v0.2.3 — adapt to deepseek-harness 0.1.0-rc.7

Compatibility

• Adapted to deepseek-harness 0.1.0-rc.7: plugin code verified against the rc.7 llm service (resolveModelInfo / listModels / adapter.stream / llm/adapters-updated) and attachments service (readImage) — both unchanged from rc.6 — no code changes required. Configuration and install docs now target 0.1.0-rc.7.

Fixed

• Duplicate loader entry id trap: dsh 0.1.0-rc.7 (cordis-plugin-loader 1.0.2) rejects two composed rows sharing one loader entry id, failing the boot with duplicate loader entry id: windows-ocr. The docs previously let users install the plugin both as an npm bundle and as a manual cordis.patch.yml insert (same id, twice). Install modes are now documented as mutually exclusive.
• Broken config-override example: the documented - update: patch form is not part of the dsh patch dialect and was silently skipped. The READMEs and agents-install now show the correct id-targeted override row (- id: windows-ocr + config:), which replaces the existing row's config without registering a second entry.

Full changelog: CHANGELOG.md

v0.2.2: Merge pull request #3 from maxwell-feng/release/0.2.2

v0.2.2 — npm release + Trusted Publishing

• First npm release: @maxwell-feng/dsh-windows-ocr (public, latest 0.2.2) — https://www.npmjs.com/package/@maxwell-feng/dsh-windows-ocr
• Trusted Publishing (OIDC): future releases publish from GitHub Actions publish.yml with automatic Sigstore provenance — no long-lived npm tokens
• Docs: one-line npm install (dsh plugin --profile web add @maxwell-feng/dsh-windows-ocr) + README badges

安装：dsh plugin --profile web add @maxwell-feng/dsh-windows-ocr

v0.2.1 — review-fix release

v0.2.1 — review-fix release (first tagged release)

Applies the same standard as the tesseract-ocr backend of the dshoneys/awesome-dshoneys#1 review. Full detail in CHANGELOG.md.

Privacy & safety

• passthrough now defaults to false (OCR every image; vision passthrough is opt-in)
• Local attachment filenames are no longer forwarded in <image_ocr> blocks
• Missing attachments are replaced with a refusal text block (fail-closed, never a raw image)
• Unload/HMR restores the original resolveModelInfo / listModels / adapter.stream methods
• On timeout/teardown the OCR child is terminated and awaited (taskkill /t /f) before temp-dir removal; removal retries once and logs
• Startup temp sweep only removes our own mkdtemp-shaped directories

Reproducibility & CI

• Scoped package name @maxwell-feng/dsh-windows-ocr
• Pinned dev dependencies + committed package-lock.json
• GitHub Actions CI: Ubuntu compile job + Windows job running the standalone suite (real powershell.exe + mock OCR script)

Docs: README / README.zh-CN / agents-install / cordis.patch.yml aligned with the new privacy defaults.

Verified: all standalone tests pass; CI green; deployed to Windows hosts.