dsh-deeppilot 0.9.5 → 0.9.6

package/COMPATIBILITY.md

@@ -1,11 +1,12 @@
 # Compatibility
 
-This branch targets exactly **two DSH releases**: `0.2.0-rc.2`, which the npm
-`latest`/`next` channels point at, and `0.2.1-alpha.3`, which the `alpha` channel
-points at. Both are named in `peerDependencies`; no other version is accepted.
-DSH evaluates that range before composing a profile — on every start, not only on
+This branch targets exactly **three DSH releases**: `0.2.0-rc.2`, which the npm
+`latest`/`next` channels point at, and `0.2.1-alpha.3` and `0.2.1-alpha.4`, which
+the `alpha` channel has pointed at in turn. All three are named in both
+`engines.dsh` and `peerDependencies`; no other version is accepted. DSH evaluates
+that declaration before composing a profile — on every start, not only on
 install — so a newly published DSH release deactivates this plugin until the
-range is widened deliberately. That is the intended trade: a plugin that cannot
+list is widened deliberately. That is the intended trade: a plugin that cannot
 run on an unaudited host fails visibly instead of misbehaving quietly. The
 decision and the reversal it represents are recorded in
 [`docs/决策记录.md`](./docs/决策记录.md) (章节一), with the supporting audit in
@@ -18,7 +19,7 @@ is covered by the isolated compose and live-runs recorded in the release memory.
 | Component | Current contract | Evidence |
 |---|---|---|
 | Node.js | 22 or newer | Package engine and CI |
-| DSH CLI and Host API | `0.2.0-rc.2 \|\| 0.2.1-alpha.3` (dev pins `0.2.0-rc.2`) | Peer metadata, source typecheck, unit tests, bundle build, and config schema projection against a real 0.2.0-rc.2 CLI, plus isolated composes and live phone-protocol runs with the published 0.2.1-alpha.2 and 0.2.1-alpha.3 CLIs |
+| DSH CLI and Host API | `engines.dsh` and `peerDependencies` both name `0.2.0-rc.2 \|\| 0.2.1-alpha.3 \|\| 0.2.1-alpha.4` (dev pins `0.2.0-rc.2`) | Peer metadata, source typecheck, unit tests, bundle build, and config schema projection against a real 0.2.0-rc.2 CLI, plus isolated composes and live phone-protocol runs with the published 0.2.1-alpha.2, 0.2.1-alpha.3, and 0.2.1-alpha.4 CLIs |
 | iOS bridge | DeepPilot protocol v2 | Bridge protocol tests; device behavior must be checked with the running Host and app |
 | Remote access | Tailscale Funnel on ports 443, 8443, or 10000 | Helper and supervisor tests |
 
@@ -70,6 +71,34 @@ carries the old top-level `debug: true` is accepted but that value is ignored:
 verbose logging must be turned on again from the settings page. No other config
 field changed shape, and the old key is not read anywhere in this version.
 
+## 0.2.1-alpha.4 audit outcome
+
+The source-level audit of `dsh-v0.2.1-alpha.4` against `dsh-v0.2.1-alpha.3` found
+no runtime break and one deliberate activation break. Of the ten peer packages,
+**eight have byte-identical `lib/` trees** — including `dsh-api-gateway` and the
+three Client faces the resident interaction client loads — so every alpha.3 fix
+still holds unchanged. Only `dsh-api-remotes` changed in code: one additive
+Remote Events entry (`plugin-market/changed`) and the rename of
+`IncompatiblePlugin.peers` to `requirements`, a field this plugin never reads.
+Two packages appear for the first time — `dsh-plugin-market` and
+`dsh-experimental-plugin-market-bundle` — behind the release's custom plugin
+index sources; neither is a dependency of this plugin.
+
+The activation break is the release's own stated migration: DSH now evaluates a
+plugin's `engines.dsh` range **alone**, ignoring `peerDependencies` entirely
+whenever that field is present. A package that declares no `engines.dsh` — as
+this one did — keeps the older peer evaluation, so the previously exact peer
+list rejected `0.2.1-alpha.4` and the plugin would not have activated on it.
+Both declarations now name the same three releases. The audit reproduced that
+refusal against the published `evaluatePluginCompatibility` of both hosts before
+changing anything, and the same harness confirms the three audited hosts pass
+while `0.2.1-alpha.2`, `0.2.1-alpha.5`, `0.2.1`, and `0.3.0` still fail.
+
+Nothing else moved. Protocol v2, pairing state, and device records are untouched,
+so no paired phone needs to re-pair, and the vendor peers need no widening: both
+hosts still vendor `cordis 4.0.5-alpha.2` and `schemastery 3.18.5-alpha.2`, which
+the existing ranges already admit.
+
 ## 0.2.1-alpha.3 audit outcome
 
 The source-level audit of `dsh-v0.2.1-alpha.3` against `dsh-v0.2.1-alpha.2`
@@ -146,6 +175,8 @@ needs a documentation update, not a peer-range widening.
 > versions actually audited, `0.2.0-rc.2` and `0.2.1-alpha.3`; see the
 > 0.2.1-alpha.3 outcome above and `docs/决策记录.md` (章节一). The paragraphs in
 > this historical entry describe the policy as it stood on 2026-09-29.
+> `0.2.1-alpha.4` was added the next day by the same deliberate audit step, and
+> the list now lives in `engines.dsh` as well as in `peerDependencies`.
 
 ## 0.2.0-rc.1 audit outcome
 

package/README.md

@@ -32,15 +32,17 @@ Host on your own computer and does not replace or modify the DSH Web UI.
 
 ## Install from npm
 
-This source checkout targets Node.js 22+ and the two DSH releases it has been
-audited against — `0.2.0-rc.2` (the `latest`/`next` channels) and `0.2.1-alpha.3`
-(the `alpha` channel) — with a `web` profile. DSH checks a plugin's declared peer
-range before composing a profile, on every start rather than only on install, so
-any other host version refuses to activate this plugin. The package includes
-Funnel helpers for macOS, Linux, and Windows on amd64/arm64; trusted-LAN mode
-does not require the helper.
-
-The current working tree names exactly those two versions in
+This source checkout targets Node.js 22+ and the three DSH releases it has been
+audited against — `0.2.0-rc.2` (the `latest`/`next` channels) and the `alpha`
+channel releases `0.2.1-alpha.3` and `0.2.1-alpha.4` — with a `web` profile. DSH
+checks a plugin's declared requirements before composing a profile, on every
+start rather than only on install, so any other host version refuses to activate
+this plugin. From DSH `0.2.1-alpha.4` on, that check reads `engines.dsh` and
+ignores `peerDependencies`; older hosts know only the peer range, so both name
+the same three releases. The package includes Funnel helpers for macOS, Linux,
+and Windows on amd64/arm64; trusted-LAN mode does not require the helper.
+
+The current working tree names exactly those three versions in `engines.dsh` and
 `peerDependencies` and is built/typechecked against `0.2.0-rc.2`. A previously
 published plugin package may still carry its own older compatibility
 declaration until a release is made from this tree.

package/README.zh-CN.md

@@ -30,15 +30,18 @@
 
 ## 从 npm 安装
 
-当前源码面向 Node.js 22+ 与带 `web` profile 的**两个已审计 DSH 版本**：
-`0.2.0-rc.2`（`latest`/`next` 通道）与 `0.2.1-alpha.3`（`alpha` 通道）。
-DSH 在组合 profile 前会校验插件声明的 peer 范围，且**每次启动都会校验**（不只是
-安装时），因此其他宿主版本会拒绝激活本插件。npm 包内置 macOS、Linux、Windows
-的 amd64/arm64 Funnel helper；可信局域网模式不依赖 helper。
-
-当前工作树的 `peerDependencies` 精确列出这两个版本，构建与类型检查针对
-`0.2.0-rc.2`。从此工作树发布新版本前，已发布的旧插件包仍可能带有各自旧的
-兼容声明。
+当前源码面向 Node.js 22+ 与带 `web` profile 的**三个已审计 DSH 版本**：
+`0.2.0-rc.2`（`latest`/`next` 通道），以及 `alpha` 通道的 `0.2.1-alpha.3`
+与 `0.2.1-alpha.4`。DSH 在组合 profile 前会校验插件声明的兼容要求，且
+**每次启动都会校验**（不只是安装时），因此其他宿主版本会拒绝激活本插件。
+从 DSH `0.2.1-alpha.4` 起，该校验只读 `engines.dsh` 并忽略
+`peerDependencies`；更早的宿主只认 peer 范围，因此两处列出同一组三个版本。
+npm 包内置 macOS、Linux、Windows 的 amd64/arm64 Funnel helper；可信局域网
+模式不依赖 helper。
+
+当前工作树的 `engines.dsh` 与 `peerDependencies` 精确列出这三个版本，构建与
+类型检查针对 `0.2.0-rc.2`。从此工作树发布新版本前，已发布的旧插件包仍可能
+带有各自旧的兼容声明。
 
 ```sh
 dsh plugin --profile web add dsh-deeppilot

package/docs/DSH_RELEASE_MEMORY.md

@@ -3,7 +3,71 @@
 > This is the durable audit record for DeepPilot's public DSH plugin. Re-audit
 > the next DSH release instead of assuming that an rc upgrade is runtime-safe.
 
-## Current decision
+## Current decision — `dsh-v0.2.1-alpha.4`
+
+- **Audited release:** `dsh-v0.2.1-alpha.4` (official release page:
+  <https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-alpha.4>),
+  published to npm 2026-10-15T13:08:08Z on the `alpha` dist-tag. It is **not**
+  `latest`; `latest`/`next` still point at `0.2.0-rc.2`, exactly as at alpha.3.
+- **Comparison baseline:** `dsh-v0.2.1-alpha.3` (the previous audited tag).
+- **Plugin runtime verdict: no break, and no `src/` change was needed.** Eight of
+  the ten peer packages ship a byte-identical `lib/` tree; only their
+  `package.json` `version` fields moved. That set includes `dsh-api-gateway`,
+  where alpha.3's first two breaks lived, and all three Client faces the resident
+  interaction client loads (`dsh-typert-registry/client`,
+  `dsh-client-connection/client`, `dsh-api-gateway/client`). Every alpha.3 fix
+  therefore still holds unchanged.
+- **Only `dsh-api-remotes` changed in code, additively.** One new Remote Events
+  entry (`plugin-market/changed`) and the rename of `IncompatiblePlugin.peers` to
+  `requirements`. The plugin reads neither: it subscribes to no Remote Events
+  entry of that name, and its own phone-wire frame registry is a separate
+  vocabulary from DSH Remote Events. Its `lib/client.js` shows a 750-line diff
+  that normalises to zero contract changes — the bulk is `TYPERT_REMOTE$N`
+  renumbering plus `sourceLocation` line drift from the one inserted remote.
+- **Two packages exist for the first time** — `@deepseek-ai/dsh-plugin-market`
+  and `@deepseek-ai/dsh-experimental-plugin-market-bundle` — behind this
+  release's custom plugin index sources. Neither is a dependency of this plugin,
+  the plugin does not name either in `inject`, and the bundle is a purely
+  additive entry in `dsh-app-boot`'s default bundle list.
+- **Activation verdict: one break, and it is the release's own stated
+  migration.** alpha.4 changed the compatibility rule so that a plugin's own
+  `engines.dsh` range **decides alone and `peerDependencies` are ignored**
+  whenever that field is present; only a manifest without `engines.dsh` falls
+  back to the old peer evaluation. This plugin declared no `engines.dsh`, so it
+  kept the peer path, and its exact two-version peer list rejected
+  `0.2.1-alpha.4` — the plugin would not have activated on that host.
+- **Evidence: reproduced against the published bundles, not inferred.** The audit
+  ran each host's own published `evaluatePluginCompatibility` (alpha.3 and
+  alpha.4 installed into separate isolated directories) against this plugin's
+  real `package.json`, over one candidate list. Before any edit, both hosts
+  admitted `0.2.0-rc.2` and `0.2.1-alpha.3` and both refused `0.2.1-alpha.4`,
+  reporting all ten peers unmet. With the new `engines.dsh` range in place, both
+  hosts admit all three audited releases; alpha.4 reports a **single**
+  `engines.dsh` requirement instead of ten peers when it refuses; and
+  `0.2.1-alpha.2`, `0.2.1-alpha.5`, `0.2.1`, and `0.3.0` are still refused.
+  alpha.3 ignores `engines.dsh` entirely — the field did not exist yet — and
+  keeps deciding on `peerDependencies`, which is why both declarations must name
+  the same list.
+- **Install verdict: the two declarations now agree.** `engines.dsh` and all ten
+  `@deepseek-ai/dsh*` peers name `0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4`,
+  mirrored in `tests/compatibility-metadata.test.ts`, `package-lock.json`, both
+  READMEs, `COMPATIBILITY.md`, `AGENTS.md`, and the local `docs/决策记录.md`
+  (章节一, 条目3). The dev pins and `DSH_BASELINE` stay at the exact
+  `0.2.0-rc.2` this branch builds and typechecks against.
+- **Vendor peers need no widening.** Both hosts still vendor `cordis
+  4.0.5-alpha.2` and `schemastery 3.18.5-alpha.2`; neither package published a
+  `dsh-0-2-1-alpha-4` dist-tag, and the existing `~4.0.5-alpha.1` /
+  `~3.18.5-alpha.1` ranges already admit them.
+- **Protocol verdict: no phone-protocol change.** Protocol v2, pairing state, and
+  device records are untouched by this release; no phone needs to re-pair.
+- **Unrelated to this plugin, recorded for completeness:** the release also
+  brought per-model reasoning levels for custom API models, discovery and
+  installation from custom plugin index sources, a command/argument input fix, an
+  Office file delivery change, a Developer Tools reload fix, lower Linux command
+  startup overhead, and failed-command status reporting. None of them touches a
+  surface this plugin calls.
+
+### Previous decision — `dsh-v0.2.1-alpha.3`
 
 - **Audited release:** `dsh-v0.2.1-alpha.3` (official release page:
   <https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-alpha.3>),
@@ -115,17 +179,36 @@
 
 ### Plugin release verdicts
 
-- **Release candidate (`0.9.5`, 2026-10-15):** carries the alpha.3 Peer/client
-  compatibility repair, the exact two-host peer policy, cross-language auth
-  vectors and recovery guidance, and the manual OIDC/provenance workflow.
-  The package and both lockfile version entries are `0.9.5`; the apply baseline
-  records that version. Clean install, 562 passing unit tests (zero failures,
-  one existing TODO), typecheck, build, the real pinned-host schema loader,
-  Go tests, all six helper checksums, and package inspection pass locally.
-  The altered-challenge test now mutates the challenge from its own socket,
-  eliminating the timestamp collision, and passes 20 consecutive focused runs.
-  Registry/provenance and clean published-profile checks remain release gates;
-  no physical-iPhone validation is claimed. Notes: `docs/RELEASE_NOTES-0.9.5.md`.
+- **发布结论（`0.9.5`，2026-10-15，`v0.9.5` @ `6517ad7`）：** 包含 alpha.3
+  对端（Peer）与客户端兼容修复、两个宿主精确列举策略、跨语言认证向量与恢复说明，
+  以及手动 OIDC 身份认证与来源证明发布。包与锁文件两处根版本、基线快照一致。
+  - **发布前验证：** 干净依赖安装；562 项单元测试通过、零失败、一项既有待办；
+    类型检查、构建、固定宿主的真实配置模型加载、Go 测试、六个辅助程序校验和与
+    包内容检查通过。挑战篡改测试基于当前连接生成变更值，消除了时间碰撞，连续
+    20 次重点回归通过。发布提交的持续集成（CI）和 CodeQL 代码安全扫描通过。
+  - **注册表与来源证明：** npm 于 `2026-10-14T23:29:29.605Z` 发布该版本，
+    `latest`（稳定分发标签）指向 `0.9.5`。下载压缩包共 50,934,088 字节，
+    SHA1 `6a2f356efa1e48849d9bf713f88cd0fd67c7999c` 与工作流上传记录一致；
+    SHA512 与注册表及来源证明中的包摘要一致。来源证明精确对应 `v0.9.5`、
+    `6517ad7b6d7022afc9b3d81d6779b434282c9c56` 和 `.github/workflows/publish.yml`。
+    `npm audit signatures`（npm 签名审计）通过，包含本插件的注册表签名和来源证明；
+    npm 可信发布者绑定显示 `Valid`（有效）。压缩包发布不依赖可选的 `gitHead`
+    字段来确认源码，使用已验证签名的来源证明提交。
+  - **已发布包安装：** 两个独立的新 DSH 主目录分别使用 `0.2.0-rc.2` 与
+    `0.2.1-alpha.3`，从注册表执行 `dsh plugin --profile verify add dsh-deeppilot@0.9.5`。
+    三条插件配置组合成功，版本为 `0.9.5`，安装路径未引用源码工作区，六个辅助程序
+    校验和全部一致；实际配置模型导入未出现本插件相关错误。两个 Web 模板仍各有
+    四项宿主配置模型错误，与未安装插件的基线完全一致；不把整个模板核对说成全绿。
+  - **真实宿主边界：** 隔离的 alpha.3 冒烟检查为 24 项通过、1 项失败、3 项跳过。
+    失败项是未配置模型账号的全新主目录中，模型目录非空的断言；模型目录 RPC 正常
+    且可路由。模型切换、真实提问和模型触发的审批问答未验证，iPhone 真机未验证。
+    已认证连接重复提交认证证明的既有待办保留。
+  - **发布后缓存核对修正：** [首次发布运行](https://github.com/Mars-Sea/dsh-deeppilot/actions/runs/38653869533)
+    上传成功，末尾核对短暂命中缓存的 404 而失败。独立注册表、摘要、签名及安装
+    核验通过后才公开 [GitHub 发布页](https://github.com/Mars-Sea/dsh-deeppilot/releases/tag/v0.9.5)。
+    后续仓库修正为刷新查询、要求元数据重新校验并最多读取重试 12 次；修正后的
+    只读核对步骤已对真实注册表执行通过。未重跑上传、未修改已发布包或移动版本标签。
+    发布说明：`docs/RELEASE_NOTES-0.9.5.md`。
 
 - **Release verdict (`0.9.4`, published 2026-10-10, tag `v0.9.4` @ `e2f77af`):**
   carries the `projections` adapter fix and the Automation tasks documentation
@@ -306,6 +389,137 @@
   bundle" below. The plugin needs no code change; the phone's copy now points
   at the bundle.
 
+## 2026-10-15 — audit of `dsh-v0.2.1-alpha.4`
+
+`dsh-v0.2.1-alpha.4` reached npm on 2026-10-15T13:08:08Z, roughly 24 hours after
+alpha.3, with the GitHub release following at 13:40:02Z. It is a small release —
+two features, five fixes, and one compatibility-policy change — and
+`latest`/`next` still point at `0.2.0-rc.2`.
+
+### Method
+
+This audit established the change surface from **released artifacts before
+reading any source**, rather than from the release notes, because those notes are
+under 2 KB and all four of alpha.3's breaks had been invisible in its notes.
+Every `@deepseek-ai/dsh*` peer package was fetched from npm at both
+`0.2.1-alpha.3` and `0.2.1-alpha.4`, unpacked into a scratch tree, and compared
+file by file. The one large diff was then re-compared after normalising
+`TYPERT_REMOTE$N` renumbering and `sourceLocation` line/column drift, so that
+mechanical churn could not hide a contract change.
+
+### Change surface
+
+- **Eight of the ten peer packages carry a byte-identical `lib/` tree**:
+  `dsh-api-gateway`, `dsh-client-connection`, `dsh-client-locale`,
+  `dsh-client-ui-settings`, `dsh-client-ui-slots`, `dsh-settings`,
+  `dsh-typert-protocol`, `dsh-typert-registry`. Only their `package.json`
+  `version` fields moved. That set includes every module alpha.3 broke the
+  plugin through.
+- **`dsh-api-remotes`** gained one Remote Events entry (`plugin-market/changed`),
+  renamed `IncompatiblePlugin.peers` to `requirements`, and added a
+  `pluginMarket` remote. Its `lib/client.js` diff spans 750 lines but normalises
+  to zero contract changes — `TYPERT_REMOTE$N` renumbering, `sourceLocation`
+  drift, and one rewritten `productAnalytics/report` description.
+- **`dsh-app-boot`** rewrote the compatibility evaluator (below) and appended
+  `@deepseek-ai/dsh-experimental-plugin-market-bundle` to its default bundle
+  list, which is additive to `DEFAULT_BUNDLES`.
+- **`dsh-plugin-manager`** carried the same `peers` → `requirements` rename
+  through `IncompatiblePlugin` and its diagnostics.
+- **Two packages are new at this release**: `@deepseek-ai/dsh-plugin-market` and
+  `@deepseek-ai/dsh-experimental-plugin-market-bundle`. Neither resolves at
+  alpha.3. Neither is a dependency of this plugin, and neither appears in its
+  `inject`.
+- The `dsh` CLI's own ten `@deepseek-ai/dsh*` dependencies all moved to alpha.4;
+  the vendor pins did **not** move. Both hosts still vendor `cordis
+  4.0.5-alpha.2` and `schemastery 3.18.5-alpha.2`, and neither vendor published a
+  `dsh-0-2-1-alpha-4` dist-tag, so the existing `~4.0.5-alpha.1` /
+  `~3.18.5-alpha.1` ranges already admit what both hosts ship.
+
+### The one break: `engines.dsh` now decides alone
+
+`dsh-app-boot`'s evaluator grew a requirements path that short-circuits the old
+peer loop:
+
+```js
+function unmetRequirements(fields, runtimeVersion) {
+  const engines = Object.hasOwn(fields, "engines") ? objectOf$1(fields.engines, "Plugin manifest engines") : {};
+  if (Object.hasOwn(engines, "dsh")) {
+    const range = engines.dsh;
+    if (typeof range !== "string") throw new Error("Plugin manifest engines.dsh must be a string");
+    return satisfies(runtimeVersion, range) ? {} : { "engines.dsh": range };
+  }
+  if (!Object.hasOwn(fields, "peerDependencies")) return {};
+  // ...otherwise the previous per-peer loop, unchanged
+}
+```
+
+Three consequences matter here. A plugin that declares `engines.dsh` is judged
+**only** by it, and its `peerDependencies` are never read. A plugin that does not
+declare it keeps the previous behaviour — which is the state this plugin was in,
+so its exact two-version peer list refused `0.2.1-alpha.4`. And `engines.dsh` is
+taken verbatim, with none of the `workspace:^` / `workspace:~` / `workspace:*`
+substitution the peer path performs, so any `workspace:` range there is unmet.
+
+### Validation evidence
+
+- **Compatibility decision, reproduced against the published evaluators — before
+  any edit.** Each host's own `evaluatePluginCompatibility` (alpha.3 and alpha.4,
+  installed into separate isolated directories) judged this plugin's real
+  `package.json` over one candidate list. Unchanged, both hosts admitted
+  `0.2.0-rc.2` and `0.2.1-alpha.3` and refused `0.2.1-alpha.4`, listing all ten
+  peers as unmet. With the added `engines.dsh` range, both hosts admit all three
+  audited releases; alpha.4 reports a **single** `engines.dsh` requirement
+  instead of ten peers when it refuses; and `0.2.1-alpha.2`, `0.2.1-alpha.5`,
+  `0.2.1`, and `0.3.0` remain refused. alpha.3 ignores `engines.dsh` entirely
+  and keeps deciding on `peerDependencies`, which is why both declarations must
+  name the same list.
+- **Live A/B install on the published alpha.4 CLI — the evidence that matters.**
+  Under an isolated `DSH_HOME`, the **unchanged** package was rejected outright:
+  `dsh: installation rejected: Plugin dsh-deeppilot@0.9.5 is incompatible with
+  dsh 0.2.1-alpha.4: requirements {…ten peers…}`, `Exact-version exemption: not
+  active`, `dsh: nothing was installed`, exit 1. The **fixed** package installed
+  cleanly, exit 0, linked into the profile manifest's `dsh.profile.bundles`
+  alongside `@deepseek-ai/dsh-sdk-minimal`.
+- **Composed tree:** the same CLI's `--dump-config` produced **162 rows with the
+  plugin and 153 without it**, the plugin's three rows present at
+  `deeppilot-directory-picker-browse`, `deeppilot-directory-picker-browse-client`,
+  and `deeppilot`, with no `skipped`/`incompatible` diagnostic. The single
+  warning is the `sdk-minimal` template's own missing `directory-picker` entry,
+  which alpha.3 recorded as well.
+- **Live boot on a real alpha.4 Web host.** An isolated `DSH_HOME` profile built
+  from the shipped Web template and linked to this working tree booted under the
+  published alpha.4 CLI on `--port 3180` (the default 3080 is held by this
+  machine's own Host). The plugin started fully —
+  `[deeppilot] data plane active (mux + host streams)`,
+  `[deeppilot] LAN TLS identity created`,
+  `[deeppilot] local transport listening on https://0.0.0.0:3098` — and the
+  alpha.3 failure line `DSH Remote interaction client unavailable` **did not
+  appear**. A scan of the whole boot log for `incompatible`, `rejected`,
+  `requirements`, `unavailable`, or `error` returns nothing.
+- **Plugin unit tests:** `npm test` → **564 tests, 563 pass, 0 fail, 1 todo**,
+  including the new `engines.dsh names the same closed host list as the peer
+  range` and the updated peer-range boundary test. `npm run typecheck` passes.
+- **Build and schema:** `npm run build` passes and leaves `lib/` **byte-identical
+  to HEAD** — this fix changes no code, only declarations and documentation, so
+  no host's runtime behaviour can regress. `npm run check:config-schema` passes
+  against the pinned `0.2.0-rc.2` CLI (`/34 → $defs/config19`, volatile fields
+  pinned).
+- **Environment note, not a defect:** `check:config-schema` shells out to
+  `npx --yes @deepseek-ai/dsh@0.2.0-rc.2`, and this machine's `~/.npm/_cacache`
+  contains root-owned files, so the default npm cache fails with `EPERM`. Running
+  it with `npm_config_cache` pointed at a writable directory passes, and the
+  unchanged HEAD build fails identically under the default cache, which is what
+  attributes the failure to the machine rather than to this change.
+
+### Evidence limits
+
+Verified: install admission on alpha.4, profile composition, plugin startup, and
+the full unit/typecheck/build/schema suite. **Not** verified here: a real iPhone
+against this alpha.4 host, the Funnel transport, and a real model turn. The
+phone-side contract is unchanged by this release — protocol v2, pairing state,
+and device records are untouched, so no paired phone needs to re-pair — but that
+is a source-level verdict, not a device run.
+
 ## 2026-10-14 — audit of `dsh-v0.2.1-alpha.3`
 
 ### Scope and method

package/docs/NPM_PUBLISHING.md

@@ -72,8 +72,13 @@
    `npm whoami`（当前账号查询）不能验证 OIDC 发布权限。
 2. 若 npm 上传成功而后续核对失败，先检查注册表；已存在的版本不能通过重跑覆盖。
    排查来源证明或分发标签后再决定下一步，禁止把核对失败直接当作上传失败。
+   发布核对会绕过元数据缓存并有限重试；人工查询使用 `npm view --prefer-online`，
+   以免继续读取发布前的旧版本列表或缓存的 404 响应。
 3. 本地语法检查、测试和打包不能证明 npm 绑定已生效；真实 OIDC 认证与来源证明
    需要首次获授权的新版本发布才能验证。已有旧版本的认证状态不因新增工作流改变。
+4. `0.9.5` 已完成首次 OIDC 身份认证发布；npm 绑定显示 `Valid`（有效），
+   来源证明签名、压缩包摘要与两个支持宿主的注册表安装核验通过。首次运行的末尾
+   核对因缓存失败，其上传步骤成功；发布证据及边界见 `docs/DSH_RELEASE_MEMORY.md`。
 
 ## 五、官方资料
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-deeppilot",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "description": "DeepPilot companion plugin for DeepSeek Harness: use DSH from a native iPhone app over an authenticated, direct connection to your own computer.",
   "repository": {
     "type": "git",
@@ -82,7 +82,8 @@
     "test": "tsx --test tests/*.test.ts"
   },
   "engines": {
-    "node": ">=22"
+    "node": ">=22",
+    "dsh": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4"
   },
   "publishConfig": {
     "access": "public"
@@ -94,16 +95,16 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "~4.0.4 || ~4.0.5-alpha.1",
-    "@deepseek-ai/dsh": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-api-gateway": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-api-remotes": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-settings": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.2 || 0.2.1-alpha.3",
-    "@deepseek-ai/dsh-typert-registry": "0.2.0-rc.2 || 0.2.1-alpha.3",
+    "@deepseek-ai/dsh": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-api-gateway": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-api-remotes": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-settings": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-protocol": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-typert-registry": "0.2.0-rc.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
     "@deepseek-ai/schemastery": "~3.18.4 || ~3.18.5-alpha.1",
     "react": "^19.2.8"
   },