dsh-trivium 0.4.16 → 0.4.18

package/README.md

@@ -16,7 +16,7 @@ The kernel stays close to DSH: no extra process, no extra nav by default. Pin me
 
 ## Installation
 
-> Prerequisite: install [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) and start `dsh web` at least once. Tested host: `@deepseek-ai/dsh@0.1.1-rc.2` (`dsh-llm` / `dsh-tools` peers also accept `0.1.0-rc.8`).
+> Prerequisite: install [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) and start `dsh web` at least once. Tested host: `@deepseek-ai/dsh@0.1.5-rc.1` (`dsh-llm` / `dsh-tools` peers also accept `0.1.1-rc.2` and `0.1.0-rc.8`).
 
 ```sh
 dsh plugin --profile web add dsh-trivium
@@ -46,8 +46,11 @@ Local source checkout:
 ```sh
 npm install
 node scripts/link-dsh.mjs
+npm test              # optional: runs every offline smoke script
 ```
 
+`npm test` needs no DSH host and never touches your real `~/.dsh/trivium.json` (each script gets its own temp settings file). Pass a substring to narrow it: `npm test -- p8`.
+
 Then restart `dsh web`.
 
 ## Updating
@@ -242,6 +245,14 @@ Off by default. After you turn **Chips (memory whitelist)** on in Settings, the
 
 ## Changelog
 
+**0.4.18** — `~/.dsh/trivium.json` is now written atomically (a truncated write used to reset every switch and chip pin silently) and is owner-only on POSIX. `npm test` runs every offline smoke script with isolated settings, and `smoke-p0` pins the hybrid text-index-after-reopen invariant. Four tools / short map / find paths unchanged.
+
+**0.4.17** — Storage bump to `triviumdb@0.8.8` (engine behavior unchanged from 0.4.16). Host adaptation for `@deepseek-ai/dsh@0.1.5-rc.1`: `session.header.seedLength` was removed, so the session-layer fork cut now reads `session.inheritedEventCount`. Four tools / short map / find paths unchanged.
+
+**0.4.16** — Storage bump to `triviumdb@0.8.4`: the engine constructor now takes an options object (`{ dim }`) instead of numeric positional args, and TQL rows return string ids that the plugin coerces back to numbers. Four tools / short map / find paths unchanged.
+
+**0.4.15** — Storage bump to `triviumdb@0.8.2`. The settings API rejects non-loopback requests and unlisted `cwd` values; the extract buffer is cleared after a run and `savePending` no longer blocks the turn.
+
 **0.4.14** — Storage bump to `triviumdb@0.8.1` (harder WAL/locks, optional read-only share, ARM64 fixes). Four tools / short map / find paths unchanged.
 
 **0.4.13** — Title-bar tab is **Chips** (short); the Settings switch stays **Chips (memory whitelist)**. Toggling the session layer refreshes the Chips tab immediately. Settings / Chips screenshots updated.
@@ -294,8 +305,8 @@ Local source checkout: `npm install`, then `node scripts/link-dsh.mjs`, then res
 ## Release info
 
 - GitHub: https://github.com/QWQcool/dsh-trivium
-- npm: [`dsh-trivium@0.4.14`](https://www.npmjs.com/package/dsh-trivium)
-- Tested host: `@deepseek-ai/dsh@0.1.1-rc.2` (also `0.1.0-rc.8`)
+- npm: [`dsh-trivium@0.4.18`](https://www.npmjs.com/package/dsh-trivium)
+- Tested host: `@deepseek-ai/dsh@0.1.5-rc.1` (also `0.1.1-rc.2` / `0.1.0-rc.8`)
 - License: MIT (depends on [TriviumDB](https://github.com/YoKONCy/TriviumDB), Apache-2.0)
 
 ---

package/README.zh-CN.md

@@ -14,7 +14,7 @@ DeepSeek Harness 的进程内图记忆插件：按节点和边记，默认少注
 
 ## 安装
 
-> 前提：已安装 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 并至少启动过一次 `dsh web`。当前测试宿主：`@deepseek-ai/dsh@0.1.1-rc.2`（`dsh-llm` / `dsh-tools` peer 兼容 `0.1.0-rc.8` 与 `0.1.1-rc.2`）。
+> 前提：已安装 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 并至少启动过一次 `dsh web`。当前测试宿主：`@deepseek-ai/dsh@0.1.5-rc.1`（`dsh-llm` / `dsh-tools` peer 兼容 `0.1.1-rc.2` 与 `0.1.0-rc.8`）。
 
 ```sh
 dsh plugin --profile web add dsh-trivium
@@ -44,8 +44,11 @@ clone / `git pull` 后若 jsonl 变了会自动导回。设置里 **Git 旁路**
 ```sh
 npm install
 node scripts/link-dsh.mjs
+npm test              # 可选：跑全部离线 smoke
 ```
 
+`npm test` 不需要 DSH 宿主，也不会碰你真实的 `~/.dsh/trivium.json`（每个脚本用独立的临时设置文件）。想只跑一部分就传子串：`npm test -- p8`。
+
 然后重启 `dsh web`。
 
 ## 更新
@@ -238,6 +241,14 @@ Trivium 是记忆内核，不是日记、日历或聊天伴侣。它按**节点
 
 ## 更新说明
 
+**0.4.18** — `~/.dsh/trivium.json` 改为原子写（此前写到一半被杀会让所有开关和芯片钉选静默回默认），POSIX 下权限收紧为仅属主可读。新增 `npm test` 聚合入口（每个脚本用独立临时设置文件），`smoke-p0` 新增「重开后 hybrid 文本索引仍可用」的断言。四工具 / 短地图 / find 路径行为不变。
+
+**0.4.17** — 存储升到 `triviumdb@0.8.8`（引擎行为相对 0.4.16 不变）。适配宿主 `@deepseek-ai/dsh@0.1.5-rc.1`：`session.header.seedLength` 被移除，会话层 fork 切点改读 `session.inheritedEventCount`。四工具 / 短地图 / find 路径不变。
+
+**0.4.16** — 存储升到 `triviumdb@0.8.4`：引擎构造函数改为 options 对象（`{ dim }`），不再收数字位置参数；TQL 行 id 变字符串，插件内部归一为数字。四工具 / 短地图 / find 路径不变。
+
+**0.4.15** — 存储升到 `triviumdb@0.8.2`。设置 API 拒绝非回环请求与未登记 `cwd`；抽取后清空缓冲，`savePending` 不再阻塞当轮。
+
 **0.4.14** — 存储升到 `triviumdb@0.8.1`（WAL/锁更硬、可选只读共享、ARM64 修复）。四工具 / 短地图 / find 路径不变。
 
 **0.4.13** — 标题栏只显示 **芯片**；设置里的开关仍叫 **芯片（记忆白名单）**。会话层开关立刻刷新芯片页。设置 / 芯片截图更新。
@@ -290,8 +301,8 @@ Trivium 是记忆内核，不是日记、日历或聊天伴侣。它按**节点
 ## 发布信息
 
 - GitHub: https://github.com/QWQcool/dsh-trivium
-- npm: [`dsh-trivium@0.4.14`](https://www.npmjs.com/package/dsh-trivium)
-- 测试宿主：`@deepseek-ai/dsh@0.1.1-rc.2`（兼 `0.1.0-rc.8`）
+- npm: [`dsh-trivium@0.4.18`](https://www.npmjs.com/package/dsh-trivium)
+- 测试宿主：`@deepseek-ai/dsh@0.1.5-rc.1`（兼 `0.1.1-rc.2` / `0.1.0-rc.8`）
 - License: MIT（依赖 [TriviumDB](https://github.com/YoKONCy/TriviumDB) 为 Apache-2.0）
 
 ---

package/lib/atomic.js

@@ -0,0 +1,42 @@
+/**
+ * Atomic text write: write a sibling temp file, then rename over the target.
+ *
+ * `writeFileSync(file, ...)` truncates in place, so a crash (or a kill) between
+ * truncate and write leaves a half-written file. For the settings file that
+ * means `readUiSettings()` silently returns `{}` and every switch / chip pin
+ * resets. A rename is atomic on the same volume, so readers see either the old
+ * file or the new one, never a truncated one.
+ */
+import { mkdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+
+/**
+ * @param file  absolute target path
+ * @param text  UTF-8 payload
+ * @param mode  optional POSIX mode (ignored on Windows). Applied to the temp
+ *              file, which the rename then promotes to the target.
+ * @returns the target path
+ */
+export function atomicWriteFile(file, text, { mode } = {}) {
+  mkdirSync(dirname(file), { recursive: true });
+  const tmp = `${file}.tmp`;
+  // Drop a stale temp first so `mode` is actually applied on creation.
+  try {
+    unlinkSync(tmp);
+  } catch {
+    // nothing stale to remove
+  }
+  writeFileSync(tmp, text, mode === undefined ? "utf8" : { encoding: "utf8", mode });
+  try {
+    renameSync(tmp, file);
+  } catch {
+    // Windows cannot always rename over an existing file; clear and retry.
+    try {
+      unlinkSync(file);
+    } catch {
+      // destination may not exist yet
+    }
+    renameSync(tmp, file);
+  }
+  return file;
+}

package/lib/client.js

@@ -3283,7 +3283,10 @@ window.__ModuleLoader__.load({
                 open: (id) => sessions.open(id),
                 seedLengthOf: (id) => {
                   try {
-                    const seed = sessions.binding?.(id)?.session?.header?.seedLength;
+                    const face = sessions.binding?.(id)?.session;
+                    // DSH 0.1.5 dropped header.seedLength; the live session exposes
+                    // the fork-inherited prefix length as inheritedEventCount.
+                    const seed = face?.inheritedEventCount ?? face?.header?.seedLength;
                     const n = Number(seed);
                     return Number.isFinite(n) && n > 0 ? n : null;
                   } catch {

package/lib/index.js

@@ -68,6 +68,19 @@ function sessionKey(session) {
   return String(session?.id || session?.header?.id || "");
 }
 
+/**
+ * Fork-inherited prefix length. DSH 0.1.5 moved this off the header
+ * (`header.seedLength` is now rejected as an invalid field) onto the live
+ * session as `inheritedEventCount`; keep the header read as a fallback for
+ * older hosts.
+ */
+function sessionSeedLength(session) {
+  const live = session?.inheritedEventCount;
+  if (Number.isFinite(Number(live))) return Number(live);
+  const legacy = session?.header?.seedLength;
+  return Number.isFinite(Number(legacy)) ? Number(legacy) : 0;
+}
+
 function bufOf(session) {
   const id = sessionKey(session);
   if (!buffers.has(id)) {
@@ -296,15 +309,15 @@ export function apply(ctx, config = {}) {
         const session = agent.session;
         const sessionId = sessionKey(session);
         if (sessionId && sessionLayerEnabledOf(optionsOf())) {
-          const seedLen = session?.header?.seedLength;
+          const seedLen = sessionSeedLength(session);
           ensureTail(db, sessionId, {
-            atSeq: Number.isFinite(Number(seedLen)) && seedLen > 0 ? seedLen - 1 : 0,
+            atSeq: seedLen > 0 ? seedLen - 1 : 0,
           });
           if (session?.header?.parentSession) {
             syncForkLineage(db, {
               childSessionId: sessionId,
               parentSessionId: session.header.parentSession,
-              atSeq: Number.isFinite(Number(seedLen)) && seedLen > 0 ? seedLen - 1 : undefined,
+              atSeq: seedLen > 0 ? seedLen - 1 : undefined,
             });
           }
         }
@@ -441,10 +454,12 @@ export function apply(ctx, config = {}) {
             extra.push(
               createUserMessage({
                 content: [{ type: "text", text: pin.text }],
+                // No `form`: "pins" was never in DSH's ContextForm union, so the
+                // client already rendered it as undeclared (opaque) context.
+                // Omitting the field is the documented default for that.
                 source: {
                   kind: "plugin",
                   plugin: "dsh-trivium",
-                  form: "pins",
                 },
               }),
             );

package/lib/settings.js

@@ -1,10 +1,14 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
-import { dirname, join, relative, resolve, sep } from "node:path";
+import { join, relative, resolve, sep } from "node:path";
+import { atomicWriteFile } from "./atomic.js";
 import { looksHttpUrl } from "./embed.js";
 
 export const SETTINGS_FILE = join(homedir(), ".dsh", "trivium.json");
 
+/** This file can hold an embedding API key; keep it owner-only. No-op on Windows. */
+const SETTINGS_FILE_MODE = 0o600;
+
 /** Tests may set DSH_TRIVIUM_SETTINGS to a temp file so we never touch the live home config. */
 export function settingsFilePath() {
   const override = String(process.env.DSH_TRIVIUM_SETTINGS || "").trim();
@@ -12,9 +16,9 @@ export function settingsFilePath() {
 }
 
 function persistSettings(next) {
-  const file = settingsFilePath();
-  mkdirSync(dirname(file), { recursive: true });
-  writeFileSync(file, JSON.stringify(next, null, 2), "utf8");
+  // Atomic: a truncated settings file would make readUiSettings() return {}
+  // and silently reset every switch / chip pin.
+  atomicWriteFile(settingsFilePath(), JSON.stringify(next, null, 2), { mode: SETTINGS_FILE_MODE });
   return next;
 }
 

package/lib/sidecar.js

@@ -1,8 +1,9 @@
 /** Git-friendly JSONL sidecar next to trivium.tdb. No embeddings, episodes, or chip pins. */
 
 import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { existsSync, readFileSync, unlinkSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { atomicWriteFile } from "./atomic.js";
 import { BUSINESS_EDGES } from "./schema.js";
 import {
   gitSidecarEnabledOf,
@@ -196,22 +197,6 @@ function readSidecarFile(cwd) {
   }
 }
 
-function atomicWrite(file, text) {
-  mkdirSync(dirname(file), { recursive: true });
-  const tmp = `${file}.tmp`;
-  writeFileSync(tmp, text, "utf8");
-  try {
-    renameSync(tmp, file);
-  } catch {
-    try {
-      unlinkSync(file);
-    } catch {
-      // dest may not exist
-    }
-    renameSync(tmp, file);
-  }
-}
-
 function rememberHash(cwd, hash) {
   const key = resolve(cwd);
   memoryHash.set(key, hash);
@@ -293,7 +278,7 @@ export function writeSidecarNow(cwd, db, { force = false } = {}) {
   if (!force && hash === knownHash(cwd) && existsSync(file)) {
     return { path: file, hash, wrote: false };
   }
-  atomicWrite(file, text);
+  atomicWriteFile(file, text);
   rememberHash(cwd, hash);
   return { path: file, hash, wrote: true };
 }

package/lib/store.js

@@ -114,6 +114,8 @@ export async function openWorkspaceDb(cwd) {
   if (dbs.has(key)) return dbs.get(key);
   mkdirSync(join(key, ".dsh"), { recursive: true });
   const Engine = loadEngine();
+  // triviumdb 0.8.3+ removed numeric positional constructor args
+  // (TDB_API_MIGRATION_REQUIRED); dim now rides an options object.
   const db = new Engine(dbPathFor(key), { dim: DIM });
   try {
     db.createIndex("type");
@@ -122,6 +124,11 @@ export async function openWorkspaceDb(cwd) {
     // indexes may already exist
   }
   ensureWorkspaceRoot(db, cwd);
+  // Do NOT remove. triviumdb opens with `loadTextIndex: false` by default, so
+  // the persisted BM25 sidecar is not loaded and `searchHybrid`'s text channel
+  // returns nothing after a reopen until the index is rebuilt here. `searchNodes`
+  // cannot paper over the loss: its keyword fallback still scores, so a
+  // regression is silent at the tool level. scripts/smoke-p0.mjs pins this.
   rebuildTextIndex(db);
   dbs.set(key, db);
   try {
@@ -191,6 +198,8 @@ function normalizeTql(rows) {
   return rows
     .map((row) => {
       const node = row?._ || row?.["*"] || row?.a || Object.values(row || {})[0];
+      // triviumdb 0.8.x serializes TQL row ids as strings; coerce so the rest
+      // of the plugin keeps comparing numbers.
       if (!node) return null;
       const id = Number(node.id);
       if (!Number.isFinite(id)) return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-trivium",
-  "version": "0.4.16",
+  "version": "0.4.18",
   "description": "In-process graph memory for DeepSeek Harness, backed by TriviumDB.",
   "license": "MIT",
   "type": "module",
@@ -31,6 +31,7 @@
     }
   },
   "scripts": {
+    "test": "node scripts/run-all.mjs",
     "link-dsh": "node scripts/link-dsh.mjs",
     "smoke-p0": "node scripts/smoke-p0.mjs",
     "smoke-p1": "node scripts/smoke-p1.mjs",
@@ -41,6 +42,7 @@
     "smoke-p6": "node scripts/smoke-p6.mjs",
     "smoke-p7": "node scripts/smoke-p7.mjs",
     "smoke-p8": "node scripts/smoke-p8.mjs",
+    "smoke-p9": "node scripts/smoke-p9.mjs",
     "smoke-p10": "node scripts/smoke-p10.mjs",
     "smoke-p11": "node scripts/smoke-p11.mjs",
     "smoke-p12": "node scripts/smoke-p12.mjs",
@@ -55,7 +57,7 @@
     "@deepseek-ai/dsh-tools": ">=0.1.0-rc.8 <0.1.1 || >=0.1.1-rc.2 <0.2.0"
   },
   "dependencies": {
-    "triviumdb": "^0.8.4"
+    "triviumdb": "^0.8.8"
   },
   "keywords": [
     "dsh-plugin",