@lmzhen/dsh-evolution-core 0.15.2 → 0.16.1

package/README.md

@@ -1,6 +1,6 @@
 # @lmzhen/dsh-evolution-core
 
-Shared pure library for the family: `SkillLibrary`/`MemoryStore`, the prompts and guidance text, the threat/quality/drift signals, the skill CONTENT history (`skill-history.ts`: content-addressed versions behind every write) and the frame classification the plan path reports over (`evidence.ts`), plus the IO primitives (`nodeEvolutionIo`, `transactIo`, `evolutionIoAdapter`). It is **not a Cordis row** — it registers no service, tool or prompt
+Shared pure library for the family: `SkillLibrary`/`MemoryStore`, the prompts and guidance text, the threat/quality/drift signals, the skill CONTENT history (`skill-history.ts`: content-addressed versions behind every write) and the frame classification the plan path reports over (`evidence.ts`), plus the IO primitives (`nodeEvolutionIo`, `transactIo`, `evolutionIoAdapter`) and the two helpers every host route surface shares (`http-routes.ts`: the loopback fence, the bounded JSON body reader and the JSON writer). It is **not a Cordis row** — it registers no service, tool or prompt
 section, and importing the package root is its only entry.
 
 ## Model surface
@@ -30,6 +30,14 @@ section, and importing the package root is its only entry.
   (`contentRetentionFeedback`, design §4 item 3): the ratio, both character counts, and the fact that the
   replaced version is still in the history. Computed in the write funnel where both bodies are in hand, feedback
   only — no ratio refuses a write, and the function owns no configuration.
+- **A REMOVAL now leaves an entry (E2, 2026-09-30).** `nextHistoryIndex` mints an entry from the AFTER side,
+  so an operation with `after === null` (removing a support file) used to record nothing once its bytes were
+  already indexed: the deletion was invisible and its action vocabulary unreachable. A removal records the bytes
+  it removed, labeled with the write that removed them, so a face can say "these bytes are gone" and undoing that
+  entry puts the file back. The entry deliberately carries no `beforeHash` (its own hash IS the removed content).
+- `anchorVerdict` is exported: the stage-time anchor rule ("does this write's target still hold the bytes the
+  caller staged against?") has ONE implementation, and read-only readers (a preview, a dry run) call it instead
+  of re-deriving a `contentHash` comparison.
 - Content history is HISTORY ONLY: the skill tree is the single truth for current content, and no judgement reads the version index (design invariant I1). Recording is best-effort but happens inside the write lock, so the index never describes content that did not land; a failed record warns once per instance instead of failing the write.
 - Skill-library mutations are read-modify-write on one file, so `SkillLibrary` serializes them in-process with a `makeSerialQueue` chain: `update`, `patch`, `restructure`, `writeSupportFile` and (since 0.3.46) `consolidate`'s target read→merge→commit run their whole read→validate→write under one serial task, so two concurrent mutators on one skill never interleave in this process.
 - `create` is INSIDE the serial chain and, when a transact backend is bound, its exists check runs inside the same per-file transact (v18); `archive`/`consolidate` are rename-based two-phase paths and stay outside the single-file serial chain.

package/lib/index.js

@@ -2954,6 +2954,207 @@ async function readEvolutionTimeline(io, path, archives) {
 	};
 }
 //#endregion
+//#region lib/types/fuzzy-match.js
+/**
+* Fuzzy string matching and replacement for patch/restructure edits of skill files.
+*
+* Split out of skill-store.ts (S2-1): pure text functions with no store state.
+* The store imports the scan, the budgets and the replace entry points directly;
+* none of them is re-exported, so the package export surface is unchanged.
+*/
+function fuzzyIndexOf(content, pattern, from = 0) {
+	const isSpace = (char) => char !== void 0 && /[ \t]/.test(char);
+	const escaped = (char) => {
+		if (char === "n") return "\n";
+		if (char === "t") return "	";
+		if (char === "r") return "\r";
+		return null;
+	};
+	for (let start = from; start < content.length; start += 1) {
+		let contentIndex = start;
+		let patternIndex = 0;
+		while (patternIndex < pattern.length && contentIndex < content.length) {
+			const patternChar = pattern[patternIndex];
+			const contentChar = content[contentIndex];
+			if (isSpace(patternChar)) {
+				while (patternIndex < pattern.length && isSpace(pattern[patternIndex])) patternIndex += 1;
+				while (contentIndex < content.length && isSpace(content[contentIndex])) contentIndex += 1;
+				continue;
+			}
+			const escapedChar = patternChar === "\\" ? escaped(pattern[patternIndex + 1]) : null;
+			if (escapedChar !== null && contentChar === escapedChar) {
+				patternIndex += 2;
+				contentIndex += 1;
+				continue;
+			}
+			if (patternChar === contentChar) {
+				contentIndex += 1;
+				patternIndex += 1;
+				continue;
+			}
+			break;
+		}
+		if (patternIndex === pattern.length) return [start, contentIndex];
+	}
+	return null;
+}
+/** V6-17 (0.3.37): the fuzzy-patch scan is O(n·m) with no input bound; a
+* non-exact anchor past these budgets would block the event loop (measured
+* ~6s at 20k×20k). Exact matches go through the fast `includes` path and stay
+* allowed regardless of size. */
+const FUZZY_MAX_PATTERN_CHARS = 4096;
+const FUZZY_MAX_WORK = 8e6;
+/** Trim leading whitespace of the first line and trailing whitespace of the last line. */
+function trimPatternBoundaries(pattern) {
+	const from = pattern.search(/\S/);
+	const trimmed = from < 0 ? pattern : pattern.slice(from);
+	const trailing = trimmed.search(/\s+$/);
+	return trailing < 0 ? trimmed : trimmed.slice(0, trailing);
+}
+/** Replace only the fuzzy-matched span, preserving all surrounding bytes.
+* V7-11 (0.3.44): the replaceAll loop accumulates the per-scan cost — the
+* single-scan budget at the caller only bounded ONE fuzzyIndexOf, while an
+* unbounded number of matches × O(n·m) each could still stall the loop.
+* When the accumulated cost exceeds the budget the whole replace fails
+* (null) instead of partially applying an arbitrary prefix. */
+function fuzzyReplace(content, oldString, newString, replaceAll) {
+	let current = content;
+	let scanFrom = 0;
+	let totalWork = 0;
+	for (;;) {
+		totalWork += current.length * oldString.length;
+		if (totalWork > 8e6) return null;
+		const match = fuzzyIndexOf(current, oldString, scanFrom);
+		if (match === null) return current;
+		const [start, end] = match;
+		const next = current.slice(0, start) + newString + current.slice(end);
+		if (!replaceAll) return next;
+		current = next;
+		scanFrom = start + newString.length;
+	}
+}
+function fuzzyPatch(content, oldString, newString, replaceAll = false) {
+	if (oldString === "") return null;
+	if (content.includes(oldString)) return replaceAll ? content.split(oldString).join(newString) : content.replace(oldString, () => newString);
+	const boundary = trimPatternBoundaries(oldString);
+	if (boundary === "") return null;
+	if (boundary !== oldString) {
+		if (fuzzyIndexOf(content, boundary) !== null) return fuzzyReplace(content, boundary, newString, replaceAll);
+	}
+	if (fuzzyIndexOf(content, oldString) !== null) return fuzzyReplace(content, oldString, newString, replaceAll);
+	return null;
+}
+/** Deterministic section-extraction plan facts; the caller owns the IO and the append semantics. */
+//#endregion
+//#region lib/types/http-routes.js
+/**
+* The loopback HTTP plumbing every family route surface shares (E-302-era conventions).
+*
+* WHY THIS IS IN CORE: the fence, the bounded body reader and the JSON writer are the same for every
+* family route surface, and `evolution-core` is the one package all of them already depend on. The
+* canonical platform implementation (packages/client/connection/src/api-request-trust.ts) is not part
+* of that package's published surface, so the family keeps its own copy of the RULES here — once.
+*
+* Layering: pure transport. Nothing here knows about skills, approvals, curators or route tables.
+* @module @lmzhen/dsh-evolution-core/http-routes
+*/
+/** Largest request body a family route accepts; a bigger one reads as "no body" (400 from the handler). */
+const MAX_REQUEST_BODY_BYTES = 64 * 1024;
+/** One header as a single string (a repeated header reads as absent rather than as its first value). */
+function header(request, name) {
+	const value = request.headers[name];
+	return typeof value === "string" ? value : void 0;
+}
+/** IPv4 127/8 predicate (four decimal octets, first == 127). */
+function isIPv4Loopback(value) {
+	const parts = value.split(".");
+	return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
+}
+/** Whether a socket remote address names the loopback range (127/8, ::1, IPv4-mapped). */
+function isLoopbackAddress(address) {
+	if (address === void 0) return false;
+	const normalized = address.toLowerCase();
+	if (normalized === "::1") return true;
+	if (normalized.startsWith("::ffff:")) return isIPv4Loopback(normalized.slice(7));
+	return isIPv4Loopback(normalized);
+}
+/** Whether a hostname names the loopback authority (localhost, [::1], 127/8). */
+function isLoopbackHostname(hostname) {
+	if (hostname === "localhost" || hostname === "[::1]") return true;
+	return isIPv4Loopback(hostname);
+}
+/**
+* Whether one request may enter a family route.
+*
+* Rules, in order: the SOCKET must be loopback (authoritative — X-Forwarded-For is never trusted), the
+* Host header must name a loopback authority (DNS-rebinding defense), an explicit cross-site marker is
+* refused, and an attached Origin must be exactly this authority.
+* @param request - the request to judge.
+* @returns true when the request may proceed.
+*/
+function isLoopbackRequest(request) {
+	if (!isLoopbackAddress(request.socket?.remoteAddress)) return false;
+	const host = header(request, "host");
+	if (host === void 0) return false;
+	let hostUrl;
+	try {
+		hostUrl = new URL("http://" + host);
+	} catch {
+		return false;
+	}
+	if (!isLoopbackHostname(hostUrl.hostname)) return false;
+	if (header(request, "sec-fetch-site") === "cross-site") return false;
+	const origin = header(request, "origin");
+	if (origin === void 0) return true;
+	try {
+		return new URL(origin).host === hostUrl.host;
+	} catch {
+		return false;
+	}
+}
+/** Write one JSON response. The routes own their response lifecycle, so every path ends here. */
+function writeJson(res, status, value) {
+	const body = JSON.stringify(value);
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"content-length": Buffer.byteLength(body)
+	});
+	res.end(body);
+}
+/**
+* Read one JSON request body, bounded.
+* @param req - the request.
+* @returns the parsed value, or null when the body is oversized, empty, or not JSON.
+*/
+async function readJsonBody(req) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of req) {
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		size += buffer.byteLength;
+		if (size > 65536) return null;
+		chunks.push(buffer);
+	}
+	if (size === 0) return null;
+	try {
+		return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+	} catch {
+		return null;
+	}
+}
+/**
+* Read one JSON request body that must be an OBJECT.
+*
+* The three route surfaces all take named fields, so "array or scalar" is a bad request rather than a
+* shape each handler has to re-check.
+* @param req - the request.
+* @returns the body as a plain object, or null when it is absent, oversized, not JSON, or not an object.
+*/
+async function readJsonObject(req) {
+	const body = await readJsonBody(req);
+	return body !== null && typeof body === "object" && !Array.isArray(body) ? body : null;
+}
+//#endregion
 //#region lib/types/env.js
 /**
 * Evolution environment-variable reading, single-source (WC, 0.3.56).
@@ -6864,6 +7065,7 @@ function nextHistoryIndex(versions, input, keep) {
 		chars: input.before?.length ?? 0,
 		...pathField
 	});
+	const removalHash = afterHash === null ? beforeHash : null;
 	if (afterHash !== null) {
 		if (grown[grown.length - 1]?.hash !== afterHash) grown.push({
 			v: nextVersion(grown),
@@ -6876,6 +7078,18 @@ function nextHistoryIndex(versions, input, keep) {
 			...beforeHash === null ? {} : { beforeHash }
 		});
 	}
+	if (removalHash !== null) {
+		const tail = grown[grown.length - 1];
+		if (tail?.hash !== removalHash || tail.action !== input.action) grown.push({
+			v: nextVersion(grown),
+			at: input.at,
+			action: input.action,
+			hash: removalHash,
+			chars: input.before?.length ?? 0,
+			...pathField,
+			...input.summary === void 0 ? {} : { summary: input.summary }
+		});
+	}
 	const trimmed = grown.slice(Math.max(0, grown.length - clampKeep(keep)));
 	const recorded = {};
 	if (beforeHash !== null) {
@@ -7145,92 +7359,6 @@ function elapsedSince(at, nowMs) {
 	};
 }
 //#endregion
-//#region lib/types/fuzzy-match.js
-/**
-* Fuzzy string matching and replacement for patch/restructure edits of skill files.
-*
-* Split out of skill-store.ts (S2-1): pure text functions with no store state.
-* The store imports the scan, the budgets and the replace entry points directly;
-* none of them is re-exported, so the package export surface is unchanged.
-*/
-function fuzzyIndexOf(content, pattern, from = 0) {
-	const isSpace = (char) => char !== void 0 && /[ \t]/.test(char);
-	const escaped = (char) => {
-		if (char === "n") return "\n";
-		if (char === "t") return "	";
-		if (char === "r") return "\r";
-		return null;
-	};
-	for (let start = from; start < content.length; start += 1) {
-		let contentIndex = start;
-		let patternIndex = 0;
-		while (patternIndex < pattern.length && contentIndex < content.length) {
-			const patternChar = pattern[patternIndex];
-			const contentChar = content[contentIndex];
-			if (isSpace(patternChar)) {
-				while (patternIndex < pattern.length && isSpace(pattern[patternIndex])) patternIndex += 1;
-				while (contentIndex < content.length && isSpace(content[contentIndex])) contentIndex += 1;
-				continue;
-			}
-			const escapedChar = patternChar === "\\" ? escaped(pattern[patternIndex + 1]) : null;
-			if (escapedChar !== null && contentChar === escapedChar) {
-				patternIndex += 2;
-				contentIndex += 1;
-				continue;
-			}
-			if (patternChar === contentChar) {
-				contentIndex += 1;
-				patternIndex += 1;
-				continue;
-			}
-			break;
-		}
-		if (patternIndex === pattern.length) return [start, contentIndex];
-	}
-	return null;
-}
-/** Trim leading whitespace of the first line and trailing whitespace of the last line. */
-function trimPatternBoundaries(pattern) {
-	const from = pattern.search(/\S/);
-	const trimmed = from < 0 ? pattern : pattern.slice(from);
-	const trailing = trimmed.search(/\s+$/);
-	return trailing < 0 ? trimmed : trimmed.slice(0, trailing);
-}
-/** Replace only the fuzzy-matched span, preserving all surrounding bytes.
-* V7-11 (0.3.44): the replaceAll loop accumulates the per-scan cost — the
-* single-scan budget at the caller only bounded ONE fuzzyIndexOf, while an
-* unbounded number of matches × O(n·m) each could still stall the loop.
-* When the accumulated cost exceeds the budget the whole replace fails
-* (null) instead of partially applying an arbitrary prefix. */
-function fuzzyReplace(content, oldString, newString, replaceAll) {
-	let current = content;
-	let scanFrom = 0;
-	let totalWork = 0;
-	for (;;) {
-		totalWork += current.length * oldString.length;
-		if (totalWork > 8e6) return null;
-		const match = fuzzyIndexOf(current, oldString, scanFrom);
-		if (match === null) return current;
-		const [start, end] = match;
-		const next = current.slice(0, start) + newString + current.slice(end);
-		if (!replaceAll) return next;
-		current = next;
-		scanFrom = start + newString.length;
-	}
-}
-function fuzzyPatch(content, oldString, newString, replaceAll = false) {
-	if (oldString === "") return null;
-	if (content.includes(oldString)) return replaceAll ? content.split(oldString).join(newString) : content.replace(oldString, () => newString);
-	const boundary = trimPatternBoundaries(oldString);
-	if (boundary === "") return null;
-	if (boundary !== oldString) {
-		if (fuzzyIndexOf(content, boundary) !== null) return fuzzyReplace(content, boundary, newString, replaceAll);
-	}
-	if (fuzzyIndexOf(content, oldString) !== null) return fuzzyReplace(content, oldString, newString, replaceAll);
-	return null;
-}
-/** Deterministic section-extraction plan facts; the caller owns the IO and the append semantics. */
-//#endregion
 //#region lib/types/skill-store.js
 /**
 * Skill library management for the self-evolution plugin.
@@ -11411,4 +11539,4 @@ function sessionAudited(ctx, sessionId, sessionScoped) {
 	return false;
 }
 //#endregion
-export { ALIVE_LOCK_TAKEOVER_MS, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, advanceReview, affinity, ageCopyKey, allowRowCollisions, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyReferenceRewrite, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, blobPath, bodyCost, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, canonicalWriteId, claimInstance, clampedNumber, clearReviewChannel, collectReadSkillNames, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, createGateSet, daysSinceIso, decideTakeover, describeReferenceRewrite, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionEventPayloadIssue, evolutionHome, evolutionIoAdapter, evolutionRoot, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurn, frontmatterBlock, frontmatterCatalogInvalid, getRecord, historyIndexFile, historyRoot, identity, idleDays, installParamSection, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, latestActivityAt, latestVersionAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramSectionOverrides, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, parseLockBody, partitionVersions, pendingSelfCleanup, persistedWriteSite, persistedWriteSites, planReferenceRewrite, planRehoming, policyStageLimits, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, projectionText, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, retainEventArchives, retirementReport, reviewPrompt, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionReadSkillNames, sessionSeesFamilyTools, skillReadNameOf, skillRowCells, skillStateKey, skillsRoot, supportFileReadOf, suppressedFile, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, unhookedSupportPointers, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, writeDurableTmp, yamlPlainScalarNeedsQuotes };
+export { ALIVE_LOCK_TAKEOVER_MS, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyReferenceRewrite, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, blobPath, bodyCost, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, canonicalWriteId, claimInstance, clampedNumber, clearReviewChannel, collectReadSkillNames, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, createGateSet, daysSinceIso, decideTakeover, describeReferenceRewrite, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionEventPayloadIssue, evolutionHome, evolutionIoAdapter, evolutionRoot, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurn, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, historyIndexFile, historyRoot, identity, idleDays, installParamSection, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isLoopbackRequest, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, latestActivityAt, latestVersionAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramSectionOverrides, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, parseLockBody, partitionVersions, pendingSelfCleanup, persistedWriteSite, persistedWriteSites, planReferenceRewrite, planRehoming, policyStageLimits, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, projectionText, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonBody, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, retainEventArchives, retirementReport, reviewPrompt, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionReadSkillNames, sessionSeesFamilyTools, skillReadNameOf, skillRowCells, skillStateKey, skillsRoot, supportFileReadOf, suppressedFile, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, unhookedSupportPointers, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, writeDurableTmp, writeJson, yamlPlainScalarNeedsQuotes };

package/lib/types/http-routes.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The loopback HTTP plumbing every family route surface shares (E-302-era conventions).
+ *
+ * WHY THIS IS IN CORE: the fence, the bounded body reader and the JSON writer are the same for every
+ * family route surface, and `evolution-core` is the one package all of them already depend on. The
+ * canonical platform implementation (packages/client/connection/src/api-request-trust.ts) is not part
+ * of that package's published surface, so the family keeps its own copy of the RULES here — once.
+ *
+ * Layering: pure transport. Nothing here knows about skills, approvals, curators or route tables.
+ * @module @lmzhen/dsh-evolution-core/http-routes
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/** Largest request body a family route accepts; a bigger one reads as "no body" (400 from the handler). */
+export declare const MAX_REQUEST_BODY_BYTES: number;
+/** The request facts the trust fence reads: a Node request, or the same fields in a spec fixture. */
+export interface FenceRequest {
+    readonly headers: Record<string, string | string[] | undefined>;
+    readonly socket?: {
+        readonly remoteAddress?: string | undefined;
+    } | undefined;
+}
+/**
+ * Whether one request may enter a family route.
+ *
+ * Rules, in order: the SOCKET must be loopback (authoritative — X-Forwarded-For is never trusted), the
+ * Host header must name a loopback authority (DNS-rebinding defense), an explicit cross-site marker is
+ * refused, and an attached Origin must be exactly this authority.
+ * @param request - the request to judge.
+ * @returns true when the request may proceed.
+ */
+export declare function isLoopbackRequest(request: FenceRequest): boolean;
+/** Write one JSON response. The routes own their response lifecycle, so every path ends here. */
+export declare function writeJson(res: ServerResponse, status: number, value: unknown): void;
+/**
+ * Read one JSON request body, bounded.
+ * @param req - the request.
+ * @returns the parsed value, or null when the body is oversized, empty, or not JSON.
+ */
+export declare function readJsonBody(req: IncomingMessage): Promise<unknown>;
+/**
+ * Read one JSON request body that must be an OBJECT.
+ *
+ * The three route surfaces all take named fields, so "array or scalar" is a bad request rather than a
+ * shape each handler has to re-check.
+ * @param req - the request.
+ * @returns the body as a plain object, or null when it is absent, oversized, not JSON, or not an object.
+ */
+export declare function readJsonObject(req: IncomingMessage): Promise<Record<string, unknown> | null>;
+//# sourceMappingURL=http-routes.d.ts.map

package/lib/types/index.d.ts

@@ -32,7 +32,9 @@ export * from './reference-rewrite.ts';
 export * from './cost.ts';
 export * from './curator.ts';
 export * from './evolution-events.ts';
+export * from './fuzzy-match.ts';
 export * from './gates.ts';
+export * from './http-routes.ts';
 export * from './events.ts';
 export * from './env.ts';
 export * from './errors.ts';

package/lib/types/skill-store.d.ts

@@ -84,6 +84,13 @@ export type WriteAnchor = {
  * - `missing`: the target does not exist (an `absent` anchor `match`es this).
  */
 export type AnchorVerdict = 'match' | 'drift' | 'missing';
+/**
+ * Evaluate a stage-time anchor against the bytes a locked read observed.
+ * @param anchor - the caller's anchor, or `undefined` for an unanchored write.
+ * @param current - the bytes the write lock read (`null` = the target is absent).
+ * @returns `match` when the write may proceed, otherwise the refusal verdict.
+ */
+export declare function anchorVerdict(anchor: WriteAnchor | undefined, current: string | null): AnchorVerdict;
 export interface SkillActionResult {
     ok: boolean;
     message: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.15.2",
+  "version": "0.16.1",
   "publishConfig": {
     "access": "public"
   },