dsh-mobile 0.8.5 → 0.8.7

package/native/iroh-host/README.md

@@ -5,11 +5,11 @@ This crate owns one authenticated iroh endpoint and its paired peer registry. It
 ## Commands
 
 ```powershell
-cargo build --locked -p dsh-mobile-iroh-host
-./target/debug/dsh-mobile-iroh-host host --data-dir <private-directory> --pair --proxy-target 127.0.0.1:3443
+cargo build --locked --manifest-path native/Cargo.toml -p dsh-mobile-iroh-host
+./native/target/debug/dsh-mobile-iroh-host host --data-dir <private-directory> --pair --proxy-target 127.0.0.1:3443
 ```
 
-The parent owns stdin and stdout. Closing stdin or sending `shutdown` closes the endpoint, active peer connections and their proxy tasks, then emits `stopped`. One OS file lock prevents simultaneous hosts from using the same data directory. Corrupt or unreadable identity/paired-device files fail startup rather than generating a new identity or opening a new pairing window.
+Run both commands from the repository root; the workspace root is `native/`, so cargo still writes to `native/target` (on Windows the debug binary is `dsh-mobile-iroh-host.exe`). The parent owns stdin and stdout. Closing stdin or sending `shutdown` closes the endpoint, active peer connections and their proxy tasks, then emits `stopped`. One OS file lock prevents simultaneous hosts from using the same data directory. Corrupt or unreadable identity/paired-device files fail startup rather than generating a new identity or opening a new pairing window.
 
 Windows opens the verified private lock file without delete sharing, so its active pathname cannot be unlinked or renamed to bypass the lock. On Unix, the profile directory must remain exclusively application-owned and its `host.lock` pathname must not be manually removed while a host runs: advisory file locking does not prevent a process with the same UID from unlinking a locked inode. A compromised current user is outside the local credential isolation model.
 
@@ -61,6 +61,12 @@ The control stream remains owned for the entire connection. EOF, protocol error,
 
 Each later bidirectional stream begins with `{"version":1,"type":"proxy"}` plus a newline, then carries unmodified TCP bytes. QUIC's authenticated transport protects network replay; this carrier does not accept standalone approvals or decisions. The host bounds concurrent connections, per-peer/global proxy streams, handshake time, proxy discriminator time and loopback connect time. Streams that exceed capacity are reset rather than queued indefinitely. Long-running authenticated payload streams remain open until the gateway, peer or owner closes them.
 
+## Downloaded release and pin
+
+The plugin does not build this crate on the user's machine. It downloads the pinned `dsh-mobile-iroh 0.1.0-alpha.1` release for the current platform from the npm CDN, verifies the byte length and SHA-256, and only then promotes the executable into plugin-private storage; an already installed companion with a verified copy is reused instead of downloading. The authoritative bytes and hashes are `src/iroh-component.ts` line 14 (`IROH_VERSION`) and lines 34-49 (per-platform entries: Windows x64 14,865,920 bytes, Linux x64 24,451,352 bytes).
+
+Local and CI builds use `npm run build:iroh-host` (`scripts/build-iroh-host.mjs`), not the debug command above. It builds the release profile through `native/Cargo.toml`, copies the binary from `native/target/release` to `bin/` under its published name (`dsh-mobile-iroh-host-win32-x64.exe` or `dsh-mobile-iroh-host-linux-x64`), checks the executable header and prints `bytes`/`sha256` for the release manifest. CI runs the same script on both targets (`.github/workflows/ci.yml:436`).
+
 ## Verification
 
-`cargo test --locked -p dsh-mobile-iroh-core -p dsh-mobile-iroh-host` includes real offline QUIC endpoints, handshake rejection, durable pairing and Hello ACK, same-peer replacement, raw HTTP/cookies/WebSocket/binary forwarding, revocation, control EOF and persistence failure. These checks do not establish Android WebView integration, production DSH authorization or public-network support. Process-level smoke is owned by the repository's JavaScript harness.
+`cargo test --locked --manifest-path native/Cargo.toml -p dsh-mobile-iroh-core -p dsh-mobile-iroh-host` includes real offline QUIC endpoints, handshake rejection, durable pairing and Hello ACK, same-peer replacement, raw HTTP/cookies/WebSocket/binary forwarding, revocation, control EOF and persistence failure. These checks do not establish Android WebView integration, production DSH authorization or public-network support. Process-level smoke is owned by the repository's JavaScript harness.

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "dsh-mobile",
-  "version": "0.8.5",
+  "version": "0.8.7",
   "private": false,
   "description": "DeepSeek Harness 移动端适配与安全访问插件，支持局域网、远程连接、Android App 和手机浏览器。",
+  "icon": "assets/brand/plugin-icon.png",
   "type": "module",
   "workspaces": [
     "packages/question-fixes"
@@ -10,12 +11,12 @@
   "bin": {
     "dsh-mobile": "lib/cli.js"
   },
-  "main": "./lib/index.mjs",
+  "main": "./index.mjs",
   "types": "./lib/index.d.mts",
   "exports": {
     ".": {
       "types": "./lib/index.d.mts",
-      "default": "./lib/index.mjs"
+      "default": "./index.mjs"
     },
     "./client": {
       "default": "./lib/client.js"
@@ -23,6 +24,7 @@
     "./package.json": "./package.json"
   },
   "files": [
+    "index.mjs",
     "lib/**/*.mjs",
     "lib/cli.js",
     "lib/**/*.d.mts",
@@ -42,6 +44,7 @@
     "assets/mobile-push/icon-180.png",
     "assets/mobile-push/icon-192.png",
     "assets/mobile-push/icon-512.png",
+    "assets/brand/plugin-icon.png",
     "cordis.patch.yml",
     "README.md",
     "README.en.md",
@@ -113,6 +116,7 @@
     "build:iroh-host": "node ./scripts/build-iroh-host.mjs",
     "check:funnel-licenses": "node ./scripts/funnel-third-party-licenses.mjs",
     "check:funnel-licenses:full": "node ./scripts/funnel-third-party-licenses.mjs --full-check",
+    "check:notices": "node ./scripts/check-third-party-notices.mjs",
     "check:mobile-release": "node ./scripts/check-mobile-release.mjs",
     "check:dsh-compatibility": "node ./scripts/check-dsh-compatibility.mjs",
     "smoke:dsh-boot": "node ./scripts/smoke-dsh-mobile-boot.mjs",
@@ -166,7 +170,7 @@
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
     "prepack": "npm run check:version && npm run check:docs && npm run check:funnel-licenses && npm run build",
-    "verify": "npm run check:version && npm run check:docs && npm run check:companion-package && npm run check:funnel-licenses && npm run check:mobile-release && npm run typecheck && npm run test && npm run build && npm pack --dry-run",
+    "verify": "npm run check:version && npm run check:docs && npm run check:companion-package && npm run check:funnel-licenses && npm run check:notices && npm run check:mobile-release && npm run typecheck && npm run test && npm run build && npm pack --dry-run",
     "smoke:plugin-portal-layers": "node ./scripts/smoke-plugin-portal-layers.mjs",
     "smoke:opaque-chrome": "node ./scripts/smoke-opaque-chrome.mjs",
     "smoke:rightbar-fullscreen": "node ./scripts/smoke-rightbar-fullscreen.mjs"

package/packages/question-fixes/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mobile-question-fixes",
-  "version": "0.8.5",
+  "version": "0.8.7",
   "private": true,
   "description": "Scoped question-card scrolling and touch-keyboard fixes for DSH Web.",
   "type": "module",