dsh-data-cleaning-agent 0.9.6 → 0.9.8

package/CHANGELOG.md

@@ -4,6 +4,20 @@
 
 ## [Unreleased]
 
+## [0.9.8] - 2026-09-13
+
+- DC-SCOPE-P0：持久保存任务来源 Session/Workspace 与安全展示名称；v2 旧记录采用附加字段兼容读取，不猜测来源、不批量改写历史。
+- Profile 历史改为独立只读详情；打开来源会话按宿主能力降级，不覆盖当前任务、规则、名单或命令。保留客户 XLSX 与次要任务报告分层。
+- 当前绑定恢复、迟到刷新及 HTTP 写入/命令准备校验来源；跨会话请求拒绝，版本冲突仍由 Host revision 控制。
+- 审计增加 Provider 六类状态区分；完成态迟到更新、A/B、旧记录、重启和来源导航补充回归。真实 DSH Web 未认证，真实宿主与 Provider 未验证。
+
+## [0.9.7] - 2026-09-11
+
+- 优化数据清洗补全工作台的区域间距、信息层级与明暗主题响应式布局，重构导入清单、字段映射、质量体检和主体匹配页面。
+- 字段映射改为按维度分组的单选网格；搜索维度名称时展示该维度全部子字段，并保持既有选择与匹配规则。
+- 导入成功后隐藏文件、图片和粘贴入口，完成态保留“重新导入”与下一步两个底部动作；替换失败时保留编辑区供重试。
+- 扩充桌面、窄屏及明暗主题 UI 回归，发布前通过 269 项自动化测试与 10 组 Chromium 布局矩阵。
+
 ## [0.9.6] - 2026-09-11
 
 - 任务结果报告降为统计卡片后的次要下载链接，不再与客户主结果并列展示文件卡片或预览按钮；窄侧栏自动换行。

package/README.en.md

@@ -10,9 +10,11 @@ Related agents: [数据清洗补全](https://github.com/duhu2000/dsh-data-cleani
 
 > A data cleaning & completion agent plugin for DeepSeek Harness: local CSV/XLSX/JSON engine plus optional Qichacha (QCC) MCP enterprise-data enrichment. Initiated and maintained by the Qichacha (QCC) team.
 >
-> Current source version / 当前源码版本: **0.9.6** (stable release)
+> Current source version / 当前源码版本: **0.9.8** (stable release)
 
-This release unifies spreadsheet previews, column mapping, and enrichment scope across the prompt wizard and workbench. Mapping statuses use color and text; mapped fields automatically enter the scope, with optional extra fields collapsed. Multiple confirmed output columns may share a non-identity field while preserving non-empty values. It fixes saved drafts resetting the scope to five defaults and detects stale Host versions. Preparing a draft does not query QCC; sending starts execution. Fully restart DSH after upgrading. Existing download artifacts are not rewritten.
+0.9.8 makes Profile history read-only and persists origin Workspace/Session metadata. Legacy records remain explicitly unattributed and cannot become the current Session task. Open-origin navigation is capability-gated; existing XLSX artifacts remain downloadable without MCP calls. Rollback: `dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7` (reintroduces the old history-binding risk). Live DSH A/B verification is unverified because the local Web session requires authentication; see the release checklist.
+
+This release refines workbench hierarchy, spacing, and responsive behavior across imported lists, field mapping, quality profiling, and entity matching. File, image, and pasted-data inputs collapse after a successful import and return through the explicit reimport action. Field mapping uses grouped choices, and searching a dimension exposes all fields in that group. Preparing a draft does not query QCC; sending starts execution. Fully restart DSH after upgrading. Existing download artifacts are not rewritten.
 
 [![CI](https://github.com/duhu2000/dsh-data-cleaning-agent/actions/workflows/ci.yml/badge.svg)](https://github.com/duhu2000/dsh-data-cleaning-agent/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/dsh-data-cleaning-agent)](https://www.npmjs.com/package/dsh-data-cleaning-agent)

package/README.md

@@ -9,7 +9,7 @@
 数据清洗补全智能体：面向 Excel/CSV/JSON 企业名单，提供数据清洗、表格清洗、清洗补全、去重、企业数据补全与字段补全，支持企查查 MCP 和结果导出。
 
 ```sh
-dsh plugin --profile web add dsh-data-cleaning-agent@0.9.6
+dsh plugin --profile web add dsh-data-cleaning-agent@0.9.8
 ```
 
 请先满足下文的 DSH、连接器及侧边栏依赖要求；安装后完整停止并重启对应 Profile。
@@ -27,9 +27,11 @@ dsh plugin --profile web add dsh-data-cleaning-agent@0.9.6
 
 > 在 DeepSeek Harness 中清洗、补全、画像企业名单数据的智能体插件：本地 CSV/XLSX/JSON 引擎 + 可选企查查（Qichacha/QCC）MCP 企业数据补全，由企查查（Qichacha/QCC）团队发起并维护。
 >
-> 当前源码版本 / Current source version: **0.9.6**（正式版本）
+> 当前源码版本 / Current source version: **0.9.8**（正式版本）
 
-本版上传表格后展示完整清单及空白数量，用绿色、琥珀色、红色及文字区分已通过、待确认和未匹配映射。已映射字段自动纳入补全范围，额外字段默认折叠；多个原列可经确认使用同一非主体字段，分别补空并保留非空原值。修复 Host 草稿重置为默认五字段的问题，增加前后端版本错配提示。生成说明不查询，发送才执行；升级后需完整重启 DSH，历史下载文件不自动改写。
+0.9.8 修复历史任务跨 Session 误绑定：历史默认只读，显示来源工作区/会话；旧记录显示“历史版本未保存来源”，不自动接管。来源可用时可“打开来源会话”，不会修改当前任务。已有 XLSX 与任务报告可继续下载，导航不调用 MCP。升级后旧版本当前绑定将进入只读历史；新任务按 Session 恢复。回滚：`dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7`（回滚会重新暴露旧版误绑定风险）。真实 DSH A/B 验收因本机 Web 未认证而未验证，详见发布清单。
+
+本版优化工作台的信息层级、区域间距与响应式布局，重构导入清单、字段映射、质量体检及主体匹配页面。导入成功后文件、图片与粘贴入口自动收起，通过“重新导入”再次展开；映射字段按维度分组选择，搜索维度名称时展示该组全部字段。生成说明不查询，发送才执行；升级后需完整重启 DSH，历史下载文件不自动改写。
 
 [![CI](https://github.com/duhu2000/dsh-data-cleaning-agent/actions/workflows/ci.yml/badge.svg)](https://github.com/duhu2000/dsh-data-cleaning-agent/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/dsh-data-cleaning-agent)](https://www.npmjs.com/package/dsh-data-cleaning-agent)

package/docs/RELEASE-0.9.8.md

@@ -0,0 +1,68 @@
+# 0.9.8 · DC-SCOPE-P0
+
+Status: release candidate. Date: 2026-09-13.
+
+## Scope and authorization
+
+Explicit ledger delegation authorizes code, tests, commit/push, PR merge, immutable tag,
+GitHub Release, OIDC npm publishing and registry read-back. Base main: 2424c97.
+Package: dsh-data-cleaning-agent 0.9.8; qcc-field-contracts stays 0.2.0.
+Adopts DSH-UX-001 v1.5.3 at the shared AI-设计/DSH智能体开发交互规范方案.md;
+visual reference: DSH智能体_企查查蓝_UI_Mockup_v1.5.0.html.
+
+## Migration and boundaries
+
+- New UI tasks persist immutable originSessionId/originWorkspaceId and bounded display labels.
+  Missing Workspace capability is explicitly unknown; never inferred from active/recent Workspace.
+- Schema v2 additive read migration returns null origin for legacy records. No bulk rewrite.
+- LocalStorage bindings are hints, not ownership proof. Wrong/legacy bindings cannot hydrate
+  the current Session; explicit new work creates a new task. Profile history remains readable.
+- History selection has separate state and uses GET only. It does not load run rows, rules,
+  field selection, paid confirmations or command credentials into the current Session.
+- Open-source-Session uses an existing, capability-verified Session only. Missing/deleted
+  origins remain read-only; no clone or silent rebind feature is introduced.
+- HTTP task mutations and workflow command preparation require matching persisted origin
+  for scoped tasks. This is an application isolation guard, not an authentication boundary:
+  existing Host same-origin/Profile access controls remain authoritative. Legacy/headless
+  origin-less API records remain backwards-compatible; UI never adopts them as current.
+- Revision conflict rejects concurrent updates; stale UI snapshots do not overwrite newer ones.
+- Customer XLSX and secondary report links remain separated. Downloads reuse saved artifacts.
+- Provider audit distinguishes success-data, success-empty, not-required, no-permission,
+  failed, unknown without changing field completeness or charging rules. No raw response saved.
+- Completed/cancelled workflow states cannot regress. Existing explicit partial-result retry
+  is retained; it is not classified as an immutable successful completion.
+
+## Verification
+
+Local evidence (2026-09-13): `npm run check` passed, 275/275 tests, zero failures.
+Real React/Chromium layout matrix passed 10/10 (light/dark; 320–1440px).
+Artifact preview passed 390/800/1440px with compact rows, two-axis scrolling and fixed headers.
+`git diff --check` passed. Remote CI and registry evidence are pending publication.
+No separate compiled build: runtime consists of shipped JS;
+`npm run check` includes syntax, documentation, package allowlist and full node tests.
+Real React/Chromium layout and preview regressions are separate from live DSH.
+Tests cover Session A/B, origin persistence across store restart, legacy unknown records,
+concurrent revision updates, stale history/current responses, open-origin capability checks,
+Tab X/fold/provider-remount and synthetic four-plugin coexistence baseline from PR #13.
+
+**真实 DSH Session A/B 浏览器验收：因本机 DSH Web 未认证而未验证。**
+Observed browser text: “dsh web authentication required; reopen the URL printed by dsh web.”
+No authentication bypass or token collection attempted. Ledger confirmed this external
+condition does not block release if all automated gates pass. Live QCC/OCR/Windows-host
+and real four-plugin installation verification are not claimed. Market publishing out of scope.
+
+Minimal user recheck after authentication/restart:
+1. In Session A, create a synthetic task without sending paid commands; confirm origin labels.
+2. In Session B, enter a different draft/field selection, view A from history, then return to
+   current task. B's draft, fields, taskId and stage must remain unchanged.
+3. Download A's saved artifact without new MCP calls; open source Session A only via explicit action.
+4. Restart/reload, close Tab X, fold/unfold Sidebar, switch among four plugins and repeat.
+   Old tasks must say “历史版本未保存来源” and must never replace B's current task.
+
+## Publish and rollback
+
+Follow PR → exact merge main CI → annotated v0.9.8 → Release workflow OIDC/provenance.
+Read back npm latest/version/gitHead/attestations, tag SHA and GitHub Release flags.
+Rollback package: `dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7`.
+Rollback reintroduces history adoption risk; preserve persisted records and do not move tags.
+Release evidence will be appended after publication; no market or user acceptance claim.