npm - autosnippet - Versions diffs - 2.9.0 → 2.11.0 - Mend

autosnippet 2.9.0 → 2.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (115) hide show

package/README.md +12 -12
package/bin/cli.js +53 -40
package/config/constitution.yaml +9 -2
package/dashboard/dist/assets/{icons-CH-H9x0E.js → icons-D4IWpDIk.js} +105 -100
package/dashboard/dist/assets/index-CWBNcF9z.css +1 -0
package/dashboard/dist/assets/index-DHtzhbuG.js +120 -0
package/dashboard/dist/index.html +3 -3
package/lib/cli/AiScanService.js +35 -36
package/lib/cli/KnowledgeSyncService.js +345 -0
package/lib/cli/SetupService.js +8 -26
package/lib/cli/UpgradeService.js +28 -0
package/lib/core/gateway/GatewayActionRegistry.js +48 -58
package/lib/domain/index.js +16 -11
package/lib/domain/knowledge/KnowledgeEntry.js +289 -0
package/lib/domain/knowledge/KnowledgeRepository.js +123 -0
package/lib/domain/knowledge/Lifecycle.js +99 -0
package/lib/domain/knowledge/index.js +27 -0
package/lib/domain/knowledge/values/Constraints.js +128 -0
package/lib/domain/knowledge/values/Content.js +69 -0
package/lib/domain/knowledge/values/Quality.js +81 -0
package/lib/domain/knowledge/values/Reasoning.js +70 -0
package/lib/domain/knowledge/values/Relations.js +142 -0
package/lib/domain/knowledge/values/Stats.js +72 -0
package/lib/domain/knowledge/values/index.js +9 -0
package/lib/external/ai/AiProvider.js +85 -11
package/lib/external/mcp/McpServer.js +7 -5
package/lib/external/mcp/handlers/bootstrap/pipeline/orchestrator.js +18 -2
package/lib/external/mcp/handlers/bootstrap.js +116 -11
package/lib/external/mcp/handlers/browse.js +76 -73
package/lib/external/mcp/handlers/candidate.js +26 -275
package/lib/external/mcp/handlers/guard.js +2 -0
package/lib/external/mcp/handlers/knowledge.js +267 -0
package/lib/external/mcp/handlers/structure.js +25 -23
package/lib/external/mcp/handlers/system.js +10 -12
package/lib/external/mcp/tools.js +134 -140
package/lib/http/HttpServer.js +14 -8
package/lib/http/routes/ai.js +4 -3
package/lib/http/routes/extract.js +48 -4
package/lib/http/routes/knowledge.js +246 -0
package/lib/http/routes/search.js +12 -17
package/lib/infrastructure/database/migrations/016_unified_knowledge_entries.js +395 -0
package/lib/infrastructure/database/migrations/017_camelcase_knowledge_entries.js +107 -0
package/lib/infrastructure/external/XcodeAutomation.js +187 -103
package/lib/injection/ServiceContainer.js +69 -60
package/lib/repository/knowledge/KnowledgeRepository.impl.js +338 -0
package/lib/service/automation/DirectiveDetector.js +2 -3
package/lib/service/automation/FileWatcher.js +59 -28
package/lib/service/automation/XcodeIntegration.js +931 -156
package/lib/service/automation/handlers/AlinkHandler.js +5 -4
package/lib/service/automation/handlers/CreateHandler.js +53 -19
package/lib/service/automation/handlers/DraftHandler.js +1 -1
package/lib/service/automation/handlers/GuardHandler.js +183 -20
package/lib/service/automation/handlers/SearchHandler.js +25 -22
package/lib/service/candidate/SimilarityService.js +2 -2
package/lib/service/chat/AnalystAgent.js +9 -0
package/lib/service/chat/CandidateGuardrail.js +22 -11
package/lib/service/chat/ChatAgent.js +132 -54
package/lib/service/chat/ContextWindow.js +5 -5
package/lib/service/chat/HandoffProtocol.js +1 -0
package/lib/service/chat/ProducerAgent.js +40 -13
package/lib/service/chat/ReasoningLayer.js +854 -0
package/lib/service/chat/ReasoningTrace.js +329 -0
package/lib/service/chat/tools.js +308 -205
package/lib/service/cursor/CursorDeliveryPipeline.js +279 -0
package/lib/service/cursor/KnowledgeCompressor.js +87 -0
package/lib/service/cursor/RulesGenerator.js +168 -0
package/lib/service/cursor/SkillsSyncer.js +268 -0
package/lib/service/cursor/TokenBudget.js +58 -0
package/lib/service/cursor/TopicClassifier.js +141 -0
package/lib/service/guard/GuardCheckEngine.js +99 -10
package/lib/service/guard/GuardService.js +57 -46
package/lib/service/knowledge/ConfidenceRouter.js +159 -0
package/lib/service/knowledge/KnowledgeFileWriter.js +595 -0
package/lib/service/knowledge/KnowledgeService.js +802 -0
package/lib/service/recipe/RecipeParser.js +3 -12
package/lib/service/search/SearchEngine.js +67 -22
package/lib/service/skills/SignalCollector.js +14 -9
package/lib/service/skills/SkillAdvisor.js +13 -11
package/lib/service/snippet/SnippetFactory.js +5 -5
package/lib/service/spm/SpmService.js +15 -48
package/lib/shared/RecipeReadinessChecker.js +6 -11
package/package.json +1 -1
package/scripts/install-cursor-skill.js +0 -6
package/scripts/migrate-md-to-knowledge.mjs +364 -0
package/skills/autosnippet-analysis/SKILL.md +15 -7
package/skills/autosnippet-candidates/SKILL.md +8 -8
package/skills/autosnippet-coldstart/SKILL.md +8 -4
package/skills/autosnippet-concepts/SKILL.md +7 -6
package/skills/autosnippet-create/SKILL.md +13 -13
package/skills/autosnippet-intent/SKILL.md +3 -2
package/skills/autosnippet-lifecycle/SKILL.md +5 -5
package/skills/autosnippet-recipes/SKILL.md +18 -6
package/templates/constitution.yaml +1 -1
package/templates/copilot-instructions.md +6 -6
package/templates/recipes-setup/README.md +3 -3
package/dashboard/dist/assets/index-CqJRvYRL.js +0 -197
package/dashboard/dist/assets/index-DICm9PNa.css +0 -1
package/lib/cli/CandidateSyncService.js +0 -261
package/lib/cli/SyncService.js +0 -356
package/lib/domain/candidate/Candidate.js +0 -196
package/lib/domain/candidate/CandidateRepository.js +0 -107
package/lib/domain/candidate/Reasoning.js +0 -52
package/lib/domain/recipe/Recipe.js +0 -421
package/lib/domain/recipe/RecipeRepository.js +0 -54
package/lib/domain/types/CandidateStatus.js +0 -52
package/lib/http/routes/candidates.js +0 -559
package/lib/http/routes/recipes.js +0 -397
package/lib/repository/candidate/CandidateRepository.impl.js +0 -230
package/lib/repository/recipe/RecipeRepository.impl.js +0 -498
package/lib/service/candidate/CandidateAggregator.js +0 -52
package/lib/service/candidate/CandidateFileWriter.js +0 -383
package/lib/service/candidate/CandidateService.js +0 -1001
package/lib/service/recipe/RecipeFileWriter.js +0 -514
package/lib/service/recipe/RecipeService.js +0 -786
package/lib/service/recipe/RecipeStatsTracker.js +0 -148

package/dashboard/dist/index.html CHANGED Viewed

@@ -5,14 +5,14 @@
     <link rel="icon" type="image/svg+xml" href="/vite.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>AutoSnippet Dashboard</title>
-    <script type="module" crossorigin src="/assets/index-CqJRvYRL.js"></script>
+    <script type="module" crossorigin src="/assets/index-DHtzhbuG.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/yaml-qRaU8Ldn.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-BotF760a.js">
     <link rel="modulepreload" crossorigin href="/assets/axios-C0Zqfgkc.js">
-    <link rel="modulepreload" crossorigin href="/assets/icons-CH-H9x0E.js">
+    <link rel="modulepreload" crossorigin href="/assets/icons-D4IWpDIk.js">
     <link rel="modulepreload" crossorigin href="/assets/syntax-highlighter-CVLHn9O5.js">
     <link rel="modulepreload" crossorigin href="/assets/react-markdown-BA6FB2NP.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-DICm9PNa.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-CWBNcF9z.css">
   </head>
   <body>
     <div id="root"></div>

package/lib/cli/AiScanService.js CHANGED Viewed

@@ -1,12 +1,12 @@
 /**
  * AiScanService — `asd ais [Target]` 的核心逻辑
  *
- * 按文件粒度扫描 Target 源码，调用 AI Provider 提取 Recipe 候选，
- * 自动创建 PENDING Candidate 供 Dashboard 审核。
+ * 按文件粒度扫描 Target 源码，调用 AI Provider 提取 Recipe，
+ * 创建后自动发布（PENDING → ACTIVE），无需 Dashboard 人工审核。
  *
  * 与 bootstrap.js 的区别：
  *   - bootstrap 是纯启发式（正则），本服务全程使用 LLM
- *   - bootstrap 输出 9 条概要 Candidate，本服务按文件输出细粒度 Candidate
+ *   - bootstrap 输出 9 条概要 Recipe，本服务按文件输出细粒度 Recipe
  *   - 本服务可脱离 MCP 独立在 CLI 运行
  */
@@ -29,14 +29,14 @@ export class AiScanService {
   }
   /**
-   * 扫描指定 Target（或全部 Target）的源文件并提取候选
+   * 扫描指定 Target（或全部 Target）的源文件并提取 Recipe，创建后直接发布
    * @param {string|null} targetName  Target 名称；null 时扫描全部
    * @param {object}      opts        { maxFiles, dryRun, concurrency }
-   * @returns {{ candidates: number, files: number, errors: string[] }}
+   * @returns {{ published: number, files: number, errors: string[] }}
    */
   async scan(targetName, opts = {}) {
     const { maxFiles = 200, dryRun = false } = opts;
-    const report = { candidates: 0, files: 0, errors: [], skipped: 0 };
+    const report = { published: 0, files: 0, errors: [], skipped: 0 };
     // 1. 初始化 AI Provider
     try {
@@ -56,7 +56,7 @@ export class AiScanService {
     }
     report.files = files.length;
-    const candidateService = this.container.get('candidateService');
+    const knowledgeService = this.container.get('knowledgeService');
     // 3. 按文件调用 AI 提取
     for (const file of files) {
@@ -85,43 +85,42 @@ export class AiScanService {
           continue;
         }
-        // 4. 创建 Candidate
+        // 4. 创建并发布 Recipe — AI 输出完整 V3 结构直透
         for (const recipe of recipes) {
-          if (!recipe.code || recipe.code.length < 20) continue;
+          if (!recipe.content?.pattern || recipe.content.pattern.length < 20) continue;
           if (dryRun) {
-            report.candidates++;
+            report.published++;
             continue;
           }
           try {
-            await candidateService.createCandidate({
-              code: recipe.code,
-              language: recipe.language || this._inferLanguage(file.name),
-              category: recipe.category || 'ai-scan',
-              source: 'ai-scan',
-              reasoning: {
-                whyStandard: recipe.summary_cn || recipe.summary_en || recipe.title || '',
-                sources: [file.relativePath || file.name],
-                confidence: 0.7,
-                qualitySignals: { origin: 'ai-scan', completeness: 'full' },
-              },
-              metadata: {
-                title: recipe.title || `[AI Scan] ${file.name}`,
-                description: recipe.summary_cn || recipe.summary_en || '',
-                knowledgeType: recipe.knowledgeType || 'code-pattern',
-                tags: [...(recipe.tags || []), 'ai-scan', file.targetName],
-                trigger: recipe.trigger || '',
-                scope: 'project-specific',
-                usageGuideCn: recipe.usageGuide_cn || '',
-                usageGuideEn: recipe.usageGuide_en || '',
-                headers: recipe.headers || [],
-              },
-            }, { userId: 'ai-scan' });
-            report.candidates++;
+            // 来源标记（非 AI 职责）
+            recipe.source = 'ai-scan';
+            recipe.tags = [...new Set([...(recipe.tags || []), 'ai-scan', file.targetName])];
+            // V3 字段注入：moduleName + sourceFile
+            recipe.moduleName = file.targetName;
+            recipe.sourceFile = file.relativePath || file.name;
+            // 7.3.9 aiInsight — AI 已输出则直透，否则从 description 生成
+            if (!recipe.aiInsight && recipe.description) {
+              recipe.aiInsight = recipe.description;
+            }
+            const saved = await knowledgeService.create(recipe, { userId: 'ai-scan' });
+            // QualityScorer 自动评分
+            try {
+              await knowledgeService.updateQuality(saved.id, { userId: 'ai-scan' });
+            } catch { /* best effort */ }
+            // 直接发布：PENDING → ACTIVE
+            await knowledgeService.publish(saved.id, { userId: 'ai-scan' });
+            report.published++;
           } catch (err) {
-            report.errors.push(`${file.name}: candidate create failed — ${err.message}`);
+            report.errors.push(`${file.name}: recipe publish failed — ${err.message}`);
           }
         }
       } catch (err) {

package/lib/cli/KnowledgeSyncService.js ADDED Viewed

@@ -0,0 +1,345 @@
+/**
+ * KnowledgeSyncService — 将 .md 文件增量同步到 SQLite DB（knowledge_entries 表）
+ *
+ * 统一替代 SyncService (Recipe) + CandidateSyncService。
+ *
+ * 设计原则：
+ *  - .md 文件 = 完整唯一数据源（Source of Truth），DB = 索引缓存
+ *  - 通过 contentHash 检测手写/手改 .md → 进入违规统计（audit_logs）
+ *  - 孤儿 Entry（DB 有但 .md 不存在）→ 自动标记 deprecated
+ *  - 同时扫描 AutoSnippet/candidates/ 和 AutoSnippet/recipes/ 两个目录
+ *
+ * 使用方式：
+ *  - CLI: `asd sync` 委托调用
+ *  - 内部: SetupService.stepDatabase() 委托调用（skipViolations = true）
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { RECIPES_DIR, CANDIDATES_DIR } from '../infrastructure/config/Defaults.js';
+import { parseKnowledgeMarkdown, computeKnowledgeHash } from '../service/knowledge/KnowledgeFileWriter.js';
+import { KnowledgeEntry } from '../domain/knowledge/KnowledgeEntry.js';
+import Logger from '../infrastructure/logging/Logger.js';
+export class KnowledgeSyncService {
+  /**
+   * @param {string} projectRoot
+   */
+  constructor(projectRoot) {
+    this.projectRoot   = projectRoot;
+    this.recipesDir    = path.join(projectRoot, RECIPES_DIR);
+    this.candidatesDir = path.join(projectRoot, CANDIDATES_DIR);
+    this.logger        = Logger.getInstance();
+  }
+  /**
+   * 执行增量同步：.md → DB（knowledge_entries 表）
+   *
+   * 同时扫描 candidates/ 和 recipes/ 两个目录。
+   *
+   * @param {import('better-sqlite3').Database} db  better-sqlite3 原始句柄
+   * @param {Object}  [opts={}]
+   * @param {boolean} [opts.dryRun=false]        只报告不写入
+   * @param {boolean} [opts.force=false]         忽略 hash，强制覆盖
+   * @param {boolean} [opts.skipViolations=false] 跳过违规记录（setup 场景）
+   * @returns {{ synced: number, created: number, updated: number, violations: string[], orphaned: string[], skipped: number }}
+   */
+  sync(db, opts = {}) {
+    const { dryRun = false, force = false, skipViolations = false } = opts;
+    const report = {
+      synced: 0,
+      created: 0,
+      updated: 0,
+      violations: [],  // 手动编辑的文件列表
+      orphaned: [],    // DB 有但 .md 不存在
+      skipped: 0,
+    };
+    // ── 1. 收集 .md 文件（两个目录） ──
+    const mdFiles = [
+      ...this._collectMdFiles(this.candidatesDir, CANDIDATES_DIR),
+      ...this._collectMdFiles(this.recipesDir, RECIPES_DIR),
+    ];
+    if (mdFiles.length === 0) {
+      this.logger.info('KnowledgeSyncService: no .md files found');
+      return report;
+    }
+    // ── 2. 准备 upsert 语句 ──
+    const upsertStmt = dryRun ? null : this._prepareUpsert(db);
+    const auditStmt  = (dryRun || skipViolations) ? null : this._prepareAuditInsert(db);
+    // ── 3. 逐文件同步 ──
+    const syncedIds = new Set();
+    for (const { absPath, relPath } of mdFiles) {
+      try {
+        const content = fs.readFileSync(absPath, 'utf8');
+        const parsed  = parseKnowledgeMarkdown(content, relPath);
+        if (!parsed.id) {
+          this.logger.warn(`KnowledgeSyncService: skip file without id — ${relPath}`);
+          report.skipped++;
+          continue;
+        }
+        syncedIds.add(parsed.id);
+        // ── 检测手动编辑 ──
+        const actualHash = computeKnowledgeHash(content);
+        const storedHash = parsed.contentHash;
+        const isManualEdit = storedHash && storedHash !== actualHash && !force;
+        if (isManualEdit) {
+          report.violations.push(relPath);
+          if (auditStmt) {
+            this._logViolation(auditStmt, parsed.id, relPath, storedHash, actualHash);
+          }
+        }
+        // ── upsert ──
+        if (!dryRun) {
+          const existed = this._entryExists(db, parsed.id);
+          const row = this._buildDbRow(parsed, relPath, content);
+          upsertStmt.run(...Object.values(row));
+          if (existed) {
+            report.updated++;
+          } else {
+            report.created++;
+          }
+        }
+        report.synced++;
+      } catch (err) {
+        this.logger.error(`KnowledgeSyncService: failed to sync ${relPath}`, { error: err.message });
+        report.skipped++;
+      }
+    }
+    // ── 4. 检测孤儿 ──
+    report.orphaned = this._detectOrphans(db, syncedIds, dryRun);
+    this.logger.info('KnowledgeSyncService: sync complete', {
+      synced: report.synced,
+      created: report.created,
+      updated: report.updated,
+      violations: report.violations.length,
+      orphaned: report.orphaned.length,
+      skipped: report.skipped,
+    });
+    return report;
+  }
+  /* ═══ 文件收集 ═══════════════════════════════════════════ */
+  /**
+   * 递归收集指定目录下所有 .md 文件（跳过 _ 前缀模板）
+   * @param {string} dir    绝对目录路径
+   * @param {string} prefix 相对路径前缀 (e.g. 'AutoSnippet/candidates')
+   * @returns {{ absPath: string, relPath: string }[]}
+   */
+  _collectMdFiles(dir, prefix) {
+    if (!fs.existsSync(dir)) return [];
+    const results = [];
+    const walk = (curDir, base) => {
+      for (const entry of fs.readdirSync(curDir, { withFileTypes: true })) {
+        const full = path.join(curDir, entry.name);
+        const rel  = base ? `${base}/${entry.name}` : entry.name;
+        if (entry.isDirectory()) {
+          walk(full, rel);
+        } else if (entry.name.endsWith('.md') && !entry.name.startsWith('_')) {
+          results.push({
+            absPath: full,
+            relPath: `${prefix}/${rel}`,
+          });
+        }
+      }
+    };
+    walk(dir, '');
+    return results;
+  }
+  /* ═══ DB 操作 ═══════════════════════════════════════════ */
+  /**
+   * 从 parseKnowledgeMarkdown 的结果构建 DB row
+   * wire format → DB 列映射（与 KnowledgeRepository.impl 对齐）
+   */
+  _buildDbRow(parsed, relPath, rawContent) {
+    const now = Math.floor(Date.now() / 1000);
+    // 内容 hash
+    const contentHash = computeKnowledgeHash(rawContent);
+    return {
+      id:                parsed.id,
+      title:             parsed.title || '',
+      trigger:           parsed.trigger || '',
+      description:       parsed.description || '',
+      lifecycle:         parsed.lifecycle || 'pending',
+      lifecycleHistory:  JSON.stringify(parsed.lifecycleHistory || []),
+      autoApprovable:    parsed.autoApprovable ? 1 : 0,
+      language:          parsed.language || 'swift',
+      category:          parsed.category || 'general',
+      kind:              parsed.kind || 'pattern',
+      knowledgeType:     parsed.knowledgeType || 'code-pattern',
+      complexity:        parsed.complexity || 'intermediate',
+      scope:             parsed.scope || 'universal',
+      difficulty:        parsed.difficulty || null,
+      tags:              JSON.stringify(parsed.tags || []),
+      content:           JSON.stringify(parsed.content || {}),
+      relations:         JSON.stringify(parsed.relations || {}),
+      constraints:       JSON.stringify(parsed.constraints || {}),
+      reasoning:         JSON.stringify(parsed.reasoning || {}),
+      quality:           JSON.stringify(parsed.quality || {}),
+      stats:             JSON.stringify(parsed.stats || {}),
+      headers:           JSON.stringify(parsed.headers || []),
+      headerPaths:       JSON.stringify(parsed.headerPaths || []),
+      moduleName:        parsed.moduleName || '',
+      includeHeaders:    parsed.includeHeaders ? 1 : 0,
+      topicHint:         parsed.topicHint || null,
+      whenClause:        parsed.whenClause || null,
+      doClause:          parsed.doClause || null,
+      dontClause:        parsed.dontClause || null,
+      coreCode:          parsed.coreCode || null,
+      agentNotes:        parsed.agentNotes ? JSON.stringify(parsed.agentNotes) : null,
+      aiInsight:         parsed.aiInsight || null,
+      reviewedBy:        parsed.reviewedBy || null,
+      reviewedAt:        parsed.reviewedAt || null,
+      rejectionReason:   parsed.rejectionReason || null,
+      source:            parsed.source || 'file-sync',
+      sourceFile:        relPath,
+      sourceCandidateId: parsed.sourceCandidateId || null,
+      createdBy:         parsed.createdBy || 'file-sync',
+      createdAt:         parsed.createdAt || now,
+      updatedAt:         parsed.updatedAt || now,
+      publishedAt:       parsed.publishedAt || null,
+      publishedBy:       parsed.publishedBy || null,
+      contentHash:       contentHash,
+    };
+  }
+  /**
+   * 准备 upsert 语句（INSERT ... ON CONFLICT DO UPDATE 全字段）
+   */
+  _prepareUpsert(db) {
+    const cols = [
+      'id', 'title', 'trigger', 'description',
+      'lifecycle', 'lifecycleHistory', 'autoApprovable',
+      'language', 'category', 'kind', 'knowledgeType', 'complexity', 'scope', 'difficulty',
+      'tags',
+      'content', 'relations', 'constraints', 'reasoning', 'quality', 'stats',
+      'headers', 'headerPaths', 'moduleName', 'includeHeaders',
+      'topicHint', 'whenClause', 'doClause', 'dontClause', 'coreCode',
+      'agentNotes', 'aiInsight',
+      'reviewedBy', 'reviewedAt', 'rejectionReason',
+      'source', 'sourceFile', 'sourceCandidateId',
+      'createdBy', 'createdAt', 'updatedAt',
+      'publishedAt', 'publishedBy',
+      'contentHash',
+    ];
+    // ON CONFLICT 更新除 id, createdBy, createdAt 以外的所有列
+    const updateCols = cols.filter(c => !['id', 'createdBy', 'createdAt'].includes(c));
+    const setClauses = updateCols.map(c => `${c} = excluded.${c}`).join(',\n      ');
+    const sql = `
+      INSERT INTO knowledge_entries (${cols.join(', ')})
+      VALUES (${cols.map(() => '?').join(', ')})
+      ON CONFLICT(id) DO UPDATE SET
+      ${setClauses}
+    `;
+    return db.prepare(sql);
+  }
+  /**
+   * 检查 entry 是否已存在于 DB
+   */
+  _entryExists(db, id) {
+    const row = db.prepare('SELECT 1 FROM knowledge_entries WHERE id = ?').get(id);
+    return !!row;
+  }
+  /* ═══ 违规记录 ═══════════════════════════════════════════ */
+  _prepareAuditInsert(db) {
+    try {
+      return db.prepare(`
+        INSERT INTO audit_logs (id, timestamp, actor, actor_context, action, resource, operation_data, result, error_message, duration)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `);
+    } catch {
+      return null;
+    }
+  }
+  _logViolation(stmt, entryId, filePath, expectedHash, actualHash) {
+    try {
+      stmt.run(
+        randomUUID(),
+        Math.floor(Date.now() / 1000),
+        'sync',
+        JSON.stringify({ source: 'cli' }),
+        'manual_knowledge_edit',
+        entryId,
+        JSON.stringify({ file: filePath, expectedHash, actualHash }),
+        'violation_detected',
+        null,
+        0,
+      );
+    } catch (err) {
+      this.logger.warn('KnowledgeSyncService: failed to log violation', {
+        entryId,
+        error: err.message,
+      });
+    }
+  }
+  /* ═══ 孤儿检测 ═══════════════════════════════════════════ */
+  /**
+   * 检测 DB 中存在但 .md 已删除的 Entry → 标记 deprecated
+   * @returns {string[]} 孤儿 entry id 列表
+   */
+  _detectOrphans(db, syncedIds, dryRun) {
+    const orphanIds = [];
+    try {
+      const rows = db.prepare(
+        `SELECT id, sourceFile FROM knowledge_entries
+         WHERE lifecycle NOT IN ('deprecated')
+         AND sourceFile IS NOT NULL`
+      ).all();
+      for (const row of rows) {
+        if (!syncedIds.has(row.id)) {
+          orphanIds.push(row.id);
+          if (!dryRun) {
+            const now = Math.floor(Date.now() / 1000);
+            db.prepare(
+              `UPDATE knowledge_entries
+               SET lifecycle = 'deprecated',
+                   rejectionReason = ?,
+                   updatedAt = ?
+               WHERE id = ?`
+            ).run('source file deleted (orphan)', now, row.id);
+          }
+        }
+      }
+    } catch (err) {
+      this.logger.warn('KnowledgeSyncService: orphan detection failed', {
+        error: err.message,
+      });
+    }
+    return orphanIds;
+  }
+}
+export default KnowledgeSyncService;

package/lib/cli/SetupService.js CHANGED Viewed

@@ -288,7 +288,7 @@ export class SetupService {
         '    requires_capability: ["git_write"]',
         '  - id: "external_agent"',
         '    name: "External Agent"',
-        '    permissions: ["read:recipes", "read:guard_rules", "create:candidates", "submit:candidates"]',
+        '    permissions: ["read:recipes", "read:guard_rules", "create:candidates", "submit:knowledge"]',
         '  - id: "chat_agent"',
         '    name: "ChatAgent"',
         '    permissions: ["read:recipes", "read:candidates", "create:candidates", "read:guard_rules"]',
@@ -571,40 +571,22 @@ export class SetupService {
   }
   /**
-   * @private 从 AutoSnippet/recipes/*.md 同步到 DB 缓存
-   * 委托 SyncService 执行全字段同步（setup 场景跳过违规记录）
+   * @private 从 AutoSnippet/recipes/*.md + candidates/*.md 同步到 DB 缓存
+   * 委托 KnowledgeSyncService 执行全字段同步（setup 场景跳过违规记录）
    */
   async _syncRecipesToDB(db) {
-    const { SyncService } = await import('./SyncService.js');
-    const syncService = new SyncService(this.projectRoot);
+    const { KnowledgeSyncService } = await import('./KnowledgeSyncService.js');
+    const syncService = new KnowledgeSyncService(this.projectRoot);
     const report = syncService.sync(db, { skipViolations: true });
     if (report.synced > 0) {
-      console.log(`   ✅ 已同步 ${report.synced} 个 Recipe 文件到 DB 缓存（新增 ${report.created}，更新 ${report.updated}）`);
+      console.log(`   ✅ 已同步 ${report.synced} 个知识文件到 DB 缓存（新增 ${report.created}，更新 ${report.updated}）`);
     } else {
-      console.log('   ℹ️  recipes/ 暂无 .md 文件，跳过同步');
+      console.log('   ℹ️  暂无 .md 文件，跳过同步');
     }
     if (report.orphaned.length > 0) {
-      console.log(`   ℹ️  ${report.orphaned.length} 个孤儿 Recipe 已标记 deprecated`);
-    }
-    // ── Candidate 文件同步 ──
-    await this._syncCandidatesToDB(db);
-  }
-  /**
-   * @private 从 AutoSnippet/candidates/*.md 同步到 DB 缓存
-   */
-  async _syncCandidatesToDB(db) {
-    const { CandidateSyncService } = await import('./CandidateSyncService.js');
-    const syncService = new CandidateSyncService(this.projectRoot);
-    const report = syncService.sync(db, { skipViolations: true });
-    if (report.synced > 0) {
-      console.log(`   ✅ 已同步 ${report.synced} 个 Candidate 文件到 DB 缓存（新增 ${report.created}，更新 ${report.updated}）`);
-    } else {
-      console.log('   ℹ️  candidates/ 暂无 .md 文件，跳过同步');
+      console.log(`   ℹ️  ${report.orphaned.length} 个孤儿条目已标记 deprecated`);
     }
   }

package/lib/cli/UpgradeService.js CHANGED Viewed

@@ -163,6 +163,34 @@ export class UpgradeService {
     mkdirSync(destDir, { recursive: true });
     copyFileSync(src, dest);
     console.log('   ✅ .cursor/rules/autosnippet-conventions.mdc');
+    // 动态生成 4 通道交付物料（如 ServiceContainer 已初始化）
+    this._triggerCursorDelivery();
+  }
+  /**
+   * 触发 Cursor Delivery Pipeline 动态生成
+   * 非阻塞 — 失败不影响 upgrade 流程
+   */
+  _triggerCursorDelivery() {
+    import('../injection/ServiceContainer.js')
+      .then(({ getServiceContainer }) => {
+        const container = getServiceContainer();
+        if (container.services.cursorDeliveryPipeline) {
+          const pipeline = container.get('cursorDeliveryPipeline');
+          pipeline.deliver()
+            .then(result => {
+              console.log(`   ✅ Cursor Delivery: ${result.channelA.rulesCount} rules, ` +
+                `${result.channelB.topicCount} topics, ${result.channelC.synced} skills`);
+            })
+            .catch(err => {
+              console.log(`   ⚠️  Cursor Delivery 跳过: ${err.message}`);
+            });
+        }
+      })
+      .catch(() => {
+        // ServiceContainer 未初始化 — 正常（upgrade 可能在无 DB 环境执行）
+      });
   }
   /* ═══ Copilot Instructions ══════════════════════════ */