@lmzhen/dsh-evolution-core 0.26.26 → 0.27.1

package/lib/index.js

@@ -1,4 +1,9 @@
-import { copyFileSync, existsSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { _ as scopedPackageName, c as MAINTAINER_PRESET_ID, d as RESTRICTED_TOOLS_ROW_ID, f as RESTRICTOR_MODULE, g as scopeOfNearestManifest, p as REVIEWER_PRESET_ID, s as EVOLUTION_PRESET_IDS, u as RESTRICTED_PRESET_DISPLAY } from "./ensure-MEYMj9jn.js";
+import { a as methodNotAllowed, c as asRecord, i as json, l as isRecord, n as MAX_REQUEST_BODY_BYTES, o as readJsonObject, r as hostSurface, s as registerHostRoutes, t as HOST_ROUTES } from "./http-routes-BP-S3KV-.js";
+import { w as allowRowCollisions } from "./composition-D8Y3-ROd.js";
+import { n as errorText, t as EVOLUTION_ERRORS } from "./errors-Br2-uUSK.js";
+import { createSubagentChannel, probeChannelState, subagentChannelState } from "./subagent/index.js";
+import { copyFileSync, existsSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { parse } from "yaml";
@@ -244,50 +249,6 @@ async function withTreeWrite(acquire, view, fn) {
 	}
 }
 //#endregion
-//#region lib/types/package-identity.js
-/**
-* G1/1.8 (G-04): the SCOPE this build was published under, DERIVED from a manifest instead of written as a
-* literal in running code.
-*
-* The family used to hard-code `@deepseek-ai/dsh-...` names and let `prepare-release.mjs --scope @lmzhen`
-* patch the text afterwards. A published install therefore depended on a release-time string rewrite
-* reaching every copy, and the copies had already drifted (doctor.ts, index.ts, preset-composition.ts and
-* its .mjs mirror each spelled the identity). The scope is knowable at runtime: it is the scope segment of
-* the nearest `package.json` above the calling module. Nothing to rewrite, one owner of the answer.
-*
-* @module @lmzhen/dsh-evolution-core/package-identity
-*/
-/**
-* The scope segment of the nearest `package.json` at or above `from`.
-* @param from - the calling module URL (its own manifest is the answer).
-* @returns the scope, e.g. `@deepseek-ai` or `@lmzhen`; an unscoped manifest yields an empty string.
-*/
-function scopeOfNearestManifest(from) {
-	let dir = dirname(from instanceof URL ? fileURLToPath(from) : fileURLToPath(new URL(from)));
-	for (let hops = 0; hops < 32; hops += 1) {
-		const manifest = join(dir, "package.json");
-		if (existsSync(manifest)) {
-			const parsed = JSON.parse(readFileSync(manifest, "utf8"));
-			const name = typeof parsed.name === "string" ? parsed.name : "";
-			return name.startsWith("@") ? name.split("/")[0] ?? "" : "";
-		}
-		const parent = dirname(dir);
-		if (parent === dir) break;
-		dir = parent;
-	}
-	return "";
-}
-/**
-* One family/platform package name under the RUNNING scope.
-* @param bareName - the name without any scope, e.g. `dsh-agent-preset`.
-* @param from - the calling module URL.
-* @returns `scope/bareName`, or `bareName` when the manifest carries no scope.
-*/
-function scopedPackageName(bareName, from) {
-	const scope = scopeOfNearestManifest(from);
-	return scope === "" ? bareName : scope + "/" + bareName;
-}
-//#endregion
 //#region lib/types/write-authority.js
 /** The mode a deployment that configures nothing gets. */
 const DEFAULT_WRITE_CONFIRM_MODE = "auto";
@@ -928,34 +889,6 @@ const MEMORY_GUIDANCE_SECTION_ORDER = 11e3;
 /** Order of the `evolution-skills-guidance` section (last of the two). */
 const SKILLS_GUIDANCE_SECTION_ORDER = 11100;
 //#endregion
-//#region lib/types/guards.js
-/**
-* The family's plain-object predicate, in ONE place (v46 G7.1 / audit A8).
-*
-* The audit found the same guard — "a non-null object that is not an array" — rewritten fifteen
-* times across nine packages, four times inside core itself, and with two byte-identical `asRecord`
-* copies in evolution-policy and evolution-threat. This module is the single definition; callers
-* import it instead of spelling the clause again.
-*
-* @module @lmzhen/dsh-evolution-core
-*/
-/**
-* Is this a non-null, non-array object (what JSON calls an object)?
-* @param value - the value to test.
-* @returns whether it is a plain object.
-*/
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
-* Read a value as a record, or undefined when it is not one.
-* @param value - the value to read.
-* @returns the value typed as a record, or undefined.
-*/
-function asRecord(value) {
-	return isRecord(value) ? value : void 0;
-}
-//#endregion
 //#region lib/types/limits.js
 /**
 * Skill content limits: the byte/char budgets every write path validates against.
@@ -3532,194 +3465,6 @@ function fuzzyPatch(content, oldString, newString, replaceAll = false) {
 }
 /** Deterministic section-extraction plan facts; the caller owns the IO and the append semantics. */
 //#endregion
-//#region lib/types/http-routes.js
-/**
-* The loopback HTTP plumbing every family route surface shares (E-302-era conventions).
-*
-* WHY THIS IS IN CORE: the fence, the bounded body reader and the JSON writer are the same for every
-* family route surface, and `evolution-core` is the one package all of them already depend on. The
-* canonical platform implementation (packages/client/connection/src/api-request-trust.ts) is not part
-* of that package's published surface, so the family keeps its own copy of the RULES here — once.
-*
-* Layering: pure transport. Nothing here knows about skills, approvals, curators or route tables.
-* @module @lmzhen/dsh-evolution-core/http-routes
-*/
-/** Largest request body a family route accepts; a bigger one reads as "no body" (400 from the handler). */
-const MAX_REQUEST_BODY_BYTES = 64 * 1024;
-/** One header as a single string (a repeated header reads as absent rather than as its first value). */
-function header(request, name) {
-	const value = request.headers[name];
-	return typeof value === "string" ? value : void 0;
-}
-/** IPv4 127/8 predicate (four decimal octets, first == 127). */
-function isIPv4Loopback(value) {
-	const parts = value.split(".");
-	return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
-}
-/** Whether a socket remote address names the loopback range (127/8, ::1, IPv4-mapped). */
-function isLoopbackAddress(address) {
-	if (address === void 0) return false;
-	const normalized = address.toLowerCase();
-	if (normalized === "::1") return true;
-	if (normalized.startsWith("::ffff:")) return isIPv4Loopback(normalized.slice(7));
-	return isIPv4Loopback(normalized);
-}
-/** Whether a hostname names the loopback authority (localhost, [::1], 127/8). */
-function isLoopbackHostname(hostname) {
-	if (hostname === "localhost" || hostname === "[::1]") return true;
-	return isIPv4Loopback(hostname);
-}
-/**
-* Whether one request may enter a family route.
-*
-* Rules, in order: the SOCKET must be loopback (authoritative — X-Forwarded-For is never trusted), the
-* Host header must name a loopback authority (DNS-rebinding defense), an explicit cross-site marker is
-* refused, and an attached Origin must be exactly this authority.
-* @param request - the request to judge.
-* @returns true when the request may proceed.
-*/
-function isLoopbackRequest(request) {
-	if (!isLoopbackAddress(request.socket?.remoteAddress)) return false;
-	const host = header(request, "host");
-	if (host === void 0) return false;
-	let hostUrl;
-	try {
-		hostUrl = new URL("http://" + host);
-	} catch {
-		return false;
-	}
-	if (!isLoopbackHostname(hostUrl.hostname)) return false;
-	if (header(request, "sec-fetch-site") === "cross-site") return false;
-	const origin = header(request, "origin");
-	if (origin === void 0) return true;
-	try {
-		return new URL(origin).host === hostUrl.host;
-	} catch {
-		return false;
-	}
-}
-/** Write one JSON response. The routes own their response lifecycle, so every path ends here. */
-function writeJson(res, status, value) {
-	const body = JSON.stringify(value);
-	res.writeHead(status, {
-		"content-type": "application/json; charset=utf-8",
-		"content-length": Buffer.byteLength(body)
-	});
-	res.end(body);
-}
-/**
-* Read one JSON request body, bounded.
-* @param req - the request.
-* @returns the parsed value, or null when the body is oversized, empty, or not JSON.
-*/
-async function readJsonBody(req) {
-	const chunks = [];
-	let size = 0;
-	for await (const chunk of req) {
-		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-		size += buffer.byteLength;
-		if (size > 65536) return null;
-		chunks.push(buffer);
-	}
-	if (size === 0) return null;
-	try {
-		return JSON.parse(Buffer.concat(chunks).toString("utf8"));
-	} catch {
-		return null;
-	}
-}
-/**
-* Read one JSON request body that must be an OBJECT.
-*
-* The three route surfaces all take named fields, so "array or scalar" is a bad request rather than a
-* shape each handler has to re-check.
-* @param req - the request.
-* @returns the body as a plain object, or null when it is absent, oversized, not JSON, or not an object.
-*/
-async function readJsonObject(req) {
-	const body = await readJsonBody(req);
-	return isRecord(body) ? body : null;
-}
-//#endregion
-//#region lib/types/env.js
-/**
-* Evolution environment-variable reading, single-source (WC, 0.3.56).
-*
-* Every `DSH_EVOLUTION_*` value the PLUGIN code reads goes through this module
-* so the trim/whitelist patterns (v10 P2-12/13) live in exactly one place and
-* the generated env reference can point at one behavior. Configuration-layer
-* reads inside patch YAML `!!js` expressions (session-query path/openAt) stay
-* in the profile config evaluation — they are NOT migrated (they are resolved
-* at cordis config time, not plugin time) but are documented in the README
-* env table. `EVOLUTION_SCOPE` is read by the source installers only
-* (`packages/scripts/install-layered.mjs`, `packages/test-support/row-contract.ts`),
-* never by plugin runtime code.
-*
-* v14 P3-1: the former `EVOLUTION_ENV_KEYS` export was deleted — nothing read
-* it, so the "generated env reference" it claimed to source was never
-* generated (the README table is maintained by hand and now lists every key).
-*/
-const ALLOW_ROW_COLLISIONS = "1";
-/** N-5 escape: `DSH_EVOLUTION_ALLOW_ROW_COLLISIONS=1` downgrades a delta-row
-* collision from fail-loud to warn+keep-both. Any other value (including an
-* EMPTY/whitespace string — a set-but-unset variable) keeps the fail-loud. */
-function allowRowCollisions(env = process.env) {
-	return env.DSH_EVOLUTION_ALLOW_ROW_COLLISIONS === ALLOW_ROW_COLLISIONS;
-}
-//#endregion
-//#region lib/types/errors.js
-/**
-* THE error-code table: E-301…E-322 with the exact text each one emits (E-317…E-319 are the
-* write-admission gates' own refusals).
-*
-* The codes used to be spelled out at 33 call sites across two packages, so one
-* code's wording could drift between the branches that answer it and nothing could
-* see the drift. Keys name the SCENARIO rather than the code, because a code
-* legitimately carries more than one text (E-301 answers pending / approve / reject
-* with different guidance); the code still leads every string, so model- and
-* user-facing output is unchanged. Interpolations are written `%aN%` and filled by
-* `errorText` from the values the call site used to interpolate inline.
-* @module @lmzhen/dsh-evolution-core
-*/
-const EVOLUTION_ERRORS = Object.freeze({
-	"e-305-this-invocation-carries-no": "E-305: 本次调用没有携带 agent —— `%a1%` 需要由会话支撑的调用（请在 GUI 或 CLI 的会话里运行）。",
-	"e-306-this-deployment-stages-foreground": "E-306: 本部署会暂存前台写入，但 `/evolution %a1%` 无法通过技能运行器回放 —— 没有可暂存的内容。请在批准策略为 'never' 的会话里运行，或在 evolution-approval 行上设置 `stageForeground: false`，然后重试该命令。",
-	"e-301-approval-service-not-mounted": "E-301: 批准服务未挂载：待批准写入无法列出或回放。挂载 evolution-approval 行（随 evolution-host/evolution-all 提供）后，运行 /evolution doctor 可查看已挂载的服务。",
-	"e-301-approval-service-not-mounted-2": "E-301: 批准服务未挂载。下一步：evolution-approval 行随 evolution-host/evolution-all 一起提供 —— 运行 /evolution doctor 查看已挂载的服务。",
-	"e-304-the-mounted-approval-service": "E-304: 已挂载的批准服务早于本能力发布 —— 请改为驳回该记录。",
-	"e-302-curator-service-not-mounted": "E-302: 策展服务未挂载。下一步：挂载 evolution-curator 行（evolution-host/evolution-all），并运行 /evolution doctor。",
-	"e-305-the-invocation-agent-exposes": "E-305: 调用 agent 既没有暴露 `followup` 也没有 `inject` —— %a1% 没有投递通道。",
-	"e-306-this-deployment-stages-foreground-2": "E-306: 本部署会暂存前台写入，但本次调用没有 agent 会话 —— `/evolution restructure` 会暂存一条没有会话归属的记录。请在 GUI 或 CLI 的会话里运行，或在 `stageForeground: false` 行上设置，然后重试该命令。",
-	"e-303-replay-service-not-mounted": "E-303: 回放服务未挂载。下一步：挂载 evolution-replay 行（evolution-host/evolution-all），并运行 /evolution doctor。",
-	"e-307-the-settings-service-could": "E-307: 设置服务无法报告它的分区（%a1%）。/evolution params 需要用户层来区分覆盖值与部署值；运行 /evolution doctor 查看已挂载的服务。",
-	"e-308-unknown-parameter-group-group": "E-308: 未知的参数分组「%a1%」—— 已知分组：%a2%。",
-	"e-311-no-settings-service-is": "E-311: 没有挂载设置服务，因此没有可写入的用户层。请挂载 settings 行（packages/settings/settings-file）后重试；本命令从不修改 cordis.yml —— 部署值属于部署。/evolution doctor 会列出已挂载的服务。",
-	"e-312-error-instanceof-Error-error": "E-312: %a1% —— /evolution params 会列出规范 id。",
-	"e-313-unknown-parameter-id-evolution": "E-313: 未知参数「%a1%」—— /evolution params 会列出每个已注册 id 及其层级与用户层。",
-	"e-314-id-is-a-deployment": "E-314: 「%a1%」是部署参数（层级 %a2%，归属 %a3%）—— 它写在 cordis.yml 的插件行或策略行上，而不是从会话写入。/evolution params 会显示每一行由谁可写。",
-	"e-315-id-has-no-user": "E-315: 「%a1%」没有用户层 —— 归属 %a2% 没有发布设置命名空间，因此该值留在部署层。",
-	"e-307-the-settings-service-could-2": "E-307: 设置服务无法报告它的分区（%a1%）。/evolution policy set 需要当前修订号才能安全写入；运行 /evolution doctor 查看已挂载的服务。",
-	"e-316-namespace-namespace-is-not": "E-316: namespace \"%a1%\" 未注册 —— 归属 %a2% 在本组合中未挂载，因此无法从这里写入它的参数。 /evolution params 会把那些行标为 'unregistered'.",
-	"e-309-revision-conflict-you-sent": "E-309: 修订冲突 —— 你提交的是 %a1%，文档当前为 %a2%。请用 /evolution params --json 重新读取后重试。",
-	"e-309-revision-conflict-message-Re": "E-309: 修订冲突 —— %a1%。请用 /evolution params --json 重新读取后重试。",
-	"e-310-the-settings-service-refused": "E-310: 设置服务拒绝了这次写入：%a1% —— 归属插件的规则优先（跨字段成对约束，或只能收紧的上限）。/evolution params 会显示当前值。",
-	"e-317-skill-write-not-confirmed": "E-317: 技能 \"%a1%\" 未被%a2% —— 确认提示被拒绝或关闭，因此没有写入任何内容。每次创建与裸删除都会出现该提示；只有操作者要求时才重复调用。",
-	"e-318-skill-write-without-a-read": "E-318: 本会话没有读取技能 \"%a1%\"，因此拒绝这次写入。请先用 `skill` 工具读取它（失败的读取不算），然后重复该写入。",
-	"e-320-the-profile-home-is-not": "E-320: 本宿主没有报告 profile home，因此无法定位旧设置文档。/evolution migrate 读取 `<profile home>/settings.yaml.imported`；请在由 profile 启动的会话里运行。",
-	"e-322-a-parameter-would-break-a": "E-322: %a1% 至少应为 %a2%，但这次写入把它设成 %a3%。未写入任何内容。",
-	"e-321-no-io-provider-is": "E-321: 没有挂载 evolution-io 提供方，因此无法读取旧设置文档。请挂载 evolution-io 行（evolution-host/evolution-all）后重试。",
-	"e-319-skill-write-confirm-timed-out": "E-319: 技能 \"%a1%\" 未被%a2% —— 确认提示在 %a3% 秒内无人应答，因此该写入被取消。没有人在场决定：把 `skillWriteConfirm` 设为 `auto` 可免提示直接写入，保留 `ask` 则一直等到有人应答，或提高 `skillWriteConfirmTimeoutSeconds`。"
-});
-/**
-* Render one table entry, substituting its interpolation slots.
-* @param id - the scenario key.
-* @param args - values for the entry's `%aN%` slots.
-* @returns the message text the call site used to spell out inline.
-*/
-function errorText(id, args = {}) {
-	return EVOLUTION_ERRORS[id].replace(/%a(\d+)%/g, (_match, n) => String(args["a" + n] ?? ""));
-}
-//#endregion
 //#region lib/types/learn-prompt.js
 /**
 * Open-ended `/evolution learn` prompt builder.
@@ -4299,24 +4044,6 @@ function render(entries) {
 function stripDatePrefix(entry) {
 	return entry.replace(/^## \d{4}-\d{2}-\d{2}\n/, "");
 }
-/**
-* Neutralize the platform's `{{name}}` prompt-variable syntax in text that is
-* about to be registered as a `systemPrompt.context` contribution.
-*
-* The platform interpolates every context/section text once per model step and
-* THROWS on an unknown or malformed reference — so one stored memory entry
-* containing `{{...}}` (a CI expression, a Jinja/Helm/Vue template, a doc
-* placeholder) used to fail `assemble()` on EVERY later pre-step of every
-* session under this DSH_HOME, while a registered name such as `{{cwd}}` was
-* silently substituted into the "memory" the model reads. Only the INJECTED
-* text is neutralized: stored entries keep their original bytes.
-*
-* @param text - rendered context text about to leave for the prompt surface.
-* @returns the same text with every `{{` split so it cannot start a reference.
-*/
-function neutralizePromptVariables(text) {
-	return text.includes("{{") ? text.replaceAll("{{", "{ {") : text;
-}
 /** F-201: does `content` carry the on-disk entry delimiter or a trailing
 * `\n§` fragment that would combine with the render terminator into a real
 * delimiter boundary? Both split the fact into multiple entries on read-back
@@ -4883,7 +4610,7 @@ var MemoryStore = class {
 				parts.push(`## ${label} (${safe.length} entries)${usage}${note}\n${body}`);
 			} else if (entries.length > 0) parts.push(`## ${label} — ${entries.length} entries withheld by the security scan; none injected`);
 		}
-		return neutralizePromptVariables(parts.join("\n\n"));
+		return parts.join("\n\n");
 	}
 	/**
 	* Detect on-disk drift for a caller that holds no locked view: `true` when the
@@ -4966,563 +4693,6 @@ async function recordMutation(root, io, record, cap = 500) {
 	});
 }
 //#endregion
-//#region lib/types/preset-composition.js
-/**
-* Build the user-root Evolution preset composition from the RUNTIME platform's
-* `standard` preset rows plus the evolution delta rows (P1-1 follow-up,
-* 0.3.15): the agent-preset registry mounts ONE composition file verbatim, so
-* a delta-only `agent.cordis.yml` would produce an agent carrying only the
-* delta rows.
-*
-* Same contract as `install-layered.mjs` `generateAgentPreset` (the source
-* install path) — installer.spec pins byte parity between the two, and both
-* apply the identical row-collision contract: a delta id that overlaps a
-* standard row id fails loud by default, and `DSH_EVOLUTION_ALLOW_ROW_COLLISIONS=1`
-* downgrades it to a warning that keeps both (the row mounts twice).
-*
-* V10-14 / 0.3.53 (P1-2): BOTH composers now inject the Hermes 60-char catalog
-* cap onto the standard-sourced `- id: tool-skill` row of the composed preset
-* (see injectCatalogDescriptionCap) — the session-visible tool-skill instance
-* mounts in the preset's own standing scope, where no profile-root patch can
-* reach it. 0.3.53 moved the injection INTO the composer so
-* `/evolution preset install` (the npm user's only preset path) gets it too;
-* install-layered applies the byte-identical rule, pinned by installer.spec.
-*
-* Row ids are read from `- id:` lines; an id present in both fragments would
-* mount twice and could shadow the platform row, so it fails loud.
-* @param standardComposition - the runtime `standard` preset composition.
-* @param deltaComposition - the evolution delta fragment.
-* @returns the composed preset composition (standard rows first, then delta).
-*/
-function composePresetComposition(standardComposition, deltaComposition) {
-	const standardIds = compositionRowIds(standardComposition);
-	const collisions = [...compositionRowIds(deltaComposition)].filter((id) => standardIds.has(id)).sort();
-	if (collisions.length > 0 && !allowRowCollisions()) throw new Error(`evolution preset composition: delta rows collide with runtime standard rows: ${collisions.join(", ")}`);
-	if (collisions.length > 0) console.warn(`evolution preset composition: warning — delta rows collide with standard rows (${collisions.join(", ")}); keeping both (DSH_EVOLUTION_ALLOW_ROW_COLLISIONS=1)`);
-	return applyRowOverrides(`${standardComposition.replace(/\s+$/, "")}\n\n${deltaComposition.trim()}\n`);
-}
-/**
-* One table, two generation paths: `row-overrides.json` at the PACKAGE ROOT
-* states what a generated preset must carry beyond the platform composition,
-* and the source installer (`scripts/install-layered.mjs`) reads the same file.
-* The path resolves from both `src/` and the built `lib/`, which is why the
-* file sits at the root and ships in `files`.
-*
-* Before 0.3.77 each side carried its own hand-kept copy of this table; they
-* happened to stay byte-identical, which is exactly the kind of agreement no
-* test can keep — the entries are now data, and a divergence is impossible.
-*/
-const ROW_OVERRIDES_URL = new URL("../row-overrides.json", import.meta.url);
-/** One cache per PATH: the installer reads the same file through its own root, and a single-slot
-* cache would hand the second caller the first caller's bytes. */
-const overridesCache = /* @__PURE__ */ new Map();
-/**
-* Read and validate the shared override table.
-* G6.1/M1: the path is a PARAMETER (default: the table beside this module). The source installer
-* runs the generated port from `scripts/`, so its own root has to be passed in — a module-relative
-* read would look for `scripts/../row-overrides.json` and fail.
-* @param path - the table to read.
-* @returns the entries, in file order. A malformed table fails LOUD: a composer
-* that silently skipped an entry would ship a preset running the platform
-* default while nothing downstream reported it.
-*/
-function loadRowOverrides(path = fileURLToPath(ROW_OVERRIDES_URL)) {
-	const cached = overridesCache.get(path);
-	if (cached !== void 0) return cached;
-	const parsed = JSON.parse(readFileSync(path, "utf8"));
-	if (!Array.isArray(parsed)) throw new Error("evolution-core: row-overrides.json must be an array of override entries");
-	const entries = [];
-	for (const [index, entry] of parsed.entries()) {
-		const candidate = entry;
-		if (candidate === null || typeof candidate !== "object" || typeof candidate.row !== "string" || candidate.row === "" || typeof candidate.key !== "string" || candidate.key === "" || !Array.isArray(candidate.lines) || candidate.lines.some((line) => typeof line !== "string") || typeof candidate.missingReason !== "string") throw new Error(`evolution-core: row-overrides.json entry ${index} is malformed (row/key/lines/missingReason are required)`);
-		entries.push({
-			row: candidate.row,
-			key: candidate.key,
-			lines: candidate.lines,
-			missingReason: candidate.missingReason
-		});
-	}
-	overridesCache.set(path, entries);
-	return entries;
-}
-/**
-* Ensure every {@link RowOverride} inside its target row.
-*
-* Key-level by construction: we INSERT the override's own lines and leave a row
-* that already carries the key byte-identical, so a re-run never doubles a key.
-* This is the deliberate opposite of the platform's patch layers, where an
-* override REPLACES `config` wholesale — the difference is why the composer can
-* add a key without erasing the platform's own config defaults.
-*/
-function applyRowOverrides(composition, overrides = loadRowOverrides()) {
-	let lines = composition.split("\n");
-	for (const override of overrides) lines = applyOneOverride(lines, override);
-	return lines.join("\n");
-}
-function applyOneOverride(lines, override) {
-	const rowRe = new RegExp("^- id:\\s*" + override.row.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + "\\s*$");
-	let found = false;
-	for (let i = 0; i < lines.length; i += 1) {
-		if (!rowRe.test(lines[i] ?? "")) continue;
-		found = true;
-		let end = i;
-		let hasConfig = false;
-		for (let j = i + 1; j < lines.length; j += 1) {
-			const next = lines[j] ?? "";
-			if (next.trim() === "") break;
-			if (!/^\s/.test(next)) break;
-			if (new RegExp("^ {2}" + override.key + ":(\\s|$)").test(next)) hasConfig = true;
-			end = j;
-		}
-		if (hasConfig) continue;
-		lines.splice(end + 1, 0, ...override.lines);
-		i = end + override.lines.length;
-	}
-	if (!found) console.warn("evolution preset composition: warning — " + override.missingReason);
-	return lines;
-}
-/**
-* Row ids of a composition fragment (line scan, no YAML library).
-*
-* PLAN S5.9 (2026-09-16, audit P2-27): the id extraction accepts INDENTED
-* `- id:` rows too, so a collision hidden in a nested group is still caught —
-* the old `^- id:` anchored at column 0 and was blind to exactly the rows an
-* upstream group nesting would produce. Twin of `rowIds` in
-* `scripts/install-layered.mjs` (installer.spec pins detection parity).
-* Boundary (current, deliberate): DETECTION covers nested rows, while the
-* override INJECTION anchors (`applyOneOverride` below) still match top-level
-* rows only — the injection indent contract (`^ {2}key:`) is defined against a
-* column-0 row.
-*/
-function compositionRowIds(composition) {
-	const ids = /* @__PURE__ */ new Set();
-	for (const line of composition.split("\n")) {
-		const id = /^\s*- id:\s*(\S+)/.exec(line)?.[1];
-		if (id) ids.add(id);
-	}
-	return ids;
-}
-/** The platform package a DECLARATIVE preset row names (0.2.x replaced preset directories with it). */
-const AGENT_PRESET_PACKAGE = scopedPackageName("dsh-agent-preset", import.meta.url);
-/**
-* Compose the DECLARATIVE preset row from the platform base composition and the family delta.
-*
-* 0.2.x removed the directory mechanism: `dsh-agent-preset` is an ordinary composition row whose
-* `config.plugins` carries the preset's complete child plugin list
-* (`packages/preset/agent-preset/src/index.ts`, `agent-preset-registry/src/definition.ts` — the
-* definition has NO base/extends field, which is why the platform base is merged in here).
-*
-* The composition itself is {@link composePresetComposition}: same row-collision contract and the
-* same `row-overrides.json` injection, applied while the composed rows are still at column 0 — the
-* override anchors are defined against a column-0 `- id:` row, so the indentation that puts them
-* under `plugins:` must come last.
-* @param baseComposition - the platform base preset patch/composition rows.
-* @param deltaComposition - the family delta rows.
-* @param identity - row id, preset id, display fields and order.
-* @returns the row text, newline-terminated, ready to merge into a profile patch.
-*/
-/**
-* Drop the blank lines that merely separate block-sequence items, keeping the ones INSIDE a block
-* literal (`key: |` / `>`): there a blank line is part of the value, and filtering it flattened a
-* platform base preset's multi-paragraph prompt into one paragraph (G6 review, P1).
-* @param text - the composition rows.
-* @returns the rows with the separating blank lines removed.
-*/
-function denseBlockSequence(text) {
-	const out = [];
-	let scalarIndent = -1;
-	for (const line of text.split("\n")) {
-		const trimmed = line.trim();
-		const indent = line.length - line.trimStart().length;
-		if (scalarIndent >= 0 && trimmed !== "" && indent <= scalarIndent) scalarIndent = -1;
-		if (scalarIndent < 0) {
-			const match = /^(\s*)[\w".-]+:\s*[|>]/.exec(line);
-			if (match !== null) scalarIndent = (match[1] ?? "").length;
-		}
-		if (trimmed === "" && scalarIndent < 0) continue;
-		out.push(line);
-	}
-	return out.join("\n");
-}
-function composePresetRow(baseComposition, deltaComposition, identity) {
-	const plugins = denseBlockSequence(composePresetComposition(baseComposition, deltaComposition)).split("\n").map((line) => line === "" ? "" : "      " + line).join("\n");
-	return [
-		"- id: " + identity.rowId,
-		"  name: '" + AGENT_PRESET_PACKAGE + "'",
-		"  config:",
-		"    id: " + identity.id,
-		"    name: " + JSON.stringify(identity.name),
-		"    description: " + JSON.stringify(identity.description),
-		"    order: " + String(identity.order),
-		"    plugins:",
-		plugins,
-		""
-	].join("\n");
-}
-/** The patch-entry key that ADDS a row: a plain entry overrides the row with the same id, so a
-* preset the platform does not ship has to arrive inside an `insert` entry
-* (the platform's own `user-patches.spec.ts` proves the override-vs-insert split). */
-const PATCH_INSERT_KEY = "insert";
-/**
-* Wrap a composed row as the patch entry a profile patch needs.
-*
-* The row {@link composePresetRow} returns starts at column 0; a patch entry's list nests it four
-* spaces deeper. Wrapping is a separate step because the same row text is also what
-* {@link mergePresetRow} matches by id, and because the composer's override anchors are defined
-* against column-0 rows.
-* @param row - the row text, as {@link composePresetRow} returns it.
-* @returns the patch entry text, newline-terminated.
-*/
-function composePresetInsert(row) {
-	return `- ${PATCH_INSERT_KEY}:\n${row.replace(/\s+$/, "").split("\n").map((line) => "    " + line).join("\n")}\n`;
-}
-/**
-* The row list a platform base preset patch carries under `config.plugins`, dedented to column 0.
-*
-* A base preset arrives as a whole patch entry — `- insert:` / `- id: preset-standard` /
-* `config:` / `plugins:` — because that is how the platform ships it
-* (`packages/bundle/web-app/presets/standard.patch.yml`). The preset's own list is the
-* SHALLOWEST `plugins:` line: a child row may carry a key by that name far deeper.
-* @param patchText - the base preset patch file's text.
-* @returns the plugin rows, dedented and newline-terminated.
-* @throws {Error} when the patch carries no `plugins:` list.
-*/
-function basePresetPlugins(patchText) {
-	const lines = patchText.split("\n");
-	let at = -1;
-	let indent = Number.POSITIVE_INFINITY;
-	for (const [index, line] of lines.entries()) {
-		const width = /^(\s*)plugins:\s*$/.exec(line)?.[1]?.length;
-		if (width === void 0) continue;
-		if (width < indent) {
-			indent = width;
-			at = index;
-		}
-	}
-	if (at < 0) throw new Error("evolution preset composition: the base preset patch carries no `plugins:` list");
-	const block = [];
-	for (const line of lines.slice(at + 1)) {
-		if (line.trim() === "") {
-			block.push(line);
-			continue;
-		}
-		if (line.length - line.trimStart().length <= indent) break;
-		block.push(line);
-	}
-	while (block.length > 0 && block[block.length - 1]?.trim() === "") block.pop();
-	const widths = block.filter((line) => line.trim() !== "").map((line) => line.length - line.trimStart().length);
-	const dedent = widths.length === 0 ? 0 : Math.min(...widths);
-	return block.map((line) => line.slice(0, dedent).trim() === "" ? line.slice(dedent) : line).join("\n") + "\n";
-}
-/** The row id a family preset occupies: the platform ships \`preset-standard\` for id `standard`
-* (`packages/bundle/web-app/presets/standard.patch.yml`), so a family preset id mirrors it. */
-function presetRowId(id) {
-	return `preset-${id}`;
-}
-/**
-* The patch entry a profile patch receives for one preset: base rows plus the family delta, wrapped
-* as \`- insert:\`.
-*
-* The two halves are also exposed on their own — {@link composePresetRow} for the row, so
-* {@link mergePresetRow} can match it by id, and {@link basePresetPlugins} to read the platform
-* base out of a shipped patch.
-* @param basePatchText - the platform base preset patch's text.
-* @param deltaComposition - the family delta rows.
-* @param identity - row id, preset id, display fields and order.
-* @returns the patch entry text, newline-terminated.
-*/
-function composePresetEntry(basePatchText, deltaComposition, identity) {
-	return composePresetInsert(composePresetRow(basePresetPlugins(basePatchText), deltaComposition, identity));
-}
-/**
-* The text of one row's own patch item, or null when the patch carries no such row.
-*
-* The comparison unit for a freshness check: this is byte-for-byte what {@link composePresetEntry}
-* writes for the same row id, whether the row sits inside an \`- insert:\` entry (installer-written)
-* or at column 0 (saved by the Web editor).
-* @param patchText - the patch text.
-* @param rowId - the row id to read.
-* @returns the item's text, newline-terminated, or null.
-*/
-function presetRowBody(block) {
-	const lines = block.split("\n");
-	if (!/^- insert:\s*$/.test(lines[0] ?? "")) return block;
-	return lines.slice(1).map((line) => line.startsWith("    ") ? line.slice(4) : line).join("\n");
-}
-/**
-* The row BODY of a patch block, whichever form it is in.
-*
-* {@link presetRowBlock} returns the enclosing item verbatim: an installer-written row sits inside
-* `- insert:` while a row the platform's Web editor saved IS that column-0 item. A comparison must
-* compare like with like — comparing the raw block against `composePresetEntry()` (which always
-* starts with `- insert:`) reported DIFFERS for every editor-saved row, forever (G6 review, P2), and
-* the remedy it printed (`re-run the installer`) was refused by the `exists; use --force` guard.
-* @param block - a block as {@link presetRowBlock} returns it.
-* @returns the row text, `- insert:` unwrapped and its four-space indent stripped.
-*/
-function presetRowBlock(patchText, rowId) {
-	const lines = patchText.split("\n");
-	const span = rowBlockSpan(lines, rowId);
-	if (span === null) return null;
-	const block = [...lines.slice(span.start, span.end)];
-	while (block.length > 0 && (block[block.length - 1] ?? "").trim() === "") block.pop();
-	return block.join("\n") + "\n";
-}
-/** The package every shipped base preset patch declares its row with
-* (`packages/bundle/web-app/presets/standard.patch.yml`). The platform's only bundle carrying
-* preset patches today; a bundle a caller mounts is probed beside it. */
-const PLATFORM_BUNDLE_PACKAGE = "@deepseek-ai/dsh-web-app";
-/**
-* What `DSH_AGENT_PRESET_ROOT` must name: a directory holding the platform base preset patches
-* under their shipped file names (`<base>.patch.yml`) — e.g. a copy of a same-version platform
-* tree's `packages/bundle/web-app/presets/`. The desktop application is the shape that needs it:
-* its platform packages live inside `resources/app.asar`, so there is no plain
-* `node_modules/@deepseek-ai/dsh-web-app/presets/` on disk for a source installer to read.
-*/
-const AGENT_PRESET_ROOT_HINT = "point DSH_AGENT_PRESET_ROOT at a directory holding <base>.patch.yml (copy it out of a same-version dsh tree: packages/bundle/web-app/presets/)";
-/**
-* Resolve the platform patch file one `--base` names.
-*
-* 0.2.x ships each base preset as a bundle patch layer
-* (`packages/bundle/web-app/presets/<base>.patch.yml`, declared in that package's
-* `dsh.bundle.patch`), so the FILE — not a preset directory — is the base a family row is composed
-* from. Candidates, in order: an explicit `DSH_AGENT_PRESET_ROOT`; a module-graph probe when the
-* caller supplies one (a desktop/Electron host resolves the bundle inside `app.asar`, where no file
-* walk can reach); the target profile's own `node_modules`; then, walking up from the caller,
-* every `presets/` directory of a checkout's bundle packages, then every
-* `@deepseek-ai/dsh-<name>/presets/` directory of an installed tree.
-*
-* A base with no patch file is REFUSED with every probed candidate listed: composing a family preset
-* from another base's rows would mount rows the user did not ask for, with nothing saying so.
-* @param base - the base name, already validated against `evolution-agent/bases.json`.
-* @param sources - the roots to probe.
-* @returns the patch file's absolute path.
-* @throws {Error} when no candidate exists.
-*/
-function resolveBasePresetPatch(base, sources) {
-	const file = `${base}.patch.yml`;
-	const explicit = sources.root?.trim();
-	if (explicit !== void 0 && explicit !== "") {
-		const path = join(explicit, file);
-		if (!existsSync(path)) throw new Error(`evolution preset composition: DSH_AGENT_PRESET_ROOT is set but ${path} does not exist — ${AGENT_PRESET_ROOT_HINT}`);
-		return path;
-	}
-	const probes = [];
-	const probe = (path) => {
-		probes.push(path);
-		return existsSync(path) ? path : void 0;
-	};
-	if (sources.resolve !== void 0) {
-		const probeSpecifier = `${PLATFORM_BUNDLE_PACKAGE}/presets/${file}`;
-		try {
-			const found = probe(sources.resolve(probeSpecifier));
-			if (found !== void 0) return found;
-		} catch {
-			probes.push(`node module graph: ${probeSpecifier}`);
-		}
-	}
-	if (sources.profileDir !== void 0 && sources.profileDir !== "") for (const name of new Set([PLATFORM_BUNDLE_PACKAGE, ...sources.bundles ?? []])) {
-		const found = probe(join(sources.profileDir, "node_modules", ...name.split("/"), "presets", file));
-		if (found !== void 0) return found;
-	}
-	for (let level = sources.fromDir; level !== dirname(level); level = dirname(level)) {
-		const bundleRoot = join(level, "packages", "bundle");
-		for (const name of listDirectories(bundleRoot)) {
-			const found = probe(join(bundleRoot, name, "presets", file));
-			if (found !== void 0) return found;
-		}
-		const scopeRoot = join(level, "node_modules", "@deepseek-ai");
-		for (const name of listDirectories(scopeRoot)) {
-			if (!name.startsWith("dsh-")) continue;
-			const found = probe(join(scopeRoot, name, "presets", file));
-			if (found !== void 0) return found;
-		}
-	}
-	for (const root of installRoots(sources.fromDir)) for (const shape of DESKTOP_RESOURCE_SHAPES) {
-		const found = probe(join(root, ...shape, "dsh", "node_modules", "@deepseek-ai", "dsh-web-app", "presets", file));
-		if (found !== void 0) return found;
-		const scanned = probeDesktopScope(join(root, ...shape), file, probes);
-		if (scanned !== void 0) return scanned;
-	}
-	throw new Error(`evolution preset composition: cannot find the runtime platform '${base}' preset patch — no candidate carries presets/${file}. A base with no runtime patch is refused rather than composed from another base: the generated preset must follow the platform it runs on. Probed (in order): ${probes.join(", ")}. On a desktop install the platform packages live inside resources/app.asar and no plain file exists — ${AGENT_PRESET_ROOT_HINT}`);
-}
-/** The Electron resource layouts a desktop installation exposes its unpacked packages under. */
-const DESKTOP_RESOURCE_SHAPES = [["resources", "app.asar.unpacked"], [
-	"resources",
-	"app",
-	"resources",
-	"app.asar.unpacked"
-]];
-/**
-* Installation directories a desktop/Electron tree may sit at, probed before the source walk.
-*
-* The default Windows desktop location plus every ancestor that carries an
-* `resources/app.asar.unpacked` directory (a script run from inside an installation).
-* @param fromDir - the caller's own directory.
-* @returns the candidate installation roots.
-*/
-function installRoots(fromDir) {
-	const roots = [];
-	const localAppData = process.env.LOCALAPPDATA;
-	if (process.platform === "win32" && localAppData !== void 0 && localAppData !== "") roots.push(join(localAppData, "Programs", "DeepSeek Harness"));
-	for (let level = fromDir; level !== dirname(level); level = dirname(level)) if (existsSync(join(level, "resources", "app.asar.unpacked"))) roots.push(level);
-	return roots;
-}
-/**
-* Probe every `@deepseek-ai/dsh-*` package under one unpacked resource root.
-* @param resourceRoot - e.g. `<install>/resources/app.asar.unpacked`.
-* @param file - the patch file name to look for.
-* @param probes - the caller's probe log, appended to for the failure report.
-* @returns the patch path when one exists.
-*/
-function probeDesktopScope(resourceRoot, file, probes) {
-	const scopeRoot = join(resourceRoot, "dsh", "node_modules", "@deepseek-ai");
-	for (const name of listDirectories(scopeRoot)) {
-		if (!name.startsWith("dsh-")) continue;
-		const path = join(scopeRoot, name, "presets", file);
-		probes.push(path);
-		if (existsSync(path)) return path;
-	}
-}
-/**
-* Subdirectories of one directory, or none when it does not exist: a missing level is an ordinary
-* miss on a candidate walk, not a failure.
-* @param dir - the directory to list.
-* @returns the directory names.
-*/
-function listDirectories(dir) {
-	try {
-		return readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-	} catch {
-		return [];
-	}
-}
-/**
-* The block of one row id: the enclosing column-0 list item and the row's own first line.
-*
-* An installer-written row sits inside `- insert:` (four spaces deeper); a row the Web editor
-* saved is that column-0 item itself. Both must be replaced whole, so the span reaches back to the
-* enclosing item and forward to the next one.
-* @param lines - the patch text's lines.
-* @param rowId - the row id to locate.
-* @returns the span, or null when the patch carries no such row.
-*/
-function rowBlockSpan(lines, rowId) {
-	const rowRe = new RegExp("^\\s*- id:\\s*" + rowId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + "\\s*$");
-	const rowStart = lines.findIndex((line) => rowRe.test(line));
-	if (rowStart < 0) return null;
-	let start = rowStart;
-	while (start > 0 && !/^- /.test(lines[start] ?? "")) start -= 1;
-	let end = lines.length;
-	for (let index = start + 1; index < lines.length; index += 1) if (/^- /.test(lines[index] ?? "")) {
-		end = index;
-		break;
-	}
-	return {
-		start,
-		end,
-		rowStart
-	};
-}
-/**
-* Remove one row from a patch, taking its `- insert:` item with it when that item holds nothing
-* else (an empty insert entry is left-over structure the platform would keep parsing).
-* @param patchText - the patch text to edit.
-* @param rowId - the row id to remove.
-* @returns the patch text, newline-terminated; byte-identical when the id is absent.
-*/
-function removePresetRow(patchText, rowId) {
-	const lines = patchText.split("\n");
-	const span = rowBlockSpan(lines, rowId);
-	if (span === null) return patchText;
-	const rowLine = lines[span.rowStart] ?? "";
-	const rowIndent = rowLine.length - rowLine.trimStart().length;
-	const nested = rowIndent > 0;
-	const siblings = lines.slice(span.start + 1, span.end).filter((line) => {
-		return line.length - line.trimStart().length === rowIndent && line.trimStart().startsWith("- ");
-	}).length;
-	const cut = nested && siblings > 1 ? {
-		start: span.rowStart,
-		end: rowSiblingEnd(lines, span.rowStart, span.end)
-	} : span;
-	const kept = [...lines.slice(0, cut.start), ...lines.slice(cut.end)];
-	while (kept.length > 1 && (kept[kept.length - 1] ?? "") === "") kept.pop();
-	const text = kept.join("\n");
-	if (text === "") return "";
-	return text.endsWith("\n") ? text : text + "\n";
-}
-/**
-* The end of one nested row's own block inside a patch entry.
-* @param lines - the patch text's lines.
-* @param rowStart - the row's `- id:` line.
-* @param itemEnd - the enclosing item's end.
-* @returns the index of the next sibling row, or the item's end.
-*/
-function rowSiblingEnd(lines, rowStart, itemEnd) {
-	const indent = (lines[rowStart] ?? "").length - (lines[rowStart] ?? "").trimStart().length;
-	for (let index = rowStart + 1; index < itemEnd; index += 1) {
-		const line = lines[index] ?? "";
-		if (line.trim() === "") continue;
-		const width = line.length - line.trimStart().length;
-		if (width === indent && line.trimStart().startsWith("- ")) return index;
-		if (width < indent) return index;
-	}
-	return itemEnd;
-}
-/**
-* Merge one generated row into a composition (a profile patch) by row id.
-*
-* Idempotent by construction: an existing row with the same `- id:` is REPLACED whole — its block
-* is the enclosing column-0 list item, so an installer-written row inside `- insert:` and a
-* Web-editor-saved row at column 0 are both matched by {@link rowBlockSpan} — and anything else in
-* the patch stays byte-identical, because the patch usually carries rows this installer knows
-* nothing about. A missing row is appended.
-*
-* The platform seeds a fresh profile patch with the empty list `[]`
-* (`packages/boot/app-boot/src/profile.ts`, `PROFILE_PATCH_FILENAME`), which is a COMPLETE YAML
-* document: a block sequence appended after it is not parsable. That seed is therefore replaced, not
-* extended.
-* @param patchText - the current patch text (`''` for a fresh one).
-* @param row - the row text, as {@link composePresetRow} returns it.
-* @param rowId - the row id to replace or append.
-* @returns the merged patch text, newline-terminated.
-*/
-function mergePresetRow(patchText, row, rowId) {
-	const lines = patchText.split("\n");
-	const block = row.replace(/\s+$/, "").split("\n");
-	const span = rowBlockSpan(lines, rowId);
-	if (span === null) {
-		const seedIndex = lines.findIndex((line) => EMPTY_PATCH_SEED_RE.test(line));
-		const kept = trimTrailingBlankLines(seedIndex >= 0 ? [...lines.slice(0, seedIndex), ...lines.slice(seedIndex + 1)] : [...lines]);
-		return (kept.length === 0 ? block : [...kept, ...block]).join("\n") + "\n";
-	}
-	return trimTrailingBlankLines([
-		...lines.slice(0, span.start),
-		...block,
-		...lines.slice(span.end)
-	]).join("\n") + "\n";
-}
-/** The empty patch list the platform seeds a profile patch with; see {@link mergePresetRow}. */
-const EMPTY_PATCH_SEED = "[]";
-/** The seed in any spelling the platform accepts (`[]`, `[ ]`, `[] # empty`). */
-const EMPTY_PATCH_SEED_RE = /^\s*\[\s*\](\s*#.*)?\s*$/;
-/** Drop trailing blank lines only: a kept line's own terminator (a CRLF file's `\r`) is never touched. */
-function trimTrailingBlankLines(lines) {
-	const out = [...lines];
-	while (out.length > 0 && (out[out.length - 1] ?? "").trim() === "") out.pop();
-	return out;
-}
-/**
-* The text to write when a patch is left with no entries.
-*
-* A zero-byte patch file is not what the platform writes or parses; its own seed is the empty list.
-* @param patchText - the text {@link removePresetRow} returned.
-* @returns the platform's empty-list seed when nothing is left, the text otherwise.
-*/
-function presetPatchText(patchText) {
-	return patchText.trim() === "" ? `[]\n` : patchText;
-}
-//#endregion
 //#region lib/types/prompts.js
 /**
 * Review and curation prompts adapted from Hermes Agent
@@ -6835,7 +6005,7 @@ function renderLongRunTable() {
 /**
 * Every platform service the family reaches for with `ctx.get`, and what degrades without it.
 *
-* O-2 (v46 audit): the family probes 28 platform services optionally — the platform has no
+* O-2 (v46 audit): the family probes 25 platform services optionally — the platform has no
 * formalized "optional dependency", so an ABSENT service is a silent downgrade and the diagnostic
 * surface is the only place a reader can learn about it. `/evolution doctor` used to judge six of
 * them; this table is the single source it judges the rest from, and the arch guard cross-checks it
@@ -6845,7 +6015,7 @@ function renderLongRunTable() {
 * `client` probes run in the browser half, where the host has no view of the seats.
 * @module @lmzhen/dsh-evolution-core
 */
-/** The 28 probes, in service-name order (the guard checks this list against the tree). */
+/** The 25 probes, in service-name order (the guard checks this list against the tree). */
 const PLATFORM_SERVICE_PROBES = Object.freeze([
 	{
 		service: "agents",
@@ -6962,11 +6132,6 @@ const PLATFORM_SERVICE_PROBES = Object.freeze([
 		feature: "the storage-domain state provider",
 		side: "host"
 	},
-	{
-		service: "subagents",
-		feature: "spawning review and maintenance subagents",
-		side: "host"
-	},
 	{
 		service: "systemPrompt",
 		feature: "the protected-skills prompt variable",
@@ -6976,11 +6141,6 @@ const PLATFORM_SERVICE_PROBES = Object.freeze([
 		service: "tools",
 		feature: "tool registration and the guard seam",
 		side: "host"
-	},
-	{
-		service: "webServer",
-		feature: "the skill-history panel routes",
-		side: "host"
 	}
 ]);
 /**
@@ -7367,6 +6527,15 @@ const DISPATCH_EVENT_TYPES = [
 	PTC_DISPATCH_EVENT
 ];
 /**
+* Model-visible session frames: the message types plus the ONE dispatch vocabulary above.
+* Consumers classify through this list instead of naming event literals (rule N11).
+*/
+const MODEL_SESSION_EVENT_TYPES = [
+	"user/message",
+	"assistant/message",
+	...DISPATCH_EVENT_TYPES
+];
+/**
 * \`TypeError\` thrown when a payload that claims to be a dispatch event
 * violates the platform's event declaration. Named so a deployment can tell this
 * refusal apart from a generic failure in a log line.
@@ -14704,4 +13873,51 @@ function foldUntrustedLines(text, limit) {
 	return limit > 0 ? marked.slice(0, limit) : marked;
 }
 //#endregion
-export { AGENT_PRESET_PACKAGE, AGENT_PRESET_ROOT_HINT, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_PATCH_SEED, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, absentHostServices, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, basePresetPlugins, blobPath, bodyCost, buildCuratorRunReport, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, clearReviewChannel, collectReadSkillNames, composePresetComposition, composePresetEntry, composePresetInsert, composePresetRow, compositionRowIds, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, daysSinceIso, declaredReportStamp, denseBlockSequence, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isLandmark, isLoopbackRequest, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listDirectories, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, mergePresetRow, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, neutralizePromptVariables, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, policyStageLimits, presetPatchText, presetRowBlock, presetRowBody, presetRowId, probeAbsent, probeDesktopScope, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, protectedSkillNamesOf, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonBody, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, relatedSkillNames, releaseInstance, removePresetRow, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveBasePresetPatch, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, rowBlockSpan, rowSiblingEnd, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, supportFileReadOf, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, trimTrailingBlankLines, unhookedSupportPointers, unitMembersAreComplete, unwrapLive, updateSuppressedNames, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, writeDurableTmp, writeJson, writePathSymbols, yamlPlainScalarNeedsQuotes };
+//#region lib/types/diagnostics.js
+const DIAGNOSTICS_VIEW_SCHEMA_VERSION = 2;
+const DIAGNOSTICS_FACT_KEYS = [
+	"platform-line",
+	"family-version",
+	"install-form",
+	"preset-ids",
+	"readonly-contract",
+	"upgrade-order",
+	"fallback-map"
+];
+const DIAGNOSTICS_RUNTIME_KEYS = [
+	"subagent-channel",
+	"restricted-preset",
+	"host-surface",
+	"session-fold",
+	"platform-services",
+	"runs",
+	"platform-pairing",
+	"install-form-detected"
+];
+//#endregion
+//#region lib/types/platform-line.generated.js
+/** The frozen platform line this release targets (peers/engines/anchors derived from version+floor). */
+const PLATFORM_LINE = {
+	version: "0.2.1-rc.2",
+	floor: "0.2.1-rc.1",
+	previousAnchor: "0.2.0-rc.2",
+	peersRange: "^0.2.1-rc.1",
+	enginesRange: ">=0.2.1-rc.1 <0.2.2-0",
+	upstreamRef: "dsh-v0.2.1-rc.2"
+};
+//#endregion
+//#region lib/types/session-fold.js
+/** Frames the model authored/saw (the only frames evidence, reads and usage accounting may consume). */
+const MODEL_EVENT_TYPES = new Set(MODEL_SESSION_EVENT_TYPES);
+/** Classify one session event WITHOUT interpreting it (pure). */
+function classifySessionEvent(event) {
+	const type = typeof event.type === "string" ? event.type : "";
+	if (type.startsWith("plugin:")) return event.ignorable === true ? "plugin-record" : "unknown";
+	return MODEL_EVENT_TYPES.has(type) ? "model" : "unknown";
+}
+/** True when the event must be skipped by evidence/usage readers (tolerant, never fatal). */
+function isIgnorableEvent(event) {
+	return classifySessionEvent(event) !== "model";
+}
+//#endregion
+export { AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DIAGNOSTICS_FACT_KEYS, DIAGNOSTICS_RUNTIME_KEYS, DIAGNOSTICS_VIEW_SCHEMA_VERSION, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_PRESET_IDS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, HOST_ROUTES, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAINER_PRESET_ID, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MODEL_SESSION_EVENT_TYPES as MODEL_SESSION_EVENTS, MODEL_SESSION_EVENT_TYPES, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_LINE, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRICTED_PRESET_DISPLAY, RESTRICTED_TOOLS_ROW_ID, RESTRICTOR_MODULE, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, REVIEWER_PRESET_ID, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, VERSION_SUMMARY_MAX_CHARS, absentHostServices, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, blobPath, bodyCost, buildCuratorRunReport, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, classifySessionEvent, clearReviewChannel, collectReadSkillNames, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, createSubagentChannel, daysSinceIso, declaredReportStamp, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, hostSurface, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isIgnorableEvent, isLandmark, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, json, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, methodNotAllowed, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, policyStageLimits, probeAbsent, probeChannelState, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, protectedSkillNamesOf, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonObject, readNumberParam, readParam, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, registerHostRoutes, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, subagentChannelState, supportFileReadOf, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, trimPatternBoundaries, unhookedSupportPointers, unitMembersAreComplete, unwrapLive, updateSuppressedNames, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, writeDurableTmp, writePathSymbols, yamlPlainScalarNeedsQuotes };