@cofy-x/dsh-console 0.1.0-rc.3 → 0.1.0-rc.4

package/README.md

@@ -6,12 +6,13 @@
 
 ## Install
 
-DSH Console requires Node.js 24 or newer, supports DeepSeek Harness `0.2.1-alpha.2` through the maximum tested version `0.2.1-alpha.2`, and needs a working DSH provider configuration. Console follows audited DSH releases; the compatible prerelease can differ from npm `latest`, so install the exact audited pair:
+DSH Console requires Node.js 24 or newer and `pnpm` on `PATH` to install its DSH profile, supports DeepSeek Harness `0.2.1-rc.2` through the maximum tested version `0.2.1-rc.2`, and needs a working DSH provider configuration. Console follows audited DSH releases; the compatible prerelease can differ from npm `latest`, so install pnpm and the exact audited pair:
 
 Plugin admission on newer releases is still governed by DSH compatibility checks; Console never grants version exemptions or bypasses Host restrictions.
 
 ```sh
-npm install --global @deepseek-ai/dsh@0.2.1-alpha.2 @cofy-x/dsh-console@0.1.0-rc.3
+npm install --global pnpm@12.15.0
+npm install --global @deepseek-ai/dsh@0.2.1-rc.2 @cofy-x/dsh-console@0.1.0-rc.4
 dsh-console --prompt "hello"
 ```
 
@@ -54,6 +55,6 @@ Full-text search opens a DSH-managed, rebuildable SQLite index under `DSH_HOME`
 
 ## Existing DSH profiles
 
-The launcher defaults to its managed `dsh-console` profile. Select an existing DSH profile with `dsh-console --profile my-profile --prompt "hello"`, or set `DSH_CONSOLE_PROFILE=my-profile` as an environment default; the explicit option wins. Create the profile through DSH first (`dsh plugin --profile my-profile add @cofy-x/dsh-console@0.1.0-rc.3` requires `pnpm` on `PATH`). Console reconciles only its own bundle, then forwards remaining arguments to DSH. DSH owns provider, credential, package, and patch configuration. Profiles under one `DSH_HOME` share Sessions, credentials, settings, and attachments; use another `DSH_HOME` for isolation. A missing or invalid selected profile fails without falling back.
+The launcher defaults to its managed `dsh-console` profile. Select an existing DSH profile with `dsh-console --profile my-profile --prompt "hello"`, or set `DSH_CONSOLE_PROFILE=my-profile` as an environment default; the explicit option wins. Create the profile through DSH first (`dsh plugin --profile my-profile add @cofy-x/dsh-console@0.1.0-rc.4` requires `pnpm` on `PATH`). Console reconciles only its own bundle, then forwards remaining arguments to DSH. DSH owns provider, credential, package, and patch configuration. Profiles under one `DSH_HOME` share Sessions, credentials, settings, and attachments; use another `DSH_HOME` for isolation. A missing or invalid selected profile fails without falling back.
 
 See the [GitHub repository](https://github.com/cofy-x/dsh-console) for source development, architecture, release-candidate boundaries, and license attribution details.

package/cordis.patch.yml

@@ -9,12 +9,70 @@
     path: !!js dshHomePath('dsh-console-session-search.sqlite')
     openAt: first-search
 
+# Official presets own these Agent-scoped tools and policies. Retaining the
+# base's process-wide rows would expose them even in the minimal preset.
+# Shared registries, persistence, and execution providers remain Host-owned.
+- id: tool-plugin-manager
+  disabled: true
+- id: tool-bash
+  disabled: true
+- id: tool-pwsh
+  disabled: true
+- id: tool-jobs
+  disabled: true
+- id: tool-fs
+  disabled: true
+- id: tool-fs-search
+  disabled: true
+- id: skill-filesystem
+  disabled: true
+- id: tool-skill
+  disabled: true
+- id: command-goal
+  disabled: true
+- id: tool-goal
+  disabled: true
+- id: plan-mode
+  disabled: true
+- id: compaction-basic
+  disabled: true
+- id: command-compact
+  disabled: true
+- id: tool-result-pruner
+  disabled: true
+- id: tool-subagent-control
+  disabled: true
+- id: tool-subagent-list-agents
+  disabled: true
+- id: tool-subagent
+  disabled: true
+- id: tool-subagent-fork
+  disabled: true
+- id: workflow-ptc
+  disabled: true
+- id: tool-workflow
+  disabled: true
+- id: agent-instructions
+  disabled: true
+- id: tool-todo
+  disabled: true
+- id: tool-web
+  disabled: true
+
 - insert:
     # Standard and Cordis presets sample this Host-owned setting when they
     # install delegation tools for a Session.
     - id: subagent-model-selection-settings
       name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'
 
+    # The Cordis preset consumes the same public Host inspect services as the
+    # official Web composition. Providers register once for all Sessions.
+    - id: cordis-host-runner
+      name: '@deepseek-ai/dsh-cordis-host-runner'
+
+    - id: cordis-inspect-providers
+      name: '@deepseek-ai/dsh-tool-cordis/host'
+
     # Console owns a per-Session Agent composition, including its scoped Skills.
     # dsh-base does not mount the preset roster, so the Console bundle must.
     - id: agent-preset-registry

package/dist/CHANGELOG.md

@@ -6,6 +6,33 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.1.0-rc.4] - 2026-10-23
+
+### Security
+
+- Upgrade the documentation site's Astro dependency to `7.3.3`, fixing JSX/MDX script and style content injection (GHSA-98hj-9722-w3j8) and View Transition CSS injection (GHSA-mpr7-6m5w-76rw) within the existing Starlight compatibility range.
+- Upgrade Vitest and its V8 coverage tooling to `4.1.12`, fixing unauthenticated manual mock registration and Windows traversal issues in `@vitest/mocker` (GHSA-qxg6-89mg-rqv8 and GHSA-xp26-3454-mjgp) within the existing major version.
+
+### Changed
+
+- Require the latest published DSH `0.2.1-rc.2`, aligning exact runtime peers, development dependencies, and the audited source endpoint at immutable commit `687f282e8625c6b8d11ff58211a90524be2e4317`.
+- Package the official rc.2 Agent presets unchanged and keep Agent execution, Session migration, models, and credential precedence owned by DSH.
+- Synchronize English and Chinese installation and troubleshooting documentation with the new SDK baseline and writable credential sources.
+- Upgrade the pinned development and CI package manager to pnpm `12.15.0`, with `pnpm start` for daily startup and `pnpm build-start:cli` after source changes through the same Console launcher.
+
+### Fixed
+
+- Keep preset tools and policies scoped to their Session so that the minimal preset cannot inherit the Host's global execution or delegation tools; provide the official shared inspection services for the Cordis preset.
+- Preserve failed and retried Assistant attempt usage during Session replay, and use the public SDK helpers for stream timing.
+- Keep streaming replies and tool states live in the normal terminal buffer, committing a completed turn to static history only after its final presentation is applied.
+- Verify the actual audited source commit and clean checkout before selecting or testing the source endpoint, and reject source links during the registry endpoint gate.
+- Route `pnpm debug` through the Console launcher with diagnostics enabled, replacing the obsolete standalone entry point.
+
+### Known upstream issues
+
+- DSH `0.2.1-rc.2` pins `@modelcontextprotocol/client` to `2.2.0`, which is affected by [GHSA-6prh-2h8m-c8cw](https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6prh-2h8m-c8cw). Configured HTTP MCP connections can disclose custom headers through cross-origin redirects; `307` and `308` redirects can also resend request bodies. The default Console profile configures no MCP servers, and stdio transport is unaffected by this issue. Temporarily disable HTTP MCP connections or use stdio. DSH has not incorporated the upstream fix; Console preserves its official dependency graph without an override.
+- DSH's `@deepseek-ai/libreoffice-kit@0.1.5` pins `fflate` to `0.8.2`, which is affected by [GHSA-px8p-9vwx-vf98](https://github.com/advisories/GHSA-px8p-9vwx-vf98). Inspecting a malformed ZIP64 document can hang synchronous archive parsing. Avoid untrusted Office archives until DSH adopts the patched dependency; this rc.4 release retains the official SDK graph and discloses the remaining risk.
+
 ## [0.1.0-rc.3] - 2026-10-10
 
 ### Security
@@ -291,7 +318,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 - Keep debug diagnostics aligned within the existing footer row and preserve structured logs in the debug console.
 - Address initial CodeQL findings, dependency advisories, CI concurrency issues, and release build ordering.
 
-[Unreleased]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.19...HEAD
+[Unreleased]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-rc.4...HEAD
+[0.1.0-rc.4]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-rc.3...v0.1.0-rc.4
+[0.1.0-rc.3]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-rc.2...v0.1.0-rc.3
+[0.1.0-rc.2]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-rc.1...v0.1.0-rc.2
+[0.1.0-rc.1]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.21...v0.1.0-rc.1
+[0.1.0-alpha.21]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.20...v0.1.0-alpha.21
+[0.1.0-alpha.20]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.19...v0.1.0-alpha.20
 [0.1.0-alpha.19]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.18...v0.1.0-alpha.19
 [0.1.0-alpha.18]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.17...v0.1.0-alpha.18
 [0.1.0-alpha.17]: https://github.com/cofy-x/dsh-console/compare/v0.1.0-alpha.16...v0.1.0-alpha.17