# v3.1.2 — Plugin identity and DSH compatibility / 插件图标与 DSH 兼容修正版

**Candidate release notes.** Publication is complete only after the protected release workflow verifies the exact main commit, immutable tag, npm provenance and GitHub Release artifacts. / **候选版说明：** 只有受保护发布工作流完成精确 main 提交、不可变标签、npm 来源证明与 GitHub Release 附件验收后，才算正式发布。

## Native Vision Router icons / 原生插件图标

- **#783:** Ship a compact eye icon in the npm package for DSH Desktop Plugin Manager. Register the same artwork on the Vision Router Settings navigation through the lifecycle-owned native icon slot. The real DSH 0.2.2-alpha.3 Chromium Settings test verified visible, decoded artwork. / 随 npm 包发布眼睛图标，供 DSH Desktop 插件管理页使用；在支持原生设置图标插槽的 Host 中显示相同图标。Alpha.3 真实 Chromium 验证图标可见且成功解码。
- **Host distinction:** DSH 0.2.1-rc.5 supports the package Plugin Manager artwork, but has no Settings navigation icon slot; it correctly keeps the default Settings glyph. The Settings icon slot is verified on DSH 0.2.2-alpha.3. This release does not patch unsupported Host internals. / **上游边界：** RC.5 支持插件管理页图标，但没有设置导航图标插槽，因此设置导航仍使用默认图标。新插槽已在 Alpha.3 验证，不通过修改上游内部实现来绕过限制。

## Upstream Alpha compatibility / 上游 Alpha 适配

- **#780:** Align inherited image-dimension normalization with Alpha.2's 8192-to-65535 default while retaining user-customized limits. / 适配 Alpha.2 的默认图片尺寸变化，保留自定义限制。
- **#781:** Accept the WebServer additive resource-route union in exact-source assertions while retaining route ownership and disposal guarantees. / 接受 WebServer 新增资源路由联合类型，保持原有注册、释放契约。
- **#779, #782:** Pin reviewed Alpha.2, then Alpha.3 immutable source for the real Host CI; Alpha.3 passed six Host jobs spanning Windows/macOS/Linux exact-source, Windows Node 22/24 Desktop and real Chromium Settings lifecycle. No additional Cordis runtime shim was established as necessary by the tested paths. / 分阶段固定 Alpha.2、Alpha.3 精确源码；Alpha.3 的三端、Node22/24 Desktop 和真实浏览器六项验证通过。在已测试调用路径内未发现需新增 Cordis 运行时补丁的确定证据。

## Security and other Host plugins / 安全及其他 Host 插件兼容

- **#775:** Resolve the follow-redirects credential redirect advisory. / 修复 follow-redirects 凭据重定向安全告警。
- **#777:** Preserve the child handle of promisified execFile for non-OCR Host plugins. / 保留非 OCR Host 插件的 promisified execFile.child 句柄语义。
- **#778:** Move the Alpha pin out of workflow source into ordinary config JSON and correct workflow output propagation, without expanding Bot permissions. Automatic PR creation still awaits a real future update exercise. / 将 Alpha Pin 移至普通 JSON 配置文件，修复输出传值，不扩大 Bot 权限；自动创建 PR 仍待未来真实更新触发验证。

## Support and release checks / 支持边界与发布验收

- Public Node range remains ^22.19.0 or >=24.0.0; DSH remains >=0.1.5-rc.1 <0.2.0-0 or >=0.2.0-rc.2 <0.3.0-0. No Session migration, broad remote authority change, or breaking API change. / Node 和 DSH 最低支持版本、Session、远程权限及公共 API 边界不变。
- **#783** passed 26/26 current-head PR workflows, including the 6/6 Alpha.3 Host jobs, 3 mandatory checks, and older Host/RC regressions. The **v3.1.2 candidate** must separately pass release-commit CI, deterministic pack, registry uniqueness and protected npm/GitHub publication checks. / #783 的 26 项 PR 工作流、6 项 Alpha.3 真实 Host 及旧版兼容检查全绿；v3.1.2 候选提交仍须单独验收正式 CI、可复现包体、npm 唯一版本与受保护发布流程。