dsh-coding-subscription-oauth 0.6.5 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/CHANGELOG.md +13 -2
  2. package/CONTRIBUTING.md +1 -1
  3. package/INSTALL.md +12 -8
  4. package/README.de.md +5 -5
  5. package/README.es.md +5 -5
  6. package/README.fr.md +5 -5
  7. package/README.ja.md +5 -5
  8. package/README.ko.md +5 -5
  9. package/README.md +7 -6
  10. package/README.pt-BR.md +5 -5
  11. package/README.ru.md +5 -5
  12. package/README.zh-CN.md +7 -6
  13. package/compatibility/dsh-bom.json +8 -2
  14. package/docs/00-project-rules.md +3 -2
  15. package/docs/02-architecture.md +5 -5
  16. package/docs/02-architecture.zh-CN.md +5 -5
  17. package/lib/auth-routes.d.ts +10 -1
  18. package/lib/auth-routes.d.ts.map +1 -1
  19. package/lib/bin.js +483 -50
  20. package/lib/bin.js.map +4 -4
  21. package/lib/client.js +5 -5
  22. package/lib/client.js.map +4 -4
  23. package/lib/compatibility.d.ts +0 -1
  24. package/lib/compatibility.d.ts.map +1 -1
  25. package/lib/gateway-protocol.d.ts +3 -3
  26. package/lib/gateway-protocol.d.ts.map +1 -1
  27. package/lib/grok-errors.d.ts +2 -2
  28. package/lib/grok-errors.d.ts.map +1 -1
  29. package/lib/http-json.d.ts +2 -2
  30. package/lib/http-json.d.ts.map +1 -1
  31. package/lib/ids.d.ts +4 -0
  32. package/lib/ids.d.ts.map +1 -1
  33. package/lib/index.d.ts +2 -1
  34. package/lib/index.d.ts.map +1 -1
  35. package/lib/index.js +677 -163
  36. package/lib/index.js.map +4 -4
  37. package/lib/kimi-errors.d.ts +2 -2
  38. package/lib/kimi-errors.d.ts.map +1 -1
  39. package/lib/oauth-session.d.ts +2 -0
  40. package/lib/oauth-session.d.ts.map +1 -1
  41. package/lib/session.d.ts +2 -0
  42. package/lib/session.d.ts.map +1 -1
  43. package/lib/store.d.ts +73 -1
  44. package/lib/store.d.ts.map +1 -1
  45. package/package.json +6 -8
  46. package/lib/runtime/gateway-protocol.d.ts +0 -47
  47. package/lib/runtime/gateway-protocol.d.ts.map +0 -1
  48. package/lib/runtime/grok-errors.d.ts +0 -13
  49. package/lib/runtime/grok-errors.d.ts.map +0 -1
  50. package/lib/runtime/http-json.d.ts +0 -10
  51. package/lib/runtime/http-json.d.ts.map +0 -1
  52. package/lib/runtime/kimi-errors.d.ts +0 -13
  53. package/lib/runtime/kimi-errors.d.ts.map +0 -1
package/CHANGELOG.md CHANGED
@@ -4,13 +4,24 @@ All notable changes to `dsh-coding-subscription-oauth` are documented here, foll
4
4
 
5
5
  ## Unreleased
6
6
 
7
+ ## v0.7.0 - 2026-09-10
8
+
9
+ ### Added
10
+
11
+ - Adopt Hub-aligned AuthDocument v2 multi-account store: read v1 and migrate under file lock, hard cap of 8 accounts, `upsertAccount` / `setActiveAccount` / `removeAccount` / `listAccounts` (token-free summaries).
12
+ - Minimal Accounts UI (zh-CN + en): list / set-default / remove on each signed-in provider card; status includes token-free `accounts` + `activeAccountId`; HTTP `…/oauth/accounts/set-active` and `…/oauth/accounts/remove` (`#30`).
13
+ - Record DeepSeek Harness `0.1.5-rc.1` as an **unverified** BOM candidate in `compatibility/dsh-bom.json` (verified pin remains `0.1.1-rc.2`).
14
+
7
15
  ### Changed
8
16
 
9
- - Mirror Hub’s first shared-runtime extract (`http-json`, `grok-errors`, `kimi-errors`, `gateway-protocol`) under `vendor/runtime-slice/` with build copies in `src/runtime/` and thin facades at the historical module paths. Add `pnpm run assert:runtime-slice` with `SYNC_HASHES.json` so isolated CI can verify the mirror without a Hub checkout; when Hub is present the script also compares live Hub files.
17
+ - Consume published `dsh-coding-oauth-core@0.1.2` helper subpaths (`http-json`, `grok-errors`, `kimi-errors`, `gateway-protocol`); remove the temporary `vendor/runtime-slice/` mirror and `src/runtime/` copies. Historical `src/*.ts` facades now re-export from npm core.
18
+ - Replace `pnpm run assert:runtime-slice` with `pnpm run assert:oauth-core` (version pin + subpath resolve).
19
+ - Drop `@deepseek-ai/dsh-client-runtime` from client Cordis inject / BOM / devDependencies; resolve `ClientContext` from `@deepseek-ai/cordis` so candidate host `0.1.5-rc.1` (no client-runtime package) does not leave a stale inject requirement.
10
20
 
11
21
  ### Documentation
12
22
 
13
- - Document the temporary runtime-slice mirror and the planned drop after the next core npm release in `docs/02-architecture.md` / `docs/02-architecture.zh-CN.md`.
23
+ - Update `docs/02-architecture.md` / `docs/02-architecture.zh-CN.md` for the published-core import path (no local runtime-slice mirror).
24
+ - Document verified vs candidate DSH BOM and the client-runtime inject change in `INSTALL.md`, `docs/03-dsh-alpha-smoke.md`, and README Requirements.
14
25
 
15
26
  ## v0.6.5 - 2026-09-02
16
27
 
package/CONTRIBUTING.md CHANGED
@@ -124,7 +124,7 @@ The plugin verifies an exact DeepSeek Harness BOM (`compatibility/dsh-bom.json`)
124
124
  3. **Settings surface.** Settings → Coding OAuth renders all four tabs (Accounts / Gateway / Capabilities / About).
125
125
  4. **Credentials survive.** Every previously signed-in provider card (Grok / Codex / Kimi / Claude) still shows signed-in — an upgrade must never migrate or reset OAuth credential files.
126
126
  5. **Live routes.** `DSH_WEB_URL=http://127.0.0.1:3080 pnpm run verify:deployed` (status route + catalog + registered routes), then `smoke:deployed` with `DSH_RESTORE_PROVIDER` / `DSH_RESTORE_MODEL` set for one streamed reply per credentialed OAuth route.
127
- 6. **Then move the pin.** Update `compatibility/dsh-bom.json`, the `dsh.compatibility` block in `package.json`, and the README compatibility notes in the same commit.
127
+ 7. **Then move the pin.** Update `compatibility/dsh-bom.json`, the `dsh.compatibility` block in `package.json`, and the README / INSTALL compatibility notes in the same commit. Recording a host under `candidates[]` (for example `0.1.5-rc.1`) is not a promotion.
128
128
 
129
129
  ## Reporting security issues
130
130
 
package/INSTALL.md CHANGED
@@ -3,7 +3,7 @@
3
3
  本仓库原名 **`dsh-grok-build`**。普通用户请使用已发布的 npm 版本：
4
4
 
5
5
  ```bash
6
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
6
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
7
7
  ```
8
8
 
9
9
  CLI 新命令是 `dsh-coding-oauth`（旧命令 `dsh-grok-build` 仍可用）。为兼容已有 profile，Cordis id 仍是 `llm-grok-build-oauth`，设置页 HTTP 路径仍是 `/plugins/dsh-grok-build/*`，凭据文件名不变。
@@ -11,22 +11,24 @@ CLI 新命令是 `dsh-coding-oauth`（旧命令 `dsh-grok-build` 仍可用）。
11
11
  第一次公开发布是 **`0.4.1`**。`0.6.1` 从未正式发布或打包，其未发布改动已合入当前推荐的 **`0.6.3`**：
12
12
 
13
13
  ```bash
14
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
14
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
15
15
  dsh plugin --profile web update dsh-coding-subscription-oauth
16
16
  ```
17
17
 
18
18
  ## 前置条件
19
19
 
20
- - DeepSeek Harness 0.1.1-rc.2（精确已验证 BOM）
20
+ - DeepSeek Harness `0.1.1-rc.2`（精确已验证 BOM，见 `compatibility/dsh-bom.json`）
21
21
  - Node.js 22.19+
22
22
  - 需要使用的个人编码订阅；没有 Claude/Google 账号也可以先安装路由
23
23
  - 部分网络需要 HTTP/HTTPS 代理
24
24
 
25
+ `0.1.2-alpha.*` 与 `0.1.5-rc.1` 可作为 BOM **未验证候选**出现，但不是生产 pin。在把候选提升为 `verified` 之前，不要把它们当作正式兼容声明。面向 `0.1.5-rc.1` 的客户端 inject 已不再要求 `@deepseek-ai/dsh-client-runtime`（该包在候选宿主上不存在）；缺失的可选 inject 仍为 soft diagnostic。
26
+
25
27
  ## 安装
26
28
 
27
29
  ```bash
28
30
  # 普通用户：当前 npm 发布版
29
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
31
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
30
32
 
31
33
  # 开发 / 备用：从 GitHub
32
34
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
@@ -42,12 +44,14 @@ dsh plugin --profile web add dsh-agy@0.1.2
42
44
 
43
45
  ## 升级注意事项
44
46
 
45
- - 本版按 DSH `0.1.1-rc.2` 的精确兼容矩阵发布；生产环境应锁定已验证的 BOM，不要用 `*` 或未验证的宽泛 peer range。
47
+ - 本版按 DSH `0.1.1-rc.2` 的精确兼容矩阵发布；生产环境应锁定已验证的 BOM，不要用 `*` 或未验证的宽泛 peer range。候选宿主（如 `0.1.5-rc.1`）只记在 `candidates[]`，须经隔离冒烟后再考虑提升。
46
48
  - 从 `0.6.0` 升级到 `0.6.2` 后再重启：`0.6.0` 在严格 Cordis 注入检查下可能因读取尚未注入的可选服务而拖垮插件树。这个补丁不迁移或重置 OAuth 凭据、Gateway、模型/适配器 ID 与缓存。
47
- - 从 `0.6.3` 升级到 `0.6.4`：统一固定 `dsh-coding-oauth-core@0.1.1` 与 `undici@7.29.0`；无配置、凭据、数据或路由迁移。
49
+ - 从 `0.6.3` 升级到 `0.6.4`：统一固定 `dsh-coding-oauth-core@0.1.2` 与 `undici@7.29.0`；无配置、凭据、数据或路由迁移。
50
+ - 从 `0.6.5` 升级到 `0.7.0`：AuthDocument v2 多账号与 Accounts UI；去掉 `@deepseek-ai/dsh-client-runtime` inject；BOM 记录未验证候选 `0.1.5-rc.1`（verified 仍为 `0.1.1-rc.2`）；无配置/凭据/路由破坏性迁移。
48
51
  - 从 `0.6.4` 升级到 `0.6.5`：Gateway key 的 reveal/rotate 仅限 `accessMode === "loopback"`（与 Settings UI 一致）；无配置、凭据、数据或路由迁移。npm 包不再附带 `src/`，运行时仍为生成的 `lib/`。
49
- - 在同一个 **web profile** 中先保证 `dsh-coding-oauth-core@0.1.1` 可从 npm 解析，再安装 Subscription `0.6.5`（以及需要的 `dsh-hub-oauth-gateway@1.11.1`）。Core 只是共享 npm 依赖，不是单独的 DSH 插件，用户不需要执行 `dsh plugin add dsh-coding-oauth-core`。
50
- - 共装 Hub 与 Subscription 时，先安装 `dsh-hub-oauth-gateway@1.11.1` 与 Subscription `0.6.5`，完成后只重启一次现有 DSH Web 进程；Hub 提供完整用量中心，Subscription 显示紧凑状态入口。只升级 Subscription 仍可独立工作。
52
+ - 宿主边界（无需操作者迁移）：客户端 classic-script 不再 inject `@deepseek-ai/dsh-client-runtime`；`ClientContext` 从 `@deepseek-ai/cordis` 解析。这与 Hub 在 `0.1.5-rc.1` 上的适配一致，避免陈旧 inject 诊断。
53
+ - 在同一个 **web profile** 中先保证 `dsh-coding-oauth-core@0.1.2` 可从 npm 解析，再安装 Subscription `0.7.0`（以及需要的 `dsh-hub-oauth-gateway@1.12.0`）。Core 只是共享 npm 依赖，不是单独的 DSH 插件，用户不需要执行 `dsh plugin add dsh-coding-oauth-core`。
54
+ - 共装 Hub 与 Subscription 时，先安装 `dsh-hub-oauth-gateway@1.12.0` 与 Subscription `0.7.0`，完成后只重启一次现有 DSH Web 进程；Hub 提供完整用量中心，Subscription 显示紧凑状态入口。只升级 Subscription 仍可独立工作。
51
55
  - 升级会保留既有 Cordis id、OAuth 凭据文件、模型/适配器 ID、Gateway 配置和模型缓存；不要为了“清理旧版本”删除这些文件。若旧包名 `dsh-grok-build` 仍在 profile 中，只移除那条旧插件记录，再安装当前包，避免重复路由。
52
56
  - 回滚时恢复上一个插件版本并重启一次，保留凭据和配置；先查看兼容性诊断与失败原因，不要用清空凭据来代替回滚。
53
57
  - DSH Web 与本地 Gateway 继续只绑定 loopback。远程 Settings 只能走 SSH 隧道或满足 owner proof、精确 Origin 和 CSRF proof 的 HTTPS 反向代理；升级不会放宽到 `0.0.0.0`。
package/README.de.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · früher `dsh-grok-build`
7
+ **v0.7.0 · früher `dsh-grok-build`
8
8
 
9
9
  **OAuth-Plugin für Coding-Abonnements für [DeepSeek Harness](https://github.com/deepseek-ai/dsh).** Melden Sie sich einmal mit den Abonnements an, die Sie bereits bezahlen, und nutzen Sie die Modelle aus den Einstellungen oder der CLI von dsh. **Keine Tokens in den Chat einfügen.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **Upgrade:** Folgen Sie den versionierten Schritten in [`INSTALL.md`](INSTALL.md). `0.6.5` behält die gemeinsame Dispatcher-Laufzeitumgebung bei `dsh-coding-oauth-core@0.1.1` und `undici@7.29.0` und beschränkt Reveal/Rotate des Gateway-Schlüssels auf Loopback-Zugriff; eine Migration von Konfiguration, Anmeldedaten, Daten oder Routen ist nicht erforderlich. Grok Imagine behält seinen explizit gepinnten Dispatcher. Releases ab `0.6.2` enthalten den strengen Cordis-Injection-Startfix und Unterstützung für DSH `0.1.1-rc.2`; behalten Sie Profil-/Konfigurations-/Anmeldedateien und starten Sie den bestehenden DSH-Web-Prozess nach dem Update nur einmal neu. Wenn Hub und Subscription zusammen genutzt werden, sind `dsh-coding-oauth-core@0.1.1` und `undici@7.29.0` ihr gemeinsamer Runtime-Pin, kein separates DSH-Plugin.
20
+ > **Upgrade:** Folgen Sie den versionierten Schritten in [`INSTALL.md`](INSTALL.md). `0.7.0` behält die gemeinsame Dispatcher-Laufzeitumgebung bei `dsh-coding-oauth-core@0.1.2` und `undici@7.29.0` und beschränkt Reveal/Rotate des Gateway-Schlüssels auf Loopback-Zugriff; eine Migration von Konfiguration, Anmeldedaten, Daten oder Routen ist nicht erforderlich. Grok Imagine behält seinen explizit gepinnten Dispatcher. Releases ab `0.6.2` enthalten den strengen Cordis-Injection-Startfix und Unterstützung für DSH `0.1.1-rc.2`; behalten Sie Profil-/Konfigurations-/Anmeldedateien und starten Sie den bestehenden DSH-Web-Prozess nach dem Update nur einmal neu. Wenn Hub und Subscription zusammen genutzt werden, sind `dsh-coding-oauth-core@0.1.2` und `undici@7.29.0` ihr gemeinsamer Runtime-Pin, kein separates DSH-Plugin.
21
21
 
22
22
  ---
23
23
 
@@ -27,7 +27,7 @@ Zuerst **`dsh-grok-build`** (nur Grok Build). Jetzt SuperGrok / Codex / Kimi / C
27
27
  | | Das verwenden | Funktioniert weiter |
28
28
  |---|---|---|
29
29
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build` (derselbe `main`) |
30
- | npm | `dsh-coding-subscription-oauth@0.6.5` (aktuelle Version) | Es gab kein altes npm-Paket |
30
+ | npm | `dsh-coding-subscription-oauth@0.7.0` (aktuelle Version) | Es gab kein altes npm-Paket |
31
31
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
32
32
  | Cordis-Plugin-id | `llm-grok-build-oauth` | unverändert |
33
33
  | Settings-HTTP-API | `/plugins/dsh-grok-build/*` | unverändert |
@@ -77,7 +77,7 @@ Diese Suchbegriffe und DSH-Fehler führen meist hierher.
77
77
 
78
78
  ```bash
79
79
  # 1. Plugin in das Web-Profil installieren (aktuelle npm-Version)
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. optional — Google Antigravity (gepinnte, geprüfte Version)
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ Erfordert DeepSeek Harness `0.1.1-rc.2` und Node.js 22.19+. Vollständige Detail
118
118
 
119
119
  ```bash
120
120
  # aktuelle npm-Version (empfohlen)
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # Entwicklung/Alternativ: von GitHub
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.es.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · antes `dsh-grok-build`
7
+ **v0.7.0 · antes `dsh-grok-build`
8
8
 
9
9
  **Plugin OAuth de suscripciones de codificación para [DeepSeek Harness](https://github.com/deepseek-ai/dsh).** Inicia sesión una vez con las suscripciones que ya pagas y luego usa sus modelos desde la página de configuración o la CLI de dsh. **Sin pegar tokens en el chat.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **Actualización:** Siga los pasos versionados en [`INSTALL.md`](INSTALL.md). `0.6.5` mantiene el runtime del dispatcher compartido en `dsh-coding-oauth-core@0.1.1` y `undici@7.29.0`, y restringe reveal/rotate de la clave del Gateway al acceso loopback; no se requiere migración de configuración, credenciales, datos o rutas. Grok Imagine conserva su dispatcher pinned explícito. Las versiones desde `0.6.2` incluyen la corrección estricta de inyección Cordis al inicio y compatibilidad con DSH `0.1.1-rc.2`; conserve los archivos de profile/config/credenciales y reinicie el proceso DSH Web existente solo una vez tras actualizar. Cuando se usan Hub y Subscription juntos, `dsh-coding-oauth-core@0.1.1` con `undici@7.29.0` es su pin de runtime compartido, no un plugin DSH aparte.
20
+ > **Actualización:** Siga los pasos versionados en [`INSTALL.md`](INSTALL.md). `0.7.0` mantiene el runtime del dispatcher compartido en `dsh-coding-oauth-core@0.1.2` y `undici@7.29.0`, y restringe reveal/rotate de la clave del Gateway al acceso loopback; no se requiere migración de configuración, credenciales, datos o rutas. Grok Imagine conserva su dispatcher pinned explícito. Las versiones desde `0.6.2` incluyen la corrección estricta de inyección Cordis al inicio y compatibilidad con DSH `0.1.1-rc.2`; conserve los archivos de profile/config/credenciales y reinicie el proceso DSH Web existente solo una vez tras actualizar. Cuando se usan Hub y Subscription juntos, `dsh-coding-oauth-core@0.1.2` con `undici@7.29.0` es su pin de runtime compartido, no un plugin DSH aparte.
21
21
 
22
22
  ---
23
23
 
@@ -28,7 +28,7 @@ Empezó como **`dsh-grok-build`** (solo Grok Build). Ahora cubre SuperGrok / Cod
28
28
  | | Usa esto | Sigue funcionando |
29
29
  |---|---|---|
30
30
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build` (el mismo `main`) |
31
- | npm | `dsh-coding-subscription-oauth@0.6.5` (versión actual) | No se publicó un paquete npm legado |
31
+ | npm | `dsh-coding-subscription-oauth@0.7.0` (versión actual) | No se publicó un paquete npm legado |
32
32
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
33
33
  | Cordis plugin id | `llm-grok-build-oauth` | sin cambios |
34
34
  | API HTTP de ajustes | `/plugins/dsh-grok-build/*` | sin cambios |
@@ -77,7 +77,7 @@ Estas búsquedas y errores de DSH suelen traer a la gente hasta aquí.
77
77
 
78
78
  ```bash
79
79
  # 1. instala el plugin en el perfil web (versión actual de npm)
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. opcional — Google Antigravity (versión fija revisada)
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ Requiere DeepSeek Harness `0.1.1-rc.2` y Node.js 22.19+. Detalles completos en l
118
118
 
119
119
  ```bash
120
120
  # versión actual de npm (recomendado)
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # desarrollo/alternativo: desde GitHub
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.fr.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · anciennement `dsh-grok-build`
7
+ **v0.7.0 · anciennement `dsh-grok-build`
8
8
 
9
9
  **Plugin OAuth pour abonnements de codage de [DeepSeek Harness](https://github.com/deepseek-ai/dsh).** Connectez-vous une fois avec les abonnements que vous payez déjà, puis utilisez leurs modèles depuis la page de configuration ou la CLI dsh. **Aucun token collé dans le chat.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **Mise à niveau :** Suivez les étapes versionnées dans [`INSTALL.md`](INSTALL.md). `0.6.5` conserve le runtime du dispatcher partagé sur `dsh-coding-oauth-core@0.1.1` et `undici@7.29.0`, et limite reveal/rotate de la clé Gateway à l'accès loopback ; aucune migration de configuration, d'identifiants, de données ou de routes n'est requise. Grok Imagine conserve son dispatcher pinned explicite. Les versions à partir de `0.6.2` incluent la correction stricte d'injection Cordis au démarrage et le support de DSH `0.1.1-rc.2` ; conservez les fichiers profile/config/identifiants et redémarrez une seule fois le processus DSH Web existant après la mise à jour. Lorsque Hub et Subscription sont utilisés ensemble, `dsh-coding-oauth-core@0.1.1` avec `undici@7.29.0` est leur pin de runtime partagé, pas un plugin DSH distinct.
20
+ > **Mise à niveau :** Suivez les étapes versionnées dans [`INSTALL.md`](INSTALL.md). `0.7.0` conserve le runtime du dispatcher partagé sur `dsh-coding-oauth-core@0.1.2` et `undici@7.29.0`, et limite reveal/rotate de la clé Gateway à l'accès loopback ; aucune migration de configuration, d'identifiants, de données ou de routes n'est requise. Grok Imagine conserve son dispatcher pinned explicite. Les versions à partir de `0.6.2` incluent la correction stricte d'injection Cordis au démarrage et le support de DSH `0.1.1-rc.2` ; conservez les fichiers profile/config/identifiants et redémarrez une seule fois le processus DSH Web existant après la mise à jour. Lorsque Hub et Subscription sont utilisés ensemble, `dsh-coding-oauth-core@0.1.2` avec `undici@7.29.0` est leur pin de runtime partagé, pas un plugin DSH distinct.
21
21
 
22
22
  ---
23
23
 
@@ -28,7 +28,7 @@ Le projet s'appelait **`dsh-grok-build`** (Grok Build uniquement). Il couvre mai
28
28
  | | Utiliser | Toujours valable |
29
29
  |---|---|---|
30
30
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build` (même `main`) |
31
- | npm | `dsh-coding-subscription-oauth@0.6.5` (version actuelle) | Aucun ancien paquet npm n'a été publié |
31
+ | npm | `dsh-coding-subscription-oauth@0.7.0` (version actuelle) | Aucun ancien paquet npm n'a été publié |
32
32
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
33
33
  | Cordis plugin id | `llm-grok-build-oauth` | inchangé |
34
34
  | API HTTP des réglages | `/plugins/dsh-grok-build/*` | inchangé |
@@ -77,7 +77,7 @@ Ce sont les recherches et erreurs DSH qui mènent le plus souvent ici.
77
77
 
78
78
  ```bash
79
79
  # 1. installez le plugin dans le profil web (version actuelle npm)
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. optionnel — Google Antigravity (version épinglée examinée)
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ Nécessite DeepSeek Harness `0.1.1-rc.2` et Node.js 22.19+. Détails complets da
118
118
 
119
119
  ```bash
120
120
  # version actuelle npm (recommandé)
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # développement/alternatif : depuis GitHub
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.ja.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · 旧名 `dsh-grok-build`
7
+ **v0.7.0 · 旧名 `dsh-grok-build`
8
8
 
9
9
  **DeepSeek Harness（dsh）のためのコーディングサブスクリプション OAuth プラグイン。** 支払い済みのサブスクリプションで一度きりのサインイン——その後は dsh の設定ページまたは CLI からそのモデルを使えます。**チャットにトークンを貼り付ける必要はありません。**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **アップグレード：** [`INSTALL.md`](INSTALL.md) のバージョン別手順に従ってください。`0.6.5` は共有 dispatcher ランタイムを `dsh-coding-oauth-core@0.1.1` と `undici@7.29.0` に維持し、Gateway キーの reveal/rotate を loopback アクセスに限定します。設定・資格情報・データ・ルートの移行は不要です。Grok Imagine は明示的にピン留めされた dispatcher を維持します。`0.6.2` 以降のリリースには厳密な Cordis 注入起動修正と DSH `0.1.1-rc.2` 対応が含まれます。profile / 設定 / 資格情報ファイルはそのままにし、更新後に既存の DSH Web プロセスを一度だけ再起動してください。Hub と Subscription を併用する場合、`dsh-coding-oauth-core@0.1.1` と `undici@7.29.0` は共有ランタイムのピンであり、別の DSH プラグインではありません。
20
+ > **アップグレード：** [`INSTALL.md`](INSTALL.md) のバージョン別手順に従ってください。`0.7.0` は共有 dispatcher ランタイムを `dsh-coding-oauth-core@0.1.2` と `undici@7.29.0` に維持し、Gateway キーの reveal/rotate を loopback アクセスに限定します。設定・資格情報・データ・ルートの移行は不要です。Grok Imagine は明示的にピン留めされた dispatcher を維持します。`0.6.2` 以降のリリースには厳密な Cordis 注入起動修正と DSH `0.1.1-rc.2` 対応が含まれます。profile / 設定 / 資格情報ファイルはそのままにし、更新後に既存の DSH Web プロセスを一度だけ再起動してください。Hub と Subscription を併用する場合、`dsh-coding-oauth-core@0.1.2` と `undici@7.29.0` は共有ランタイムのピンであり、別の DSH プラグインではありません。
21
21
 
22
22
  ---
23
23
 
@@ -27,7 +27,7 @@
27
27
  | | これを使う | 互換 |
28
28
  |---|---|---|
29
29
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build`（同じ `main`） |
30
- | npm | `dsh-coding-subscription-oauth@0.6.5`（現在のリリース） | 旧 npm パッケージは公開されていない |
30
+ | npm | `dsh-coding-subscription-oauth@0.7.0`（現在のリリース） | 旧 npm パッケージは公開されていない |
31
31
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
32
32
  | Cordis プラグイン id | `llm-grok-build-oauth` | 変更なし |
33
33
  | 設定ページ HTTP API | `/plugins/dsh-grok-build/*` | 変更なし |
@@ -77,7 +77,7 @@ DSH にコーディングサブスクを載せるとき、よく次の検索語
77
77
 
78
78
  ```bash
79
79
  # 1. web プロファイルにプラグインをインストール（現在の npm リリース）
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. 任意 — Google Antigravity（レビュー済みの固定バージョン）
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ DeepSeek Harness `0.1.1-rc.2` と Node.js 22.19+ が前提です。詳細は[イ
118
118
 
119
119
  ```bash
120
120
  # 現在の npm リリース（推奨）
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # 開発／代替：GitHub から
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.ko.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · 이전 이름 `dsh-grok-build`
7
+ **v0.7.0 · 이전 이름 `dsh-grok-build`
8
8
 
9
9
  **[DeepSeek Harness](https://github.com/deepseek-ai/dsh)용 코딩 구독 OAuth 플러그인.** 이미 결제한 구독으로 한 번에 로그인하고, dsh 설정 페이지나 CLI에서 그 모델을 사용하세요. **채팅에 토큰을 붙여넣을 필요가 없습니다.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **업그레이드:** [`INSTALL.md`](INSTALL.md)의 버전별 단계를 따르세요. `0.6.5`는 공유 dispatcher 런타임을 `dsh-coding-oauth-core@0.1.1`과 `undici@7.29.0`으로 유지하고, Gateway 키 reveal/rotate를 loopback 접근으로 제한합니다. 설정·자격 증명·데이터·라우트 마이그레이션은 필요 없습니다. Grok Imagine은 명시적으로 고정된 dispatcher를 유지합니다. `0.6.2` 이후 릴리스에는 엄격한 Cordis 주입 시작 수정과 DSH `0.1.1-rc.2` 지원이 포함됩니다. profile/설정/자격 증명 파일은 유지하고, 업데이트 후 기존 DSH Web 프로세스를 한 번만 재시작하세요. Hub와 Subscription을 함께 사용할 때 `dsh-coding-oauth-core@0.1.1`과 `undici@7.29.0`은 공유 런타임 핀이며 별도의 DSH 플러그인이 아닙니다.
20
+ > **업그레이드:** [`INSTALL.md`](INSTALL.md)의 버전별 단계를 따르세요. `0.7.0`는 공유 dispatcher 런타임을 `dsh-coding-oauth-core@0.1.2`과 `undici@7.29.0`으로 유지하고, Gateway 키 reveal/rotate를 loopback 접근으로 제한합니다. 설정·자격 증명·데이터·라우트 마이그레이션은 필요 없습니다. Grok Imagine은 명시적으로 고정된 dispatcher를 유지합니다. `0.6.2` 이후 릴리스에는 엄격한 Cordis 주입 시작 수정과 DSH `0.1.1-rc.2` 지원이 포함됩니다. profile/설정/자격 증명 파일은 유지하고, 업데이트 후 기존 DSH Web 프로세스를 한 번만 재시작하세요. Hub와 Subscription을 함께 사용할 때 `dsh-coding-oauth-core@0.1.2`과 `undici@7.29.0`은 공유 런타임 핀이며 별도의 DSH 플러그인이 아닙니다.
21
21
 
22
22
  ---
23
23
 
@@ -27,7 +27,7 @@
27
27
  | | 이것을 쓰세요 | 계속 동작 |
28
28
  |---|---|---|
29
29
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build`（같은 `main`） |
30
- | npm | `dsh-coding-subscription-oauth@0.6.5`（현재 릴리스） | 레거시 npm 패키지는 게시된 적 없음 |
30
+ | npm | `dsh-coding-subscription-oauth@0.7.0`（현재 릴리스） | 레거시 npm 패키지는 게시된 적 없음 |
31
31
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
32
32
  | Cordis 플러그인 id | `llm-grok-build-oauth` | 그대로 |
33
33
  | 설정 페이지 HTTP API | `/plugins/dsh-grok-build/*` | 그대로 |
@@ -77,7 +77,7 @@
77
77
 
78
78
  ```bash
79
79
  # 1. web 프로필에 플러그인 설치 (현재 npm 릴리스)
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. 선택 사항 — Google Antigravity (검증된 고정 버전)
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ DeepSeek Harness `0.1.1-rc.2` 및 Node.js 22.19+가 필요합니다. 자세한
118
118
 
119
119
  ```bash
120
120
  # 현재 npm 릴리스 (권장)
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # 개발/대안: GitHub에서
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5** · formerly `dsh-grok-build`
7
+ **v0.7.0** · formerly `dsh-grok-build`
8
8
 
9
9
  **Coding-subscription OAuth for [DeepSeek Harness](https://github.com/deepseek-ai/dsh).** Use SuperGrok / X Premium (Grok Build), ChatGPT Plus/Pro (Codex), Kimi Code, Claude Pro/Max and Google Antigravity inside DSH — without a second API-key bill and **without pasting any token into chat.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **Upgrade / 升级：** Follow the versioned steps in [`INSTALL.md`](INSTALL.md). `0.6.5` keeps the shared dispatcher runtime on `dsh-coding-oauth-core@0.1.1` and `undici@7.29.0`, and restricts gateway key reveal/rotate to loopback access; no configuration, credential, data, or route migration is required. Grok Imagine retains its explicit pinned dispatcher. Releases from `0.6.2` onward include the strict Cordis injection startup fix and DSH `0.1.1-rc.2` support; keep profile/config/credential files and restart one existing DSH Web process only after updating.
20
+ > **Upgrade / 升级：** Follow the versioned steps in [`INSTALL.md`](INSTALL.md). Current main pins the shared dispatcher runtime on `dsh-coding-oauth-core@0.1.2` and `undici@7.29.0`, and restricts gateway key reveal/rotate to loopback access; no configuration, credential, data, or route migration is required. Grok Imagine retains its explicit pinned dispatcher. Releases from `0.6.2` onward include the strict Cordis injection startup fix and DSH `0.1.1-rc.2` support; keep profile/config/credential files and restart one existing DSH Web process only after updating.
21
21
 
22
22
  ---
23
23
 
@@ -27,7 +27,7 @@ Published first as **`dsh-grok-build`** when it only covered Grok Build. The cur
27
27
 
28
28
  | | Use this | Still works |
29
29
  |---|---|---|
30
- | npm (recommended) | Current release is `0.6.5`: `dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5` | No legacy npm package was published |
30
+ | npm (recommended) | Current release is `0.7.0`: `dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0` | No legacy npm package was published |
31
31
  | GitHub / development | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | Previous GitHub repo `dsh-grok-build` was removed |
32
32
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
33
33
  | Cordis plugin id | `llm-grok-build-oauth` | unchanged |
@@ -81,7 +81,7 @@ Grok Build device login, live `/v1/models-v2` and Responses streaming are verifi
81
81
 
82
82
  ```bash
83
83
  # 1. install the current npm release into the web profile
84
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
84
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
85
85
 
86
86
  # 2. optional — Google Antigravity (pinned, reviewed version)
87
87
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,11 +118,11 @@ Then open **Settings → Coding OAuth** and sign in to any provider. Done — pi
118
118
 
119
119
  ## Install
120
120
 
121
- Requires DeepSeek Harness `0.1.1-rc.2` and Node.js 22.19+. Full details in the [installation notes](INSTALL.md).
121
+ Requires DeepSeek Harness `0.1.1-rc.2` (verified BOM) and Node.js 22.19+. Unverified candidates such as `0.1.5-rc.1` are recorded in `compatibility/dsh-bom.json` only — see [INSTALL.md](INSTALL.md).
122
122
 
123
123
  ```bash
124
124
  # current npm release
125
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
125
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
126
126
 
127
127
  # development / alternative: from GitHub
128
128
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
@@ -305,6 +305,7 @@ Using coding subscriptions through a third-party harness may sit in a gray area
305
305
  | [`CHANGELOG.md`](CHANGELOG.md) | Release history |
306
306
  | [`docs/00-project-rules.md`](docs/00-project-rules.md) | Versioning, release loop, publish vs local-only split |
307
307
  | [`docs/02-architecture.md`](docs/02-architecture.md) | Internal architecture (routes, data flow, modules, API) · [中文](docs/02-architecture.zh-CN.md) |
308
+ | [`docs/03-dsh-alpha-smoke.md`](docs/03-dsh-alpha-smoke.md) | Isolated smoke on unverified DSH candidates (`0.1.2-alpha.*`, `0.1.5-rc.1`) |
308
309
  | [`CONTRIBUTING.md`](CONTRIBUTING.md) | Contribution guide |
309
310
 
310
311
  ## Related
package/README.pt-BR.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · antigo `dsh-grok-build`
7
+ **v0.7.0 · antigo `dsh-grok-build`
8
8
 
9
9
  **Plugin de OAuth para assinaturas de codificação do [DeepSeek Harness](https://github.com/deepseek-ai/dsh).** Entre com as assinaturas que você já paga — depois use os modelos delas a partir da página de configurações do dsh ou da CLI. **Nenhum token colado no chat.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **Atualização:** Siga os passos versionados em [`INSTALL.md`](INSTALL.md). `0.6.5` mantém o runtime do dispatcher compartilhado em `dsh-coding-oauth-core@0.1.1` e `undici@7.29.0`, e restringe reveal/rotate da chave do Gateway ao acesso loopback; não é necessária migração de configuração, credenciais, dados ou rotas. Grok Imagine mantém seu dispatcher pinned explícito. Lançamentos a partir de `0.6.2` incluem a correção estrita de injeção Cordis na inicialização e suporte a DSH `0.1.1-rc.2`; conserve os arquivos de profile/config/credenciais e reinicie o processo DSH Web existente apenas uma vez após atualizar. Quando Hub e Subscription são usados juntos, `dsh-coding-oauth-core@0.1.1` com `undici@7.29.0` é o pin de runtime compartilhado, não um plugin DSH separado.
20
+ > **Atualização:** Siga os passos versionados em [`INSTALL.md`](INSTALL.md). `0.7.0` mantém o runtime do dispatcher compartilhado em `dsh-coding-oauth-core@0.1.2` e `undici@7.29.0`, e restringe reveal/rotate da chave do Gateway ao acesso loopback; não é necessária migração de configuração, credenciais, dados ou rotas. Grok Imagine mantém seu dispatcher pinned explícito. Lançamentos a partir de `0.6.2` incluem a correção estrita de injeção Cordis na inicialização e suporte a DSH `0.1.1-rc.2`; conserve os arquivos de profile/config/credenciais e reinicie o processo DSH Web existente apenas uma vez após atualizar. Quando Hub e Subscription são usados juntos, `dsh-coding-oauth-core@0.1.2` com `undici@7.29.0` é o pin de runtime compartilhado, não um plugin DSH separado.
21
21
 
22
22
  ---
23
23
 
@@ -28,7 +28,7 @@ O projeto começou como **`dsh-grok-build`** (só Grok Build). Agora cobre Super
28
28
  | | Use isto | Ainda funciona |
29
29
  |---|---|---|
30
30
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build` (mesmo `main`) |
31
- | npm | `dsh-coding-subscription-oauth@0.6.5` (versão atual) | Nenhum pacote npm legado foi publicado |
31
+ | npm | `dsh-coding-subscription-oauth@0.7.0` (versão atual) | Nenhum pacote npm legado foi publicado |
32
32
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
33
33
  | Cordis plugin id | `llm-grok-build-oauth` | inalterado |
34
34
  | API HTTP das configurações | `/plugins/dsh-grok-build/*` | inalterado |
@@ -77,7 +77,7 @@ Estas são as buscas e erros do DSH que costumam trazer as pessoas até aqui.
77
77
 
78
78
  ```bash
79
79
  # 1. instale o plugin no perfil web (versão atual do npm)
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. opcional — Google Antigravity (versão fixa revisada)
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ Requer DeepSeek Harness `0.1.1-rc.2` e Node.js 22.19+. Detalhes completos nas [n
118
118
 
119
119
  ```bash
120
120
  # versão atual do npm (recomendado)
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # desenvolvimento/alternativo: do GitHub
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.ru.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5 · ранее `dsh-grok-build`
7
+ **v0.7.0 · ранее `dsh-grok-build`
8
8
 
9
9
  **Плагин OAuth для подписок на кодинг для [DeepSeek Harness](https://github.com/deepseek-ai/dsh).** Войдите один раз по уже оплаченным подпискам — и используйте их модели из страницы настроек или CLI dsh. **Никаких вставленных токенов в чат.**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **Обновление:** Следуйте пошаговым инструкциям по версиям в [`INSTALL.md`](INSTALL.md). `0.6.5` сохраняет общий runtime диспетчера на `dsh-coding-oauth-core@0.1.1` и `undici@7.29.0` и ограничивает reveal/rotate ключа Gateway доступом loopback; миграция конфигурации, учётных данных, данных или маршрутов не требуется. Grok Imagine сохраняет явно закреплённый dispatcher. Релизы начиная с `0.6.2` включают строгое исправление запуска Cordis-инъекции и поддержку DSH `0.1.1-rc.2`; сохраните файлы profile/config/учётных данных и перезапустите существующий процесс DSH Web только один раз после обновления. При совместном использовании Hub и Subscription `dsh-coding-oauth-core@0.1.1` с `undici@7.29.0` — их общий runtime-pin, а не отдельный плагин DSH.
20
+ > **Обновление:** Следуйте пошаговым инструкциям по версиям в [`INSTALL.md`](INSTALL.md). `0.7.0` сохраняет общий runtime диспетчера на `dsh-coding-oauth-core@0.1.2` и `undici@7.29.0` и ограничивает reveal/rotate ключа Gateway доступом loopback; миграция конфигурации, учётных данных, данных или маршрутов не требуется. Grok Imagine сохраняет явно закреплённый dispatcher. Релизы начиная с `0.6.2` включают строгое исправление запуска Cordis-инъекции и поддержку DSH `0.1.1-rc.2`; сохраните файлы profile/config/учётных данных и перезапустите существующий процесс DSH Web только один раз после обновления. При совместном использовании Hub и Subscription `dsh-coding-oauth-core@0.1.2` с `undici@7.29.0` — их общий runtime-pin, а не отдельный плагин DSH.
21
21
 
22
22
  ---
23
23
 
@@ -28,7 +28,7 @@
28
28
  | | Используйте | По-прежнему работает |
29
29
  |---|---|---|
30
30
  | GitHub / `dsh plugin add` | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | `github:lninghaha/dsh-grok-build` (тот же `main`) |
31
- | npm | `dsh-coding-subscription-oauth@0.6.5` (текущая версия) | Старого npm-пакета не было |
31
+ | npm | `dsh-coding-subscription-oauth@0.7.0` (текущая версия) | Старого npm-пакета не было |
32
32
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
33
33
  | Cordis plugin id | `llm-grok-build-oauth` | без изменений |
34
34
  | HTTP API страницы настроек | `/plugins/dsh-grok-build/*` | без изменений |
@@ -77,7 +77,7 @@
77
77
 
78
78
  ```bash
79
79
  # 1. установите текущую npm-версию в web-профиль
80
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
80
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
81
81
 
82
82
  # 2. опционально — Google Antigravity (зафиксированная проверенная версия)
83
83
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -118,7 +118,7 @@ dsh plugin --profile web add dsh-agy@0.1.2
118
118
 
119
119
  ```bash
120
120
  # текущая npm-версия (рекомендуется)
121
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
121
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
122
122
 
123
123
  # разработка/альтернатива: из GitHub
124
124
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
package/README.zh-CN.md CHANGED
@@ -4,7 +4,7 @@
4
4
 
5
5
  # 🔐 dsh-coding-subscription-oauth
6
6
 
7
- **v0.6.5** · 原名 `dsh-grok-build`
7
+ **v0.7.0** · 原名 `dsh-grok-build`
8
8
 
9
9
  **面向 [DeepSeek Harness](https://github.com/deepseek-ai/dsh) 的编码订阅 OAuth 插件。** 把 SuperGrok / X Premium（Grok Build）、ChatGPT Plus/Pro（Codex）、Kimi Code、Claude Pro/Max 和 Google Antigravity 接到 DSH——不必再开一份按量 API-key，**也不要把 token 粘贴进聊天。**
10
10
 
@@ -17,7 +17,7 @@
17
17
 
18
18
  ---
19
19
 
20
- > **升级：** 按 [`INSTALL.md`](INSTALL.md) 的版本化步骤操作。`0.6.5` 继续将共享 dispatcher runtime 固定为 `dsh-coding-oauth-core@0.1.1` 与 `undici@7.29.0`，并将 Gateway key 的 reveal/rotate 限制为 loopback 访问；无需迁移配置、凭据、数据或路由。Grok Imagine 保留显式 pinned dispatcher。`0.6.2` 及之后版本已包含严格 Cordis 注入启动修复并正式支持 DSH `0.1.1-rc.2`；保留 profile、配置和凭据文件，更新后再重启一次现有 DSH Web 进程。
20
+ > **升级：** 按 [`INSTALL.md`](INSTALL.md) 的版本化步骤操作。`0.7.0` 继续将共享 dispatcher runtime 固定为 `dsh-coding-oauth-core@0.1.2` 与 `undici@7.29.0`，并将 Gateway key 的 reveal/rotate 限制为 loopback 访问；无需迁移配置、凭据、数据或路由。Grok Imagine 保留显式 pinned dispatcher。`0.6.2` 及之后版本已包含严格 Cordis 注入启动修复并正式支持 DSH `0.1.1-rc.2`；保留 profile、配置和凭据文件，更新后再重启一次现有 DSH Web 进程。
21
21
 
22
22
  ---
23
23
 
@@ -27,7 +27,7 @@
27
27
 
28
28
  | | 请用这个 | 仍然可用 |
29
29
  |---|---|---|
30
- | npm（推荐） | 当前版本是 `0.6.5`：`dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5` | 没有发布过旧 npm 包 |
30
+ | npm（推荐） | 当前版本是 `0.7.0`：`dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0` | 没有发布过旧 npm 包 |
31
31
  | GitHub / 开发安装 | [`dsh-coding-subscription-oauth`](https://github.com/lninghaha/dsh-coding-subscription-oauth) | 旧仓库 `dsh-grok-build` 已删除 |
32
32
  | CLI | `dsh-coding-oauth` | `dsh-grok-build` |
33
33
  | Cordis 插件 id | `llm-grok-build-oauth` | 不变 |
@@ -79,7 +79,7 @@
79
79
 
80
80
  ```bash
81
81
  # 1. 安装当前 npm 发布版到 web profile
82
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
82
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
83
83
 
84
84
  # 2. 可选 —— Google Antigravity（固定审核过的版本）
85
85
  dsh plugin --profile web add dsh-agy@0.1.2
@@ -116,11 +116,11 @@ dsh plugin --profile web add dsh-agy@0.1.2
116
116
 
117
117
  ## 安装
118
118
 
119
- 需要 DeepSeek Harness `0.1.1-rc.2` 与 Node.js 22.19+。完整细节见[安装说明](INSTALL.md)。
119
+ 需要 DeepSeek Harness `0.1.1-rc.2`（已验证 BOM）与 Node.js 22.19+。`0.1.5-rc.1` 等未验证候选仅记在 `compatibility/dsh-bom.json`，完整细节见[安装说明](INSTALL.md)。
120
120
 
121
121
  ```bash
122
122
  # 当前 npm 版本
123
- dsh plugin --profile web add dsh-coding-subscription-oauth@0.6.5
123
+ dsh plugin --profile web add dsh-coding-subscription-oauth@0.7.0
124
124
 
125
125
  # 开发 / 备用：从 GitHub 安装
126
126
  dsh plugin --profile web add github:lninghaha/dsh-coding-subscription-oauth
@@ -303,6 +303,7 @@ flowchart LR
303
303
  | [`CHANGELOG.md`](CHANGELOG.md) | 版本历史 |
304
304
  | [`docs/00-project-rules.md`](docs/00-project-rules.md) | 版本、发版循环、公开层与本地内参分层 |
305
305
  | [`docs/02-architecture.md`](docs/02-architecture.md) | 内部架构（路由、数据流、模块、API）· [中文](docs/02-architecture.zh-CN.md) |
306
+ | [`docs/03-dsh-alpha-smoke.md`](docs/03-dsh-alpha-smoke.md) | 未验证 DSH 候选宿主的隔离冒烟（`0.1.2-alpha.*`、`0.1.5-rc.1`） |
306
307
  | [`CONTRIBUTING.md`](CONTRIBUTING.md) | 贡献指南 |
307
308
 
308
309
  ## 相关项目
package/compatibility/dsh-bom.json CHANGED
@@ -9,7 +9,6 @@
9
9
  "@deepseek-ai/dsh-atomic-write": "0.1.1-rc.2",
10
10
  "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
11
11
  "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
12
- "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
13
12
  "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
14
13
  "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
15
14
  "@deepseek-ai/dsh-client-web": "0.1.1-rc.2",
@@ -26,5 +25,12 @@
26
25
  "react-dom": "18.3.1"
27
26
  }
28
27
  },
29
- "candidates": []
28
+ "candidates": [
29
+ {
30
+ "id": "dsh-0.1.5-rc.1",
31
+ "dshVersion": "0.1.5-rc.1",
32
+ "releaseLine": "0.1.5-rc",
33
+ "status": "unverified"
34
+ }
35
+ ]
30
36
  }
package/docs/00-project-rules.md CHANGED
@@ -48,13 +48,14 @@ Every document in the repo belongs to one of two layers, and the two never mix:
48
48
 
49
49
  | Layer | Location | In git / npm? | Examples | Requirements |
50
50
  |---|---|---|---|---|
51
- | **Publishable (public)** | Repo root: `README.md` + `README.zh-CN.md` + other community-language READMEs, `CONTRIBUTING.md`, `INSTALL.md`, `CHANGELOG.md`, `LICENSE`, `NOTICE`, and explicitly promoted generic `docs/` files (this rules doc, `docs/02-architecture.md` + `docs/02-architecture.zh-CN.md`) | ✅ git, shipped via `files` | architecture, install/usage, route table, compliance notes, contribution & release rules | privacy-free: no host aliases, accounts, credentials, absolute paths; external-facing tone |
51
+ | **Publishable (public)** | Repo root: `README.md` + `README.zh-CN.md` + other community-language READMEs, `CONTRIBUTING.md`, `INSTALL.md`, `CHANGELOG.md`, `LICENSE`, `NOTICE`, and explicitly promoted generic `docs/` files (this rules doc, `docs/02-architecture.md` + `docs/02-architecture.zh-CN.md`, `docs/MIGRATION.md`, `docs/03-dsh-alpha-smoke.md`) | ✅ git; package `files` lists a subset | architecture, install/usage, route table, compliance notes, contribution & release rules | privacy-free: no host aliases, accounts, credentials, absolute paths; external-facing tone |
52
+ | **Publishable research / ADR** | `docs/research/*` | ✅ git; **not** listed in package `files` | keep/drop decisions, protocol comparisons | privacy-free; reusable contributor guidance |
52
53
  | **Local-only (personal)** | `docs/local/` — investigation, risk and fault-analysis notes (e.g. `docs/local/01-research.md`, `docs/local/05-INVALID_REPLAY_STATE-调查.md`); `reference/` (vendored third-party source) | ❌ in `.gitignore`, never in `files` | concrete fault debugging, internal details, account-risk analysis | reference only; ignored by git by default |
53
54
 
54
55
  **Hard constraints**
55
56
 
56
57
  - `package.json` `files` whitelist contains **only** publishable docs; `docs/` must **not** be added wholesale — any doc shipped with the package is listed explicitly.
57
- - `.gitignore` keeps `docs/local/`, `docs/` and `reference/` ignored. To promote a doc into version control, explicitly `git add -f` after moving it to the root or adopting the naming convention in §2.
58
+ - `.gitignore` keeps `docs/*` ignored except promoted paths (including `docs/research/`). To promote a new numbered doc, add a negation and update this table.
58
59
  - Before adding any doc, ask: *does an unrelated contributor need to see this?* Anything involving personal accounts, hosts, tokens, paths, regional-risk details or internal debugging goes to the local-only layer.
59
60
 
60
61
  ---