@lmzhen/dsh-evolution-core 0.3.19 → 0.3.21

package/lib/index.js

@@ -52,6 +52,49 @@ function evolutionIoAdapter(provider) {
 		}
 	};
 }
+/**
+* F-367 (②): lock paths whose release (the finally `rm`) failed. The next write
+* to the same file proactively recycles our own leftover lock — the holder is
+* us, so a leftover is stale by definition. Module-level by design: it must
+* survive across `nodeEvolutionIo()` instances for the self-heal to be
+* effective. (Not a pure function — the cross-call state is the intent.)
+*/
+const pendingSelfCleanup = /* @__PURE__ */ new Set();
+/**
+* Retry a rename that a peer is temporarily holding on Windows (EPERM/EBUSY):
+* a short 50ms backoff, at most 3 retries (~150ms budget), matching the
+* write-lock cadence. A non-transient code surfaces immediately. `fn` is the
+* rename primitive, injectable for deterministic tests.
+*
+* @param tmp - the source path to rename.
+* @param target - the destination path.
+* @param fn - the rename primitive (defaults to `node:fs/promises.rename`).
+* @returns a promise that resolves once the rename succeeds.
+*/
+async function renameWithRetry(tmp, target, fn = rename) {
+	for (let retry = 0;; retry += 1) try {
+		await fn(tmp, target);
+		return;
+	} catch (error) {
+		const code = error?.code;
+		if (code !== "EPERM" && code !== "EBUSY") throw error;
+		if (retry >= 3) throw error;
+		await new Promise((resolve) => setTimeout(resolve, 50));
+	}
+}
+/**
+* F-366: commit a freshly-written tmp to its target inside the write lock. On a
+* still-failing rename the tmp is deleted immediately rather than left for the
+* (1h + dead-pid) sweep, so a live writer never leaks a tmp it abandoned.
+*/
+async function commitTmp(tmp, target) {
+	try {
+		await renameWithRetry(tmp, target);
+	} catch (error) {
+		await rm(tmp, { force: true }).catch(() => {});
+		throw error;
+	}
+}
 function nodeEvolutionIo() {
 	const isMissing = (error) => {
 		const code = error?.code;
@@ -84,6 +127,13 @@ function nodeEvolutionIo() {
 	* retry budget (budget >= 2 x threshold), so a dead holder's lock is
 	* actually recoverable within one budget instead of being arithmetically
 	* unreachable.
+	* 0.3.21 (F-101): takeover re-reads the lock right before removing it and
+	* only removes it when the content still names the dead pid — a peer that
+	* acquired the lock after our stale probe wrote its own pid, and deleting a
+	* LIVE lock is the double-hold (concurrent task) the probe must prevent.
+	* 0.3.21 (F-367): a self-pid lock is this process's own leftover (a failed
+	* release or a crash) and is recycled immediately regardless of age; a
+	* failure to release in finally is recorded so the next write self-heals.
 	*/
 	const withWriteLock = async (path, task) => {
 		const lock = `${path}.lock`;
@@ -95,14 +145,23 @@ function nodeEvolutionIo() {
 				if (code !== "EEXIST" && code !== "EPERM") throw error;
 				try {
 					const st = await stat(lock);
-					if (Date.now() - st.mtimeMs > 1e3) {
-						const holder = Number(await readFile(lock, "utf8").catch(() => ""));
-						if (!(Number.isInteger(holder) && holder > 0 && isAlive(holder))) {
+					const holderContent = await readFile(lock, "utf8").catch(() => "");
+					const holder = Number(holderContent);
+					const holderAlive = Number.isInteger(holder) && holder > 0 && isAlive(holder);
+					if (holder === process.pid && (pendingSelfCleanup.has(lock) || Date.now() - st.mtimeMs > 1e3)) {
+						if (await readFile(lock, "utf8").catch(() => "") === holderContent) {
 							try {
 								await rm(lock, { force: true });
 							} catch {}
-							continue;
+							pendingSelfCleanup.delete(lock);
 						}
+						continue;
+					}
+					if (Date.now() - st.mtimeMs > 1e3 && !holderAlive) {
+						if (await readFile(lock, "utf8").catch(() => "") === holderContent) try {
+							await rm(lock, { force: true });
+						} catch {}
+						continue;
 					}
 				} catch {
 					continue;
@@ -113,7 +172,9 @@ function nodeEvolutionIo() {
 			try {
 				return await task();
 			} finally {
-				await rm(lock, { force: true }).catch(() => {});
+				await rm(lock, { force: true }).catch(() => {
+					pendingSelfCleanup.add(lock);
+				});
 			}
 		}
 		throw new Error(`could not acquire write lock for ${path} after 40 attempts`);
@@ -139,7 +200,7 @@ function nodeEvolutionIo() {
 			try {
 				const st = await stat(tmpPath);
 				const deadHolder = !Number.isInteger(holder) || holder <= 0 || !isAlive(holder);
-				if (Date.now() - st.mtimeMs > 36e5 && deadHolder) await rm(tmpPath, { force: true });
+				if (holder === process.pid || Date.now() - st.mtimeMs > 36e5 && deadHolder) await rm(tmpPath, { force: true });
 			} catch {}
 		}
 	};
@@ -158,7 +219,7 @@ function nodeEvolutionIo() {
 				await sweepStaleTmps(path);
 				const tmp = `${path}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
 				await writeFile(tmp, content, "utf8");
-				await rename(tmp, path);
+				await commitTmp(tmp, path);
 			});
 		},
 		async transact(path, task) {
@@ -179,7 +240,7 @@ function nodeEvolutionIo() {
 				}
 				const tmp = `${path}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
 				await writeFile(tmp, next, "utf8");
-				await rename(tmp, path);
+				await commitTmp(tmp, path);
 			});
 		},
 		async remove(path) {
@@ -4400,4 +4461,4 @@ function evolutionHome(env = process.env) {
 	return join(env.DSH_HOME || join(homedir(), ".dsh"), "evolution");
 }
 //#endregion
-export { AUTHORING_DESCRIPTION_BAR, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_USER_CHAR_LIMIT, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, LOW_QUALITY_THRESHOLD, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, QUALITY_WEIGHTS, RESTRUCTURE_TARGET_RE, SKILLS_GUIDANCE, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, advanceReview, appendEvolutionEvent, applyCuratorFields, applyCuratorLifecycleFields, applyCuratorMetaFields, assessStructureHealth, authoringFeedback, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpUse, bumpView, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, createGateSet, duplicateHeadings, emptyRecord, evaluateThreat, eventsFile, evolutionHome, evolutionIoAdapter, findDriftSignal, foldCuratorFields, foldTurn, frontmatterBlock, frontmatterYamlUnsafeValues, getRecord, latestActivityAt, lifecycleCandidate, listEventArchives, loadMutations, loadSuppressedNames, loadUsage, makeSerialQueue, markAgentCreated, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, observeEvent, overlongLines, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, readEvolutionEvents, readEvolutionTimeline, recordMutation, redactSecrets, relatedSkillNames, renderCuratorReportMarkdown, resolveOrigins, resolveSkillsRoot, retainEventArchives, reviewPrompt, saveSuppressedNames, saveUsage, scanContentThreats, scanMemoryThreats, scanThreats, skillsRoot, suppressedFile, transactIo, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, verifyPromptBundle, yamlPlainScalarNeedsQuotes };
+export { AUTHORING_DESCRIPTION_BAR, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_USER_CHAR_LIMIT, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, LOW_QUALITY_THRESHOLD, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, QUALITY_WEIGHTS, RESTRUCTURE_TARGET_RE, SKILLS_GUIDANCE, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, advanceReview, appendEvolutionEvent, applyCuratorFields, applyCuratorLifecycleFields, applyCuratorMetaFields, assessStructureHealth, authoringFeedback, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpUse, bumpView, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, createGateSet, duplicateHeadings, emptyRecord, evaluateThreat, eventsFile, evolutionHome, evolutionIoAdapter, findDriftSignal, foldCuratorFields, foldTurn, frontmatterBlock, frontmatterYamlUnsafeValues, getRecord, latestActivityAt, lifecycleCandidate, listEventArchives, loadMutations, loadSuppressedNames, loadUsage, makeSerialQueue, markAgentCreated, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, observeEvent, overlongLines, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, readEvolutionEvents, readEvolutionTimeline, recordMutation, redactSecrets, relatedSkillNames, renameWithRetry, renderCuratorReportMarkdown, resolveOrigins, resolveSkillsRoot, retainEventArchives, reviewPrompt, saveSuppressedNames, saveUsage, scanContentThreats, scanMemoryThreats, scanThreats, skillsRoot, suppressedFile, transactIo, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, verifyPromptBundle, yamlPlainScalarNeedsQuotes };

package/lib/types/constants.d.ts

@@ -17,7 +17,7 @@
  * Package-private tunables (used by exactly one package) stay in that package,
  * not here — see evolution-replay's `DEFAULT_WEIGHTS` and evolution-feedback's
  * threshold, which are intentionally left where they are used.
- * @module @deepseek-ai/dsh-evolution-core
+ * @module @lmzhen/dsh-evolution-core
  */
 /** Skill frontmatter `name` validated for the file name (lowercase + hyphen). */
 export declare const SKILL_NAME_RE: RegExp;

package/lib/types/gates.d.ts

@@ -9,7 +9,7 @@
  * protections (pinned / bundled / hub-installed) are file markers resolved by
  * `SkillLibrary.writeProtection` / `deleteProtection` — they depend on the
  * filesystem and the write origin, not on a name list.
- * @module @deepseek-ai/dsh-evolution-core
+ * @module @lmzhen/dsh-evolution-core
  */
 export type GateReason = 'excluded' | 'referenced' | 'suppressed' | 'protected-builtin';
 export interface GateSetInputs {

package/lib/types/index.d.ts

@@ -5,7 +5,7 @@
  * types, and session-event augmentations. This package owns no Cordis plugin
  * entry of its own; consumers import named exports from the package root so
  * published npm bundles never depend on source subpaths.
- * @module @deepseek-ai/dsh-evolution-core
+ * @module @lmzhen/dsh-evolution-core
  */
 export * from './curator.ts';
 export * from './evolution-events.ts';

package/lib/types/io.d.ts

@@ -53,5 +53,17 @@ export interface EvolutionIoLike {
 export declare function transactIo(io: EvolutionIoLike, path: string, task: (current: string | null) => string | null | Promise<string | null>): Promise<void>;
 /** Lazy adapter over an IO provider registry, shared by every evolution consumer. */
 export declare function evolutionIoAdapter(provider: () => EvolutionIoLike): EvolutionIoLike;
+/**
+ * Retry a rename that a peer is temporarily holding on Windows (EPERM/EBUSY):
+ * a short 50ms backoff, at most 3 retries (~150ms budget), matching the
+ * write-lock cadence. A non-transient code surfaces immediately. `fn` is the
+ * rename primitive, injectable for deterministic tests.
+ *
+ * @param tmp - the source path to rename.
+ * @param target - the destination path.
+ * @param fn - the rename primitive (defaults to `node:fs/promises.rename`).
+ * @returns a promise that resolves once the rename succeeds.
+ */
+export declare function renameWithRetry(tmp: string, target: string, fn?: (from: string, to: string) => Promise<void>): Promise<void>;
 export declare function nodeEvolutionIo(): EvolutionIoLike;
 //# sourceMappingURL=io.d.ts.map

package/lib/types/mutations.d.ts

@@ -2,7 +2,7 @@
  * Curator/author audit trail: `.mutations.json` records every skill mutation
  * with before/after content hashes so any automated edit is reviewable and
  * replayable. Best-effort persistence, mirroring the usage sidecar posture.
- * @module @deepseek-ai/dsh-evolution-core
+ * @module @lmzhen/dsh-evolution-core
  */
 import { type EvolutionIoLike } from './io.ts';
 export interface MutationRecord {

package/lib/types/quality.d.ts

@@ -7,7 +7,7 @@
  * mutation maturity is a documented DSH approximation (single per-month patch
  * trend ratio replaces the claw timestamp-trend formula, since DSH usage
  * records only carry the last patched timestamp).
- * @module @deepseek-ai/dsh-evolution-core
+ * @module @lmzhen/dsh-evolution-core
  */
 import type { UsageMap } from './usage.ts';
 export interface QualityFactors {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.3.19",
+  "version": "0.3.21",
   "publishConfig": {
     "access": "public"
   },
@@ -25,10 +25,8 @@
     "./package.json": "./package.json"
   },
   "files": [
-    "lib/index.js",
-    "lib/invariant.js",
-    "lib/types/**/*.d.ts",
-    "lib/types/invariant.d.ts"
+    "lib/*.js",
+    "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
   "dependencies": {