Download Latest Version dsh-web v0.3.7 source code.zip (182.4 MB)
Email in envelope

Get an email when there's a new version of dsh-web

Home / v0.3.6
Name Modified Size InfoDownloads / Week
Parent folder
dsh-web v0.3.6 source code.tar.gz 2026-08-27 180.5 MB
0
dsh-web v0.3.6 source code.zip 2026-08-27 182.1 MB
0
README.md 2026-08-27 9.6 kB
0
Totals: 3 Items   362.7 MB 0

本次发布包含 8 项新功能、8 项修复、6 项其他改动。

新功能

  • [better-session] 内置 dsh-chat-recovery 替换为外部 @morlay/better-session：默认不激活，经 dsh-perf 设置卡内新增的会话管理卡片 opt-in 启用，启用时对旧数据做自动迁移
  • [web-ui-all] 外部插件 bundle 扩容并恢复 better-session 0.0.11；未激活的外部扩展不再下发 harness patch
  • [web-ui-all] 聚合 patches 新增顶层 section 能力，据此预置 web-ui-ssh bundle 行（默认停用）
  • [ssh] 支持 keyboard-interactive 认证与交互式双因素提示（#806）
  • [describe-image] 多端点轮换与故障转移
  • [dsh-perf] 按插件活动归因的记分板与长任务来源日志
  • [community-plugins] 社区插件索引登记 dsh-delete-message（#1185），并把 dsh-logicprobe 更新到 0.5.x
  • [scripts] 新增 scripts/dsh-better-session.mjs opt-in 与迁移工具，应用前先执行导入检查并备份

修复

  • [doctor] 修复 Windows CLI 入口检测与 schtasks 引号处理
  • [task-board,pet] 修复返回按钮响应与重挂载韧性，支持段位 i18n 与语音覆盖（#1233、#1226）
  • [skins] 释放根宽度锁，恢复侧栏列推移（#1222）
  • [market-worker] worker 渲染的 HTML/markdown 增加 nosniff；CORS 预检以静态 allow-headers 应答
  • [market-worker] 遥测读 key 只接受 header 提供；写请求体设上限并按 manifest 白名单校验资产 id；TURNSTILE_SECRET 未配置时写入一律 fail-closed
  • [shared] 修复 pair-access 的结构化 ctx 类型，shared 包可独立 typecheck
  • [dsh-perf] 为 assistant shadow 相对 message-actions 预留优先级余量
  • [ssh] 终端测试补全 mock TerminalConnection

其他改动

  • [repo] profile 重接线后退役 dsh-web-ui 兼容 symlink；本地 checkout 引用统一改为 dsh-web；忽略 .zcode 目录
  • [perf] pet canvas frames2d 播放改用位图缓冲；task-board 重扫前先探测历史头部；skin-center 移除 orca-link 状态字符死写面；remote-web-ui 移动端 ChatView 将 live-event 折批量化
  • [refactor] task-board 的新建/编辑弹窗共享外壳与内容字段；market/shell 把五处克隆收敛为单一 shim emitter core；vitest.setup.ts 同步到消费方并由 web-settings 再导出共享 vitest 配置；配对信任围栏整合进 shared/host/pair-access.ts
  • [artifacts] 刷新 reviewed-skin 哈希表、reviewed-hooks 注册表与过期的 market/dist
  • [readme] 根 README 配对文件新增 DSH 兼容徽章
  • [docs] 决策记录批次入库（catppuccin 混合产物驳回、delete-message 合并与四轮注册评审、logicprobe 与 milestone 维护轮、插件展示休眠框架提案、Turnstile iframe origin 政策提案、大单元拆分 backlog 提案、phase-1 性能验证快照归档）
English This release contains 8 new features, 8 bug fixes, and 6 other changes. ### New Features - [better-session] The bundled dsh-chat-recovery is replaced by the external @morlay/better-session: inactive by default, enabled through an opt-in session-manager card inside the dsh-perf settings card, with automatic legacy-data migration on enable - [web-ui-all] Expand the external-plugin bundles, restore better-session 0.0.11, and stop shipping harness patches for inactive external expansions - [web-ui-all] The aggregate patch format gains a top-level section capability, used to seed a web-ui-ssh bundle row (disabled by default) - [ssh] Support keyboard-interactive authentication and interactive two-factor prompts ([#806](https://github.com/zhu1090093659/dsh-web/issues/806)) - [describe-image] Multi-endpoint rotation and failover - [dsh-perf] Per-plugin activity attribution scoreboard and long-task source log - [community-plugins] Register dsh-delete-message in the community plugin index ([#1185](https://github.com/zhu1090093659/dsh-web/issues/1185)) and update dsh-logicprobe to 0.5.x - [scripts] Add the scripts/dsh-better-session.mjs opt-in and migration tooling, which runs the import check and takes a backup before applying ### Bug Fixes - [doctor] Resolve the Windows CLI entry check and schtasks quoting - [task-board,pet] Fix return-button response and remount resilience; support rank i18n and voice overrides ([#1233](https://github.com/zhu1090093659/dsh-web/issues/1233), [#1226](https://github.com/zhu1090093659/dsh-web/issues/1226)) - [skins] Release the root width lock to restore sidebar column push ([#1222](https://github.com/zhu1090093659/dsh-web/issues/1222)) - [market-worker] Send nosniff on worker-rendered HTML and markdown; answer CORS preflights with static allow-headers - [market-worker] Accept the telemetry read key via header only; cap write bodies and allowlist asset ids against manifests; fail closed on writes when TURNSTILE_SECRET is unset - [shared] Fix the structural ctx type in pair-access so the shared package typechecks standalone - [dsh-perf] Reserve assistant shadow priority headroom against message-actions - [ssh] Complete the mock TerminalConnection in terminal tests ### Other Changes - [repo] Retire the dsh-web-ui compat symlink after profile rewiring; relocate local checkout references to dsh-web; ignore the local .zcode directory - [perf] Canvas bitmap buffering for pet frames2d playback; probe history head before re-scanning wedged executions in task-board; drop orca-link status-character dead-write surfaces in skin-center; batch live-event folding in the remote-web-ui mobile ChatView - [refactor] Share the modal shell and content fields between task-board create/edit modals; extract one shim emitter core from five clones in market/shell; sync vitest.setup.ts to consumers and re-export the shared vitest config from web-settings; consolidate the pairing trust fence into shared/host/pair-access.ts - [artifacts] Refresh the reviewed-skin hash table, the reviewed-hooks registry, and stale market/dist - [readme] Add a DSH compatibility badge to the root README pair - [docs] Batch of decision records (catppuccin mixed-artifact rejection, delete-message merge plus four registration review rounds, logicprobe and milestone maintenance rounds, evidence-gated plugin presentation dormancy proposal, Turnstile iframe origin policy options, large-unit split backlog proposal, phase-1 performance verification snapshot archive) Compatibility: this release passed the automatic-upgrade compatibility audit (package identity, profile writes, persisted identifiers, wire protocol, and cross-platform lifecycle compared between v0.3.5 and v0.3.6); no blocking changes were found. Every surviving package keeps its npm name, exports shape (one additive dsh-perf export), engines floor, bundle row ids, and settings ids unchanged; shared/host/legacy-migration.ts is untouched and the legacy aggregate name stays deprecated with no republication. Persisted identifiers are frozen: the only removed identifiers belong to the deleted dsh-chat-recovery package itself (its web-ui-chat-recovery mount row goes with it); every added identifier is opt-in or seeded disabled — the three @morlay/better-session insert rows ship behind trailing disabled:true overrides, web-ui-ssh is seeded with config enabled:false once the user edits it settings wins — and the only new persisted key is the additive dsh-perf-debug debug flag. Upgrading changes nothing by design: better-session stays inactive after an automatic update, so neither the plugin-manager update path nor the Doctor pre-launch path runs any data migration, both behave identically, and a bare "dsh web" is equally unaffected while the stock jsonl session backend keeps serving all existing sessions. The chat-recovery to better-session move is an explicit user action: scripts/dsh-better-session.mjs offers status/migrate/enable/disable, where migrate defaults to dry-run, refuses stores whose application_id/user_version fingerprint does not match @morlay/session-rdb@0.0.11, takes an automatic backup before its first write, and converges on reruns via INSERT OR IGNORE anchors. If migration fails, keep that backup, leave better-session disabled, and rerun after repairing; sessions were never removed from disk at any point in this flow. This release validates the full local gate suite (sync-shared, typecheck, workspace tests, script tests, aggregate, runtime-deps, market, skin-center, docs), verify-version against all 19 family packages, and the fresh aggregate mount composition (19 rows / 17 deps). It does not claim a real previous-version-to-target upgrade drill or a full macOS / Windows upgrade matrix; the Windows doctor fixes (#1238) carry their own CLI-entry and service-planning regression tests. For manual recovery of a broken profile, back up package.json, pnpm-lock.yaml, and cordis.patch.yml in the profile directory, then run: dsh plugin --profile web add @linxin666/dsh-web-all@0.3.6 dsh --profile web --dump-config If migration fails, keep the backups and do not start a bare dsh web; repair the profile and run --dump-config again.

本发布说明由维护者根据 v0.3.5 之后实际纳入本版本的变更整理。

This release note was prepared from the changes actually included after v0.3.5.

Source: README.md, updated 2026-08-27