feat: bridge DSH 0.1.2 APIs and redesign the project landing page

.github/workflows/ci.yml

@@ -44,8 +44,8 @@ jobs:
         run: pnpm vitest run packages/core/tests/config-loader.test.ts packages/core/tests/config-validation.test.ts packages/core/tests/policy-errors.test.ts packages/core/tests/policy-resolver.test.ts
       - name: Core property contracts
         run: pnpm vitest run packages/core/tests/core-property.test.ts
-      - name: DSH execution and host contracts
-        run: pnpm vitest run packages/dsh/tests/dsh-request-contract.test.ts packages/dsh/tests/host-composition.test.ts packages/dsh/tests/vertical-slice.test.ts packages/dsh/tests/keyless-vertical-slice.test.ts
+      - name: DSH execution, host, and release-bridge contracts
+        run: pnpm vitest run packages/dsh/tests/dsh-request-contract.test.ts packages/dsh/tests/host-composition.test.ts packages/dsh/tests/vertical-slice.test.ts packages/dsh/tests/keyless-vertical-slice.test.ts packages/dsh/tests/dsh-012-compat.test.ts
       - name: Auth, knowledge, CLI, and overlay contracts
         run: pnpm vitest run packages/auth/tests/auth.test.ts packages/model-knowledge/tests/knowledge.test.ts packages/cli/tests/user-commands.test.ts packages/dsh/tests/knowledge-overlay.test.ts
       - name: CLI package typecheck
@@ -65,11 +65,12 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - run: pnpm qa:pack-install
 
-  # Optional upstream source lane: explicit DSH_REFERENCE_DIR, never a
-  # default hermetic dependency.
+  # Optional upstream source lane: kept manual while the DSH 0.1.2 package set
+  # is rolling through npm. compatibility.json records the current source
+  # target separately from the verified install baseline.
   dsh-upstream-source-contract:
     runs-on: ubuntu-latest
     if: github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@v4
-      - run: echo 'dsh-upstream-source-contract is informational; requires DSH_REFERENCE_DIR checkout'
+      - run: echo 'Use compatibility.json target.dshRelease as the source canary; promote it to the install baseline only after the npm package set and clean profile journey are verified.'

CHANGELOG.md

@@ -14,6 +14,8 @@ DSHelm is still in alpha. Entries before the first public npm publication are **
 - Added a CI gate for publishable package metadata and reduced duplicate/stale branch runs.
 - Kept `dshelm init`'s default `@dshelm/dsh` bundle version aligned with the installed CLI package version.
 - Added a machine-readable publishable package graph and version-independent pack/install verification, removing release-version literals from CI and reading the verified DSH package baseline from `compatibility.json`.
+- Audited DeepSeek Harness `0.1.2-rc.1` as the current source target and added forward-compatible bridges for the new Session snapshot API plus subagent `agentOptions` / `reasoningEffort` semantics, while keeping `0.1.0-rc.7` as the verified install baseline until the full npm graph and clean-profile journey pass.
+- Rebuilt the bilingual README landing experience around a visual routing flow, explicit compatibility/evidence cards, a real control-plane screenshot, and clearer separation between demonstrated contracts and unverified provider/runtime claims.
 
 ## 0.3.0-alpha.0 — 2026-08-19 — source milestone
 

compatibility.json

@@ -12,6 +12,28 @@
     "dshReferenceCheckout": "99f6f02fecdb7dff40c3fbc9470f5907c29f74ca (dsh-v0.1.0-rc.7, read-only reference)",
     "verifiedDate": "2026-08-18"
   },
+  "target": {
+    "dshRelease": "0.1.2-rc.1",
+    "releaseTag": "dsh-v0.1.2-rc.1",
+    "sourceCommit": "a66e4702047846cdaa10c66c9d3df3951f5ea70d",
+    "releaseDate": "2026-09-03",
+    "status": "session/subagent/settings and browser-source compatibility bridges implemented; package-manifest client-module migration plus complete npm/clean-profile/Web verification remain before promotion",
+    "auditedSeams": [
+      "Session.snapshotEvents() replacing Session.events",
+      "SubagentCapabilities.agentOptions",
+      "AgentOptions.reasoningEffort",
+      "SettingsProvider.installSection(owner, ...) replacing the legacy top-level installSettingsSection(ctx, ...)",
+      "literal settings namespaces replacing consumer dependence on settingsNamespace()",
+      "@deepseek-ai/dsh-client-modules replacing the legacy dsh-client-runtime bootstrap package",
+      "package-owned dsh.client browser module graph"
+    ],
+    "promotionBlockers": [
+      "the complete 0.1.2-rc.1 npm package graph must be available",
+      "@dshelm/dsh package.json still depends on and injects @deepseek-ai/dsh-client-runtime from the verified legacy baseline",
+      "the 0.1.2 client package graph must replace the legacy runtime dependency/inject coherently with pnpm-lock.yaml",
+      "fresh packed install, isolated profile boot, Web client bundle loading, settings-provider registration, doctor/explain/fixtures/uninstall must pass"
+    ]
+  },
   "seams": {
     "llm": [
       "listProviders",
@@ -22,32 +44,46 @@
     ],
     "agent": [
       "AgentRegistry.create",
-      "installModelSelection"
+      "installModelSelection",
+      "AgentOptions provider/model with 0.1.2 reasoningEffort bridge"
     ],
     "subagent": [
       "SubagentRuntime.registerProvider",
-      "SubagentStartRequest (persona/toolFilter/maxDepth)",
+      "SubagentStartRequest (agentOptions/persona/toolFilter/maxDepth)",
       "startInProcessRun"
     ],
     "session": [
       "SessionStore",
       "SessionEventMap augmentation via '@deepseek-ai/dsh-session/types'",
+      "snapshotEvents() with legacy events fallback",
       "request/header"
     ],
     "projection": [
       "SessionProjectionRegistry",
       "ProjectionDefinition",
       "SessionProjectionMap augmentation"
     ],
+    "client": [
+      "browser source consumes a structural sessions.binding(...).session.projections face",
+      "0.1.2 source uses @deepseek-ai/dsh-client-modules for browser plugin boot/composition",
+      "legacy @deepseek-ai/dsh-client-runtime dependency/inject remains only in the verified package graph until lockfile promotion"
+    ],
     "settings": [
-      "installSettingsSection(ctx, ns, schema, entry, hooks)",
-      "settingsNamespace"
+      "legacy top-level installSettingsSection(ctx, ns, schema, entry, hooks) fallback",
+      "0.1.2 ctx.settings.installSection(owner, ns, schema, entry, hooks) through optional Context.inject",
+      "literal dshelm namespace with legacy settingsNamespace() compatibility",
+      "callable + serializable DSHelm user-settings schema"
     ]
   },
-    "notes": [
-    "dsh-client-runtime@0.1.0-rc.7 is browser-only and requires the DSH Web shell",
-    "public CLI tarball is named dshelm; workspace @dshelm packages are packed together for closure verification",
-    "clean journey uses an isolated HOME/DSH_HOME and verifies init, rc.7 dump-config, bounded boot, doctor, explain, and uninstall",
-    "native auth descriptors are version-gated evidence snapshots: Codex 0.147.0 and Claude Code 2.1.234; Gemini and Qwen shell login/logout are unsupported"
+  "notes": [
+    "The verified npm/install baseline remains 0.1.0-rc.7 until the 0.1.2-rc.1 package set is fully published and the clean profile journey passes.",
+    "DSH 0.1.2 removes direct Session.events reads in favor of seq/eventAt()/snapshotEvents(); DSHelm now prefers snapshotEvents() and falls back to the legacy getter.",
+    "DSH 0.1.2 adds the SubagentCapabilities.agentOptions gate and AgentOptions.reasoningEffort; DSHelm advertises the capability at runtime while retaining the request/header seed for legacy hosts.",
+    "DSH 0.1.2 moves optional settings-section installation from the top-level installSettingsSection helper to SettingsProvider.installSection(owner, ...). DSHelm imports the settings package as a namespace, prefers the modern service method when the legacy helper is absent, and keeps the rc.7 helper path as a fallback.",
+    "DSHelm now supplies a real callable/toJSON settings schema instead of casting a plain object to the DSH settings schema type; deep policy validation still belongs to @dshelm/core.",
+    "DSH 0.1.2 source removes the old packages/client/runtime package and introduces @deepseek-ai/dsh-client-modules as the browser module/boot system. DSHelm browser source no longer imports dsh-client-runtime/client, but package metadata migration is intentionally deferred to the exact-version + lockfile promotion step.",
+    "public CLI tarball is named dshelm; workspace @dshelm packages are packed together for closure verification.",
+    "clean journey uses an isolated HOME/DSH_HOME and verifies init, dump-config, bounded boot, doctor, explain, and uninstall.",
+    "native auth descriptors are version-gated evidence snapshots: Codex 0.147.0 and Claude Code 2.1.234; Gemini and Qwen shell login/logout are unsupported."
   ]
 }