sage-mem 2.1.23 → 2.1.24

package/README.md

@@ -12,7 +12,7 @@
 
 **Cross-session memory for DeepSeek Harness — plain markdown files, no database, no worker.**
 
-**Current release: `2.1.23`** — the npm badge above is the dynamic source of truth. **Contract baseline: `1.0.0`** — the first stable release, whose public commitments, the capability boundaries and the list of things it explicitly cannot do are frozen in the
+**Current release: `2.1.24`** — the npm badge above is the dynamic source of truth. **Contract baseline: `1.0.0`** — the first stable release, whose public commitments, the capability boundaries and the list of things it explicitly cannot do are frozen in the
 [frozen contract](https://github.com/gezi-wen/sage-mem/blob/main/docs/1.0.0-contract.md).
 
 If it is useful to you, a Star is the most direct feedback.

package/README.zh.md

@@ -14,7 +14,7 @@
 
 > File-based cross-session memory for DeepSeek Harness — every memory is a plain markdown file you can open, edit and delete. No database, no worker, no port.
 
-**当前发布版本：`2.1.23`** —— 顶部 npm 徽章是动态权威。**契约基线：`1.0.0`** —— 第一个稳定版，公开承诺、能力边界与「明确做不到」的清单冻结在
+**当前发布版本：`2.1.24`** —— 顶部 npm 徽章是动态权威。**契约基线：`1.0.0`** —— 第一个稳定版，公开承诺、能力边界与「明确做不到」的清单冻结在
 [契约冻结](https://github.com/gezi-wen/sage-mem/blob/main/docs/1.0.0-contract.md)。
 
 如果它对你有用，给个 Star 是最直接的反馈。

package/lib/autodream/tools.js

@@ -30,7 +30,7 @@ import { createHash } from 'node:crypto'
 import { auditMemoryDir, formatAudit, parseFrontmatterLite } from './audit.js'
 import { archiveMemory } from '../memory/archive.js'
 import { MAX_FILE_BYTES, STATE_ROOT } from '../memory/config.js'
-import { INDEX_FILE_KEY, SESSION_LOG_KEY } from '../shared/md-name.js'
+import { INDEX_FILE_KEY, SESSION_LOG_KEY, isPlainMdName } from '../shared/md-name.js'
 import { stampHuman as localStamp } from '../shared/stamp.js'
 import { writeFileAtomic, warnLog } from '../memory/util.js'
 import { buildConflict, listConflicts, readConflict, sameConflict, writeConflict } from '../memory/conflicts.js'
@@ -58,10 +58,13 @@ export function safeMemoryPath(memoryDir, raw) {
   if (typeof raw !== 'string') return null
   const trimmed = raw.trim()
   if (!trimmed) return null
-  // 显式拒绝任何路径分隔与上跳：basename 只做兜底，先拒绝更清楚。
-  if (trimmed.includes('/') || trimmed.includes('\\') || trimmed.includes('..')) return null
-  if (!/\.md$/i.test(trimmed)) return null
+  // 文件名合法性**只用唯一判据**（`shared/md-name.js`）：路径分隔符、冒号（NTFS 交替数据流）、
+  // 通配符与控制字符一律拒。这里曾经自己抄了一份、只拒了两种分隔符与上跳 ——
+  // 于是 `a:b.md` / `MEMORY.md:evil.md` 能一路走到 join，而它正是这条写路径的入口（2026-11-03 收敛）。
+  if (!isPlainMdName(trimmed)) return null
   const base = basename(trimmed)
+  // 业务约束，比「文件名合法性」更严：不写隐藏文件。它是本函数比
+  // `isPlainMdName` 多出来的**唯一**一条，`test/shared-parity-test.mjs` 第 1 组盯着它。
   if (base.startsWith('.')) return null
   return join(memoryDir, base)
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sage-mem",
   "description": "Cross-session memory for DeepSeek Harness — plain markdown files, no database, no worker.",
-  "version": "2.1.23",
+  "version": "2.1.24",
   "type": "module",
   "main": "lib/index.js",
   "icon": "./icon.png",