@stardustlc/dsh-suite 0.2.8 → 0.2.10

package/README.en.md

@@ -16,7 +16,7 @@ node scripts/verify-compat.mjs --harness-root <harness checkout>
 
 ## Compatibility
 
-Validation host: Harness `0.2.0-rc.2` built from its official release tag (commit `639ed01539`), Windows and Node `24.16.0`. All 18 components mount together with 99 tools and 35 skills; tool schemas and health contracts pass. The suite also has 11 manifest, lockfile and offline-environment tests. Version 0.2.8 pins Dream 0.6.0, Email 0.14.5, HyperFrames 0.4.2 and Slack 0.3.3. See the [validation record](docs/validation-2026-10-01.md) for feedback dispositions, verification scope and live-service limits.
+Validation host: Harness `0.2.0-rc.2` built from its official release tag (commit `639ed01539`), Windows and Node `24.16.0`. All 18 components mount together with 104 tools and 35 plugin skills; tool schemas and health contracts pass. The suite also has 11 manifest, lockfile and offline-environment tests. Version 0.2.10 upgrades PPT to 0.6.0 with image layouts, editing and undo, per-slide quality reports, editable charts, scenario outlines, branding and optional PNG/PDF rendering. The other 17 verified component pins remain in place. See the [PPT validation record](docs/validation-2026-10-01-ppt.md) for Windows slideshow, export and rendering coverage; the earlier [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) and [Dream/Email/Slack](docs/validation-2026-10-01.md) records remain available.
 
 ## Install / Uninstall
 
@@ -59,7 +59,7 @@ Keep your profile's `cordis.patch.yml` configuration overrides, then restart Web
 | | dsh-dream | Session replay → source verification → lesson review → project-rule preview, apply and rollback (privacy masking) |
 | Media | dsh-ffmpeg | probe/cut/concat/encode/subtitle/frames/GIF/adjust (speed/volume/mute/rotate), ten tools |
 | | dsh-voice | edge-tts synthesis + ASR transcription + voice preview |
-| | dsh-ppt | One prompt to HTML slideshow + PPTX export: 7 layouts (quote/table) + speaker notes |
+| | dsh-ppt | HTML slideshow and editable PPTX: 11 layouts including images/charts, per-slide editing/undo, quality reports, four scenario outlines, branding and speaker notes; optional PNG/PDF export via the official LibreOffice Kit |
 | | dsh-hyperframes | HyperFrames by HeyGen bundle of 21 skills |
 | | dsh-remotion | Remotion programmatic-video skill |
 | DevOps | @stardustlc/dsh-docker | Seven container tools (incl. health) + exec approval gate |
@@ -108,4 +108,4 @@ Run directories and reports remain available for inspection. `smoke-harness.mjs`
 
 ## License
 
-MIT (all components are MIT in their own repos)
+MIT (all components are MIT in their own repos). The optional LibreOffice Kit renderer used by PPT is MPL-2.0; preserve its license and third-party notices when enabling or redistributing it. See the [PPT integration notes](https://github.com/STARDUSTLC666/dsh-ppt/blob/master/docs/LIBREOFFICE-INTEGRATION-2026-10-01.md).

package/README.md

@@ -17,7 +17,7 @@ node scripts/verify-compat.mjs --harness-root <harness 检出>   # 或在套件
 
 ## 兼容性
 
-验证宿主：官方发布标签源码构建的 Harness `0.2.0-rc.2`（commit `639ed01539`）+ Windows / Node `24.16.0`。18 个组件共同加载，注册 99 个工具、35 个技能，工具 schema 与健康检查契约通过。套件另有 11 项清单、锁文件与离线环境测试。0.2.8 锁定 Dream 0.6.0、Email 0.14.5、HyperFrames 0.4.2 和 Slack 0.3.3；验证范围、反馈处理及真实服务限制见 [验收记录](docs/validation-2026-10-01.md)。
+验证宿主：官方发布标签源码构建的 Harness `0.2.0-rc.2`（commit `639ed01539`）+ Windows / Node `24.16.0`。18 个组件共同加载，注册 104 个工具、35 个插件技能，工具 schema 与健康检查契约通过。套件另有 11 项清单、锁文件与离线环境测试。0.2.10 升级 PPT 到 0.6.0，新增图片排版、编辑与撤销、逐页质量报告、可编辑图表、场景提纲与品牌配置，并提供可选 PNG/PDF 渲染；其余 17 个组件保持已验证版本。Windows 放映、导出和渲染范围见 [PPT 验收记录](docs/validation-2026-10-01-ppt.md)，此前的 [Calendar/RSS](docs/validation-2026-10-01-calendar-rss.md) 和 [Dream/Email/Slack](docs/validation-2026-10-01.md) 验收记录继续保留。
 
 ## 安装
 
@@ -62,7 +62,7 @@ dsh plugin --profile web remove @stardustlc/dsh-suite
 | | dsh-dream | 会话回放 → 来源核验 → 经验审阅 → 项目规则预览、写入与回滚（含隐私脱敏） |
 | 🎬 媒体工坊 | dsh-ffmpeg | 探测/剪辑/拼接/转码/字幕/抽帧/GIF/调整（变速·音量·静音·旋转）十工具 |
 | | dsh-voice | edge-tts 合成 + ASR 转写 + 音色试听 |
-| | dsh-ppt | 一句话生成 HTML 放映 + PPTX 导出：7 页型（金句/表格）+ 演讲者备注 |
+| | dsh-ppt | HTML 放映 + 可编辑 PPTX：11 页型（含图片与图表）、逐页编辑/撤销、质量报告、四种场景提纲、品牌配置与演讲者备注；可选官方 LibreOffice Kit 导出 PNG/PDF |
 | | dsh-hyperframes | HyperFrames by HeyGen 官方视频技能（21 个上游技能） |
 | | dsh-remotion | Remotion React 编程式视频技能 |
 | 🔧 DevOps | dsh-docker | 容器七工具（含 health 自检）+ exec 审批门（@stardustlc/dsh-docker） |
@@ -125,4 +125,4 @@ HyperFrames 与 Remotion 另有真实注册表回归：卸载一个已注册技
 
 ## License
 
-MIT（各组件许可证以各自仓库为准，均为 MIT）
+MIT（各组件许可证以各自仓库为准，均为 MIT）。PPT 的可选 LibreOffice Kit 使用 MPL-2.0；启用或再分发该渲染器时请保留其许可证和第三方声明，详见 [PPT 的集成说明](https://github.com/STARDUSTLC666/dsh-ppt/blob/master/docs/LIBREOFFICE-INTEGRATION-2026-10-01.md)。

package/docs/validation-2026-10-01-calendar-rss.md

@@ -0,0 +1,27 @@
+# 0.2.9 validation / 验收记录
+
+## Changes
+
+Calendar 0.9.3 fixes three connection-form defects: switching from Google to a Basic-auth provider no longer inherits OAuth, environment credentials report their presence without exposing their values, and editing a connection draft clears the previous test result. RSS 0.4.3 preserves case-sensitive URL paths and query parameters during add, remove, OPML import and search while normalizing schemes, hosts and default ports.
+
+The suite pins both versions in its manifest and frozen lockfile. The other 16 component pins remain unchanged from 0.2.8.
+
+## Windows and host validation
+
+Calendar passes 178 tests and RSS passes 81. Four new regression cases in each component reproduced failures before the fixes. Fresh tarball installation checks verify every shipped lib file against the tested source artifact and pass 32 Calendar backend tests and four RSS URL tests.
+
+Official-source Harness 0.2.0-rc.2, commit `639ed01539`, mounts all 18 components. The full tool and skill contracts pass with 99 plugin tools and 35 plugin skills. The suite's 11 manifest, lockfile and offline-environment checks verify the component pins and registry integrity.
+
+Calendar browser acceptance uses an isolated E: profile with synthetic credentials and a local CalDAV HTTP fixture. It exercises Google-to-iCloud provider switching, connection testing, saving, event editing, clearing an outdated test result, discarding an edited connection draft, and month/week/agenda views. Visual checks cover 1280px and 900px windows. The fixture records authenticated REPORT/PUT requests and verifies that the environment password is not persisted in the profile. This establishes the shared plugin interface and protocol workflow, rather than authentication against a production provider.
+
+The release artifact is gated on official-CLI installation of the suite with all 18 components resolved from npm. This checks exact versions, tarball integrity, component loading, the full tool/skill inventory, minimal-PTC preset mounting and web authentication. The suite stays the single profile layer, avoiding duplicate direct component entries.
+
+## Feedback and limits
+
+The current audit covers 20 active dsh-* repositories. Open feedback remains in Email: issues #16, #17 and #20 are covered by existing releases; PR #18 conflicts with current code and its goal is already implemented. Issue #19 is a feature consultation about recipient policies, not a reported defect. This round does not merge the conflicting PR or post or close feedback.
+
+RSS subscription management UI, Email recipient policies and Dream experience-review feedback are feature proposals and are not shipped in this release.
+
+The earlier Email browser resource remains blocked and was not retested through another port or tool. This round does not establish production Google/iCloud, mail or Slack account success. Shared Web tests can support desktop plugin compatibility, but they do not establish Electron startup, native integration or all desktop UI flows. Native desktop acceptance remains separate.
+
+A separate read-only desktop check after the user opened the app finds the main process and its backend running, with a loopback listening port and no new startup crash log. The desktop profile links all 18 current component sources, including Calendar 0.9.3 and RSS 0.4.3. These checks do not inspect the desktop's complete runtime tool inventory or exercise native UI flows, and do not alter the foreground window or account configuration.

package/docs/validation-2026-10-01-ppt.md

@@ -0,0 +1,35 @@
+# 0.2.10 validation / 验收记录
+
+## Changes
+
+The suite pins `dsh-ppt@0.6.0` in its manifest and frozen lockfile. Its other 17 component pins remain unchanged from 0.2.9.
+
+PPT adds image, image-left, image-right and chart layouts to its seven existing layouts. Local PNG/JPEG assets are embedded for offline use. Column, bar, line and pie charts export as native editable PowerPoint charts with their data. Individual slides can be edited and undone without replacing the rest of the deck. Stable slide IDs, revision checks, bounded history and transactional output protect concurrent edits and failed writes.
+
+Weekly reports, thesis defenses, project reports and pitches have scenario outlines with a shared brand, logo and footer. Unfilled outline slots are explicitly draft content. The agent supplies the actual material; the plugin creates HTML, PPTX and an editable deck record. A static quality report gives page-specific warnings for missing content, image resolution, density, contrast and overflow. It does not certify visual acceptance.
+
+The seven tools are `ppt_themes`, `ppt_templates`, `ppt_create`, `ppt_edit`, `ppt_undo`, `ppt_check` and `ppt_render`. Rendering lazily loads the optional official `@deepseek-ai/libreoffice-kit@0.1.3`. Without it, normal generation still works and the render tool returns an installation hint. The plugin and Office Kit PPTX dependency are MIT; LibreOffice Kit and its engine have their own MPL-2.0 license and notices.
+
+## Windows and artifact validation
+
+PPT passes 100 tests, including 14 renderer regression cases. A fresh installation of the final npm tarball loads all seven tools and its skill, generates an editable chart and handles an absent renderer. This ordinary consumer installs three packages and does not install the optional engine. Package inspection verifies the tested lib and skill scripts are shipped and excludes temporary artifacts and account configuration.
+
+The final 11-slide sample covers the existing text/table layouts, all three new image layouts and all four chart types, with Chinese text, branding and speaker notes. Windows PowerPoint opens it read-only, exports every slide and exposes the native chart series and values. The official LibreOffice Kit native backend also exports 11 PNG pages and an 11-page PDF, with no reported missing fonts. Each PDF page contains selectable text. Every rendered sample page was visually inspected, with independent review of the LibreOffice output.
+
+An additional five-theme matrix renders three pages per theme, checks the PDF text and visually reviews all 15 pages. These Windows defaults report no missing fonts after the CSS-stack/PPTX-font separation and explicit East Asian font fixes. A deliberately unavailable custom font produces a missing-font warning and is retained as a negative case.
+
+Browser acceptance exercises image/chart display, the accessible chart data table, slide selection from the overview, notes, the result of a page edit and restoration after undo. Overview checks cover 1280px and narrow 411px widths. The overview overlap discovered during acceptance was repaired.
+
+Rendering records the source PPTX SHA-256 and the hashes of the PNG/PDF outputs. `ppt_check` rejects an outdated or altered receipt. A current receipt confirms rendering of those bytes; its visual status remains `not-verified` until a human or agent actually reviews the pages. Missing-font guidance asks for replacement, regeneration and renewed inspection. Rendering never resaves the source PPTX.
+
+## Host and release gates
+
+Official-source Harness `0.2.0-rc.2`, commit `639ed01539`, registers all 18 components with 104 plugin tools and 35 plugin skills. The full schema and health contracts pass. PPT compiles union input definitions into the host-supported `oneOf` form; the original array-valued `type` would fail host startup.
+
+The release is gated on the suite's 11 manifest, lockfile and offline-environment tests and official-CLI installation with all 18 components resolved from npm. Installation checks exact dependency versions and tarball integrity, the single suite profile layer, the complete tool/skill inventory, minimal-PTC mounting and Web authentication. The runtime has 36 skills because it also includes one host skill. GitHub CI runs the suite checks on Node 22 and 24.
+
+## Limits
+
+The Windows native backends and generated artifacts described above were exercised. Linux WASM rendering, macOS native rendering, Electron startup and all native desktop UI flows are separate acceptance scopes. CI on Ubuntu checks the package build and unit tests, rather than native office rendering. Browser presenter-popup controls were not independently accepted in this round.
+
+The existing user profile, credentials and foreground windows are preserved. Other plugins' production external services were not retested during this PPT release. Previous desktop and live-service limits remain documented in the earlier validation records.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardustlc/dsh-suite",
-  "version": "0.2.8",
+  "version": "0.2.10",
   "description": "DSH 插件全家桶：18 个组件覆盖邮件、日历、媒体创作、开发运维、消息通知与极简 PTC，一条命令安装。",
   "type": "module",
   "dsh": {
@@ -17,7 +17,9 @@
     "README.en.md",
     "ptc-minimal.patch.yml",
     "docs/validation-2026-09-27.md",
-    "docs/validation-2026-10-01.md"
+    "docs/validation-2026-10-01.md",
+    "docs/validation-2026-10-01-calendar-rss.md",
+    "docs/validation-2026-10-01-ppt.md"
   ],
   "scripts": {
     "test": "node --test \"test/*.test.mjs\"",
@@ -44,7 +46,7 @@
   "dependencies": {
     "@stardustlc/dsh-docker": "0.3.4",
     "@stardustlc/dsh-dream": "0.6.0",
-    "dsh-calendar": "0.9.2",
+    "dsh-calendar": "0.9.3",
     "dsh-cite": "0.3.5",
     "dsh-code-security": "0.3.6",
     "dsh-codex-port": "0.2.4",
@@ -54,9 +56,9 @@
     "dsh-flakefinder": "0.3.4",
     "dsh-hyperframes": "0.4.2",
     "dsh-minimal-ptc": "0.5.2",
-    "dsh-ppt": "0.5.1",
+    "dsh-ppt": "0.6.0",
     "dsh-remotion": "0.3.4",
-    "dsh-rss": "0.4.2",
+    "dsh-rss": "0.4.3",
     "dsh-slack": "0.3.3",
     "dsh-sql": "0.4.4",
     "dsh-voice": "0.3.5"