@sanqianx/project-knowledge 5.0.15-rc.4 → 5.0.15

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "project-knowledge",
-      "version": "5.0.15-rc.4",
+      "version": "5.0.15",
       "source": "./plugins/project-knowledge",
       "description": "Search durable project decisions and implementation history through MCP."
     }

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [5.0.15] - 2026-10-13
+
+- 冻结 rc.5 已验收的中文 BM25 与可校验向量片段融合、本项目进度与跨范围上下文、无可靠匹配诊断及离线 Claude 插件接入。
+- 包含 UI 属性/源码示例被知识晋升误判的修复，以及 Codex 本地市场重载修复；保留真实 Git 失败和原生 Hook 信任审核。
+- 正式包先下载和测试，再更新 latest；本机与另一台设备的结果分别报告。
+
+## [5.0.15-rc.5] - 2026-10-13
+
+- 修复 Codex 本地插件市场被强制执行 Git 刷新而无法更新的问题；识别原生明确的非 Git 市场反馈后重新加载本地插件，真实 Git/认证失败仍终止，保留可用旧插件。
+- 不写入 Hook 信任、不跳过原生审核；保留 rc.4 的知识晋升误判修复与检索改进。
+- 候选包先下载验收，不提升 latest。
+
 ## [5.0.15-rc.4] - 2026-10-13
 
 - 修复知识晋升校验把 UI 的 `placeholder=` 属性及有正文解释的源码示例误判为未完成内容的问题；真实未完成标记、空正文、越界及哈希校验继续拦截。

package/_site/_test/native-context-integrations-test.js

@@ -17,13 +17,14 @@ async function main() {
     const thirdParty = { type: 'process', command: 'node', args: ['third-party-hook.js'], timeoutMs: 4000 };
     const before = { model: 'user-model', env: { USER_VALUE: 'keep' }, hooks: { enabled: true, events: { UserPromptSubmit: [{ hooks: [thirdParty] }], Stop: [{ hooks: [thirdParty] }] } } };
     fs.writeFileSync(configFile, JSON.stringify(before));
-    let version = '5.0.9', enabled = true, trusted = false;
+    let version = '5.0.9', enabled = true, trusted = false, marketplaceMode = 'git';
     const calls = [], cache = path.join(root, 'codex-cache');
     const manager = new IntegrationManager({ homeDir: root, zcodeConfigFile: configFile, commandResolver: name => name,
       codexHookProbe: async () => ({ data: [{ cwd: root, errors: [], warnings: [], hooks: [{ eventName: 'userPromptSubmit', pluginId: 'project-knowledge@project-knowledge', command: hook.command, sourcePath: path.join(cache, 'hooks/codex.json'), enabled: true, trustStatus: trusted ? 'trusted' : 'untrusted' }] }] }),
       runner: (command, args) => {
         calls.push(args.join(' '));
         if (args.join(' ') === 'plugin marketplace list') return { status: 0, stdout: 'project-knowledge marketplace' };
+        if (args.join(' ') === 'plugin marketplace upgrade project-knowledge' && marketplaceMode !== 'git') return { status: 1, stderr: marketplaceMode === 'local' ? 'Error: marketplace `project-knowledge` is not configured as a Git marketplace' : 'Git authentication failed' };
         if (args.join(' ') === 'plugin list --json') return { status: 0, stdout: JSON.stringify({ installed: [{ pluginId: 'project-knowledge@project-knowledge', version, enabled, source: { path: cache } }] }) };
         if (args.slice(0, 2).join(' ') === 'plugin add') { version = manager.version; fs.mkdirSync(cache, { recursive: true }); fs.cpSync(plugin, cache, { recursive: true }); }
         return { status: 0, stdout: '' };
@@ -37,6 +38,14 @@ async function main() {
     const count = calls.filter(c => c.startsWith('plugin add')).length; manager.installCodex(); assert.equal(calls.filter(c => c.startsWith('plugin add')).length, count);
     enabled = false; assert.throws(() => manager.installCodex(), /禁用/); assert.equal(manager.statusCodex().state, 'disabled'); enabled = true;
     assert.ok(calls.every(c => !/trust|bypass/.test(c)), 'installer never writes native trust or bypasses review');
+    marketplaceMode = 'local'; version = '5.0.9';
+    assert.equal(manager.installCodex().state, 'updated', 'local catalogues reload owned files without a Git refresh');
+    assert.equal(manager.statusCodex().state, 'installed');
+    marketplaceMode = 'network-failed'; version = '5.0.9';
+    const removals = calls.filter(c => c.startsWith('plugin remove')).length;
+    assert.throws(() => manager.installCodex(), /Git authentication failed/);
+    assert.equal(calls.filter(c => c.startsWith('plugin remove')).length, removals, 'an actual Git failure must not remove the working plugin or be treated as a local catalogue');
+    marketplaceMode = 'git'; version = manager.version;
     const installed = manager.installZCode(); assert.equal(installed.state, 'installed'); manager.installZCode();
     const current = JSON.parse(fs.readFileSync(configFile));
     assert.equal(current.model, before.model); assert.deepEqual(current.env, before.env); assert.deepEqual(current.hooks.events.Stop, before.hooks.events.Stop);

package/_site/lib/integration-installer.js

@@ -592,7 +592,12 @@ class IntegrationManager {
   updateCodex() {
     if (!this.dryRun && this.codexPlugin()?.enabled === false) throw new Error('知识库插件已被用户禁用，请在 Codex 中明确启用，未静默修改。');
     this.ensureCodexMarketplace();
-    this.execute('codex', ['plugin', 'marketplace', 'upgrade', MARKETPLACE_NAME]);
+    const refreshed = this.execute('codex', ['plugin', 'marketplace', 'upgrade', MARKETPLACE_NAME], { allowFailure: true });
+    // Native refresh is Git-only. A local catalogue already points at current
+    // files; reinstall those files, but never hide a real Git/network failure.
+    if (refreshed.status !== 0 && !/^Error: marketplace `project-knowledge` is not configured as a Git marketplace\s*$/.test(String(refreshed.stderr || refreshed.stdout || '').trim())) {
+      throw new Error(String(refreshed.stderr || refreshed.stdout || '').trim() || 'Codex marketplace refresh failed.');
+    }
     if (this.dryRun || this.codexPlugin()) {
       this.execute('codex', ['plugin', 'remove', `${INTEGRATION_NAME}@${MARKETPLACE_NAME}`]);
     }

package/module-runtime-manifest.json

@@ -8,9 +8,9 @@
     "plugins/project-knowledge/hooks/claude.json": "d61510327e3e1facbb4c645228e9f50cad05a88b33d80c4c22e5ba9f8b9f5359",
     "plugins/project-knowledge/hooks/codex.json": "216e03c07295606ef6ebb2c4f669ad0d790b5e7c4f3f34600488033db75e4239",
     "plugins/project-knowledge/scripts/context-hook.cjs": "da666153ad5723592cce42d25337ae649f7d93e43fab76b3c6d1263933de063f",
-    "plugins/project-knowledge/.claude-plugin/plugin.json": "273d9e5d3f90ab5fd7716e83af672d8e6f7b2a596a74f1bdd52a25c040295518",
-    "plugins/project-knowledge/.codex-plugin/plugin.json": "7a3cd85679b339e524a72ddbacba0b19121311a5aeebf630d2b7470ee2adeeee",
-    "plugins/project-knowledge/.mcp.json": "5db42cda48e15903e04d1b8b04ea3e162ca620bf848322a4dd73666080f9e397"
+    "plugins/project-knowledge/.claude-plugin/plugin.json": "c6877fdc7c66bf4b6d296a219d465bb82a239027fe83fdd31b482690d618454b",
+    "plugins/project-knowledge/.codex-plugin/plugin.json": "e0e933b11567453b730510d3706aa1d9869064100d9d330a1d5865d5f3c1620c",
+    "plugins/project-knowledge/.mcp.json": "ad7e042a32ae84d501595f71cf4e865d424b8ae1621bdee0b1e06b851c67b949"
   },
   "modules": {
     "terminal": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/project-knowledge",
-  "version": "5.0.15-rc.4",
+  "version": "5.0.15",
   "description": "Knowledge base manager with Git integration, AI-driven analysis, and bilingual (zh-CN/en-US) knowledge output",
   "main": "_site/server.js",
   "scripts": {

package/plugins/project-knowledge/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "project-knowledge",
   "hooks": "./hooks/claude.json",
-  "version": "5.0.15-rc.4",
+  "version": "5.0.15",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "project-knowledge",
-  "version": "5.0.15-rc.4",
+  "version": "5.0.15",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.mcp.json

@@ -6,7 +6,7 @@
       "args": [
         "-y",
         "--package",
-        "@sanqianx/project-knowledge@5.0.15-rc.4",
+        "@sanqianx/project-knowledge@5.0.15",
         "project-knowledge-mcp"
       ]
     }