chore(release): prepare v0.2.15

[Grivn]

摘要 / Summary

发布 v0.2.15：在纯 v0.2 main 基线上适配 DSH 0.1.1-rc.2，并包含自 v0.2.14 起已合并的任务 Agent、元信息维护和高级布局修复。

Prepare v0.2.15 on the v0.2 main line with DSH 0.1.1-rc.2 compatibility and the task-Agent, metadata-maintenance, and advanced-layout fixes merged since v0.2.14.

关联 Issue 或背景 / Related Issue or Context

N/A — maintainer release requested after review of the official DSH rc.2 release.

Upstream: https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.1-rc.2

涉及区域 / Affected Areas

• Host 激活、Headless 或 bundle / Host activation, Headless, or bundle
• 子 Agent 或 Agent 工作流 / Subagent or Agent workflow
• Web UI 或对话交互 / Web UI or conversation interaction
• 安装、更新或发布 / Installation, update, or release
• 测试、构建或文档 / Tests, build, or documentation

PR 类型 / PR Type

• Bug 修复 / Bug fix
• 兼容性适配 / Compatibility change
• 维护或重构 / Maintenance or refactor
• 测试或构建 / Tests or build

最新代码确认 / Latest Codebase Confirmation

• 我已基于最新 main 分支开发，或在提交前已 rebase 或合并最新 main。 / I developed from the latest main, or rebased or merged the latest main before submitting.

同步命令 / Sync command:

git fetch origin --prune
git worktree add -b codex/release-v0.2.15 /isolated/release-worktree origin/main

AI 编码披露 / AI Coding Disclosure

• 完全 AI 编码：全部编程改动由 AI 产出，并由贡献者接受和审查。 / Fully AI-coded: AI produced all programming changes, which the contributor accepted and reviewed.
• 部分 AI 辅助：AI 帮助编写或修改了部分内容。 / Partially AI-assisted: AI helped write or modify part of the change.
• 未使用 AI 编码辅助。 / No AI coding assistance was used.

使用的 AI 模型 / AI model used:

OpenAI GPT-5 family

使用的编码 Agent 工具 / Coding Agent tool used:

Codex

仓库规范检查 / Repository Rules

• 未修改 DSH 官方源码，仅使用正式 NPM 契约。 / Used only published DSH NPM contracts.
• Client 与 Host wire DTO 继续以共享 contracts 为准。 / Shared contracts remain the wire DTO source.
• 持久化、RPC、路径和凭据边界未放宽。 / Persistence, RPC, path, and credential boundaries are not widened.
• 未提交 token、密钥、私有记忆、日志或生成的 lib/。 / No secrets, private data, logs, or generated lib files.
• 中文与英文用户文档同步。 / Chinese and English documentation is synchronized.
• 新增内容不含 emoji。 / New content contains no emoji.

兼容性与数据安全 / Compatibility and Data Safety

• 10 个直接 DSH 开发依赖固定为 rc.2；官方依赖图中只允许 rc.1/rc.2 内部包。
• UI primitives peer 范围保留 rc.1，并覆盖 rc.2。
• DSH 持久图片 attachment 引用会原样保留；活动评分只统计文本，Mnemon 不复制原始图片字节。
• 无 Mnemon 数据格式变更或迁移。
• 完整 DSH rc.2 profile 需要 Node.js ^22.19.0 || >=24.0.0；插件 package engine 仍为 >=20。
• 发布包保持 v0.2 根入口、Client 和 package metadata；不包含 v0.3 kernel、topology、workspace package 或 SDK 入口。

本地验证 / Local Validation

执行的命令 / Commands run:

pnpm install --frozen-lockfile
pnpm run verify
git diff --check

结果摘要 / Result summary:

• TypeScript passed.
• Vitest: 380 passed; 1 Windows-only test skipped locally.
• Deterministic build: 65 files.
• Headless activation: 35 tools, including 5 representative Mnemon tools.
• Package validation: 72 files; publint strict and attw passed.
• Build entries remain only src/index.ts and src/client/index.ts.
• DSH UI primitives only emits its known missing source-map warning.

用户可见变更证据 / Local Feature Evidence

Automated DOM tests cover the image-input label and DSH advanced-mode frame. Lifecycle tests cover attachment preservation and text-only activity scoring. Bilingual release notes document upgrade and rollback boundaries.