chore(release): publish v0.5.10

[Grivn]

摘要 / Summary

Prepare v0.5.10 from the merged Runtime, OpenViking and automatic-review fixes in #256, #234 and #257. Consume their three changesets, synchronize the exact Starter composition and publish bilingual release notes with links to the recorded WebUI evidence.

The selected publications are dsh-mnemon@0.5.10, dsh-mnemon-provider-openviking@0.5.5, dsh-mnemon-source-memory-spaces@0.5.8 and dsh-mnemon-source-runtime@0.5.7. The remaining thirteen plugin versions are unchanged.

关联 Issue 或背景 / Related Issue or Context

Release preparation for #256, #234 and #257, which closed #217, #233, #100 and #255. N/A for a separate release issue: the maintainer explicitly requested merging these fixes and publishing the next v0.5.x patch.

涉及区域 / Affected Areas

• 安装、更新或发布 / Installation, update, or release
• 测试、构建或文档 / Tests, build, or documentation

PR 类型 / PR Type

• 维护或重构 / Maintenance or refactor

最新代码确认 / Latest Codebase Confirmation

• 我已基于最新 main 分支开发，或在提交前已 rebase 或合并最新 main。 / I developed from the latest main, or rebased or merged the latest main before submitting.

同步命令 / Sync command:

git fetch origin main
git merge --ff-only origin/main

Release base: e76c129e4a70a98319bccd451ae096492165a90f. Its tree exactly matches the previously verified three-PR integration. Development and release preparation use isolated worktrees.

AI 编码披露 / AI Coding Disclosure

• 完全 AI 编码：全部编程改动由 AI 产出，并由贡献者接受和审查。 / Fully AI-coded: AI produced all programming changes, which the contributor accepted and reviewed.
• 部分 AI 辅助：AI 帮助编写或修改了部分内容。 / Partially AI-assisted: AI helped write or modify part of the change.
• 未使用 AI 编码辅助。 / No AI coding assistance was used.

使用的 AI 模型 / AI model used:

GPT-6 (Codex).

使用的编码 Agent 工具 / Coding Agent tool used:

Codex desktop, local Git/pnpm tooling and GitHub CLI.

仓库规范检查 / Repository Rules

• 未修改 DSH 官方源码，未让 tsconfig 指向 DSH 源码 checkout，仅使用正式的 @deepseek-ai/* NPM 契约。 / I did not modify DSH source or point tsconfig at a DSH source checkout, and used only published @deepseek-ai/* NPM contracts.
• Client 与 Host 边界仍以浏览器安全的 src/host/protocol.ts 为准，没有在两侧重复定义 wire DTO。 / The Client and Host boundary still uses browser-safe src/host/protocol.ts as the source for wire DTOs.
• 持久化格式、RPC 权限、路径或凭据处理的变更包含兼容或拒绝路径、安全分析和相应测试。 / Changes to persistence formats, RPC authority, paths, or credentials include compatibility or rejection paths, security analysis, and tests.
• 没有提交 token、密钥、私有记忆、未脱敏日志或生成的 lib/ 文件。 / I did not commit tokens, credentials, private memory, unredacted logs, or generated lib/ files.
• 用户可见文案和长期文档已同步维护中文与英文版本，命令、配置键和路径保持一致。 / User-facing copy and long-lived documentation are synchronized in Chinese and English, with matching commands, configuration keys, and paths.
• 会改变发布制品或其元数据的 PR 已添加 changeset；仅测试、CI 或站点文档变更可不添加。 / A PR that changes a published artifact or its metadata includes a changeset; test-only, CI-only, and site-documentation-only changes may omit one.
• 新增和修改的代码、注释、文档、提交信息不含 emoji。 / New and modified code, comments, documentation, and commits contain no emoji.

This release PR consumes the three existing changesets with pnpm run release:version; release-intent validation verifies the resulting version coverage instead of adding another pending changeset.

兼容性与数据安全 / Compatibility and Data Safety

This PR updates release metadata and notes. It introduces no additional storage, RPC or credential behavior. Existing supported DSH peer ranges remain unchanged. OpenViking requires its validated content write/read contract. Automatic review pauses with the affected Agent Teams composition; upstream manual delegation remains outside this fix. Review attempt budgets reset on Agent unload or Host restart, and retained session history is preserved.

After this PR is merged, publication uses the exact main commit through the existing release workflow. It verifies frozen artifacts, publishes changed plugins before the Starter, reads back Registry integrity, installs the full composition and tests a real v0.4.7 upgrade before creating the GitHub Release.

本地验证 / Local Validation

执行的命令 / Commands run:

pnpm install --frozen-lockfile
pnpm run release:status
pnpm run release:version
pnpm run release:intent
RELEASE_BASE_REVISION=1363ebffaf19c9ab4badf0137f6fe87acacaf989 RELEASE_TAG=v0.5.10 RELEASE_PRERELEASE=false pnpm run release:check
MNEMON_NATIVE_TEST_CLI=/path/to/mnemon-0.2.8 pnpm run verify
MNEMON_PLUGIN_VERIFY_CONCURRENCY=4 pnpm run verify:plugins --skip-build

结果摘要 / Result summary:

All local checks pass on release commit cef8592314cd9b54bd14704aff06ad43fbd93511: installation, consumed changeset coverage, four-package release selection, full verification and independent artifacts. The versioned release passes 1,162 root tests with five opt-in skips, all ordinary plugin suites, actual Native CLI integration, 43 native capacity cases, deterministic builds, Headless activation/restart, public exports and package lint. Platform-specific and external-service opt-in checks retain their documented skips. Sixteen independent plugin repositories and seventeen artifacts pass, including public SDK-only composition, real DSH activation/upgrade and all three optional Strategy plugins together. The Starter contains 47 files and 1,335,739 unpacked bytes, below the unchanged 1,338,000-byte ceiling.

用户可见变更证据 / Local Feature Evidence

证据 / Evidence:

This PR contains release metadata and documentation only. The released behavior was exercised in the actual WebUI and retains before/after screenshots, synthetic-data notes and the exact tested revisions:

• Runtime exact match.
• OpenViking exact content and real backend.
• Automatic review and Agent Teams.

Model responses and embeddings use deterministic local fixtures; live-model judgment is not claimed. Original contributor commit bf83a4240f505e22713f20393d9b5cfa97fda05f is retained unchanged in main.