dsh-deeppilot 0.2.0

package/COMPATIBILITY.md

@@ -0,0 +1,36 @@
+# Compatibility
+
+This file separates tested evidence from intended fallback behavior. Passing
+unit tests does not prove every DSH build, network, Mac, or iPhone combination.
+
+## Public-beta baseline
+
+| Component | Baseline | Evidence |
+|---|---|---|
+| Node.js | 22 or newer | package engine and CI |
+| DSH packages | `0.1.1-rc.2` peer family | build/type contracts and isolated host smoke tests |
+| Host OS | macOS on Apple silicon | embedded helper artifact and local integration testing |
+| Remote access | Tailscale Funnel, ports 443/8443/10000 | helper and supervisor tests; real-tailnet acceptance remains release-specific |
+| iOS | native DeepPilot client, protocol v1 | simulator build and bridge pairing evidence |
+
+## Expected degradation
+
+- Without a compatible embedded helper, the core bridge and trusted-LAN mode
+  can still run; remote Funnel reports `unavailable`.
+- If a DSH host API is missing, only the dependent capability should be
+  disabled. The plugin must not crash the host.
+- Query-string token authentication is legacy compatibility only. Current
+  clients use Bearer or first-frame authentication.
+
+## Not yet claimed
+
+- Intel macOS support for the embedded helper;
+- signed/notarized helper distribution;
+- Windows or Linux host validation;
+- every DSH developer-preview revision;
+- physical-device performance and every carrier/network combination;
+- production APNs delivery without a real provider credential and device.
+
+When reporting an issue, include `node --version`, the exact DSH package
+version, plugin commit/tag, macOS version and architecture, connection mode,
+and sanitized status output. Never include bearer tokens or message content.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mars-Sea
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/PRIVACY.md

@@ -0,0 +1,64 @@
+# Privacy and data flow
+
+DeepPilot is designed around a direct connection to the DSH Host controlled by
+the user. The plugin does not upload complete conversations to a DeepPilot
+application server.
+
+## Data stored on the Mac
+
+By default, runtime state is stored under `$DSH_HOME/deeppilot/`:
+
+- `auth-token`: the pairing bearer token, mode `0600`;
+- `devices.json`: paired-device identifiers, names, app versions, last-seen
+  timestamps, notification preferences, and APNs registrations;
+- `tailscale/`: local state for the optional embedded `tsnet` node.
+
+The pairing token and full APNs tokens are not rendered in routine logs. The
+settings report exposes only token readiness and masked/fingerprint values
+needed for diagnostics.
+
+## Direct session connection
+
+Projects, session lists, conversation history, prompts, streaming events,
+approvals, questions, and model changes travel over the authenticated
+connection between the iPhone and the user's DSH Host.
+
+- In LAN mode this is direct HTTP/WebSocket traffic and is not encrypted by the
+  plugin. Use a trusted network.
+- In Funnel mode the phone uses HTTPS/WSS through Tailscale Funnel. The helper
+  forwards only `/phone` and `/phone/health` to the local DSH origin.
+
+## Optional offline push
+
+Offline push is optional.
+
+### Direct APNs mode
+
+When `provider: apns` is configured, the user's Mac sends the APNs device token
+and notification payload directly to Apple. The user supplies and controls the
+Apple provider credentials.
+
+### DeepPilot relay mode
+
+When `provider: relay` is active, the plugin sends the following over HTTPS to
+the configured relay:
+
+- a per-bridge relay authorization token;
+- target APNs device token and sandbox/production environment;
+- notification identifier, category, session identifier, title, and a short,
+  truncated notification body.
+
+The body may contain a short assistant reply, session title, approval summary,
+or question text. The relay does not receive complete history, attachments,
+live token streams, prompts that are unrelated to the notification, the local
+pairing token, or the Tailscale node state.
+
+Apple receives the normal APNs alert payload in both modes. Users who do not
+want this disclosure can disable offline push; live WebSocket operation remains
+available.
+
+## Logs
+
+Routine logs contain lifecycle state, delivery outcomes, and masked token
+prefixes. They are designed not to contain pairing tokens or message bodies.
+Frame-level diagnostics are emitted only when `debug` is enabled.

package/README.md

@@ -0,0 +1,97 @@
+# dsh-deeppilot
+
+**English** | [简体中文](./README.zh-CN.md)
+
+[![npm](https://img.shields.io/npm/v/dsh-deeppilot?style=flat-square)](https://www.npmjs.com/package/dsh-deeppilot)
+[![DeepSeek Harness](https://img.shields.io/badge/DeepSeek%20Harness-plugin-4D6BFE?style=flat-square)](https://github.com/deepseek-ai/deepseek-harness)
+[![CI](https://github.com/Mars-Sea/dsh-deeppilot/actions/workflows/ci.yml/badge.svg)](https://github.com/Mars-Sea/dsh-deeppilot/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
+
+The open-source DSH companion plugin for **DeepPilot**, a native iPhone client
+for using DeepSeek Harness remotely. It connects the app directly to the DSH
+Host on your own Mac and does not replace or modify the DSH Web UI.
+
+> DeepPilot is currently in TestFlight review. The invitation link will accept
+> testers after Apple approves the build.
+
+[Join the DeepPilot TestFlight](https://testflight.apple.com/join/JHb4j5DV)
+
+## What you get
+
+- Browse projects, sessions, history, and live agent output from iPhone.
+- Send prompts, switch models, create sessions, and answer approvals/questions.
+- Pair through a QR code with the secret stored on the Mac and in iOS Keychain.
+- Connect over a trusted LAN or the optional embedded Tailscale Funnel.
+- Receive live notifications and optional APNs notifications while offline.
+
+## Install from npm
+
+Requirements: Node.js 22+, a DSH `web` profile, and macOS. The bundled Funnel
+helper currently supports Apple silicon; trusted-LAN mode does not require it.
+
+```sh
+dsh plugin --profile web add dsh-deeppilot
+dsh web
+```
+
+After DSH restarts, open **Settings → DeepPilot**, enable the connection, show
+the pairing QR code, and scan it in the DeepPilot app.
+
+Package: [npmjs.com/package/dsh-deeppilot](https://www.npmjs.com/package/dsh-deeppilot)
+
+## Update or uninstall
+
+```sh
+dsh plugin --profile web update dsh-deeppilot
+dsh plugin --profile web remove dsh-deeppilot
+```
+
+Restart DSH after updating. Uninstalling the package does not delete the local
+DeepPilot state under `$DSH_HOME/deeppilot/`.
+
+## Connection and privacy
+
+Conversation traffic travels directly between the iPhone and your DSH Host.
+Trusted-LAN `ws://` traffic is unencrypted, so use it only on a network you
+trust. Optional Funnel mode exposes only the authenticated DeepPilot connection
+and health endpoints, not the complete DSH Web UI.
+
+Offline push is optional. Relay mode sends only the target APNs device token
+and a limited notification payload; full conversation history and live output
+do not pass through the relay. Read [PRIVACY.md](./PRIVACY.md) and
+[SECURITY.md](./SECURITY.md) before enabling remote access or push.
+
+## Screenshots
+
+Screenshots will be added after the current TestFlight review.
+
+<!-- Add future app screenshots under assets/screenshots/ and replace this note. -->
+
+## Compatibility
+
+See [COMPATIBILITY.md](./COMPATIBILITY.md) for the tested baseline and current
+limitations. DSH is still evolving; include exact DSH and plugin versions when
+reporting an issue.
+
+## Development
+
+```sh
+npm ci
+npm test
+npm run typecheck
+npm run build
+cd helper && go test ./...
+```
+
+## Community and feedback
+
+- [GitHub Issues](https://github.com/Mars-Sea/dsh-deeppilot/issues)
+- [GitHub Releases](https://github.com/Mars-Sea/dsh-deeppilot/releases)
+- [npm package](https://www.npmjs.com/package/dsh-deeppilot)
+
+DeepPilot is an independent community project and is not affiliated with or
+endorsed by DeepSeek.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/README.zh-CN.md

@@ -0,0 +1,91 @@
+# dsh-deeppilot
+
+[English](./README.md) | **简体中文**
+
+[![npm](https://img.shields.io/npm/v/dsh-deeppilot?style=flat-square)](https://www.npmjs.com/package/dsh-deeppilot)
+[![DeepSeek Harness](https://img.shields.io/badge/DeepSeek%20Harness-plugin-4D6BFE?style=flat-square)](https://github.com/deepseek-ai/deepseek-harness)
+[![CI](https://github.com/Mars-Sea/dsh-deeppilot/actions/workflows/ci.yml/badge.svg)](https://github.com/Mars-Sea/dsh-deeppilot/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
+
+**DeepPilot** 的开源 DSH 配套插件。DeepPilot 是一款原生 iPhone 客户端，
+可远程使用 DeepSeek Harness；插件让 App 直接连接用户自己 Mac 上的 DSH Host，
+不会替换或修改 DSH Web UI。
+
+> DeepPilot 目前正在等待 TestFlight 审核。Apple 审核通过后，邀请链接即可加入测试。
+
+[加入 DeepPilot TestFlight](https://testflight.apple.com/join/JHb4j5DV)
+
+## 功能
+
+- 在 iPhone 查看项目、会话、历史记录和 Agent 实时输出；
+- 发送提示词、切换模型、创建会话，并处理审批与提问；
+- 扫描二维码配对，密钥保存在 Mac 与 iOS Keychain；
+- 使用可信局域网，或可选的内嵌 Tailscale Funnel 远程连接；
+- 接收在线通知，以及可选的离线 APNs 推送。
+
+## 从 npm 安装
+
+需要 Node.js 22+、DSH `web` profile 与 macOS。内嵌 Funnel helper 目前支持
+Apple silicon；可信局域网模式不依赖 helper。
+
+```sh
+dsh plugin --profile web add dsh-deeppilot
+dsh web
+```
+
+DSH 重启后，打开 **设置 → DeepPilot**，启用连接并显示配对二维码，然后在
+DeepPilot App 中扫码。
+
+npm 包：[npmjs.com/package/dsh-deeppilot](https://www.npmjs.com/package/dsh-deeppilot)
+
+## 更新或卸载
+
+```sh
+dsh plugin --profile web update dsh-deeppilot
+dsh plugin --profile web remove dsh-deeppilot
+```
+
+更新后请重启 DSH。卸载 npm 包不会删除 `$DSH_HOME/deeppilot/` 下的本地数据。
+
+## 连接与隐私
+
+完整会话流量由 iPhone 直接连接用户自己的 DSH Host。可信局域网中的 `ws://`
+是明文流量，只应在可信网络使用。可选 Funnel 模式只暴露经过认证的 DeepPilot
+连接与健康检查端点，不会暴露完整 DSH Web UI。
+
+离线推送是可选功能。中继模式只发送目标 APNs 设备 Token 和有限的通知内容；
+完整会话历史与实时输出不会经过中继。启用远程访问或推送前，请阅读
+[PRIVACY.md](./PRIVACY.md) 与 [SECURITY.md](./SECURITY.md)。
+
+## App 截图
+
+当前 TestFlight 审核完成后再补充截图。
+
+<!-- 后续将 App 截图放到 assets/screenshots/，并替换本段说明。 -->
+
+## 兼容性
+
+已验证的基线与当前限制见 [COMPATIBILITY.md](./COMPATIBILITY.md)。DSH 仍在快速
+迭代；提交问题时请附上准确的 DSH 与插件版本。
+
+## 开发
+
+```sh
+npm ci
+npm test
+npm run typecheck
+npm run build
+cd helper && go test ./...
+```
+
+## 社区与反馈
+
+- [GitHub Issues](https://github.com/Mars-Sea/dsh-deeppilot/issues)
+- [GitHub Releases](https://github.com/Mars-Sea/dsh-deeppilot/releases)
+- [npm 包](https://www.npmjs.com/package/dsh-deeppilot)
+
+DeepPilot 是独立社区项目，与 DeepSeek 官方无隶属或背书关系。
+
+## 许可证
+
+MIT — 见 [LICENSE](./LICENSE)。

package/SECURITY.md

@@ -0,0 +1,44 @@
+# Security policy
+
+## Supported releases
+
+Until the first stable release, only the latest tagged public-beta release is
+supported. DSH itself is a developer preview, so reports must include the exact
+DSH version, plugin commit or tag, operating system, architecture, and whether
+LAN or Funnel mode was used.
+
+## Reporting a vulnerability
+
+Do not open a public issue containing pairing tokens, APNs device tokens,
+provider keys, relay credentials, private hostnames, conversation content, or
+an unpatched exploit. Use GitHub's private vulnerability reporting for
+`Mars-Sea/dsh-deeppilot` when available. If that channel is unavailable, open a
+minimal public issue requesting a private contact channel without including
+the sensitive details.
+
+## Trust boundaries
+
+- `/phone` and `/phone/health` require the pairing bearer token.
+- New clients authenticate with the `Authorization: Bearer` header or the
+  first WebSocket frame. Query-string tokens exist only for legacy clients.
+- The token is stored with mode `0600` on the Mac and in iOS Keychain.
+- Pairing QR codes contain the bearer secret. Treat screenshots as leaked
+  credentials and rotate the token from the DeepPilot settings page.
+- LAN `ws://` is unencrypted. Use it only on a trusted network.
+- The optional Funnel helper publishes only `/phone` and `/phone/health`, not
+  the complete DSH Web UI.
+- Debug logs may include status and masked identifiers, but must never include
+  pairing tokens or message bodies.
+
+## Release integrity
+
+The public beta includes a prebuilt macOS Apple-silicon helper. Verify it from
+the repository root with:
+
+```bash
+cd bin && shasum -a 256 -c SHA256SUMS
+```
+
+Developer ID signing and notarization are release gates for broad end-user
+distribution. Until those gates are complete, the helper is a public-beta
+artifact and not a production-readiness claim.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,20 @@
+# Third-party notices
+
+The optional embedded `dsh-deeppilot-tunnel` helper is built with
+[`tailscale.com/tsnet`](https://github.com/tailscale/tailscale), distributed
+under the BSD 3-Clause License.
+
+Binary redistributions of the helper include the detected dependency license
+texts under `third_party/licenses/`. That directory is generated from the
+pinned Go module graph with `go-licenses`; it must be regenerated and reviewed
+whenever `helper/go.mod` or `helper/go.sum` changes.
+
+The repository source and license are available at:
+
+- https://github.com/tailscale/tailscale
+- https://github.com/tailscale/tailscale/blob/main/LICENSE
+
+The browser settings bundle uses [`qrcode`](https://github.com/soldair/node-qrcode)
+and its bundled `dijkstrajs` dependency to generate pairing QR codes entirely
+in the local browser. Both are distributed under the MIT License; their texts
+are included under `third_party/licenses/npm/`.

package/bin/SHA256SUMS

@@ -0,0 +1 @@
+98b24ff04b40d2c4f9d6b003e263880e9d85bd235549a3193c014f8fdb4cb493  darwin-arm64/dsh-deeppilot-tunnel

package/cordis.patch.yml

@@ -0,0 +1,20 @@
+# dsh-deeppilot bundle layer.
+# Phone clients cannot interact with a native picker rendered on the Host Mac.
+# Replace dsh-web-app's adaptive picker with the official browse pair while
+# this bundle is composed, so host.listDirectory is available remotely.
+# Removing this bundle restores the lower web-app auto row unchanged.
+- id: directory-picker
+  disabled: true
+
+# The name must be the FULL scoped specifier as installed in the profile's
+# node_modules, quoted so YAML does not treat it as a directive.
+- insert:
+    - id: deeppilot-directory-picker-browse
+      name: "@deepseek-ai/dsh-host-directory-picker-browse"
+
+    - id: deeppilot-directory-picker-browse-client
+      name: "@deepseek-ai/dsh-client-ui-directory-picker-browse"
+
+    - id: deeppilot
+      name: "dsh-deeppilot"
+      config: {}