dsh-mnemon 0.2.0 → 0.2.2

package/README.md

@@ -3,7 +3,7 @@
 <p align="center"><strong>English</strong> · <a href="./README.zh-CN.md">简体中文</a></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.0-5b5bd6" alt="release v0.2.0">
+  <img src="https://img.shields.io/badge/release-v0.2.2-5b5bd6" alt="release v0.2.2">
   <img src="https://img.shields.io/badge/memory-3%20tiers-087c5b" alt="three memory tiers">
   <img src="https://img.shields.io/badge/providers-9-c66a09" alt="nine providers">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 or newer">
@@ -15,14 +15,14 @@
 
 <p align="center">
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">
-    <img src="https://raw.githubusercontent.com/omdsh-dev/dsh-mnemon/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo-poster.jpg" alt="dsh-mnemon v0.2.0 Memory System status and provider overview" width="1180">
+    <img src="https://raw.githubusercontent.com/omdsh-dev/dsh-mnemon/9196fd9991676a6bd9a84d615fcd301eb52e872a/docs/assets/media/dsh-mnemon-memory-system-demo-poster.jpg" alt="dsh-mnemon v0.2.0 live multi-memory snapshot and observable provider surfaces" width="1180">
   </a>
 </p>
 
 <p align="center">
   <a href="./docs/en/capabilities.md"><strong>Explore the capability map</strong></a> ·
   <a href="./docs/en/getting-started.md">Start in five minutes</a> ·
-  <a href="./docs/en/releases/v0.2.0.md">Read the v0.2.0 notes</a> ·
+  <a href="./docs/en/releases/v0.2.2.md">Read the v0.2.2 notes</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">Watch the widescreen demo</a>
 </p>
 
@@ -190,7 +190,7 @@ See [Operations, security, and troubleshooting](./docs/en/operations.md) for bac
 | Configure scope, routing, and model selection | [Configuration](./docs/en/configuration.md) |
 | Back up, update, or troubleshoot | [Operations](./docs/en/operations.md) |
 | Integrate tools, commands, or RPC | [Interface reference](./docs/en/interfaces.md) |
-| Review the release | [v0.2.0 release notes](./docs/en/releases/v0.2.0.md) |
+| Review the release | [v0.2.2 release notes](./docs/en/releases/v0.2.2.md) |
 
 See the [documentation hub](./docs/en/README.md) for the full map.
 

package/README.zh-CN.md

@@ -3,7 +3,7 @@
 <p align="center"><a href="./README.md">English</a> · <strong>简体中文</strong></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.0-5b5bd6" alt="发布版本 v0.2.0">
+  <img src="https://img.shields.io/badge/release-v0.2.2-5b5bd6" alt="发布版本 v0.2.2">
   <img src="https://img.shields.io/badge/%E8%AE%B0%E5%BF%86-3%20%E5%B1%82-087c5b" alt="三层记忆">
   <img src="https://img.shields.io/badge/Provider-9-c66a09" alt="九种 Provider">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 或更新版本">
@@ -15,14 +15,14 @@
 
 <p align="center">
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">
-    <img src="https://raw.githubusercontent.com/omdsh-dev/dsh-mnemon/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo-poster.jpg" alt="dsh-mnemon v0.2.0 记忆系统与 Provider 状态概览" width="1180">
+    <img src="https://raw.githubusercontent.com/omdsh-dev/dsh-mnemon/9196fd9991676a6bd9a84d615fcd301eb52e872a/docs/assets/media/dsh-mnemon-memory-system-demo-poster.jpg" alt="dsh-mnemon v0.2.0 多记忆体实时快照与 Provider 可观察范围" width="1180">
   </a>
 </p>
 
 <p align="center">
   <a href="./docs/zh-CN/capabilities.md"><strong>先看能力地图</strong></a> ·
   <a href="./docs/zh-CN/getting-started.md">5 分钟开始</a> ·
-  <a href="./docs/zh-CN/releases/v0.2.0.md">v0.2.0 升级说明</a> ·
+  <a href="./docs/zh-CN/releases/v0.2.2.md">v0.2.2 升级说明</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">观看宽屏实机演示</a>
 </p>
 
@@ -190,7 +190,7 @@ dsh plugin --profile headless add "link:/absolute/path/to/dsh-mnemon"
 | 配置范围、路由与模型 | [配置参考](./docs/zh-CN/configuration.md) |
 | 备份、更新或排障 | [运维指南](./docs/zh-CN/operations.md) |
 | 接入工具、命令或 RPC | [接口参考](./docs/zh-CN/interfaces.md) |
-| 查看本次升级 | [v0.2.0 发布说明](./docs/zh-CN/releases/v0.2.0.md) |
+| 查看本次升级 | [v0.2.2 发布说明](./docs/zh-CN/releases/v0.2.2.md) |
 
 完整目录见[文档中心](./docs/zh-CN/README.md)。
 

package/lib/client.js

@@ -33,6 +33,7 @@ window.__ModuleLoader__.load({
 		let react_dom_client = require("react-dom/client");
 		//#region src/shared/contracts.ts
 		const MNEMON_READ_CHANNEL = "/dsh-mnemon-read";
+		const MNEMON_ACTIVATION_CHANNEL = "/dsh-mnemon-activation";
 		const MNEMON_WRITE_CHANNEL = "/dsh-mnemon-write";
 		const MNEMON_PACK_CHANNEL = "/dsh-mnemon-pack";
 		const MNEMON_SETTINGS_CHANNEL = "/dsh-mnemon-settings";
@@ -49,6 +50,15 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/api.ts
 		const turnActivityCache = /* @__PURE__ */ new WeakMap();
+		function isActivationOnly(request) {
+			return typeof request.active === "boolean" && Object.entries(request).every(([field, value]) => field === "active" || value === void 0);
+		}
+		function isMissingActivationChannel(reason) {
+			return reason instanceof Error && reason.message === `transport failure for /dsh-mnemon-activation/body: HTTP 404`;
+		}
+		function isMissingPrivateProviderServices(reason) {
+			return reason instanceof Error && reason.message === "unknown write endpoint: provider-services";
+		}
 		async function loadTurnActivities(connection, sessionId, requiredCursor) {
 			let sessions = turnActivityCache.get(connection);
 			if (sessions === void 0) {
@@ -155,7 +165,11 @@ window.__ModuleLoader__.load({
 				return this.call(MNEMON_READ_CHANNEL, "body-directory", this.scoped()).catch(() => this.bodies());
 			}
 			providerServices() {
-				return this.call(MNEMON_READ_CHANNEL, "provider-services", this.scoped());
+				const payload = this.scoped();
+				return this.call(MNEMON_WRITE_CHANNEL, "provider-services", payload).catch((reason) => {
+					if (!isMissingPrivateProviderServices(reason)) throw reason;
+					return this.call(MNEMON_READ_CHANNEL, "provider-services", payload);
+				});
 			}
 			updateProviderService(request) {
 				return this.call(MNEMON_WRITE_CHANNEL, "provider-service-update", this.scoped(request));
@@ -215,10 +229,18 @@ window.__ModuleLoader__.load({
 				return this.call(MNEMON_WRITE_CHANNEL, "body-create", this.scoped(request));
 			}
 			updateBody(memoryBodyId, request) {
-				return this.call(MNEMON_WRITE_CHANNEL, "body-update", this.scoped({
+				if (!isActivationOnly(request)) return this.call(MNEMON_WRITE_CHANNEL, "body-update", this.scoped({
 					memoryBodyId,
 					...request
 				}));
+				const payload = this.scoped({
+					memoryBodyId,
+					active: request.active
+				});
+				return this.call(MNEMON_ACTIVATION_CHANNEL, "body", payload).catch((reason) => {
+					if (!isMissingActivationChannel(reason)) throw reason;
+					return this.call(MNEMON_WRITE_CHANNEL, "body-update", payload);
+				});
 			}
 			reconnectBody(memoryBodyId) {
 				return this.call(MNEMON_WRITE_CHANNEL, "body-reconnect", this.scoped({ memoryBodyId }));
@@ -416,6 +438,7 @@ window.__ModuleLoader__.load({
 			"common.cancel": "取消",
 			"common.copyId": "复制 ID",
 			"common.readOnly": "只读模式",
+			"common.activationOnly": "仅可切换激活状态",
 			"common.agentSupervised": "独立任务 Agent",
 			"common.active": "已激活",
 			"common.inactive": "未激活",
@@ -1271,6 +1294,7 @@ window.__ModuleLoader__.load({
 			"common.cancel": "Cancel",
 			"common.copyId": "Copy ID",
 			"common.readOnly": "Read only",
+			"common.activationOnly": "Activation control only",
 			"common.agentSupervised": "Subagent supervised",
 			"common.active": "Active",
 			"common.inactive": "Inactive",
@@ -2138,7 +2162,7 @@ window.__ModuleLoader__.load({
 			return `${(bytes / 1048576).toFixed(1)} MB`;
 		}
 		function MnemonPackSection({ connection, sessionId, workspaceId, refreshKey, t, embedded = false }) {
-			const client = (0, react.useMemo)(() => connection === void 0 ? null : new MnemonClient(connection, sessionId, workspaceId), [
+			const client = (0, react.useMemo)(() => connection === void 0 || connection.isLoopback === false ? null : new MnemonClient(connection, sessionId, workspaceId), [
 				connection,
 				sessionId,
 				workspaceId
@@ -2968,7 +2992,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		function ProviderSettingsSection(props) {
-			const client = (0, react.useMemo)(() => props.connection === void 0 ? null : new MnemonClient(props.connection, props.sessionId, props.workspaceId), [
+			const client = (0, react.useMemo)(() => props.connection === void 0 || props.connection.isLoopback === false ? null : new MnemonClient(props.connection, props.sessionId, props.workspaceId), [
 				props.connection,
 				props.sessionId,
 				props.workspaceId
@@ -3250,7 +3274,8 @@ window.__ModuleLoader__.load({
 			const activeScope = coreDraft(coreSnapshot.value).storageScope === "workspace" ? "workspace" : "global";
 			const error = validation(t, draft);
 			const loading = coreSnapshot.status === "loading" || interactionSnapshot.status === "loading";
-			const writable = coreSnapshot.writable && interactionSnapshot.writable;
+			const localWrites = connection?.isLoopback !== false;
+			const writable = localWrites && coreSnapshot.writable && interactionSnapshot.writable;
 			if (coreSnapshot.status === "unavailable" && interactionSnapshot.status === "unavailable") return null;
 			const edit = (field, value) => {
 				setDraft((current) => ({
@@ -3314,8 +3339,8 @@ window.__ModuleLoader__.load({
 					setSaving(false);
 				}
 			};
-			const coreDisabled = loading || saving || !coreSnapshot.writable;
-			const interactionDisabled = loading || saving || !interactionSnapshot.writable;
+			const coreDisabled = loading || saving || !localWrites || !coreSnapshot.writable;
+			const interactionDisabled = loading || saving || !localWrites || !interactionSnapshot.writable;
 			const scopeChanging = dirty.has("storageScope") || dirty.has("dataDir");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
 				className: MnemonSettingsCard_module_css_default.page,
@@ -5715,7 +5740,7 @@ window.__ModuleLoader__.load({
 					children: [
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("sidebar.activeSpaces") }),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: props.catalogKnown ? `${props.activeBodies} / ${props.bodyCount}` : "— / —" }),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("small", { children: props.writeEnabled ? t("common.agentSupervised") : t("common.readOnly") })
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("small", { children: props.writeEnabled ? t("common.agentSupervised") : props.activationEnabled ? t("common.activationOnly") : t("common.readOnly") })
 					]
 				})]
 			});
@@ -5730,6 +5755,7 @@ window.__ModuleLoader__.load({
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PageHeader, {
 					title: t("nav.bodies"),
 					description: t("overview.description"),
+					meta: props.writeEnabled ? t("common.agentSupervised") : props.activationEnabled ? t("common.activationOnly") : t("common.readOnly"),
 					action: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: MnemonView_module_css_default.memoryHeaderActions,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -7099,7 +7125,7 @@ window.__ModuleLoader__.load({
 				role: "switch",
 				"aria-checked": body.active,
 				"aria-label": t("overview.toggleAria", { name: body.name }),
-				disabled: !props.writeEnabled || changing === body.id || deletingBody === body.id,
+				disabled: !props.activationEnabled || changing === body.id || deletingBody === body.id,
 				onClick: () => void toggle(body),
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 					className: MnemonView_module_css_default.bodySwitchTrack,
@@ -10012,7 +10038,7 @@ window.__ModuleLoader__.load({
 						snapshot !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 							className: MnemonView_module_css_default.versionList,
 							children: snapshot.components.map((component) => {
-								const canUpdate = component.outdated && component.updateSupported && component.checkError === void 0;
+								const canUpdate = props.writeEnabled && component.outdated && component.updateSupported && component.checkError === void 0;
 								const state = component.checkError !== void 0 ? t("versions.unknown") : component.outdated ? t("versions.available") : t("versions.current");
 								return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("article", {
 									"data-outdated": component.outdated || void 0,
@@ -10162,6 +10188,7 @@ window.__ModuleLoader__.load({
 					}),
 					versionsOpen && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(VersionDialog, {
 						client: props.client,
+						writeEnabled: props.writeEnabled,
 						onClose: () => setVersionsOpen(false),
 						onRefreshStatus: props.onRefresh
 					})
@@ -10559,7 +10586,8 @@ window.__ModuleLoader__.load({
 				setRevision((value) => value + 1);
 				loadStatus();
 			};
-			const writeEnabled = status?.writeEnabled === true;
+			const activationEnabled = status?.writeEnabled === true;
+			const writeEnabled = activationEnabled && connection.isLoopback !== false;
 			const stats = status?.stats;
 			const catalogKnown = status?.memoryBodies !== void 0;
 			const memoryBodies = (0, react.useMemo)(() => (status?.memoryBodies ?? []).map(normalizeMemoryBody), [status]);
@@ -10693,10 +10721,12 @@ window.__ModuleLoader__.load({
 								activeBodies,
 								bodyCount: memoryBodies.length,
 								catalogKnown,
+								activationEnabled,
 								writeEnabled
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(MemoryNavigation, {
 								page,
+								activationEnabled,
 								writeEnabled,
 								onSelect: selectPage,
 								onRemember: () => openRemember(),
@@ -10712,6 +10742,7 @@ window.__ModuleLoader__.load({
 										client,
 										metadataClient: taskClient,
 										revision,
+										activationEnabled,
 										writeEnabled,
 										agentAvailable: taskAgentAvailable,
 										fallbackBodies: memoryBodies,
@@ -10772,6 +10803,7 @@ window.__ModuleLoader__.load({
 										client,
 										status,
 										loading: statusLoading,
+										writeEnabled,
 										onRefresh: () => void loadStatus()
 									})
 								]
@@ -10993,7 +11025,7 @@ window.__ModuleLoader__.load({
 				setSubmitting(submitActiveRef.current);
 				const client = new MnemonClient(connection, sessionId);
 				client.status().then((status) => {
-					if (alive && requestVersionRef.current === requestVersion) setWriteEnabled(status.writeEnabled);
+					if (alive && requestVersionRef.current === requestVersion) setWriteEnabled(status.writeEnabled && connection.isLoopback !== false);
 				}).catch(() => {
 					if (alive && requestVersionRef.current === requestVersion) setWriteEnabled(false);
 				});

package/lib/index.js

@@ -896,12 +896,17 @@ var DocumentManager = class {
 const GUIDANCE_SECTION_NAME = "mnemon:routing";
 const RUNTIME_MEMORY_SECTION_NAME = "mnemon:runtime-memory";
 const ROUTING_GUIDANCE = "Use memory only by need. For substantial project records, search active Mnemon Documents before deep recall. Call mnemon_recall when durable history may matter or an exact prior detail is missing; never infer a missing historical rule. New explicit reusable facts normally go to mnemon_runtime_memory. A write completes only with a tool receipt.";
+const RUNTIME_MEMORY_EMPTY_BRACES_VARIABLE = "mnemon_runtime_memory_empty_braces";
+const LITERAL_EMPTY_BRACES = "{{}}";
 function systemPrompt(ctx) {
 	return ctx.get("systemPrompt");
 }
 function scopedSystemPrompt(agent) {
 	return agent.ctx.get?.("systemPrompt");
 }
+function runtimeMemoryPromptText(runtimeMemory) {
+	return runtimeMemory.contextText().replaceAll(LITERAL_EMPTY_BRACES, `{{${RUNTIME_MEMORY_EMPTY_BRACES_VARIABLE}}}`);
+}
 function registerGuidance(ctx, config) {
 	systemPrompt(ctx)?.section?.({
 		name: GUIDANCE_SECTION_NAME,
@@ -911,10 +916,12 @@ function registerGuidance(ctx, config) {
 }
 /** Inject the latest committed USER.md/MEMORY.md projections on every prompt assembly. */
 function registerRuntimeMemoryContext(ctx, runtimeMemory) {
-	systemPrompt(ctx)?.section?.({
+	const prompt = systemPrompt(ctx);
+	prompt?.variable?.(RUNTIME_MEMORY_EMPTY_BRACES_VARIABLE, () => LITERAL_EMPTY_BRACES);
+	prompt?.section?.({
 		name: RUNTIME_MEMORY_SECTION_NAME,
 		order: 145,
-		text: () => runtimeMemory.contextText()
+		text: () => runtimeMemoryPromptText(runtimeMemory)
 	});
 }
 /** Shadow the global fallback with the current Agent workspace's hot memory. */
@@ -922,7 +929,7 @@ function registerAgentRuntimeMemoryContext(agent, runtimeMemory) {
 	const dispose = scopedSystemPrompt(agent)?.section?.({
 		name: RUNTIME_MEMORY_SECTION_NAME,
 		order: 145,
-		text: () => runtimeMemory().contextText()
+		text: () => runtimeMemoryPromptText(runtimeMemory())
 	});
 	return typeof dispose === "function" ? dispose : () => {};
 }
@@ -5358,6 +5365,7 @@ var HindsightProvider = class extends HttpMemoryProvider {
 //#endregion
 //#region src/shared/contracts.ts
 const MNEMON_READ_CHANNEL = "/dsh-mnemon-read";
+const MNEMON_ACTIVATION_CHANNEL = "/dsh-mnemon-activation";
 const MNEMON_WRITE_CHANNEL = "/dsh-mnemon-write";
 const MNEMON_PACK_CHANNEL = "/dsh-mnemon-pack";
 const MNEMON_SETTINGS_CHANNEL = "/dsh-mnemon-settings";
@@ -9132,7 +9140,7 @@ function createReadHandler(input, lifecycle, runtimeMemory, storage, versions) {
 				case "graph": return success$1(await service.graph(void 0, Array.isArray(payload.memoryBodyIds) ? payload.memoryBodyIds.map(String) : void 0));
 				case "bodies": return success$1(await service.bodies());
 				case "body-directory": return success$1(service.bodyDirectory());
-				case "provider-services": return success$1(service.memoryBodies.providerServices({ includeSecrets: true }));
+				case "provider-services": return success$1(service.memoryBodies.providerServices());
 				case "list": return success$1(await service.list({
 					...payload.query === void 0 ? {} : { query: String(payload.query) },
 					...payload.category === void 0 ? {} : { category: payload.category },
@@ -9191,6 +9199,36 @@ function createReadHandler(input, lifecycle, runtimeMemory, storage, versions) {
 		}
 	};
 }
+const ACTIVATION_PAYLOAD_FIELDS = /* @__PURE__ */ new Set([
+	"memoryBodyId",
+	"active",
+	"sessionId",
+	"workspaceId"
+]);
+/**
+* Expose only DSH read-routing activation to trusted Web hosts. Metadata,
+* provider connections, credentials, and durable memory writes stay on the
+* loopback-only write channel.
+*/
+function createActivationHandler(input) {
+	return async (endpoint, rawPayload) => {
+		try {
+			if (endpoint !== "body") return badRequest$1(`unknown activation endpoint: ${endpoint}`);
+			const payload = object$1(rawPayload);
+			const unexpected = Object.keys(payload).filter((field) => !ACTIVATION_PAYLOAD_FIELDS.has(field));
+			if (unexpected.length > 0) return badRequest$1(`unsupported activation fields: ${unexpected.join(", ")}`);
+			if (typeof payload.memoryBodyId !== "string" || payload.memoryBodyId.trim() === "") return badRequest$1("memoryBodyId must be a non-empty string");
+			if (typeof payload.active !== "boolean") return badRequest$1("active must be a boolean");
+			if (payload.sessionId !== void 0 && typeof payload.sessionId !== "string") return badRequest$1("sessionId must be a string");
+			if (payload.workspaceId !== void 0 && typeof payload.workspaceId !== "string") return badRequest$1("workspaceId must be a string");
+			const { graph } = runtimeFor(input, payload);
+			if (!graph.service.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
+			return success$1(graph.service.updateBody(payload.memoryBodyId.trim(), { active: payload.active }));
+		} catch (error) {
+			return failure$1(error);
+		}
+	};
+}
 function createWriteHandler(input, lifecycle, runtimeMemory, versions) {
 	return async (endpoint, rawPayload) => {
 		try {
@@ -9203,6 +9241,7 @@ function createWriteHandler(input, lifecycle, runtimeMemory, versions) {
 			}
 			const resolved = runtimeFor(input, payload, runtimeMemory);
 			const { service } = resolved.graph;
+			if (endpoint === "provider-services") return success$1(service.memoryBodies.providerServices({ includeSecrets: true }));
 			if (!service.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
 			const selectedWorkspace = resolved.route?.selectedWorkspace;
 			const documentController = resolved.explicitWorkspace && selectedWorkspace !== void 0 ? resolved.graph.documents.forWorkspace(selectedWorkspace.path) : void 0;
@@ -9413,10 +9452,11 @@ function createPackHandler(input, writeEnabled = true) {
 		}
 	};
 }
-/** Read operations are available to trusted Web hosts; local mutations stay loopback-only. */
+/** Read and activation control are available to trusted Web hosts; all other mutations stay loopback-only. */
 function registerRpc(connection, input, lifecycle, runtimeMemory, storage, packs, versions) {
 	const versionManager = versions ?? new VersionUpdateManager({ mnemonCliPath: () => findVersionCli(input) });
 	connection.rpc.handle(MNEMON_READ_CHANNEL, createReadHandler(input, lifecycle, runtimeMemory, storage, versionManager), { authority: "trusted-host" });
+	connection.rpc.handle(MNEMON_ACTIVATION_CHANNEL, createActivationHandler(input), { authority: "trusted-host" });
 	connection.rpc.handle(MNEMON_WRITE_CHANNEL, createWriteHandler(input, lifecycle, runtimeMemory, versionManager), { authority: "loopback" });
 	const packManager = isRoutedRuntime(input) ? input : packs;
 	const config = input.config;

package/lib/types/channels.d.ts

@@ -1 +1 @@
-export { MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './shared/contracts.ts';
+export { MNEMON_ACTIVATION_CHANNEL, MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './shared/contracts.ts';

package/lib/types/client/locales.d.ts

@@ -37,6 +37,7 @@ export declare const zh: {
     'common.cancel': string;
     'common.copyId': string;
     'common.readOnly': string;
+    'common.activationOnly': string;
     'common.agentSupervised': string;
     'common.active': string;
     'common.inactive': string;
@@ -893,6 +894,7 @@ export declare const en: {
     'common.cancel': string;
     'common.copyId': string;
     'common.readOnly': string;
+    'common.activationOnly': string;
     'common.agentSupervised': string;
     'common.active': string;
     'common.inactive': string;

package/lib/types/rpc.d.ts

@@ -6,11 +6,17 @@ import type { StorageScopeInspector } from './storage-scope.ts';
 import type { MnemonPackManager } from './pack.ts';
 import type { LiveMnemonRuntime } from './live-runtime.ts';
 import { VersionUpdateManager } from './version-updates.ts';
-export { MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './channels.ts';
+export { MNEMON_ACTIVATION_CHANNEL, MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './channels.ts';
 type RuntimeInput = MnemonService | LiveMnemonRuntime;
 export declare function createReadHandler(input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, versions?: VersionUpdateManager): HostRpcHandler;
+/**
+ * Expose only DSH read-routing activation to trusted Web hosts. Metadata,
+ * provider connections, credentials, and durable memory writes stay on the
+ * loopback-only write channel.
+ */
+export declare function createActivationHandler(input: RuntimeInput): HostRpcHandler;
 export declare function createWriteHandler(input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, versions?: VersionUpdateManager): HostRpcHandler;
 /** Backup payloads contain private memory and therefore remain loopback-only. */
 export declare function createPackHandler(input: MnemonPackManager | LiveMnemonRuntime, writeEnabled?: boolean | (() => boolean)): HostRpcHandler;
-/** Read operations are available to trusted Web hosts; local mutations stay loopback-only. */
+/** Read and activation control are available to trusted Web hosts; all other mutations stay loopback-only. */
 export declare function registerRpc(connection: HostConnectionHandle, input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, packs?: MnemonPackManager, versions?: VersionUpdateManager): void;

package/lib/types/shared/contracts.d.ts

@@ -1,5 +1,6 @@
 import type { ConnectionHandle as DshClientConnectionHandle } from '@deepseek-ai/dsh-client-connection/client';
 export declare const MNEMON_READ_CHANNEL = "/dsh-mnemon-read";
+export declare const MNEMON_ACTIVATION_CHANNEL = "/dsh-mnemon-activation";
 export declare const MNEMON_WRITE_CHANNEL = "/dsh-mnemon-write";
 export declare const MNEMON_PACK_CHANNEL = "/dsh-mnemon-pack";
 export declare const MNEMON_SETTINGS_CHANNEL = "/dsh-mnemon-settings";
@@ -33,8 +34,8 @@ export type RpcResult<T = JsonValue> = {
     ok: false;
     error: RpcError;
 };
-/** Public DSH browser RPC face; the plugin intentionally consumes no other connection state. */
-export type ClientConnectionHandle = Pick<DshClientConnectionHandle, 'rpc'>;
+/** Public DSH browser RPC face plus the transport boundary needed to gate local-only writes. */
+export type ClientConnectionHandle = Pick<DshClientConnectionHandle, 'rpc'> & Partial<Pick<DshClientConnectionHandle, 'isLoopback'>>;
 export interface ClientSettingsSnapshot<T> {
     status: 'loading' | 'ready' | 'unavailable';
     value?: T;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mnemon",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Three-tier memory system for DeepSeek Harness with nine pluggable providers, smart routing, independent task Agents, WebUI, and headless tools.",
   "keywords": [
     "deepseek-harness",
@@ -134,6 +134,7 @@
     "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-tool": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-system-prompt": "0.1.0-rc.6",
     "@testing-library/react": "^16.3.0",
     "@types/node": "^22.0.0",
     "@types/react": "^18.3.0",