@lmzhen/dsh-evolution-core 0.26.15 → 0.26.26

package/lib/index.js

@@ -1,10 +1,10 @@
-import { parse } from "yaml";
-import { basename, dirname, join, resolve } from "node:path";
 import { copyFileSync, existsSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parse } from "yaml";
 import { cp, lstat, mkdir, open, readFile, readdir, rename, rm, stat } from "node:fs/promises";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
-import { fileURLToPath } from "node:url";
 import { scopeOf } from "@deepseek-ai/dsh-scope";
 import { z } from "zod";
 //#region lib/types/citations.js
@@ -204,6 +204,357 @@ function scanBodyHooks(content) {
 	};
 }
 //#endregion
+//#region lib/types/tree-write.js
+/**
+* G1/1.5 (S7-09): the TYPED critical section around a tree write.
+*
+* The control-plane lock used to wrap a whole pass, LLM call and all: an operator undo/restore waited up to
+* one `curatorReviewTimeoutMs` (~120s) for a review that was merely thinking. The fix is to give the critical
+* section a shape that a review cannot be squeezed into.
+*
+* WHAT THIS TYPE CAN AND CANNOT DO (the plan wording says "cannot be put inside the lock by TYPE" - that is
+* only half true and the half that is false is the half people rely on): a callback is a CLOSURE, so even
+* with `view` as its only parameter it can still reach `this.io` / `this.ctx` / `this.llm` from the enclosing
+* scope. TypeScript cannot stop that, and a criterion claiming it would never go red.
+*
+* What the type DOES give: new code has no other entry - the callback is handed a `SnapshotView` and nothing
+* else, so a phase that needs `io` or `llm` has to stay OUTSIDE and be passed its result in. What the type
+* CANNOT give is covered by the companion source guard (see the family gates): an `io` / `llm` / `this.`
+* / `ctx.` reference inside a `withTreeWrite` callback is a violation, and that guard is the executable form
+* of "cannot be put inside the lock".
+*
+* @module @lmzhen/dsh-evolution-core/tree-write
+*/
+/**
+* Run one tree-writing section under a caller-owned serial queue, exposing ONLY a {@link SnapshotView}.
+*
+* The queue is passed in rather than owned here: the lock belongs to whoever serializes the control plane
+* (the curator), and a second lock would be a second answer to one question.
+* @param acquire - the caller serial queue (e.g. the curator mutex), returning its release.
+* @param view - what this section sees while it holds the lock.
+* @param fn - the section. It may only use the view.
+* @returns whatever the section returns.
+*/
+async function withTreeWrite(acquire, view, fn) {
+	const release = await acquire();
+	try {
+		return await fn(view);
+	} finally {
+		release();
+	}
+}
+//#endregion
+//#region lib/types/package-identity.js
+/**
+* G1/1.8 (G-04): the SCOPE this build was published under, DERIVED from a manifest instead of written as a
+* literal in running code.
+*
+* The family used to hard-code `@deepseek-ai/dsh-...` names and let `prepare-release.mjs --scope @lmzhen`
+* patch the text afterwards. A published install therefore depended on a release-time string rewrite
+* reaching every copy, and the copies had already drifted (doctor.ts, index.ts, preset-composition.ts and
+* its .mjs mirror each spelled the identity). The scope is knowable at runtime: it is the scope segment of
+* the nearest `package.json` above the calling module. Nothing to rewrite, one owner of the answer.
+*
+* @module @lmzhen/dsh-evolution-core/package-identity
+*/
+/**
+* The scope segment of the nearest `package.json` at or above `from`.
+* @param from - the calling module URL (its own manifest is the answer).
+* @returns the scope, e.g. `@deepseek-ai` or `@lmzhen`; an unscoped manifest yields an empty string.
+*/
+function scopeOfNearestManifest(from) {
+	let dir = dirname(from instanceof URL ? fileURLToPath(from) : fileURLToPath(new URL(from)));
+	for (let hops = 0; hops < 32; hops += 1) {
+		const manifest = join(dir, "package.json");
+		if (existsSync(manifest)) {
+			const parsed = JSON.parse(readFileSync(manifest, "utf8"));
+			const name = typeof parsed.name === "string" ? parsed.name : "";
+			return name.startsWith("@") ? name.split("/")[0] ?? "" : "";
+		}
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	return "";
+}
+/**
+* One family/platform package name under the RUNNING scope.
+* @param bareName - the name without any scope, e.g. `dsh-agent-preset`.
+* @param from - the calling module URL.
+* @returns `scope/bareName`, or `bareName` when the manifest carries no scope.
+*/
+function scopedPackageName(bareName, from) {
+	const scope = scopeOfNearestManifest(from);
+	return scope === "" ? bareName : scope + "/" + bareName;
+}
+//#endregion
+//#region lib/types/write-authority.js
+/** The mode a deployment that configures nothing gets. */
+const DEFAULT_WRITE_CONFIRM_MODE = "auto";
+/** Seconds a timeout-mode prompt waits before the write is cancelled. */
+const DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS = 120;
+/**
+* The batch-one migration aid: every call site becomes ONE of these instead of hand-building the
+* object - so the shape cannot drift between callers, and each site still has to say its own
+* origin out loud (origin is required here on purpose: the whole point is that no caller inherits
+* a default identity).
+*/
+function authorityFrom(input) {
+	return {
+		origin: input.origin,
+		threatExemptLabels: input.threatExemptLabels ?? [],
+		protectedNames: input.protectedNames,
+		readNames: input.readNames,
+		...input.confirm === void 0 ? {} : { confirm: input.confirm },
+		...input.confirmMode === void 0 ? {} : { confirmMode: input.confirmMode },
+		...input.confirmTimeoutSeconds === void 0 ? {} : { confirmTimeoutSeconds: input.confirmTimeoutSeconds },
+		warn: input.warn ?? (() => {})
+	};
+}
+//#endregion
+//#region lib/types/write-gates.js
+/**
+* The write-admission sequence: ONE ordered table of the reasons a skill write is refused.
+*
+* Two points read this table (design `dsh-evolution-write-gate-design.md` §3). The ADMISSION
+* point (`execute`, BEFORE the approval seam) runs every gate that applies to `'admission'`, so a
+* write that is refused is never staged and never spends the operator's attention twice. The
+* EXECUTION point (the `executeCore` funnel, reached by the direct path and by the approval
+* replay) runs the gates that apply to `'execution'`: the stored plan of a replayed write passed
+* no schema, and the protected list can change while a record sits pending, so those verdicts are
+* re-decided at the bytes.
+*
+* Order is part of the contract: a gate that can only refuse comes before one that needs a round
+* trip with the operator, so a write that is refused anyway never asks anything.
+*
+* A gate decides whether a write may be ATTEMPTED. The library decides whether it can be
+* PERFORMED — its own structured refusals (a restructure element that is not an object, a patch
+* anchor that no longer matches, an `absorbed_into` that does not exist) stay where the bytes are
+* read.
+*
+* Rule bodies live in `evolution-core` (the read-before-write rule in `skill-reads`, the
+* required-argument table in `SKILL_ACTION_REQUIRED_FIELDS`); this module owns the ORDER and the
+* applicability of each gate, which is an execution-point fact of this tool.
+* @module @lmzhen/dsh-evolution-core/write-gates
+*/
+/** The confirm question's stable id — one question per write, so an answer to an earlier prompt
+* can never be read as the answer to a later one. */
+const CONFIRM_QUESTION_ID = "evolution-skill-write";
+/** The cancel label every confirm question offers. */
+const CANCEL_LABEL = "取消";
+/** What a `timeout`-mode deadline settles with: comparable by identity against the seam's
+* boolean, so the two outcomes stay distinguishable without a mutable flag (which a linter
+* cannot follow through a timer callback, and a reader cannot either). */
+const CONFIRM_TIMED_OUT = "confirm-timed-out";
+/**
+* How the ONE confirmation behaves (registry `skillWriteConfirm`).
+*
+* `auto` writes without asking — the default, because an unattended run (a background pass, a
+* scheduled review, a headless session) must not park a tool call on a question nobody will answer.
+* `ask` waits for as long as it takes, which is the deployment that wants the gate in the loop.
+* `timeout` asks and cancels the write on its own deadline.
+*/
+/** A usable deadline: the configured value when it is a positive finite number, else the default. */
+function timeoutSecondsOf(configured) {
+	return configured !== void 0 && Number.isFinite(configured) && configured >= 1 ? Math.floor(configured) : 120;
+}
+/** The scalar fields the tool schema types as strings; the replay channel has no schema.
+* `action` is one of them: a non-string action used to fall through to the library as "Unknown
+* action" while the read gate re-defaulted it to `patch` and refused with E-318 (review
+* 2026-09-26, P2), so the shape gate refuses it by name instead. */
+const SCALAR_ARG_FIELDS = [
+	"action",
+	"name",
+	"content",
+	"old_string",
+	"new_string",
+	"file_path",
+	"file_content",
+	"absorbed_into"
+];
+/** The scalar fields the tool schema types as BOOLEANS; the replay channel has no schema either.
+* T2-V3/A28: `args.replace_all === true` answered "false" for anything else, so a staged
+* `replace_all: 'yes'` silently patched only the FIRST occurrence — a wrong count with no signal.
+* The plan channel already refuses a non-boolean `replace_all` by name (S1-C1); this is the same
+* rule on the replay channel, so the two channels cannot disagree about one flag. */
+const FLAG_ARG_FIELDS = ["replace_all"];
+/**
+* Assemble a gate context from a caller's services. The protected list is read HERE, so no caller can
+* forget it or read it from a second place.
+* @param services - the four required services plus the optional registry knobs.
+* @param request - the point asking, the arguments under test, and the write origin.
+* @returns a context the shared sequence accepts.
+*/
+function skillWriteGateContext(services, request) {
+	return {
+		point: request.point,
+		args: request.args,
+		origin: request.origin,
+		protectedNames: protectedSkillNamesOf(services.policy),
+		readNames: services.readNames,
+		confirm: services.confirm,
+		...services.confirmMode === void 0 ? {} : { confirmMode: services.confirmMode },
+		...services.confirmTimeoutSeconds === void 0 ? {} : { confirmTimeoutSeconds: services.confirmTimeoutSeconds },
+		...services.describeTarget === void 0 ? {} : { describeTarget: services.describeTarget },
+		warn: services.warn
+	};
+}
+function protectedSkillNamesOf(policy) {
+	return (policy?.get?.())?.protectedSkillNames;
+}
+/**
+* Narrow the arguments once for every gate.
+*
+* The admission point reaches the gates AFTER the schema, the replay channel BEFORE any
+* validation, so a gate reads only what it can prove: anything else counts as absent, exactly as
+* the missing-argument check already treated a non-string action.
+* @param args - the arguments as the caller sent them.
+* @returns the narrowed view.
+*/
+function gateArgsOf(args) {
+	const scalars = typeof args === "object" && args !== null ? args : {};
+	const action = scalars.action;
+	const name = scalars.name;
+	const absorbedInto = scalars.absorbed_into;
+	return {
+		action: typeof action === "string" ? action : void 0,
+		name: typeof name === "string" ? name : "",
+		absorbedInto: typeof absorbedInto === "string" && absorbedInto.trim() !== "" ? absorbedInto : void 0,
+		scalars
+	};
+}
+/** The sequence, in order. A gate whose `appliesTo` omits the asking point is skipped. */
+const GATES = [
+	{
+		id: "argument-shape",
+		appliesTo: ["admission", "execution"],
+		run: ({ view }) => {
+			for (const field of SCALAR_ARG_FIELDS) {
+				const value = view.scalars[field];
+				if (value === void 0 || value === null || typeof value === "string") continue;
+				return `skill_manage: "${field}" must be a string (got ${typeof value}); refusing the write.`;
+			}
+			for (const field of FLAG_ARG_FIELDS) {
+				const value = view.scalars[field];
+				if (value === void 0 || value === null || typeof value === "boolean") continue;
+				return `skill_manage: "${field}" must be a boolean (got ${typeof value}); refusing the write.`;
+			}
+			return null;
+		}
+	},
+	{
+		id: "missing-args",
+		appliesTo: ["admission", "execution"],
+		run: ({ view }) => {
+			const action = view.action;
+			const missing = (action === void 0 || !Object.hasOwn(SKILL_ACTION_REQUIRED_FIELDS, action) ? [] : SKILL_ACTION_REQUIRED_FIELDS[action] ?? []).filter((field) => view.scalars[field] === void 0 || view.scalars[field] === null);
+			if (missing.length === 0) return null;
+			return `skill_manage ${action} requires ${missing.join(", ")}; the tool description lists the arguments per action.`;
+		}
+	},
+	{
+		id: "policy-protection",
+		appliesTo: ["admission", "execution"],
+		run: ({ view, origin, protectedNames }) => {
+			if (origin === "foreground") return null;
+			if (view.name === "" || !protectedNames?.includes(view.name)) return null;
+			return `skill_manage: "${view.name}" is protected by the current policy (protectedSkillNames); replayed/autonomous writes are refused.`;
+		}
+	},
+	{
+		id: "read-before-write",
+		appliesTo: ["admission"],
+		run: ({ view, origin, readNames, warn }) => {
+			if (origin === "foreground") return null;
+			if (readNames === void 0) {
+				warn("skill_manage: the read-before-write check could not run for this call — the session log is not readable here, so the write is allowed.");
+				return null;
+			}
+			if (view.action === void 0) return null;
+			if (!isUnreadWrite({
+				action: view.action,
+				name: view.name
+			}, readNames)) return null;
+			return errorText("e-318-skill-write-without-a-read", { a1: view.name });
+		}
+	},
+	{
+		id: "human-confirm",
+		appliesTo: ["admission"],
+		run: async ({ view, origin, confirm, warn, confirmMode, confirmTimeoutSeconds, describeTarget }) => {
+			const action = view.action;
+			if (action === void 0 || origin !== "foreground" || view.name === "") return null;
+			if (!(action === "create" || action === "delete" && view.absorbedInto === void 0)) return null;
+			const mode = confirmMode ?? "auto";
+			if (mode === "auto") return null;
+			if (confirm === void 0) {
+				warn("skill_manage: no confirmation channel is mounted, so the write proceeds unconfirmed.");
+				return null;
+			}
+			const confirmLabel = action === "create" ? "创建" : "删除";
+			const seconds = timeoutSecondsOf(confirmTimeoutSeconds);
+			const cancel = new AbortController();
+			let timer;
+			const deadline = mode === "timeout" ? new Promise((resolve) => {
+				timer = setTimeout(() => {
+					cancel.abort();
+					resolve(CONFIRM_TIMED_OUT);
+				}, seconds * 1e3);
+				timer.unref();
+			}) : void 0;
+			const context = await describeTarget?.();
+			const details = [context?.description === void 0 || context.description === "" ? null : "功能：" + context.description, context?.versions === void 0 ? null : "已记录的内容版本数：" + String(context.versions)].filter((line) => line !== null);
+			const consequence = action === "create" ? `创建技能 "${view.name}"？会在家族目录树里新建一个技能目录。` : `删除技能 "${view.name}"？它会被归档到 .archive 并离开目录。`;
+			const asked = confirm({
+				action,
+				name: view.name,
+				confirmLabel,
+				question: {
+					id: CONFIRM_QUESTION_ID,
+					header: "确认",
+					question: details.length === 0 ? consequence : consequence + " " + details.join(" · "),
+					options: [{ label: confirmLabel }, { label: CANCEL_LABEL }]
+				},
+				...mode === "timeout" ? { signal: cancel.signal } : {}
+			});
+			let outcome;
+			try {
+				outcome = deadline === void 0 ? await asked : await Promise.race([asked, deadline]);
+			} finally {
+				if (timer !== void 0) clearTimeout(timer);
+			}
+			if (outcome === true) return null;
+			if (outcome === CONFIRM_TIMED_OUT || cancel.signal.aborted) return errorText("e-319-skill-write-confirm-timed-out", {
+				a1: view.name,
+				a2: action === "create" ? "创建" : "删除",
+				a3: String(seconds)
+			});
+			return errorText("e-317-skill-write-not-confirmed", {
+				a1: view.name,
+				a2: action === "create" ? "创建" : "删除"
+			});
+		}
+	}
+];
+/**
+* Run the sequence for one write attempt.
+* @param context - the asking point, the write, and the seams the human-facing gate needs.
+* @returns the FIRST refusal, or null when every applicable gate passed. Both points return the
+*   message as the tool result unchanged, so the two entries refuse with identical wording.
+*/
+async function runWriteGates(context) {
+	const input = {
+		...context,
+		view: gateArgsOf(context.args)
+	};
+	for (const gate of GATES) {
+		if (!gate.appliesTo.includes(context.point)) continue;
+		const refusal = await gate.run(input);
+		if (refusal !== null) return refusal;
+	}
+	return null;
+}
+//#endregion
 //#region lib/types/reference-rewrite.js
 /**
 * Reference re-homing plans (0.5.0 V1, design §16.7).
@@ -2481,6 +2832,7 @@ function buildCuratorRunReport(input) {
 		...input.snapshotPath === void 0 ? {} : { snapshotPath: input.snapshotPath },
 		...input.llmReviewEnabled === void 0 ? {} : { llmReviewEnabled: input.llmReviewEnabled },
 		...input.nominationsWarnings === void 0 ? {} : { nominationsWarnings: [...input.nominationsWarnings] },
+		...input.scanWarnings === void 0 ? {} : { scanWarnings: [...input.scanWarnings] },
 		...input.wouldPrune === void 0 ? {} : { wouldPrune: input.wouldPrune === null ? null : [...input.wouldPrune] }
 	};
 }
@@ -2505,7 +2857,8 @@ function renderCuratorReportMarkdown(report) {
 		...report.routeStubs === void 0 ? [] : [`- **Stale route stubs**: ${report.routeStubs.stubs}`],
 		...report.llmReviewEnabled === void 0 ? [] : [`- **llmReview**: ${report.llmReviewEnabled}`],
 		...report.wouldPrune === void 0 ? [] : [report.wouldPrune === null ? "- **Would prune (archiveRetention=report)**: unknown (archive listing unreadable)" : `- **Would prune (archiveRetention=report)**: ${report.wouldPrune.length}`],
-		...report.nominationsWarnings === void 0 || report.nominationsWarnings.length === 0 ? [] : [`- **Nomination warnings**: ${report.nominationsWarnings.join("; ")}`]
+		...report.nominationsWarnings === void 0 || report.nominationsWarnings.length === 0 ? [] : [`- **Nomination warnings**: ${report.nominationsWarnings.join("; ")}`],
+		...report.scanWarnings === void 0 || report.scanWarnings.length === 0 ? [] : report.scanWarnings.map((warning) => "- **Dedup scan**: " + warning)
 	];
 	const section = (title, items) => items.length === 0 ? [] : [
 		"",
@@ -4750,7 +5103,7 @@ function compositionRowIds(composition) {
 	return ids;
 }
 /** The platform package a DECLARATIVE preset row names (0.2.x replaced preset directories with it). */
-const AGENT_PRESET_PACKAGE = "@deepseek-ai/dsh-agent-preset";
+const AGENT_PRESET_PACKAGE = scopedPackageName("dsh-agent-preset", import.meta.url);
 /**
 * Compose the DECLARATIVE preset row from the platform base composition and the family delta.
 *
@@ -4795,7 +5148,7 @@ function composePresetRow(baseComposition, deltaComposition, identity) {
 	const plugins = denseBlockSequence(composePresetComposition(baseComposition, deltaComposition)).split("\n").map((line) => line === "" ? "" : "      " + line).join("\n");
 	return [
 		"- id: " + identity.rowId,
-		"  name: '@deepseek-ai/dsh-agent-preset'",
+		"  name: '" + AGENT_PRESET_PACKAGE + "'",
 		"  config:",
 		"    id: " + identity.id,
 		"    name: " + JSON.stringify(identity.name),
@@ -6529,11 +6882,6 @@ const PLATFORM_SERVICE_PROBES = Object.freeze([
 		feature: "every durable read and write (the IO seam)",
 		side: "host"
 	},
-	{
-		service: "fs",
-		feature: "the platform filesystem the evolution-io-fs backend maps the seam onto (locks + writeText(expected) version CAS)",
-		side: "host"
-	},
 	{
 		service: "hmr",
 		feature: "the preset install read-merge-write commit (the platform HMR lock serializes it)",
@@ -9352,6 +9700,16 @@ function staleRouteStubs(indexes) {
 * re-probes after its copies so a mid-copy writer demotes to `skipped`
 * (OPT-07); the movers' probe→rename window is owned by the io.ts protocol.
 */
+/**
+* The CLASS boundary default authority (G1/1.1, Stage 2).
+*
+* The FACTORY (newSkillLibrary) requires an explicit authority and the v35 A6 register pins every
+* production construction, so a production caller cannot omit one. The class is the INTERNAL
+* boundary: arch rule N7 forbids constructing it directly in production, while ~200 test fixtures do
+* exactly that and ARE the operator, so an omitted authority reads as foreground here - named and
+* stated instead of silent.
+*/
+const CLASS_DEFAULT_AUTHORITY = authorityFrom({ origin: "foreground" });
 /** 0.3.16 (S1.13, T-6): the pointer-line prefix written into a body when a
 * section is moved to references/ — single literal, both restructure and
 * append-mode consolidation emit the same discoverability line. */
@@ -9721,6 +10079,28 @@ function planRestructureSections(body, moves) {
 		}))
 	};
 }
+/**
+* WHY MODULE SCOPE (S4.4): the serial queue must be shared ACROSS SkillLibrary instances. Six services
+* each build their own store over the SAME skill root (tool face / curator face / review face), and a
+* per-instance queue - which is what `this.serial = makeSerialQueue()` was - let two of them run
+* read->plan->commit against one tree at the same time. The mutex cannot live on an instance because
+* instances share nothing (S2-02, G1/1.4); it cannot be a file lock either, because the point is to
+* order IN-PROCESS phases before the io transact layer sees them. Keyed by root: two roots are
+* independent trees and must not wait on each other.
+*/
+const ROOT_SERIAL = /* @__PURE__ */ new Map();
+/** The ONE queue for a skill root, created on first use (module scope, see above).
+* @param root - the resolved skill root; the key, so two spellings of one directory share a queue.
+* @returns the queue every instance over this root serializes through.
+*/
+function serialForRoot(root) {
+	const key = resolve(root);
+	const existing = ROOT_SERIAL.get(key);
+	if (existing !== void 0) return existing;
+	const created = makeSerialQueue();
+	ROOT_SERIAL.set(key, created);
+	return created;
+}
 var SkillLibrary = class {
 	root;
 	limits;
@@ -9739,20 +10119,24 @@ var SkillLibrary = class {
 	/** V10-03 (P2-18): see the constructor's threatExemptLabels. Empty by
 	* default — the strict ANY-hit-blocks policy is unchanged. */
 	threatExemptLabels;
+	/** G1/1.1: default authority; a call may override (origin is per-invocation). */
+	/** G1/1.1/Stage 2: the ONE default every mutator reads. Per-call overrides still win. */
+	authority;
 	/** skill-history.ts: the content history is best-effort, so a failure must not be SILENT —
 	* but it is a deployment condition, not a per-write event, so it warns once per instance. */
 	historyWarned = false;
-	constructor(root = skillsRoot(), io = nodeEvolutionIo(), limits = DEFAULT_SKILL_LIMITS, onMutation, transact, threatExemptLabels) {
+	constructor(root = skillsRoot(), io = nodeEvolutionIo(), limits = DEFAULT_SKILL_LIMITS, onMutation, transact, threatExemptLabels, authority = CLASS_DEFAULT_AUTHORITY) {
 		this.root = root;
 		this.io = io;
 		this.limits = limits;
 		this.onMutation = onMutation;
 		this.threatExemptLabels = threatExemptLabels ?? [];
+		this.authority = authority;
 		this.transact = transact ?? (io.transact ? (ioLike, path, task) => {
 			const t = ioLike.transact;
 			return t ? t(path, task) : transactIo(ioLike, path, task);
 		} : void 0);
-		this.serial = makeSerialQueue();
+		this.serial = serialForRoot(this.root);
 	}
 	/**
 	* Run one single-file read-modify-write for a mutator. When `transact` was
@@ -9867,6 +10251,32 @@ var SkillLibrary = class {
 	* a swallowed error would silently downgrade the anchor to
 	* last-writer-wins.
 	*/
+	/**
+	* S4-01 (G0/0.7): the ONE three-state read the staging/replay anchors use.
+	*
+	* The two absorbing reads below absorb ENOENT/EISDIR and rethrow everything else, and the callers then
+	* each wrote their own try/catch to turn a rethrow into a decision - three near-copies of one posture,
+	* and the newest of them silently dropped the anchor instead of refusing. A read failure is its own
+	* state, so it gets its own name here: `unknown` with the reason, next to `present` and `absent`.
+	* Failing closed is then the CALLER decision (they refuse on unknown), not something each call site has
+	* to re-derive from a thrown error.
+	*/
+	async readSkillProbe(rawName) {
+		return await this.probeOf(() => this.read(rawName));
+	}
+	/** The support-file face of {@link readSkillProbe}. */
+	async readSupportFileProbe(rawName, filePath) {
+		return await this.probeOf(() => this.readSupportFile(rawName, filePath));
+	}
+	/** One place that turns the absorbing reads into three states. `null` is absent; a throw is unknown. */
+	async probeOf(read) {
+		try {
+			const value = await read();
+			return value === null ? probeAbsent() : probePresent(value);
+		} catch (error) {
+			return probeUnknown(probeReason(error));
+		}
+	}
 	async readSupportFile(name, filePath) {
 		const bad = this.badName(name, { allowReserved: true });
 		if (bad) throw new Error(bad);
@@ -9899,7 +10309,9 @@ var SkillLibrary = class {
 	}
 	async list(options = {}) {
 		const summaries = [];
-		for (const name of await listNames(this.root, this.io)) {
+		for (const entry of await this.io.list(this.root)) {
+			if (entry.startsWith(".")) continue;
+			const name = entry;
 			const dir = this.dirOf(name);
 			let md;
 			try {
@@ -9996,7 +10408,7 @@ var SkillLibrary = class {
 	* (P1-1/v14 — the name guard lives HERE as well as at every entry point, so
 	* no caller can build a path from an unvalidated name).
 	*/
-	async writeProtection(rawName, origin = "foreground") {
+	async writeProtection(rawName, origin = this.authority.origin) {
 		const name = rawName.trim();
 		const badName = this.badName(name);
 		if (badName) return badName;
@@ -10274,7 +10686,7 @@ var SkillLibrary = class {
 	* protective mutation, so the autonomous pipeline may never call it. The
 	* marker write is the only state change; content is untouched.
 	*/
-	async setPinned(name, pinned, origin = "foreground") {
+	async setPinned(name, pinned, origin = this.authority.origin) {
 		return await this.serial(() => this.setPinnedCore(name, pinned, origin));
 	}
 	async setPinnedCore(name, pinned, origin) {
@@ -10329,7 +10741,7 @@ var SkillLibrary = class {
 			path: dir
 		};
 	}
-	async create(name, content, origin = "foreground") {
+	async create(name, content, origin = this.authority.origin) {
 		const normalized = name.trim();
 		return await this.serial(() => this.createCore(normalized, content, origin));
 	}
@@ -10456,7 +10868,7 @@ var SkillLibrary = class {
 			...norm.changed ? { normalizedFrontmatterFields: norm.fields } : {}
 		};
 	}
-	async update(rawName, content, origin = "foreground", anchor) {
+	async update(rawName, content, origin = this.authority.origin, anchor) {
 		const name = rawName.trim();
 		return await this.serial(() => this.updateCore(name, content, origin, anchor));
 	}
@@ -10545,7 +10957,7 @@ var SkillLibrary = class {
 			};
 		}, anchor !== void 0 ? () => anchorUnverifiable(name, null) : (error) => unreadableTarget(name, error));
 	}
-	async patch(rawName, oldString, newString, filePath = "", replaceAll = false, origin = "foreground") {
+	async patch(rawName, oldString, newString, filePath = "", replaceAll = false, origin = this.authority.origin) {
 		const name = rawName.trim();
 		return await this.serial(() => this.patchCore(name, oldString, newString, filePath, replaceAll, origin));
 	}
@@ -10767,7 +11179,7 @@ var SkillLibrary = class {
 		if (typeof name !== "string") return false;
 		return name !== "" && name !== "." && name !== ".." && !name.includes("/") && !name.includes("\\") && basename(name) === name;
 	}
-	async archive(rawName, options = {}) {
+	async archive(rawName, options = {}, origin = this.authority.origin) {
 		const name = rawName.trim();
 		const badName = this.badName(name, { allowReserved: true });
 		if (badName) return {
@@ -10834,7 +11246,7 @@ var SkillLibrary = class {
 		try {
 			await this.io.writeText(join(dest, ".archive-name"), `${name}\n`);
 		} catch {}
-		await this.audit(name, "archive", md, null, reason);
+		await this.audit(name, "archive", md, null, reason, void 0, void 0, void 0, origin);
 		this.notifyMutation({
 			action: "archive",
 			name,
@@ -10934,7 +11346,7 @@ var SkillLibrary = class {
 	* still refuses, and the refusal names it. The archived source keeps whatever
 	* the body did not need.
 	*/
-	async consolidate(target, sources, origin = "foreground", options = {}) {
+	async consolidate(target, sources, origin = this.authority.origin, options = {}) {
 		const targetName = target.trim();
 		const normalizedSources = [...new Set(sources.map((name) => name.trim()))].filter((name) => name !== targetName);
 		const mode = options.mode ?? "append";
@@ -11128,7 +11540,7 @@ var SkillLibrary = class {
 	* support-directory links is refused (those links' files stay behind in the
 	* same package; the moved text belongs in references/ beside them).
 	*/
-	async restructure(rawName, moves, origin = "foreground") {
+	async restructure(rawName, moves, origin = this.authority.origin) {
 		const name = rawName.trim();
 		return await this.serial(() => this.restructureCore(name, moves, origin));
 	}
@@ -11345,7 +11757,7 @@ var SkillLibrary = class {
 			};
 			return {
 				ok: false,
-				message: `目录树变更失败：${reason}。回滚无法恢复 ${stuck.join(", ")}：请从 .backups 快照恢复这些目标（或重新应用这次变更）。`
+				message: `目录树变更失败：${reason}。回滚无法恢复 ${stuck.join(", ")}：可恢复性由当前快照决定：${await this.snapshotRecoveryAvailability()} —— 若上面不是「最新快照」，请重新应用这次变更。`
 			};
 		}
 		const unitId = plan.unitId ?? "u-" + Date.now().toString(36) + "-" + (nextUnitSeq += 1).toString(36);
@@ -11384,7 +11796,7 @@ var SkillLibrary = class {
 	* recoverability: archival never deletes, and this is the control-plane
 	* path back. The `.archive-reason` marker is dropped on restore.
 	*/
-	async restoreFromArchive(rawName) {
+	async restoreFromArchive(rawName, origin = this.authority.origin) {
 		const name = rawName.trim();
 		const bad = this.badName(name, { allowReserved: true });
 		if (bad) return {
@@ -11450,7 +11862,7 @@ var SkillLibrary = class {
 			};
 			return {
 				ok: false,
-				message: `.archive 里没有「${name}」对应的 frontmatter 名，但有 ${unreadable.length} 个名字相似的归档项：${unreadable.join(", ")}。这些归档项没有可读的 SKILL.md（或名字对不上），按名字恢复无法区分它们：请把目录改成技能名后再次恢复，或改用快照恢复。`
+				message: `.archive 里没有「${name}」对应的 frontmatter 名，但有 ${unreadable.length} 个名字相似的归档项：${unreadable.join(", ")}。这些归档项没有可读的 SKILL.md（或名字对不上），按名字恢复无法区分它们：请把目录改成技能名后再次恢复；快照这条路的当前状态是：${await this.snapshotRecoveryAvailability()}。`
 			};
 		}
 		const source = join(archiveRoot, chosen);
@@ -11472,7 +11884,7 @@ var SkillLibrary = class {
 		for (const marker of [".archive-reason", ".archive-name"]) if (await this.io.exists(join(dest, marker))) await this.io.remove(join(dest, marker));
 		const restoredProbe = await probeText(this.io, join(dest, "SKILL.md"));
 		if (isUnknown(restoredProbe)) console.warn(`evolution-skill-store: the restored SKILL.md of "${name}" could not be read back (${restoredProbe.reason}); the restore is recorded without after-bytes`);
-		await this.audit(name, "restore", null, isPresent(restoredProbe) ? restoredProbe.value : null, `restored from ${source}`);
+		await this.audit(name, "restore", null, isPresent(restoredProbe) ? restoredProbe.value : null, `restored from ${source}`, void 0, void 0, void 0, origin);
 		this.notifyMutation({
 			action: "restore",
 			name,
@@ -11484,7 +11896,7 @@ var SkillLibrary = class {
 			path: dest
 		};
 	}
-	async writeSupportFile(rawName, filePath, content, origin = "foreground", anchor) {
+	async writeSupportFile(rawName, filePath, content, origin = this.authority.origin, anchor) {
 		const name = rawName.trim();
 		return await this.serial(() => this.writeSupportFileCore(name, filePath, content, origin, anchor));
 	}
@@ -11568,7 +11980,7 @@ var SkillLibrary = class {
 			};
 		}, anchor !== void 0 ? () => anchorUnverifiable(name, filePath) : (error) => unreadableTarget(name + "/" + filePath, error));
 	}
-	async removeSupportFile(rawName, filePath, origin = "foreground", anchor, unitId) {
+	async removeSupportFile(rawName, filePath, origin = this.authority.origin, anchor, unitId) {
 		const name = rawName.trim();
 		return await this.serial(() => this.removeSupportFileCore(name, filePath, origin, anchor, unitId));
 	}
@@ -11827,6 +12239,22 @@ var SkillLibrary = class {
 		}
 	}
 	/** Keep only the newest N snapshots (Hermes keep=5 parity); older ones are removed outright. */
+	/**
+	* G3/3.4: can a snapshot actually be used right now?
+	*
+	* The recovery messages used to promise "restore it from a snapshot" without asking whether a usable
+	* snapshot exists (audit S1-01: the message promised recoverability from a chain that is five deep and
+	* whose newest member held 9 of 35 skills). Three states, like every other reading here: a fragment
+	* naming the usable snapshot, a fragment saying there is none, or a fragment saying the directory could
+	* not be read - the caller embeds whichever it gets, so the sentence is generated by the capability.
+	*/
+	async snapshotRecoveryAvailability() {
+		const listed = await this.listSnapshots();
+		if (isUnknown(listed)) return "快照目录读不出来（" + listed.reason + "）";
+		const latest = isPresent(listed) ? listed.value[0] : void 0;
+		if (!latest) return "当前没有可用快照";
+		return "最新快照 " + latest.path;
+	}
 	async retainSnapshots(keep) {
 		const listed = await this.listSnapshots();
 		if (isUnknown(listed)) {
@@ -11990,12 +12418,15 @@ var SkillLibrary = class {
 			}
 		}
 		const restoresSuppressed = manifest.sidecars.includes(".curator-suppressed.json");
-		for (const entry of rootEntries) {
-			if (entry === ".archive" || entry === ".backups" || entry === ".mutations.json") continue;
-			if (entry === ".history") continue;
-			if (entry === ".curator-suppressed.json" && restoresSuppressed) continue;
-			await this.io.remove(join(this.root, entry));
-		}
+		const declared = new Set([...manifest.skills, ...manifest.sidecars]);
+		const doomed = rootEntries.filter((entry) => {
+			if (entry === ".archive" || entry === ".backups" || entry === ".mutations.json") return false;
+			if (entry === ".history") return false;
+			if (entry === ".curator-suppressed.json" && restoresSuppressed) return false;
+			return !declared.has(entry);
+		});
+		if (doomed.length > 0) console.warn("skill-store: snapshot restore will delete " + String(doomed.length) + " live entr(y|ies) the snapshot does not declare: " + doomed.join(", "));
+		for (const entry of doomed) await this.io.remove(join(this.root, entry));
 		for (const name of manifest.skills) await this.io.copy(join(snapshotPath, name), join(this.root, name));
 		for (const sidecar of manifest.sidecars) await this.io.copy(join(snapshotPath, sidecar), join(this.root, sidecar));
 		{
@@ -12009,10 +12440,300 @@ var SkillLibrary = class {
 	}
 };
 function newSkillLibrary(options) {
-	const { config, io, limits, ctx, transact, threatExemptLabels } = options;
+	const { config, io, limits, ctx, transact, threatExemptLabels, authority } = options;
 	return new SkillLibrary(resolveSkillsRoot(config ?? {}), io, limits, ctx ? (event) => {
 		ctx.emit("evolution/skill-mutated", event);
-	} : void 0, transact, [...threatExemptLabels ?? []]);
+	} : void 0, transact, [...threatExemptLabels ?? []], authority);
+}
+//#endregion
+//#region lib/types/store-ledger.js
+/**
+* G3/3.2 (audit 06-performance.md 接缝 C): ONE declaration for every bounded store.
+*
+* Before this file the family had eight retention rules scattered across four packages and no place
+* that could answer "how long does this record live under the current policy" (S1.md 4.3): six caps
+* were named constants, three lived inline (snapshots 5, reports 20/20/10, archive 365d). Each entry
+* below states its bound AND the code that declares it, so a gate can compare the two sets.
+*
+* `declare` is an ARRAY because one store may have several declaration sites (the report buckets are
+* kept by two packages). The `inline` branch matches a CODE SNIPPET rather than a line number: line
+* numbers rot on every edit above them, a snippet survives (and a snippet that stops matching is the
+* detector the gate wants). No naming convention is assumed anywhere - that is the whole point of a
+* ledger: the list IS the declaration.
+*/
+/** The one list. A new bounded store that is not registered here is what the G3 gate refuses. */
+const STORE_LEDGER = [
+	{
+		id: "archive-entries",
+		owner: "evolution-core",
+		unit: "entries",
+		bound: "365 days, report-only by default (the removal policy is report, not delete)",
+		cutoff: "archivedAt older than the retention window",
+		trigger: "run-end",
+		artifact: "count of .archive entries and their ages",
+		declare: [{
+			kind: "inline",
+			file: "packages/evolution-core/src/skill-store.ts",
+			contains: "ARCHIVE_RETENTION_DAYS = 365",
+			value: "365 days"
+		}, {
+			kind: "named",
+			module: "evolution-core/src/limits.ts",
+			name: "DEFAULT_ARCHIVE_RETENTION_POLICY",
+			value: "report"
+		}]
+	},
+	{
+		id: "skill-snapshots",
+		owner: "evolution-core",
+		unit: "entries",
+		bound: "5 snapshots",
+		cutoff: "oldest snapshot beyond the keep window",
+		trigger: "run-end",
+		artifact: "snapshot count and total bytes",
+		declare: [{
+			kind: "inline",
+			file: "packages/evolution-core/src/skill-store.ts",
+			contains: "retainSnapshots(5)",
+			value: "5"
+		}]
+	},
+	{
+		id: "skill-versions",
+		owner: "evolution-core",
+		unit: "entries",
+		bound: "20 versions per skill",
+		cutoff: "history index entries beyond versionKeep",
+		trigger: "write",
+		artifact: "history index length per skill",
+		declare: [{
+			kind: "named",
+			module: "evolution-core/src/constants.ts",
+			name: "DEFAULT_SKILL_VERSION_KEEP",
+			value: 20
+		}]
+	},
+	{
+		id: "pending-resolved",
+		owner: "evolution-state-storage",
+		unit: "entries",
+		bound: "200 resolved pending records",
+		cutoff: "resolved records beyond the cap",
+		trigger: "write",
+		artifact: "resolved record count",
+		declare: [{
+			kind: "named",
+			module: "evolution-state-storage/src/constants.ts",
+			name: "PENDING_RESOLVED_CAP",
+			value: 200
+		}]
+	},
+	{
+		id: "review-session",
+		owner: "evolution-state-storage",
+		unit: "entries",
+		bound: "500 review session rows",
+		cutoff: "rows beyond the session cap",
+		trigger: "write",
+		artifact: "review state row count",
+		declare: [{
+			kind: "named",
+			module: "evolution-state-storage/src/constants.ts",
+			name: "REVIEW_STATE_SESSION_CAP",
+			value: 500
+		}]
+	},
+	{
+		id: "reports",
+		owner: "evolution-commands",
+		unit: "files",
+		bound: "20/20/10 files across the three report buckets",
+		cutoff: "reports beyond each bucket keep",
+		trigger: "run-end",
+		artifact: "report file count per bucket",
+		declare: [{
+			kind: "inline",
+			file: "packages/evolution-commands/src/index.ts",
+			contains: "maintain-",
+			value: "20"
+		}, {
+			kind: "inline",
+			file: "packages/evolution-curator/src/index.ts",
+			contains: "errorKeep",
+			value: "10"
+		}]
+	},
+	{
+		id: "event-archives",
+		owner: "evolution-core",
+		unit: "files",
+		bound: "10 archived event logs",
+		cutoff: "archives beyond the retention count",
+		trigger: "write",
+		artifact: "event archive count",
+		declare: [{
+			kind: "named",
+			module: "evolution-core/src/evolution-events.ts",
+			name: "EVENT_LOG_RETAIN_ARCHIVES",
+			value: 10
+		}]
+	},
+	{
+		id: "run-records",
+		owner: "evolution-core",
+		unit: "entries",
+		bound: "50 run records",
+		cutoff: "runs beyond the record cap",
+		trigger: "write",
+		artifact: "runs.json record count",
+		declare: [{
+			kind: "named",
+			module: "evolution-core/src/run-registry.ts",
+			name: "DEFAULT_RUN_RECORDS",
+			value: 50
+		}]
+	},
+	{
+		id: "support-reads",
+		owner: "evolution-core",
+		unit: "entries",
+		bound: "200 support_reads keys",
+		cutoff: "keys beyond the read-path cap",
+		trigger: "write",
+		artifact: "usage sidecar key count",
+		declare: [{
+			kind: "named",
+			module: "evolution-core/src/usage.ts",
+			name: "MAX_SUPPORT_READ_PATHS",
+			value: 200
+		}]
+	}
+];
+//#endregion
+//#region lib/types/reachability.js
+/**
+* G3/3.4: the READ-ONLY reachability reconciliation.
+*
+* Three resource domains have grown past their owners' view: content blobs whose index entries were
+* trimmed away (skill-history: "Trimming drops INDEX entries; orphan blobs stay"), report files no run
+* record points at, and snapshot directories whose manifest holds almost nothing. The audit measured
+* them once (233 blobs / 11.40 MiB / 75.4% unreachable; 52 orphan report .md; 4/5 empty snapshot trees,
+* the newest holding 9 of 35 skills); this module answers the same three questions, from the tree in
+* front of it, and NOTHING ELSE: it deletes nothing, repairs nothing, and adds no timer.
+*
+* Every path is a parameter. The reconciliation must not grow its own idea of where a domain lives -
+* the callers already know (historyRoot / the reports directory / the snapshot root), and a second
+* guess here would be a second owner of that fact.
+*/
+const HISTORY_BASELINE = "233 blobs / 11.40 MiB unreachable (75.4%)";
+const REPORTS_BASELINE = "52 orphan report .md";
+const BACKUPS_BASELINE = "4/5 empty snapshot trees; the newest held 9/35 skills";
+/** Every sha256 any skill index references, across the whole history root. */
+async function referencedBlobs(io, historyRoot) {
+	const referenced = /* @__PURE__ */ new Set();
+	const skillsDir = join(historyRoot, "skills");
+	const namesProbe = await probeList(io, skillsDir);
+	if (isUnknown(namesProbe)) return void 0;
+	const names = isPresent(namesProbe) ? namesProbe.value : [];
+	for (const name of names) {
+		const probe = await probeText(io, join(skillsDir, name, "index.json"));
+		if (isUnknown(probe)) return void 0;
+		if (!isPresent(probe)) continue;
+		for (const match of probe.value.matchAll(/[a-f0-9]{64}/g)) referenced.add(match[0]);
+	}
+	return referenced;
+}
+/**
+* The history domain: blobs on disk minus the blobs the indexes still reference.
+* @param io - the tree reader.
+* @param historyRoot - the history root (`.history`), passed in, never guessed.
+* @returns the reading, with the audit baseline quoted for comparison.
+*/
+async function historyReachability(io, historyRoot) {
+	const blobsProbe = await probeList(io, join(historyRoot, "blobs"));
+	const referenced = await referencedBlobs(io, historyRoot);
+	if (isUnknown(blobsProbe) || referenced === void 0) return {
+		domain: "history.blobs",
+		unit: "bytes",
+		total: 0,
+		reachable: 0,
+		unreachable: 0,
+		baseline: HISTORY_BASELINE,
+		unmeasured: "a blob listing or an index read failed; this domain was not measured"
+	};
+	const blobs = isPresent(blobsProbe) ? blobsProbe.value : [];
+	const reachable = blobs.filter((blob) => referenced.has(blob)).length;
+	return {
+		domain: "history.blobs",
+		unit: "bytes",
+		total: blobs.length,
+		reachable,
+		unreachable: blobs.length - reachable,
+		baseline: HISTORY_BASELINE
+	};
+}
+/**
+* The reports domain: files no run record points at. A record WITHOUT a `resultRef` still owns the
+* conventional path (`reports/maintain-<id>.json`), so that path counts as reachable - counting only
+* explicit refs would report compliant files as orphans and the number could never match the baseline.
+* @param io - the tree reader.
+* @param reportsDir - the reports directory, passed in.
+* @param runIds - every run id the run records carry.
+* @param resultRefs - every explicit resultRef those records carry.
+*/
+async function reportsReachability(io, reportsDir, runIds, resultRefs) {
+	const listed = await probeList(io, reportsDir);
+	if (isUnknown(listed)) return {
+		domain: "reports.files",
+		unit: "files",
+		total: 0,
+		reachable: 0,
+		unreachable: 0,
+		baseline: REPORTS_BASELINE,
+		unmeasured: "the reports directory could not be listed; this domain was not measured"
+	};
+	const files = isPresent(listed) ? listed.value : [];
+	const reachableNames = /* @__PURE__ */ new Set();
+	for (const ref of resultRefs) reachableNames.add(ref.slice(ref.lastIndexOf("/") + 1));
+	for (const id of runIds) reachableNames.add("maintain-" + id + ".json");
+	const reachable = files.filter((file) => reachableNames.has(file)).length;
+	return {
+		domain: "reports.files",
+		unit: "files",
+		total: files.length,
+		reachable,
+		unreachable: files.length - reachable,
+		baseline: REPORTS_BASELINE
+	};
+}
+/**
+* The backups domain: snapshot trees and how much each holds. `skillsPerSnapshot` is measured by the
+* caller (it already reads manifests); an empty tree is one whose manifest lists no skill.
+* @param io - the tree reader.
+* @param backupsRoot - the snapshot root, passed in.
+* @param skillsPerSnapshot - the caller's manifest reading, one entry per snapshot directory.
+*/
+async function backupsReachability(io, backupsRoot, skillsPerSnapshot) {
+	const listed = await probeList(io, backupsRoot);
+	if (isUnknown(listed)) return {
+		domain: "backups.trees",
+		unit: "files",
+		total: 0,
+		reachable: 0,
+		unreachable: 0,
+		baseline: BACKUPS_BASELINE,
+		unmeasured: "the snapshot root could not be listed; this domain was not measured"
+	};
+	const dirs = isPresent(listed) ? listed.value : [];
+	const empty = skillsPerSnapshot.filter((count) => count === 0).length;
+	return {
+		domain: "backups.trees",
+		unit: "files",
+		total: dirs.length,
+		reachable: dirs.length - empty,
+		unreachable: empty,
+		baseline: BACKUPS_BASELINE
+	};
 }
 //#endregion
 //#region lib/types/params.js
@@ -13983,4 +14704,4 @@ function foldUntrustedLines(text, limit) {
 	return limit > 0 ? marked.slice(0, limit) : marked;
 }
 //#endregion
-export { AGENT_PRESET_PACKAGE, AGENT_PRESET_ROOT_HINT, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_PATCH_SEED, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, absentHostServices, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, atomicWriteFiles, authoringFeedback, basePresetPlugins, blobPath, bodyCost, buildCuratorRunReport, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, clearReviewChannel, collectReadSkillNames, composePresetComposition, composePresetEntry, composePresetInsert, composePresetRow, compositionRowIds, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, daysSinceIso, declaredReportStamp, denseBlockSequence, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyRoot, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isLandmark, isLoopbackRequest, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listDirectories, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, mergePresetRow, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, policyStageLimits, presetPatchText, presetRowBlock, presetRowBody, presetRowId, probeAbsent, probeDesktopScope, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonBody, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, relatedSkillNames, releaseInstance, removePresetRow, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsSweepLockTarget, resolveBasePresetPatch, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, rowBlockSpan, rowSiblingEnd, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillReadNameOf, skillRowCells, skillStateKey, skillsRoot, staleRouteStubs, supportFileReadOf, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, trimTrailingBlankLines, unhookedSupportPointers, unitMembersAreComplete, unwrapLive, updateSuppressedNames, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, writeDurableTmp, writeJson, writePathSymbols, yamlPlainScalarNeedsQuotes };
+export { AGENT_PRESET_PACKAGE, AGENT_PRESET_ROOT_HINT, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_PATCH_SEED, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, absentHostServices, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, basePresetPlugins, blobPath, bodyCost, buildCuratorRunReport, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, clearReviewChannel, collectReadSkillNames, composePresetComposition, composePresetEntry, composePresetInsert, composePresetRow, compositionRowIds, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, daysSinceIso, declaredReportStamp, denseBlockSequence, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isLandmark, isLoopbackRequest, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listDirectories, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, mergePresetRow, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, policyStageLimits, presetPatchText, presetRowBlock, presetRowBody, presetRowId, probeAbsent, probeDesktopScope, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, protectedSkillNamesOf, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonBody, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, relatedSkillNames, releaseInstance, removePresetRow, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveBasePresetPatch, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, rowBlockSpan, rowSiblingEnd, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, supportFileReadOf, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, trimTrailingBlankLines, unhookedSupportPointers, unitMembersAreComplete, unwrapLive, updateSuppressedNames, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, writeDurableTmp, writeJson, writePathSymbols, yamlPlainScalarNeedsQuotes };