@michengai/dsh-automation 0.1.62 → 0.1.63

package/CHANGELOG.md

@@ -6,6 +6,12 @@ Upcoming changes and recent published versions are listed below. Git tags and Gi
 
 ## Unreleased
 
+## 0.1.63 - 2026-10-12
+
+- Fix Web startup on DSH `0.2.1-alpha.2` while retaining compatibility with the previously supported Host versions.
+- Preserve the Host’s trusted-address configuration and register scheduled-task requests in the automation plugin’s own scope.
+- Restart DSH and refresh the page after upgrading.
+
 ## 0.1.62 - 2026-10-12
 
 - Support DSH `0.2.1-alpha.2` while retaining all existing supported versions.

package/CHANGELOG.zh-CN.md

@@ -6,6 +6,12 @@
 
 ## 未发布
 
+## 0.1.63 - 2026-10-12
+
+- 修复 DSH `0.2.1-alpha.2` 下的 Web 启动失败，继续兼容此前支持的宿主版本。
+- 保留宿主的可信地址配置，定时任务请求在自动化插件自身作用域注册。
+- 升级后请重启 DSH 并刷新页面。
+
 ## 0.1.62 - 2026-10-12
 
 - 支持 DSH `0.2.1-alpha.2`，继续兼容既有已支持版本。

package/README.md

@@ -73,10 +73,10 @@ For a desktop workbench, download [DSH Codex Desktop](https://github.com/Micheng
 
 ## Prerequisites
 
-- The current source uses DSH `0.2.0-rc.2` for development and real Host compatibility tests, and declares support through `0.2.0-rc.2`. Back up automation storage and sessions in the Profile before upgrading the Host. `0.1.7` and `0.2.0` write V4 sessions, and V4 sessions cannot be read after downgrading.
-- Official DSH peerDependencies are exactly `0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2`. The `0.1.6` line is absent because it will not get a release candidate; hosts still on `0.1.6-alpha.1` or `0.1.6-alpha.2` need `0.1.7-rc.1` or later for the next plugin release. `@deepseek-ai/dsh-agent-presets` and `@deepseek-ai/dsh-agent-preset-registry` are not peers: the host install gate checks every `@deepseek-ai/dsh-*` peer against the running version and ignores `optional`. The old package has no `0.1.7` or `0.2.0` release, and the renamed package does not exist on older hosts. Scheduled tasks still use the host `agentPresets` service. Development dependencies are pinned to `0.2.0-rc.2`. Use one consistent official package version within each Host.
+- The current source uses DSH `0.2.0-rc.2` for development and real Host compatibility tests, and declares support through `0.2.1-alpha.2`. Back up automation storage and sessions in the Profile before upgrading the Host. `0.1.7` and `0.2.0` write V4 sessions, and V4 sessions cannot be read after downgrading.
+- Official DSH peerDependencies are exactly `0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2`. The `0.1.6` line is absent because it will not get a release candidate; hosts still on `0.1.6-alpha.1` or `0.1.6-alpha.2` need `0.1.7-rc.1` or later for the next plugin release. `@deepseek-ai/dsh-agent-presets` and `@deepseek-ai/dsh-agent-preset-registry` are not peers: the host install gate checks every `@deepseek-ai/dsh-*` peer against the running version and ignores `optional`. The old package has no `0.1.7` or `0.2.0` release, and the renamed package does not exist on older hosts. Scheduled tasks still use the host `agentPresets` service. Development dependencies are pinned to `0.2.0-rc.2`. Use one consistent official package version within each Host.
 - Other versions are outside the declared compatibility range. Installers may warn, and strict peer validation rejects them. Extend and pass the version matrix before adding a new rc.
-- The Connection patch replaces the Web bundle's configured injection list with `[webServer, webRuntime]`; Loader still merges dependencies declared by the plugin source. Custom Hosts with additional configured injections must retain these two entries and their extra dependencies in a later Profile patch. This patch does not automatically merge other bundles' lists.
+- The automation bundle does not override the official Connection entry. Each Host keeps its own startup dependencies, trusted-host expressions, and custom configuration; automation registers its RPC channel in its own plugin scope.
 - A working DeepSeek Harness Web installation with `dsh` available in PowerShell.
 - Examples use the `web` profile; replace it with the target profile.
 - Source installation and development require Node.js 22.19+. npm installation does not require running `npm install` in an arbitrary directory.

package/README.zh-CN.md

@@ -73,10 +73,10 @@
 
 ## 前置条件
 
-- 当前源码以 DSH `0.2.0-rc.2` 为开发和真实宿主测试基线，并声明支持到 `0.2.0-rc.2`。升级宿主前备份 Profile 中的自动化存储和会话目录。`0.1.7` 和 `0.2.0` 写入 V4 会话，V4 会话不支持降级读取。
-- 官方 DSH peerDependencies 精确限定为 `0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2`。`0.1.6` 这条线不会再有候选版，所以不在名单里；仍停在 `0.1.6-alpha.1`、`0.1.6-alpha.2` 的宿主，安装下一版前需要升到 `0.1.7-rc.1` 或更新。`@deepseek-ai/dsh-agent-presets` 和 `@deepseek-ai/dsh-agent-preset-registry` 都不写入 peer：宿主安装门会拿每一个 `@deepseek-ai/dsh-*` peer 去对当前版本，并且不看 `optional`。旧包没有 `0.1.7` 或 `0.2.0` 发布版，改名后的包在旧宿主上也不存在。定时任务仍使用宿主的 `agentPresets` 服务。开发依赖固定为 `0.2.0-rc.2`。同一宿主中的官方包应使用一致版本。
+- 当前源码以 DSH `0.2.0-rc.2` 为开发和真实宿主测试基线，并声明支持到 `0.2.1-alpha.2`。升级宿主前备份 Profile 中的自动化存储和会话目录。`0.1.7` 和 `0.2.0` 写入 V4 会话，V4 会话不支持降级读取。
+- 官方 DSH peerDependencies 精确限定为 `0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2`。`0.1.6` 这条线不会再有候选版，所以不在名单里；仍停在 `0.1.6-alpha.1`、`0.1.6-alpha.2` 的宿主，安装下一版前需要升到 `0.1.7-rc.1` 或更新。`@deepseek-ai/dsh-agent-presets` 和 `@deepseek-ai/dsh-agent-preset-registry` 都不写入 peer：宿主安装门会拿每一个 `@deepseek-ai/dsh-*` peer 去对当前版本，并且不看 `optional`。旧包没有 `0.1.7` 或 `0.2.0` 发布版，改名后的包在旧宿主上也不存在。定时任务仍使用宿主的 `agentPresets` 服务。开发依赖固定为 `0.2.0-rc.2`。同一宿主中的官方包应使用一致版本。
 - 其他版本不在声明兼容范围内；安装器可能提示 peer 警告，启用严格 peer 校验时会失败。支持新 rc 前需扩展版本矩阵并通过验证。
-- Connection 补丁替换 Web bundle 的配置注入列表为 `[webServer, webRuntime]`，Loader 仍会合并插件源码声明的依赖。自定义宿主若增加了其他配置注入，需在后置 Profile 补丁中保留这两项并补齐自定义依赖；本补丁不自动合并其他 bundle 的列表。
+- 自动化 bundle 不覆盖官方 Connection 条目，各版宿主保留自己的启动依赖、可信地址表达式和自定义配置；自动化在自身插件作用域注册 RPC 路由。
 - 已可正常运行 DeepSeek Harness Web，且可在 PowerShell 中使用 `dsh`。
 - 以下示例使用 `web` profile；请替换为实际目标 profile。
 - 从源码安装或二次开发需要 Node.js 22.19+；仅从 npm 安装无需在任意目录执行 `npm install`。

package/cordis.patch.yml

@@ -1,11 +1,5 @@
 # 一次安装同时挂载 Host 服务并发布 Web 客户端。
-# 新版 Connection 的独立 RPC 注册在自身作用域读取 webServer，需显式注入。
-# 此列表替换官方 Web bundle 的 [webRuntime]；插件源码声明的依赖仍由 Loader 合并。
-- id: connection
-  name: '@deepseek-ai/dsh-client-connection'
-  inject:
-    - webServer
-    - webRuntime
+# 不覆盖官方 Connection；各版宿主自行管理启动服务和可信地址配置。
 - insert:
     - id: dsh-automation
       name: '@michengai/dsh-automation'

package/lib/index.js

@@ -22999,7 +22999,19 @@ async function snapshotValue(service, payload, signal) {
   };
 }
 function registerAutomationRpc(ctx, service) {
-  return ctx.connection.rpc.handle("/dsh-automation", async (endpoint, rawPayload, signal) => {
+  const connection = ctx.connection;
+  let prototype = connection;
+  let rpc;
+  while (prototype !== null) {
+    const descriptor = Object.getOwnPropertyDescriptor(prototype, "rpc");
+    if (descriptor !== void 0) {
+      rpc = descriptor.get === void 0 ? connection.rpc : descriptor.get.call(connection);
+      break;
+    }
+    prototype = Object.getPrototypeOf(prototype);
+  }
+  rpc ??= connection.rpc;
+  return rpc.handle("/dsh-automation", async (endpoint, rawPayload, signal) => {
     try {
       const payload = record2(rawPayload, "payload");
       switch (endpoint) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-automation",
-  "version": "0.1.62",
+  "version": "0.1.63",
   "description": "DSH Automation — 在独立 DSH Session 中按计划执行和管理编码任务 · Schedule and manage coding tasks in isolated DSH sessions",
   "type": "module",
   "packageManager": "pnpm@11.22.0",
@@ -63,7 +63,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "test": "node --import ./tests/register-dsh-stubs.mjs --import tsx --test tests/*.test.ts",
     "check": "pnpm typecheck && pnpm test && pnpm test:host && pnpm build",
-    "test:host": "node --import tsx --test tests/host-compatibility.test.mjs",
+    "test:host": "node --import tsx --test tests/host-compatibility.test.mjs tests/connection-loader.test.mjs",
     "test:composition": "node --import tsx scripts/verify-sidebar-composition.mjs",
     "test:matrix": "pnpm build && node scripts/test-version-matrix.mjs"
   },
@@ -73,7 +73,7 @@
     "zod": "^4.1.5"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": ">=4.0.1 <5.0.0",
+    "@deepseek-ai/cordis": ">=4.0.1 <5.0.0 || 4.0.5-alpha.1",
     "@deepseek-ai/dsh-agent": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2",
     "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2",
     "@deepseek-ai/dsh-client-connection": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2",
@@ -89,7 +89,7 @@
     "@deepseek-ai/dsh-tools": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2",
     "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2",
     "@deepseek-ai/dsh-workspace": "0.1.2-rc.1 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": ">=3.18.1 <4.0.0",
+    "@deepseek-ai/schemastery": ">=3.18.1 <4.0.0 || 3.18.5-alpha.1",
     "react": "^18.2.0"
   },
   "peerDependenciesMeta": {