dsh-research-report 0.3.18 → 0.3.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +23 -1
- package/README-es.md +2 -2
- package/README-hi.md +2 -2
- package/README-pt.md +2 -2
- package/README-zh.md +2 -2
- package/README.md +2 -2
- package/lib/cli.js +1 -1
- package/lib/index.js +1 -1
- package/lib/types/version.d.ts +1 -1
- package/lib/types/version.js +1 -1
- package/lib/{verify-sealed-W3ruTjS8.js → verify-sealed-SQ6MsZQM.js} +1 -1
- package/package.json +7 -9
- package/src/version.ts +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,9 +5,31 @@ All notable changes to this project are documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [0.3.20] - 2026-10-05
|
|
9
|
+
|
|
10
|
+
### Changed
|
|
11
|
+
|
|
12
|
+
- Raise the declared host floor to `0.1.6`, which is the line this package actually runs on. The peer band previously admitted `0.1.2-rc.1`, `0.1.5-alpha.1` and `0.1.5-rc.2`, but those lines are **incompatible at the host protocol level**, so the claim was false — and it was not merely theoretical: the Compat matrix failed on every pre-`0.1.6` leg while passing every leg from `0.1.6-alpha.2` on.
|
|
13
|
+
|
|
14
|
+
Root cause, measured rather than inferred:
|
|
15
|
+
|
|
16
|
+
- On `@deepseek-ai/dsh@0.1.2-rc.1` this package cannot activate: `typert-loader: ... invocation parameter codec is not backed by a zod v4 schema` → `plugin tree failed to load: 1 entry did not activate`. The same tarball loads on `0.1.6-alpha.2`.
|
|
17
|
+
- The host source confirms the protocol changed between those lines: the `is not backed by a zod v4 schema` validator exists at `dsh-v0.1.2-rc.1`, `dsh-v0.1.5-alpha.1` and `dsh-v0.1.5-rc.2`, and is gone from `dsh-v0.1.6-alpha.2` onward.
|
|
18
|
+
- Those lines are also **unreproducible from their own metadata**: `dsh@0.1.2-rc.1` declares `^0.1.2-rc.1` for its own sub-packages, so a fresh install drifts to newer sub-package code (measured: `dsh-app-boot` now demands a Cordis HMR service the old host does not provide).
|
|
19
|
+
|
|
20
|
+
No plugin-side change can fix this. Narrowing the band corrects the declaration instead of continuing to advertise unsupported hosts. The Compat matrix drops the removed lines rather than testing hosts we do not claim.
|
|
21
|
+
|
|
22
|
+
|
|
23
|
+
## [0.3.19] - 2026-10-05
|
|
24
|
+
|
|
25
|
+
### Changed
|
|
26
|
+
|
|
27
|
+
- Correct the release date in the previous section, which was stamped with the literal string `undefined` by the release stamper. No content or behaviour change; the version is bumped only because npm will not republish an existing version.
|
|
28
|
+
|
|
29
|
+
|
|
8
30
|
## [Unreleased]
|
|
9
31
|
|
|
10
|
-
## [0.3.18] -
|
|
32
|
+
## [0.3.18] - 2026-10-04
|
|
11
33
|
|
|
12
34
|
undefined
|
|
13
35
|
|
package/README-es.md
CHANGED
|
@@ -34,10 +34,10 @@ Este plugin forma parte de la [familia de plugins DSH](https://github.com/PerryL
|
|
|
34
34
|
*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
|
|
35
35
|
## Compatibility
|
|
36
36
|
|
|
37
|
-
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (verificado el 2026-09-25). Línea npm dev/test `0.1.7-rc.2`; peers `>=0.1.
|
|
37
|
+
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (verificado el 2026-09-25). Línea npm dev/test `0.1.7-rc.2`; peers `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`. La matriz compat fija las cuatro líneas peer declaradas. En esta línea el tercer parámetro de `Session.append` es un `SurfaceIntent` solo para tipos de superficie, así que los eventos `research-report/*` siguen sin registrarse en el log de sesión: los diarios del ledger son la fuente duradera y el espejo de auditoría se activa cuando el host conoce el vocabulario (el candado de regresión en `test/events-gate.spec.ts` lo fija).
|
|
38
38
|
0.1.5-alpha.1 (adaptado el 2026-09-09): el sobre de sesión conserva su campo ignorable solo para compatibilidad de lectura de logs almacenados - Session.append aún no puede estamparlo, por lo que el comportamiento de la puerta no cambia. Verificado el 2026-09-11 contra los tipos publicados 0.1.5-rc.2 (cadena completa de puertas local); el workflow compat fija ambas líneas peer declaradas.
|
|
39
39
|
- Node `^22.19.0 || >=24.0.0`, solo ESM (`"type": "module"`).
|
|
40
|
-
- Dependencias peer: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, y `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs` en `>=0.1.
|
|
40
|
+
- Dependencias peer: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, y `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs` en `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`.
|
|
41
41
|
- Hermanos opcionales (nunca obligatorios): proveedores de `ctx.web` para captura URL/recolección, `ctx.jobs` para ensamblado en segundo plano, `ctx.dataQuality` (dsh-data-quality) para verificación de citas sobre datasets.
|
|
42
42
|
|
|
43
43
|
## What you get
|
package/README-hi.md
CHANGED
|
@@ -34,10 +34,10 @@
|
|
|
34
34
|
*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
|
|
35
35
|
## Compatibility
|
|
36
36
|
|
|
37
|
-
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (2026-09-25 को सत्यापित)। npm dev/test लाइन `0.1.7-rc.2`; peers `>=0.1.
|
|
37
|
+
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (2026-09-25 को सत्यापित)। npm dev/test लाइन `0.1.7-rc.2`; peers `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`। compat मैट्रिक्स चारों घोषित peer लाइनों को पिन करता है। इस लाइन पर `Session.append` का तीसरा पैरामीटर केवल सरफ़ेस प्रकारों के लिए `SurfaceIntent` है, इसलिए `research-report/*` इवेंट अब भी सत्र लॉग में दर्ज नहीं होते: लेजर जर्नल ही टिकाऊ स्रोत हैं और ऑडिट मिरर तभी सक्रिय होता है जब होस्ट शब्दावली जानता हो (`test/events-gate.spec.ts` का रिग्रेशन लॉक इसे पिन करता है)।
|
|
38
38
|
0.1.5-alpha.1 (2026-09-09 को अनुकूलित): सत्र लिफ़ाफ़ा अपना ignorable फ़ील्ड केवल संग्रहीत-लॉग पठन संगतता के लिए रखता है - Session.append अभी भी इसे स्टैम्प नहीं कर सकता, इसलिए गेट व्यवहार अपरिवर्तित है। 2026-09-11 को प्रकाशित 0.1.5-rc.2 टाइप्स के विरुद्ध सत्यापित (पूर्ण स्थानीय गेट-शृंखला); compat workflow दोनों घोषित peer लाइनों को पिन करता है।
|
|
39
39
|
- Node `^22.19.0 || >=24.0.0`, केवल ESM (`"type": "module"`)।
|
|
40
|
-
- Peer डिपेंडेंसी: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, तथा `>=0.1.
|
|
40
|
+
- Peer डिपेंडेंसी: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, तथा `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0` के `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs`।
|
|
41
41
|
- वैकल्पिक सहयोगी (कभी अनिवार्य नहीं): URL कैप्चर/गैदर के लिए `ctx.web` provider; बैकग्राउंड असेंबली के लिए `ctx.jobs`; डेटासेट उद्धरण जाँच के लिए `ctx.dataQuality` (dsh-data-quality)।
|
|
42
42
|
|
|
43
43
|
## What you get
|
package/README-pt.md
CHANGED
|
@@ -34,10 +34,10 @@ Este plugin faz parte da [família de plugins DSH](https://github.com/PerryLink)
|
|
|
34
34
|
*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
|
|
35
35
|
## Compatibility
|
|
36
36
|
|
|
37
|
-
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (verificado em 2026-09-25). Linha npm dev/test `0.1.7-rc.2`; peers `>=0.1.
|
|
37
|
+
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (verificado em 2026-09-25). Linha npm dev/test `0.1.7-rc.2`; peers `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`. A matriz compat fixa as quatro linhas peer declaradas. Nesta linha o terceiro parâmetro de `Session.append` é um `SurfaceIntent` apenas para tipos de superfície, então os eventos `research-report/*` continuam sem ser gravados no log de sessão: os diários do ledger são a fonte durável e o espelho de auditoria ativa quando o host conhece o vocabulário (o cadeado de regressão em `test/events-gate.spec.ts` fixa isso).
|
|
38
38
|
0.1.5-alpha.1 (adaptado em 2026-09-09): o envelope de sessão mantém seu campo ignorable apenas para compatibilidade de leitura de logs armazenados - o Session.append ainda não consegue estampá-lo, então o comportamento da porta não muda. Verificado em 2026-09-11 contra os tipos publicados 0.1.5-rc.2 (cadeia completa de portas local); o workflow compat fixa ambas as linhas peer declaradas.
|
|
39
39
|
- Node `^22.19.0 || >=24.0.0`, apenas ESM (`"type": "module"`).
|
|
40
|
-
- Dependências peer: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, e `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs` em `>=0.1.
|
|
40
|
+
- Dependências peer: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, e `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs` em `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`.
|
|
41
41
|
- Irmãos opcionais (nunca obrigatórios): providers de `ctx.web` para captura de URL/coleta, `ctx.jobs` para montagem em segundo plano, `ctx.dataQuality` (dsh-data-quality) para verificação de citações em datasets.
|
|
42
42
|
|
|
43
43
|
## What you get
|
package/README-zh.md
CHANGED
|
@@ -34,10 +34,10 @@
|
|
|
34
34
|
*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
|
|
35
35
|
## Compatibility
|
|
36
36
|
|
|
37
|
-
- DeepSeek Harness `dsh-v0.2.1-alpha.1`(2026-09-24 已核验)。npm dev/test 线 `0.1.7-rc.2`;peers `>=0.1.
|
|
37
|
+
- DeepSeek Harness `dsh-v0.2.1-alpha.1`(2026-09-24 已核验)。npm dev/test 线 `0.1.7-rc.2`;peers `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`。compat 矩阵同时钉住四条已声明 peer 线。该线上 `Session.append` 的第三参仅对表面事件类型为 `SurfaceIntent`,因此 `research-report/*` 事件仍不落盘:账本日志才是持久真相,审计镜像仅在宿主认识该词表后自动激活(`test/events-gate.spec.ts` 的回归锁钉住此语义)。
|
|
38
38
|
0.1.5-alpha.1(2026-09-09 已适配):会话信封保留 ignorable 字段但仅用于存量日志读取兼容——Session.append 仍无法盖章,门控行为不变。已于 2026-09-11 对照已发布的 0.1.5-rc.2 类型核验通过(完整本地门禁链);compat workflow 同时钉住两条已声明 peer 线。
|
|
39
39
|
- Node `^22.19.0 || >=24.0.0`,仅 ESM(`"type": "module"`)。
|
|
40
|
-
- Peer 依赖:`@deepseek-ai/cordis ^4.0.2`、`@deepseek-ai/schemastery ^3.18.2`,以及 `>=0.1.
|
|
40
|
+
- Peer 依赖:`@deepseek-ai/cordis ^4.0.2`、`@deepseek-ai/schemastery ^3.18.2`,以及 `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0` 的 `@deepseek-ai/dsh-session`、`@deepseek-ai/dsh-tools`、`@deepseek-ai/dsh-system-prompt`、`@deepseek-ai/dsh-web`、`@deepseek-ai/dsh-jobs`。
|
|
41
41
|
- 可选协同(绝不强制):URL 抓取/检索用 `ctx.web` provider;后台组装用 `ctx.jobs`;数据集引文核查用 `ctx.dataQuality`(dsh-data-quality)。
|
|
42
42
|
|
|
43
43
|
## What you get
|
package/README.md
CHANGED
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
|
|
37
37
|
## Compatibility
|
|
38
38
|
|
|
39
|
-
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (verified 2026-09-25). npm dev/test line `0.1.7-rc.2`; peers `>=0.1.
|
|
39
|
+
- DeepSeek Harness `dsh-v0.2.1-alpha.1` (verified 2026-09-25). npm dev/test line `0.1.7-rc.2`; peers `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`. The compat matrix pins all four declared peer lines. On this line `Session.append`'s third parameter is a `SurfaceIntent` for surface-eligible types only, so `research-report/*` events still do not land in the session log: the ledger journals are the durable source of truth and the audit mirror activates only once a host knows the vocabulary (the regression lock in `test/events-gate.spec.ts` pins that).
|
|
40
40
|
0.1.5-alpha.1 (adapted 2026-09-09): the session envelope keeps its ignorable field for stored-log read compatibility only - Session.append still cannot stamp it, so audit-gate behavior is unchanged. Verified 2026-09-11 against the published 0.1.5-rc.2 types (full local gate chain); the compat workflow pins both declared peer lines.
|
|
41
41
|
- Node `^22.19.0 || >=24.0.0`, ESM only (`"type": "module"`).
|
|
42
|
-
- Peer dependencies: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, and `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs` at `>=0.1.
|
|
42
|
+
- Peer dependencies: `@deepseek-ai/cordis ^4.0.2`, `@deepseek-ai/schemastery ^3.18.2`, and `@deepseek-ai/dsh-session`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, `@deepseek-ai/dsh-web`, `@deepseek-ai/dsh-jobs` at `>=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0`.
|
|
43
43
|
- Optional siblings (never required): `ctx.web` providers for URL capture/gather, `ctx.jobs` for background assembly, `ctx.dataQuality` (dsh-data-quality) for dataset citation cross-checks.
|
|
44
44
|
|
|
45
45
|
## What you get
|
package/lib/cli.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { _ as sha256Of, a as renderSarif, o as renderVerificationJson, r as buildVerificationReport, s as verifySealedReport } from "./verify-sealed-
|
|
1
|
+
import { _ as sha256Of, a as renderSarif, o as renderVerificationJson, r as buildVerificationReport, s as verifySealedReport } from "./verify-sealed-SQ6MsZQM.js";
|
|
2
2
|
import path from "node:path";
|
|
3
3
|
import { readFile } from "node:fs/promises";
|
|
4
4
|
//#region src/cli.ts
|
package/lib/index.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { _ as sha256Of, a as renderSarif, c as VERSION, d as extractCitations, f as mapBridgeResults, g as LedgerError, h as EvidenceLedger, i as renderMachineCheckMarkdown, l as combineOutcomes, m as verifyClaimText, n as VERIFIER_TOOL, o as renderVerificationJson, p as normalizeNumber, r as buildVerificationReport, s as verifySealedReport, t as SARIF_SCHEMA, u as contextLabelOf } from "./verify-sealed-
|
|
1
|
+
import { _ as sha256Of, a as renderSarif, c as VERSION, d as extractCitations, f as mapBridgeResults, g as LedgerError, h as EvidenceLedger, i as renderMachineCheckMarkdown, l as combineOutcomes, m as verifyClaimText, n as VERIFIER_TOOL, o as renderVerificationJson, p as normalizeNumber, r as buildVerificationReport, s as verifySealedReport, t as SARIF_SCHEMA, u as contextLabelOf } from "./verify-sealed-SQ6MsZQM.js";
|
|
2
2
|
import path from "node:path";
|
|
3
3
|
import z from "@deepseek-ai/schemastery";
|
|
4
4
|
import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
|
package/lib/types/version.d.ts
CHANGED
package/lib/types/version.js
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-research-report",
|
|
3
|
-
"version": "0.3.
|
|
3
|
+
"version": "0.3.20",
|
|
4
4
|
"description": "Verifiable research-report engine for DeepSeek Harness: a content-addressed evidence ledger (claim — snapshot binding, tamper-evident) plus versioned sealed reports where every claim carries a verification verdict and the manifest hash seals the directory. Retrieval orchestration reuses the official ctx.web / ctx.jobs seams — no deep-research loop.",
|
|
5
5
|
"author": "dsh-research-report contributors",
|
|
6
6
|
"repository": {
|
|
@@ -71,8 +71,6 @@
|
|
|
71
71
|
],
|
|
72
72
|
"compatibility": {
|
|
73
73
|
"dshVersions": [
|
|
74
|
-
"0.1.2-rc.1",
|
|
75
|
-
"0.1.5-rc.2",
|
|
76
74
|
"0.1.7-alpha.2",
|
|
77
75
|
"0.1.7-rc.1",
|
|
78
76
|
"0.1.7-rc.2",
|
|
@@ -105,17 +103,17 @@
|
|
|
105
103
|
],
|
|
106
104
|
"engines": {
|
|
107
105
|
"node": "^22.19.0 || >=24.0.0",
|
|
108
|
-
"dsh": ">=0.1.
|
|
106
|
+
"dsh": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0"
|
|
109
107
|
},
|
|
110
108
|
"packageManager": "pnpm@11.7.0",
|
|
111
109
|
"peerDependencies": {
|
|
112
110
|
"@deepseek-ai/cordis": "^4.0.5-alpha.1",
|
|
113
111
|
"dsh-data-quality": ">=0.1.0 <0.4.0",
|
|
114
|
-
"@deepseek-ai/dsh-jobs": ">=0.1.
|
|
115
|
-
"@deepseek-ai/dsh-session": ">=0.1.
|
|
116
|
-
"@deepseek-ai/dsh-system-prompt": ">=0.1.
|
|
117
|
-
"@deepseek-ai/dsh-tools": ">=0.1.
|
|
118
|
-
"@deepseek-ai/dsh-web": ">=0.1.
|
|
112
|
+
"@deepseek-ai/dsh-jobs": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0",
|
|
113
|
+
"@deepseek-ai/dsh-session": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0",
|
|
114
|
+
"@deepseek-ai/dsh-system-prompt": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0",
|
|
115
|
+
"@deepseek-ai/dsh-tools": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0",
|
|
116
|
+
"@deepseek-ai/dsh-web": ">=0.1.6-0 <0.2.0 || >=0.2.0-0 <0.3.0",
|
|
119
117
|
"@deepseek-ai/schemastery": "^3.18.5-alpha.1"
|
|
120
118
|
},
|
|
121
119
|
"peerDependenciesMeta": {
|
package/src/version.ts
CHANGED