@sanqianx/project-knowledge 5.0.9-rc.13 → 5.0.9-rc.14

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "project-knowledge",
-      "version": "5.0.9-rc.13",
+      "version": "5.0.9-rc.14",
       "source": "./plugins/project-knowledge",
       "description": "Search durable project decisions and implementation history through MCP."
     }

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [5.0.9-rc.14] - 2026-10-11
+
+- Vendor engine 0.2.3-rc.7: isolated maintenance consumes frozen evidence even
+  while the user edits or commits in the source repository. Do not mistake live
+  development for analyzer writes; retain live-source protection for custom
+  analyzers without the isolation capability.
+- Add a paused child-worker regression covering another commit, uncommitted
+  drafts, frozen attribution, same-project FIFO and unchanged path/tool guards.
+- Existing-user npm acceptance verified real MiniMax streaming, retained v5
+  history/configuration, D-root indexes and index-only e9f6560 recovery. Preserve
+  the actual rc.13 PROJECT_BUSY failure and require a real mid-analysis commit
+  retest from downloaded rc.14 before stable promotion.
+
 ## [5.0.9-rc.13] - 2026-10-11
 
 - Give native Agent session creation and input setup a bounded 90-second proxy

package/_modules/knowledge-engine/README.md

@@ -41,6 +41,8 @@ node src/bin.js serve [--port 5790] [--host 127.0.0.1] [--data DIR]
 
 本模块零新增 npm 依赖、CommonJS、Node ≥18；无头 Agent SDK 由宿主已安装的 Workbench/SDK 提供，缺失时明确失败，不退回假分析。完整产品的 Node 门槛为 ≥22。
 
+隔离无头分析只读冻结证据、只写 staging，不以开发工作树的前后变化判定失败。用户可以在分析中继续编辑或提交；当前任务仍归属冻结提交，后续提交按项目 FIFO 执行。未声明隔离冻结证据能力的自定义分析器仍保留源码变更检查；目录越界、工具权限和晋升校验不变。
+
 每次真实分析在只读证据区冻结已有知识的目标路径与哈希清单，覆盖未被检索选中的文件；重试复用该清单。Agent 不得把“未检索到”当作“文件不存在”，也不得用部分片段覆盖完整旧文档；无法保留原文时只追加当前提交的变更记录。已有目标仍由晋升校验拒绝非法 create，不自动改为覆盖。清单仅保存元数据，不把整个知识树复制到每次运行中。
 
 ## API

package/_modules/knowledge-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/ai-coding-knowledge-engine",
-  "version": "0.2.3-rc.6",
+  "version": "0.2.3-rc.7",
   "description": "Knowledge engine module for project-knowledge: commit-boundary triggered knowledge analysis/generation (trigger plane) and retrieval for development assistants (retrieval plane).",
   "license": "Apache-2.0",
   "main": "src/server.js",

package/_modules/knowledge-engine/src/coordinator.js

@@ -50,7 +50,7 @@ class EngineCoordinator extends EventEmitter {
     this.retrieval = new EngineRetrieval({ layout: this.layout, projectStore: this.projectStore, registryStore, store, memories: this.memories, vectorUrl: this.vectorUrl });
     this.conversations = new ConversationStore({ layout: this.layout, projectStore: this.projectStore });
     this.analyzer = options.analyzer || new HeadlessAnalyzer({ resolveProfile: id => this.profiles.get(id) || this.profiles.get('default'), timeoutMs: options.timeoutMs });
-    this.promotion = new KnowledgePromotionService({ layout: this.layout, logger: this.diagnostics, projectStore: this.projectStore, analyzer: { runClaim: async input => {
+    this.promotion = new KnowledgePromotionService({ layout: this.layout, logger: this.diagnostics, projectStore: this.projectStore, analyzer: { sourceReadMode: this.analyzer.sourceReadMode, runClaim: async input => {
       const run = this.currentRun(input.projectId);
       store.updateRun(run.runId, { analysisRunId: input.claim.runId, phase: 'analyzing' });
       this.notify(run, '正在分析冻结的提交证据');

package/_modules/knowledge-engine/src/headless-analyzer.js

@@ -6,6 +6,7 @@ const { finalizeAnalysisOutput } = require('./analysis-output');
 const { freezeKnowledgeTargets } = require('./knowledge-targets');
 
 class HeadlessAnalyzer {
+  get sourceReadMode() { return 'isolated-frozen-evidence'; }
   constructor({ resolveProfile, timeoutMs = 15 * 60 * 1000, workerPath = path.join(__dirname, 'analysis-worker.js') } = {}) { this.resolveProfile = resolveProfile; this.timeoutMs = timeoutMs; this.workerPath = workerPath; this.children = new Map(); this.closed = false; }
   async runClaim(input) {
     if (this.closed) throw Object.assign(new Error('分析服务正在关闭。'), { code: 'WORKER_STOPPED', retryable: true });

package/_modules/knowledge-engine/src/runtime/knowledge-promotion.js

@@ -312,7 +312,11 @@ class KnowledgePromotionService {
     if (!claim || claim.projectId !== projectId || !claim.runId || !claim.commitSha) throw new DomainError('INVALID_ARGUMENT', 'Active claim is required for knowledge promotion.');
     const operationId = input.operationId || claim.operationId || createId('op');
     const stagingPath = this.prepareStaging(projectId, claim.runId);
-    const beforeSource = await gitStatus(config.repoPath);
+    // The isolated worker cannot read or write the live repository. A user may
+    // keep developing while it consumes frozen evidence; live status is neither
+    // its input nor proof of worker writes. Keep the guard for other analyzers.
+    const verifyLiveSource = this.analyzer?.sourceReadMode !== 'isolated-frozen-evidence';
+    const beforeSource = verifyLiveSource ? await gitStatus(config.repoPath) : null;
     try {
       if (!this.analyzer || typeof this.analyzer.runClaim !== 'function') throw new DomainError('INVALID_ARGUMENT', 'Knowledge analyzer is unavailable.', { status: 503, retryable: true });
       const analyzerResult = await this.analyzer.runClaim({
@@ -329,7 +333,7 @@ class KnowledgePromotionService {
         }),
       });
       if (analyzerResult && analyzerResult.ok === false) throw new DomainError('INVALID_ARGUMENT', analyzerResult.error || 'Knowledge analyzer failed.', { status: 500, retryable: true });
-      const afterSource = await gitStatus(config.repoPath);
+      const afterSource = verifyLiveSource ? await gitStatus(config.repoPath) : null;
       if (beforeSource != null && afterSource != null && beforeSource !== afterSource) {
         throw new DomainError('PROJECT_BUSY', 'Source repository changed during knowledge analysis.', { status: 409, retryable: true });
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/project-knowledge",
-  "version": "5.0.9-rc.13",
+  "version": "5.0.9-rc.14",
   "description": "Knowledge base manager with Git integration, AI-driven analysis, and bilingual (zh-CN/en-US) knowledge output",
   "main": "_site/server.js",
   "scripts": {

package/plugins/project-knowledge/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "project-knowledge",
-  "version": "5.0.9-rc.13",
+  "version": "5.0.9-rc.14",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "project-knowledge",
-  "version": "5.0.9-rc.13",
+  "version": "5.0.9-rc.14",
   "description": "Read durable project decisions and implementation history from Project Knowledge.",
   "author": {
     "name": "SanQianX",

package/plugins/project-knowledge/.mcp.json

@@ -6,7 +6,7 @@
       "args": [
         "-y",
         "--package",
-        "@sanqianx/project-knowledge@5.0.9-rc.13",
+        "@sanqianx/project-knowledge@5.0.9-rc.14",
         "project-knowledge-mcp"
       ]
     }

package/vendor-manifest.json

@@ -3,19 +3,19 @@
   "modules": {
     "knowledge-engine": {
       "name": "@sanqianx/ai-coding-knowledge-engine",
-      "version": "0.2.3-rc.6",
+      "version": "0.2.3-rc.7",
       "root": "_modules/knowledge-engine",
       "files": {
-        "README.md": "efcef635df01736a8672219642a76175f3059d23b466f529140d791ec75000d5",
-        "package.json": "09e32aacd4ec5c3b596e60f3210f62515c625844e31866261c5596937195db30",
+        "README.md": "351d971a522253c5dceb424b9f1a9c2d9427cd01c2b76d0c37fbc17b76f71ba3",
+        "package.json": "2da4b42d29e6742ea4ac8f285ffc49da66e0ed44d1d0d136cfab1e1b485093b4",
         "src/analysis-contract.js": "fee063967d32eefc955cf0729f7dc8cb31bd690b85e22471c9059494a599c77a",
         "src/analysis-output.js": "95a3c19dcc9ab85d1dba7fee5b9aec80f9c000dfba89da3fd0be25a81e2fb680",
         "src/analysis-worker.js": "a105cabe6e1573b2d986b1e7a5aaf615e2fb53524156fc8e4e2c0a71f2c97e55",
         "src/bin.js": "22208907431d0f3a971a669c7e5eb44b3b7af9bbb36fd7ba17c3b90c4288bd70",
         "src/bridge-client.js": "ae0dba21e4286694bcd9e064ca36564ec997969ae1eb1ce4f8a6665e447cbffe",
-        "src/coordinator.js": "1df096060faa83245c49b65a861f32cdaeeb7a190b94abf2ad6477151d7ca2ff",
+        "src/coordinator.js": "1d515d891a781fbad3ce7df39fa083dda2663a8bcd5610ff52dc8c307e2c5fbd",
         "src/diagnostics.js": "f7b516ace61a1e9faaa6876930b9e2e258499a25857d1203f4e53d28bfd0fa1a",
-        "src/headless-analyzer.js": "2f345adee332c003ecb9a1e01eac4fa69d8802b4e6dd9effb03ac3cb19aa3e48",
+        "src/headless-analyzer.js": "d181d50cd7756d217d7d66c4a4c4e528453c8527dc6fe413a19788a47ccbf323",
         "src/index-request.js": "78f26b872299005499fff4f2d1f9e8f986784f2ff36a5cf2be2b1e7b7c7d9378",
         "src/knowledge-targets.js": "aa44ec285d16d7b1c0b63bf084058a1d6f867fa9929c753b6b0cbb24f7b20ee2",
         "src/memories.js": "0a8667e6daba99fa5022393951a28e96cdadf98af85b6af9a6be96c7f4e896fc",
@@ -33,7 +33,7 @@
         "src/runtime/conversation-store.js": "644318f9c04376a3317ced240dd94afa99a79631f0ecc394c5aa298ae2bc0474",
         "src/runtime/evidence-bundle.js": "33d4614849d5e1d69aba8b75c3a43c18b7b6f94e5c78654c82ef631331cc94cc",
         "src/runtime/git-runner.js": "b74fe197bd4dcf3e70635ef7b1f2615edf965c1d9a3ffe5406aabd41b76d74a9",
-        "src/runtime/knowledge-promotion.js": "c24aba505caf11cdc8faba763beffc65956c1330ef28ed5fbd6ae16eac640fa6",
+        "src/runtime/knowledge-promotion.js": "892a227921ca399e80ea7b3991bfd13de0ffc221c7a0562393f1e5d33c2d00fa",
         "src/runtime/knowledge-retrieval-service.js": "75444f495a9ad0720af0e57b8d27d7ac1325c78a768f4f68ebd86ebc2524945e",
         "src/runtime/layout.js": "c48fa1db62e5df1edefe13218e470c5ceea4ef2781293512c2c18e5c2ba0c7e9",
         "src/runtime/markdown-knowledge-indexer.js": "4d6b5b955849d274ca0614ef030c94526da7c39ab0874f02c168d0681f5b1406",