zhu1090093659/dsh-web v0.4.15

dsh-web v0.4.15

on GitHub

This release is about the cohort and a retirement: every family package raises its host floor as the SDK cohort advances to DSH 0.2.2-rc.1, and dsh-git-graph is removed outright because the official runtime now ships the same surface, with Git change views handed back to the official @deepseek-ai/dsh-workspace-changes. On the feature side the new dsh-diagrams renders mermaid fences in the chat transcript and the document preview, scheduling the work per frame and memoizing per theme so a long transcript stays scrollable; dsh-win-bash verifies the mandatory integrity label of its payload cache before mount, closing the Low-integrity shell that broke writes with Permission denied (issue #2007); and remote access (dsh-remote-bridge) states only the kind of address in the pairing panel and in the host log, so a public hostname no longer leaves as text. The four satellite repositories align to 0.4.15.

The DSH cohort advances to 0.2.2-rc.1: the root workspace, shared, the scaffold and every family package move their @deepseek-ai/* consumption to 0.2.2-rc.1, with @deepseek-ai/cordis at 4.1.0, schemastery at 3.19.0 and cosmokit at 1.9.0, and both dsh.engines.dsh and the host peer raised to >=0.2.2-rc.1. Two contract drifts are repaired in the same batch: the plugin card seat in dsh-remote-web-ui erases its event signature to parameter types for the generic on of cordis@4.1.0, and the host face probe in dsh-agents no longer requires sessionProjections.stateOf. Against the dsh-v0.2.2-alpha.3 and dsh-v0.2.2-rc.1 tags the non-manifest source diff is zero: the official loader roster is still 192 ids and the browser frozen platform table is still 11 modules. Against the 0.2.1-rc.3 cohort of 0.4.14 the official CSS token set grows from 329 to 335 entries: six illustration tokens (--dsw-alias-illustration-background with its -backing, -detail, -inset, -shadow and -surface), plus --dsw-alias-state-done-primary, arrive while the official shell drops --dsw-specific-sidebar-nav-item-hover.
dsh-git-graph is retired and Git change views return to the official plugin: the official DSH now ships @deepseek-ai/dsh-workspace-changes, so a second Git surface in the family is duplication; the package is deleted outright (126 tracked files), the aggregate no longer mounts the web-ui-git-graph row, no longer depends on it and no longer publishes its ru dictionary, settings-bridge whitelist entry or mobile block rule. The @linxin666/dsh-web-all/git-graph subpath stays as a silent no-op retirement shell, because without it an older profile row would throw ERR_PACKAGE_PATH_NOT_EXPORTED at import and take the whole aggregate down; the published @linxin666/dsh-client-ui-git-graph@0.4.14 stays on the registry, so anyone installing it on its own keeps working. What leaves with the package is the git_worktree model-visible tool, the managed $DSH_HOME/worktrees/ directory and the branch chip in the blank-session hero row; worktree session isolation goes to the official experimental client-ui-forge plugin, which brings its own worktree management and diff.
New dsh-diagrams package renders mermaid fences in place: the official markdown renderer publishes no code-block extension seam, so a mermaid fence could only render as an ordinary code block, and the family own mermaid support left with dsh-aionui-panel. The new package uses one page-side observer to cover both the chat transcript and the document preview (they share the same official renderer), renders mermaid fences into SVG in place with a runtime the host serves on demand, and repaints them when the shell flips light or dark. The original block is only hidden, never destroyed, so the copy button still copies the source, and every failure (syntax error, half-streamed fence, missing runtime) restores the code block untouched instead of throwing into the caller. The runtime is served same-origin by one read-only host route behind the family pairing fence (/api/dsh-diagrams/vendor/mermaid.js, GET and HEAD only, no CDN contacted), and rendered SVG passes a second sanitizing pass beyond the strict security level of mermaid, stripping script-capable elements, on* handlers and javascript: URLs.
Diagrams are painted one per frame and memoized per theme: mermaid parses and lays out synchronously on the page main thread, so the work is scheduled instead of fired at once: one diagram per frame (a document with twelve diagrams stays scrollable), the sanitized SVG is memoized per theme and source (capped at 32 entries, so a palette flip back and a host re-render cost nothing), the runtime is re-initialized only when the palette actually changes, and a hidden tab that throttles requestAnimationFrame to nothing falls back to a 48 millisecond timer. A fence the parser rejects is retried only after a 400 millisecond quiet period and only once its source actually changed, because its own rollback mutates the DOM and retrying on every mutation would spin the page forever. Text labels are forced to SVG text (htmlLabels: false), since the <foreignObject> labels of mermaid are stripped whole by the sanitizer and read back as an empty box.
dsh-win-bash verifies the mandatory integrity label of its payload cache (issue #2007): the cache check compared only the SHA256 manifest and the file bytes, and the packaged payload and a Low-integrity copy are byte-identical, so a hash hit kept an unusable tree alive across restarts, plugin reloads and updates. In a danger-full-access session git add, mktemp and Node file writes all failed with Permission denied, and neither restarting DSH nor rebuilding the persistent shell helped. The mount now verifies the label as well as the hash: the label is read only through %SystemRoot%\System32\icacls.exe <path> /save (never through PATH) and decoded from UTF-16LE SDDL, where (ML;...;LW) and a S-1-16-* RID below 8192 read as Low; no SACL means Medium, and High or System labels and the volume root inherited label are not downgrades. SDDL writes SIDs the same way in every system language, so a localized Windows works too; the read is entirely passive, changes no label, DACL, token or user directory, needs no native dependency and no elevation, and costs nothing on POSIX hosts.
The pairing panel and the host log state only the kind of address: the panel no longer prints a public address as text, saying instead that the QR code carries the public address and that the iPhone connects to this computer as soon as it scans. A one-shot pairing code burns in 30 seconds, while a durable public hostname printed as text outlives every screenshot it appears in; the QR symbol already carries the address the phone needs, and Copy pairing code still hands out the same {token,url} string. A LAN literal is not that fact, because it only answers inside the network the page is already on, so the line still names it and says the iPhone must be on the same network. The host log follows the same rule: pair a device with <machine-local ws link> is followed only by (phone: public) or (phone: lan), with no suffix when no address was found, so a public hostname no longer enters a log that will be pasted elsewhere. The classification lives in one home (core/pair-address.ts), so the panel and the log answer with the same word for one configuration.
The four satellite repositories align to 0.4.15: the skin center (dsh-skins, 5415a7e01b9244e02ca6808928451f00cbf3b2ae) registers the diagrams plugin and the diagram part it owns in the semantic attribute contract, drops the Git graph styling rules that can no longer match from 15 skins, and folds the verdandi composer readout strip into one row on one paper: two readout pills side by side, a gold hairline between them, the context ring closing the line on the right, the row sized to its readings and wrapping when the composer is too narrow, with the ring no longer reading as a patch stuck to the right edge, and custom themes stop emitting the --dsw-specific-sidebar-nav-item-hover that 0.2.2 retired, since sidebar hover backgrounds go through --dsw-alias-interactive-bg-hover. The pet plugin (dsh-pet, d19284a539618e5eadb6c263d842008a2b600bb0) fixes the type compatibility of its extension page under the new generic event signature of cordis 4.1 and aligns the cohort to 0.2.2-rc.1. The community plugin index (dsh-community-plugins, 04ce116569aaa00c876175fb66d14ea90e7a0328) adds the widget board dsh-widget-board, growing the catalog from 150 to 151 entries. The preset center (dsh-presets, 8f15e62b03dabf68d147fb92a911652dd0fd1bca) aligns the cohort only, with its three lib/ artifacts byte-identical to 0.4.14.

Upgrade Notes

• The DSH floor rises to 0.2.2-rc.1: dsh.engines.dsh and the @deepseek-ai/dsh peer dependency of every family package move from >=0.2.1-rc.3 to >=0.2.2-rc.1. The behaviour on an older host is a named downgrade rather than a fault: the official boot gate skips the bundle, throwing nothing, deleting no data, and booting the remaining bundles as usual, while the plugin manager and the CLI refuse the install with HTTP 412 and the message requires DSH >=0.2.2-rc.1. Raise the host to 0.2.2-rc.1 or higher before installing 0.4.15. A host already on the 0.2.2 line only follows the version number, because there is no non-manifest source diff between dsh-v0.2.2-alpha.3 and dsh-v0.2.2-rc.1.
• dsh-git-graph is retired: the row is removed from the aggregate and the capability passes to the official workspace-changes plugin; the @linxin666/dsh-web-all/git-graph subpath stays as a silent no-op tombstone, so a row name recorded in an older profile still resolves, and the standalone package @linxin666/dsh-client-ui-git-graph@0.4.14 remains installable from the registry. A profile that had set the row to disabled keeps one override row and logs patch: entry "web-ui-git-graph" not found once at startup, which affects neither startup nor data; any single operation on that plugin in the plugin manager reclaims it, and the prune is idempotent.
• Upgrade entry matrix: this version has no Doctor pre-launch migration: dsh --help carries no doctor subcommand, and the dsh-doctor family package retired on 2026-09-23. The plugin manager update task is the only migration entry with a configuration backup (cordis.patch.yml.bak-plugin-manager), a --dump-config precheck and automatic rollback on failure; a direct dsh plugin add only fixes row names and leaves override rows in place, so only that plugin manager operation reclaims the web-ui-git-graph override row above.
• Rebuilding the Windows cache: the only platform-specific change in this version is dsh-win-bash verifying the mandatory integrity label of its payload cache before mount. It is fail-safe: a cache whose label does not match is not reused (the host publishes the executable tree into an isolated cache root outside DSH_HOME instead), and an unwritable cache is never written. When no candidate is usable or verifiable the tool runs from the packaged tree, which matches the availability of 0.4.14. Nothing throws, no user data is deleted and no DACL is changed along the way. To rebuild the cache, delete $DSH_HOME/win-bash; the cache is content-addressed, so rebuilding is idempotent.
• The LiangShen preset rule block needs a restart: this release syncs the rule block of the LiangShen preset to the current upstream Agent Teams runtime, adding a host-plane execution guard (a delegated child calling ask_user_question, create_goal, update_goal or exit_plan_mode is refused with DELEGATED_CALLER, and a pure sleep wait while a child still runs is refused with ACTIVE_CHILD_SLEEP_FORBIDDEN, while real work and background jobs pass), and states that plan mode is the switch of the user. The block is also compacted from 35,447 to 24,589 characters, about 2,700 tokens less resident cost per step. The guard is a preset row rather than a host install, so it applies to sessions created after dsh web restarts.
• Platform verification: this release was verified with the full local gate suite, runtime checks and the pre-release audit on Linux (Ubuntu x86_64), measured on the machine that produced it. Windows remains unverified on physical hardware: the label verification in dsh-win-bash (icacls /save reads, the isolated cache root publication, the unsafe-integrity refusal branch) is covered only by single-platform CI logic cases and unit tests with a real icacls, with no mount verified on an actual Windows host, and macOS is likewise unverified on physical hardware.

New Features

• [diagrams] Render mermaid fences in the chat transcript and the document preview as SVG
• [diagrams] Schedule one diagram per frame and memoize per theme and source, retrying a rejected fence only after its source changes
• [remote-bridge] State the kind of address the QR carries in the pairing panel instead of the public origin
• [agents] Recognize either generation of the official Agent Teams bundle in the coexistence gate and name both in the warning
• [liangshen] Add a host-plane execution guard to the dispatch rule block and compact one decision per rule
• [market] Register the community plugin dsh-widget-board and feature it in editor picks
• [dsh-web-all] Retire the dsh-git-graph row from the aggregate package

Bug Fixes

• [win-bash] Verify the payload cache mandatory integrity label before mount to end Low-integrity bash write failures (#2007)
• [win-bash] Publish the executable tree into an isolated cache root outside DSH_HOME on a Low-labelled data tree
• [remote-bridge] Anchor the LAN rule to the whole hostname so a public name such as 10.example.com is never printed as a local address
• [remote-bridge] Share one address rule between the panel and the host log so the two classifications cannot disagree
• [remote-web-ui] Erase the plugin card seat event signature to never parameter types for cordis 4.1.0
• [agents] Stop counting sessionProjections.stateOf among the required host faces

Other Changes

• [deps] Advance the family cohort to DSH 0.2.2-rc.1 (stopping at 0.2.2-alpha.3 on the way), with cordis at 4.1.0, schemastery at 3.19.0 and cosmokit at 1.9.0
• [deps] Move CI and the release workflow to Node 24.9.0
• [skins] Move the skins gitlink for the verdandi readout strip, the diagrams contract rows and the Git graph styling retirement
• [market] Rebuild the store artifacts and editor picks from the new skins gitlink (151 plugins)
• [readme] Sync the contributor list from the GitHub API
• [readme] Drop the Git graph and worktree entries and add the dsh-diagrams package row
• [docs] Record the marketing/ directory convention for promo film projects
• [notes] Record the 2026-11-03 upstream Agent Teams review and why the fork baseline stays put
• [notes] Record the decisions on the 0.2.2-rc.1 cohort, the dsh-git-graph retirement and the LiangShen dispatch guard
• [test] Cover the located-address copy path and the address source in the pairing panel tests
• [test] Build both sides of the second connector state path assertion with node:path to stay platform-neutral