@lmzhen/dsh-evolution-core 0.26.26 → 0.27.1

package/lib/types/params.js

@@ -0,0 +1,328 @@
+/**
+ * Parameter id consolidation (G0/S0.2): one semantic gets ONE id.
+ *
+ * Nine places in this family carry the same value under two carriers: three use
+ * the SAME name in two carriers (reviewMode, staleAfterDays, archiveAfterDays —
+ * resolved by the existing policy-shadows-row rule) and six use DIFFERENT names.
+ * This module owns the six: the policy/snapshot name is the canonical id, the
+ * plugin-row name is a deprecated alias kept readable since 0.6.x. Removal was
+ * planned for 0.7.0 and is deferred: the aliases still ship, so no later version
+ * is claimed here.
+ *
+ * Reading stays compatible (a carrier still spelling the legacy name resolves),
+ * writing is strict (the write path accepts canonical ids only, so no new
+ * document is created under a deprecated name).
+ * @module
+ */
+/** Deprecated alias (plugin-row name) -> canonical id (policy/snapshot name). */
+export const PARAM_ALIASES = Object.freeze({
+    memoryInterval: 'reviewMemoryInterval',
+    skillInterval: 'reviewSkillInterval',
+    intervalHours: 'curatorIntervalHours',
+    maxSkillContentChars: 'skillContentChars',
+    memoryCharLimit: 'memoryChars',
+    userCharLimit: 'userChars',
+});
+/** Canonical ids that have at least one deprecated alias, for read fallback. */
+const ALIASES_BY_CANONICAL = (() => {
+    const index = {};
+    for (const [alias, canonical] of Object.entries(PARAM_ALIASES)) {
+        ;
+        (index[canonical] ??= []).push(alias);
+    }
+    return index;
+})();
+/**
+ * Resolve any parameter id to its canonical form.
+ * @param id - canonical id or deprecated alias.
+ * @returns the canonical id; ids without an alias pass through unchanged.
+ */
+export function resolveParamId(id) {
+    return PARAM_ALIASES[id] ?? id;
+}
+/**
+ * Whether an id is a deprecated alias.
+ * @param id - parameter id to test.
+ * @returns true when the id must be migrated to its canonical form.
+ */
+export function isDeprecatedParamId(id) {
+    return PARAM_ALIASES[id] !== undefined;
+}
+/**
+ * Guard for the write path: only canonical ids may be written.
+ * @param id - parameter id a caller intends to write.
+ * @returns the canonical id.
+ * @throws {Error} when the id is a deprecated alias; the message names both ids.
+ */
+export function canonicalWriteId(id) {
+    const canonical = PARAM_ALIASES[id];
+    if (canonical === undefined)
+        return id;
+    throw new Error(`parameter id \`${id}\` is deprecated; write \`${canonical}\` instead`);
+}
+/**
+ * Read a parameter from a carrier that may still spell the legacy name.
+ * @param carrier - config/snapshot object to read from, or undefined.
+ * @param id - canonical id (a deprecated alias is accepted and resolved first).
+ * @returns the canonical value when present, else the alias value, else undefined.
+ */
+export function readParam(carrier, id) {
+    if (carrier === undefined)
+        return undefined;
+    const record = carrier;
+    const canonical = resolveParamId(id);
+    if (record[canonical] !== undefined)
+        return record[canonical];
+    for (const alias of ALIASES_BY_CANONICAL[canonical] ?? []) {
+        if (record[alias] !== undefined)
+            return record[alias];
+    }
+    return undefined;
+}
+/**
+ * Chinese display name per group, one entry per line (the scripts read this block
+ * by text, the same way they read PARAM_NAMESPACES). The raw group id is what
+ * `--group` accepts and what the JSON face reports; this only names it on screen.
+ */
+export const PARAM_GROUP_LABELS = Object.freeze({
+    library: '技能库',
+    'write-caps': '写入上限',
+    review: '会话回顾',
+    memory: '记忆',
+    curator: '技能整理',
+    deployment: '安装配置',
+    internal: '内部',
+});
+/**
+ * The parameter registry. G1/S1.1 seeds it with the review group (G-C); the
+ * remaining groups land in S2.1. E3 = behaviour preference the user may change
+ * (live); E2 = resource or identity knob that stays with the deployment.
+ */
+export const PARAM_EXPOSURE = Object.freeze([
+    { id: 'reviewSkillInterval', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Tool calls between skill-review injections: a turn advances by its tool-call count (a turn with none counts as one), or by 1 when the turn itself used a skill.', label: '技能检查间隔', hint: '每累计多少次工具调用检查一次技能：一轮按该轮工具调用数累加（一轮没有工具调用也算 1 次），本轮本身用到技能则只算 1 次。', control: 'number', unit: '次', values: '', card: 'evolution-review' },
+    { id: 'reviewMemoryInterval', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Tool calls between memory-review injections: a turn advances by its tool-call count (a turn with none counts as one), or by 1 when the turn itself touched memory.', label: '记忆检查间隔', hint: '每累计多少次工具调用检查一次记忆：一轮按该轮工具调用数累加（一轮没有工具调用也算 1 次），本轮本身用到记忆则只算 1 次。', control: 'number', unit: '次', values: '', card: 'evolution-review' },
+    { id: 'skillReviewTrigger', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Which channel may inject a skill review (cadence, completion, both).', label: '技能检查时机', hint: '什么时候检查技能：按间隔／按任务完成／两者。', control: 'select', unit: '', values: 'cadence|completion|both', valueLabels: '按间隔|按任务完成|两者', card: 'evolution-review' },
+    { id: 'skillReviewCompletionMinToolCalls', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Tool calls a task needs before the completion channel injects.', label: '完成时的最少工具调用', hint: '选「按任务完成」时，任务至少用了几次工具才检查。', control: 'number', unit: '次', values: '', card: 'evolution-review' },
+    { id: 'reviewEnabled', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Master switch for the review plugin.', label: '启用自动检查', hint: '关闭后不再自动回顾会话。', control: 'switch', unit: '', values: '', card: 'evolution-review' },
+    { id: 'reviewMode', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Run the review in the parent session (inject) or on a subagent.', label: '运行位置', hint: '在哪里运行检查：在当前会话里／交给子代理。', control: 'select', unit: '', values: 'subagent|inject', valueLabels: '交给子代理|在当前会话里', card: 'evolution-review' },
+    { id: 'reviewWakeInject', group: 'review', tier: 'E3', authority: 'cordis', owner: 'evolution-review', applies: 'live', docAnchor: 'PARAMETERS.md#review', summary: 'Deliver the deferred review as a waking follow-up message.', label: '延后结果发提醒', hint: '会话空闲时，把延后的检查结果作为一条提醒发给你。', control: 'switch', unit: '', values: '', card: 'evolution-review' },
+    { id: 'reviewProvider', group: 'review', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#review', summary: 'LLM provider for review subagents (deployment identity).', why: 'identity' },
+    { id: 'reviewTimeoutMs', group: 'review', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#review', summary: 'Bound on one review subagent run and its write leg.', why: 'internal' },
+    { id: 'reviewContextMessages', group: 'review', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#review', summary: 'Messages of context handed to a review subagent.', why: 'internal' },
+    { id: 'reviewMessageChars', group: 'review', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#review', summary: 'Per-message character budget of the review context.', why: 'internal' },
+    { id: 'reviewMaxDepth', group: 'review', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#review', summary: 'Absolute delegation-depth cap of the review subagent.', why: 'internal' },
+    { id: 'reviewToolAllow', group: 'review', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#review', summary: 'Tools the review subagent may use (safety surface).', why: 'security' },
+    { id: 'skillContentChars', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Character cap on a SKILL.md body (tighten-only).', label: '技能文件正文上限', hint: '技能 Markdown 正文最多多少字符（只能调小）。', control: 'number', unit: '字符', values: '', card: 'tool-skill-manage' },
+    { id: 'maxSkillFileBytes', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Byte cap on one support file (tighten-only).', label: '附带文件大小上限', hint: '技能附带文件单个最大多少字节（只能调小）。', control: 'number', unit: '字节', values: '', card: 'tool-skill-manage' },
+    { id: 'maxSkillNameLength', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Character cap on a skill name (tighten-only).', label: '技能名长度上限', hint: '技能名最多多少字符（只能调小）。', control: 'number', unit: '字符', values: '', card: 'tool-skill-manage' },
+    { id: 'maxDescriptionLength', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Character cap on a skill description (tighten-only).', label: '技能描述长度上限', hint: '技能描述最多多少字符（只能调小）。', control: 'number', unit: '字符', values: '', card: 'tool-skill-manage' },
+    { id: 'descriptionStrict', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Refuse a description over the authoring bar instead of advising.', label: '描述不合规即拒绝', hint: '描述不符合要求时直接拒绝写入（默认只提醒）。', control: 'switch', unit: '', values: '', card: 'tool-skill-manage' },
+    { id: 'strictCrossSource', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Refuse writes whose catalog entry resolves outside the family.', label: '引用外部内容即拒绝', hint: '技能引用了本插件之外的文件时拒绝写入。', control: 'switch', unit: '', values: '', card: 'tool-skill-manage' },
+    { id: 'citationPolicy', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Refuse a move that would leave a dangling reference, or verify it.', label: '引用检查方式', hint: '移动或合并技能时怎么处理引用：先检查／直接拒绝。', control: 'select', unit: '', values: 'verify|refuse', valueLabels: '先检查|直接拒绝', card: 'tool-skill-manage' },
+    { id: 'referenceRewrite', group: 'write-caps', tier: 'E2', authority: 'cordis', owner: 'tool-skill-manage', applies: 'none', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Re-home support files and rewrite references during a merge (plan or apply).', why: 'internal' },
+    { id: 'archiveRetention', group: 'write-caps', tier: 'E2', authority: 'cordis', owner: 'tool-skill-manage', applies: 'none', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Report expired archives, or prune them.', why: 'internal' },
+    { id: 'skillVersionKeep', group: 'write-caps', tier: 'E2', authority: 'cordis', owner: 'tool-skill-manage', applies: 'none', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Content versions retained per skill; older ones leave the index. Their stored blobs stay on disk — no automatic sweep exists yet, so a long-lived library grows by the distinct bodies it has written.', why: 'internal' },
+    { id: 'supportFileCharPolicy', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Warn about an oversize support file, or refuse the write.', label: '附带文件超限时', hint: '附带文件超出上限时：只提醒／拒绝写入。', control: 'select', unit: '', values: 'report|enforce', valueLabels: '只提醒|拒绝写入', card: 'tool-skill-manage' },
+    { id: 'skillWriteConfirm', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'What the one confirmation before a create or a bare delete does: write straight through, wait for an answer, or cancel the write when nobody answers within the timeout.', label: '写入前是否确认', hint: '新建或删除技能前要不要问你：直接写入／一直等你回答／超时未答就取消这次写入。', control: 'select', unit: '', values: 'auto|ask|timeout', valueLabels: '不弹窗直接写入|一直等待回答|超时自动取消', card: 'tool-skill-manage' },
+    { id: 'skillWriteConfirmTimeoutSeconds', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'tool-skill-manage', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'Seconds the confirmation waits for an answer in timeout mode before the write is cancelled.', label: '确认等待秒数', hint: '选「超时自动取消」时，等多少秒没人回答就取消这次写入。', control: 'number', unit: '秒', values: '', card: 'tool-skill-manage' },
+    { id: 'memoryChars', group: 'memory', tier: 'E3', authority: 'cordis', owner: 'memory-files', applies: 'live', docAnchor: 'PARAMETERS.md#memory', summary: 'Character budget the memory store enforces for MEMORY.md.', label: '记忆库上限', hint: '长期记忆文件（MEMORY.md）最多多少字符。', control: 'number', unit: '字符', values: '', card: 'memory-files' },
+    { id: 'userChars', group: 'memory', tier: 'E3', authority: 'cordis', owner: 'memory-files', applies: 'live', docAnchor: 'PARAMETERS.md#memory', summary: 'Character budget the memory store enforces for USER.md.', label: '用户画像上限', hint: '用户画像文件（USER.md）最多多少字符。', control: 'number', unit: '字符', values: '', card: 'memory-files' },
+    { id: 'memoryEnabled', group: 'memory', tier: 'E2', authority: 'cordis', owner: 'tool-memory', applies: 'none', docAnchor: 'PARAMETERS.md#memory', summary: 'Register the memory tool and its prompt section at all (deployment switch).', why: 'deployment' },
+    { id: 'entryPreviewChars', group: 'memory', tier: 'E3', authority: 'cordis', owner: 'tool-memory', applies: 'live', docAnchor: 'PARAMETERS.md#memory', summary: 'Characters of one memory entry shown in a tool result preview.', label: '记忆预览长度', hint: '列表里每条记忆最多显示多少字符。', control: 'number', unit: '字符', values: '', card: 'tool-memory' },
+    { id: 'addDatePrefix', group: 'memory', tier: 'E3', authority: 'cordis', owner: 'memory-files', applies: 'live', docAnchor: 'PARAMETERS.md#memory', summary: 'Prefix stored memory entries with their date heading.', label: '记忆条目加日期', hint: '写入时在条目开头加上日期。', control: 'switch', unit: '', values: '', card: 'memory-files' },
+    { id: 'maxConsolidationFailures', group: 'memory', tier: 'E3', authority: 'cordis', owner: 'memory-files', applies: 'live', docAnchor: 'PARAMETERS.md#memory', summary: 'Consolidation failures one turn tolerates before the tool gives up.', label: '合并失败重试', hint: '合并记忆连续失败多少次后停止。', control: 'number', unit: '次', values: '', card: 'memory-files' },
+    { id: 'curatorIntervalHours', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Minimum hours between deterministic curation passes.', label: '自动整理间隔', hint: '两次自动整理之间至少间隔多少小时。', control: 'number', unit: '小时', values: '', card: 'evolution-curator' },
+    { id: 'staleAfterDays', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Inactive days before a skill counts as stale.', label: '多久没用算过时', hint: '技能连续多少天没被用到就算过时。', control: 'number', unit: '天', values: '', card: 'evolution-curator' },
+    { id: 'archiveAfterDays', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Inactive days before a stale skill is archived (must be >= staleAfterDays).', label: '过时后归档', hint: '过时技能再过多少天移入归档（不能小于上一项）。', control: 'number', unit: '天', values: '', relation: { atLeast: 'staleAfterDays' }, card: 'evolution-curator' },
+    { id: 'qualityWarnStaleAfterDays', group: 'curator', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#curator', summary: 'Age at which a low quality score starts warning (the pair of evolution-feedback.qualityWarnThreshold; both live on the deployment face so one bar is not half user-set).', why: 'internal' },
+    { id: 'minIdleHours', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Idle hours required before an automatic curation pass runs.', label: '最少空闲时长', hint: '你至少多少小时没用，才运行自动整理。', control: 'number', unit: '小时', values: '', card: 'evolution-curator' },
+    { id: 'minIdleFailOpen', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Let the idle gate open when the activity probe is unavailable.', label: '检测不到活动也运行', hint: '无法判断你是否空闲时，仍然运行自动整理。', control: 'switch', unit: '', values: '', card: 'evolution-curator' },
+    { id: 'llmReview', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Enable the LLM nomination pass on top of the deterministic lifecycle.', label: '用模型挑选', hint: '在固定规则之外，再用模型挑一遍候选项。', control: 'switch', unit: '', values: '', card: 'evolution-curator' },
+    { id: 'curatorReviewMaxTokens', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Token budget of the curator LLM review.', label: '模型处理上限', hint: '每次用模型挑选时最多消耗多少 token。', control: 'number', unit: 'token', values: '', card: 'evolution-curator' },
+    { id: 'curatorReviewTimeoutMs', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Wall-clock bound of the curator LLM review.', label: '模型处理超时', hint: '一次模型挑选最长允许运行多久。', control: 'number', unit: '毫秒', values: '', card: 'evolution-curator' },
+    { id: 'healthSoftBodyChars', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Body character line the health view judges against.', label: '正文长度参考值', hint: '技能正文超过多少字符算偏长（只用于健康提示）。', control: 'number', unit: '字符', values: '', card: 'evolution-curator' },
+    { id: 'healthStampDensityPerKb', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Stamp density per KB that flags log-like content in a body.', label: '日志化判定阈值', hint: '每 KB 出现多少个时间标记，就判为「像日志」。', control: 'number', unit: '处/KB', values: '', card: 'evolution-curator' },
+    { id: 'healthChurnMinPatches', group: 'curator', tier: 'E3', authority: 'cordis', owner: 'evolution-curator', applies: 'live', docAnchor: 'PARAMETERS.md#curator', summary: 'Patches without a read that flag a write-ghost skill.', label: '只写不读判定次数', hint: '连续多少次改动都没有被读取，就判为「只写不读」。', control: 'number', unit: '处', values: '', card: 'evolution-curator' },
+    { id: 'evolution-curator.enabled', group: 'curator', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#curator', summary: 'Mount the curator plugin at all.', why: 'deployment' },
+    { id: 'autoStart', group: 'curator', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#curator', summary: 'Arm the hourly due-ness tick with the plugin — the STARTUP default only; at runtime /evolution curator pause or resume overrides it (the override is persisted in curation state and wins until cleared). Off keeps curation manual.', why: 'deployment' },
+    { id: 'bootGraceSeconds', group: 'curator', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#curator', summary: 'Grace period before the first automatic pass after a restart.', why: 'internal' },
+    { id: 'curatorProvider', group: 'curator', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#curator', summary: 'LLM provider for curator reviews (deployment identity).', why: 'identity' },
+    { id: 'curatorModel', group: 'curator', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#curator', summary: 'Model for curator reviews (deployment identity).', why: 'identity' },
+    { id: 'protectedSkillNames', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Skills the lifecycle never archives or rewrites.', why: 'deployment' },
+    { id: 'manageUnmanaged', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Let curation touch skills with no family metadata.', why: 'deployment' },
+    { id: 'pruneBuiltins', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Let curation nominate bundled skills for pruning.', why: 'deployment' },
+    { id: 'referencedSkillNames', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Names treated as referenced by external docs (never retired).', why: 'deployment' },
+    { id: 'includeSkillNames', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-skill-catalog', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Allow-list of skills the catalog exposes.', why: 'deployment' },
+    { id: 'skill-catalog.excludeSkillNames', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-skill-catalog', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Deny-list of skills the catalog hides (row-local name; see the collision note).', why: 'deployment' },
+    { id: 'modelInvocable', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-skill-catalog', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Default for whether the model may invoke a catalog skill.', why: 'deployment' },
+    { id: 'userInvocable', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-skill-catalog', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Default for whether the user may invoke a catalog skill.', why: 'deployment' },
+    { id: 'maxItems', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-activity', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Entries kept in the activity sidecar window.', why: 'internal' },
+    { id: 'sessionScoped', group: 'library', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Act only on sessions carrying the family model tools.', why: 'deployment' },
+    { id: 'skill-usage.sessionScoped', group: 'library', tier: 'E2', authority: 'cordis', owner: 'skill-usage', applies: 'none', docAnchor: 'PARAMETERS.md#library', summary: 'Keep the usage sidecar scoped per session (row-local name).', why: 'deployment' },
+    { id: 'evolution-review.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root for review-created skills (empty = shared default).', why: 'path' },
+    { id: 'evolution-review.skillsRoot', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Retired alias of root; a value here fails the load (V27 G2.4).', why: 'path' },
+    { id: 'evolution-curator.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-curator', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root for curator scope, snapshot and archive.', why: 'path' },
+    { id: 'evolution-commands.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-commands', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root the command surface writes through.', why: 'path' },
+    { id: 'evolution-commands.skillsRoot', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-commands', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Retired alias of the commands root; a value here fails the load.', why: 'path' },
+    { id: 'evolution-maintenance.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-maintenance', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root the maintenance probe scans.', why: 'path' },
+    { id: 'evolution-maintenance.skillsRoot', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-maintenance', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Accepted skill-root spelling for the maintenance row.', why: 'path' },
+    { id: 'evolution-skill-catalog.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-skill-catalog', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root the catalog lists.', why: 'path' },
+    { id: 'evolution-learning-graph.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-learning-graph', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root the learning graph reads.', why: 'path' },
+    { id: 'skill-usage.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'skill-usage', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Skill-tree root the usage store observes.', why: 'path' },
+    { id: 'skill-usage.eventsHome', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'skill-usage', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Directory holding the family event log the usage store reads.', why: 'path' },
+    { id: 'evolution-state-json.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-state-json', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Directory holding the JSON state store.', why: 'path' },
+    { id: 'memory-files.root', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'memory-files', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Directory holding MEMORY.md and USER.md (empty = $DSH_HOME/memories).', why: 'path' },
+    { id: 'evolution-feedback.path', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-feedback', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Event log the feedback scorer reads (empty = family events file).', why: 'path' },
+    { id: 'evolution-state.provider', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-state', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Registered state-store provider name.', why: 'identity' },
+    { id: 'memory.provider', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'memory', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Registered memory provider name.', why: 'identity' },
+    { id: 'memory-files.providerName', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'memory-files', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Name this package registers as the memory provider.', why: 'identity' },
+    { id: 'memoryReviewModel', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Model for the memory review channel (deployment identity).', why: 'identity' },
+    { id: 'skillReviewModel', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Model for the skill review channel (deployment identity).', why: 'identity' },
+    { id: 'maxOpsPerPlan', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-plan-validator', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Operation cap one staged plan may carry.', why: 'internal' },
+    { id: 'substantiveMinToolCalls', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Tool calls that make a turn count as substantive.', why: 'internal' },
+    { id: 'substantiveMinUserChars', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'User characters that make a turn count as substantive.', why: 'internal' },
+    { id: 'substantiveMinAgentChars', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-review', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Assistant characters that make a turn count as substantive.', why: 'internal' },
+    { id: 'threatExemptLabels', group: 'deployment', tier: 'E1', authority: 'cordis', owner: 'evolution-threat', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Threat labels the deployment declares benign (safety surface, never user-writable).', why: 'security' },
+    { id: 'evolution-threat.enabled', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-threat', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Mount the write-time threat guard at all.', why: 'security' },
+    { id: 'evolution-threat.maxScanChars', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-threat', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Scan window size of the threat guard.', why: 'security' },
+    { id: 'evolution-approval.enabled', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-approval', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Require approval before a staged write executes.', why: 'security' },
+    { id: 'evolution-approval.stageForeground', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-approval', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Stage foreground agent writes for approval too.', why: 'security' },
+    { id: 'evolution-approval.pendingTtlMs', group: 'deployment', tier: 'E3', authority: 'cordis', owner: 'evolution-approval', applies: 'live', docAnchor: 'PARAMETERS.md#deployment', summary: 'How long a staged write may wait before it expires: expired writes are closed as rejected and are NEVER executed; 0 (the default) means the window never expires.', label: '待批过期时间', hint: '一条待批写入最多等多久：超时就按「拒绝」关掉（不会执行，写效果不会落地）；0 = 永不过期（默认）。', control: 'number', unit: '毫秒', values: '', card: 'evolution-approval' },
+    { id: 'approvalConfirm', group: 'write-caps', tier: 'E3', authority: 'cordis', owner: 'evolution-approval', applies: 'live', docAnchor: 'PARAMETERS.md#write-caps', summary: 'What the confirmation before an APPROVE does: write straight through, ask first, or treat an unanswered prompt as a cancel. The same three words skillWriteConfirm uses for a skill write.', label: '批准前先确认', hint: '点「批准」时要不要再确认一次：直接执行 / 先确认 / 等待超时即取消。默认直接执行（不打断批量批准）。', control: 'select', unit: '', values: 'auto|ask|timeout', valueLabels: '直接执行|先确认|等待超时即取消', card: 'evolution-approval' },
+    { id: 'qualityWarnThreshold', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-feedback', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Feedback score below which a skill carries a warning.', why: 'internal' },
+    { id: 'replay.maxPlans', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-replay', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Plans compared in one replay report.', why: 'internal' },
+    { id: 'replay.weights', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-replay', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Scoring weights of the replay comparison.', why: 'internal' },
+    { id: 'evolution-commands.maintainCooldownMs', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-commands', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Cooldown between maintenance runs from the command surface.', why: 'internal' },
+    { id: 'evolution-commands.maintainHandoffOnSettle', group: 'deployment', tier: 'E3', authority: 'cordis', owner: 'evolution-commands', applies: 'live', docAnchor: 'PARAMETERS.md#deployment', summary: 'Hand the maintenance report to the model automatically once a scan settles successfully (the same injection as maintain handoff); off by default — enabling it costs one extra model call per successful run.', label: '扫描完成后自动交接', hint: '维护扫描成功结束后，自动把报告交给模型（等同 maintain handoff）；默认关闭，每次成功扫描会多花一次模型调用。', control: 'switch', unit: '', values: '', card: 'evolution-commands' },
+    { id: 'evolution-commands.maintainTimeoutMs', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-commands', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Timeout of one maintenance run started from the command surface.', why: 'internal' },
+    { id: 'evolution-maintenance.probeTimeoutMs', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'evolution-maintenance', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Model-facing budget of one maintenance_probe call — a hang guard, not a latency budget.', why: 'internal' },
+    { id: 'skill-usage.supportReadToolNames', group: 'deployment', tier: 'E2', authority: 'cordis', owner: 'skill-usage', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Tool names whose file reads are attributed to support files.', why: 'internal' },
+    { id: 'install.mode', group: 'deployment', tier: 'E4', authority: 'install', owner: 'scripts', applies: 'restart', docAnchor: 'PARAMETERS.md#deployment', summary: 'Install target plane (values host / agent / layered / oneclick; the `layered` form uses the generated preset, the others mount the bundle at profile root).', why: 'install' },
+    { id: 'install.basePreset', group: 'deployment', tier: 'E4', authority: 'install', owner: 'scripts', applies: 'restart', docAnchor: 'PARAMETERS.md#deployment', summary: 'Agent-preset base the layered install composes from (--base).', why: 'install' },
+    { id: 'install.home', group: 'deployment', tier: 'E4', authority: 'install', owner: 'scripts', applies: 'restart', docAnchor: 'PARAMETERS.md#deployment', summary: 'Harness home the installer writes into (--home).', why: 'install' },
+    { id: 'install.presetRowOverrides', group: 'deployment', tier: 'E4', authority: 'install', owner: 'scripts', applies: 'restart', docAnchor: 'PARAMETERS.md#deployment', summary: 'Preset row overrides the installer injects (row-overrides.json).', why: 'install' },
+    { id: 'timeout.gateDefault', group: 'deployment', tier: 'E2', authority: 'install', owner: 'scripts', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Gate budget: the vitest --testTimeout the gate table and the CI step carry (the number lives in testing-policy.timeouts).', why: 'internal' },
+    { id: 'timeout.specDefault', group: 'deployment', tier: 'E2', authority: 'install', owner: 'scripts', applies: 'none', docAnchor: 'PARAMETERS.md#deployment', summary: 'Local spec budget: the vitest testTimeout the family config generates per leaf tier (the number lives in testing-policy.timeouts).', why: 'internal' },
+]);
+/** The settings namespace each OWNER PACKAGE registers (design §7.2).
+ *
+ * Keyed by owner rather than by group because a namespace has exactly one
+ * registrant (the platform refuses a second registration of the same name),
+ * while a group may span packages — group 'memory' is served by memory-files and
+ * tool-memory, each owning its own section. A package without an entry has no
+ * user layer (its knobs stay deployment-only). */
+export const PARAM_NAMESPACES = Object.freeze({
+    'evolution-review': 'evolution-review',
+    'memory-files': 'evolution-memory',
+    'tool-memory': 'evolution-tool-memory',
+    'evolution-curator': 'evolution-curator',
+    'tool-skill-manage': 'evolution-skills',
+    // 0.21.0 (G1): the approval row's `pendingTtlMs` is E3, so its owner must publish a user layer —
+    // without this entry the row's card could not exist and `/evolution policy set` answered E-315.
+    'evolution-approval': 'evolution-approval',
+    // 0.21.0 (G3): the commands row's handoff switch is E3 — same reason as the entry above: the card
+    // and `/evolution params set` both resolve their settings namespace through this map.
+    'evolution-commands': 'evolution-commands',
+});
+/**
+ * The rows whose settings namespace CHANGED with the platform-line move (G3): the
+ * platform keys a settings section by the Loader entry id now, while 0.1.x let each
+ * plugin register a free-form namespace — this table is the difference, DERIVED from
+ * {@link PARAM_NAMESPACES} so freezing a row id renames it in one place.
+ *
+ * It is the migration's TARGET (`rowId`) and its SOURCE (`namespace`, the section a
+ * stored value sits in). Rows whose two names already agree are absent: there is
+ * nothing to move for them.
+ */
+export const NAMESPACE_MIGRATIONS = Object.freeze(Object.entries(PARAM_NAMESPACES)
+    .filter(([owner, namespace]) => namespace !== owner)
+    .map(([owner, namespace]) => Object.freeze({ namespace, rowId: owner })));
+/**
+ * The LEGACY settings namespace one owner package used to register through the family's
+ * own seam (0.1.x). It is no longer what the platform calls the section: the platform
+ * derives a settings namespace from the Loader entry id, and this registry's `owner` field
+ * IS that row id, so a live lookup uses {@link paramRowId}. What remains here is the
+ * migration SOURCE (G3 moves a user layer out of this string and into the row id).
+ * @param owner - owner package directory name (the map's key).
+ * @returns the legacy namespace that owner registered.
+ * @throws when the owner has no entry in {@link PARAM_NAMESPACES}.
+ */
+export function paramNamespace(owner) {
+    const namespace = PARAM_NAMESPACES[owner];
+    if (namespace === undefined)
+        throw new Error('no settings namespace registered for owner `' + owner + '` (add it to PARAM_NAMESPACES)');
+    return namespace;
+}
+/**
+ * The settings id one row's user layer lives under, or undefined when the owner publishes
+ * no user layer at all (a deployment-only row: its knobs are E2 and never reach a settings
+ * section). The platform derives a settings namespace from the Loader entry id and reports
+ * it in `settings.describe()` / `configForms.get(entryId)`, and an owner package's row id is
+ * its own name — spelled the same in every bundle patch.
+ *
+ * This is the id to LOOK UP with; {@link paramNamespace} keeps the legacy string the 0.1.x
+ * seam registered, which is the G3 migration source and never a live lookup key.
+ * @param owner - owner package directory name (the row id).
+ * @returns the entry id the platform reports for that row, or undefined for a row without
+ *   a user layer.
+ */
+export function paramSettingsId(owner) {
+    return PARAM_NAMESPACES[owner] === undefined ? undefined : owner;
+}
+/**
+ * The settings id of a row that MUST have a user layer (an owner reading its own section).
+ * @param owner - owner package directory name (the row id).
+ * @returns the entry id the platform reports for that row.
+ * @throws when the owner publishes no user layer.
+ */
+/** The keys the USER set in one row's settings namespace (G1 §8.4-A).
+ *
+ * The settings user layer is read in exactly ONE place, and it reads KEY NAMES, never values: the
+ * platform resolves the user layer into the row's live fields, so a value always comes from the
+ * row. The precedence rule (user > policy) needs to know WHICH keys the user set, or a deployment
+ * policy would silently override the user. S2.9 (T3-10): review and curator each had their own
+ * reader, so one key could be resolved two ways.
+ * @param ctx - the plugin context (a `get(name)` view is enough).
+ * @param rowId - the row's registry namespace (`paramRowId(<package>)`).
+ * @returns the keys present in that row's user layer.
+ */
+export function userSetKeys(ctx, rowId) {
+    // platform-declaration anchor: the platform’s `settings` service (optional; undefined ⇒ the source column reports “unknown”)
+    const settings = ctx.get('settings');
+    const entry = settings?.describe?.({ redactSecrets: false }).find(item => item.ns === rowId);
+    return new Set(Object.keys(entry?.user ?? {}));
+}
+/** ONE key's effective value, in the design's precedence (G1 §8.4-A): the user layer (whose value
+ * already arrived through the row's live field) → the deployment policy snapshot → the row itself.
+ * S2.9 (T3-10): both readers of the policy row resolve through this, so a new key cannot get one
+ * answer on the review side and another on the curator side.
+ * @param userSet - the keys the user set (see {@link userSetKeys}).
+ * @param row - the row's live fields.
+ * @param snapshot - the deployment policy snapshot, when a policy row is mounted.
+ * @param key - the key being resolved.
+ * @returns the effective value.
+ */
+export function pickWithPolicy(userSet, row, snapshot, key) {
+    if (userSet.has(key))
+        return row[key];
+    return snapshot?.[key] ?? row[key];
+}
+export function paramRowId(owner) {
+    const id = paramSettingsId(owner);
+    if (id === undefined)
+        throw new Error('no settings namespace registered for owner `' + owner + '` (add it to PARAM_NAMESPACES)');
+    return id;
+}
+/**
+ * Number-typed read over {@link readParam}: the family's tunables are numbers,
+ * and a value of another type reads as absent so the caller's default applies
+ * (the same outcome the numeric clamps produce for a malformed value).
+ * @param carrier - config/snapshot object to read from, or undefined.
+ * @param id - canonical id (a deprecated alias is accepted and resolved first).
+ * @returns the resolved number, or undefined when absent or not a number.
+ */
+export function readNumberParam(carrier, id) {
+    const value = readParam(carrier, id);
+    return typeof value === 'number' ? value : undefined;
+}
+//# sourceMappingURL=params.js.map

package/lib/types/payload.js

@@ -0,0 +1,36 @@
+/**
+ * The memory op's payload field, resolved in ONE place (T3-06/A34).
+ *
+ * A memory op carries its body under two names — `facts` (the original) and
+ * `content` (the schema alias) — and every reader used to resolve the pair with
+ * `op.facts ?? op.content`. `??` only skips null/undefined, so
+ * `{ facts: '', content: '正文' }` counted as "has facts": the plan validator
+ * refused the op as empty (a FALSE refusal of a payload that is right there),
+ * and the writers that normalized the pair dropped the body to `''`.
+ *
+ * The payload is the first field whose TRIMMED value is non-empty — a blank
+ * string carries no payload, so it yields to its alias. Both blank (or absent)
+ * ⇒ `''`, the one shape every caller already reads as "no payload".
+ *
+ * Non-string values are SKIPPED, never trimmed: a truthy non-string `facts`
+ * used to reach `.trim()` and throw a TypeError out of callers that promise to
+ * be deterministic (the E-60 / P2-1 class). The field-type gates reject such an
+ * op on their own; this helper must not be the one that throws.
+ *
+ * The union posture matches evolution-threat's E-28a scan (BOTH fields are
+ * scanned, not only the first truthy one); the two agree on what counts as
+ * provided.
+ * @module @lmzhen/dsh-evolution-core
+ */
+/** The op's payload text: the first of `facts`/`content` whose trim is non-empty, trimmed; `''` when neither carries one. */
+export function payloadText(op) {
+    for (const value of [op?.facts, op?.content]) {
+        if (typeof value !== 'string')
+            continue;
+        const text = value.trim();
+        if (text !== '')
+            return text;
+    }
+    return '';
+}
+//# sourceMappingURL=payload.js.map

package/lib/types/platform-line.generated.d.ts

@@ -0,0 +1,10 @@
+/** The frozen platform line this release targets (peers/engines/anchors derived from version+floor). */
+export declare const PLATFORM_LINE: {
+    readonly version: "0.2.1-rc.2";
+    readonly floor: "0.2.1-rc.1";
+    readonly previousAnchor: "0.2.0-rc.2";
+    readonly peersRange: "^0.2.1-rc.1";
+    readonly enginesRange: ">=0.2.1-rc.1 <0.2.2-0";
+    readonly upstreamRef: "dsh-v0.2.1-rc.2";
+};
+//# sourceMappingURL=platform-line.generated.d.ts.map

package/lib/types/platform-line.generated.js

@@ -0,0 +1,12 @@
+// GENERATED FILE — do not edit. Source: platform-line.json (repository root) (generator: packages/scripts/gen-platform-line.mjs).
+// Regenerate with: node packages/scripts/gen-platform-line.mjs
+/** The frozen platform line this release targets (peers/engines/anchors derived from version+floor). */
+export const PLATFORM_LINE = {
+    version: '0.2.1-rc.2',
+    floor: '0.2.1-rc.1',
+    previousAnchor: '0.2.0-rc.2',
+    peersRange: '^0.2.1-rc.1',
+    enginesRange: '>=0.2.1-rc.1 <0.2.2-0',
+    upstreamRef: 'dsh-v0.2.1-rc.2',
+};
+//# sourceMappingURL=platform-line.generated.js.map

package/lib/types/platform-services.d.ts

@@ -1,7 +1,7 @@
 /**
  * Every platform service the family reaches for with `ctx.get`, and what degrades without it.
  *
- * O-2 (v46 audit): the family probes 28 platform services optionally — the platform has no
+ * O-2 (v46 audit): the family probes 25 platform services optionally — the platform has no
  * formalized "optional dependency", so an ABSENT service is a silent downgrade and the diagnostic
  * surface is the only place a reader can learn about it. `/evolution doctor` used to judge six of
  * them; this table is the single source it judges the rest from, and the arch guard cross-checks it
@@ -20,7 +20,7 @@ export interface PlatformServiceProbe {
     /** Where the probe runs. */
     readonly side: 'host' | 'client';
 }
-/** The 28 probes, in service-name order (the guard checks this list against the tree). */
+/** The 25 probes, in service-name order (the guard checks this list against the tree). */
 export declare const PLATFORM_SERVICE_PROBES: readonly PlatformServiceProbe[];
 /**
  * The HOST-side probes that do not resolve in this runtime — what `/evolution doctor` prints as

package/lib/types/platform-services.js

@@ -0,0 +1,52 @@
+/**
+ * Every platform service the family reaches for with `ctx.get`, and what degrades without it.
+ *
+ * O-2 (v46 audit): the family probes 25 platform services optionally — the platform has no
+ * formalized "optional dependency", so an ABSENT service is a silent downgrade and the diagnostic
+ * surface is the only place a reader can learn about it. `/evolution doctor` used to judge six of
+ * them; this table is the single source it judges the rest from, and the arch guard cross-checks it
+ * against the actual probe sites so a new `ctx.get` cannot stay undeclared.
+ *
+ * `side` decides who can judge it: `host` probes run in the plugin process (doctor judges those),
+ * `client` probes run in the browser half, where the host has no view of the seats.
+ * @module @lmzhen/dsh-evolution-core
+ */
+/** The 25 probes, in service-name order (the guard checks this list against the tree). */
+export const PLATFORM_SERVICE_PROBES = Object.freeze([
+    { service: 'agents', feature: 'review and curator subagent wake-ups', side: 'host' },
+    { service: 'approval', feature: 'the platform approval policy the approval row shadows', side: 'host' },
+    { service: 'configEditor', feature: 'the params view inherited-vs-override column', side: 'host' },
+    { service: 'configForms', feature: 'the settings card seat (its section renders read-only without it)', side: 'client' },
+    { service: 'evolutionApproval', feature: 'pending writes: list, approve and reject from the command surface', side: 'host' },
+    { service: 'evolutionCurator', feature: '/evolution curator subcommands, skill undo and history', side: 'host' },
+    { service: 'evolutionIo', feature: 'every durable read and write (the IO seam)', side: 'host' },
+    { service: 'hmr', feature: 'the preset install read-merge-write commit (the platform HMR lock serializes it)', side: 'host' },
+    { service: 'evolutionMemoryBudget', feature: 'the memory-budget divergence section of this report', side: 'host' },
+    { service: 'evolutionPolicy', feature: 'the policy snapshot that shadows row knobs', side: 'host' },
+    { service: 'evolutionReplay', feature: '/evolution replay', side: 'host' },
+    { service: 'evolutionState', feature: 'the state facade behind activity and replay', side: 'host' },
+    { service: 'llm', feature: 'the curator one-shot review model call', side: 'host' },
+    { service: 'memory', feature: 'the cross-session memory store (review and learning-graph reads)', side: 'host' },
+    { service: 'pluginInventory', feature: 'the plugin inventory view', side: 'host' },
+    { service: 'pluginManager', feature: 'the platform plugin and preset surfaces this report reads', side: 'host' },
+    { service: 'profileContext', feature: 'writing the agent-preset row into a profile patch', side: 'host' },
+    { service: 'sessionProjections', feature: 'the domain-owned session units', side: 'host' },
+    { service: 'sessionQuery', feature: 'the session corpus behind /evolution sessions', side: 'host' },
+    { service: 'settings', feature: 'the settings user layer and the params view', side: 'host' },
+    { service: 'skillUsage', feature: 'usage counters feeding the curator and the review planner', side: 'host' },
+    { service: 'skills', feature: 'the platform skill catalog the skill tool writes through', side: 'host' },
+    { service: 'storageDomain', feature: 'the storage-domain state provider', side: 'host' },
+    { service: 'systemPrompt', feature: 'the protected-skills prompt variable', side: 'host' },
+    { service: 'tools', feature: 'tool registration and the guard seam', side: 'host' },
+]);
+/**
+ * The HOST-side probes that do not resolve in this runtime — what `/evolution doctor` prints as
+ * "capability absence". Empty is the normal, healthy answer: every capability the family can use
+ * is mounted, and the section stays away.
+ * @param has - a `ctx.get(name) !== undefined` probe of the running context.
+ * @returns the absent host-side probes, in declaration order.
+ */
+export function absentHostServices(has) {
+    return PLATFORM_SERVICE_PROBES.filter(entry => entry.side === 'host' && !has(entry.service));
+}
+//# sourceMappingURL=platform-services.js.map