dsh-mask 0.2.8 → 0.2.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/CHANGELOG.md +9 -1
  2. package/{README.es.md → README-es.md} +2 -2
  3. package/{README.hi.md → README-hi.md} +2 -2
  4. package/{README.pt.md → README-pt.md} +2 -2
  5. package/{README.zh.md → README-zh.md} +3 -3
  6. package/README.md +3 -3
  7. package/package.json +15 -15
package/CHANGELOG.md CHANGED
@@ -5,8 +5,16 @@ All notable changes to this project are documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
- ## [Unreleased]
8
+ ## [0.2.9] - 2026-09-12
9
9
 
10
+ ### Changed
11
+
12
+ - Rename the four translated READMEs to `README-<lang>.md`. npm selects the package-page readme as the first markdown file matching its `{README,README.*}` glob (`@npmcli/package-json`, publish path), and that glob order puts `README.<lang>.md` ahead of `README.md` — so npm was serving the Simplified-Chinese file for this package too (measured on 15/15 sampled packages of the family). The new names sit outside the glob, so the English source is served again. No content changed apart from the language-switcher link each translation holds to its siblings, and the repo readme gate still passes. Takes effect with the next release; an already-published version cannot gain a corrected readme retroactively.
13
+ - Pin the `@deepseek-ai/dsh-*` dev/test dependencies to the published `0.1.5-rc.2` line and record `0.1.5-rc.2` in `dshWorkshop.compatibility.dshVersions`; the monthly Compat workflow now runs against `0.1.5-rc.2`. The peer range `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0` is unchanged, so no supported host line is dropped.
14
+
15
+ ### Fixed
16
+
17
+ - The release workflow claimed provenance but never passed the flag: it runs `npm publish --access public`, and npm only attests a token-based publish when `--provenance` is given explicitly. The publish step is now `npm publish --access public --provenance`, matching the rest of the family. Takes effect from the next release; an already-published version cannot gain attestations retroactively.
10
18
  ## [0.2.8] - 2026-09-10
11
19
 
12
20
  ### Changed
package/{README.es.md → README-es.md} RENAMED
@@ -16,7 +16,7 @@
16
16
  [![npm version](https://img.shields.io/npm/v/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
17
17
  [![npm downloads](https://img.shields.io/npm/dm/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
18
18
 
19
- [English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
19
+ [English](README.md) · [简体中文](README-zh.md) · [Español](README-es.md) · [Português](README-pt.md) · [हिन्दी](README-hi.md)
20
20
 
21
21
  </div>
22
22
 
@@ -26,7 +26,7 @@
26
26
 
27
27
  | Superficie | Estado |
28
28
  |---|---|
29
- | Harness | DeepSeek Harness `dsh-v0.1.5-rc.1` (adaptado el 2026-09-09): el sobre de sesión conserva su campo ignorable solo para compatibilidad de lectura de logs almacenados - Session.append aún no puede estamparlo, por lo que el comportamiento de la puerta no cambia. Verificado el 2026-09-10 contra el checkout master `dsh-v0.1.5-rc.1` (cadena completa de puertas + smoke de instalación de perfil). |
29
+ | Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (adaptado el 2026-09-09): el sobre de sesión conserva su campo ignorable solo para compatibilidad de lectura de logs almacenados - Session.append aún no puede estamparlo, por lo que el comportamiento de la puerta no cambia. Verificado el 2026-09-11 contra el checkout master `dsh-v0.1.5-rc.2` (cadena completa de puertas + smoke de instalación de perfil). |
30
30
  | Node | `^22.19.0 \|\| >=24.0.0` |
31
31
  | Plataformas | Donde corra DSH (host puro, regex sin dependencias; sin mitad de navegador) |
32
32
  | Modelo | Modelos de texto totalmente soportados |
package/{README.hi.md → README-hi.md} RENAMED
@@ -16,7 +16,7 @@
16
16
  [![npm version](https://img.shields.io/npm/v/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
17
17
  [![npm downloads](https://img.shields.io/npm/dm/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
18
18
 
19
- [English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
19
+ [English](README.md) · [简体中文](README-zh.md) · [Español](README-es.md) · [Português](README-pt.md) · [हिन्दी](README-hi.md)
20
20
 
21
21
  </div>
22
22
 
@@ -26,7 +26,7 @@
26
26
 
27
27
  | सतह | स्थिति |
28
28
  |---|---|
29
- | Harness | DeepSeek Harness `dsh-v0.1.5-rc.1` (2026-09-09 को अनुकूलित): सत्र लिफ़ाफ़ा अपना ignorable फ़ील्ड केवल संग्रहीत-लॉग पठन संगतता के लिए रखता है - Session.append अभी भी इसे स्टैम्प नहीं कर सकता, इसलिए गेट व्यवहार अपरिवर्तित है। 2026-09-10 को `dsh-v0.1.5-rc.1` master checkout के विरुद्ध सत्यापित (पूर्ण गेट शृंखला + profile इंस्टॉल स्मोक)। |
29
+ | Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (2026-09-09 को अनुकूलित): सत्र लिफ़ाफ़ा अपना ignorable फ़ील्ड केवल संग्रहीत-लॉग पठन संगतता के लिए रखता है - Session.append अभी भी इसे स्टैम्प नहीं कर सकता, इसलिए गेट व्यवहार अपरिवर्तित है। 2026-09-11 को `dsh-v0.1.5-rc.2` master checkout के विरुद्ध सत्यापित (पूर्ण गेट शृंखला + profile इंस्टॉल स्मोक)। |
30
30
  | Node | `^22.19.0 \|\| >=24.0.0` |
31
31
  | प्लेटफ़ॉर्म | जहाँ DSH चले (शुद्ध host, शून्य-निर्भरता regex; कोई ब्राउज़र आधा नहीं) |
32
32
  | मॉडल | टेक्स्ट मॉडल पूर्ण रूप से समर्थित |
package/{README.pt.md → README-pt.md} RENAMED
@@ -16,7 +16,7 @@
16
16
  [![npm version](https://img.shields.io/npm/v/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
17
17
  [![npm downloads](https://img.shields.io/npm/dm/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
18
18
 
19
- [English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
19
+ [English](README.md) · [简体中文](README-zh.md) · [Español](README-es.md) · [Português](README-pt.md) · [हिन्दी](README-hi.md)
20
20
 
21
21
  </div>
22
22
 
@@ -26,7 +26,7 @@
26
26
 
27
27
  | Superfície | Estado |
28
28
  |---|---|
29
- | Harness | DeepSeek Harness `dsh-v0.1.5-rc.1` (adaptado em 2026-09-09): o envelope de sessão mantém seu campo ignorable apenas para compatibilidade de leitura de logs armazenados - o Session.append ainda não consegue estampá-lo, então o comportamento da porta não muda. Verificado em 2026-09-10 contra o checkout master `dsh-v0.1.5-rc.1` (cadeia completa de portas + smoke de instalação de perfil). |
29
+ | Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (adaptado em 2026-09-09): o envelope de sessão mantém seu campo ignorable apenas para compatibilidade de leitura de logs armazenados - o Session.append ainda não consegue estampá-lo, então o comportamento da porta não muda. Verificado em 2026-09-11 contra o checkout master `dsh-v0.1.5-rc.2` (cadeia completa de portas + smoke de instalação de perfil). |
30
30
  | Node | `^22.19.0 \|\| >=24.0.0` |
31
31
  | Plataformas | Onde o DSH rodar (host puro, regex sem dependências; sem metade de navegador) |
32
32
  | Modelo | Modelos de texto totalmente suportados |
package/{README.zh.md → README-zh.md} RENAMED
@@ -16,7 +16,7 @@
16
16
  [![npm version](https://img.shields.io/npm/v/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
17
17
  [![npm downloads](https://img.shields.io/npm/dm/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
18
18
 
19
- [English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
19
+ [English](README.md) · [简体中文](README-zh.md) · [Español](README-es.md) · [Português](README-pt.md) · [हिन्दी](README-hi.md)
20
20
 
21
21
  </div>
22
22
 
@@ -26,7 +26,7 @@
26
26
 
27
27
  | 维度 | 状态 |
28
28
  |---|---|
29
- | Harness | DeepSeek Harness `dsh-v0.1.5-rc.1`（2026-09-09 已适配）：会话信封保留 ignorable 字段但仅用于存量日志读取兼容——Session.append 仍无法盖章，门控行为不变。已于 2026-09-10 针对 `dsh-v0.1.5-rc.1` master checkout 核验（全量门禁链 + profile 安装冒烟测试）。 |
29
+ | Harness | DeepSeek Harness `dsh-v0.1.5-rc.2`（2026-09-09 已适配）：会话信封保留 ignorable 字段但仅用于存量日志读取兼容——Session.append 仍无法盖章，门控行为不变。已于 2026-09-11 针对 `dsh-v0.1.5-rc.2` master checkout 核验（全量门禁链 + profile 安装冒烟测试）。 |
30
30
  | Node | `^22.19.0 \|\| >=24.0.0` |
31
31
  | 平台 | 任何 DSH 可运行处（纯 host、零依赖正则；无浏览器半） |
32
32
  | 模型 | 文本模型完全支持；无需额外模型能力 |
@@ -146,7 +146,7 @@ profile patch 覆盖示例：
146
146
 
147
147
  ```sh
148
148
  pnpm install # node ^22.19 || >=24
149
- pnpm run typecheck && pnpm run typecheck:ci # tsc --checkJs（对照 0.1.5-rc.1 peers）
149
+ pnpm run typecheck && pnpm run typecheck:ci # tsc --checkJs（对照 0.1.5-rc.2 peers）
150
150
  pnpm test # node --test
151
151
  pnpm run verify:self-contained # 依赖 spec 均来自 registry
152
152
  pnpm run verify:artifacts # 发布文件齐全 + index.mjs 可 import
package/README.md CHANGED
@@ -17,7 +17,7 @@
17
17
  [![npm version](https://img.shields.io/npm/v/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
18
18
  [![npm downloads](https://img.shields.io/npm/dm/dsh-mask)](https://www.npmjs.com/package/dsh-mask)
19
19
 
20
- [English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
20
+ [English](README.md) · [简体中文](README-zh.md) · [Español](README-es.md) · [Português](README-pt.md) · [हिन्दी](README-hi.md)
21
21
 
22
22
  </div>
23
23
 
@@ -27,7 +27,7 @@
27
27
 
28
28
  | Surface | Status |
29
29
  |---|---|
30
- | Harness | DeepSeek Harness `dsh-v0.1.5-rc.1` (adapted 2026-09-09): the session envelope keeps its ignorable field for stored-log read compatibility only - Session.append still cannot stamp it, so audit-gate behavior is unchanged. Verified 2026-09-10 against the dsh-v0.1.5-rc.1 master checkout (full gate chain + profile install smoke). |
30
+ | Harness | DeepSeek Harness `dsh-v0.1.5-rc.2` (adapted 2026-09-09): the session envelope keeps its ignorable field for stored-log read compatibility only - Session.append still cannot stamp it, so audit-gate behavior is unchanged. Verified 2026-09-11 against the dsh-v0.1.5-rc.2 master checkout (full gate chain + profile install smoke). |
31
31
  | Node | `^22.19.0 \|\| >=24.0.0` |
32
32
  | Platforms | Anywhere DSH runs (pure host, zero-dependency regex; no browser half) |
33
33
  | Model | Text models fully supported; no extra model capability required |
@@ -149,7 +149,7 @@ Example override in your profile patch:
149
149
 
150
150
  ```sh
151
151
  pnpm install # node ^22.19 || >=24
152
- pnpm run typecheck && pnpm run typecheck:ci # tsc --checkJs against the published 0.1.5-rc.1 peers
152
+ pnpm run typecheck && pnpm run typecheck:ci # tsc --checkJs against the published 0.1.5-rc.2 peers
153
153
  pnpm test # node --test
154
154
  pnpm run verify:self-contained # dependency specs resolve from the registry
155
155
  pnpm run verify:artifacts # shipped files present + index.mjs importable
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "dsh-mask",
3
3
  "description": "PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders before they reach the model, restore them at the display layer, keep the restore table only in memory and a controlled storage domain, never log plaintext, and expose /mask and the mask_test tool",
4
- "version": "0.2.8",
4
+ "version": "0.2.9",
5
5
  "repository": {
6
6
  "type": "git",
7
7
  "url": "git+https://github.com/PerryLink/dsh-mask.git"
@@ -28,10 +28,10 @@
28
28
  "lib",
29
29
  "cordis.patch.yml",
30
30
  "README.md",
31
- "README.zh.md",
32
- "README.es.md",
33
- "README.pt.md",
34
- "README.hi.md",
31
+ "README-zh.md",
32
+ "README-es.md",
33
+ "README-pt.md",
34
+ "README-hi.md",
35
35
  "ARCHITECTURE.md",
36
36
  "CHANGELOG.md",
37
37
  "SECURITY.md",
@@ -69,7 +69,7 @@
69
69
  "network:none"
70
70
  ],
71
71
  "compatibility": {
72
- "dshVersions": ["0.1.2-rc.1","0.1.5-rc.1"]
72
+ "dshVersions": ["0.1.2-rc.1","0.1.5-rc.2"]
73
73
  },
74
74
  "capability": {
75
75
  "id": "mask",
@@ -98,18 +98,18 @@
98
98
  "zod": "^4.4.3"
99
99
  },
100
100
  "devDependencies": {
101
- "@deepseek-ai/dsh-attachment": "0.1.5-rc.1",
101
+ "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
102
102
  "@deepseek-ai/cordis": "^4.0.2",
103
103
  "@deepseek-ai/cordis-plugin-include": "^1.0.7",
104
104
  "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
105
- "@deepseek-ai/dsh-agent": "0.1.5-rc.1",
106
- "@deepseek-ai/dsh-commands": "0.1.5-rc.1",
107
- "@deepseek-ai/dsh-session": "0.1.5-rc.1",
108
- "@deepseek-ai/dsh-storage": "0.1.5-rc.1",
109
- "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.1",
110
- "@deepseek-ai/dsh-storage-json": "0.1.5-rc.1",
111
- "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.1",
112
- "@deepseek-ai/dsh-tools": "0.1.5-rc.1",
105
+ "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
106
+ "@deepseek-ai/dsh-commands": "0.1.5-rc.2",
107
+ "@deepseek-ai/dsh-session": "0.1.5-rc.2",
108
+ "@deepseek-ai/dsh-storage": "0.1.5-rc.2",
109
+ "@deepseek-ai/dsh-storage-domain": "0.1.5-rc.2",
110
+ "@deepseek-ai/dsh-storage-json": "0.1.5-rc.2",
111
+ "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
112
+ "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
113
113
  "@deepseek-ai/schemastery": "^3.18.2",
114
114
  "@types/node": "^22.19.0",
115
115
  "oxlint": "0.18.1",