zhu1090093659/dsh-web v0.4.16

dsh-web v0.4.16

on GitHub

This release focuses on retiring redundant self-update infrastructure, coordinating dual-surface interactions, and hardening cross-platform runtime behavior: the family self-update package @linxin666/dsh-update is removed outright now that the official Plugins page natively handles version checks and updates (while @linxin666/dsh-web-all/update stays as a silent tombstone); remote access (dsh-remote-bridge) displays pending user questions and approvals on both the desktop browser panel and paired phones with first-answer-wins settlement, retiring the offline exclusive claim window; the Workshop relay (dsh-market) detects and decompresses undeclared gzip responses from tunneled hosts so Cloudflare does not double-compress them into mojibake on mobile (issue #2030); the task board (dsh-task-board) fails closed before creating a session when a card with unfinished subtasks is forced onto the LiangShen preset on a deployment running the legacy Agent Teams generation (issue #2031); the browser view (dsh-browser-view) automatically replaces closed CDP sessions and splits connection and command timeout budgets; and a batch of stability and security fixes lands across dsh-skill-explorer, dsh-session-archive, dsh-agents, dsh-liangshen, mobile drawers (dsh-web-all and dsh-remote-web-ui), dsh-diagrams, and dsh-win-bash. The four satellite repositories align to 0.4.16.

Remove the @linxin666/dsh-update family self-update package: DSH 0.2.2-rc.1 checks and installs registry updates for every installed bundle on the official Plugins page, complete with the DSH minimum floor gate and the remove/install/restore steps, and the aggregate had already stopped mounting the web-ui-update row in 0.4.14. This release deletes packages/dsh-update together with the Russian update dictionary, six shared-module sync targets, and four gate baseline rows. The aggregate keeps the @linxin666/dsh-web-all/update subpath export, retiredPlugins entry, and shellNotes row as a silent no-op tombstone so existing profiles continue to resolve cleanly, and @linxin666/dsh-update@0.4.15 remains on npm.
Pending remote questions and approvals show on both sides, first answer wins: claiming a user question or an approval in dsh-remote-bridge previously never called next(), hiding the card on the desktop browser panel whenever a phone held the claim. Both claims now pass the request to the host's answerer chain immediately so the desktop panel and paired phones hold the card at the same time and the first answer settles it: when the host panel answers first, the bridge broadcasts state: "settled" to connections declaring questions.v1 or approvals.v1 and releases the claim; when a phone answers first, the bridge resolves with the phone's answer and ignores the host chain's later completion; a host chain rejection or default unavailable is not treated as a verdict, leaving the claim answerable on the phone. APNs pushes are suppressed while ctx.typertGateway.hasLiveClient() is true, and the 10-minute offline exclusive claim window (OFFLINE_QUESTION_CLAIM_TTL_MS and DSH_REMOTE_BRIDGE_OFFLINE_CLAIM_TTL_MS) is retired so an away-phone claim lives until answered, expired by the host deadline, or unloaded.
Workshop relay normalizes undeclared wire encodings and polls secret propagation (issue #2030): a tunneled DSH host compresses some responses regardless of request headers without setting Content-Encoding, causing the Cloudflare edge to compress the gzip body a second time and leaving mobile clients with mojibake after decoding one layer. market/worker/src/relay-encoding.js now inspects the first chunk of responses lacking Content-Encoding, decompresses gzip streams (1f 8b 08) into identity bytes, and attaches Cache-Control: no-transform across both quick and bridge relay paths; scripts/deploy-market also polls the secret list after updating TURNSTILE_SECRET and ASSET_ATTEST_SECRET to wait out the deployment version propagation race.
Task board fails closed when the forced dispatcher preset cannot orchestrate (issue #2031): a card with unfinished subtasks is forced under the liangshen preset, whose R0.5 compatibility gate stops and waits for a human reply on deployments running the legacy Agent Teams generation (spawn_teammate), leaving unattended or scheduled runs stuck in the running column forever. dsh-task-board now inspects the agent tool registry at launch, refuses the run before any session is created when spawn_teammate is present, and renders a localized explanation in the reader's language (zh/en/ru).
Browser view replaces closed CDP sessions and splits connect and command budgets: a real-browser session in dsh-browser-view previously reused its 5-second connect deadline for every subsequent command and returned a closed transport forever after a browser restart. The 5-second external connect bound and the 30-second command timeout (CDP_COMMAND_TIMEOUT_MS) are now separate knobs, and the next tool call on a closed transport disposes the stale session (detaching an external browser without closing it, or stopping and relaunching an exited isolated Chromium) and opens a single replacement shared across concurrent callers.
Skill explorer admission, mobile drawer hit-testing, squad session bridges, and archive protection previews: dsh-skill-explorer consults the optional host connection service so reverse-proxy requests admitted via --trusted-host or a signed browser session pass straight into /api/dsh-skill-explorer/* (issues #2025, #2026); dsh-web-all and dsh-remote-web-ui mark the mobile sidebar drawer z-index: 1100 !important and set the aggregate mask to pointer-events: none, preventing the runtime-injected official layout stylesheet from winning the equal-specificity tie and burying the open drawer beneath its own mask (issues #2012, #2013, #2014); dsh-agents bridges uiWorkspace and sessions per instance via ctx.inject so providers mounting after the plugin enable session entry points dynamically while deployments without them keep the buttons visibly disabled with an explanation; and dsh-session-archive ships host-side attached and in-flight protection reasons and merges them under in-flight > current > attached > running so row delete buttons, fully protected batch selections, and confirmation skip counts match the host's authoritative plan (issue #2022).
LiangShen catalog admission and fact folding, diagram URL sanitization, and Windows Unicode HOME: dsh-liangshen reads the step tool surface from tools.schemas(agent, context.toolSet) and pages via ctx.tools.restrict(), fixing false no-tools assertions in seeded child sessions on SDK 2.0.22+ (issue #2016), and updates foldFactLedger to replay both tool/ptc-dispatch and tool/call events while ignoring errored dispatches so pinned facts reach [Working Context] under the default ptc presentation; dsh-diagrams parses attribute URLs before checking their scheme so javascript: URLs split by TAB/LF/CR or prefixed with C0 control characters are stripped (issue #2017); and dsh-win-bash explicitly supplies HOME (base.HOME ?? homedir()) to the vendored MSYS bash so Windows profiles with non-ASCII characters are not corrupted by ANSI code-page derivation (issue #2028).
The four satellite repositories align to 0.4.16: the skin center (dsh-skins) adds three new skins (equation-sea, pixel-whale, and md3, expanding the catalog to 65 skins), converts diy-journal fonts to Woff2 and compresses artwork to shrink the package by 62%, covers floating-surface shadow and radius tokens and fixes three token names in model-dorm, improves equation-sea right-rail and market-card contrast, excludes the attachment rail from composer send-key rules across four skin templates, and restricts the opaque fullscreen-panel fill in the skin center to the open data-sidebar-right-open state; the pet plugin (dsh-pet) repaints the eight-frame whale-girl-refined running rows to erase the stray far-arm cuff and hand at the waist and mirrors running-left pixel-for-pixel from running-right; the community plugin index (dsh-community-plugins) retires 52 legacy entries whose host floor predates 0.2.0, registers dsh-plugin-desktop-notify, @chendaleiq/dsh-plugin-auto-update, dsh-tutorloop, dsh-character-cards, dsh-power-menu-mac, and dsh-keenable, and restores dsh-llm-verifier for a catalog of 106 plugins; and the preset center (dsh-presets) aligns its version to 0.4.16.

Upgrade Notes

• The DSH host floor remains >=0.2.2-rc.1: this release does not raise dsh.engines.dsh or the @deepseek-ai/dsh peer dependency floor; any host already running 0.4.15 can upgrade directly.
• @linxin666/dsh-update package removal and profile compatibility: the standalone self-update package is removed from the repository and its release line ends here, with version checks and updates handled by the official Plugins page. The aggregate retains the @linxin666/dsh-web-all/update silent tombstone and retiredPlugins entry so existing aggregate profiles upgrade without manual edits; users who installed @linxin666/dsh-update standalone can still resolve 0.4.15 from npm and are advised to uninstall it in favor of the official Plugins page.
• Retirement of the remote-bridge offline question claim TTL knob: pending questions in dsh-remote-bridge now appear on both the desktop browser panel and paired phones with first-answer-wins settlement, and the 10-minute exclusive offline claim window (along with DSH_REMOTE_BRIDGE_OFFLINE_CLAIM_TTL_MS) has been removed; setting that environment variable now has no effect.
• Pre-launch fail-closed check for forced dispatcher presets on legacy Agent Teams: on deployments where the legacy official Agent Teams runtime (spawn_teammate) is active, task board cards carrying unfinished subtasks are now refused before any session is created instead of spawning a session that hangs forever at the compatibility gate. Upgrade to the current Agent Teams generation or disable the legacy runtime and restart the host before running parent cards with subtasks.
• Upgrade entry matrix: there is no Doctor pre-launch migration in this repository; the official Plugins page (or the plugin manager update task) remains the recommended upgrade entry with configuration backup, --dump-config precheck, and automatic rollback. Restart dsh web and refresh the browser after upgrading so host service and client bundle changes take effect.
• Platform verification: this release passed the local gate suite and read-only verification on Linux (Ubuntu x86_64). Windows and macOS remain unverified on physical hardware — the explicit HOME injection in dsh-win-bash for non-ASCII Windows user profiles (issue #2028) is covered by unit tests on shellEnvironment() without a physical Windows mount check.

New Features

• [remote-bridge] Show pending user questions and approvals on both the desktop browser panel and paired phones with first-answer-wins settlement, keeping offline question claims alive until answered, expired by the host, or unloaded
• [market] Add the equation-sea, pixel-whale, and md3 skins to the Workshop (65 skins total) and shrink the diy-journal skin package by 62%
• [market] Register the community plugins dsh-plugin-desktop-notify, @chendaleiq/dsh-plugin-auto-update, dsh-tutorloop, dsh-character-cards, dsh-power-menu-mac, and dsh-keenable in the Workshop, and restore dsh-llm-verifier

Bug Fixes

• [remote-bridge] Pass claimed questions and approvals through to the host answerer chain immediately, notify the other surface on settlement, and suppress duplicate APNs pushes while a desktop browser client is live
• [market] Decompress undeclared gzip response streams from tunneled hosts and set Cache-Control: no-transform so the edge does not double-compress pages into mojibake on mobile (#2030)
• [task-board] Fail closed before creating a session when a card with unfinished subtasks is forced onto the LiangShen preset on a deployment running the legacy Agent Teams runtime (#2031)
• [win-bash] Explicitly supply HOME (inheriting base.HOME or falling back to Node homedir()) to the vendored MSYS bash so Unicode user profiles are not corrupted by ANSI code-page derivation (#2028)
• [skill-explorer] Admit requests accepted by the host connection service (--trusted-host and signed browser sessions) into /api/dsh-skill-explorer/* (#2025 #2026)
• [browser-view] Replace closed CDP sessions automatically and split the 5-second external connect bound from the 30-second command timeout budget
• [session-archive] Ship host-side attached and in-flight protection reasons and merge them by authoritative precedence so row delete buttons, fully protected batch selections, and confirmation skip counts match the host (#2022)
• [agents] Bridge the optional uiWorkspace and sessions services per instance via ctx.inject so late-mounting providers enable session openers while deployments without them keep the buttons visibly disabled with a reason
• [web,remote-web-ui] Mark the mobile sidebar drawer z-index as !important and set pointer-events: none on the aggregate mask so the runtime-injected official layout sheet cannot bury the drawer beneath its mask (#2012 #2013 #2014)
• [liangshen] Fold both tool/ptc-dispatch and tool/call events in foldFactLedger while skipping errored PTC dispatches so pinned facts reach [Working Context] under the default ptc presentation
• [liangshen] Read the step tool surface from tools.schemas(agent, context.toolSet) and page via ctx.tools.restrict() to prevent false no-tools assertions in seeded child sessions on SDK 2.0.22+ (#2016)
• [diagrams] Parse attribute URLs before matching their scheme so javascript: URLs split by TAB/LF/CR or prefixed with C0 control characters are stripped (#2017)
• [pin] Map @deepseek-ai/dsh-client-ui-slots to the registry copy in dsh-message-edit and dsh-web-settings and align the mutable dsh-user-questions answer signature in dsh-remote-bridge so local typecheck and build pass under the host SDK pin
• [market] Poll the secret list after refreshing TURNSTILE_SECRET and ASSET_ATTEST_SECRET in deploy-market to wait out the version propagation race
• [pet] Repaint whale-girl-refined left and right running frames to erase the stray far-arm cuff and hand at the waist and refresh the Workshop spritesheet asset (#2021)

Other Changes

• [dsh-update] Remove the @linxin666/dsh-update family self-update package outright (sources, the Russian update dictionary, six shared-module sync targets, and four gate baseline rows) while keeping the @linxin666/dsh-web-all/update silent tombstone, handing plugin version checks and updates to the official Plugins page
• [market] Retire 52 community plugin entries whose host floor predates 0.2.0 and rebuild market/dist across the skin, plugin, and pet satellite updates (now 65 skins, 12 pets, 106 plugins, and 33 presets)
• [satellites] Advance all four submodule gitlinks (dsh-skins, dsh-pet, dsh-community-plugins, dsh-presets) to their 0.4.16 release commits, syncing the fullscreen-open qualifier and the intake decision records
• [remote-bridge] Remove the retired offline question claim window from the bilingual READMEs to match dual-surface display and first-answer-wins settlement
• [readme] Align the root bilingual READMEs with the current plugin roster, catalog counts, and model configuration examples, and escape tilde ranges to prevent GFM strikethrough rendering
• [notes] Record decision notes on the host SDK pin local gate fix, the dsh-update package removal, mobile drawer hit-testing, and explicit HOME in win-bash