v0.3.0

DSH Forge v0.3.0

中文

DSH Forge v0.3.0 将官方发行组合升级到 DSH 0.1.2-alpha.4 与 Cordis 4.0.2：窗口必须加载 Host 签发的带 token loopback URL，官方 agent preset 改从独立包注入，旧会话投影缓存和死进程 credentials 锁不再阻断启动。

本版本包含

• 固定 runtime 组合升级为 DSH 0.1.2-alpha.4、Cordis 4.0.2；dsh-forge-official 与 developer 两个 profile、工具链 RUNTIME_MATRIX 和根锁文件同步到同一精确版本。
• 官方外部 bundle 升级为 dsh-better-sidebar@0.18.0-alpha.0 与 dsh-dream-skin@8.30.1，catalog 同步版本、integrity、依赖摘要和 2026-09-02 的 darwin-arm64 审核事实。sidebar 不使用 npm latest 0.17.1，因为该版本无法加载当前 Host。
• 官方 agent preset 从 @deepseek-ai/dsh-agent-presets 的 presets/ 注入；启动器不再读取 @deepseek-ai/dsh/config/agent-presets。缺少该包或 standard 组合文件时，Host 启动前失败。
• 窗口只加载 Host connection.authenticatedUrl() 返回的当前 loopback 根 URL，且必须带且仅带一个非空 token。无 token 的 http://127.0.0.1:<port>/ 会被上游鉴权成 401，启动器拒绝离开当前 origin、缺少 token 或无效 URL。
• Host boot 前把 DSH_HOME 对齐到本次 generation 的 Home。检测到仍被存活进程持有的 .credentials.yaml.lock 时立即以 DSH_HOME_BUSY 失败，不删除活锁；死进程锁和对应临时文件会在 boot 前清理。
• 0.1.2 的 session_projcache 新增 identity 字段后，旧缓存会使 Host 无法加载。启动器在该 schema 失败时把 storages/session_projcache 移出运行路径并重试一次；会话正文仍在 sessions/，缓存可从日志重建。
• 文档站与根 README 重写项目定位、安装路径和核心分层说明，并增加中英文总览图。仓库新增 dsh-forge-add-plugin skill，以及 GitHub star-history 工作流（浅色/深色 SVG）。

升级与安全边界

• 本版本绑定的是 DSH 预发布 0.1.2-alpha.4，不是把 npm latest（仍指向 0.1.1-rc.2）写成当前发行事实。
• 当前发行包仍不提供页面端插件市场、在线下载或运行时安装。dsh-better-sidebar 的“添加插件”只复制安装命令并打开仓库链接，不改变该边界。
• catalog 的 verifiedOn 只记录本次实际验证的 darwin-arm64。未覆盖 darwin-x64、Windows 和 Linux，不得视为已通过。
• Electron 43.4.0、pnpm 11.7.0 和 Node 引擎要求未变。插件执行模式仍是 trusted-in-process。
• 窗口仍只允许当前 generation 的 loopback authority；token 只用于加载鉴权根 URL，页面不会因此获得安装包路径、helper 命令或升级重启 token。

感谢所有参与 DSH 0.1.2-alpha.4 适配与文档整理的贡献者。

English

DSH Forge v0.3.0 upgrades the official distribution to DSH 0.1.2-alpha.4 and Cordis 4.0.2. The window must load a Host-issued loopback URL with a token, official agent presets come from a dedicated package, and stale session projection caches or dead credential locks no longer block startup.

What's included

• The pinned runtime set is now DSH 0.1.2-alpha.4 and Cordis 4.0.2. Both dsh-forge-official and developer profiles, the toolchain RUNTIME_MATRIX, and the root lockfile move to the same exact versions.
• Official external bundles are now dsh-better-sidebar@0.18.0-alpha.0 and dsh-dream-skin@8.30.1. Catalog records version, integrity, dependency summaries, and the 2026-09-02 darwin-arm64 audit facts. Sidebar does not use npm latest 0.17.1, which cannot load the current Host.
• Official agent presets are injected from @deepseek-ai/dsh-agent-presets presets/. The launcher no longer reads @deepseek-ai/dsh/config/agent-presets. Missing that package or the standard composition fails before Host start.
• The window loads only the current loopback root URL from Host connection.authenticatedUrl(), which must include exactly one non-empty token. Unauthenticated http://127.0.0.1:<port>/ is rejected by upstream as 401. The launcher rejects URLs that leave the current origin, omit the token, or are invalid.
• Host boot aligns DSH_HOME with this generation’s Home. A .credentials.yaml.lock still held by a live process fails immediately with DSH_HOME_BUSY and is not deleted. Dead-process locks and matching temp files are cleaned before boot.
• 0.1.2 adds identity fields to session_projcache; an old cache prevents Host load. On that schema failure the launcher moves storages/session_projcache off the runtime path and retries once. Session bodies remain in sessions/; the cache can be rebuilt from logs.
• Root README and the docs site rewrite project positioning, install paths, and layering, with new Chinese and English overview images. The repo adds the dsh-forge-add-plugin skill and a GitHub star-history workflow (light/dark SVG).

Upgrade and security boundaries

• This release pins DSH prerelease 0.1.2-alpha.4. npm latest still points at 0.1.1-rc.2 and is not the current distribution fact.
• Packaged apps still have no in-page plugin marketplace, online download, or runtime install. dsh-better-sidebar “add plugin” only copies an install command and opens the repository link; it does not change that boundary.
• Catalog verifiedOn records only the platform actually verified this time: darwin-arm64. darwin-x64, Windows, and Linux were not covered and must not be treated as passed.
• Electron 43.4.0, pnpm 11.7.0, and the Node engine requirement are unchanged. Plugin execution remains trusted-in-process.
• The window still allows only the current generation’s loopback authority. The token is used only to load the authenticated root URL; the page still does not receive package paths, helper commands, or upgrade restart tokens.

Thank you to everyone who contributed to the DSH 0.1.2-alpha.4 adaptation and documentation updates.

v0.2.6

DSH Forge v0.2.5

中文

DSH Forge v0.2.5 提升了完整安装包 OTA 的下载可观测性与跨平台重启可靠性：设置页现在显示下载进度，升级流程只有在新 generation 完整就绪并提交回执后才算成功。

本版本包含

• “升级管理”页面在完整包下载期间显示进度条和已下载量；响应提供有效 Content-Length 时显示百分比，否则显示不确定进度，不伪造百分比。
• 升级状态 Remote 新增 downloading 阶段和 download 快照（receivedBytes、totalBytes、percent），页面仍不会接触安装包 URL、暂存路径、helper 命令或重启 token。
• 下载器会拒绝无法安全表示的响应长度，并在长度未知时继续报告已接收字节；取消、generation 关闭、下载失败或长度不匹配时会清理暂存文件。
• Windows 使用受控暂存 cmd.exe runner 等待 Electron 退出，再运行 NSIS 并显式启动更新后的应用，避免安装器替换时占用旧进程；打包配置同时关闭 NSIS 完成后的自动启动。
• macOS 和 Ubuntu helper 会启动替换后的应用并等待随机 token 回执。只有新应用完成 Host、loopback、窗口和 renderer 就绪后写入回执，升级才算成功；缺少回执时保留安装包供诊断，并恢复已替换的 macOS 或 Ubuntu 应用。
• macOS 在收到有效回执后才执行 DMG 卸载、备份删除和暂存清理，清理失败不会把已完成的重启误报为失败；Windows 新应用也会在回执后最佳努力清理暂存文件。

升级与安全边界

• 升级仍是用户确认后执行的完整安装包升级；确认前不会下载，不支持静默下载或后台自动安装。
• 下载进度只投影受控的字节数和百分比，不暴露 URL、路径、命令或 token；无效 Content-Length 不会进入进度投影。
• 本 OTA 通道仍不校验发布清单或完整安装包的摘要、签名和信任根，不能视为通用可信更新通道。

感谢所有参与升级体验与 macOS OTA 可靠性改进的贡献者。

English

DSH Forge v0.2.5 improves download observability and cross-platform restart reliability for full-package OTA: Settings now shows download progress, and an upgrade succeeds only after the new generation is fully ready and submits a receipt.

What's included

• The “Upgrade management” page shows a progress bar and received bytes while the full package is downloading. A valid Content-Length produces a percentage; without one, the bar is indeterminate and no percentage is invented.
• The upgrade Remote adds a downloading phase and a download snapshot (receivedBytes, totalBytes, and percent). The page still receives no package URL, staging path, helper command, or restart token.
• The downloader rejects response lengths that cannot be represented safely and continues to report received bytes when the length is unknown. Cancellation, generation closure, download failure, and length mismatches clean up staged files.
• Windows uses a controlled staging cmd.exe runner that waits for Electron to exit, runs NSIS, and explicitly starts the updated application so the old process does not hold the executable during replacement. Packaging also disables NSIS automatic launch after completion.
• The macOS and Ubuntu helpers start the replaced application and wait for a random-token receipt. The upgrade succeeds only after the new application completes Host, loopback, window, and renderer readiness and writes the receipt; if it is missing, the package is retained for diagnosis and any replaced macOS or Ubuntu application is restored.
• macOS performs DMG detachment, backup removal, and staging cleanup only after a valid receipt; cleanup failures cannot turn a completed restart into an install failure. The new Windows application also performs best-effort staging cleanup after its receipt.

Upgrade and security boundaries

• Upgrades remain user-confirmed full-package upgrades; nothing downloads before confirmation, and silent downloads or background installation are not supported.
• Download progress projects only controlled byte counts and percentages; it does not expose the URL, path, command, or token, and invalid Content-Length values never enter the projection.
• This OTA channel still performs no digest, signature, or trust-root verification for Release manifests or full packages and must not be treated as a generally trusted update channel.

Thank you to everyone who contributed to the upgrade experience and macOS OTA reliability improvements.

v0.2.5

DSH Forge v0.2.5

中文

DSH Forge v0.2.5 提升了完整安装包 OTA 的下载可观测性与跨平台重启可靠性：设置页现在显示下载进度，升级流程只有在新 generation 完整就绪并提交回执后才算成功。

本版本包含

• “升级管理”页面在完整包下载期间显示进度条和已下载量；响应提供有效 Content-Length 时显示百分比，否则显示不确定进度，不伪造百分比。
• 升级状态 Remote 新增 downloading 阶段和 download 快照（receivedBytes、totalBytes、percent），页面仍不会接触安装包 URL、暂存路径、helper 命令或重启 token。
• 下载器会拒绝无法安全表示的响应长度，并在长度未知时继续报告已接收字节；取消、generation 关闭、下载失败或长度不匹配时会清理暂存文件。
• Windows 使用受控暂存 cmd.exe runner 等待 Electron 退出，再运行 NSIS 并显式启动更新后的应用，避免安装器替换时占用旧进程；打包配置同时关闭 NSIS 完成后的自动启动。
• macOS 和 Ubuntu helper 会启动替换后的应用并等待随机 token 回执。只有新应用完成 Host、loopback、窗口和 renderer 就绪后写入回执，升级才算成功；缺少回执时保留安装包供诊断，并恢复已替换的 macOS 或 Ubuntu 应用。
• macOS 在收到有效回执后才执行 DMG 卸载、备份删除和暂存清理，清理失败不会把已完成的重启误报为失败；Windows 新应用也会在回执后最佳努力清理暂存文件。

升级与安全边界

• 升级仍是用户确认后执行的完整安装包升级；确认前不会下载，不支持静默下载或后台自动安装。
• 下载进度只投影受控的字节数和百分比，不暴露 URL、路径、命令或 token；无效 Content-Length 不会进入进度投影。
• 本 OTA 通道仍不校验发布清单或完整安装包的摘要、签名和信任根，不能视为通用可信更新通道。

感谢所有参与升级体验与 macOS OTA 可靠性改进的贡献者。

English

DSH Forge v0.2.5 improves download observability and cross-platform restart reliability for full-package OTA: Settings now shows download progress, and an upgrade succeeds only after the new generation is fully ready and submits a receipt.

What's included

• The “Upgrade management” page shows a progress bar and received bytes while the full package is downloading. A valid Content-Length produces a percentage; without one, the bar is indeterminate and no percentage is invented.
• The upgrade Remote adds a downloading phase and a download snapshot (receivedBytes, totalBytes, and percent). The page still receives no package URL, staging path, helper command, or restart token.
• The downloader rejects response lengths that cannot be represented safely and continues to report received bytes when the length is unknown. Cancellation, generation closure, download failure, and length mismatches clean up staged files.
• Windows uses a controlled staging cmd.exe runner that waits for Electron to exit, runs NSIS, and explicitly starts the updated application so the old process does not hold the executable during replacement. Packaging also disables NSIS automatic launch after completion.
• The macOS and Ubuntu helpers start the replaced application and wait for a random-token receipt. The upgrade succeeds only after the new application completes Host, loopback, window, and renderer readiness and writes the receipt; if it is missing, the package is retained for diagnosis and any replaced macOS or Ubuntu application is restored.
• macOS performs DMG detachment, backup removal, and staging cleanup only after a valid receipt; cleanup failures cannot turn a completed restart into an install failure. The new Windows application also performs best-effort staging cleanup after its receipt.

Upgrade and security boundaries

• Upgrades remain user-confirmed full-package upgrades; nothing downloads before confirmation, and silent downloads or background installation are not supported.
• Download progress projects only controlled byte counts and percentages; it does not expose the URL, path, command, or token, and invalid Content-Length values never enter the projection.
• This OTA channel still performs no digest, signature, or trust-root verification for Release manifests or full packages and must not be treated as a generally trusted update channel.

Thank you to everyone who contributed to the upgrade experience and macOS OTA reliability improvements.

v0.2.4

DSH Forge v0.2.3

中文

DSH Forge v0.2.3 优化了可用升级的发现体验，并加强 macOS 完整安装包 OTA 的替换前校验与失败保护。

本版本包含

• generation 就绪后的静默更新检查发现可用版本时，设置入口会显示非阻塞的橙色“发现新版本”提示，不会中断当前会话。
• 打开设置面板后，“升级管理”导航项会同步显示提示，并采用独立的更新/刷新图标，方便定位升级入口。
• 提示仅引导用户进入“升级管理”页面；不会自动打开设置、弹出确认、下载或安装。用户点击“立即升级”后，主进程会重新检查并显示原生确认，确认前不会下载完整安装包。
• macOS 完整包 OTA 现使用 ditto 复制新的 .app，保留 Electron framework 的相对符号链接、资源叉和 ACL。
• macOS 在替换当前应用前会执行代码签名与 Gatekeeper 验证；复制或验证失败时，旧应用不会被移动，DMG 会被保留以便诊断。升级流程中的新应用启动命令失败时，会恢复旧应用并保留 DMG。

升级与安全边界

• 升级仍是用户确认后执行的完整安装包升级，不支持静默下载或后台自动安装。
• macOS 的复制与系统验证提升了替换过程的可靠性，但不会为发布清单或完整安装包增加摘要、签名或信任根校验。

感谢所有参与升级体验与 macOS OTA 可靠性改进的贡献者。

English

DSH Forge v0.2.3 improves discovery of available upgrades and strengthens pre-replacement validation and failure protection for macOS full-package OTA.

What's included

• When the silent update check after a generation becomes ready finds an available version, the Settings trigger shows a non-blocking orange “New version available” badge without interrupting the current session.
• After Settings is opened, the “Upgrade management” navigation item shows the same badge and uses a dedicated refresh/update icon, making the upgrade entry easy to find.
• The badge only guides users to the “Upgrade management” page. It does not open Settings, show confirmation, download, or install automatically. After the user selects “Upgrade now”, the main process checks again and shows native confirmation; no full package is downloaded before confirmation.
• macOS full-package OTA now uses ditto to copy the new .app, preserving relative Electron framework symlinks, resource forks, and ACLs.
• Before replacing the current macOS application, the updater verifies code signing and Gatekeeper assessment. If copying or validation fails, the existing app is not moved and the DMG is retained for diagnosis. If the new app's launch command fails during the upgrade flow, the existing app is restored and the DMG is retained.

Upgrade and security boundaries

• Upgrades remain user-confirmed full-package upgrades; silent downloads and background installation are not supported.
• The macOS copy and system validation improve replacement reliability, but do not add digest, signature, or trust-root verification for Release manifests or full packages.

Thank you to everyone who contributed to the upgrade experience and macOS OTA reliability improvements.

v0.2.3

DSH Forge v0.2.3

中文

DSH Forge v0.2.3 优化了可用升级的发现体验，并加强 macOS 完整安装包 OTA 的替换前校验与失败保护。

本版本包含

• generation 就绪后的静默更新检查发现可用版本时，设置入口会显示非阻塞的橙色“发现新版本”提示，不会中断当前会话。
• 打开设置面板后，“升级管理”导航项会同步显示提示，并采用独立的更新/刷新图标，方便定位升级入口。
• 提示仅引导用户进入“升级管理”页面；不会自动打开设置、弹出确认、下载或安装。用户点击“立即升级”后，主进程会重新检查并显示原生确认，确认前不会下载完整安装包。
• macOS 完整包 OTA 现使用 ditto 复制新的 .app，保留 Electron framework 的相对符号链接、资源叉和 ACL。
• macOS 在替换当前应用前会执行代码签名与 Gatekeeper 验证；复制或验证失败时，旧应用不会被移动，DMG 会被保留以便诊断。升级流程中的新应用启动命令失败时，会恢复旧应用并保留 DMG。

升级与安全边界

• 升级仍是用户确认后执行的完整安装包升级，不支持静默下载或后台自动安装。
• macOS 的复制与系统验证提升了替换过程的可靠性，但不会为发布清单或完整安装包增加摘要、签名或信任根校验。

感谢所有参与升级体验与 macOS OTA 可靠性改进的贡献者。

English

DSH Forge v0.2.3 improves discovery of available upgrades and strengthens pre-replacement validation and failure protection for macOS full-package OTA.

What's included

• When the silent update check after a generation becomes ready finds an available version, the Settings trigger shows a non-blocking orange “New version available” badge without interrupting the current session.
• After Settings is opened, the “Upgrade management” navigation item shows the same badge and uses a dedicated refresh/update icon, making the upgrade entry easy to find.
• The badge only guides users to the “Upgrade management” page. It does not open Settings, show confirmation, download, or install automatically. After the user selects “Upgrade now”, the main process checks again and shows native confirmation; no full package is downloaded before confirmation.
• macOS full-package OTA now uses ditto to copy the new .app, preserving relative Electron framework symlinks, resource forks, and ACLs.
• Before replacing the current macOS application, the updater verifies code signing and Gatekeeper assessment. If copying or validation fails, the existing app is not moved and the DMG is retained for diagnosis. If the new app's launch command fails during the upgrade flow, the existing app is restored and the DMG is retained.

Upgrade and security boundaries

• Upgrades remain user-confirmed full-package upgrades; silent downloads and background installation are not supported.
• The macOS copy and system validation improve replacement reliability, but do not add digest, signature, or trust-root verification for Release manifests or full packages.

Thank you to everyone who contributed to the upgrade experience and macOS OTA reliability improvements.

v0.2.1

DSH Forge V0.2.0

中文

DSH Forge V0.2.0 聚焦运行时升级、默认视觉主题、完整安装包 OTA 和可审计的 GitHub Release
发布流程，为桌面发行版提供更完整的安装、升级与验证能力。

本版本包含

• 将 DSH runtime、client UI primitives、client UI slots 和 invariants 升级至
  0.1.1-rc.2。
• 将 dsh-dream-skin@8.28.0 集成到 dsh-forge-official profile，作为默认视觉主题能力，
  并固定其 npm 来源、完整性、许可证和能力审核事实。
• 新增“设置 → 升级管理”页面，展示当前版本/build、检查状态、OTA 支持状态、可用版本和上次检查时间。
• 支持 Windows、macOS 和 Ubuntu 22.04+ AppImage 的用户确认式完整安装包 OTA；自动检查不会打断用户，
  只有用户主动确认后才会下载和执行升级。
• OTA 清单固定从本仓库 GitHub Release 的 version.json 读取，并按 SemVer 优先、build 次级比较，
  防止降级和同版本低 build 覆盖。
• Release 工作流为 Windows、macOS 和 Ubuntu 安装包生成固定资产名，并同时上传 version.json 与
  release-index.json，保证清单 URL 与当前 Release tag 对齐。
• macOS tag Release 接入 Developer ID 签名、公证和 stapling；缺少凭据或任一验证失败时不会进入 Release。
• 桌面层统一从 TypeScript 源码构建，根目录的 build、typecheck 和 lint 会先生成所需 workspace 类型出口。

安装包与限制

• macOS：universal（arm64 + x64）DMG 和 zip；tag Release 仅在签名、公证和 stapling 全部通过后发布。
• Windows：x64 NSIS 安装包和 zip；本版本不提供 Windows Authenticode 签名。
• Ubuntu：x64 AppImage；不再发布 .deb，也不支持其他 Linux 发行版或非 AppImage 启动方式。
• OTA 是用户确认后执行的完整包升级，不支持静默下载或后台自动安装。
• version.json 和完整安装包暂不包含摘要、签名或信任根校验；HTTPS、系统签名和用户确认不能替代
  通用的可审计更新信任机制。

下载文件

• macOS：dsh-forge-macos.dmg、universal zip
• Windows：dsh-forge-windows.exe、x64 zip
• Ubuntu：dsh-forge-ubuntu.AppImage
• 发布证据：version.json、release-index.json

感谢所有参与 DSH Forge runtime 升级、视觉主题集成、OTA 流程、跨平台打包和发布验证的贡献者。

English

DSH Forge V0.2.0 focuses on the DSH runtime upgrade, the default visual theme, full-package OTA, and
an auditable GitHub Release pipeline, providing a more complete desktop installation, upgrade, and
verification experience.

What's included

• Upgrades the DSH runtime, client UI primitives, client UI slots, and invariants to 0.1.1-rc.2.
• Integrates dsh-dream-skin@8.28.0 into the dsh-forge-official profile as the default visual theme,
  with its npm source, integrity, license, and capability review facts pinned.
• Adds a “Settings → Upgrade Management” page showing the current version/build, check status, OTA
  support, available version, and last check time.
• Supports user-confirmed full-package OTA for Windows, macOS, and Ubuntu 22.04+ AppImage. Automatic
  checks do not interrupt the user; packages are downloaded and installed only after explicit confirmation.
• Reads the OTA manifest from version.json in this repository's GitHub Release and compares SemVer first,
  then build, preventing downgrades and replacement by an equal-version lower build.
• Gives Windows, macOS, and Ubuntu packages stable Release asset names and uploads both version.json and
  release-index.json, keeping manifest URLs aligned with the current Release tag.
• Adds Developer ID signing, notarization, and stapling to macOS tag Releases; missing credentials or any
  failed verification prevents the Release from being published.
• Builds the desktop layer from TypeScript sources, with the root build, typecheck, and lint commands
  generating the required workspace type exports first.

Packaging status and limitations

• macOS: universal (arm64 + x64) DMG and zip; tag Releases are published only after signing, notarization,
  and stapling succeed.
• Windows: x64 NSIS installer and zip; Windows Authenticode signing is not included in this release.
• Ubuntu: x64 AppImage only; .deb packages and other Linux distributions or non-AppImage launch modes
  are not supported.
• OTA is a user-confirmed full-package upgrade; silent downloads and background installation are not supported.
• version.json and full packages do not currently include digest, signature, or trust-root verification.
  HTTPS, system signing, and user confirmation are not a general auditable update trust mechanism.

Downloads

• macOS: dsh-forge-macos.dmg, universal zip
• Windows: dsh-forge-windows.exe, x64 zip
• Ubuntu: dsh-forge-ubuntu.AppImage
• Release evidence: version.json, release-index.json

Thank you to everyone who contributed to the DSH Forge runtime upgrade, visual theme integration, OTA
workflow, cross-platform packaging, and release validation.

v0.2.0

MagicChat Desktop v1.7.1

本版本聚焦图片预览体验和桌面窗口交互，提供更明确的关闭方式，并修复预览弹窗中的窗口拖拽问题。

图片预览体验

• 新增图片预览右上角关闭按钮，支持通过键盘和读屏工具识别的无障碍名称关闭预览。
• 图片未缩放时，点击图片周围的视觉留白即可关闭预览；点击图片本身不会误关闭。
• 图片放大后继续保留拖拽查看行为，点击操作不会影响缩放和边界限制。

桌面交互与稳定性

• 修复图片预览弹窗的遮罩和内容区域被识别为窗口拖拽区域的问题，确保弹窗内的点击、拖拽和按钮操作正常。
• 补充图片预览关闭行为、缩放交互和桌面拖拽区域的自动化测试。
• 新增图片预览关闭按钮的中英文界面文案，保持多语言体验一致。

v0.1.0

DSH Forge v0.1.0

中文

DSH Forge v0.1.0 是首个官方桌面发行版，提供固定 profile 的 Electron 应用和跨平台构建发布流水线。

本版本包含

• 支持 macOS universal，包含 arm64 和 x64 架构。
• 支持 Windows x64，提供 NSIS 安装包和 zip 归档。
• 支持 Ubuntu 22.04 及以上 LTS 的 Linux x64，提供 AppImage 和 deb 包。
• 安装包在构建期固定 dsh-forge-official profile，运行时不提供 profile 切换。
• GitHub Actions 使用原生 runner 执行打包、package inspection、真实安装包 smoke 和
  native verification，并通过 summary 校验三个平台的版本、profile 和 inputDigest 一致性。
• Release 附带 release-index.json，记录各平台文件 SHA-256 和构建输入摘要，便于审计和复核。

安装包与限制

当前发行包为 unsigned-smoke 未签名包。代码签名、公证、Windows Authenticode 和自动更新
channel 尚未启用，因此 macOS 和 Windows 可能显示系统安全提示。当前 Release 可以直接提供
未签名安装包下载，但不代表自动更新能力已经可用。

下载文件

• macOS：universal DMG 和 zip
• Windows：x64 NSIS 安装包和 zip
• Linux：x64 AppImage 和 deb

感谢参与 DSH Forge 首个桌面发行版的构建、验证和问题排查。

English

DSH Forge v0.1.0 is the first official desktop release, delivering a profile-bound Electron application
and a cross-platform packaging and release pipeline.

What's included

• macOS universal support with both arm64 and x64 slices.
• Windows x64 support with an NSIS installer and a zip archive.
• Linux x64 packages for Ubuntu 22.04 and later LTS releases, including AppImage and deb formats.
• The application is bound to the dsh-forge-official profile at build time and does not provide runtime
  profile switching.
• GitHub Actions runs packaging, package inspection, real packaged-app smoke tests, and native
  verification on native runners, then checks version, profile, and inputDigest consistency across all
  three targets.
• The Release includes release-index.json with per-platform SHA-256 values and the build input digest
  for audit and verification.

Packaging status and limitations

The current artifacts are unsigned packages marked unsigned-smoke. Code signing, notarization, Windows
Authenticode, and the automatic update channel are not enabled yet, so macOS and Windows may show system
security warnings. The current Release provides the unsigned installers for download, but does not imply
that automatic updates are available.

Downloads

• macOS: universal DMG and zip
• Windows: x64 NSIS installer and zip
• Linux: x64 AppImage and deb

Thank you to everyone who contributed to building, validating, and troubleshooting the first DSH Forge
desktop release.