Tags: UNLINEARITY/dsh-code

feat(release): install straight from GitHub release assets and refuse…

… registry-lag downgrades

Tag pushes now build the packed bundle on CI and attach it to a GitHub Release, so the bundle installs straight from a release asset: npm install -g <asset url>, then dsh plugin --profile cli add <the same url> - the packed artifact is prebuilt and identical to what the registry would serve. A launcher from such an asset can sit ahead of the registry, so update --apply now refuses an apply whose npm latest is older than the running launcher, and the update status reports up to date instead of offering the downgrade. The README leads with the GitHub path, and the existing CI workflow moves to pnpm 12 to match the lockfile and retries the known timing-sensitive panel tests.

tag 推送现在会在 CI 上构建打包产物并挂到 GitHub Release，bundle 可从 release 附件直装：npm install -g <附件 URL>，然后 dsh plugin --profile cli add <同一 URL>——打包产物已预构建，与注册表交付的内容一致。此类安装的 launcher 可能领先于注册表，因此 update --apply 在 npm latest 早于运行中 launcher 时拒绝执行，更新状态显示"已是最新"而不是提供降级。README 以 GitHub 路径为先；既有 CI 工作流对齐 pnpm 12 并为已知的时序敏感面板测试加入重试。

chore(release): prepare dsh-code 1.0.5

dsh-code 1.0.5 targets dsh 0.1.2-rc.1 and includes all fixes from a full external audit. /review now works before the first message. A diff that fails to load is reported instead of quietly shrinking what gets reviewed, and every diff read disables text converters, so a repository cannot run a configured converter while the terminal is merely reading its diff. `deepseek update` upgrades the global launcher and the cli profile together on one compatible version line, and its check mode lists every installed and latest version side by side. Theme and status-line saves write through unique temp files, and input history becomes an append-only file, so two terminals working at the same time no longer lose one side's entries. Sessions recorded before the upstream preset rename keep working through an automatic code-to-ptc mapping, and web_fetch needs no setup at all. Verified with 742 tests, typecheck, build, a pack dry run, and a cli-profile reinstall against the upgraded runtime.

dsh-code 1.0.5 面向 dsh 0.1.2-rc.1 构建，包含一次完整外部审计的全部修复。/review 现在在新会话中可以直接使用。diff 读取失败会明确报错，不再悄悄缩小审查范围；所有 diff 读取都会禁用文本转换器，仓库无法在终端仅仅读取 diff 时运行配置的转换程序。`deepseek update` 会把全局宿主和 cli profile 锁定在同一条兼容版本线上一起升级，查看模式同时列出每个组件的已安装版本和最新版本。主题和状态栏的保存改用独立临时文件，输入历史改为追加式文件，两个终端同时工作不会再丢失其中一边的记录。上游预设改名前保存的会话通过 code 到 ptc 的自动映射继续使用，web_fetch 无需任何配置。已通过 742 项测试、类型检查、构建、pack 演练，并在升级后的运行时上重装 cli profile 验证。

chore(release): prepare dsh-code 1.0.4

This release focuses on terminal stability, provider management, and reasoning effort control. An intermittent keyboard freeze after approval prompts is eliminated at its root: the terminal now stays in raw mode across all interface transitions, a lost paste-end marker no longer traps subsequent keystrokes, and the transcript scrollback can no longer become permanently frozen by an interrupted retry or command. Provider configuration is rebuilt around a single setup page that holds the API key, endpoint, and model list together, with a discovery stage that queries the live endpoint for the models it actually serves and imports only the entries the user selects. Reasoning effort mappings are now editable inline on any model row and copyable from another model in one keystroke. The provider list groups configured entries at the top in the brand accent color, Tab consistently moves one level deeper throughout the model flow, and Ctrl+C exits the entire flow from any stage. Verified with 725 tests, typecheck, build, a pack dry run, and a profile reinstall.

本版本聚焦终端稳定性、供应商管理与推理档位控制。审批后偶发的键盘死锁从根源消除：终端在所有界面切换间保持 raw 模式，丢失的粘贴结束标记不再滞留后续按键，转录滚动区也不会再被中断的重试或命令行永久冻结。供应商配置围绕单一配置页重建，API key、端点与模型列表同屏呈现，附带发现阶段直连真实端点查询实际可用模型并仅导入用户勾选的条目。推理档位映射可在任意模型行上直接行内编辑，并可从其他模型一键复制。供应商列表将已配置条目以品牌强调色分组置顶，Tab 在整个模型流程中统一表示深入一层，Ctrl+C 可从任意阶段退出整个流程。725 项测试、类型检查、构建、pack 演练与 profile 重装验证全部通过。