dsh-trivium 0.4.17 → 0.4.18

package/README.md

@@ -46,8 +46,11 @@ Local source checkout:
 ```sh
 npm install
 node scripts/link-dsh.mjs
+npm test              # optional: runs every offline smoke script
 ```
 
+`npm test` needs no DSH host and never touches your real `~/.dsh/trivium.json` (each script gets its own temp settings file). Pass a substring to narrow it: `npm test -- p8`.
+
 Then restart `dsh web`.
 
 ## Updating
@@ -242,6 +245,8 @@ Off by default. After you turn **Chips (memory whitelist)** on in Settings, the
 
 ## Changelog
 
+**0.4.18** — `~/.dsh/trivium.json` is now written atomically (a truncated write used to reset every switch and chip pin silently) and is owner-only on POSIX. `npm test` runs every offline smoke script with isolated settings, and `smoke-p0` pins the hybrid text-index-after-reopen invariant. Four tools / short map / find paths unchanged.
+
 **0.4.17** — Storage bump to `triviumdb@0.8.8` (engine behavior unchanged from 0.4.16). Host adaptation for `@deepseek-ai/dsh@0.1.5-rc.1`: `session.header.seedLength` was removed, so the session-layer fork cut now reads `session.inheritedEventCount`. Four tools / short map / find paths unchanged.
 
 **0.4.16** — Storage bump to `triviumdb@0.8.4`: the engine constructor now takes an options object (`{ dim }`) instead of numeric positional args, and TQL rows return string ids that the plugin coerces back to numbers. Four tools / short map / find paths unchanged.
@@ -300,7 +305,7 @@ Local source checkout: `npm install`, then `node scripts/link-dsh.mjs`, then res
 ## Release info
 
 - GitHub: https://github.com/QWQcool/dsh-trivium
-- npm: [`dsh-trivium@0.4.17`](https://www.npmjs.com/package/dsh-trivium)
+- npm: [`dsh-trivium@0.4.18`](https://www.npmjs.com/package/dsh-trivium)
 - Tested host: `@deepseek-ai/dsh@0.1.5-rc.1` (also `0.1.1-rc.2` / `0.1.0-rc.8`)
 - License: MIT (depends on [TriviumDB](https://github.com/YoKONCy/TriviumDB), Apache-2.0)
 

package/README.zh-CN.md

@@ -44,8 +44,11 @@ clone / `git pull` 后若 jsonl 变了会自动导回。设置里 **Git 旁路**
 ```sh
 npm install
 node scripts/link-dsh.mjs
+npm test              # 可选：跑全部离线 smoke
 ```
 
+`npm test` 不需要 DSH 宿主，也不会碰你真实的 `~/.dsh/trivium.json`（每个脚本用独立的临时设置文件）。想只跑一部分就传子串：`npm test -- p8`。
+
 然后重启 `dsh web`。
 
 ## 更新
@@ -238,6 +241,8 @@ Trivium 是记忆内核，不是日记、日历或聊天伴侣。它按**节点
 
 ## 更新说明
 
+**0.4.18** — `~/.dsh/trivium.json` 改为原子写（此前写到一半被杀会让所有开关和芯片钉选静默回默认），POSIX 下权限收紧为仅属主可读。新增 `npm test` 聚合入口（每个脚本用独立临时设置文件），`smoke-p0` 新增「重开后 hybrid 文本索引仍可用」的断言。四工具 / 短地图 / find 路径行为不变。
+
 **0.4.17** — 存储升到 `triviumdb@0.8.8`（引擎行为相对 0.4.16 不变）。适配宿主 `@deepseek-ai/dsh@0.1.5-rc.1`：`session.header.seedLength` 被移除，会话层 fork 切点改读 `session.inheritedEventCount`。四工具 / 短地图 / find 路径不变。
 
 **0.4.16** — 存储升到 `triviumdb@0.8.4`：引擎构造函数改为 options 对象（`{ dim }`），不再收数字位置参数；TQL 行 id 变字符串，插件内部归一为数字。四工具 / 短地图 / find 路径不变。
@@ -296,7 +301,7 @@ Trivium 是记忆内核，不是日记、日历或聊天伴侣。它按**节点
 ## 发布信息
 
 - GitHub: https://github.com/QWQcool/dsh-trivium
-- npm: [`dsh-trivium@0.4.17`](https://www.npmjs.com/package/dsh-trivium)
+- npm: [`dsh-trivium@0.4.18`](https://www.npmjs.com/package/dsh-trivium)
 - 测试宿主：`@deepseek-ai/dsh@0.1.5-rc.1`（兼 `0.1.1-rc.2` / `0.1.0-rc.8`）
 - License: MIT（依赖 [TriviumDB](https://github.com/YoKONCy/TriviumDB) 为 Apache-2.0）
 

package/lib/atomic.js

@@ -0,0 +1,42 @@
+/**
+ * Atomic text write: write a sibling temp file, then rename over the target.
+ *
+ * `writeFileSync(file, ...)` truncates in place, so a crash (or a kill) between
+ * truncate and write leaves a half-written file. For the settings file that
+ * means `readUiSettings()` silently returns `{}` and every switch / chip pin
+ * resets. A rename is atomic on the same volume, so readers see either the old
+ * file or the new one, never a truncated one.
+ */
+import { mkdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+
+/**
+ * @param file  absolute target path
+ * @param text  UTF-8 payload
+ * @param mode  optional POSIX mode (ignored on Windows). Applied to the temp
+ *              file, which the rename then promotes to the target.
+ * @returns the target path
+ */
+export function atomicWriteFile(file, text, { mode } = {}) {
+  mkdirSync(dirname(file), { recursive: true });
+  const tmp = `${file}.tmp`;
+  // Drop a stale temp first so `mode` is actually applied on creation.
+  try {
+    unlinkSync(tmp);
+  } catch {
+    // nothing stale to remove
+  }
+  writeFileSync(tmp, text, mode === undefined ? "utf8" : { encoding: "utf8", mode });
+  try {
+    renameSync(tmp, file);
+  } catch {
+    // Windows cannot always rename over an existing file; clear and retry.
+    try {
+      unlinkSync(file);
+    } catch {
+      // destination may not exist yet
+    }
+    renameSync(tmp, file);
+  }
+  return file;
+}

package/lib/index.js

@@ -454,10 +454,12 @@ export function apply(ctx, config = {}) {
             extra.push(
               createUserMessage({
                 content: [{ type: "text", text: pin.text }],
+                // No `form`: "pins" was never in DSH's ContextForm union, so the
+                // client already rendered it as undeclared (opaque) context.
+                // Omitting the field is the documented default for that.
                 source: {
                   kind: "plugin",
                   plugin: "dsh-trivium",
-                  form: "pins",
                 },
               }),
             );

package/lib/settings.js

@@ -1,10 +1,14 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
-import { dirname, join, relative, resolve, sep } from "node:path";
+import { join, relative, resolve, sep } from "node:path";
+import { atomicWriteFile } from "./atomic.js";
 import { looksHttpUrl } from "./embed.js";
 
 export const SETTINGS_FILE = join(homedir(), ".dsh", "trivium.json");
 
+/** This file can hold an embedding API key; keep it owner-only. No-op on Windows. */
+const SETTINGS_FILE_MODE = 0o600;
+
 /** Tests may set DSH_TRIVIUM_SETTINGS to a temp file so we never touch the live home config. */
 export function settingsFilePath() {
   const override = String(process.env.DSH_TRIVIUM_SETTINGS || "").trim();
@@ -12,9 +16,9 @@ export function settingsFilePath() {
 }
 
 function persistSettings(next) {
-  const file = settingsFilePath();
-  mkdirSync(dirname(file), { recursive: true });
-  writeFileSync(file, JSON.stringify(next, null, 2), "utf8");
+  // Atomic: a truncated settings file would make readUiSettings() return {}
+  // and silently reset every switch / chip pin.
+  atomicWriteFile(settingsFilePath(), JSON.stringify(next, null, 2), { mode: SETTINGS_FILE_MODE });
   return next;
 }
 

package/lib/sidecar.js

@@ -1,8 +1,9 @@
 /** Git-friendly JSONL sidecar next to trivium.tdb. No embeddings, episodes, or chip pins. */
 
 import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { existsSync, readFileSync, unlinkSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { atomicWriteFile } from "./atomic.js";
 import { BUSINESS_EDGES } from "./schema.js";
 import {
   gitSidecarEnabledOf,
@@ -196,22 +197,6 @@ function readSidecarFile(cwd) {
   }
 }
 
-function atomicWrite(file, text) {
-  mkdirSync(dirname(file), { recursive: true });
-  const tmp = `${file}.tmp`;
-  writeFileSync(tmp, text, "utf8");
-  try {
-    renameSync(tmp, file);
-  } catch {
-    try {
-      unlinkSync(file);
-    } catch {
-      // dest may not exist
-    }
-    renameSync(tmp, file);
-  }
-}
-
 function rememberHash(cwd, hash) {
   const key = resolve(cwd);
   memoryHash.set(key, hash);
@@ -293,7 +278,7 @@ export function writeSidecarNow(cwd, db, { force = false } = {}) {
   if (!force && hash === knownHash(cwd) && existsSync(file)) {
     return { path: file, hash, wrote: false };
   }
-  atomicWrite(file, text);
+  atomicWriteFile(file, text);
   rememberHash(cwd, hash);
   return { path: file, hash, wrote: true };
 }

package/lib/store.js

@@ -124,6 +124,11 @@ export async function openWorkspaceDb(cwd) {
     // indexes may already exist
   }
   ensureWorkspaceRoot(db, cwd);
+  // Do NOT remove. triviumdb opens with `loadTextIndex: false` by default, so
+  // the persisted BM25 sidecar is not loaded and `searchHybrid`'s text channel
+  // returns nothing after a reopen until the index is rebuilt here. `searchNodes`
+  // cannot paper over the loss: its keyword fallback still scores, so a
+  // regression is silent at the tool level. scripts/smoke-p0.mjs pins this.
   rebuildTextIndex(db);
   dbs.set(key, db);
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-trivium",
-  "version": "0.4.17",
+  "version": "0.4.18",
   "description": "In-process graph memory for DeepSeek Harness, backed by TriviumDB.",
   "license": "MIT",
   "type": "module",
@@ -31,6 +31,7 @@
     }
   },
   "scripts": {
+    "test": "node scripts/run-all.mjs",
     "link-dsh": "node scripts/link-dsh.mjs",
     "smoke-p0": "node scripts/smoke-p0.mjs",
     "smoke-p1": "node scripts/smoke-p1.mjs",
@@ -41,6 +42,7 @@
     "smoke-p6": "node scripts/smoke-p6.mjs",
     "smoke-p7": "node scripts/smoke-p7.mjs",
     "smoke-p8": "node scripts/smoke-p8.mjs",
+    "smoke-p9": "node scripts/smoke-p9.mjs",
     "smoke-p10": "node scripts/smoke-p10.mjs",
     "smoke-p11": "node scripts/smoke-p11.mjs",
     "smoke-p12": "node scripts/smoke-p12.mjs",