chore(release): prepare v0.5.8

[Grivn]

提交 PR 前请阅读贡献指南、Contributing Guide与开发和验证指南 / Development and Verification Guide。
Before opening a PR, read the Contributing Guide, 贡献指南, and the Development and Verification Guide / 开发和验证指南.
PR 标题和提交信息必须使用 Conventional Commits（type(scope): subject），且不得包含 emoji。 / PR titles and commits must use Conventional Commits (type(scope): subject) and must not contain emoji.
本仓库接受 Bug 修复、兼容性适配、现有能力增强、性能或体验优化和维护类 PR。全新能力、Provider、持久化格式或安全边界变更必须先提 Issue 并获得维护者确认。 / This repository accepts bug fixes, compatibility work, improvements to existing capabilities, performance or UX optimization, and maintenance. New capabilities, Providers, persistence formats, or security-boundary changes require prior maintainer approval in an Issue.
外部贡献者的仅文档类 PR 不直接接受；请先提 Issue 讨论。维护者的发布说明与文档维护不受此限制。 / Documentation-only PRs from external contributors are not accepted directly; open an Issue first. Maintainer release notes and documentation maintenance are exempt.

摘要 / Summary

Prepare stable v0.5.8 from merged main: consume six patch changesets, advance only the Starter to 0.5.8, retain the sixteen plugin versions, and add bilingual release notes plus fresh WebUI/CLI verification.

准备 v0.5.8 正式发布，包含已合入的归档、路由、后台审查、结果工具和侧栏修复；本 PR 更新发布元数据、双语说明和版本化验收证据。

关联 Issue 或背景 / Related Issue or Context

Maintainer-requested v0.5.x publication after #241, #242, #243, #245, #246, #247 and #244. Latest main is ae710d3a552df76739b8ada36240e9176f2e4726; previous release v0.5.7 is 2fa306b916e0995eb739953318ec7a3d4b89709b. The underlying eight bug issues are already closed by their merged PRs.

涉及区域 / Affected Areas

• Host 激活、Headless 或 bundle / Host activation, Headless, or bundle
• 运行时记忆 / Runtime Memory
• 项目档案 / Project Documents
• 记忆空间或 Provider / Memory Spaces or Providers
• 子 Agent 或 Agent 工作流 / Subagent or Agent workflow
• Web UI 或对话交互 / Web UI or conversation interaction
• 设置、存储或安全 / Settings, storage, or security
• CLI、RPC、命令或工具 / CLI, RPC, commands, or tools
• 安装、更新或发布 / Installation, update, or release
• 测试、构建或文档 / Tests, build, or documentation
• 其他（请说明）/ Other (explain below)

PR 类型 / PR Type

• 面向用户的功能或行为变更 / User-facing feature or behavior change
• Bug 修复 / Bug fix
• 增强或优化 / Enhancement or optimization
• 兼容性适配 / Compatibility change
• 维护或重构 / Maintenance or refactor
• 测试或构建 / Tests or build

最新代码确认 / Latest Codebase Confirmation

• 我已基于最新 main 分支开发，或在提交前已 rebase 或合并最新 main。 / I developed from the latest main, or rebased or merged the latest main before submitting.

同步命令 / Sync command:

git fetch origin main --tags, then an isolated git worktree add -b codex/release-v0.5.8 <release-worktree> origin/main. Main was verified unchanged before submission.

AI 编码披露 / AI Coding Disclosure

• 完全 AI 编码：全部编程改动由 AI 产出，并由贡献者接受和审查。 / Fully AI-coded: AI produced all programming changes, which the contributor accepted and reviewed.
• 部分 AI 辅助：AI 帮助编写或修改了部分内容。 / Partially AI-assisted: AI helped write or modify part of the change.
• 未使用 AI 编码辅助。 / No AI coding assistance was used.

使用的 AI 模型 / AI model used:

GPT-6

使用的编码 Agent 工具 / Coding Agent tool used:

Codex desktop

仓库规范检查 / Repository Rules

• 未修改 DSH 官方源码，未让 tsconfig 指向 DSH 源码 checkout，仅使用正式的 @deepseek-ai/* NPM 契约。 / I did not modify DSH source or point tsconfig at a DSH source checkout, and used only published @deepseek-ai/* NPM contracts.
• Client 与 Host 边界仍以浏览器安全的 src/host/protocol.ts 为准，没有在两侧重复定义 wire DTO。 / The Client and Host boundary still uses browser-safe src/host/protocol.ts as the source for wire DTOs.
• 持久化格式、RPC 权限、路径或凭据处理的变更包含兼容或拒绝路径、安全分析和相应测试。 / Changes to persistence formats, RPC authority, paths, or credentials include compatibility or rejection paths, security analysis, and tests.
• 没有提交 token、密钥、私有记忆、未脱敏日志或生成的 lib/ 文件。 / I did not commit tokens, credentials, private memory, unredacted logs, or generated lib/ files.
• 用户可见文案和长期文档已同步维护中文与英文版本，命令、配置键和路径保持一致。 / User-facing copy and long-lived documentation are synchronized in Chinese and English, with matching commands, configuration keys, and paths.
• 会改变发布制品或其元数据的 PR 已添加 changeset；仅测试、CI 或站点文档变更可不添加。 / A PR that changes a published artifact or its metadata includes a changeset; test-only, CI-only, and site-documentation-only changes may omit one.
• 新增和修改的代码、注释、文档、提交信息不含 emoji。 / New and modified code, comments, documentation, and commits contain no emoji.

兼容性与数据安全 / Compatibility and Data Safety

This release PR consumes existing changesets and introduces no further application, storage-format, authority or credential changes. Only Starter 0.5.8 is selected for publication; all sixteen official plugin pins stay unchanged. The published DSH 0.1.5-rc.1 package cohort and existing peer ranges are retained.

Publication uses the frozen merged main SHA, the protected npm-release environment, immutable artifacts, complete Registry composition installation and a real v0.4.7 upgrade before GitHub Release creation. Existing issue evidence retains its tested revisions; no credentials, private memory or generated lib files are committed.

本地验证 / Local Validation

执行的命令 / Commands run:

pnpm install --frozen-lockfile
pnpm release:status
pnpm release:version
pnpm run verify
node scripts/verify-plugin-artifacts.mjs --skip-build
CHANGESET_BASE_REVISION=ae710d3a552df76739b8ada36240e9176f2e4726 pnpm release:intent
RELEASE_BASE_REVISION=2fa306b916e0995eb739953318ec7a3d4b89709b RELEASE_REVISION=099d39f8fabf8d118b87455b4399f80eb2f98f7b RELEASE_TAG=v0.5.8 RELEASE_PRERELEASE=false pnpm release:check
pnpm e2e:serve --strategy-extensions
pnpm run verify:docs
git diff --check

结果摘要 / Result summary:

All checks passed on Node 25.1.0 / pnpm 11.19.0. Complete suite: 1,301 passed (978 root + 323 plugin), seven opt-in checks skipped. Independent validation passed sixteen repositories and seventeen packed artifacts, external SDK/Client consumers and real packed Starter plus three Strategy enhancements. A separately enabled real Mnemon CLI 0.2.7 integration test passed create/write/recall/forget. Final docs: 1,271 local links and 54 anchors. Package: 47 files, 284,282 packed bytes, 1,278,996 unpacked bytes. Release selection contains exactly one artifact.

Real WebUI on application revision 099d39f8fabf8d118b87455b4399f80eb2f98f7b displayed 0.5.8 and healthy authenticated Status without a Session. Runtime insertion persisted after reload; a newly created and activated Native Memory Space reported real Mnemon CLI 0.2.7 connected. Both screenshots were visually reviewed. The disposable Profile, process and tab were removed. No external model API was called.

用户可见变更证据 / Local Feature Evidence

证据 / Evidence:

Release verification report · 中文验证报告

Runtime record after reload. These screenshots use versioned application revision 099d39f8fabf8d118b87455b4399f80eb2f98f7b; the following evidence commit changes only documentation.