DSH Web UI Files

This release contains 6 new features, 33 bug fixes, 15 other changes. 本次发布包含 6 项新功能、33 项修复、15 项其他改动。

New Features / 新功能

• [skins] add cyber night skin / [skins] 新增 cyber night 皮肤
• [remote-web-ui] add unpaired desktop blocking page / [remote-web-ui] 新增未配对桌面拦截页
• [remote-web-ui] persist paired sessions and show a device roster (#587) / [remote-web-ui] 持久化已配对会话并展示设备名单
• [remote-web-ui] 增加电脑配对链接入口 (#585) / [remote-web-ui] add a desktop pairing link entry
• [remote-web-ui] extend scan-to-pair to the PC Web GUI via /remote/api (#585) / [remote-web-ui] 扫码配对扩展到 PC Web GUI（经 /remote/api）
• [skins] add skin furina (#774) / [skins] 新增 furina 皮肤

Bug Fixes / 修复

• [skin-center] WE 壁纸遮挡中和的 rc.8 适配（稳定语义锚点 + 全视口表面标记)(#734) (#758) / [skin-center] rc.8 adaptation to neutralize WE wallpaper occlusion (stable semantic anchor + full-viewport surface marker)
• [task-board] close visible todo plans before final response (#658) (#668) / [task-board] 最终响应前关闭可见的待办计划
• [scripts] resolve pnpm.cmd on win32 in e2e-mount-rewrite packWorkspace (#763) (#771) / [scripts] win32 下解析 pnpm.cmd（e2e-mount-rewrite packWorkspace）
• [skin-center] detect shell message rows for content blur (#732) (#769) / [skin-center] 内容模糊时识别 shell 消息行
• [describe-image] return successful send outcome (#757) / [describe-image] 返回成功的发送结果
• [task-board] dispatch pinned permissions through host commands (#654) / [task-board] 经 host 命令分发钉住的权限
• [ci] grant pull-requests write so the PR evidence gate can comment (#770) / [ci] 授予 pull-requests 写权限以便 PR 证据门禁评论
• [skin-center] crop WE texture padding at decode and fix flow layer UVs / [skin-center] 解码时裁掉 WE 纹理填充并修复 flow 层 UV
• [skin-center] crop scene frames to the declared projection ratio / [skin-center] 按声明的投影比例裁剪场景帧
• [desktop-launcher] start settings card collapsed by default / [desktop-launcher] 设置卡默认折叠启动
• [skins] fold WE scene parent transforms and drive water reflection from scene data (#742) / [skins] 合并 WE 场景父级变换并由场景数据驱动水面反射
• [pet] sync Live2D canvas with pet size / [pet] Live2D 画布与宠物尺寸同步
• [release-assets] skip private family packages / [release-assets] 跳过 private 家族包
• [chat-recovery] publish as public package so the aggregate install resolves / [chat-recovery] 以公开包发布使聚合安装可解析
• [remote-web-ui] keep the settings bridge unreachable from /remote/api / [remote-web-ui] 保持设置桥对 /remote/api 不可达
• [remote-web-ui] keep desktop-launcher unreachable from /remote/api / [remote-web-ui] 保持桌面启动器对 /remote/api 不可达
• [ci] pack unpublished family deps into distinct e2e tarballs / [ci] 未发布的家族依赖打包为独立 e2e tarball
• [pet] warn on decoration strip geometry mismatch / [pet] 装饰条几何不匹配时告警
• [pet] hold single-frame status decoration without a rAF loop / [pet] 单帧状态装饰无需 rAF 循环保持
• [git-graph] count AA/DD as conflicts and keep HEAD-prefixed ref names / [git-graph] AA/DD 计入冲突并保留 HEAD 前缀引用名
• [remote-web-ui] envelope session.list errors and refresh loadMore's owned-id set / [remote-web-ui] 包裹 session.list 错误并刷新 loadMore 的 owned-id 集合
• [ssh] surface server error messages and reject empty create passwords / [ssh] 展示服务器错误信息并拒绝空创建密码
• [scripts] repair banner syntax, no-newline diff lines, and --url parsing / [scripts] 修复 banner 语法、无换行 diff 行与 --url 解析
• [pet] clean up failed Live2D mounts / [pet] 清理失败的 Live2D 挂载
• [remote-web-ui] keep /api/pair unreachable from /remote/api / [remote-web-ui] 保持 /api/pair 对 /remote/api 不可达
• [pet,git-graph] admit paired-device cookies on owned host routes / [pet,git-graph] 自有宿主路由放行配对设备 cookie
• [remote-web-ui] center the unpaired desktop blocking page / [remote-web-ui] 未配对桌面拦截页居中
• [remote-web-ui,pet] defer remote pet registry request / [remote-web-ui,pet] 延迟远程宠物注册表请求
• [remote-web-ui] 隐藏设备会话凭据 (#587) / [remote-web-ui] hide device session credentials
• [remote-web-ui] label roster rows with device id and User-Agent (#587) / [remote-web-ui] 设备名单行标注设备 id 与 User-Agent
• [remote-web-ui] 统一远程访问命名 (#585) / [remote-web-ui] unify remote access naming
• [remote-web-ui] 让配对桌面代理覆盖插件路由 (#585) / [remote-web-ui] let the paired desktop agent override plugin routes
• [remote-web-ui] refuse unpaired /remote/api bodies before buffering (#585) / [remote-web-ui] 未配对 /remote/api 请求体在缓冲前拒绝

Other Changes / 其他改动

• [remote-web-ui] skip POSIX file-mode assertion on win32 (#772) (#775) / [remote-web-ui] win32 跳过 POSIX 文件模式断言
• [liangshen] make custom-bash tests win32-safe and hermetic (#763) (#765) / [liangshen] custom-bash 测试 win32 安全且封闭
• [contrib] record dev branch flow changeover and update triage close criterion / [contrib] 记录 dev 分支流程切换并更新分诊关闭标准
• [skin-center] add deep_space flow fix evidence screenshots / [skin-center] 补充 deep_space flow 修复证据截图
• [skill] adapt release skill to dev branch model / [skill] 发版技能适配 dev 分支模型
• [skills] align pet/skin/community dev skills with current source / [skills] pet/skin/community 开发技能与当前源码对齐
• [contrib] route contributors bot sync via PR to dev and exempt bot from PR gates / [contrib] 贡献者 bot 同步改为 PR 合入 dev 并豁免 PR 门禁
• [contrib] enforce visual-fix evidence and multimodal model gate in review tooling / [contrib] 审查工具强制执行视觉修复证据与多模态模型门禁
• [contrib] visual fix PRs require completion screenshots and multimodal models / [contrib] 视觉修复 PR 要求完成截图与多模态模型
• [contrib] enforce dev-target evidence in CI and review tooling / [contrib] CI 与审查工具强制执行 dev 目标证据
• [contrib] dev branch flow and mandatory PR test evidence / [contrib] dev 分支流程与强制 PR 测试证据
• [archive] record v4-pro public endpoint image-input probe and catalog fix / [archive] 记录 v4-pro 公共端点图像输入探测与目录修复
• [pet] only repaint the status decoration when its frame advances / [pet] 状态装饰仅在帧前进时重绘
• [remote-web-ui] translate the tunnel shell comments in the Chinese README (#585) / [remote-web-ui] 中文 README 翻译 tunnel shell 注释
• [release] drop the npm tarball upload step from the release pipeline / [release] 发布管线移除 npm tarball 上传步骤

Maintained bilingual release notes (docs/release-notes/v0.2.5.md). / 维护者逐条双语发布说明（docs/release-notes/v0.2.5.md）。