@openviking/dsh-memory-plugin 0.5.1 → 0.5.3

package/README.md

@@ -103,7 +103,10 @@ the stock `web` profile, not a subcommand to append after `--profile`.
 ### Why injection uses pre-step user messages, not the system prompt
 
 Recall and profile context enter through the `agent/pre-step` waterfall as
-durable, source-attributed user messages (`source: { kind: 'plugin', … }`).
+durable, source-attributed user messages
+(`source: { kind: 'plugin:openviking-memory', … }`). The producer-owned kind is
+required by DSH session format v4; the plugin still recognizes legacy
+`kind: 'plugin'` messages while older sessions are replayed.
 They are deliberately **not** added to the system prompt: a DSH preset whose
 persona declares `complete: true` (the stock `minimal` preset does) restores
 that persona as the sole prompt section after assembly, silently discarding

package/capture.mjs

@@ -6,6 +6,7 @@ import {
 } from "./shared/capture-utils.mjs";
 
 export const OPENVIKING_PLUGIN_SOURCE = "openviking-memory";
+export const OPENVIKING_PLUGIN_KIND = `plugin:${OPENVIKING_PLUGIN_SOURCE}`;
 
 export function pluginMessage(content, source) {
   // dsh's own constructor: identity, normalization, and any future Message
@@ -13,13 +14,31 @@ export function pluginMessage(content, source) {
   return createUserMessage({
     content: [{ type: "text", text: content }],
     source: {
-      kind: "plugin",
+      kind: OPENVIKING_PLUGIN_KIND,
       plugin: OPENVIKING_PLUGIN_SOURCE,
       ...source,
     },
   });
 }
 
+export function isOpenVikingPluginMessage(message) {
+  const source = message?.source;
+  return source?.kind === OPENVIKING_PLUGIN_KIND
+    || (source?.kind === "plugin" && source.plugin === OPENVIKING_PLUGIN_SOURCE);
+}
+
+function isSyntheticUserMessage(message) {
+  const kind = message?.source?.kind;
+  if (kind === "plugin") return true;
+  if (typeof kind === "string" && kind.startsWith("plugin:")) return true;
+  // DSH's v4 migration gives first-party context producers their own kinds
+  // (for example, "time-context") instead of the retired plugin wrapper.
+  return message?.role === "user"
+    && typeof kind === "string"
+    && kind !== "user"
+    && kind !== "tool";
+}
+
 export function captureEvent(event, config, toolNames = new Map()) {
   if (!event || typeof event !== "object") return null;
   if (event.type === "tool/call") {
@@ -42,11 +61,10 @@ export function captureEvent(event, config, toolNames = new Map()) {
 }
 
 function captureMessage(event, message, config, toolNames) {
-  // Whitelist by source: plugin-injected user messages (this plugin's recall
-  // blocks, time-context snapshots, any other plugin's context) are model
-  // input, not human input — mirroring them would launder synthetic text
-  // into memory as if a person said it.
-  if (message.source?.kind === "plugin") return null;
+  // DSH v4 gives producer-owned context messages their own kind. Treat
+  // user-role messages with an explicit non-user/tool kind as synthetic;
+  // untagged legacy messages stay capturable for backward compatibility.
+  if (isSyntheticUserMessage(message)) return null;
   if (message.role === "assistant" && config.captureAssistantTurns === false) {
     return null;
   }
@@ -85,10 +103,7 @@ function captureMessage(event, message, config, toolNames) {
 
 export function promptText(messages) {
   return (messages || [])
-    .filter(message => !(
-      message?.source?.kind === "plugin"
-      && message.source.plugin === OPENVIKING_PLUGIN_SOURCE
-    ))
+    .filter(message => !isOpenVikingPluginMessage(message))
     .map(message => extractTextFromPayload(message))
     .filter(Boolean)
     .join("\n\n")

package/config.mjs

@@ -1,7 +1,7 @@
 import { buildPluginConfig } from "./shared/plugin-config.mjs";
 import { loadCredentialFiles } from "./shared/credentials.mjs";
 
-export const PLUGIN_VERSION = "0.5.1";
+export const PLUGIN_VERSION = "0.5.3";
 
 /**
  * Namespace for the bridged OpenViking MCP tools. DSH publishes every MCP tool

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openviking/dsh-memory-plugin",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "OpenViking memory and context bundle for DeepSeek Harness",
   "type": "module",
   "main": "index.mjs",

package/runtime.mjs

@@ -12,7 +12,7 @@ import { isRetryableFailure } from "./shared/retryable.mjs";
 import { resolveEffectivePeerId } from "./shared/workspace-peer.mjs";
 import {
   captureEvent,
-  OPENVIKING_PLUGIN_SOURCE,
+  isOpenVikingPluginMessage,
   pluginMessage,
   promptText,
 } from "./capture.mjs";
@@ -139,6 +139,7 @@ export class OpenVikingRuntime {
         actorPeerId: state.config.peerId,
         legacyPeerId: state.config.legacyPeerId,
         sessionId: state.ovSessionId,
+        excludeUris: state.config.recallExcludeUris,
         log: (stage, data) => this.log(stage, data),
       },
     );
@@ -420,7 +421,6 @@ function hasStartupProfile(agent) {
 }
 
 function isStartupProfile(message) {
-  return message?.source?.kind === "plugin"
-    && message.source.plugin === OPENVIKING_PLUGIN_SOURCE
+  return isOpenVikingPluginMessage(message)
     && message.source.form === "instructions";
 }

package/shared/config-schema.mjs

@@ -93,6 +93,17 @@ export const KNOBS = [
   { name: "logRankingDetails", type: "bool", default: false, env: "OPENVIKING_LOG_RANKING_DETAILS", capability: "recall" },
   { name: "recallLedger", type: "bool", default: true, env: "OPENVIKING_RECALL_LEDGER", capability: "recall" },
   { name: "recallQueryFilters", type: "list", default: [], env: "OPENVIKING_RECALL_QUERY_FILTERS", capability: "recall" },
+  // Subtree URIs the recall search must never return. Without this there is no
+  // way to keep generated directory files (viking://user/<space>/skills,
+  // viking://user/<space>/resources, viking://agent/skills) out of the hits:
+  // they match like ordinary content and carry only boilerplate text.
+  {
+    name: "recallExcludeUris",
+    type: "list",
+    default: [],
+    env: "OPENVIKING_RECALL_EXCLUDE_URIS",
+    capability: "recall",
+  },
 
   // Digest compression. Claude Code reads this as the tri-state
   // off/client/server/auto through `normalizeRewriteMode`; Codex reads the same