dsh-mnemon 0.2.2 → 0.2.4

package/README.md

@@ -3,7 +3,7 @@
 <p align="center"><strong>English</strong> · <a href="./README.zh-CN.md">简体中文</a></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.2-5b5bd6" alt="release v0.2.2">
+  <img src="https://img.shields.io/badge/release-v0.2.4-5b5bd6" alt="release v0.2.4">
   <img src="https://img.shields.io/badge/memory-3%20tiers-087c5b" alt="three memory tiers">
   <img src="https://img.shields.io/badge/providers-9-c66a09" alt="nine providers">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 or newer">
@@ -22,7 +22,7 @@
 <p align="center">
   <a href="./docs/en/capabilities.md"><strong>Explore the capability map</strong></a> ·
   <a href="./docs/en/getting-started.md">Start in five minutes</a> ·
-  <a href="./docs/en/releases/v0.2.2.md">Read the v0.2.2 notes</a> ·
+  <a href="./docs/en/releases/v0.2.4.md">Read the v0.2.4 notes</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">Watch the widescreen demo</a>
 </p>
 
@@ -190,7 +190,7 @@ See [Operations, security, and troubleshooting](./docs/en/operations.md) for bac
 | Configure scope, routing, and model selection | [Configuration](./docs/en/configuration.md) |
 | Back up, update, or troubleshoot | [Operations](./docs/en/operations.md) |
 | Integrate tools, commands, or RPC | [Interface reference](./docs/en/interfaces.md) |
-| Review the release | [v0.2.2 release notes](./docs/en/releases/v0.2.2.md) |
+| Review the release | [v0.2.4 release notes](./docs/en/releases/v0.2.4.md) |
 
 See the [documentation hub](./docs/en/README.md) for the full map.
 

package/README.zh-CN.md

@@ -3,7 +3,7 @@
 <p align="center"><a href="./README.md">English</a> · <strong>简体中文</strong></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.2-5b5bd6" alt="发布版本 v0.2.2">
+  <img src="https://img.shields.io/badge/release-v0.2.4-5b5bd6" alt="发布版本 v0.2.4">
   <img src="https://img.shields.io/badge/%E8%AE%B0%E5%BF%86-3%20%E5%B1%82-087c5b" alt="三层记忆">
   <img src="https://img.shields.io/badge/Provider-9-c66a09" alt="九种 Provider">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 或更新版本">
@@ -22,7 +22,7 @@
 <p align="center">
   <a href="./docs/zh-CN/capabilities.md"><strong>先看能力地图</strong></a> ·
   <a href="./docs/zh-CN/getting-started.md">5 分钟开始</a> ·
-  <a href="./docs/zh-CN/releases/v0.2.2.md">v0.2.2 升级说明</a> ·
+  <a href="./docs/zh-CN/releases/v0.2.4.md">v0.2.4 升级说明</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">观看宽屏实机演示</a>
 </p>
 
@@ -190,7 +190,7 @@ dsh plugin --profile headless add "link:/absolute/path/to/dsh-mnemon"
 | 配置范围、路由与模型 | [配置参考](./docs/zh-CN/configuration.md) |
 | 备份、更新或排障 | [运维指南](./docs/zh-CN/operations.md) |
 | 接入工具、命令或 RPC | [接口参考](./docs/zh-CN/interfaces.md) |
-| 查看本次升级 | [v0.2.2 发布说明](./docs/zh-CN/releases/v0.2.2.md) |
+| 查看本次升级 | [v0.2.4 发布说明](./docs/zh-CN/releases/v0.2.4.md) |
 
 完整目录见[文档中心](./docs/zh-CN/README.md)。
 

package/cordis.patch.yml

@@ -13,5 +13,6 @@
         idleReviewMs: 30000
         tabEnabled: true
         writeEnabled: true
+        remoteAccess: read-only
         timeoutMs: 10000
         defaultRecallLimit: 10

package/lib/client.js

@@ -1194,6 +1194,7 @@ window.__ModuleLoader__.load({
 			"config.customAbsolute": "自定义目录必须是绝对路径或以 ~/ 开头；Windows 可填写盘符或 UNC 路径。",
 			"config.saveFailed": "保存失败：{error}",
 			"config.readOnly": "当前部署的插件设置为只读。",
+			"config.unavailable": "无法加载记忆系统设置。请检查 Host 是否已为当前 Web 部署授权设置 RPC。",
 			"config.discard": "放弃修改",
 			"config.saving": "保存中…",
 			"config.save": "保存",
@@ -2050,6 +2051,7 @@ window.__ModuleLoader__.load({
 			"config.customAbsolute": "The custom directory must be absolute or start with ~/. Windows drive and UNC paths are supported.",
 			"config.saveFailed": "Save failed: {error}",
 			"config.readOnly": "Plugin settings are read-only in this deployment.",
+			"config.unavailable": "Memory System settings could not be loaded. Check whether the Host grants the settings RPC to this Web deployment.",
 			"config.discard": "Discard changes",
 			"config.saving": "Saving…",
 			"config.save": "Save",
@@ -2162,7 +2164,7 @@ window.__ModuleLoader__.load({
 			return `${(bytes / 1048576).toFixed(1)} MB`;
 		}
 		function MnemonPackSection({ connection, sessionId, workspaceId, refreshKey, t, embedded = false }) {
-			const client = (0, react.useMemo)(() => connection === void 0 || connection.isLoopback === false ? null : new MnemonClient(connection, sessionId, workspaceId), [
+			const client = (0, react.useMemo)(() => connection === void 0 ? null : new MnemonClient(connection, sessionId, workspaceId), [
 				connection,
 				sessionId,
 				workspaceId
@@ -2992,7 +2994,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		function ProviderSettingsSection(props) {
-			const client = (0, react.useMemo)(() => props.connection === void 0 || props.connection.isLoopback === false ? null : new MnemonClient(props.connection, props.sessionId, props.workspaceId), [
+			const client = (0, react.useMemo)(() => props.connection === void 0 ? null : new MnemonClient(props.connection, props.sessionId, props.workspaceId), [
 				props.connection,
 				props.sessionId,
 				props.workspaceId
@@ -3274,9 +3276,16 @@ window.__ModuleLoader__.load({
 			const activeScope = coreDraft(coreSnapshot.value).storageScope === "workspace" ? "workspace" : "global";
 			const error = validation(t, draft);
 			const loading = coreSnapshot.status === "loading" || interactionSnapshot.status === "loading";
-			const localWrites = connection?.isLoopback !== false;
-			const writable = localWrites && coreSnapshot.writable && interactionSnapshot.writable;
-			if (coreSnapshot.status === "unavailable" && interactionSnapshot.status === "unavailable") return null;
+			const writable = coreSnapshot.writable && interactionSnapshot.writable;
+			if (coreSnapshot.status === "unavailable" && interactionSnapshot.status === "unavailable") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
+				className: MnemonSettingsCard_module_css_default.page,
+				"aria-label": t("config.aria"),
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					className: MnemonSettingsCard_module_css_default.error,
+					role: "alert",
+					children: t("config.unavailable")
+				})
+			});
 			const edit = (field, value) => {
 				setDraft((current) => ({
 					...current,
@@ -3339,8 +3348,8 @@ window.__ModuleLoader__.load({
 					setSaving(false);
 				}
 			};
-			const coreDisabled = loading || saving || !localWrites || !coreSnapshot.writable;
-			const interactionDisabled = loading || saving || !localWrites || !interactionSnapshot.writable;
+			const coreDisabled = loading || saving || !coreSnapshot.writable;
+			const interactionDisabled = loading || saving || !interactionSnapshot.writable;
 			const scopeChanging = dirty.has("storageScope") || dirty.has("dataDir");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
 				className: MnemonSettingsCard_module_css_default.page,

package/lib/index.js

@@ -81,6 +81,7 @@ const Config = z.object({
 	displayMode: z.union(["sidebar", "buildin"]).default("sidebar"),
 	tabEnabled: z.boolean().default(true),
 	writeEnabled: z.boolean().default(true),
+	remoteAccess: z.union(["read-only", "trusted-host"]).default("read-only"),
 	lifecycleEnabled: z.boolean().default(true),
 	recallMode: z.union(["guided", "off"]).default("guided"),
 	writebackMode: z.union(["guided", "off"]).default("guided"),
@@ -226,6 +227,7 @@ function resolveConfig(config = {}) {
 		displayMode: config.displayMode ?? "sidebar",
 		tabEnabled: config.tabEnabled ?? true,
 		writeEnabled: config.writeEnabled ?? true,
+		remoteAccess: config.remoteAccess ?? "read-only",
 		lifecycleEnabled: config.lifecycleEnabled ?? true,
 		recallMode: config.recallMode ?? "guided",
 		writebackMode: config.writebackMode ?? "guided",
@@ -9433,7 +9435,7 @@ function createWriteHandler(input, lifecycle, runtimeMemory, versions) {
 		}
 	};
 }
-/** Backup payloads contain private memory and therefore remain loopback-only. */
+/** Backup payloads contain private memory and use the deployment's management authority. */
 function createPackHandler(input, writeEnabled = true) {
 	return async (endpoint, rawPayload) => {
 		try {
@@ -9452,15 +9454,15 @@ function createPackHandler(input, writeEnabled = true) {
 		}
 	};
 }
-/** Read and activation control are available to trusted Web hosts; all other mutations stay loopback-only. */
-function registerRpc(connection, input, lifecycle, runtimeMemory, storage, packs, versions) {
+/** Reads and activation use trusted hosts; other privileged channels require explicit promotion. */
+function registerRpc(connection, input, lifecycle, runtimeMemory, storage, packs, versions, managementAuthority = "loopback") {
 	const versionManager = versions ?? new VersionUpdateManager({ mnemonCliPath: () => findVersionCli(input) });
 	connection.rpc.handle(MNEMON_READ_CHANNEL, createReadHandler(input, lifecycle, runtimeMemory, storage, versionManager), { authority: "trusted-host" });
 	connection.rpc.handle(MNEMON_ACTIVATION_CHANNEL, createActivationHandler(input), { authority: "trusted-host" });
-	connection.rpc.handle(MNEMON_WRITE_CHANNEL, createWriteHandler(input, lifecycle, runtimeMemory, versionManager), { authority: "loopback" });
+	connection.rpc.handle(MNEMON_WRITE_CHANNEL, createWriteHandler(input, lifecycle, runtimeMemory, versionManager), { authority: managementAuthority });
 	const packManager = isRoutedRuntime(input) ? input : packs;
 	const config = input.config;
-	if (packManager !== void 0) connection.rpc.handle(MNEMON_PACK_CHANNEL, createPackHandler(packManager, () => config.writeEnabled), { authority: "loopback" });
+	if (packManager !== void 0) connection.rpc.handle(MNEMON_PACK_CHANNEL, createPackHandler(packManager, () => config.writeEnabled), { authority: managementAuthority });
 }
 function findVersionCli(input) {
 	return input.config.cliPath;
@@ -9577,8 +9579,8 @@ function createSettingsHandler(settings) {
 		}
 	};
 }
-function registerSettingsRpc(connection, settings) {
-	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, createSettingsHandler(settings), { authority: "loopback" });
+function registerSettingsRpc(connection, settings, authority = "loopback") {
+	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, createSettingsHandler(settings), { authority });
 }
 //#endregion
 //#region src/tools.ts
@@ -10284,8 +10286,9 @@ function apply(rawContext, config = {}) {
 	registerRuntimeMemoryContext(ctx, runtime.runtimeMemory);
 	ctx.inject(["connection"], (webContext) => {
 		if (webContext.connection === void 0) return;
-		registerRpc(webContext.connection, runtime, lifecycle);
-		registerSettingsRpc(webContext.connection, ctx.settings);
+		const managementAuthority = resolved.remoteAccess === "trusted-host" ? "trusted-host" : "loopback";
+		registerRpc(webContext.connection, runtime, lifecycle, void 0, void 0, void 0, void 0, managementAuthority);
+		registerSettingsRpc(webContext.connection, ctx.settings, managementAuthority);
 	});
 }
 //#endregion

package/lib/types/client/locales.d.ts

@@ -793,6 +793,7 @@ export declare const zh: {
     'config.customAbsolute': string;
     'config.saveFailed': string;
     'config.readOnly': string;
+    'config.unavailable': string;
     'config.discard': string;
     'config.saving': string;
     'config.save': string;
@@ -1650,6 +1651,7 @@ export declare const en: {
     'config.customAbsolute': string;
     'config.saveFailed': string;
     'config.readOnly': string;
+    'config.unavailable': string;
     'config.discard': string;
     'config.saving': string;
     'config.save': string;

package/lib/types/contracts.d.ts

@@ -1,10 +1,11 @@
 import type { RpcResult, SettingsOperation } from './shared/contracts.ts';
 export type { ClientConnectionHandle, ClientSettingsScope, ClientSettingsSnapshot, JsonPrimitive, JsonValue, RpcError, RpcResult, SettingsOperation, } from './shared/contracts.ts';
 export type HostRpcHandler = (endpoint: string, payload: unknown) => Promise<RpcResult<unknown>>;
+export type HostRpcAuthority = 'trusted-host' | 'loopback';
 export interface HostConnectionHandle {
     rpc: {
         handle(channel: string, handler: HostRpcHandler, options: {
-            authority: 'trusted-host' | 'loopback';
+            authority: HostRpcAuthority;
         }): unknown;
     };
 }

package/lib/types/rpc.d.ts

@@ -1,4 +1,4 @@
-import type { HostConnectionHandle, HostRpcHandler } from './contracts.ts';
+import type { HostConnectionHandle, HostRpcAuthority, HostRpcHandler } from './contracts.ts';
 import type { MnemonLifecycle } from './lifecycle.ts';
 import type { RuntimeMemoryController } from './runtime-memory.ts';
 import type { MnemonService } from './service.ts';
@@ -16,7 +16,7 @@ export declare function createReadHandler(input: RuntimeInput, lifecycle?: Mnemo
  */
 export declare function createActivationHandler(input: RuntimeInput): HostRpcHandler;
 export declare function createWriteHandler(input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, versions?: VersionUpdateManager): HostRpcHandler;
-/** Backup payloads contain private memory and therefore remain loopback-only. */
+/** Backup payloads contain private memory and use the deployment's management authority. */
 export declare function createPackHandler(input: MnemonPackManager | LiveMnemonRuntime, writeEnabled?: boolean | (() => boolean)): HostRpcHandler;
-/** Read and activation control are available to trusted Web hosts; all other mutations stay loopback-only. */
-export declare function registerRpc(connection: HostConnectionHandle, input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, packs?: MnemonPackManager, versions?: VersionUpdateManager): void;
+/** Reads and activation use trusted hosts; other privileged channels require explicit promotion. */
+export declare function registerRpc(connection: HostConnectionHandle, input: RuntimeInput, lifecycle?: MnemonLifecycle, runtimeMemory?: RuntimeMemoryController, storage?: StorageScopeInspector, packs?: MnemonPackManager, versions?: VersionUpdateManager, managementAuthority?: HostRpcAuthority): void;

package/lib/types/settings.d.ts

@@ -1,4 +1,4 @@
-import type { HostConnectionHandle, HostRpcHandler, HostSettingsService } from './contracts.ts';
+import type { HostConnectionHandle, HostRpcAuthority, HostRpcHandler, HostSettingsService } from './contracts.ts';
 export { MNEMON_SETTINGS_CHANNEL, MNEMON_SETTINGS_NAMESPACE, MNEMON_UI_SETTINGS_NAMESPACE } from './shared/contracts.ts';
 export declare function createSettingsHandler(settings: HostSettingsService): HostRpcHandler;
-export declare function registerSettingsRpc(connection: HostConnectionHandle, settings: HostSettingsService): void;
+export declare function registerSettingsRpc(connection: HostConnectionHandle, settings: HostSettingsService, authority?: HostRpcAuthority): void;

package/lib/types/shared/contracts.d.ts

@@ -81,6 +81,8 @@ export interface Config {
     displayMode?: 'sidebar' | 'buildin';
     tabEnabled?: boolean;
     writeEnabled?: boolean;
+    /** Remote Web policy for privileged Mnemon RPC. This boundary is sampled at Host startup. */
+    remoteAccess?: 'read-only' | 'trusted-host';
     lifecycleEnabled?: boolean;
     recallMode?: 'guided' | 'off';
     writebackMode?: 'guided' | 'off';
@@ -148,6 +150,7 @@ export interface ResolvedConfig {
     displayMode: 'sidebar' | 'buildin';
     tabEnabled: boolean;
     writeEnabled: boolean;
+    remoteAccess: 'read-only' | 'trusted-host';
     lifecycleEnabled: boolean;
     recallMode: 'guided' | 'off';
     writebackMode: 'guided' | 'off';

package/package.json

@@ -1,51 +1,38 @@
 {
   "name": "dsh-mnemon",
-  "version": "0.2.2",
-  "description": "Three-tier memory system for DeepSeek Harness with nine pluggable providers, smart routing, independent task Agents, WebUI, and headless tools.",
+  "version": "0.2.4",
+  "description": "Three-tier memory control plane for DeepSeek Harness: persistent runtime context, searchable project documents, pluggable long-term memory, smart routing, supervised agent workflows, WebUI, and headless tools.",
   "keywords": [
     "deepseek-harness",
     "deepseek-harness-plugin",
-    "dsh",
     "dsh-plugin",
-    "mnemon",
-    "openviking",
-    "honcho",
-    "mem0",
-    "hindsight",
-    "holographic-memory",
-    "retaindb",
-    "byterover",
-    "supermemory",
-    "memory-provider",
-    "memory-system",
-    "memory-plugin",
     "agent-memory",
-    "cross-agent-memory",
-    "shared-agent-memory",
-    "multi-agent-memory",
     "llm-memory",
     "persistent-memory",
     "long-term-memory",
     "runtime-memory",
     "working-memory",
+    "cross-session-memory",
+    "multi-agent-memory",
+    "shared-agent-memory",
+    "memory-orchestration",
+    "memory-provider",
+    "pluggable-memory",
+    "context-management",
     "project-memory",
     "project-documents",
     "document-search",
     "semantic-recall",
-    "memory-space",
-    "workspace-memory",
-    "task-agent",
-    "knowledge-graph",
-    "ai-agent",
-    "llm-agent",
-    "external-memory",
     "local-first",
-    "sqlite",
-    "typescript",
-    "cordis",
-    "web-ui",
-    "headless",
-    "sidebar"
+    "mnemon",
+    "openviking",
+    "honcho",
+    "mem0",
+    "hindsight",
+    "holographic-memory",
+    "retaindb",
+    "byterover",
+    "supermemory"
   ],
   "repository": {
     "type": "git",