@lmzhen/dsh-evolution-core 0.1.0-rc.43 → 0.1.0-rc.45

package/lib/index.js

@@ -149,19 +149,44 @@ function emptyRecord() {
 		archived_at: null
 	};
 }
+const isTimestamp = (value) => value === null || typeof value === "string";
+/**
+* Field-level normalization for one sidecar record (rc.42 audit P2-3): the
+* spread used to copy any junk through verbatim, so a corrupted file could
+* carry `use_count: "3"` into the quality math and lifecycle comparisons as
+* NaN. Every field falls back to its `emptyRecord()` baseline unless it has
+* exactly the declared type; an invalid `created_at` anchors the age clock at
+* now (first-sight defer semantics for a record whose age is unknowable).
+* Pure — exported for unit tests; `loadUsage` is the production caller.
+*/
+function normalizeUsageRecord(record) {
+	const base = emptyRecord();
+	if (!record || typeof record !== "object" || Array.isArray(record)) return base;
+	const raw = record;
+	const num = (value, fallback) => typeof value === "number" && Number.isFinite(value) ? value : fallback;
+	const bool = (value, fallback) => typeof value === "boolean" ? value : fallback;
+	return {
+		created_by: typeof raw.created_by === "string" ? raw.created_by : null,
+		use_count: num(raw.use_count, base.use_count),
+		view_count: num(raw.view_count, base.view_count),
+		patch_count: num(raw.patch_count, base.patch_count),
+		last_used_at: isTimestamp(raw.last_used_at) ? raw.last_used_at : base.last_used_at,
+		last_viewed_at: isTimestamp(raw.last_viewed_at) ? raw.last_viewed_at : base.last_viewed_at,
+		last_patched_at: isTimestamp(raw.last_patched_at) ? raw.last_patched_at : base.last_patched_at,
+		created_at: typeof raw.created_at === "string" ? raw.created_at : base.created_at,
+		state: raw.state === "stale" || raw.state === "archived" ? raw.state : "active",
+		pinned: bool(raw.pinned, base.pinned),
+		archived_at: isTimestamp(raw.archived_at) ? raw.archived_at : base.archived_at,
+		quality_score: typeof raw.quality_score === "number" && Number.isFinite(raw.quality_score) ? raw.quality_score : void 0,
+		quality_warn: typeof raw.quality_warn === "boolean" ? raw.quality_warn : void 0
+	};
+}
 async function loadUsage(root, io = nodeEvolutionIo()) {
 	const map = /* @__PURE__ */ new Map();
 	const raw = await io.readText(usageFile(root));
 	if (raw !== null) try {
 		const parsed = JSON.parse(raw);
-		for (const [name, record] of Object.entries(parsed)) {
-			const base = emptyRecord();
-			map.set(name, {
-				...base,
-				...record,
-				state: record.state === "stale" || record.state === "archived" ? record.state : "active"
-			});
-		}
+		for (const [name, record] of Object.entries(parsed)) map.set(name, normalizeUsageRecord(record));
 	} catch {}
 	return map;
 }
@@ -287,6 +312,8 @@ const DEFAULT_STALE_AFTER_DAYS = 30;
 const DEFAULT_ARCHIVE_AFTER_DAYS = 90;
 const DEFAULT_MEMORY_CHAR_LIMIT = 2200;
 const DEFAULT_USER_CHAR_LIMIT = 1375;
+/** Consolidation-failure backoff cap, shared by MemoryStore and memory-files' Config default. */
+const DEFAULT_CONSOLIDATION_FAILURES = 3;
 const DEFAULT_SKILL_CONTENT_CHARS = 1e5;
 //#endregion
 //#region lib/types/curator.js
@@ -922,6 +949,15 @@ function scanContentThreats(text, maxScanChars = 65536, options = NO_SCAN_OPTION
 * same 10× bound around a file that should never exceed the store limit).
 */
 const READ_GUARD_FACTOR = 10;
+/**
+* Consolidation-failure backoff window (package-private, rc.42 audit P2-1):
+* only failures inside the window count toward `maxConsolidationFailures`.
+* The store cannot observe turn boundaries, so the model-facing "this turn"
+* phrasing is approximated with ten minutes — generous enough to cover one
+* turn's retry loop, short enough that a failure yesterday never makes today's
+* first refusal say "stop retrying".
+*/
+const FAILURE_WINDOW_MS = 10 * 6e4;
 function memoryRoot(env = process.env) {
 	return join(env.DSH_HOME ?? join(homedir(), ".dsh"), "memories");
 }
@@ -945,6 +981,7 @@ var MemoryStore = class {
 	maxFailures;
 	io;
 	failureCount = 0;
+	lastFailureAt = 0;
 	constructor(options = {}) {
 		this.io = options.io ?? nodeEvolutionIo();
 		this.memoryLimit = options.memoryCharLimit ?? 2200;
@@ -984,6 +1021,8 @@ var MemoryStore = class {
 		this.failureCount = 0;
 	}
 	failure(target, message, entries) {
+		if (Date.now() - this.lastFailureAt > FAILURE_WINDOW_MS) this.failureCount = 0;
+		this.lastFailureAt = Date.now();
 		this.failureCount += 1;
 		const chars = entries.join(ENTRY_DELIMITER).length;
 		if (this.failureCount > this.maxFailures) return {
@@ -1313,11 +1352,17 @@ var MemoryStore = class {
 	* blank lines, leading/trailing delimiters) that indicate the file was
 	* edited outside MemoryStore. Purely single-canonical content reaches the
 	* same serialization and returns false, so a normal write is never flagged.
+	*
+	* An absent, empty, or whitespace-only file is the "never written" state
+	* (rc.42 audit P1-6): it parses to zero entries, so the canonical form
+	* `'\n'` can never byte-match it and every write path was permanently
+	* refused with "External drift detected" — including the repairs the model
+	* would need to make. Such files are adopted instead of flagged.
 	*/
 	async detectDrift(target) {
 		if (await this.oversizedFile(target)) return true;
 		const raw = await this.io.readText(fileFor(this.root, target));
-		if (raw === null) return false;
+		if (raw === null || raw.trim() === "") return false;
 		const entries = normalizeEntries(raw);
 		const limit = this.limitFor(target);
 		if (limit > 0 && entries.some((entry) => entry.length > limit)) return true;
@@ -1346,7 +1391,7 @@ async function loadMutations(root, io = nodeEvolutionIo()) {
 	if (raw === null) return [];
 	try {
 		const parsed = JSON.parse(raw);
-		return (Array.isArray(parsed) ? parsed : typeof parsed === "object" && parsed !== null && Array.isArray(parsed.records) ? parsed.records : []).filter((entry) => typeof entry === "object" && entry !== null && typeof entry.skillName === "string" && typeof entry.action === "string");
+		return (Array.isArray(parsed) ? parsed : typeof parsed === "object" && parsed !== null && Array.isArray(parsed.records) ? parsed.records : []).filter((entry) => typeof entry === "object" && entry !== null && typeof entry.skillName === "string" && typeof entry.action === "string" && typeof entry.at === "string");
 	} catch {
 		return [];
 	}
@@ -1622,6 +1667,26 @@ function parseFrontmatter(content) {
 		body
 	};
 }
+/**
+* Skill names referenced by a SKILL.md's `related_skills` frontmatter
+* (B-line G3, rc.44): the single parsing source for the quality references
+* factor and the learning-graph edges. The DSH frontmatter parser keeps the
+* YAML value as a string (`"[a, b]"`), so names are scanned out of it; each
+* must satisfy the skill-name shape and the referencing skill itself is
+* excluded. Pure and deduplicated.
+*/
+function relatedSkillNames(content, exclude) {
+	const parsed = parseFrontmatter(content);
+	if (!parsed) return [];
+	const raw = parsed.frontmatter["related_skills"];
+	if (typeof raw !== "string") return [];
+	const names = /* @__PURE__ */ new Set();
+	for (const match of Array.from(raw.matchAll(/[a-z0-9][a-z0-9-]*/g))) {
+		const target = match[0];
+		if (target && SKILL_NAME_RE.test(target) && target !== exclude) names.add(target);
+	}
+	return [...names];
+}
 function validateFrontmatter(content, expectedName, limits = DEFAULT_SKILL_LIMITS) {
 	const parsed = parseFrontmatter(content);
 	if (!parsed) return "SKILL.md must start and end with YAML frontmatter and include a body.";
@@ -1748,7 +1813,7 @@ var SkillLibrary = class {
 	async list() {
 		const summaries = [];
 		for (const name of await listNames(this.root, this.io)) {
-			const dir = skillDir(this.root, name);
+			const dir = this.dirOf(name);
 			const md = await this.io.readText(join(dir, "SKILL.md"));
 			if (!md) continue;
 			const parsed = parseFrontmatter(md);
@@ -1765,9 +1830,24 @@ var SkillLibrary = class {
 		}
 		return summaries;
 	}
-	async read(name) {
+	async read(rawName) {
+		const name = rawName.trim();
 		if (this.badName(name) !== null) return null;
-		return this.io.readText(join(skillDir(this.root, name), "SKILL.md"));
+		return this.io.readText(join(this.dirOf(name), "SKILL.md"));
+	}
+	/**
+	
+	* Single path-building choke point (rc.42 audit P2-5): every directory path
+	
+	* is built from the TRIMMED name, so a name that passes `badName` (which
+	
+	* trims before validating) can never mint a second, whitespace-padded
+	
+	* directory next to the real one. Callers keep passing raw user input.
+	
+	*/
+	dirOf(name) {
+		return skillDir(this.root, name.trim());
 	}
 	/** Name-format guard shared by every path-building mutator/reader. */
 	badName(name) {
@@ -1775,14 +1855,16 @@ var SkillLibrary = class {
 		if (!SKILL_NAME_RE.test(normalized) || normalized.length > this.limits.maxNameLength) return `Invalid skill name "${normalized}". Use lowercase letters, digits, and hyphens (<= ${this.limits.maxNameLength}).`;
 		return null;
 	}
-	async writeProtection(name, origin = "foreground") {
-		const dir = skillDir(this.root, name);
+	async writeProtection(rawName, origin = "foreground") {
+		const name = rawName.trim();
+		const dir = this.dirOf(name);
 		for (const marker of ["bundled", "hub-installed"]) if (await this.io.exists(markerPath(dir, marker))) return marker;
 		if (origin === "background_review" && await this.io.exists(markerPath(dir, "pinned"))) return "pinned";
 		return null;
 	}
-	async deleteProtection(name, options = {}) {
-		const dir = skillDir(this.root, name);
+	async deleteProtection(rawName, options = {}) {
+		const name = rawName.trim();
+		const dir = this.dirOf(name);
 		const markers = options.allowBundled ? ["hub-installed", "pinned"] : [
 			"bundled",
 			"hub-installed",
@@ -1791,26 +1873,30 @@ var SkillLibrary = class {
 		for (const marker of markers) if (await this.io.exists(markerPath(dir, marker))) return marker;
 		return null;
 	}
-	async isManaged(name) {
-		const dir = skillDir(this.root, name);
+	async isManaged(rawName) {
+		const name = rawName.trim();
+		const dir = this.dirOf(name);
 		return await this.io.exists(markerPath(dir, "hermes-managed"));
 	}
 	/** Whether the skill carries the bundled marker (curator prune-builtins eligibility). */
-	async isBundled(name) {
+	async isBundled(rawName) {
+		const name = rawName.trim();
 		if (this.badName(name) !== null) return false;
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		return await this.io.exists(markerPath(dir, "bundled"));
 	}
 	/** Whether the skill carries the pinned marker (the marker is the factual source; usage.pinned mirrors it). */
-	async isPinned(name) {
+	async isPinned(rawName) {
+		const name = rawName.trim();
 		if (this.badName(name) !== null) return false;
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		return await this.io.exists(markerPath(dir, "pinned"));
 	}
 	/** Count non-empty support subdirectories (richness input for quality scoring). */
-	async countSupportDirs(name) {
+	async countSupportDirs(rawName) {
+		const name = rawName.trim();
 		if (this.badName(name) !== null) return 0;
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		let entries;
 		try {
 			entries = await this.io.list(dir);
@@ -1859,7 +1945,7 @@ var SkillLibrary = class {
 			ok: false,
 			message: "Only the foreground (user or the main agent) may pin or unpin skills."
 		};
-		const dir = skillDir(this.root, normalized);
+		const dir = this.dirOf(normalized);
 		const marker = markerPath(dir, "pinned");
 		const existing = await this.io.exists(marker);
 		if (pinned && existing) return {
@@ -1901,7 +1987,7 @@ var SkillLibrary = class {
 			ok: false,
 			message: threat
 		};
-		const dir = skillDir(this.root, normalized);
+		const dir = this.dirOf(normalized);
 		if (await this.io.exists(join(dir, "SKILL.md"))) return {
 			ok: false,
 			message: `Skill "${normalized}" already exists.`
@@ -1915,13 +2001,14 @@ var SkillLibrary = class {
 			path: dir
 		};
 	}
-	async update(name, content, origin = "foreground") {
+	async update(rawName, content, origin = "foreground") {
+		const name = rawName.trim();
 		const badName = this.badName(name);
 		if (badName) return {
 			ok: false,
 			message: badName
 		};
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		const md = await this.io.readText(join(dir, "SKILL.md"));
 		if (!md) return {
 			ok: false,
@@ -1950,13 +2037,14 @@ var SkillLibrary = class {
 			path: dir
 		};
 	}
-	async patch(name, oldString, newString, filePath = "", replaceAll = false, origin = "foreground") {
+	async patch(rawName, oldString, newString, filePath = "", replaceAll = false, origin = "foreground") {
+		const name = rawName.trim();
 		const badName = this.badName(name);
 		if (badName) return {
 			ok: false,
 			message: badName
 		};
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		const skillMd = join(dir, "SKILL.md");
 		if (!await this.io.exists(skillMd)) return {
 			ok: false,
@@ -2016,13 +2104,14 @@ var SkillLibrary = class {
 			path: dir
 		};
 	}
-	async archive(name, options = {}) {
+	async archive(rawName, options = {}) {
+		const name = rawName.trim();
 		const badName = this.badName(name);
 		if (badName) return {
 			ok: false,
 			message: badName
 		};
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		const md = await this.io.readText(join(dir, "SKILL.md"));
 		if (!md) return {
 			ok: false,
@@ -2034,14 +2123,17 @@ var SkillLibrary = class {
 			message: `Skill "${name}" is protected (${protection}).`
 		};
 		if (options.absorbedInto) {
-			if (!await this.io.readText(join(skillDir(this.root, options.absorbedInto), "SKILL.md"))) return {
+			if (!await this.io.readText(join(this.dirOf(options.absorbedInto), "SKILL.md"))) return {
 				ok: false,
 				message: `absorbed_into="${options.absorbedInto}" does not exist.`
 			};
 		}
 		const archiveRoot = join(this.root, ".archive");
-		let dest = join(archiveRoot, name);
-		if (await this.io.exists(dest)) dest = join(archiveRoot, `${name}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[-:T]/g, "").slice(0, 14)}`);
+		let dest = join(archiveRoot, name.trim());
+		if (await this.io.exists(dest)) {
+			const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[-:T]/g, "").slice(0, 14);
+			dest = join(archiveRoot, `${name.trim()}-${stamp}`);
+		}
 		try {
 			await this.io.rename(dir, dest);
 		} catch {
@@ -2063,25 +2155,26 @@ var SkillLibrary = class {
 	* collapse into one, and the originals stay recoverable under `.archive/`.
 	*/
 	async consolidate(target, sources, origin = "foreground") {
-		const normalizedSources = [...new Set(sources)].filter((name) => name !== target);
+		const targetName = target.trim();
+		const normalizedSources = [...new Set(sources.map((name) => name.trim()))].filter((name) => name !== targetName);
 		if (normalizedSources.length === 0) return {
 			ok: false,
 			message: "Consolidation requires at least one distinct source skill."
 		};
-		for (const name of [target, ...normalizedSources]) if (!SKILL_NAME_RE.test(name)) return {
+		for (const name of [targetName, ...normalizedSources]) if (!SKILL_NAME_RE.test(name)) return {
 			ok: false,
 			message: `Invalid skill name "${name}". Use lowercase letters, digits, and hyphens.`
 		};
-		const targetDir = skillDir(this.root, target);
+		const targetDir = this.dirOf(targetName);
 		const targetMd = await this.io.readText(join(targetDir, "SKILL.md"));
 		if (!targetMd) return {
 			ok: false,
-			message: `Skill "${target}" not found.`
+			message: `Skill "${targetName}" not found.`
 		};
-		const targetProtection = await this.writeProtection(target, origin);
+		const targetProtection = await this.writeProtection(targetName, origin);
 		if (targetProtection) return {
 			ok: false,
-			message: `Skill "${target}" is protected (${targetProtection}).`
+			message: `Skill "${targetName}" is protected (${targetProtection}).`
 		};
 		const parts = [];
 		for (const source of normalizedSources) {
@@ -2090,7 +2183,7 @@ var SkillLibrary = class {
 				ok: false,
 				message: `Skill "${source}" is protected (${protection}).`
 			};
-			const sourceMd = await this.io.readText(join(skillDir(this.root, source), "SKILL.md"));
+			const sourceMd = await this.io.readText(join(this.dirOf(source), "SKILL.md"));
 			if (!sourceMd) return {
 				ok: false,
 				message: `Skill "${source}" not found.`
@@ -2103,7 +2196,7 @@ var SkillLibrary = class {
 			parts.push(`\n<!-- consolidated from ${source} at ${(/* @__PURE__ */ new Date()).toISOString()} -->\n${parsed.body.trim()}`);
 		}
 		const merged = targetMd.trimEnd() + parts.join("\n") + "\n";
-		const validation = validateFrontmatter(merged, target, this.limits);
+		const validation = validateFrontmatter(merged, targetName, this.limits);
 		if (validation) return {
 			ok: false,
 			message: `Consolidation rejected: ${validation}`
@@ -2116,7 +2209,7 @@ var SkillLibrary = class {
 		const archived = [];
 		try {
 			for (const source of normalizedSources) {
-				const result = await this.archive(source, { absorbedInto: target });
+				const result = await this.archive(source, { absorbedInto: targetName });
 				if (!result.ok) throw new Error(result.message);
 				archived.push(source);
 			}
@@ -2131,7 +2224,7 @@ var SkillLibrary = class {
 		}
 		return {
 			ok: true,
-			message: `Consolidated ${normalizedSources.join(", ")} into "${target}".`,
+			message: `Consolidated ${normalizedSources.join(", ")} into "${targetName}".`,
 			path: targetDir
 		};
 	}
@@ -2140,12 +2233,13 @@ var SkillLibrary = class {
 	* recoverability: archival never deletes, and this is the control-plane
 	* path back. The `.archive-reason` marker is dropped on restore.
 	*/
-	async restoreFromArchive(name) {
+	async restoreFromArchive(rawName) {
+		const name = rawName.trim();
 		if (!SKILL_NAME_RE.test(name)) return {
 			ok: false,
 			message: `Invalid skill name "${name}". Use lowercase letters, digits, and hyphens.`
 		};
-		if (await this.io.exists(join(skillDir(this.root, name), "SKILL.md"))) return {
+		if (await this.io.exists(join(this.dirOf(name), "SKILL.md"))) return {
 			ok: false,
 			message: `Skill "${name}" already exists in the active root; refusing to overwrite.`
 		};
@@ -2165,7 +2259,7 @@ var SkillLibrary = class {
 			message: `Skill "${name}" is not in .archive.`
 		};
 		const source = join(archiveRoot, chosen);
-		const dest = skillDir(this.root, name);
+		const dest = this.dirOf(name);
 		try {
 			await this.io.rename(source, dest);
 		} catch {
@@ -2179,13 +2273,14 @@ var SkillLibrary = class {
 			path: dest
 		};
 	}
-	async writeSupportFile(name, filePath, content, origin = "foreground") {
+	async writeSupportFile(rawName, filePath, content, origin = "foreground") {
+		const name = rawName.trim();
 		const badName = this.badName(name);
 		if (badName) return {
 			ok: false,
 			message: badName
 		};
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		if (!await this.io.exists(join(dir, "SKILL.md"))) return {
 			ok: false,
 			message: `Skill "${name}" not found.`
@@ -2219,13 +2314,14 @@ var SkillLibrary = class {
 			path: target
 		};
 	}
-	async removeSupportFile(name, filePath, origin = "foreground") {
+	async removeSupportFile(rawName, filePath, origin = "foreground") {
+		const name = rawName.trim();
 		const badName = this.badName(name);
 		if (badName) return {
 			ok: false,
 			message: badName
 		};
-		const dir = skillDir(this.root, name);
+		const dir = this.dirOf(name);
 		if (!await this.io.exists(join(dir, "SKILL.md"))) return {
 			ok: false,
 			message: `Skill "${name}" not found.`
@@ -2266,7 +2362,7 @@ var SkillLibrary = class {
 		let dest = join(backupRoot, `skills-${stamp}`);
 		while (await this.io.exists(dest)) dest = join(backupRoot, `skills-${stamp}-${Math.random().toString(36).slice(2, 8)}`);
 		const names = await listNames(this.root, this.io);
-		for (const name of names) await this.io.copy(skillDir(this.root, name), join(dest, name));
+		for (const name of names) await this.io.copy(this.dirOf(name), join(dest, name));
 		const sidecars = [];
 		for (const sidecar of [usageFile(this.root), suppressedFile(this.root)]) if (await this.io.exists(sidecar)) {
 			const name = basename(sidecar);
@@ -2374,7 +2470,7 @@ var SkillLibrary = class {
 			message: "No skill snapshot available."
 		};
 		await this.snapshotAll("pre-rollback", extras);
-		for (const name of await listNames(this.root, this.io)) await this.io.remove(skillDir(this.root, name));
+		for (const name of await listNames(this.root, this.io)) await this.io.remove(this.dirOf(name));
 		const manifest = await this.readSnapshotManifest(latest.path);
 		if (manifest === null) for (const entry of await this.io.list(latest.path)) {
 			if (entry === "manifest.json" || entry === "extras") continue;
@@ -2464,4 +2560,4 @@ var JsonState = class JsonState {
 	}
 };
 //#endregion
-export { COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_USER_CHAR_LIMIT, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, JsonState, LOW_QUALITY_THRESHOLD, MAX_DESCRIPTION_LENGTH, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MEMORY_REVIEW_PROMPT, MUTATIONS_FILE_VERSION, MemoryStore, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, QUALITY_WEIGHTS, SKILL_NAME_RE, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, advanceReview, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpUse, bumpView, computeDedupGroups, computeLifecycleTransitions, computeQualityScores, computeScopeView, contentHash, emptyRecord, evaluateThreat, evolutionHome, evolutionIoAdapter, foldTurn, getRecord, latestActivityAt, lifecycleCandidate, loadMutations, loadSuppressedNames, loadUsage, markAgentCreated, memoryRoot, mutationsFile, nodeEvolutionIo, observeEvent, parseCuratorNominations, parseFrontmatter, recordMutation, reviewPrompt, saveSuppressedNames, saveUsage, scanContentThreats, scanMemoryThreats, scanThreats, skillsRoot, suppressedFile, usageFile, validateFrontmatter, verifyPromptBundle };
+export { COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_USER_CHAR_LIMIT, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, JsonState, LOW_QUALITY_THRESHOLD, MAX_DESCRIPTION_LENGTH, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MEMORY_REVIEW_PROMPT, MUTATIONS_FILE_VERSION, MemoryStore, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, QUALITY_WEIGHTS, SKILL_NAME_RE, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, advanceReview, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpUse, bumpView, computeDedupGroups, computeLifecycleTransitions, computeQualityScores, computeScopeView, contentHash, emptyRecord, evaluateThreat, evolutionHome, evolutionIoAdapter, foldTurn, getRecord, latestActivityAt, lifecycleCandidate, loadMutations, loadSuppressedNames, loadUsage, markAgentCreated, memoryRoot, mutationsFile, nodeEvolutionIo, normalizeUsageRecord, observeEvent, parseCuratorNominations, parseFrontmatter, recordMutation, relatedSkillNames, reviewPrompt, saveSuppressedNames, saveUsage, scanContentThreats, scanMemoryThreats, scanThreats, skillsRoot, suppressedFile, usageFile, validateFrontmatter, verifyPromptBundle };

package/lib/types/constants.d.ts

@@ -47,5 +47,7 @@ export declare const DEFAULT_STALE_AFTER_DAYS = 30;
 export declare const DEFAULT_ARCHIVE_AFTER_DAYS = 90;
 export declare const DEFAULT_MEMORY_CHAR_LIMIT = 2200;
 export declare const DEFAULT_USER_CHAR_LIMIT = 1375;
+/** Consolidation-failure backoff cap, shared by MemoryStore and memory-files' Config default. */
+export declare const DEFAULT_CONSOLIDATION_FAILURES = 3;
 export declare const DEFAULT_SKILL_CONTENT_CHARS = 100000;
 //# sourceMappingURL=constants.d.ts.map

package/lib/types/memory-store.d.ts

@@ -35,6 +35,7 @@ export declare class MemoryStore {
     private readonly maxFailures;
     private readonly io;
     private failureCount;
+    private lastFailureAt;
     constructor(options?: MemoryStoreOptions);
     limitFor(target: MemoryTarget): number;
     /**
@@ -83,6 +84,12 @@ export declare class MemoryStore {
      * blank lines, leading/trailing delimiters) that indicate the file was
      * edited outside MemoryStore. Purely single-canonical content reaches the
      * same serialization and returns false, so a normal write is never flagged.
+     *
+     * An absent, empty, or whitespace-only file is the "never written" state
+     * (rc.42 audit P1-6): it parses to zero entries, so the canonical form
+     * `'\n'` can never byte-match it and every write path was permanently
+     * refused with "External drift detected" — including the repairs the model
+     * would need to make. Such files are adopted instead of flagged.
      */
     detectDrift(target: MemoryTarget): Promise<boolean>;
 }

package/lib/types/skill-store.d.ts

@@ -69,6 +69,15 @@ export declare function parseFrontmatter(content: string): {
     frontmatter: Frontmatter;
     body: string;
 } | null;
+/**
+ * Skill names referenced by a SKILL.md's `related_skills` frontmatter
+ * (B-line G3, rc.44): the single parsing source for the quality references
+ * factor and the learning-graph edges. The DSH frontmatter parser keeps the
+ * YAML value as a string (`"[a, b]"`), so names are scanned out of it; each
+ * must satisfy the skill-name shape and the referencing skill itself is
+ * excluded. Pure and deduplicated.
+ */
+export declare function relatedSkillNames(content: string, exclude?: string): string[];
 export declare function validateFrontmatter(content: string, expectedName?: string, limits?: SkillLimits): string | null;
 export declare class SkillLibrary {
     readonly root: string;
@@ -76,20 +85,32 @@ export declare class SkillLibrary {
     private readonly io;
     constructor(root?: string, io?: EvolutionIoLike, limits?: SkillLimits);
     list(): Promise<SkillSummary[]>;
-    read(name: string): Promise<string | null>;
+    read(rawName: string): Promise<string | null>;
+    /**
+  
+     * Single path-building choke point (rc.42 audit P2-5): every directory path
+  
+     * is built from the TRIMMED name, so a name that passes `badName` (which
+  
+     * trims before validating) can never mint a second, whitespace-padded
+  
+     * directory next to the real one. Callers keep passing raw user input.
+  
+     */
+    private dirOf;
     /** Name-format guard shared by every path-building mutator/reader. */
     private badName;
-    writeProtection(name: string, origin?: WriteOrigin): Promise<string | null>;
-    deleteProtection(name: string, options?: {
+    writeProtection(rawName: string, origin?: WriteOrigin): Promise<string | null>;
+    deleteProtection(rawName: string, options?: {
         allowBundled?: boolean;
     }): Promise<string | null>;
-    isManaged(name: string): Promise<boolean>;
+    isManaged(rawName: string): Promise<boolean>;
     /** Whether the skill carries the bundled marker (curator prune-builtins eligibility). */
-    isBundled(name: string): Promise<boolean>;
+    isBundled(rawName: string): Promise<boolean>;
     /** Whether the skill carries the pinned marker (the marker is the factual source; usage.pinned mirrors it). */
-    isPinned(name: string): Promise<boolean>;
+    isPinned(rawName: string): Promise<boolean>;
     /** Count non-empty support subdirectories (richness input for quality scoring). */
-    countSupportDirs(name: string): Promise<number>;
+    countSupportDirs(rawName: string): Promise<number>;
     /** Best-effort audit trail entry; never blocks the mutation. */
     private audit;
     /** Recent mutation audit records (read-only inspection surface). */
@@ -102,9 +123,9 @@ export declare class SkillLibrary {
      */
     setPinned(name: string, pinned: boolean, origin?: WriteOrigin): Promise<SkillActionResult>;
     create(name: string, content: string, origin?: WriteOrigin): Promise<SkillActionResult>;
-    update(name: string, content: string, origin?: WriteOrigin): Promise<SkillActionResult>;
-    patch(name: string, oldString: string, newString: string, filePath?: string, replaceAll?: boolean, origin?: WriteOrigin): Promise<SkillActionResult>;
-    archive(name: string, options?: ArchiveOptions): Promise<SkillActionResult>;
+    update(rawName: string, content: string, origin?: WriteOrigin): Promise<SkillActionResult>;
+    patch(rawName: string, oldString: string, newString: string, filePath?: string, replaceAll?: boolean, origin?: WriteOrigin): Promise<SkillActionResult>;
+    archive(rawName: string, options?: ArchiveOptions): Promise<SkillActionResult>;
     /**
      * Merge the bodies of `sources` into `target` and archive the sources with
      * an absorbed-into marker. Hermes-style consolidation: overlapping skills
@@ -116,9 +137,9 @@ export declare class SkillLibrary {
      * recoverability: archival never deletes, and this is the control-plane
      * path back. The `.archive-reason` marker is dropped on restore.
      */
-    restoreFromArchive(name: string): Promise<SkillActionResult>;
-    writeSupportFile(name: string, filePath: string, content: string, origin?: WriteOrigin): Promise<SkillActionResult>;
-    removeSupportFile(name: string, filePath: string, origin?: WriteOrigin): Promise<SkillActionResult>;
+    restoreFromArchive(rawName: string): Promise<SkillActionResult>;
+    writeSupportFile(rawName: string, filePath: string, content: string, origin?: WriteOrigin): Promise<SkillActionResult>;
+    removeSupportFile(rawName: string, filePath: string, origin?: WriteOrigin): Promise<SkillActionResult>;
     /**
      * Snapshot the recoverable skills state: active tree, usage/suppression
      * sidecars, `.archive/` and caller-supplied extras. `extras` are opaque

package/lib/types/usage.d.ts

@@ -16,12 +16,22 @@ export interface UsageRecord {
     state: SkillState;
     pinned: boolean;
     archived_at: string | null;
-    quality_score?: number;
-    quality_warn?: boolean;
+    quality_score?: number | undefined;
+    quality_warn?: boolean | undefined;
 }
 export type UsageMap = Map<string, UsageRecord>;
 export declare function usageFile(root: string): string;
 export declare function emptyRecord(): UsageRecord;
+/**
+ * Field-level normalization for one sidecar record (rc.42 audit P2-3): the
+ * spread used to copy any junk through verbatim, so a corrupted file could
+ * carry `use_count: "3"` into the quality math and lifecycle comparisons as
+ * NaN. Every field falls back to its `emptyRecord()` baseline unless it has
+ * exactly the declared type; an invalid `created_at` anchors the age clock at
+ * now (first-sight defer semantics for a record whose age is unknowable).
+ * Pure — exported for unit tests; `loadUsage` is the production caller.
+ */
+export declare function normalizeUsageRecord(record: unknown): UsageRecord;
 export declare function loadUsage(root: string, io?: EvolutionIoLike): Promise<UsageMap>;
 export declare function saveUsage(root: string, map: UsageMap, io?: EvolutionIoLike): Promise<void>;
 export declare function getRecord(map: UsageMap, name: string): UsageRecord;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.1.0-rc.43",
+  "version": "0.1.0-rc.45",
   "publishConfig": {
     "access": "public"
   },