implementations, not merely unshipped drafts. Alpha 4.52 retains the public pause. Published optional features and historical releases cannot be withdrawn by editing this document. Existing installations and saved data remain untouched.
+
+## Dependency removal inventory
+
+| Candidate for a later removal change | Connections that must be separated first | Required preservation/verification |
+| --- | --- | --- |
+| `adaptive-task-*` runtime/delegation/artifact modules | `src/index.ts` constructs the runtime, passes it to the adapter and attaches auxiliary request accounting; HTTP routes and client components consume its state | Normal model/auxiliary requests without Task; old grant readback, authorized exits, cancellation, counters and restart safety |
+| Full Task controls and research recovery UI | Published recovery-only component, authenticated HTTP commands, owner binding, existing task state | Fresh sessions remain entry-free; stale clients cannot activate; do not weaken owner checks to simplify recovery |
+| Research `evals/autonomy/`, restricted runner and research-only tests | Local package/test imports, docs, private evidence and reproduction metadata | Preserve snapshot first; remove only experiment-exclusive dependencies; retain core metrics/governor tests |
+| Native compaction creation experiments | Checkpoint representation and adapter replay also serve existing saved sessions | Keep old checkpoint readability, fallback and recovery; separate creation policy from persisted-data support |
+| Reserve routing | Shared quota cache/account identity and return-state recovery | Keep normal quota display, account isolation and safe restoration; no blanket quota-module deletion |
+
+This is a reviewed starting inventory, not proof that the dependency graph is fully detached. Completed narrow removals are recorded below; the rest remains retained. Each removal must update references/docs together and run focused regression, required build/package checks and supported-host checks appropriate to the changed surface. Do not erase unresolved defects by closing an experiment tracker.
+
+## Current iteration and acceptance
+
+- [x] Record the scope decision and retirement rules, separate from historical acceptance.
+- [x] Link contributor and product entry points to this scope.
+- [x] Identify shared dependencies that prevent bulk removal.
+- [x] Publish the documentation decision: #288 merged as `43a1c013537dd5bfc6944761018c117d197dd25b` after all ten checks passed.
+- [x] Synchronize trackers: #195 and #194 closed as not planned; #65 remains open for two historical failure observations, not a broad experiment campaign. Core-defect monitoring and Canary follow-up now respect the freeze; the original October 3 closeout deadline is unchanged.
+- [x] Separate implicit Task policy imports from core transport, with explicit legacy accounting retained (#289).
+- [x] Remove activation-only browser forms and their exclusive tests after dependency inspection; retain recovery-only UI and regression coverage.
+- [ ] Before any further server removal, replace legacy orchestration with verified recovery-only ownership, missing-state, replay, counters and child cleanup handling. Until then retain the existing server implementation; this is not a commitment to new experiments or Task reopening.
+
+Local research preservation has a separate private archive manifest; do not commit machine paths or private experiment evidence into the public repository. A local archive is not a merged product change and does not stop another running task. Existing scheduled jobs must not be assumed updated by this document.
+
+The [first code separation](agent-notes/core-transport-decoupling.md) removes implicit Task imports from ordinary transport. It retains explicit legacy-task wiring in the product and does not claim the entire runtime is retired.
+
+The [activation UI retirement](agent-notes/task-activation-ui-retirement.md) removes the full experimental form and its exclusive browser tests after dependency inspection. The public contribution retains recovery only. Historical design/evidence entries describing the deleted form are archival, not current source paths or reopening work.
+
+## Evidence baseline
+
+Inspected main: `e26165d962102ca6c6eeba5c5d9a8cfa75ffd02a`, tree `63c1842ed9b6c2527a774ec1943ad9733933231e`. The local documentation branch starts from the identical reviewed PR #287 tree. Public release scope: [Alpha 4.52](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.52). Historical obligations: [#195](https://github.com/franksong2702/dsh-codex-connect/issues/195), [#65](https://github.com/franksong2702/dsh-codex-connect/issues/65), [#194](https://github.com/franksong2702/dsh-codex-connect/issues/194). Their earlier proposed next steps are superseded for local planning, but their GitHub bodies have not been edited by this change.

package/docs/request-metrics.md

@@ -2,7 +2,7 @@
 
 English | [中文](request-metrics.zh.md)
 
-This source adds opt-in, local-only HTTP-attempt evidence and a boot-free report command. It does not enable task orchestration, change model requests, call a model for measurement, or convert API prices to subscription quota. This guide describes the Alpha 4.52 candidate; Alpha 4.51 and earlier packages do not contain this feature. A candidate is not publication evidence.
+This source adds opt-in, local-only HTTP-attempt evidence and a boot-free report command. It does not enable task orchestration, change model requests, call a model for measurement, or convert API prices to subscription quota. Introduced in the published Alpha 4.52 release; Alpha 4.51 and earlier packages do not contain this feature.
 
 The internal evaluation program is not part of the installed package. This feature supplies evidence for diagnostics and separately designed comparisons; it is not a task-quality evaluator, a user-facing metrics panel or a proven efficiency improvement.
 

package/docs/request-metrics.zh.md

@@ -2,7 +2,7 @@
 
 [English](request-metrics.md) | 中文
 
-本文对应 Alpha 4.52 候选；已发布的 4.51 及更早版本不含此功能，候选记录不代表已经发布。请求计量默认关闭，只在本机记录有限的请求元数据；不上传遥测，不为计量额外调用模型，不恢复 Task，也不提供统计面板或订阅费用估算。内部评测程序和任务样本不随插件发布。
+此功能已随 Alpha 4.52 发布；4.51 及更早版本不含此功能。请求计量默认关闭，只在本机记录有限的请求元数据；不上传遥测，不为计量额外调用模型，不恢复 Task，也不提供统计面板或订阅费用估算。内部评测程序和任务样本不随插件发布。
 
 ## 在指定 profile 中启用
 

package/lib/bin.js

@@ -606,7 +606,12 @@ var OpenAICodexCredentialStore = class {
 	}
 };
 const SUPPORTED_NODE_RANGE = "^22.19.0 || >=24.0.0";
-const SUPPORTED_DSH_PLUGIN_API_VERSIONS = ["0.1.7-rc.1", "0.1.7-rc.2"];
+const SUPPORTED_DSH_PLUGIN_API_VERSIONS = [
+	"0.1.7-rc.1",
+	"0.1.7-rc.2",
+	"0.2.0-rc.1",
+	"0.2.0-rc.2"
+];
 const SUPPORTED_DSH_PLUGIN_API_RANGE = SUPPORTED_DSH_PLUGIN_API_VERSIONS.join(" || ");
 const SUPPORTED_PI_AI_RANGE = "0.85.1";
 const PI_AI_PACKAGE = "@earendil-works/pi-ai";
@@ -759,7 +764,7 @@ async function readInstalledPackageVersion(name, installAnchor) {
 }
 /** Read installed package metadata and return only versions and statuses. */
 async function detectCompatibility(options = {}) {
-	const readVersion = options.readPackageVersion ?? ((name) => readInstalledPackageVersion(name, options.installAnchor));
+	const readVersion = options.readPackageVersion ?? ((name) => readInstalledPackageVersion(name, name === "@earendil-works/pi-ai" ? void 0 : options.installAnchor));
 	const packageVersions = options.packageVersions ?? options.packages ?? options.installed?.packages;
 	const resolvedPackages = packageVersions === void 0 ? Object.fromEntries(await Promise.all(COMPATIBILITY_PACKAGES.map(async (name) => [name, await readVersion(name)]))) : packageVersions;
 	return evaluateCompatibility({
@@ -769,7 +774,7 @@ async function detectCompatibility(options = {}) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.52";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.54";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */