chore(release): prepare v0.4.7

[Grivn]

摘要 / Summary

Prepare dsh-mnemon@0.4.7 so the merged DSH 0.1.2-rc.1 compatibility work from #162 reaches npm users. This release-only PR bumps the package version, adds matching Chinese and English release notes, updates active installation and transport documentation for stable rc.1, and preserves alpha.5 source coverage plus the rc.2 rollback path; it adds no runtime source changes beyond the already merged compatibility work.

关联 Issue 或背景 / Related Issue or Context

Maintainer-requested v0.4.x patch release after merging #161 and #162. npm and GitHub currently remain on v0.4.6, while v0.4.7 is unoccupied. The release collects only the cloud WebUI documentation, DSH rc.1 compatibility implementation, tests/evidence, and release metadata already present on main; no unrelated v0.5 work is included.

涉及区域 / Affected Areas

• Host 激活、Headless 或 bundle / Host activation, Headless, or bundle
• 运行时记忆 / Runtime Memory
• 项目档案 / Project Documents
• 记忆体或 Provider / Memory Spaces or Providers
• 子 Agent 或 Agent 工作流 / Subagent or Agent workflow
• Web UI 或对话交互 / Web UI or conversation interaction
• 设置、存储或安全 / Settings, storage, or security
• CLI、RPC、命令或工具 / CLI, RPC, commands, or tools
• 安装、更新或发布 / Installation, update, or release
• 测试、构建或文档 / Tests, build, or documentation
• 其他（请说明）/ Other (explain below)

PR 类型 / PR Type

• 面向用户的功能或行为变更 / User-facing feature or behavior change
• Bug 修复 / Bug fix
• 增强或优化 / Enhancement or optimization
• 兼容性适配 / Compatibility change
• 维护或重构 / Maintenance or refactor
• 测试或构建 / Tests or build

最新代码确认 / Latest Codebase Confirmation

• 我已基于最新 main 分支开发，或在提交前已 rebase 或合并最新 main。 / I developed from the latest main, or rebased or merged the latest main before submitting.

同步命令 / Sync command:

git fetch origin
git worktree add -b codex/release-v0.4.7 <isolated-worktree> origin/main

Base: b650ff08433bb579b0ef54a75132630fb297be75 (merged #162). The original development workspace was not modified.

AI 编码披露 / AI Coding Disclosure

• 完全 AI 编码：全部编程改动由 AI 产出，并由贡献者接受和审查。 / Fully AI-coded: AI produced all programming changes, which the contributor accepted and reviewed.
• 部分 AI 辅助：AI 帮助编写或修改了部分内容。 / Partially AI-assisted: AI helped write or modify part of the change.
• 未使用 AI 编码辅助。 / No AI coding assistance was used.

使用的 AI 模型 / AI model used:

OpenAI GPT-5 (Codex).

使用的编码 Agent 工具 / Coding Agent tool used:

Codex desktop and independent Git worktrees. The merged #162 acceptance work also used the in-app Browser against isolated DSH 0.1.2-rc.1 and 0.1.1-rc.2 WebUI profiles.

仓库规范检查 / Repository Rules

• 未修改 DSH 官方源码，未让 tsconfig 指向 DSH 源码 checkout，仅使用正式的 @deepseek-ai/* NPM 契约。 / I did not modify DSH source or point tsconfig at a DSH source checkout, and used only published @deepseek-ai/* NPM contracts.
• Client 与 Host 边界仍以 src/shared/contracts.ts 为准，没有在两侧重复定义 wire DTO。 / The Client and Host boundary still uses src/shared/contracts.ts as the single source for wire DTOs.
• 持久化格式、RPC 权限、路径或凭据处理的变更包含兼容或拒绝路径、安全分析和相应测试。 / Changes to persistence formats, RPC authority, paths, or credentials include compatibility or rejection paths, security analysis, and tests.
• 没有提交 token、密钥、私有记忆、未脱敏日志或生成的 lib/ 文件。 / I did not commit tokens, credentials, private memory, unredacted logs, or generated lib/ files.
• 用户可见文案和长期文档已同步维护中文与英文版本，命令、配置键和路径保持一致。 / User-facing copy and long-lived documentation are synchronized in Chinese and English, with matching commands, configuration keys, and paths.
• 新增和修改的代码、注释、文档、提交信息不含 emoji。 / New and modified code, comments, documentation, and commits contain no emoji.

兼容性与数据安全 / Compatibility and Data Safety

This PR changes only release metadata and long-lived documentation. The merged implementation pins 22 direct DSH development packages to exact 0.1.2-rc.1 releases, imports Store-owned selector types from their public owner, and keeps a coherent lockfile plus exact pnpm release-age exclusions. DSH 0.1.2-alpha.5 remains covered from source; DSH 0.1.1-rc.2 remains a real backward-regression target. Stable rc.1 and alpha.5 authenticate all RPC/stream traffic with one authority-bound browser session and ignore Mnemon remoteAccess; the documented rc.2 rollback keeps its separate method-tier authority behavior. Memory data, storage paths, Pack formats, Provider credentials, runtime defaults, production dependencies, public exports, and projection state are unchanged. No migration or cache deletion is needed. All WebUI checks used isolated synthetic profiles and data roots.

本地验证 / Local Validation

执行的命令 / Commands run:

npx --yes --package=node@24.18.0 --package=pnpm@10.13.1 -- pnpm install --frozen-lockfile
npx --yes --package=node@24.18.0 --package=pnpm@10.13.1 -- pnpm run verify
npm pack --ignore-scripts --dry-run --json
git diff --check

The 17 modified Markdown files also passed a local relative-link existence audit. npm and GitHub release occupancy were checked immediately before opening this PR.

结果摘要 / Result summary:

• Node 24.18.0 / pnpm 10.13.1: complete verification passed with 654 tests and one existing Windows-only test skipped on macOS.
• All 110 deterministic build files, Headless activation with 36 total tools and five representative Mnemon tools, settings migration/restart, all ten Node-compatible entries, the 117-file package-content check, publint, and attw passed.
• The release-workflow-equivalent npm dry run identifies dsh-mnemon@0.4.7: 117 files, 382,494 packed bytes, 1,707,083 unpacked bytes, SHA-1 dda5cfc795ab5979b50a36f49387221039a69617, integrity sha512-kQlP2rOBqeM+6M96bzbaMrUpFLIM1lEFchCsCreSpNQH/lOGoTkyoLw8SkUmXClL70I8B9yTDsHwFcYMYVNucQ==.
• npm latest remains 0.4.6, dsh-mnemon@0.4.7 returns E404, and GitHub has no v0.4.7 release.
• The known missing-source-map notice from upstream @deepseek-ai/dsh-client-ui-primitives@0.1.2-rc.1 remained non-blocking; no test or packaging gate failed.
• PR fix(compat): adopt DSH 0.1.2-rc.1 #162 passed Linux Node 22.19/24, Windows Node 24, source-linked alpha.5, and bilingual contribution-policy jobs. Its pnpm 11.7 install checked 936 dependency entries against the exact release-age exclusion set.
• The 18-file release commit contains no runtime source, generated output, credentials, private memory, or raw fixture logs.

用户可见变更证据 / Local Feature Evidence

Release-only metadata and documentation; the executable compatibility implementation and screenshots are in merged PR #162. The preserved evidence shows DSH 0.1.2-rc.1 status and conversation/reload success, plus the previous DSH 0.1.1-rc.2 conversation/reload regression, with empty browser warning/error logs and matching Host diagnostics:

• Environment and acceptance record
• Stable DSH 0.1.2-rc.1 status
• Stable DSH 0.1.2-rc.1 conversation
• DSH 0.1.1-rc.2 backward regression

Release notes: docs/en/releases/v0.4.7.md and docs/zh-CN/releases/v0.4.7.md.