Skip to content

LocalWhale v0.1.3

Latest

Choose a tag to compare

@penglai-doll penglai-doll released this 18 Aug 02:01
· 0 commits to 764e482ea896ceab4e9183b6f083644482e5e4d5 since this release

LocalWhale v0.1.3 — Harness rc.7 update fix / 修复 Harness rc.7 更新

Release date / 发布日期:2026-08-18

LocalWhale 0.1.3 fixes the staged Harness update pipeline so the official DeepSeek Harness 0.1.0-rc.7 can be installed through the in-app updater. The bundled initial runtime remains DeepSeek Harness 0.1.0-rc.6, Node.js 24.18.1, and pnpm 11.7.0.

LocalWhale 0.1.3 修复了带暂存校验的 Harness 更新管线,使官方 DeepSeek Harness 0.1.0-rc.7 可以通过应用内更新完成安装。随包初始运行时仍为 DeepSeek Harness 0.1.0-rc.6、Node.js 24.18.1 与 pnpm 11.7.0

Fixed / 修复

  • Updating to Harness 0.1.0-rc.7 failed with Candidate runtime contains unapproved lifecycle scripts and surfaced as an incompatible update. The rc.7 dependency tree lifts @deepseek-ai/dsh-subprocess-local to 0.1.0-rc.7 and node-pty to 1.2.0-beta.15; the supply-chain allowlist pins package name, exact version, script name, and script-body SHA-256, so the three unchanged scripts were rejected on version alone.
  • 更新到 Harness 0.1.0-rc.7 时报 Candidate runtime contains unapproved lifecycle scripts,表现为“更新不兼容”。rc.7 依赖树将 @deepseek-ai/dsh-subprocess-local 升到 0.1.0-rc.7node-pty 升到 1.2.0-beta.15;供应链白名单按包名 + 精确版本 + 脚本名 + 脚本体 SHA-256 四元组匹配,三个内容未变的脚本仅因版本号被拒。
  • The allowlist now also approves the rc.7 entries (dsh-subprocess-local@0.1.0-rc.7:postinstall, node-pty@1.2.0-beta.15:install/postinstall) after verifying against the published npm tarballs that all three script bodies are byte-identical to the already-approved rc.6 entries. The rc.6 rows are retained for rollback.
  • 白名单现同时批准 rc.7 条目(dsh-subprocess-local@0.1.0-rc.7:postinstallnode-pty@1.2.0-beta.15:install/postinstall);批准前已对照 npm 发布的 tarball 验证三个脚本体与已批准的 rc.6 条目逐字节一致。rc.6 行保留以便回滚。
  • The staged-update browser smoke then crashed with COMException 0x8001010E (RPC_E_WRONG_THREAD): the installer pipeline runs on thread-pool continuations while the WinUI WebView2 validation control may only be created on the UI thread. The validation is now marshalled to the UI dispatcher, so the in-app Harness update completes instead of failing at the final check.
  • 随后的浏览器冒烟又以 COMException 0x8001010ERPC_E_WRONG_THREAD)崩溃:更新管线在线程池续体上运行,而 WinUI WebView2 验证控件只允许在 UI 线程创建。现在验证会封送到 UI 调度器执行,应用内 Harness 更新可以完整走完,不再在最后一关失败。
  • Harness update failures are no longer all labeled "incompatible": the update card now reports a generic failure with the underlying error, since most staging failures are not compatibility verdicts.
  • Harness 更新失败不再一律显示「不兼容」:更新卡片现在按真实错误报告通用失败,多数暂存失败并不是兼容性判定。
  • Applying a validated runtime then crashed the shell with ArgumentException: WebView2 was already initialized with a different CoreWebView2Environment. The candidate smoke introduces a second WebView2 environment identity into the process, so re-initializing the already-initialized main control threw; the shell recovered only after a full restart. The main control is now initialized exactly once, and harness restarts/switches only navigate it to the new runtime URI.
  • 应用已验证的运行时后,壳层又以 ArgumentException: WebView2 was already initialized with a different CoreWebView2Environment 崩溃:候选冒烟向进程引入了第二个 WebView2 environment 身份,对已初始化的主控件重复初始化即抛异常,此前只能靠整窗重启恢复。现在主控件只初始化一次,Harness 重启/切换只导航到新运行时地址。

Upgrade safety / 升级安全

  • Nothing changes for existing installs except the allowlist: settings, staged updates, %USERPROFILE%\.dsh, and the official Harness WebUI remain untouched.
  • 除白名单外不改变任何既有行为:设置、暂存更新、%USERPROFILE%\.dsh 与官方 Harness WebUI 均不受影响。
  • The allowlist still matches script bodies byte-for-byte; any future Harness release that edits a lifecycle script (not just bumps a version) keeps being rejected until reviewed.
  • 白名单仍按脚本体逐字节匹配;今后任何修改了脚本文本(而非仅升版本号)的 Harness 版本仍会被拒绝,直至人工复审。
  • node-pty moves from 1.1.0 to 1.2.0-beta.15 inside the rc.7 runtime. The allowlist reviews script text only, not native payload changes — this is the documented boundary of the policy.
  • rc.7 运行时内部 node-pty1.1.0 升至 1.2.0-beta.15。白名单只审脚本文本、不审原生负载变更——这是该策略的既有边界。

Known limits / 已知限制

  • Windows 11 x64 only; no Windows 10, ARM64, Store, or cross-platform package.
  • 仅支持 Windows 11 x64;不提供 Windows 10、ARM64、Microsoft Store 或跨平台版本。
  • The installer remains unsigned and can show an unknown-publisher warning.
  • 安装器仍未签名,Windows 可能显示“未知发布者”警告。

Release artifact / 发布产物

  • Installer / 安装器:LocalWhale-Setup-x64.exe
  • SHA-256:3C3911DB9EADFE3EA05778C25604B6A4D128A0BF4D03D68284E14075B1746DBE
  • The installer is unsigned. Verify the hash after downloading it from this repository's Releases page.
  • 安装器尚未签名;请从本仓库 Releases 页面下载后核对上述哈希。