stratagate-dsh 0.2.61 → 0.2.63

package/dist/repair-profile.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/repair-profile.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+
+// src/repair-profile.ts
+import { existsSync, lstatSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+var PROFILE_PACKAGES = [
+  "@deepseek-ai/cordis",
+  "@deepseek-ai/cosmokit",
+  "@deepseek-ai/dsh-agent",
+  "@deepseek-ai/dsh-agent-default-model",
+  "@deepseek-ai/dsh-brand",
+  "@deepseek-ai/dsh-client-ui-conversation",
+  "@deepseek-ai/dsh-code-runtime",
+  "@deepseek-ai/dsh-invariants",
+  "@deepseek-ai/dsh-llm",
+  "@deepseek-ai/dsh-scope",
+  "@deepseek-ai/dsh-session",
+  "@deepseek-ai/dsh-session-format",
+  "@deepseek-ai/dsh-session-format-catalog",
+  "@deepseek-ai/dsh-session-format-v0-to-v1",
+  "@deepseek-ai/dsh-session-projection",
+  "@deepseek-ai/dsh-settings",
+  "@deepseek-ai/dsh-system-prompt",
+  "@deepseek-ai/dsh-timeout",
+  "@deepseek-ai/dsh-tools",
+  "@deepseek-ai/dsh-typert-protocol",
+  "@deepseek-ai/dsh-user-approval",
+  "@deepseek-ai/dsh-util-crypto",
+  "@deepseek-ai/dsh-util-values",
+  "@deepseek-ai/schemastery"
+];
+function profileDirectory(start) {
+  let directory = start;
+  for (; ; ) {
+    const manifestPath = join(directory, "package.json");
+    if (existsSync(manifestPath)) {
+      try {
+        const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+        if (manifest.dsh?.profile && typeof manifest.dsh.profile === "object") return directory;
+      } catch {
+      }
+    }
+    const parent = dirname(directory);
+    if (parent === directory) {
+      throw new Error("stratagate-dsh-repair must run inside an installed DSH profile");
+    }
+    directory = parent;
+  }
+}
+function main() {
+  const profile = profileDirectory(dirname(fileURLToPath(import.meta.url)));
+  const modules = join(profile, "node_modules");
+  const candidates = PROFILE_PACKAGES.map((name) => ({ name, source: join(modules, ...name.split("/")) })).filter(({ source }) => {
+    try {
+      lstatSync(source);
+      return true;
+    } catch (error) {
+      if (error.code === "ENOENT") return false;
+      throw error;
+    }
+  });
+  if (candidates.length === 0) {
+    process.stdout.write("StrataGate profile runtime is already isolated; no DSH peer residue found.\n");
+    return;
+  }
+  const backup = join(profile, ".stratagate-runtime-backups", `${Date.now()}-${process.pid}-${randomUUID()}`);
+  const moved = [];
+  try {
+    for (const candidate of candidates) {
+      const target = join(backup, "node_modules", ...candidate.name.split("/"));
+      mkdirSync(dirname(target), { recursive: true });
+      renameSync(candidate.source, target);
+      moved.push({ ...candidate, target });
+    }
+    const receipt = {
+      schema: "stratagate-dsh-profile-runtime-repair/v1",
+      profile,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      packages: moved.map(({ name, source, target }) => ({ name, source, target })),
+      recovery: `While DSH is stopped, move the listed targets back to their source paths if this repair must be reversed.`
+    };
+    writeFileSync(join(backup, "receipt.json"), `${JSON.stringify(receipt, null, 2)}
+`, { flag: "wx", mode: 384 });
+  } catch (error) {
+    for (const item of moved.reverse()) {
+      if (existsSync(item.target) && !existsSync(item.source)) renameSync(item.target, item.source);
+    }
+    throw error;
+  }
+  process.stdout.write(`Quarantined ${moved.length} stale DSH profile package(s) to ${backup}
+`);
+}
+try {
+  main();
+} catch (error) {
+  process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}
+`);
+  process.exitCode = 1;
+}
+//# sourceMappingURL=repair-profile.js.map

package/dist/repair-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/repair-profile.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { existsSync, lstatSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport { basename, dirname, join } from 'node:path'\nimport { fileURLToPath } from 'node:url'\n\nconst PROFILE_PACKAGES = [\n  '@deepseek-ai/cordis',\n  '@deepseek-ai/cosmokit',\n  '@deepseek-ai/dsh-agent',\n  '@deepseek-ai/dsh-agent-default-model',\n  '@deepseek-ai/dsh-brand',\n  '@deepseek-ai/dsh-client-ui-conversation',\n  '@deepseek-ai/dsh-code-runtime',\n  '@deepseek-ai/dsh-invariants',\n  '@deepseek-ai/dsh-llm',\n  '@deepseek-ai/dsh-scope',\n  '@deepseek-ai/dsh-session',\n  '@deepseek-ai/dsh-session-format',\n  '@deepseek-ai/dsh-session-format-catalog',\n  '@deepseek-ai/dsh-session-format-v0-to-v1',\n  '@deepseek-ai/dsh-session-projection',\n  '@deepseek-ai/dsh-settings',\n  '@deepseek-ai/dsh-system-prompt',\n  '@deepseek-ai/dsh-timeout',\n  '@deepseek-ai/dsh-tools',\n  '@deepseek-ai/dsh-typert-protocol',\n  '@deepseek-ai/dsh-user-approval',\n  '@deepseek-ai/dsh-util-crypto',\n  '@deepseek-ai/dsh-util-values',\n  '@deepseek-ai/schemastery',\n] as const\n\nfunction profileDirectory(start: string): string {\n  let directory = start\n  for (;;) {\n    const manifestPath = join(directory, 'package.json')\n    if (existsSync(manifestPath)) {\n      try {\n        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as { dsh?: { profile?: unknown } }\n        if (manifest.dsh?.profile && typeof manifest.dsh.profile === 'object') return directory\n      } catch {}\n    }\n    const parent = dirname(directory)\n    if (parent === directory) {\n      throw new Error('stratagate-dsh-repair must run inside an installed DSH profile')\n    }\n    directory = parent\n  }\n}\n\nfunction main(): void {\n  const profile = profileDirectory(dirname(fileURLToPath(import.meta.url)))\n  const modules = join(profile, 'node_modules')\n  const candidates = PROFILE_PACKAGES\n    .map((name) => ({ name, source: join(modules, ...name.split('/')) }))\n    .filter(({ source }) => {\n      try {\n        lstatSync(source)\n        return true\n      } catch (error) {\n        if ((error as NodeJS.ErrnoException).code === 'ENOENT') return false\n        throw error\n      }\n    })\n  if (candidates.length === 0) {\n    process.stdout.write('StrataGate profile runtime is already isolated; no DSH peer residue found.\\n')\n    return\n  }\n\n  const backup = join(profile, '.stratagate-runtime-backups', `${Date.now()}-${process.pid}-${randomUUID()}`)\n  const moved: Array<{ name: string; source: string; target: string }> = []\n  try {\n    for (const candidate of candidates) {\n      const target = join(backup, 'node_modules', ...candidate.name.split('/'))\n      mkdirSync(dirname(target), { recursive: true })\n      renameSync(candidate.source, target)\n      moved.push({ ...candidate, target })\n    }\n    const receipt = {\n      schema: 'stratagate-dsh-profile-runtime-repair/v1',\n      profile,\n      createdAt: new Date().toISOString(),\n      packages: moved.map(({ name, source, target }) => ({ name, source, target })),\n      recovery: `While DSH is stopped, move the listed targets back to their source paths if this repair must be reversed.`,\n    }\n    writeFileSync(join(backup, 'receipt.json'), `${JSON.stringify(receipt, null, 2)}\\n`, { flag: 'wx', mode: 0o600 })\n  } catch (error) {\n    for (const item of moved.reverse()) {\n      if (existsSync(item.target) && !existsSync(item.source)) renameSync(item.target, item.source)\n    }\n    throw error\n  }\n  process.stdout.write(`Quarantined ${moved.length} stale DSH profile package(s) to ${backup}\\n`)\n}\n\ntry {\n  main()\n} catch (error) {\n  process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\\n`)\n  process.exitCode = 1\n}\n"],"mappings":";;;AACA,SAAS,YAAY,WAAW,WAAW,cAAc,YAAY,qBAAqB;AAC1F,SAAS,kBAAkB;AAC3B,SAAmB,SAAS,YAAY;AACxC,SAAS,qBAAqB;AAE9B,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,iBAAiB,OAAuB;AAC/C,MAAI,YAAY;AAChB,aAAS;AACP,UAAM,eAAe,KAAK,WAAW,cAAc;AACnD,QAAI,WAAW,YAAY,GAAG;AAC5B,UAAI;AACF,cAAM,WAAW,KAAK,MAAM,aAAa,cAAc,MAAM,CAAC;AAC9D,YAAI,SAAS,KAAK,WAAW,OAAO,SAAS,IAAI,YAAY,SAAU,QAAO;AAAA,MAChF,QAAQ;AAAA,MAAC;AAAA,IACX;AACA,UAAM,SAAS,QAAQ,SAAS;AAChC,QAAI,WAAW,WAAW;AACxB,YAAM,IAAI,MAAM,gEAAgE;AAAA,IAClF;AACA,gBAAY;AAAA,EACd;AACF;AAEA,SAAS,OAAa;AACpB,QAAM,UAAU,iBAAiB,QAAQ,cAAc,YAAY,GAAG,CAAC,CAAC;AACxE,QAAM,UAAU,KAAK,SAAS,cAAc;AAC5C,QAAM,aAAa,iBAChB,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,KAAK,SAAS,GAAG,KAAK,MAAM,GAAG,CAAC,EAAE,EAAE,EACnE,OAAO,CAAC,EAAE,OAAO,MAAM;AACtB,QAAI;AACF,gBAAU,MAAM;AAChB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,YAAM;AAAA,IACR;AAAA,EACF,CAAC;AACH,MAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,OAAO,MAAM,8EAA8E;AACnG;AAAA,EACF;AAEA,QAAM,SAAS,KAAK,SAAS,+BAA+B,GAAG,KAAK,IAAI,CAAC,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC,EAAE;AAC1G,QAAM,QAAiE,CAAC;AACxE,MAAI;AACF,eAAW,aAAa,YAAY;AAClC,YAAM,SAAS,KAAK,QAAQ,gBAAgB,GAAG,UAAU,KAAK,MAAM,GAAG,CAAC;AACxE,gBAAU,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,iBAAW,UAAU,QAAQ,MAAM;AACnC,YAAM,KAAK,EAAE,GAAG,WAAW,OAAO,CAAC;AAAA,IACrC;AACA,UAAM,UAAU;AAAA,MACd,QAAQ;AAAA,MACR;AAAA,MACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,UAAU,MAAM,IAAI,CAAC,EAAE,MAAM,QAAQ,OAAO,OAAO,EAAE,MAAM,QAAQ,OAAO,EAAE;AAAA,MAC5E,UAAU;AAAA,IACZ;AACA,kBAAc,KAAK,QAAQ,cAAc,GAAG,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AAAA,EAClH,SAAS,OAAO;AACd,eAAW,QAAQ,MAAM,QAAQ,GAAG;AAClC,UAAI,WAAW,KAAK,MAAM,KAAK,CAAC,WAAW,KAAK,MAAM,EAAG,YAAW,KAAK,QAAQ,KAAK,MAAM;AAAA,IAC9F;AACA,UAAM;AAAA,EACR;AACA,UAAQ,OAAO,MAAM,eAAe,MAAM,MAAM,oCAAoC,MAAM;AAAA,CAAI;AAChG;AAEA,IAAI;AACF,OAAK;AACP,SAAS,OAAO;AACd,UAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AACjG,UAAQ,WAAW;AACrB;","names":[]}

package/docs/ARCHITECTURE.md

@@ -48,20 +48,20 @@ A completed user/assistant pair is one turn. The default block boundary is 12 co
 
 Hosts may attach a `threadId` to each turn. Open tails, Block boundaries, neighboring extraction context, turn ranges, and decay pointers are then isolated by thread. Persisted Blocks remain available as provenance for long-term cards, while host integrations must inject only the active thread's short-term Block context.
 
-When the boundary is reached:
-
-1. One atomic sealing transaction moves the source messages into permanent L5 and writes deterministic L4 and L3.
-2. The sealed Block is marked model-pending. It is provenance, but it is excluded from decay and cannot replace native conversation history.
-3. A background summarizer produces and validates L0-L2 plus a conservative `shouldExtract` decision.
-4. Event extraction completes with either validated Events or an explicit valid empty result.
-5. Only then is the Block marked ready: its pointer starts at L5, it may replace native history, and it decays toward L0 as newer ready Blocks enter the same thread.
+When the boundary is reached:
+
+1. One atomic sealing transaction moves the source messages into permanent L5 and writes deterministic L4 and L3.
+2. The sealed Block is marked model-pending. It is provenance, but it is excluded from decay and cannot replace native conversation history.
+3. A background summarizer produces and validates L0-L2 plus a conservative `shouldExtract` decision.
+4. Event extraction completes with either validated Events or an explicit valid empty result.
+5. Only then is the Block marked ready: its pointer starts at L5, it may replace native history, and it decays toward L0 as newer ready Blocks enter the same thread.
 
 The block weight is:
 
 ```text
 w(age) = exp(-lambda_block * age)
 
-age = latest ready Block position - pointer anchor Block position
+age = latest ready Block position - pointer anchor Block position
 lambda_block = 0.30 by default
 ```
 
@@ -78,13 +78,13 @@ L3 may remove only:
 
 Short repeated natural-language messages are retained. L3 never performs semantic paraphrasing.
 
-## Event extraction
-
-After L0-L2 validates, a candidate Block is extracted independently; a later Block is not required. The extractor receives:
+## Event extraction
+
+After L0-L2 validates, a candidate Block is extracted independently; a later Block is not required. The extractor receives:
 
 - target block `N`, including its L5 source and legal evidence IDs;
 - previous block `N-1` L2 keypoints for context, if it exists;
-- the nearest available later ready Block's L2 keypoints for context, if one exists;
+- the nearest available later ready Block's L2 keypoints for context, if one exists;
 - a compact timeline of existing event IDs, titles, and temporal fields.
 
 The target is the only legal source of new facts and quotations. Neighbor blocks are context-only and must not contribute events or source references. Source message IDs are checked against the target block. The reference implementation falls back to all target messages when an extractor returns no valid source ID; stricter adapters may reject the card instead.
@@ -144,12 +144,12 @@ Applications that manage their own model loop may use `claimNextElementProjectio
 
 ## Hybrid retrieval
 
-Event and fact-level element search use two inspectable ranking sources:
-
-1. BM25 over field-weighted lexical tokens, including overlapping Han bigrams;
-2. structured rankings from fields such as participant, event type, time range, element name, and element type.
-
-Reciprocal-rank fusion combines the available rankings. A non-empty query with no lexical or structured match returns an empty result rather than all candidates. Element search returns the matched fact plus its element ID, validity interval, and event provenance; callers expand the full element card only when needed. The reference path does not use embeddings or vector similarity.
+Event and fact-level element search use two inspectable ranking sources:
+
+1. BM25 over field-weighted lexical tokens, including overlapping Han bigrams;
+2. structured rankings from fields such as participant, event type, time range, element name, and element type.
+
+Reciprocal-rank fusion combines the available rankings. A non-empty query with no lexical or structured match returns an empty result rather than all candidates. Element search returns the matched fact plus its element ID, validity interval, and event provenance; callers expand the full element card only when needed. The reference path does not use embeddings or vector similarity.
 
 Integration tool responses intentionally expose compact search cards. They retain stable IDs, summaries,
 timestamps, and evidence references while leaving narrative/quotes/source-message lists and full graph
@@ -220,19 +220,19 @@ If the retrieval budget ends without sufficient evidence, the caller should pass
 
 Every namespace has a monotonically increasing revision. A write supplies the revision it loaded; SQLite commits the new revision and all related rows in one immediate transaction. A stale process receives `StorageConflictError` rather than overwriting newer state.
 
-External model calls are never made inside a database transaction:
-
-1. a completed raw turn is committed immediately;
-2. every complete Block is sealed atomically with real L3-L5 before any model call;
-3. summarization first claims a persisted job, runs outside the transaction, and commits validated L0-L2 or a failed job with bounded retry metadata;
-4. extraction first commits a running job, calls the extractor, then atomically commits either the event cards, a valid empty result, or a failed job state;
-5. element projection follows the same claim/call/complete boundary after its source events are durable;
-6. failed model jobs retry at most three total attempts with exponential backoff; completed empty extraction is terminal and is not retried.
+External model calls are never made inside a database transaction:
+
+1. a completed raw turn is committed immediately;
+2. every complete Block is sealed atomically with real L3-L5 before any model call;
+3. summarization first claims a persisted job, runs outside the transaction, and commits validated L0-L2 or a failed job with bounded retry metadata;
+4. extraction first commits a running job, calls the extractor, then atomically commits either the event cards, a valid empty result, or a failed job state;
+5. element projection follows the same claim/call/complete boundary after its source events are durable;
+6. failed model jobs retry at most three total attempts with exponential backoff; completed empty extraction is terminal and is not retried.
 
 The adapter preserves these invariants:
 
-- blocks and L5 messages are append-only, including when every derived task fails;
-- model-pending Blocks are excluded from decay and native-history replacement;
+- blocks and L5 messages are append-only, including when every derived task fails;
+- model-pending Blocks are excluded from decay and native-history replacement;
 - card provenance references an existing source block and message set;
 - search hits do not increment adoption state;
 - supersession retains the old event;
@@ -241,4 +241,4 @@ The adapter preserves these invariants:
 - forget is reversible unless an application explicitly implements irreversible deletion;
 - usage receipts are idempotent for one answer turn through a unique `receiptId`.
 
-SQLite schema v10 includes durable external-memory import jobs and per-candidate progress, in addition to the normalized Block processing state, summary/extraction retry jobs, graph, element, provenance, receipt, decay-anchor, and lift-source data introduced earlier. Opening a schema-v1 through v9 database migrates it in one transaction and preserves existing namespaces, Blocks, Events, jobs, and receipts. Existing pre-v9 Blocks are treated as ready because their persisted L0-L5 layers were already accepted by the older engine. Schema-v5 turn anchors are converted to per-thread Block positions; schema-v6 lift timestamps retain an unknown legacy source. Pre-v5 Blocks retain no inferred thread ownership, so they remain archival provenance without being attached to a new session. SQLite uses WAL, foreign keys, and per-namespace optimistic concurrency. It does not provide encryption at rest. Search still uses the reference in-memory ranking after hydration, so enabling persistence does not silently change retrieval semantics. Database-native lexical/vector indexes and a Postgres implementation remain separate future work.
+SQLite schema v10 includes durable external-memory import jobs and per-candidate progress, in addition to the normalized Block processing state, summary/extraction retry jobs, graph, element, provenance, receipt, decay-anchor, and lift-source data introduced earlier. Opening a schema-v1 through v9 database migrates it in one transaction and preserves existing namespaces, Blocks, Events, jobs, and receipts. Existing pre-v9 Blocks are treated as ready because their persisted L0-L5 layers were already accepted by the older engine. Schema-v5 turn anchors are converted to per-thread Block positions; schema-v6 lift timestamps retain an unknown legacy source. Pre-v5 Blocks retain no inferred thread ownership, so they remain archival provenance without being attached to a new session. SQLite uses WAL, foreign keys, and per-namespace optimistic concurrency. It does not provide encryption at rest. Search still uses the reference in-memory ranking after hydration, so enabling persistence does not silently change retrieval semantics. Database-native lexical/vector indexes and a Postgres implementation remain separate future work.

package/docs/DSH.md

@@ -147,6 +147,7 @@ config:
   blockDecayLambda: 0.3
   ingestSubagents: false
   maxOutputTokens: 10000
+  structuredTaskTimeoutMs: 120000
   structuredReasoningEffort: auto # auto | force-off
   # Optional: use a dedicated model for memory processing.
   # provider: deepseek
@@ -171,7 +172,9 @@ For diagnostics, the five most recent successful memory-model responses are reta
 
 ## Compatibility and permissions
 
-Release gates exercise DSH `0.1.2-rc.1` on Node `24`, plus the core package on Node `22.19` and `24`. The published peer range accepts compatible DSH releases from `0.1.2-rc.1` up to, but not including, `0.2.0`.
+Release gates exercise the complete DSH `0.1.2-rc.1` family and `@deepseek-ai/dsh@0.1.5-rc.1` on Node `24`, on both Linux and Windows. The latter's real dependency tree resolves its internal DSH packages to `0.1.5-rc.2`; that is intentional. The plugin declares these DSH packages as optional, exact-version peers so the host supplies one coherent runtime instead of npm installing a second copy. Other `0.1.x` versions are not implicitly supported.
+
+DSH core packages are host-provided optional peers. After upgrading a profile that once installed those peers locally, run `dsh plugin --profile <name> exec stratagate-dsh-repair` before starting it. The command moves only the known DSH runtime packages into `.stratagate-runtime-backups` inside that profile and writes a recovery receipt; it does not delete them or touch session data. At startup, a bootstrap resolver also forces StrataGate's own imports through the installation-owned module fallback, then verifies the resolved DSH core family and stops with an actionable error for an unknown host family. On DSH `0.1.5`, v0 sessions containing the retired `stratagate/memory-citations` event are copied to a validated v1 generation before the host migrates them to v3. The original v0 log is never modified; a `stratagate-legacy-citations-v1.json` receipt records source/target hashes and recovery instructions.
 
 The package declares local filesystem read/write and Harness tool registration. It does not request direct network, subprocess, shell, Python, or credential access. Model calls still flow through DSH's existing LLM service.
 

package/docs/DSH.zh-CN.md

@@ -144,6 +144,7 @@ config:
   blockDecayLambda: 0.3
   ingestSubagents: false
   maxOutputTokens: 10000
+  structuredTaskTimeoutMs: 120000
   structuredReasoningEffort: auto # auto | force-off
   # 可选：为记忆处理指定专用模型。
   # provider: deepseek
@@ -168,7 +169,9 @@ config:
 
 ## 兼容性与权限
 
-发布门禁会在 Node `24` 上测试 DSH `0.1.2-rc.1`，并在 Node `22.19` 和 `24` 上测试核心包。发布包声明的 peer 版本范围接受从 `0.1.2-rc.1` 开始、低于 `0.2.0` 的兼容 DSH 版本。
+发布门禁会在 Node `24`、Linux 和 Windows 上测试完整的 DSH `0.1.2-rc.1` 依赖族，以及 `@deepseek-ai/dsh@0.1.5-rc.1`。后者的真实依赖树会把内部 DSH 包解析为 `0.1.5-rc.2`，这是预期行为。插件将这些 DSH 包声明为可选且精确版本的 peer，由宿主提供一套一致的运行时，避免 npm 在插件目录再安装第二套核心包；不会笼统承诺其他 `0.1.x` 版本。
+
+DSH 核心包现在都是由宿主提供的可选 peer。若某个 profile 曾在本地安装这些 peer，升级后、启动前运行 `dsh plugin --profile <名称> exec stratagate-dsh-repair`。该命令只会把已知 DSH 运行时包移动到 profile 内的 `.stratagate-runtime-backups` 并写入恢复收据，不会删除包或触碰会话数据。启动时 bootstrap 还会把 StrataGate 自身的 DSH 导入定向到宿主维护的共享模块回退目录，再检查实际解析出的 DSH 核心族；未知宿主会立即给出明确错误并停止，而不是让正文区域空白。对于 DSH `0.1.5`，含已废弃 `stratagate/memory-citations` 事件的 v0 会话会先复制成经过校验的 v1 代际，再交给宿主迁移到 v3；原始 v0 日志不会被修改，并写入 `stratagate-legacy-citations-v1.json` 记录源/目标哈希和恢复说明。
 
 该包申请本地文件系统读写权限和 Harness 工具注册权限，不申请直接网络访问、子进程、Shell、Python 或凭证访问权限。模型调用仍通过 DSH 现有的 LLM 服务进行。
 

package/docs/EXTERNAL_MEMORY_IMPORT.zh-CN.md

@@ -1,54 +1,54 @@
-# 外部 AI 记忆导入
-
-StrataGate 提供 `importExternalMemory()` 编排外部记忆迁移：
-
-```text
-外部 AI JSON
-    ↓ extractor（候选 Event）
-每个候选 Event → searchEvents()（确定性 BM25，Top-K）
-    ↓ decider（ADD / MERGE / SUPERSEDE / CONFLICT / IGNORE）
-写入新的规范 Event，保留来源和 supersedes/conflicts 关系
-    ↓
-只为新 Event 创建元素/知识图谱投影任务
-```
-
-## 最小接入
-
-```ts
-import {
-  EXTERNAL_MEMORY_EXPORT_PROMPT_ZH_CN,
-  StrataGate,
-  externalMemoryJsonExtractor,
-} from '@diqier/stratagate';
-
-// 把 EXTERNAL_MEMORY_EXPORT_PROMPT_ZH_CN 交给外部 AI，并把它返回的 JSON 放入 text。
-const result = await memory.importExternalMemory({
-  text,
-  extractor: externalMemoryJsonExtractor,
-  topK: 5,
-  decider: async ({ candidate, matches }) => {
-    // 这里通常调用你的 LLM；它只能从 matches 中选择 existingEventIds。
-    // 返回的 MERGE/SUPERSEDE 会创建新 Event，不会覆盖旧 Event。
-    return {
-      action: matches.length === 0 ? 'ADD' : 'MERGE',
-      existingEventIds: matches.slice(0, 1).map(({ event }) => event.id),
-      mergedCandidate: candidate,
-    };
-  },
-});
-```
-
-`decider` 的 `matches` 已经被限制为 `topK` 条；即使模型返回其它事件 ID，库也会丢弃这些越界引用。`IGNORE` 只留下审计记录，不会写入 Event。`CONFLICT` 会在新旧事件两侧建立对称的 `conflictsWithEventIds`。
-
-## 给外部 AI 的提示词
-
-直接使用导出的 `EXTERNAL_MEMORY_EXPORT_PROMPT_ZH_CN`。它要求外部 AI 只输出 `stratagate.external-memory.v2` JSON，并区分 `memoryKind`（instruction/preference/fact/event）与 `category`，同时特别约束时间：
-
-- `mentionedAt`（被提及时间）与 `happenedStart/happenedEnd`（实际发生/计划时间）分开；
-- 没有明确时间或可靠参照时，不填写日期，不把当前时间、导出时间或聊天顺序当作事件时间；
-- 保留 `originalText`，用 `precision` 和 `basis` 标记粒度与依据；
-- “上周”等相对时间只有在能依据已知消息时间唯一换算时才转换，否则保持 `unknown`。
-
-如果外部 AI 仍然返回 Markdown 代码块，`parseExternalMemoryExport()` 会自动去除围栏；其它非 JSON 文本会被拒绝，避免把模型解释误写进记忆。
-
-用于第二阶段裁决的系统提示词可使用 `EXTERNAL_MEMORY_DECIDER_PROMPT_ZH_CN`。它明确规定了五种写入动作的边界，并要求模型只能引用本次 Top-K 结果中的事件 ID。
+# 外部 AI 记忆导入
+
+StrataGate 提供 `importExternalMemory()` 编排外部记忆迁移：
+
+```text
+外部 AI JSON
+    ↓ extractor（候选 Event）
+每个候选 Event → searchEvents()（确定性 BM25，Top-K）
+    ↓ decider（ADD / MERGE / SUPERSEDE / CONFLICT / IGNORE）
+写入新的规范 Event，保留来源和 supersedes/conflicts 关系
+    ↓
+只为新 Event 创建元素/知识图谱投影任务
+```
+
+## 最小接入
+
+```ts
+import {
+  EXTERNAL_MEMORY_EXPORT_PROMPT_ZH_CN,
+  StrataGate,
+  externalMemoryJsonExtractor,
+} from '@diqier/stratagate';
+
+// 把 EXTERNAL_MEMORY_EXPORT_PROMPT_ZH_CN 交给外部 AI，并把它返回的 JSON 放入 text。
+const result = await memory.importExternalMemory({
+  text,
+  extractor: externalMemoryJsonExtractor,
+  topK: 5,
+  decider: async ({ candidate, matches }) => {
+    // 这里通常调用你的 LLM；它只能从 matches 中选择 existingEventIds。
+    // 返回的 MERGE/SUPERSEDE 会创建新 Event，不会覆盖旧 Event。
+    return {
+      action: matches.length === 0 ? 'ADD' : 'MERGE',
+      existingEventIds: matches.slice(0, 1).map(({ event }) => event.id),
+      mergedCandidate: candidate,
+    };
+  },
+});
+```
+
+`decider` 的 `matches` 已经被限制为 `topK` 条；即使模型返回其它事件 ID，库也会丢弃这些越界引用。`IGNORE` 只留下审计记录，不会写入 Event。`CONFLICT` 会在新旧事件两侧建立对称的 `conflictsWithEventIds`。
+
+## 给外部 AI 的提示词
+
+直接使用导出的 `EXTERNAL_MEMORY_EXPORT_PROMPT_ZH_CN`。它要求外部 AI 只输出 `stratagate.external-memory.v2` JSON，并区分 `memoryKind`（instruction/preference/fact/event）与 `category`，同时特别约束时间：
+
+- `mentionedAt`（被提及时间）与 `happenedStart/happenedEnd`（实际发生/计划时间）分开；
+- 没有明确时间或可靠参照时，不填写日期，不把当前时间、导出时间或聊天顺序当作事件时间；
+- 保留 `originalText`，用 `precision` 和 `basis` 标记粒度与依据；
+- “上周”等相对时间只有在能依据已知消息时间唯一换算时才转换，否则保持 `unknown`。
+
+如果外部 AI 仍然返回 Markdown 代码块，`parseExternalMemoryExport()` 会自动去除围栏；其它非 JSON 文本会被拒绝，避免把模型解释误写进记忆。
+
+用于第二阶段裁决的系统提示词可使用 `EXTERNAL_MEMORY_DECIDER_PROMPT_ZH_CN`。它明确规定了五种写入动作的边界，并要求模型只能引用本次 Top-K 结果中的事件 ID。

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "stratagate-dsh",
-  "version": "0.2.61",
+  "version": "0.2.63",
   "description": "Recent conversations stay vivid. Older ones fade into summaries, not oblivion. StrataGate gives DeepSeek Harness six-layer, time-decaying memory, while lasting events and relationships settle into a knowledge graph. Bring your memories from other AIs with you—no need to start over.",
   "type": "module",
   "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "stratagate-dsh-repair": "./dist/repair-profile.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -55,7 +58,7 @@
     "test:dsh": "vitest run --config vitest.config.ts",
     "test:core": "npm run test --workspace @diqier/stratagate",
     "test:workbuddy": "npm run test --workspace stratagate-workbuddy",
-    "verify:dsh": "npm run build:dsh && node scripts/verify-package.mjs",
+    "verify:dsh": "npm run build:dsh && node scripts/verify-package.mjs && npm pack --ignore-scripts --pack-destination . && node scripts/verify-dsh-install.mjs stratagate-dsh-0.2.63.tgz",
     "verify:workbuddy": "npm run verify:package --workspace stratagate-workbuddy",
     "test:watch": "vitest --config vitest.config.ts",
     "prepare": "npm run build:dsh"
@@ -111,7 +114,8 @@
     },
     "compatibility": {
       "dshVersions": [
-        "0.1.2-rc.1"
+        "0.1.2-rc.1",
+        "0.1.5-rc.1"
       ]
     },
     "permissions": [
@@ -144,26 +148,71 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent-default-model": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-llm": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-session": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-settings": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-system-prompt": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1 <0.2.0",
-    "@deepseek-ai/schemastery": "^3.18.1"
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-format": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-format-catalog": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-format-v0-to-v1": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-default-model": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-conversation": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session-format": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session-format-catalog": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session-format-v0-to-v1": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-system-prompt": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "@deepseek-ai/schemastery": {
+      "optional": true
+    }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-format": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-format-catalog": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-format-v0-to-v1": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
     "@types/node": "^22.0.0",
     "cytoscape": "^3.34.1",
     "cytoscape-fcose": "^2.2.0",
@@ -172,10 +221,10 @@
     "typescript": "^5.7.0",
     "vitest": "^3.0.0"
   },
-  "dependencies": {
-    "ngraph.graph": "^20.1.2",
-    "ngraph.leiden": "^0.3.0"
-  },
+  "dependencies": {
+    "ngraph.graph": "^20.1.2",
+    "ngraph.leiden": "^0.3.0"
+  },
   "directories": {
     "doc": "docs",
     "test": "tests"

package/screenshots.json

@@ -1,4 +1,4 @@
-[
-  "docs/assets/stratagate-knowledge-graph.png",
-  "docs/assets/stratagate-short-term-memory.png"
-]
+[
+  "docs/assets/stratagate-knowledge-graph.png",
+  "docs/assets/stratagate-short-term-memory.png"
+]