owlmem 0.9.2 → 0.9.4

package/README.md

@@ -29,7 +29,7 @@ page, where you sign in and click **Allow**. AI agents can read the setup guide
 
 An AI on your computer normally sees a task only when someone opens it. Auto-wake starts it as soon as it gets one:
 a small background program long-polls OwlMem and runs that AI's command line unattended — Claude Code with
-`claude -p`, Codex with `codex exec`, Antigravity with `agy -p`, Hermes with `hermes -z` (for Codex and Antigravity, which refuse tool calls when nobody is watching, auto-wake approves just the two OwlMem tools used to report back: in `~/.codex/config.toml` and `~/.gemini/antigravity-cli/settings.json`; for Hermes, only if OwlMem is marked `trust: untrusted`, under `command_allowlist` in `~/.hermes/config.yaml`) — with the task as the prompt. The AI marks the task done or declined as usual. When a task it gave out is done or declined, it is woken too, to read the result. The program updates itself (from npm, when nothing is running).
+`claude -p`, Codex with `codex exec`, Antigravity with `agy -p`, Hermes with `hermes -z`, DeepSeek Harness with `dsh --profile headless` (for Codex and Antigravity, which refuse tool calls when nobody is watching, auto-wake approves just the two OwlMem tools used to report back: in `~/.codex/config.toml` and `~/.gemini/antigravity-cli/settings.json`; for Hermes, only if OwlMem is marked `trust: untrusted`, under `command_allowlist` in `~/.hermes/config.yaml`; for DeepSeek Harness, its headless profile gets the model and the OwlMem server copied from the web profile, and its credential store turned back on, in `~/.dsh/profiles/headless/cordis.patch.yml`) — with the task as the prompt. The AI marks the task done or declined as usual. When a task it gave out is done or declined, it is woken too, to read the result. The program updates itself (from npm, when nothing is running).
 
 When someone turns auto-wake on for an AI in the console and no computer runs it yet, that AI is told so the next time it connects:
 with your OK it runs `npx -y owlmem wake enable` itself and sends you the pairing link to approve.

package/owlmem.mjs

@@ -41,7 +41,7 @@ import { join, dirname, basename, relative, isAbsolute } from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawn, spawnSync } from "node:child_process";
 
-export const VERSION = "0.9.2";
+export const VERSION = "0.9.4";
 const BASE = (process.env.OWLMEM_URL || "https://owlmem.com").replace(/\/$/, "");
 const DIR = process.env.OWLMEM_HOME || join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "owlmem");
 const enc = new TextEncoder(), dec = new TextDecoder();
@@ -817,8 +817,11 @@ export const WAKE_CLIENTS = {
   // Its installer puts hermes under ~/.hermes/hermes-agent or ~/.local/bin; a system-wide service install under /var/lib/hermes
   hermes: { name: "Hermes", bin: "hermes", command: ["hermes", "-z"], prompt: "arg",
     home: [[".hermes", "hermes-agent", ".hermes", "bin", "hermes"], [".local", "bin", "hermes"], "/var/lib/hermes/hermes-agent/.hermes/bin/hermes"] },
+  // DeepSeek Harness: the headless profile answers one task (from stdin) and exits. Its own profile needs OwlMem and a model,
+  // copied from the web profile (see allowDsh). On NixOS dsh must run on the official Node build: use the dsh wrapper found here.
+  dsh: { name: "DeepSeek Harness", bin: "dsh", command: ["dsh", "--profile", "headless"], prompt: "stdin", home: [[".local", "bin", "dsh"]] },
 };
-export const WAKE_APP_IDS = ["claude-code", "codex", "antigravity", "hermes", "gemini", "custom"];
+export const WAKE_APP_IDS = ["claude-code", "codex", "antigravity", "hermes", "dsh", "gemini", "custom"];
 // Where an app's command is: on PATH, or the first of its default install places that exists (path parts under your home
 // folder, or an absolute path), used by full path
 export function wakeBin(c, home_ = home(), exists = existsSync, path = onPath) {
@@ -854,6 +857,40 @@ export function allowAntigravity(home_ = home()) {
   writeFileSync(f, JSON.stringify(j, null, 2) + "\n");
   return true;
 }
+// DeepSeek Harness keeps each profile under ~/.dsh/profiles/<name>/, configured by a patch list (cordis.patch.yml). The headless
+// profile that auto-wake runs starts empty: copy over from the web profile what it needs to work for OwlMem — the default model
+// and its provider (agent-default-model, llm-pi-ai) and the OwlMem MCP server — and turn its credential store back on (headless
+// turns it off, but the web profile keeps the provider's key there). Adds entries only; the file is backed up first.
+// Returns the names of what was added; [] when nothing was missing; "init" when the headless profile isn't there yet (run
+// `dsh --profile headless --help` once); "noweb" when OwlMem isn't in the web profile either, so there's nothing to copy.
+export function allowDsh(home_ = home(), env = process.env, now = new Date()) {
+  const dir = join(env.DSH_HOME || join(home_, ".dsh"), "profiles"), hf = join(dir, "headless", "cordis.patch.yml");
+  if (!existsSync(join(dir, "headless"))) return "init";
+  let h = ""; try { h = readFileSync(hf, "utf8"); } catch { /* an empty profile has no patch file yet */ }
+  let w = ""; try { w = readFileSync(join(dir, "web", "cordis.patch.yml"), "utf8"); } catch { /* no web profile */ }
+  // the top-level entries of a patch list: each starts with "- " at column 0 and runs to the next one
+  const items = (t) => t.split(/\n(?=- )/).map((x) => x.replace(/^[\s\S]*?(?=^- )/m, "")).filter((x) => /^- /.test(x));
+  const has = (t, rx) => items(t).some((x) => rx.test(x));
+  const want = [
+    ["model", /^- id: agent-default-model\b/m], ["provider", /^- id: llm-pi-ai\b/m], ["owlmem", /serverName:\s*["']?owlmem\b/],
+  ];
+  const add = [], names = [];
+  for (const [name, rx] of want) {
+    if (has(h, rx)) continue;
+    const from = items(w).find((x) => rx.test(x));
+    if (from) { add.push(from.replace(/\s+$/, "")); names.push(name); }
+  }
+  if (!has(h, /serverName:\s*["']?owlmem\b/) && !names.includes("owlmem")) return "noweb";
+  if (!/^- id: credentials\s*\n\s+disabled:\s*false\b/m.test(h)) {
+    add.push("# headless turns the credential store off; the web profile keeps the model's key there\n- id: credentials\n  disabled: false");
+    names.push("credentials");
+  }
+  if (!add.length) return [];
+  if (existsSync(hf)) copyFileSync(hf, hf + ".bak-" + now.toISOString().slice(0, 10).replace(/-/g, ""));
+  const base = h.replace(/^\[\]\s*$/m, "").replace(/\s*$/, "");
+  writeFileSync(hf, (base ? base + "\n" : "") + "# Added by OwlMem auto-wake (owlmem wake enable): what the headless profile needs to answer OwlMem tasks\n" + add.join("\n") + "\n");
+  return names;
+}
 // Hermes calls MCP tools without asking unless the server is marked `trust: untrusted` (or an unknown value) under mcp_servers in
 // ~/.hermes/config.yaml; then unattended runs refuse its write tools. Only in that case, add WAKE_TOOLS
 // to the top-level command_allowlist as mcp:<server>/<tool> (what Hermes itself writes for "Always"). Adds lines only,
@@ -1216,6 +1253,19 @@ export class Scheduler {
   get size() { return this.running.size + this.queue.length; }
 }
 
+// Check-ins for the AI (0.9.4, 站长 11-01「npm 方式、不消耗 token 上报」): while an AI this program started is still working
+// on a task, tell OwlMem every ALIVE_EVERY that its process is running. That counts as the task's heartbeat, so the AI
+// doesn't spend tokens reporting in itself. Only tasks whose process is running (the scheduler's running set); replies
+// (type note) have no heartbeat. When the process ends this stops by itself and report() says how it ended.
+export const ALIVE_EVERY = 60 * 1000;
+export async function aliveTick(sched, api, log = () => {}) {
+  const ids = [...sched.running].filter((j) => j.task?.type !== "note" && j.id != null).map((j) => j.id);
+  if (!ids.length) return [];
+  const r = await api("alive", { ids });
+  if (r.status !== 200 && r.status !== 404) log("check-in: OwlMem answered " + (r.data?.detail || "HTTP " + r.status));
+  return ids;
+}
+
 // The long-poll loop. api(sub, body) → {status, data}. Returns "revoked" after cleaning up on a 401.
 export async function wakeLoop(o) {
   const { cfg, api, sched, log = () => {}, sleep = (ms) => new Promise((r) => setTimeout(r, ms)), once = false, cleanup } = o;
@@ -1549,6 +1599,7 @@ async function wakeRun() {
   log("OwlMem auto-wake " + VERSION + " running on " + (cfg.machine || hostname()) + ".");
   const usage = () => usageTick(cfg, api, log).catch((e) => log("usage: " + e.message));
   setTimeout(usage, 30000).unref(); setInterval(usage, USAGE_EVERY).unref();
+  setInterval(() => aliveTick(sched, api, log).catch((e) => log("check-in: " + e.message)), ALIVE_EVERY).unref();
   const out = await wakeLoop({ cfg, api, sched, log, update: (v) => wakeUpdate(v, { log }),
     cleanup: () => { try { wakeUninstall(autostartOpts(), wakeRunCmd, true); } catch (e) { log("cleanup: " + e.message); } } });
   if (out === "revoked") process.exit(0);
@@ -1576,11 +1627,17 @@ async function wakeEnable(args = []) {
   }
   if (!Object.keys(clients).length) {
     const told = await wakeNoClients(wakeApi()).catch(() => false);
-    throw new Fail("No AI command line found on this computer that auto-wake can start (Claude Code: claude, Codex: codex, Antigravity: agy, Hermes: hermes). Install one, or add its command to " + wakeFile() + " under \"clients\"." +
+    throw new Fail("No AI command line found on this computer that auto-wake can start (Claude Code: claude, Codex: codex, Antigravity: agy, Hermes: hermes, DeepSeek Harness: dsh). Install one, or add its command to " + wakeFile() + " under \"clients\"." +
       (told ? "\nOwlMem support has been told; you'll hear from us once your AI app is supported." : ""));
   }
   if (clients.codex && allowCodex()) say("Let Codex report back to OwlMem when nobody is watching (tool approvals in ~/.codex/config.toml).");
   if (clients.antigravity && allowAntigravity()) say("Let Antigravity's command line report back to OwlMem when nobody is watching (rules in ~/.gemini/antigravity-cli/settings.json).");
+  if (clients.dsh) {
+    const d = allowDsh();
+    if (d === "init") say("DeepSeek Harness: run `dsh --profile headless --help` once to create its headless profile, then run this again.");
+    else if (d === "noweb") say("DeepSeek Harness: OwlMem isn't set up in its web profile, so the headless profile can't be set up from it. Connect OwlMem in DeepSeek Harness first, then run this again.");
+    else if (d.length) say("Set up DeepSeek Harness's headless profile for auto-wake (" + d.join(", ") + " in ~/.dsh/profiles/headless/cordis.patch.yml, copied from the web profile; the old file is backed up next to it).");
+  }
   if (clients.hermes) {
     const h = allowHermes();
     if (h === true) say("Let Hermes report back to OwlMem when nobody is watching (entries under command_allowlist in ~/.hermes/config.yaml).");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlmem",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "description": "OwlMem command line: connect your AI apps to OwlMem in one command (npx -y owlmem install), an end-to-end encrypted vault for your AI agents, and a local MCP server.",
   "type": "module",
   "bin": { "owlmem": "owlmem.mjs" },