sage-mem 0.9.19 → 0.9.20

package/lib/autodream-tools.js

@@ -32,6 +32,8 @@ import { archiveMemory } from './memory/archive.js'
 import { MAX_FILE_BYTES, STATE_ROOT } from './memory/config.js'
 import { writeFileAtomic, warnLog } from './memory/util.js'
 import { buildConflict, writeConflict } from './memory/conflicts.js'
+import { memoryPathOf } from './memory/paths.js'
+import { decideWriteIntent } from './memory/write-gate.js'
 import { inspectMemoryEntry, reservedIdentitySet } from './memory/scan.js'
 
 /** 单次 read_memory 返回的正文上限（字符）。超过就截断并明确告诉模型。 */
@@ -534,8 +536,28 @@ export function createToolRunner(opts) {
       return null
     }
     const target = await fs.resolve(fullPath)
+    // ⚠️ **守卫必须由我们自己传。** `fs/write-intent` 只为「工具发起」的写入派发，
+    // 插件自己调 `writeText` 时一次都不发（实测）—— 不自己传，这次写入就是**无守卫**的，
+    // 那正是 D4 要避免的漏洞，也是「两套写入者静默互踩」的入口。
+    // 判定表与写门用的是同一个（`write-gate.js`），所以两条路的语义不会漂。
+    let expected
+    if (typeof fs.stat === 'function') {
+      try {
+        const info = await fs.stat(target)
+        expected = decideWriteIntent({
+          memoryPath: memoryPathOf(fullPath, memoryDir),
+          exists: !!info,
+          version: info?.version ?? null,
+          caller: undefined,
+        }).intent
+      } catch {
+        // 探不到就不猜：不传守卫（宿主按默认语义走），也绝不退化成 createIfAbsent ——
+        // 那对**其实存在**的文件是一次误拦。
+        expected = undefined
+      }
+    }
     try {
-      return await fs.writeText(target, content)
+      return await fs.writeText(target, content, expected)
     } catch (err) {
       // 版本过期不是「写失败」，是**一次待判定的冲突**：有人在我们读入之后改过这份记忆。
       // 落一条记录（保留哪边由人决定），然后**照旧把错误抛出去** ——

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sage-mem",
   "description": "File-based memory plugin for DeepSeek Harness (DSH) — cross-session memory in plain markdown files, with a memory star-map view, type/tag filtering, retrieval aliases, and an optional autodream pass that consolidates memories on demand or on a schedule — with per-run rollback points, a per-file change declaration (what changed and why), and a separately selectable model for the consolidation pass",
-  "version": "0.9.19",
+  "version": "0.9.20",
   "type": "module",
   "main": "lib/index.js",
   "exports": {