Whale Isle v0.3.3

Whale Isle 0.3.3

中文 | English

本包基于 DeepSeek Harness 0.1.7-rc.2（上游提交 477b4f420553e8a52c2fbccc464d7561b239c443）；基线已从本轮原始安装负载核对。

这次更新

• 远程工作区：可管理 SSH 机器、选择远程目录，并在桌面会话中使用镜像工作区。
• 会话费用：消耗统计页按模型显示会话费用，并提供价格段编辑和更紧凑的活动日历。
• 鲸鱼娘统一会话：主窗、桌面快捷对话与已启用的 IM 渠道复用同一条常驻会话。设置分为聊天与能力、桌面形象与行为；快捷对话的模型与思考档位改为浮层选择。
• 文件与浏览器工作环：聊天内的文件引用和产物可打开对应工作面；HTML、HTM、XHTML、PDF 产物先进入聊天区悬浮预览，再按需转到右栏 Browser，保留同一页面的地址和历史。
• 文件入口与编辑保护：右栏只保留「文件」目录入口，具体文件打开编辑页签；旧无文件查看器显示所属会话目录，内部 sidebar:// 地址不再当作文件路径。编辑时保留草稿，关闭未保存文件时可选择保存或丢弃；保存失败会保留编辑页。选区原文正确进入所属会话，文件树与搜索使用统一的打开路径。
• 远程访问修复：畸形请求不会中断 LAN 静态服务；仅本机模式保持回环监听，配置端口用于真实远程 daemon。设置页移除未实现的 LAN TLS 开关，并说明现有加密范围。
• 预览路径修复：带中文、空格或百分号的文件可正常预览，同时继续拒绝路径穿越和编码路径分隔符。
• 单一右栏：文件、浏览器、差异与其他资源在同一右栏原位打开；关闭最后一个内容页签后回到入口，避免在两套侧栏之间切换。
• 启动器与数据保全：导入失败时保留原有数据，插件覆盖安装失败时恢复原安装，并修复 Windows 回滚快照中的目录链接问题；停止或取消启动后，旧的恢复任务不会再次启动桌面。导入列表和长确认内容在小窗口及高缩放下可滚动操作。
• 账户登录：桌面账户登录链接就绪时自动打开系统浏览器，仍可从弹窗复制链接。
• 界面修正：右栏页签的关闭按钮与标题居中对齐；任务列表浮层避免被会话头部裁切，浏览器悬浮预览缩小装饰边框并改善拖拽、缩放和标题显示；鲸鱼娘交互范围更贴近角色本体。
• 安装与启动恢复：下载断线可有界重试，安装失败会显示可恢复状态；运行时先在临时目录验证再切换，同版本覆盖安装也按归档内容刷新，避免继续使用旧运行时。启动时异步检查依赖链接，减少长时间界面无响应。
• 更新失败恢复：差量下载超时会取消下载；安装器无法启动时明确报错、保留当前应用和组件服务，并允许重新尝试，不再提前显示更新成功或退出。
• 统计准确性与开关：修复恢复会话漏计用量、重复刷新累计翻倍；会话统计、费用与峰谷开关即时响应，连续切换时保留最新选择。
• Windows 窗口与桌宠：主窗和启动器同时保留 20px 透明圆角与系统窗口动画；桌宠缩放适配屏幕密度，角色和聊天卡之间的空隙可穿透点击。
• Windows 任务栏图标：窗口先声明鲸屿图标、名称与重启命令，再设置 AppID，确保任务栏刷新时已具备完整品牌属性；安装版启动时精确识别旧通知生成的 Electron 快捷方式，保留完整的非快捷方式备份，并有界通知系统旧入口已删除。源码运行避免系统通知重新生成同身份条目，安装版通知保持可用，用户固定项保持原样。
• 正常退出：关闭反馈最多等待 500ms，避免隐藏页面没有绘制回调时卡住退出；任务检查、排空和正常关停流程继续保留。
• 桌宠投喂恢复：清理会话日志后，新增消费仍可投喂；恢复旧日志不会重复发放。升级保留成长值、累计已投喂量和原有可用余额，写入失败后重试不会重复扣除。
• Harness 基线：更新到 dsh-v0.1.7-rc.2，并保留桌面工作环与插件能力。

技术契约

• 鲸鱼娘的会话身份由 data/whale/settings.json 中的 sessionId 持有；未启用或会话不可用时，IM 不会悄悄创建另一条鲸鱼娘会话。显式选择其他预设的机器人仍使用独立会话。
• Browser 右栏与聊天区悬浮预览交接同一 guest；离任表面的延迟隐藏不得覆盖新表面的显示。
• Browser 预览的 dshd mini-player 由 renderer 在聊天可视区定位控制层，Browser guest（BrowserView）按 previewId 交接；URL 与 history 由同一 guest 保留。安装版 Browser 路径列为 P0 验收。
• 文件打开通过工作区授权路径执行；缺少工作目录或无法处理的路径回退到 Host。
• 旧无文件查看器使用所属会话的目录主体和标题原位兼容呈现，保持原页签记录、栏展开与浮窗状态；有效文件与草稿保持原身份，不迁移持久布局。
• 差量与整包安装共用目标版本、发布清单 SHA512 和任务接纳检查；安装器启动失败释放接纳锁，重试重新检查工作状态。
• 运行时归档使用 SHA256 内容身份，旧提取标记迁移一次；常规复用只读小摘要清单，替换前校验真实归档。构建凭据同时跟踪脚本 helper、vendor 源码和当前平台原生产物，排除生成目录。
• 旧通知条目保留原字节的 Electron.lnk.backup；只在移动完成后对原路径异步发送精确 SHCNE_DELETE / SHCNF_PATHW | SHCNF_FLUSH，500ms 后仍保留备份并继续启动。事件投递不证明任务栏像素正确，首次冷启动须另行验收。
• macOS 更新路径按架构选择 DMG，校验后打开并提示手动拖入 Applications；打开映像不表示安装已完成，也不会自动退出应用。本次 Windows 发行不提供 DMG。

安装与升级

Windows 10 及以上 x64 用户可从 Releases 获取安装包，并使用随附的 SHA512SUMS.txt 校验。安装器未进行 Authenticode 签名，Windows 可能显示安全提示。已有桌面安装可直接覆盖升级；迁移其他环境请使用启动器中的「导入」。

Git 操作要求应用进程能找到 Git CLI。若系统尚未配置 Git，需先安装并确认从桌面启动的应用能够访问；开发终端中的 Git 可用不等于桌面进程已具备该依赖。

平台范围

本次公开资产仅为 Windows x64 安装包。Android、macOS 与 Web 第二客户端不在这批安装资产中。远程访问需要用户主动开启配对；LAN 静态页面使用 HTTP，端到端加密与中继 TLS 的范围以设置页说明为准。

已知限制

如果当前 Windows 资源管理器会话已缓存旧版通知生成的 Electron 快捷方式，升级后任务栏可能仍显示旧名称或白色文件图标。旧入口迁移完成后，下次登录或重启资源管理器可恢复；应用不会主动重启资源管理器。干净会话的正确图标不能证明这条升级路径首次显示正确。

验证范围

开发 CI 运行相关行为测试、安装包构建和 packaged smoke；自动发布复用同次构建资产，并核对更新元数据和校验和。未执行的安装、升级和手工路径不宣称通过。

反馈

请在 Issues 附上操作系统、复现步骤与日志；分享前移除密钥等敏感信息。

---

Whale Isle 0.3.3

中文 | English

This package uses DeepSeek Harness 0.1.7-rc.2 (upstream commit 477b4f420553e8a52c2fbccc464d7561b239c443), verified from this candidate's original installer payload.

What's new

• Remote workspaces: Manage SSH machines, choose remote directories, and use mirrored workspaces in desktop sessions.
• Session costs: Usage Statistics now shows costs by model, includes a price-period editor, and has a more compact activity calendar.
• One resident whale conversation: The main window, desktop quick chat, and enabled IM channels share one persistent conversation. Settings separate chat and capabilities from desktop appearance and behavior; quick chat uses a floating model and reasoning picker.
• File and browser work loops: File references and deliverables in chat open the relevant surface. HTML, HTM, XHTML, and PDF deliverables first open in the chat mini preview, then move to the right Browser panel on request while retaining the same page and history.
• Files entry and editing protection: The right panel keeps one Files directory entry and opens editor tabs for specific files. Legacy fileless viewers show their owning conversation's directory instead of reading internal sidebar:// addresses as file paths. Edits retain a draft, and closing an unsaved file offers Save or Discard. A failed save keeps the editor open. Selected text goes into the owning conversation, and the file tree and search use the shared opening route.
• Remote access fixes: Malformed requests no longer interrupt the LAN static server. Local-only mode retains loopback listening, and the configured port controls the actual remote daemon. Settings remove the unimplemented LAN TLS switch and explain the existing encryption scope.
• Preview path fixes: Files with Chinese characters, spaces, or percent signs preview correctly, while path traversal and encoded path separators remain rejected.
• One right panel: Files, browser pages, diffs, and other resources open in place in the same right panel. Closing the last content tab returns to its entry view without switching between separate sidebars.
• Launcher and data preservation: Failed imports preserve existing data, and failed plugin replacements restore the previous installation, including a fix for directory links in Windows rollback snapshots. Stopping or cancelling startup invalidates older recovery tasks. Import lists and long confirmations remain scrollable in small windows and at high zoom levels.
• Account sign-in: The system browser opens automatically when a desktop account authorization link becomes available; the dialog still offers a copyable link.
• Interface fixes: Right-panel tab close buttons align with their titles. The Jobs popover avoids clipping under the conversation header. The browser mini preview has slimmer chrome and improved dragging, resizing, and title display. The whale pet's interaction area follows the character more closely.
• Installation and startup recovery: Interrupted downloads retry within a bounded limit, and installation failures show a recoverable state. The runtime is validated in a temporary directory before replacement. Same-version upgrades refresh it by archive content to avoid reusing an older runtime. Startup checks dependency links asynchronously to reduce long UI stalls.
• Update failure recovery: A differential-download timeout cancels the download. If the installer cannot start, the app reports the error, keeps the current app and component services running, and allows a retry without claiming success or quitting early.
• Accurate statistics and responsive switches: Fixed missing usage in restored sessions and totals doubling on repeated refreshes. Session statistics, cost, and peak/off-peak switches respond immediately and retain the latest choice during rapid changes.
• Windows windows and desktop pet: The main window and launcher retain both 20px transparent corners and native window animations. The pet adapts to screen density, and clicks pass through the gap between the character and chat card.
• Windows taskbar icon: Windows set the Whale Isle icon, name and relaunch command before the AppID, so complete branding is available when the taskbar refreshes. Installed startup identifies the exact old notification-generated Electron shortcut, keeps a complete backup without the shortcut extension, and notifies the system that the old entry was deleted within a bounded wait. Source runs prevent notification registration from recreating the entry, installed notifications remain available, and user pins are retained.
• Normal quit: Closing feedback waits at most 500ms, preventing a hidden page without paint callbacks from stalling quit. Task inspection, draining, and normal shutdown remain in place.
• Pet feeding recovery: New consumption remains available for feeding after session logs are cleaned up. Restoring old logs does not grant food twice. Upgrading preserves growth, lifetime feeding and the existing available balance; a retry after a failed save does not consume it twice.
• Harness baseline: Updated to dsh-v0.1.7-rc.2 while retaining desktop work loops and plugin capabilities.

Technical contract

• The whale's sessionId in data/whale/settings.json owns its conversation identity. IM does not silently create another whale conversation when the assistant is disabled or unavailable. Other explicitly selected bot presets keep independent conversations.
• The right Browser panel and chat mini preview hand off the same guest; a delayed hide from the departing surface must not override the new owner's display.
• The dshd mini-player positions its renderer controls in the chat viewport and hands the Browser guest (BrowserView) over by previewId; the same guest retains URL and history. The installed-package Browser path is a P0 acceptance case.
• File opening uses authorized workspace paths. Paths without a working directory or a supported handler fall back to the Host.
• Legacy fileless viewers show their owning conversation's directory body and title in place, preserving the tab record, panel expansion, and floating state. Valid files and drafts retain their identity without a persisted-layout migration.
• Differential and full-file installs share target-version, release-manifest SHA512, and task-admission checks. An installer-start failure releases the admission lock, and a retry checks work again.
• Runtime archives use SHA256 content identity; older extraction markers migrate once. Normal reuse reads only a small digest manifest, and replacement verifies the actual archive. Build credentials also track script helpers, vendored sources, and native outputs for the current platform while excluding generated directories.
• The old notification entry retains its original bytes in Electron.lnk.backup. Only a completed move sends the exact asynchronous SHCNE_DELETE / SHCNF_PATHW | SHCNF_FLUSH event for the original path; after 500ms the backup is retained and startup continues. Event delivery does not prove correct taskbar pixels; first cold-launch acceptance remains separate.
• The macOS update path selects a DMG for the current architecture, verifies it, and opens it with instructions to drag the app into Applications. Opening the image does not mean installation is complete and does not quit the app. This Windows release does not include a DMG.

Install and upgrade

Windows 10 or later x64 users can download the installer from Releases and verify it with the accompanying SHA512SUMS.txt. The installer is not Authenticode-signed, so Windows may show a security warning. Existing desktop installations can be upgraded in place; use Import in the launcher when migrating from another environment.

Git operations require a Git CLI that the application process can find. If Git is not configured, install it and confirm that the desktop-launched application can access it; Git availability in a development terminal does not establish that dependency for the desktop process.

Platform scope

This release includes only a Windows x64 installer. Android, macOS, and the second Web client are outside this installer set. Remote access requires an explicit pairing opt-in. The LAN static page uses HTTP; Settings explains the scope of end-to-end encryption and relay TLS.

Known limitations

If the current Windows Explorer session has cached an older notification-generated Electron shortcut, the taskbar may retain the old name or a white file icon after upgrading. Once the old entry has been migrated, signing in again or restarting Explorer can restore it; the app does not restart Explorer itself. Correct pixels in a clean session do not certify the first display on this upgrade path.

Verification scope

Development CI runs relevant behavior tests, installer packaging and packaged smoke. Automatic publication reuses those assets and verifies update metadata and checksums. Installation, upgrade and manual paths not exercised are not claimed as passed.

Feedback

Report issues through Issues with the OS, reproduction steps, and relevant logs. Remove keys and other sensitive data before sharing logs.

Release provenance

• Release tag: v0.3.3
• Candidate commit: a97ba836cc81915d970a8426fa109abb7c5c2950 (main)
• Built locally on Windows 11 x64 with Node 24.21.0 / Electron 43.4.0 / electron-builder 26.15.3
• Verified Windows Setup SHA256: a1b951f7f4eac1148c462342300a2948ed9e5077547d08736aee038ae2909dce
• Local verification: packaged P0 smoke passed against the installed build with Git absent from PATH (fallback probe exercised); details in local-release-evidence.json
• Release body combines the Chinese and English release notes above.