@stardustlc/dsh-suite 0.2.10 → 0.2.12

package/README.en.md

@@ -16,7 +16,7 @@ node scripts/verify-compat.mjs --harness-root <harness checkout>
 
 ## Compatibility
 
-Validation host: Harness `0.2.0-rc.2` built from its official release tag (commit `639ed01539`), Windows and Node `24.16.0`. All 18 components mount together with 104 tools and 35 plugin skills; tool schemas and health contracts pass. The suite also has 11 manifest, lockfile and offline-environment tests. Version 0.2.10 upgrades PPT to 0.6.0 with image layouts, editing and undo, per-slide quality reports, editable charts, scenario outlines, branding and optional PNG/PDF rendering. The other 17 verified component pins remain in place. See the [PPT validation record](docs/validation-2026-10-01-ppt.md) for Windows slideshow, export and rendering coverage; the earlier [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](docs/validation-2026-10-01.md) records remain available.
+Validation host: Harness `0.2.0-rc.2` built from its official release tag (commit `639ed01539`), Windows and Node `24.16.0`. All 18 components mount together with 104 tools and 35 plugin skills; tool schemas and health contracts pass. The suite also has 11 manifest, lockfile and offline-environment tests. Version 0.2.12 pins RSS 0.5.0 with a subscription panel, OPML import previews and fixes for concurrent saves and malformed imports; see the [RSS validation record](docs/validation-2026-10-02-rss.md). Email remains at 0.14.6 to preserve manually configured servers when form endpoints are empty; see the [Email PR #18 validation record](docs/validation-2026-10-02-email.md). PPT remains at 0.6.0 with image layouts, editing and undo, per-slide quality reports, editable charts, scenario outlines, branding and optional PNG/PDF rendering. See the [PPT validation record](docs/validation-2026-10-01-ppt.md) for Windows slideshow, export and rendering coverage; the earlier [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](docs/validation-2026-10-01.md) records remain available.
 
 ## Install / Uninstall
 
@@ -54,7 +54,7 @@ Keep your profile's `cordis.patch.yml` configuration overrides, then restart Web
 | :-- | :-- | :-- |
 | Office | dsh-email | Ten IMAP/SMTP tools: list/read/search/send, attachments, incremental new-mail watch, flag & folder moves, reply/reply-all/forward; eight provider presets plus custom ones, Outlook OAuth2 device-code login (bundled public client — works out of the box), card-based multi-account settings page (bilingual), send-approval gate |
 | | dsh-calendar | CalDAV list/create/update/delete/search (Google/iCloud/Nextcloud/custom); ships a month/week/agenda panel in Settings (remembers your view, week view starts at 07:00, **drag to reschedule**) where the connection is entered, tested and saved |
-| | dsh-rss | RSS/Atom subscriptions + cross-feed search + incremental fetch |
+| | dsh-rss | RSS/Atom subscriptions + cross-feed search + incremental fetch; bilingual subscription panel, category filters, availability checks and OPML import previews/export |
 | | dsh-cite | Crossref lookup + four citation styles + BibTeX |
 | | dsh-dream | Session replay → source verification → lesson review → project-rule preview, apply and rollback (privacy masking) |
 | Media | dsh-ffmpeg | probe/cut/concat/encode/subtitle/frames/GIF/adjust (speed/volume/mute/rotate), ten tools |

package/README.md

@@ -17,7 +17,7 @@ node scripts/verify-compat.mjs --harness-root <harness 检出>   # 或在套件
 
 ## 兼容性
 
-验证宿主：官方发布标签源码构建的 Harness `0.2.0-rc.2`（commit `639ed01539`）+ Windows / Node `24.16.0`。18 个组件共同加载，注册 104 个工具、35 个插件技能，工具 schema 与健康检查契约通过。套件另有 11 项清单、锁文件与离线环境测试。0.2.10 升级 PPT 到 0.6.0，新增图片排版、编辑与撤销、逐页质量报告、可编辑图表、场景提纲与品牌配置，并提供可选 PNG/PDF 渲染；其余 17 个组件保持已验证版本。Windows 放映、导出和渲染范围见 [PPT 验收记录](docs/validation-2026-10-01-ppt.md)，此前的 [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) 和 [Dream/Email/Slack](docs/validation-2026-10-01.md) 验收记录继续保留。
+验证宿主：官方发布标签源码构建的 Harness `0.2.0-rc.2`（commit `639ed01539`）+ Windows / Node `24.16.0`。18 个组件共同加载，注册 104 个工具、35 个插件技能，工具 schema 与健康检查契约通过。套件另有 11 项清单、锁文件与离线环境测试。0.2.12 同步 RSS 0.5.0，新增订阅管理面板、OPML 导入预览，并修复并发保存与损坏导入问题，见 [RSS 验收记录](docs/validation-2026-10-02-rss.md)。Email 保持 0.14.6，修复空端点覆盖手工服务器的问题，见 [Email PR #18 验收记录](docs/validation-2026-10-02-email.md)。PPT 保持 0.6.0，支持图片排版、编辑与撤销、逐页质量报告、可编辑图表、场景提纲、品牌配置及可选 PNG/PDF 渲染。Windows 放映、导出和渲染范围见 [PPT 验收记录](docs/validation-2026-10-01-ppt.md)，此前的 [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) 和 [Dream/Email/Slack](docs/validation-2026-10-01.md) 验收记录继续保留。
 
 ## 安装
 
@@ -57,7 +57,7 @@ dsh plugin --profile web remove @stardustlc/dsh-suite
 | :-- | :-- | :-- |
 | 📨 办公流 | dsh-email | IMAP/SMTP 十工具：收发/搜索/附件/增量新邮件监视/标记整理/回复转发，八大服务商预设 + 自定义预设，Outlook OAuth2 设备码登录（内置公共客户端，开箱即用），卡片式多账号设置页（中英双语），发信审批门 |
 | | dsh-calendar | CalDAV 日程查建改删搜（Google/iCloud/Nextcloud/自建）；设置页里带月/周/议程面板（记住上次视图、周视图从 07:00 起、**拖动即可改期**），连接配置在面板内填写并先测后存 |
-| | dsh-rss | RSS/Atom 订阅 + 跨订阅搜索 + 增量抓取 |
+| | dsh-rss | RSS/Atom 订阅 + 跨订阅搜索 + 增量抓取；中英双语订阅管理面板、分类筛选、可用性检查与 OPML 导入预览/导出 |
 | | dsh-cite | Crossref 文献检索 + 四种引文格式 + BibTeX |
 | | dsh-dream | 会话回放 → 来源核验 → 经验审阅 → 项目规则预览、写入与回滚（含隐私脱敏） |
 | 🎬 媒体工坊 | dsh-ffmpeg | 探测/剪辑/拼接/转码/字幕/抽帧/GIF/调整（变速·音量·静音·旋转）十工具 |

package/docs/validation-2026-10-02-email.md

@@ -0,0 +1,13 @@
+# Suite 0.2.11: Email PR #18
+
+Suite 0.2.11 pins `dsh-email@0.14.6` in the manifest and frozen lockfile. All other component pins and both loader patches are unchanged from 0.2.10. The published Email tarball has integrity `sha512-7rqRkfeXU6+z7ha06inVc5mb9VSmEXWsLvL2sPooVlPwSe17zWq+aD9guoXYAfiCISkOFso4Qmajg6PPZEWJkg==`.
+
+Email completes [PR #18](https://github.com/STARDUSTLC666/dsh-email/pull/18). Untouched saved form endpoints and partial drafts no longer erase explicit row IMAP/SMTP servers by projecting empty objects. The shared normalization already introduced in 0.14.2 remains in use: Outlook selects 587/STARTTLS, while explicit port/TLS settings without a placeholder host survive. The original contribution is retained in the merge history and [issue #17](https://github.com/STARDUSTLC666/dsh-email/issues/17) is closed.
+
+On Windows / Node 24.16.0, Email passes 297 tests. Both new row-server preservation regressions failed before the fix and pass afterward. The final tarball passes a fresh installation, root-module import and six endpoint regressions. Email's PR and merged main commit pass GitHub CI.
+
+The suite passes its 11 manifest, lockfile and offline-environment tests and a frozen pnpm 11.7.0 installation. The contract verifier uses the official-source Harness 0.2.0-rc.2, commit `639ed01539`, and registers all 18 components with 104 tools and 35 plugin skills. Email resolves as 0.14.6.
+
+The release also requires final tarball inspection and an isolated official-CLI installation/startup check. These verify the dependency pins, single suite loader entry, tool/skill inventory, minimal-PTC mount and Web authentication. Installation and startup reports are retained in the workspace release directory.
+
+This update does not add UI features or repeat native desktop operation, real mailbox login, OAuth2 authorization or SMTP delivery checks. The earlier [PPT](validation-2026-10-01-ppt.md), [Calendar/RSS](validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](validation-2026-10-01.md) acceptance records retain their original scope.

package/docs/validation-2026-10-02-rss.md

@@ -0,0 +1,17 @@
+# Suite 0.2.12: RSS subscription panel
+
+Suite 0.2.12 pins `dsh-rss@0.5.0` in the manifest and frozen lockfile. The other 17 component pins and both loader patches retain their 0.2.11 versions. RSS has published integrity `sha512-ow7Y/lQKjzl1+FSYPakeYQneb1rk2oo9XLAER2Qe00M55JEOSB8A9ugURowdxELFQX4VeXSxQ9pwNRDBwAjliw==`.
+
+Settings → RSS subscriptions adds, edits and removes subscriptions, searches and filters categories, checks availability and imports/exports OPML. It shares the original settings and subscription list with the conversation tools. The panel follows the host's Chinese/English locale and light/dark theme. Existing subscriptions require no migration.
+
+OPML import previews new, duplicate and invalid entries before saving. Existing names and categories are preserved by default; opting into updates shows the before/after values. A stale preview is rejected without losing its text. Removal confirms the exact subscription. New URLs must pass the existing network checks; editing metadata for the same URL works offline.
+
+RSS fixes three reproduced regressions: truncated XML being partially imported, invalid or credential-bearing URLs being accepted, and concurrent additions losing a subscription. Panel routes also validate same-origin JSON requests, revision conflicts, size limits, failed settings writes and disconnected clients. Windows / Node 24.16.0 passes 94 tests, including 13 regression and HTTP tests exercised again from a freshly installed release package. The npm tarball is checked against the tested package's SHA512 integrity.
+
+Browser acceptance uses the official-source Harness 0.2.0-rc.2, commit `639ed01539`, in an isolated, keyless Windows profile with synthetic localhost feeds. Actual clicks and keyboard input cover add/edit/remove, failed-add input preservation, search/category filters, feed checks, malformed OPML, import preview and confirmation, duplicate preservation/update, two-page conflicts, Tab/Enter/Escape, locale/theme changes and persistence after a host restart. Final browser logs contain no new errors. Export displays its download confirmation; the downloaded file location was not inspected.
+
+Native desktop-window operation, file-picker selection and external production feeds were not exercised in this round. A 390px iframe fixture could load Harness, but the browser tool could not target its nested controls; narrow-screen RSS interaction remains blocked rather than passed. The paste import flow was tested. Web acceptance does not replace native desktop acceptance.
+
+Suite release gates require its 11 manifest/lockfile/offline tests, frozen pnpm installation, the official-host contracts, final tarball inspection and an isolated official-CLI installation/startup. Startup checks verify all 18 transitive components, the complete tool/skill inventory, the minimal-PTC mount and Web authentication; they do not constitute human UI tests for all 18 plugins. Release reports are retained in the workspace validation directory.
+
+The earlier [Email PR #18](validation-2026-10-02-email.md), [PPT](validation-2026-10-01-ppt.md), [Calendar/RSS](validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](validation-2026-10-01.md) records retain their original scope.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardustlc/dsh-suite",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "description": "DSH 插件全家桶：18 个组件覆盖邮件、日历、媒体创作、开发运维、消息通知与极简 PTC，一条命令安装。",
   "type": "module",
   "dsh": {
@@ -19,7 +19,9 @@
     "docs/validation-2026-09-27.md",
     "docs/validation-2026-10-01.md",
     "docs/validation-2026-10-01-calendar-rss.md",
-    "docs/validation-2026-10-01-ppt.md"
+    "docs/validation-2026-10-01-ppt.md",
+    "docs/validation-2026-10-02-email.md",
+    "docs/validation-2026-10-02-rss.md"
   ],
   "scripts": {
     "test": "node --test \"test/*.test.mjs\"",
@@ -51,14 +53,14 @@
     "dsh-code-security": "0.3.6",
     "dsh-codex-port": "0.2.4",
     "dsh-dingtalk": "0.2.2",
-    "dsh-email": "0.14.5",
+    "dsh-email": "0.14.6",
     "dsh-ffmpeg": "0.4.4",
     "dsh-flakefinder": "0.3.4",
     "dsh-hyperframes": "0.4.2",
     "dsh-minimal-ptc": "0.5.2",
     "dsh-ppt": "0.6.0",
     "dsh-remotion": "0.3.4",
-    "dsh-rss": "0.4.3",
+    "dsh-rss": "0.5.0",
     "dsh-slack": "0.3.3",
     "dsh-sql": "0.4.4",
     "dsh-voice": "0.3.5"