本版是一次对齐发布：四个卫星仓（皮肤中心、宠物、社区插件索引、预设中心）同版本到 0.4.18，并把它们的 @deepseek-ai/* SDK cohort 从 0.2.2-rc.1 对齐到 0.2.2-rc.2，dsh.engines.dsh 与 @deepseek-ai/dsh 对等依赖下限随之抬到 >=0.2.2-rc.2——此前卫星仓仍声明 rc.1，与全家桶的实际宿主下限不一致。本仓自身的宿主下限与 0.4.17 相同（>=0.2.2-rc.2），没有新的用户可见功能；同时把 pnpm lint 从「只报告不阻断」改成真门禁：规则集按本仓写法收敛、存量 1239 条清零。
卫星仓与主仓同版本、同 cohort：
@linxin666/dsh-client-ui-skin-center、@linxin666/dsh-pet、@linxin666/dsh-client-ui-community-plugins、@linxin666/dsh-client-ui-preset-center四个包由各自仓库以0.4.18先发，本仓再以同号跟进，聚合包对它们的依赖范围一并移到^0.4.18。四个仓的宿主下限现在与本仓同源。
宠物的运行时依赖修复：0.2.2-rc.2的@deepseek-ai/dsh-llm在lib/index.js里运行时import '@deepseek-ai/dsh-error'，而autoInstallPeers: false不会把这条 peer 装上，干净安装的测试套件会直接报Cannot find package '@deepseek-ai/dsh-error'。@linxin666/dsh-pet@0.4.18已把它显式写进开发依赖。
lint 门禁转阻断：.oxlintrc.json关掉 9 条与本仓写法必然冲突的规则（顺序 IO 的await in loop、函数外提、标识符遮蔽、spread 更新、DOM 处理函数赋值等），docs/archive/作为冻结快照排除；余下 293 条按修代码处理，只在两处保留注明理由的逐行豁免。CI 的 lint 步骤不再带|| true，新出现的 finding 即回归。
升级须知
- 宿主下限没变：仍是
@deepseek-ai/dsh >= 0.2.2-rc.2，与0.4.17相同；npm 上latest依旧指向0.2.2-rc.1，用latest装出来的宿主不满足下限，装宿主用npm i -g @deepseek-ai/dsh@next。 - 卫星包要求同一宿主：四个卫星包
0.4.18起声明>=0.2.2-rc.2。已经是0.4.17的用户升上来不需要迁移动作，profile、看板账本与设置 key 一个都没变。
其他改动
- [satellites] 四个卫星仓对齐
0.4.18并迁到0.2.2-rc.2cohort，其dsh.engines.dsh与 peer 下限同步抬到>=0.2.2-rc.2 - [pet] 补上
@deepseek-ai/dsh-error开发依赖：rc.2 的dsh-llm在运行时 import 它，缺这条依赖会让干净安装的测试与发布门禁直接失败 - [tooling]
pnpm lint从报告型检查改成阻断门禁：规则集按本仓写法收敛、存量清零，CI 不再吞掉 lint 结果 - [lib]
dsh-market与dsh-web-all提交的lib/随版本号重建
English
This is an alignment release: the four satellite repositories (skin center, pet, community plugin index, preset center) ship the same 0.4.18 and move their @deepseek-ai/* SDK cohort from 0.2.2-rc.1 to 0.2.2-rc.2, so dsh.engines.dsh and the @deepseek-ai/dsh peer floor rise to >=0.2.2-rc.2 - until now the satellites still declared rc.1 and disagreed with the family's real host floor. This repository's own floor is unchanged from 0.4.17 (>=0.2.2-rc.2), there is no new user-visible feature, and pnpm lint turns from a report-only step into a real gate: the rule set is tuned to this codebase's idioms and the 1239 standing findings are gone.
Satellites ship the same version and cohort as this repository:
@linxin666/dsh-client-ui-skin-center,@linxin666/dsh-pet,@linxin666/dsh-client-ui-community-pluginsand@linxin666/dsh-client-ui-preset-centerpublish0.4.18from their own repositories first, this repository follows with the same number, and the aggregate's dependency ranges move to^0.4.18with them. All four now declare the same host floor as this repository.
A runtime dependency fix in the pet plugin:@deepseek-ai/dsh-llmat0.2.2-rc.2imports@deepseek-ai/dsh-errorat runtime fromlib/index.js, andautoInstallPeers: falsedoes not install that peer, so a clean install fails the test suite outright withCannot find package '@deepseek-ai/dsh-error'.@linxin666/dsh-pet@0.4.18declares it as a development dependency.
The lint gate now blocks:.oxlintrc.jsonturns off nine rules that necessarily conflict with this codebase's idioms (sequential IO's await in loop, function hoisting, identifier shadowing, spread updates, DOM handler assignment and similar),docs/archive/is excluded as a frozen snapshot, and the remaining 293 findings were fixed in code with only two reasoned per-line waivers. The CI lint step no longer carries|| true, so a new finding is a regression.
Upgrade Notes
- The host floor is unchanged: still
@deepseek-ai/dsh >= 0.2.2-rc.2, the same as0.4.17; npm'slateststill points at0.2.2-rc.1, so a host installed fromlatestdoes not satisfy it - install the host withnpm i -g @deepseek-ai/dsh@next. - The satellites require the same host: the four satellite packages declare
>=0.2.2-rc.2from0.4.18on. Anyone already on0.4.17needs no migration: no profile, task board ledger or settings key moved.
Other Changes
- [satellites] Align the four satellite repositories to
0.4.18and move them to the0.2.2-rc.2cohort, raising theirdsh.engines.dshand peer floor to>=0.2.2-rc.2 - [pet] Add the
@deepseek-ai/dsh-errordevelopment dependency:dsh-llmimports it at runtime on rc.2, and its absence fails a clean install's tests and the release gate - [tooling] Turn
pnpm lintfrom a reporting step into a blocking gate: the rule set is tuned to this codebase's idioms and the standing findings are gone, so CI no longer swallows the result - [lib] Rebuild the committed
lib/artifacts ofdsh-marketanddsh-web-allwith the new version