@lmzhen/dsh-evolution-core 0.3.47 → 0.3.49

package/lib/index.js

@@ -646,7 +646,6 @@ const MAX_SKILL_CONTENT_CHARS = 1e5;
 const MAX_SKILL_FILE_BYTES = 1048576;
 const DEFAULT_REVIEW_MEMORY_INTERVAL = 10;
 const DEFAULT_REVIEW_SKILL_INTERVAL = 10;
-/** Skill-review completion channel trigger mode: 'cadence' | 'completion' | 'both'. */
 /** Skill-review completion channel trigger mode: 'cadence' | 'completion' | 'both'.
 * 0.3.39 (V6-53 follow-up): default is 'cadence' — since 0.3.38 the cadence
 * channel's review is executed at conversation END (deferred), so 'both' would
@@ -2066,18 +2065,21 @@ var MemoryStore = class {
 		return percent >= 80 ? ` ⚠️ Storage at ${percent}% (${chars}/${limit} chars).` : "";
 	}
 	/**
-	* Best-effort raw-copy backup of the on-disk file to `<file>.bak.<stamp>`
-	* before a refusal, so an externally modified (or oversized) file stays
-	* recoverable. Copies bytes instead of reading them so a pathologically
-	* large file is never loaded just to back it up. Failure to back up does
-	* not change the refusal semantics.
+	* Best-effort raw-copy backup of the on-disk file to `<file>.bak` before a
+	* refusal, so an externally modified (or oversized) file stays recoverable.
+	* Copies bytes instead of reading them so a pathologically large file is
+	* never loaded just to back it up. Failure to back up does not change the
+	* refusal semantics. V8-23⑫ (0.3.49): ONE fixed backup name per target —
+	* a fresh refusal overwrites it (the previous timestamped names accumulated
+	* per drift incident with no retention policy).
 	*/
 	async backupFile(target) {
 		const path = fileFor(this.root, target);
-		const unique = `${(/* @__PURE__ */ new Date()).toISOString().replace(/[-:T]/g, "").slice(0, 14)}-${Math.random().toString(36).slice(2, 8)}`;
+		const backup = `${path}.bak`;
 		try {
-			await this.io.copy(path, `${path}.bak.${unique}`);
-			return `${path}.bak.${unique}`;
+			await this.io.remove(backup).catch(() => {});
+			await this.io.copy(path, backup);
+			return backup;
 		} catch {
 			return null;
 		}

package/lib/types/constants.d.ts

@@ -33,7 +33,6 @@ export declare const MAX_SKILL_CONTENT_CHARS = 100000;
 export declare const MAX_SKILL_FILE_BYTES = 1048576;
 export declare const DEFAULT_REVIEW_MEMORY_INTERVAL = 10;
 export declare const DEFAULT_REVIEW_SKILL_INTERVAL = 10;
-/** Skill-review completion channel trigger mode: 'cadence' | 'completion' | 'both'. */
 /** Skill-review completion channel trigger mode: 'cadence' | 'completion' | 'both'.
  * 0.3.39 (V6-53 follow-up): default is 'cadence' — since 0.3.38 the cadence
  * channel's review is executed at conversation END (deferred), so 'both' would

package/lib/types/io.d.ts

@@ -14,9 +14,12 @@ export interface EvolutionIoLike {
     copy(path: string, destination: string): Promise<void>;
     /**
      * Optional byte-size probe for the read guard. Return the file's size in
-     * bytes, or `null`/`undefined` when unknown (unsupported backend, missing
-     * file, stat failure). An implementation without this probe gets no guard:
-     * consumers treat an unknown size as "guard not applicable".
+     * bytes, or `null` when the file does not exist (ENOENT/ENOTDIR);
+     * V8-23⑨ (0.3.49): the doc claimed "stat failure → null" but the
+     * implementation propagates other stat errors — only missing-file is a
+     * "guard not applicable" signal, a real stat failure is an IO error.
+     * An implementation without this probe gets no guard: consumers treat an
+     * unknown size as "guard not applicable".
      */
     size?(path: string): Promise<number | null>;
     /**

package/lib/types/memory-store.d.ts

@@ -61,11 +61,13 @@ export declare class MemoryStore {
      */
     private storageHint;
     /**
-     * Best-effort raw-copy backup of the on-disk file to `<file>.bak.<stamp>`
-     * before a refusal, so an externally modified (or oversized) file stays
-     * recoverable. Copies bytes instead of reading them so a pathologically
-     * large file is never loaded just to back it up. Failure to back up does
-     * not change the refusal semantics.
+     * Best-effort raw-copy backup of the on-disk file to `<file>.bak` before a
+     * refusal, so an externally modified (or oversized) file stays recoverable.
+     * Copies bytes instead of reading them so a pathologically large file is
+     * never loaded just to back it up. Failure to back up does not change the
+     * refusal semantics. V8-23⑫ (0.3.49): ONE fixed backup name per target —
+     * a fresh refusal overwrites it (the previous timestamped names accumulated
+     * per drift incident with no retention policy).
      */
     private backupFile;
     /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.3.47",
+  "version": "0.3.49",
   "publishConfig": {
     "access": "public"
   },