@lmzhen/dsh-evolution-core 0.3.46 → 0.3.48

package/lib/index.js

@@ -858,8 +858,9 @@ function parseCuratorNominations(text) {
 * view so the two can never disagree: records failing ANY of these gates are
 * outside the managed scope.
 */
-function lifecycleCandidate(name, record, config, bundled, gates = createGateSet(config)) {
+function lifecycleCandidate(name, record, config, bundled, gates = createGateSet(config), protectedNames) {
 	if (record.pinned) return false;
+	if (protectedNames?.has(name) === true) return false;
 	if (gates.isBlocked(name)) return false;
 	if (!(record.created_by === "agent" || config.manageUnmanaged === true) && !(config.pruneBuiltins === true && bundled)) return false;
 	if (record.state === "archived") return false;
@@ -887,7 +888,7 @@ function computeScopeView(usage, config, protectedNames, gates) {
 		const suppressed = gateSet.suppressed.has(name);
 		const isBuiltin = PROTECTED_BUILTIN_SKILLS.has(name);
 		if (record.pinned || bundled || suppressed || protectedNames?.has(name) === true || isBuiltin) protectedSet.add(name);
-		if (lifecycleCandidate(name, record, config, bundled, gateSet)) {
+		if (lifecycleCandidate(name, record, config, bundled, gateSet, protectedNames)) {
 			managed.push(name);
 			if (record.state === "stale" || record.quality_warn === true) watched.push(name);
 			if (record.quality_warn === true) qualityWarned.push(name);
@@ -904,7 +905,7 @@ function computeScopeView(usage, config, protectedNames, gates) {
 function daysSince(iso, created, now) {
 	return (now - new Date(iso ?? created).getTime()) / 864e5;
 }
-function computeLifecycleTransitions(usage, config, now = /* @__PURE__ */ new Date(), gates) {
+function computeLifecycleTransitions(usage, config, now = /* @__PURE__ */ new Date(), gates, protectedNames) {
 	const result = {
 		transitions: [],
 		archive: [],
@@ -913,7 +914,7 @@ function computeLifecycleTransitions(usage, config, now = /* @__PURE__ */ new Da
 	};
 	const gateSet = gates ?? createGateSet(config);
 	for (const [name, record] of usage) {
-		if (!lifecycleCandidate(name, record, config, config.bundledNames?.has(name) === true, gateSet)) continue;
+		if (!lifecycleCandidate(name, record, config, config.bundledNames?.has(name) === true, gateSet, protectedNames)) continue;
 		const age = daysSince(null, record.created_at, now.getTime());
 		if (record.use_count === 0 && age < config.staleAfterDays) continue;
 		const idle = daysSince(latestActivityAt(record), record.created_at, now.getTime());
@@ -1770,19 +1771,19 @@ const PATTERNS = [
 		label: "exfil_curl",
 		category: "exfiltration",
 		scope: "all",
-		regex: /curl\s+[^\n]{0,512}\$\{?\w*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|API)/i
+		regex: /\bcurl\s+[^\n]{0,512}\$\{?\w*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|API)/i
 	},
 	{
 		label: "exfil_wget",
 		category: "exfiltration",
 		scope: "all",
-		regex: /wget\s+[^\n]{0,512}\$\{?\w*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|API)/i
+		regex: /\bwget\s+[^\n]{0,512}\$\{?\w*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL|API)/i
 	},
 	{
 		label: "read_secrets",
 		category: "exfiltration",
 		scope: "all",
-		regex: /cat\s+[^\n]{0,512}(?:\.env|credentials|\.netrc|\.pgpass|\.npmrc|\.pypirc)/i
+		regex: /\bcat\s+[^\n]{0,512}(?:\.env|credentials|\.netrc|\.pgpass|\.npmrc|\.pypirc)/i
 	},
 	{
 		label: "ssh_backdoor",
@@ -2158,7 +2159,7 @@ var MemoryStore = class {
 			},
 			write: null
 		};
-		if (hasEntryDelimiter(content)) return {
+		if (hasEntryDelimiter(this.addDatePrefix ? `## ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}\n${content}` : content)) return {
 			result: {
 				ok: false,
 				message: "Fact contains the entry delimiter (§) and would split into multiple entries; rewrite it as separate facts.",
@@ -2273,7 +2274,8 @@ var MemoryStore = class {
 					},
 					write: null
 				};
-				if (hasEntryDelimiter(body)) return {
+				const entryBody = this.addDatePrefix ? `## ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}\n${body}` : body;
+				if (hasEntryDelimiter(entryBody)) return {
 					result: {
 						ok: false,
 						message: `Operation ${position} (add): Fact contains the entry delimiter (§) and would split into multiple entries; rewrite it as separate facts.${previewEntries(entries)}`,
@@ -2283,7 +2285,7 @@ var MemoryStore = class {
 					},
 					write: null
 				};
-				if (!working.some((entry) => stripDatePrefix(entry) === body)) working.push(this.addDatePrefix ? `## ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}\n${body}` : body);
+				if (!working.some((entry) => stripDatePrefix(entry) === body)) working.push(entryBody);
 				continue;
 			}
 			const rawAction = op.action;
@@ -2695,7 +2697,7 @@ function computePrefixClusters(names) {
 * Migrated from `evolution-review` so both channels share one implementation.
 */
 const SECRET_PATTERNS = [
-	["openai-style key", /sk-[A-Za-z0-9_-]{16,}/g],
+	["openai-style key", /\bsk-[A-Za-z0-9_-]{16,}/g],
 	["aws access key", /AKIA[0-9A-Z]{16}/g],
 	["github token", /gh[pousr]_[A-Za-z0-9]{20,}/g],
 	["gitlab token", /glpat-[A-Za-z0-9_-]{16,}/g],
@@ -3042,8 +3044,13 @@ const DEFAULT_SKILL_LIMITS = {
 };
 /** Upper bound of moves per restructure proposal (validator and core agree). */
 const MAX_RESTRUCTURE_MOVES = 5;
-/** Restructure targets are plain markdown files under references/ — no subdirectories, no other support kind. */
-const RESTRUCTURE_TARGET_RE = /^references\/[a-z0-9][a-z0-9._-]*\.md$/;
+/** Restructure targets are plain markdown files under references/ — no
+* subdirectories, no other support kind. V8-10 (0.3.47): the regex-level
+* `(?!.*\.\.)` keeps the restructure-created set EXACTLY the set
+* validateSupportPath can reopen — a `references/my..notes.md` target (double
+* dots) used to pass here while every later patch/write/remove on it was
+* refused as traversal (an orphan file the user could not touch). */
+const RESTRUCTURE_TARGET_RE = /^references\/[a-z0-9](?!.*\.\.)[a-z0-9._-]*\.md$/;
 /** Extra file name carried inside a snapshot's `extras/` directory. */
 const SNAPSHOT_EXTRA_NAME_RE = /^[a-z0-9][a-z0-9._-]*$/;
 function skillsRoot(env = process.env) {
@@ -4845,11 +4852,14 @@ var SkillLibrary = class {
 */
 /**
 * DSH home root: `$DSH_HOME` or `~/.dsh`. Single source of the empty-string
-* fallback (`||`, not `??`) — an EMPTY DSH_HOME resolves to the default home,
-* never to a CWD-relative path (0.3.19 W1.3, 0.3.22 F-207).
+* fallback — an EMPTY or WHITESPACE-ONLY DSH_HOME resolves to the default
+* home, never to a CWD-relative path (0.3.19 W1.3, 0.3.22 F-207);
+* V8-06 (0.3.47) extends the guard to whitespace (upstream home-paths:
+* `trim().length > 0` is the adoption test — `DSH_HOME=" "` must not produce
+* a sidecar under a relative "." path).
 */
 function evolutionRoot(env = process.env) {
-	return env.DSH_HOME || join(homedir(), ".dsh");
+	return env.DSH_HOME?.trim() ? env.DSH_HOME : join(homedir(), ".dsh");
 }
 /** Evolution home path helper: `$DSH_HOME/evolution` for plugin-owned sidecar
 * state (reports, activity store, feedback file, state-domain data). */

package/lib/types/curator.d.ts

@@ -117,7 +117,7 @@ export declare function parseCuratorNominations(text: string): CuratorNomination
  * view so the two can never disagree: records failing ANY of these gates are
  * outside the managed scope.
  */
-export declare function lifecycleCandidate(name: string, record: UsageRecord, config: CuratorConfig, bundled: boolean, gates?: EvolutionGateSet): boolean;
+export declare function lifecycleCandidate(name: string, record: UsageRecord, config: CuratorConfig, bundled: boolean, gates?: EvolutionGateSet, protectedNames?: ReadonlyMap<string, string>): boolean;
 export interface ScopeView {
     /** Skills inside the lifecycle scope right now (candidate gate + active state). */
     managed: string[];
@@ -137,5 +137,5 @@ export interface ScopeView {
  * records lack (bundled / hub-installed / pinned from `SkillLibrary.list()`).
  */
 export declare function computeScopeView(usage: UsageMap, config: CuratorConfig, protectedNames?: ReadonlyMap<string, string>, gates?: EvolutionGateSet): ScopeView;
-export declare function computeLifecycleTransitions(usage: UsageMap, config: CuratorConfig, now?: Date, gates?: EvolutionGateSet): CuratorResult;
+export declare function computeLifecycleTransitions(usage: UsageMap, config: CuratorConfig, now?: Date, gates?: EvolutionGateSet, protectedNames?: ReadonlyMap<string, string>): CuratorResult;
 //# sourceMappingURL=curator.d.ts.map

package/lib/types/skill-store.d.ts

@@ -50,7 +50,12 @@ export interface SkillRestructureMove {
 }
 /** Upper bound of moves per restructure proposal (validator and core agree). */
 export declare const MAX_RESTRUCTURE_MOVES = 5;
-/** Restructure targets are plain markdown files under references/ — no subdirectories, no other support kind. */
+/** Restructure targets are plain markdown files under references/ — no
+ * subdirectories, no other support kind. V8-10 (0.3.47): the regex-level
+ * `(?!.*\.\.)` keeps the restructure-created set EXACTLY the set
+ * validateSupportPath can reopen — a `references/my..notes.md` target (double
+ * dots) used to pass here while every later patch/write/remove on it was
+ * refused as traversal (an orphan file the user could not touch). */
 export declare const RESTRUCTURE_TARGET_RE: RegExp;
 /** Extra file name carried inside a snapshot's `extras/` directory. */
 export declare const SNAPSHOT_EXTRA_NAME_RE: RegExp;

package/lib/types/state-store.d.ts

@@ -4,8 +4,11 @@
  */
 /**
  * DSH home root: `$DSH_HOME` or `~/.dsh`. Single source of the empty-string
- * fallback (`||`, not `??`) — an EMPTY DSH_HOME resolves to the default home,
- * never to a CWD-relative path (0.3.19 W1.3, 0.3.22 F-207).
+ * fallback — an EMPTY or WHITESPACE-ONLY DSH_HOME resolves to the default
+ * home, never to a CWD-relative path (0.3.19 W1.3, 0.3.22 F-207);
+ * V8-06 (0.3.47) extends the guard to whitespace (upstream home-paths:
+ * `trim().length > 0` is the adoption test — `DSH_HOME=" "` must not produce
+ * a sidecar under a relative "." path).
  */
 export declare function evolutionRoot(env?: NodeJS.ProcessEnv): string;
 /** Evolution home path helper: `$DSH_HOME/evolution` for plugin-owned sidecar

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.3.46",
+  "version": "0.3.48",
   "publishConfig": {
     "access": "public"
   },