memory-bank-skill 7.4.1 → 7.4.2

package/dist/cli.js

@@ -11,7 +11,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "memory-bank-skill",
-  version: "7.4.1",
+  version: "7.4.2",
   description: "Memory Bank - \u9879\u76EE\u8BB0\u5FC6\u7CFB\u7EDF\uFF0C\u8BA9 AI \u52A9\u624B\u5728\u6BCF\u6B21\u5BF9\u8BDD\u4E2D\u90FD\u80FD\u5FEB\u901F\u7406\u89E3\u9879\u76EE\u4E0A\u4E0B\u6587",
   type: "module",
   main: "dist/plugin.js",

package/dist/plugin.js

@@ -3,6 +3,7 @@ var __require = import.meta.require;
 
 // plugin/memory-bank.ts
 import { stat, readFile, access, realpath } from "fs/promises";
+import { realpathSync } from "fs";
 import { execSync } from "child_process";
 import path from "path";
 var DEBUG = process.env.MEMORY_BANK_DEBUG === "1";
@@ -382,12 +383,63 @@ var FALLBACK_ANCHORS = [
 ];
 function canonicalizeRelPath(rawPath, projectRoot) {
   const abs = path.isAbsolute(rawPath) ? rawPath : path.resolve(projectRoot, rawPath);
-  const rel = path.relative(projectRoot, abs);
-  if (rel.startsWith(".."))
-    return "";
+  let rel = path.relative(projectRoot, abs);
+  if (rel.startsWith("..")) {
+    try {
+      const realAbs = realpathSync(abs);
+      const realRoot = realpathSync(projectRoot);
+      rel = path.relative(realRoot, realAbs);
+      if (rel.startsWith(".."))
+        return "";
+    } catch {
+      return "";
+    }
+  }
   const posix = rel.replace(/\\/g, "/");
   return process.platform === "darwin" || process.platform === "win32" ? posix.toLowerCase() : posix;
 }
+function stripQuotedContent(cmd) {
+  let result = "";
+  let inSingle = false;
+  let inDouble = false;
+  for (let i = 0;i < cmd.length; i++) {
+    const ch = cmd[i];
+    if (inSingle) {
+      if (ch === "'")
+        inSingle = false;
+      continue;
+    }
+    if (inDouble) {
+      if (ch === "\\" && i + 1 < cmd.length) {
+        i++;
+        continue;
+      }
+      if (ch === '"')
+        inDouble = false;
+      continue;
+    }
+    if (ch === "'") {
+      inSingle = true;
+      continue;
+    }
+    if (ch === '"') {
+      inDouble = true;
+      continue;
+    }
+    result += ch;
+  }
+  return result;
+}
+var BASH_REDIRECT_PATTERNS = [
+  /(?<![0-9&])>(?![&>])\s*\S/,
+  /(?<![0-9&])>>\s*\S/,
+  /\|\s*tee\s/,
+  /\bsed\s+(-[^-]*)?-i/,
+  /\bperl\s+(-[^-]*)?-[pi]/
+];
+function hasBashRedirectOutsideQuotes(cmd) {
+  return BASH_REDIRECT_PATTERNS.some((p) => p.test(stripQuotedContent(cmd)));
+}
 function isAnchorPath(canonicalPath) {
   return ANCHOR_PATH_PATTERNS.some((p) => p.test(canonicalPath));
 }
@@ -1045,17 +1097,7 @@ ${triggers.join(`
         if (anchorState.recovery?.required) {
           const writeToolsForRecovery = ["write", "edit", "multiedit", "apply_patch", "patch"];
           const isWriteTool = writeToolsForRecovery.includes(toolLowerForRecovery);
-          const isBashWrite = toolLowerForRecovery === "bash" && (() => {
-            const cmd = output.args?.command || "";
-            const bashWritePatterns = [
-              /(?<![0-9&])>(?![&>])\s*\S/,
-              /(?<![0-9&])>>\s*\S/,
-              /\|\s*tee\s/,
-              /\bsed\s+(-[^-]*)?-i/,
-              /\bperl\s+(-[^-]*)?-[pi]/
-            ];
-            return bashWritePatterns.some((p) => p.test(cmd));
-          })();
+          const isBashWrite = toolLowerForRecovery === "bash" && hasBashRedirectOutsideQuotes(output.args?.command || "");
           if (isWriteTool || isBashWrite) {
             const riskLevel = isWriteTool ? assessWriteRisk(toolLowerForRecovery, output.args || {}, projectRoot) : "medium";
             if (riskLevel !== "low") {
@@ -1213,13 +1255,6 @@ Or call: proxy_task({ subagent_type: "memory-reader", ... })`);
         }
         if (toolLower2 === "bash" && !gatingState.contextSatisfied) {
           const command = output.args?.command || "";
-          const bashWritePatterns = [
-            /(?<![0-9&])>(?![&>])\s*\S/,
-            /(?<![0-9&])>>\s*\S/,
-            /\|\s*tee\s/,
-            /\bsed\s+(-[^-]*)?-i/,
-            /\bperl\s+(-[^-]*)?-[pi]/
-          ];
           const bashSensitivePatterns = [
             /package\.json/i,
             /\.env/i,
@@ -1231,7 +1266,7 @@ Or call: proxy_task({ subagent_type: "memory-reader", ... })`);
             /\.github\/workflows/i,
             /infra\//i
           ];
-          const isLikelyWrite = bashWritePatterns.some((p) => p.test(command));
+          const isLikelyWrite = hasBashRedirectOutsideQuotes(command);
           const isSensitiveTarget = bashSensitivePatterns.some((p) => p.test(command));
           if (isLikelyWrite) {
             const riskLevel = isSensitiveTarget ? "high" : "medium";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memory-bank-skill",
-  "version": "7.4.1",
+  "version": "7.4.2",
   "description": "Memory Bank - 项目记忆系统，让 AI 助手在每次对话中都能快速理解项目上下文",
   "type": "module",
   "main": "dist/plugin.js",

package/skills/memory-bank/references/writer.md

@@ -284,6 +284,33 @@ USER_BLOCK 将保持不变。
 | Decision Highlights | 新增决策时追加（保持 10-20 条以内） |
 | Routing Rules | 仅在 details/ 结构变化时更新 |
 
+### MEMORY.md 膨胀控制
+
+MEMORY.md 是单入口索引，必须保持精简。按行数控制膨胀：
+
+| 行数 | 动作 |
+|------|------|
+| ≤ 120 行 | 正常维护 |
+| 120 - 200 行 | 审查：Decision Highlights 超 15 条归档旧条目到 details/patterns.md，Quick Answers 超 8 条删过期项 |
+| > 200 行 | 强制分区：膨胀区块提取到 details/，MEMORY.md 只留摘要 + 指针 |
+
+**分区操作**（> 200 行时）：
+
+```
+1. 识别膨胀区块（通常是 Decision Highlights 或 Routing Rules）
+2. 提取到 details/：
+   - Decision Highlights 旧条目 → details/patterns.md
+   - Routing Rules 过多 → details/routing-extended.md
+   - Quick Answers 过多 → details/faq.md
+3. MEMORY.md 保留：
+   - 最近 5-8 条 Decision Highlights
+   - 核心 Routing Rules（通用 + 高频项目特定）
+   - 3-5 条最高频 Quick Answers
+4. 添加指针：「完整历史见 details/patterns.md」
+```
+
+**原则**：MEMORY.md 是路由器不是数据库，超过一屏能扫完的量就该分区。
+
 ### 详情文件写入
 
 ```