@yottameta/yotta-memory 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## v0.11.0 (2026-09-06)
+
+**MCP 协议对齐最新版 2026-07-28（无状态时代）**：yotta-memory MCP（stdio + serve streamable HTTP）升级 dual-era——modern 直连（server/discover 免握手、逐请求 _meta 版本声明、resultType、-32022 版本错误、HTTP header 校验 HeaderMismatch -32020）服务新客户端；legacy（initialize 握手，protocolVersion 2025-11-25）兼容旧客户端，旧形状响应零惊扰；HTTP+SSE GET 保留为 deprecated 兼容入口。SKILL 标注「基于 MCP 最新协议 2026-07-28（向后兼容 2025-11-25 及更早握手）」。新增 test/mcp-dualera.test.js（26/26：A 层 + HTTP 层），存量测试全绿。
+
+## v0.10.1 (2026-09-05)
+
+发布件修复：SKILL.md frontmatter `description` 曾以 ASCII 双引号开头但未闭合
+（v0.10.0 引入），严格 YAML 解析器会报 MISSING_CHAR，导致技能在 ClawHub/OpenClaw 等
+平台注册被跳过。已改为无引号裸标量（内容不变）；validate-skill 新增 frontmatter 引号
+闭合检查（防再犯）。版本 0.10.0 → 0.10.1。
+
 ## v0.10.0 (2026-09-02)
 
 压缩遗忘（S1）——consolidate 周期摘要 + 近重复自动合并 + 分类型衰减 + 批次回滚。

package/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: yotta-memory
-description: "元忆 —— 有权限边界的文件式智能体记忆。文件式、零依赖、可 diff/可回滚：让任何 AI 智能体活过会话，开工 recall 恢复上下文、重要信息 remember 落盘、收工归档。类型体系 FACT（公共共享）/ PREF / BOUND / COMMIT（私密隔离）。触发：记住、别忘了、记一笔、记忆、remember、recall、跨会话、上次说到、续测、交接、归档、记忆盘、共享记忆、局域网记忆、画像、开工上下文、记忆守则、profile、context、越用越懂、语义检索、反馈、维护、蒸馏、feedback、maintain、distill、explain、自我学习、自我进化、自我提升、查看平台分页、recall 候选预过滤、任务相关记忆、--focus、--embedding、压缩遗忘、consolidate、周期摘要、自动合并、分类型衰减、回滚
-version: 0.10.0
+description: 元忆 —— 有权限边界的文件式智能体记忆。文件式、零依赖、可 diff/可回滚：让任何 AI 智能体活过会话，开工 recall 恢复上下文、重要信息 remember 落盘、收工归档。类型体系 FACT（公共共享）/ PREF / BOUND / COMMIT（私密隔离）。触发：记住、别忘了、记一笔、记忆、remember、recall、跨会话、上次说到、续测、交接、归档、记忆盘、共享记忆、局域网记忆、画像、开工上下文、记忆守则、profile、context、越用越懂、语义检索、反馈、维护、蒸馏、feedback、maintain、distill、explain、自我学习、自我进化、自我提升、查看平台分页、recall 候选预过滤、任务相关记忆、--focus、--embedding、压缩遗忘、consolidate、周期摘要、自动合并、分类型衰减、回滚
+version: 0.11.0
 license: MIT
 ---
 
@@ -304,6 +304,8 @@ license: MIT
 | 其它（Trae / Qwen / Comate / Kimi 等） | 各自 MCP 配置 |
 
 ### 4.8 通用 MCP server 配置片段
+
+> 基于 MCP 最新协议 2026-07-28（无状态时代；向后兼容 2025-11-25 及更早握手客户端）。
 ```json
 {
   "mcpServers": {

package/bin/yotta-memory.js

@@ -22,7 +22,10 @@ const crypto = require('crypto');
 const http = require('http');
 const child_process = require('child_process');
 
-const VERSION = '0.10.0';
+const VERSION = '0.11.0';
+// MCP 协议（2026-07-28 无状态 + 2025-11-25 legacy 握手，dual-era）
+const MCP_PROTOCOL_MODERN = '2026-07-28';
+const MCP_PROTOCOL_LEGACY = '2025-11-25';
 const TYPES = ['FACT', 'PREF', 'BOUND', 'COMMIT'];
 const TYPE_DIRS = { FACT: 'facts', PREF: 'prefs', BOUND: 'bounds', COMMIT: 'commits' };
 const PUBLIC_DIR = 'facts';
@@ -2952,14 +2955,50 @@ function callTool(name, args, ctx) {
     return { text: '错误: ' + (e && e.message ? e.message : String(e)), error: true };
   }
 }
+function reqVersion(params) {
+  const meta = (params && params._meta) || {};
+  return meta['io.modelcontextprotocol/protocolVersion'] || null;
+}
+function modernOk(payload, ttl) {
+  const out = { resultType: 'complete' };
+  Object.assign(out, payload);
+  if (ttl) { out.ttlMs = ttl[0]; out.cacheScope = ttl[1]; }
+  out._meta = { 'io.modelcontextprotocol/serverInfo': { name: 'yotta-memory', version: VERSION } };
+  return out;
+}
+function unsupportedVersion(id, pv) {
+  return { jsonrpc: '2.0', id: id, error: { code: -32022, message: 'Unsupported protocol version', data: { supported: [MCP_PROTOCOL_MODERN], requested: pv } } };
+}
 function handleMessage(msg, ctx) {
   if (!msg || msg.jsonrpc !== '2.0') return { jsonrpc: '2.0', id: msg && msg.id, error: { code: -32600, message: 'invalid request' } };
   const id = msg.id;
   if (id === undefined || id === null) return null;
   const method = msg.method || '';
   const params = msg.params || {};
+  const pv = reqVersion(params);
+  if (pv !== null) {
+    // ---- modern（2026-07-28 无状态）----
+    if (pv !== MCP_PROTOCOL_MODERN) return unsupportedVersion(id, pv);
+    if (method === 'server/discover') {
+      return { jsonrpc: '2.0', id: id, result: modernOk({
+        supportedVersions: [MCP_PROTOCOL_MODERN],
+        capabilities: { tools: {} },
+        instructions: '元忆 MCP（基于 MCP 最新协议 2026-07-28，向后兼容 2025-11-25 及更早握手）：文件式智能体记忆 remember/recall/search/context/forget/archive/maintain 等读写检索与维护；私密按 owner 物理隔离，数据不出本机。'
+      }, [3600000, 'public']) };
+    }
+    if (method === 'tools/list') return { jsonrpc: '2.0', id: id, result: modernOk({ tools: mcpTools() }, [300000, 'public']) };
+    if (method === 'tools/call') {
+      const out = callTool(params.name || '', params.arguments || {}, ctx);
+      return { jsonrpc: '2.0', id: id, result: modernOk({ content: [{ type: 'text', text: out.text }], isError: !!out.error }) };
+    }
+    if (method === 'initialize') {
+      return { jsonrpc: '2.0', id: id, error: { code: -32601, message: "initialize removed in MCP 2026-07-28; use server/discover. supported: ['2026-07-28']" } };
+    }
+    return { jsonrpc: '2.0', id: id, error: { code: -32601, message: 'Method not found: ' + method } };
+  }
+  // ---- legacy（<=2025-11-25，initialize 握手；响应保持旧形状）----
   if (method === 'initialize') {
-    return { jsonrpc: '2.0', id: id, result: { protocolVersion: '2025-03-26', capabilities: { tools: {} }, serverInfo: { name: 'yotta-memory', version: VERSION } } };
+    return { jsonrpc: '2.0', id: id, result: { protocolVersion: MCP_PROTOCOL_LEGACY, capabilities: { tools: {} }, serverInfo: { name: 'yotta-memory', version: VERSION } } };
   }
   if (method === 'ping') return { jsonrpc: '2.0', id: id, result: {} };
   if (method === 'tools/list') return { jsonrpc: '2.0', id: id, result: { tools: mcpTools() } };
@@ -2987,17 +3026,34 @@ function cmdServe(opts) {
     if (tokenMap[agent] && tokenMap[agent].token === token) return { agent: agent };
     return null;
   }
+  function originAllowed(req) {
+    const origin = req.headers['origin'];
+    if (!origin) return true;
+    let oHost = '';
+    try { oHost = new URL(origin).host; } catch (e) { return false; }
+    const hHost = req.headers['host'] || '';
+    const allowed = [hHost, 'localhost', 'localhost:' + port, '127.0.0.1', '127.0.0.1:' + port, '[::1]', '[::1]:' + port];
+    return oHost === hHost || allowed.indexOf(oHost) !== -1;
+  }
+  function sendJson(res, code, obj) {
+    res.writeHead(code, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(obj));
+  }
   const server = http.createServer(function (req, res) {
     let pathname = '/';
     try { pathname = new URL(req.url, 'http://' + (req.headers.host || 'localhost')).pathname; } catch (e) {}
     if (pathname !== '/mcp') { res.writeHead(404, { 'Content-Type': 'text/plain' }); res.end('not found'); return; }
+    if (!originAllowed(req)) {
+      sendJson(res, 403, { jsonrpc: '2.0', error: { code: -32000, message: 'origin not allowed' } });
+      return;
+    }
     const auth = authorize(req);
     if (!auth) {
-      res.writeHead(401, { 'Content-Type': 'application/json' });
-      res.end(JSON.stringify({ jsonrpc: '2.0', error: { code: -32001, message: 'unauthorized: 需要有效 Bearer token 与 X-Agent-Id' } }));
+      sendJson(res, 401, { jsonrpc: '2.0', error: { code: -32001, message: 'unauthorized: 需要有效 Bearer token 与 X-Agent-Id' } });
       return;
     }
     if (req.method === 'GET') {
+      // deprecated 兼容：HTTP+SSE 端点（MCP 2026-07-28 起正式 Deprecated，12 个月窗口内保留给老客户端；新客户端走 POST）
       res.writeHead(200, { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache', 'Connection': 'keep-alive' });
       res.write('event: endpoint\ndata: /mcp\n\n');
       const iv = setInterval(function () { res.write(': keep-alive\n\n'); }, 15000);
@@ -3010,14 +3066,23 @@ function cmdServe(opts) {
       req.on('end', function () {
         let msg;
         try { msg = JSON.parse(body); } catch (e) {
-          res.writeHead(400, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({ jsonrpc: '2.0', error: { code: -32700, message: 'parse error' } }));
+          sendJson(res, 400, { jsonrpc: '2.0', error: { code: -32700, message: 'parse error' } });
+          return;
+        }
+        const metaPv = reqVersion(msg.params) || null;
+        const hdrPv = req.headers['mcp-protocol-version'] || null;
+        if (hdrPv && metaPv && hdrPv !== metaPv) {
+          sendJson(res, 400, { jsonrpc: '2.0', id: msg.id, error: { code: -32020, message: 'HeaderMismatch: MCP-Protocol-Version header/body 不一致', data: { header: hdrPv, body: metaPv } } });
+          return;
+        }
+        const mcpMethod = req.headers['mcp-method'];
+        if (mcpMethod && metaPv === MCP_PROTOCOL_MODERN && mcpMethod !== msg.method) {
+          sendJson(res, 400, { jsonrpc: '2.0', id: msg.id, error: { code: -32020, message: 'HeaderMismatch: Mcp-Method header/body 不一致', data: { header: mcpMethod, body: msg.method } } });
           return;
         }
         const resp = handleMessage(msg, auth);
         if (resp === null) { res.writeHead(204); res.end(); return; }
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify(resp));
+        sendJson(res, 200, resp);
       });
       return;
     }
@@ -3027,12 +3092,12 @@ function cmdServe(opts) {
     console.log('yotta-memory 记忆引擎已启动（v' + VERSION + '）');
     console.log('URL: http://' + host + ':' + port + '/mcp');
     console.log('记忆库: ' + root);
+    console.log('MCP 协议: 2026-07-28（modern，server/discover）/ 2025-11-25（legacy 握手兼容）');
     if (noAuth) console.log('鉴权: 已关闭（--no-auth，仅限可信内网）');
     else console.log('鉴权: Bearer token + X-Agent-Id（yotta-memory token new --agent <id> 生成）');
     console.log('按 Ctrl+C 停止');
   });
 }
-
 // ---- stdio 本地零进程模式（客户端按需拉起 CLI）----
 function cmdServeStdio() {
   const root = userRoot();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yottameta/yotta-memory",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Yuanyi (元忆) — boundary-aware, file-based memory for AI agents. File-based, zero-dependency, diff/rollback-able; FACT/PREF/BOUND/COMMIT types (public shared / private isolated), user-level + project-level storage; v0.10 consolidation (periodic summaries with provenance, near-duplicate auto-merge, per-type decay, batch audit + rollback), v0.9 recall quality + context focus + optional local embedding plugin, plus v0.8 semantic search, feedback loop, self-organization and distillation.",
   "license": "MIT",
   "keywords": [