v1.1.71

1.1.71

中文

• 版本 1.1.71。
• 修复 1.1.70 的 ?? 混 ||：插件启用时 failed to import（桌面 / Web 同一入口）。
• #86 只改 UI 队列 steer → followup；公共 steer() 收回 next-step，代理间 send_message 仍下一步插入。
• installed-rev 跨版本不再沿用旧 apply:x.y.z。#88 按现行 renderedPrompt / 旧 system 锚点打中的那条落标记。
• 发版前 node --check 主入口，避免再把语法错误打进 Release。

English

• 1.1.71.
• Fix 1.1.70 ?? mixed with ||: enable failed to import on desktop and web.
• #86 keeps UI queue steer → followup. Public steer() is next-step again so send_message inserts at the next step.
• Stale apply:x.y.z in installed-rev refreshes across versions. #88 marks the host anchor that actually exists (renderedPrompt or system).
• Release CI syntax-checks the plugin entry.

1.1.70

中文

• 版本 1.1.70。
• Hub / 残装若给 dsh-purge 加上 pluginPackages，Cordis 会一直 pending，宿主退出码 1。本版把依赖钉回 systemPrompt + tools。
• 清洗页只合并升级链展示（免责、审批、挂全文、hooks 等），Apply 仍打全部补丁。
• 去掉已无用的 #81 / #89 清单行；挂全文并进 #87，官方 phase-1 走静默放行。
• 指挥端改为「按用户给的目标开工」。合并 #97 / #98 / #99。

English

• 1.1.70.
• Hub / incomplete installs that inject pluginPackages leave dsh-purge pending and kill the host. Dependencies are pinned to systemPrompt + tools.
• Clean page groups upgrade-chain patches for display only; Apply still writes every patch.
• Dropped dead #81 / #89 rows. Hang lives in #87. Official phase-1 keep is silent.
• Commander bind: start from the user's target. Includes #97 / #98 / #99.

1.1.69

中文

• 版本 1.1.69。
• 发送时剥掉 ChatML / project_instructions，框和磁盘不动。
• 应用 + 重启挂当前默认，不必再点保存；框里仍是插件旧默认会刷到加密槽。
• 红队只排不折：注入 → cap → 红队正文；目标卡/角色段改名 dshpg-*。
• 隔离 ctx 也注册 inject/cap；#86 steer 改 next-turn；#87 hang 用 LF 比对。
• 红队操作稿锁「上面的提示词作准」；指挥端去掉「给了单位名就授权」。

English

• 1.1.69.
• Peel ChatML / project_instructions on the wire; box and disk stay intact.
• Apply + restart hangs the current default; no extra Save. Stale plugin defaults refresh from the sealed slot.
• Redteam: inject → cap → ops only (no fold). Card/role sections renamed dshpg-*.
• Isolated ctx also registers inject/cap. #86 steer → next-turn. #87 hang needle uses LF.
• Redteam ops note: inject wins. Commander no longer says a company name means authorized.

1.1.68

中文

• 版本 1.1.68。
• #92：技能面板认 YAML 块标量 description（| / >），不再误报不可用。
• #93：红队「版本/更新」：file:// 转成本地路径；Windows 用 .cmd + shell 起 npm/pnpm；npm 404 回落 GitHub tags。
• #94：官方桌面 CLI 入口补 app.asar.unpacked 回退。Hub 首次安装仍可能撞官方 asar 路径。
• #95：拆除 refusal-recover（读错字段永不触发；修好会无限复读）。
• #96：bash 前台等待从插件标过的 600s 迁回 60s，后续工具不再被堵 10 分钟。
• 注入置顶；capability 段改名 dshpg-capabilities；用户 prompt 一律 followup（#85）；默认关闭自动「继续」。

English

• 1.1.68.
• #92: Skill panel parses YAML block-scalar description.
• #93: Redteam update: file:// → fs path; Windows npm/pnpm via .cmd; GitHub tags if registry 404.
• #94: Desktop CLI falls back to app.asar.unpacked. Hub first-install may still hit stock asar.
• #95: Removed refusal-recover (dead reader / unbounded nudge loop).
• #96: Restore marked bash foreground wait 600s → 60s.
• Inject leads; capability section renamed; user prompt always followup; autoContinue default off.

1.1.67

中文

• 版本 1.1.67。
• #85：continue 续跑在传输/429 连错时不再无限兜圈。takeContinue 加 failStreak 阈值；refundContinue 不清 lastContinueSeq，连错 ≥3 直接放弃。
• #84：区域拦截的空 Assistant 流改为单批 text-chunks 记录（带 .length），不再卡住宿主 UI。
• 启动种子：进程启动时若 $DSH_HOME/prompt-inject.md 为空或缺失，自动把加密默认稿写一次；用户改过的稿不动。清洗完点重启后，重启成功立刻就能用默认提示词。
• Windows 官方包重启：restart 脚本名改成 pid+random，首启不与并发实例打架；多余的 .cmd 中介删掉，直接 wscript.exe //nologo //B 起脚本；本机旧版无 pid 后缀的脚本/日志超过 24h 启动时自动清。
• 杀进程范围收紧：ASAR_SWAP_PS1 不再 /IM 杀全名同名进程，只按安装根下 pid 停，避免误伤第三方同名。
• 官方 CLI shim 原地改写之前先存一份 .dsh-purge.bak，并走原子写，断电/盘满可回退。
• 首装场景不卡：WScript 判 clean 时，两边都是 null（文件缺或读失败）放行启动，只有任一明确 dirty 才拦。
• 探测缓存：runningExes / shortcutExes 空结果不再缓存；点"应用"前 clearDesktopLocateCache() 仍可强刷。
• scheduleAsarRenameWhenIdle 的 .rename-pending 锁：时钟回拨或超过 30 分钟视为失效，清掉重做。
• execFileSync 三处 PowerShell 调用加 maxBuffer: 8MB，大结果不再静默 ENOBUFS 掉。
• 其他：net-scope region gate 指数退避 + IPv6 regex 收紧；identity injectMatchers 支持 >4096 分段匹配、installAssembleGuard 幂等；hooks-deny 删 R0 兜底规则改原子写；extract-asar commit 不删 nextDir，写 .dshpurge-recover.json 便回滚；client.js redteam preset 多路检测、shell.submit WeakMap 清理补齐。

English

• 1.1.67.
• #85: Continue loop no longer spins forever on TRANSPORT/429 streaks. takeContinue adds a failStreak gate; refundContinue leaves lastContinueSeq set; 3 consecutive failures abandon.
• #84: Region-gate empty-assistant stream becomes one batched text-chunks record (with .length), no longer hangs the host UI.
• Boot-time seeding: on startup, if $DSH_HOME/prompt-inject.md is empty or missing, the encrypted default is written once; a user-edited file is untouched. After the Apply → cleanup → restart cycle, the default prompt is active immediately.
• Windows official-build restart: restart script name now includes pid+random, so concurrent instances don't clobber each other; the .cmd intermediary is dropped — wscript.exe //nologo //B is spawned directly; legacy unsuffixed scripts/logs older than 24h are purged on each startup.
• Kill scope tightened: ASAR_SWAP_PS1 no longer uses /IM to kill by full name — only pids under the install root are stopped, so same-named third-party processes aren't collateral.
• Official CLI shim repair now saves .dsh-purge.bak and uses atomic write before overwriting, so power loss / disk full is recoverable.
• First-install not blocked: when WScript checks for clean markers, two nulls (missing or unreadable) now pass through; only an explicit false blocks startup.
• Probe caches: runningExes / shortcutExes no longer cache empty results; clearDesktopLocateCache() on Apply still forces a refresh.
• scheduleAsarRenameWhenIdle .rename-pending lock: clock skew or ≥30-min-old lock is treated as stale and cleared.
• Three execFileSync PowerShell calls get maxBuffer: 8MB so large results no longer silent-fail with ENOBUFS.
• Also: net-scope region-gate exponential backoff + stricter IPv6 regex; identity injectMatchers segments >4096-char payloads, installAssembleGuard is idempotent; hooks-deny drops R0 fallback and uses atomic write for state; extract-asar commit no longer deletes nextDir and writes .dshpurge-recover.json for rollback; client.js redteam preset detection broadened; shell.submit WeakMap cleanup wired.

1.1.66

中文

• 版本 1.1.66。
• #80：清洗页可关掉 hooks deny / ask 旁路。关掉且文件干净显示跳过，不计入已应用；关掉后再打开，64/65 会按官方形态再打一次。
• #81：继续 / 拒答续跑的来源 kind 改为 dsh-purge；限流和传输失败不再自动续一轮。
• 重启后不用点保存也会挂上默认提示词；每一轮都补回全文。空的应用请求不再清空磁盘上的提示词。
• 声明过的 overlay 只剩 .dshpurge.bak 时，应用会先拷回再加载。
• 红队报告补上得分点短名。中文 README 恢复题图和预览图。

English

• 1.1.66.
• #80: The clean page can turn off the hooks deny/ask bypass. Off + clean files show skipped and are not counted as applied. Turning it back on reapplies 64/65 from the official form.
• #81: Continue / refusal-recover use source kind dsh-purge. RATE_LIMIT and TRANSPORT no longer start another continue turn.
• Restart hangs the default prompt without a Save click; every step puts the full text back. An empty Apply body no longer wipes the disk prompt.
• A declared overlay that exists only as .dshpurge.bak is copied back before load.
• Red-team reports get short score-point names. Chinese README restores the banner and preview images.

1.1.65

中文

• 版本 1.1.65。
• 默认提示词按 lib/default-prompt-inject.md 重新加密进槽。磁盘上仍是用户自己改过的稿时，不覆盖。
• 红队接入截图登记、得分点看图，以及报告六段。可把某次演练导出成目录。
• 技能正文缺工具路径、缺密钥或 VPS 还是占位符时，不再把整条技能标成不可用。缺口留在详情里。
• 打开页面或组装提示词时，会把当前默认稿同步到磁盘，不必先点保存。
• 删掉没有调用的桌面启动封装、旧迁移脚本，以及已经注释掉的手动继续入口。

English

• 1.1.65.
• The default prompt is sealed again from lib/default-prompt-inject.md. A prompt the user already edited on disk is left as-is.
• Red team gains shot registration, score-point images, and the six-part report. An engagement can be exported to a folder.
• A skill stays usable when a documented tool path, key, or VPS placeholder is missing. The gap stays on the skill detail.
• Opening the page or assembling the prompt writes the current default to disk, without a Save click first.
• Unused desktop launch helpers, the old migration script, and the commented manual-continue entry are removed.

1.1.64

中文

• 版本 1.1.64。
• 红队流程八项。角色稿只在新建靶标时播种；已经建好的靶标，要在演练台里把智能体同步一次才会换成新稿。
• 内网改为叶子节点，自己按收集、梳理、发现、利用做，不再往下派活。
• 并发名额：不带 key 的 release 只放最早的一条。子智能体结束由服务端自动释放；手动释放必须带上 acquire 返回的 key。
• 预检带 include 时只体检点名的技能，不再被全局缺密钥拖成失败。缺项带上由用户执行的修复说明。
• IPv6 计分至少两个冒号，dc01:389 这类主机名不再 ×3。计分只留在 score-rules.js。
• 攻击链计分跳过已停用的得分点。
• .env 认 export KEY=value。未加引号的行内注释会剥掉，引号里的 # 保留。
• 内网计分 code 改为 central-system、boundary-logical、boundary-strong 等，以 redteam_score_list 实际返回为准。
• 漏洞发现和利用从 priority=high 打起。优先级为空时，先回报指挥补一轮评估。
• 删掉没有调用的代码。设置页里过期的 legacyApplyPath(...) 调用改为 applyPathOp。

English

• 1.1.64.
• Eight red-team flow fixes. Role prompts seed new engagements only; sync agents on an existing engagement to pick them up.
• The internal role is a leaf and does collect, assess, scan, and exploit itself.
• A release without a key drops only the oldest reservation. Ending a subagent auto-releases; a manual release must carry the acquire key.
• Preflight include checks only the named skills. Broken items include fixes for the user to run.
• IPv6 scoring needs at least two colons, so dc01:389 is no longer ×3. Scoring lives only in score-rules.js.
• Attack-chain scoring skips disabled score points.
• .env accepts export KEY=value and strips unquoted inline comments. A # inside quotes stays.
• Internal score codes match the live list (central-system, boundary-logical, boundary-strong, and the rest), taken from redteam_score_list.
• Vuln-scan and exploit start at priority=high. If priority is empty, report back and run another assess first.
• Unused code removed. Stale settings ...