v0.3.1

What's New

• One-step install via dsh plugin add — the plugin now declares dsh.bundle, so dsh plugin --profile web add dsh-plugin-product-subagents automatically wires it as a profile layer. No manual cordis.patch.yml editing, no declares no dsh.bundle warning.

Changed

• package.json: add dsh.bundle declaration + ship cordis.patch.yml bundle patch; include it in files.
• README (EN + zh): recommend dsh plugin add as the primary install method; manual fallback switched from npm i to pnpm add.

Notes

Issue #3's code fix shipped in 0.3.0 (dsh-tools moved to peerDependencies), but dsh plugin add still resolved to 0.2.0 on pnpm 11 because of the default minimumReleaseAge supply-chain gate — 0.3.0 was too new, so pnpm fell back to 0.2.0 (which has dsh-tools in dependencies and reproduces the crash). Once 0.3.1 ages past the threshold the problem disappears; until then pin explicitly with dsh plugin --profile web add dsh-plugin-product-subagents@0.3.1.

v0.3.0 Bugfix

Bugfix

• #1 修复 Windows 下 cmd /S /C 剥离首尾引号导致 product_delegate 报 'claude" -p ...' is not recognized（报告 @danzenghuajue，PR #2 @sheldon）
• #3 修复 @deepseek-ai/dsh-tools 作为 dependencies 破坏 harness 单例、工具调用崩在 reading 'prepare'（报告 @haibara-brownie）

其他修复

• 发布工作流升级 npm 至 ≥ 11.5.1 以满足 OIDC trusted publishing，package-lock.json 改用官方 registry 生成
• winArgs 测试更新至外层引号契约，并新增 cmd /S /C 剥引号模拟测试
• 0.3.0 已发布至 npm（latest，含 SLSA provenance）