@sanqianx/project-knowledge 5.0.16-rc.5 → 5.0.16-rc.7

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "project-knowledge",
-      "version": "5.0.16-rc.5",
+      "version": "5.0.16-rc.7",
       "source": "./plugins/project-knowledge",
       "description": "Search durable project decisions and implementation history through MCP."
     }

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [5.0.16-rc.7] - 2026-10-15
+
+- 纳入引擎 0.2.7-rc.8：修复 commit 标识与主题混合查询只返回概述、漏掉已有正文证据的问题。已识别 SHA 只限定来源，不重复参与主题打分；提交内按主题 BM25 选择片段，普通语义查询保留 RRF，并补中英单写者与引擎词汇。
+- 保持每文档两段、正文／向量区间校验、授权范围与上下文预算；同分排序稳定，不以标题中的 SHA 冒充任务事实已送达。
+- 新增真实原文遗漏的红／绿用例及 topic-context 发布门禁；真实工作台网页测试验证具体事实和实际回答，其他模块版本不变。候选未完成安装版与原生验收前不更新 latest。
+
+## [5.0.16-rc.6] - 2026-10-15
+
+- 修复 Codex 0.137 将 scoped npm 目录中的 `@` 误作 Git ref：本地目录含 `@` 时从该目录执行 `marketplace add .`，更换和回退分别使用自己的工作目录，不复制目录、不访问 GitHub。
+- CLI 子操作日志关联原操作 ID，允许继续处理的失败仍记录安全诊断；本地路径误判保留 `CODEX_LOCAL_SOURCE_REF`，不写入原始 CLI 输出。
+- 保留 rc.5 的已验证四模块版本、索引与知识功能。rc.5 本机保真升级已通过：7 项目、43 历史文件、565 索引文件保留；真实记忆闭环与双 Node 浏览器门禁通过，热查询 P95 为 693ms（1000 文档合成语料）。
+- 本机 Codex 已通过原生本地市场操作恢复，MCP 声明入口 initialize/六工具/resolve/search/get 验证通过；Hook 尚待用户审核，不计自动上下文通过。候选不更新 latest。
+
 ## [5.0.16-rc.5] - 2026-10-15
 
 - 精确锁定 Workbench 0.13.2-rc.13：模型目录加载失败不再伪装成空目录；保留上次有效结果，提供明确错误与重试，打开菜单可恢复请求，关闭菜单后的迟到响应不会重开菜单。保存或删除供应商后不复用保存前的旧快照，普通菜单打开仍共享请求。

package/_modules/knowledge-engine/README.md

@@ -82,7 +82,7 @@ node src/bin.js serve [--port 5790] [--host 127.0.0.1] [--data DIR]
 
 上下文明确区分当前已确认记忆与历史事实：项目约定优先于领域，领域优先于全局；同范围冲突参考记忆的更新时间。历史提交中的旧实现、偏好描述不能覆盖本次下发的现行记忆；记忆也不扩大当前用户授权或替代安全限制。保留旧事实及其提交依据，不删除历史来制造新记忆生效的结果。
 
-检索中明确命名且当前知识已有依据的源文件与 commit 标识优先做身份匹配，再进行语义排序，避免重复历史范例挤出指定文件。尚无知识依据的新文件名仍允许检索相似背景；不把没有范围授权的项目或原始会话当作匹配来源。
+检索中明确命名且当前知识已有依据的源文件与 commit 标识优先做身份匹配，避免重复历史范例挤出指定文件。已识别 commit 的 SHA 只限定提交依据，不再重复计入主题词分；该提交内按其余主题的 BM25 选择片段，分数为 `1 + BM25 / (1 + BM25)`（排序分，不是置信概率）。普通语义查询继续使用原 RRF。中英引擎、晋升、单写者词汇使用双向别名，保持每文档最多两个互补片段。尚无知识依据的新文件名仍允许检索相似背景；不把没有范围授权的项目或原始会话当作匹配来源。
 
 - journal 游标按来源隔离；证据投影及可恢复任务先落盘，再 ACK。不等待模型才能消费下一条事件。
 - 会话来源接受 bridge 的四客户端契约（Claude Code、Codex、OpenCode、ZCode）。单个 journal 的非法证据不被跳过或 ACK，但不阻塞其他项目；失败位置和错误码写入日志，健康接口提供 `journal.failures`，重复轮询不刷屏，恢复后续接原游标。

package/_modules/knowledge-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/ai-coding-knowledge-engine",
-  "version": "0.2.7-rc.7",
+  "version": "0.2.7-rc.8",
   "description": "Knowledge engine module for project-knowledge: commit-boundary triggered knowledge analysis/generation (trigger plane) and retrieval for development assistants (retrieval plane).",
   "license": "Apache-2.0",
   "main": "src/server.js",

package/_modules/knowledge-engine/src/retrieval-ranking.js

@@ -8,6 +8,8 @@ const ALIASES = [
   ['recipe', '配方'], ['plate', '配方'], ['alignment', '对齐'], ['report', '报表'], ['commit', '提交'],
   ['vector', '向量'], ['retrieval', '检索'], ['search', '检索'], ['knowledge', '知识'], ['timeout', '超时'],
   ['cancel', '取消'], ['connection', '连接'], ['save', '保存'],
+  ['engine', '引擎'], ['promotion', '晋升'], ['writer', '写入'],
+  ['one writer', '单写者'], ['single-writer', '单写者'],
 ];
 const segmenter = typeof Intl.Segmenter === 'function' ? new Intl.Segmenter('zh', { granularity: 'word' }) : null;
 const termCache = new Map();
@@ -50,9 +52,10 @@ function intent(query) {
   return 'search';
 }
 
-function lexical(candidates, query) {
+function lexical(candidates, query, ignoredTerms = []) {
   const q = terms(query), wanted = new Map();
-  for (const word of q.main) wanted.set(word, 1);
+  const ignored = new Set(ignoredTerms);
+  for (const word of q.main) if (!ignored.has(word)) wanted.set(word, 1);
   for (const gram of q.grams) if (!wanted.has(gram)) wanted.set(gram, 0.2);
   const rows = candidates.map(c => {
     const body = terms(c.chunkText), title = terms(`${c.title} ${c.headingPath.join(' ')} ${c.entryId}`), freq = new Map();
@@ -76,8 +79,10 @@ function lexical(candidates, query) {
   }
 }
 
-function rank(candidates, query, scoreIdentity) {
-  lexical(candidates, query);
+function rank(candidates, query, scoreIdentity, options = {}) {
+  // A resolved commit already constrains provenance. Repeated SHA text in a
+  // heading is not evidence for the topic asked about within that commit.
+  lexical(candidates, query, options.commitPrefixes || []);
   const eligible = [];
   for (const c of candidates) {
     const identified = scoreIdentity(c);
@@ -90,6 +95,7 @@ function rank(candidates, query, scoreIdentity) {
     c.selectionSignals = [...exact, ...(c.lexicalScore > 0 ? ['lexical:bm25'] : []), ...(c.vectorVerified ? ['index:vector-hub'] : []),
       `scope:${c.scopeReason}`, ...(c.fromOverlay ? ['markdown-delta-overlay'] : [])];
     c.identityMatch = exact.length > 0;
+    c.commitMatch = exact.includes('exact-commit');
     eligible.push(c);
   }
   const order = (a, b) => a.recordId.localeCompare(b.recordId);
@@ -97,8 +103,12 @@ function rank(candidates, query, scoreIdentity) {
   const vectorRows = eligible.filter(c => c.vectorVerified && c.indexScore > 0).sort((a, b) => b.indexScore - a.indexScore || order(a, b));
   const scores = new Map();
   for (const list of [lexicalRows, vectorRows]) list.forEach((c, i) => scores.set(c.recordId, (scores.get(c.recordId) || 0) + 1 / (60 + i + 1)));
-  for (const c of eligible) c.relevanceScore = (scores.get(c.recordId) || 0) + (c.identityMatch ? 1 : 0);
-  eligible.sort((a, b) => b.relevanceScore - a.relevanceScore || (a.scopeReason === 'primary' ? -1 : b.scopeReason === 'primary' ? 1 : 0) || order(a, b));
+  // For a resolved commit, order its snippets by the remaining topic, not by
+  // having two recall channels. Normal semantic queries keep RRF unchanged.
+  for (const c of eligible) c.relevanceScore = c.commitMatch ? 1 + c.lexicalScore / (1 + c.lexicalScore)
+    : (scores.get(c.recordId) || 0) + (c.identityMatch ? 1 : 0);
+  eligible.sort((a, b) => b.relevanceScore - a.relevanceScore
+    || Number(b.scopeReason === 'primary') - Number(a.scopeReason === 'primary') || order(a, b));
   const selected = [], byDocument = new Map();
   for (const c of eligible) {
     const key = `${c.spaceId}:${c.entryId}`, prior = byDocument.get(key) || [];

package/_modules/knowledge-engine/src/retrieval.js

@@ -73,7 +73,7 @@ class EngineRetrieval extends KnowledgeRetrievalService {
     const ranked = ['greeting', 'followup'].includes(ranking.intent(signals.indexQuery)) ? [] : ranking.rank([...scanned.candidates.values()], signals.indexQuery, c => {
       const scored = this.score(c, signals);
       return { ...scored, excluded: Boolean(signals.commitPrefixes?.length || c.knownFileQuery) && scored.score <= 0 };
-    });
+    }, { commitPrefixes: signals.commitPrefixes });
     const ordered = input.policy === 'project-first' ? [...ranked.filter(c => c.scopeReason === 'primary'), ...ranked.filter(c => c.scopeReason !== 'primary')] : ranked;
     const checked = new Map(), candidates = [];
     // Revalidate every returned document after the asynchronous vector call,

package/_site/_test/codex-marketplace-scoped-path-test.js

@@ -0,0 +1,186 @@
+'use strict';
+// Red-first regression (Q7): Codex CLI 0.137 rejects
+// `plugin marketplace add <SOURCE>` with
+// "Error: --ref is only supported for git marketplace sources"
+// whenever the SOURCE string contains '@', which every scoped npm root
+// (node_modules/@sanqianx/project-knowledge) does. Running the same add from
+// the package directory's own cwd with SOURCE '.' avoids the '@' entirely.
+// ensureCodexMarketplace() must use that form for the target add and for the
+// rollback re-add of a previous scoped root, while non-'@' absolute paths keep
+// the original invocation and third-party same-name sources stay untouched.
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { IntegrationManager } = require('../lib/integration-installer');
+
+const TEMP_BASE = fs.mkdtempSync(path.join(os.tmpdir(), 'codex-marketplace-scoped-path-'));
+const TEST_HOME = path.join(TEMP_BASE, 'home');
+const MARKETPLACE = 'project-knowledge';
+const REF_ERROR = 'Error: --ref is only supported for git marketplace sources';
+const NEW_ROOT = path.join(TEMP_BASE, 'new-root', '@sanqianx', 'project-knowledge');
+const OLD_ROOT = path.join(TEMP_BASE, 'old-root', '@sanqianx-previous', 'project-knowledge');
+const PLAIN_ROOT = path.join(TEMP_BASE, 'plain-root', 'project-knowledge');
+const THIRD_PARTY_ROOT = path.join(TEMP_BASE, 'third-party', 'marketplace');
+
+function writePackage(directory, name, version) {
+  fs.mkdirSync(directory, { recursive: true });
+  fs.writeFileSync(path.join(directory, 'package.json'), JSON.stringify({ name, version }, null, 2));
+}
+
+// Native-style in-memory codex CLI mirroring 0.137 marketplace semantics:
+// a marketplace add SOURCE containing '@' is parsed as <repo>@<ref> and
+// rejected; SOURCE '.' resolves against runnerOptions.cwd.
+function createCodexCli() {
+  const state = { marketplaces: new Map(), calls: [], addCalls: [], removeCalls: [], failAddDirs: new Set() };
+  const runner = (command, args, runnerOptions = {}) => {
+    state.calls.push({ command, args: [...args], cwd: runnerOptions.cwd || null });
+    if (args[0] !== 'plugin' || args[1] !== 'marketplace') {
+      return { status: 1, stdout: '', stderr: `fake codex CLI: unsupported command: ${args.join(' ')}` };
+    }
+    if (args[2] === 'list') {
+      const lines = [...state.marketplaces].map(([name, source]) => `${name} ${source}`);
+      return { status: 0, stdout: lines.length ? `${lines.join('\n')}\n` : '', stderr: '' };
+    }
+    if (args[2] === 'remove') {
+      state.marketplaces.delete(args[3]);
+      state.removeCalls.push(args[3]);
+      return { status: 0, stdout: '', stderr: '' };
+    }
+    if (args[2] === 'add') {
+      const source = String(args[3]);
+      const resolved = path.resolve(String(runnerOptions.cwd || process.cwd()), source);
+      state.addCalls.push({ source, cwd: runnerOptions.cwd || null, resolved });
+      if (source.includes('@')) return { status: 1, stdout: '', stderr: REF_ERROR };
+      if (state.failAddDirs.has(resolved)) return { status: 1, stdout: '', stderr: 'forced marketplace add failure (test)' };
+      let stat = null;
+      try { stat = fs.statSync(resolved); } catch { /* missing source handled below */ }
+      if (!stat || !stat.isDirectory()) return { status: 1, stdout: '', stderr: `Error: marketplace source not found: ${source}` };
+      state.marketplaces.set(MARKETPLACE, resolved);
+      return { status: 0, stdout: '', stderr: '' };
+    }
+    return { status: 1, stdout: '', stderr: `fake codex CLI: unsupported marketplace command: ${args.join(' ')}` };
+  };
+  return { runner, state };
+}
+
+function createManager(cli, rootDir) {
+  return new IntegrationManager({
+    rootDir,
+    homeDir: TEST_HOME,
+    bridgeHomeDir: path.join(TEMP_BASE, 'bridge'),
+    env: {},
+    commandResolver: name => `fake-${name}`,
+    runner: cli.runner,
+  });
+}
+
+function registeredSource(cli) {
+  const line = [...cli.state.marketplaces].map(([name, source]) => `${name} ${source}`)
+    .find(item => item.startsWith(`${MARKETPLACE} `));
+  return line ? line.slice(MARKETPLACE.length).trim() : null;
+}
+
+function lastAdd(cli) {
+  assert.ok(cli.state.addCalls.length, 'expected at least one marketplace add call');
+  return cli.state.addCalls[cli.state.addCalls.length - 1];
+}
+
+function assertDotAdd(add, expectedRoot, label) {
+  assert.equal(add.source, '.', `${label}: scoped root must be added via the "." source, not an "@"-containing path`);
+  assert.equal(path.resolve(add.cwd || ''), expectedRoot, `${label}: "." must resolve against the package directory's own cwd`);
+}
+
+function main() {
+  writePackage(NEW_ROOT, '@sanqianx/project-knowledge', '5.0.16');
+  writePackage(OLD_ROOT, '@sanqianx/project-knowledge', '5.0.15');
+  writePackage(PLAIN_ROOT, '@sanqianx/project-knowledge', '5.0.16');
+  writePackage(THIRD_PARTY_ROOT, 'third-party-market', '1.0.0');
+
+  const results = [];
+  const scenario = (name, fn) => {
+    try { fn(); results.push({ name, ok: true }); }
+    catch (error) { results.push({ name, ok: false, error: String((error && error.message) || error) }); }
+  };
+
+  scenario('fresh: scoped npm root installs via "." from its own cwd', () => {
+    const cli = createCodexCli();
+    createManager(cli, NEW_ROOT).ensureCodexMarketplace();
+    assert.equal(registeredSource(cli), NEW_ROOT, 'fresh install must register the scoped npm root');
+    assertDotAdd(lastAdd(cli), NEW_ROOT, 'fresh install');
+    assert.equal(cli.state.removeCalls.length, 0, 'fresh install must not remove anything');
+  });
+
+  scenario('switch: replacing a previous scoped root registers the new root', () => {
+    const cli = createCodexCli();
+    cli.state.marketplaces.set(MARKETPLACE, OLD_ROOT);
+    createManager(cli, NEW_ROOT).ensureCodexMarketplace();
+    assert.ok(cli.state.removeCalls.includes(MARKETPLACE), 'switch must remove the previous marketplace first');
+    assert.equal(registeredSource(cli), NEW_ROOT, 'switch must end registered on the new scoped root');
+    assertDotAdd(lastAdd(cli), NEW_ROOT, 'switch');
+    assert.ok(cli.state.addCalls.every(add => !add.source.includes('@')), 'no add may pass an "@"-containing source');
+  });
+
+  scenario('rollback: failed switch restores the old scoped root', () => {
+    const cli = createCodexCli();
+    cli.state.marketplaces.set(MARKETPLACE, OLD_ROOT);
+    cli.state.failAddDirs.add(NEW_ROOT);
+    assert.throws(() => createManager(cli, NEW_ROOT).ensureCodexMarketplace(), /已恢复原市场来源/);
+    assert.equal(registeredSource(cli), OLD_ROOT, 'rollback must restore the previous scoped root');
+    assertDotAdd(lastAdd(cli), OLD_ROOT, 'rollback');
+    assert.ok(cli.state.addCalls.every(add => !add.source.includes('@')), 'rollback add must also avoid "@" in the source');
+  });
+
+  scenario('plain path: non-"@" absolute source keeps the original invocation', () => {
+    const cli = createCodexCli();
+    createManager(cli, PLAIN_ROOT).ensureCodexMarketplace();
+    assert.equal(registeredSource(cli), PLAIN_ROOT);
+    const add = lastAdd(cli);
+    assert.equal(add.source, PLAIN_ROOT, 'non-scoped absolute path must keep being passed as the add source');
+    assert.notEqual(add.source, '.', 'the "." form is reserved for "@"-containing paths');
+  });
+
+  scenario('third-party: same-name marketplace is never overwritten', () => {
+    const cli = createCodexCli();
+    cli.state.marketplaces.set(MARKETPLACE, THIRD_PARTY_ROOT);
+    assert.throws(() => createManager(cli, NEW_ROOT).ensureCodexMarketplace(), /未覆盖第三方来源/);
+    assert.equal(cli.state.addCalls.length, 0, 'third-party source must not be replaced');
+    assert.equal(cli.state.removeCalls.length, 0, 'third-party source must not be removed');
+    assert.equal(registeredSource(cli), THIRD_PARTY_ROOT, 'third-party registration must be untouched');
+  });
+
+  scenario('allowed failure keeps operation linkage and a safe diagnostic code', () => {
+    const cli = createCodexCli();
+    const logs = [];
+    const manager = createManager(cli, NEW_ROOT);
+    manager.operationId = 'op-native-source-test';
+    manager.logger = Object.fromEntries(['info', 'warn', 'error'].map(level => [level, (event, message, meta) => logs.push({ event, message, meta })]));
+    manager.execute('codex', ['plugin', 'marketplace', 'add', NEW_ROOT], { allowFailure: true });
+    const failure = logs.find(log => log.event === 'integration.command_failed');
+    assert.ok(failure, 'a tolerated CLI failure must not be logged as success');
+    assert.equal(failure.meta.operationId, 'op-native-source-test');
+    assert.equal(failure.meta.error.code, 'CODEX_LOCAL_SOURCE_REF');
+    assert.equal(failure.meta.context.status, 1);
+    assert.ok(!JSON.stringify(logs).includes(REF_ERROR), 'never save raw CLI output');
+  });
+
+  assert.equal(path.dirname(TEMP_BASE), path.resolve(os.tmpdir()));
+  assert.equal(fs.lstatSync(TEMP_BASE).isSymbolicLink(), false);
+  fs.rmSync(TEMP_BASE, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+
+  const failed = results.filter(item => !item.ok);
+  for (const item of results) console.log(`${item.ok ? 'PASS' : 'FAIL'} ${item.name}${item.ok ? '' : ` :: ${item.error}`}`);
+  if (failed.length) {
+    console.error(`codex-marketplace-scoped-path-test: ${failed.length} of ${results.length} case(s) failed.`);
+    process.exitCode = 1;
+    return;
+  }
+  console.log('codex-marketplace-scoped-path-test passed.');
+}
+
+try {
+  main();
+} catch (error) {
+  console.error(error);
+  process.exitCode = 1;
+}

package/_site/lib/integration-installer.js

@@ -436,7 +436,7 @@ class IntegrationManager {
 
   log(level, event, message, input = {}) {
     if (!this.logger || typeof this.logger[level] !== 'function') return;
-    Promise.resolve(this.logger[level](event, message, { component: 'integration-manager', ...input })).catch(() => {
+    Promise.resolve(this.logger[level](event, message, { component: 'integration-manager', operationId: this.operationId, ...input })).catch(() => {
       try { process.stderr.write(`[integration-manager logger fallback] ${event}\n`); } catch {
         // stderr is the final non-recursive observer fallback.
       }
@@ -638,19 +638,29 @@ class IntegrationManager {
     }
     const result = this.runner(command, args, {
       env: this.env,
-      cwd: this.rootDir,
+      cwd: options.cwd || this.rootDir,
       timeout: options.timeout,
     });
     if (result.error) {
       this.log('error', 'integration.command_failed', 'Integration CLI command failed.', { durationMs: Date.now() - startedAt, error: Object.assign(new Error('Integration CLI command failed.'), { code: result.error.code || 'INTEGRATION_COMMAND_FAILED' }), context: { client, argsHash } });
       throw result.error;
     }
+    const localRefFailure = client === 'codex' && String(result.stderr || '').trim() === 'Error: --ref is only supported for git marketplace sources';
     if (result.status !== 0 && !options.allowFailure) {
       const detail = String(result.stderr || result.stdout || '').trim();
-      this.log('error', 'integration.command_failed', 'Integration CLI command failed.', { durationMs: Date.now() - startedAt, error: Object.assign(new Error('Integration CLI command failed.'), { code: 'INTEGRATION_COMMAND_FAILED' }), context: { client, status: result.status, argsHash, outputHash: `sha256:${crypto.createHash('sha256').update(detail, 'utf8').digest('hex')}` } });
+      this.log('error', 'integration.command_failed', 'Integration CLI command failed.', { durationMs: Date.now() - startedAt, error: Object.assign(new Error('Integration CLI command failed.'), { code: localRefFailure ? 'CODEX_LOCAL_SOURCE_REF' : 'INTEGRATION_COMMAND_FAILED' }), context: { client, status: result.status, argsHash, outputHash: `sha256:${crypto.createHash('sha256').update(detail, 'utf8').digest('hex')}` } });
       throw new Error(detail || `${CLIENT_LABELS[client]} command failed with exit code ${result.status}`);
     }
-    this.log('info', 'integration.command_completed', 'Integration CLI command completed.', { durationMs: Date.now() - startedAt, context: { client, status: result.status, argsHash } });
+    const completed = result.status === 0;
+    const safeError = completed ? undefined : Object.assign(new Error(localRefFailure
+      ? 'Codex 把本地目录中的 @ 误当作 Git ref；请使用目录内相对路径重试。'
+      : 'Integration CLI command returned a failure.'), {
+      code: localRefFailure ? 'CODEX_LOCAL_SOURCE_REF' : 'INTEGRATION_COMMAND_FAILED',
+    });
+    this.log(completed ? 'info' : 'warn', completed ? 'integration.command_completed' : 'integration.command_failed', completed ? 'Integration CLI command completed.' : 'Integration CLI command returned a failure.', {
+      durationMs: Date.now() - startedAt, error: safeError,
+      context: { client, status: result.status, argsHash },
+    });
     return result;
   }
 
@@ -718,6 +728,16 @@ class IntegrationManager {
     this.execute('claude', ['plugin', 'marketplace', 'add', this.claudeMarketplaceSource]);
   }
 
+  addCodexMarketplaceSource(source, options = {}) {
+    // Codex 0.137 parses @ in an absolute npm path as a Git ref. Resolve a
+    // real local directory via cwd instead; rollback must use its own cwd.
+    let local = false;
+    if (path.isAbsolute(source) && source.includes('@')) {
+      try { local = fs.statSync(source).isDirectory(); } catch {}
+    }
+    return this.execute('codex', ['plugin', 'marketplace', 'add', local ? '.' : source], local ? { ...options, cwd: source } : options);
+  }
+
   ensureCodexMarketplace() {
     const target = path.resolve(this.codexMarketplaceAddSource);
     if (!this.dryRun) {
@@ -727,9 +747,9 @@ class IntegrationManager {
         if (path.resolve(existing).toLowerCase() === target.toLowerCase()) return;
         if (!this.isOwnCodexMarketplaceSource(existing)) throw new Error('同名 Codex 插件市场来源不是当前安装包，且无法确认属于本产品；未覆盖第三方来源。请检查 Codex 插件市场配置。');
         this.execute('codex', ['plugin', 'marketplace', 'remove', MARKETPLACE_NAME]);
-        const added = this.execute('codex', ['plugin', 'marketplace', 'add', target], { allowFailure: true });
+        const added = this.addCodexMarketplaceSource(target, { allowFailure: true });
         if (added.status !== 0) {
-          const restored = this.execute('codex', ['plugin', 'marketplace', 'add', existing], { allowFailure: true });
+          const restored = this.addCodexMarketplaceSource(existing, { allowFailure: true });
           throw new Error(restored.status === 0
             ? 'Codex 插件市场更换为当前安装包失败，已恢复原市场来源；请重试接入。'
             : 'Codex 插件市场更换为当前安装包失败，恢复原市场来源也未成功；请手动检查 codex 插件市场。');
@@ -737,7 +757,7 @@ class IntegrationManager {
         return;
       }
     }
-    this.execute('codex', ['plugin', 'marketplace', 'add', target]);
+    this.addCodexMarketplaceSource(target);
   }
 
   installClaude(options = {}) {

package/docs/leader-glm-workbench-playbook.md

@@ -70,7 +70,9 @@ Leader 负责知识检索、关键开发、接口决策、打包升级和最终
 
 Leader 只读取简洁检查点、相关 diff、测试结果和关键失败片段，不持续拉取完整思考流或整个事件历史。
 
-`0.13.2-rc.10` 已复现长历史截断后的游标重建缺陷；rc.11 的源码及独立包恢复测试已通过，实际产品升级与浏览器验收仍在进行。旧版本的快照序号和合成事件时间不能作为全会话游标或实际运行耗时证据；优先读取轻量状态、真实审计时间及操作收据，不因 UI 没有新消息就重复派发任务。
+`0.13.2-rc.10` 已复现长历史截断后的游标重建缺陷；修复保留在当前 rc.13，统一产品 rc.6 安装版的桌面、故障和重启验收已通过。旧版本的快照序号和合成事件时间不能作为全会话游标或实际运行耗时证据；优先读取轻量状态、真实审计时间及操作收据，不因 UI 没有新消息就重复派发任务。
+
+本轮已实际并行三条 GLM 检查线：安装版八项回归、真模型记忆十项闭环、包内容与隔离原生安装。Leader 独立核对每份安装收据与模块版本，不只接受 GLM 的最终回答。三条线均 idle 后才升级主实例；性能测试也在其他重任务结束后单独执行。旧的 Workbench contextId 可能不在当前项目列表中，升级前还应核对自己已派发的会话，而不是只检查当前筛选项目。
 
 ## 审查与放行
 

package/docs/release-5.0.16-acceptance.md

@@ -2,6 +2,42 @@
 
 ## 当前结论
 
+正在准备 `5.0.16-rc.7`，纳入引擎 `0.2.7-rc.8` 的真实主题片段遗漏修复，其他三个模块保持已锁定版本。源码修复已通过固定真实向量质量集及双 Node 回归；新安装包仍须复测，不能将 rc.6 的结果记为 rc.7 通过。latest 仍为 5.0.14。
+
+rc.6 桌面回答的人工核对发现：已有文档 `changes/9aec087aa155.md` 含单写者 Patch 原文，但注入上下文只含标题和概述，旧验收只查 SHA 而漏报。GLM 独立复现；实际 rc.6 `topic-context` 失败记录保留。最小修复保持每文档两段和范围／正文安全校验：已识别 SHA 仅约束提交来源，不再参与主题词评分；该提交内按其余主题选择片段，并补中英引擎、晋升、单写者别名。新增发布必测 `topic-context24`；真实网页发送同时检查原始事实送达及真实回答引用该事实，不能只凭 SHA 判通过。候选现为 30 项门禁，rc.6 原 28 项通过不抵消新增的真实失败。
+
+`5.0.16-rc.6` 已发布 npm `next`、官方下载并保留现有 v5 数据升级到本机。其四模块为 Workbench rc.13、引擎 rc.7、vector-hub rc.8、bridge 0.7.2。Codex 原生 Hook 审核后的模型送达仍未通过；正式包下载、正式升级和日常 `latest` 更新验收尚未完成。
+
+本机运行 rc.6（PID 30924，5757），保真升级保留 7 个项目、既有历史、知识、记忆、配置及 D 盘索引，官方下载字节核对通过。实际“Agent 接入／修复”操作 `op-92a4925f9e904f7584fda255cf048a87` 成功接线四客户端。Codex 实际插件 MCP 已完成 initialize、版本与六工具检查；原生 Hook 为 modified，测试在模型调用之前停止，未代写信任记录。
+
+### rc.6 已核对结果
+
+| 范围 | 结果与证据 |
+|---|---|
+| 官方下载 | 收据 `kb-registry-product-pWscTw/registry-installation.json`；sourceCommit `0f052cf6d3e380dcc23a7bf6d8ec96daa4f7f7c4`；主包 305 文件；integrity `sha512-BsR64nrciugXOEkrnuXjG46ceX5kicqnHhjNZ6QbOTMZlamuF3SZvvhIEtcsCa30i9ToOreidigJMRMEkmTUbQ==` |
+| 冻结源码 | 外壳 Node 22/24 各 139/139；引擎各 169 通过、1 项 Windows 符号链接权限跳过；Workbench 365、vector-hub 73、bridge 30 的已锁定同提交源码结果保持有效 |
+| 安装版桌面 | 正常网页、一次 503 恢复、故障、生命周期共八项，Node 22/24，全部绑定 rc.6 收据；1920×1080 |
+| 真模型记忆 | MiniMax 真实提取、项目／领域／全局范围、确认编辑、1536 维向量、流式回答、单／并发提交及重启保真 10/10；`scoped-memories/run-1792021974460/report.json` |
+| 真向量质量与性能 | 固定合成留出集 Recall@5=1、MRR=0.9667；8 项目／1000 文档热查询 P95=669.0993ms，单独运行，四次查询 embedding；不等于另一台电脑私有语料验收 |
+| 二次开发 | 实际 search/get → 修改前引用 → 小改动与测试 → 真实 commit → 自动晋升与索引 → 再检索通过；`retrieval-rc6-secondary24-1792022320274.json` |
+| 真实页面与知识面 | UI 发送 → 真模型 → 28 条文本增量与引用 → 后端最终 turn；API／CLI／MCP 事实、引用一致；非空 embo-01 索引 1536 维 |
+| 原生客户端 | Claude Code、ZCode 首次普通开发请求自动收到当前事实与产品记忆，实际代码采用记忆；Claude 提交后维护及下次检索通过。现有真实 knowledge-engine 项目 Claude 只读上下文通过、工作树保持不变。OpenCode 实际知识 CLI 调用与引用通过，不宣称自动前置注入 |
+| Codex 安装器 | GLM 独立用 npm 包真实 installCodex 在隔离 CODEX_HOME 下验证 Node 22/24：scoped 路径、本地目录来源、幂等、版本及文件匹配通过；第三方与 trust 未改。该项不代替原生模型送达 |
+
+收据根为 `knowledge-engine/.agent-state/acceptance/system-regression/`，候选汇总为 `retrieval-release-5.0.16-rc.6.json`。原生 Codex 首失败 `retrieval-rc6-codex-real24-1792022749447.json` 明确为 modified 而非 trusted，模型尚未调用。
+
+OpenCode 首次失败保留：工具实际返回了权威的精确提交事实，但旧验收硬编码 `hybrid+markdown-truth`，并要求最新提交包含单写者规则。测试修正允许合法文本事实后端，改为摘要实际返回事实；同时加强 matching tool-id、顺序、项目、服务来源、完整 SHA 与路径检查。4000 字符显示截断仅接受已完整的第一条引用，不把文本检索称为向量成功；独立向量门禁不变。首次红测试与真实复测分别保存。
+
+Leader 另有一次补验参数错误：`--verify-only` 未配 `--resume`，重置了受控 fixture 的提交验收报告，未改用户数据或知识。保留事故记录，重新用唯一 `rc6-leader1` 轮次执行三次真实提交，不重造原成功报告。原十项记忆报告及 GLM 证据仍保留。详情见 `glm-plan-5.0.16/rc6-leader-harness-incident.json`。
+
+## 历史批次
+
+rc.5 官方安装收据 `kb-registry-product-2PqRja/registry-installation.json` 已验证。五仓库冻结回归在 Node 22/24 均通过：外壳 138、Workbench 365、vector-hub 73、bridge 30；引擎 169 通过、1 项 Windows 符号链接权限跳过。安装版正常页面、一次 503 恢复、故障和生命周期八项均通过。真实 MiniMax 记忆、流式、单/并发提交、1536 维索引及重启 10 项通过；固定留出集 Recall@5=1、MRR=0.9667，单独热查询 P95=692.9615ms。
+
+已通过保护备份与 npm 全局升级把本机安装为 rc.5，7 个现有项目、43 个历史文件、565 个 D 盘索引文件及配置保持不变，运行字节与官方下载包一致。首次本机客户端修复的 Codex 失败操作 `op-29b0bc154aa94f43aa2dc759cf898697` 保留：隔离原生 CLI 复现绝对路径中的 `@` 被当作 ref，目录内 `add .` 成功；随后仅通过原生命令恢复本产品市场，正常修复操作 `op-d6d22efd9e534b1f9d06cd0ba06680cb` 成功。未修改信任记录。
+
+Codex 声明入口的真实 MCP initialize/六工具/resolve/search/get 已通过；该结果不等于 Codex 原生模型任务自动收到知识。当前 Hook 为 modified，尚未运行此模型门禁。Claude、ZCode、OpenCode 接线已完成，实际原生送达、二次开发及正式包验收仍需完成。用于实际 Codex 路径回归的 GLM 测试文件经 Leader 修正为跨平台唯一临时目录，避免共享目录清理；首次红测试保留。
+
 2026-10-14 开始执行本轮计划。状态：**实施中，未完成系统验收，不更新 latest**。
 
 2026-10-15 收敛到候选 `5.0.16-rc.5`，精确锁定 Workbench `0.13.2-rc.13`，其余模块保留 rc.4 的已验收运行文件。Leader 负责关键开发与交付，GLM 独立并行故障测试、回归和审查；不新增产品功能。
@@ -10,7 +46,7 @@ rc.4 官方安装收据 `kb-registry-product-NPyWjR/registry-installation.json`
 
 rc.4 首次 Node 22 网页失败的历史原因仍无法确定，后续正常路径重复通过。另以一次 `/profiles` HTTP 503 在真实 Workbench iframe 中稳定复现了「首次失败后模型列表一直为空且不再请求」；两次失败记录保留。Workbench rc.12 已修复这一缺陷类，Leader 冻结源码回归 Node 22/24 各 362/362；新整包必须通过同一故障注入用例才能计为恢复。
 
-用户当前仍运行 rc.1。其六条索引失败已通过公开索引阶段重试恢复，知识正文、晋升时间和分析运行 ID 不变；原 `532d` 运行在操作前已成功，未重复分析。候选安装、原生客户端、新版保真升级与正式发布门禁仍待完成。
+rc.4 阶段用户仍运行 rc.1。其六条索引失败已通过公开索引阶段重试恢复，知识正文、晋升时间和分析运行 ID 不变；原 `532d` 运行在操作前已成功，未重复分析。当时的候选安装、原生客户端、新版保真升级与正式发布门禁仍待完成。
 
 GLM 独立审查复现 rc.12 连续保存供应商时复用保存前快照，Leader 修复为保存后等待旧读取结束、再发起可共享的新读取；普通菜单仍 single-flight。两条新竞态测试先失败后修复。菜单异步重绘清空过滤词属于已记录的低风险体验限制，未作为核心修复扩展。
 

package/module-runtime-manifest.json

@@ -9,9 +9,9 @@
     "plugins/project-knowledge/hooks/codex.json": "216e03c07295606ef6ebb2c4f669ad0d790b5e7c4f3f34600488033db75e4239",
     "plugins/project-knowledge/scripts/context-hook.cjs": "da666153ad5723592cce42d25337ae649f7d93e43fab76b3c6d1263933de063f",
     "plugins/project-knowledge/scripts/mcp-launcher.cjs": "7c68830b5c73eb53ef030756a4de33987f7eab6b1a6cc15602835aac3f954893",
-    "plugins/project-knowledge/.claude-plugin/plugin.json": "c23181cb440688eedd0a6e307ceda43a5e5553d847d4589ad14780d548b57bd3",
-    "plugins/project-knowledge/.codex-plugin/plugin.json": "991b0a4ae85318968e96b511508cae6a359c3d936b5d5bc99105570e95b171f0",
-    "plugins/project-knowledge/.mcp.json": "488fba785e30d53071b433bbf6339c8b4bd7733a7838c3d1e925cc4d1a86af45"
+    "plugins/project-knowledge/.claude-plugin/plugin.json": "280f0e6a4a28ff651687aaa7580a2546a8fdb2dd9228c7927d881105ac8ec81c",
+    "plugins/project-knowledge/.codex-plugin/plugin.json": "d78289598df58e456404dc806d56cd96d7757f2f1467bfff1e0eedbf1e016619",
+    "plugins/project-knowledge/.mcp.json": "c6206be7c504dffc6e0116cbdfb76bef5324a33331da35d131fede5c88335239"
   },
   "modules": {
     "terminal": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/project-knowledge",
-  "version": "5.0.16-rc.5",
+  "version": "5.0.16-rc.7",
   "description": "Knowledge base manager with Git integration, AI-driven analysis, and bilingual (zh-CN/en-US) knowledge output",
   "main": "_site/server.js",
   "scripts": {

package/plugins/project-knowledge/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "project-knowledge",
   "hooks": "./hooks/claude.json",
-  "version": "5.0.16-rc.5",
+  "version": "5.0.16-rc.7",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "project-knowledge",
-  "version": "5.0.16-rc.5",
+  "version": "5.0.16-rc.7",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.mcp.json

@@ -8,7 +8,7 @@
         "const fs=require('fs'),path=require('path'),os=require('os');const PKG='@sanqianx/project-knowledge',SC='project-knowledge/integration-runtime/v1';let f='';const root=process.env.CLAUDE_PLUGIN_ROOT||process.env.PLUGIN_ROOT;if(root){f=path.join(root,'scripts','mcp-launcher.cjs');if(!fs.existsSync(f))f=''}if(!f){const dd=process.env.KB_DATA_DIR||path.join(os.homedir(),'.project-knowledge-v5');try{const bp=path.join(dd,'integration-runtime.json');const st=fs.statSync(bp);if(st.isFile()&&st.size<=32768){const b=JSON.parse(fs.readFileSync(bp,'utf8'));if(b&&b.schema===SC&&b.packageName===PKG&&typeof b.packageRoot==='string'&&path.isAbsolute(b.packageRoot)){const c=path.join(b.packageRoot,'plugins','project-knowledge','scripts','mcp-launcher.cjs');const rr=fs.realpathSync(b.packageRoot),cr=fs.realpathSync(c);const rel=path.relative(rr,cr);if(rel&&rel!=='..'&&!rel.startsWith('..'+path.sep)&&!path.isAbsolute(rel)&&fs.statSync(cr).isFile())f=cr}}}catch(e){}}if(!f){console.error('[project-knowledge-mcp] 未能通过受信任插件根或已验证的安装绑定定位启动器，已停止；不访问网络，也不加载工作目录源码。');process.exit(127)}require(f);"
       ],
       "env": {
-        "KB_PLUGIN_VERSION": "5.0.16-rc.5"
+        "KB_PLUGIN_VERSION": "5.0.16-rc.7"
       }
     }
   }

package/vendor-manifest.json

@@ -3,11 +3,11 @@
   "modules": {
     "knowledge-engine": {
       "name": "@sanqianx/ai-coding-knowledge-engine",
-      "version": "0.2.7-rc.7",
+      "version": "0.2.7-rc.8",
       "root": "_modules/knowledge-engine",
       "files": {
-        "README.md": "399d94bdb9b6844b9c1965799400212c99bcbbf872cdec953fba09ba4eea7acd",
-        "package.json": "576b6b849d4fecec421c639fa7a3c84ce6b9ee70686baaad48d0153300b113f1",
+        "README.md": "3cb4388840732e3ceba3e7ab027248815387cdd35f8ca1e515c38038a7aef710",
+        "package.json": "f1386b7d2d7bc3c26130ba55ffffd9ba4626b718b3317c0f9f8bb911db1fcdb0",
         "src/analysis-contract.js": "913a63b63fb4a4a9df071f95bbeb8f8c40ef87e2f8445ab0742086ced70ffbf7",
         "src/analysis-output.js": "95a3c19dcc9ab85d1dba7fee5b9aec80f9c000dfba89da3fd0be25a81e2fb680",
         "src/analysis-worker.js": "a105cabe6e1573b2d986b1e7a5aaf615e2fb53524156fc8e4e2c0a71f2c97e55",
@@ -21,8 +21,8 @@
         "src/knowledge-targets.js": "aa44ec285d16d7b1c0b63bf084058a1d6f867fa9929c753b6b0cbb24f7b20ee2",
         "src/memories.js": "bba8e19380e906a80fd3e5d2a7f809d940466924578c8187d1f376f906f10f2b",
         "src/retrieval-policy.json": "3205fb4eb114a839a74f902e6fae6a61e1460958e5a9d7e29add32b60ba4e05a",
-        "src/retrieval-ranking.js": "422c068ea995d4f8c7e1ffb64b4b72921017862add74da8996b1827c6c64c23d",
-        "src/retrieval.js": "341c558ffd53873744cfb36139c84b92775886c0e41804e85f93aa9004d91bd9",
+        "src/retrieval-ranking.js": "e27a869a3b2f3dc96763f6a12c988b42098e461362b456f8cbe26ef5e37c3d21",
+        "src/retrieval.js": "32f17494eb838cc6b209df35dbe33a155c1728420c9e501a4974c4f2a1b33ceb",
         "src/runtime/README.md": "9be676eca76a7857b34d7357194e6f0ee733c22e61d962d53984715dbec7f673",
         "src/runtime/atomic-file.js": "9846b4b69db5ded811acf19a1181ef93615d93efaa542b858e552a7f3124ad23",
         "src/runtime/automation-config.js": "6498c5397be12b155829740595a1553d4dcd6eaa7db6ced3ef88fdc60218f00e",
@@ -47,7 +47,7 @@
         "ui/app.js": "33a2ba38f0dafbbb2e30a1eb3fc93476bfcaf528e124e1a9b2edd2fb69221e9e",
         "ui/index.html": "ce3565cfefd4838b11d37a91a906ef26ca5a1834844fe3f7c897b56851a3c418"
       },
-      "sourceCommit": "61e5205c8c7a37645fa2be8c9e3cb2d3c250cc31"
+      "sourceCommit": "dcdeb3d1589cae2baf9a3445261acc990a5b0702"
     }
   }
 }