feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-hermes-memory/README.md

@@ -511,7 +511,7 @@ Move behavior:
 
 ## Configuration
 
-Create `~/.pi/agent/hermes-memory-config.json`:
+Configuration is read from the installed bundle's `config/pi-hermes-memory.json` — the bundle repository's `config/` directory is the single source of truth, refreshed by `pi update`. The shipped file only contains machine-independent values; `memoryDir`, `projectsMemoryDir`, and `childExtensionPaths` are machine-dependent and omitted so the code computes them at runtime. A leftover `~/.pi/agent/hermes-memory-config.json` is ignored. All supported keys:
 
 ```json
 {
@@ -708,7 +708,6 @@ native install scripts are disabled because the fixture writes no memories.
 │   │           └── SKILL.md
 │   └── another-project/
 │       └── MEMORY.md
-├── hermes-memory-config.json
 └── ...
 ```
 

pi-hermes-memory/UPSTREAM.md

@@ -36,8 +36,6 @@
 
 - 全局记忆与 skill：`~/.pi/agent/pi-hermes-memory/`
 - 项目记忆与 skill：`~/.pi/agent/projects-memory/<项目>/`
-- 配置：`~/.pi/agent/hermes-memory-config.json`（可选，缺省时使用内置默认值）
-
-这些路径是用户数据，不属于组合包，也不应提交或自动清理。
+以上路径是用户数据，不属于组合包，也不应提交或自动清理。组合包配置位于已安装组合包的 `config/pi-hermes-memory.json`，随 `pi update` 刷新；旧 `~/.pi/agent/hermes-memory-config.json` 被忽略。
 
 同步上游时，请从明确 tag/commit 移植改动，并与本地改动对照审查，不得整体覆盖本目录。

pi-hermes-memory/scripts/benchmark-memory-startup.mjs

@@ -24,9 +24,10 @@ const emit = async (event, data = {}) => {
 
 try {
   process.env.PI_CODING_AGENT_DIR = root;
+  process.env.PI_HERMES_MEMORY_CONFIG_PATH = join(root, "hermes-memory-config.json");
   await mkdir(globalDir);
   await mkdir(ctx.cwd);
-  await writeFile(join(root, "hermes-memory-config.json"), JSON.stringify({
+  await writeFile(process.env.PI_HERMES_MEMORY_CONFIG_PATH, JSON.stringify({
     lazyInitialization: lazy, memoryMode: "policy-only",
     reviewEnabled: false, correctionDetection: false,
     flushOnShutdown: false, flushOnCompact: false,

pi-hermes-memory/src/config.ts

@@ -1,5 +1,5 @@
 import * as fs from "node:fs";
-import * as path from "node:path";
+import { fileURLToPath } from "node:url";
 import type { MemoryConfig, MemoryOverflowStrategy, ReviewTransport, SessionSearchVariant, ThinkingLevel } from "./types.js";
 import {
   DEFAULT_MEMORY_CHAR_LIMIT,
@@ -21,7 +21,7 @@ import {
   DEFAULT_FAILURE_INJECTION_MAX_ENTRIES,
   DEFAULT_SESSION_RETENTION_DAYS,
 } from "./constants.js";
-import { AGENT_ROOT, normalizeConfiguredMemoryDir, normalizeProjectsMemoryDir } from "./paths.js";
+import { normalizeConfiguredMemoryDir, normalizeProjectsMemoryDir } from "./paths.js";
 
 const MEMORY_OVERFLOW_STRATEGIES: readonly MemoryOverflowStrategy[] = ["auto-consolidate", "reject", "fifo-evict"];
 const SESSION_SEARCH_VARIANTS: readonly SessionSearchVariant[] = ["legacy", "anchors"];
@@ -81,12 +81,24 @@ const DEFAULT_CONFIG: MemoryConfig = {
   sessionRetentionDays: DEFAULT_SESSION_RETENTION_DAYS,
 };
 
-export const DEFAULT_CONFIG_PATH = path.join(
-  AGENT_ROOT,
-  "hermes-memory-config.json",
+// Bundle-level `config/` is the single source of truth: the extension reads
+// `config/pi-hermes-memory.json` from inside the installed bundle (resolved
+// relative to this source file). Memory, sessions, and credentials stay under
+// the agent dir — they are user data, not bundle config.
+export const DEFAULT_CONFIG_PATH = fileURLToPath(
+  new URL("../../config/pi-hermes-memory.json", import.meta.url),
 );
 
-export function loadConfig(configPath = DEFAULT_CONFIG_PATH): MemoryConfig {
+/**
+ * Resolve the effective config path. `PI_HERMES_MEMORY_CONFIG_PATH` relocates
+ * the file (tests point it at a temp file; it is never a persisted config
+ * value).
+ */
+export function resolveConfigPath(): string {
+  return process.env.PI_HERMES_MEMORY_CONFIG_PATH ?? DEFAULT_CONFIG_PATH;
+}
+
+export function loadConfig(configPath = resolveConfigPath()): MemoryConfig {
   try {
     if (fs.existsSync(configPath)) {
       const raw = fs.readFileSync(configPath, "utf-8");

pi-hermes-memory/tests/lazy-startup.test.ts

@@ -8,7 +8,9 @@ import { after, beforeEach, afterEach, describe, it } from "node:test";
 // Bind the entry point to a disposable agent root, never the user's memory.
 const root = await fs.mkdtemp(path.join(os.tmpdir(), "pi-lazy-startup-"));
 const previousRoot = process.env.PI_CODING_AGENT_DIR;
+const previousConfigPath = process.env.PI_HERMES_MEMORY_CONFIG_PATH;
 process.env.PI_CODING_AGENT_DIR = root;
+process.env.PI_HERMES_MEMORY_CONFIG_PATH = path.join(root, "hermes-memory-config.json");
 const { default: registerExtension } = await import("../src/index.js");
 const { MemoryStore } = await import("../src/store/memory-store.js");
 const { DatabaseManager } = await import("../src/store/db.js");
@@ -85,6 +87,8 @@ afterEach(async () => {
 after(async () => {
   if (previousRoot === undefined) delete process.env.PI_CODING_AGENT_DIR;
   else process.env.PI_CODING_AGENT_DIR = previousRoot;
+  if (previousConfigPath === undefined) delete process.env.PI_HERMES_MEMORY_CONFIG_PATH;
+  else process.env.PI_HERMES_MEMORY_CONFIG_PATH = previousConfigPath;
   await fs.rm(root, { recursive: true, force: true });
 });
 

pi-hermes-memory/tests/project-rebinding.test.ts

@@ -18,6 +18,7 @@ describe("session project memory rebinding", () => {
     const launchDir = await fs.mkdtemp(path.join(os.tmpdir(), "pi-project-rebind-launch-"));
     const targetDir = await fs.mkdtemp(path.join(os.tmpdir(), "pi-project-rebind-target-"));
     const previousAgentRoot = process.env.PI_CODING_AGENT_DIR;
+    const previousConfigPath = process.env.PI_HERMES_MEMORY_CONFIG_PATH;
     const previousCwd = process.cwd();
     try {
       await fs.writeFile(
@@ -46,6 +47,7 @@ describe("session project memory rebinding", () => {
       );
 
       process.env.PI_CODING_AGENT_DIR = agentRoot;
+      process.env.PI_HERMES_MEMORY_CONFIG_PATH = path.join(agentRoot, "hermes-memory-config.json");
       process.chdir(launchDir);
       // Import after setting PI_CODING_AGENT_DIR so AGENT_ROOT is test-local.
       const { default: registerExtension } = await import("../src/index.js");
@@ -101,6 +103,8 @@ describe("session project memory rebinding", () => {
       process.chdir(previousCwd);
       if (previousAgentRoot === undefined) delete process.env.PI_CODING_AGENT_DIR;
       else process.env.PI_CODING_AGENT_DIR = previousAgentRoot;
+      if (previousConfigPath === undefined) delete process.env.PI_HERMES_MEMORY_CONFIG_PATH;
+      else process.env.PI_HERMES_MEMORY_CONFIG_PATH = previousConfigPath;
       await fs.rm(agentRoot, { recursive: true, force: true });
       await fs.rm(launchDir, { recursive: true, force: true });
       await fs.rm(targetDir, { recursive: true, force: true });

pi-hermes-memory/tests/prompt-injection.test.ts

@@ -22,7 +22,9 @@ import { after, beforeEach, describe, it } from "node:test";
 // Bind the entry point to a disposable agent root, never the user's memory.
 const root = await fs.mkdtemp(path.join(os.tmpdir(), "pi-prompt-injection-"));
 const previousRoot = process.env.PI_CODING_AGENT_DIR;
+const previousConfigPath = process.env.PI_HERMES_MEMORY_CONFIG_PATH;
 process.env.PI_CODING_AGENT_DIR = root;
+process.env.PI_HERMES_MEMORY_CONFIG_PATH = path.join(root, "hermes-memory-config.json");
 const { default: registerExtension } = await import("../src/index.js");
 const globalDir = path.join(root, "pi-hermes-memory");
 const cwd = path.join(root, "workspace");
@@ -111,6 +113,8 @@ beforeEach(async () => {
 after(async () => {
   if (previousRoot === undefined) delete process.env.PI_CODING_AGENT_DIR;
   else process.env.PI_CODING_AGENT_DIR = previousRoot;
+  if (previousConfigPath === undefined) delete process.env.PI_HERMES_MEMORY_CONFIG_PATH;
+  else process.env.PI_HERMES_MEMORY_CONFIG_PATH = previousConfigPath;
   try {
     await fs.rm(root, { recursive: true, force: true });
   } catch {