misakanet 2.30.0 → 2.30.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "misakanet",
-  "version": "2.30.0",
+  "version": "2.30.2",
   "description": "Failure-memory network for AI coding agents: search evidence-rated failure lessons, submit new failures, and turn crashes into reusable knowledge.",
   "author": {
     "name": "Ikalus1988",

package/README.md

@@ -23,7 +23,7 @@ mcp-name: io.github.Ikalus1988/misakanet
 npx @misaka-net/misakanet-setup
 ```
 
-装完**把助手窗口关掉再打开一次**，然后随便问一句带报错的（例如「docker exit code 137 是什么原因」），
+装完**把助手窗口关掉再打开一次**，然后随便问一句带报错的（例如「pip install timeout 是什么原因」），
 它应该先去查经验库再回答。状态自检 `npx @misaka-net/misakanet-setup --verify`，卸载 `--uninstall`。
 
 **不想用命令行、不知道配置文件在哪？** 把下面这句话**复制粘贴给助手**，它会自己装好、自己验证、用大白话回报：
@@ -147,11 +147,12 @@ for r in results:
 
 **Option 5 — DeepSeek Harness (DSH plugin):**
 ```bash
-# Install from npm (recommended — published as misakanet@2.30.0)
-dsh plugin add misakanet
+# Install from npm (recommended — published as misakanet@2.30.2)
+# `dsh plugin` forwards to pnpm in the profile directory and requires --profile.
+dsh plugin --profile web add misakanet@2.30.2
 
-# Or install directly from git (same bundle)
-# dsh plugin add git+https://github.com/Ikalus1988/MisakaNet.git
+# Or install directly from git (same bundle, plus the repo's own python MCP server)
+# dsh plugin --profile web add git+https://github.com/Ikalus1988/MisakaNet.git
 
 # Make the failure-memory SKILL discoverable by agents
 # (DSH scans ~/.dsh/skills and project .dsh/skills)
@@ -162,11 +163,15 @@ cp -r skills/misakanet ~/.dsh/skills/
 python3 scripts/mcp_deepseek_adapter.py
 ```
 
-> **DSH bundle tools (`mcp__misakanet__*`)** are served by the repo's python MCP
-> server, which ships only with a **git+ install** (the npm bundle provides the
-> skill/CLI surfaces only). For live tools from an npm install, either switch to
-> git+ (above) or point a `dsh-mcp-client` row at the remote endpoint
-> `https://misakanet.org/mcp` — example patch: `docs/maintenance.md` → dsh bundle.
+> **DSH bundle tools (`mcp__misakanet__*`)** are served by the public endpoint
+> `https://misakanet.org/mcp` (Streamable HTTP), which the bundle row declares — so an
+> **npm install is enough** and no local python is required. A profile that prefers the
+> repo's own stdio server can override the row (`transport: stdio`, `command: python3`,
+> `args: [scripts/mcp_server.py]`).
+>
+> Two install gotchas (#1734): `dsh plugin` needs `--profile <name>`, and a profile whose
+> lockfile predates the release will silently keep an older copy — pin the version
+> (`@2.30.1`) if no `mcp__misakanet__*` tools appear.
 
 ### Try it now
 
@@ -424,7 +429,7 @@ flowchart LR
     subgraph Local["💻 Local Node (git clone)"]
         User["Local Agent / Dev"]
         CLI["CLI — search_knowledge.py"]
-        MCP["MCP stdio — scripts/mcp_server.py<br/>(misakanet == 2.30.0)"]
+        MCP["MCP stdio — scripts/mcp_server.py<br/>(misakanet == 2.30.2)"]
         Engine["BM25 Engine — engine.py"]
         Lessons[("lessons/ — git source of truth")]
         Profile[("profile.json — node profile")]

package/README.zh-CN.md

@@ -8,8 +8,8 @@
 
 <p align="center">
   <a href="https://github.com/Ikalus1988/MisakaNet/stargazers"><img src="https://img.shields.io/github/stars/Ikalus1988/MisakaNet?style=social" alt="Stars"/></a>
-  <a href="https://img.shields.io/badge/nodes-59-green"><img src="https://img.shields.io/badge/nodes-59-green?label=节点" alt="节点"/></a>
-  <a href="https://img.shields.io/badge/lessons-358-blue"><img src="https://img.shields.io/badge/lessons-358-blue?label=知识" alt="知识"/></a>
+  <a href="https://github.com/Ikalus1988/MisakaNet/tree/main/lessons"><img src="https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/Ikalus1988/MisakaNet/data/badges/nodes.json" alt="节点"/></a>
+  <a href="https://github.com/Ikalus1988/MisakaNet/tree/main/lessons"><img src="https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/Ikalus1988/MisakaNet/data/badges/lessons.json" alt="知识"/></a>
   <a href="https://github.com/Ikalus1988/MisakaNet/blob/main/LICENSE"><img src="https://img.shields.io/github/license/Ikalus1988/MisakaNet?style=flat&color=blueviolet" alt="License"/></a>
 </p>
 
@@ -91,7 +91,7 @@ python3 search_knowledge.py "GitHub token 401"
 **方式 D：DeepSeek Harness（dsh 插件）与 Python 库**
 
 ```bash
-# npm 安装（推荐 — 发布为 misakanet@2.30.0）
+# npm 安装（推荐 — 发布为 misakanet@2.30.2）
 dsh plugin add misakanet
 # 或直接从 git 安装（同一 bundle）
 # dsh plugin add git+https://github.com/Ikalus1988/MisakaNet.git

package/cordis.patch.yml

@@ -1,9 +1,8 @@
-# MisakaNet dsh bundle patch (2026-09-12, DSH STORE compliance)
+# MisakaNet dsh bundle patch (2026-09-12, DSH STORE compliance; transport 2026-09-15)
 #
 # Inserts *this* package (an insert row pointing at our own `misakanet` package,
-# i.e. index.js) as a profile layer. The row's `config` is the stdio declaration
-# for the repo's own python MCP server; index.js reads it and mounts the official
-# client at runtime.
+# i.e. index.js) as a profile layer. The row's `config` is the MCP declaration
+# index.js reads when it mounts the official client at runtime.
 #
 # Why the wiring is no longer in the patch
 # ----------------------------------------
@@ -29,18 +28,24 @@
 # only our own package, and index.js mounts the official client itself
 # (peer-resolved at runtime, degrading when it is absent).
 #
-# Behaviour notes (unchanged):
-# * Registers MisakaNet's stdio MCP server into any dsh profile that lists
-#   `misakanet` in `dsh.profile.bundles`. Tools are published on ctx.tools as
-#   `mcp__misakanet__<tool>` (misakanet_search / misakanet_get_lesson / …),
-#   served by the repo's own python server (scripts/mcp_server.py), which
-#   self-locates the repo root from __file__.
-# * The python MCP server exists only in repo/git+ installs
-#   (git+https://github.com/Ikalus1988/MisakaNet.git). The npm skill-only bundle
-#   ships no python, so on such installs the row stays disconnected instead of
-#   failing boot (failOnStartupError: false).
-# * Boot cwd is inherited; run dsh from the repo root for the stdio server to
-#   start (the plugin-spec sandbox boots at the repo clone).
+# Behaviour notes:
+# * Registers MisakaNet's MCP server into any dsh profile that lists
+#   `misakanet` in `dsh.profile.bundles`. Tools appear as
+#   `mcp__misakanet__<tool>` (misakanet_search / misakanet_get_lesson / …).
+# * The row points at the PUBLIC Streamable HTTP endpoint, so an **npm install is
+#   enough**: tools no longer depend on the repo's python server
+#   (scripts/mcp_server.py), which exists only in repo/git+ installs. That was the
+#   previous arrangement, and it left every npm install with a disconnected row
+#   (issue #1734 — the git+ channel is fragile here: codeload timeouts, and pnpm
+#   now blocks git-dependency build scripts until the key is allowed).
+# * `headers.Origin` is what the endpoint's DNS-rebinding guard expects: the
+#   worker answers 200 when the header is absent, and 403 for a foreign Origin.
+# * A profile that prefers the local python server can override this row's config
+#   (transport stdio, command python3, args [scripts/mcp_server.py], cwd the repo
+#   root); index.js merges the row's config over its own defaults.
+# * `failOnStartupError: false` + 60s tool timeout: an unreachable endpoint
+#   degrades to a disconnected row instead of failing profile boot, so the skill
+#   keeps working offline.
 # * One row, one id — no double-insert: later patches override by id, and this
 #   id (misakanet-mcp) is unique to this bundle.
 
@@ -48,12 +53,10 @@
     - id: misakanet-mcp
       name: 'misakanet'
       config:
-        transport: stdio
+        transport: streamable-http
         serverName: misakanet
-        command: python3
-        args:
-          - scripts/mcp_server.py
-        env: {}
-        cwd: ''
+        url: https://misakanet.org/mcp
+        headers:
+          Origin: https://misakanet.org
         toolCallTimeoutMs: 60000
         failOnStartupError: false

package/index.js

@@ -29,28 +29,33 @@
  *   @deepseek-ai namespace` and rates the listing `route: blocked`
  *   (AI-Scarlett/DSH-Store#747; the rule is in that repo's
  *   scripts/check-plugin-submission.mjs). The patch now inserts *this* package
- *   (`name: misakanet`) and `apply()` below mounts the official stdio MCP client
- *   with the row's config — the same runtime behaviour, without naming a
+ *   (`name: misakanet`) and `apply()` below mounts the official MCP client with
+ *   the row's config — the same runtime behaviour, without naming a
  *   protected component in the patch.
  *
- * Absence is not failure: when the official client is not resolvable (npm
- * skill-only installs, older hosts) `apply()` returns quietly unless the config
- * asks to fail loudly, so the skill keeps working and boot never breaks.
+ * Absence is not failure: when the official client is not resolvable (older
+ * hosts, a profile that never installed DSH's own copy) `apply()` returns
+ * quietly unless the config asks to fail loudly, so the skill keeps working
+ * and boot never breaks.
  */
 export const name = 'misakanet';
 
 /**
- * The stdio declaration for the repo's own python MCP server. The bundle patch's
- * row config overrides any field here, so a profile can point the server at a
- * different command or working directory without patching this file.
+ * Default MCP declaration: the PUBLIC Streamable HTTP endpoint.
+ *
+ * This is the transport that works from every install channel. The repo's own
+ * python server (`scripts/mcp_server.py`, stdio) only exists in repo/git+
+ * checkouts, so defaulting to it left every npm install with a disconnected row
+ * (issue #1734). The bundle patch states the same declaration explicitly; the
+ * patch's row config is merged over this object, so a profile that wants the
+ * local server can point the row at it (transport stdio, command python3,
+ * args [scripts/mcp_server.py], cwd the repo root) without patching this file.
  */
 export const DEFAULT_MCP_CONFIG = Object.freeze({
-  transport: 'stdio',
+  transport: 'streamable-http',
   serverName: 'misakanet',
-  command: 'python3',
-  args: ['scripts/mcp_server.py'],
-  env: {},
-  cwd: '',
+  url: 'https://misakanet.org/mcp',
+  headers: { Origin: 'https://misakanet.org' },
   toolCallTimeoutMs: 60000,
   failOnStartupError: false,
 });
@@ -64,7 +69,8 @@ export const DEFAULT_MCP_CONFIG = Object.freeze({
  * that one).
  *
  * @param ctx - cordis host context.
- * @param config - stdio (or streamable-http) config from the bundle patch row.
+ * @param config - MCP config from the bundle patch row (streamable-http by
+ *   default; stdio is still accepted, e.g. for the repo's python server).
  */
 export async function apply(ctx, config = {}) {
   const options = { ...DEFAULT_MCP_CONFIG, ...config };

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "misakanet",
-  "version": "2.30.0",
+  "version": "2.30.2",
   "license": "Apache-2.0",
-  "description": "MisakaNet failure-memory skill — evidence-rated failure lessons for AI agents. DSH bundle: registers the stdio MCP server as mcp__misakanet__* tools (misakanet_search/get_lesson/…). Live bundle tools require a git+ install (the npm skill-only bundle ships no python server); skill/CLI surfaces work in any profile.",
+  "description": "MisakaNet failure-memory skill — evidence-rated failure lessons for AI agents. DSH bundle: registers the MCP tools as mcp__misakanet__* (misakanet_search/get_lesson/…), served by the public Streamable HTTP endpoint https://misakanet.org/mcp — live tools from an npm install, in any profile, with no local python. A profile that prefers the repo's own stdio server can override the bundle row.",
   "files": [
     "SKILL.md",
     "skills/",
@@ -16,6 +16,22 @@
       "patch": "./cordis.patch.yml"
     }
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Ikalus1988/MisakaNet.git"
+  },
+  "homepage": "https://misakanet.org",
+  "bugs": {
+    "url": "https://github.com/Ikalus1988/MisakaNet/issues"
+  },
+  "keywords": [
+    "misakanet",
+    "dsh-plugin",
+    "failure-memory",
+    "mcp",
+    "skill",
+    "lessons"
+  ],
   "peerDependencies": {
     "@deepseek-ai/dsh-mcp-client": ">=0.1.0-rc.8 <0.2.0"
   },