memory-bank-skill 7.0.1 → 7.2.0

package/README.md

@@ -14,9 +14,9 @@ Memory Bank 是一个 **OpenCode 技能（Skill）**，用于解决 AI 对话的
 - 不记得当前在做什么任务
 
 Memory Bank 通过结构化 Markdown 文件持久化项目上下文，实现：
-- **零初始化**：不需要手动 init，随项目推进自动创建
+- **按需初始化**：首次使用运行 `/memory-bank-refresh`，之后自动维护
 - **智能检索**：基于 AI 语义理解，自动加载相关上下文
-- **自动写入**：工作过程中自动记录重要发现和决策
+- **引导式写入**：AI 检测写入时机并提议，用户确认后执行
 
 ---
 
@@ -48,7 +48,7 @@ bunx memory-bank-skill doctor
 
 | 操作 | 目标路径 |
 |------|----------|
-| 复制 Skill 文件 | `~/.config/opencode/skills/memory-bank/` 和 `memory-bank-writer/` |
+| 复制 Skill 文件 | `~/.config/opencode/skills/memory-bank/`（含 `references/writer.md`） |
 | 配置 opencode.json | 添加 `permission.skill=allow`，注册插件和 agent |
 | 注册 Agent | 添加 `memory-bank-writer` agent（用于写入守卫） |
 | 写入 manifest | `~/.config/opencode/skills/memory-bank/.manifest.json` |
@@ -57,13 +57,13 @@ bunx memory-bank-skill doctor
 
 ## 快速开始
 
-**不需要手动初始化。** Memory Bank 会在你开始工作时自动检测和创建：
+首次使用需运行初始化命令，之后 Memory Bank 会自动维护：
 
-| 场景 | AI 行为 |
-|------|---------|
-| **已有代码库** | 扫描 package.json/README 等，自动生成 MEMORY.md + details/tech.md |
-| **新项目** | 不创建任何文件，等你开始工作后按需创建 |
-| **已有 Memory Bank** | 直接读取 MEMORY.md，恢复上下文 |
+| 场景 | 行为 |
+|------|------|
+| **首次使用** | 运行 `/memory-bank-refresh` 初始化，扫描项目生成 MEMORY.md |
+| **已有 Memory Bank** | 自动注入 MEMORY.md 内容到 AI 上下文 |
+| **需要更新** | AI 检测到变更时会提议更新，用户确认后执行 |
 
 ---
 
@@ -180,5 +180,5 @@ service=memory-bank Plugin initialized (unified) {"projectRoot":"..."}
 
 ## 版本
 
-- **版本**: 6.1.0
-- **主要更新**: v6.1.0 统一 Task Tool 架构（同步执行 + Writer 自动触发）
+- **版本**: 7.1.0
+- **主要更新**: v7.1 Index-First + Direct-First 架构（意图驱动路由 + Gating 收紧 + 两层读取协议 + 模板升级路径）

package/dist/cli.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "memory-bank-skill",
-  version: "7.0.1",
+  version: "7.2.0",
   description: "Memory Bank - \u9879\u76EE\u8BB0\u5FC6\u7CFB\u7EDF\uFF0C\u8BA9 AI \u52A9\u624B\u5728\u6BCF\u6B21\u5BF9\u8BDD\u4E2D\u90FD\u80FD\u5FEB\u901F\u7406\u89E3\u9879\u76EE\u4E0A\u4E0B\u6587",
   type: "module",
   main: "dist/plugin.js",
@@ -358,7 +358,7 @@ async function installCommands(undoStack, manifestFiles) {
   const commandsDir = join(homedir(), ".config", "opencode", "commands");
   const commandPath = join(commandsDir, "memory-bank-refresh.md");
   const commandContent = `---
-description: \u521D\u59CB\u5316\u3001\u8FC1\u79FB\u6216\u5237\u65B0 Memory Bank
+description: \u521D\u59CB\u5316\u3001\u5347\u7EA7\u3001\u8FC1\u79FB\u6216\u5237\u65B0 Memory Bank
 agent: memory-bank-writer
 ---
 
@@ -367,12 +367,14 @@ agent: memory-bank-writer
 ## \u68C0\u6D4B\u5F53\u524D\u7ED3\u6784
 
 1. \u68C0\u67E5 \`memory-bank/\` \u76EE\u5F55\u662F\u5426\u5B58\u5728
-2. \u68C0\u67E5\u662F\u65B0\u7ED3\u6784\uFF08MEMORY.md\uFF09\u8FD8\u662F\u65E7\u7ED3\u6784\uFF08_index.md, brief.md, active.md\uFF09
+2. \u5982\u5B58\u5728 MEMORY.md\uFF0C\u68C0\u6D4B\u7248\u672C\u6807\u8BB0 \`<!-- MEMORY_BANK_TEMPLATE:v7.x -->\`
+3. \u68C0\u67E5\u662F\u5426\u5B58\u5728\u65E7\u7ED3\u6784\uFF08_index.md, brief.md, active.md\uFF09
 
 ## \u6839\u636E\u68C0\u6D4B\u7ED3\u679C\u6267\u884C
 
 - **\u4E0D\u5B58\u5728 memory-bank/**\uFF1A\u6267\u884C\u521D\u59CB\u5316\u6D41\u7A0B
-- **\u5B58\u5728 MEMORY.md**\uFF1A\u6267\u884C\u5237\u65B0\u6D41\u7A0B
+- **\u5B58\u5728 MEMORY.md\uFF0C\u7248\u672C >= v7.1**\uFF1A\u6267\u884C\u5237\u65B0\u6D41\u7A0B
+- **\u5B58\u5728 MEMORY.md\uFF0C\u7248\u672C < v7.1 \u6216\u6807\u8BB0\u7F3A\u5931**\uFF1A\u6267\u884C\u5347\u7EA7\u6D41\u7A0B\uFF08v7.0 \u2192 v7.1\uFF09
 - **\u5B58\u5728\u65E7\u7ED3\u6784**\uFF1A\u6267\u884C\u8FC1\u79FB\u6D41\u7A0B
 
 ## \u6D41\u7A0B\u8BE6\u60C5

package/dist/plugin.js

@@ -18,7 +18,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __require = import.meta.require;
 
 // plugin/memory-bank.ts
-import { stat, readFile, realpath } from "fs/promises";
+import { stat, readFile, access, realpath } from "fs/promises";
 import { execSync } from "child_process";
 import path from "path";
 var DEBUG = process.env.MEMORY_BANK_DEBUG === "1";
@@ -49,6 +49,7 @@ var sessionsById = new Map;
 var writerSessionIDs = new Set;
 var agentBySessionID = new Map;
 var messageGatingStates = new Map;
+var sessionAnchorStates = new Map;
 function makeStateKey(sessionId, root) {
   return `${sessionId}::${root}`;
 }
@@ -203,26 +204,30 @@ async function buildMemoryBankContextWithMeta(projectRoot) {
       behaviorProtocol = `
 ## Memory Bank Protocol
 protocol_version: memory-bank/v1
+template_version: v7.1
 fingerprint: MEMORY.md | ${totalChars.toLocaleString()} chars | mtime ${mtimeISO} | hash ${contentHash}${truncated ? " | TRUNCATED" : ""}
+
 trigger: (handled by Sisyphus keyTrigger)
-skip: \u901A\u7528\u95EE\u9898 / \u7B80\u5355\u8FFD\u95EE / \u7528\u6237\u8BF4"\u4E0D\u9700\u8981\u4E0A\u4E0B\u6587"
-invoke: proxy_task(subagent_type="memory-reader", prompt="\u7528\u6237\u95EE\u9898:{q}\\n\u6309\u8DEF\u7531\u8BFBdetails/,\u8F93\u51FAYAML")
-output: \u5355\u4E2A YAML \u5757\uFF0C\u542B evidence + conflicts\uFF1B\u7981\u8BFB .env/*secret*/*.pem/*.key\uFF1B\u6700\u591A 10 \u6587\u4EF6
-conflict: \u53D1\u73B0\u51B2\u7A81 \u2192 \u62A5\u544A\u7528\u6237\u5E76\u7B49\u5F85\u786E\u8BA4\uFF0C\u786E\u8BA4\u540E\u518D\u8C03\u7528 write
-write: proxy_task(subagent_type="memory-bank-writer", prompt="Target:...\\nDraft:...")\uFF1B\u7981\u6B62\u76F4\u63A5\u5199 memory-bank/
+drill_down: Step1 direct-read 1-3 details/*; Step2 \u9700\u8981\u8BC1\u636E/\u51B2\u7A81/\u8DE8\u6587\u4EF6 \u2192 memory-reader
+output: \u56DE\u7B54\u5FC5\u987B\u7ED9\u5F15\u7528\u6307\u9488
+gating: \u9AD8\u98CE\u9669\u5199\u524D\u9700\u5DF2\u8BFB patterns.md \u6216\u8C03\u7528\u8FC7 memory-reader
+
+write: proxy_task(subagent_type="memory-bank-writer", prompt="Target:...\\nDraft:...")
 more: \u5B8C\u6574\u89C4\u8303\u89C1 /memory-bank skill
 `;
     } else {
       behaviorProtocol = `
 ## Memory Bank Protocol
 protocol_version: memory-bank/v1
+template_version: v7.1
 fingerprint: MEMORY.md | ${totalChars.toLocaleString()} chars | mtime ${mtimeISO} | hash ${contentHash}${truncated ? " | TRUNCATED" : ""}
-trigger: \u6D89\u53CA\u9879\u76EE\u80CC\u666F / \u95EE"\u4E3A\u4EC0\u4E48\u8FD9\u6837\u505A" / \u7279\u5B9A\u6A21\u5757\u5B9E\u73B0
-skip: \u901A\u7528\u95EE\u9898 / \u7B80\u5355\u8FFD\u95EE / \u7528\u6237\u8BF4"\u4E0D\u9700\u8981\u4E0A\u4E0B\u6587"
-invoke: proxy_task(subagent_type="memory-reader", prompt="\u7528\u6237\u95EE\u9898:{q}\\n\u6309\u8DEF\u7531\u8BFBdetails/,\u8F93\u51FAYAML")
-output: \u5355\u4E2A YAML \u5757\uFF0C\u542B evidence + conflicts\uFF1B\u7981\u8BFB .env/*secret*/*.pem/*.key\uFF1B\u6700\u591A 10 \u6587\u4EF6
-conflict: \u53D1\u73B0\u51B2\u7A81 \u2192 \u62A5\u544A\u7528\u6237\u5E76\u7B49\u5F85\u786E\u8BA4\uFF0C\u786E\u8BA4\u540E\u518D\u8C03\u7528 write
-write: proxy_task(subagent_type="memory-bank-writer", prompt="Target:...\\nDraft:...")\uFF1B\u7981\u6B62\u76F4\u63A5\u5199 memory-bank/
+
+trigger: \u6D89\u53CA\u9879\u76EE\u5B9E\u73B0/\u8BBE\u8BA1/\u5386\u53F2\u539F\u56E0
+drill_down: Step1 direct-read 1-3 details/*; Step2 \u9700\u8981\u8BC1\u636E/\u51B2\u7A81/\u8DE8\u6587\u4EF6 \u2192 memory-reader
+output: \u56DE\u7B54\u5FC5\u987B\u7ED9\u5F15\u7528\u6307\u9488
+gating: \u9AD8\u98CE\u9669\u5199\u524D\u9700\u5DF2\u8BFB patterns.md \u6216\u8C03\u7528\u8FC7 memory-reader
+
+write: proxy_task(subagent_type="memory-bank-writer", prompt="Target:...\\nDraft:...")
 more: \u5B8C\u6574\u89C4\u8303\u89C1 /memory-bank skill
 `;
     }
@@ -362,6 +367,97 @@ function getMessageGatingState(gatingKey) {
   }
   return state;
 }
+var ANCHOR_PATH_PATTERNS = [
+  /^memory-bank\/details\/requirements\//,
+  /^memory-bank\/details\/design\//,
+  /^memory-bank\/details\/progress\.md$/
+];
+var MAX_ANCHORS = 5;
+var ANCHOR_SENTINEL = "<memory-bank-anchors>";
+var ANCHOR_SENTINEL_CLOSE = "</memory-bank-anchors>";
+var FALLBACK_ANCHORS = [
+  "memory-bank/MEMORY.md",
+  "memory-bank/details/patterns.md"
+];
+function canonicalizeRelPath(rawPath, projectRoot) {
+  const abs = path.isAbsolute(rawPath) ? rawPath : path.resolve(projectRoot, rawPath);
+  const rel = path.relative(projectRoot, abs);
+  if (rel.startsWith(".."))
+    return "";
+  const posix = rel.replace(/\\/g, "/");
+  return process.platform === "darwin" || process.platform === "win32" ? posix.toLowerCase() : posix;
+}
+function isAnchorPath(canonicalPath) {
+  return ANCHOR_PATH_PATTERNS.some((p) => p.test(canonicalPath));
+}
+function updateAnchorLRU(lru, canonicalPath) {
+  const idx = lru.indexOf(canonicalPath);
+  if (idx !== -1)
+    lru.splice(idx, 1);
+  lru.push(canonicalPath);
+  while (lru.length > MAX_ANCHORS)
+    lru.shift();
+}
+function getSessionAnchorState(sessionID) {
+  let state = sessionAnchorStates.get(sessionID);
+  if (!state) {
+    state = { anchorsLRU: [], recovery: null, compactionCount: 0 };
+    sessionAnchorStates.set(sessionID, state);
+  }
+  return state;
+}
+async function validateAnchorPaths(paths, projectRoot) {
+  const validated = [];
+  for (const p of paths) {
+    try {
+      await access(path.join(projectRoot, p));
+      validated.push(p);
+    } catch {}
+  }
+  return validated;
+}
+function buildRequiredAnchors(anchorsLRU) {
+  const required = new Set(FALLBACK_ANCHORS);
+  for (const p of anchorsLRU) {
+    required.add(p);
+    if (required.size >= MAX_ANCHORS)
+      break;
+  }
+  return [...required];
+}
+async function buildAnchorBlock(sessionID, projectRoot) {
+  const state = getSessionAnchorState(sessionID);
+  const tracked = buildRequiredAnchors(state.anchorsLRU);
+  const validated = await validateAnchorPaths(tracked, projectRoot);
+  if (validated.length === 0)
+    return null;
+  let miniSCR = "";
+  try {
+    const entryContent = await readTextCached(path.join(projectRoot, MEMORY_BANK_ENTRY));
+    if (entryContent) {
+      const focusMatch = entryContent.match(/## Current Focus\n([\s\S]*?)(?=\n## |$)/);
+      if (focusMatch) {
+        const lines = focusMatch[1].trim().split(`
+`).slice(0, 6);
+        miniSCR = `
+Session state (from MEMORY.md):
+${lines.join(`
+`)}
+`;
+      }
+    }
+  } catch {}
+  const count = state.compactionCount + 1;
+  return `${ANCHOR_SENTINEL}
+## POST-COMPACTION RECOVERY (Compaction #${count})
+
+Compaction occurred. Before medium/high-risk writes, you MUST read:
+` + validated.map((p) => `- ${p}`).join(`
+`) + `
+` + miniSCR + `
+Recovery Gate blocks medium/high-risk writes until anchor files are read.
+${ANCHOR_SENTINEL_CLOSE}`;
+}
 function extractWritePaths(toolName, args) {
   const paths = [];
   const pathArgs = ["filePath", "path", "filename", "file", "dest", "destination", "target"];
@@ -388,7 +484,7 @@ function extractWritePaths(toolName, args) {
         if (m[1])
           paths.push(m[1]);
       }
-      for (const m of patchText.matchAll(/^\*\*\*\s+(?:Add|Update|Delete|Move to)\s+(?:File:\s*)?(.+)$/gm)) {
+      for (const m of patchText.matchAll(/^\*\*\*\s+(?:Add|Update|Delete|Move to:?)\s+(?:File:\s*)?(.+)$/gm)) {
         if (m[1])
           paths.push(m[1].trim());
       }
@@ -397,6 +493,12 @@ function extractWritePaths(toolName, args) {
   return [...new Set(paths)];
 }
 function assessWriteRisk(toolName, args, projectRoot) {
+  const safePatterns = [
+    /^memory-bank\/details\/progress\.md$/i,
+    /^memory-bank\/details\/learnings\//i,
+    /^memory-bank\/details\/requirements\//i,
+    /^memory-bank\/details\/.*\/index\.md$/i
+  ];
   const sensitivePatterns = [
     /^src\/auth\//i,
     /^src\/security\//i,
@@ -432,29 +534,23 @@ function assessWriteRisk(toolName, args, projectRoot) {
     /nginx\.conf$/i,
     /oauth/i,
     /sso/i,
-    /rbac/i
+    /rbac/i,
+    /plugin\/.*\.ts$/i
   ];
-  if (toolName === "multiedit")
-    return "high";
-  if (toolName === "apply_patch" || toolName === "patch") {
-    const patchText = args.patchText ?? args.patch ?? args.diff;
-    if (patchText) {
-      const stdFileMatches = patchText.match(/^(?:\+\+\+|---)\s+[ab]\/(.+)$/gm) || [];
-      const customFileMatches = patchText.match(/^\*\*\*\s+(?:Add|Update|Delete)\s+File:/gm) || [];
-      const totalFiles = stdFileMatches.length / 2 + customFileMatches.length;
-      if (totalFiles > 1)
-        return "high";
-    }
+  const allPaths = extractWritePaths(toolName, args);
+  const relativePaths = allPaths.map((p) => {
+    const rel = p.startsWith(projectRoot) ? p.slice(projectRoot.length).replace(/^\//, "") : p;
+    return rel.replace(/\\/g, "/");
+  });
+  if (relativePaths.length > 0 && relativePaths.every((p) => safePatterns.some((sp) => sp.test(p)))) {
+    return "low";
   }
-  const pathArgs = ["filePath", "path", "filename", "file", "dest", "destination", "target"];
-  for (const arg of pathArgs) {
-    const val = args[arg];
-    if (typeof val === "string") {
-      const relativePath = val.startsWith(projectRoot) ? val.slice(projectRoot.length).replace(/^\//, "").replace(/\\/g, "/") : val.replace(/\\/g, "/");
-      if (sensitivePatterns.some((p) => p.test(relativePath)))
-        return "high";
-    }
+  if (relativePaths.some((p) => sensitivePatterns.some((sp) => sp.test(p)))) {
+    return "high";
   }
+  const isMultiFile = toolName === "multiedit" || (toolName === "apply_patch" || toolName === "patch") && relativePaths.length > 1;
+  if (isMultiFile)
+    return "medium";
   return "low";
 }
 function computeTriggerSignature(state) {
@@ -761,31 +857,56 @@ ${triggers.join(`
         log.error("[HOOK] system.transform ERROR", String(err), { elapsed: Date.now() - hookStart });
       }
     },
-    "experimental.session.compacting": async (_input, output) => {
+    "experimental.session.compacting": async (input, output) => {
       const hookStart = Date.now();
-      log.info("[HOOK] session.compacting START");
+      const { sessionID } = input;
+      log.info("[HOOK] session.compacting START", { sessionID });
       try {
-        if (output.context.some((s) => s.includes(SENTINEL_OPEN))) {
-          log.info("[HOOK] session.compacting SKIP (sentinel exists)", { elapsed: Date.now() - hookStart });
-          return;
-        }
-        log.info("[HOOK] session.compacting building context...");
-        const ctx = await buildMemoryBankContext(projectRoot);
-        log.info("[HOOK] session.compacting context built", { hasCtx: !!ctx, elapsed: Date.now() - hookStart });
-        if (ctx) {
-          output.context.push(ctx);
-          log.info("[HOOK] session.compacting DONE (ctx pushed)", { elapsed: Date.now() - hookStart });
-          return;
-        }
-        const initInstruction = `${SENTINEL_OPEN}
+        if (!output.context.some((s) => s.includes(SENTINEL_OPEN))) {
+          log.info("[HOOK] session.compacting building context...");
+          const ctx = await buildMemoryBankContext(projectRoot);
+          log.info("[HOOK] session.compacting context built", { hasCtx: !!ctx, elapsed: Date.now() - hookStart });
+          if (ctx) {
+            output.context.push(ctx);
+          } else {
+            const initInstruction = `${SENTINEL_OPEN}
 ` + `# Memory Bank \u672A\u542F\u7528
 
 ` + `\u9879\u76EE \`${path.basename(projectRoot)}\` \u5C1A\u672A\u542F\u7528 Memory Bank\u3002
 
 ` + `\u53EF\u9009\uFF1A\u5982\u9700\u542F\u7528\u9879\u76EE\u8BB0\u5FC6\uFF0C\u8FD0\u884C \`/memory-bank-refresh\`\u3002
 ` + `${SENTINEL_CLOSE}`;
-        output.context.push(initInstruction);
-        log.info("[HOOK] session.compacting DONE (init pushed)", { elapsed: Date.now() - hookStart });
+            output.context.push(initInstruction);
+            log.info("[HOOK] session.compacting DONE (init pushed, no anchors)", { elapsed: Date.now() - hookStart });
+            return;
+          }
+        }
+        if (!output.context.some((s) => s.includes(ANCHOR_SENTINEL))) {
+          const anchorBlock = await buildAnchorBlock(sessionID, projectRoot);
+          if (anchorBlock) {
+            output.context.push(anchorBlock);
+            log.info("[HOOK] session.compacting anchor block injected", { sessionID, elapsed: Date.now() - hookStart });
+          }
+        }
+        const anchorState = getSessionAnchorState(sessionID);
+        const tracked = buildRequiredAnchors(anchorState.anchorsLRU);
+        const validPaths = await validateAnchorPaths(tracked, projectRoot);
+        if (validPaths.length > 0) {
+          anchorState.recovery = {
+            required: true,
+            anchorPaths: validPaths,
+            readFiles: new Set,
+            activatedAt: Date.now()
+          };
+          anchorState.compactionCount++;
+          log.info("[HOOK] session.compacting recovery set", {
+            sessionID,
+            anchorPaths: validPaths,
+            compactionCount: anchorState.compactionCount,
+            elapsed: Date.now() - hookStart
+          });
+        }
+        log.info("[HOOK] session.compacting DONE", { elapsed: Date.now() - hookStart });
       } catch (err) {
         log.error("[HOOK] session.compacting ERROR", String(err), { elapsed: Date.now() - hookStart });
       }
@@ -823,6 +944,7 @@ ${triggers.join(`
           sessionsById.delete(sessionId);
           writerSessionIDs.delete(sessionId);
           agentBySessionID.delete(sessionId);
+          sessionAnchorStates.delete(sessionId);
           log.info("Session deleted", { sessionId });
         }
         if (event.type === "message.updated") {
@@ -903,6 +1025,90 @@ ${triggers.join(`
     },
     "tool.execute.before": async (input, output) => {
       const { tool, sessionID } = input;
+      const toolLowerForRecovery = tool.toLowerCase();
+      const anchorState = getSessionAnchorState(sessionID);
+      const recovery = anchorState.recovery;
+      if (recovery?.required) {
+        const readToolsForRecovery = ["read"];
+        if (readToolsForRecovery.includes(toolLowerForRecovery)) {
+          const targetPath = output.args?.filePath || output.args?.path;
+          if (targetPath) {
+            const canonical = canonicalizeRelPath(targetPath, projectRoot);
+            if (canonical && recovery.anchorPaths.includes(canonical)) {
+              recovery.readFiles.add(canonical);
+              const allRead = recovery.anchorPaths.every((p) => recovery.readFiles.has(p));
+              if (allRead) {
+                anchorState.recovery = null;
+                log.info("Recovery Gate: cleared (all anchors read)", { sessionID, readFiles: [...recovery.readFiles] });
+              }
+            }
+          }
+        }
+        if (toolLowerForRecovery === "proxy_task") {
+          const subagentType = output.args?.subagent_type;
+          if (subagentType === "memory-reader") {
+            anchorState.recovery = null;
+            log.info("Recovery Gate: cleared (memory-reader called)", { sessionID });
+          }
+        }
+        if (anchorState.recovery?.required) {
+          const writeToolsForRecovery = ["write", "edit", "multiedit", "apply_patch", "patch"];
+          const isWriteTool = writeToolsForRecovery.includes(toolLowerForRecovery);
+          const isBashWrite = toolLowerForRecovery === "bash" && (() => {
+            const cmd = output.args?.command || "";
+            const bashWritePatterns = [
+              /(?<![0-9&])>(?![&>])\s*\S/,
+              /(?<![0-9&])>>\s*\S/,
+              /\|\s*tee\s/,
+              /\bsed\s+(-[^-]*)?-i/,
+              /\bperl\s+(-[^-]*)?-[pi]/
+            ];
+            return bashWritePatterns.some((p) => p.test(cmd));
+          })();
+          if (isWriteTool || isBashWrite) {
+            const riskLevel = isWriteTool ? assessWriteRisk(toolLowerForRecovery, output.args || {}, projectRoot) : "medium";
+            if (riskLevel !== "low") {
+              const validAnchors = await validateAnchorPaths(recovery.anchorPaths, projectRoot);
+              if (validAnchors.length === 0) {
+                anchorState.recovery = null;
+                log.info("Recovery Gate: cleared (all anchor files removed)", { sessionID });
+              } else if (validAnchors.length !== recovery.anchorPaths.length) {
+                recovery.anchorPaths = validAnchors;
+                const allRead = validAnchors.every((p) => recovery.readFiles.has(p));
+                if (allRead) {
+                  anchorState.recovery = null;
+                  log.info("Recovery Gate: cleared (remaining anchors all read)", { sessionID });
+                }
+              }
+              if (anchorState.recovery?.required) {
+                log.warn("Recovery Gate: write blocked", {
+                  sessionID,
+                  tool,
+                  riskLevel,
+                  anchorPaths: recovery.anchorPaths
+                });
+                throw new Error(`[Recovery Gate] Compaction detected. Before proceeding, read these anchor files:
+` + recovery.anchorPaths.map((p) => `  read({ filePath: "${p}" })`).join(`
+`) + `
+Or call: proxy_task({ subagent_type: "memory-reader", ... })`);
+              }
+            }
+          }
+        }
+      }
+      if (!recovery?.required) {
+        const readToolsForAnchors = ["read"];
+        if (readToolsForAnchors.includes(toolLowerForRecovery)) {
+          const targetPath = output.args?.filePath || output.args?.path;
+          if (targetPath) {
+            const canonical = canonicalizeRelPath(targetPath, projectRoot);
+            if (canonical && isAnchorPath(canonical)) {
+              updateAnchorLRU(anchorState.anchorsLRU, canonical);
+              log.debug("Anchor tracked", { sessionID, path: canonical, lru: anchorState.anchorsLRU });
+            }
+          }
+        }
+      }
       const isCaseInsensitiveFS = process.platform === "darwin" || process.platform === "win32";
       const normalize = (p) => isCaseInsensitiveFS ? p.toLowerCase() : p;
       let realProjectRoot = null;
@@ -948,15 +1154,17 @@ ${triggers.join(`
         const gatingKey = `${sessionID}::${messageKey}`;
         const gatingState = getMessageGatingState(gatingKey);
         const toolLower2 = tool.toLowerCase();
-        const readTools = ["read", "glob", "grep"];
+        const readTools = ["read"];
         if (readTools.includes(toolLower2)) {
-          const targetPath = output.args?.filePath || output.args?.path || output.args?.pattern;
+          const targetPath = output.args?.filePath || output.args?.path;
           if (targetPath && await isMemoryBankPath(targetPath)) {
             gatingState.readFiles.add(targetPath);
             const relativePath = targetPath.replace(projectRoot, "").replace(/^\//, "");
-            if (relativePath.includes("MEMORY.md") || relativePath.includes("patterns.md") || relativePath.includes("details/")) {
+            const normalizedPath = relativePath.replace(/\\/g, "/").replace(/^\//, "").toLowerCase();
+            const isPatterns = normalizedPath === "memory-bank/details/patterns.md";
+            if (isPatterns) {
               gatingState.contextSatisfied = true;
-              log.debug("Gating: context satisfied via read", { sessionID, gatingKey, targetPath });
+              log.debug("Gating: context satisfied via patterns.md read", { sessionID, gatingKey, targetPath });
             }
           }
         }
@@ -982,36 +1190,33 @@ ${triggers.join(`
                 targetPaths
               });
               throw new Error(`[Memory Bank Gating] \u68C0\u6D4B\u5230\u9AD8\u98CE\u9669\u5199\u64CD\u4F5C\uFF0C\u4F46\u672C\u8F6E\u672A\u8BFB\u53D6\u9879\u76EE\u4E0A\u4E0B\u6587\u3002
-` + `\u8BF7\u5148\u6267\u884C: read({ filePath: "memory-bank/details/patterns.md" })
-` + `\u6216\u6267\u884C: read({ filePath: "memory-bank/MEMORY.md" })`);
-            } else if (riskLevel === "high") {
-              log.warn("Gating: high-risk write warning (context not read)", {
+` + `\u8BF7\u5148\u6267\u884C: read({ filePath: "memory-bank/details/patterns.md" })`);
+            } else if ((riskLevel === "high" || riskLevel === "medium") && !gatingState.warnedThisMessage) {
+              gatingState.warnedThisMessage = true;
+              log.warn("Gating: write warning (context not read)", {
                 sessionID,
                 gatingKey,
                 tool,
                 riskLevel,
                 targetPaths
               });
-              if (!gatingState.warnedThisMessage) {
-                gatingState.warnedThisMessage = true;
-                client.session.prompt({
-                  path: { id: sessionID },
-                  body: {
-                    noReply: true,
-                    variant: PLUGIN_PROMPT_VARIANT,
-                    parts: [{
-                      type: "text",
-                      text: `## [Memory Bank Gating Warning]
+              client.session.prompt({
+                path: { id: sessionID },
+                body: {
+                  noReply: true,
+                  variant: PLUGIN_PROMPT_VARIANT,
+                  parts: [{
+                    type: "text",
+                    text: `## [Memory Bank Gating Warning]
 
-\u68C0\u6D4B\u5230\u9AD8\u98CE\u9669\u5199\u64CD\u4F5C\uFF0C\u4F46\u672C\u8F6E\u672A\u8BFB\u53D6\u9879\u76EE\u4E0A\u4E0B\u6587\u3002
+\u68C0\u6D4B\u5230${riskLevel === "high" ? "\u9AD8" : "\u4E2D"}\u98CE\u9669\u5199\u64CD\u4F5C\uFF0C\u4F46\u672C\u8F6E\u672A\u8BFB\u53D6\u9879\u76EE\u4E0A\u4E0B\u6587\u3002
 
 \u5EFA\u8BAE\u5148\u6267\u884C: \`read({ filePath: "memory-bank/details/patterns.md" })\`
 
-\u5982\u9700\u8DF3\u8FC7\u68C0\u67E5\uFF0C\u7528\u6237\u53EF\u56DE\u590D"\u8DF3\u8FC7\u4E0A\u4E0B\u6587"\u3002`
-                    }]
-                  }
-                }).catch((err) => log.error("Failed to send gating warning:", String(err)));
-              }
+\u6216\u8C03\u7528: \`proxy_task({ subagent_type: "memory-reader", ... })\``
+                  }]
+                }
+              }).catch((err) => log.error("Failed to send gating warning:", String(err)));
             }
           }
         }
@@ -1024,16 +1229,45 @@ ${triggers.join(`
             /\bsed\s+(-[^-]*)?-i/,
             /\bperl\s+(-[^-]*)?-[pi]/
           ];
+          const bashSensitivePatterns = [
+            /package\.json/i,
+            /\.env/i,
+            /tsconfig\.json/i,
+            /src\/auth\//i,
+            /src\/security\//i,
+            /plugin\//i,
+            /docker/i,
+            /\.github\/workflows/i,
+            /infra\//i
+          ];
           const isLikelyWrite = bashWritePatterns.some((p) => p.test(command));
+          const isSensitiveTarget = bashSensitivePatterns.some((p) => p.test(command));
           if (isLikelyWrite) {
-            const riskLevel = assessWriteRisk("bash", { command }, projectRoot);
+            const riskLevel = isSensitiveTarget ? "high" : "medium";
             if (riskLevel === "high" && GATING_MODE === "block") {
               log.warn("Gating: bash write blocked (context not read)", { sessionID, gatingKey, command: command.slice(0, 100) });
               throw new Error(`[Memory Bank Gating] \u68C0\u6D4B\u5230 bash \u5199\u5165\u64CD\u4F5C\uFF0C\u4F46\u672C\u8F6E\u672A\u8BFB\u53D6\u9879\u76EE\u4E0A\u4E0B\u6587\u3002
 ` + `\u8BF7\u5148\u6267\u884C: read({ filePath: "memory-bank/details/patterns.md" })`);
-            } else if (GATING_MODE === "warn" && !gatingState.warnedThisMessage) {
+            } else if (!gatingState.warnedThisMessage) {
               gatingState.warnedThisMessage = true;
-              log.warn("Gating: bash write warning (context not read)", { sessionID, gatingKey, command: command.slice(0, 100) });
+              log.warn("Gating: bash write warning (context not read)", { sessionID, gatingKey, riskLevel, command: command.slice(0, 100) });
+              client.session.prompt({
+                path: { id: sessionID },
+                body: {
+                  noReply: true,
+                  variant: PLUGIN_PROMPT_VARIANT,
+                  parts: [{
+                    type: "text",
+                    text: `## [Memory Bank Gating Warning]
+
+\u68C0\u6D4B\u5230 bash ${riskLevel === "high" ? "\u9AD8" : "\u4E2D"}\u98CE\u9669\u5199\u5165\u64CD\u4F5C\uFF0C\u4F46\u672C\u8F6E\u672A\u8BFB\u53D6\u9879\u76EE\u4E0A\u4E0B\u6587\u3002
+
+\u5EFA\u8BAE\u5148\u6267\u884C: \`read({ filePath: "memory-bank/details/patterns.md" })\`
+
+\u6216\u8C03\u7528: \`proxy_task({ subagent_type: "memory-reader", ... })\``
+                  }]
+                }
+              }).catch((err) => log.error("Failed to send bash gating warning:", String(err)));
             }
           }
         }
@@ -1082,7 +1316,7 @@ ${triggers.join(`
               if (m[1])
                 paths.push(m[1]);
             }
-            for (const m of patchText.matchAll(/^\*\*\*\s+(?:Add|Update|Delete|Move to)\s+(?:File:\s*)?(.+)$/gm)) {
+            for (const m of patchText.matchAll(/^\*\*\*\s+(?:Add|Update|Delete|Move to:?)\s+(?:File:\s*)?(.+)$/gm)) {
               if (m[1])
                 paths.push(m[1].trim());
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memory-bank-skill",
-  "version": "7.0.1",
+  "version": "7.2.0",
   "description": "Memory Bank - 项目记忆系统，让 AI 助手在每次对话中都能快速理解项目上下文",
   "type": "module",
   "main": "dist/plugin.js",