chore(release): prepare v0.3.6

[Grivn]

提交 PR 前请阅读贡献指南、Contributing Guide与开发和验证指南 / Development and Verification Guide。
Before opening a PR, read the Contributing Guide, 贡献指南, and the Development and Verification Guide / 开发和验证指南.
PR 标题和提交信息必须使用 Conventional Commits（type(scope): subject），且不得包含 emoji。 / PR titles and commits must use Conventional Commits (type(scope): subject) and must not contain emoji.
本仓库接受 Bug 修复、兼容性适配、现有能力增强、性能或体验优化和维护类 PR。全新能力、Provider、持久化格式或安全边界变更必须先提 Issue 并获得维护者确认。 / This repository accepts bug fixes, compatibility work, improvements to existing capabilities, performance or UX optimization, and maintenance. New capabilities, Providers, persistence formats, or security-boundary changes require prior maintainer approval in an Issue.
外部贡献者的仅文档类 PR 不直接接受；请先提 Issue 讨论。维护者的发布说明与文档维护不受此限制。 / Documentation-only PRs from external contributors are not accepted directly; open an Issue first. Maintainer release notes and documentation maintenance are exempt.

摘要 / Summary

准备 v0.3.6 稳定补丁发布：更新根包版本、当前文档入口和双语发布说明；不加入额外运行时代码改动。

Prepare the stable v0.3.6 patch release by updating the root package version, current documentation links and bilingual release notes. No additional runtime implementation changes are introduced.

关联 Issue 或背景 / Related Issue or Context

N/A — 维护者要求发布下一个 v0.3.x；基于已合并 #130 的最新 main（64f1662）。本版汇总 v0.3.5 之后已合并的 #107、#113、#116、#117、#121、#126、#127、#129 和 #130。

Maintainer-requested next patch release, based on the latest merged main. It includes async Recall ownership, plugin-owned runtime snapshots, Web navigation/CLI fixes, host-theme dialogs, and managed embedding API-key/protocol controls.

涉及区域 / Affected Areas

• Host 激活、Headless 或 bundle / Host activation, Headless, or bundle
• 运行时记忆 / Runtime Memory
• 项目档案 / Project Documents
• 记忆体或 Provider / Memory Spaces or Providers
• 子 Agent 或 Agent 工作流 / Subagent or Agent workflow
• Web UI 或对话交互 / Web UI or conversation interaction
• 设置、存储或安全 / Settings, storage, or security
• CLI、RPC、命令或工具 / CLI, RPC, commands, or tools
• 安装、更新或发布 / Installation, update, or release
• 测试、构建或文档 / Tests, build, or documentation
• 其他（请说明）/ Other (explain below)

PR 类型 / PR Type

• 面向用户的功能或行为变更 / User-facing feature or behavior change
• Bug 修复 / Bug fix
• 增强或优化 / Enhancement or optimization
• 兼容性适配 / Compatibility change
• 维护或重构 / Maintenance or refactor
• 测试或构建 / Tests or build

最新代码确认 / Latest Codebase Confirmation

• 我已基于最新 main 分支开发，或在提交前已 rebase 或合并最新 main。 / I developed from the latest main, or rebased or merged the latest main before submitting.

同步命令 / Sync command:

git fetch origin --tags
git worktree add -b codex/release-v0.3.6 <independent-release-worktree> origin/main
git diff --check

Base: 64f1662fbeca670e0c974c0e15a9974cc497dd7e. 原有开发 worktree 保持原样。 / Existing development worktrees remain untouched.

AI 编码披露 / AI Coding Disclosure

• 完全 AI 编码：全部编程改动由 AI 产出，并由贡献者接受和审查。 / Fully AI-coded: AI produced all programming changes, which the contributor accepted and reviewed.
• 部分 AI 辅助：AI 帮助编写或修改了部分内容。 / Partially AI-assisted: AI helped write or modify part of the change.
• 未使用 AI 编码辅助。 / No AI coding assistance was used.

使用的 AI 模型 / AI model used:

GPT-5 (Codex; exact variant not exposed in this task / 当前任务未暴露更细型号).

使用的编码 Agent 工具 / Coding Agent tool used:

Codex desktop with an independent Git worktree / Codex 桌面端及独立 Git worktree。

仓库规范检查 / Repository Rules

• 未修改 DSH 官方源码，未让 tsconfig 指向 DSH 源码 checkout，仅使用正式的 @deepseek-ai/* NPM 契约。 / I did not modify DSH source or point tsconfig at a DSH source checkout, and used only published @deepseek-ai/* NPM contracts.
• Client 与 Host 边界仍以 src/shared/contracts.ts 为准，没有在两侧重复定义 wire DTO。 / The Client and Host boundary still uses src/shared/contracts.ts as the single source for wire DTOs.
• 持久化格式、RPC 权限、路径或凭据处理的变更包含兼容或拒绝路径、安全分析和相应测试。 / Changes to persistence formats, RPC authority, paths, or credentials include compatibility or rejection paths, security analysis, and tests.
• 没有提交 token、密钥、私有记忆、未脱敏日志或生成的 lib/ 文件。 / I did not commit tokens, credentials, private memory, unredacted logs, or generated lib/ files.
• 用户可见文案和长期文档已同步维护中文与英文版本，命令、配置键和路径保持一致。 / User-facing copy and long-lived documentation are synchronized in Chinese and English, with matching commands, configuration keys, and paths.
• 新增和修改的代码、注释、文档、提交信息不含 emoji。 / New and modified code, comments, documentation, and commits contain no emoji.

兼容性与数据安全 / Compatibility and Data Safety

本 PR 只改变根包版本与文档，不改动 dependency/lockfile、持久化格式、RPC 权限、存储路径或凭据处理。Runtime、Documents、Memory Spaces 和 Provider 数据无需迁移；生成的包、测试目录和私有数据均不提交。

The registry baseline remains DSH 0.1.1-rc.2; source-only 0.1.2-alpha.1 is covered by the existing dedicated CI job. Update the plugin and restart affected profiles. Active children keep their original delegated runtime, so wait for or cancel them before retiring old data. Rolling back to 0.3.5 requires no data conversion but restores its earlier behavior and lacks the newly released embedding key/protocol controls; retain a settings backup.

本地验证 / Local Validation

执行的命令 / Commands run:

# Node v24.19.0; pnpm 11.19.0
pnpm install --frozen-lockfile --offline --ignore-scripts
CI=true TZ=UTC pnpm run verify
npm pack --ignore-scripts --pack-destination <isolated-artifact-directory> --silent
git diff --check

结果摘要 / Result summary:

• Release version 0.3.6: 574 tests passed; one Windows-only test skipped on macOS. / 本地发布版本测试 574 项通过，macOS 跳过一项 Windows 专用测试。
• TypeScript, deterministic double builds of 107 files, real isolated Headless activation with 35 total tools and five representative Mnemon tools, all ten Node-compatible public imports, publint --strict and attw passed.
• Package: 114 files, 385,236 packed bytes, 1,738,379 unpacked bytes. Published-file allowlists passed; the upstream rc.2 missing-sourcemap warning is non-fatal.
• fix(recall): retain delegated authority for async agent turns #130 passed Linux Node 22.19/24, Windows Node 24 and exact DSH alpha source CI before this preparation. This release PR reruns the platform matrix; publication waits for success. / 发布前等待本 PR 平台矩阵通过。

用户可见变更证据 / Local Feature Evidence

证据 / Evidence:

N/A for new visual changes: this PR only bumps release metadata and documentation. Existing actual npm WebUI before/after records remain in docs/en/testing-npm-regressions.md, its Chinese counterpart and docs/pr-assets/dialog-surfaces/README.md, with original build identities preserved.

Fresh packaged-release WebUI smoke also passed in an isolated normal environment: DSH 0.1.1-rc.2, @linxin666/dsh-web-all@0.3.6, official Mnemon CLI 0.2.5, and the actual local dsh-mnemon-0.3.6.tgz. Four Memory System/Task Board round trips restored the correct panel. The runtime-memory dialog rendered with the host layer-2 background, a transparent footer and no horizontal overflow; it was canceled without saving. Status reported CLI readiness, and the version dialog resolved CLI 0.2.5 and plugin 0.3.6. No memory or settings changes were submitted.

发布包在隔离的普通 npm WebUI 环境中完成额外冒烟检查：四轮记忆系统/任务看板往返成功，热记忆弹窗背景和透明页脚正确且无横向溢出；取消后没有保存记忆。状态与版本检查一致识别 CLI 0.2.5 和插件 0.3.6，未提交记忆或设置变更。

Local smoke tarball SHA-256: 070a57ab0fc1136c26cd8156ed2a190467397d7a3906ba4562602d311924b861. This is local package evidence, not a claim about the later CI-published archive hash.

Test Files  51 passed | 1 skipped (52)
     Tests  574 passed | 1 skipped (575)
Verified deterministic output for 107 files.
Verified Headless profile activation with 35 total tools and 5 representative Mnemon tools.
Verified package contents: 114 files, 385236 packed bytes, 1738379 unpacked bytes.
Imported 10 Node-compatible public entries on v24.19.0.
All good!