v0.4.0

What's Changed

• refactor!: remove FastCtx and the background component by @Haoming9527 in #121
• feat(activity): project bounded OPS session activity (1/6) by @ccch1mneyyy in #122
• feat(tui): add an opt-in read-only OPS sidebar (2/6) by @ccch1mneyyy in #123
• feat(tui): surface bounded native result diagnostics (3/6) by @ccch1mneyyy in #124
• test(tui): verify native file results through the real DSH loop (4/6) by @ccch1mneyyy in #125
• feat(tui): add bounded all-session anomaly badges (5/6) by @ccch1mneyyy in #126
• feat(tui): add focused filters and local activity pages (6/6) by @ccch1mneyyy in #127
• fix(cross-platform): 三平台门禁收敛 —— 修复 #130 + 可见跳过 + Windows 清单更正 + 门禁脚本 by @Thatgfsj in #134
• ci: 合并自动验证,门禁数字不再写死 by @Thatgfsj in #142
• fix(config-updates): 结合 #138 的 patch 层持久化与 #136 的内存优先克制(#108, #91) by @Thatgfsj in #140
• ci: 保证功能正常 + 能构建(门禁进 CI,并校验发行物) by @Thatgfsj in #153
• ci: 增加"工具尝试"作业(非强制),并收下 #101/#102 的贡献 by @Thatgfsj in #155
• ci: 套件时限可配 + 超时重试一次(默认关闭) + 取消在途/缓存/改名 by @Thatgfsj in #165
• ci: 让 master 镜像自动快进到 main(仅快进,不覆盖) by @Thatgfsj in #166
• docs: 让 0.3.1 的文档/声明面与当前 main 的实现一致(#174) by @Thatgfsj in #176
• build(native): 前置落地 windows-metadata crate(解除 #179 的 Windows 阻塞) by @Thatgfsj in #182
• feat(#169): 新增 opt-in 的严格官方工具接管组件(hide-official),注册为默认关闭 by @Thatgfsj in #178
• ci: 把门禁收敛成一个可被分支保护引用的检查(并让承诺变成断言) by @Thatgfsj in #186
• feat(issue-167): 原生文件工具面扩到 11 项(工具 + 参数 schema/契约) by @Thatgfsj in #179
• feat(issue-168): 写出安全与原子性层(叠在 #179 之上) by @Thatgfsj in #187
• merge: promote validated safety stack #187 into main by @T-Auto in #199
• fix(ptc): bounded owned paging and discoverable SDK contracts (#171) by @T-Auto in #195
• feat(defaults): enable PTC enhancement and retain shell on every platform (#170) by @T-Auto in #196
• ci(#162): 重写 release.yml 为门禁化的 GitHub Release 发布,并补发布流程文档 by @Thatgfsj in #177
• test: make the #151 suites pass for the right reason on all three hosts, and write a bilingual CONTRIBUTING (#172) by @Haoming9527 in #181
• bench(p11a): 统计判决核心 —— pass-drop 先行 + 只在双方通过的配对上比成本 + A/A 噪声底 by @Thatgfsj in #215
• bench(p7): 运行器 A —— 单发会话驱动与归档(NDJSON + trace) by @Thatgfsj in #214
• bench(p9): setup A —— 两侧 profile 幂等准备(含 env 全局 npm 兜底) by @Thatgfsj in #216
• bench(int): 接线 tools target,并让 CLI tripwire 与切片合并顺序无关 by @Thatgfsj in #222
• bench(p8a): run.json 契约对齐(放宽 usage/轨迹槽位)+ 封存 seal by @Thatgfsj in #220
• bench(p13): 工具级确定性对比(收编 #103,判定不含时间) by @Thatgfsj in #211
• bench(p10): setup B —— preflight(权限组合 / PSModulePath / 构建前置)+ CLI 入口 by @Thatgfsj in #219
• bench(p11b): 报告渲染(结论条 + 配对表 + 噪声带 + 归因) by @Thatgfsj in #218
• bench(int2): pending tripwire 接受两种 pending 文案 by @Thatgfsj in #223
• bench(p12): 数据面板(读 JSON 的单文件查看器 + 模板胚子) by @Thatgfsj in #217
• bench(p8b): AB/BA 交错调度 + A/A 噪声跑 + ab 入口 by @Thatgfsj in #224
• bench(wire): 任务语料 + tools 入口 + 多臂封存 + 单进程 ab by @Thatgfsj in #226
• bench(p15): CI opt-in 冒烟 + artifact + .gitignore by @Thatgfsj in #221
• bench(p16): 文档收口 + 示例 overlay + JSDoc 还原 by @Thatgfsj in #225
• bench(polish): README 接线现状刷新 + 去重复打印 + lock 边车忽略 by @Thatgfsj in #227
• bench(p14): 运行时可开关的数据采集(设置「启动数据检测」)+ 面板落盘 by @Thatgfsj in #229
• bench(test): 让 sweep 测试不依赖宿主机全局安装的 dsh by @Thatgfsj in #232
• bench(test): dry-run 路径比较用 POSIX 分隔符(修 Windows leg) by @Thatgfsj in #233
• feat(bench): 把 #173/#103/#183 合成一套 bench + 数据面板(#205) by @Thatgfsj in #228
• docs(credits): 记录 #103/#183 的共同署名(Co-authored-by) by @Thatgfsj in #241
• feat(bench): Add benchmark to measure the plugin's token cost against a clean baseline by @Richeir in #183
• fix(hide-official): 不再因范围外工具缺等价物而阻塞会话就绪(#238) by @Thatgfsj in #242
• test(bench): add file-tool comparison harness and baseline fixtures by @OldLigant in #103
• [0.3.2] F1/F2/F3/F6 真机四切片 + ≤1000 行拆分整合 by @Thatgfsj in #254
• refactor(cli): 拆分 bin/dsh-ops.mjs（1071 行）为 lib/cli 子模块 by @Thatgfsj in #246
• refactor(test): 拆分 test/shells.test.mjs（1710 行）为五个套件 by @Thatgfsj in #248
• refactor(shells): 拆分 lib/shells.js（1498 行）为 lib/shells/* 子模块 by @Thatgfsj in #250
• refactor(build): 拆分 scripts/build-platform-packages.mjs（1535 行）为模块 by @Thatgfsj in #252
• build(deps): bump windows-sys from 0.59.0 to 0.61.2 in /native by @dependabot[bot] in #188
• build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #202
• fix(file): refuse before the update sidecar, and document the credential fence (#240) by @WTStarMark in #244
• fix(shell): pwsh 接管改为原地写 volatile 引用，不再重挂 pwsh-sandbox 行（#29 #104 #129） by @little3tar in #154
• fix(shell): session workdir and verified backlog integration by @Y-fyan in #197
• fix(hide-official): integrate the explicit takeover scope follow-up by @T-Auto in #255
• docs: finish inspect capability cleanup and pin routing claims by @T-Auto in #256
• fix(file): SDK types, honest grep pages and compact model output by @T-Auto in #259
• feat(settings): [14b/16] add optional host configuration pages by @Haoming9527 in #283
• feat(documents): [15b/16] add bounded DOCX paragraph readers by @Haoming9527 in #285
• feat(documents): [15d/16] add bounded PDF text readers by @Haoming9527 in #287
• refactor(types): [16a/16] complete strict TypeScript source migration by @Haoming9527 in #288
• test(bench): [16b/16] verify acceptance and preserve Native source fidelity by @Haoming9527 in #289
• chore(release): [16c/16] prepare the 0.4.0 candidate and acceptance record by @Haoming9527 in #290
• build: [1/16] compile plugin sources into existing lib paths by @Haoming9527 in #264
• refactor: [2/16] centralize typed capability and outcome contracts by @Haoming9527 in #265
• refactor(native): [4a/16] split the kernel into workspace crates by @Haoming9527 in #266
• feat(native): [4b/16] version one-shot worker requests by @Haoming9527 in #267
• feat(file): [3/16] render bounded Native text results by @Haoming9527 in #268
• feat(config): [13/16] select verified official replacements by @Haoming9527 in #269
• feat(search): [5a/16] report coverage and validate continuations by @Haoming9527 in #270
• feat(file): [5b/16] batch file reads and atomic edits by @Haoming9527 in #271
• feat(results): [6a/16] add private session snapshot references by @Haoming9527 in #272
• feat(results): [6b/16] preserve oversized output in session references by @Haoming9527 in #273
• feat(results): [6c/16] bind storage and call budgets to live sessions by @Haoming9527 in #274
• feat(file): [6d/16] page owned result references in Native mode by @Haoming9527 in #275
• feat(ptc): [7/16] expose typed outcomes and load scoped SDKs on demand by @Haoming9527 in #276
• feat(discovery): [8/16] activate scoped Native tools on the next step by @Haoming9527 in #277
• feat(native): [9/16] slim the resident file surface by @Haoming9527 in #278
• feat(native): [10/16] deduplicate reads with current-context evidence by @Haoming9527 in #279
• feat(shell): [11/16] reuse host execution and make Bash optional by @Haoming9527 in #280
• refactor(shell): [12/16] leave PowerShell with its host by @Haoming9527 in #281
• feat(settings): [14a/16] preserve profiles and expose validated controls by @Haoming9527 in #282
• feat(documents): [15a/16] add bounded CSV and TSV readers by @Haoming9527 in #284
• feat(documents): [15c/16] validate bounded classic PDF containers by @Haoming9527 in #286
• chore(release): 0.4.0 — integrate the full 16-step stack into main by @T-Auto in #293
• docs: DSH 工具注入分析合集 by @Nicholas023 in #299
• feat(shell): restore the Windows Bash npm payload and enable the shell row everywhere (#301) by @Thatgfsj in #307
• docs: require one CI run per pull request (#303) by @Thatgfsj in #308
• refactor: rename 0.4.0 tools for consistent verb_noun naming by @Nicholas023 in #305
• fix(profile): validate CLI launchers before dry-run by @ccch1mneyyy in #311
• feat(panel): serve captured reports with one command by @ccch1mneyyy in #314

New Contributors

• @ccch1mneyyy made their first contribution in #122
• @Richeir made their first contribution in #183
• @OldLigant made their first contribution in #103
• @dependabot[bot] made their first contribution in #188
• @little3tar made their first contribution in #154
• @Y-fyan made their first contribution in #197
• @Nicholas023 made their first contribution in #299

Full Changelog: v0.3.1...v0.4.0