dsh-deeppilot 0.5.0 → 0.6.0-alpha.2

package/COMPATIBILITY.md

@@ -7,7 +7,7 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 | Component | Baseline | Evidence |
 |---|---|---|
 | Node.js | 22 or newer | package engine and CI |
-| DSH Host API | 0.1.2 controller family | source-built 0.1.2 Host, paired iOS client, new- and legacy-session history, and `/phone` protocol tests |
+| DSH CLI and Host API | `0.1.2-alpha.2` minimum | published alpha.2 type/build checks, profile install and Host-start smoke test, plus 0.1.2 history and `/phone` protocol tests |
 | Host OS | macOS on Apple silicon | embedded helper artifact and local integration testing |
 | Remote access | Tailscale Funnel, ports 443/8443/10000 | helper and supervisor tests |
 | iOS | native DeepPilot client, protocol v2 | simulator build and v2 pairing/challenge evidence |
@@ -18,10 +18,12 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 - Bearer authentication, URL credentials, and first-frame shared tokens are rejected. A supported client registers a P-256 public key through `/phone/pair` and signs each WebSocket challenge.
 - Without a compatible embedded helper, the core bridge and trusted-LAN mode can still run; remote Funnel reports `unavailable`.
 - If a DSH Host API is missing, only the dependent capability should be disabled. The plugin must not crash the Host.
-- On the tested 0.1.2 Host, the compatibility facade converts the
+- DSH versions older than `0.1.2-alpha.2` are unsupported: they do not expose
+  the controller and client package family required by this plugin.
+- On the tested `0.1.2-alpha.2` Host, the compatibility facade converts the
   current Session controller's raw event arrays into the stable wrapped
   history entries consumed by the phone bridge. Sessions persisted by earlier
-  Hosts can therefore be listed and opened when the 0.1.2 Host's own
+  Hosts can therefore be listed and opened when the alpha.2 Host's own
   persistence reader accepts their log vocabulary. Unsupported persisted
   formats still fail closed in the Host without modifying the original log.
 
@@ -30,7 +32,7 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 - Intel macOS support for the embedded helper;
 - signed/notarized helper distribution;
 - Windows or Linux host validation;
-- repair or migration of persisted history rejected by the `0.1.2`
+- repair or migration of persisted history rejected by the `0.1.2-alpha.2`
   Host's own session reader;
 - every DSH developer-preview revision;
 - physical-device performance and every carrier/network combination;

package/README.md

@@ -31,10 +31,26 @@ Host on your own Mac and does not replace or modify the DSH Web UI.
 
 ## Install from npm
 
-Requirements: Node.js 22+, DSH 0.1.2 with a `web` profile, and macOS. The bundled Funnel
-helper currently supports Apple silicon; trusted-LAN mode does not require it.
+Requirements: Node.js 22+, DSH with a `web` profile, and macOS. The bundled
+Funnel helper currently supports Apple silicon; trusted-LAN mode does not
+require it.
+
+| Plugin version | Required DSH | How to install |
+|---|---|---|
+| `0.6.0-alpha.x` (new, `alpha` tag) | DSH `0.1.2-alpha.2` or newer | `dsh plugin --profile web add dsh-deeppilot@alpha` |
+| `0.5.x` (previous stable, `latest`) | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot` |
+
+The `0.6.0` alpha line is built against the DSH
+[0.1.2-alpha.2](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.2-alpha.2)
+controller and client package family, so it requires DSH `0.1.2-alpha.2` or
+newer (its `alpha` npm dist-tag). Earlier DSH builds do not provide the Host
+APIs required by this plugin. Users who need a DSH release before that must
+stay on the `0.5.x` plugin.
 
 ```sh
+# DSH 0.1.2-alpha.2 or newer (recommended):
+dsh plugin --profile web add dsh-deeppilot@alpha
+# DSH 0.1.1-rc.2 through 0.1.2-alpha.1 (previous stable):
 dsh plugin --profile web add dsh-deeppilot
 dsh web
 ```
@@ -55,6 +71,37 @@ dsh plugin --profile web remove dsh-deeppilot
 Restart DSH after updating. Uninstalling the package does not delete the local
 DeepPilot state under `$DSH_HOME/deeppilot/`.
 
+## Publishing (maintainers)
+
+`0.6.0-alpha.x` targets DSH `0.1.2-alpha.2`+; `0.5.x` stays compatible with
+DSH `0.1.1-rc.2`–`0.1.2-alpha.1`. Keep both published:
+
+1. Bump `version` in `package.json` and in the root `""` entry of
+   `package-lock.json`, then run `npm test && npm run typecheck && npm run build`
+   and inspect `npm pack --dry-run --json` (the check
+   `tests/compatibility-metadata.test.ts` enforces the `^0.1.2-alpha.2` peer
+   ranges).
+2. Commit the release and push it. `npm publish` runs `prepack` (build) and
+   `prepublishOnly` (test + typecheck) automatically.
+3. Publish the alpha line without touching `latest`:
+
+   ```sh
+   npm publish --tag alpha
+   ```
+
+   After a successful publish, `npm view dsh-deeppilot dist-tags --json` shows
+   `"latest": "0.5.x"` and `"alpha": "0.6.0-alpha.x"`. Verify the published
+   package by installing it into a DSH `0.1.2-alpha.2` profile before pointing
+   users at it.
+4. Tag the release commit `v0.6.0-alpha.x` and prepare a GitHub Release
+   (English + 简体中文 notes) that links this README section.
+5. When the alpha graduates to stable, bump to `0.6.0` and publish with
+   `npm publish --tag latest`, which moves `latest` to the new line. Stable
+   releases must never be published with `--tag alpha`.
+
+Never run `npm publish` from a copy that still has the old `0.5.x` version.
+
+
 ## Connection and privacy
 
 Conversation traffic travels directly between the iPhone and your DSH Host.

package/README.zh-CN.md

@@ -29,10 +29,24 @@
 
 ## 从 npm 安装
 
-需要 Node.js 22+、带 `web` profile 的 DSH 0.1.2 与 macOS。内嵌 Funnel helper 目前支持
-Apple silicon；可信局域网模式不依赖 helper。
+需要 Node.js 22+、带 `web` profile 的 DSH，以及 macOS。内嵌 Funnel helper
+目前支持 Apple silicon；可信局域网模式不依赖 helper。
+
+| 插件版本 | 所需 DSH | 安装命令 |
+|---|---|---|
+| `0.6.0-alpha.x`（新版，`alpha` tag） | DSH `0.1.2-alpha.2` 或更高 | `dsh plugin --profile web add dsh-deeppilot@alpha` |
+| `0.5.x`（旧版稳定版，`latest`） | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot` |
+
+`0.6.0` alpha 系列基于 DSH
+[0.1.2-alpha.2](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.2-alpha.2)
+的 controller 与 client 包族构建，因此要求 DSH `0.1.2-alpha.2` 或更高版本
+（对应 npm `alpha` dist-tag）。更早的 DSH 版本不提供本插件依赖的 Host API；
+需要更早 DSH 版本的用户请继续使用 `0.5.x` 插件。
 
 ```sh
+# DSH 0.1.2-alpha.2 或更高（推荐）：
+dsh plugin --profile web add dsh-deeppilot@alpha
+# DSH 0.1.1-rc.2 至 0.1.2-alpha.1（旧版稳定）：
 dsh plugin --profile web add dsh-deeppilot
 dsh web
 ```
@@ -51,6 +65,34 @@ dsh plugin --profile web remove dsh-deeppilot
 
 更新后请重启 DSH。卸载 npm 包不会删除 `$DSH_HOME/deeppilot/` 下的本地数据。
 
+## 发布说明（维护者）
+
+`0.6.0-alpha.x` 面向 DSH `0.1.2-alpha.2`+；`0.5.x` 保持兼容 DSH
+`0.1.1-rc.2`–`0.1.2-alpha.1`，两个版本线都要保持发布：
+
+1. 同步修改 `package.json` 与 `package-lock.json` 根 `""` 条目中的
+   `version`，然后运行 `npm test && npm run typecheck && npm run build`，
+   并检查 `npm pack --dry-run --json`（`tests/compatibility-metadata.test.ts`
+   会强制校验 `^0.1.2-alpha.2` 的 peer 范围）。
+2. 提交发布并推送。`npm publish` 会自动执行 `prepack`（构建）与
+   `prepublishOnly`（测试 + 类型检查）。
+3. 发布 alpha 版本线，不要动 `latest`：
+
+   ```sh
+   npm publish --tag alpha
+   ```
+
+   发布成功后，`npm view dsh-deeppilot dist-tags --json` 应显示
+   `"latest": "0.5.x"` 与 `"alpha": "0.6.0-alpha.x"`。向用户推荐前，请先在
+   DSH `0.1.2-alpha.2` profile 中安装验证发布的包。
+4. 为发布提交打 `v0.6.0-alpha.x` tag，并准备包含英文与简体中文说明的
+   GitHub Release，链接本 README 的发布说明。
+5. alpha 转正时升级到 `0.6.0`，用 `npm publish --tag latest` 发布，使
+   `latest` 切换到新版线。稳定版绝不使用 `--tag alpha` 发布。
+
+绝不要从仍是旧 `0.5.x` 版本的副本执行 `npm publish`。
+
+
 ## 连接与隐私
 
 完整会话流量由 iPhone 直接连接用户自己的 DSH Host。可信局域网中的 `ws://`

package/lib/index.d.ts

@@ -609,7 +609,7 @@ declare const Config: z<Schemastery.ObjectS<{
     maxConnectionsPerSource: z<number, number>;
   }>>;
   push: z<Schemastery.ObjectS<{
-    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
+    provider: z<"apns" | "none" | "relay", "apns" | "none" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -617,7 +617,7 @@ declare const Config: z<Schemastery.ObjectS<{
     relayUrl: z<string, string>;
     relayToken: z<string, string>;
   }>, Schemastery.ObjectT<{
-    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
+    provider: z<"apns" | "none" | "relay", "apns" | "none" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -648,7 +648,7 @@ declare const Config: z<Schemastery.ObjectS<{
     maxConnectionsPerSource: z<number, number>;
   }>>;
   push: z<Schemastery.ObjectS<{
-    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
+    provider: z<"apns" | "none" | "relay", "apns" | "none" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -656,7 +656,7 @@ declare const Config: z<Schemastery.ObjectS<{
     relayUrl: z<string, string>;
     relayToken: z<string, string>;
   }>, Schemastery.ObjectT<{
-    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
+    provider: z<"apns" | "none" | "relay", "apns" | "none" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;

package/lib/index.js

@@ -5,7 +5,6 @@ import { access, chmod, mkdir, readFile, rename, unlink, writeFile } from "node:
 import { dirname, join, resolve } from "node:path";
 import { WebSocketServer } from "ws";
 import { homedir, networkInterfaces } from "node:os";
-import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { connect } from "node:http2";
 import { spawn } from "node:child_process";
@@ -4426,12 +4425,15 @@ function apply(ctx, options) {
 		return normalizeOptions(options);
 	};
 	const enabledNow = () => currentConfig().enabled === true;
-	installSettingsSection(ctx, settingsNamespace("deeppilot"), Config, normalizeOptions(void 0), {
+	const settingsHooks = {
 		setSource: (source) => {
 			liveSource = source;
 			queueMicrotask(() => scheduleRemoteReconcile?.());
 		},
 		onChange: () => queueMicrotask(() => scheduleRemoteReconcile?.())
+	};
+	ctx.inject(["settings"], (settingsCtx) => {
+		settingsCtx.settings.installSection(ctx, "deeppilot", Config, normalizeOptions(void 0), settingsHooks);
 	});
 	if (currentConfig().enabled !== true) log("disabled via settings; bridge stays inactive (rumors of /phone below are skipped)");
 	const dataDir = bridgeDataDir();