dsh-plugin-bridge 0.2.11 → 0.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-bridge",
-  "version": "0.2.11",
+  "version": "0.3.1",
   "description": "Previewable cross-preset session migration for DeepSeek Harness with bounded, fixed-schema handoffs",
   "type": "module",
   "main": "lib/index.js",
@@ -11,12 +11,16 @@
     "reports/v0.2.3-e2e-2026-08-20T13-19-13-924Z.raw.json",
     "reports/v0.2.3-e2e-report.md",
     "reports/v0.2.6-rc11-vision-report.md",
+    "reports/native-workbench-2026-08-25.md",
+    "reports/native-workbench-2026-08-25.raw.json",
+    "reports/dsh-0.1.2-alpha.2-compat-2026-08-31.md",
     "cordis.patch.yml",
     "README.md",
     "README.zh.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && npm run build:client",
+    "build:client": "tsdown --config tsdown.config.ts",
     "build:check": "npm run build && git diff --exit-code -- lib",
     "typecheck": "tsc -p tsconfig.check.json",
     "prepack": "npm run build",
@@ -41,20 +45,54 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-chat"
+      ],
+      "platform": "web"
     }
   },
   "engines": {
     "node": ">=22"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1"
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-alpha.1",
+    "@deepseek-ai/dsh-client-ui-chat": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-alpha.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-alpha.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-alpha.1",
+    "react": "^18.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": { "optional": true },
+    "@deepseek-ai/dsh-api-remotes": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-chat": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-conversation": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-primitives": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-slots": { "optional": true },
+    "react": { "optional": true }
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-chat": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-session": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.2",
     "@types/node": "^26.2.0",
+    "@types/react": "~18.3.1",
+    "react": "^18.3.1",
+    "tsdown": "^0.22.14",
     "typescript": "^7.0.2"
   },
   "publishConfig": {
@@ -88,6 +126,10 @@
       "types": "./lib/migrate.d.ts",
       "default": "./lib/migrate.js"
     },
+    "./host": {
+      "types": "./lib/host.d.ts",
+      "default": "./lib/host.js"
+    },
     "./rpc": {
       "types": "./lib/rpc.d.ts",
       "default": "./lib/rpc.js"
@@ -100,6 +142,14 @@
       "types": "./lib/command.d.ts",
       "default": "./lib/command.js"
     },
+    "./client": {
+      "types": "./lib/client.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./client-contract": {
+      "types": "./lib/client-contract.d.ts",
+      "default": "./lib/client-contract.js"
+    },
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json"
   }

package/reports/dsh-0.1.2-alpha.2-compat-2026-08-31.md

@@ -0,0 +1,64 @@
+# DSH 0.1.2-alpha.2 compatibility validation
+
+Date: 2026-08-31 (Asia/Shanghai)
+
+## Scope
+
+- Official host: `@deepseek-ai/dsh@0.1.2-alpha.2` from the npm registry
+- Upstream tag: `dsh-v0.1.2-alpha.2`
+- Upstream commit: `0a53fb55bea101816fa226bb964ae2bed71c343b`
+- Bridge branch: `codex/dsh-alpha2-compat`
+- Packed Bridge SHA-256: `4170fc548ad4c9f77d70bc9e47cef92da849b4fa608a6b7cf323f4ad972cb085`
+- All profiles, credentials copied for the run, sessions, packages, and browser state were isolated from the ordinary DSH home.
+
+## Compatibility changes covered
+
+- Accept alpha.2's `session/attachment-invalid` image rejection while retaining rc.2's `attachment-error` behavior.
+- Remove the alpha-deleted `@deepseek-ai/dsh-client-runtime` peer, development import, and bundler external.
+- Build against the split alpha.2 client contracts: API remotes/session controller, Chat command-row slot, renderer, Session UI, primitives, and slots.
+- Provide alpha.2's required localized labels to `MarkdownText` and `JsonTree`.
+- Add `ui-chat` to client injection so the package that owns `conversation.chat.commandview` is explicit rather than assumed from the official Web profile.
+- Treat Cordis as a host-provided optional peer while retaining its supported version range.
+
+## Automated evidence
+
+- Focused old/new image fallback tests passed.
+- Alpha manifest and split-client contract tests passed.
+- `npm run verify` passed build, typecheck, 167 tests, generated-lib drift, dataset checks, and packed-package smoke installation.
+- Source coverage: 93.58% lines, 78.10% branches, and 88.24% functions.
+
+## Official npm install evidence
+
+- The clean runtime reported DSH `0.1.2-alpha.2`.
+- Plugin add completed without a peer warning after the Cordis metadata correction.
+- `pnpm peers check`: no peer dependency issues.
+- The profile contained the Bridge dependency and bundle layer, and `node_modules/dsh-plugin-bridge` resolved.
+
+## Real WebUI evidence
+
+- Native `/bridge --doctor`: `dsh-typed-controllers`, 13/13 required methods.
+- `code` resolved to the official `ptc` preset.
+- Preview preserved `ORBIT-A2-731`, port `7643`, `PostgreSQL`, `src/alpha.ts`, and the `MongoDB` prohibition.
+- Preview, Text, and Markdown modes rendered. A Next-step edit in Text mode was the exact Next step delivered to the target.
+- At 1200x853 the card panel scrolled internally; toolbar and confirmation actions stayed outside it; the document had no overflow.
+- Confirm automatically opened the target under the official PTC mode.
+- The target restated all five facts and stopped for confirmation.
+- The target goal was visibly paused and contained the reviewed summary.
+- The original source remained separately selectable and retained its original model conversation.
+
+The run used three authorized model requests: source seed, preview worker, and target restatement.
+
+## Removal evidence
+
+After `dsh plugin --profile web remove dsh-plugin-bridge` and a WebUI restart:
+
+- the profile dependency was absent;
+- the bundle list contained only the official base and Web app;
+- the Bridge package was absent from profile `node_modules` and lock/profile text;
+- the browser loaded no Bridge client asset and contained zero `.dsh-bridge-card` nodes;
+- the fresh browser console contained zero errors;
+- historical command outcomes remained readable through the official generic command renderer.
+
+## Known boundary
+
+This run did not repeat a live raw-image/VLM transfer. Alpha.2's namespaced text-model image rejection is covered by deterministic migration regression tests; the earlier rc.2 vision report remains the live attachment-transfer evidence. Installation and removal still require one WebUI restart.

package/reports/native-workbench-2026-08-25.md

@@ -0,0 +1,30 @@
+# Native WebUI workbench acceptance · 2026-08-25
+
+Environment: isolated official `@deepseek-ai/dsh@0.1.1-rc.2` Web profile, locally packed Bridge `0.2.11` plus the current PR changes. The source, worker, and target sessions were synthetic and isolated from the user's normal DSH home.
+
+## What was exercised
+
+- the client half loaded through the official `dsh.client` module graph and occupied `conversation.chat.commandview`;
+- `/bridge --doctor` rendered through the native card and reported 13/13 host capabilities;
+- the running row showed immediate elapsed-time feedback without mutating the source;
+- completed Markdown rendered through the official primitive, a complete JSON edit rendered as a keyboard-accessible tree, and the textarea round-tripped user changes;
+- the reviewed payload was accepted by the host command without being recorded in command input;
+- the created goal was paused, the first target turn restated the handoff, and the client automatically opened the target session.
+
+## Fixed repeat gate
+
+Each run carried the same five low-collision facts: port `8118`, PostgreSQL, MongoDB forbidden, `src/orders/router.ts`, and “idempotency tests only.”
+
+| Run | Route | Preview facts | Target facts | Worker time | Target LLM time | Paused | Auto-open |
+|---|---|---:|---:|---:|---:|---:|---:|
+| R1 | standard → code | 5/5 | 5/5 | 12.846 s | 7.807 s | yes | yes |
+| R2 | minimal → code | 5/5 | 5/5 | 9.713 s | 6.175 s | yes | yes |
+| R3 | minimal → code | 5/5 | 5/5 | 7.421 s | 5.772 s | yes | yes |
+
+R1 additionally changed `8118` to `8118（用户在 WebUI 校对）` inside the native editor; the exact marker appeared in both the stored target goal and the first target response.
+
+The token counters and per-run records are in [`native-workbench-2026-08-25.raw.json`](native-workbench-2026-08-25.raw.json).
+
+## Boundary
+
+This is a three-run fixed release gate, not a latency distribution or population-level reliability claim. Worker and target latency, token use, and phrasing remain model-, preset-, cache-, and provider-dependent. Automated fake-host tests cover failure and payload bounds without spending tokens; this report covers the installed official-WebUI path that those tests cannot prove.

package/reports/native-workbench-2026-08-25.raw.json

@@ -0,0 +1,34 @@
+{
+  "date": "2026-08-25",
+  "dshVersion": "0.1.1-rc.2",
+  "bridgePackageVersion": "0.2.11",
+  "environment": "isolated official dsh web profile",
+  "workerModel": "deepseek-v4-flash",
+  "facts": ["8118", "PostgreSQL", "MongoDB forbidden", "src/orders/router.ts", "idempotency tests only"],
+  "runs": [
+    {
+      "id": "R1", "from": "standard", "to": "code",
+      "previewFacts": 5, "targetFacts": 5,
+      "workerMs": 12846, "targetMs": 7807,
+      "editedMarkerPreserved": true, "targetPaused": true, "autoOpened": true,
+      "workerTokens": { "uncachedInput": 931, "output": 1112, "cacheRead": 1024 },
+      "targetTokens": { "uncachedInput": 10415, "output": 436, "cacheRead": 0 }
+    },
+    {
+      "id": "R2", "from": "minimal", "to": "code",
+      "previewFacts": 5, "targetFacts": 5,
+      "workerMs": 9713, "targetMs": 6175,
+      "targetPaused": true, "autoOpened": true,
+      "workerTokens": { "uncachedInput": 518, "output": 771, "cacheRead": 1024 },
+      "targetTokens": { "uncachedInput": 9670, "output": 278, "cacheRead": 640 }
+    },
+    {
+      "id": "R3", "from": "minimal", "to": "code",
+      "previewFacts": 5, "targetFacts": 5,
+      "workerMs": 7421, "targetMs": 5772,
+      "targetPaused": true, "autoOpened": true,
+      "workerTokens": { "uncachedInput": 131, "output": 615, "cacheRead": 1408 },
+      "targetTokens": { "uncachedInput": 1622, "output": 290, "cacheRead": 8704 }
+    }
+  ]
+}