dsh-deeppilot 0.6.0-alpha.3 → 0.6.0

package/COMPATIBILITY.md

@@ -7,8 +7,8 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 | Component | Baseline | Evidence |
 |---|---|---|
 | Node.js | 22 or newer | package engine and CI |
-| DSH CLI and Host API | `0.1.2-alpha.3` minimum; `0.1.2-alpha.4` verified | clean alpha.3 install and Host-start smoke; isolated alpha.4 type/build plus 167 unit tests; alpha.4 Host-start smoke; `/phone` protocol tests |
-| Host OS | macOS on Apple silicon | embedded helper artifact and local integration testing |
+| DSH CLI and Host API | `0.1.2-rc.1` minimum for plugin `0.6.0-alpha.4` | rc.1 package-family typecheck/build; bridge and `/phone` protocol tests |
+| Host OS | macOS, Linux, Windows on packaged amd64/arm64 helper targets | helper checksums plus user-confirmed Windows/Linux Funnel launch and connection; local LAN validation remains part of alpha testing |
 | Remote access | Tailscale Funnel, ports 443/8443/10000 | helper and supervisor tests |
 | iOS | native DeepPilot client, protocol v2 | simulator build and v2 pairing/challenge evidence |
 
@@ -18,16 +18,12 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 - Bearer authentication, URL credentials, and first-frame shared tokens are rejected. A supported client registers a P-256 public key through `/phone/pair` and signs each WebSocket challenge.
 - Without a compatible embedded helper, the core bridge and trusted-LAN mode can still run; remote Funnel reports `unavailable`.
 - If a DSH Host API is missing, only the dependent capability should be disabled. The plugin must not crash the Host.
-- DSH versions older than `0.1.2-alpha.3` are unsupported: they do not expose
-  the Gateway multi-client Remote Events routing required by this plugin.
-- DSH `0.1.2-alpha.4` keeps the Gateway Remote Events contract used for
-  approvals and questions. Its event-sequence/log-offset refactor changes
-  session internals, but the plugin's stable history facade passes the alpha.4
-  type/build and unit-test baseline.
-- On the alpha.3 package baseline, the compatibility facade converts the
+- Plugin `0.6.0-alpha.4` requires DSH `0.1.2-rc.1` or newer. Older plugin
+  alphas used developer-preview DSH builds and remain historical artifacts.
+- The compatibility facade converts the
   current Session controller's raw event arrays into the stable wrapped
   history entries consumed by the phone bridge. Sessions persisted by earlier
-  Hosts can therefore be listed and opened when the alpha.3 Host's own
+  Hosts can therefore be listed and opened when the rc.1 Host's own
   persistence reader accepts their log vocabulary. Unsupported persisted
   formats still fail closed in the Host without modifying the original log.
 
@@ -35,8 +31,7 @@ This file separates tested evidence from intended behavior. Passing unit tests d
 
 - Intel macOS support for the embedded helper;
 - signed/notarized helper distribution;
-- Windows or Linux host validation;
-- repair or migration of persisted history rejected by the `0.1.2-alpha.3`
+- repair or migration of persisted history rejected by the `0.1.2-rc.1`
   Host's own session reader;
 - every DSH developer-preview revision;
 - physical-device performance and every carrier/network combination;

package/README.md

@@ -31,29 +31,24 @@ Host on your own Mac and does not replace or modify the DSH Web UI.
 
 ## Install from npm
 
-Requirements: Node.js 22+, DSH with a `web` profile, and macOS. The bundled
-Funnel helper currently supports Apple silicon; trusted-LAN mode does not
-require it.
+Requirements: Node.js 22+ and DSH with a `web` profile. The package includes
+Funnel helpers for macOS, Linux, and Windows on amd64/arm64; trusted-LAN mode
+does not require the helper.
 
 | Plugin version | Required DSH | How to install |
 |---|---|---|
-| `0.6.0-alpha.x` (new, `alpha` tag) | DSH `0.1.2-alpha.3` or newer | `dsh plugin --profile web add dsh-deeppilot@alpha` |
+| `0.6.0-alpha.4` (new, `alpha` tag) | DSH `0.1.2-rc.1` or newer | `dsh plugin --profile web add dsh-deeppilot@alpha` |
 | `0.5.x` (previous stable, `latest`) | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot` |
 
-The `0.6.0` alpha line is built against the DSH
-[0.1.2-alpha.3](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.2-alpha.3)
-Host and client package family, so it requires DSH `0.1.2-alpha.3` or newer
-(its `alpha` npm dist-tag). The alpha.3 Gateway provides the multi-client
-Remote Events routing used to keep Web and DeepPilot independently answerable.
-Earlier DSH builds do not provide that routing contract. Users who need a DSH
-release before that must stay on the `0.5.x` plugin.
-
-DSH `0.1.2-alpha.4` is also verified. It retains the same interaction-routing
-contract; see [COMPATIBILITY.md](./COMPATIBILITY.md) for the tested evidence and
-its session-history compatibility note.
+`0.6.0-alpha.4` is built and typechecked against the DSH
+[0.1.2-rc.1](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.2-rc.1)
+Host and client package family. It uses the Gateway multi-client Remote Events
+routing that keeps Web and DeepPilot independently answerable. Earlier plugin
+alphas remain historical artifacts; users installing the current `alpha` tag
+should update DSH to `0.1.2-rc.1` or newer.
 
 ```sh
-# DSH 0.1.2-alpha.3 or newer (recommended):
+# DSH 0.1.2-rc.1 or newer (recommended):
 dsh plugin --profile web add dsh-deeppilot@alpha
 # DSH 0.1.1-rc.2 through 0.1.2-alpha.1 (previous stable):
 dsh plugin --profile web add dsh-deeppilot
@@ -64,6 +59,11 @@ After DSH restarts, open **Settings → DeepPilot**, enable the connection, show
 the pairing QR code, and scan it in the DeepPilot app. The same panel also
 shows a copyable pairing code for Simulator or manual entry.
 
+LAN access is enabled by default on the plugin's independent TCP port `3098`.
+DSH may continue listening only on `127.0.0.1:3080`; do not expose the full DSH
+web server. If a firewall is enabled, allow inbound TCP `3098` on trusted
+private networks. The port can be changed under **Advanced settings**.
+
 Package: [npmjs.com/package/dsh-deeppilot](https://www.npmjs.com/package/dsh-deeppilot)
 
 ## Update or uninstall
@@ -78,13 +78,13 @@ DeepPilot state under `$DSH_HOME/deeppilot/`.
 
 ## Publishing (maintainers)
 
-`0.6.0-alpha.x` targets DSH `0.1.2-alpha.3`+; `0.5.x` stays compatible with
+`0.6.0-alpha.4` targets DSH `0.1.2-rc.1`+; `0.5.x` stays compatible with
 DSH `0.1.1-rc.2`–`0.1.2-alpha.1`. Keep both published:
 
 1. Bump `version` in `package.json` and in the root `""` entry of
    `package-lock.json`, then run `npm test && npm run typecheck && npm run build`
    and inspect `npm pack --dry-run --json` (the check
-   `tests/compatibility-metadata.test.ts` enforces the `^0.1.2-alpha.3` peer
+   `tests/compatibility-metadata.test.ts` enforces the `^0.1.2-rc.1` peer
    ranges).
 2. Commit the release and push it. `npm publish` runs `prepack` (build) and
    `prepublishOnly` (test + typecheck) automatically.
@@ -96,7 +96,7 @@ DSH `0.1.1-rc.2`–`0.1.2-alpha.1`. Keep both published:
 
    After a successful publish, `npm view dsh-deeppilot dist-tags --json` shows
    `"latest": "0.5.x"` and `"alpha": "0.6.0-alpha.x"`. Verify the published
-   package by installing it into a DSH `0.1.2-alpha.3` profile before pointing
+   package by installing it into a DSH `0.1.2-rc.1` profile before pointing
    users at it.
 4. Tag the release commit `v0.6.0-alpha.x` and prepare a GitHub Release
    (English + 简体中文 notes) that links this README section.
@@ -110,9 +110,10 @@ Never run `npm publish` from a copy that still has the old `0.5.x` version.
 ## Connection and privacy
 
 Conversation traffic travels directly between the iPhone and your DSH Host.
-Trusted-LAN `ws://` traffic is unencrypted, so use it only on a network you
-trust. Optional Funnel mode exposes only the DeepPilot connection, one-time
-pairing, and health endpoints, not the complete DSH Web UI.
+Trusted-LAN `ws://` traffic on the independent plugin port `3098` is
+unencrypted, so use it only on a network you trust. Both the LAN listener and
+optional Funnel mode expose only the DeepPilot connection, one-time pairing,
+and health endpoints, not the complete DSH Web UI.
 
 The DeepPilot settings page exposes **Connections per public source** under
 the collapsed **Advanced settings** section. It defaults to `8`, accepts

package/README.zh-CN.md

@@ -29,26 +29,22 @@
 
 ## 从 npm 安装
 
-需要 Node.js 22+、带 `web` profile 的 DSH，以及 macOS。内嵌 Funnel helper
-目前支持 Apple silicon；可信局域网模式不依赖 helper。
+需要 Node.js 22+ 和带 `web` profile 的 DSH。npm 包内置 macOS、Linux、Windows
+的 amd64/arm64 Funnel helper；可信局域网模式不依赖 helper。
 
 | 插件版本 | 所需 DSH | 安装命令 |
 |---|---|---|
-| `0.6.0-alpha.x`（新版，`alpha` tag） | DSH `0.1.2-alpha.3` 或更高 | `dsh plugin --profile web add dsh-deeppilot@alpha` |
+| `0.6.0-alpha.4`（新版，`alpha` tag） | DSH `0.1.2-rc.1` 或更高 | `dsh plugin --profile web add dsh-deeppilot@alpha` |
 | `0.5.x`（旧版稳定版，`latest`） | DSH `0.1.1-rc.2`–`0.1.2-alpha.1` | `dsh plugin --profile web add dsh-deeppilot` |
 
-`0.6.0` alpha 系列基于 DSH
-[0.1.2-alpha.3](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.2-alpha.3)
-的 Host 与 client 包族构建，因此要求 DSH `0.1.2-alpha.3` 或更高版本（对应
-npm `alpha` dist-tag）。alpha.3 Gateway 提供多 Client Remote Events 路由，
-使 Web 与 DeepPilot 能独立接收并处理同一交互。更早版本没有这项路由契约；
-需要更早 DSH 版本的用户请继续使用 `0.5.x` 插件。
-
-DSH `0.1.2-alpha.4` 也已验证，交互路由契约保持不变；测试证据和会话历史兼容性
-说明见 [COMPATIBILITY.md](./COMPATIBILITY.md)。
+`0.6.0-alpha.4` 基于 DSH
+[0.1.2-rc.1](https://www.npmjs.com/package/@deepseek-ai/dsh/v/0.1.2-rc.1)
+的 Host 与 client 包族构建并完成类型检查。它使用 Gateway 多 Client Remote Events
+路由，使 Web 与 DeepPilot 能独立处理同一交互。旧 alpha 仅保留为历史产物；安装
+当前 `alpha` tag 的用户应先把 DSH 更新到 `0.1.2-rc.1` 或更高版本。
 
 ```sh
-# DSH 0.1.2-alpha.3 或更高（推荐）：
+# DSH 0.1.2-rc.1 或更高（推荐）：
 dsh plugin --profile web add dsh-deeppilot@alpha
 # DSH 0.1.1-rc.2 至 0.1.2-alpha.1（旧版稳定）：
 dsh plugin --profile web add dsh-deeppilot
@@ -58,6 +54,10 @@ dsh web
 DSH 重启后，打开 **设置 → DeepPilot**，启用连接并显示配对二维码，然后在
 DeepPilot App 中扫码。同一面板也会显示可复制的配对码，供模拟器或手动输入使用。
 
+局域网连接默认使用插件独立的 TCP `3098` 端口。DSH 可以继续只监听
+`127.0.0.1:3080`，无需向局域网暴露完整 DSH Web 服务。启用系统防火墙时，请仅在
+可信私有网络放行入站 TCP `3098`；端口可在“高级设置”中修改。
+
 npm 包：[npmjs.com/package/dsh-deeppilot](https://www.npmjs.com/package/dsh-deeppilot)
 
 ## 更新或卸载
@@ -71,13 +71,13 @@ dsh plugin --profile web remove dsh-deeppilot
 
 ## 发布说明（维护者）
 
-`0.6.0-alpha.x` 面向 DSH `0.1.2-alpha.3`+；`0.5.x` 保持兼容 DSH
+`0.6.0-alpha.4` 面向 DSH `0.1.2-rc.1`+；`0.5.x` 保持兼容 DSH
 `0.1.1-rc.2`–`0.1.2-alpha.1`，两个版本线都要保持发布：
 
 1. 同步修改 `package.json` 与 `package-lock.json` 根 `""` 条目中的
    `version`，然后运行 `npm test && npm run typecheck && npm run build`，
    并检查 `npm pack --dry-run --json`（`tests/compatibility-metadata.test.ts`
-   会强制校验 `^0.1.2-alpha.3` 的 peer 范围）。
+   会强制校验 `^0.1.2-rc.1` 的 peer 范围）。
 2. 提交发布并推送。`npm publish` 会自动执行 `prepack`（构建）与
    `prepublishOnly`（测试 + 类型检查）。
 3. 发布 alpha 版本线，不要动 `latest`：
@@ -88,7 +88,7 @@ dsh plugin --profile web remove dsh-deeppilot
 
    发布成功后，`npm view dsh-deeppilot dist-tags --json` 应显示
    `"latest": "0.5.x"` 与 `"alpha": "0.6.0-alpha.x"`。向用户推荐前，请先在
-   DSH `0.1.2-alpha.3` profile 中安装验证发布的包。
+   DSH `0.1.2-rc.1` profile 中安装验证发布的包。
 4. 为发布提交打 `v0.6.0-alpha.x` tag，并准备包含英文与简体中文说明的
    GitHub Release，链接本 README 的发布说明。
 5. alpha 转正时升级到 `0.6.0`，用 `npm publish --tag latest` 发布，使
@@ -99,9 +99,10 @@ dsh plugin --profile web remove dsh-deeppilot
 
 ## 连接与隐私
 
-完整会话流量由 iPhone 直接连接用户自己的 DSH Host。可信局域网中的 `ws://`
-是明文流量，只应在可信网络使用。可选 Funnel 模式只暴露经过认证的 DeepPilot
-连接、单次配对与健康检查端点，不会暴露完整 DSH Web UI。
+完整会话流量由 iPhone 直接连接用户自己的 DSH Host。插件独立 `3098` 端口上的
+可信局域网 `ws://` 是明文流量，只应在可信网络使用。局域网监听器和可选 Funnel
+模式都只暴露经过认证的 DeepPilot 连接、单次配对与健康检查端点，不会暴露完整
+DSH Web UI。
 
 DeepPilot 设置页在默认折叠的“高级设置”中提供“每个公网来源的连接上限”，默认
 `8`，可设置为 `1`–`16`。修改后 Funnel helper 会短暂重启，已连接的远程客户端

package/SECURITY.md

@@ -17,8 +17,8 @@ Do not open a public issue containing pairing codes, APNs device tokens, provide
 - Protocol v1, shared Bearer tokens, query credentials, and `c2s.hello.auth` are not accepted. There is no remote downgrade switch.
 - The server enforces explicit protocol scopes, while the normal settings UI grants the default scope set and exposes only the global connection switch plus per-device deletion. Deleting a device disconnects it immediately.
 - The canonical `$DSH_HOME/deeppilot` directory is repaired to mode `0700`. `host-id` and `devices-v2.json` are owner-only.
-- LAN `ws://` is unencrypted. Use it only on a trusted network. Public access should use Funnel HTTPS/WSS.
-- The Funnel helper publishes only `/phone`, `/phone/pair`, and `/phone/health`, never the complete DSH Web UI.
+- LAN `ws://` on the independent plugin port (default `3098`) is unencrypted. Use it only on a trusted network and never forward that port to the public Internet. Public access should use Funnel HTTPS/WSS.
+- The LAN listener and Funnel helper publish only `/phone`, `/phone/pair`, and `/phone/health`, never the complete DSH Web UI.
 - Logs must never include pairing codes, key material, APNs tokens, or message bodies.
 
 ## Online attack controls

package/bin/SHA256SUMS

@@ -1,6 +1,6 @@
-fd5187c9a2fd49de79cfa63287ef18aa46a2b6a051be9201164fd1b3e82a7994  ./darwin-amd64/dsh-deeppilot-tunnel
-c4a879e8f366421c817d3d87836db9352d6d5d2b8cf0c818ccdb228e3329a7ab  ./darwin-arm64/dsh-deeppilot-tunnel
-a937fa8ff3c9a8f6052bb0241f98dcaf0d7ea1d1694a8a5593320764c61e4b24  ./linux-amd64/dsh-deeppilot-tunnel
-6ccf147ab7886796d5932e761b573f93f44bd5644a553cb0f2f4b24749692eac  ./linux-arm64/dsh-deeppilot-tunnel
-9c574dfe6a988130b5d6d69670e6f806c378b603af6814ce0c4f152fafa94b2a  ./windows-amd64/dsh-deeppilot-tunnel.exe
-13f09ac30f71473578ab04c5ab23fc57e5bd0e69d36b782e6261acadf464940c  ./windows-arm64/dsh-deeppilot-tunnel.exe
+69f2d9793f750ca68863eae0aaf40a2c670ed52579349e907c213529754356de  ./darwin-amd64/dsh-deeppilot-tunnel
+f9fe205fb8d97684ddb9350e02cb766ffb53e8610a3c5dfce0d265872ac6a8b3  ./darwin-arm64/dsh-deeppilot-tunnel
+d5c97703970e595a4f341fb446fa3337f87fefbf766ab81aea12d983318b98c1  ./linux-amd64/dsh-deeppilot-tunnel
+f1eb837e02eb9ee63801d12be9df45351a895963b9f635079eb2287a7f59954a  ./linux-arm64/dsh-deeppilot-tunnel
+88cca9341aa9f87215c0de2ebb69d0971bc4fa39548df332a000c63560c830f2  ./windows-amd64/dsh-deeppilot-tunnel.exe
+5b81075d986fd387192084f916964d2c4a51ca494ce331e0346a8a75fc3e7b8d  ./windows-arm64/dsh-deeppilot-tunnel.exe