@lmzhen/dsh-evolution-core 0.17.1 → 0.18.1

package/lib/index.js

@@ -539,6 +539,25 @@ const CONTENT_SPLIT_HINT = "Consider splitting into a smaller SKILL.md with supp
 * their own copy of the literal; the bound is one protocol constant.
 * (v19 P2-10 corrected the value from 2^32-1 to Node's real 2^31-1 ceiling.) */
 const MAX_TIMER_DELAY_MS = 2147483647;
+/**
+* Model-facing budget of one `maintenance_probe` call (ms) — a HANG GUARD, not a
+* performance knob.
+*
+* Measured (2026-10-10): one probe costs 188/220/225 ms on the deployed library
+* (28 skills / 418 KB) and scales linearly at ~5.5 ms per skill (100 skills
+* 0.4-0.6 s, 400 skills 1.9-2.5 s), so this default is ~50x the worst measured
+* case and ~600x the deployed one — it will not fire in normal use, and the
+* ~305 s desktop interaction wall is ~5e4 skills away.
+*
+* It exists for the state the probe cannot report itself: a provider that never
+* answers. The platform's tool-timeout guard reads this budget off the tool
+* definition and turns the hang into a diagnosable `tool call timed out after
+* <ms>ms` error result, instead of a request that ends with nothing to read.
+* Reopen the default when the library approaches ~1e4 skills, when the
+* `evolutionIo` provider stops being local, or when a model leg enters a tool's
+* execute (the same conditions the probe's own note lists).
+*/
+const DEFAULT_PROBE_TIMEOUT_MS = 12e4;
 /** V27 G2.4: the model each review/curation leg defaults to. The policy schema,
 * the policy resolver and the curator's LLM nomination pass each carried their
 * own copy of these strings — a deployment that changed the policy default used
@@ -1198,6 +1217,24 @@ async function probeList(io, dir) {
 	}
 }
 /**
+* Three-state TEXT read of one file. A missing path (ENOENT/ENOTDIR, or a backend whose read
+* answers null) is `absent`; every other failure is `unknown` with its reason. The distinction is
+* the whole point (N14/O-7): "I could not read this file" and "this file is not there" lead to
+* opposite decisions once a write is about to replace the bytes — treating the first as the
+* second is how a broken store reads as empty and a rescue copy never happens.
+* @param io - the IO seam.
+* @param path - the file to read.
+* @returns the probe.
+*/
+async function probeText(io, path) {
+	try {
+		const value = await io.readText(path);
+		return value === null ? probeAbsent() : probePresent(value);
+	} catch (error) {
+		return isMissingPath(error) ? probeAbsent() : probeUnknown(probeReason(error));
+	}
+}
+/**
 * Three-state mtime read. Absent covers both "the path is missing" and "this
 * backend has no mtime probe" — the seam cannot tell those apart, so consumers
 * that must know say so in their own log line. A stat that FAILS is unknown.
@@ -1210,6 +1247,37 @@ async function probeMtime(io, path) {
 		return probeUnknown(probeReason(error));
 	}
 }
+/** The timestamp a curator run report DECLARES: `startedAt` (the run's own start), then `at` (the
+* stamp the error writer sets on every report — F-327/P2-4).
+* @param parsed - the parsed report, or anything else.
+* @returns epoch milliseconds, or null when neither field carries a parseable time.
+*/
+function declaredReportStamp(parsed) {
+	if (typeof parsed !== "object" || parsed === null) return null;
+	const record = parsed;
+	for (const value of [record.startedAt, record.at]) {
+		if (typeof value !== "string") continue;
+		const ms = Date.parse(value);
+		if (Number.isFinite(ms)) return ms;
+	}
+	return null;
+}
+/** The time one curator run report is ordered by — ONE口径 for every reader (S2.9/T3-12): the
+* declared stamp above, then the optional mtime probe as the fallback. `null` means "no usable
+* time", and that single answer serves both consumers: such a report is never the LATEST (the
+* panel) and is never DELETED (the retention sweep), which is exactly the pair of answers the two
+* readers disagreed on when one ordered by the declared stamp and the other by mtime alone.
+* @param io - the IO seam; a backend without `mtime` simply has no fallback.
+* @param path - the report file the probe reads.
+* @param parsed - the already-parsed report.
+* @returns epoch milliseconds, or null.
+*/
+async function reportTime(io, path, parsed) {
+	const declared = declaredReportStamp(parsed);
+	if (declared !== null) return declared;
+	const probe = await probeMtime(io, path);
+	return isPresent(probe) ? probe.value : null;
+}
 //#endregion
 //#region lib/types/io.js
 /**
@@ -3218,7 +3286,6 @@ const EVOLUTION_ERRORS = Object.freeze({
 	"e-309-revision-conflict-you-sent": "E-309: revision conflict — you sent %a1%, the document stands at %a2%. Re-read with /evolution params --json and retry.",
 	"e-309-revision-conflict-message-Re": "E-309: revision conflict — %a1%. Re-read with /evolution params --json and retry.",
 	"e-310-the-settings-service-refused": "E-310: the settings service refused the write: %a1% — the owning plugin's rule stands (a cross-field pair, or a cap that may only be tightened). /evolution params shows the current value.",
-	"e-305-this-invocation-carries-no-2": "E-305: this invocation carries no agent — `%a1%` needs a session-backed call (run it from a session in the GUI or the CLI).",
 	"e-317-skill-write-not-confirmed": "E-317: skill \"%a1%\" was not %a2% — the confirmation prompt was declined or dismissed, so nothing was written. The prompt appears on every create and bare delete; repeat the call only if the operator asks for it.",
 	"e-318-skill-write-without-a-read": "E-318: skill \"%a1%\" was not read in this session, so this write is refused. Read it with the `skill` tool first (a read that failed does not count), then repeat the write.",
 	"e-320-the-profile-home-is-not": "E-320: the profile home is not reported by this host, so the legacy settings document cannot be located. /evolution migrate reads `<profile home>/settings.yaml.imported`; run it from a profile-launched session.",
@@ -3342,6 +3409,41 @@ function makeSerialQueue() {
 	};
 }
 //#endregion
+//#region lib/types/payload.js
+/**
+* The memory op's payload field, resolved in ONE place (T3-06/A34).
+*
+* A memory op carries its body under two names — `facts` (the original) and
+* `content` (the schema alias) — and every reader used to resolve the pair with
+* `op.facts ?? op.content`. `??` only skips null/undefined, so
+* `{ facts: '', content: '正文' }` counted as "has facts": the plan validator
+* refused the op as empty (a FALSE refusal of a payload that is right there),
+* and the writers that normalized the pair dropped the body to `''`.
+*
+* The payload is the first field whose TRIMMED value is non-empty — a blank
+* string carries no payload, so it yields to its alias. Both blank (or absent)
+* ⇒ `''`, the one shape every caller already reads as "no payload".
+*
+* Non-string values are SKIPPED, never trimmed: a truthy non-string `facts`
+* used to reach `.trim()` and throw a TypeError out of callers that promise to
+* be deterministic (the E-60 / P2-1 class). The field-type gates reject such an
+* op on their own; this helper must not be the one that throws.
+*
+* The union posture matches evolution-threat's E-28a scan (BOTH fields are
+* scanned, not only the first truthy one); the two agree on what counts as
+* provided.
+* @module @lmzhen/dsh-evolution-core
+*/
+/** The op's payload text: the first of `facts`/`content` whose trim is non-empty, trimmed; `''` when neither carries one. */
+function payloadText(op) {
+	for (const value of [op?.facts, op?.content]) {
+		if (typeof value !== "string") continue;
+		const text = value.trim();
+		if (text !== "") return text;
+	}
+	return "";
+}
+//#endregion
 //#region lib/types/numeric.js
 /**
 * Numeric config clamping for the dsh-evolution plugin family.
@@ -3383,6 +3485,35 @@ function clampedNumber(value, fallback, opts) {
 	if (max !== void 0 && value > max) return fallback;
 	return value;
 }
+/**
+* Clamp one numeric knob and warn ONCE per key.
+*
+* S2.9 (T3-10): `evolution-review` and `evolution-curator` each carried their own copy of this
+* helper — their own once-per-key set and their own message — so the two settings readers of ONE
+* policy row could drift apart. The logic lives here; each caller passes its own sink (and its own
+* package prefix). A live field is read at every use, so the warning cannot be per-read.
+*
+* @param warned - the keys this caller already warned about.
+* @param warn - the warning sink (each package prefixes its own name).
+* @param name - the config key, for the warning.
+* @param value - the value as supplied, or its volatile reference.
+* @param fallback - the package default a corrected value falls back to.
+* @param min - the smallest value the engine can act on.
+* @param max - the largest value the carrier can hold, when bounded.
+* @returns the value the engine may use.
+*/
+function clampOnce(warned, warn, name, value, fallback, min, max) {
+	const current = typeof value === "object" ? value.get() : value;
+	const result = clampedNumber(current, fallback, max === void 0 ? { min } : {
+		min,
+		max
+	});
+	if (current !== void 0 && result !== current && !warned.has(name)) {
+		warned.add(name);
+		warn(`${name} provided an invalid value; falling back to the default`);
+	}
+	return result;
+}
 //#endregion
 //#region lib/types/threats.js
 /**
@@ -4204,7 +4335,7 @@ var MemoryStore = class {
 		for (const [index, op] of operations.entries()) {
 			const position = index + 1;
 			if (op.action === "add") {
-				const body = (op.facts ?? op.content ?? "").trim();
+				const body = payloadText(op);
 				if (!body) return {
 					result: {
 						ok: false,
@@ -4283,7 +4414,7 @@ var MemoryStore = class {
 			const matchIndex = matches[0]?.matchIndex ?? -1;
 			if (op.action === "remove") working.splice(matchIndex, 1);
 			else {
-				const body = (op.facts ?? op.content ?? "").trim();
+				const body = payloadText(op);
 				if (!body) return {
 					result: {
 						ok: false,
@@ -5025,8 +5156,8 @@ function presetPatchText(patchText) {
 * changes semantically: the bundle digest is the fail-closed signal for
 * review workers, so a stale id across deployments must be distinguishable.
 */
-const PROMPT_BUNDLE_VERSION = 20;
-const PROMPT_BUNDLE_ID = `dsh-evolution@20`;
+const PROMPT_BUNDLE_VERSION = 21;
+const PROMPT_BUNDLE_ID = `dsh-evolution@21`;
 const MEMORY_REVIEW_PROMPT = `[Auto-review — Memory]
 Review the conversation above and consider saving to memory if appropriate.
 
@@ -5317,12 +5448,12 @@ function sha256(text) {
 function createPromptBundle(prompts) {
 	const canonical = JSON.stringify({
 		id: PROMPT_BUNDLE_ID,
-		version: 20,
+		version: 21,
 		prompts: Object.fromEntries(Object.entries(prompts).sort())
 	});
 	return Object.freeze({
 		id: PROMPT_BUNDLE_ID,
-		version: 20,
+		version: 21,
 		prompts: Object.freeze({ ...prompts }),
 		sha256: sha256(canonical)
 	});
@@ -5334,16 +5465,17 @@ const PROMPT_BUNDLE = createPromptBundle({
 	skillPlan: SKILL_REVIEW_PLAN_PROMPT,
 	combinedPlan: COMBINED_REVIEW_PLAN_PROMPT,
 	curator: CURATOR_PROMPT,
+	curatorDryRun: CURATOR_DRY_RUN_BANNER,
 	completion: COMPLETION_SKILL_REVIEW_PROMPT,
 	maintain: MAINTAIN_PROMPT,
 	maintainOutput: MAINTAIN_OUTPUT_INSTRUCTION,
 	skillsGuidance: SKILLS_GUIDANCE
 });
 function verifyPromptBundle(bundle = PROMPT_BUNDLE) {
-	if (bundle.id !== PROMPT_BUNDLE_ID || bundle.version !== 20) return false;
+	if (bundle.id !== PROMPT_BUNDLE_ID || bundle.version !== 21) return false;
 	const canonical = JSON.stringify({
 		id: PROMPT_BUNDLE_ID,
-		version: 20,
+		version: 21,
 		prompts: Object.fromEntries(Object.entries(bundle.prompts).sort())
 	});
 	return bundle.sha256 === sha256(canonical);
@@ -5793,6 +5925,164 @@ function sweepReviewChannelSessions(isAlive) {
 	return removed;
 }
 //#endregion
+//#region lib/types/platform-services.js
+/**
+* Every platform service the family reaches for with `ctx.get`, and what degrades without it.
+*
+* O-2 (v46 audit): the family probes 26 platform services optionally — the platform has no
+* formalized "optional dependency", so an ABSENT service is a silent downgrade and the diagnostic
+* surface is the only place a reader can learn about it. `/evolution doctor` used to judge six of
+* them; this table is the single source it judges the rest from, and the arch guard cross-checks it
+* against the actual probe sites so a new `ctx.get` cannot stay undeclared.
+*
+* `side` decides who can judge it: `host` probes run in the plugin process (doctor judges those),
+* `client` probes run in the browser half, where the host has no view of the seats.
+* @module @lmzhen/dsh-evolution-core
+*/
+/** The 26 probes, in service-name order (the guard checks this list against the tree). */
+const PLATFORM_SERVICE_PROBES = Object.freeze([
+	{
+		service: "agents",
+		feature: "review and curator subagent wake-ups",
+		side: "host"
+	},
+	{
+		service: "approval",
+		feature: "the platform approval policy the approval row shadows",
+		side: "host"
+	},
+	{
+		service: "configEditor",
+		feature: "the params view inherited-vs-override column",
+		side: "host"
+	},
+	{
+		service: "configForms",
+		feature: "the settings card seat (its section renders read-only without it)",
+		side: "client"
+	},
+	{
+		service: "evolutionApproval",
+		feature: "pending writes: list, approve and reject from the command surface",
+		side: "host"
+	},
+	{
+		service: "evolutionCurator",
+		feature: "/evolution curator subcommands, skill undo and history",
+		side: "host"
+	},
+	{
+		service: "evolutionIo",
+		feature: "every durable read and write (the IO seam)",
+		side: "host"
+	},
+	{
+		service: "evolutionMemoryBudget",
+		feature: "the memory-budget divergence section of this report",
+		side: "host"
+	},
+	{
+		service: "evolutionPolicy",
+		feature: "the policy snapshot that shadows row knobs",
+		side: "host"
+	},
+	{
+		service: "evolutionReplay",
+		feature: "/evolution replay",
+		side: "host"
+	},
+	{
+		service: "evolutionState",
+		feature: "the state facade behind activity and replay",
+		side: "host"
+	},
+	{
+		service: "llm",
+		feature: "the curator one-shot review model call",
+		side: "host"
+	},
+	{
+		service: "memory",
+		feature: "the cross-session memory store (review and learning-graph reads)",
+		side: "host"
+	},
+	{
+		service: "pluginInventory",
+		feature: "the plugin inventory view",
+		side: "host"
+	},
+	{
+		service: "pluginManager",
+		feature: "the platform plugin and preset surfaces this report reads",
+		side: "host"
+	},
+	{
+		service: "profileContext",
+		feature: "writing the agent-preset row into a profile patch",
+		side: "host"
+	},
+	{
+		service: "sessionProjections",
+		feature: "the domain-owned session units",
+		side: "host"
+	},
+	{
+		service: "sessionQuery",
+		feature: "the session corpus behind /evolution sessions",
+		side: "host"
+	},
+	{
+		service: "settings",
+		feature: "the settings user layer and the params view",
+		side: "host"
+	},
+	{
+		service: "skillUsage",
+		feature: "usage counters feeding the curator and the review planner",
+		side: "host"
+	},
+	{
+		service: "skills",
+		feature: "the platform skill catalog the skill tool writes through",
+		side: "host"
+	},
+	{
+		service: "storageDomain",
+		feature: "the storage-domain state provider",
+		side: "host"
+	},
+	{
+		service: "subagents",
+		feature: "spawning review and maintenance subagents",
+		side: "host"
+	},
+	{
+		service: "systemPrompt",
+		feature: "the protected-skills prompt variable",
+		side: "host"
+	},
+	{
+		service: "tools",
+		feature: "tool registration and the guard seam",
+		side: "host"
+	},
+	{
+		service: "webServer",
+		feature: "the skill-history panel routes",
+		side: "host"
+	}
+]);
+/**
+* The HOST-side probes that do not resolve in this runtime — what `/evolution doctor` prints as
+* "capability absence". Empty is the normal, healthy answer: every capability the family can use
+* is mounted, and the section stays away.
+* @param has - a `ctx.get(name) !== undefined` probe of the running context.
+* @returns the absent host-side probes, in declaration order.
+*/
+function absentHostServices(has) {
+	return PLATFORM_SERVICE_PROBES.filter((entry) => entry.side === "host" && !has(entry.service));
+}
+//#endregion
 //#region lib/types/instance-scope.js
 /**
 * B3 / G4 (0.3.78): the family's single-instance contract, made explicit.
@@ -7061,7 +7351,7 @@ function sessionReadSkillNames(ctx, session) {
 	if (session === void 0) return void 0;
 	const projected = sessionReadNames(ctx, session);
 	if (projected !== void 0) return projected;
-	const events = session.snapshotEvents?.();
+	const events = session.readEvents?.();
 	return events === void 0 ? void 0 : collectReadSkillNames(events);
 }
 /** Actions whose target must have been read first (create is authorship, so it is exempt). */
@@ -7921,7 +8211,13 @@ function contentRetentionFeedback(input) {
 * @returns the versions; an absent or unreadable index reads as empty (never a throw).
 */
 async function loadVersions(root, io, name) {
-	return parseHistoryIndex(await io.readText(historyIndexFile(root, name)).catch(() => null));
+	const file = historyIndexFile(root, name);
+	const probe = await probeText(io, file);
+	if (isUnknown(probe)) {
+		console.warn(`skill-store: ${file} could not be read (${probe.reason}); reporting no versions for "${name}" — the bytes are untouched`);
+		return [];
+	}
+	return parseHistoryIndex(isPresent(probe) ? probe.value : null);
 }
 /**
 * One version's content.
@@ -7934,7 +8230,12 @@ async function loadVersions(root, io, name) {
 async function loadVersionContent(root, io, name, v) {
 	const entry = (await loadVersions(root, io, name)).find((candidate) => candidate.v === v);
 	if (entry === void 0) return null;
-	return await io.readText(blobPath(root, entry.hash)).catch(() => null);
+	const probe = await probeText(io, blobPath(root, entry.hash));
+	if (isUnknown(probe)) {
+		console.warn(`skill-store: version ${v} of "${name}" could not be read (${probe.reason}); reporting no content`);
+		return null;
+	}
+	return isPresent(probe) ? probe.value : null;
 }
 /**
 * Record the content one mutation produced, best-effort.
@@ -7952,17 +8253,39 @@ async function recordVersions(root, io, input, keep) {
 	for (const side of [input.before, input.after]) {
 		if (side === null) continue;
 		const path = blobPath(root, contentHash(side));
-		if (!await io.exists(path).catch(() => false)) await io.writeText(path, side);
+		let blobPresent;
+		try {
+			blobPresent = await io.exists(path);
+		} catch (error) {
+			blobPresent = false;
+			console.warn(`skill-store: could not check whether the history blob ${path} exists (${error instanceof Error ? error.message : String(error)}); writing it — content-addressed bytes are the same file`);
+		}
+		if (!blobPresent) await io.writeText(path, side);
 	}
 	const file = historyIndexFile(root, input.skillName);
-	if (readHistoryIndex(await io.readText(file).catch(() => null)).kind === "unreadable") {
+	const fileProbe = await probeText(io, file);
+	if (isUnknown(fileProbe)) {
+		const quarantine = `${file}.corrupt`;
+		try {
+			await io.copy(file, quarantine);
+		} catch {}
+		console.warn(`skill-store: ${file} could not be read (${fileProbe.reason}); its bytes were copied to ${quarantine} where possible and the version record for this write was abandoned — the mutation stands and the file is untouched`);
+		return null;
+	}
+	const probe = readHistoryIndex(isPresent(fileProbe) ? fileProbe.value : null);
+	if (probe.kind === "unreadable") {
 		const quarantine = `${file}.corrupt`;
 		await io.copy(file, quarantine);
 		console.warn(`skill-store: ${file} could not be understood (malformed, foreign, or written by a newer reader); its bytes were copied to ${quarantine} and a fresh index starts from this write`);
 	}
 	const recorded = {};
+	let raceRefused = false;
 	await transactIo(io, file, (current) => {
 		const state = readHistoryIndex(current);
+		if (state.kind === "unreadable" && probe.kind !== "unreadable") {
+			raceRefused = true;
+			return current;
+		}
 		const { versions, recorded: numbers } = nextHistoryIndex(state.kind === "ok" ? state.versions : [], input, keep);
 		recorded.beforeVersion = numbers.beforeVersion;
 		recorded.afterVersion = numbers.afterVersion;
@@ -7971,6 +8294,14 @@ async function recordVersions(root, io, input, keep) {
 			versions
 		}, null, 2);
 	});
+	if (raceRefused) {
+		const quarantine = `${file}.corrupt`;
+		try {
+			await io.copy(file, quarantine);
+		} catch {}
+		console.warn(`skill-store: ${file} became unreadable between the probe and the locked read; its bytes were copied to ${quarantine} where possible and the version record for this write was abandoned — nothing was overwritten`);
+		return null;
+	}
 	return recorded;
 }
 /**
@@ -8721,10 +9052,19 @@ var SkillLibrary = class {
 	/**
 	* Summarize the skill tree.
 	* @param options - `withContent` attaches each skill's whole SKILL.md body to
-	* its summary (v35 C11): the read this listing already performs is the one the
-	* body would cost again, so a content-consuming caller pays no second pass.
+	* its summary (v35 C11), `withFrontmatter` its parsed frontmatter record
+	* (T2-07/A22): the read this listing already performs is the one either would
+	* cost again, so a caller pays no second pass over the tree.
 	* @returns one summary per readable skill directory.
 	*/
+	/** T2-V2/A27: the skill names the TREE holds — the same listing rule {@link list} applies (dot
+	* entries skipped, a SKILL.md must exist), WITHOUT reading any SKILL.md. A consumer that needs the
+	* member set rather than the summaries (the learning graph's node set) pays one directory listing
+	* instead of a whole-tree read pass.
+	* @returns the sorted skill directory names. */
+	async treeNames() {
+		return await listNames(this.root, this.io);
+	}
 	async list(options = {}) {
 		const summaries = [];
 		for (const name of await listNames(this.root, this.io)) {
@@ -8774,7 +9114,8 @@ var SkillLibrary = class {
 				].some((value) => value === null),
 				managed: hermesManaged === true,
 				...typeof parsedWhenToUse === "string" && parsedWhenToUse.trim() !== "" ? { whenToUse: parsedWhenToUse } : {},
-				...options.withContent === true ? { content: md } : {}
+				...options.withContent === true ? { content: md } : {},
+				...options.withFrontmatter === true && parsed !== null ? { frontmatter: parsed.frontmatter } : {}
 			});
 		}
 		return summaries;
@@ -8916,6 +9257,20 @@ var SkillLibrary = class {
 	* @returns path -> character count (possibly empty), or null when the listing or
 	*   a size probe cannot answer — unknown is never an empty map.
 	*/
+	/** A plan-time read whose bytes become a tree change's CAS baseline (`expected`). A failed read is
+	* NAMED and answers `null`, which is FAIL-CLOSED at commit: the baseline is then "absent", so an
+	* existing file counts as drift and the commit refuses instead of overwriting bytes nobody read
+	* (N36: the failure is not silently "the file is not there").
+	* @param target - the file a tree change is about to write.
+	* @returns its bytes, or `null` for both "absent" and "could not read". */
+	async readForCas(target) {
+		const probe = await probeText(this.io, target);
+		if (isUnknown(probe)) {
+			console.warn(`skill-store: could not read ${target} for the tree change's baseline (${probe.reason}); treating it as absent — an existing file then counts as drift and the commit refuses`);
+			return null;
+		}
+		return isPresent(probe) ? probe.value : null;
+	}
 	async supportFileChars(rawName) {
 		const name = rawName.trim();
 		if (this.badName(name) !== null) return null;
@@ -8925,12 +9280,21 @@ var SkillLibrary = class {
 		const chars = {};
 		for (const path of listed.value) {
 			const full = join(dir, ...path.split("/").filter(Boolean));
-			const bytes = this.io.size === void 0 ? null : await this.io.size(full).catch(() => null);
+			let bytes = null;
+			if (this.io.size !== void 0) try {
+				bytes = await this.io.size(full);
+			} catch (error) {
+				console.warn(`skill-store: size of ${full} could not be read (${error instanceof Error ? error.message : String(error)}); reporting no support-file char counts`);
+				return null;
+			}
 			if (bytes === null) return null;
 			if (bytes <= this.limits.maxSkillContentChars) continue;
-			const content = await this.io.readText(full).catch(() => null);
-			if (content === null) return null;
-			chars[path] = content.length;
+			const contentProbe = await probeText(this.io, full);
+			if (!isPresent(contentProbe)) {
+				if (isUnknown(contentProbe)) console.warn(`skill-store: ${full} could not be read (${contentProbe.reason}); reporting no support-file char counts`);
+				return null;
+			}
+			chars[path] = contentProbe.value.length;
 		}
 		return chars;
 	}
@@ -9236,7 +9600,9 @@ var SkillLibrary = class {
 			ok: false,
 			message: `Skill "${name}" is protected (${protection}).`
 		};
-		const currentForLimit = await this.io.readText(path).catch(() => null);
+		const limitProbe = await probeText(this.io, path);
+		if (isUnknown(limitProbe)) console.warn(`skill-store: could not re-read ${path} for the shrink exemption (${limitProbe.reason}); validating without it — an over-limit repair is refused, not accepted`);
+		const currentForLimit = isPresent(limitProbe) ? limitProbe.value : null;
 		const validation = validateFrontmatter(content, name, this.limits, currentForLimit);
 		if (validation) return {
 			ok: false,
@@ -9598,8 +9964,13 @@ var SkillLibrary = class {
 	* R2 follow-up); anything else (a user support file or a live writer's
 	* lock) is left untouched. */
 	async sweepLockIfStranded(lockPath) {
-		const body = await this.io.readText(lockPath).catch(() => null);
-		if (body === null) return;
+		const lockProbe = await probeText(this.io, lockPath);
+		if (isUnknown(lockProbe)) {
+			console.warn(`skill-store: could not read ${lockPath} to check whether its holder is alive (${lockProbe.reason}); leaving the lock in place`);
+			return;
+		}
+		if (!isPresent(lockProbe)) return;
+		const body = lockProbe.value;
 		const pid = parseLockBody(body);
 		if (pid === null) return;
 		if (Number.isInteger(pid) && pid > 0 && isProcessAlive(pid) && !await this.lockHolderAgedOut(lockPath)) return;
@@ -9908,7 +10279,7 @@ var SkillLibrary = class {
 				if (!freshTargetMd) throw new Error(`target "${targetName}" disappeared mid-consolidate`);
 				const writes = [];
 				for (const reference of referenceWrites) {
-					const previous = await this.io.readText(reference.target).catch(() => null);
+					const previous = await this.readForCas(reference.target);
 					const base = previous?.trimEnd() ?? "";
 					writes.push({
 						target: reference.target,
@@ -9918,7 +10289,7 @@ var SkillLibrary = class {
 				}
 				for (const file of rehomed) {
 					const target = join(targetDir, ...file.to.split("/"));
-					const previous = await this.io.readText(target).catch(() => null);
+					const previous = await this.readForCas(target);
 					writes.push({
 						target,
 						content: file.content,
@@ -10083,7 +10454,7 @@ var SkillLibrary = class {
 		const writes = [];
 		for (const entry of byRel.values()) {
 			const target = join(dir, ...entry.rel.split("/"));
-			const previous = await this.io.readText(target).catch(() => null);
+			const previous = await this.readForCas(target);
 			const base = previous?.trimEnd() ?? "";
 			writes.push({
 				target,
@@ -10212,7 +10583,10 @@ var SkillLibrary = class {
 				message: `Tree change failed: ${reason}. The rollback could not restore ${stuck.join(", ")} — recover those targets from the .backups snapshot (or re-apply the change).`
 			};
 		}
-		await this.audit(name, plan.auditAction, md, landing.find((entry) => entry.target.split(/[\\/]/).pop() === "SKILL.md")?.content ?? md, plan.auditSummary);
+		const skillMdWrite = landing.find((entry) => entry.target.split(/[\\/]/).pop() === "SKILL.md");
+		const auditedBefore = skillMdWrite === void 0 ? md : skillMdWrite.previous;
+		const auditedAfter = skillMdWrite === void 0 ? md : skillMdWrite.content;
+		await this.audit(name, plan.auditAction, auditedBefore, auditedAfter, plan.auditSummary);
 		this.notifyMutation({
 			action: plan.eventAction,
 			name,
@@ -10263,11 +10637,21 @@ var SkillLibrary = class {
 		let chosen;
 		const unreadable = [];
 		for (const candidate of candidates) {
-			if ((await this.io.readText(join(archiveRoot, candidate, ".archive-name")).catch(() => null))?.trim() === name) {
+			const markerProbe = await probeText(this.io, join(archiveRoot, candidate, ".archive-name"));
+			if (isUnknown(markerProbe)) {
+				unreadable.push(candidate);
+				continue;
+			}
+			if ((isPresent(markerProbe) ? markerProbe.value.trim() : "") === name) {
 				chosen = candidate;
 				break;
 			}
-			const parsed = parseFrontmatter(await this.io.readText(join(archiveRoot, candidate, "SKILL.md")).catch(() => null) ?? "");
+			const mdProbe = await probeText(this.io, join(archiveRoot, candidate, "SKILL.md"));
+			if (isUnknown(mdProbe)) {
+				unreadable.push(candidate);
+				continue;
+			}
+			const parsed = parseFrontmatter(isPresent(mdProbe) ? mdProbe.value : "");
 			if (parsed?.frontmatter.name === name) {
 				chosen = candidate;
 				break;
@@ -10306,7 +10690,9 @@ var SkillLibrary = class {
 		};
 		await this.deleteStrandedLocks(dest);
 		for (const marker of [".archive-reason", ".archive-name"]) if (await this.io.exists(join(dest, marker))) await this.io.remove(join(dest, marker));
-		await this.audit(name, "restore", null, await this.io.readText(join(dest, "SKILL.md")).catch(() => null), `restored from ${source}`);
+		const restoredProbe = await probeText(this.io, join(dest, "SKILL.md"));
+		if (isUnknown(restoredProbe)) console.warn(`evolution-skill-store: the restored SKILL.md of "${name}" could not be read back (${restoredProbe.reason}); the restore is recorded without after-bytes`);
+		await this.audit(name, "restore", null, isPresent(restoredProbe) ? restoredProbe.value : null, `restored from ${source}`);
 		this.notifyMutation({
 			action: "restore",
 			name,
@@ -10435,17 +10821,23 @@ var SkillLibrary = class {
 				message: `File "${filePath}" not found in skill "${name}".`
 			};
 		}
-		const before = await this.io.readText(target).catch(() => null);
-		if (before === null) return {
-			ok: false,
-			message: `"${filePath}" is not a readable regular file — remove the files inside it one by one.`
-		};
+		const beforeProbe = await probeText(this.io, target);
+		if (!isPresent(beforeProbe)) {
+			if (isUnknown(beforeProbe)) console.warn(`skill-store: could not read ${target} before removing it (${beforeProbe.reason}); refusing the removal`);
+			return {
+				ok: false,
+				message: `"${filePath}" is not a readable regular file — remove the files inside it one by one.`
+			};
+		}
+		const before = beforeProbe.value;
 		let verdict = anchorVerdict(anchor, before);
+		let lockedBefore = before;
 		if (verdict === "match" && this.transact) {
 			const ran = { done: false };
 			await this.transact(this.io, target, (current) => {
 				ran.done = true;
 				verdict = anchorVerdict(anchor, current);
+				if (verdict === "match" && current !== null) lockedBefore = current;
 				return verdict === "match" ? null : current;
 			});
 			if (!ran.done) return {
@@ -10454,7 +10846,7 @@ var SkillLibrary = class {
 			};
 		} else if (verdict === "match") await this.io.remove(target);
 		if (verdict !== "match") return anchorRefusalFile(name, filePath, verdict);
-		await this.audit(name, "remove_file", before, null, `removed ${filePath}`, filePath);
+		await this.audit(name, "remove_file", lockedBefore, null, `removed ${filePath}`, filePath);
 		this.notifyMutation({
 			action: "remove_file",
 			name,
@@ -10492,11 +10884,17 @@ var SkillLibrary = class {
 		if (!this.io.mtime) return null;
 		const cutoff = Date.now() - ARCHIVE_RETENTION_DAYS * 864e5;
 		const expired = [];
+		let undated = 0;
 		for (const entry of listed.value) {
-			const mtime = await this.io.mtime(join(archiveRoot, entry)).catch(() => null);
-			if (mtime === null || mtime > cutoff) continue;
+			const probe = await probeMtime(this.io, join(archiveRoot, entry));
+			if (isUnknown(probe)) {
+				undated += 1;
+				continue;
+			}
+			if (isAbsent(probe) || probe.value > cutoff) continue;
 			expired.push(entry);
 		}
+		if (undated > 0) console.warn(`skill-store: ${undated} archived entr(ies) could not be dated (mtime probe failed); they are retained — a failed probe never expires an entry`);
 		return expired;
 	}
 	/** V4 (design §16.6): support-file char policy, resolved at the call site. */
@@ -10854,8 +11252,9 @@ function newSkillLibrary(options) {
 * the SAME name in two carriers (reviewMode, staleAfterDays, archiveAfterDays —
 * resolved by the existing policy-shadows-row rule) and six use DIFFERENT names.
 * This module owns the six: the policy/snapshot name is the canonical id, the
-* plugin-row name is a deprecated alias kept readable for one minor version
-* (0.6.x) and removable in 0.7.0.
+* plugin-row name is a deprecated alias kept readable since 0.6.x. Removal was
+* planned for 0.7.0 and is deferred: the aliases still ship, so no later version
+* is claimed here.
 *
 * Reading stays compatible (a carrier still spelling the legacy name resolves),
 * writing is strict (the write path accepts canonical ids only, so no new
@@ -11992,6 +12391,21 @@ const PARAM_EXPOSURE = Object.freeze([
 		docAnchor: "PARAMETERS.md#deployment",
 		summary: "Stage foreground agent writes for approval too."
 	},
+	{
+		id: "evolution-approval.pendingTtlMs",
+		group: "deployment",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-approval",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "How long a staged write may wait before it expires: expired writes are closed as rejected and are NEVER executed; 0 (the default) means the window never expires.",
+		label: "待批过期时间",
+		hint: "一条待批写入最多等多久：超时就按「拒绝」关掉（不会执行，写效果不会落地）；0 = 永不过期（默认）。",
+		control: "number",
+		unit: "毫秒",
+		values: ""
+	},
 	{
 		id: "qualityWarnThreshold",
 		group: "deployment",
@@ -12042,6 +12456,16 @@ const PARAM_EXPOSURE = Object.freeze([
 		docAnchor: "PARAMETERS.md#deployment",
 		summary: "Timeout of one maintenance run started from the command surface."
 	},
+	{
+		id: "evolution-maintenance.probeTimeoutMs",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-maintenance",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Model-facing budget of one maintenance_probe call — a hang guard, not a latency budget."
+	},
 	{
 		id: "skill-usage.supportReadToolNames",
 		group: "deployment",
@@ -12060,7 +12484,7 @@ const PARAM_EXPOSURE = Object.freeze([
 		owner: "scripts",
 		applies: "restart",
 		docAnchor: "PARAMETERS.md#deployment",
-		summary: "Install target plane (layered preset vs profile-root bundle)."
+		summary: "Install target plane (values host / agent / layered / oneclick; the `layered` form uses the generated preset, the others mount the bundle at profile root)."
 	},
 	{
 		id: "install.basePreset",
@@ -12158,6 +12582,35 @@ function paramSettingsId(owner) {
 * @returns the entry id the platform reports for that row.
 * @throws when the owner publishes no user layer.
 */
+/** The keys the USER set in one row's settings namespace (G1 §8.4-A).
+*
+* The settings user layer is read in exactly ONE place, and it reads KEY NAMES, never values: the
+* platform resolves the user layer into the row's live fields, so a value always comes from the
+* row. The precedence rule (user > policy) needs to know WHICH keys the user set, or a deployment
+* policy would silently override the user. S2.9 (T3-10): review and curator each had their own
+* reader, so one key could be resolved two ways.
+* @param ctx - the plugin context (a `get(name)` view is enough).
+* @param rowId - the row's registry namespace (`paramRowId(<package>)`).
+* @returns the keys present in that row's user layer.
+*/
+function userSetKeys(ctx, rowId) {
+	const entry = ctx.get("settings")?.describe?.({ redactSecrets: false }).find((item) => item.ns === rowId);
+	return new Set(Object.keys(entry?.user ?? {}));
+}
+/** ONE key's effective value, in the design's precedence (G1 §8.4-A): the user layer (whose value
+* already arrived through the row's live field) → the deployment policy snapshot → the row itself.
+* S2.9 (T3-10): both readers of the policy row resolve through this, so a new key cannot get one
+* answer on the review side and another on the curator side.
+* @param userSet - the keys the user set (see {@link userSetKeys}).
+* @param row - the row's live fields.
+* @param snapshot - the deployment policy snapshot, when a policy row is mounted.
+* @param key - the key being resolved.
+* @returns the effective value.
+*/
+function pickWithPolicy(userSet, row, snapshot, key) {
+	if (userSet.has(key)) return row[key];
+	return snapshot?.[key] ?? row[key];
+}
 function paramRowId(owner) {
 	const id = paramSettingsId(owner);
 	if (id === void 0) throw new Error("no settings namespace registered for owner `" + owner + "` (add it to PARAM_NAMESPACES)");
@@ -12462,4 +12915,48 @@ function sessionAudited(ctx, sessionId, sessionScoped) {
 	return false;
 }
 //#endregion
-export { AGENT_PRESET_PACKAGE, AGENT_PRESET_ROOT_HINT, ALIVE_LOCK_TAKEOVER_MS, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, EMPTY_PATCH_SEED, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, basePresetPlugins, blobPath, bodyCost, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, canonicalWriteId, claimInstance, clampedNumber, classifyNamespaceMigration, clearReviewChannel, collectReadSkillNames, composePresetComposition, composePresetEntry, composePresetInsert, composePresetRow, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, createGateSet, daysSinceIso, decideTakeover, describeReferenceRewrite, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, historyIndexFile, historyRoot, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isLoopbackRequest, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, latestActivityAt, latestVersionAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, mergePresetRow, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, parseLockBody, partitionVersions, pendingSelfCleanup, persistedWriteSite, persistedWriteSites, planNamespaceMigration, planReferenceRewrite, planRehoming, policyStageLimits, presetPatchText, presetRowBlock, presetRowBody, presetRowId, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, projectionText, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonBody, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, relatedSkillNames, releaseInstance, removePresetRow, renameWithRetry, renderCuratorReportMarkdown, resolveBasePresetPatch, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, retainEventArchives, retirementReport, reviewPrompt, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillReadNameOf, skillRowCells, skillStateKey, skillsRoot, supportFileReadOf, suppressedFile, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, unhookedSupportPointers, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, writeDurableTmp, writeJson, yamlPlainScalarNeedsQuotes };
+//#region lib/types/fold-untrusted.js
+/**
+* Untrusted text rendered as prompt lines (T3-03/A31) — ONE folding rule.
+*
+* The background-review digest embeds conversation text and tool output into a
+* plain-text prompt whose PRODUCT is a plan with write permission. Anything the
+* session ingested (a fetched page, a file body, command output) can therefore
+* carry a newline plus a line shaped like the prompt's own structure — a
+* `SYSTEM:`/`Review kind:` header, a `[result]` evidence line, a second copy
+* of the closing instruction — and forge structure or inject instructions.
+*
+* FOLDING, not deleting: the reader (the model) must still SEE what the data
+* said, it just must never become structure. Line separators become a visible
+* `⏎`, and a line that would read as a role/evidence header gets a visible
+* marker in front of it. Every original character stays in place.
+*
+* The boundary is the separator itself, not only a real newline: a payload can
+* paste the separator verbatim, so neutralization matches after `⏎` whether it
+* came from the fold or from the data. Both edits are idempotent (a second pass
+* cannot add a second marker).
+*
+* Scope: text rendered as its OWN line(s) of a prompt. `render-facts`'
+* sanitizer (evolution-maintenance) is the same posture for `key=value` fields
+* and additionally escapes its block delimiter; it is not superseded here.
+* @module @lmzhen/dsh-evolution-core
+*/
+/** Visible stand-in for a folded line separator: one character that cannot be read as line structure. */
+const UNTRUSTED_LINE_BREAK = " ⏎ ";
+/** Visible marker prefixed to a line that would otherwise read as a role/structure header. */
+const UNTRUSTED_LINE_MARK = "· ";
+const NEWLINES = /\r\n|\r|\n/g;
+/** A line that reads as structure: a `Label:` head (SYSTEM:, Review kind:, Signals:) or a digest evidence tag.
+* The head is case-TOLERANT on purpose: this family's own prompt labels are mixed case, so an
+* uppercase-only rule neutralized SYSTEM: while leaving a forged "Review kind:" untouched. */
+const STRUCTURAL_HEAD = /(^|⏎)([ \t]*)((?:[A-Za-z][A-Za-z0-9 _]{2,}:|\[result\]|\[call\]))/g;
+/**
+* Fold untrusted `text` so it cannot become structure, then bound it to `limit`
+* visible characters. A non-positive `limit` means "no truncation".
+*/
+function foldUntrustedLines(text, limit) {
+	const marked = text.replace(NEWLINES, UNTRUSTED_LINE_BREAK).replace(STRUCTURAL_HEAD, (_match, boundary, spaces, head) => `${boundary}${spaces}· ${head}`);
+	return limit > 0 ? marked.slice(0, limit) : marked;
+}
+//#endregion
+export { AGENT_PRESET_PACKAGE, AGENT_PRESET_ROOT_HINT, ALIVE_LOCK_TAKEOVER_MS, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, EMPTY_PATCH_SEED, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, absentHostServices, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, basePresetPlugins, blobPath, bodyCost, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, clearReviewChannel, collectReadSkillNames, composePresetComposition, composePresetEntry, composePresetInsert, composePresetRow, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, createGateSet, daysSinceIso, decideTakeover, declaredReportStamp, describeReferenceRewrite, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, historyIndexFile, historyRoot, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isLoopbackRequest, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, latestActivityAt, latestVersionAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, mergePresetRow, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, parseLockBody, partitionVersions, payloadText, pendingSelfCleanup, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, policyStageLimits, presetPatchText, presetRowBlock, presetRowBody, presetRowId, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonBody, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, relatedSkillNames, releaseInstance, removePresetRow, renameWithRetry, renderCuratorReportMarkdown, reportTime, resolveBasePresetPatch, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, retainEventArchives, retirementReport, reviewPrompt, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillReadNameOf, skillRowCells, skillStateKey, skillsRoot, supportFileReadOf, suppressedFile, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, unhookedSupportPointers, updateSuppressedNames, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, writeDurableTmp, writeJson, yamlPlainScalarNeedsQuotes };