v1.1.96

1.1.96

中文

• 版本 1.1.96。
• 新增安全离开（停用 / 卸载都不破坏 DSH）：
  • lib/safe-leave.js：locate → revert-patches → revert-shims → revert-flash → verify 五阶段，回滚后自检宿主是否仍含 [dsh-purge] / __dsh_purge_ 标记。
  • 停用路径自动执行：配置 enabled: false 时先回滚宿主补丁；回滚不干净则拒绝停用（记录 __dshPurgeDisableBlocked），避免留下无人维护的孤儿补丁。
  • 卸载路径加残留自检：uninstall 在删除插件目录前校验宿主已无插件标记，未干净即中止。
  • 新命令 /purge leave：输出五阶段结果 + 保留数据清单，作为停用/卸载前的安全准备。
• 数据保留承诺：prompt-inject.md、~/.dsh/redteam/（知识库 4.6 万条 + 靶标/漏洞/凭据/报告）、~/.dsh/dsh-purge/ 在停用与卸载时均不删除。
• 删除范围严格限定 */node_modules/dsh-purge，npm link / file: 安装不会误删源码仓库；不碰注册表、服务、驱动。
• 文档：docs/SAFE-LEAVE.md（两种离开方式、数据保留表、离开后自检命令、恢复方法）。

English

• 1.1.96.
• New: safe-leave for disable/uninstall — locate → revert-patches → revert-shims → revert-flash → verify, with post-revert residue check for [dsh-purge] / __dsh_purge_ markers.
• Disable path now reverts host patches first and refuses to disable if the revert is unclean (records __dshPurgeDisableBlocked), so no orphan patches are left behind.
• Uninstall now verifies host residue before deleting the plugin tree; unclean reverts abort the uninstall.
• New /purge leave command reporting all five stages plus the retained-data list.
• Data retention: prompt-inject.md, ~/.dsh/redteam/ (46k knowledge entries + engagements/vulns/credentials/reports) and ~/.dsh/dsh-purge/ are never deleted on disable or uninstall.
• Deletion is limited to */node_modules/dsh-purge; no registry, service or driver changes.
• Docs: docs/SAFE-LEAVE.md.

中文

• 版本 1.1.95。
• 新增：官方「设置 → 插件」页里挂本插件自己的页签（settings.plugins.tab）——显示当前版本、更新来源，提供「检测更新」「更新到 x.y.z」按钮，与其它插件的设置入口形态一致。
• 修复：更新通道稳定版 ref 从 master 改为 main（本仓库默认分支），否则「检测更新」永远读不到远端（实测确认：hasRemote: true）。
• 修复：设置页签与后端 /dsh-purge/update 的请求字段对齐（op 而非 action），检测结果按 lanes.stable.latestRef / hasUpdate 解析。
• CI：全量 JS 语法检查、manifest 与版本一致性校验（含 lib/update.js 的 REPO 必须指向本仓库）、Release 附带 SHA256SUMS-<version>.txt。

English

• 1.1.95.
• New: a per-plugin tab in the official Settings → Plugins page (settings.plugins.tab) showing the current version and update source, with Check update / Update buttons — matching the settings entry style of other plugins.
• Fix: the stable update lane now tracks main instead of master (this repo's default branch); previously Check update could never read the remote.
• Fix: the tab now matches the /dsh-purge/update contract (op instead of action) and parses lanes.stable.latestRef / hasUpdate.
• CI: full-tree JS syntax check, manifest/version consistency (including the lib/update.js REPO), and a per-release SHA256SUMS-<version>.txt asset.

中文

• 版本 1.1.94（维护版自身迭代线，基于上游 1.1.93）。
• 移除：红队模式背景图功能（设置卡 / 背景层 / bgGet·bgSave 接口 / 存量配置全部清除）。
• 知识库：复活并统一到 $DSH_HOME/redteam/knowledge.db；演练台新增独立「知识库」入口，支持从 ExploitDB（GitLab 官方）与本地 nuclei 模板一键导入（实测 46,709 条，幂等）。
• 入口：左侧菜单「破甲控制台」走宿主官方 ctx.layout.selectPanel(null)——弹浮窗并保持对话视图；对话 tab 行入口仅红队模式显示。
• 演练台 UI：面板命名与副标、tab 图标化、空态三步引导、dock 页签胶囊化；演练台 tab 排移除知识库（避免与独立入口重复）。
• 拒绝重试：吸收 Community 1.6.84 的 refusal-retry 三件套（llm/stream 挂载，默认关闭，tuning.json 开启）。
• 多客户端：multi-client/ 并入 WorkBuddy / ZCode 插件包（自包含，独立安装）。
• 技能库：并入 yaklang hack-skills（103 攻击 playbook）与 yak-skills（12 引擎技能）。
• 规范修正：uiConversation.events.register 纳入 ctx.effect 生命周期（DSH 插件指南 2.4）。
• 更新源：全部指向本仓库 ZiDuNet/dsh-purge。

English

• 1.1.94 (maintenance line on top of upstream 1.1.93).
• Removed the red-team background-image feature entirely.
• Knowledge base revived at $DSH_HOME/redteam/knowledge.db, standalone dock tab, one-click import from ExploitDB (GitLab) and local nuclei templates (46,709 entries verified, idempotent).
• Sidebar entry uses the host's official ctx.layout.selectPanel(null): opens the dock and keeps the conversation view.
• Drill UI polish; knowledge base removed from the drill tab row to avoid duplication.
• Absorbed Community 1.6.84 refusal-retry (opt-in via tuning.json).
• Absorbed WorkBuddy / ZCode plugin packs under multi-client/.
• Absorbed yaklang hack-skills (103 playbooks) and yak-skills (12 engine skills).
• Lifecycle fix: uiConversation.events.register now registered through ctx.effect.
• Update sources point to this repository.

中文

• 版本 1.1.93。
• 适配 DSH 0.2.2-rc.1。宿主这一版动了执行与审批的主干：
  • 工具执行器拆成 dsh-tool-executor-native / dsh-tool-executor-ptc，run_code 与 PTC SDK 从 dsh-tools 迁出。
  • 审批服务新增 session-projection 依赖与 approvalState projection，ASK_SENTENCE 改为 Approval prompts are enabled in this session: ...。
  • dsh-base 里 fs-observation-policy 默认 disabled: true，并新增 applyPatch 开关。
  • sandbox 的 workspace-write 开始接受显式额外根目录。
  • agent-instructions 改为用户全局链 / 项目链分别计预算。
  • 新增 apply_patch 工具，默认关闭。
• 修复 9 条漂移的补丁 pattern：执行器拆分、run_code / PTC SDK 迁出、审批 projection、fs-observation-policy / applyPatch 开关、workspace-write 额外根目录、agent-instructions 预算链各自挪动了锚点，共 9 条 pattern 在 rc.1 上落空。本版按新宿主代码逐条重对齐，命中、注入、回滚整条链路在 0.2.2-rc.1 上走通。
• 随宿主变化更新的补丁匹配：#14 / #17 / #54 / #60 / #62 / #67 / #74 / #82 / #40。旧 pattern 一律保留、新 pattern 追加，不覆盖旧版；rc.5 / rc.2 分支照旧生效。
• 兼容范围：0.2.2-rc.1、0.2.1-rc.5、0.2.1-rc.2 同时在列。rc.5 与 rc.2 仍然可用，不用降宿主，也不用换插件版本。三份 README 的版本号与适配范围同步到 1.1.93，并删掉「不支持 0.2.1-rc.3 及更新」的旧表述。

English

• 1.1.93.
• DSH 0.2.2-rc.1 support. This host release moved the execution and approval spine:
  • The tool executor split into dsh-tool-executor-native / dsh-tool-executor-ptc, and run_code plus the PTC SDK moved out of dsh-tools.
  • The approval service gained a session-projection dependency and an approvalState projection; ASK_SENTENCE is now Approval prompts are enabled in this session: ....
  • fs-observation-policy now defaults to disabled: true in dsh-base, which also gained an applyPatch switch.
  • Sandbox workspace-write accepts explicit extra roots.
  • agent-instructions now budgets the user-global chain and the project chain separately.
  • New apply_patch tool, off by default.
• 9 drifted patch patterns repaired: the executor split, the run_code / PTC SDK move, the approval projection, fs-observation-policy / applyPatch, the extra workspace-write roots and the split agent-instructions budget each shifted anchors, so 9 patterns missed on rc.1. This release re-aligns every one of them against the new host code; match, inject and revert run end to end on 0.2.2-rc.1.
• Patch matches updated for the host change: #14 / #17 / #54 / #60 / #62 / #67 / #74 / #82 / #40. Old patterns are kept and new ones appended, never overwritten; the rc.5 / rc.2 branches behave as before.
• Supported hosts: 0.2.2-rc.1, 0.2.1-rc.5 and 0.2.1-rc.2 all in the list. rc.5 and rc.2 keep working — no host downgrade, no plugin swap. All three READMEs move to 1.1.93 and drop the old "0.2.1-rc.3 and newer RCs are not supported" wording.

1.1.92

中文

• 版本 1.1.92。
• 随包技能库并入开源版：skills/redteam/*.md 共 23 条红队技能随包发布（主动扫描、内网 fscan/gogo、隧道、横向、Web 指纹、nuclei、Webshell、反弹 Shell 等）。来源为上游 dsh-purge 项目，经 mmparko/dsh-purge 镜像取回，已原样并入并在 NOTICE 注明出处。
• 打包范围：package.json 的 files 增加 skills，npm 包与 Release 压缩包均包含；插件启动时仍按原逻辑把包内技能同步到 $DSH_HOME/redteam/skills，宿主技能目录 $DSH_HOME/skills 优先。
• 知识库说明：POC/EXP 知识库不是随包文件，而是运行时生成的本地数据库，条目来自本机 nuclei 模板与手工录入；相关代码（lib/redteam/store-core.js、ui.js、tools.js）一直在仓库里，本次无需迁移。
• 文档：三份 README 的目录结构与运行时目录同步补上 skills/；边界说明写明开源版包含付费版的全部功能与内容。

English

• 1.1.92.
• Bundled skills are now part of the open-source build: 23 red-team skills ship under skills/redteam/*.md (active scanning, intranet fscan/gogo, tunneling, lateral movement, web fingerprinting, nuclei, webshell, reverse shells and more). They come from the upstream dsh-purge project, retrieved via the mmparko/dsh-purge mirror, copied unchanged, and credited in NOTICE.
• Packaging: package.json files now lists skills, so both the npm package and the release archive include it. On startup the plugin still syncs the bundled skills into $DSH_HOME/redteam/skills, with the host skill directory $DSH_HOME/skills taking priority.
• Knowledge base note: the POC/EXP knowledge base is not a shipped file. It is a local database built at runtime from the machine's nuclei templates and manual entries; the code (lib/redteam/store-core.js, ui.js, tools.js) has always been in the repository, so nothing needed to move.
• Docs: all three READMEs now list skills/ in the directory structure and runtime paths; the boundaries section states that the open-source build includes everything in the paid build.

1.1.91

中文

• 版本 1.1.91。
• #220 宿主版本声明对齐 rc.5：package.json 的 dshTarget 改为 0.2.1-rc.5，dshTargets 同时保留 0.2.1-rc.5 与 0.2.1-rc.2。状态页读主字段，不再把跑在 rc.5 上的宿主报成「未适配」；rc.2 仍然在兼容列表里。
• #213 应用 / 还原后 dsh 丢失可执行位：writeHostFileAtomic() 在 rename 前先读目标原 mode 并 chmod 到临时文件，POSIX 下 bin.js 的 0755 原样保留；没有 rename 的抽象 fs 改为原地写并清理临时文件。WSL ext4 实测：apply → revert → apply → revert 四次，mode 始终 755，dsh 可直接执行。
• #211 回退按钮浮在设置页最上层：place() 增加前台判定，锚点断开、checkVisibility() 为假、落在 inert / aria-hidden 里、或被 [role="dialog"][aria-modal="true"] 遮住时隐藏按钮并归还 composer 的 padding-left；宿主 z-index 从 2147482500 降到 900，菜单降到 950，稳定处在页面内容之上、宿主模态（1000）之下。Chrome 实测覆盖模态、遮挡、opacity、inert、断开锚点与层叠比较。
• #209 pnpm 12 反复要求构建审批：rewritePnpmAllowBuilds() 按 profile 里的 pnpm 大版本决定策略——pnpm 12+（或版本判断不出）保留用户写下的来源键（dsh-purge@git+https://… / @https://…），只去重；pnpm 11 仍按 #185 清掉来源键，避免 ERR_PNPM_INVALID_VERSION_UNION。裸包名照旧补齐。真实 pnpm 11 / 12 配置与真实 profile 均验证。
• 渗透范围：禁止对中国大陆、香港、澳门，银行与金融站点，政府与军事站点发起渗透、攻击或扫描；本地演练限定在本机回环与 RFC1918 私网。游戏外挂、内存修改、注入与反作弊绕过不再拦截，提示词与会话门禁同步放开。
• 验证：范围判定 24 项用例全过；#209/#211/#213 单测与真实环境测试全过；client.js 与改动模块语法检查通过。

English

• 1.1.91.
• #220 host target aligned with rc.5: dshTarget is now 0.2.1-rc.5, with 0.2.1-rc.5 and `0.2.1-r...

v1.1.95

1.1.95

中文

• 版本 1.1.95。
• 新增：官方「设置 → 插件」页里挂本插件自己的页签（settings.plugins.tab）——显示当前版本、更新来源，提供「检测更新」「更新到 x.y.z」按钮，与其它插件的设置入口形态一致。
• 修复：更新通道稳定版 ref 从 master 改为 main（本仓库默认分支），否则「检测更新」永远读不到远端（实测确认：hasRemote: true）。
• 修复：设置页签与后端 /dsh-purge/update 的请求字段对齐（op 而非 action），检测结果按 lanes.stable.latestRef / hasUpdate 解析。
• CI：全量 JS 语法检查、manifest 与版本一致性校验（含 lib/update.js 的 REPO 必须指向本仓库）、Release 附带 SHA256SUMS-<version>.txt。

English

• 1.1.95.
• New: a per-plugin tab in the official Settings → Plugins page (settings.plugins.tab) showing the current version and update source, with Check update / Update buttons — matching the settings entry style of other plugins.
• Fix: the stable update lane now tracks main instead of master (this repo's default branch); previously Check update could never read the remote.
• Fix: the tab now matches the /dsh-purge/update contract (op instead of action) and parses lanes.stable.latestRef / hasUpdate.
• CI: full-tree JS syntax check, manifest/version consistency (including the lib/update.js REPO), and a per-release SHA256SUMS-<version>.txt asset.

中文

• 版本 1.1.94（维护版自身迭代线，基于上游 1.1.93）。
• 移除：红队模式背景图功能（设置卡 / 背景层 / bgGet·bgSave 接口 / 存量配置全部清除）。
• 知识库：复活并统一到 $DSH_HOME/redteam/knowledge.db；演练台新增独立「知识库」入口，支持从 ExploitDB（GitLab 官方）与本地 nuclei 模板一键导入（实测 46,709 条，幂等）。
• 入口：左侧菜单「破甲控制台」走宿主官方 ctx.layout.selectPanel(null)——弹浮窗并保持对话视图；对话 tab 行入口仅红队模式显示。
• 演练台 UI：面板命名与副标、tab 图标化、空态三步引导、dock 页签胶囊化；演练台 tab 排移除知识库（避免与独立入口重复）。
• 拒绝重试：吸收 Community 1.6.84 的 refusal-retry 三件套（llm/stream 挂载，默认关闭，tuning.json 开启）。
• 多客户端：multi-client/ 并入 WorkBuddy / ZCode 插件包（自包含，独立安装）。
• 技能库：并入 yaklang hack-skills（103 攻击 playbook）与 yak-skills（12 引擎技能）。
• 规范修正：uiConversation.events.register 纳入 ctx.effect 生命周期（DSH 插件指南 2.4）。
• 更新源：全部指向本仓库 ZiDuNet/dsh-purge。

English

• 1.1.94 (maintenance line on top of upstream 1.1.93).
• Removed the red-team background-image feature entirely.
• Knowledge base revived at $DSH_HOME/redteam/knowledge.db, standalone dock tab, one-click import from ExploitDB (GitLab) and local nuclei templates (46,709 entries verified, idempotent).
• Sidebar entry uses the host's official ctx.layout.selectPanel(null): opens the dock and keeps the conversation view.
• Drill UI polish; knowledge base removed from the drill tab row to avoid duplication.
• Absorbed Community 1.6.84 refusal-retry (opt-in via tuning.json).
• Absorbed WorkBuddy / ZCode plugin packs under multi-client/.
• Absorbed yaklang hack-skills (103 playbooks) and yak-skills (12 engine skills).
• Lifecycle fix: uiConversation.events.register now registered through ctx.effect.
• Update sources point to this repository.

中文

• 版本 1.1.93。
• 适配 DSH 0.2.2-rc.1。宿主这一版动了执行与审批的主干：
  • 工具执行器拆成 dsh-tool-executor-native / dsh-tool-executor-ptc，run_code 与 PTC SDK 从 dsh-tools 迁出。
  • 审批服务新增 session-projection 依赖与 approvalState projection，ASK_SENTENCE 改为 Approval prompts are enabled in this session: ...。
  • dsh-base 里 fs-observation-policy 默认 disabled: true，并新增 applyPatch 开关。
  • sandbox 的 workspace-write 开始接受显式额外根目录。
  • agent-instructions 改为用户全局链 / 项目链分别计预算。
  • 新增 apply_patch 工具，默认关闭。
• 修复 9 条漂移的补丁 pattern：执行器拆分、run_code / PTC SDK 迁出、审批 projection、fs-observation-policy / applyPatch 开关、workspace-write 额外根目录、agent-instructions 预算链各自挪动了锚点，共 9 条 pattern 在 rc.1 上落空。本版按新宿主代码逐条重对齐，命中、注入、回滚整条链路在 0.2.2-rc.1 上走通。
• 随宿主变化更新的补丁匹配：#14 / #17 / #54 / #60 / #62 / #67 / #74 / #82 / #40。旧 pattern 一律保留、新 pattern 追加，不覆盖旧版；rc.5 / rc.2 分支照旧生效。
• 兼容范围：0.2.2-rc.1、0.2.1-rc.5、0.2.1-rc.2 同时在列。rc.5 与 rc.2 仍然可用，不用降宿主，也不用换插件版本。三份 README 的版本号与适配范围同步到 1.1.93，并删掉「不支持 0.2.1-rc.3 及更新」的旧表述。

English

• 1.1.93.
• DSH 0.2.2-rc.1 support. This host release moved the execution and approval spine:
  • The tool executor split into dsh-tool-executor-native / dsh-tool-executor-ptc, and run_code plus the PTC SDK moved out of dsh-tools.
  • The approval service gained a session-projection dependency and an approvalState projection; ASK_SENTENCE is now Approval prompts are enabled in this session: ....
  • fs-observation-policy now defaults to disabled: true in dsh-base, which also gained an applyPatch switch.
  • Sandbox workspace-write accepts explicit extra roots.
  • agent-instructions now budgets the user-global chain and the project chain separately.
  • New apply_patch tool, off by default.
• 9 drifted patch patterns repaired: the executor split, the run_code / PTC SDK move, the approval projection, fs-observation-policy / applyPatch, the extra workspace-write roots and the split agent-instructions budget each shifted anchors, so 9 patterns missed on rc.1. This release re-aligns every one of them against the new host code; match, inject and revert run end to end on 0.2.2-rc.1.
• Patch matches updated for the host change: #14 / #17 / #54 / #60 / #62 / #67 / #74 / #82 / #40. Old patterns are kept and new ones appended, never overwritten; the rc.5 / rc.2 branches behave as before.
• Supported hosts: 0.2.2-rc.1, 0.2.1-rc.5 and 0.2.1-rc.2 all in the list. rc.5 and rc.2 keep working — no host downgrade, no plugin swap. All three READMEs move to 1.1.93 and drop the old "0.2.1-rc.3 and newer RCs are not supported" wording.

1.1.92

中文

• 版本 1.1.92。
• 随包技能库并入开源版：skills/redteam/*.md 共 23 条红队技能随包发布（主动扫描、内网 fscan/gogo、隧道、横向、Web 指纹、nuclei、Webshell、反弹 Shell 等）。来源为上游 dsh-purge 项目，经 mmparko/dsh-purge 镜像取回，已原样并入并在 NOTICE 注明出处。
• 打包范围：package.json 的 files 增加 skills，npm 包与 Release 压缩包均包含；插件启动时仍按原逻辑把包内技能同步到 $DSH_HOME/redteam/skills，宿主技能目录 $DSH_HOME/skills 优先。
• 知识库说明：POC/EXP 知识库不是随包文件，而是运行时生成的本地数据库，条目来自本机 nuclei 模板与手工录入；相关代码（lib/redteam/store-core.js、ui.js、tools.js）一直在仓库里，本次无需迁移。
• 文档：三份 README 的目录结构与运行时目录同步补上 skills/；边界说明写明开源版包含付费版的全部功能与内容。

English

• 1.1.92.
• Bundled skills are now part of the open-source build: 23 red-team skills ship under skills/redteam/*.md (active scanning, intranet fscan/gogo, tunneling, lateral movement, web fingerprinting, nuclei, webshell, reverse shells and more). They come from the upstream dsh-purge project, retrieved via the mmparko/dsh-purge mirror, copied unchanged, and credited in NOTICE.
• Packaging: package.json files now lists skills, so both the npm package and the release archive include it. On startup the plugin still syncs the bundled skills into $DSH_HOME/redteam/skills, with the host skill directory $DSH_HOME/skills taking priority.
• Knowledge base note: the POC/EXP knowledge base is not a shipped file. It is a local database built at runtime from the machine's nuclei templates and manual entries; the code (lib/redteam/store-core.js, ui.js, tools.js) has always been in the repository, so nothing needed to move.
• Docs: all three READMEs now list skills/ in the directory structure and runtime paths; the boundaries section states that the open-source build includes everything in the paid build.

1.1.91

中文

• 版本 1.1.91。
• #220 宿主版本声明对齐 rc.5：package.json 的 dshTarget 改为 0.2.1-rc.5，dshTargets 同时保留 0.2.1-rc.5 与 0.2.1-rc.2。状态页读主字段，不再把跑在 rc.5 上的宿主报成「未适配」；rc.2 仍然在兼容列表里。
• #213 应用 / 还原后 dsh 丢失可执行位：writeHostFileAtomic() 在 rename 前先读目标原 mode 并 chmod 到临时文件，POSIX 下 bin.js 的 0755 原样保留；没有 rename 的抽象 fs 改为原地写并清理临时文件。WSL ext4 实测：apply → revert → apply → revert 四次，mode 始终 755，dsh 可直接执行。
• #211 回退按钮浮在设置页最上层：place() 增加前台判定，锚点断开、checkVisibility() 为假、落在 inert / aria-hidden 里、或被 [role="dialog"][aria-modal="true"] 遮住时隐藏按钮并归还 composer 的 padding-left；宿主 z-index 从 2147482500 降到 900，菜单降到 950，稳定处在页面内容之上、宿主模态（1000）之下。Chrome 实测覆盖模态、遮挡、opacity、inert、断开锚点与层叠比较。
• #209 pnpm 12 反复要求构建审批：rewritePnpmAllowBuilds() 按 profile 里的 pnpm 大版本决定策略——pnpm 12+（或版本判断不出）保留用户写下的来源键（dsh-purge@git+https://… / @https://…），只去重；pnpm 11 仍按 #185 清掉来源键，避免 ERR_PNPM_INVALID_VERSION_UNION。裸包名照旧补齐。真实 pnpm 11 / 12 配置与真实 profile 均验证。
• 渗透范围：禁止对中国大陆、香港、澳门，银行与金融站点，政府与军事站点发起渗透、攻击或扫描；本地演练限定在本机回环与 RFC1918 私网。游戏外挂、内存修改、注入与反作弊绕过不再拦截，提示词与会话门禁同步放开。
• 验证：范围判定 24 项用例全过；#209/#211/#213 单测与真实环境测试全过；client.js 与改动模块语法检查通过。

English

• 1.1.91.
• #220 host target aligned with rc.5: dshTarget is now 0.2.1-rc.5, with 0.2.1-rc.5 and 0.2.1-rc.2 both kept in dshTargets. The status page reads the primary field, so a host on rc.5 is no longer reported as unsupported; rc.2 stays compatible.
• #213 dsh lost its executable bit after apply/revert: writeHostFileAtomic() now reads the target's existing mode and applies it to the temp file before rename, so bin.js keeps 0755 on POSIX; filesystems without rename fall back to an in-place write and clean up the temp file. WSL ext4 test: apply → revert → apply → revert keeps the mode at 755 and dsh stays executable.
• #211 the undo button floated above settings: place() now checks whether the session surface is actually visible and hides the button (releasing the composer's padding-left) when the anchor is detached, fails checkVisibility(), sits under inert / aria-hidden, or is covered by [role="dialog"][aria-modal="true"]. The host z-index drops from 2147482500 to 900 and the menu to 950, staying above page content and below the host modal (1000). Chrome tests cover modals, occlusion, opacity, inert, detached anchors and stacking.
• #209 pnpm 12 kept asking for build approval: rewritePnpmAllowBuilds() now decides by the profile's pnpm major version. On pnpm 12+ (or when the version cannot be read) it preserves user-written source keys (dsh-purge@git+https://…, @https://…) and only deduplicates them; on pnpm 11 it still removes them per #185 to avoid ERR_PNPM_INVALID_VERSION_UNION. The bare package name is still ensured. Verified against real pnpm 11/12 configs and a...

v1.1.94

1.1.94

中文

• 版本 1.1.94（维护版自身迭代线，基于上游 1.1.93）。
• 移除：红队模式背景图功能（设置卡 / 背景层 / bgGet·bgSave 接口 / 存量配置全部清除）。
• 知识库：复活并统一到 $DSH_HOME/redteam/knowledge.db；演练台新增独立「知识库」入口，支持从 ExploitDB（GitLab 官方）与本地 nuclei 模板一键导入（实测 46,709 条，幂等）。
• 入口：左侧菜单「破甲控制台」走宿主官方 ctx.layout.selectPanel(null)——弹浮窗并保持对话视图；对话 tab 行入口仅红队模式显示。
• 演练台 UI：面板命名与副标、tab 图标化、空态三步引导、dock 页签胶囊化；演练台 tab 排移除知识库（避免与独立入口重复）。
• 拒绝重试：吸收 Community 1.6.84 的 refusal-retry 三件套（llm/stream 挂载，默认关闭，tuning.json 开启）。
• 多客户端：multi-client/ 并入 WorkBuddy / ZCode 插件包（自包含，独立安装）。
• 技能库：并入 yaklang hack-skills（103 攻击 playbook）与 yak-skills（12 引擎技能）。
• 规范修正：uiConversation.events.register 纳入 ctx.effect 生命周期（DSH 插件指南 2.4）。
• 更新源：全部指向本仓库 ZiDuNet/dsh-purge。

English

• 1.1.94 (maintenance line on top of upstream 1.1.93).
• Removed the red-team background-image feature entirely.
• Knowledge base revived at $DSH_HOME/redteam/knowledge.db, standalone dock tab, one-click import from ExploitDB (GitLab) and local nuclei templates (46,709 entries verified, idempotent).
• Sidebar entry uses the host's official ctx.layout.selectPanel(null): opens the dock and keeps the conversation view.
• Drill UI polish; knowledge base removed from the drill tab row to avoid duplication.
• Absorbed Community 1.6.84 refusal-retry (opt-in via tuning.json).
• Absorbed WorkBuddy / ZCode plugin packs under multi-client/.
• Absorbed yaklang hack-skills (103 playbooks) and yak-skills (12 engine skills).
• Lifecycle fix: uiConversation.events.register now registered through ctx.effect.
• Update sources point to this repository.

中文

• 版本 1.1.93。
• 适配 DSH 0.2.2-rc.1。宿主这一版动了执行与审批的主干：
  • 工具执行器拆成 dsh-tool-executor-native / dsh-tool-executor-ptc，run_code 与 PTC SDK 从 dsh-tools 迁出。
  • 审批服务新增 session-projection 依赖与 approvalState projection，ASK_SENTENCE 改为 Approval prompts are enabled in this session: ...。
  • dsh-base 里 fs-observation-policy 默认 disabled: true，并新增 applyPatch 开关。
  • sandbox 的 workspace-write 开始接受显式额外根目录。
  • agent-instructions 改为用户全局链 / 项目链分别计预算。
  • 新增 apply_patch 工具，默认关闭。
• 修复 9 条漂移的补丁 pattern：执行器拆分、run_code / PTC SDK 迁出、审批 projection、fs-observation-policy / applyPatch 开关、workspace-write 额外根目录、agent-instructions 预算链各自挪动了锚点，共 9 条 pattern 在 rc.1 上落空。本版按新宿主代码逐条重对齐，命中、注入、回滚整条链路在 0.2.2-rc.1 上走通。
• 随宿主变化更新的补丁匹配：#14 / #17 / #54 / #60 / #62 / #67 / #74 / #82 / #40。旧 pattern 一律保留、新 pattern 追加，不覆盖旧版；rc.5 / rc.2 分支照旧生效。
• 兼容范围：0.2.2-rc.1、0.2.1-rc.5、0.2.1-rc.2 同时在列。rc.5 与 rc.2 仍然可用，不用降宿主，也不用换插件版本。三份 README 的版本号与适配范围同步到 1.1.93，并删掉「不支持 0.2.1-rc.3 及更新」的旧表述。

English

• 1.1.93.
• DSH 0.2.2-rc.1 support. This host release moved the execution and approval spine:
  • The tool executor split into dsh-tool-executor-native / dsh-tool-executor-ptc, and run_code plus the PTC SDK moved out of dsh-tools.
  • The approval service gained a session-projection dependency and an approvalState projection; ASK_SENTENCE is now Approval prompts are enabled in this session: ....
  • fs-observation-policy now defaults to disabled: true in dsh-base, which also gained an applyPatch switch.
  • Sandbox workspace-write accepts explicit extra roots.
  • agent-instructions now budgets the user-global chain and the project chain separately.
  • New apply_patch tool, off by default.
• 9 drifted patch patterns repaired: the executor split, the run_code / PTC SDK move, the approval projection, fs-observation-policy / applyPatch, the extra workspace-write roots and the split agent-instructions budget each shifted anchors, so 9 patterns missed on rc.1. This release re-aligns every one of them against the new host code; match, inject and revert run end to end on 0.2.2-rc.1.
• Patch matches updated for the host change: #14 / #17 / #54 / #60 / #62 / #67 / #74 / #82 / #40. Old patterns are kept and new ones appended, never overwritten; the rc.5 / rc.2 branches behave as before.
• Supported hosts: 0.2.2-rc.1, 0.2.1-rc.5 and 0.2.1-rc.2 all in the list. rc.5 and rc.2 keep working — no host downgrade, no plugin swap. All three READMEs move to 1.1.93 and drop the old "0.2.1-rc.3 and newer RCs are not supported" wording.

1.1.92

中文

• 版本 1.1.92。
• 随包技能库并入开源版：skills/redteam/*.md 共 23 条红队技能随包发布（主动扫描、内网 fscan/gogo、隧道、横向、Web 指纹、nuclei、Webshell、反弹 Shell 等）。来源为上游 dsh-purge 项目，经 mmparko/dsh-purge 镜像取回，已原样并入并在 NOTICE 注明出处。
• 打包范围：package.json 的 files 增加 skills，npm 包与 Release 压缩包均包含；插件启动时仍按原逻辑把包内技能同步到 $DSH_HOME/redteam/skills，宿主技能目录 $DSH_HOME/skills 优先。
• 知识库说明：POC/EXP 知识库不是随包文件，而是运行时生成的本地数据库，条目来自本机 nuclei 模板与手工录入；相关代码（lib/redteam/store-core.js、ui.js、tools.js）一直在仓库里，本次无需迁移。
• 文档：三份 README 的目录结构与运行时目录同步补上 skills/；边界说明写明开源版包含付费版的全部功能与内容。

English

• 1.1.92.
• Bundled skills are now part of the open-source build: 23 red-team skills ship under skills/redteam/*.md (active scanning, intranet fscan/gogo, tunneling, lateral movement, web fingerprinting, nuclei, webshell, reverse shells and more). They come from the upstream dsh-purge project, retrieved via the mmparko/dsh-purge mirror, copied unchanged, and credited in NOTICE.
• Packaging: package.json files now lists skills, so both the npm package and the release archive include it. On startup the plugin still syncs the bundled skills into $DSH_HOME/redteam/skills, with the host skill directory $DSH_HOME/skills taking priority.
• Knowledge base note: the POC/EXP knowledge base is not a shipped file. It is a local database built at runtime from the machine's nuclei templates and manual entries; the code (lib/redteam/store-core.js, ui.js, tools.js) has always been in the repository, so nothing needed to move.
• Docs: all three READMEs now list skills/ in the directory structure and runtime paths; the boundaries section states that the open-source build includes everything in the paid build.

1.1.91

中文

• 版本 1.1.91。
• #220 宿主版本声明对齐 rc.5：package.json 的 dshTarget 改为 0.2.1-rc.5，dshTargets 同时保留 0.2.1-rc.5 与 0.2.1-rc.2。状态页读主字段，不再把跑在 rc.5 上的宿主报成「未适配」；rc.2 仍然在兼容列表里。
• #213 应用 / 还原后 dsh 丢失可执行位：writeHostFileAtomic() 在 rename 前先读目标原 mode 并 chmod 到临时文件，POSIX 下 bin.js 的 0755 原样保留；没有 rename 的抽象 fs 改为原地写并清理临时文件。WSL ext4 实测：apply → revert → apply → revert 四次，mode 始终 755，dsh 可直接执行。
• #211 回退按钮浮在设置页最上层：place() 增加前台判定，锚点断开、checkVisibility() 为假、落在 inert / aria-hidden 里、或被 [role="dialog"][aria-modal="true"] 遮住时隐藏按钮并归还 composer 的 padding-left；宿主 z-index 从 2147482500 降到 900，菜单降到 950，稳定处在页面内容之上、宿主模态（1000）之下。Chrome 实测覆盖模态、遮挡、opacity、inert、断开锚点与层叠比较。
• #209 pnpm 12 反复要求构建审批：rewritePnpmAllowBuilds() 按 profile 里的 pnpm 大版本决定策略——pnpm 12+（或版本判断不出）保留用户写下的来源键（dsh-purge@git+https://… / @https://…），只去重；pnpm 11 仍按 #185 清掉来源键，避免 ERR_PNPM_INVALID_VERSION_UNION。裸包名照旧补齐。真实 pnpm 11 / 12 配置与真实 profile 均验证。
• 渗透范围：禁止对中国大陆、香港、澳门，银行与金融站点，政府与军事站点发起渗透、攻击或扫描；本地演练限定在本机回环与 RFC1918 私网。游戏外挂、内存修改、注入与反作弊绕过不再拦截，提示词与会话门禁同步放开。
• 验证：范围判定 24 项用例全过；#209/#211/#213 单测与真实环境测试全过；client.js 与改动模块语法检查通过。

English

• 1.1.91.
• #220 host target aligned with rc.5: dshTarget is now 0.2.1-rc.5, with 0.2.1-rc.5 and 0.2.1-rc.2 both kept in dshTargets. The status page reads the primary field, so a host on rc.5 is no longer reported as unsupported; rc.2 stays compatible.
• #213 dsh lost its executable bit after apply/revert: writeHostFileAtomic() now reads the target's existing mode and applies it to the temp file before rename, so bin.js keeps 0755 on POSIX; filesystems without rename fall back to an in-place write and clean up the temp file. WSL ext4 test: apply → revert → apply → revert keeps the mode at 755 and dsh stays executable.
• #211 the undo button floated above settings: place() now checks whether the session surface is actually visible and hides the button (releasing the composer's padding-left) when the anchor is detached, fails checkVisibility(), sits under inert / aria-hidden, or is covered by [role="dialog"][aria-modal="true"]. The host z-index drops from 2147482500 to 900 and the menu to 950, staying above page content and below the host modal (1000). Chrome tests cover modals, occlusion, opacity, inert, detached anchors and stacking.
• #209 pnpm 12 kept asking for build approval: rewritePnpmAllowBuilds() now decides by the profile's pnpm major version. On pnpm 12+ (or when the version cannot be read) it preserves user-written source keys (dsh-purge@git+https://…, @https://…) and only deduplicates them; on pnpm 11 it still removes them per #185 to avoid ERR_PNPM_INVALID_VERSION_UNION. The bare package name is still ensured. Verified against real pnpm 11/12 configs and a real profile.
• Pentest scope: penetration, attack, or scanning against mainland China, Hong Kong and Macau, banks and financial sites, government and military sites is prohibited; local drills are limited to loopback and RFC1918 private addresses. Game cheats, memory editing, injection and anti-cheat bypass are no longer blocked, in both the prompt layer and the session gate.
• Verification: all 24 scope cases pass; unit and real-environment tests for #209/#211/#213 pass; syntax checks pass for client.js and the changed modules.

1.1.90

中文

• 版本 1.1.90。
• #208 Android 切后台回来输入框整块消失：撤销按钮原先注册在宿主的 conversation.input.right 槽位，这个槽位渲染在 composer 的 React 子树里。宿主在提交阶段只要抛一次错，React 会把整棵树卸载，症状就是输入框连带按钮一起没了。
  • 撤销按钮不再走任何槽位。改为在 body 上挂一个 position: fixed 的宿主节点，用 createPortal 把按钮传进去，渲染树完全脱离 composer；composer 内部再出错也牵连不到它。
  • 位置按最靠下的那组 .standardControls（就是 composer 底部工具条）的矩形实时对齐，并给它留 padding-left 空位，不遮住模型选择器；预留宽度跟着按钮实测宽度走。
  • 会话切换、窗口尺寸变化、页面滚动都会重新对齐；没有会话时按钮不显示、留白也一起归还。
  • 锚点查找带缓存和节流，只在锚点缺失或掉线时才扫一次 DOM，长会话滚动不受影响。
• 验证：client.js 语法检查通过；conversation.input.right 在本插件中已无任何注册点；双宿主 standardControls 类...