·
0 commits
to 764e482ea896ceab4e9183b6f083644482e5e4d5
since this release
LocalWhale v0.1.3 — Harness rc.7 update fix / 修复 Harness rc.7 更新
Release date / 发布日期:2026-08-18
LocalWhale 0.1.3 fixes the staged Harness update pipeline so the official DeepSeek Harness 0.1.0-rc.7 can be installed through the in-app updater. The bundled initial runtime remains DeepSeek Harness 0.1.0-rc.6, Node.js 24.18.1, and pnpm 11.7.0.
LocalWhale 0.1.3 修复了带暂存校验的 Harness 更新管线,使官方 DeepSeek Harness 0.1.0-rc.7 可以通过应用内更新完成安装。随包初始运行时仍为 DeepSeek Harness 0.1.0-rc.6、Node.js 24.18.1 与 pnpm 11.7.0。
Fixed / 修复
- Updating to Harness
0.1.0-rc.7failed withCandidate runtime contains unapproved lifecycle scriptsand surfaced as an incompatible update. The rc.7 dependency tree lifts@deepseek-ai/dsh-subprocess-localto0.1.0-rc.7andnode-ptyto1.2.0-beta.15; the supply-chain allowlist pins package name, exact version, script name, and script-body SHA-256, so the three unchanged scripts were rejected on version alone. - 更新到 Harness
0.1.0-rc.7时报Candidate runtime contains unapproved lifecycle scripts,表现为“更新不兼容”。rc.7 依赖树将@deepseek-ai/dsh-subprocess-local升到0.1.0-rc.7、node-pty升到1.2.0-beta.15;供应链白名单按包名 + 精确版本 + 脚本名 + 脚本体 SHA-256 四元组匹配,三个内容未变的脚本仅因版本号被拒。 - The allowlist now also approves the rc.7 entries (
dsh-subprocess-local@0.1.0-rc.7:postinstall,node-pty@1.2.0-beta.15:install/postinstall) after verifying against the published npm tarballs that all three script bodies are byte-identical to the already-approved rc.6 entries. The rc.6 rows are retained for rollback. - 白名单现同时批准 rc.7 条目(
dsh-subprocess-local@0.1.0-rc.7:postinstall、node-pty@1.2.0-beta.15:install/postinstall);批准前已对照 npm 发布的 tarball 验证三个脚本体与已批准的 rc.6 条目逐字节一致。rc.6 行保留以便回滚。 - The staged-update browser smoke then crashed with
COMException 0x8001010E(RPC_E_WRONG_THREAD): the installer pipeline runs on thread-pool continuations while the WinUIWebView2validation control may only be created on the UI thread. The validation is now marshalled to the UI dispatcher, so the in-app Harness update completes instead of failing at the final check. - 随后的浏览器冒烟又以
COMException 0x8001010E(RPC_E_WRONG_THREAD)崩溃:更新管线在线程池续体上运行,而 WinUIWebView2验证控件只允许在 UI 线程创建。现在验证会封送到 UI 调度器执行,应用内 Harness 更新可以完整走完,不再在最后一关失败。 - Harness update failures are no longer all labeled "incompatible": the update card now reports a generic failure with the underlying error, since most staging failures are not compatibility verdicts.
- Harness 更新失败不再一律显示「不兼容」:更新卡片现在按真实错误报告通用失败,多数暂存失败并不是兼容性判定。
- Applying a validated runtime then crashed the shell with
ArgumentException: WebView2 was already initialized with a different CoreWebView2Environment. The candidate smoke introduces a second WebView2 environment identity into the process, so re-initializing the already-initialized main control threw; the shell recovered only after a full restart. The main control is now initialized exactly once, and harness restarts/switches only navigate it to the new runtime URI. - 应用已验证的运行时后,壳层又以
ArgumentException: WebView2 was already initialized with a different CoreWebView2Environment崩溃:候选冒烟向进程引入了第二个 WebView2 environment 身份,对已初始化的主控件重复初始化即抛异常,此前只能靠整窗重启恢复。现在主控件只初始化一次,Harness 重启/切换只导航到新运行时地址。
Upgrade safety / 升级安全
- Nothing changes for existing installs except the allowlist: settings, staged updates,
%USERPROFILE%\.dsh, and the official Harness WebUI remain untouched. - 除白名单外不改变任何既有行为:设置、暂存更新、
%USERPROFILE%\.dsh与官方 Harness WebUI 均不受影响。 - The allowlist still matches script bodies byte-for-byte; any future Harness release that edits a lifecycle script (not just bumps a version) keeps being rejected until reviewed.
- 白名单仍按脚本体逐字节匹配;今后任何修改了脚本文本(而非仅升版本号)的 Harness 版本仍会被拒绝,直至人工复审。
node-ptymoves from1.1.0to1.2.0-beta.15inside the rc.7 runtime. The allowlist reviews script text only, not native payload changes — this is the documented boundary of the policy.- rc.7 运行时内部
node-pty由1.1.0升至1.2.0-beta.15。白名单只审脚本文本、不审原生负载变更——这是该策略的既有边界。
Known limits / 已知限制
- Windows 11 x64 only; no Windows 10, ARM64, Store, or cross-platform package.
- 仅支持 Windows 11 x64;不提供 Windows 10、ARM64、Microsoft Store 或跨平台版本。
- The installer remains unsigned and can show an unknown-publisher warning.
- 安装器仍未签名,Windows 可能显示“未知发布者”警告。
Release artifact / 发布产物
- Installer / 安装器:
LocalWhale-Setup-x64.exe - SHA-256:
3C3911DB9EADFE3EA05778C25604B6A4D128A0BF4D03D68284E14075B1746DBE - The installer is unsigned. Verify the hash after downloading it from this repository's Releases page.
- 安装器尚未签名;请从本仓库 Releases 页面下载后核对上述哈希。