diff --git a/README.md b/README.md index 49a260ce..5da4b5f9 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@

English · 简体中文

- release v0.2.8 + release v0.2.9 three memory tiers nine providers Node.js 20 or newer @@ -22,7 +22,7 @@

Explore the capability map · Start in five minutes · - Read the v0.2.8 notes · + Read the v0.2.9 notes · Watch the widescreen demo

@@ -190,7 +190,7 @@ See [Operations, security, and troubleshooting](./docs/en/operations.md) for bac | Configure scope, routing, and model selection | [Configuration](./docs/en/configuration.md) | | Back up, update, or troubleshoot | [Operations](./docs/en/operations.md) | | Integrate tools, commands, or RPC | [Interface reference](./docs/en/interfaces.md) | -| Review the release | [v0.2.8 release notes](./docs/en/releases/v0.2.8.md) | +| Review the release | [v0.2.9 release notes](./docs/en/releases/v0.2.9.md) | See the [documentation hub](./docs/en/README.md) for the full map. diff --git a/README.zh-CN.md b/README.zh-CN.md index 0a40efd9..ecc34550 100644 --- a/README.zh-CN.md +++ b/README.zh-CN.md @@ -3,7 +3,7 @@

English · 简体中文

- 发布版本 v0.2.8 + 发布版本 v0.2.9 三层记忆 九种 Provider Node.js 20 或更新版本 @@ -22,7 +22,7 @@

先看能力地图 · 5 分钟开始 · - v0.2.8 升级说明 · + v0.2.9 升级说明 · 观看宽屏实机演示

@@ -190,7 +190,7 @@ dsh plugin --profile headless add "link:/absolute/path/to/dsh-mnemon" | 配置范围、路由与模型 | [配置参考](./docs/zh-CN/configuration.md) | | 备份、更新或排障 | [运维指南](./docs/zh-CN/operations.md) | | 接入工具、命令或 RPC | [接口参考](./docs/zh-CN/interfaces.md) | -| 查看本次升级 | [v0.2.8 发布说明](./docs/zh-CN/releases/v0.2.8.md) | +| 查看本次升级 | [v0.2.9 发布说明](./docs/zh-CN/releases/v0.2.9.md) | 完整目录见[文档中心](./docs/zh-CN/README.md)。 diff --git a/docs/en/releases/v0.2.9.md b/docs/en/releases/v0.2.9.md new file mode 100644 index 00000000..395ca54d --- /dev/null +++ b/docs/en/releases/v0.2.9.md @@ -0,0 +1,29 @@ +# v0.2.9: Literal Runtime Memory + +[简体中文](../../zh-CN/releases/v0.2.9.md) | **English** | [Capability map](../capabilities.md) + +v0.2.9 makes Runtime Memory safe for arbitrary literal `{{...}}` text and closes the remaining interpolation failure reported in issue #37. + +## Fixed + +- Every `{{` opener in `USER.md` and `MEMORY.md` is now routed through a dedicated non-recursive prompt variable. Empty, non-ASCII, whitespace-containing, legal, unknown, adjacent, nested, and incomplete groups all reach the model unchanged. +- Runtime Memory no longer expands otherwise valid host variables such as `{{model}}`; memory is quoted data rather than a prompt-template extension point. +- The strict host interpolator remains active for Mnemon's static system sections and unrelated plugins, so malformed real prompt references still fail visibly. + +## Hardened delegated runs + +- Dynamic Runtime Memory snapshots, recalled evidence, managed-document content, and Provider selection data now travel in the delegated run request instead of a child Agent's system persona. +- Child personas contain only static responsibilities, tool boundaries, and completion rules. User-controlled text can no longer become a system-prompt interpolation site in archive, compaction, answer, or placement workflows. + +## Compatibility + +- Storage files, schemas, tools, RPC contracts, and configuration are unchanged; no data migration is required. +- Existing literal braces are preserved exactly. Updating dsh-mnemon and restarting the affected DSH profile is sufficient. + +## Verification + +- Regression coverage exercises empty, multilingual, whitespace, legal and unknown variable names, adjacent and nested groups, the escape-variable name itself, and incomplete groups. +- The complete suite passes with 343 tests; one Windows-only smoke test is skipped only on non-Windows local runs. +- Deterministic builds, Headless activation, package validation, and CI on Ubuntu and Windows pass. + +See the [v0.2.8 release notes](./v0.2.8.md) for the previous patch release. diff --git a/docs/zh-CN/releases/v0.2.9.md b/docs/zh-CN/releases/v0.2.9.md new file mode 100644 index 00000000..5388f520 --- /dev/null +++ b/docs/zh-CN/releases/v0.2.9.md @@ -0,0 +1,29 @@ +# v0.2.9：运行时记忆字面量安全 + +**简体中文** | [English](../../en/releases/v0.2.9.md) | [能力地图](../capabilities.md) + +v0.2.9 让运行时记忆可以安全承载任意字面 `{{...}}` 文本，并完整关闭 issue #37 报告的残余插值崩溃路径。 + +## 修复 + +- `USER.md` 和 `MEMORY.md` 中的每个 `{{` 起始定界符现在都会通过专用、非递归的 prompt 变量传递。空组、非 ASCII、含空格、合法变量名、未知变量名、相邻、嵌套和未闭合组都会原样到达模型。 +- 运行时记忆不再展开 `{{model}}` 等原本合法的宿主变量；记忆是被引用的数据，不是扩展 prompt 模板的入口。 +- Mnemon 静态 system section 与其他插件仍使用宿主的严格插值器，真实 prompt 引用的格式错误仍会明确失败。 + +## 委派运行加固 + +- 动态运行时记忆快照、召回证据、托管档案内容和 Provider 选择数据现在通过委派运行请求传递，不再拼入子 Agent 的 system persona。 +- 子 Agent persona 只保留静态职责、工具边界与完成协议。用户可控文本无法再在归档、压缩、证据回答或 Provider 选择流程中成为 system-prompt 插值点。 + +## 兼容性 + +- 存储文件、schema、工具、RPC 契约和配置均未改变，无需迁移数据。 +- 已有字面花括号会被逐字保留；更新 dsh-mnemon 并重启受影响的 DSH profile 即可。 + +## 验证 + +- 回归覆盖空组、多语言、空格、合法与未知变量名、相邻与嵌套组、转义变量名自身以及未闭合组。 +- 完整测试套件 343 项通过；Windows 专用 smoke test 只会在非 Windows 本地环境跳过。 +- 确定性构建、Headless 激活、发布包校验以及 Ubuntu、Windows CI 均通过。 + +上一个补丁版本见 [v0.2.8 发布说明](./v0.2.8.md)。 diff --git a/package.json b/package.json index caa9460e..80f57688 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "dsh-mnemon", - "version": "0.2.8", + "version": "0.2.9", "description": "Three-tier memory control plane for DeepSeek Harness: persistent runtime context, searchable project documents, pluggable long-term memory, smart routing, supervised agent workflows, WebUI, and headless tools.", "keywords": [ "deepseek-harness",