v0.4.1: Reliable settings subscriptions and timezone-safe Packs

v0.4.1 is a focused patch for the Sidebar-only v0.4 series. It fixes DSH settings-store callback binding and Mnemon Pack ZIP timestamps without changing the memory architecture, configuration contract, or data formats.

#Fixes

• Memory System no longer crashes on this-dependent settings stores. Both the workspace and Save to memory action wrap subscribe and getSnapshot with stable callbacks before passing them to React. The real host store keeps its receiver instead of being invoked as an unbound method. #133, #136
• Pack export works in timezones behind UTC. ZIP entry date fields are pinned to local 1980-01-01, preventing a UTC epoch from becoming an out-of-range 1979 date. Identical payloads with the same export time now produce identical archive bytes across timezones. #137, #112
• Regression coverage matches the failure modes. Settings tests use this-dependent class methods. Pack tests compare complete archives for full, runtime, documents, and memory-spaces exports across UTC, Los Angeles, UTC-12, UTC+14, and Kolkata.

#Upgrade and compatibility

Install dsh-mnemon@0.4.1 in the owning DSH profile, restart that profile, and reopen Memory System. Users upgrading from v0.3.x must also read the v0.4.0 Sidebar-only compatibility notes.

• Runtime, Documents, Memory Space data, Pack manifests and checksums, RPC permissions, storage paths, and Provider credentials are unchanged. Existing Packs remain readable; no migration or deletion is required.
• Only the fixed ZIP entry timestamp changes. UTC exports retain the prior timestamp fields; other timezones now use the same fields.
• DSH 0.1.1-rc.2 remains the published dependency baseline. DSH 0.1.2-alpha.1 remains a source-only compatibility target.
• The Sidebar-only workflow from v0.4.0 is retained. The separately planned v0.5 view-based architecture is not included.

#Rollback

Reinstall dsh-mnemon@0.4.0 in the same profile and restart it. No data conversion is needed, and existing Packs remain readable, but the settings-store crash and timezone-dependent export behavior return.

#Verification

• On macOS arm64 with Node.js 25.1.0 and pnpm 11.19.0, TZ=America/Los_Angeles pnpm run verify passed: 588 tests passed and one Windows-only smoke test was skipped. Deterministic double builds matched 107 files; isolated real Headless activation exposed 35 tools, including 5 representative Mnemon tools. Package-content checks covered 114 files, and all 10 Node-compatible public entries, publint strict, and attw passed.
• The complete Pack suite passed 16/16 in separately launched UTC, America/Los_Angeles, UTC-12, and UTC+14 processes.
• The actual v0.4.1 tarball was installed into an isolated npm DSH 0.1.1-rc.2 Web profile with Web UI 0.3.6 and checksum-verified Mnemon 0.2.5. All four memory pages rendered, Save to memory opened and canceled, and Settings reported successful ZIP generation in America/Los_Angeles, with no browser console errors. The browser download-completion event was not captured; downloaded-file persistence was not independently verified. The fixture used synthetic data and a local fixed model response, not a paid model or personal memory.
• Both implementation PRs passed Linux Node.js 22.19 and 24, Windows Node.js 24, and source-linked DSH 0.1.2-alpha.1 CI before merge.

Previous release: v0.4.0.