v0.3.0 — Auto 图标与卸载安全 / Auto icon and unload safety
中文
v0.3.0 为 Auto 权限档补上与 dsh 统一的盾牌闪电图标,并收紧插件卸载时的分类生命周期。
- Auto 图标兼容层:为权限触发器和菜单项补上单色盾牌闪电图标;浏览器脚本随仓库直接提交,继续保持零构建、Git 安装免构建授权。
- best-effort、只影响视觉:DeepSeek Harness rc.6 尚无自定义预设图标 API,因此兼容层依赖当前 DOM 与无障碍文案。未来 dsh 变化导致识别失败时只会静默不显示图标,不会影响权限切换、危险清单、自动审批或人工兜底。
- 修复卸载清理:修复插件卸载时进行中的分类不中止的问题。HMR、disabled 或 remove 会先摘除 responder,再中止分类并等待流迭代器和 timer 清理完成;该次审批记录
unloaded并转人工。 - 提示词可配置:新增非空
classifierPrompt,默认仍是原保守提示;自定义值会完整替换 system prompt。 - 跨 Node 防御:无效 approval abort signal 现在始终安全转人工,避免 Node 22/26 对
AbortSignal.any()校验差异影响失败语义。 - 新增可重复的
docs/ACCEPTANCE.md,固化升级后的四档、审计、危险转人工、Workspace Write 和图标自禁用复验;本地 56 项测试通过,GitHub Actions Node 22/24 全绿。
English
v0.3.0 adds a dsh-aligned shield-and-bolt icon to the Auto permission preset and tightens classifier lifecycle cleanup during plugin unload.
- Auto icon compatibility layer: adds a monochrome shield-and-bolt glyph to the permission trigger and menu item. The browser script is committed as a runtime file, preserving the zero-build, no-build-authorization Git install.
- Best effort and visual only: DeepSeek Harness rc.6 does not expose a custom preset-icon API, so the layer depends on the current DOM and accessible copy. If a future dsh change prevents recognition, it silently leaves the icon absent; permission switching, danger rules, automatic approvals, and the human fallback remain unaffected.
- Unload cleanup fix: fixes in-flight classification continuing after plugin unload. HMR, disable, or removal now detaches the responder, aborts classification, and waits for stream-iterator and timer cleanup; that approval logs
unloadedand returns to human review. - Configurable prompt: adds a non-empty
classifierPrompt; the original conservative prompt remains the default, while a custom value replaces the complete system prompt. - Cross-Node defense: invalid approval abort signals now always fall back to human review, insulating failure semantics from Node 22/26 differences in
AbortSignal.any()validation. - A repeatable
docs/ACCEPTANCE.mdnow covers four-preset composition, audit pairing, dangerous-command fallback, Workspace Write parity, and icon self-disable checks after dsh upgrades. All 56 local tests pass, and the GitHub Actions Node 22/24 matrix is green.