dsh-wechat-remote 1.7.12-rc.9 → 1.7.12

package/README.md

@@ -1,6 +1,6 @@
 # Agent远程管理助手 · DSH 插件安装器
 
-命令行入口用于 DSH Web；安装包内置配套插件。1.7.12-rc.9 为 Desktop 适配预览测试版，不建议用于日常节点；正式推荐版本仍为 1.7.10，以下 `latest` 命令不会安装本预览版。
+命令行入口用于 DSH Web；同一个安装包也可在 Desktop 原生插件管理器中安装。当前正式版为 1.7.12。
 
 首次安装和升级旧插件使用同一个命令：
 
@@ -24,7 +24,11 @@ DSH 的新版本、预览版本或未登记的主机架构不会仅因缺少验
 
 默认使用 `web` 配置和原来的 DSH 数据目录。自定义数据目录时，在新终端设置相同的 `DSH_HOME`，或附加 `--home "数据目录"`；使用其他配置时附加 `--profile 配置名称`。WSL、容器和其他系统用户内的 DSH，需要在对应环境中执行安装，不能跨环境替换。
 
-Desktop 由桌面应用的原生插件管理器负责安装和更新，不支持用 `--profile desktop` 绕过它。本预览版正在验证两端联动更新：发现另一端可更新时先提示，确认后等待空闲再处理，也可选择稍后。仅处理同一系统用户、同一数据目录下已经安装并启用的插件；需要另一端原生更新能力配合，可能需要重启。未完成联动时保留另一端原状并提示，不代表两端已更新。当前 npm `latest` 不因本预览版而获得 Desktop 支持。
+Desktop 在原生插件管理器中添加 `dsh-wechat-remote`，不支持用 `--profile desktop` 绕过它。启用后可在本插件详情或“设置 → 微信连接”中检查更新；Desktop 的一键更新使用宿主原生安装流程。若更新后提示待生效，请在任务结束时完全退出并重新打开 Desktop，无需重新配对。
+
+发现另一端可更新时先提示，确认后等待空闲再处理，也可选择稍后。仅处理同一系统用户、同一数据目录下已经安装并启用的插件；需要另一端原生更新能力配合，可能需要重启。未完成联动时保留另一端原状并提示，不代表两端已更新。
+
+现有小程序的模型菜单可能未及时反映电脑上的切换；发送前请重新选择所需模型，并确认电脑已同步该选择，避免选择后立即发送。同一会话仍受 DSH 原生占用规则约束，不能由 Web 和 Desktop 同时操作。
 
 同一个 Web 节点请勿重复添加两种微信连接插件包。若原先通过原生插件管理页安装了 `dsh-wechat-remote`，仍回到该页面更新；一行安装器会提示安装来源不匹配，不会再添加另一份。
 

package/assets/release.json

@@ -1,22 +1,37 @@
 {
-  "version": "1.7.12-rc.9",
+  "version": "1.7.12",
   "catalog": {
     "schemaVersion": 1,
-    "revision": "installer-1.7.12-rc.9",
-    "issuedAt": 1790574684248,
-    "expiresAt": 1792993884248,
+    "revision": "installer-1.7.12",
+    "issuedAt": 1790610305428,
+    "expiresAt": 1793029505428,
     "releases": [
       {
-        "version": "1.7.12-rc.9",
-        "channel": "preview",
-        "dsh": [],
-        "platforms": [],
-        "architectures": [],
+        "version": "1.7.12",
+        "channel": "stable",
+        "dsh": [
+          "0.1.7-rc.1"
+        ],
+        "platforms": [
+          "windows"
+        ],
+        "architectures": [
+          "x64"
+        ],
         "asset": {
-          "url": "https://github.com/martinbear1/dsh-wechat-remote/releases/download/v1.7.12-rc.9/harness-remote-dsh-wechat-remote-1.7.12-rc.9.tgz",
-          "sha256": "7983d5dd34ccde43f952b6a65def8180f4b0951c412dfb6e10d3a7ca000083b5",
-          "bytes": 10415425
-        }
+          "url": "https://github.com/martinbear1/dsh-wechat-remote/releases/download/v1.7.12/harness-remote-dsh-wechat-remote-1.7.12.tgz",
+          "sha256": "10781ff17bbc9e780391f2f753525240406926cbb2097ce641cf3eaf07809254",
+          "bytes": 10421020
+        },
+        "targets": [
+          {
+            "platform": "windows",
+            "arch": "x64",
+            "dsh": [
+              "0.1.7-rc.1"
+            ]
+          }
+        ]
       }
     ],
     "blocked": [],

package/lib/install-control.js

@@ -710,10 +710,29 @@ function presentationProjection(key, raw) {
   }
   return { key: `agent.${name}.v1`, value };
 }
-function withPresentationProjections(block) {
+function legacyPermissionValue(value, catalog) {
+  const selection = object(value), source = object(catalog);
+  if (Array.isArray(selection.options)) return value;
+  if (typeof selection.currentValue !== "string" || !Array.isArray(source.options)) return value;
+  const seen = /* @__PURE__ */ new Set();
+  const options = [];
+  for (const raw of source.options) {
+    const option = object(raw);
+    if (typeof option.value !== "string" || !option.value || seen.has(option.value) || typeof option.name !== "string") return value;
+    seen.add(option.value);
+    options.push({
+      value: option.value,
+      name: option.name,
+      ...typeof option.description === "string" ? { description: option.description } : {}
+    });
+  }
+  return { ...selection, options };
+}
+function withPresentationProjections(block, permissionCatalog) {
   const source = object(block);
   if (!source.values) return block;
   const values = { ...object(source.values) };
+  if (Object.hasOwn(values, "permissions")) values.permissions = legacyPermissionValue(values.permissions, permissionCatalog);
   for (const [key, value] of Object.entries(values)) {
     const projected = presentationProjection(key, value);
     if (projected) values[projected.key] = projected.value;
@@ -800,6 +819,94 @@ async function invokeHostRemote(ctx, gateway, request) {
   return projectedSubagentCatalog(parent, projection, listing?.items);
 }
 
+// src/legacy-model-identity.ts
+var LEGACY_MODEL_FORMAT = "legacy-provider-model-v1";
+var NATIVE_MODEL_FORMAT = "native-v1";
+var separator = " \xB7 ";
+function record2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function failure(message) {
+  throw Object.assign(new Error(message), { code: "adapter/model-identity-invalid" });
+}
+function modelIdentityFormat(request) {
+  const format = request.modelIdentity ?? LEGACY_MODEL_FORMAT;
+  if (format !== LEGACY_MODEL_FORMAT && format !== NATIVE_MODEL_FORMAT) {
+    failure("\u4E0D\u652F\u6301\u6B64\u6A21\u578B\u6807\u8BC6\u683C\u5F0F\uFF1B\u672A\u66F4\u6539\u6A21\u578B");
+  }
+  return format;
+}
+function component(value) {
+  return value.replace(/%/g, "%25").replace(/·/g, "%B7").replace(/[\u0000-\u001f\u007f]/g, (char) => "%" + char.charCodeAt(0).toString(16).padStart(2, "0").toUpperCase());
+}
+function legacyModelAlias(provider, model) {
+  return component(provider) + separator + component(model);
+}
+function groupsOf(catalog) {
+  const groups = record2(catalog)?.groups;
+  if (!Array.isArray(groups)) failure("\u4E3B\u673A\u6A21\u578B\u76EE\u5F55\u65E0\u6548\uFF1B\u8BF7\u5237\u65B0\u6A21\u578B\u5217\u8868");
+  const providers = /* @__PURE__ */ new Set();
+  for (const candidate of groups) {
+    const group = record2(candidate);
+    if (!group || typeof group.id !== "string" || !group.id || providers.has(group.id) || !Array.isArray(group.models)) {
+      failure("\u4E3B\u673A\u63D0\u4F9B\u65B9\u76EE\u5F55\u65E0\u6548\uFF1B\u8BF7\u5237\u65B0\u6A21\u578B\u5217\u8868");
+    }
+    providers.add(group.id);
+    const models = /* @__PURE__ */ new Set();
+    for (const candidate2 of group.models) {
+      const model = record2(candidate2);
+      if (!model || typeof model.id !== "string" || !model.id || models.has(model.id)) {
+        failure("\u4E3B\u673A\u6A21\u578B\u76EE\u5F55\u5305\u542B\u65E0\u6548\u6216\u91CD\u590D\u6807\u8BC6\uFF1B\u672A\u731C\u6D4B\u6A21\u578B");
+      }
+      models.add(model.id);
+    }
+  }
+  return groups;
+}
+function legacyModelSelection(value) {
+  const selection = record2(value);
+  if (!selection || typeof selection.provider !== "string" || typeof selection.model !== "string") return value;
+  return { ...selection, model: legacyModelAlias(selection.provider, selection.model), nativeModel: selection.model };
+}
+function presentModelCatalog(catalog, current, format) {
+  const groups = groupsOf(catalog);
+  const aliases = format === LEGACY_MODEL_FORMAT && groups.length > 1;
+  const selection = (value) => {
+    const selected = record2(value);
+    const missingProvider = groups.length === 1 && selected && selected.provider !== groups[0].id;
+    return format === LEGACY_MODEL_FORMAT && (aliases || missingProvider) ? legacyModelSelection(value) : value;
+  };
+  return {
+    ...catalog,
+    groups: aliases ? groups.map((group) => ({ ...group, models: group.models.map((model) => ({
+      ...model,
+      id: legacyModelAlias(group.id, model.id),
+      name: `${group.name || group.id}${separator}${model.name || model.id}`,
+      nativeModel: model.id
+    })) })) : groups,
+    default: selection(catalog.default),
+    current: selection(current),
+    // Per-response negotiation (not OS/version guessing or global state).
+    // A future Mini requests native-v1 and MUST verify this acknowledgement.
+    modelIdentity: { version: 1, format, aliases, supportedFormats: [LEGACY_MODEL_FORMAT, NATIVE_MODEL_FORMAT] }
+  };
+}
+function needsModelAliasResolution(request) {
+  return modelIdentityFormat(request) === LEGACY_MODEL_FORMAT && typeof request.model === "string" && request.model.includes(separator);
+}
+function resolveModelAlias(catalog, request) {
+  const groups = groupsOf(catalog);
+  const group = groups.find((group2) => group2.id === request.provider);
+  if (!group || typeof request.model !== "string") failure("\u8BE5\u63D0\u4F9B\u65B9\u5DF2\u4E0D\u53EF\u7528\uFF1B\u8BF7\u5237\u65B0\u6A21\u578B\u5217\u8868\u540E\u91CD\u65B0\u9009\u62E9");
+  const models = group.models;
+  const raw = models.find((model) => model.id === request.model);
+  const aliased = models.find((model) => legacyModelAlias(group.id, model.id) === request.model);
+  if (raw && aliased && raw.id !== aliased.id) failure("\u6A21\u578B\u6807\u8BC6\u6709\u6B67\u4E49\uFF1B\u8BF7\u5237\u65B0\u6A21\u578B\u5217\u8868\u540E\u91CD\u65B0\u9009\u62E9");
+  if (aliased) return { model: aliased.id, aliased: true };
+  if (raw) return { model: raw.id, aliased: false };
+  failure("\u6A21\u578B\u6216\u63D0\u4F9B\u65B9\u5DF2\u53D8\u5316\uFF1B\u8BF7\u5237\u65B0\u6A21\u578B\u5217\u8868\u540E\u91CD\u65B0\u9009\u62E9\uFF0C\u672A\u66F4\u6539\u6A21\u578B");
+}
+
 // src/dsh-protocol-compat.ts
 var SINGLE_REQUEST_METHODS = /* @__PURE__ */ new Set([
   "session.attachment",
@@ -809,7 +916,6 @@ var SINGLE_REQUEST_METHODS = /* @__PURE__ */ new Set([
   "session.openWorkspacePath",
   "session.rename",
   "session.search",
-  "session.selectModel",
   "session.updateQueue",
   "workspace.archiveSession",
   "workspace.create",
@@ -878,6 +984,7 @@ function planLegacyRpc(request) {
   if (method === "session.models") {
     return { kind: "session-models", request: payload };
   }
+  if (method === "session.selectModel") return { kind: "session-select-model", request: payload };
   if (method === "session.prompt") {
     const parts = Array.isArray(payload.content) ? payload.content : [];
     const first = recordOf(parts[0]);
@@ -1002,6 +1109,14 @@ function resolveTypertGateway(ctx) {
   const query = ctx.get("sessionQuery");
   const agents = ctx.get("agents");
   return {
+    permissionCatalog: () => {
+      try {
+        const service = ctx.get("permissionPresets");
+        return typeof service?.catalog === "function" ? service.catalog() : void 0;
+      } catch {
+        return void 0;
+      }
+    },
     ...typeof agents?.get === "function" ? { canFollowSession: (id) => Boolean(agents.get(id)) } : {},
     ...typeof query?.observeSession === "function" ? { readSnapshot: async (address, maxMessages, signal) => {
       const id = address.kind === "session" ? address.sessionId : address.childSessionId;
@@ -1072,8 +1187,8 @@ function errorResult(error) {
 }
 function historyEvents(records) {
   if (!Array.isArray(records)) return [];
-  return records.flatMap((record2) => {
-    const row = recordOf(record2);
+  return records.flatMap((record3) => {
+    const row = recordOf(record3);
     const event = recordOf(row?.event);
     if (row?.type === "event" && event) return [{ event }];
     if (row?.type !== "chunks" || !event) return [];
@@ -1181,7 +1296,7 @@ function createHistoryPageReader(gateway, sessionId, signal) {
       return {
         events: historyEvents(first.records),
         hasMore: first.hasMore === true,
-        projections: withPresentationProjections(first.projections),
+        projections: withPresentationProjections(first.projections, gateway.permissionCatalog?.()),
         historyEndSeq: first.cursor
       };
     }
@@ -1189,7 +1304,7 @@ function createHistoryPageReader(gateway, sessionId, signal) {
     return {
       ...page,
       ...latest ? {
-        projections: withPresentationProjections(first.projections),
+        projections: withPresentationProjections(first.projections, gateway.permissionCatalog?.()),
         historyEndSeq: first.cursor
       } : {}
     };
@@ -1233,6 +1348,7 @@ async function permissionCommandValue(gateway, plan, signal, readHistory, flushP
   return plan.nativeReceipt ? command : { accepted: true, command: true, permission: current, commandId: command?.commandId };
 }
 async function sessionModelsValue(gateway, request, signal) {
+  const format = modelIdentityFormat(request);
   const sessionId = typeof request.sessionId === "string" ? request.sessionId : "";
   if (!sessionId) throw new Error("session.models requires sessionId");
   const address = await resolveDshSessionAddress(gateway, sessionId, signal);
@@ -1251,7 +1367,23 @@ async function sessionModelsValue(gateway, request, signal) {
   }
   const current = selection?.next ?? selection?.lastUsed ?? catalog.default;
   if (!recordOf(current)) throw new Error("DSH returned no usable model selection");
-  return { ...catalog, current };
+  return presentModelCatalog(catalog, current, format);
+}
+async function selectModelValue(gateway, request, signal) {
+  signal.throwIfAborted();
+  modelIdentityFormat(request);
+  const { modelIdentity: _format, ...native } = request;
+  let aliased = false;
+  if (needsModelAliasResolution(request)) {
+    const catalog = await gateway.invoke({ namespace: "session", method: "modelCatalog", args: {}, signal });
+    const resolved = resolveModelAlias(catalog, request);
+    native.model = resolved.model;
+    aliased = resolved.aliased;
+  }
+  signal.throwIfAborted();
+  const result = await gateway.invoke({ namespace: "session", method: "selectModel", args: { request: native }, signal });
+  const receipt = recordOf(result);
+  return aliased && receipt && recordOf(receipt.selected) ? { ...receipt, selected: legacyModelSelection(receipt.selected) } : result;
 }
 async function invokeLegacyRpc(gateway, request, options) {
   let result;
@@ -1262,6 +1394,7 @@ async function invokeLegacyRpc(gateway, request, options) {
     else if (plan.kind === "workspace-list") value = await workspaceValue(gateway, options.signal);
     else if (plan.kind === "session-history") value = await historyValue(gateway, plan.request, options.signal);
     else if (plan.kind === "session-models") value = await sessionModelsValue(gateway, plan.request, options.signal);
+    else if (plan.kind === "session-select-model") value = await selectModelValue(gateway, plan.request, options.signal);
     else if (plan.kind === "permission-command") value = await permissionCommandValue(
       gateway,
       plan,
@@ -1281,8 +1414,8 @@ async function invokeLegacyRpc(gateway, request, options) {
           });
           break;
         } catch (error) {
-          const failure = recordOf(error);
-          if (request.method !== "session.list" || attempt >= 2 || failure?.code !== "SESSION_QUERY_PERSISTENCE_FAILED" || typeof failure.message !== "string" || !/ENOENT.*scandir.*[\\/]\.dsh-mkdir-[^\\/]+$/.test(failure.message)) throw error;
+          const failure2 = recordOf(error);
+          if (request.method !== "session.list" || attempt >= 2 || failure2?.code !== "SESSION_QUERY_PERSISTENCE_FAILED" || typeof failure2.message !== "string" || !/ENOENT.*scandir.*[\\/]\.dsh-mkdir-[^\\/]+$/.test(failure2.message)) throw error;
           await delay(25 * (attempt + 1), void 0, { signal: options.signal });
         }
       }

package/native/lib/dsh-protocol-compat.d.ts

@@ -2,6 +2,8 @@ import type { Context } from '@deepseek-ai/cordis';
 import { resolveDshSessionAddress } from './dsh-session-address.js';
 type JsonRecord = Record<string, unknown>;
 export interface TypertGatewayLike {
+    /** Public synchronous native metadata, not a session write or a guessed list. */
+    readonly permissionCatalog?: () => unknown;
     /** Native query snapshots do not promote a cold session into a writer. */
     readonly readSnapshot?: (address: Awaited<ReturnType<typeof resolveDshSessionAddress>>, maxMessages: number, signal: AbortSignal) => Promise<unknown>;
     readonly canFollowSession?: (sessionId: string) => boolean;
@@ -58,6 +60,9 @@ type InvocationPlan = {
 } | {
     readonly kind: 'session-models';
     readonly request: JsonRecord;
+} | {
+    readonly kind: 'session-select-model';
+    readonly request: JsonRecord;
 } | {
     readonly kind: 'session-history';
     readonly request: JsonRecord;

package/native/lib/dsh-protocol-compat.js

@@ -2,6 +2,7 @@ import { setTimeout as delay } from 'node:timers/promises';
 import { resolveDshSessionAddress } from './dsh-session-address.js';
 import { withPresentationProjections } from './session-presentation.js';
 import { openHostEvents, invokeHostRemote } from './dsh-host-contract.js';
+import { modelIdentityFormat, presentModelCatalog, needsModelAliasResolution, resolveModelAlias, legacyModelSelection } from './legacy-model-identity.js';
 const SINGLE_REQUEST_METHODS = new Set([
     'session.attachment',
     'session.cancel',
@@ -10,7 +11,6 @@ const SINGLE_REQUEST_METHODS = new Set([
     'session.openWorkspacePath',
     'session.rename',
     'session.search',
-    'session.selectModel',
     'session.updateQueue',
     'workspace.archiveSession',
     'workspace.create',
@@ -88,6 +88,8 @@ export function planLegacyRpc(request) {
     if (method === 'session.models') {
         return { kind: 'session-models', request: payload };
     }
+    if (method === 'session.selectModel')
+        return { kind: 'session-select-model', request: payload };
     if (method === 'session.prompt') {
         // Released clients carry the permission picker through session.prompt.
         // DSH's native UI uses commands.execute: sending this to the model neither
@@ -217,6 +219,17 @@ export function resolveTypertGateway(ctx) {
     const query = ctx.get('sessionQuery');
     const agents = ctx.get('agents');
     return {
+        permissionCatalog: () => {
+            // Read on demand so hot-loaded/withdrawn catalog contributions cannot
+            // leave stale choices cached in the adapter. No selection is performed.
+            try {
+                const service = ctx.get('permissionPresets');
+                return typeof service?.catalog === 'function' ? service.catalog() : undefined;
+            }
+            catch {
+                return undefined;
+            } // Catalog failure must not make chat/history unreadable.
+        },
         ...(typeof agents?.get === 'function' ? { canFollowSession: (id) => Boolean(agents.get(id)) } : {}),
         ...(typeof query?.observeSession === 'function' ? { readSnapshot: async (address, maxMessages, signal) => {
                 const id = address.kind === 'session' ? address.sessionId : address.childSessionId;
@@ -429,7 +442,7 @@ export function createHistoryPageReader(gateway, sessionId, signal) {
             return {
                 events: historyEvents(first.records),
                 hasMore: first.hasMore === true,
-                projections: withPresentationProjections(first.projections),
+                projections: withPresentationProjections(first.projections, gateway.permissionCatalog?.()),
                 historyEndSeq: first.cursor,
             };
         }
@@ -437,7 +450,7 @@ export function createHistoryPageReader(gateway, sessionId, signal) {
         return {
             ...page,
             ...(latest ? {
-                projections: withPresentationProjections(first.projections),
+                projections: withPresentationProjections(first.projections, gateway.permissionCatalog?.()),
                 historyEndSeq: first.cursor,
             } : {}),
         };
@@ -492,6 +505,7 @@ export async function invokeLegacyPermissionRpc(gateway, request, signal, readHi
     return { type: 'server-response', rpcId: request.rpcId, result };
 }
 async function sessionModelsValue(gateway, request, signal) {
+    const format = modelIdentityFormat(request);
     const sessionId = typeof request.sessionId === 'string' ? request.sessionId : '';
     if (!sessionId)
         throw new Error('session.models requires sessionId');
@@ -514,7 +528,26 @@ async function sessionModelsValue(gateway, request, signal) {
     const current = selection?.next ?? selection?.lastUsed ?? catalog.default;
     if (!recordOf(current))
         throw new Error('DSH returned no usable model selection');
-    return { ...catalog, current };
+    return presentModelCatalog(catalog, current, format);
+}
+async function selectModelValue(gateway, request, signal) {
+    signal.throwIfAborted();
+    modelIdentityFormat(request);
+    const { modelIdentity: _format, ...native } = request;
+    let aliased = false;
+    if (needsModelAliasResolution(request)) {
+        const catalog = await gateway.invoke({ namespace: 'session', method: 'modelCatalog', args: {}, signal });
+        const resolved = resolveModelAlias(catalog, request);
+        native.model = resolved.model;
+        aliased = resolved.aliased;
+    }
+    signal.throwIfAborted();
+    // Exactly one native mutation. DSH still validates provider, reasoning effort,
+    // session ownership and permissions. A receipt is not permission to replay.
+    const result = await gateway.invoke({ namespace: 'session', method: 'selectModel', args: { request: native }, signal });
+    const receipt = recordOf(result);
+    return aliased && receipt && recordOf(receipt.selected)
+        ? { ...receipt, selected: legacyModelSelection(receipt.selected) } : result;
 }
 /** Execute one stable request and restore the pre-0.1.2 HTTP envelope. */
 export async function invokeLegacyRpc(gateway, request, options) {
@@ -530,6 +563,8 @@ export async function invokeLegacyRpc(gateway, request, options) {
             value = await historyValue(gateway, plan.request, options.signal);
         else if (plan.kind === 'session-models')
             value = await sessionModelsValue(gateway, plan.request, options.signal);
+        else if (plan.kind === 'session-select-model')
+            value = await selectModelValue(gateway, plan.request, options.signal);
         else if (plan.kind === 'permission-command')
             value = await permissionCommandValue(gateway, plan, options.signal, (sessionId, signal) => historyValue(gateway, { sessionId, maxMessages: 1 }, signal), options.flushPermission);
         else {

package/native/lib/dsh-realtime-compat.js

@@ -1,6 +1,6 @@
 import { resolveTypertGateway } from './dsh-protocol-compat.js';
 import { resolveDshSessionAddress, isSessionReadError } from './dsh-session-address.js';
-import { presentationProjection } from './session-presentation.js';
+import { presentationProjection, legacyPermissionValue } from './session-presentation.js';
 import { AssistantStreamCompatibility, assistantRecordPresentation } from './assistant-stream-compat.js';
 import { resourcePresentation } from './agent-resources.js';
 import { TurnActivityCompatibility } from './turn-activity.js';
@@ -160,6 +160,7 @@ export class DshRealtimeCompatibility {
             kind: path.endsWith('.mux') ? 'mux' : 'host',
             lifetime: new AbortController(),
             sessionLifetimes: new Map(),
+            permissionProjections: new Map(),
         };
         this.sockets.add(state);
         if (state.kind === 'host')
@@ -314,6 +315,7 @@ export class DshRealtimeCompatibility {
             controller.abort(new Error('socket closed'));
         }
         state.sessionLifetimes.clear();
+        state.permissionProjections.clear();
         if (state.clientId) {
             for (const [eventId, values] of this.pending) {
                 const next = values.filter(value => value.clientId !== state.clientId);
@@ -336,6 +338,17 @@ export class DshRealtimeCompatibility {
             state.socket.close(1009, 'realtime consumer is too slow');
             return;
         }
+        if (payload.type === 'session/projection' && payload.key === 'permissions' && typeof payload.sessionId === 'string') {
+            const previous = state.permissionProjections.get(payload.sessionId);
+            if (!previous || Number(payload.seq) >= Number(previous.seq)) {
+                state.permissionProjections.delete(payload.sessionId);
+                state.permissionProjections.set(payload.sessionId, payload);
+                if (state.permissionProjections.size > MAX_SESSION_SUBSCRIPTIONS) {
+                    state.permissionProjections.delete(state.permissionProjections.keys().next().value);
+                }
+            }
+            payload = { ...payload, value: legacyPermissionValue(payload.value, this.gateway().permissionCatalog?.()) };
+        }
         state.socket.send(JSON.stringify({
             type: 'server-event',
             ...(rpcId ? { rpcId } : {}),
@@ -376,6 +389,7 @@ export class DshRealtimeCompatibility {
         if (!frame)
             return;
         if (frame.type === 'baseline') {
+            state.permissionProjections.clear();
             const value = recordOf(frame.value);
             const queues = recordOf(value?.queues) ?? {};
             for (const [sessionId, items] of Object.entries(queues)) {
@@ -531,10 +545,25 @@ export class DshRealtimeCompatibility {
             const frame = recordOf(raw);
             if (!frame)
                 continue;
+            if (frame.type === 'emit' && frame.event === 'permission-presets/catalog-changed') {
+                // The shipped phone has no catalog listener. Re-present its known
+                // selections at their original sequence, with the new live choices.
+                // It accepts equal-seq presentation refreshes; never invent a native
+                // permission change or acquire a session merely to refresh the menu.
+                for (const target of this.sockets) {
+                    for (const payload of [...target.permissionProjections.values()])
+                        this.send(target, payload);
+                }
+                continue;
+            }
             if (frame.type === 'ready') {
                 state.clientId = stringOf(frame.clientId);
                 continue;
             }
+            if (frame.type === 'emit' && frame.event === 'api-session/removed' && Array.isArray(frame.args)) {
+                for (const target of this.sockets)
+                    target.permissionProjections.delete(stringOf(frame.args[0]));
+            }
             const conflict = this.readonlyConflict(frame);
             // Temporary phone-notification mitigation only; see readonlyConflict.
             // The original frame and native Desktop activation/lock stay untouched.

package/native/lib/legacy-model-identity.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Compatibility ONLY for the released Mini Program's model-only equality check.
+ * Native IDs, projections, defaults on disk, and slash-style Remote RPCs stay native.
+ * No mutable/global alias table: Web/Desktop, reconnect and hot reload cannot share
+ * stale identity state. Labels never determine routing; exact native IDs do.
+ */
+type RecordValue = Record<string, unknown>;
+export declare const LEGACY_MODEL_FORMAT = "legacy-provider-model-v1";
+export declare const NATIVE_MODEL_FORMAT = "native-v1";
+export declare function modelIdentityFormat(request: RecordValue): string;
+export declare function legacyModelAlias(provider: string, model: string): string;
+export declare function legacyModelSelection(value: unknown): unknown;
+export declare function presentModelCatalog(catalog: RecordValue, current: unknown, format: string): RecordValue;
+export declare function needsModelAliasResolution(request: RecordValue): boolean;
+export declare function resolveModelAlias(catalog: unknown, request: RecordValue): {
+    model: string;
+    aliased: boolean;
+};
+export {};

package/native/lib/legacy-model-identity.js

@@ -0,0 +1,100 @@
+export const LEGACY_MODEL_FORMAT = 'legacy-provider-model-v1';
+export const NATIVE_MODEL_FORMAT = 'native-v1';
+const separator = ' · ';
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : null;
+}
+function failure(message) {
+    throw Object.assign(new Error(message), { code: 'adapter/model-identity-invalid' });
+}
+export function modelIdentityFormat(request) {
+    const format = request.modelIdentity ?? LEGACY_MODEL_FORMAT;
+    if (format !== LEGACY_MODEL_FORMAT && format !== NATIVE_MODEL_FORMAT) {
+        failure('不支持此模型标识格式；未更改模型');
+    }
+    return format;
+}
+function component(value) {
+    // Escape the separator character and escape character themselves, retaining
+    // readable Unicode. Thus IDs containing punctuation cannot collide.
+    return value.replace(/%/g, '%25').replace(/·/g, '%B7')
+        .replace(/[\u0000-\u001f\u007f]/g, char => '%' + char.charCodeAt(0).toString(16).padStart(2, '0').toUpperCase());
+}
+export function legacyModelAlias(provider, model) {
+    return component(provider) + separator + component(model);
+}
+function groupsOf(catalog) {
+    const groups = record(catalog)?.groups;
+    if (!Array.isArray(groups))
+        failure('主机模型目录无效；请刷新模型列表');
+    const providers = new Set();
+    for (const candidate of groups) {
+        const group = record(candidate);
+        if (!group || typeof group.id !== 'string' || !group.id || providers.has(group.id) || !Array.isArray(group.models)) {
+            failure('主机提供方目录无效；请刷新模型列表');
+        }
+        providers.add(group.id);
+        const models = new Set();
+        for (const candidate of group.models) {
+            const model = record(candidate);
+            if (!model || typeof model.id !== 'string' || !model.id || models.has(model.id)) {
+                failure('主机模型目录包含无效或重复标识；未猜测模型');
+            }
+            models.add(model.id);
+        }
+    }
+    return groups;
+}
+export function legacyModelSelection(value) {
+    const selection = record(value);
+    if (!selection || typeof selection.provider !== 'string' || typeof selection.model !== 'string')
+        return value;
+    return { ...selection, model: legacyModelAlias(selection.provider, selection.model), nativeModel: selection.model };
+}
+export function presentModelCatalog(catalog, current, format) {
+    const groups = groupsOf(catalog);
+    const aliases = format === LEGACY_MODEL_FORMAT && groups.length > 1;
+    const selection = (value) => {
+        const selected = record(value);
+        // A removed provider must not accidentally check the sole remaining
+        // provider's same-named model. Keep the unavailable native intent visible.
+        const missingProvider = groups.length === 1 && selected && selected.provider !== groups[0].id;
+        return format === LEGACY_MODEL_FORMAT && (aliases || missingProvider) ? legacyModelSelection(value) : value;
+    };
+    return {
+        ...catalog,
+        groups: aliases ? groups.map(group => ({ ...group, models: group.models.map(model => ({
+                ...model,
+                id: legacyModelAlias(group.id, model.id),
+                name: `${group.name || group.id}${separator}${model.name || model.id}`,
+                nativeModel: model.id,
+            })) })) : groups,
+        default: selection(catalog.default),
+        current: selection(current),
+        // Per-response negotiation (not OS/version guessing or global state).
+        // A future Mini requests native-v1 and MUST verify this acknowledgement.
+        modelIdentity: { version: 1, format, aliases, supportedFormats: [LEGACY_MODEL_FORMAT, NATIVE_MODEL_FORMAT] },
+    };
+}
+export function needsModelAliasResolution(request) {
+    return modelIdentityFormat(request) === LEGACY_MODEL_FORMAT
+        && typeof request.model === 'string' && request.model.includes(separator);
+}
+export function resolveModelAlias(catalog, request) {
+    const groups = groupsOf(catalog);
+    const group = groups.find(group => group.id === request.provider);
+    if (!group || typeof request.model !== 'string')
+        failure('该提供方已不可用；请刷新模型列表后重新选择');
+    const models = group.models;
+    const raw = models.find(model => model.id === request.model);
+    const aliased = models.find(model => legacyModelAlias(group.id, model.id) === request.model);
+    // Old clients can retain raw IDs over a plugin upgrade. If a real raw ID is
+    // also another model's alias, neither interpretation is safe. Require refresh.
+    if (raw && aliased && raw.id !== aliased.id)
+        failure('模型标识有歧义；请刷新模型列表后重新选择');
+    if (aliased)
+        return { model: aliased.id, aliased: true };
+    if (raw)
+        return { model: raw.id, aliased: false };
+    failure('模型或提供方已变化；请刷新模型列表后重新选择，未更改模型');
+}

package/native/lib/plugin-version.d.ts

@@ -1,2 +1,2 @@
 /** Build identity stays with loaded code, even after package.json is replaced. */
-export declare const PLUGIN_VERSION = "1.7.12-rc.9";
+export declare const PLUGIN_VERSION = "1.7.12";

package/native/lib/plugin-version.js

@@ -1,2 +1,2 @@
 /** Build identity stays with loaded code, even after package.json is replaced. */
-export const PLUGIN_VERSION = '1.7.12-rc.9';
+export const PLUGIN_VERSION = '1.7.12';

package/native/lib/session-presentation.d.ts

@@ -2,4 +2,11 @@ export declare function presentationProjection(key: string, raw: unknown): {
     key: string;
     value: unknown;
 } | null;
-export declare function withPresentationProjections(block: unknown): unknown;
+/** DSH 0.1.7 moved selectable permissions out of the Session projection into
+ * permissionPresets.catalog(). Released phones still read permissions.options.
+ * Join that LIVE process catalog only at our legacy transport boundary: never
+ * persist options into native history, invent default choices, or change the
+ * current permission. Older hosts already supplying options are unchanged.
+ * Retire this bridge when supported phone clients read the native catalog. */
+export declare function legacyPermissionValue(value: unknown, catalog: unknown): unknown;
+export declare function withPresentationProjections(block: unknown, permissionCatalog?: unknown): unknown;

package/native/lib/session-presentation.js

@@ -40,11 +40,40 @@ export function presentationProjection(key, raw) {
     }
     return { key: `agent.${name}.v1`, value };
 }
-export function withPresentationProjections(block) {
+/** DSH 0.1.7 moved selectable permissions out of the Session projection into
+ * permissionPresets.catalog(). Released phones still read permissions.options.
+ * Join that LIVE process catalog only at our legacy transport boundary: never
+ * persist options into native history, invent default choices, or change the
+ * current permission. Older hosts already supplying options are unchanged.
+ * Retire this bridge when supported phone clients read the native catalog. */
+export function legacyPermissionValue(value, catalog) {
+    const selection = object(value), source = object(catalog);
+    // A legacy Session may carry its own complete choices. They remain the
+    // authority on that host; this bridge only supplies the missing modern list.
+    if (Array.isArray(selection.options))
+        return value;
+    if (typeof selection.currentValue !== 'string' || !Array.isArray(source.options))
+        return value;
+    const seen = new Set();
+    const options = [];
+    for (const raw of source.options) {
+        const option = object(raw);
+        if (typeof option.value !== 'string' || !option.value || seen.has(option.value)
+            || typeof option.name !== 'string')
+            return value;
+        seen.add(option.value);
+        options.push({ value: option.value, name: option.name,
+            ...(typeof option.description === 'string' ? { description: option.description } : {}) });
+    }
+    return { ...selection, options };
+}
+export function withPresentationProjections(block, permissionCatalog) {
     const source = object(block);
     if (!source.values)
         return block;
     const values = { ...object(source.values) };
+    if (Object.hasOwn(values, 'permissions'))
+        values.permissions = legacyPermissionValue(values.permissions, permissionCatalog);
     for (const [key, value] of Object.entries(values)) {
         const projected = presentationProjection(key, value);
         if (projected)

package/native/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@harness-remote/dsh-wechat-remote",
-  "version": "1.7.12-rc.9",
+  "version": "1.7.12",
   "description": "Agent远程管理助手：支持 Windows、macOS 与 Linux 上的 DeepSeek Harness，提供微信配对、安全局域网直连及端到端加密公网连接",
   "private": true,
   "license": "MIT",
@@ -107,7 +107,7 @@
     "test:attachment": "node scripts/test-attachment.mjs && node scripts/test-public-object-client.mjs && node scripts/test-agent-inputs.mjs && node --test scripts/test-object-transfer-lifecycle.mjs scripts/test-object-entry-recovery.mjs",
     "test:gate-ports": "node scripts/test-gate-ports.mjs",
     "test:dsh-runtime": "node scripts/test-dsh-runtime.mjs && node --test scripts/test-independent-hosts.mjs scripts/test-node-storage.mjs",
-    "test:dsh-protocol-compat": "node scripts/test-dsh-protocol-compat.mjs && node scripts/test-dsh-session-address.mjs && node scripts/test-session-presentation.mjs && node --test scripts/test-preset-settings.mjs",
+    "test:dsh-protocol-compat": "node scripts/test-dsh-protocol-compat.mjs && node scripts/test-dsh-session-address.mjs && node scripts/test-session-presentation.mjs && node --test scripts/test-preset-settings.mjs scripts/test-session-controls-compat.mjs scripts/test-legacy-model-identity.mjs",
     "test:dsh-realtime-compat": "node scripts/test-dsh-realtime-compat.mjs && node scripts/test-assistant-stream.mjs && node scripts/test-agent-resources.mjs && node --test scripts/test-session-export.mjs scripts/test-session-directory-realtime.mjs scripts/test-cold-session-readonly.mjs scripts/test-passive-writer-notification.mjs",
     "test:dsh-compatibility-api": "node scripts/test-dsh-compatibility-api.mjs && node --test scripts/test-host-compatibility.mjs scripts/test-installer-native-restore.mjs",
     "test:public-relay": "node --test scripts/test-tunnel-send-queue.mjs scripts/test-tunnel-request-lifecycle.mjs && node scripts/test-public-relay.mjs && node scripts/test-relay-liveness.mjs",
@@ -115,6 +115,8 @@
     "test:native-pairing": "node scripts/test-native-pairing.mjs",
     "test:native-preset-settings": "node scripts/test-native-preset-settings.mjs",
     "test:native-control-contract": "node scripts/test-native-control-contract.mjs",
+    "test:native-session-controls": "node scripts/test-native-session-controls.mjs",
+    "test:released-mini-models": "node scripts/test-released-mini-models.mjs",
     "test:independent-transports": "node scripts/test-independent-transports.mjs",
     "verify:installer": "node scripts/test-hybrid-package.mjs"
   },
@@ -226,7 +228,9 @@
     "lib/typert-schema-compat.js",
     "lib/typert-schema-compat.d.ts",
     "lib/dsh-protocol-compat.js",
-    "lib/dsh-protocol-compat.d.ts",
+    "lib/dsh-protocol-compat.d.ts",
+    "lib/legacy-model-identity.js",
+    "lib/legacy-model-identity.d.ts",
     "lib/dsh-session-address.js",
     "lib/dsh-session-address.d.ts",
     "lib/session-presentation.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-wechat-remote",
-  "version": "1.7.12-rc.9",
+  "version": "1.7.12",
   "private": false,
   "description": "Agent远程管理助手：DSH 微信连接插件的一键安装与升级",
   "type": "module",