@lmzhen/dsh-evolution-core 0.26.26 → 0.27.0

package/lib/ensure-MEYMj9jn.js

@@ -0,0 +1,222 @@
+import { n as errorText } from "./errors-Br2-uUSK.js";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import * as yaml from "js-yaml";
+//#region lib/types/package-identity.js
+/**
+* G1/1.8 (G-04): the SCOPE this build was published under, DERIVED from a manifest instead of written as a
+* literal in running code.
+*
+* The family used to hard-code `@deepseek-ai/dsh-...` names and let `prepare-release.mjs --scope @lmzhen`
+* patch the text afterwards. A published install therefore depended on a release-time string rewrite
+* reaching every copy, and the copies had already drifted (doctor.ts, index.ts, preset-composition.ts and
+* its .mjs mirror each spelled the identity). The scope is knowable at runtime: it is the scope segment of
+* the nearest `package.json` above the calling module. Nothing to rewrite, one owner of the answer.
+*
+* @module @lmzhen/dsh-evolution-core/package-identity
+*/
+/**
+* The scope segment of the nearest `package.json` at or above `from`.
+* @param from - the calling module URL (its own manifest is the answer).
+* @returns the scope, e.g. `@deepseek-ai` or `@lmzhen`; an unscoped manifest yields an empty string.
+*/
+function scopeOfNearestManifest(from) {
+	let dir = dirname(from instanceof URL ? fileURLToPath(from) : fileURLToPath(new URL(from)));
+	for (let hops = 0; hops < 32; hops += 1) {
+		const manifest = join(dir, "package.json");
+		if (existsSync(manifest)) {
+			const parsed = JSON.parse(readFileSync(manifest, "utf8"));
+			const name = typeof parsed.name === "string" ? parsed.name : "";
+			return name.startsWith("@") ? name.split("/")[0] ?? "" : "";
+		}
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	return "";
+}
+/**
+* One family/platform package name under the RUNNING scope.
+* @param bareName - the name without any scope, e.g. `dsh-agent-preset`.
+* @param from - the calling module URL.
+* @returns `scope/bareName`, or `bareName` when the manifest carries no scope.
+*/
+function scopedPackageName(bareName, from) {
+	const scope = scopeOfNearestManifest(from);
+	return scope === "" ? bareName : scope + "/" + bareName;
+}
+//#endregion
+//#region lib/types/composition/preset-ids.js
+const EVOLUTION_PRESET_IDS = [
+	"evolution",
+	"evolution-ptc",
+	"evolution-cordis",
+	"evolution-minimal"
+];
+const REVIEWER_PRESET_ID = "evolution-reviewer-readonly";
+const MAINTAINER_PRESET_ID = "evolution-maintainer-readonly";
+const RESTRICTED_TOOLS_ROW_ID = "evolution-restricted-tools";
+const RESTRICTOR_MODULE = scopedPackageName("dsh-evolution-core/restrictor", import.meta.url);
+const RESTRICTED_PRESET_DELIVERY = "runtime";
+const RESTRICTED_PRESET_DISPLAY = {
+	reviewer: {
+		name: "evolution reviewer (read-only)",
+		description: "Internal restricted preset used by the family review channel.",
+		order: 900
+	},
+	maintainer: {
+		name: "evolution maintainer (read-only)",
+		description: "Internal restricted preset used by the family maintenance channel.",
+		order: 901
+	}
+};
+function restrictedPresetId(kind) {
+	return kind === "reviewer" ? REVIEWER_PRESET_ID : MAINTAINER_PRESET_ID;
+}
+/** Trim, drop blanks, de-duplicate and sort: ONE spelling for an allow/deny set. */
+function normalizeAllow(names) {
+	return [...new Set(names.map((name) => name.trim()).filter((name) => name !== ""))].sort();
+}
+//#endregion
+//#region lib/types/composition/restricted-preset.js
+const JsExpr = new yaml.Type("tag:yaml.org,2002:js", {
+	kind: "scalar",
+	resolve: (data) => typeof data === "string",
+	construct: (data) => ({ __jsExpr: data }),
+	represent: (data) => data.__jsExpr
+});
+const entryListSchema = yaml.JSON_SCHEMA.extend(JsExpr);
+function parsePresetRows(content) {
+	const parsed = yaml.load(content, { schema: entryListSchema });
+	if (!Array.isArray(parsed)) throw new Error(errorText("e-324-restricted-preset-unavailable", { a1: "parent preset composition is not a top-level list" }));
+	return parsed;
+}
+function composeRestrictedPresetDefinition(source, req) {
+	const allow = normalizeAllow(req.allow);
+	if (allow.length === 0) throw new Error(errorText("e-324-restricted-preset-unavailable", { a1: "restricted preset needs a non-empty allow set" }));
+	const rows = parsePresetRows(source.content);
+	const display = RESTRICTED_PRESET_DISPLAY[req.kind];
+	const restrictorRow = {
+		id: RESTRICTED_TOOLS_ROW_ID,
+		name: RESTRICTOR_MODULE,
+		config: {
+			allow,
+			presetId: restrictedPresetId(req.kind)
+		}
+	};
+	return {
+		id: restrictedPresetId(req.kind),
+		name: display.name,
+		description: display.description,
+		order: display.order,
+		plugins: [...rows, restrictorRow]
+	};
+}
+//#endregion
+//#region lib/types/composition/ensure.js
+const SLOTS = /* @__PURE__ */ new WeakMap();
+function slotFor(ctx, kind) {
+	let byKind = SLOTS.get(ctx);
+	if (byKind === void 0) {
+		byKind = /* @__PURE__ */ new Map();
+		SLOTS.set(ctx, byKind);
+	}
+	let slot = byKind.get(kind);
+	if (slot === void 0) {
+		slot = {};
+		byKind.set(kind, slot);
+	}
+	return slot;
+}
+function registryOf(ctx) {
+	const candidate = ctx.get("agentPresets");
+	if (candidate === void 0) return void 0;
+	if (typeof candidate.readDocument !== "function" || typeof candidate.register !== "function") return void 0;
+	return candidate;
+}
+function installReleaseEffect(ctx, slot) {
+	if (slot.effectInstalled === true) return;
+	const effect = ctx.effect;
+	if (effect === void 0) return;
+	slot.effectInstalled = true;
+	effect.call(ctx, () => () => {
+		releaseRestrictedPreset(ctx, void 0, slot);
+	}, "evolution-restricted-preset");
+}
+async function releaseRestrictedPreset(ctx, kind, explicitSlot) {
+	const slot = explicitSlot ?? (kind === void 0 ? void 0 : slotFor(ctx, kind));
+	if (slot === void 0) return;
+	const release = slot.release;
+	slot.release = void 0;
+	slot.readyKey = void 0;
+	slot.state = void 0;
+	if (release !== void 0) await release();
+}
+async function ensureRestrictedPreset(ctx, req) {
+	const allow = normalizeAllow(req.allow);
+	const key = req.parentPresetId + "\n" + allow.join("\n");
+	const slot = slotFor(ctx, req.kind);
+	if (slot.readyKey === key && slot.state !== void 0 && slot.state.kind === "ready") return slot.state;
+	if (slot.inflight !== void 0) return slot.inflight;
+	slot.inflight = (async () => {
+		await releaseRestrictedPreset(ctx, req.kind, slot);
+		if (allow.length === 0) {
+			slot.state = {
+				kind: "failed",
+				code: "E-324",
+				reason: "allow set is empty"
+			};
+			return slot.state;
+		}
+		const registry = registryOf(ctx);
+		if (registry === void 0) {
+			slot.state = {
+				kind: "failed",
+				code: "E-324",
+				reason: "agentPresets service unavailable or incomplete"
+			};
+			return slot.state;
+		}
+		try {
+			const definition = composeRestrictedPresetDefinition(await registry.readDocument(req.parentPresetId), {
+				kind: req.kind,
+				parentPresetId: req.parentPresetId,
+				allow
+			});
+			slot.release = await registry.register(definition);
+			slot.readyKey = key;
+			slot.state = {
+				kind: "ready",
+				presetId: definition.id,
+				parentPresetId: req.parentPresetId,
+				allow
+			};
+			installReleaseEffect(ctx, slot);
+			return slot.state;
+		} catch (error) {
+			slot.readyKey = void 0;
+			slot.state = {
+				kind: "failed",
+				code: "E-324",
+				reason: error instanceof Error ? error.message : String(error)
+			};
+			return slot.state;
+		}
+	})();
+	try {
+		return await slot.inflight;
+	} finally {
+		slot.inflight = void 0;
+	}
+}
+/** Read-only view of the current registration (doctor runtime row). */
+function restrictedPresetState(ctx, kind) {
+	return SLOTS.get(ctx)?.get(kind)?.state;
+}
+/** Release the registration for one kind (HMR/tests); the fiber effect also calls this. */
+async function disposeRestrictedPreset(ctx, kind) {
+	await releaseRestrictedPreset(ctx, kind);
+}
+//#endregion
+export { scopedPackageName as _, entryListSchema as a, MAINTAINER_PRESET_ID as c, RESTRICTED_TOOLS_ROW_ID as d, RESTRICTOR_MODULE as f, scopeOfNearestManifest as g, restrictedPresetId as h, composeRestrictedPresetDefinition as i, RESTRICTED_PRESET_DELIVERY as l, normalizeAllow as m, ensureRestrictedPreset as n, parsePresetRows as o, REVIEWER_PRESET_ID as p, restrictedPresetState as r, EVOLUTION_PRESET_IDS as s, disposeRestrictedPreset as t, RESTRICTED_PRESET_DISPLAY as u };

package/lib/errors-Br2-uUSK.js

@@ -0,0 +1,57 @@
+//#region lib/types/errors.js
+/**
+* THE error-code table: E-301…E-325 with the exact text each one emits (E-317…E-319 are the
+* write-admission gates' own refusals).
+*
+* The codes used to be spelled out at 33 call sites across two packages, so one
+* code's wording could drift between the branches that answer it and nothing could
+* see the drift. Keys name the SCENARIO rather than the code, because a code
+* legitimately carries more than one text (E-301 answers pending / approve / reject
+* with different guidance); the code still leads every string, so model- and
+* user-facing output is unchanged. Interpolations are written `%aN%` and filled by
+* `errorText` from the values the call site used to interpolate inline.
+* @module @lmzhen/dsh-evolution-core
+*/
+const EVOLUTION_ERRORS = Object.freeze({
+	"e-305-this-invocation-carries-no": "E-305: 本次调用没有携带 agent —— `%a1%` 需要由会话支撑的调用（请在 GUI 或 CLI 的会话里运行）。",
+	"e-306-this-deployment-stages-foreground": "E-306: 本部署会暂存前台写入，但 `/evolution %a1%` 无法通过技能运行器回放 —— 没有可暂存的内容。请在批准策略为 'never' 的会话里运行，或在 evolution-approval 行上设置 `stageForeground: false`，然后重试该命令。",
+	"e-301-approval-service-not-mounted": "E-301: 批准服务未挂载：待批准写入无法列出或回放。挂载 evolution-approval 行（随 evolution-host/evolution-all 提供）后，运行 /evolution doctor 可查看已挂载的服务。",
+	"e-301-approval-service-not-mounted-2": "E-301: 批准服务未挂载。下一步：evolution-approval 行随 evolution-host/evolution-all 一起提供 —— 运行 /evolution doctor 查看已挂载的服务。",
+	"e-304-the-mounted-approval-service": "E-304: 已挂载的批准服务早于本能力发布 —— 请改为驳回该记录。",
+	"e-302-curator-service-not-mounted": "E-302: 策展服务未挂载。下一步：挂载 evolution-curator 行（evolution-host/evolution-all），并运行 /evolution doctor。",
+	"e-305-the-invocation-agent-exposes": "E-305: 调用 agent 既没有暴露 `followup` 也没有 `inject` —— %a1% 没有投递通道。",
+	"e-306-this-deployment-stages-foreground-2": "E-306: 本部署会暂存前台写入，但本次调用没有 agent 会话 —— `/evolution restructure` 会暂存一条没有会话归属的记录。请在 GUI 或 CLI 的会话里运行，或在 `stageForeground: false` 行上设置，然后重试该命令。",
+	"e-303-replay-service-not-mounted": "E-303: 回放服务未挂载。下一步：挂载 evolution-replay 行（evolution-host/evolution-all），并运行 /evolution doctor。",
+	"e-307-the-settings-service-could": "E-307: 设置服务无法报告它的分区（%a1%）。/evolution params 需要用户层来区分覆盖值与部署值；运行 /evolution doctor 查看已挂载的服务。",
+	"e-308-unknown-parameter-group-group": "E-308: 未知的参数分组「%a1%」—— 已知分组：%a2%。",
+	"e-311-no-settings-service-is": "E-311: 没有挂载设置服务，因此没有可写入的用户层。请挂载 settings 行（packages/settings/settings-file）后重试；本命令从不修改 cordis.yml —— 部署值属于部署。/evolution doctor 会列出已挂载的服务。",
+	"e-312-error-instanceof-Error-error": "E-312: %a1% —— /evolution params 会列出规范 id。",
+	"e-313-unknown-parameter-id-evolution": "E-313: 未知参数「%a1%」—— /evolution params 会列出每个已注册 id 及其层级与用户层。",
+	"e-314-id-is-a-deployment": "E-314: 「%a1%」是部署参数（层级 %a2%，归属 %a3%）—— 它写在 cordis.yml 的插件行或策略行上，而不是从会话写入。/evolution params 会显示每一行由谁可写。",
+	"e-315-id-has-no-user": "E-315: 「%a1%」没有用户层 —— 归属 %a2% 没有发布设置命名空间，因此该值留在部署层。",
+	"e-307-the-settings-service-could-2": "E-307: 设置服务无法报告它的分区（%a1%）。/evolution policy set 需要当前修订号才能安全写入；运行 /evolution doctor 查看已挂载的服务。",
+	"e-316-namespace-namespace-is-not": "E-316: namespace \"%a1%\" 未注册 —— 归属 %a2% 在本组合中未挂载，因此无法从这里写入它的参数。 /evolution params 会把那些行标为 'unregistered'.",
+	"e-309-revision-conflict-you-sent": "E-309: 修订冲突 —— 你提交的是 %a1%，文档当前为 %a2%。请用 /evolution params --json 重新读取后重试。",
+	"e-309-revision-conflict-message-Re": "E-309: 修订冲突 —— %a1%。请用 /evolution params --json 重新读取后重试。",
+	"e-310-the-settings-service-refused": "E-310: 设置服务拒绝了这次写入：%a1% —— 归属插件的规则优先（跨字段成对约束，或只能收紧的上限）。/evolution params 会显示当前值。",
+	"e-317-skill-write-not-confirmed": "E-317: 技能 \"%a1%\" 未被%a2% —— 确认提示被拒绝或关闭，因此没有写入任何内容。每次创建与裸删除都会出现该提示；只有操作者要求时才重复调用。",
+	"e-318-skill-write-without-a-read": "E-318: 本会话没有读取技能 \"%a1%\"，因此拒绝这次写入。请先用 `skill` 工具读取它（失败的读取不算），然后重复该写入。",
+	"e-320-the-profile-home-is-not": "E-320: 本宿主没有报告 profile home，因此无法定位旧设置文档。/evolution migrate 读取 `<profile home>/settings.yaml.imported`；请在由 profile 启动的会话里运行。",
+	"e-322-a-parameter-would-break-a": "E-322: %a1% 至少应为 %a2%，但这次写入把它设成 %a3%。未写入任何内容。",
+	"e-321-no-io-provider-is": "E-321: 没有挂载 evolution-io 提供方，因此无法读取旧设置文档。请挂载 evolution-io 行（evolution-host/evolution-all）后重试。",
+	"e-319-skill-write-confirm-timed-out": "E-319: 技能 \"%a1%\" 未被%a2% —— 确认提示在 %a3% 秒内无人应答，因此该写入被取消。没有人在场决定：把 `skillWriteConfirm` 设为 `auto` 可免提示直接写入，保留 `ask` 则一直等到有人应答，或提高 `skillWriteConfirmTimeoutSeconds`。",
+	"e-323-subagent-channel-unavailable": "E-323: 子代理通道不可用：缺少 subagents/agentPresets 服务，或 spawn provider 不支持 agentPreset 能力。审阅/维护会明确标记为不可用，不会静默退回 inject。运行 /evolution doctor 查看原因与修复指引。",
+	"e-324-restricted-preset-unavailable": "E-324: 受限 preset 创建失败（读取父 preset、解析、注册或限制器挂载任一步失败）：%a1%。审阅/维护通道不可用；运行 /evolution doctor 查看 preset id、allow 集合与失败原因。",
+	"e-325-host-data-plane-unavailable": "E-325: Host 数据面不可用：没有挂载 connection 服务，面板与审批路由不会注册。改用 /evolution pending、approve、reject 命令面完成同等操作；运行 /evolution doctor 查看详情。"
+});
+/**
+* Render one table entry, substituting its interpolation slots.
+* @param id - the scenario key.
+* @param args - values for the entry's `%aN%` slots.
+* @returns the message text the call site used to spell out inline.
+*/
+function errorText(id, args = {}) {
+	return EVOLUTION_ERRORS[id].replace(/%a(\d+)%/g, (_match, n) => String(args["a" + n] ?? ""));
+}
+//#endregion
+export { errorText as n, EVOLUTION_ERRORS as t };

package/lib/http-routes-BP-S3KV-.js

@@ -0,0 +1,149 @@
+//#region lib/types/guards.js
+/**
+* The family's plain-object predicate, in ONE place (v46 G7.1 / audit A8).
+*
+* The audit found the same guard — "a non-null object that is not an array" — rewritten fifteen
+* times across nine packages, four times inside core itself, and with two byte-identical `asRecord`
+* copies in evolution-policy and evolution-threat. This module is the single definition; callers
+* import it instead of spelling the clause again.
+*
+* @module @lmzhen/dsh-evolution-core
+*/
+/**
+* Is this a non-null, non-array object (what JSON calls an object)?
+* @param value - the value to test.
+* @returns whether it is a plain object.
+*/
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+* Read a value as a record, or undefined when it is not one.
+* @param value - the value to read.
+* @returns the value typed as a record, or undefined.
+*/
+function asRecord(value) {
+	return isRecord(value) ? value : void 0;
+}
+//#endregion
+//#region lib/types/http-routes.js
+/**
+* The Host data-plane contract + Fetch-shaped helpers every family route surface shares (W1/W6).
+*
+* WHY THIS IS IN CORE: HOST_ROUTES is the ONE path table (clients are generated from it), and the
+* response/body helpers are thin platform-Request utilities. The loopback fence that used to live here
+* is GONE (G4): trust, browser auth and owner admission are applied by the platform's connection
+* carrier BEFORE a route's fetch(request) runs, so a family copy of those rules was a second admission
+* path (and did diverge).
+*
+* Layering: pure transport. Nothing here knows about skills, approvals, curators or route tables.
+* @module @lmzhen/dsh-evolution-core/http-routes
+*/
+/** Largest request body a family route accepts; a bigger one reads as "no body" (400 from the handler). */
+const MAX_REQUEST_BODY_BYTES = 64 * 1024;
+/**
+* Read one JSON request body that must be an OBJECT, bounded.
+* @param request - the platform Fetch Request handed to a route.
+* @param maxBytes - the body bound (defaults to MAX_REQUEST_BODY_BYTES).
+* @returns the body as a plain object, or null when it is absent, oversized, not JSON, or not an object.
+*/
+async function readJsonObject(request, maxBytes = MAX_REQUEST_BODY_BYTES) {
+	const buffer = await request.arrayBuffer();
+	if (buffer.byteLength > maxBytes || buffer.byteLength === 0) return null;
+	let parsed;
+	try {
+		parsed = JSON.parse(Buffer.from(buffer).toString("utf8"));
+	} catch {
+		return null;
+	}
+	return isRecord(parsed) ? parsed : null;
+}
+const HOST_ROUTES = {
+	approval: {
+		pending: "/api/dsh-evolution/approval/pending",
+		preview: "/api/dsh-evolution/approval/preview",
+		approve: "/api/dsh-evolution/approval/approve",
+		reject: "/api/dsh-evolution/approval/reject"
+	},
+	skillHistory: {
+		skills: "/api/dsh-evolution/skill-history/skills",
+		versions: "/api/dsh-evolution/skill-history/versions",
+		diff: "/api/dsh-evolution/skill-history/versions/diff",
+		body: "/api/dsh-evolution/skill-history/versions/body",
+		undo: "/api/dsh-evolution/skill-history/undo",
+		health: "/api/dsh-evolution/skill-history/health"
+	},
+	skillHealth: { rows: "/api/dsh-evolution/skill-health/rows" },
+	diagnostics: { view: "/api/dsh-evolution/diagnostics" }
+};
+function hostSurface(ctx) {
+	const connection = ctx.get("connection");
+	if (connection === void 0) return {
+		available: false,
+		code: "E-325",
+		reason: "connection-missing"
+	};
+	return {
+		available: true,
+		allowsRemoteAuthorities: connection.allowsRemoteAuthorities === true
+	};
+}
+/**
+* Register the family host surface on the platform's exact-route carrier.
+*
+* The platform owns admission (Host/Origin hygiene + browserAuth + exact-route owner peer) and the
+* disposer is bound to the CALLING fiber, not the connection service: the connection service can
+* outlive a reloaded family fiber, so the family must release its own registrations on dispose.
+* Routes carry the audit snapshot taken at registration time (deployment-level facts only — the
+* exact-route handler receives a Request, not the peer identity).
+*/
+function registerHostRoutes(owner, build) {
+	const injecting = owner;
+	if (typeof injecting.inject !== "function") throw new Error("host routes require a context that owns inject()");
+	injecting.inject(["connection"], (scope) => {
+		const connection = scope.connection;
+		if (connection === void 0 || connection.fetch === void 0 || typeof connection.fetch.register !== "function") throw new Error("connection service is mounted without fetch.register()");
+		const register = connection.fetch.register.bind(connection.fetch);
+		const routes = build({
+			channel: "connection.fetch",
+			principal: "owner",
+			deploymentAllowsRemote: connection.allowsRemoteAuthorities === true
+		});
+		for (const route of routes) if (!route.path.startsWith("/api/dsh-evolution/")) throw new Error("host route path must carry the /api/dsh-evolution/ prefix: " + route.path);
+		const effect = scope.effect;
+		if (typeof effect !== "function") throw new Error("connection scope has no effect() to own the registration");
+		effect.call(scope, () => {
+			const disposers = [];
+			try {
+				for (const route of routes) disposers.push(register(route));
+			} catch (error) {
+				for (const dispose of disposers) try {
+					dispose();
+				} catch {}
+				throw error;
+			}
+			return () => {
+				for (const dispose of disposers) try {
+					dispose();
+				} catch {}
+			};
+		}, "evolution-host-routes");
+	});
+}
+function json(status, body) {
+	return new Response(JSON.stringify(body), {
+		status,
+		headers: { "content-type": "application/json; charset=utf-8" }
+	});
+}
+function methodNotAllowed(allowed) {
+	return new Response(JSON.stringify({ error: "method-not-allowed" }), {
+		status: 405,
+		headers: {
+			"content-type": "application/json; charset=utf-8",
+			allow: allowed.join(", ")
+		}
+	});
+}
+//#endregion
+export { methodNotAllowed as a, asRecord as c, json as i, isRecord as l, MAX_REQUEST_BODY_BYTES as n, readJsonObject as o, hostSurface as r, registerHostRoutes as s, HOST_ROUTES as t };

package/lib/http-routes.js

@@ -0,0 +1,2 @@
+import { a as methodNotAllowed, i as json, n as MAX_REQUEST_BODY_BYTES, o as readJsonObject, r as hostSurface, s as registerHostRoutes, t as HOST_ROUTES } from "./http-routes-BP-S3KV-.js";
+export { HOST_ROUTES, MAX_REQUEST_BODY_BYTES, hostSurface, json, methodNotAllowed, readJsonObject, registerHostRoutes };