v0.2.3 — adapt to deepseek-harness 0.1.0-rc.7

Compatibility

• Adapted to deepseek-harness 0.1.0-rc.7: plugin code verified against the rc.7 llm service (resolveModelInfo / listModels / adapter.stream / llm/adapters-updated) and attachments service (readImage) — both unchanged from rc.6 — no code changes required. Configuration and install docs now target 0.1.0-rc.7.

Fixed

• Duplicate loader entry id trap: dsh 0.1.0-rc.7 (cordis-plugin-loader 1.0.2) rejects two composed rows sharing one loader entry id, failing the boot with duplicate loader entry id: tesseract-ocr. The docs previously let users install the plugin both as an npm bundle and as a manual cordis.patch.yml insert (same id, twice). Install modes are now documented as mutually exclusive.
• Broken config-override guidance: agents-install told users to modify an existing row with - update:, a patch form that is not part of the dsh patch dialect and is silently skipped. The docs now show the correct id-targeted override row (- id: tesseract-ocr + config:), which replaces the existing row's config without registering a second entry.

Full changelog: CHANGELOG.md

v0.2.2: Merge pull request #4 from maxwell-feng/release/0.2.2

v0.2.2 — npm release + Trusted Publishing

• First npm release: @maxwell-feng/dsh-tesseract-ocr (public, latest 0.2.2) — https://www.npmjs.com/package/@maxwell-feng/dsh-tesseract-ocr
• Trusted Publishing (OIDC): future releases publish from GitHub Actions publish.yml with automatic Sigstore provenance — no long-lived npm tokens
• Docs: one-line npm install (dsh plugin --profile web add @maxwell-feng/dsh-tesseract-ocr) + README badges

安装：dsh plugin --profile web add @maxwell-feng/dsh-tesseract-ocr

v0.2.1 — review-fix release

v0.2.1 — review-fix release (first tagged release)

Addresses the six blocking findings from the dshoneys/awesome-dshoneys#1 community review. Full detail in CHANGELOG.md.

Privacy & safety

• passthrough now defaults to false (OCR every image; vision passthrough is opt-in)
• Local attachment filenames are no longer forwarded in <image_ocr> blocks
• Missing attachments are replaced with a refusal text block (fail-closed, never a raw image)
• Unload/HMR restores the original resolveModelInfo / listModels / adapter.stream methods
• On timeout/teardown the OCR child is terminated and awaited before temp-dir removal; removal retries once and logs
• tesseractBin parsing is quote-aware — "C:\Program Files\Tesseract-OCR\tesseract.exe" works
• Startup temp sweep only removes our own mkdtemp-shaped directories

Reproducibility & CI

• Scoped package name @maxwell-feng/dsh-tesseract-ocr
• Pinned dev dependencies + committed package-lock.json
• GitHub Actions CI: npm ci + 18 standalone tests + real Tesseract smoke on Ubuntu

Docs: README / README.zh-CN / agents-install / cordis.patch.yml aligned with the new privacy defaults.

Verified: all standalone tests pass; CI green; deployed to Ubuntu 26.04 and Windows hosts.