@lmzhen/dsh-evolution-core 0.30.18 → 0.30.20

package/lib/index.js

@@ -366,6 +366,7 @@ const UNIT_JOURNAL_PHASES = [
 	"source-archiving",
 	"sources-archived",
 	"support-pending",
+	"unit-written",
 	"committed",
 	"failed",
 	"rolled-back"
@@ -1183,6 +1184,26 @@ function canonical(value) {
 function digest(plan) {
 	return createHash("sha256").update(canonical(plan)).digest("hex");
 }
+function canonicalJson(value) {
+	if (value === null || typeof value !== "object") return JSON.stringify(value);
+	if (Array.isArray(value)) return "[" + value.map(canonicalJson).join(",") + "]";
+	const object = value;
+	return "{" + Object.keys(object).sort().map((key) => JSON.stringify(key) + ":" + canonicalJson(object[key])).join(",") + "}";
+}
+function unitEvidenceDigest(evidence) {
+	return createHash("sha256").update(canonicalJson({
+		...evidence,
+		at: 0,
+		mutations: 0
+	})).digest("hex");
+}
+function evidenceDigest(evidence) {
+	return createHash("sha256").update(JSON.stringify({
+		...evidence,
+		at: 0,
+		mutations: 0
+	}, null, 2) + "\n").digest("hex");
+}
 var UnitTransactions = class {
 	options;
 	prepared = /* @__PURE__ */ new Map();
@@ -1219,6 +1240,7 @@ var UnitTransactions = class {
 			sourceBefore,
 			origin: plan.origin,
 			summary: plan.summary,
+			...plan.validationPlan === void 0 ? {} : { validationPlan: plan.validationPlan },
 			createdAt: this.now()
 		};
 	}
@@ -1313,12 +1335,12 @@ var UnitTransactions = class {
 		let lock;
 		let claim;
 		const checkpoints = [];
-		const writePhase = async (phase, checkpointsNext) => {
+		const writePhase = async (phase, checkpointsNext = checkpoints) => {
 			if (lock !== void 0 && !await lock.assertHeld()) throw new Error("unit-fence-lost");
 			await writeUnitJournal(this.options.io, this.options.home, {
 				...journalBase,
 				phase,
-				...checkpointsNext === void 0 ? {} : { checkpoints: checkpointsNext }
+				checkpoints: checkpointsNext
 			});
 			await this.options.onPhase?.(phase);
 		};
@@ -1346,7 +1368,10 @@ var UnitTransactions = class {
 				...journalBase,
 				phase: "target-pending"
 			});
-			const result = await this.options.backend.commit(stored.plan, async (phase, detail) => {
+			const result = await this.options.backend.commit({
+				...stored.plan,
+				unitId: prepared.unitId
+			}, async (phase, detail) => {
 				if (phase === "support-pending") {
 					await writePhase("support-pending");
 					await this.options.onPhase?.("support-pending");
@@ -1367,7 +1392,7 @@ var UnitTransactions = class {
 						archived: stored.plan.sources.filter((source) => source !== stored.plan.target),
 						at: this.now()
 					});
-					await this.options.onPhase?.("unit-written");
+					await writePhase("unit-written");
 					return;
 				}
 				if (phase === "source-archiving" && detail?.source !== void 0) checkpoints.push({
@@ -1382,7 +1407,7 @@ var UnitTransactions = class {
 				await writePhase("failed");
 				return {
 					ok: false,
-					code: "unit-commit-failed",
+					code: result.code ?? "unit-commit-failed",
 					message: result.message
 				};
 			}
@@ -1407,10 +1432,22 @@ var UnitTransactions = class {
 					absorbedInto: stored.plan.target
 				})),
 				mutations: result.mutations ?? 0,
+				...stored.plan.validationPlan === void 0 ? {} : { validationPlan: stored.plan.validationPlan },
 				at: this.now()
 			};
 			if (!await lock.assertHeld()) throw new Error("unit-fence-lost");
+			const evidenceSha256 = evidenceDigest(evidence);
 			await writeUnitEvidence(this.options.io, this.options.home, evidence);
+			await writeUnitReceipt(this.options.io, this.options.home, {
+				schemaVersion: 1,
+				unitId: prepared.unitId,
+				runId: stored.plan.runId,
+				planDigest: stored.digest,
+				target: stored.plan.target,
+				archived: stored.plan.sources.filter((source) => source !== stored.plan.target),
+				at: this.now(),
+				evidenceSha256
+			});
 			await writePhase("committed", checkpoints);
 			this.prepared.delete(prepared.unitId);
 			return {
@@ -1461,6 +1498,29 @@ var UnitTransactions = class {
 			code: "unit-rollback-blocked",
 			message: "source checkpoint missing: " + missing.map((item) => item.name).join(",")
 		};
+		const liveTarget = await this.options.backend.readSkill(snapshot.target);
+		if (liveTarget === null || liveTarget !== (snapshot.targetAfter ?? null)) return {
+			ok: false,
+			code: "unit-rollback-blocked",
+			message: "target live hash does not match the prepared target; manual recovery required"
+		};
+		const liveSource = (await Promise.all(snapshot.sourceBefore.map(async (source) => ({
+			name: source.name,
+			body: await this.options.backend.readSkill(source.name)
+		})))).find((source) => source.body !== null);
+		if (liveSource !== void 0) return {
+			ok: false,
+			code: "unit-rollback-blocked",
+			message: "source is still live: " + liveSource.name
+		};
+		if ((await Promise.all(snapshot.supportAfter.map(async (file) => ({
+			path: file.path,
+			content: await this.options.backend.readSupportFile(snapshot.target, file.path)
+		})))).some((file) => file.content !== (snapshot.supportAfter.find((item) => item.path === file.path)?.content ?? null))) return {
+			ok: false,
+			code: "unit-rollback-blocked",
+			message: "support file live hash does not match the prepared support; manual recovery required"
+		};
 		const evidence = {
 			schemaVersion: 1,
 			unitId,
@@ -1481,8 +1541,14 @@ var UnitTransactions = class {
 				absorbedInto: snapshot.target
 			})),
 			mutations: 0,
+			...snapshot.validationPlan === void 0 ? {} : { validationPlan: snapshot.validationPlan },
 			at: this.now()
 		};
+		if (receipt?.evidenceSha256 !== void 0 && evidenceDigest(evidence) !== receipt.evidenceSha256) return {
+			ok: false,
+			code: "unit-rollback-blocked",
+			message: "receipt evidence hash does not match rebuilt evidence"
+		};
 		await writeUnitEvidence(this.options.io, this.options.home, evidence);
 		if (journal.phase !== "committed") await writeUnitJournal(this.options.io, this.options.home, {
 			...journal,
@@ -1503,7 +1569,13 @@ var UnitTransactions = class {
 		};
 		const snapshot = await readUnitSnapshot(this.options.io, this.options.home, unitId);
 		const journal = await readUnitJournal(this.options.io, this.options.home, unitId);
-		if (snapshot === null || journal === null || journal.phase !== "target-written" && journal.phase !== "sources-archived") return {
+		if (snapshot === null || journal === null || ![
+			"target-written",
+			"support-pending",
+			"source-archiving",
+			"sources-archived",
+			"unit-written"
+		].includes(journal.phase)) return {
 			ok: false,
 			code: "unit-rollback-blocked",
 			message: "unit is not roll-forwardable; manual recovery required"
@@ -1516,10 +1588,27 @@ var UnitTransactions = class {
 			message: "source checkpoint missing: " + missing.map((item) => item.name).join(",")
 		};
 		const targetAfter = await this.options.backend.readSkill(snapshot.target);
-		if (targetAfter === null) return {
+		if (targetAfter === null || targetAfter !== (snapshot.targetAfter ?? null)) return {
+			ok: false,
+			code: "unit-rollback-blocked",
+			message: "target missing or drifted; manual recovery required"
+		};
+		const liveSource = (await Promise.all(snapshot.sourceBefore.map(async (source) => ({
+			name: source.name,
+			body: await this.options.backend.readSkill(source.name)
+		})))).find((source) => source.body !== null);
+		if (liveSource !== void 0) return {
+			ok: false,
+			code: "unit-rollback-blocked",
+			message: "source is still live: " + liveSource.name
+		};
+		if ((await Promise.all(snapshot.supportAfter.map(async (file) => ({
+			path: file.path,
+			content: await this.options.backend.readSupportFile(snapshot.target, file.path)
+		})))).some((file) => file.content !== (snapshot.supportAfter.find((item) => item.path === file.path)?.content ?? null))) return {
 			ok: false,
 			code: "unit-rollback-blocked",
-			message: "target missing; manual recovery required"
+			message: "support file live hash does not match the prepared support; manual recovery required"
 		};
 		const evidence = {
 			schemaVersion: 1,
@@ -1541,6 +1630,7 @@ var UnitTransactions = class {
 				absorbedInto: snapshot.target
 			})),
 			mutations: 0,
+			...snapshot.validationPlan === void 0 ? {} : { validationPlan: snapshot.validationPlan },
 			at: this.now()
 		};
 		await writeUnitEvidence(this.options.io, this.options.home, evidence);
@@ -1700,6 +1790,8 @@ function skillLibraryUnitBackend(skills) {
 		},
 		async commit(plan, onPhase, signal, assertFence) {
 			const result = await skills.commitMerge({
+				...plan.runId === void 0 ? {} : { runId: plan.runId },
+				...plan.unitId === void 0 ? {} : { unitId: plan.unitId },
 				target: plan.target,
 				targetExists: plan.targetExists,
 				sources: plan.sources,
@@ -1709,6 +1801,10 @@ function skillLibraryUnitBackend(skills) {
 				expectedSourceBodies: plan.expectedSourceBodies,
 				origin: plan.origin,
 				summary: plan.summary,
+				...plan.skillLimits === void 0 ? {} : { limits: plan.skillLimits },
+				...plan.targetRevision === void 0 ? {} : { targetRevision: plan.targetRevision },
+				...plan.sourceRevisions === void 0 ? {} : { sourceRevisions: plan.sourceRevisions },
+				...plan.supportDigest === void 0 ? {} : { supportDigest: plan.supportDigest },
 				...onPhase === void 0 ? {} : { onPhase },
 				...signal === void 0 ? {} : { signal },
 				...assertFence === void 0 ? {} : { assertFence }
@@ -1716,6 +1812,7 @@ function skillLibraryUnitBackend(skills) {
 			return {
 				ok: result.ok,
 				message: result.message,
+				...result.code === void 0 ? {} : { code: result.code },
 				...result.archived === void 0 ? {} : { archived: result.archived },
 				...result.mutations === void 0 ? {} : { mutations: result.mutations }
 			};
@@ -6463,11 +6560,7 @@ function parseIndex(raw) {
 			...typeof record.resultRef === "string" ? { resultRef: record.resultRef } : {},
 			...typeof record.failure === "string" ? { failure: record.failure } : {},
 			...typeof record.supersededAt === "number" ? { supersededAt: record.supersededAt } : {},
-			...typeof record.parentRunId === "string" ? { parentRunId: record.parentRunId } : {},
-			...record.mergeStatus === "running" || record.mergeStatus === "succeeded" || record.mergeStatus === "failed" || record.mergeStatus === "cancelled" || record.mergeStatus === "awaiting-approval" || record.mergeStatus === "undone" || record.mergeStatus === "superseded" || record.mergeStatus === "interrupted" || record.mergeStatus === "orphan" ? { mergeStatus: record.mergeStatus } : {},
-			...typeof record.stagingRef === "string" ? { stagingRef: record.stagingRef } : {},
-			...typeof record.pairKey === "string" ? { pairKey: record.pairKey } : {},
-			...Array.isArray(record.pairs) ? { pairs: record.pairs } : {}
+			...typeof record.parentRunId === "string" ? { parentRunId: record.parentRunId } : {}
 		});
 	}
 	return {
@@ -6501,7 +6594,6 @@ function newRunRegistry(options) {
 	const orphanOf = (row) => ({
 		...row,
 		state: "failed",
-		mergeStatus: "orphan",
 		endedAt: now(),
 		failure: ORPHAN_FAILURE
 	});
@@ -6643,8 +6735,7 @@ function newRunRegistry(options) {
 			if (this.find(id)?.state !== "running") return false;
 			await this.settle(id, {
 				state: "failed",
-				failure: "orphan",
-				mergeStatus: "orphan"
+				failure: "orphan"
 			});
 			return true;
 		},
@@ -6661,10 +6752,6 @@ function newRunRegistry(options) {
 				pid: process.pid,
 				...seed?.command !== void 0 ? { command: seed.command } : {},
 				...seed?.parentRunId !== void 0 ? { parentRunId: seed.parentRunId } : {},
-				...seed?.mergeStatus !== void 0 ? { mergeStatus: seed.mergeStatus } : {},
-				...seed?.stagingRef !== void 0 ? { stagingRef: seed.stagingRef } : {},
-				...seed?.pairKey !== void 0 ? { pairKey: seed.pairKey } : {},
-				...seed?.pairs !== void 0 ? { pairs: seed.pairs } : {},
 				...seed?.total !== void 0 ? { progress: {
 					done: 0,
 					total: seed.total
@@ -6696,7 +6783,6 @@ function newRunRegistry(options) {
 				const row = owned.get(id);
 				if (row === void 0 || row.supersededAt !== void 0) continue;
 				row.supersededAt = now();
-				if (row.kind === "merge") row.mergeStatus = "superseded";
 				changed = true;
 			}
 			if (changed) await persist();
@@ -6711,7 +6797,6 @@ function newRunRegistry(options) {
 				for (const row of merged.values()) {
 					if (row.kind !== kind || row.supersededAt !== void 0) continue;
 					row.supersededAt = now();
-					if (row.kind === "merge") row.mergeStatus = "superseded";
 					marked += 1;
 				}
 				const kept = capped([...merged.values()]);
@@ -6735,10 +6820,43 @@ function newRunRegistry(options) {
 			row.endedAt = now();
 			if (outcome.resultRef !== void 0) row.resultRef = outcome.resultRef;
 			if (outcome.failure !== void 0) row.failure = outcome.failure;
-			if (outcome.mergeStatus !== void 0) row.mergeStatus = outcome.mergeStatus;
 			controllers.delete(id);
 			await persist();
 		},
+		async settleRecovered(id, outcome) {
+			if (owned.get(id) !== void 0) {
+				await this.settle(id, outcome);
+				return owned.get(id)?.state === outcome.state;
+			}
+			let changed = false;
+			await transactIo(options.io, path, (current) => {
+				const onDisk = parseIndex(current);
+				const row = onDisk.records.find((item) => item.id === id);
+				if (row === void 0) return current;
+				if (!(row.state === "running" && ownerIsGone(row) || row.state === "failed" && row.failure === ORPHAN_FAILURE)) return current;
+				changed = true;
+				const next = {
+					...row,
+					state: outcome.state,
+					endedAt: now(),
+					...outcome.resultRef === void 0 ? {} : { resultRef: outcome.resultRef },
+					...outcome.failure === void 0 ? {} : { failure: outcome.failure }
+				};
+				const kept = capped(onDisk.records.map((item) => item.id === id ? next : item));
+				const live = kept.filter((item) => item.state === "running");
+				const done = kept.filter((item) => TERMINAL.has(item.state));
+				return JSON.stringify({
+					schemaVersion: 2,
+					runs: [
+						...live,
+						...done,
+						...onDisk.foreign
+					]
+				}, null, 2);
+			});
+			if (changed) await this.load();
+			return changed;
+		},
 		inFlight(kind) {
 			return view().find((row) => row.state === "running" && (kind === void 0 || row.kind === kind));
 		},
@@ -7831,7 +7949,7 @@ function renderLongRunTable() {
 * `client` probes run in the browser half, where the host has no view of the seats.
 * @module @lmzhen/dsh-evolution-core
 */
-/** The 25 probes, in service-name order (the guard checks this list against the tree). */
+/** The 26 probes, in service-name order (the guard checks this list against the tree). */
 const PLATFORM_SERVICE_PROBES = Object.freeze([
 	{
 		service: "agents",
@@ -7870,7 +7988,7 @@ const PLATFORM_SERVICE_PROBES = Object.freeze([
 	},
 	{
 		service: "evolutionMerge",
-		feature: "merge rows and run state",
+		feature: "merge command delegation and the merge doctor fact",
 		side: "host"
 	},
 	{
@@ -10017,6 +10135,54 @@ function staleRouteStubs(indexes) {
 	return out.sort((a, b) => a.skill.localeCompare(b.skill) || a.v - b.v || a.owner.localeCompare(b.owner));
 }
 //#endregion
+//#region lib/types/skill-revision.js
+/**
+* Content-revision identity shared by every planner that records a decision and every
+* committer that re-checks it.
+*
+* A skill's revision covers the trimmed NAME, the SKILL.md body and every support file
+* (`references/…`, `templates/…`, `scripts/…`, `assets/…`), each as read through the
+* store. The merge domain records a decision-time anchor and the store compares the live
+* anchor before writing; both sides must hash the same bytes or the compare is meaningless,
+* so the hash lives HERE and nowhere else.
+*/
+/**
+* Canonical fingerprint of one skill's content.
+*
+* Field order and separators are a wire format: decisions persist anchors derived from
+* this string, and a later commit compares against it. Do not reorder.
+* @param name - the (trimmed) skill name.
+* @param body - the SKILL.md text.
+* @param files - every support file under SUPPORT_DIRS.
+* @returns the fingerprint string to hash.
+*/
+function revisionFingerprint(name, body, files) {
+	const ordered = [...files].sort((left, right) => left.path.localeCompare(right.path));
+	return name + "\0" + body + "\0" + ordered.map((file) => file.path + "\0" + file.content).join("\0");
+}
+/** Hash one fingerprint into its anchor (CRLF-normalized by contentHash). */
+function revisionAnchor(name, body, files) {
+	return {
+		kind: "present",
+		sha256: contentHash(revisionFingerprint(name, body, files))
+	};
+}
+/** Anchor for a skill whose body may be absent. */
+function revisionAnchorOf(name, body, files) {
+	return body === null ? { kind: "absent" } : revisionAnchor(name, body, files);
+}
+/**
+* Support digest over several skills' fingerprints: the union of their full content.
+*
+* Sort is by fingerprint (name-prefixed), so name order and fingerprint order agree and
+* a decision-time digest can be recomputed by a committer that only has hashes.
+* @param fingerprints - one fingerprint per involved skill (missing skills simply absent).
+* @returns the digest recorded on a decision and re-checked at commit.
+*/
+function revisionSupportDigest(fingerprints) {
+	return contentHash([...fingerprints].sort().join("\0"));
+}
+//#endregion
 //#region lib/types/skill-store.js
 /**
 * Skill library management for the self-evolution plugin.
@@ -10453,6 +10619,11 @@ function serialForRoot(root) {
 	ROOT_SERIAL.set(key, created);
 	return created;
 }
+/** Same-content test for two revision anchors (absent only equals absent). */
+function sameRevisionAnchor(expected, live) {
+	if (expected.kind !== live.kind) return false;
+	return expected.kind === "absent" || expected.sha256 === live.sha256;
+}
 var SkillLibrary = class {
 	root;
 	limits;
@@ -10727,7 +10898,53 @@ var SkillLibrary = class {
 		}
 	}
 	/**
-	
+	* Content anchor of one live skill: name + body + every support file under SUPPORT_DIRS.
+	*
+	* This is the commit-side counterpart of the decision-time anchor recorded by the merge
+	* domain (see skill-revision.ts): both sides call the same fingerprint, so a changed
+	* source, target or support file cannot slip past the commit CAS.
+	* @param rawName - caller-supplied skill name (trimmed here).
+	* @returns present anchor, or absent when the skill has no SKILL.md.
+	*/
+	async revisionFingerprint(rawName) {
+		const name = rawName.trim();
+		if (this.badName(name) !== null) return null;
+		let body;
+		try {
+			body = await this.io.readText(join(this.dirOf(name), "SKILL.md"));
+		} catch (error) {
+			if (error?.code === "EISDIR") return null;
+			throw error;
+		}
+		if (body === null) return null;
+		return revisionFingerprint(name, body, await this.liveSupportFiles(name));
+	}
+	/** Content anchor of one live skill; the hash a decision records and a commit re-checks. */
+	async revisionAnchor(rawName) {
+		const fingerprint = await this.revisionFingerprint(rawName);
+		return fingerprint === null ? { kind: "absent" } : {
+			kind: "present",
+			sha256: contentHash(fingerprint)
+		};
+	}
+	/** Every support file of one live skill, in listing order; unreadable/missing files fail loud. */
+	async liveSupportFiles(rawName) {
+		const name = rawName.trim();
+		if (this.badName(name) !== null) return [];
+		const listed = await this.listSupportFiles(name);
+		if (isUnknown(listed)) throw new Error("support file list is unknown: " + name);
+		if (!isPresent(listed)) return [];
+		const dir = this.dirOf(name);
+		return await Promise.all(listed.value.map(async (path) => {
+			const content = await this.io.readText(join(dir, ...path.replace(/\\/g, "/").split("/").filter(Boolean)));
+			if (content === null) throw new Error("support file disappeared: " + name + "/" + path);
+			return {
+				path,
+				content
+			};
+		}));
+	}
+	/**
 	* Single path-building choke point (rc.42 audit P2-5): every directory path
 	
 	* is built from the TRIMMED name, so a name that passes `badName` (which
@@ -11026,6 +11243,16 @@ var SkillLibrary = class {
 		if (this.badName(name) !== null) return [];
 		return await loadVersions(this.root, this.io, name);
 	}
+	/** Versions from the latest merge baseline onward; old versions stay listable via listVersions. */
+	async listBaselineVersions(rawName) {
+		const versions = await this.listVersions(rawName);
+		let start = -1;
+		for (let index = versions.length - 1; index >= 0; index -= 1) if (versions[index]?.unitHead?.baseline === true) {
+			start = index;
+			break;
+		}
+		return start < 0 ? versions : versions.slice(start);
+	}
 	/**
 	* One version's content, read back from the content-addressed blob store.
 	* @param rawName - the skill's name.
@@ -11038,6 +11265,40 @@ var SkillLibrary = class {
 		if (this.badName(name) !== null) return null;
 		return await loadVersionContent(this.root, this.io, name, v);
 	}
+	/** Read an archived skill's human-readable reason, exact or stamped. */
+	async readArchiveReason(rawName) {
+		const name = rawName.trim();
+		if (this.badName(name) !== null) return null;
+		const archiveRoot = join(this.root, ".archive");
+		const exact = await this.io.readText(join(archiveRoot, name, ".archive-reason"));
+		if (exact !== null) return exact.trim();
+		const entries = await this.io.list(archiveRoot).catch(() => []);
+		for (const entry of [...entries].reverse()) {
+			if (entry !== name && !entry.startsWith(name + "-")) continue;
+			const marker = await this.io.readText(join(archiveRoot, entry, ".archive-name"));
+			if (marker !== null && marker.trim() !== name) continue;
+			const reason = await this.io.readText(join(archiveRoot, entry, ".archive-reason"));
+			if (reason !== null) return reason.trim();
+		}
+		return null;
+	}
+	/** Read an archived skill body (SKILL.md) by its original name, exact or stamped. */
+	async readArchived(rawName) {
+		const name = rawName.trim();
+		if (this.badName(name) !== null) return null;
+		const archiveRoot = join(this.root, ".archive");
+		const exact = await this.io.readText(join(archiveRoot, name, "SKILL.md"));
+		if (exact !== null) return exact;
+		const entries = await this.io.list(archiveRoot).catch(() => []);
+		for (const entry of [...entries].reverse()) {
+			if (entry !== name && !entry.startsWith(name + "-")) continue;
+			const marker = await this.io.readText(join(archiveRoot, entry, ".archive-name"));
+			if (marker !== null && marker.trim() !== name) continue;
+			const text = await this.io.readText(join(archiveRoot, entry, "SKILL.md"));
+			if (text !== null) return text;
+		}
+		return null;
+	}
 	/**
 	* Pin or unpin a skill (`.pinned` marker). Pinned skills are protected from
 	* deletion, from background-review writes, and from the lifecycle — a
@@ -11537,6 +11798,18 @@ var SkillLibrary = class {
 		if (typeof name !== "string") return false;
 		return name !== "" && name !== "." && name !== ".." && !name.includes("/") && !name.includes("\\") && basename(name) === name;
 	}
+	/** Mark merge-absorbed sources archived in the usage sidecar (FR-DATA-07). */
+	async foldArchivedUsage(sources, at) {
+		try {
+			await mutateUsage(this.root, this.io, (map) => {
+				for (const name of sources) {
+					const record = getRecord(map, name);
+					record.state = "archived";
+					record.archived_at = at;
+				}
+			});
+		} catch {}
+	}
 	async archive(rawName, options = {}, origin = this.authority.origin) {
 		const name = rawName.trim();
 		const badName = this.badName(name, { allowReserved: true });
@@ -11648,6 +11921,7 @@ var SkillLibrary = class {
 			ok: false,
 			message: `来源技能「${protectedSource}」是受保护的内置技能。`
 		};
+		const limits = plan.limits ?? this.limits;
 		return await this.serial(async () => {
 			const dir = this.dirOf(target);
 			const targetPath = join(dir, "SKILL.md");
@@ -11701,7 +11975,35 @@ var SkillLibrary = class {
 				};
 				sourceBodies.set(source, body);
 			}
-			const validation = validateFrontmatter(plan.body, target, this.limits);
+			if (plan.targetRevision !== void 0) {
+				const liveTargetRevision = await this.revisionAnchor(target);
+				if (!sameRevisionAnchor(plan.targetRevision, liveTargetRevision)) return {
+					ok: false,
+					code: "target-changed",
+					message: `目标技能「${target}」的内容在决策之后被改过；拒绝提交（未写入任何内容）。`
+				};
+			}
+			if (plan.sourceRevisions !== void 0) for (const [name, expected] of Object.entries(plan.sourceRevisions)) {
+				if (!sources.includes(name)) continue;
+				if (!sameRevisionAnchor(expected, await this.revisionAnchor(name))) return {
+					ok: false,
+					code: "source-changed",
+					message: `来源技能「${name}」的内容在决策之后被改过；拒绝提交（未写入任何内容）。`
+				};
+			}
+			if (plan.supportDigest !== void 0) {
+				const fingerprints = [];
+				for (const name of [target, ...sources]) {
+					const fingerprint = await this.revisionFingerprint(name);
+					if (fingerprint !== null) fingerprints.push(fingerprint);
+				}
+				if (revisionSupportDigest(fingerprints) !== plan.supportDigest) return {
+					ok: false,
+					code: "support-changed",
+					message: "参与合并的技能支撑文件在决策之后被改过；拒绝提交（未写入任何内容）。"
+				};
+			}
+			const validation = validateFrontmatter(plan.body, target, limits);
 			if (validation) return {
 				ok: false,
 				message: validation
@@ -11719,9 +12021,9 @@ var SkillLibrary = class {
 					message: `支撑文件重复：${file.path}`
 				};
 				supportPaths.add(file.path);
-				if (Buffer.byteLength(file.content, "utf8") > this.limits.maxSkillFileBytes) return {
+				if (Buffer.byteLength(file.content, "utf8") > limits.maxSkillFileBytes) return {
 					ok: false,
-					message: `支撑文件超过 ${this.limits.maxSkillFileBytes} 字节：${file.path}`
+					message: `支撑文件超过 ${limits.maxSkillFileBytes} 字节：${file.path}`
 				};
 				const threat = this.contentThreatBlock(file.content);
 				if (threat) return {
@@ -11738,18 +12040,21 @@ var SkillLibrary = class {
 					message: `正文引用了未提供的支撑文件「${ref}」；拒绝提交。`
 				};
 			}
-			const unitId = "u-" + Date.now().toString(36) + "-" + (nextUnitSeq += 1).toString(36);
+			const unitId = plan.unitId ?? "u-" + Date.now().toString(36) + "-" + (nextUnitSeq += 1).toString(36);
+			const supportMoves = plan.supportFiles.map((file) => {
+				const previous = supportPrevious.get(file.path) ?? null;
+				return {
+					path: file.path,
+					kind: previous === null ? "created" : "moved",
+					to: file.path,
+					...previous === null ? {} : { beforeRef: contentHash(previous) },
+					afterRef: contentHash(file.content)
+				};
+			});
 			const unitHead = {
-				moves: plan.supportFiles.map((file) => {
-					const previous = supportPrevious.get(file.path) ?? null;
-					return {
-						path: file.path,
-						kind: previous === null ? "created" : "moved",
-						to: file.path,
-						...previous === null ? {} : { beforeRef: contentHash(previous) },
-						afterRef: contentHash(file.content)
-					};
-				}),
+				...plan.runId === void 0 ? {} : { runId: plan.runId },
+				baseline: true,
+				moves: supportMoves,
 				sources: [{ skill: target }, ...sources.map((source) => ({ skill: source }))]
 			};
 			const archived = [];
@@ -11860,6 +12165,7 @@ var SkillLibrary = class {
 					archived.push(source);
 				}
 				await plan.onPhase?.("sources-archived");
+				await this.foldArchivedUsage(sources, (/* @__PURE__ */ new Date()).toISOString());
 				await plan.onPhase?.("unit-written");
 				return {
 					ok: true,
@@ -14653,13 +14959,18 @@ const PARAM_EXPOSURE = Object.freeze([
 	{
 		id: "evolution-approval.enabled",
 		group: "deployment",
-		tier: "E2",
+		tier: "E3",
 		authority: "cordis",
 		owner: "evolution-approval",
-		applies: "none",
+		applies: "live",
 		docAnchor: "PARAMETERS.md#deployment",
-		summary: "Require approval before a staged write executes.",
-		why: "security"
+		summary: "Master approval switch: run the approval pipeline for foreground writes.",
+		label: "启用批准流水线",
+		hint: "关闭后前台写入不再经批准。",
+		control: "switch",
+		unit: "",
+		values: "",
+		card: "evolution-approval"
 	},
 	{
 		id: "evolution-approval.stageForeground",
@@ -15516,4 +15827,4 @@ function isIgnorableEvent(event) {
 	return classifySessionEvent(event) !== "model";
 }
 //#endregion
-export { AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DIAGNOSTICS_FACT_KEYS, DIAGNOSTICS_RUNTIME_KEYS, DIAGNOSTICS_VIEW_SCHEMA_VERSION, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_PRESET_IDS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, HOST_ROUTES, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAINER_PRESET_ID, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MODEL_SESSION_EVENT_TYPES as MODEL_SESSION_EVENTS, MODEL_SESSION_EVENT_TYPES, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_LINE, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRICTED_PRESET_DISPLAY, RESTRICTED_TOOLS_ROW_ID, RESTRICTOR_MODULE, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, REVIEWER_PRESET_ID, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNIT_JOURNAL_PHASES, UNIT_JOURNAL_SCHEMA_VERSION, UNIT_STORAGE_SCHEMA_VERSION, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, UnitTransactions, VERSION_SUMMARY_MAX_CHARS, absentHostServices, acquireTreeWriteLock, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assertUnitJournalTransition, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, blobPath, bodyCost, buildCuratorRunReport, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, classifySessionEvent, clearReviewChannel, collectReadSkillNames, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, createSubagentChannel, daysSinceIso, declaredReportStamp, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, executeUnitUndo, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, hostSurface, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isIgnorableEvent, isLandmark, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, json, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, methodNotAllowed, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, planUnitUndoAcross, policyStageLimits, probeAbsent, probeChannelState, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, protectedSkillNamesOf, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonObject, readNumberParam, readParam, readTreeLock, readUnitEvidence, readUnitIndex, readUnitJournal, readUnitReceipt, readUnitSnapshot, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, registerHostRoutes, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillLibraryUnitBackend, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, subagentChannelState, supportFileReadOf, supportRefs, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, treeLockFile, trimPatternBoundaries, unhookedSupportPointers, unitEvidencePath, unitIndexPath, unitJournalPath, unitJournalPhaseRank, unitMembersAreComplete, unitReceiptPath, unitSnapshotPath, unitSnapshotsDir, unitStorageKey, unwrapLive, updateSuppressedNames, upsertUnitIndex, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, validateSupportPath, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, withTreeWriteLock, writeDurableTmp, writePathSymbols, writeUnitEvidence, writeUnitJournal, writeUnitReceipt, writeUnitSnapshot, yamlPlainScalarNeedsQuotes };
+export { AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DIAGNOSTICS_FACT_KEYS, DIAGNOSTICS_RUNTIME_KEYS, DIAGNOSTICS_VIEW_SCHEMA_VERSION, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_PRESET_IDS, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, HOST_ROUTES, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAINER_PRESET_ID, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MODEL_SESSION_EVENT_TYPES as MODEL_SESSION_EVENTS, MODEL_SESSION_EVENT_TYPES, MUTATIONS_FILE_VERSION, MemoryStore, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_LINE, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRICTED_PRESET_DISPLAY, RESTRICTED_TOOLS_ROW_ID, RESTRICTOR_MODULE, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, REVIEWER_PRESET_ID, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNIT_JOURNAL_PHASES, UNIT_JOURNAL_SCHEMA_VERSION, UNIT_STORAGE_SCHEMA_VERSION, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, UnitTransactions, VERSION_SUMMARY_MAX_CHARS, absentHostServices, acquireTreeWriteLock, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assertUnitJournalTransition, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, blobPath, bodyCost, buildCuratorRunReport, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, classifySessionEvent, clearReviewChannel, collectReadSkillNames, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, createSubagentChannel, daysSinceIso, declaredReportStamp, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, executeUnitUndo, filterUnreadSkillOps, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, hostSurface, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isIgnorableEvent, isLandmark, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, json, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, methodNotAllowed, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planNamespaceMigration, planReferenceRewrite, planRehoming, planUnitUndoAcross, policyStageLimits, probeAbsent, probeChannelState, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectionText, protectedSkillNamesOf, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readHistoryIndex, readJsonObject, readNumberParam, readParam, readTreeLock, readUnitEvidence, readUnitIndex, readUnitJournal, readUnitReceipt, readUnitSnapshot, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, registerHostRoutes, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, revisionAnchor, revisionAnchorOf, revisionFingerprint, revisionSupportDigest, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillLibraryUnitBackend, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, subagentChannelState, supportFileReadOf, supportRefs, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, treeLockFile, trimPatternBoundaries, unhookedSupportPointers, unitEvidenceDigest, unitEvidencePath, unitIndexPath, unitJournalPath, unitJournalPhaseRank, unitMembersAreComplete, unitReceiptPath, unitSnapshotPath, unitSnapshotsDir, unitStorageKey, unwrapLive, updateSuppressedNames, upsertUnitIndex, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateRestructureTarget, validateSupportPath, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, withTreeWriteLock, writeDurableTmp, writePathSymbols, writeUnitEvidence, writeUnitJournal, writeUnitReceipt, writeUnitSnapshot, yamlPlainScalarNeedsQuotes };