Upgrade DSH to rc.2 and preserve workbench repair and browser lifecycle

.github/release-notes/desktop-v3.0.0-alpha.2.md

@@ -0,0 +1,46 @@
+# WorkDSH Desktop 3.0.0-alpha.2
+
+每个人，都能定制自己的 AI 服务。
+
+本次 Alpha 更新统一升级至官方 **DeepSeek Harness 0.2.1-rc.2**，并改进桌面运行诊断、工作台共用交付流程与发行校验。README 顶部提供完整系统实录，包含中文配音、字幕及开源地址。
+
+## 更新内容
+
+- Desktop 与 Web 固定到同一 DSH 版本。官方运行依赖从校验过的发行文件提取，桌面端继续使用完整官方客户端。
+- 桌面启动失败时显示实际原因与脱敏后的近期运行输出，并保留本机错误记录；进程清理失败不会再覆盖启动原因。
+- 新工作区在默认本机端口被占用时可选择独立端口；已有工作区保留原地址，避免页面数据因地址变化而看似丢失。错误弹框显示简短原因，完整脱敏输出保存在本机日志中。
+- 基础 Desktop Profile 加入工作台平台，与连接器、专家、资料库、项目和 Skill 共六个默认 WorkDSH bundle。工作台统一需求确认、开发、启动检查、安装状态核对与试用验收，支持中断后恢复。
+- 视频展示使用平台生成的旅行应用，可持续管理多次旅行，每次有独立行程、预算和清单；基础安装包不预装该业务示例。
+- 改进发行脚本的首次依赖安装顺序，检查 Profile 依赖、平台运行文件与归档完整性。
+- 共用交付脚本使用随包 Node 和 pnpm，不依赖系统 npm；构建不自动切换包管理器或安装依赖，打包不重复执行构建脚本。
+- 开发工程从实际安装位置解析公共 SDK，支持安装目录与可写工作区分离；重开制作记录保留原生会话和已保存需求。安装核验明确区分“未检查启用”与“启用失败”，按实际 bundle 继续处理，并在当前已登录的宿主页面验收。
+- 已核验安装身份并通过 managed 接口注册的旧工作台，版本不兼容时保留目录和修复入口，不挂载页面或标为可用；这不代表任意第三方的顶层导入、ABI 或启动代码故障都能被隔离。
+- 修正任务浏览器展示生命周期：关闭和信息查询不再误触发空白面板，关闭后仅移除对应会话的浏览器标签；手动关闭不被同一活动反复抢开，迟到截图和跨会话响应不能恢复旧页面。正常网页操作仍可使用浏览器。
+- 企业连接继续作为独立插件下载并显式安装，基础安装包不预装企业账号与协作插件。
+
+## 底座与工具归档来源
+
+Desktop 与 Web 的实际 DSH Host、Client 和 SDK npm 包统一为 `0.2.1-rc.2`。Node `24.21.0`、pnpm `11.28.5`、Python `3.12.14`、Office 资源和预编译命令工具从单独校验的官方 Desktop 归档提取，不携带另一套 DSH。
+
+macOS Apple Silicon 与 Windows 使用官方 `rc.2` 归档。上游尚未提供 Intel `rc.2` 归档，因此 Intel 工具明确固定来自官方 `rc.1` 归档，并保留原始版本元数据和摘要；这不是 DSH npm 底座回退，也不采用自动降级。Intel 安装包仅在实际 x64 Resources 的运行校验通过后提供，下载平台以本页附件为准。
+
+`3.0.0-alpha.1` 仅建立了标签，未发布安装包；本版使用新的 `alpha.2` 标签，不覆盖旧标签。
+
+## 发行文件
+
+- Windows x64：`WorkDSH-3.0.0-alpha.2-x64-Setup.exe` 安装程序。
+- macOS Apple Silicon arm64 / Intel x64：对应架构的 `WorkDSH-3.0.0-alpha.2-<arch>.dmg`。本次 DMG 未签名。
+- 企业连接：`workdsh-enterprise-connection-0.1.0-alpha.2.tgz`，另附 ZIP、兼容版本清单及校验信息；在“插件 → 添加插件”中安装 TGZ。
+- 附件名称含构建平台前缀，所有文件的 SHA-256 见 `SHA256SUMS`。
+
+## 验证范围
+
+发行门禁要求源码构建、类型检查、自动化回归和 Windows x64、macOS x64/arm64 打包，并要求在实际随包运行时中检查完整 Host、六个必需产品服务及客户端资源。自动检查不代表各平台全部真实交互与企业后台均已验收；Web 预览也不能代替 Desktop 打包运行时验收。
+
+工作台外框适配限定官方 DSH `0.2.1-rc.2` 的两个外框接缝，并校验原始文件与适配后文件的摘要；未知版本或文件内容不匹配时停止处理。官方 Header、对话视图、Composer 与右侧栏的完整组件及状态归属保持不变。该适配不代表所有业务工作台已经完成界面与数据验收。
+
+当前为 Alpha 预发布，升级前请备份本地配置和数据。SkillHub、dsh-market 为独立第三方来源，目录内容并非全部预装或经 WorkDSH 审核，安装前请核对许可、依赖与版本兼容性。
+
+已有工作区若安装了仅适配旧 DSH 的第三方插件，官方插件管理器会阻止升级并恢复原依赖。例如 `sigmapad-plugin@0.1.0-alpha.180` 要求 DSH `0.2.0-rc.2`，与本次底座不兼容；需由插件方提供适配版本，再通过官方插件管理器升级。WorkDSH 不会自动删除或禁用这类插件，也不会绕过版本检查。干净新安装不包含此第三方插件。
+
+开源地址：[github.com/techflag/workdsh](https://github.com/techflag/workdsh)

.github/workflows/ci.yml

@@ -142,6 +142,19 @@ jobs:
       - name: Install browser for Web integration tests
         working-directory: apps/web
         run: pnpm exec playwright install --with-deps chromium
+      - name: Browser display lifecycle and real managed browser tests
+        working-directory: apps/web
+        run: |
+          node --test ../../packages/bundle/tests/browser-view.test.mjs ../../packages/providers/browser-session/tests/client-auto-open.test.mjs ../../packages/providers/browser-session/tests/tool-activity.test.mjs
+          node --input-type=module <<'JS'
+          import { spawnSync } from 'node:child_process';
+          import { chromium } from '@playwright/test';
+          const result = spawnSync(process.execPath, ['--test', '../../packages/providers/browser-session/tests/session-provider.test.mjs'], {
+            env: { ...process.env, DSH_BROWSER_EXECUTABLE: chromium.executablePath() }, stdio: 'inherit',
+          });
+          if (result.error) throw result.error;
+          process.exit(result.status ?? 1);
+          JS
       - working-directory: apps/web
         run: pnpm test:integration
       - name: Library import, search and task reference tests

AGENTS.md

@@ -33,7 +33,8 @@ This repository owns WorkDSH Web and Desktop. Desktop and Web consume the same e
 
 ## Current authorized npm migration
 
-- The user explicitly requires the latest published DSH release, currently `0.2.1-rc.1` (2026-10-17). `upstream.json` locks the same npm target and downloaded official Desktop artifacts. Web preview and Desktop preserve the complete native Conversation, using public Workspace/Layout APIs and only the narrowly authorized shared outer-frame patch below, without embedded custom conversation controls. Matching artifact hashes do not prove Desktop packaged-runtime acceptance; do not release Desktop until its runtime and UI checks pass.
+- The user explicitly requires the latest published DSH release, currently `0.2.1-rc.2` (2026-10-17). Every actual DSH Host, Client and SDK npm package must use this same exact version. Web preview and Desktop preserve the complete native Conversation, using public Workspace/Layout APIs and only the narrowly authorized shared outer-frame patch below, without embedded custom conversation controls. Matching artifact hashes do not prove Desktop packaged-runtime acceptance; do not release Desktop until its runtime and UI checks pass.
+- `upstream.json` separately locks each official binary archive's own version, URL, size and SHA-512. The explicitly locked macOS Intel archive remains the official `0.2.1-rc.1` archive solely for Node, pnpm, Python, Office assets and prebuilt command helpers, because no Intel `rc.2` archive is published. It must not supply DSH Host, Client or SDK packages. Preserve its original `runtime.json` and record the source accurately; do not relabel it as `rc.2` or implement an automatic fallback. Intel publication requires checks against its actual packaged x64 Resources, in addition to the common npm version gate.
 
 ## Personal and enterprise product boundary
 
@@ -46,7 +47,7 @@ This repository owns WorkDSH Web and Desktop. Desktop and Web consume the same e
 
 - Never clone, import or compile official DSH source as part of product builds. `upstream.json` locks published package versions and Desktop archive URLs, sizes and SHA-512 hashes. Extract only runtime dependencies, Office assets and prebuilt command helpers; do not carry a second official Electron application or DSH installation.
 
-- Explicit user-authorized exception (Web preview 2026-10-17; Desktop packaging and release 2026-10-18): both may apply the same exact-version/checksum-locked `native-workbench-frame-patch` for official `0.2.1-rc.1` to restore the rightmost complete native Conversation. Only the two outer-frame seams may change; preserve original headers, views, Composer and right-sidebar owners. Fail closed on unknown bytes, verify the packaged result and keep exact rollback. Desktop release still requires actual packaged-runtime and UI acceptance; no other official file changes are authorized.
+- Explicit user-authorized exception (Web preview 2026-10-17; Desktop packaging and release 2026-10-18): the user's latest-version and compatibility-adaptation authorization extends this same two-seam exception to official `0.2.1-rc.2`; both may apply the exact-version/checksum-locked `native-workbench-frame-patch` to restore the rightmost complete native Conversation. Only the two outer-frame seams may change; preserve original headers, views, Composer and right-sidebar owners. Fail closed on unknown bytes, verify the packaged result and keep exact rollback. Desktop release still requires actual packaged-runtime and UI acceptance; no other official file changes are authorized.
 
 ## Delivery regression gate
 

apps/desktop/README.i18n.yaml

@@ -1,3 +1,3 @@
-README.md: 7b9fd895c8a2e0ecb4a77c4cf09ff02b4f9149e5
-README.zh.md: 6c1e914ccc678da3a4ce50046646a40f23cac5a8
+README.md: d5bb0c9eb8b44e2a49b99c916a1ae2e7dfeb7012
+README.zh.md: 6d73e0f100e0b6cd55d6277eae34007f5dffc2fc
 # Both languages carry equal authority; these Git blob hashes record the current consistent pair.

apps/desktop/README.md

@@ -55,6 +55,8 @@ corepack yarn check:desktop-dsh-alignment
 
 Build the shared features and their required support packages first. `pack-workdsh-profile.mjs` creates immutable archives and a version/hash manifest in `build/workdsh-profile-release`; select another candidate with `WORKDSH_RELEASE_DIRECTORY`. Runtime preparation installs the official version with a portable lockfile and carries pnpm's JavaScript CLI for explicit plugin operations. The package inventory in `scripts/workdsh-package-boundary.mjs` defines the reviewed default bundles and required support packages; enterprise plugins are excluded from the base installer. The same Profile preserves the pinned SkillHub 0.2.16 and dshmarket 1.66.8 catalog integrations. Their catalog entries are not all installed or reviewed by WorkDSH. It does not package a live user's configuration or credentials.
 
-`upstream.json` locks Desktop and Web to the same official **DSH 0.2.1-rc.1** release, as explicitly required by the user. Published packages and checksum-locked official Desktop archives supply the runtime; product builds do not import or compile official source. Existing applications and Profiles have their own actual versions. Alignment, Desktop checks and packaged-runtime acceptance must pass before declaring an upgrade complete; Web preview evidence cannot replace them. Prefer validated official stable releases by default.
+`upstream.json` locks the actual Desktop and Web Host, Client and SDK npm packages to the same official **DSH 0.2.1-rc.2** release, as explicitly required by the user. Product builds consume published packages without importing or compiling official source. Existing applications and Profiles have their own actual versions. Alignment, Desktop checks and packaged-runtime acceptance must pass before declaring an upgrade complete; Web preview evidence cannot replace them. Prefer validated official stable releases by default.
+
+Official Desktop archives separately supply Node, pnpm, Python, Office assets and prebuilt command helpers. Each target records its actual archive version, URL, size and SHA-512. Intel tools explicitly use the official `0.2.1-rc.1` archive because an Intel `rc.2` archive is not published; the original runtime metadata is preserved. This does not downgrade the DSH npm packages or enable automatic fallback. Intel publication requires verification against its actual packaged x64 Resources.
 
 The carrier source and packaging scripts live here; shared WorkDSH feature sources live under the repository's `packages/`. Official DSH packages are consumed without a source checkout. Enterprise administration and model forwarding belong to the separate WorkDSH Admin repository. See [Desktop ownership](../../docs/desktop-boundaries.md).

apps/desktop/README.zh.md

@@ -55,6 +55,8 @@ corepack yarn check:desktop-dsh-alignment
 
 先构建共享功能及其必要支撑包。`pack-workdsh-profile.mjs` 在 `build/workdsh-profile-release` 生成不可变制品与版本/哈希清单；其他候选通过 `WORKDSH_RELEASE_DIRECTORY` 显式选择。运行时准备安装固定官方版本，生成可移植锁文件，并携带 pnpm JavaScript CLI 支持显式插件操作。`scripts/workdsh-package-boundary.mjs` 中的包清单定义经核对的默认 bundle 与必要支撑包，企业插件不包含在基础安装包中。同一 Profile 保留固定的 SkillHub 0.2.16 和 dshmarket 1.66.8 目录集成，不代表目录内容全部安装或经 WorkDSH 审核。不打包正在使用的用户配置或凭据。
 
-`upstream.json` 按用户明确要求，将 Desktop 与 Web 统一固定为官方 **DSH 0.2.1-rc.1**。运行时来自已发布包与校验和锁定的官方 Desktop 发行文件，产品构建不导入或编译官方源码。既有应用与 Profile 的实际版本需单独核验；版本一致性、Desktop 检查与打包运行时验收全部通过后才能宣布升级完成，Web 预览证据不能代替。默认选择经过验证的官方稳定版。
+`upstream.json` 按用户明确要求，将 Desktop 与 Web 实际使用的 Host、Client 和 SDK npm 包统一固定为官方 **DSH 0.2.1-rc.2**。产品构建使用已发布包，不导入或编译官方源码。既有应用与 Profile 的实际版本需单独核验；版本一致性、Desktop 检查与打包运行时验收全部通过后才能宣布升级完成，Web 预览证据不能代替。默认选择经过验证的官方稳定版。
+
+官方 Desktop 归档单独提供 Node、pnpm、Python、Office 资源和预编译命令工具，每个目标记录实际归档版本、URL、大小和 SHA-512。上游尚未发布 Intel `rc.2` 归档，因此 Intel 工具明确使用官方 `0.2.1-rc.1` 归档并保留原始运行时元数据。这不会降级 DSH npm 包，也不启用自动回退；Intel 发行仍须通过实际安装包 x64 Resources 的验证。
 
 外壳源码与打包脚本位于本目录，共享 WorkDSH 功能源码位于仓库 `packages/`。官方 DSH 通过已发布包接入，不检出其源码。企业管理与模型转发由独立的 WorkDSH Admin 仓库负责。参见 [Desktop 归属](../../docs/desktop-boundaries.md)。

apps/desktop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-desktop",
-  "version": "3.0.0-alpha.1",
+  "version": "3.0.0-alpha.2",
   "description": "WorkDSH Electron carrier for a pinned DeepSeek Harness runtime Profile",
   "license": "MIT",
   "publishConfig": {