dsh-instruction-memory 1.5.3 → 1.5.5

package/lib/client.js

@@ -69,7 +69,10 @@ window.__ModuleLoader__.load({
 
     const CSS = `
 .im-root { display:flex; flex-direction:column; gap:16px; padding:6px 2px 56px; max-width:860px;
-  color:var(--dsw-alias-label-primary,#1f2329); font-size:13px; line-height:1.6; }
+  color:var(--dsw-alias-label-primary,#1f2329); font-size:13px; line-height:1.6;
+  /* Android WebView honours the system text zoom unless this is pinned: at
+     150% the fixed-px cards reflow into unreadable ribbons. */
+  -webkit-text-size-adjust:100%; text-size-adjust:100%; }
 .im-h { margin:0; font-size:14px; font-weight:600; }
 .im-sub { margin:3px 0 0; font-size:12px; color:var(--dsw-alias-label-secondary,#8a9099); }
 .im-card { display:flex; flex-direction:column; gap:11px; padding:15px; border-radius:12px;
@@ -357,7 +360,16 @@ window.__ModuleLoader__.load({
         'profiles.confirmDelete': '确定删除用户形象「{name}」？删除后无法恢复。',
         'profiles.empty': '还没有用户形象。点击「＋ 新增形象」添加关于你本人的信息；不勾选任何形象时，AI 完全按原本方式回答。',
         'profiles.count': '共 {total} 个，使用中 {active} 个',
-        'profiles.chars': '已启用形象合计 {count} 字符（独立于指令字数上限，完整注入、不做裁剪）',
+        'profiles.chars': '已启用形象合计 {count} 字符，与指令共用同一注入字数上限（超出时按序截断，段末会说明）',
+        'profiles.truncated': '已截断',
+        'profiles.truncatedTitle': '这张形象超过注入字数上限，只有开头进入本轮提示',
+        'profiles.omitted': '本轮未包含',
+        'profiles.omittedTitle': '这张形象因注入字数上限未进入本轮提示',
+        'export.saved': '已开始下载；若没有文件出现，请检查浏览器的下载列表',
+        'export.fallbackHint': '当前环境无法触发文件下载，完整 JSON 已放在下面：全选复制后自行保存',
+        'export.fallbackClose': '关闭',
+        'import.webviewHint': 'Android / WebView 上若文件选择器不弹出，请改用「源码模式」粘贴 JSON',
+        'sse.down': '实时更新已断开（连续重试仍失败），数据可能是旧的：请点「重新载入」',
         'profiles.saving': '保存中…',
         'action.new': '＋ 新增指令',
         'action.reload': '重新载入',
@@ -645,7 +657,16 @@ window.__ModuleLoader__.load({
         'profiles.confirmDelete': 'Delete the persona “{name}”? This cannot be undone.',
         'profiles.empty': 'No persona yet. Click “＋ New persona” to add facts about yourself; with no persona ticked, the AI answers exactly as it normally would.',
         'profiles.count': '{total} in total, {active} in use',
-        'profiles.chars': 'Active personas total {count} characters (separate from the instruction budget; injected in full, never trimmed)',
+        'profiles.chars': 'Active personas total {count} characters, counted against the same injection limit as instructions (anything over is truncated in order and disclosed at the end)',
+        'profiles.truncated': 'Truncated',
+        'profiles.truncatedTitle': 'This persona exceeds the injection limit; only its head reached this turn',
+        'profiles.omitted': 'Not in this turn',
+        'profiles.omittedTitle': 'This persona was dropped by the injection limit and did not reach this turn',
+        'export.saved': 'Download started — if no file appears, check your browser’s download list',
+        'export.fallbackHint': 'This environment cannot start a file download; the full JSON is below — select all and copy it',
+        'export.fallbackClose': 'Close',
+        'import.webviewHint': 'On Android / WebView, if the file picker does not open, paste the JSON into “Source mode” instead',
+        'sse.down': 'Live updates stopped (retries kept failing) and the data may be stale — click “Reload”',
         'profiles.saving': 'Saving…',
         'action.new': '＋ New instruction',
         'action.reload': 'Reload',
@@ -1029,7 +1050,7 @@ window.__ModuleLoader__.load({
      * @param {string} message
      * @returns {{ kind: 'unavailable' } | { kind: 'cancel' } | { kind: 'answer', text: string }}
      */
-    function batchTagOutcome(ask, message) {
+    function batchTagOutcome(ask, message, options) {
       if (typeof ask !== 'function') return { kind: 'unavailable' }
       let answer
       try {
@@ -1037,11 +1058,16 @@ window.__ModuleLoader__.load({
       } catch (err) {
         return { kind: 'unavailable' }
       }
-      // Only a real `null` means the user pressed Cancel. `undefined` and any
-      // non-string (a broken polyfill, a Promise) mean the runtime cannot
-      // deliver an answer, so the caller must show the fallback form instead of
-      // swallowing the click.
-      if (answer === null) return { kind: 'cancel' }
+      // Android WebView is a FOURTH shape this helper did not know about: it
+      // keeps `window.prompt` as a function and does not throw, but with no
+      // WebChromeClient.onJsPrompt it returns `null` immediately — never
+      // showing a dialog. Treating that as "the user pressed Cancel" turned the
+      // bulk-tag action into a silent no-op, and the inline fallback form below
+      // was unreachable. The caller passes `nullMeansUnavailable` when it knows
+      // the runtime cannot show a dialog.
+      const nullIsUnavailable = options !== null && typeof options === 'object'
+        && options.nullMeansUnavailable === true
+      if (answer === null) return nullIsUnavailable ? { kind: 'unavailable' } : { kind: 'cancel' }
       if (typeof answer !== 'string') return { kind: 'unavailable' }
       return { kind: 'answer', text: answer }
     }
@@ -1997,6 +2023,10 @@ window.__ModuleLoader__.load({
       // pretending the copy happened.
       const [diagOpen, setDiagOpen] = React.useState(false)
       const [diagFallback, setDiagFallback] = React.useState(null)
+      /** Export JSON rendered in-panel when the runtime has no download path. */
+      const [exportFallback, setExportFallback] = React.useState(null)
+      /** True once the event stream has failed long enough to stop pretending. */
+      const [liveDown, setLiveDown] = React.useState(false)
       // Feedback form: closed by default so the settings card stays compact.
       // The draft lives in the panel (not in a child) because the send handler
       // needs the same values the inputs show, and keeping them here survives
@@ -2268,7 +2298,11 @@ window.__ModuleLoader__.load({
         const ask = typeof window.prompt === 'function'
           ? (message, initial) => window.prompt(message, initial)
           : null
-        const outcome = batchTagOutcome(ask, t('batch.tagPrompt', { count: ids.length }))
+        const outcome = batchTagOutcome(ask, t('batch.tagPrompt', { count: ids.length }), {
+          // A WebView without onJsPrompt answers `null` instantly and shows no
+          // dialog: that is "cannot ask", not "the user said no".
+          nullMeansUnavailable: isAndroidWebView(),
+        })
         if (outcome.kind === 'cancel') return
         if (outcome.kind === 'answer') {
           if (commitBatchTags(outcome.text)) closeBatchTags()
@@ -2678,6 +2712,30 @@ window.__ModuleLoader__.load({
         }
       }
 
+      /**
+       * Is this an Android WebView (as opposed to a normal browser or Electron)?
+       *
+       * The distinction matters because a WebView can answer `typeof
+       * window.prompt === 'function'` and still never show a dialog, and it can
+       * expose `<a download>` while having no download pipeline behind it. Both
+       * fail silently, so the panel has to detect the environment and take the
+       * in-page route instead of pretending the browser feature exists.
+       */
+      function isAndroidWebView() {
+        try {
+          const ua = typeof navigator !== 'undefined' && typeof navigator.userAgent === 'string'
+            ? navigator.userAgent
+            : ''
+          // `; wv)` is the canonical WebView marker; DSH Go's webview island may
+          // also report a stock Chromium UA, so fall back to "Android without a
+          // full browser brand".
+          return /;\s*wv\)/i.test(ua)
+            || (/Android/i.test(ua) && !/Chrome\/\d+/i.test(ua))
+        } catch {
+          return false
+        }
+      }
+
       async function doExport() {
         try {
           const result = await callHost('export-data', null)
@@ -2685,7 +2743,21 @@ window.__ModuleLoader__.load({
             setError(t('export.failed'))
             return
           }
-          const blob = new Blob([JSON.stringify(result.export, null, 2) + '\n'], { type: 'application/json' })
+          const text = JSON.stringify(result.export, null, 2) + '\n'
+          /**
+           * A WebView can expose `<a download>` and still have nowhere to put
+           * the bytes: Android only saves when the embedding app implements a
+           * DownloadListener, and Chromium's WebView cannot hand it a `blob:`.
+           * The click then produces no file, no error, and no second chance (the
+           * object URL is revoked a second later), so Android takes the in-panel
+           * route unconditionally.
+           */
+          if (isAndroidWebView() || typeof URL === 'undefined' || typeof URL.createObjectURL !== 'function') {
+            setExportFallback(text)
+            setNotice(t('export.fallbackHint'))
+            return
+          }
+          const blob = new Blob([text], { type: 'application/json' })
           const url = URL.createObjectURL(blob)
           const link = document.createElement('a')
           link.href = url
@@ -2694,6 +2766,7 @@ window.__ModuleLoader__.load({
           link.click()
           if (link.parentNode !== null) link.parentNode.removeChild(link)
           setTimeout(() => { URL.revokeObjectURL(url) }, 1000)
+          setNotice(t('export.saved'))
         } catch (err) {
           setError(String(err && err.message ? err.message : err))
         }
@@ -2761,6 +2834,18 @@ window.__ModuleLoader__.load({
         let alive = true
         let refreshing = false
         let missed = false
+        /** Consecutive stream errors; reset by any successful frame. */
+        let failures = 0
+        let down = false
+        /**
+         * Monotonic frame counter carried by lite frames. `rev` only moves when
+         * the store is WRITTEN, so a snapshot that changed without a write (the
+         * F7 pause expiring, an external hand-edit that keeps its rev) used to
+         * produce a frame identical to the last one and the panel stayed stale
+         * for the rest of the session. `null` means the Host predates the field
+         * and the rev comparison alone drives the refetch.
+         */
+        let lastSeq = null
         const refresh = () => {
           // One refetch at a time. A frame that arrives mid-flight means the
           // store moved again, and is re-checked after this response lands —
@@ -2780,10 +2865,18 @@ window.__ModuleLoader__.load({
           })
         }
         source.onmessage = (ev) => {
+          failures = 0
+          if (down) {
+            down = false
+            setLiveDown(false)
+          }
           try {
             const pushed = JSON.parse(ev.data)
             if (pushed !== null && typeof pushed === 'object' && pushed.lite === true) {
               const current = viewRef.current
+              const seq = typeof pushed.seq === 'number' ? pushed.seq : null
+              const moved = seq !== null && lastSeq !== null && seq !== lastSeq
+              if (seq !== null) lastSeq = seq
               // A null view used to be ignored here on the assumption that the
               // initial POST `state` is always in flight. When that request
               // failed, nothing ever refetched and the panel stayed on its
@@ -2791,6 +2884,7 @@ window.__ModuleLoader__.load({
               // the Host is alive, so it is a safe trigger to retry.
               if (current === null) refresh()
               else if (current.data !== null && current.data.rev !== pushed.rev) refresh()
+              else if (moved) refresh()
               return
             }
             if (sameSnapshot(pushed, viewRef.current)) return
@@ -2799,6 +2893,21 @@ window.__ModuleLoader__.load({
             // A malformed frame is dropped; the next frame, or 重新载入, catches up.
           }
         }
+        /**
+         * Android kills the WebView renderer, expires the session cookie or
+         * freezes the page in Doze; EventSource then retries every 5 s forever
+         * and the panel shows stale data as if it were live. Six consecutive
+         * failures (≈30 s) is past any transient blip, so say so and let the
+         * user reload — the stream keeps retrying, and the next frame that
+         * lands clears the warning.
+         */
+        source.onerror = () => {
+          failures += 1
+          if (!down && failures >= 6) {
+            down = true
+            setLiveDown(true)
+          }
+        }
         return () => { alive = false; source.close() }
       }, [])
 
@@ -2937,6 +3046,15 @@ window.__ModuleLoader__.load({
       const simById = new Map(sim.results.map((hit) => [hit.id, hit]))
       const omittedById = new Map()
       const truncatedById = new Map()
+      /**
+       * Persona budget marks, from the same plan. `injection.profiles` lists
+       * every persona that actually reached the prompt, with `truncated` when
+       * the ceiling cut it; an enabled persona MISSING from that list was
+       * dropped whole. Both were published by the Host and never read here, so
+       * the panel kept showing full text the model never received.
+       */
+      const renderedProfileById = new Map()
+      const truncatedProfileById = new Map()
       {
         const planItems = injection && typeof injection === 'object' ? injection : {}
         for (const item of Array.isArray(planItems.omitted) ? planItems.omitted : []) {
@@ -2947,6 +3065,12 @@ window.__ModuleLoader__.load({
             truncatedById.set(item.id, item)
           }
         }
+        for (const item of Array.isArray(planItems.profiles) ? planItems.profiles : []) {
+          if (item !== null && typeof item === 'object' && typeof item.id === 'string') {
+            renderedProfileById.set(item.id, item)
+            if (item.truncated === true) truncatedProfileById.set(item.id, item)
+          }
+        }
       }
       const keyword = query.trim().toLowerCase()
       const filtersActive = tagFilter !== '' || modeFilter !== '' || statusFilter !== ''
@@ -3279,13 +3403,28 @@ window.__ModuleLoader__.load({
             : null,
           profiles.length === 0 && profileDraft === null
             ? h('div', { className: 'im-empty' }, t('profiles.empty'))
-            : profiles.map((profile) => h('div', {
+            : profiles.map((profile) => {
+              // Only an ENABLED persona with content can be in the plan, so a
+              // disabled card never wears a stale mark. A Host that publishes no
+              // `injection.profiles` leaves both maps empty and no mark renders.
+              const personaMark = profile.enabled !== true || profile.content === ''
+                ? null
+                : (truncatedProfileById.has(profile.id)
+                  ? 'truncated'
+                  : (renderedProfileById.has(profile.id) ? null : 'omitted'))
+              return h('div', {
               className: 'im-profile-item' + (profile.enabled === true ? '' : ' im-profile-item-off'),
               key: profile.id,
             },
               h('div', { className: 'im-item-head' },
                 h('span', { className: 'im-profile-name' },
                   profile.name !== '' ? profile.name : t('profiles.untitled')),
+                personaMark === null
+                  ? null
+                  : h('span', {
+                    className: 'im-tag ' + (personaMark === 'omitted' ? 'im-tag-off' : 'im-tag-cut'),
+                    title: personaMark === 'omitted' ? t('profiles.omittedTitle') : t('profiles.truncatedTitle'),
+                  }, personaMark === 'omitted' ? t('profiles.omitted') : t('profiles.truncated')),
                 h('span', { className: 'im-spacer' }),
                 h('label', { className: 'im-switch' },
                   h('input', {
@@ -3308,7 +3447,8 @@ window.__ModuleLoader__.load({
               h(EntryBody, { text: profile.content, key: 'body' }),
               profile.updatedAt > 0
                 ? h('div', { className: 'im-meta' }, t('entry.updatedAt', { time: new Date(profile.updatedAt).toLocaleString() }))
-                : null)),
+                : null)
+            }),
           activeProfiles > 0
             ? h('div', { className: 'im-meta im-meter-line' }, t('profiles.chars', { count: profileChars }))
             : null),
@@ -3533,6 +3673,21 @@ window.__ModuleLoader__.load({
           }, batchMode ? t('batch.exit') : t('action.batch')),
           h('span', { className: 'im-spacer' }),
           h('span', { className: 'im-meta' }, t('stats.count', { total: entries.length, active: activeCount }))),
+        exportFallback !== null
+          ? h('div', { className: 'im-diag-fallback' },
+            h('div', { className: 'im-meta' }, t('export.fallbackHint')),
+            h('textarea', {
+              className: 'im-textarea',
+              readOnly: true,
+              value: exportFallback,
+              onFocus: (ev) => { if (typeof ev.target.select === 'function') ev.target.select() },
+            }),
+            h('div', { className: 'im-row-wrap' },
+              h('button', { className: 'im-btn', onClick: () => setExportFallback(null) }, t('export.fallbackClose'))))
+          : null,
+        isAndroidWebView()
+          ? h('div', { className: 'im-meta' }, t('import.webviewHint'))
+          : null,
         h('div', { className: 'im-divider' }),
         h('div', { className: 'im-meta' },
           storage.path ? t('storage.file', { path: storage.path }) : t('storage.noFile')),
@@ -3653,6 +3808,7 @@ window.__ModuleLoader__.load({
                   }))
                 : null)
             : null),
+        liveDown ? h('div', { className: 'im-meta', role: 'status' }, t('sse.down')) : null,
         error !== '' ? h('div', { className: 'im-err', role: 'alert' }, error) : null,
         error === '' && notice !== '' ? h('div', { className: 'im-ok', role: 'status', 'aria-live': 'polite' }, notice) : null,
         error === '' && notice === '' && storage.error ? h('div', { className: 'im-err', role: 'alert' }, storage.error) : null,
@@ -4018,7 +4174,7 @@ window.__ModuleLoader__.load({
         box.id = id
         box.setAttribute('role', 'status')
         box.style.cssText = [
-          'position:fixed', 'right:16px', 'bottom:16px', 'z-index:2147483000',
+          'position:fixed', 'right:16px', 'bottom:calc(16px + env(safe-area-inset-bottom,0px))', 'z-index:2147483000',
           'max-width:min(380px,calc(100vw - 32px))',
           'background:#3a1d1d', 'color:#ffe8e8', 'border:1px solid #7a3a3a',
           'border-radius:10px', 'padding:12px 14px',

package/lib/index.js

@@ -182,6 +182,24 @@ const TRUSTED_HOSTS_ENV = 'DSH_INSTRUCTION_MEMORY_TRUSTED_HOSTS'
  * volume.
  */
 const ALLOW_EXTERNAL_BACKUP_ENV = 'DSH_INSTRUCTION_MEMORY_ALLOW_EXTERNAL_BACKUP'
+/**
+ * Opt-in "no fence, no route" switch.
+ *
+ * Without a `connection` service the plugin falls back to its own loopback /
+ * same-origin rule. On a desktop that is a real boundary; on Android it is not,
+ * because loopback lives in a namespace every app on the device shares — any
+ * app with INTERNET can then rewrite the instructions of every later turn.
+ * DSH Go's build-time route guard normally closes that, but the guard is a
+ * platform property: a `dsh web` started without `--patch` silently loses it.
+ * Setting this to 1 makes the plugin refuse instead of degrade, so the failure
+ * mode becomes a settings page that cannot load rather than a writable one.
+ */
+const REQUIRE_AUTH_FENCE_ENV = 'DSH_INSTRUCTION_MEMORY_REQUIRE_AUTH_FENCE'
+/** Is the fail-closed switch on? Read per request so a restart is not needed. */
+const requireAuthFence = () => {
+  const raw = process.env[REQUIRE_AUTH_FENCE_ENV]
+  return typeof raw === 'string' && raw.trim() === '1'
+}
 /**
  * How often the store file is stat-ed as a fallback for `fs.watch` (F19).
  *
@@ -1774,7 +1792,14 @@ export function buildBlock(data, now = Date.now()) {
  * Plugin
  * ------------------------------------------------------------------ */
 
-export function apply(ctx) {
+export function apply(ctx, deps = {}) {
+  /**
+   * Test seam for the OS watcher. Production passes nothing and this resolves
+   * to `node:fs`'s `watch`; the regression that matters — the watcher dying
+   * and the 5s poller having to take over — otherwise needs a real directory
+   * to be deleted mid-test, which no contract test can do reproducibly.
+   */
+  const watchStore = typeof deps.watch === 'function' ? deps.watch : watch
   const systemPrompt = ctx.systemPrompt
 
   const state = {
@@ -2209,6 +2234,18 @@ export function apply(ctx) {
    * pushSnapshot).
    */
   const sseStreams = new Map()
+  /**
+   * Monotonic counter of pushed frames. It exists because `rev` is a DISK
+   * revision: it only moves when the store is written. Two legitimate pushes
+   * change what the prompt sees without writing anything — the F7 pause
+   * expiring (see the mute timer) and an external reload that keeps the file's
+   * rev — and a lite subscriber compares rev to decide whether to refetch. Both
+   * therefore produced a frame identical to the one already on screen, so the
+   * panel kept showing the muted/old state while the host had already moved on.
+   * `seq` is process-local and never persisted; a full-frame subscriber never
+   * reads it.
+   */
+  let stateSeq = 0
   /**
    * Shared heartbeat over every live event stream, started with the first
    * subscriber and stopped with the last. Two jobs:
@@ -2264,12 +2301,14 @@ export function apply(ctx) {
 
   const pushSnapshot = () => {
     if (disposed || sseStreams.size === 0) return
+    // Every broadcast bumps the counter, whether or not the disk rev moved.
+    stateSeq += 1
     // A lite stream only needs to know that the store moved: it fetches the
     // snapshot through POST `state` when the rev it sees differs from the one
     // on screen. The full frame is built LAZILY, so a page whose subscribers
     // are all lite (the current client) never pays for serialising the whole
     // store — up to ~3.4 MB at the 200 × 6,000-character cap — on every save.
-    const litePayload = 'data: ' + JSON.stringify({ rev: state.data.rev || 0, lite: true }) + '\n\n'
+    const litePayload = 'data: ' + JSON.stringify({ rev: state.data.rev || 0, lite: true, seq: stateSeq }) + '\n\n'
     let fullPayload = null
     for (const [send, entry] of Array.from(sseStreams)) {
       try {
@@ -2401,7 +2440,7 @@ export function apply(ctx) {
   const startWatching = () => {
     if (disposed || storeWatcher !== null) return
     try {
-      storeWatcher = watch(dirname(storePath), { persistent: false }, (event, filename) => {
+      storeWatcher = watchStore(dirname(storePath), { persistent: false }, (event, filename) => {
         // Only events naming memory.json matter; the .tmp/.bak/.lock churn of
         // our own writes is filtered out here (the content compare in
         // onStoreFileEvent catches what slips through).
@@ -2511,6 +2550,17 @@ export function apply(ctx) {
     const raw = process.env[ALLOW_EXTERNAL_BACKUP_ENV]
     return typeof raw === 'string' && raw.trim() === '1'
   }
+  /**
+   * The "set this env var and restart" footer shared by the three backup paths.
+   *
+   * On Linux — and therefore on every Android build, DSH Go included — the
+   * engine is started through `/usr/bin/env -i`, which leaves no way for the
+   * user to set it. Telling them to export a variable they cannot export is a
+   * dead instruction; point at the route that does work instead.
+   */
+  const externalBackupHint = () => (process.platform === 'linux'
+    ? '要使用其他磁盘请设置 ' + ALLOW_EXTERNAL_BACKUP_ENV + '=1 后重启宿主（DSH Go / Android 用 env -i 启动引擎，该变量设不了，请改用「导出」把 JSON 复制出来备份）'
+    : '要使用其他磁盘请设置 ' + ALLOW_EXTERNAL_BACKUP_ENV + '=1 后重启宿主')
   /** `path`'s real location, or null when it (or a parent) is unavailable. */
   const realPathOrNull = (path) => {
     try {
@@ -2576,7 +2626,7 @@ export function apply(ctx) {
     if (refusedBackupDir !== configured) {
       refusedBackupDir = configured
       state.storageWarning = '备份位置 ' + displayPath(configured) + ' 不在 DSH 主目录内，已忽略（备份与历史快照一律写回默认位置）；'
-        + '要使用其他磁盘请设置 ' + ALLOW_EXTERNAL_BACKUP_ENV + '=1 后重启宿主'
+        + externalBackupHint()
       logInfo('ignoring backupDir outside the harness home: ' + configured)
     }
     return ''
@@ -3986,8 +4036,7 @@ export function apply(ctx) {
           return {
             ok: false,
             saved: false,
-            message: '备份位置必须位于 DSH 主目录内（' + displayPath(dshRootPath()) + '）；要使用其他磁盘请设置环境变量 '
-              + ALLOW_EXTERNAL_BACKUP_ENV + '=1 后重启宿主',
+            message: '备份位置必须位于 DSH 主目录内（' + displayPath(dshRootPath()) + '）；' + externalBackupHint(),
             snapshot: snapshot(),
           }
         }
@@ -4620,8 +4669,7 @@ export function apply(ctx) {
       return {
         ok: false,
         saved: false,
-        message: '导出目录必须位于 DSH 主目录内（' + displayPath(dshRootPath()) + '）；要写入其他磁盘请设置环境变量 '
-          + ALLOW_EXTERNAL_BACKUP_ENV + '=1 后重启宿主',
+        message: '导出目录必须位于 DSH 主目录内（' + displayPath(dshRootPath()) + '）；' + externalBackupHint(),
         snapshot: snapshot(),
       }
     }
@@ -5313,7 +5361,7 @@ export function apply(ctx) {
    * `?lite=1` is additive on purpose: a client that does not ask (every build
    * before this one) keeps receiving the bare snapshot exactly as documented,
    * so an old client against a new Host is unchanged. A lite subscriber gets
-   * `{ rev, lite: true }` and fetches the snapshot itself when the rev differs
+   * `{ rev, lite, seq }` and fetches the snapshot itself when either moved
    * — which is the difference between pushing ~3.4 MB per save (maximal store)
    * and pushing ~40 bytes.
    *
@@ -5342,7 +5390,7 @@ export function apply(ctx) {
    *
    * Frames carry the bare snapshot — the same shape `state` answers with —
    * which the Client's normalizer already accepts. A subscriber that appends
-   * `?lite=1` gets `{ rev, lite: true }` frames instead (see pushSnapshot).
+   * `?lite=1` gets `{ rev, lite, seq }` frames instead (see pushSnapshot).
    */
   const handleEventStream = (req, res) => {
     // Same fence as the POST path: an EventSource carries the login cookie, so
@@ -5367,6 +5415,16 @@ export function apply(ctx) {
       'cache-control': 'no-store',
       connection: 'keep-alive',
     })
+    // Mobile renderers are killed without a FIN (Android LMK) or lose their
+    // network mid-stream (Wi-Fi → cellular). The heartbeat cannot notice a peer
+    // that never errors — every write succeeds into the socket buffer — so at
+    // least let the OS probe for a dead peer, and never sit on Nagle.
+    try {
+      if (res.socket && typeof res.socket.setKeepAlive === 'function') res.socket.setKeepAlive(true, 30_000)
+      if (res.socket && typeof res.socket.setNoDelay === 'function') res.socket.setNoDelay(true)
+    } catch {
+      // A double without a socket (tests) or a closed one: nothing to tune.
+    }
     // Ask the browser to retry politely if the stream drops (e.g. the host was
     // restarted) instead of hammering the route.
     res.write('retry: 5000\n\n')
@@ -5399,7 +5457,7 @@ export function apply(ctx) {
       if (closed) return
       try {
         send(lite
-          ? 'data: ' + JSON.stringify({ rev: state.data.rev || 0, lite: true }) + '\n\n'
+          ? 'data: ' + JSON.stringify({ rev: state.data.rev || 0, lite: true, seq: stateSeq }) + '\n\n'
           : 'data: ' + JSON.stringify(snapshot()) + '\n\n')
       } catch {
         cleanup()
@@ -5463,6 +5521,24 @@ export function apply(ctx) {
       }
       return 'gate'
     }
+    /**
+     * Deeper defence for deployments where loopback is not a boundary: on
+     * Android every app shares the loopback namespace, so "reachable only from
+     * this machine" stops meaning "reachable only from this user". With the
+     * switch set, a profile without a fence gets NO route at all — a settings
+     * page that fails to load is a far better outcome than one that can be
+     * rewritten by any installed app.
+     */
+    if (requireAuthFence()) {
+      logInfo('route refused a request: no connection fence and ' + REQUIRE_AUTH_FENCE_ENV + '=1')
+      res.writeHead(503, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+      res.end(JSON.stringify({
+        ok: false,
+        message: '该 profile 没有宿主的 connection 服务，已按 ' + REQUIRE_AUTH_FENCE_ENV
+          + '=1 拒绝请求（fail-closed）；如需在无鉴权宿主上使用，请移除该环境变量。',
+      }))
+      return 'rejected'
+    }
     if (!guardHost) {
       logInfo('route refused a request: non-loopback bind without an authentication fence')
       res.writeHead(503, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })

package/memory.schema.json

@@ -37,7 +37,7 @@
       "type": "integer",
       "minimum": 800,
       "maximum": 40000,
-      "description": "指令注入字数上限（字符，非 token）。超出部分按优先级取舍，未注入的条目会在设置页标记。用户形象不占用此上限。",
+      "description": "指令注入字数上限（字符，非 token）。超出部分按优先级取舍，未注入的条目会在设置页标记。用户形象同样计入此上限：形象先占用、指令拿余量。",
       "default": 4000
     },
     "backupDir": {
@@ -135,7 +135,7 @@
     "profiles": {
       "type": "array",
       "maxItems": 50,
-      "description": "用户形象：关于**用户本人**的身份背景、喜好、性格与追求。它们不参与指令字数上限，始终完整注入，并带有一段「仅供调整表达侧重、不得为迎合而改变事实」的护栏说明；形象不是让模型扮演的角色。",
+      "description": "用户形象：关于**用户本人**的身份背景、喜好、性格与追求。它们与指令共用同一个注入字数上限（形象先占用、指令拿余量），形象段自身另有 4000 字符上限，超出时按序截断并在段末说明；带有一段「仅供调整表达侧重、不得为迎合而改变事实」的护栏说明；形象不是让模型扮演的角色。",
       "items": {
         "type": "object",
         "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-instruction-memory",
-  "version": "1.5.3",
+  "version": "1.5.5",
   "description": "User-only instruction memory for DSH: long-term instructions maintained in the settings UI and auto-injected into every conversation — the model has no write access. 指令记忆：只由用户在设置页维护的长期指令，自动注入此后每轮对话；模型没有任何写入口。",
   "license": "MIT",
   "type": "module",
@@ -31,7 +31,8 @@
     "CHANGELOG.md",
     "LICENSE",
     "memory.schema.json",
-    "docs/screenshot.png"
+    "docs/screenshot.png",
+    "docs/demo.html"
   ],
   "keywords": [
     "dsh",