@michengai/dsh-codex-ui 0.2.91 → 0.2.92

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/CHANGELOG.md +9 -0
  2. package/CHANGELOG.zh-CN.md +9 -0
  3. package/README.md +7 -57
  4. package/README.zh-CN.md +7 -57
  5. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -4,6 +4,15 @@
4
4
 
5
5
  This changelog records recent releases of DSH Codex UI and its one-click installer. Earlier changes remain available in the [Git history](https://github.com/MichengAI/dsh-codex-ui/commits/main).
6
6
 
7
+ ## 0.2.92 — 2026-08-28
8
+
9
+ Companion release: `@michengai/dsh-codex-suite-installer@0.1.9`.
10
+
11
+ ### Security
12
+
13
+ - Updated the legacy Suite and its installer manifest to `@michengai/dsh-im-connect@0.1.26`.
14
+ - Pinned the workspace dependency graph to the compatible patched `ansi-regex@5.0.1`, resolving CVE-2021-3807 in both the Suite and test dependency paths.
15
+
7
16
  ## 0.2.91 — 2026-08-28
8
17
 
9
18
  ### Release process
package/CHANGELOG.zh-CN.md CHANGED
@@ -4,6 +4,15 @@
4
4
 
5
5
  本日志记录 DSH Codex UI 及其一键安装器的最近发布；更早的变更可查看 [Git 提交历史](https://github.com/MichengAI/dsh-codex-ui/commits/main)。
6
6
 
7
+ ## 0.2.92 — 2026-08-28
8
+
9
+ 配套版本：`@michengai/dsh-codex-suite-installer@0.1.9`。
10
+
11
+ ### 安全修复
12
+
13
+ - 旧版 Suite 及其安装器清单更新为 `@michengai/dsh-im-connect@0.1.26`。
14
+ - 工作区依赖图固定使用兼容的修复版 `ansi-regex@5.0.1`，消除 Suite 与测试依赖路径中的 CVE-2021-3807。
15
+
7
16
  ## 0.2.91 — 2026-08-28
8
17
 
9
18
  ### 发布流程
package/README.md CHANGED
@@ -53,49 +53,23 @@ Conversation menu: rename, pin, unread, archive, fork, copy, and delete.
53
53
  - Examples use the `web` profile; replace it with the target profile.
54
54
  - Source installation and development require Node.js 22+ and pnpm. Installing from npm does not require running `pnpm install` in an arbitrary directory.
55
55
 
56
- ## Plugin combo
57
-
58
- `@michengai/dsh-codex-suite-installer` is the lightweight one-click installer for the `@michengai/dsh-codex-suite` member set. It adds these six plugins to the same profile as **direct dependencies**:
59
-
60
- | Plugin | npm package | Role |
61
- | --- | --- | --- |
62
- | Codex UI | `@michengai/dsh-codex-ui` | Codex-style sidebar, workspace tree, search, and turn navigation |
63
- | Expert management | `@michengai/dsh-agency-agents` | Settings page opened from **Experts** |
64
- | Skill management | `@michengai/dsh-skills-manager` | Settings page opened from **Skills** |
65
- | Archive management | `@michengai/dsh-archive-manager` | Permanent deletion and archived-session management |
66
- | IM Assistant | `@michengai/dsh-im-connect` | IM settings and the **Channels** tab |
67
- | Scheduled tasks | `@michengai/dsh-automation` | Scheduled-task settings and the **Schedule** tab |
68
-
69
- `dshmarket` stays optional. When it is installed, **Plugins** opens the market first.
70
-
71
- Direct dependencies let **Settings → About** detect and update every plugin independently. The lightweight installer carries only the version manifest, and it migrates the legacy aggregate Suite without leaving duplicate patches behind.
72
-
73
56
  ## DSH product ecosystem
74
57
 
75
- Codex UI can be installed independently or used through the desktop app or Web suite. They share the same DSH core but serve different ways of working:
58
+ Codex UI can be installed independently or used through the desktop app. They share the same DSH core but serve different ways of working:
76
59
 
77
60
  | Product | Relationship to Codex UI |
78
61
  | --- | --- |
79
62
  | [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) | The host runtime that provides models, sessions, tools, and the plugin system |
80
63
  | [DSH Codex Desktop](https://github.com/MichengAI/dsh-codex-desktop) | A ready-to-install desktop product with Codex UI and the other five feature products built in |
81
- | [DSH Codex Suite](https://github.com/MichengAI/dsh-codex-ui/tree/main/packages/dsh-codex-suite) | A one-click suite for existing DSH Web environments that installs Codex UI and the other five feature products |
82
64
  | Six feature products | [Codex UI](https://github.com/MichengAI/dsh-codex-ui) · [IM Connect](https://github.com/MichengAI/dsh-im-connect) · [Automation](https://github.com/MichengAI/dsh-automation) · [Skills Manager](https://github.com/MichengAI/dsh-skills-manager) · [Archive Manager](https://github.com/MichengAI/dsh-archive-manager) · [Agency Agents](https://github.com/MichengAI/dsh-agency-agents) |
83
65
 
84
66
  ## Installation
85
67
 
86
68
  `dsh plugin add` forwards to `pnpm add` in the profile directory. Without a version and official registry, a local mirror or minimum-release-age policy can leave you on an older build.
87
69
 
88
- ### Ask another agent to install the suite
89
-
90
- Copy one of the sentences below into DSH, Codex, or WorkBuddy and let that agent install the combo into your local `web` profile.
70
+ ### Ask another agent to install Codex UI
91
71
 
92
- From npm:
93
-
94
- ```text
95
- Use the one-click installer to add all six DSH Codex Suite members as direct dependencies of my local web profile: npx --yes @michengai/dsh-codex-suite-installer@latest --profile web. Confirm its configuration check succeeds, then remind me to restart DSH Web and hard-refresh the browser.
96
- ```
97
-
98
- UI only:
72
+ Copy the sentence below into DSH, Codex, or WorkBuddy and let that agent install Codex UI into your local `web` profile.
99
73
 
100
74
  ```text
101
75
  Install the latest DSH plugin @michengai/dsh-codex-ui into my local web profile using the official npm registry: dsh plugin --profile web add @michengai/dsh-codex-ui@latest --registry=https://registry.npmjs.org/. Then run dsh --profile web --dump-config, confirm codex-ui is mounted, and remind me to restart DSH Web and hard-refresh the browser.
@@ -103,33 +77,9 @@ Install the latest DSH plugin @michengai/dsh-codex-ui into my local web profile
103
77
 
104
78
  | Product | How to use it |
105
79
  | --- | --- |
106
- | DSH | Send one of the sentences above to the current session. |
107
- | Codex | Send one of the sentences above to Codex and let it install locally. |
108
- | WorkBuddy | Send one of the sentences above to WorkBuddy. |
109
-
110
- The installer needs the current `dsh` on PATH. Set `DSH_BIN` when the executable lives elsewhere.
111
-
112
- ### Install the complete suite
113
-
114
- This is the one-click combo. Run it from any PowerShell directory:
115
-
116
- ```powershell
117
- [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
118
- $OutputEncoding = [System.Text.Encoding]::UTF8
119
- npx --yes @michengai/dsh-codex-suite-installer@latest --profile web
120
- ```
121
-
122
- The installer reads its exact verified member versions, adds all six members as direct profile dependencies in one `dsh plugin add`, and finishes with `dsh --profile web --dump-config`. Replace `@latest` with an installer version to pin the whole set.
123
-
124
- Restart DSH Web and hard-refresh the browser. Existing members are aligned in place; a legacy `@michengai/dsh-codex-suite` aggregate dependency is removed only after all six direct members have been staged.
125
-
126
- Use the same command with another profile name for a clean custom Web profile:
127
-
128
- ```powershell
129
- npx --yes @michengai/dsh-codex-suite-installer@latest --profile codex
130
- ```
131
-
132
- The installer stays in the current `DSH_HOME` and places DSH's built-in `@deepseek-ai/dsh-web-app` before the member bundles. It neither creates a separate Home nor reinstalls the official Web package.
80
+ | DSH | Send the sentence above to the current session. |
81
+ | Codex | Send the sentence above to Codex and let it install locally. |
82
+ | WorkBuddy | Send the sentence above to WorkBuddy. |
133
83
 
134
84
  ### Install Codex UI only
135
85
 
@@ -173,7 +123,7 @@ Open DSH Web. The left navigation is rendered by this plugin.
173
123
  | Manage a conversation | Open the conversation menu to rename, pin, mark unread, archive, fork, copy, or delete. |
174
124
  | Jump between turns | Use the turn marks on the left of the current conversation. |
175
125
  | Inspect connectors | Open **Settings → Connectors**. Addresses, commands, and credentials are never shown. |
176
- | Check companion plugins | Open **Settings → About** to install or update the combo plugins. |
126
+ | Check companion plugins | Open **Settings → About** to install or update individual companion plugins. |
177
127
 
178
128
  Deleting a workspace registration does not delete its folder or conversation records. Pinned and unread state is stored only in the current browser.
179
129
 
package/README.zh-CN.md CHANGED
@@ -53,49 +53,23 @@
53
53
  - 以下示例使用 `web` profile；请替换为实际目标 profile。
54
54
  - 从源码安装或二次开发需要 Node.js 22+ 与 pnpm；仅从 npm 安装无需在任意目录执行 `pnpm install`。
55
55
 
56
- ## 插件组合
57
-
58
- `@michengai/dsh-codex-suite-installer` 是 `@michengai/dsh-codex-suite` 成员组合的轻量一键安装器，会把下面 6 个插件作为**直接依赖**装进同一个 profile：
59
-
60
- | 插件 | npm 包 | 作用 |
61
- | --- | --- | --- |
62
- | Codex UI | `@michengai/dsh-codex-ui` | Codex 风格侧栏、工作区会话树、搜索和轮次导航 |
63
- | 专家管理 | `@michengai/dsh-agency-agents` | 从「专家」进入对应设置页 |
64
- | 技能管理 | `@michengai/dsh-skills-manager` | 从「技能」进入对应设置页 |
65
- | 归档管理 | `@michengai/dsh-archive-manager` | 提供永久删除和已归档会话管理 |
66
- | IM 助理 | `@michengai/dsh-im-connect` | IM 设置页和「频道」页签 |
67
- | 定时任务 | `@michengai/dsh-automation` | 定时任务设置页和「定时」页签 |
68
-
69
- `dshmarket` 仍是可选项。已安装时，「插件」入口会优先进入市场。
70
-
71
- 直接依赖让「设置 → 关于」能够分别检测和升级每个插件。轻量安装器只携带版本清单，也会自动迁移旧版聚合 Suite，避免聚合 patch 与独立 patch 冲突。
72
-
73
56
  ## DSH 产品生态
74
57
 
75
- Codex UI 既可以独立安装，也可以随桌面端或 Web 套件一起使用。它们共享同一个 DSH 核心，但面向不同的使用方式：
58
+ Codex UI 既可以独立安装，也可以随桌面端一起使用。它们共享同一个 DSH 核心，但面向不同的使用方式：
76
59
 
77
60
  | 产品 | 与 Codex UI 的关系 |
78
61
  | --- | --- |
79
62
  | [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) | Codex UI 的运行宿主，提供模型、会话、工具和插件系统 |
80
63
  | [DSH Codex Desktop](https://github.com/MichengAI/dsh-codex-desktop) | 下载安装即用的桌面产品，已内置 Codex UI 和其他 5 个功能产品 |
81
- | [DSH Codex Suite](https://github.com/MichengAI/dsh-codex-ui/tree/main/packages/dsh-codex-suite) | 面向已有 DSH Web 环境的一键套件，会安装 Codex UI 和其他 5 个功能产品 |
82
64
  | 6 个功能产品 | [Codex UI](https://github.com/MichengAI/dsh-codex-ui) · [IM Connect](https://github.com/MichengAI/dsh-im-connect) · [Automation](https://github.com/MichengAI/dsh-automation) · [Skills Manager](https://github.com/MichengAI/dsh-skills-manager) · [Archive Manager](https://github.com/MichengAI/dsh-archive-manager) · [Agency Agents](https://github.com/MichengAI/dsh-agency-agents) |
83
65
 
84
66
  ## 安装
85
67
 
86
68
  `dsh plugin add` 会转发到 profile 目录里的 `pnpm add`。不写版本、不指定官方源时，本机镜像和最短发布间隔可能让你停在旧版。
87
69
 
88
- ### 交给其他 Agent 一句话安装套件
89
-
90
- 把下面其中一句复制到 DSH、Codex 或 WorkBuddy，让它代你安装到本机 `web` profile。
70
+ ### 交给其他 Agent 一句话安装 Codex UI
91
71
 
92
- 从 npm 安装完整套件：
93
-
94
- ```text
95
- 请用一键安装器把 DSH Codex Suite 的六个成员作为直接依赖装进本机 web profile，执行：npx --yes @michengai/dsh-codex-suite-installer@latest --profile web。确认安装器完成配置检查，并提醒我重启 DSH Web 后硬刷新浏览器。
96
- ```
97
-
98
- 只安装 Codex UI：
72
+ 把下面这句话复制到 DSH、Codex 或 WorkBuddy，让它代你安装到本机 `web` profile。
99
73
 
100
74
  ```text
101
75
  请把 DSH 插件 @michengai/dsh-codex-ui 最新版装进本机 web profile，使用官方 npm 源执行：dsh plugin --profile web add @michengai/dsh-codex-ui@latest --registry=https://registry.npmjs.org/。装完执行 dsh --profile web --dump-config，确认已挂载 codex-ui，并提醒我重启 DSH Web 后硬刷新浏览器。
@@ -103,33 +77,9 @@ Codex UI 既可以独立安装，也可以随桌面端或 Web 套件一起使用
103
77
 
104
78
  | 产品 | 怎么用 |
105
79
  | --- | --- |
106
- | DSH | 把上面其中一句发给当前会话。 |
107
- | Codex | 把上面其中一句发给 Codex，让它在本机执行安装。 |
108
- | WorkBuddy | 把上面其中一句发给 WorkBuddy。 |
109
-
110
- 一键安装器需要能从 PATH 找到当前 DSH；也可以用 `DSH_BIN` 指定 `dsh` 可执行文件。
111
-
112
- ### 安装完整套件
113
-
114
- 这是一键组合安装。在任意 PowerShell 目录执行：
115
-
116
- ```powershell
117
- [Console]::OutputEncoding = [System.Text.Encoding]::UTF8
118
- $OutputEncoding = [System.Text.Encoding]::UTF8
119
- npx --yes @michengai/dsh-codex-suite-installer@latest --profile web
120
- ```
121
-
122
- 安装器会读取自身锁定的精确成员版本，用一次 `dsh plugin add` 将六个成员写成 profile 的直接依赖，并在最后运行 `dsh --profile web --dump-config`。需要钉死一组版本时，把 `@latest` 换成具体安装器版本。
123
-
124
- 安装后重启 DSH Web 并硬刷新浏览器。已有成员会原地对齐版本；旧版 `@michengai/dsh-codex-suite` 聚合依赖会在六个成员提升完成后自动移除。
125
-
126
- 新建自定义 Web profile 也使用同一命令，只需改 profile 名：
127
-
128
- ```powershell
129
- npx --yes @michengai/dsh-codex-suite-installer@latest --profile codex
130
- ```
131
-
132
- 安装器会复用当前 `DSH_HOME`，并把 DSH 自带的 `@deepseek-ai/dsh-web-app` 放到成员 bundle 之前；不会创建独立 Home，也不会重新安装官方 Web 包。
80
+ | DSH | 把上面这句话发给当前会话。 |
81
+ | Codex | 把上面这句话发给 Codex，让它在本机执行安装。 |
82
+ | WorkBuddy | 把上面这句话发给 WorkBuddy。 |
133
83
 
134
84
  ### 只安装 Codex UI
135
85
 
@@ -173,7 +123,7 @@ dsh --profile web --dump-config
173
123
  | 管理会话 | 打开会话菜单，进行重命名、置顶、未读、归档、派生、复制或删除。 |
174
124
  | 跳转轮次 | 使用当前会话左侧的轮次刻度跳转到对应提问。 |
175
125
  | 查看连接器 | 打开「设置 → 连接器」。不会展示地址、命令或凭证。 |
176
- | 查看配套插件 | 打开「设置 → 关于」，安装或更新套件中的配套插件。 |
126
+ | 查看配套插件 | 打开「设置 → 关于」，安装或更新各个配套插件。 |
177
127
 
178
128
  删除项目注册不会删除项目目录或会话记录。置顶和未读状态只保存在当前浏览器。
179
129
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@michengai/dsh-codex-ui",
3
- "version": "0.2.91",
3
+ "version": "0.2.92",
4
4
  "description": "以 Codex 风格重构 DSH Web 侧栏的独立客户端插件",
5
5
  "license": "Apache-2.0",
6
6
  "publishConfig": {