v0.1.0

dsh-plugin-debugging v0.1.0

First release. A read-only debugging toolkit for a running DSH instance: one skill plus four tools that answer "why did my change not take effect", "did that plugin actually load", "is this a dead port or a 401", and "what did the composition resolve to".

Tools

Tool	In one line
dsh_check_effect_mode	Which live-effect tier your change falls under — config, host code, or client code — and whether this profile's hmr is actually watching the patch files
dsh_diagnose_plugin_load	Whether a plugin is in bundles, how it is mounted, and what the Loader tree says; observed evidence (fiber.state, import-time failure) is kept separate from inferred evidence
dsh_check_auth	Connection refused (not running) versus 401 (running, not authenticated); the authority is a literal host:port match
dsh_dump_config	The composed config tree and its diagnostics; --dump-config always exits 0, so its exit code is not a gate

Skill

dsh-plugin-debugging (v2.1.4) carries the reasoning behind every check: the three live-effect tiers, installation forms, credential acquisition, process identification, and isolated instances. The tools are accelerators; where one is ambiguous, the skill text wins.

Verification

• 187 tests across 10 files pass; lint, format:check and the release-state checks are green; CI is green on main.
• "Read-only" is a redline rather than a slogan: v1 never edits a profile, never writes $DSH_HOME, and never kills a process.

Provenance

0.1.0 was published manually, so it carries no npm provenance attestation. Build provenance and the SLSA badge start with the next version, which ships through .github/workflows/release.yml and npm Trusted Publishing (OIDC).

---

dsh-plugin-debugging v0.1.0（中文）

首个版本。 给正在跑的 DSH 实例排障的只读工具包：1 个技能 + 4 个工具，回答「改完为什么没生效」「那个插件到底加载了没有」「这是端口没人听还是 401」「组合最后解析成了什么」。

工具

工具	一句话
dsh_check_effect_mode	你的改动属于哪一档生效方式（配置 / 宿主代码 / 客户端代码），以及这个 profile 的 hmr 是否真的在 watch patch 文件
dsh_diagnose_plugin_load	插件在不在 bundles、以什么形态挂上、Loader 树怎么说；观测到的证据（fiber.state、import 期失败）与推断出的证据分开报
dsh_check_auth	连接被拒（没启动）还是 401（服务在、认证没过）；authority 是逐字匹配的 host:port
dsh_dump_config	组合后的配置树与诊断；--dump-config 退出码恒 0，不能当门禁

技能

dsh-plugin-debugging（v2.1.4）载着每条判据背后的推理：三档生效方式、安装形态、凭证获取、进程识别、隔离实例。工具是加速器；工具含糊时以技能正文为准。

验证

• 187 个测试（10 个文件）全过；lint、format:check 与发布态不变量检查均绿；main 上 CI 绿。
• 「只读」是红线而不是口号：v1 不改 profile、不写 $DSH_HOME、不杀进程。

溯源

0.1.0 是手动发布的，因此没有 npm provenance 证明。构建溯源与 SLSA 徽章从下一个版本开始，那个版本走 .github/workflows/release.yml 与 npm Trusted Publishing（OIDC）。