dsh-apk-vm 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.4.1
+
+Privacy cleanup for the published proof assets.
+
+### Changed
+
+- Cropped `docs/screenshot-sidebar.png` to the plugin panel only (removes the center session
+  area and workspace label; the APK paths were already redacted).
+- Removed host account names from `docs/LINUX-E2E.md`; the document now describes the KVM
+  group requirement without identifying accounts.
+
 ## 0.4.0
 
 Substantive feature release: inspection, replay, package bundles, network debugging,

package/README.md

@@ -21,9 +21,10 @@ same-origin, loopback-only debug HTTP API and an `apk_vm` Agent tool.
 > 点击、滑动、按键、文本输入送回虚拟机。支持拖拽 APK 上传、环境自检卡片、root 调试
 > API 与 `apk_vm` Agent 工具；多个 Agent 可各自使用独立的隔离虚拟机实例（多开）。
 > 参考机上冷启动约 29.5 s、快照快速启动约 8.4–10.5 s。
-> 当前 **Windows x64 为端到端已验证平台**；SDK/模拟器探测已覆盖 Windows / macOS / Linux。
+> 当前 **Windows x64 与 Linux x86_64（headless）为端到端已验证平台**；macOS 仅做探测/CI
+> 覆盖，详见 `docs/LINUX-E2E.md`。
 
-**Status:** `0.4.0` · Apache-2.0 · no npm runtime dependencies · no build step.
+**Status:** `0.4.1` · Apache-2.0 · no npm runtime dependencies · no build step.
 
 This is an open-source DSH plugin published on npm as **`dsh-apk-vm`**. Repository:
 [github.com/yuxiaole-bili/dsh-apk-vm](https://github.com/yuxiaole-bili/dsh-apk-vm).
@@ -849,9 +850,12 @@ before pointing the DSH Web UI at an untrusted network.
 
 - **The plugin manages processes on your machine.** It spawns the Android emulator, `adb`,
   `sdkmanager` and `avdmanager` with `child_process.spawn(exe, argv)` — never through a shell —
-  so user-supplied strings are not shell-interpreted. Paths are validated (APK paths must exist
-  and end in `.apk`; push/pull paths are restricted to `/data/local/tmp`, `/sdcard`,
-  `/storage/emulated/0` and allowed local roots).
+  so user-supplied strings are not shell-interpreted. Paths are validated (APK/bundle paths must
+  exist and end in `.apk`/`.apks`/`.xapk`; push/pull paths are restricted to `/data/local/tmp`,
+  `/sdcard`, `/storage/emulated/0` and allowed local roots).
+- **Only emulators spawned by this plugin are stopped.** `stop()` sends `adb emu kill` only when
+  this process owns the emulator; a pre-existing/attached device (physical, remote adb or a
+  manually started emulator) is detached and left running.
 - **The guest is deliberately rooted and debuggable.** `adb root`, `ro.debuggable=1` and
   `ro.adb.secure=0` mean anything you install inside the VM is not sandboxed from root. Do not
   put real secrets or personal data in the AVD.

package/docs/LINUX-E2E.md

@@ -18,10 +18,10 @@ CI-only check.
 | System image | `system-images;android-34;default;x86_64` |
 | AVD | `dsh_linux_test` (1080×2340, pixel_5) |
 
-The regular `OPENCODE` account is **not in the `kvm` group** and has no passwordless sudo;
-`/dev/kvm` is denied for it. The emulator portion was therefore run as the provided
-`OPENCODE_100` account (same SSH key), which is in the `kvm` group. The plugin itself never
-requires sudo or system-wide changes.
+The regular login account is **not in the `kvm` group** and has no passwordless sudo;
+`/dev/kvm` is denied for it. The emulator portion was therefore run as a second account on
+the same host (authenticated with the same SSH key), which is in the `kvm` group. The plugin
+itself never requires sudo or system-wide changes.
 
 ## Emulator launch
 
@@ -66,7 +66,7 @@ The final tree should be re-run in CI for the release tag.
   screenshots; the screenshots still succeed.
 - The emulator prints a metrics-collection warning; the launch args now include
   `-no-metrics`.
-- `OPENCODE` without `kvm` group membership gets the documented "No usable CPU hypervisor"
+- An account without `kvm` group membership gets the documented "No usable CPU hypervisor"
   error instead of a hung boot. Add the user to `kvm` (or use an account that has it) for
   hardware acceleration.
 - The platform still requires an Android SDK and AVD; only the SDK install and test harness

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-apk-vm",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "type": "module",
   "description": "Local AOSP Android VM for DeepSeek Harness: preview rooted APKs at up to 60 fps, automate UIAutomator flows, and give each Agent an isolated VM.",
   "license": "Apache-2.0",