DS Bot 0.1.4

DS Bot 0.1.4

中文

插件、Android 和 Windows/macOS/Linux 独立桌面 App 同步更新至 0.1.4。包含已合入的上游 dev（至 v0.2.2）能力及本仓库的手机、安全与发布适配。

修复与变化

• 新对话段及首次群成员会话必须成功应用权限限制后才接收工作；权限失败时保留原会话和输入。
• 权限变更与会话注册串行处理，防止并发创建漏掉群权限收紧。
• 桌面导入生成独立团队状态，不通过符号链接反向修改源文件。
• 修复 0.1.3 桌面升级后未发送草稿丢失：启动前迁移旧地址的聊天/UI 存储，不覆盖新地址已有值，不复制认证信息，保留旧数据并防止已发送草稿被重复恢复。
• 手机原生支持选择、确认、表单卡片及独立 /side 对话；图表以数据表显示，HTML 仅显示安全摘要。旧手机端明确拒绝未支持的 /side，不再投递到主会话。
• 已同步独立 Bot 浏览器及授权、重启后的交接恢复、图表/公式卡片与 Linux 桌面打包。

安装

请一起更新插件和 App。在 DSH 添加插件时粘贴完整固定提交：

github:QingJ01/DS-Bot-App#1455871a96e868e9b1af3ad1f32704265f4ebf9c&path:ds-bot

• Android 手机选择 dsbot-android-arm64-v0.1.4.apk；x86_64 APK 用于相应设备或模拟器。沿用原签名，versionCode 从公开 0.1.3 的 73 升至 82；直接覆盖安装，不要卸载或清数据。
• Windows x64 使用 .exe 安装器；macOS 选择 arm64 或 x64 ZIP；Linux x64 选择 AppImage 或 amd64 deb。
• 下载后在同一目录执行 sha256sum -c SHA256SUMS（macOS 使用 shasum -a 256 -c SHA256SUMS）。需下载清单内全部文件才能整体校验；单文件可核对对应行。
• Android 公开证书 SHA-256：a105a335360e8db1b277defe2ffe7e1d9de63d2746be01c339c982220954cc8e。不分发私钥或密码。

验收与已知边界

本次由云端 VM 构建，GitHub Actions 被禁用，不能称 CI 通过。桌面包基于上述修复提交；插件及 Android 相对之前候选构建的源码未变，复用已验收的相同包字节。

范围	实际结果
Windows 安装版	公开 0.1.3 → 0.1.4 NSIS 原位升级，历史/草稿、mock 发送、新会话及完整重启持久化通过；Administrator VM
macOS arm64、x64/Rosetta	公开 0.1.3 → 最终 ZIP 原位升级、历史/草稿迁移、mock 发送、设置、新会话及完整退出重开通过；已发送草稿不复活
Linux AppImage	最终包沿用已有候选版同一数据目录，历史/草稿及完整重启通过；这是 loopback→loopback 回归
Android	原签名 APK 从公开 0.1.3 在 x86_64 模拟器保数据升级，配对、历史和草稿通过；ARM64 实体手机未验
本地检查	桌面 Linux 单测 146 通过、1 平台跳过；新增迁移 3 项及真实 Chromium fixture 通过；主机 smoke、插件/手机回归已在候选阶段通过

不能称全部检查通过：Windows 原全套有 1 项依赖“无 symlink 权限”假设的环境敏感失败，未跳过或修改断言；macOS x64 原自动检查超时，保留全部断言、等待迁移窗口消失再选主页面的有界诊断通过，但原超时根因尚未确证。真实安装版 UI 结果与这些检查分开记录。

Windows 包未代码签名，macOS 为 ad-hoc 签名、无 Developer ID 或 notarization；系统可能提示安全警告。本次没有关闭系统安全保护。未验证普通非管理员 Windows、实体 Intel Mac、真实模型服务、iOS、Linux deb 系统安装或自动更新下载安装。Linux 候选检查旧版缺少 latest-linux.yml 时返回 404；本版本提供该文件，不据此宣称自动更新已验收。

既有已知问题：手机离线/失权提示可能与浮动导航重叠；完整服务商配置、浏览器接管与站点授权管理仍有手机端功能缺口。所有历史标签和下载文件保持不变。

公开发布后的 13 个文件均通过未认证下载核对，与批准的暂存文件逐字节一致，并通过 SHA256SUMS 校验。

发布后实际公开 tgz 已通过官方 DSH Web 的聊天、13 个可用设置页、刷新持久化与 /side 验收（mock 模型）。Android 留存的 code 82 App 重开后显示连接页，无法确认有效配对、历史与草稿起点，因此本轮没有安装公开 APK，不能称公开包再次原位安装验收通过；此前候选包从公开 0.1.3 升级的证据独立保留。更新服务返回 HTTP 403，在线更新未验收。

English

Coordinated 0.1.4 plugin, Android and Windows/macOS/Linux desktop release, including upstream dev changes through v0.2.2 and this fork's mobile, security and release adaptations.

Highlights

• Apply inherited permissions before new Sessions accept work; serialize permission changes and registration to prevent concurrent Sessions retaining wider access.
• Materialize imported team state independently rather than modifying the source through symlinks.
• Preserve unsent desktop drafts when upgrading from 0.1.3: migrate allowlisted UI storage before startup, retain existing destination values and legacy source data, exclude authentication, and prevent replaying sent drafts.
• Native mobile choice/confirmation/form cards and isolated /side chats; charts use data tables, HTML uses safe summaries. Older mobile clients explicitly reject unsupported side commands.
• Per-Bot browsers and authorization, restart-safe handoffs, charts/formulas and Linux desktop packages.

Install and verification limits

Update plugin and app together. Use the exact immutable plugin specification above. Android retains the existing signing identity and advances versionCode 73→82; install over the old app without uninstalling or clearing data. Verify downloads against the flat SHA256SUMS; DeepSeekBot.cer is the public certificate only.

Built on cloud VMs because repository Actions is disabled: no passing CI is claimed. Desktop artifacts use commit 1455871a96e868e9b1af3ad1f32704265f4ebf9c; unchanged plugin/Android sources reuse the previously accepted artifact bytes. Actual public-0.1.3 upgrades passed on Windows NSIS and macOS native arm64/x64 Rosetta, preserving history/drafts across full restart and not reviving sent drafts. Final Linux AppImage same-profile regression and the signed Android x86_64 emulator upgrade also passed. Models were mocks.

Windows retains one environment-sensitive junction-permission test failure; macOS x64's original scripted check timed out. A bounded x64 diagnostic retaining every assertion passed after waiting for the temporary migration window, but the original timeout cause is not proven. These are not represented as all-green checks.

Windows is unsigned; macOS is ad-hoc signed, without Developer ID/notarization. No security controls were disabled. Physical Android/Intel Mac, non-elevated Windows, real cloud models, iOS, deb system installation and automatic update installation remain unverified. Existing mobile offline/access-loss notice overlap and provider/browser-administration feature gaps remain. Historical releases and assets are unchanged.

All 13 public release assets were downloaded without authentication, matched the approved staged files byte-for-byte, and passed SHA256SUMS verification.

After publication, the downloaded plugin passed actual official DSH Web chat, all 13 available settings pages, reload persistence and /side checks with a mock model. The retained code-82 Android app reopened at the connection screen, so a valid pairing/history/draft baseline could not be confirmed; the public APK was not installed in this round and public-package in-place reinstallation is not claimed. Earlier public-0.1.3-to-candidate upgrade evidence remains separate. The update service returned HTTP 403; online updating remains unverified.