chore: prepare v0.2.9 release

README.md

@@ -3,7 +3,7 @@
 <p align="center"><strong>English</strong> · <a href="./README.zh-CN.md">简体中文</a></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.8-5b5bd6" alt="release v0.2.8">
+  <img src="https://img.shields.io/badge/release-v0.2.9-5b5bd6" alt="release v0.2.9">
   <img src="https://img.shields.io/badge/memory-3%20tiers-087c5b" alt="three memory tiers">
   <img src="https://img.shields.io/badge/providers-9-c66a09" alt="nine providers">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 or newer">
@@ -22,7 +22,7 @@
 <p align="center">
   <a href="./docs/en/capabilities.md"><strong>Explore the capability map</strong></a> ·
   <a href="./docs/en/getting-started.md">Start in five minutes</a> ·
-  <a href="./docs/en/releases/v0.2.8.md">Read the v0.2.8 notes</a> ·
+  <a href="./docs/en/releases/v0.2.9.md">Read the v0.2.9 notes</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">Watch the widescreen demo</a>
 </p>
 
@@ -190,7 +190,7 @@ See [Operations, security, and troubleshooting](./docs/en/operations.md) for bac
 | Configure scope, routing, and model selection | [Configuration](./docs/en/configuration.md) |
 | Back up, update, or troubleshoot | [Operations](./docs/en/operations.md) |
 | Integrate tools, commands, or RPC | [Interface reference](./docs/en/interfaces.md) |
-| Review the release | [v0.2.8 release notes](./docs/en/releases/v0.2.8.md) |
+| Review the release | [v0.2.9 release notes](./docs/en/releases/v0.2.9.md) |
 
 See the [documentation hub](./docs/en/README.md) for the full map.
 

README.zh-CN.md

@@ -3,7 +3,7 @@
 <p align="center"><a href="./README.md">English</a> · <strong>简体中文</strong></p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/release-v0.2.8-5b5bd6" alt="发布版本 v0.2.8">
+  <img src="https://img.shields.io/badge/release-v0.2.9-5b5bd6" alt="发布版本 v0.2.9">
   <img src="https://img.shields.io/badge/%E8%AE%B0%E5%BF%86-3%20%E5%B1%82-087c5b" alt="三层记忆">
   <img src="https://img.shields.io/badge/Provider-9-c66a09" alt="九种 Provider">
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A520-43853d" alt="Node.js 20 或更新版本">
@@ -22,7 +22,7 @@
 <p align="center">
   <a href="./docs/zh-CN/capabilities.md"><strong>先看能力地图</strong></a> ·
   <a href="./docs/zh-CN/getting-started.md">5 分钟开始</a> ·
-  <a href="./docs/zh-CN/releases/v0.2.8.md">v0.2.8 升级说明</a> ·
+  <a href="./docs/zh-CN/releases/v0.2.9.md">v0.2.9 升级说明</a> ·
   <a href="https://github.com/omdsh-dev/dsh-mnemon/blob/e6ca446e45bdd17991f3c7c98560456de465282b/docs/assets/media/dsh-mnemon-memory-system-demo.mp4">观看宽屏实机演示</a>
 </p>
 
@@ -190,7 +190,7 @@ dsh plugin --profile headless add "link:/absolute/path/to/dsh-mnemon"
 | 配置范围、路由与模型 | [配置参考](./docs/zh-CN/configuration.md) |
 | 备份、更新或排障 | [运维指南](./docs/zh-CN/operations.md) |
 | 接入工具、命令或 RPC | [接口参考](./docs/zh-CN/interfaces.md) |
-| 查看本次升级 | [v0.2.8 发布说明](./docs/zh-CN/releases/v0.2.8.md) |
+| 查看本次升级 | [v0.2.9 发布说明](./docs/zh-CN/releases/v0.2.9.md) |
 
 完整目录见[文档中心](./docs/zh-CN/README.md)。
 

docs/en/releases/v0.2.9.md

@@ -0,0 +1,29 @@
+# v0.2.9: Literal Runtime Memory
+
+[简体中文](../../zh-CN/releases/v0.2.9.md) | **English** | [Capability map](../capabilities.md)
+
+v0.2.9 makes Runtime Memory safe for arbitrary literal `{{...}}` text and closes the remaining interpolation failure reported in issue #37.
+
+## Fixed
+
+- Every `{{` opener in `USER.md` and `MEMORY.md` is now routed through a dedicated non-recursive prompt variable. Empty, non-ASCII, whitespace-containing, legal, unknown, adjacent, nested, and incomplete groups all reach the model unchanged.
+- Runtime Memory no longer expands otherwise valid host variables such as `{{model}}`; memory is quoted data rather than a prompt-template extension point.
+- The strict host interpolator remains active for Mnemon's static system sections and unrelated plugins, so malformed real prompt references still fail visibly.
+
+## Hardened delegated runs
+
+- Dynamic Runtime Memory snapshots, recalled evidence, managed-document content, and Provider selection data now travel in the delegated run request instead of a child Agent's system persona.
+- Child personas contain only static responsibilities, tool boundaries, and completion rules. User-controlled text can no longer become a system-prompt interpolation site in archive, compaction, answer, or placement workflows.
+
+## Compatibility
+
+- Storage files, schemas, tools, RPC contracts, and configuration are unchanged; no data migration is required.
+- Existing literal braces are preserved exactly. Updating dsh-mnemon and restarting the affected DSH profile is sufficient.
+
+## Verification
+
+- Regression coverage exercises empty, multilingual, whitespace, legal and unknown variable names, adjacent and nested groups, the escape-variable name itself, and incomplete groups.
+- The complete suite passes with 343 tests; one Windows-only smoke test is skipped only on non-Windows local runs.
+- Deterministic builds, Headless activation, package validation, and CI on Ubuntu and Windows pass.
+
+See the [v0.2.8 release notes](./v0.2.8.md) for the previous patch release.

docs/zh-CN/releases/v0.2.9.md

@@ -0,0 +1,29 @@
+# v0.2.9：运行时记忆字面量安全
+
+**简体中文** | [English](../../en/releases/v0.2.9.md) | [能力地图](../capabilities.md)
+
+v0.2.9 让运行时记忆可以安全承载任意字面 `{{...}}` 文本，并完整关闭 issue #37 报告的残余插值崩溃路径。
+
+## 修复
+
+- `USER.md` 和 `MEMORY.md` 中的每个 `{{` 起始定界符现在都会通过专用、非递归的 prompt 变量传递。空组、非 ASCII、含空格、合法变量名、未知变量名、相邻、嵌套和未闭合组都会原样到达模型。
+- 运行时记忆不再展开 `{{model}}` 等原本合法的宿主变量；记忆是被引用的数据，不是扩展 prompt 模板的入口。
+- Mnemon 静态 system section 与其他插件仍使用宿主的严格插值器，真实 prompt 引用的格式错误仍会明确失败。
+
+## 委派运行加固
+
+- 动态运行时记忆快照、召回证据、托管档案内容和 Provider 选择数据现在通过委派运行请求传递，不再拼入子 Agent 的 system persona。
+- 子 Agent persona 只保留静态职责、工具边界与完成协议。用户可控文本无法再在归档、压缩、证据回答或 Provider 选择流程中成为 system-prompt 插值点。
+
+## 兼容性
+
+- 存储文件、schema、工具、RPC 契约和配置均未改变，无需迁移数据。
+- 已有字面花括号会被逐字保留；更新 dsh-mnemon 并重启受影响的 DSH profile 即可。
+
+## 验证
+
+- 回归覆盖空组、多语言、空格、合法与未知变量名、相邻与嵌套组、转义变量名自身以及未闭合组。
+- 完整测试套件 343 项通过；Windows 专用 smoke test 只会在非 Windows 本地环境跳过。
+- 确定性构建、Headless 激活、发布包校验以及 Ubuntu、Windows CI 均通过。
+
+上一个补丁版本见 [v0.2.8 发布说明](./v0.2.8.md)。

package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mnemon",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "description": "Three-tier memory control plane for DeepSeek Harness: persistent runtime context, searchable project documents, pluggable long-term memory, smart routing, supervised agent workflows, WebUI, and headless tools.",
   "keywords": [
     "deepseek-harness",