@lmzhen/dsh-evolution-core 0.26.26 → 0.27.0

package/lib/types/drift-signals.js

@@ -0,0 +1,319 @@
+/**
+ * Library-level drift signals for the maintenance subagent (design 011).
+ *
+ * Deterministic fact checks over a skill-library snapshot: domain drift
+ * (narrow names, near-duplicate groups, prefix clusters) and layer drift
+ * (log-like bodies, duplicate headings, overlong lines, missing support-file
+ * pointers, description over the authoring bar). Pure functions only — no IO,
+ * no LLM, no services. Thresholds are imported from their owning modules
+ * (skill-health / quality / skill-store), never duplicated.
+ *
+ * Distinct from `signals.ts` — the session-level review signal gate.
+ */
+import { assessStructureHealth, DEFAULT_HEALTH_THRESHOLDS } from "./skill-health.js";
+import { computeDedupGroups, computePrefixClusters, LOW_QUALITY_THRESHOLD } from "./quality.js";
+import { AUTHORING_DESCRIPTION_BAR, DEFAULT_STALE_AFTER_DAYS, MAX_SKILL_CONTENT_CHARS } from "./constants.js";
+import { isFileShapedPath, scanBodyHooks } from "./citations.js";
+import { tokenLineFor } from "./cost.js";
+/** Physical line length at/above which a body line is reported overlong (011 §4). */
+export const DRIFT_MAX_LINE_CHARS = 1_500;
+/** Signal-set version: bump whenever ids/thresholds change (011 §7 version coupling). */
+export const DRIFT_SIGNALS_VERSION = '3';
+/** Render-time nouns for the MAINTAIN_PROMPT placeholders (single vocabulary with the facts block). */
+export const DRIFT_SIGNAL_NOUNS = {
+    dedup_group: '近重复组',
+    prefix_cluster: '前缀聚类',
+    stamp_density: 'stamp 密度',
+    body_size: '正文体量',
+    dup_heading: '重复标题',
+    overlong_line: '超长行',
+    pointer_missing: '缺失指针',
+    citation_resolution: '引用解析',
+    demand: '需求证据',
+    description_chars: '描述长度',
+    narrow_name: '窄名',
+    usage_observed: '使用观察',
+    quality_low: '质量分',
+};
+const NARROW_NAME_PATTERNS = [
+    { label: 'error-string', re: /^(?:err|error|exception|traceback|warn|fail)(?:[-_][a-z0-9]+)+$/i },
+    { label: 'pr-number', re: /^(?:pr|issue)[-_]?\d{2,}$/i },
+    { label: 'dated', re: /\d{4}-\d{2}-\d{2}/ },
+    { label: 'session-verb', re: /^(?:fix|debug|audit|salvage|diagnose|investigate)[-_][a-z0-9-]+$/i },
+];
+/** Detect support files the body never references (by basename or relative path). */
+export function missingSupportPointers(body, supportFiles) {
+    return supportFiles.filter((path) => {
+        const base = path.split('/').pop() ?? path;
+        return base.length > 0 && !body.includes(base) && !body.includes(path);
+    });
+}
+/** Support files the body mentions WITHOUT the sanctioned hook form (design
+ * §5.6). Such a mention still counts as a pointer for `pointer_missing`, but
+ * only the hook form keeps the file discoverable after a move — detail only.
+ * A file carrying a `keep` marker is exempt: its mention IS the marker. */
+export function unhookedSupportPointers(body, supportFiles) {
+    const { targets, kept } = scanBodyHooks(body);
+    const hooked = new Set(targets);
+    return supportFiles.filter((path) => {
+        if (!isFileShapedPath(path))
+            return false;
+        const base = path.split('/').pop() ?? path;
+        if (kept.has(path) || (base.length > 0 && kept.has(base)))
+            return false;
+        const mentioned = (base.length > 0 && body.includes(base)) || body.includes(path);
+        return mentioned && !hooked.has(path) && !hooked.has(base);
+    });
+}
+/** Support files with no readers, no citations and no `keep` marker whose owning
+ * skill has been idle for at least the lifecycle stale window. PROPOSAL INPUT
+ * only — nothing retires a file on its own — and an unmeasurable input (no age
+ * evidence, no citation scan) yields an empty list WITH its reason, never a
+ * silent "nothing qualifies".
+ * @param snapshot - the skill's drift snapshot.
+ * @param supportFiles - its enumerated support files, in listing order.
+ * @returns the candidates plus the status that explains an empty list.
+ */
+export function retirementReport(snapshot, supportFiles) {
+    const idle = snapshot.liveness?.idleDays;
+    if (idle === undefined)
+        return { candidates: [], status: 'no-age' };
+    if (snapshot.citations === undefined)
+        return { candidates: [], status: 'unscanned' };
+    if (idle < DEFAULT_STALE_AFTER_DAYS)
+        return { candidates: [], status: 'none' };
+    const cited = new Set();
+    for (const ref of snapshot.citations.refs) {
+        if (ref.kind === 'citation' && ref.target !== null)
+            cited.add(ref.target);
+    }
+    const { kept } = scanBodyHooks(snapshot.body);
+    const demand = snapshot.demand ?? {};
+    const candidates = supportFiles
+        .filter(path => isFileShapedPath(path) && (demand[path] ?? 0) === 0 && !cited.has(path) && !kept.has(path))
+        .map(path => ({ path, idleDays: Math.floor(idle) }));
+    return { candidates, status: candidates.length === 0 ? 'none' : 'listed' };
+}
+/** Duplicate `## heading` occurrences: singleton results default to head of the file. */
+export function duplicateHeadings(body) {
+    const counts = new Map();
+    // S1.8 (v37 P1-14): scan the CR-stripped view — `.` never matches `\r` and a
+    // non-multiline `$` only anchors at the end of the input, so a CRLF body made
+    // every heading line unmatchable and `dup_heading` reported a FALSE `pass`
+    // (the maintenance prompt then never asked for the merge).
+    for (const raw of body.split('\n')) {
+        const line = raw.endsWith('\r') ? raw.slice(0, -1) : raw;
+        const m = /^##\s+(.+)$/.exec(line);
+        if (m?.[1]) {
+            const heading = m[1].trim();
+            if (heading)
+                counts.set(heading, (counts.get(heading) ?? 0) + 1);
+        }
+    }
+    return [...counts.entries()]
+        .filter(([, count]) => count > 1)
+        .map(([heading, count]) => ({ heading, count }));
+}
+/** Physical lines over `max` characters: `{ lineNo, chars }`, 1-based line numbers. */
+export function overlongLines(body, max = DRIFT_MAX_LINE_CHARS) {
+    const out = [];
+    const lines = body.split('\n');
+    for (let index = 0; index < lines.length; index += 1) {
+        // S1.8 (v37 P2-3): the CR is a line terminator, not a visible character — a
+        // 1500-character CRLF line used to report 1501 and send the model after a
+        // line that already complies.
+        const raw = lines[index] ?? '';
+        const length = raw.endsWith('\r') ? raw.length - 1 : raw.length;
+        if (length > max)
+            out.push({ lineNo: index + 1, chars: length });
+    }
+    return out;
+}
+/** Narrow-name shapes detected in a skill name (empty = none). */
+export function narrowNameMatches(name) {
+    return NARROW_NAME_PATTERNS.filter(({ re }) => re.test(name)).map(({ label }) => label);
+}
+function supportGroupCount(supportFiles) {
+    const groups = new Set();
+    for (const path of supportFiles ?? []) {
+        const head = path.split('/')[0];
+        if (head)
+            groups.add(head);
+    }
+    return groups.size;
+}
+function sig(id, verdict, value, threshold, detail) {
+    return { id, verdict, value, threshold, detail };
+}
+/**
+ * Compute all drift signals for a snapshot. Missing inputs (quality score,
+ * usage window) yield `unknown` — never a fabricated verdict.
+ */
+export function computeDriftSignals(snapshots) {
+    const library = [];
+    const names = snapshots.map(s => s.name);
+    const dedup = computeDedupGroups({
+        contents: new Map(snapshots.map(s => [s.name, s.body])),
+    });
+    // PLAN-R2 P2-8 (2026-09-16): the scan is budget-bounded; a truncated sweep
+    // must say so instead of reading as a clean pass.
+    const dedupTruncation = dedup.truncated ? ' (dedup scan truncated at the pair-comparison budget)' : '';
+    library.push(dedup.groups.length === 0
+        ? sig('dedup_group', 'pass', `none${dedupTruncation}`, 'size >= 2')
+        : sig('dedup_group', 'over', `${dedup.groups.map(group => group.join(', ')).join(' | ')}${dedupTruncation}`, 'size >= 2', `members=${dedup.groups.map(group => group.join('|')).join(';')}`));
+    const clusters = computePrefixClusters(names);
+    library.push(clusters.length === 0
+        ? sig('prefix_cluster', 'pass', 'none', 'size >= 2')
+        : sig('prefix_cluster', 'over', clusters.map(cluster => cluster.members.join(', ')).join(' | '), 'size >= 2', `key=${clusters.map(cluster => cluster.key).join('|')}`));
+    const allProvided = snapshots.length > 0 && snapshots.every(s => s.usageObserved !== null && s.usageObserved !== undefined);
+    library.push(!allProvided
+        ? sig('usage_observed', 'unknown', 'not-observed', undefined, 'usage window status missing')
+        : snapshots.every(s => s.usageObserved === true)
+            ? sig('usage_observed', 'pass', 'observed')
+            : sig('usage_observed', 'pass', 'unobserved'));
+    const skills = snapshots.map((snapshot) => {
+        const signals = [];
+        const body = snapshot.body;
+        const supportFiles = snapshot.supportFiles ?? [];
+        const supportEnumerated = snapshot.supportFiles !== undefined;
+        const health = assessStructureHealth({
+            skillName: snapshot.name,
+            bodyChars: body.length,
+            bodyText: body,
+            supportGroups: supportGroupCount(supportFiles),
+        }, DEFAULT_HEALTH_THRESHOLDS);
+        const density = health.dims.stampDensityPerKb;
+        // P2-12 (v39): density stays null only for an empty body or one below
+        // MIN_STAMP_BODY_CHARS (skill-health.ts gates the measurement there), so
+        // 'below-min-body' is the only reachable reason — 'not-assessed' was dead.
+        signals.push(density === null
+            ? sig('stamp_density', 'pass', 'below-min-body')
+            : sig('stamp_density', density >= DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb ? 'over' : 'pass', `${density.toFixed(2)}/KB`, `${DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb}/KB`));
+        // V6: judged on the TOKEN scale. The threshold is the borrowed upstream
+        // character line, converted per body composition (tokenLineFor), so the textual
+        // trigger stays "20k characters" while value/threshold/detail all speak tokens.
+        // Without a cost breakdown the character line decides (never a silent pass).
+        const cost = snapshot.cost;
+        const lineTokens = cost === undefined ? null : tokenLineFor(DEFAULT_HEALTH_THRESHOLDS.softBodyChars, cost);
+        const overLine = cost === undefined || lineTokens === null
+            ? body.length >= DEFAULT_HEALTH_THRESHOLDS.softBodyChars
+            : cost.tokens >= lineTokens;
+        signals.push(sig('body_size', overLine ? 'over' : 'pass', cost === undefined ? `${body.length}` : `${cost.tokens} tokens / ${body.length} chars`, cost === undefined || lineTokens === null
+            ? `${DEFAULT_HEALTH_THRESHOLDS.softBodyChars}`
+            : `line=${lineTokens} tokens (${DEFAULT_HEALTH_THRESHOLDS.softBodyChars} chars)`, cost === undefined
+            ? undefined
+            // V3: the band is the AUTHORING discipline band (upstream's 20k split
+            // line, drawn on this body's token scale), and the multiple is what makes
+            // it actionable — a bare ceiling says nothing about how far past it is.
+            : `estimate range ${cost.tokensLow}-${cost.tokensHigh} tokens (4 chars/token basis); cjk=${cost.cjk}${lineTokens === null ? '' : `; line=${lineTokens}, body=${(cost.tokens / lineTokens).toFixed(1)}x`}${oversizeSupportNote(snapshot.supportChars)}`));
+        const dupes = duplicateHeadings(body);
+        signals.push(dupes.length === 0
+            ? sig('dup_heading', 'pass', 'none')
+            : sig('dup_heading', 'over', dupes.map(d => `${d.heading}(${d.count})`).join(', '), 'count >= 2'));
+        const long = overlongLines(body);
+        signals.push(long.length === 0
+            ? sig('overlong_line', 'pass', 'none')
+            : sig('overlong_line', 'over', long.map(l => `${l.lineNo}:${l.chars}`).join(', '), `${DRIFT_MAX_LINE_CHARS}`));
+        const missing = supportEnumerated ? missingSupportPointers(body, supportFiles) : undefined;
+        // Hook coverage rides the EXISTING signal as detail (design §5.6): a file
+        // mentioned without the sanctioned hook form is still pointed at, so the
+        // verdict stays with `missingSupportPointers`.
+        const unhooked = supportEnumerated ? unhookedSupportPointers(body, supportFiles) : [];
+        const unhookedDetail = unhooked.length === 0
+            ? undefined
+            : `unhooked=${unhooked.length}: ${unhooked.slice(0, 5).join(', ')}`;
+        signals.push(!supportEnumerated
+            ? sig('pointer_missing', 'unknown', 'not-enumerated', undefined, 'support files not enumerated')
+            : (missing ?? []).length === 0
+                ? sig('pointer_missing', 'pass', 'none', undefined, unhookedDetail)
+                : sig('pointer_missing', 'over', missing?.join(', ') ?? '', undefined, unhookedDetail));
+        signals.push(citationSignal(snapshot.citations));
+        signals.push(demandSignal(snapshot, supportFiles, supportEnumerated));
+        const narrow = narrowNameMatches(snapshot.name);
+        signals.push(narrow.length === 0
+            ? sig('narrow_name', 'pass', 'none')
+            : sig('narrow_name', 'over', narrow.join(', '), undefined, `name=${snapshot.name}`));
+        const description = snapshot.description;
+        signals.push(description === undefined
+            // C-21 (v10 audit): the threshold renders from the constant like the
+            // assessed branch below — the hardcoded '60' could drift from
+            // AUTHORING_DESCRIPTION_BAR.
+            ? sig('description_chars', 'unknown', 'missing', `${AUTHORING_DESCRIPTION_BAR}`)
+            : sig('description_chars', description.length > AUTHORING_DESCRIPTION_BAR ? 'over' : 'pass', `${description.length}`, `${AUTHORING_DESCRIPTION_BAR}`));
+        const quality = snapshot.quality;
+        signals.push(quality === null || quality === undefined
+            ? sig('quality_low', 'unknown', 'not-assessed')
+            : sig('quality_low', quality < LOW_QUALITY_THRESHOLD ? 'over' : 'pass', quality.toFixed(2), `${LOW_QUALITY_THRESHOLD}`));
+        return {
+            name: snapshot.name,
+            signals,
+            ...(snapshot.protected !== undefined && snapshot.protected !== null ? { protected: snapshot.protected } : {}),
+            ...(snapshot.catalogInvalid !== undefined ? { catalogInvalid: snapshot.catalogInvalid } : {}),
+        };
+    });
+    return { library, skills };
+}
+/** Dangling-citation verdict: a partial scan is `unknown`, never a clean pass. */
+function citationSignal(citations) {
+    if (citations === undefined)
+        return sig('citation_resolution', 'unknown', 'not-scanned', undefined, 'support-file list missing');
+    if (citations.truncated)
+        return sig('citation_resolution', 'unknown', `truncated at ${citations.refs.length} refs`, undefined, 'partial scan — not a clean verdict');
+    const cited = citations.refs.filter(ref => ref.kind === 'citation');
+    if (citations.dangling.length > 0) {
+        const missing = citations.dangling.slice(0, 5).map(ref => ref.target ?? ref.raw).join(', ');
+        return sig('citation_resolution', 'over', `dangling=${citations.dangling.length}/${cited.length}`, 'dangling=0', `missing: ${missing}`);
+    }
+    return sig('citation_resolution', 'pass', `citations=${cited.length} foreign=${citations.foreign.length}${citations.unverified.length === 0 ? '' : ` unverified=${citations.unverified.length}`}`);
+}
+/** V4 (design §16.6): the report half of the support-file cap. Only files the
+ * assembler could PROVE large enough to be over the cap are namespaced here; an
+ * absent map claims nothing (unknown is not zero).
+ * @param supportChars - measured character counts, or undefined when unmeasured.
+ * @returns a detail suffix naming the oversize files, or an empty string.
+ */
+function oversizeSupportNote(supportChars) {
+    if (supportChars === undefined)
+        return '';
+    const oversize = Object.entries(supportChars)
+        .filter(([, chars]) => chars > MAX_SKILL_CONTENT_CHARS)
+        .sort((a, b) => b[1] - a[1]);
+    if (oversize.length === 0)
+        return '';
+    const shown = oversize.slice(0, 3).map(([path, chars]) => `${path}(${chars})`);
+    return `; oversize support file(s): ${shown.join(', ')}${oversize.length > shown.length ? ' …' : ''}`;
+}
+/** Render-time reason for an empty retirement list (design §5.6). */
+const RETIREMENT_STATUS_TEXT = {
+    listed: 'listed',
+    none: 'none',
+    'no-age': 'age unknown',
+    unscanned: 'citations unscanned',
+};
+/** Cold-support-file verdict (design §5.5): zero reads are evidence only while
+ * the observation window is open and the file list is known. */
+function demandSignal(snapshot, supportFiles, supportEnumerated) {
+    if (!supportEnumerated || supportFiles.length === 0) {
+        return sig('demand', 'unknown', 'not-enumerated', undefined, 'support files not enumerated');
+    }
+    if (snapshot.usageObserved !== true) {
+        return sig('demand', 'unknown', 'window-closed', undefined, 'no observed reads yet: zero is not evidence');
+    }
+    const demand = snapshot.demand ?? {};
+    const cold = supportFiles.filter(path => (demand[path] ?? 0) === 0);
+    // Retirement evidence rides the SAME signal as detail: it narrows "cold" to
+    // "cold AND uncited AND old enough AND not kept" without moving the verdict.
+    const retire = retirementReport(snapshot, supportFiles);
+    const retireDetail = retire.candidates.length === 0
+        ? `retire: ${RETIREMENT_STATUS_TEXT[retire.status]}`
+        : `retire≥${DEFAULT_STALE_AFTER_DAYS}d: ${retire.candidates.slice(0, 5).map(c => `${c.path}(${c.idleDays}d)`).join(', ')}`;
+    if (cold.length === 0)
+        return sig('demand', 'pass', `${supportFiles.length} warm`, 'cold=0', retireDetail);
+    const sample = cold.slice(0, 5).join(', ');
+    return sig('demand', 'over', `cold=${cold.length}/${supportFiles.length}`, 'cold=0', `never read: ${sample} · ${retireDetail}`);
+}
+/** Convenience: fetch one signal from an assessment or library list. */
+export function findDriftSignal(signals, id) {
+    return signals.find(signal => signal.id === id);
+}
+//# sourceMappingURL=drift-signals.js.map

package/lib/types/env.js

@@ -0,0 +1,25 @@
+/**
+ * Evolution environment-variable reading, single-source (WC, 0.3.56).
+ *
+ * Every `DSH_EVOLUTION_*` value the PLUGIN code reads goes through this module
+ * so the trim/whitelist patterns (v10 P2-12/13) live in exactly one place and
+ * the generated env reference can point at one behavior. Configuration-layer
+ * reads inside patch YAML `!!js` expressions (session-query path/openAt) stay
+ * in the profile config evaluation — they are NOT migrated (they are resolved
+ * at cordis config time, not plugin time) but are documented in the README
+ * env table. `EVOLUTION_SCOPE` is read by the source installers only
+ * (`packages/scripts/install-layered.mjs`, `packages/test-support/row-contract.ts`),
+ * never by plugin runtime code.
+ *
+ * v14 P3-1: the former `EVOLUTION_ENV_KEYS` export was deleted — nothing read
+ * it, so the "generated env reference" it claimed to source was never
+ * generated (the README table is maintained by hand and now lists every key).
+ */
+const ALLOW_ROW_COLLISIONS = '1';
+/** N-5 escape: `DSH_EVOLUTION_ALLOW_ROW_COLLISIONS=1` downgrades a delta-row
+ * collision from fail-loud to warn+keep-both. Any other value (including an
+ * EMPTY/whitespace string — a set-but-unset variable) keeps the fail-loud. */
+export function allowRowCollisions(env = process.env) {
+    return env.DSH_EVOLUTION_ALLOW_ROW_COLLISIONS === ALLOW_ROW_COLLISIONS;
+}
+//# sourceMappingURL=env.js.map

package/lib/types/errors.d.ts

@@ -1,5 +1,5 @@
 /**
- * THE error-code table: E-301…E-322 with the exact text each one emits (E-317…E-319 are the
+ * THE error-code table: E-301…E-325 with the exact text each one emits (E-317…E-319 are the
  * write-admission gates' own refusals).
  *
  * The codes used to be spelled out at 33 call sites across two packages, so one
@@ -39,6 +39,9 @@ export declare const EVOLUTION_ERRORS: Readonly<{
     readonly 'e-322-a-parameter-would-break-a': "E-322: %a1% 至少应为 %a2%，但这次写入把它设成 %a3%。未写入任何内容。";
     readonly 'e-321-no-io-provider-is': "E-321: 没有挂载 evolution-io 提供方，因此无法读取旧设置文档。请挂载 evolution-io 行（evolution-host/evolution-all）后重试。";
     readonly 'e-319-skill-write-confirm-timed-out': "E-319: 技能 \"%a1%\" 未被%a2% —— 确认提示在 %a3% 秒内无人应答，因此该写入被取消。没有人在场决定：把 `skillWriteConfirm` 设为 `auto` 可免提示直接写入，保留 `ask` 则一直等到有人应答，或提高 `skillWriteConfirmTimeoutSeconds`。";
+    readonly 'e-323-subagent-channel-unavailable': "E-323: 子代理通道不可用：缺少 subagents/agentPresets 服务，或 spawn provider 不支持 agentPreset 能力。审阅/维护会明确标记为不可用，不会静默退回 inject。运行 /evolution doctor 查看原因与修复指引。";
+    readonly 'e-324-restricted-preset-unavailable': "E-324: 受限 preset 创建失败（读取父 preset、解析、注册或限制器挂载任一步失败）：%a1%。审阅/维护通道不可用；运行 /evolution doctor 查看 preset id、allow 集合与失败原因。";
+    readonly 'e-325-host-data-plane-unavailable': "E-325: Host 数据面不可用：没有挂载 connection 服务，面板与审批路由不会注册。改用 /evolution pending、approve、reject 命令面完成同等操作；运行 /evolution doctor 查看详情。";
 }>;
 /** One table key. */
 export type EvolutionErrorId = keyof typeof EVOLUTION_ERRORS;

package/lib/types/errors.js

@@ -0,0 +1,59 @@
+/**
+ * THE error-code table: E-301…E-325 with the exact text each one emits (E-317…E-319 are the
+ * write-admission gates' own refusals).
+ *
+ * The codes used to be spelled out at 33 call sites across two packages, so one
+ * code's wording could drift between the branches that answer it and nothing could
+ * see the drift. Keys name the SCENARIO rather than the code, because a code
+ * legitimately carries more than one text (E-301 answers pending / approve / reject
+ * with different guidance); the code still leads every string, so model- and
+ * user-facing output is unchanged. Interpolations are written `%aN%` and filled by
+ * `errorText` from the values the call site used to interpolate inline.
+ * @module @lmzhen/dsh-evolution-core
+ */
+export const EVOLUTION_ERRORS = Object.freeze({
+    'e-305-this-invocation-carries-no': 'E-305: 本次调用没有携带 agent —— `%a1%` 需要由会话支撑的调用（请在 GUI 或 CLI 的会话里运行）。',
+    'e-306-this-deployment-stages-foreground': 'E-306: 本部署会暂存前台写入，但 `/evolution %a1%` 无法通过技能运行器回放 —— 没有可暂存的内容。请在批准策略为 \'never\' 的会话里运行，或在 evolution-approval 行上设置 `stageForeground: false`，然后重试该命令。',
+    'e-301-approval-service-not-mounted': 'E-301: 批准服务未挂载：待批准写入无法列出或回放。挂载 evolution-approval 行（随 evolution-host/evolution-all 提供）后，运行 /evolution doctor 可查看已挂载的服务。',
+    'e-301-approval-service-not-mounted-2': 'E-301: 批准服务未挂载。下一步：evolution-approval 行随 evolution-host/evolution-all 一起提供 —— 运行 /evolution doctor 查看已挂载的服务。',
+    'e-304-the-mounted-approval-service': 'E-304: 已挂载的批准服务早于本能力发布 —— 请改为驳回该记录。',
+    'e-302-curator-service-not-mounted': 'E-302: 策展服务未挂载。下一步：挂载 evolution-curator 行（evolution-host/evolution-all），并运行 /evolution doctor。',
+    'e-305-the-invocation-agent-exposes': 'E-305: 调用 agent 既没有暴露 `followup` 也没有 `inject` —— %a1% 没有投递通道。',
+    'e-306-this-deployment-stages-foreground-2': 'E-306: 本部署会暂存前台写入，但本次调用没有 agent 会话 —— `/evolution restructure` 会暂存一条没有会话归属的记录。请在 GUI 或 CLI 的会话里运行，或在 `stageForeground: false` 行上设置，然后重试该命令。',
+    'e-303-replay-service-not-mounted': 'E-303: 回放服务未挂载。下一步：挂载 evolution-replay 行（evolution-host/evolution-all），并运行 /evolution doctor。',
+    'e-307-the-settings-service-could': 'E-307: 设置服务无法报告它的分区（%a1%）。/evolution params 需要用户层来区分覆盖值与部署值；运行 /evolution doctor 查看已挂载的服务。',
+    'e-308-unknown-parameter-group-group': 'E-308: 未知的参数分组「%a1%」—— 已知分组：%a2%。',
+    'e-311-no-settings-service-is': 'E-311: 没有挂载设置服务，因此没有可写入的用户层。请挂载 settings 行（packages/settings/settings-file）后重试；本命令从不修改 cordis.yml —— 部署值属于部署。/evolution doctor 会列出已挂载的服务。',
+    'e-312-error-instanceof-Error-error': 'E-312: %a1% —— /evolution params 会列出规范 id。',
+    'e-313-unknown-parameter-id-evolution': 'E-313: 未知参数「%a1%」—— /evolution params 会列出每个已注册 id 及其层级与用户层。',
+    'e-314-id-is-a-deployment': 'E-314: 「%a1%」是部署参数（层级 %a2%，归属 %a3%）—— 它写在 cordis.yml 的插件行或策略行上，而不是从会话写入。/evolution params 会显示每一行由谁可写。',
+    'e-315-id-has-no-user': 'E-315: 「%a1%」没有用户层 —— 归属 %a2% 没有发布设置命名空间，因此该值留在部署层。',
+    'e-307-the-settings-service-could-2': 'E-307: 设置服务无法报告它的分区（%a1%）。/evolution policy set 需要当前修订号才能安全写入；运行 /evolution doctor 查看已挂载的服务。',
+    'e-316-namespace-namespace-is-not': 'E-316: namespace "%a1%" 未注册 —— 归属 %a2% 在本组合中未挂载，因此无法从这里写入它的参数。 /evolution params 会把那些行标为 \'unregistered\'.',
+    'e-309-revision-conflict-you-sent': 'E-309: 修订冲突 —— 你提交的是 %a1%，文档当前为 %a2%。请用 /evolution params --json 重新读取后重试。',
+    'e-309-revision-conflict-message-Re': 'E-309: 修订冲突 —— %a1%。请用 /evolution params --json 重新读取后重试。',
+    'e-310-the-settings-service-refused': 'E-310: 设置服务拒绝了这次写入：%a1% —— 归属插件的规则优先（跨字段成对约束，或只能收紧的上限）。/evolution params 会显示当前值。',
+    // 0.9.0: the write-admission sequence's own refusals (tool-skill-manage/src/write-gates.ts).
+    'e-317-skill-write-not-confirmed': 'E-317: 技能 "%a1%" 未被%a2% —— 确认提示被拒绝或关闭，因此没有写入任何内容。每次创建与裸删除都会出现该提示；只有操作者要求时才重复调用。',
+    'e-318-skill-write-without-a-read': 'E-318: 本会话没有读取技能 "%a1%"，因此拒绝这次写入。请先用 `skill` 工具读取它（失败的读取不算），然后重复该写入。',
+    // 0.12.0: the confirmation's own deadline (`skillWriteConfirm: 'timeout'`).
+    'e-320-the-profile-home-is-not': 'E-320: 本宿主没有报告 profile home，因此无法定位旧设置文档。/evolution migrate 读取 `<profile home>/settings.yaml.imported`；请在由 profile 启动的会话里运行。',
+    // G5.12/U-4: the cross-field constraint the registry declares (params.ts) has one enforcement
+    // point, and this is its message. The card shows the same relation before a save is attempted.
+    'e-322-a-parameter-would-break-a': 'E-322: %a1% 至少应为 %a2%，但这次写入把它设成 %a3%。未写入任何内容。',
+    'e-321-no-io-provider-is': 'E-321: 没有挂载 evolution-io 提供方，因此无法读取旧设置文档。请挂载 evolution-io 行（evolution-host/evolution-all）后重试。',
+    'e-319-skill-write-confirm-timed-out': 'E-319: 技能 "%a1%" 未被%a2% —— 确认提示在 %a3% 秒内无人应答，因此该写入被取消。没有人在场决定：把 `skillWriteConfirm` 设为 `auto` 可免提示直接写入，保留 `ask` 则一直等到有人应答，或提高 `skillWriteConfirmTimeoutSeconds`。',
+    'e-323-subagent-channel-unavailable': 'E-323: 子代理通道不可用：缺少 subagents/agentPresets 服务，或 spawn provider 不支持 agentPreset 能力。审阅/维护会明确标记为不可用，不会静默退回 inject。运行 /evolution doctor 查看原因与修复指引。',
+    'e-324-restricted-preset-unavailable': 'E-324: 受限 preset 创建失败（读取父 preset、解析、注册或限制器挂载任一步失败）：%a1%。审阅/维护通道不可用；运行 /evolution doctor 查看 preset id、allow 集合与失败原因。',
+    'e-325-host-data-plane-unavailable': 'E-325: Host 数据面不可用：没有挂载 connection 服务，面板与审批路由不会注册。改用 /evolution pending、approve、reject 命令面完成同等操作；运行 /evolution doctor 查看详情。',
+});
+/**
+ * Render one table entry, substituting its interpolation slots.
+ * @param id - the scenario key.
+ * @param args - values for the entry's `%aN%` slots.
+ * @returns the message text the call site used to spell out inline.
+ */
+export function errorText(id, args = {}) {
+    return EVOLUTION_ERRORS[id].replace(/%a(\d+)%/g, (_match, n) => String(args['a' + n] ?? ''));
+}
+//# sourceMappingURL=errors.js.map

package/lib/types/events.js

@@ -0,0 +1,16 @@
+/**
+ * Process-local events emitted by the evolution family on the cordis event
+ * bus. Consumers subscribe with `ctx.on(...)`; producers dispatch with
+ * `ctx.emit(...)`.
+ *
+ * These are deliberately NOT session events: a persisted session log may only
+ * contain types from the host's generated `KNOWN_SESSION_EVENT_TYPES` set —
+ * the persistence read path refuses to interpret a log carrying any other
+ * type unless the envelope marks it `ignorable`, and `Session.append` offers
+ * no channel to write that marker. Appending any `evolution/*` type therefore
+ * made the whole session unresumable (A-line P0-1, fixed in rc.42 by moving
+ * these events off `session.append`). Plan-outcome durability lives in the
+ * evolution-activity store, not the session log.
+ */
+export {};
+//# sourceMappingURL=events.js.map

package/lib/types/evidence.js

@@ -0,0 +1,65 @@
+/**
+ * Which session frames are EVIDENCE, and which are bookkeeping.
+ *
+ * A plan op must cite `evidence` seqs, and the validator's range rule
+ * (`evolution-plan-validator`, rule `EVIDENCE_RANGE`) answers only "is this an integer inside
+ * the window the plan was authored against". A boundary frame satisfies that while carrying
+ * nothing a claim can rest on: the `turn/start` seq is the frame a claim about that turn was
+ * most likely read out of, and citing it is indistinguishable from citing a real exchange. This
+ * module owns the ONE classification of a session frame by what it CARRIES, so the plan path can
+ * report an op whose whole citation list is bookkeeping (design
+ * `dsh-evolution-skill-history-design.md` §3D, phase 1: report only — no op is refused here).
+ *
+ * The classification is a DENY list of the pure bookends, not an allow list of content frames.
+ * The platform's own vocabulary (`KNOWN_SESSION_EVENT_TYPES`, 57 members at 0.1.5-rc.2) mixes
+ * content frames with state-change frames, and out-of-repo plugins append types the family cannot
+ * enumerate; an unknown frame is therefore treated as carrying content, because a report that
+ * fires on an unclassifiable frame is a false positive and phase 1 exists to measure how many TRUE
+ * ones there are. Tightening — a narrower definition, or an allow list built from the platform's
+ * vocabulary — changes this table and nothing else (`evidenceKindIndex` is the only reader).
+ * @module @lmzhen/dsh-evolution-core
+ */
+/** The frame types that record a boundary and carry no content: the turn and step bookends. */
+const BOOKKEEPING_FRAME_TYPES = new Set([
+    'turn/start',
+    'turn/end',
+    'step/start',
+    'step/end',
+]);
+/**
+ * Whether one frame type records a boundary and carries no content.
+ *
+ * The classification table's SECOND reader: the live projection unit
+ * (`session-projection.ts`) folds the same answer per event, so the rule stays one table.
+ * @param type - a platform session-event type.
+ * @returns true for the turn/step bookends.
+ */
+export function isBookkeepingFrame(type) {
+    return BOOKKEEPING_FRAME_TYPES.has(type);
+}
+/**
+ * The seqs of the frames that carry content.
+ *
+ * @param events - the session's frames, oldest first (any iterable; nothing is retained).
+ * @returns the substantive seqs, or `undefined` when NO frame carried a usable seq. The two
+ *   answers are different facts: an empty SET says "every sequenced frame is a boundary", while
+ *   `undefined` says "this log cannot tell a boundary from a message" (a stub session in a test,
+ *   a composition whose events carry no seq). A caller that cannot classify must stay silent
+ *   rather than report every op — the same three-state posture as `sessionReadSkillNames`.
+ */
+export function evidenceKindIndex(events) {
+    const substantive = new Set();
+    let sequenced = 0;
+    for (const event of events) {
+        const seq = event.seq;
+        // Only an integer seq is citable, so only an integer seq is classifiable.
+        if (typeof seq !== 'number' || !Number.isInteger(seq))
+            continue;
+        sequenced += 1;
+        if (typeof event.type === 'string' && BOOKKEEPING_FRAME_TYPES.has(event.type))
+            continue;
+        substantive.add(seq);
+    }
+    return sequenced === 0 ? undefined : substantive;
+}
+//# sourceMappingURL=evidence.js.map