@sanqianx/project-knowledge 5.0.15-rc.3 → 5.0.15-rc.5

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "project-knowledge",
-      "version": "5.0.15-rc.3",
+      "version": "5.0.15-rc.5",
       "source": "./plugins/project-knowledge",
       "description": "Search durable project decisions and implementation history through MCP."
     }

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [5.0.15-rc.5] - 2026-10-13
+
+- 修复 Codex 本地插件市场被强制执行 Git 刷新而无法更新的问题；识别原生明确的非 Git 市场反馈后重新加载本地插件，真实 Git/认证失败仍终止，保留可用旧插件。
+- 不写入 Hook 信任、不跳过原生审核；保留 rc.4 的知识晋升误判修复与检索改进。
+- 候选包先下载验收，不提升 latest。
+
+## [5.0.15-rc.4] - 2026-10-13
+
+- 修复知识晋升校验把 UI 的 `placeholder=` 属性及有正文解释的源码示例误判为未完成内容的问题；真实未完成标记、空正文、越界及哈希校验继续拦截。
+- 保留失败记录及项目 FIFO，不升级后自动重做失败提交；用户可通过运行详情显式重试。
+- 保留 rc.3 的检索与离线接线修复；重新进行 npm 安装版验收，暂不提升 latest。
+
 ## [5.0.15-rc.3] - 2026-10-13
 
 - 当前项目没有维护历史但已有其他知识时，最近进度检索明确显示“本次无可靠匹配”，不误报整个项目知识为空。

package/_modules/knowledge-engine/README.md

@@ -90,6 +90,7 @@ node src/bin.js serve [--port 5790] [--host 127.0.0.1] [--data DIR]
 - 无头分析在隔离进程中运行，只读冻结证据，只写本次 staging。产物必须通过路径、内容 hash 和依据校验，只有晋升路径写最终项目知识。
 - 归档对话和检索内容只作证据，不能覆盖后台维护指令。SDK 返回成功文字但未生成 manifest 时，记录 `ANALYSIS_OUTPUT_MISSING` 并保留证据供重试，不误报晋升完成。
 - 空知识库是正常首用状态。输出合同明确 UTF-8、一级标题和非空正文；仅缺标题的非空文档在 staging 中确定性补齐并重新封印哈希，空正文、非法路径、占位内容或不匹配哈希仍拒绝晋升。
+- 占位检测区分未完成正文与源码示例：HTML 的 `placeholder=` 属性、行内代码和有正文解释的围栏代码不被误判为未完成知识；只有标题或仅用代码包裹未完成标记的文档仍拒绝。校验不改写有效原文。
 - 具体失败原因、失败步骤和提交依据进入运行详情及 `log/v2` 诊断。受外壳守护时通过 IPC 交给外壳现有日志系统；独立运行保存在 `<data>/logs/`，不写模型凭据和原始证据。升级不会重新运行已失败提交，用户可显式重试失败阶段。
 - 数据目录有单实例租约，目标知识目录有写入锁。关闭或超时等待子进程实际退出，再释放写入锁。
 - 晋升与索引分别记录。索引失败保留已晋升知识并显示待修复，不重新调用模型。

package/_modules/knowledge-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/ai-coding-knowledge-engine",
-  "version": "0.2.7-rc.3",
+  "version": "0.2.7-rc.4",
   "description": "Knowledge engine module for project-knowledge: commit-boundary triggered knowledge analysis/generation (trigger plane) and retrieval for development assistants (retrieval plane).",
   "license": "Apache-2.0",
   "main": "src/server.js",

package/_modules/knowledge-engine/src/runtime/knowledge-promotion.js

@@ -50,7 +50,16 @@ function validateMarkdown(content, relativePath) {
     throw new DomainError('INVALID_ARGUMENT', `Staged Markdown contains disallowed control characters: ${relativePath}.`);
   }
   if (!content.trim() || !/^#\s+\S+/m.test(content)) throw new DomainError('INVALID_ARGUMENT', `Staged Markdown must contain a title: ${relativePath}.`);
-  if (/(?:\[TODO:|\bTODO:\s|\bTBD\b|PLACEHOLDER)/i.test(content)) throw new DomainError('INVALID_ARGUMENT', `Placeholder knowledge is not allowed: ${relativePath}.`);
+  // UI attributes and quoted source examples describe real changes; they are
+  // not unfinished prose. Still reject a document containing only a quoted
+  // unfinished marker, so fencing a placeholder cannot make it valid knowledge.
+  const marker = /(?:\[TODO:|\bTODO:\s|\bTBD\b|\bPLACEHOLDER\b(?!\s*=))/i;
+  const prose = content.replace(/^---\r?\n[\s\S]*?\r?\n---(?:\r?\n|$)/, '')
+    .replace(/^[ \t]*(`{3,}|~{3,})[^\n]*\n[\s\S]*?^[ \t]*\1[ \t]*(?:\n|$)/gm, '')
+    .replace(/(`+)[^\n]*?\1/g, '');
+  if (marker.test(prose) || !prose.replace(/^#{1,6}[ \t]+.*$/gm, '').trim() && marker.test(content)) {
+    throw new DomainError('INVALID_ARGUMENT', `Placeholder knowledge is not allowed: ${relativePath}.`);
+  }
   const fences = content.match(/^```/gm) || [];
   if (fences.length % 2 !== 0) throw new DomainError('INVALID_ARGUMENT', `Markdown code fences are unbalanced: ${relativePath}.`);
   if (content.startsWith('---\n') && !/^---\n[\s\S]*?\n---\n/.test(content)) {

package/_site/_test/native-context-integrations-test.js

@@ -17,13 +17,14 @@ async function main() {
     const thirdParty = { type: 'process', command: 'node', args: ['third-party-hook.js'], timeoutMs: 4000 };
     const before = { model: 'user-model', env: { USER_VALUE: 'keep' }, hooks: { enabled: true, events: { UserPromptSubmit: [{ hooks: [thirdParty] }], Stop: [{ hooks: [thirdParty] }] } } };
     fs.writeFileSync(configFile, JSON.stringify(before));
-    let version = '5.0.9', enabled = true, trusted = false;
+    let version = '5.0.9', enabled = true, trusted = false, marketplaceMode = 'git';
     const calls = [], cache = path.join(root, 'codex-cache');
     const manager = new IntegrationManager({ homeDir: root, zcodeConfigFile: configFile, commandResolver: name => name,
       codexHookProbe: async () => ({ data: [{ cwd: root, errors: [], warnings: [], hooks: [{ eventName: 'userPromptSubmit', pluginId: 'project-knowledge@project-knowledge', command: hook.command, sourcePath: path.join(cache, 'hooks/codex.json'), enabled: true, trustStatus: trusted ? 'trusted' : 'untrusted' }] }] }),
       runner: (command, args) => {
         calls.push(args.join(' '));
         if (args.join(' ') === 'plugin marketplace list') return { status: 0, stdout: 'project-knowledge marketplace' };
+        if (args.join(' ') === 'plugin marketplace upgrade project-knowledge' && marketplaceMode !== 'git') return { status: 1, stderr: marketplaceMode === 'local' ? 'Error: marketplace `project-knowledge` is not configured as a Git marketplace' : 'Git authentication failed' };
         if (args.join(' ') === 'plugin list --json') return { status: 0, stdout: JSON.stringify({ installed: [{ pluginId: 'project-knowledge@project-knowledge', version, enabled, source: { path: cache } }] }) };
         if (args.slice(0, 2).join(' ') === 'plugin add') { version = manager.version; fs.mkdirSync(cache, { recursive: true }); fs.cpSync(plugin, cache, { recursive: true }); }
         return { status: 0, stdout: '' };
@@ -37,6 +38,14 @@ async function main() {
     const count = calls.filter(c => c.startsWith('plugin add')).length; manager.installCodex(); assert.equal(calls.filter(c => c.startsWith('plugin add')).length, count);
     enabled = false; assert.throws(() => manager.installCodex(), /禁用/); assert.equal(manager.statusCodex().state, 'disabled'); enabled = true;
     assert.ok(calls.every(c => !/trust|bypass/.test(c)), 'installer never writes native trust or bypasses review');
+    marketplaceMode = 'local'; version = '5.0.9';
+    assert.equal(manager.installCodex().state, 'updated', 'local catalogues reload owned files without a Git refresh');
+    assert.equal(manager.statusCodex().state, 'installed');
+    marketplaceMode = 'network-failed'; version = '5.0.9';
+    const removals = calls.filter(c => c.startsWith('plugin remove')).length;
+    assert.throws(() => manager.installCodex(), /Git authentication failed/);
+    assert.equal(calls.filter(c => c.startsWith('plugin remove')).length, removals, 'an actual Git failure must not remove the working plugin or be treated as a local catalogue');
+    marketplaceMode = 'git'; version = manager.version;
     const installed = manager.installZCode(); assert.equal(installed.state, 'installed'); manager.installZCode();
     const current = JSON.parse(fs.readFileSync(configFile));
     assert.equal(current.model, before.model); assert.deepEqual(current.env, before.env); assert.deepEqual(current.hooks.events.Stop, before.hooks.events.Stop);

package/_site/lib/integration-installer.js

@@ -592,7 +592,12 @@ class IntegrationManager {
   updateCodex() {
     if (!this.dryRun && this.codexPlugin()?.enabled === false) throw new Error('知识库插件已被用户禁用，请在 Codex 中明确启用，未静默修改。');
     this.ensureCodexMarketplace();
-    this.execute('codex', ['plugin', 'marketplace', 'upgrade', MARKETPLACE_NAME]);
+    const refreshed = this.execute('codex', ['plugin', 'marketplace', 'upgrade', MARKETPLACE_NAME], { allowFailure: true });
+    // Native refresh is Git-only. A local catalogue already points at current
+    // files; reinstall those files, but never hide a real Git/network failure.
+    if (refreshed.status !== 0 && !/^Error: marketplace `project-knowledge` is not configured as a Git marketplace\s*$/.test(String(refreshed.stderr || refreshed.stdout || '').trim())) {
+      throw new Error(String(refreshed.stderr || refreshed.stdout || '').trim() || 'Codex marketplace refresh failed.');
+    }
     if (this.dryRun || this.codexPlugin()) {
       this.execute('codex', ['plugin', 'remove', `${INTEGRATION_NAME}@${MARKETPLACE_NAME}`]);
     }

package/module-runtime-manifest.json

@@ -8,9 +8,9 @@
     "plugins/project-knowledge/hooks/claude.json": "d61510327e3e1facbb4c645228e9f50cad05a88b33d80c4c22e5ba9f8b9f5359",
     "plugins/project-knowledge/hooks/codex.json": "216e03c07295606ef6ebb2c4f669ad0d790b5e7c4f3f34600488033db75e4239",
     "plugins/project-knowledge/scripts/context-hook.cjs": "da666153ad5723592cce42d25337ae649f7d93e43fab76b3c6d1263933de063f",
-    "plugins/project-knowledge/.claude-plugin/plugin.json": "facecdcb3ce2f585ee852567f6151a9ed72d439b3bb0bf9221046badf8b56a7a",
-    "plugins/project-knowledge/.codex-plugin/plugin.json": "1f68a22635149f2be064b6084be91ba929b77e7e906d930941b48d04416c6bff",
-    "plugins/project-knowledge/.mcp.json": "bdbc000678d8945105dbe8bc9d5225c6e19188818871dc9d13a078f51d3222c7"
+    "plugins/project-knowledge/.claude-plugin/plugin.json": "2480e47b2378461537ee103abbc723b0a4030674d4d8fb2424046adbf868ddab",
+    "plugins/project-knowledge/.codex-plugin/plugin.json": "23c8c44b0ce0acb250393320a616aee89d927a86250d6aa310e8ae6ce6b556d5",
+    "plugins/project-knowledge/.mcp.json": "74cf5ff05a611aaa240628cf006a2dea47b786fdc4fbf82807524eab11c28cbe"
   },
   "modules": {
     "terminal": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/project-knowledge",
-  "version": "5.0.15-rc.3",
+  "version": "5.0.15-rc.5",
   "description": "Knowledge base manager with Git integration, AI-driven analysis, and bilingual (zh-CN/en-US) knowledge output",
   "main": "_site/server.js",
   "scripts": {

package/plugins/project-knowledge/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "project-knowledge",
   "hooks": "./hooks/claude.json",
-  "version": "5.0.15-rc.3",
+  "version": "5.0.15-rc.5",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "project-knowledge",
-  "version": "5.0.15-rc.3",
+  "version": "5.0.15-rc.5",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.mcp.json

@@ -6,7 +6,7 @@
       "args": [
         "-y",
         "--package",
-        "@sanqianx/project-knowledge@5.0.15-rc.3",
+        "@sanqianx/project-knowledge@5.0.15-rc.5",
         "project-knowledge-mcp"
       ]
     }

package/vendor-manifest.json

@@ -3,11 +3,11 @@
   "modules": {
     "knowledge-engine": {
       "name": "@sanqianx/ai-coding-knowledge-engine",
-      "version": "0.2.7-rc.3",
+      "version": "0.2.7-rc.4",
       "root": "_modules/knowledge-engine",
       "files": {
-        "README.md": "eae7e1a59416c623064f68dbf33d13d41e21096bf67701e41464e0a86c84abdd",
-        "package.json": "83bdbc51f81bd31dc5af57ed257be5e970510525f6c855eeb1ea2e086f1b5bfb",
+        "README.md": "e55d09671139a97825bb59b1ce2e594cf82a51d392205442bc4f09c4cf42708c",
+        "package.json": "1faf25907fd3382dddc68c1a3e92e767c268e5e55715ba6579a33507583759c1",
         "src/analysis-contract.js": "913a63b63fb4a4a9df071f95bbeb8f8c40ef87e2f8445ab0742086ced70ffbf7",
         "src/analysis-output.js": "95a3c19dcc9ab85d1dba7fee5b9aec80f9c000dfba89da3fd0be25a81e2fb680",
         "src/analysis-worker.js": "a105cabe6e1573b2d986b1e7a5aaf615e2fb53524156fc8e4e2c0a71f2c97e55",
@@ -36,7 +36,7 @@
         "src/runtime/conversation-store.js": "644318f9c04376a3317ced240dd94afa99a79631f0ecc394c5aa298ae2bc0474",
         "src/runtime/evidence-bundle.js": "33d4614849d5e1d69aba8b75c3a43c18b7b6f94e5c78654c82ef631331cc94cc",
         "src/runtime/git-runner.js": "b74fe197bd4dcf3e70635ef7b1f2615edf965c1d9a3ffe5406aabd41b76d74a9",
-        "src/runtime/knowledge-promotion.js": "892a227921ca399e80ea7b3991bfd13de0ffc221c7a0562393f1e5d33c2d00fa",
+        "src/runtime/knowledge-promotion.js": "3bf9de68e8604adeb197fe8437012c3688fb3ddac884d4321ec132218df10935",
         "src/runtime/knowledge-retrieval-service.js": "75444f495a9ad0720af0e57b8d27d7ac1325c78a768f4f68ebd86ebc2524945e",
         "src/runtime/layout.js": "e47fe54c605218493ce46f6289798d9db2a3ecec95089d288ed03d3b75cf871a",
         "src/runtime/markdown-knowledge-indexer.js": "4d6b5b955849d274ca0614ef030c94526da7c39ab0874f02c168d0681f5b1406",
@@ -47,7 +47,7 @@
         "ui/app.js": "33a2ba38f0dafbbb2e30a1eb3fc93476bfcaf528e124e1a9b2edd2fb69221e9e",
         "ui/index.html": "ce3565cfefd4838b11d37a91a906ef26ca5a1834844fe3f7c897b56851a3c418"
       },
-      "sourceCommit": "c32465093ebc072387f25a378a6c3a95e95a1d70"
+      "sourceCommit": "5c07a801aae1e0a79698763cbe161575bcda0578"
     }
   }
 }