@yottameta/yotta-memory 0.23.1 → 0.23.3

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+# Changelog
+
+## v0.23.3 (2026-11-05)
+
+- 质量门禁与打包文档修正；发布前测试接入。
+- 发布门禁批次：发布工作流在 `npm publish` 前执行版本/发布面检查与 `npm test`；测试版本断言改为从 `package.json` 读取；补齐测试脚本。
+- 打包与文档：发布包内容、CHANGELOG / README 与交付说明对齐；规则摘要与注册清单同步。
+
+## v0.23.2 (2026-11-01)
+
+- 安装器 containment：目标根 / 嵌套链接 fail-closed；受管 Hub 链接解析真实目标；精简安装器同口径。
+
 ## v0.23.1 (2026-10-25)
 
 - **ClawHub 英文门面（无引擎变更）**：发布副本改为英文优先的双语 `summary` / `description`（英文在前、中文关键词保留在后）并补英文 tags，上线后 ClawHub 技能卡摘要由纯中文变为英文优先；构建与校验由独立发布副本流程覆盖，中文检索优化字段只增不减。

package/README.md

@@ -32,7 +32,7 @@
 ## Docs and release notes
 
 > 📖 The user-facing operations manual lives in [USER_GUIDE.md](USER_GUIDE.md).
-> 🆕 **v0.23.1 (ClawHub storefront)**: the ClawHub listing now ships an English-first bilingual summary and description (a dedicated `clawhub-dist/yotta-memory` publish copy), and the README gained the three usage cases above. Commands, options, output and the memory store format are unchanged.
+> 🆕 **v0.23.2 (ClawHub storefront)**: the ClawHub listing now ships an English-first bilingual summary and description (a dedicated `clawhub-dist/yotta-memory` publish copy), and the README gained the three usage cases above. Commands, options, output and the memory store format are unchanged.
 > 🆕 **v0.18.1 (distillation provenance + absolute dates + consolidation markers + rule-promotion suggestions + write discipline)**: `distill` now emits typed extraction lists (event / lesson / todo / growth / boundary-rule / other) with per-item `[source: file#L<a>-L<b>]` anchors, measured quality metrics and a skipped/boundary list, plus structured `--json`; `consolidate` rewrites relative dates ("yesterday / last week / this month / this year") into absolute dates based on each entry's `created` date and appends a consolidation marker to archived copies (`--undo` strips it); `maintain --rules` prints read-only "repeat pitfalls → promote to a rule" suggestions (default threshold 3, never writes BOUND automatically); the Memory Doctrine gained a 6-level conflict authority order and three write-discipline rules.
 
 > 🆕 **v0.18.0 (hit tracking + capacity water level + consolidate gate + context audit)**: `recall` / `explain` / `feedback --useful` / `context` record local hit metadata (`hit_days`, retained 90 days by default; `hit_queries` stores only an 8-hex query fingerprint, up to 12 slots, never the query text) inside the memory file, so it travels with encryption / backup / export. Disable globally with `config set usage_enabled false` or per call with `--no-usage`; read-only commands and cross-owner private entries never write hits. New read-only `maintain --capacity [--json]` reports water level, 30/90-day activity, LRU/LFU eviction candidates (30-day cooldown; immutable / BOUND / `evergreen` / `pinned` exempt) and promotion suggestions (≥3 hits across ≥3 distinct queries; commands only, nothing is changed automatically). `archive` respects cooldown and evergreen tags, with `--force` to override those two exemptions. `consolidate` now defaults to `--propose` (structured report + `--json`); `--apply` requires an interactive confirmation token, or explicit `--yes` in non-interactive runs, and shows a one-time data-lifecycle notice. `doctor` scale checks gained `scale_info_*` thresholds and per-metric `ok / info / warning` levels (`doctor.ok` still only follows critical issues). New `context --audit [--from <file|->] [--json] [--gate N]` checks whether compressed-away content was persisted, printing missing items and `remember` suggestions without writing anything. `archive --dry-run` now truly previews (no file moves, no snapshot, no audit), a no-candidate run no longer takes a whole-store snapshot, and `archive --json` emits a structured report. On the MCP side this release adds read-only / preview inputs only (`archive.dryRun`, `maintain.capacity`, `context.audit` with inline `auditText`, and a propose-only `consolidate` tool), while `archive --force` and `consolidate --apply / --undo` stay CLI-only. Previous v0.17.4: `rename` removed flat/layered same-sequence collisions (cross-layout fail-closed, destructive guard, audit).

package/README.zh-CN.md

@@ -22,7 +22,7 @@
 </p>
 
 > 📖 面向用户的操作手册见 [USER_GUIDE.md](USER_GUIDE.md)。
-> 🆕 **v0.23.1（ClawHub 门面）**：ClawHub 上的技能卡改为英文优先的双语摘要与描述（新增 `clawhub-dist/yotta-memory` 专属发布副本），README 首屏新增上面三条使用案例；命令、参数、输出与记忆库格式全部不变。
+> 🆕 **v0.23.2（ClawHub 门面）**：ClawHub 上的技能卡改为英文优先的双语摘要与描述（新增 `clawhub-dist/yotta-memory` 专属发布副本），README 首屏新增上面三条使用案例；命令、参数、输出与记忆库格式全部不变。
 > 🆕 **v0.20.0（上下文分页 + 画像驱逐修复）**：`memory.hook` 的 PREF 驱逐空转已修复——hook / paging 决策生效时，画像段落按实时可读条目渲染并套用同一套过滤；自我接入档案不进候选、不可驱逐。新增 `context.paging`：仅在显式 `--budget` 时调用，hook 先过滤、paging 再排序与分页；`drop` 始终安全应用，`order` 仅在 `complete:true` 且未截断时应用。`context --json` 新增 `paging` 块，`--explain` 增加 `[paging]` 轨迹。配置与协议见 `references/provider-protocol.md`。
 > 🆕 **v0.18.1（蒸馏溯源 + 日期绝对化 + 巩固标记 + 规则晋升建议 + 写入纪律）**：`distill` 新增分类型提取清单（事件 / 教训 / 待办 / 成长 / 规则边界 / 其他）+ 逐条 `[溯源: 文件#L<a>-L<b>]` + 实测质量指标 + 跳过与边界，`--json` 输出结构化报告；`consolidate` 摘要按条目 `created` 把「昨天 / 上周 / 本月 / 今年」写成绝对日期，归档副本写入巩固标记（`--undo` 剥离还原）；`maintain --rules` 只读给出「重复踩坑 → 建议升级为规则」（默认阈值 3，不自动写 BOUND）；记忆守则新增冲突权威顺序 6 层与写入纪律 3 条。
 

package/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: yotta-memory
 description: 元忆 —— 有权限边界的文件式智能体记忆。文件式、零依赖、可 diff/可回滚：让任何 AI 智能体活过会话，开工 recall 恢复上下文、重要信息 remember 落盘、收工归档。类型体系 FACT（公共共享）/ PREF / BOUND / COMMIT（私密隔离）。触发：记住、别忘了、记一笔、记忆、remember、recall、跨会话、上次说到、续测、交接、归档、记忆盘、共享记忆、局域网记忆、画像、开工上下文、长期理解摘要、近期走廊、会话闭环、记忆守则、profile、context、越用越懂、语义检索、反馈、维护、蒸馏、feedback、maintain、distill、explain、自我学习、自我进化、自我提升、查看平台分页、recall 候选预过滤、任务相关记忆、--focus、--embedding、压缩遗忘、consolidate、周期摘要、自动合并、分类型衰减、回滚、备份、backup、防误删、doctor、事务快照、基线探针、恢复演练、记忆库安全扫描、scan、命中打点、容量水位、--capacity、--propose、上下文压缩审计、context --audit
-version: 0.23.1
+version: 0.23.3
 license: MIT
 ---
 

package/bin/install.js

@@ -108,7 +108,12 @@ function skillVersion() {
     const data = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf8'));
     return data.version || null;
   } catch (_) {
-    return null;
+    try {
+      const version = fs.readFileSync(path.join(PKG_ROOT, 'VERSION'), 'utf8').trim();
+      return version || null;
+    } catch (_) {
+      return null;
+    }
   }
 }
 
@@ -178,6 +183,63 @@ function assertSafeTarget(target) {
   if (rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel))) {
     throw new UsageError('目标目录不能在技能源目录内（防止自装自毁）');
   }
+  if (isDirectLink(target) && !isManagedHubTarget(target)) {
+    throw new TargetError('目标目录是符号链接或 junction，拒绝跟随: ' + target);
+  }
+}
+
+function isDirectLink(target) {
+  let stat = null;
+  try { stat = fs.lstatSync(target); } catch (_) { return false; }
+  if (stat.isSymbolicLink()) return true;
+  try {
+    const real = fs.realpathSync(target);
+    const parentReal = fs.realpathSync(path.dirname(target));
+    const norm = (value) => process.platform === 'win32'
+      ? path.resolve(value).toLowerCase()
+      : path.resolve(value);
+    return norm(real) !== norm(path.join(parentReal, path.basename(target)));
+  } catch (_) {
+    return false;
+  }
+}
+
+function isManagedHubTarget(target) {
+  if (!isDirectLink(target)) return false;
+  try {
+    const real = fs.realpathSync(target);
+    if (path.basename(real) !== SKILL_NAME) return false;
+    const parent = path.dirname(real);
+    return fs.existsSync(path.join(parent, '.yotta-hub.json'))
+      || fs.existsSync(path.join(parent, '.yotta-links.json'));
+  } catch (_) {
+    return false;
+  }
+}
+
+function removeLink(target) {
+  try {
+    fs.unlinkSync(target);
+  } catch (_) {
+    fs.rmdirSync(target);
+  }
+}
+
+function safeRemove(target) {
+  let stat = null;
+  try { stat = fs.lstatSync(target); } catch (_) { return; }
+  if (isDirectLink(target)) {
+    removeLink(target);
+    return;
+  }
+  if (stat.isDirectory()) {
+    for (const name of fs.readdirSync(target)) {
+      safeRemove(path.join(target, name));
+    }
+    fs.rmdirSync(target);
+  } else {
+    fs.unlinkSync(target);
+  }
 }
 
 function shouldSkipCache(name, isFile) {
@@ -195,9 +257,18 @@ function copyDir(src, dst, topLevel) {
     const s = path.join(src, entry.name);
     const d = path.join(dst, entry.name);
     if (entry.isDirectory()) {
+      if (isDirectLink(d)) {
+        throw new TargetError('目标目录包含符号链接或 junction，拒绝写入: ' + d);
+      }
       fs.mkdirSync(d, { recursive: true });
+      if (isDirectLink(d)) {
+        throw new TargetError('目标目录包含符号链接或 junction，拒绝写入: ' + d);
+      }
       copyDir(s, d, false);
     } else if (entry.isFile()) {
+      if (isDirectLink(d)) {
+        throw new TargetError('目标文件是符号链接，拒绝写入: ' + d);
+      }
       fs.copyFileSync(s, d);
     }
   }
@@ -208,16 +279,18 @@ function copyDir(src, dst, topLevel) {
 // 不整目录删除、不跟随符号链接。
 function cleanResidue(target) {
   const removed = [];
+  const workTarget = isManagedHubTarget(target) ? fs.realpathSync(target) : target;
   let stat = null;
-  try { stat = fs.statSync(target); } catch (_) { return removed; }
+  try { stat = fs.lstatSync(workTarget); } catch (_) { return removed; }
   if (!stat.isDirectory()) return removed;
-  if (!fs.existsSync(path.join(target, 'SKILL.md'))) return removed;
+  if (isDirectLink(workTarget)) return removed;
+  if (!fs.existsSync(path.join(workTarget, 'SKILL.md'))) return removed;
   for (const name of TOP_SKIP) {
-    const p = path.join(target, name);
+    const p = path.join(workTarget, name);
     let entry = null;
     try { entry = fs.lstatSync(p); } catch (_) { continue; }
-    if (entry.isSymbolicLink()) continue;
-    fs.rmSync(p, { recursive: true, force: true });
+    if (entry.isSymbolicLink() || isDirectLink(p)) continue;
+    safeRemove(p);
     removed.push(name);
   }
   try {
@@ -233,10 +306,10 @@ function cleanResidue(target) {
   const walk = (dir) => {
     for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
       const p = path.join(dir, entry.name);
-      if (entry.isSymbolicLink()) continue;
+      if (entry.isSymbolicLink() || isDirectLink(p)) continue;
       if (entry.isDirectory()) {
         if (CACHE_DIRS.has(entry.name)) {
-          fs.rmSync(p, { recursive: true, force: true });
+          safeRemove(p);
           removed.push(path.relative(target, p));
         } else {
           walk(p);
@@ -247,7 +320,7 @@ function cleanResidue(target) {
       }
     }
   };
-  walk(target);
+  walk(workTarget);
   return removed;
 }
 
@@ -255,13 +328,6 @@ function installTo(dest, opts) {
   if (!dest || typeof dest !== 'string') throw new UsageError('目标目录不能为空');
   const target = path.resolve(dest, SKILL_NAME);
   assertSafeTarget(target);
-  // fail-closed：目标基目录 / 技能目录是符号链接（含 Windows junction）时拒绝跟随；
-  // 与 install.sh 同口径，避免安装器改写 Hub 链接指向的真源（含 runtimePayload）。
-  for (const p of [path.resolve(dest), target]) {
-    let st = null;
-    try { st = fs.lstatSync(p); } catch (_) { continue; }
-    if (st.isSymbolicLink()) throw new TargetError('目标路径是符号链接，拒绝跟随：' + p);
-  }
   if (opts.dryRun) {
     console.log('[dry-run] 将安装到 -> ' + target);
     return target;
@@ -269,6 +335,9 @@ function installTo(dest, opts) {
   try {
     for (const rel of cleanResidue(target)) console.log('已清理残留: ' + rel);
     fs.mkdirSync(target, { recursive: true });
+    if (isDirectLink(target) && !isManagedHubTarget(target)) {
+      throw new TargetError('目标目录在安装期间变成了链接，拒绝写入: ' + target);
+    }
     copyDir(PKG_ROOT, target, true);
     if (!fs.existsSync(path.join(target, 'SKILL.md'))) {
       throw new InstallError('安装结果缺少 SKILL.md');

package/bin/yotta-memory.js

@@ -25,7 +25,7 @@ const net = require('net');
 const child_process = require('child_process');
 const { AsyncLocalStorage } = require('async_hooks');
 
-const VERSION = '0.23.1';
+const VERSION = '0.23.3';
 const CLI_VALUE_OPTS = new Set(['--type', '--limit', '--days', '--out', '--owner', '--agent', '--agent-id', '--agent-key', '--agent-key-file', '--plugin-data', '--threshold', '--scope', '--host', '--port', '--dir', '--name', '--user', '--relationship', '--source', '--weight', '--budget', '--password', '--new-password', '--recovery-key', '--recovery-key-out', '--reason', '--merge', '--model', '--subject', '--embedding', '--focus', '--embedding-timeout', '--min-age', '--min-idle', '--max-utility', '--min-group', '--period', '--to', '--id', '--time', '--tools', '--mcp-config', '--skill-dir', '--year', '--evalset', '--k', '--seed', '--bootstrap', '--gate', '--against', '--template', '--path', '--from']);
 const CLI_FLAG_OPTS = new Set(['--project', '--all', '--unsafe', '--no-auth', '--stdio', '--onstart', '--from-current', '--restart', '--force', '--attach', '--allow-same-volume', '--verify', '--no-hint', '--encrypt', '--no-encrypt', '--password-stdin', '--json', '--manual', '--skip-schedule', '--useful', '--useless', '--undo', '--dry-run', '--apply', '--purge', '--dedup', '--batches', '--propose', '--audit', '--capacity', '--rules', '--explain', '--semantic', '--runtime', '--ablate', '--timing', '--baseline', '--probe', '--quarantine', '--restore', '--no-usage', '--yes', '--keep-memories', '--keep-identity']);
 

package/install.sh

@@ -125,6 +125,25 @@ assert_safe_target() {
   return 0
 }
 
+is_managed_hub_link() {
+  local p="$1" real parent
+  [ -L "$p" ] || return 1
+  real="$(resolve_path "$p")" || return 1
+  [ "$(basename "$real")" = "$SKILL_NAME" ] || return 1
+  parent="$(dirname "$real")"
+  [ -f "$parent/.yotta-hub.json" ] || [ -f "$parent/.yotta-links.json" ]
+}
+
+assert_no_nested_links() {
+  local dest="$1"
+  [ -d "$dest" ] || return 0
+  if find "$dest" -mindepth 1 -type l -print -quit 2>/dev/null | grep -q .; then
+    echo "安装失败：目标目录包含符号链接，拒绝写入：$dest" >&2
+    return 1
+  fi
+  return 0
+}
+
 # 清理旧版安装残留（fail-closed 白名单）：仅在目标目录已存在且含 SKILL.md 时触发；
 # 只删顶层开发项 + 任意层级缓存；不整目录删除、不跟随符号链接。
 DEV_SKIP="package.json package-lock.json bin lib test .github .git .gitignore .npmignore .gitattributes .yotta .tmp install.sh node_modules test-fixtures"
@@ -154,7 +173,15 @@ clean_residue() {
 # 任意层级跳过缓存（__pycache__ / .pytest_cache / .mypy_cache / *.pyc / *.pyo）。
 copy_tree() {
   local src="$1" dst="$2" top="$3" entry base
-  mkdir -p "$dst"
+  if [ "$top" != "1" ] && [ -L "$dst" ]; then
+    echo "安装失败：目标目录包含符号链接，拒绝写入：$dst" >&2
+    return 1
+  fi
+  mkdir -p "$dst" || return 1
+  if [ "$top" != "1" ] && [ -L "$dst" ]; then
+    echo "安装失败：目标目录包含符号链接，拒绝写入：$dst" >&2
+    return 1
+  fi
   for entry in "$src"/* "$src"/.[!.]* "$src"/..?*; do
     [ -e "$entry" ] || [ -L "$entry" ] || continue
     base="$(basename "$entry")"
@@ -170,11 +197,19 @@ copy_tree() {
       esac
     fi
     if [ -d "$entry" ] && [ ! -L "$entry" ]; then
+      if [ -L "$dst/$base" ]; then
+        echo "安装失败：目标目录包含符号链接，拒绝写入：$dst/$base" >&2
+        return 1
+      fi
       copy_tree "$entry" "$dst/$base" 0 || return 1
     else
       case "$base" in
         *.pyc|*.pyo) continue ;;
       esac
+      if [ -L "$dst/$base" ]; then
+        echo "安装失败：目标文件是符号链接，拒绝写入：$dst/$base" >&2
+        return 1
+      fi
       cp -RP "$entry" "$dst/$base" || return 1
     fi
   done
@@ -191,7 +226,7 @@ install_to() {
     echo "安装失败：目标路径已存在且不是目录：$base" >&2
     return 1
   fi
-  if [ -L "$dest" ]; then
+  if [ -L "$dest" ] && ! is_managed_hub_link "$dest"; then
     echo "安装失败：技能目录是符号链接，拒绝跟随：$dest" >&2
     return 1
   fi
@@ -200,12 +235,17 @@ install_to() {
     return 1
   fi
   assert_safe_target "$dest" || return 1
+  assert_no_nested_links "$dest" || return 1
   if [ "$dry" = "1" ]; then
     echo "[dry-run] 将安装到 -> $dest"
     return 0
   fi
   clean_residue "$dest"
   mkdir -p "$dest" || return 1
+  if [ -L "$dest" ] && ! is_managed_hub_link "$dest"; then
+    echo "安装失败：技能目录在安装期间变成了链接，拒绝写入：$dest" >&2
+    return 1
+  fi
   copy_tree "$SOURCE_DIR" "$dest" 1 || return 1
   if [ ! -f "$dest/SKILL.md" ]; then
     echo "安装失败：结果缺少 SKILL.md" >&2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yottameta/yotta-memory",
-  "version": "0.23.1",
+  "version": "0.23.3",
   "description": "Yuanyi (元忆) — boundary-aware, file-based memory for AI agents. File-based, zero-dependency, diff/rollback-able; FACT/PREF/BOUND/COMMIT types (public shared / private isolated), user-level + project-level storage; v0.12 reliability baseline (init guard, trash-based deletion, independent-volume backup/list/doctor/restore, start-of-work doctor, transactional snapshots before destructive writes), v0.10 consolidation (periodic summaries with provenance, near-duplicate auto-merge, per-type decay, batch audit + rollback), v0.9 recall quality + context focus + optional local embedding plugin, plus v0.8 semantic search, feedback loop, self-organization and distillation.",
   "license": "MIT",
   "keywords": [

package/skill-manifest.json

@@ -3,7 +3,7 @@
   "slug": "yotta-memory",
   "name": "元忆",
   "package": "@yottameta/yotta-memory",
-  "version": "0.23.1",
+  "version": "0.23.3",
   "trust": "yottameta",
   "install": {
     "idempotent": true