dsh-mnemon 0.2.1 → 0.2.3

package/README.md

@@ -3,7 +3,7 @@
 <p align="center"><strong>English</strong> · <a href="./README.zh-CN.md">简体中文</a></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.1-5b5bd6" alt="release v0.2.1">
+  <img src="https://img.shields.io/badge/release-v0.2.2-5b5bd6" alt="release v0.2.2">
   <img src="https://img.shields.io/badge/memory-3%20tiers-087c5b" alt="three memory tiers">
   <img src="https://img.shields.io/badge/providers-9-c66a09" alt="nine providers">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 or newer">
@@ -22,7 +22,7 @@
 <p align="center">
   <a href="./docs/en/capabilities.md"><strong>Explore the capability map</strong></a> ·
   <a href="./docs/en/getting-started.md">Start in five minutes</a> ·
-  <a href="./docs/en/releases/v0.2.1.md">Read the v0.2.1 notes</a> ·
+  <a href="./docs/en/releases/v0.2.2.md">Read the v0.2.2 notes</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">Watch the widescreen demo</a>
 </p>
 
@@ -190,7 +190,7 @@ See [Operations, security, and troubleshooting](./docs/en/operations.md) for bac
 | Configure scope, routing, and model selection | [Configuration](./docs/en/configuration.md) |
 | Back up, update, or troubleshoot | [Operations](./docs/en/operations.md) |
 | Integrate tools, commands, or RPC | [Interface reference](./docs/en/interfaces.md) |
-| Review the release | [v0.2.1 release notes](./docs/en/releases/v0.2.1.md) |
+| Review the release | [v0.2.2 release notes](./docs/en/releases/v0.2.2.md) |
 
 See the [documentation hub](./docs/en/README.md) for the full map.
 

package/README.zh-CN.md

@@ -3,7 +3,7 @@
 <p align="center"><a href="./README.md">English</a> · <strong>简体中文</strong></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.1-5b5bd6" alt="发布版本 v0.2.1">
+  <img src="https://img.shields.io/badge/release-v0.2.2-5b5bd6" alt="发布版本 v0.2.2">
   <img src="https://img.shields.io/badge/%E8%AE%B0%E5%BF%86-3%20%E5%B1%82-087c5b" alt="三层记忆">
   <img src="https://img.shields.io/badge/Provider-9-c66a09" alt="九种 Provider">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 或更新版本">
@@ -22,7 +22,7 @@
 <p align="center">
   <a href="./docs/zh-CN/capabilities.md"><strong>先看能力地图</strong></a> ·
   <a href="./docs/zh-CN/getting-started.md">5 分钟开始</a> ·
-  <a href="./docs/zh-CN/releases/v0.2.1.md">v0.2.1 升级说明</a> ·
+  <a href="./docs/zh-CN/releases/v0.2.2.md">v0.2.2 升级说明</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">观看宽屏实机演示</a>
 </p>
 
@@ -190,7 +190,7 @@ dsh plugin --profile headless add "link:/absolute/path/to/dsh-mnemon"
 | 配置范围、路由与模型 | [配置参考](./docs/zh-CN/configuration.md) |
 | 备份、更新或排障 | [运维指南](./docs/zh-CN/operations.md) |
 | 接入工具、命令或 RPC | [接口参考](./docs/zh-CN/interfaces.md) |
-| 查看本次升级 | [v0.2.1 发布说明](./docs/zh-CN/releases/v0.2.1.md) |
+| 查看本次升级 | [v0.2.2 发布说明](./docs/zh-CN/releases/v0.2.2.md) |
 
 完整目录见[文档中心](./docs/zh-CN/README.md)。
 

package/cordis.patch.yml

@@ -13,5 +13,6 @@
         idleReviewMs: 30000
         tabEnabled: true
         writeEnabled: true
+        remoteAccess: read-only
         timeoutMs: 10000
         defaultRecallLimit: 10

package/lib/client.js

@@ -33,6 +33,7 @@ window.__ModuleLoader__.load({
 		let react_dom_client = require("react-dom/client");
 		//#region src/shared/contracts.ts
 		const MNEMON_READ_CHANNEL = "/dsh-mnemon-read";
+		const MNEMON_ACTIVATION_CHANNEL = "/dsh-mnemon-activation";
 		const MNEMON_WRITE_CHANNEL = "/dsh-mnemon-write";
 		const MNEMON_PACK_CHANNEL = "/dsh-mnemon-pack";
 		const MNEMON_SETTINGS_CHANNEL = "/dsh-mnemon-settings";
@@ -49,6 +50,15 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/api.ts
 		const turnActivityCache = /* @__PURE__ */ new WeakMap();
+		function isActivationOnly(request) {
+			return typeof request.active === "boolean" && Object.entries(request).every(([field, value]) => field === "active" || value === void 0);
+		}
+		function isMissingActivationChannel(reason) {
+			return reason instanceof Error && reason.message === `transport failure for /dsh-mnemon-activation/body: HTTP 404`;
+		}
+		function isMissingPrivateProviderServices(reason) {
+			return reason instanceof Error && reason.message === "unknown write endpoint: provider-services";
+		}
 		async function loadTurnActivities(connection, sessionId, requiredCursor) {
 			let sessions = turnActivityCache.get(connection);
 			if (sessions === void 0) {
@@ -155,7 +165,11 @@ window.__ModuleLoader__.load({
 				return this.call(MNEMON_READ_CHANNEL, "body-directory", this.scoped()).catch(() => this.bodies());
 			}
 			providerServices() {
-				return this.call(MNEMON_READ_CHANNEL, "provider-services", this.scoped());
+				const payload = this.scoped();
+				return this.call(MNEMON_WRITE_CHANNEL, "provider-services", payload).catch((reason) => {
+					if (!isMissingPrivateProviderServices(reason)) throw reason;
+					return this.call(MNEMON_READ_CHANNEL, "provider-services", payload);
+				});
 			}
 			updateProviderService(request) {
 				return this.call(MNEMON_WRITE_CHANNEL, "provider-service-update", this.scoped(request));
@@ -215,10 +229,18 @@ window.__ModuleLoader__.load({
 				return this.call(MNEMON_WRITE_CHANNEL, "body-create", this.scoped(request));
 			}
 			updateBody(memoryBodyId, request) {
-				return this.call(MNEMON_WRITE_CHANNEL, "body-update", this.scoped({
+				if (!isActivationOnly(request)) return this.call(MNEMON_WRITE_CHANNEL, "body-update", this.scoped({
 					memoryBodyId,
 					...request
 				}));
+				const payload = this.scoped({
+					memoryBodyId,
+					active: request.active
+				});
+				return this.call(MNEMON_ACTIVATION_CHANNEL, "body", payload).catch((reason) => {
+					if (!isMissingActivationChannel(reason)) throw reason;
+					return this.call(MNEMON_WRITE_CHANNEL, "body-update", payload);
+				});
 			}
 			reconnectBody(memoryBodyId) {
 				return this.call(MNEMON_WRITE_CHANNEL, "body-reconnect", this.scoped({ memoryBodyId }));
@@ -416,6 +438,7 @@ window.__ModuleLoader__.load({
 			"common.cancel": "取消",
 			"common.copyId": "复制 ID",
 			"common.readOnly": "只读模式",
+			"common.activationOnly": "仅可切换激活状态",
 			"common.agentSupervised": "独立任务 Agent",
 			"common.active": "已激活",
 			"common.inactive": "未激活",
@@ -1271,6 +1294,7 @@ window.__ModuleLoader__.load({
 			"common.cancel": "Cancel",
 			"common.copyId": "Copy ID",
 			"common.readOnly": "Read only",
+			"common.activationOnly": "Activation control only",
 			"common.agentSupervised": "Subagent supervised",
 			"common.active": "Active",
 			"common.inactive": "Inactive",
@@ -2138,7 +2162,7 @@ window.__ModuleLoader__.load({
 			return `${(bytes / 1048576).toFixed(1)} MB`;
 		}
 		function MnemonPackSection({ connection, sessionId, workspaceId, refreshKey, t, embedded = false }) {
-			const client = (0, react.useMemo)(() => connection === void 0 ? null : new MnemonClient(connection, sessionId, workspaceId), [
+			const client = (0, react.useMemo)(() => connection === void 0 || connection.isLoopback === false ? null : new MnemonClient(connection, sessionId, workspaceId), [
 				connection,
 				sessionId,
 				workspaceId
@@ -2968,7 +2992,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		function ProviderSettingsSection(props) {
-			const client = (0, react.useMemo)(() => props.connection === void 0 ? null : new MnemonClient(props.connection, props.sessionId, props.workspaceId), [
+			const client = (0, react.useMemo)(() => props.connection === void 0 || props.connection.isLoopback === false ? null : new MnemonClient(props.connection, props.sessionId, props.workspaceId), [
 				props.connection,
 				props.sessionId,
 				props.workspaceId
@@ -3250,7 +3274,8 @@ window.__ModuleLoader__.load({
 			const activeScope = coreDraft(coreSnapshot.value).storageScope === "workspace" ? "workspace" : "global";
 			const error = validation(t, draft);
 			const loading = coreSnapshot.status === "loading" || interactionSnapshot.status === "loading";
-			const writable = coreSnapshot.writable && interactionSnapshot.writable;
+			const localWrites = connection?.isLoopback !== false;
+			const writable = localWrites && coreSnapshot.writable && interactionSnapshot.writable;
 			if (coreSnapshot.status === "unavailable" && interactionSnapshot.status === "unavailable") return null;
 			const edit = (field, value) => {
 				setDraft((current) => ({
@@ -3314,8 +3339,8 @@ window.__ModuleLoader__.load({
 					setSaving(false);
 				}
 			};
-			const coreDisabled = loading || saving || !coreSnapshot.writable;
-			const interactionDisabled = loading || saving || !interactionSnapshot.writable;
+			const coreDisabled = loading || saving || !localWrites || !coreSnapshot.writable;
+			const interactionDisabled = loading || saving || !localWrites || !interactionSnapshot.writable;
 			const scopeChanging = dirty.has("storageScope") || dirty.has("dataDir");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
 				className: MnemonSettingsCard_module_css_default.page,
@@ -5715,7 +5740,7 @@ window.__ModuleLoader__.load({
 					children: [
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("sidebar.activeSpaces") }),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: props.catalogKnown ? `${props.activeBodies} / ${props.bodyCount}` : "— / —" }),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("small", { children: props.writeEnabled ? t("common.agentSupervised") : t("common.readOnly") })
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("small", { children: props.writeEnabled ? t("common.agentSupervised") : props.activationEnabled ? t("common.activationOnly") : t("common.readOnly") })
 					]
 				})]
 			});
@@ -5730,6 +5755,7 @@ window.__ModuleLoader__.load({
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PageHeader, {
 					title: t("nav.bodies"),
 					description: t("overview.description"),
+					meta: props.writeEnabled ? t("common.agentSupervised") : props.activationEnabled ? t("common.activationOnly") : t("common.readOnly"),
 					action: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: MnemonView_module_css_default.memoryHeaderActions,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
@@ -7099,7 +7125,7 @@ window.__ModuleLoader__.load({
 				role: "switch",
 				"aria-checked": body.active,
 				"aria-label": t("overview.toggleAria", { name: body.name }),
-				disabled: !props.writeEnabled || changing === body.id || deletingBody === body.id,
+				disabled: !props.activationEnabled || changing === body.id || deletingBody === body.id,
 				onClick: () => void toggle(body),
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 					className: MnemonView_module_css_default.bodySwitchTrack,
@@ -10012,7 +10038,7 @@ window.__ModuleLoader__.load({
 						snapshot !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 							className: MnemonView_module_css_default.versionList,
 							children: snapshot.components.map((component) => {
-								const canUpdate = component.outdated && component.updateSupported && component.checkError === void 0;
+								const canUpdate = props.writeEnabled && component.outdated && component.updateSupported && component.checkError === void 0;
 								const state = component.checkError !== void 0 ? t("versions.unknown") : component.outdated ? t("versions.available") : t("versions.current");
 								return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("article", {
 									"data-outdated": component.outdated || void 0,
@@ -10162,6 +10188,7 @@ window.__ModuleLoader__.load({
 					}),
 					versionsOpen && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(VersionDialog, {
 						client: props.client,
+						writeEnabled: props.writeEnabled,
 						onClose: () => setVersionsOpen(false),
 						onRefreshStatus: props.onRefresh
 					})
@@ -10559,7 +10586,8 @@ window.__ModuleLoader__.load({
 				setRevision((value) => value + 1);
 				loadStatus();
 			};
-			const writeEnabled = status?.writeEnabled === true;
+			const activationEnabled = status?.writeEnabled === true;
+			const writeEnabled = activationEnabled && connection.isLoopback !== false;
 			const stats = status?.stats;
 			const catalogKnown = status?.memoryBodies !== void 0;
 			const memoryBodies = (0, react.useMemo)(() => (status?.memoryBodies ?? []).map(normalizeMemoryBody), [status]);
@@ -10693,10 +10721,12 @@ window.__ModuleLoader__.load({
 								activeBodies,
 								bodyCount: memoryBodies.length,
 								catalogKnown,
+								activationEnabled,
 								writeEnabled
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(MemoryNavigation, {
 								page,
+								activationEnabled,
 								writeEnabled,
 								onSelect: selectPage,
 								onRemember: () => openRemember(),
@@ -10712,6 +10742,7 @@ window.__ModuleLoader__.load({
 										client,
 										metadataClient: taskClient,
 										revision,
+										activationEnabled,
 										writeEnabled,
 										agentAvailable: taskAgentAvailable,
 										fallbackBodies: memoryBodies,
@@ -10772,6 +10803,7 @@ window.__ModuleLoader__.load({
 										client,
 										status,
 										loading: statusLoading,
+										writeEnabled,
 										onRefresh: () => void loadStatus()
 									})
 								]
@@ -10993,7 +11025,7 @@ window.__ModuleLoader__.load({
 				setSubmitting(submitActiveRef.current);
 				const client = new MnemonClient(connection, sessionId);
 				client.status().then((status) => {
-					if (alive && requestVersionRef.current === requestVersion) setWriteEnabled(status.writeEnabled);
+					if (alive && requestVersionRef.current === requestVersion) setWriteEnabled(status.writeEnabled && connection.isLoopback !== false);
 				}).catch(() => {
 					if (alive && requestVersionRef.current === requestVersion) setWriteEnabled(false);
 				});

package/lib/index.js

@@ -81,6 +81,7 @@ const Config = z.object({
 	displayMode: z.union(["sidebar", "buildin"]).default("sidebar"),
 	tabEnabled: z.boolean().default(true),
 	writeEnabled: z.boolean().default(true),
+	remoteAccess: z.union(["read-only", "trusted-host"]).default("read-only"),
 	lifecycleEnabled: z.boolean().default(true),
 	recallMode: z.union(["guided", "off"]).default("guided"),
 	writebackMode: z.union(["guided", "off"]).default("guided"),
@@ -226,6 +227,7 @@ function resolveConfig(config = {}) {
 		displayMode: config.displayMode ?? "sidebar",
 		tabEnabled: config.tabEnabled ?? true,
 		writeEnabled: config.writeEnabled ?? true,
+		remoteAccess: config.remoteAccess ?? "read-only",
 		lifecycleEnabled: config.lifecycleEnabled ?? true,
 		recallMode: config.recallMode ?? "guided",
 		writebackMode: config.writebackMode ?? "guided",
@@ -5365,6 +5367,7 @@ var HindsightProvider = class extends HttpMemoryProvider {
 //#endregion
 //#region src/shared/contracts.ts
 const MNEMON_READ_CHANNEL = "/dsh-mnemon-read";
+const MNEMON_ACTIVATION_CHANNEL = "/dsh-mnemon-activation";
 const MNEMON_WRITE_CHANNEL = "/dsh-mnemon-write";
 const MNEMON_PACK_CHANNEL = "/dsh-mnemon-pack";
 const MNEMON_SETTINGS_CHANNEL = "/dsh-mnemon-settings";
@@ -9139,7 +9142,7 @@ function createReadHandler(input, lifecycle, runtimeMemory, storage, versions) {
 				case "graph": return success$1(await service.graph(void 0, Array.isArray(payload.memoryBodyIds) ? payload.memoryBodyIds.map(String) : void 0));
 				case "bodies": return success$1(await service.bodies());
 				case "body-directory": return success$1(service.bodyDirectory());
-				case "provider-services": return success$1(service.memoryBodies.providerServices({ includeSecrets: true }));
+				case "provider-services": return success$1(service.memoryBodies.providerServices());
 				case "list": return success$1(await service.list({
 					...payload.query === void 0 ? {} : { query: String(payload.query) },
 					...payload.category === void 0 ? {} : { category: payload.category },
@@ -9198,6 +9201,36 @@ function createReadHandler(input, lifecycle, runtimeMemory, storage, versions) {
 		}
 	};
 }
+const ACTIVATION_PAYLOAD_FIELDS = /* @__PURE__ */ new Set([
+	"memoryBodyId",
+	"active",
+	"sessionId",
+	"workspaceId"
+]);
+/**
+* Expose only DSH read-routing activation to trusted Web hosts. Metadata,
+* provider connections, credentials, and durable memory writes stay on the
+* loopback-only write channel.
+*/
+function createActivationHandler(input) {
+	return async (endpoint, rawPayload) => {
+		try {
+			if (endpoint !== "body") return badRequest$1(`unknown activation endpoint: ${endpoint}`);
+			const payload = object$1(rawPayload);
+			const unexpected = Object.keys(payload).filter((field) => !ACTIVATION_PAYLOAD_FIELDS.has(field));
+			if (unexpected.length > 0) return badRequest$1(`unsupported activation fields: ${unexpected.join(", ")}`);
+			if (typeof payload.memoryBodyId !== "string" || payload.memoryBodyId.trim() === "") return badRequest$1("memoryBodyId must be a non-empty string");
+			if (typeof payload.active !== "boolean") return badRequest$1("active must be a boolean");
+			if (payload.sessionId !== void 0 && typeof payload.sessionId !== "string") return badRequest$1("sessionId must be a string");
+			if (payload.workspaceId !== void 0 && typeof payload.workspaceId !== "string") return badRequest$1("workspaceId must be a string");
+			const { graph } = runtimeFor(input, payload);
+			if (!graph.service.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
+			return success$1(graph.service.updateBody(payload.memoryBodyId.trim(), { active: payload.active }));
+		} catch (error) {
+			return failure$1(error);
+		}
+	};
+}
 function createWriteHandler(input, lifecycle, runtimeMemory, versions) {
 	return async (endpoint, rawPayload) => {
 		try {
@@ -9210,6 +9243,7 @@ function createWriteHandler(input, lifecycle, runtimeMemory, versions) {
 			}
 			const resolved = runtimeFor(input, payload, runtimeMemory);
 			const { service } = resolved.graph;
+			if (endpoint === "provider-services") return success$1(service.memoryBodies.providerServices({ includeSecrets: true }));
 			if (!service.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
 			const selectedWorkspace = resolved.route?.selectedWorkspace;
 			const documentController = resolved.explicitWorkspace && selectedWorkspace !== void 0 ? resolved.graph.documents.forWorkspace(selectedWorkspace.path) : void 0;
@@ -9401,7 +9435,7 @@ function createWriteHandler(input, lifecycle, runtimeMemory, versions) {
 		}
 	};
 }
-/** Backup payloads contain private memory and therefore remain loopback-only. */
+/** Backup payloads contain private memory and use the deployment's management authority. */
 function createPackHandler(input, writeEnabled = true) {
 	return async (endpoint, rawPayload) => {
 		try {
@@ -9420,14 +9454,15 @@ function createPackHandler(input, writeEnabled = true) {
 		}
 	};
 }
-/** Read operations are available to trusted Web hosts; local mutations stay loopback-only. */
-function registerRpc(connection, input, lifecycle, runtimeMemory, storage, packs, versions) {
+/** Reads and activation use trusted hosts; other privileged channels require explicit promotion. */
+function registerRpc(connection, input, lifecycle, runtimeMemory, storage, packs, versions, managementAuthority = "loopback") {
 	const versionManager = versions ?? new VersionUpdateManager({ mnemonCliPath: () => findVersionCli(input) });
 	connection.rpc.handle(MNEMON_READ_CHANNEL, createReadHandler(input, lifecycle, runtimeMemory, storage, versionManager), { authority: "trusted-host" });
-	connection.rpc.handle(MNEMON_WRITE_CHANNEL, createWriteHandler(input, lifecycle, runtimeMemory, versionManager), { authority: "loopback" });
+	connection.rpc.handle(MNEMON_ACTIVATION_CHANNEL, createActivationHandler(input), { authority: "trusted-host" });
+	connection.rpc.handle(MNEMON_WRITE_CHANNEL, createWriteHandler(input, lifecycle, runtimeMemory, versionManager), { authority: managementAuthority });
 	const packManager = isRoutedRuntime(input) ? input : packs;
 	const config = input.config;
-	if (packManager !== void 0) connection.rpc.handle(MNEMON_PACK_CHANNEL, createPackHandler(packManager, () => config.writeEnabled), { authority: "loopback" });
+	if (packManager !== void 0) connection.rpc.handle(MNEMON_PACK_CHANNEL, createPackHandler(packManager, () => config.writeEnabled), { authority: managementAuthority });
 }
 function findVersionCli(input) {
 	return input.config.cliPath;
@@ -9544,8 +9579,8 @@ function createSettingsHandler(settings) {
 		}
 	};
 }
-function registerSettingsRpc(connection, settings) {
-	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, createSettingsHandler(settings), { authority: "loopback" });
+function registerSettingsRpc(connection, settings, authority = "loopback") {
+	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, createSettingsHandler(settings), { authority });
 }
 //#endregion
 //#region src/tools.ts
@@ -10251,8 +10286,9 @@ function apply(rawContext, config = {}) {
 	registerRuntimeMemoryContext(ctx, runtime.runtimeMemory);
 	ctx.inject(["connection"], (webContext) => {
 		if (webContext.connection === void 0) return;
-		registerRpc(webContext.connection, runtime, lifecycle);
-		registerSettingsRpc(webContext.connection, ctx.settings);
+		const managementAuthority = resolved.remoteAccess === "trusted-host" ? "trusted-host" : "loopback";
+		registerRpc(webContext.connection, runtime, lifecycle, void 0, void 0, void 0, void 0, managementAuthority);
+		registerSettingsRpc(webContext.connection, ctx.settings, managementAuthority);
 	});
 }
 //#endregion

package/lib/types/channels.d.ts

@@ -1 +1 @@
-export { MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './shared/contracts.ts';
+export { MNEMON_ACTIVATION_CHANNEL, MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './shared/contracts.ts';

package/lib/types/client/locales.d.ts

@@ -37,6 +37,7 @@ export declare const zh: {
     'common.cancel': string;
     'common.copyId': string;
     'common.readOnly': string;
+    'common.activationOnly': string;
     'common.agentSupervised': string;
     'common.active': string;
     'common.inactive': string;
@@ -893,6 +894,7 @@ export declare const en: {
     'common.cancel': string;
     'common.copyId': string;
     'common.readOnly': string;
+    'common.activationOnly': string;
     'common.agentSupervised': string;
     'common.active': string;
     'common.inactive': string;

package/lib/types/contracts.d.ts

@@ -1,10 +1,11 @@
 import type { RpcResult, SettingsOperation } from './shared/contracts.ts';
 export type { ClientConnectionHandle, ClientSettingsScope, ClientSettingsSnapshot, JsonPrimitive, JsonValue, RpcError, RpcResult, SettingsOperation, } from './shared/contracts.ts';
 export type HostRpcHandler = (endpoint: string, payload: unknown) => Promise<RpcResult<unknown>>;
+export type HostRpcAuthority = 'trusted-host' | 'loopback';
 export interface HostConnectionHandle {
     rpc: {
         handle(channel: string, handler: HostRpcHandler, options: {
-            authority: 'trusted-host' | 'loopback';
+            authority: HostRpcAuthority;
         }): unknown;
     };
 }

package/lib/types/rpc.d.ts

@@ -1,4 +1,4 @@
-import type { HostConnectionHandle, HostRpcHandler } from './contracts.ts';
+import type { HostConnectionHandle, HostRpcAuthority, HostRpcHandler } from './contracts.ts';
 import type { MnemonLifecycle } from './lifecycle.ts';
 import type { RuntimeMemoryController } from './runtime-memory.ts';
 import type { MnemonService } from './service.ts';
@@ -6,11 +6,17 @@ import type { StorageScopeInspector } from './storage-scope.ts';
 import type { MnemonPackManager } from './pack.ts';
 import type { LiveMnemonRuntime } from './live-runtime.ts';
 import { VersionUpdateManager } from './version-updates.ts';
-export { MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './channels.ts';
+export { MNEMON_ACTIVATION_CHANNEL, MNEMON_PACK_CHANNEL, MNEMON_READ_CHANNEL, MNEMON_WRITE_CHANNEL } from './channels.ts';
 type RuntimeInput = MnemonService | LiveMnemonRuntime;
 export declare function createReadHandler(input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, versions?: VersionUpdateManager): HostRpcHandler;
+/**
+ * Expose only DSH read-routing activation to trusted Web hosts. Metadata,
+ * provider connections, credentials, and durable memory writes stay on the
+ * loopback-only write channel.
+ */
+export declare function createActivationHandler(input: RuntimeInput): HostRpcHandler;
 export declare function createWriteHandler(input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, versions?: VersionUpdateManager): HostRpcHandler;
-/** Backup payloads contain private memory and therefore remain loopback-only. */
+/** Backup payloads contain private memory and use the deployment's management authority. */
 export declare function createPackHandler(input: MnemonPackManager | LiveMnemonRuntime, writeEnabled?: boolean | (() => boolean)): HostRpcHandler;
-/** Read operations are available to trusted Web hosts; local mutations stay loopback-only. */
-export declare function registerRpc(connection: HostConnectionHandle, input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, packs?: MnemonPackManager, versions?: VersionUpdateManager): void;
+/** Reads and activation use trusted hosts; other privileged channels require explicit promotion. */
+export declare function registerRpc(connection: HostConnectionHandle, input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, packs?: MnemonPackManager, versions?: VersionUpdateManager, managementAuthority?: HostRpcAuthority): void;

package/lib/types/settings.d.ts

@@ -1,4 +1,4 @@
-import type { HostConnectionHandle, HostRpcHandler, HostSettingsService } from './contracts.ts';
+import type { HostConnectionHandle, HostRpcAuthority, HostRpcHandler, HostSettingsService } from './contracts.ts';
 export { MNEMON_SETTINGS_CHANNEL, MNEMON_SETTINGS_NAMESPACE, MNEMON_UI_SETTINGS_NAMESPACE } from './shared/contracts.ts';
 export declare function createSettingsHandler(settings: HostSettingsService): HostRpcHandler;
-export declare function registerSettingsRpc(connection: HostConnectionHandle, settings: HostSettingsService): void;
+export declare function registerSettingsRpc(connection: HostConnectionHandle, settings: HostSettingsService, authority?: HostRpcAuthority): void;

package/lib/types/shared/contracts.d.ts

@@ -1,5 +1,6 @@
 import type { ConnectionHandle as DshClientConnectionHandle } from '@deepseek-ai/dsh-client-connection/client';
 export declare const MNEMON_READ_CHANNEL = "/dsh-mnemon-read";
+export declare const MNEMON_ACTIVATION_CHANNEL = "/dsh-mnemon-activation";
 export declare const MNEMON_WRITE_CHANNEL = "/dsh-mnemon-write";
 export declare const MNEMON_PACK_CHANNEL = "/dsh-mnemon-pack";
 export declare const MNEMON_SETTINGS_CHANNEL = "/dsh-mnemon-settings";
@@ -33,8 +34,8 @@ export type RpcResult<T = JsonValue> = {
     ok: false;
     error: RpcError;
 };
-/** Public DSH browser RPC face; the plugin intentionally consumes no other connection state. */
-export type ClientConnectionHandle = Pick<DshClientConnectionHandle, 'rpc'>;
+/** Public DSH browser RPC face plus the transport boundary needed to gate local-only writes. */
+export type ClientConnectionHandle = Pick<DshClientConnectionHandle, 'rpc'> & Partial<Pick<DshClientConnectionHandle, 'isLoopback'>>;
 export interface ClientSettingsSnapshot<T> {
     status: 'loading' | 'ready' | 'unavailable';
     value?: T;
@@ -80,6 +81,8 @@ export interface Config {
     displayMode?: 'sidebar' | 'buildin';
     tabEnabled?: boolean;
     writeEnabled?: boolean;
+    /** Remote Web policy for privileged Mnemon RPC. This boundary is sampled at Host startup. */
+    remoteAccess?: 'read-only' | 'trusted-host';
     lifecycleEnabled?: boolean;
     recallMode?: 'guided' | 'off';
     writebackMode?: 'guided' | 'off';
@@ -147,6 +150,7 @@ export interface ResolvedConfig {
     displayMode: 'sidebar' | 'buildin';
     tabEnabled: boolean;
     writeEnabled: boolean;
+    remoteAccess: 'read-only' | 'trusted-host';
     lifecycleEnabled: boolean;
     recallMode: 'guided' | 'off';
     writebackMode: 'guided' | 'off';

package/package.json

@@ -1,51 +1,38 @@
 {
   "name": "dsh-mnemon",
-  "version": "0.2.1",
-  "description": "Three-tier memory system for DeepSeek Harness with nine pluggable providers, smart routing, independent task Agents, WebUI, and headless tools.",
+  "version": "0.2.3",
+  "description": "Three-tier memory control plane for DeepSeek Harness: persistent runtime context, searchable project documents, pluggable long-term memory, smart routing, supervised agent workflows, WebUI, and headless tools.",
   "keywords": [
     "deepseek-harness",
     "deepseek-harness-plugin",
-    "dsh",
     "dsh-plugin",
-    "mnemon",
-    "openviking",
-    "honcho",
-    "mem0",
-    "hindsight",
-    "holographic-memory",
-    "retaindb",
-    "byterover",
-    "supermemory",
-    "memory-provider",
-    "memory-system",
-    "memory-plugin",
     "agent-memory",
-    "cross-agent-memory",
-    "shared-agent-memory",
-    "multi-agent-memory",
     "llm-memory",
     "persistent-memory",
     "long-term-memory",
     "runtime-memory",
     "working-memory",
+    "cross-session-memory",
+    "multi-agent-memory",
+    "shared-agent-memory",
+    "memory-orchestration",
+    "memory-provider",
+    "pluggable-memory",
+    "context-management",
     "project-memory",
     "project-documents",
     "document-search",
     "semantic-recall",
-    "memory-space",
-    "workspace-memory",
-    "task-agent",
-    "knowledge-graph",
-    "ai-agent",
-    "llm-agent",
-    "external-memory",
     "local-first",
-    "sqlite",
-    "typescript",
-    "cordis",
-    "web-ui",
-    "headless",
-    "sidebar"
+    "mnemon",
+    "openviking",
+    "honcho",
+    "mem0",
+    "hindsight",
+    "holographic-memory",
+    "retaindb",
+    "byterover",
+    "supermemory"
   ],
   "repository": {
     "type": "git",