@stardustlc/dsh-suite 0.2.11 → 0.2.13

package/README.en.md

@@ -16,7 +16,7 @@ node scripts/verify-compat.mjs --harness-root <harness checkout>
 
 ## Compatibility
 
-Validation host: Harness `0.2.0-rc.2` built from its official release tag (commit `639ed01539`), Windows and Node `24.16.0`. All 18 components mount together with 104 tools and 35 plugin skills; tool schemas and health contracts pass. The suite also has 11 manifest, lockfile and offline-environment tests. Version 0.2.11 pins Email 0.14.6 to preserve manually configured servers when form endpoints are empty; see the [Email PR #18 validation record](docs/validation-2026-10-02-email.md). PPT remains at 0.6.0 with image layouts, editing and undo, per-slide quality reports, editable charts, scenario outlines, branding and optional PNG/PDF rendering. See the [PPT validation record](docs/validation-2026-10-01-ppt.md) for Windows slideshow, export and rendering coverage; the earlier [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](docs/validation-2026-10-01.md) records remain available.
+Validation host: Harness `0.2.0-rc.2` built from its official release tag (commit `639ed01539`), Windows and Node `24.16.0`. All 18 components mount together with 104 tools and 35 plugin skills; tool schemas and health contracts pass. The suite also has 11 manifest, lockfile and offline-environment tests. Version 0.2.13 pins RSS 0.5.1 for VPN Fake-IP and Windows system-proxy compatibility, with real external feeds and visible add/check operations verified; see the [RSS VPN record](docs/validation-2026-10-02-rss-vpn.md). The earlier [subscription-panel record](docs/validation-2026-10-02-rss.md) remains available. Email remains at 0.14.6 to preserve manually configured servers when form endpoints are empty; see the [Email PR #18 validation record](docs/validation-2026-10-02-email.md). PPT remains at 0.6.0 with image layouts, editing and undo, per-slide quality reports, editable charts, scenario outlines, branding and optional PNG/PDF rendering. See the [PPT validation record](docs/validation-2026-10-01-ppt.md) for Windows slideshow, export and rendering coverage; the earlier [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](docs/validation-2026-10-01.md) records remain available.
 
 ## Install / Uninstall
 
@@ -54,7 +54,7 @@ Keep your profile's `cordis.patch.yml` configuration overrides, then restart Web
 | :-- | :-- | :-- |
 | Office | dsh-email | Ten IMAP/SMTP tools: list/read/search/send, attachments, incremental new-mail watch, flag & folder moves, reply/reply-all/forward; eight provider presets plus custom ones, Outlook OAuth2 device-code login (bundled public client — works out of the box), card-based multi-account settings page (bilingual), send-approval gate |
 | | dsh-calendar | CalDAV list/create/update/delete/search (Google/iCloud/Nextcloud/custom); ships a month/week/agenda panel in Settings (remembers your view, week view starts at 07:00, **drag to reschedule**) where the connection is entered, tested and saved |
-| | dsh-rss | RSS/Atom subscriptions + cross-feed search + incremental fetch |
+| | dsh-rss | RSS/Atom subscriptions + cross-feed search + incremental fetch; bilingual subscription panel, category filters, availability checks and OPML import previews/export |
 | | dsh-cite | Crossref lookup + four citation styles + BibTeX |
 | | dsh-dream | Session replay → source verification → lesson review → project-rule preview, apply and rollback (privacy masking) |
 | Media | dsh-ffmpeg | probe/cut/concat/encode/subtitle/frames/GIF/adjust (speed/volume/mute/rotate), ten tools |

package/README.md

@@ -17,7 +17,7 @@ node scripts/verify-compat.mjs --harness-root <harness 检出>   # 或在套件
 
 ## 兼容性
 
-验证宿主：官方发布标签源码构建的 Harness `0.2.0-rc.2`（commit `639ed01539`）+ Windows / Node `24.16.0`。18 个组件共同加载，注册 104 个工具、35 个插件技能，工具 schema 与健康检查契约通过。套件另有 11 项清单、锁文件与离线环境测试。0.2.11 同步 Email 0.14.6，修复空端点覆盖手工服务器的问题，见 [Email PR #18 验收记录](docs/validation-2026-10-02-email.md)。PPT 保持 0.6.0，支持图片排版、编辑与撤销、逐页质量报告、可编辑图表、场景提纲、品牌配置及可选 PNG/PDF 渲染。Windows 放映、导出和渲染范围见 [PPT 验收记录](docs/validation-2026-10-01-ppt.md)，此前的 [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) 和 [Dream/Email/Slack](docs/validation-2026-10-01.md) 验收记录继续保留。
+验证宿主：官方发布标签源码构建的 Harness `0.2.0-rc.2`（commit `639ed01539`）+ Windows / Node `24.16.0`。18 个组件共同加载，注册 104 个工具、35 个插件技能，工具 schema 与健康检查契约通过。套件另有 11 项清单、锁文件与离线环境测试。0.2.13 同步 RSS 0.5.1，兼容 VPN Fake-IP 与 Windows 系统代理，真实外部订阅与设置页添加操作通过，见 [RSS VPN 验收记录](docs/validation-2026-10-02-rss-vpn.md)。此前的 [订阅面板验收](docs/validation-2026-10-02-rss.md) 继续保留。Email 保持 0.14.6，修复空端点覆盖手工服务器的问题，见 [Email PR #18 验收记录](docs/validation-2026-10-02-email.md)。PPT 保持 0.6.0，支持图片排版、编辑与撤销、逐页质量报告、可编辑图表、场景提纲、品牌配置及可选 PNG/PDF 渲染。Windows 放映、导出和渲染范围见 [PPT 验收记录](docs/validation-2026-10-01-ppt.md)，此前的 [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) 和 [Dream/Email/Slack](docs/validation-2026-10-01.md) 验收记录继续保留。
 
 ## 安装
 
@@ -57,7 +57,7 @@ dsh plugin --profile web remove @stardustlc/dsh-suite
 | :-- | :-- | :-- |
 | 📨 办公流 | dsh-email | IMAP/SMTP 十工具：收发/搜索/附件/增量新邮件监视/标记整理/回复转发，八大服务商预设 + 自定义预设，Outlook OAuth2 设备码登录（内置公共客户端，开箱即用），卡片式多账号设置页（中英双语），发信审批门 |
 | | dsh-calendar | CalDAV 日程查建改删搜（Google/iCloud/Nextcloud/自建）；设置页里带月/周/议程面板（记住上次视图、周视图从 07:00 起、**拖动即可改期**），连接配置在面板内填写并先测后存 |
-| | dsh-rss | RSS/Atom 订阅 + 跨订阅搜索 + 增量抓取 |
+| | dsh-rss | RSS/Atom 订阅 + 跨订阅搜索 + 增量抓取；中英双语订阅管理面板、分类筛选、可用性检查与 OPML 导入预览/导出 |
 | | dsh-cite | Crossref 文献检索 + 四种引文格式 + BibTeX |
 | | dsh-dream | 会话回放 → 来源核验 → 经验审阅 → 项目规则预览、写入与回滚（含隐私脱敏） |
 | 🎬 媒体工坊 | dsh-ffmpeg | 探测/剪辑/拼接/转码/字幕/抽帧/GIF/调整（变速·音量·静音·旋转）十工具 |

package/docs/validation-2026-10-02-rss-vpn.md

@@ -0,0 +1,11 @@
+# Suite 0.2.13: RSS VPN compatibility
+
+Suite 0.2.13 pins `dsh-rss@0.5.1`. The other 17 component pins and both loader patches retain their 0.2.12 versions. RSS's published tarball integrity is `sha512-nyIIAhm+c7DPAijcT9As5IbonN35IhcOKv2ItVXYS2seZ/JoAW96w4ShrYXht21iHzcZWe0J7vLWuRCBO9dnEw==`.
+
+RSS now honors the enabled manual Windows proxy and resolves VPN Fake-IP answers through HTTPS DNS. Requests connect to validated public addresses while preserving the original Host and TLS verification. Each redirect is revalidated and request-owned connections are released. VPN settings are not modified; default private-network restrictions remain enabled.
+
+RSS acceptance used Windows, Node 24.16.0 and official-source Harness `0.2.0-rc.2` (`639ed015397290b3745d163aafe02ffee4aa3f84`). The VPN remained enabled with the same process IDs and configuration hash throughout. All 106 plugin tests, 34 fresh-tarball regressions and GitHub CI passed. Production plugin calls, without DNS or fetch injection, passed check/add/fetch/search/persisted incremental deduplication for SSPAI, Python Insider, NASA and GitHub Atom. The legacy Python URL remained readable.
+
+In the shared browser settings UI, all four real public feeds were added and showed the expected entry counts. Manual Atom checking passed. Private-address addition was blocked with input retained and the existing list intact. No console errors were recorded. No personal profile, keys or subscriptions were used for that acceptance; native desktop-window interaction remains separately unverified.
+
+Suite frozen-lockfile, tests, contracts, npm artifact installation and official CLI startup are verified separately before publication. The earlier [RSS panel](validation-2026-10-02-rss.md), [Email PR #18](validation-2026-10-02-email.md), [PPT](validation-2026-10-01-ppt.md), [Calendar/RSS](validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](validation-2026-10-01.md) records retain their original scope.

package/docs/validation-2026-10-02-rss.md

@@ -0,0 +1,17 @@
+# Suite 0.2.12: RSS subscription panel
+
+Suite 0.2.12 pins `dsh-rss@0.5.0` in the manifest and frozen lockfile. The other 17 component pins and both loader patches retain their 0.2.11 versions. RSS has published integrity `sha512-ow7Y/lQKjzl1+FSYPakeYQneb1rk2oo9XLAER2Qe00M55JEOSB8A9ugURowdxELFQX4VeXSxQ9pwNRDBwAjliw==`.
+
+Settings → RSS subscriptions adds, edits and removes subscriptions, searches and filters categories, checks availability and imports/exports OPML. It shares the original settings and subscription list with the conversation tools. The panel follows the host's Chinese/English locale and light/dark theme. Existing subscriptions require no migration.
+
+OPML import previews new, duplicate and invalid entries before saving. Existing names and categories are preserved by default; opting into updates shows the before/after values. A stale preview is rejected without losing its text. Removal confirms the exact subscription. New URLs must pass the existing network checks; editing metadata for the same URL works offline.
+
+RSS fixes three reproduced regressions: truncated XML being partially imported, invalid or credential-bearing URLs being accepted, and concurrent additions losing a subscription. Panel routes also validate same-origin JSON requests, revision conflicts, size limits, failed settings writes and disconnected clients. Windows / Node 24.16.0 passes 94 tests, including 13 regression and HTTP tests exercised again from a freshly installed release package. The npm tarball is checked against the tested package's SHA512 integrity.
+
+Browser acceptance uses the official-source Harness 0.2.0-rc.2, commit `639ed01539`, in an isolated, keyless Windows profile with synthetic localhost feeds. Actual clicks and keyboard input cover add/edit/remove, failed-add input preservation, search/category filters, feed checks, malformed OPML, import preview and confirmation, duplicate preservation/update, two-page conflicts, Tab/Enter/Escape, locale/theme changes and persistence after a host restart. Final browser logs contain no new errors. Export displays its download confirmation; the downloaded file location was not inspected.
+
+Native desktop-window operation, file-picker selection and external production feeds were not exercised in this round. A 390px iframe fixture could load Harness, but the browser tool could not target its nested controls; narrow-screen RSS interaction remains blocked rather than passed. The paste import flow was tested. Web acceptance does not replace native desktop acceptance.
+
+Suite release gates require its 11 manifest/lockfile/offline tests, frozen pnpm installation, the official-host contracts, final tarball inspection and an isolated official-CLI installation/startup. Startup checks verify all 18 transitive components, the complete tool/skill inventory, the minimal-PTC mount and Web authentication; they do not constitute human UI tests for all 18 plugins. Release reports are retained in the workspace validation directory.
+
+The earlier [Email PR #18](validation-2026-10-02-email.md), [PPT](validation-2026-10-01-ppt.md), [Calendar/RSS](validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](validation-2026-10-01.md) records retain their original scope.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardustlc/dsh-suite",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "DSH 插件全家桶：18 个组件覆盖邮件、日历、媒体创作、开发运维、消息通知与极简 PTC，一条命令安装。",
   "type": "module",
   "dsh": {
@@ -20,7 +20,9 @@
     "docs/validation-2026-10-01.md",
     "docs/validation-2026-10-01-calendar-rss.md",
     "docs/validation-2026-10-01-ppt.md",
-    "docs/validation-2026-10-02-email.md"
+    "docs/validation-2026-10-02-email.md",
+    "docs/validation-2026-10-02-rss.md",
+    "docs/validation-2026-10-02-rss-vpn.md"
   ],
   "scripts": {
     "test": "node --test \"test/*.test.mjs\"",
@@ -59,7 +61,7 @@
     "dsh-minimal-ptc": "0.5.2",
     "dsh-ppt": "0.6.0",
     "dsh-remotion": "0.3.4",
-    "dsh-rss": "0.4.3",
+    "dsh-rss": "0.5.1",
     "dsh-slack": "0.3.3",
     "dsh-sql": "0.4.4",
     "dsh-voice": "0.3.5"