fix(compat): adopt DSH 0.1.2-rc.1

[Grivn]

摘要 / Summary

将开发与验证基线从 DSH 0.1.1-rc.2 升级到精确锁定的 0.1.2-rc.1，并补齐新 RC 发布声明所需的 Store/Invariants 依赖闭包与 selector 类型来源。继续保留对直接前身 0.1.2-alpha.5 的源码覆盖验证，以及对上一稳定基线 0.1.1-rc.2 的无版本分支向后兼容。

Moves the development and verification baseline from DSH 0.1.1-rc.2 to the exact 0.1.2-rc.1 registry release, including the Store/Invariants dependency closure and public selector type source required by the new RC declarations. Source-overlay verification for the immediate 0.1.2-alpha.5 predecessor and branch-free backward compatibility with 0.1.1-rc.2 remain covered.

关联 Issue 或背景 / Related Issue or Context

N/A. This is direct compatibility maintenance for the newly published upstream DSH 0.1.2-rc.1 release, which is an accepted PR category for this repository.

涉及区域 / Affected Areas

• Host 激活、Headless 或 bundle / Host activation, Headless, or bundle
• 运行时记忆 / Runtime Memory
• 项目档案 / Project Documents
• 记忆体或 Provider / Memory Spaces or Providers
• 子 Agent 或 Agent 工作流 / Subagent or Agent workflow
• Web UI 或对话交互 / Web UI or conversation interaction
• 设置、存储或安全 / Settings, storage, or security
• CLI、RPC、命令或工具 / CLI, RPC, commands, or tools
• 安装、更新或发布 / Installation, update, or release
• 测试、构建或文档 / Tests, build, or documentation
• 其他（请说明）/ Other (explain below)

PR 类型 / PR Type

• 面向用户的功能或行为变更 / User-facing feature or behavior change
• Bug 修复 / Bug fix
• 增强或优化 / Enhancement or optimization
• 兼容性适配 / Compatibility change
• 维护或重构 / Maintenance or refactor
• 测试或构建 / Tests or build

最新代码确认 / Latest Codebase Confirmation

• 我已基于最新 main 分支开发，或在提交前已 rebase 或合并最新 main。 / I developed from the latest main, or rebased or merged the latest main before submitting.

同步命令 / Sync command:

git fetch origin main
git merge-base --is-ancestor origin/main HEAD

Base confirmed at f6cb0c7f13f346f07fa03afed4fd07917ed61059 immediately before push.

AI 编码披露 / AI Coding Disclosure

• 完全 AI 编码：全部编程改动由 AI 产出，并由贡献者接受和审查。 / Fully AI-coded: AI produced all programming changes, which the contributor accepted and reviewed.
• 部分 AI 辅助：AI 帮助编写或修改了部分内容。 / Partially AI-assisted: AI helped write or modify part of the change.
• 未使用 AI 编码辅助。 / No AI coding assistance was used.

使用的 AI 模型 / AI model used: GPT-5 Codex

使用的编码 Agent 工具 / Coding Agent tool used: Codex

仓库规范检查 / Repository Rules

• 未修改 DSH 官方源码，未让 tsconfig 指向 DSH 源码 checkout，仅使用正式的 @deepseek-ai/* NPM 契约。 / I did not modify DSH source or point tsconfig at a DSH source checkout, and used only published @deepseek-ai/* NPM contracts.
• Client 与 Host 边界仍以 src/shared/contracts.ts 为准，没有在两侧重复定义 wire DTO。 / The Client and Host boundary still uses src/shared/contracts.ts as the single source for wire DTOs.
• 持久化格式、RPC 权限、路径或凭据处理的变更包含兼容或拒绝路径、安全分析和相应测试。 / Changes to persistence formats, RPC authority, paths, or credentials include compatibility or rejection paths, security analysis, and tests.
• 没有提交 token、密钥、私有记忆、未脱敏日志或生成的 lib/ 文件。 / I did not commit tokens, credentials, private memory, unredacted logs, or generated lib/ files.
• 用户可见文案和长期文档已同步维护中文与英文版本，命令、配置键和路径保持一致。 / User-facing copy and long-lived documentation are synchronized in Chinese and English, with matching commands, configuration keys, and paths.
• 新增和修改的代码、注释、文档、提交信息不含 emoji。 / New and modified code, comments, documentation, and commits contain no emoji.

兼容性与数据安全 / Compatibility and Data Safety

• Registry development dependencies now use exact DSH 0.1.2-rc.1 packages. Direct Store and Invariants dependencies close the published type/peer graph instead of relying on transitive hoisting.
• The alpha.5 source-overlay job links the same 23 build-time packages and restores the exact registry links afterward; alpha remains coverage, not the stable dependency baseline.
• Existing capability detection continues to prefer snapshotEvents() / eventAt() on 0.1.2 and fall back to session.events on 0.1.1-rc.2. No version parsing or runtime arity inspection was added.
• There are no persistence-format, RPC-authority, configuration-key, credential, migration, or data-layout changes. Existing state remains usable across upgrade and rollback.
• WebUI evidence uses fresh isolated directories, a localhost-only deterministic model fixture, disabled memory writes, and synthetic content. No credential, private memory, or sensitive path is committed.

本地验证 / Local Validation

执行的命令 / Commands run:

npx --yes pnpm@10.13.1 install --frozen-lockfile
CI=true npx --yes pnpm@11.7.0 install --frozen-lockfile
npx --yes pnpm@10.13.1 run verify
pnpm run dsh:link-source -- <built-dsh-0.1.2-alpha.5-checkout>
pnpm_config_verify_deps_before_run=false pnpm run verify
pnpm_config_verify_deps_before_run=false pnpm run dsh:restore-registry
npx --yes pnpm@10.13.1 exec vitest run tests/plugin.spec.ts tests/client-subagent-token-usage.spec.tsx

结果摘要 / Result summary:

• DSH 0.1.2-rc.1 exact-registry verification passed typecheck, 654 tests (one Windows-only skip on macOS), deterministic build checks, isolated Headless smoke, package-content checks, publint, and attw.
• pnpm 11.7.0 verified all 936 lockfile entries against its supply-chain policy. The exact 217-package rc.1 release-age exemption is required to equal the lockfile cohort and cannot permit future scope releases.
• DSH 0.1.2-alpha.5 source overlay at db6bdc3576c2d4e7c965e8e3ed0c2a731eed87f5 passed the same complete verification chain; 23 registry links were restored afterward.
• Focused manifest/type regression: 20 tests passed.
• Independent DSH 0.1.2-rc.1 WebUI: Mnemon status and all four pages loaded, synthetic conversation completed, read-only save-to-memory dialog behaved correctly, and the conversation survived reload. Browser warning/error logs and matching Host diagnostics were empty.
• Independent DSH 0.1.1-rc.2 WebUI: memory-system loading, synthetic conversation, and reload persistence passed in a separate profile, with empty browser warning/error logs and matching Host diagnostics.

用户可见变更证据 / Local Feature Evidence

完整的隔离边界、版本矩阵和三张原始截图见 docs/pr-assets/dsh-rc1-compat/README.md。

DSH 0.1.2-rc.1 status:

DSH 0.1.2-rc.1 isolated conversation after reload:

DSH 0.1.1-rc.2 backward regression: