dsh-industry-research 0.3.15 → 0.3.16

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.16] - 2026-10-04
+
+
+### Changed
+
+- Host pins move to `0.2.1-alpha.1`; re-verified against that host line. Every `@deepseek-ai/dsh-*` dev/test dependency now pins `0.2.1-alpha.1`, the `dshWorkshop.compatibility.dshVersions` timeline appends `0.2.1-alpha.1`, and the compatibility baseline in every README records the `dsh-v0.2.1-alpha.1` host. The declared host ranges (`engines.dsh` and the `peerDependencies` union) gain the `|| >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0` clauses: the previous upper bound was `<0.2.0`, which under semver rejects every 0.2.x host, so the probe host itself was not installable. Nothing was narrowed — the `0.1.x` clauses are unchanged, in place and in order.
+
+### Fixed
+
+- The invalid-config and default-export composition regressions (`test/composition.spec.ts`) now fail for the *real* reason again. `cordis-plugin-loader` 1.0.6 dropped the failure surface `loader.await()` had in 1.0.4: the old body collected each `entry._await()` outcome and rejected with the single failure (or an `AggregateError`), while 1.0.6 only polls `entry._initTask || entry.fiber?.inertia`. `Entry._reload()` resolves `fiber.inertia` in the same turn it swallows the throw into `fiber._error`, so a row whose `apply` threw — an invalid `enabled`/`fetchTimeoutMs`/`strictTicker`, or a default-export wrapper with no `inject` — leaves nothing pending and `await()` resolves cleanly, which let both cases be judged purely on the downstream symptom (`industry_map` missing from the tools registry) instead of the cause. `scripts/loader-runner.mjs` now re-awaits every `FAILED` row through `Fiber.await()`, which still rethrows the stored error, and rethrows the first failure; `DSH_LOADER_RUNNER_NO_RETHROW=1` disables that walk for re-measurement only. `apply`, `Config`, and the runner's positive path are unchanged, and the suite additionally pins the causal chain: the rethrow happens before the registry check, so stderr must carry the real reason and must *not* carry the "tool is missing" symptom.
+
 ## [0.3.15] - 2026-09-25
 
 ### Changed

package/README-es.md

@@ -36,7 +36,7 @@ Este plugin forma parte de la [familia de plugins DSH](https://github.com/PerryL
 *English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## Compatibility
 
-- DeepSeek Harness `dsh-v0.1.7-rc.2` (línea publicada en npm, verificado el 2026-09-25; peers en `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`).
+- DeepSeek Harness `dsh-v0.2.1-alpha.1` (línea publicada en npm, verificado el 2026-09-25; peers en `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`).
 0.1.2-rc.1 (adaptado el 2026-09-02): el sobre de sesión conserva su campo ignorable solo para compatibilidad de lectura de logs almacenados - Session.append aún no puede estamparlo, por lo que el comportamiento de la puerta no cambia.
 Verificado el 2026-09-24 contra los peers publicados `0.1.7-rc.2` (cadena de puertas completa; el smoke de instalación de perfil real lo ejecuta el job semanal y por PR `compat.yml`).
 - Node `^22.19.0 || >=24.0.0`, solo ESM (`"type": "module"`).
@@ -190,7 +190,7 @@ pnpm run pack:check
 
 Las contribuciones externas son bienvenidas — abre un issue o una pull request.
 
-**Versión de DSH aplicable:** verificada con `dsh-v0.1.7-rc.2` (la versión del host a la que apunta esta compilación); requiere `>=0.1.7-alpha.1 <0.2.0`.
+**Versión de DSH aplicable:** verificada con `dsh-v0.2.1-alpha.1` (la versión del host a la que apunta esta compilación); requiere `>=0.1.7-alpha.1 <0.2.0`.
 
 ## PerryLink DSH Plugin Family
 

package/README-hi.md

@@ -36,7 +36,7 @@
 *English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## Compatibility
 
-- DeepSeek Harness `dsh-v0.1.7-rc.2` (npm प्रकाशित लाइन, 2026-09-25 को सत्यापित; peers `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0` पर)।
+- DeepSeek Harness `dsh-v0.2.1-alpha.1` (npm प्रकाशित लाइन, 2026-09-25 को सत्यापित; peers `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0` पर)।
 0.1.2-rc.1 (2026-09-02 को अनुकूलित): सत्र लिफ़ाफ़ा अपना ignorable फ़ील्ड केवल संग्रहीत-लॉग पठन संगतता के लिए रखता है - Session.append अभी भी इसे स्टैम्प नहीं कर सकता, इसलिए गेट व्यवहार अपरिवर्तित है।
 `0.1.7-rc.2` प्रकाशित peers के विरुद्ध 2026-09-25 को सत्यापित (पूर्ण गेट श्रृंखला; वास्तविक प्रोफ़ाइल इंस्टॉल स्मोक साप्ताहिक और प्रति-PR `compat.yml` जॉब चलाता है)।
 - Node `^22.19.0 || >=24.0.0`, केवल ESM (`"type": "module"`)।
@@ -190,7 +190,7 @@ pnpm run pack:check
 
 बाहरी योगदान स्वागत योग्य हैं — issue या pull request खोलें।
 
-**लागू DSH संस्करण:** `dsh-v0.1.7-rc.2` (यह बिल्ड जिस होस्ट रिलीज़ को लक्षित करता है) पर सत्यापित; आवश्यक `>=0.1.7-alpha.1 <0.2.0`।
+**लागू DSH संस्करण:** `dsh-v0.2.1-alpha.1` (यह बिल्ड जिस होस्ट रिलीज़ को लक्षित करता है) पर सत्यापित; आवश्यक `>=0.1.7-alpha.1 <0.2.0`।
 
 ## PerryLink DSH Plugin Family
 

package/README-pt.md

@@ -36,7 +36,7 @@ Este plugin faz parte da [família de plugins DSH](https://github.com/PerryLink)
 *English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## Compatibility
 
-- DeepSeek Harness `dsh-v0.1.7-rc.2` (linha publicada no npm, verificado em 2026-09-25; peers em `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`).
+- DeepSeek Harness `dsh-v0.2.1-alpha.1` (linha publicada no npm, verificado em 2026-09-25; peers em `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`).
 0.1.2-rc.1 (adaptado em 2026-09-02): o envelope de sessão mantém seu campo ignorable apenas para compatibilidade de leitura de logs armazenados - o Session.append ainda não consegue estampá-lo, então o comportamento da porta não muda.
 Verificado em 2026-09-24 contra os peers publicados `0.1.7-rc.2` (cadeia de portas completa; o smoke de instalação de perfil real roda no job semanal e por PR `compat.yml`).
 - Node `^22.19.0 || >=24.0.0`, apenas ESM (`"type": "module"`).
@@ -190,7 +190,7 @@ pnpm run pack:check
 
 Contribuições externas são bem-vindas — abra uma issue ou um pull request.
 
-**Versão do DSH aplicável:** verificada com `dsh-v0.1.7-rc.2` (a versão do host que esta compilação visa); requer `>=0.1.7-alpha.1 <0.2.0`.
+**Versão do DSH aplicável:** verificada com `dsh-v0.2.1-alpha.1` (a versão do host que esta compilação visa); requer `>=0.1.7-alpha.1 <0.2.0`.
 
 ## PerryLink DSH Plugin Family
 

package/README-zh.md

@@ -36,7 +36,7 @@
 *English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## Compatibility
 
-- DeepSeek Harness `dsh-v0.1.7-rc.2`（npm 发布线，2026-09-24 已核验；peer 范围 `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`）。
+- DeepSeek Harness `dsh-v0.2.1-alpha.1`（npm 发布线，2026-09-24 已核验；peer 范围 `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`）。
 0.1.2-rc.1（2026-09-02 已适配）：会话信封保留 ignorable 字段但仅用于存量日志读取兼容——Session.append 仍无法盖章，门控行为不变。
 2026-09-24 已核验：对照 `0.1.7-rc.2` 已发布 peer 实测（完整门禁链；真实 profile 安装冒烟由每周及每 PR 的 `compat.yml` 任务执行）。
 - Node `^22.19.0 || >=24.0.0`，仅 ESM（`"type": "module"`）。
@@ -191,7 +191,7 @@ pnpm run pack:check
 
 欢迎外部贡献 —— 提交 issue 或 pull request。
 
-**适用的 DSH 版本：** 已在 `dsh-v0.1.7-rc.2`（本构建所针对的宿主版本）上验证；要求 `>=0.1.7-alpha.1 <0.2.0`。
+**适用的 DSH 版本：** 已在 `dsh-v0.2.1-alpha.1`（本构建所针对的宿主版本）上验证；要求 `>=0.1.7-alpha.1 <0.2.0`。
 
 ## PerryLink DSH Plugin Family
 

package/README.md

@@ -38,7 +38,7 @@
 
 ## Compatibility
 
-- DeepSeek Harness `dsh-v0.1.7-rc.2` (published npm line, verified 2026-09-25; peers `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`).
+- DeepSeek Harness `dsh-v0.2.1-alpha.1` (published npm line, verified 2026-09-25; peers `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`).
 0.1.2-rc.1 (adapted 2026-09-02): the session envelope keeps its ignorable field for stored-log read compatibility only - Session.append still cannot stamp it, so audit-gate behavior is unchanged.
 Verified 2026-09-24 against the `0.1.7-rc.2` published peers (full gate chain; the real profile install smoke runs in the weekly and per-PR `compat.yml` job).
 - Node `^22.19.0 || >=24.0.0`, ESM only (`"type": "module"`).
@@ -194,7 +194,7 @@ pnpm run pack:check
 
 External contributions are welcome — open an issue or a pull request.
 
-**Applicable DSH version:** verified against `dsh-v0.1.7-rc.2` (the host release this build targets); requires `>=0.1.7-alpha.1 <0.2.0`.
+**Applicable DSH version:** verified against `dsh-v0.2.1-alpha.1` (the host release this build targets); requires `>=0.1.7-alpha.1 <0.2.0`.
 
 ## PerryLink DSH Plugin Family
 

package/lib/index.js

@@ -3731,7 +3731,7 @@ function buildIndustryReportTool(ctx, config) {
 * @module dsh-industry-research/version
 */
 /** The package version. */
-const VERSION = "0.3.15";
+const VERSION = "0.3.16";
 //#endregion
 //#region src/index.ts
 /**

package/lib/types/version.d.ts

@@ -4,5 +4,5 @@
  * @module dsh-industry-research/version
  */
 /** The package version. */
-export declare const VERSION = "0.3.15";
+export declare const VERSION = "0.3.16";
 //# sourceMappingURL=version.d.ts.map

package/lib/types/version.js

@@ -4,5 +4,5 @@
  * @module dsh-industry-research/version
  */
 /** The package version. */
-export const VERSION = '0.3.15';
+export const VERSION = '0.3.16';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-industry-research",
-  "version": "0.3.15",
+  "version": "0.3.16",
   "description": "Industry and company research domain pack for DeepSeek Harness: methodology skills, an industry-chain structure model (industry_map), public-source policy/news tracking over ctx.web (industry_track), company scan cards (company_scan), and auditable research reports with an optional ctx.researchReport sealing bridge and a builtin Markdown fallback (industry_report). Research only — not investment advice.",
   "author": "dsh-industry-research contributors",
   "repository": {
@@ -67,7 +67,8 @@
       "native-code:none"
     ],
     "compatibility": {
-      "dshVersions": ["0.1.2-rc.1","0.1.5-rc.2","0.1.7-alpha.2","0.1.7-rc.1", "0.1.7-rc.2"]
+      "dshVersions": ["0.1.2-rc.1","0.1.5-rc.2","0.1.7-alpha.2","0.1.7-rc.1", "0.1.7-rc.2",
+        "0.2.1-alpha.1"]
     },
     "capability": {
       "id": "industry-research",
@@ -94,41 +95,41 @@
   ],
   "engines": {
     "node": "^22.19.0 || >=24.0.0",
-    "dsh": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0"
+    "dsh": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0"
   },
   "packageManager": "pnpm@11.7.0",
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-skill": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0",
-    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0",
-    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0",
-    "@deepseek-ai/schemastery": "^3.18.2"
+    "@deepseek-ai/cordis": "^4.0.5-alpha.1",
+    "@deepseek-ai/dsh-skill": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
+    "@deepseek-ai/dsh-skill-filesystem": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
+    "@deepseek-ai/schemastery": "^3.18.5-alpha.1"
   },
   "dependencies": {
     "tsdown": "^0.22.14",
     "typescript": "^5.9.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.7-rc.2",
+    "@deepseek-ai/cordis": "^4.0.5-alpha.1",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.10-alpha.1",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-alpha.1",
     "dsh-research-report": "0.3.10",
-    "@deepseek-ai/dsh-session": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-skill": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-skill-filesystem": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.7-rc.2",
-    "@deepseek-ai/dsh-web": "0.1.7-rc.2",
-    "@deepseek-ai/schemastery": "^3.18.4",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-skill": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-skill-filesystem": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-user-approval": "0.2.1-alpha.1",
+    "@deepseek-ai/dsh-web": "0.2.1-alpha.1",
+    "@deepseek-ai/schemastery": "^3.18.5-alpha.1",
     "@types/node": "^22.19.0",
     "@vitest/coverage-v8": "^3.2.0",
     "oxlint": "0.18.1",
     "vitest": "^3.2.0",
-    "@deepseek-ai/dsh-attachment": "0.1.7-rc.2"
+    "@deepseek-ai/dsh-attachment": "0.2.1-alpha.1"
   },
   "scripts": {
     "build": "node scripts/prepare.mjs",

package/src/version.ts

@@ -5,4 +5,4 @@
  */
 
 /** The package version. */
-export const VERSION = '0.3.15'
+export const VERSION = '0.3.16'