@lmzhen/dsh-evolution-core 0.3.78 → 0.3.80

package/lib/index.js

@@ -1249,6 +1249,7 @@ function parseCuratorNominations(text) {
 	let section = null;
 	let currentFrom = "";
 	let currentMode;
+	let currentIntoSpoken = false;
 	for (const line of text.split("\n")) {
 		const header = /^\s*(consolidations|prunings)\s*:\s*$/.exec(line);
 		if (header) {
@@ -1257,9 +1258,11 @@ function parseCuratorNominations(text) {
 		}
 		const consolidated = /^\s*-\s*from:\s*([a-z0-9][a-z0-9-]*)(?:\s*#.*)?\s*$/.exec(line);
 		if (consolidated) {
+			if (currentFrom !== "" && !currentIntoSpoken) warnings.push(`"- from: ${currentFrom}" dropped — no "into:" arrived before the next entry`);
 			section = "consolidations";
 			currentFrom = consolidated[1] ?? "";
 			currentMode = void 0;
+			currentIntoSpoken = false;
 			continue;
 		}
 		const mode = /^\s*mode:\s*(append|reference)(?:\s*#.*)?\s*$/.exec(line);
@@ -1278,6 +1281,7 @@ function parseCuratorNominations(text) {
 			});
 			currentFrom = "";
 			currentMode = void 0;
+			currentIntoSpoken = false;
 			continue;
 		}
 		const pruned = /^\s*-\s*name:\s*([a-z0-9][a-z0-9-]*)(?:\s*#.*)?\s*$/.exec(line);
@@ -1288,8 +1292,12 @@ function parseCuratorNominations(text) {
 			if (name) prunings.push(name);
 			continue;
 		}
-		if (/^\s*(?:-\s*(?:from|name)\s*:|(?:into|mode)\s*:)/.test(line)) warnings.push(`"${line.trim()}" ignored - not a usable nomination line (names are lowercase letters, digits and hyphens; one optional trailing "# comment" is allowed)`);
+		if (/^\s*(?:-\s*(?:from|name)\s*:|(?:into|mode)\s*:)/.test(line)) {
+			if (currentFrom !== "" && /^\s*into\s*:/.test(line)) currentIntoSpoken = true;
+			warnings.push(`"${line.trim()}" ignored - not a usable nomination line (names are lowercase letters, digits and hyphens; one optional trailing "# comment" is allowed)`);
+		}
 	}
+	if (currentFrom !== "" && !currentIntoSpoken) warnings.push(`"- from: ${currentFrom}" dropped — the nomination output ended before its "into:"`);
 	const valid = (name) => NOMINATION_NAME_RE.test(name);
 	return {
 		prunings: prunings.filter(valid),
@@ -2167,12 +2175,16 @@ const TYPOGRAPHY_CHARS = /[\u00ad\u061c\u180e\u200c\ufe00-\ufe0f]/;
 const BIDI_CHARS = /[\u202a-\u202e\u2066-\u2069]/;
 const FORMAT_CONTROL_CLASS = "\\p{Cf}\\p{Zl}\\p{Zp}\\u0000\\u2065\\ufff0-\\ufff8\\u{e0080}-\\u{e00ff}";
 const FORMAT_CONTROL_TEST = new RegExp(`[${FORMAT_CONTROL_CLASS}]`, "u");
-/** S0.4 (v37 P0-3): a format control the three finding sets above do NOT report. */
+/** S0.4 (v37 P0-3): a format control the three finding sets above do NOT report.
+* S1-E3: the ZWJ exemption compares the real character. It used to read
+* `'\\u200d'` — a 6-character literal that never equals a code point — so the
+* branch was dead and every emoji ZWJ sequence (👨‍👩‍👧) raised the report-level
+* `unicode_format_control` finding the class comment above promises it will not. */
 function hasUnreportedFormatControl(text) {
 	for (const character of text) {
 		if (!FORMAT_CONTROL_TEST.test(character)) continue;
 		if (ZERO_WIDTH_CHARS.test(character) || TYPOGRAPHY_CHARS.test(character) || BIDI_CHARS.test(character)) continue;
-		if (character === "\\u200d") continue;
+		if (character === "‍") continue;
 		return true;
 	}
 	return false;
@@ -4212,8 +4224,19 @@ function readDispatchRecord(event) {
 */
 var ToolDispatchNormalizer = class {
 	records = /* @__PURE__ */ new Map();
-	/** Call ids of \`run_code\`-class calls, i.e. of dispatches whose sub-dispatches are \`program\`. */
-	programRoots = /* @__PURE__ */ new Set();
+	/** S2-P2-14: cap for the LEDGER (and the settle markers) — opt-in, meant for
+	* the long-lived live listener (skill-usage) whose ledger is pure dedup
+	* state and would otherwise grow with the process lifetime. `Infinity` (the
+	* default, used by whole-log folding) keeps every dispatch. Eviction is
+	* oldest-first: a call/result pair spans one tool call, so an evicted
+	* dispatch can never be re-paired within any realistic window. */
+	maxTracked;
+	/** S2-P2-12: call ids whose outcome has already been reported to the settle
+	* channel — a replayed result event must not settle the same dispatch twice. */
+	settledIds = /* @__PURE__ */ new Set();
+	constructor(options = {}) {
+		this.maxTracked = options.maxTracked ?? Number.POSITIVE_INFINITY;
+	}
 	/**
 	* Absorb one session event.
 	* @param event - the event to absorb; any non-dispatch event is ignored.
@@ -4235,7 +4258,7 @@ var ToolDispatchNormalizer = class {
 			return null;
 		}
 		const signal = {
-			kind: record.kind === "native" && this.programRoots.has(record.callId) ? "program-root" : record.kind,
+			kind: record.kind,
 			callId: record.callId,
 			rootCallId: record.rootCallId,
 			name: record.name,
@@ -4243,9 +4266,43 @@ var ToolDispatchNormalizer = class {
 			ok: record.outcome?.ok
 		};
 		this.records.set(record.callId, signal);
-		if (record.kind === "program" && record.rootCallId !== record.callId) this.programRoots.add(record.rootCallId);
+		this.evict();
+		return signal;
+	}
+	/**
+	* S2-P2-12: the SETTLE channel. \`advance\` answers \`null\` for the paired
+	* event that settles an already-emitted dispatch, so a consumer that must act
+	* on the OUTCOME (e.g. count successful skill reads only) cannot tell which
+	* dispatch a \`null\` belonged to. Call this with the same event AFTER
+	* \`advance\`: it answers the settled dispatch exactly once (replayed settle
+	* events answer \`null\`).
+	* @param event - the event already absorbed by \`advance\`.
+	* @returns the dispatch this event settled, or \`null\`.
+	*/
+	settledSignalOf(event) {
+		const record = readDispatchRecord(event);
+		if (record === null || record.outcome === void 0) return null;
+		if (this.settledIds.has(record.callId)) return null;
+		const signal = this.records.get(record.callId);
+		if (signal === void 0) return null;
+		this.settledIds.add(record.callId);
+		this.evict();
 		return signal;
 	}
+	/** Oldest-first eviction once the ledger (or the settle markers) overflows. */
+	evict() {
+		while (this.records.size > this.maxTracked) {
+			const oldest = this.records.keys().next().value;
+			if (oldest === void 0) break;
+			this.records.delete(oldest);
+			this.settledIds.delete(oldest);
+		}
+		while (this.settledIds.size > this.maxTracked) {
+			const oldest = this.settledIds.values().next().value;
+			if (oldest === void 0) break;
+			this.settledIds.delete(oldest);
+		}
+	}
 	/** Every emitted dispatch, in first-seen order. */
 	get signals() {
 		return [...this.records.values()];
@@ -4366,10 +4423,14 @@ function isProgramToolName(name) {
 * Assert that a payload really is the dispatch event it claims to be.
 *
 * The normalizer is deliberately lenient (it also folds persisted logs, where a
-* payload may predate the current declaration); this is the loud gate for the
-* live path, where a malformed payload means the producer is broken. It never
-* silently downgrades: an unrecognized event type or a payload missing a
-* declared field throws a named \`ToolDispatchPayloadError\`.
+* payload may predate the current declaration). S1-E7 (honesty fix): this
+* function is an OPT-IN gate — NO production consumer calls it; the shipped
+* listeners fold tolerant (`'malformed'` synthesis) precisely because a
+* throwing gate wired into every session event would brick the family on any
+* upstream payload drift. Deployments that want fail-loud behavior call this
+* from their own `session/event` listener. It never silently downgrades: an
+* unrecognized event type or a payload missing a declared field throws a named
+* \`ToolDispatchPayloadError\`.
 * @param event - the session event to check.
 * @returns nothing; throws when the payload violates the platform declaration.
 */
@@ -4856,6 +4917,18 @@ function resolveOrigins(headerOrigin, isReview = false) {
 		library: "foreground"
 	};
 }
+/**
+* S1-E8 (0.3.80): ONE exec→origins resolution for the two write tools — reads
+* the session header origin AND the v37 S2.2 review-channel session mark, so a
+* tool cannot forget the mark half (tool-memory shipped without it, which
+* mislabeled every inject-mode review memory write as `foreground` and let it
+* bypass staging under `stageForeground: false`).
+* Single source: both tools call this instead of re-deriving the pair.
+*/
+function resolveExecOrigins(exec) {
+	const session = exec?.agent?.session;
+	return resolveOrigins(session?.header?.origin, isReviewChannelSession(typeof session?.id === "string" ? session.id : void 0));
+}
 function skillDir(root, name) {
 	return join(root, name);
 }
@@ -6194,7 +6267,7 @@ var SkillLibrary = class {
 					skillDir: dir
 				}
 			};
-		}, anchor !== void 0 ? anchorRefusal(name, "missing") : void 0);
+		}, anchor !== void 0 ? anchorUnverifiable(name, null) : void 0);
 	}
 	async patch(rawName, oldString, newString, filePath = "", replaceAll = false, origin = "foreground") {
 		const name = rawName.trim();
@@ -6619,6 +6692,7 @@ var SkillLibrary = class {
 		return await this.serial(async () => {
 			const referenceWrites = [];
 			const parts = [];
+			const plannedSourceBytes = /* @__PURE__ */ new Map();
 			if (mode === "append") for (const source of normalizedSources) {
 				const protection = await this.deleteProtection(source);
 				if (protection) return {
@@ -6645,6 +6719,7 @@ var SkillLibrary = class {
 					message: `Consolidation rejected: source "${source}" body references support files (${refs.join(", ")}) that would be left behind — use mode:'reference' or archive the whole package instead.`
 				};
 				parts.push(`\n<!-- consolidated from ${source} at ${(/* @__PURE__ */ new Date()).toISOString()} -->\n${parsed.body.trim()}`);
+				plannedSourceBytes.set(source, sourceMd);
 			}
 			else for (const source of normalizedSources) {
 				const protection = await this.deleteProtection(source);
@@ -6672,6 +6747,7 @@ var SkillLibrary = class {
 					target,
 					content: `<!-- demoted from ${source} at ${(/* @__PURE__ */ new Date()).toISOString()} -->\n${parsed.body.trim()}\n`
 				});
+				plannedSourceBytes.set(source, sourceMd);
 			}
 			const archived = [];
 			try {
@@ -6680,15 +6756,15 @@ var SkillLibrary = class {
 					message: `Skill "${targetName}" not found.`
 				};
 				for (const source of normalizedSources) {
+					if (plannedSourceBytes.has(source)) {
+						if (await this.io.readText(join(this.dirOf(source), "SKILL.md")) !== plannedSourceBytes.get(source)) throw new Error(`Consolidation aborted: source "${source}" changed while the consolidation ran (its planned bytes are no longer current).`);
+					}
 					const result = await this.archive(source, { absorbedInto: targetName });
 					if (!result.ok) throw new Error(result.message);
 					archived.push(source);
 				}
 				const freshTargetMd = await this.io.readText(join(targetDir, "SKILL.md"));
-				if (!freshTargetMd) return {
-					ok: false,
-					message: `Skill "${targetName}" not found.`
-				};
+				if (!freshTargetMd) throw new Error(`target "${targetName}" disappeared mid-consolidate`);
 				const writes = [];
 				for (const reference of referenceWrites) {
 					const previous = await this.io.readText(reference.target).catch(() => null);
@@ -6702,10 +6778,7 @@ var SkillLibrary = class {
 				if (mode === "append") {
 					const merged = freshTargetMd.trimEnd() + parts.join("\n") + "\n";
 					const validation = validateFrontmatter(merged, targetName, this.limits);
-					if (validation) return {
-						ok: false,
-						message: `Consolidation rejected: ${validation}`
-					};
+					if (validation) throw new Error(`merge validation failed: ${validation}`);
 					writes.push({
 						target: join(targetDir, "SKILL.md"),
 						content: merged,
@@ -6715,10 +6788,7 @@ var SkillLibrary = class {
 					const pointerLines = normalizedSources.map((source) => `\n${POINTER_LINE_PREFIX}${source}.md`).join("");
 					const extended = freshTargetMd.trimEnd() + pointerLines + "\n";
 					const validation = validateFrontmatter(extended, targetName, this.limits);
-					if (validation) return {
-						ok: false,
-						message: `Consolidation rejected: ${validation}`
-					};
+					if (validation) throw new Error(`merge validation failed: ${validation}`);
 					writes.push({
 						target: join(targetDir, "SKILL.md"),
 						content: extended,
@@ -7459,7 +7529,15 @@ var SkillLibrary = class {
 				message: `Snapshot restore was refused before anything was cleared: taking the pre-rollback snapshot failed (${error instanceof Error ? error.message : String(error)}) — the active tree is UNCHANGED. Resolve the snapshot write failure and retry.`
 			};
 		}
-		const snapshotExtras = await this.readSnapshotExtras(latest.path);
+		let snapshotExtras;
+		try {
+			snapshotExtras = await this.readSnapshotExtras(latest.path);
+		} catch (error) {
+			return {
+				ok: false,
+				message: `Snapshot restore was refused before anything was cleared: reading the snapshot manifest/extras failed (${error instanceof Error ? error.message : String(error)}) — the active tree is UNCHANGED. Resolve the read failure and retry.`
+			};
+		}
 		try {
 			await this.restoreSnapshotIntoRoot(latest.path);
 		} catch (error) {
@@ -7607,4 +7685,4 @@ function sessionAudited(ctx, sessionId, sessionScoped) {
 	return sessionSeesFamilyTools(ctx, sessionId);
 }
 //#endregion
-export { AUTHORING_DESCRIPTION_BAR, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, INSTANCE_KEYS, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PATTERN_OVERLAP, PERSISTED_WRITE_SITES, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, RESTRUCTURE_TARGET_RE, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, THREAT_EXEMPTION_HINT, ToolDispatchNormalizer, ToolDispatchPayloadError, advanceReview, allowRowCollisions, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpUse, bumpView, callingScope, claimInstance, clampedNumber, clearReviewChannel, collectReadSkillNames, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, countDispatches, createGateSet, decideTakeover, duplicateHeadings, emptyRecord, evaluateThreat, eventsFile, evolutionEventPayloadIssue, evolutionHome, evolutionIoAdapter, evolutionRoot, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurn, frontmatterBlock, frontmatterCatalogInvalid, getRecord, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isCommittedWarning, isGlobalRead, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, latestActivityAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, neutralizePromptVariables, newSkillLibrary, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, observeEvent, overlongLines, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseLockBody, pendingSelfCleanup, persistedWriteSite, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, recordMutation, redactSecrets, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, resolveOrigins, resolveRootConfig, resolveSkillsRoot, retainEventArchives, reviewPrompt, saveSuppressedNames, saveUsage, scanContentThreats, scanMemoryThreats, scanThreats, sessionAudited, sessionSeesFamilyTools, skillReadNameOf, skillsRoot, suppressedFile, sweepReviewChannelSessions, transactIo, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, writeDurableTmp, yamlPlainScalarNeedsQuotes };
+export { AUTHORING_DESCRIPTION_BAR, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, INSTANCE_KEYS, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PATTERN_OVERLAP, PERSISTED_WRITE_SITES, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, RESTRUCTURE_TARGET_RE, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, THREAT_EXEMPTION_HINT, ToolDispatchNormalizer, ToolDispatchPayloadError, advanceReview, allowRowCollisions, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpUse, bumpView, callingScope, claimInstance, clampedNumber, clearReviewChannel, collectReadSkillNames, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, countDispatches, createGateSet, decideTakeover, duplicateHeadings, emptyRecord, evaluateThreat, eventsFile, evolutionEventPayloadIssue, evolutionHome, evolutionIoAdapter, evolutionRoot, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurn, frontmatterBlock, frontmatterCatalogInvalid, getRecord, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isCommittedWarning, isGlobalRead, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, latestActivityAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, neutralizePromptVariables, newSkillLibrary, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, observeEvent, overlongLines, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseLockBody, pendingSelfCleanup, persistedWriteSite, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, recordMutation, redactSecrets, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, resolveExecOrigins, resolveOrigins, resolveRootConfig, resolveSkillsRoot, retainEventArchives, reviewPrompt, saveSuppressedNames, saveUsage, scanContentThreats, scanMemoryThreats, scanThreats, sessionAudited, sessionSeesFamilyTools, skillReadNameOf, skillsRoot, suppressedFile, sweepReviewChannelSessions, transactIo, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, writeDurableTmp, yamlPlainScalarNeedsQuotes };

package/lib/types/io.d.ts

@@ -46,16 +46,17 @@ export interface EvolutionIoLike {
      * missing path, stat failure). Intended as a cheap invalidation stamp for a
      * cached directory listing; a backend without it keeps event-driven
      * invalidation only. v20 correction: the former "NO in-tree consumer" note
-     * (V9-07, 0.3.51) went stale — there are now FOUR in-tree consumers, and a
+     * (V9-07, 0.3.51) went stale — in-tree consumers exist, and a
      * custom backend that omits `mtime` degrades them silently (every call
      * site is optional-call + null-fallback, so omission stays legal):
-     *   - evolution-skill-catalog: root-mtime stamp on the summaries cache —
-     *     the second, out-of-band invalidation signal next to the
-     *     `evolution/skill-mutated` / `evolution/skills-refresh` events;
      *   - evolution-curator: run-report recency ordering (2 call sites);
      *   - evolution-commands: `.bak` freshness probe in the preset installer.
-     * With `mtime` absent, catalog invalidation degrades to purely
-     * event-driven. Register new consumers here (the seam contract).
+     * S3-P2-10: evolution-skill-catalog's summaries stamp — the third consumer —
+     * moved to a NAMES-based stamp over `list()` (a required seam method): the
+     * root-mtime stamp was invalidated by the family's own sidecar flushes in
+     * the watched root, so every usage-counter write paid a full rescan. The
+     * names stamp is sidecar-immune and works on mtime-less backends. Register
+     * new consumers here (the seam contract).
      */
     mtime?(this: void, path: string): Promise<number | null>;
 }

package/lib/types/skill-store.d.ts

@@ -215,6 +215,30 @@ export declare function resolveOrigins(headerOrigin: string | undefined, isRevie
     approval: 'foreground' | 'background_review';
     library: WriteOrigin;
 };
+/** Minimal structural view of a tool execution context, so the helper below
+ * stays decoupled from the platform's exec type (extra fields are ignored). */
+export interface EvolutionExecOriginView {
+    agent?: {
+        session?: {
+            id?: unknown;
+            header?: {
+                origin?: string;
+            };
+        };
+    };
+}
+/**
+ * S1-E8 (0.3.80): ONE exec→origins resolution for the two write tools — reads
+ * the session header origin AND the v37 S2.2 review-channel session mark, so a
+ * tool cannot forget the mark half (tool-memory shipped without it, which
+ * mislabeled every inject-mode review memory write as `foreground` and let it
+ * bypass staging under `stageForeground: false`).
+ * Single source: both tools call this instead of re-deriving the pair.
+ */
+export declare function resolveExecOrigins(exec: EvolutionExecOriginView | undefined): {
+    approval: 'foreground' | 'background_review';
+    library: WriteOrigin;
+};
 /** Dot-prefixed on-disk marker name. SINGLE source: `list()` matches directory
  * entries against this name, and path builders must never hardcode a marker
  * literal (N-1: the rc.49 exists()-probe convergence dropped the dot,

package/lib/types/tool-dispatch.d.ts

@@ -39,9 +39,7 @@ export type ToolDispatchKind =
 /** A model-authored call, logged as \`tool/call\` and settled by \`tool/result\`. */
 'native'
 /** A sub-dispatch of a code program, logged as the PTC dispatch pair. */
- | 'program'
-/** A \`run_code\` call itself: a native call whose program dispatches sub-calls. */
- | 'program-root';
+ | 'program';
 /** The platform event type carrying a PTC sub-dispatch start. */
 export declare const PTC_DISPATCH_START_EVENT = "tool/ptc-dispatch-start";
 /** The platform event type carrying a PTC sub-dispatch settle. */
@@ -63,7 +61,7 @@ export declare const DISPATCH_EVENT_TYPES: readonly string[];
  * so a consumer that reacted at start already holds the outcome.
  */
 export interface ToolDispatchSignal {
-    /** \`native\` | \`program\` (a code-program sub-dispatch) | \`program-root\` (the \`run_code\` call itself). */
+    /** \`native\` | \`program\` (a code-program sub-dispatch); the \`run_code\` root itself reads as \`native\`. */
     readonly kind: ToolDispatchKind;
     /** \`callId\` for a native call, \`subCallId\` for a PTC sub-dispatch — the platform's own identity. */
     readonly callId: string;
@@ -94,8 +92,19 @@ export declare class ToolDispatchPayloadError extends TypeError {
  */
 export declare class ToolDispatchNormalizer {
     private readonly records;
-    /** Call ids of \`run_code\`-class calls, i.e. of dispatches whose sub-dispatches are \`program\`. */
-    private readonly programRoots;
+    /** S2-P2-14: cap for the LEDGER (and the settle markers) — opt-in, meant for
+     * the long-lived live listener (skill-usage) whose ledger is pure dedup
+     * state and would otherwise grow with the process lifetime. `Infinity` (the
+     * default, used by whole-log folding) keeps every dispatch. Eviction is
+     * oldest-first: a call/result pair spans one tool call, so an evicted
+     * dispatch can never be re-paired within any realistic window. */
+    private readonly maxTracked;
+    /** S2-P2-12: call ids whose outcome has already been reported to the settle
+     * channel — a replayed result event must not settle the same dispatch twice. */
+    private readonly settledIds;
+    constructor(options?: {
+        maxTracked?: number;
+    });
     /**
      * Absorb one session event.
      * @param event - the event to absorb; any non-dispatch event is ignored.
@@ -107,6 +116,22 @@ export declare class ToolDispatchNormalizer {
         type: string;
         data?: unknown;
     }): ToolDispatchSignal | null;
+    /**
+     * S2-P2-12: the SETTLE channel. \`advance\` answers \`null\` for the paired
+     * event that settles an already-emitted dispatch, so a consumer that must act
+     * on the OUTCOME (e.g. count successful skill reads only) cannot tell which
+     * dispatch a \`null\` belonged to. Call this with the same event AFTER
+     * \`advance\`: it answers the settled dispatch exactly once (replayed settle
+     * events answer \`null\`).
+     * @param event - the event already absorbed by \`advance\`.
+     * @returns the dispatch this event settled, or \`null\`.
+     */
+    settledSignalOf(event: {
+        type: string;
+        data?: unknown;
+    }): ToolDispatchSignal | null;
+    /** Oldest-first eviction once the ledger (or the settle markers) overflows. */
+    private evict;
     /** Every emitted dispatch, in first-seen order. */
     get signals(): readonly ToolDispatchSignal[];
     /**
@@ -188,10 +213,14 @@ export declare function isProgramToolName(name: string): boolean;
  * Assert that a payload really is the dispatch event it claims to be.
  *
  * The normalizer is deliberately lenient (it also folds persisted logs, where a
- * payload may predate the current declaration); this is the loud gate for the
- * live path, where a malformed payload means the producer is broken. It never
- * silently downgrades: an unrecognized event type or a payload missing a
- * declared field throws a named \`ToolDispatchPayloadError\`.
+ * payload may predate the current declaration). S1-E7 (honesty fix): this
+ * function is an OPT-IN gate — NO production consumer calls it; the shipped
+ * listeners fold tolerant (`'malformed'` synthesis) precisely because a
+ * throwing gate wired into every session event would brick the family on any
+ * upstream payload drift. Deployments that want fail-loud behavior call this
+ * from their own `session/event` listener. It never silently downgrades: an
+ * unrecognized event type or a payload missing a declared field throws a named
+ * \`ToolDispatchPayloadError\`.
  * @param event - the session event to check.
  * @returns nothing; throws when the payload violates the platform declaration.
  */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-core",
   "description": "Shared stores, prompts, signals and lifecycle logic for the dsh-evolution plugin family (community build)",
-  "version": "0.3.78",
+  "version": "0.3.80",
   "publishConfig": {
     "access": "public"
   },
@@ -19,12 +19,14 @@
       "default": "./lib/index.js"
     },
     "./package.json": "./package.json",
-    "./row-overrides.json": "./row-overrides.json"
+    "./row-overrides.json": "./row-overrides.json",
+    "./persisted-write-inventory.json": "./persisted-write-inventory.json"
   },
   "files": [
     "lib/*.js",
     "lib/types/**/*.d.ts",
-    "row-overrides.json"
+    "row-overrides.json",
+    "persisted-write-inventory.json"
   ],
   "license": "MIT",
   "dependencies": {

package/persisted-write-inventory.json

@@ -0,0 +1,79 @@
+[
+  {
+    "id": "usage",
+    "path": "<skillsRoot>/.usage.json",
+    "writer": "evolution-core/src/usage.ts",
+    "serializedBy": "transact",
+    "marker": "transactIo(io, usageFile(root)",
+    "state": [],
+    "note": "Skill usage counters. RMW under the IO backend's cross-process lock; the reader side rebuilds from the events log."
+  },
+  {
+    "id": "suppressed",
+    "path": "<skillsRoot>/.curator-suppressed.json",
+    "writer": "evolution-core/src/usage.ts",
+    "serializedBy": "transact",
+    "marker": "transactIo(io, suppressedFile(root)",
+    "state": [],
+    "note": "Curator suppression list (archived bundled skills that must not re-seed)."
+  },
+  {
+    "id": "mutations",
+    "path": "<skillsRoot>/.mutations.json",
+    "writer": "evolution-core/src/mutations.ts",
+    "serializedBy": "transact",
+    "marker": "transactIo(io, mutationsFile(root)",
+    "state": [],
+    "note": "Skill mutation audit records (bounded ring)."
+  },
+  {
+    "id": "events",
+    "path": "<evolutionHome>/evolution/events.json",
+    "writer": "evolution-core/src/evolution-events.ts",
+    "serializedBy": "transact",
+    "marker": "transactIo(io, path",
+    "state": [],
+    "note": "The rc.68 evolution event log; feedback/skill-usage stats fold it."
+  },
+  {
+    "id": "memory",
+    "path": "<memoryRoot>/<target>.md",
+    "writer": "evolution-core/src/memory-store.ts",
+    "serializedBy": "transact",
+    "marker": "transactIo(this.io, fileFor(this.root, target)",
+    "state": [],
+    "note": "Durable memory documents written by the memory tool."
+  },
+  {
+    "id": "state",
+    "path": "<evolutionHome>/<review|curator|pending>-state.json",
+    "writer": "evolution-state-json/src/index.ts",
+    "serializedBy": "transact",
+    "marker": "transactIo(io(), join(root, file)",
+    "state": [
+      "evolution-state-json/src/index.ts :: recordGateWarned",
+      "evolution-state-json/src/index.ts :: corruptWritten",
+      "evolution-state-json/src/index.ts :: corruptWriteWarned"
+    ],
+    "note": "The durable state stack (review/curator/pending). Its three warn sets are per-process de-duplication and are registered under N12."
+  },
+  {
+    "id": "curator-reports",
+    "path": "<evolutionHome>/reports/curator-*.json",
+    "writer": "evolution-curator/src/index.ts",
+    "serializedBy": "instance-claim",
+    "marker": "claimInstance(",
+    "instance": "evolution-curator",
+    "state": [],
+    "note": "Curator run reports + their retention sweep. No per-file lock: the writer holds the per-home instance claim, so a second curator yields instead of racing the sweep."
+  },
+  {
+    "id": "skill-tree",
+    "path": "<skillsRoot>/**",
+    "writer": "evolution-core/src/skill-store.ts",
+    "serializedBy": "write-lock",
+    "marker": "LOCK_SUFFIX",
+    "state": [],
+    "note": "The skill tree itself. Per-target `<path>.lock` claims (pid:token body) guard every byte writer; destructive movers refuse a live lock."
+  }
+]