@lmzhen/dsh-evolution-core 0.32.3 → 0.32.4

package/lib/index.js

@@ -1,7 +1,7 @@
-import { _ as scopedPackageName, c as MAINTAINER_PRESET_ID, d as RESTRICTED_TOOLS_ROW_ID, f as RESTRICTOR_MODULE, g as scopeOfNearestManifest, p as REVIEWER_PRESET_ID, s as EVOLUTION_PRESET_IDS, u as RESTRICTED_PRESET_DISPLAY } from "./ensure-BuWsjPGD.js";
+import { _ as scopedPackageName, c as MAINTAINER_PRESET_ID, d as RESTRICTED_TOOLS_ROW_ID, f as RESTRICTOR_MODULE, g as scopeOfNearestManifest, p as REVIEWER_PRESET_ID, s as EVOLUTION_PRESET_IDS, u as RESTRICTED_PRESET_DISPLAY } from "./ensure-C2tUoF5U.js";
 import { a as methodNotAllowed, c as asRecord, i as json, l as isRecord, n as MAX_REQUEST_BODY_BYTES, o as readJsonObject, r as hostSurface, s as registerHostRoutes, t as HOST_ROUTES } from "./http-routes-D1Ty6nnh.js";
-import { w as allowRowCollisions } from "./composition-DSesmTvf.js";
-import { n as errorText, t as EVOLUTION_ERRORS } from "./errors-Br2-uUSK.js";
+import { w as allowRowCollisions } from "./composition-3QFfEe56.js";
+import { n as errorText, t as EVOLUTION_ERRORS } from "./errors-DRZ9A187.js";
 import { createSubagentChannel, probeChannelState, subagentChannelState } from "./subagent/index.js";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
@@ -256,11 +256,11 @@ const UNIT_STORAGE_SCHEMA_VERSION = 1;
 function unitStorageKey(unitId) {
 	return createHash("sha256").update(unitId).digest("hex");
 }
-function unitSnapshotsDir(home) {
-	return join(home, "merge", "unit-snapshots");
+function unitSnapshotsDir(home, scope = "merge") {
+	return scope === "merge" ? join(home, "merge", "unit-snapshots") : join(home, "units", "skill", "snapshots");
 }
-function unitSnapshotPath(home, unitId) {
-	return join(unitSnapshotsDir(home), unitStorageKey(unitId) + ".json");
+function unitSnapshotPath(home, unitId, scope = "merge") {
+	return join(unitSnapshotsDir(home, scope), unitStorageKey(unitId) + ".json");
 }
 function unitEvidencePath(home, unitId) {
 	return join(home, "merge", "units", unitStorageKey(unitId), "evidence.json");
@@ -268,15 +268,15 @@ function unitEvidencePath(home, unitId) {
 function unitIndexPath(home) {
 	return join(home, "merge", "unit-index.json");
 }
-async function writeUnitSnapshot(io, home, snapshot) {
-	const path = unitSnapshotPath(home, snapshot.unitId);
+async function writeUnitSnapshot(io, home, snapshot, scope = "merge") {
+	const path = unitSnapshotPath(home, snapshot.unitId, scope);
 	const content = JSON.stringify(snapshot, null, 2) + "\n";
 	if (io.transact !== void 0) await io.transact(path, () => content);
 	else await io.writeText(path, content);
 	return path;
 }
-async function readUnitSnapshot(io, home, unitId) {
-	const raw = await io.readText(unitSnapshotPath(home, unitId));
+async function readUnitSnapshot(io, home, unitId, scope = "merge") {
+	const raw = await io.readText(unitSnapshotPath(home, unitId, scope));
 	if (raw === null) return null;
 	try {
 		return JSON.parse(raw);
@@ -371,8 +371,8 @@ const UNIT_JOURNAL_PHASES = [
 	"failed",
 	"rolled-back"
 ];
-function unitJournalPath(home, unitId) {
-	return join(home, "merge", "unit-journals", createHash("sha256").update(unitId).digest("hex") + ".json");
+function unitJournalPath(home, unitId, scope = "merge") {
+	return join(scope === "merge" ? join(home, "merge", "unit-journals") : join(home, "units", "skill", "journals"), createHash("sha256").update(unitId).digest("hex") + ".json");
 }
 function unitJournalPhaseRank(phase) {
 	return UNIT_JOURNAL_PHASES.indexOf(phase);
@@ -382,15 +382,15 @@ function assertUnitJournalTransition(from, to) {
 	if (from === "failed" || from === "rolled-back" || from === "committed") throw new Error("unit-journal-terminal:" + from);
 	if (unitJournalPhaseRank(to) <= unitJournalPhaseRank(from)) throw new Error("unit-journal-nonmonotonic:" + from + "->" + to);
 }
-async function writeUnitJournal(io, home, journal) {
-	const path = unitJournalPath(home, journal.unitId);
+async function writeUnitJournal(io, home, journal, scope = "merge") {
+	const path = unitJournalPath(home, journal.unitId, scope);
 	const content = JSON.stringify(journal, null, 2) + "\n";
 	if (io.transact !== void 0) await io.transact(path, () => content);
 	else await io.writeText(path, content);
 	return path;
 }
-async function readUnitJournal(io, home, unitId) {
-	const raw = await io.readText(unitJournalPath(home, unitId));
+async function readUnitJournal(io, home, unitId, scope = "merge") {
+	const raw = await io.readText(unitJournalPath(home, unitId, scope));
 	if (raw === null) return null;
 	try {
 		return JSON.parse(raw);
@@ -1202,13 +1202,6 @@ function unitEvidenceDigest(evidence) {
 		mutations: 0
 	})).digest("hex");
 }
-function evidenceDigest(evidence) {
-	return createHash("sha256").update(JSON.stringify({
-		...evidence,
-		at: 0,
-		mutations: 0
-	}, null, 2) + "\n").digest("hex");
-}
 var UnitTransactions = class {
 	options;
 	prepared = /* @__PURE__ */ new Map();
@@ -1441,7 +1434,7 @@ var UnitTransactions = class {
 				at: this.now()
 			};
 			if (!await lock.assertHeld()) throw new Error("unit-fence-lost");
-			const evidenceSha256 = evidenceDigest(evidence);
+			const evidenceSha256 = unitEvidenceDigest(evidence);
 			await writeUnitEvidence(this.options.io, this.options.home, evidence);
 			await writeUnitReceipt(this.options.io, this.options.home, {
 				schemaVersion: 1,
@@ -1473,7 +1466,8 @@ var UnitTransactions = class {
 	}
 	async verify(ref) {
 		if ("unitId" in ref) return await readUnitEvidence(this.options.io, this.options.home, ref.unitId);
-		const found = (await Promise.all([...this.prepared.keys()].map(async (id) => readUnitEvidence(this.options.io, this.options.home, id)))).filter((item) => item !== null && item.runId === ref.runId);
+		const entries = (await readUnitIndex(this.options.io, this.options.home)).filter((entry) => entry.runId === ref.runId);
+		const found = (await Promise.all(entries.map(async (entry) => readUnitEvidence(this.options.io, this.options.home, entry.unitId)))).filter((item) => item !== null && item.runId === ref.runId);
 		const only = found[0];
 		return found.length === 0 ? null : found.length === 1 ? only ?? null : found;
 	}
@@ -1549,7 +1543,7 @@ var UnitTransactions = class {
 			...snapshot.validationPlan === void 0 ? {} : { validationPlan: snapshot.validationPlan },
 			at: this.now()
 		};
-		if (receipt?.evidenceSha256 !== void 0 && evidenceDigest(evidence) !== receipt.evidenceSha256) return {
+		if (receipt?.evidenceSha256 !== void 0 && unitEvidenceDigest(evidence) !== receipt.evidenceSha256) return {
 			ok: false,
 			code: "unit-rollback-blocked",
 			message: "receipt evidence hash does not match rebuilt evidence"
@@ -1946,6 +1940,7 @@ function skillWriteGateContext(services, request) {
 		origin: request.origin,
 		protectedNames: protectedSkillNamesOf(services.policy),
 		readNames: services.readNames,
+		...services.readSupportFiles === void 0 ? {} : { readSupportFiles: services.readSupportFiles },
 		confirm: services.confirm,
 		...services.confirmMode === void 0 ? {} : { confirmMode: services.confirmMode },
 		...services.confirmTimeoutSeconds === void 0 ? {} : { confirmTimeoutSeconds: services.confirmTimeoutSeconds },
@@ -1974,6 +1969,7 @@ function gateArgsOf(args) {
 		action: typeof action === "string" ? action : void 0,
 		name: typeof name === "string" ? name : "",
 		absorbedInto: typeof absorbedInto === "string" && absorbedInto.trim() !== "" ? absorbedInto : void 0,
+		filePath: typeof scalars.file_path === "string" && scalars.file_path.trim() !== "" ? scalars.file_path.replace(/\\/g, "/").replace(/^\.\//, "") : void 0,
 		scalars
 	};
 }
@@ -2018,13 +2014,19 @@ const GATES = [
 	{
 		id: "read-before-write",
 		appliesTo: ["admission"],
-		run: ({ view, origin, readNames, warn }) => {
+		run: ({ view, origin, readNames, readSupportFiles, warn }) => {
 			if (origin === "foreground") return null;
 			if (readNames === void 0) {
 				warn("skill_manage: the read-before-write check could not run for this call — the session log is not readable here, so the write is allowed.");
 				return null;
 			}
 			if (view.action === void 0) return null;
+			if ((view.action === "write_file" || view.action === "remove_file") && view.filePath !== void 0) if (readSupportFiles === void 0) warn("skill_manage: the support-file read check could not run for this call — no support-file read evidence; the write is allowed.");
+			else if (readSupportFiles.get(view.name)?.has(view.filePath) === true) return null;
+			else return errorText("e-326-support-write-without-a-read", {
+				a1: view.name,
+				a2: view.filePath
+			});
 			if (!isUnreadWrite({
 				action: view.action,
 				name: view.name
@@ -9165,11 +9167,6 @@ const PLATFORM_SERVICE_PROBES = Object.freeze([
 		feature: "the state facade behind activity and replay",
 		side: "host"
 	},
-	{
-		service: "evolutionStateStore",
-		feature: "generic durable state store for assignment queue and future collections",
-		side: "host"
-	},
 	{
 		service: "llm",
 		feature: "the curator one-shot review model call",
@@ -9905,9 +9902,8 @@ function parsedArguments(signal) {
 	if (parsed === null || typeof parsed !== "object") return null;
 	return parsed;
 }
-/** The path-shaped argument of a file tool, when it carries one. */
-function readPathArgument(signal) {
-	const record = parsedArguments(signal);
+/** The path-shaped argument of one already-parsed call, when it carries one. */
+function readPathFromRecord(record) {
 	if (record === null) return null;
 	for (const key of [
 		"file_path",
@@ -9920,6 +9916,20 @@ function readPathArgument(signal) {
 	}
 	return null;
 }
+/** The path-shaped argument of a file tool, when it carries one. */
+function readPathArgument(signal) {
+	return readPathFromRecord(parsedArguments(signal));
+}
+/** The path one dispatch names, for the read-evidence projection. */
+function dispatchPathOf(step) {
+	let parsed = step.arguments;
+	if (typeof parsed === "string") try {
+		parsed = JSON.parse(parsed);
+	} catch {
+		return null;
+	}
+	return parsed !== null && typeof parsed === "object" ? readPathFromRecord(parsed) : null;
+}
 /**
 * Read one dispatch as a SUPPORT-FILE read attributed to a skill: a read of
 * `<root>/<skill>/<support dir>/…` is demand evidence for that one file, the
@@ -9930,11 +9940,8 @@ function readPathArgument(signal) {
 * @returns the skill name and the skill-root-relative path, or `null` when the
 *   dispatch is not a support-file read. Pure: no IO, no service lookup.
 */
-function supportFileReadOf(signal, options) {
-	if (!options.toolNames.includes(signal.name)) return null;
-	if (signal.ok === false) return null;
-	const raw = readPathArgument(signal);
-	if (raw === null) return null;
+/** Attribute one raw path string to a skill support file (pure; no IO). */
+function supportFileReadFromPath(raw, options) {
 	const normalized = raw.replace(/\\/g, "/").trim();
 	if (normalized === "" || normalized.split("/").includes("..")) return null;
 	const root = options.root.replace(/\\/g, "/").replace(/\/+$/, "");
@@ -9959,6 +9966,12 @@ function supportFileReadOf(signal, options) {
 		rel: parts.slice(1).join("/")
 	};
 }
+function supportFileReadOf(signal, options) {
+	if (!options.toolNames.includes(signal.name)) return null;
+	if (signal.ok === false) return null;
+	const raw = readPathArgument(signal);
+	return raw === null ? null : supportFileReadFromPath(raw, options);
+}
 function skillReadNameOf(signal) {
 	if (!SKILL_READ_TOOL_NAMES.has(signal.name)) return void 0;
 	if (signal.ok === false) return void 0;
@@ -9989,6 +10002,18 @@ function collectReadSkillNames(events) {
 	}
 	return names;
 }
+/** Every skill support file this log read through a non-failed configured file tool. */
+function collectReadSupportFiles(events, options) {
+	const reads = /* @__PURE__ */ new Map();
+	for (const signal of foldToolDispatches(events)) {
+		const hit = supportFileReadOf(signal, options);
+		if (hit === null) continue;
+		const set = reads.get(hit.skill) ?? /* @__PURE__ */ new Set();
+		set.add(hit.rel);
+		reads.set(hit.skill, set);
+	}
+	return reads;
+}
 /** Tool names that touch the skill library at all — the review's skill-signal set. */
 const SKILL_TOOL_NAMES = new Set([...SKILL_READ_TOOL_NAMES, "skill_manage"]);
 /**
@@ -10386,7 +10411,9 @@ const projectionHistorySchema = z.object({
 const readsStateSchema = z.object({ reads: z.array(z.object({
 	key: z.string(),
 	skill: z.string().nullable(),
-	failed: z.boolean()
+	failed: z.boolean(),
+	file: z.string().nullable().optional(),
+	tool: z.string().optional()
 }).strict()) }).strict();
 const signalsStateSchema = z.object({
 	through: z.number().int().min(-1).max(Number.MAX_SAFE_INTEGER),
@@ -10461,12 +10488,22 @@ const evolutionReadsProjection = {
 			reads[at] = {
 				key: entry.key,
 				skill: entry.skill,
-				failed
+				failed,
+				...entry.file === void 0 ? {} : { file: entry.file },
+				...entry.tool === void 0 ? {} : { tool: entry.tool }
 			};
 			return { reads };
 		};
 		if (step.name === "") return settled();
 		if (at >= 0) return settled();
+		const file = dispatchPathOf(step);
+		if (file !== null) return { reads: [...state.reads.slice(-511), {
+			key: step.key,
+			skill: null,
+			failed: step.outcome?.ok === false,
+			file,
+			tool: step.name
+		}] };
 		if (!isSkillReadToolName(step.name)) return state;
 		const skill = skillReadNameOf({
 			kind: step.kind,
@@ -10642,6 +10679,45 @@ function sessionReadSkillNames(ctx, session) {
 	const events = session.readEvents?.();
 	return events === void 0 ? void 0 : collectReadSkillNames(events);
 }
+/**
+* Skill support files ONE session read through a non-failed file tool (P2-27).
+*
+* platform-declaration anchor: `sessionProjections` is declared by
+* `@deepseek-ai/dsh-session-projection` (its registry; capability-probed here).
+* Same two readers as {@link sessionReadSkillNames}: the family projection first,
+* then the structural log view. `undefined` means "no evidence", not "nothing was
+* read" - the write gate then keeps its fail-open posture.
+* @param ctx - a context of the runtime.
+* @param session - the session whose reads are wanted.
+* @param options - the skills root and the configured file-tool names.
+* @returns skill -> set of skill-root-relative support paths.
+*/
+function sessionReadSupportFiles(ctx, session, options) {
+	if (session === void 0) return void 0;
+	if (isProjectableSession(session)) {
+		installEvolutionProjections(ctx);
+		const state = ctx.get("sessionProjections")?.stateOf(session, "evolutionReads");
+		if (state !== void 0) {
+			const toolNames = options.toolNames ?? DEFAULT_SUPPORT_READ_TOOL_NAMES;
+			const reads = /* @__PURE__ */ new Map();
+			for (const entry of state.reads) {
+				if (entry.failed || typeof entry.file !== "string") continue;
+				if (entry.tool !== void 0 && !toolNames.includes(entry.tool)) continue;
+				const hit = supportFileReadFromPath(entry.file, { root: options.root });
+				if (hit === null) continue;
+				const set = reads.get(hit.skill) ?? /* @__PURE__ */ new Set();
+				set.add(hit.rel);
+				reads.set(hit.skill, set);
+			}
+			return reads;
+		}
+	}
+	const events = session.readEvents?.();
+	return events === void 0 ? void 0 : collectReadSupportFiles(events, {
+		toolNames: options.toolNames ?? DEFAULT_SUPPORT_READ_TOOL_NAMES,
+		root: options.root
+	});
+}
 /** Actions whose target must have been read first (create is authorship, so it is exempt). */
 const READ_REQUIRED_ACTIONS = Object.freeze([
 	"edit",
@@ -11258,6 +11334,211 @@ function staleRouteStubs(indexes) {
 	return out.sort((a, b) => a.skill.localeCompare(b.skill) || a.v - b.v || a.owner.localeCompare(b.owner));
 }
 //#endregion
+//#region lib/types/write-kernel.js
+/**
+* The family's single write primitive: compare the baseline INSIDE the write
+* transaction, never overwrite a concurrent value, and compensate only this
+* unit's own writes. Business state machines stay in their domain owners.
+*/
+var WriteKernel = class {
+	io;
+	transact;
+	now;
+	constructor(options) {
+		this.io = options.io;
+		this.transact = options.transact;
+		this.now = options.now ?? Date.now;
+	}
+	/** @returns the current time source; exposed for adapters that stamp evidence. */
+	clock() {
+		return this.now();
+	}
+	/**
+	* Run a read-modify-write task inside the same transaction seam. Unlike
+	* writeOne, task errors keep their type (state files rely on WRITE_GATE_ERROR_NAME)
+	* and only committed-only failures become warnings. expected is optional because
+	* the state medium passes the task the locked current value itself.
+	*/
+	async run(target, task) {
+		let invoked = false;
+		let conflict = false;
+		const invoke = async (current) => {
+			if (target.expected !== void 0 && current !== target.expected) {
+				conflict = true;
+				throw Object.assign(/* @__PURE__ */ new Error("concurrent modification detected: " + target.path), { noWrite: true });
+			}
+			invoked = true;
+			return await task(current);
+		};
+		try {
+			if (this.transact !== void 0) await this.transact(this.io, target.path, invoke);
+			else if (this.io.transact !== void 0) await this.io.transact(target.path, invoke);
+			else {
+				const current = await this.io.readText(target.path);
+				const next = await invoke(current);
+				if (next === null && current !== null) await this.io.remove(target.path);
+				else if (next !== null && next !== current) await this.io.writeText(target.path, next);
+			}
+		} catch (error) {
+			if (conflict) throw Object.assign(/* @__PURE__ */ new Error("concurrent modification detected: " + target.path), { noWrite: true });
+			if (isCommittedWarning(error)) return { warnings: [error instanceof Error ? error.message : String(error)] };
+			throw error;
+		}
+		if (!invoked) throw new Error("internal error: the write transaction for " + target.path + " did not invoke the task; no write was performed");
+		return {};
+	}
+	/**
+	* Write one target only if the current bytes still equal the baseline.
+	* A conflict performs no write. With guardBaseline:false a stale callback
+	* defers (returns the current bytes) so a retrying transact can re-observe;
+	* if no retry ever writes, the result is still a conflict.
+	*/
+	async writeOne(target, options = {}) {
+		const guard = options.guardBaseline !== false;
+		let wrote = false;
+		let deferred = false;
+		let conflict = false;
+		const task = (current) => {
+			if (current !== target.expected) {
+				if (guard) {
+					conflict = true;
+					throw Object.assign(/* @__PURE__ */ new Error("concurrent modification detected: " + target.path), { noWrite: true });
+				}
+				deferred = true;
+				return current;
+			}
+			wrote = true;
+			return target.next;
+		};
+		try {
+			if (this.transact !== void 0) await this.transact(this.io, target.path, task);
+			else if (this.io.transact !== void 0) await this.io.transact(target.path, task);
+			else {
+				const current = await this.io.readText(target.path);
+				const next = task(current);
+				if (next === null && current !== null) await this.io.remove(target.path);
+				else if (next !== null && next !== current) await this.io.writeText(target.path, next);
+			}
+		} catch (error) {
+			if (conflict) return {
+				ok: false,
+				changed: [],
+				errors: [{
+					code: "cas-conflict",
+					message: error instanceof Error ? error.message : String(error),
+					target: target.path
+				}]
+			};
+			if (isCommittedWarning(error)) return {
+				ok: true,
+				changed: [target.path],
+				errors: [],
+				warnings: [error instanceof Error ? error.message : String(error)]
+			};
+			return {
+				ok: false,
+				changed: [],
+				errors: [{
+					code: "write-failed",
+					message: error instanceof Error ? error.message : String(error),
+					target: target.path
+				}]
+			};
+		}
+		if (conflict || !wrote && deferred) return {
+			ok: false,
+			changed: [],
+			errors: [{
+				code: "cas-conflict",
+				message: "concurrent modification detected: " + target.path,
+				target: target.path
+			}]
+		};
+		if (!wrote) return {
+			ok: false,
+			changed: [],
+			errors: [{
+				code: "write-failed",
+				message: "transaction did not invoke the write task: " + target.path,
+				target: target.path
+			}]
+		};
+		return {
+			ok: true,
+			changed: [target.path],
+			errors: []
+		};
+	}
+	/**
+	* Write a plan in order. A preflight drift writes nothing; a later failure
+	* compensates only the targets this commit wrote, and only while they still
+	* hold this commit's bytes.
+	*/
+	async commit(targets) {
+		for (const target of targets) if (await this.io.readText(target.path) !== target.expected) return {
+			ok: false,
+			changed: [],
+			errors: [{
+				code: "cas-conflict",
+				message: "target changed after plan: " + target.path,
+				target: target.path
+			}]
+		};
+		const written = [];
+		for (const target of targets) {
+			const result = await this.writeOne(target);
+			if (!result.ok) {
+				const compensation = await this.compensate(written);
+				return {
+					ok: false,
+					changed: written.map((item) => item.path),
+					errors: [...result.errors, ...compensation]
+				};
+			}
+			written.push(target);
+		}
+		return {
+			ok: true,
+			changed: written.map((item) => item.path),
+			errors: []
+		};
+	}
+	/**
+	* Restore a target to its before bytes only if it still holds the bytes this
+	* unit wrote. A concurrent writer wins and the compensation is reported.
+	*/
+	async restore(target) {
+		const result = await this.writeOne({
+			path: target.path,
+			expected: target.after,
+			next: target.before
+		});
+		if (result.ok) return result;
+		if (result.errors.some((error) => error.code === "cas-conflict")) return {
+			ok: false,
+			changed: [],
+			errors: [{
+				code: "compensation-blocked",
+				message: "compensation refused: target changed after this unit; leave the concurrent bytes in place",
+				target: target.path
+			}]
+		};
+		return result;
+	}
+	async compensate(written) {
+		const errors = [];
+		for (const target of [...written].reverse()) {
+			const result = await this.restore({
+				path: target.path,
+				before: target.expected,
+				after: target.next
+			});
+			if (!result.ok) errors.push(...result.errors);
+		}
+		return errors;
+	}
+};
+//#endregion
 //#region lib/types/mutation-unit.js
 function underRoot(rootDir, target) {
 	if (rootDir === void 0 || rootDir === "") return false;
@@ -11393,7 +11674,7 @@ var MutationUnit = class {
 	snapshots;
 	hooks;
 	validateWrite;
-	transact;
+	kernel;
 	transactGuard;
 	now;
 	constructor(options) {
@@ -11405,9 +11686,14 @@ var MutationUnit = class {
 		this.snapshots = options.snapshots;
 		this.hooks = options.hooks;
 		this.validateWrite = options.validateWrite;
-		this.transact = options.transact;
-		this.transactGuard = options.transactGuard ?? true;
+		this.transactGuard = options.transactGuard !== false;
 		this.now = options.now ?? Date.now;
+		const transact = options.transact;
+		this.kernel = new WriteKernel({
+			io: this.io,
+			...transact === void 0 ? {} : { transact },
+			now: this.now
+		});
 	}
 	preview(request) {
 		const validation = validateMutationRequest(request, this.limits);
@@ -11482,6 +11768,7 @@ var MutationUnit = class {
 					snapshots.push({
 						target: op.target,
 						before: current,
+						after: op.kind === "write" ? op.content : null,
 						baseline
 					});
 				}
@@ -11527,7 +11814,8 @@ var MutationUnit = class {
 					const snapshot = snapshots.find((entry) => entry.target === op.target);
 					if (snapshot === void 0) throw new Error("snapshot missing for " + op.target);
 					try {
-						await this.applyOp(op, snapshot.baseline);
+						const opWarnings = await this.applyOp(op, snapshot.baseline);
+						warnings.push(...opWarnings);
 						changed.push(op.target);
 					} catch (error) {
 						if (error?.noWrite !== true) changed.push(op.target);
@@ -11542,13 +11830,6 @@ var MutationUnit = class {
 					target: primary,
 					roots: validation.roots.map((root) => root.name)
 				}));
-				await bestEffort(async () => this.journal?.write({
-					unitId,
-					phase: "committed",
-					changed,
-					target: primary,
-					roots: validation.roots.map((root) => root.name)
-				}));
 				if (this.snapshots !== void 0) await bestEffort(() => this.snapshots.write({
 					unitId,
 					state: "committed",
@@ -11556,6 +11837,13 @@ var MutationUnit = class {
 					...cleanup,
 					createdAt: this.now()
 				}));
+				await bestEffort(async () => this.journal?.write({
+					unitId,
+					phase: "committed",
+					changed,
+					target: primary,
+					roots: validation.roots.map((root) => root.name)
+				}));
 				try {
 					await this.hooks?.committed?.({
 						unitId,
@@ -11861,38 +12149,24 @@ var MutationUnit = class {
 		});
 	}
 	async applyOp(op, baseline) {
-		if (this.transact !== void 0 && op.kind === "write") {
-			let ran = false;
-			await this.transact(this.io, op.target, () => {
-				ran = true;
-				return op.content;
-			});
-			if (!ran) throw new Error("internal error: the write transaction did not invoke the task; no write was performed");
-			return;
-		}
-		const next = op.kind === "delete" ? null : op.content;
-		if (this.io.transact !== void 0) {
-			let conflict = false;
-			let wrote = false;
-			await this.io.transact(op.target, (current) => {
-				if (current !== baseline) {
-					if (this.transactGuard) throw new Error("concurrent modification detected: " + op.target);
-					conflict = true;
-					return current;
-				}
-				wrote = true;
-				return next;
-			});
-			if (conflict && !wrote) throw Object.assign(/* @__PURE__ */ new Error("concurrent modification detected: " + op.target), { noWrite: true });
-			return;
-		}
-		if (await this.io.readText(op.target) !== baseline) throw new Error("concurrent modification detected: " + op.target);
-		if (next === null) await this.io.remove(op.target);
-		else await this.io.writeText(op.target, next);
+		const result = await this.kernel.writeOne({
+			path: op.target,
+			expected: baseline,
+			next: op.kind === "delete" ? null : op.content,
+			...op.skill === void 0 ? {} : { skill: op.skill }
+		}, { guardBaseline: this.transactGuard });
+		if (!result.ok) throw Object.assign(new Error(result.errors[0]?.message ?? "write failed: " + op.target), { noWrite: true });
+		return [...result.warnings ?? []];
 	}
 	async rollback(snapshots) {
-		for (const snapshot of [...snapshots].reverse()) if (snapshot.before === null) await this.io.remove(snapshot.target);
-		else await this.io.writeText(snapshot.target, snapshot.before);
+		for (const snapshot of [...snapshots].reverse()) {
+			const result = await this.kernel.restore({
+				path: snapshot.target,
+				before: snapshot.before,
+				after: snapshot.after
+			});
+			if (!result.ok) throw new Error(result.errors[0]?.message ?? "rollback failed: " + snapshot.target);
+		}
 	}
 };
 function parseFileLock(raw) {
@@ -12079,10 +12353,10 @@ function unitSnapshotPort(io, home) {
 					after: op.after,
 					...op.skill === void 0 ? {} : { skill: op.skill }
 				}))
-			});
+			}, "skill");
 		},
 		async read(unitId) {
-			const snapshot = await readUnitSnapshot(io, home, unitId);
+			const snapshot = await readUnitSnapshot(io, home, unitId, "skill") ?? await readUnitSnapshot(io, home, unitId);
 			if (snapshot === null || snapshot.kind !== "tree-change" || snapshot.ops === void 0) return null;
 			return {
 				unitId,
@@ -12093,31 +12367,63 @@ function unitSnapshotPort(io, home) {
 			};
 		},
 		async listPrepared() {
-			const names = await io.list(unitSnapshotsDir(home));
 			const out = [];
-			for (const name of names) {
-				if (!name.endsWith(".json")) continue;
-				const raw = await io.readText(join(unitSnapshotsDir(home), name));
-				if (raw === null) continue;
-				let snapshot;
-				try {
-					snapshot = JSON.parse(raw);
-				} catch {
-					continue;
+			const seen = /* @__PURE__ */ new Set();
+			for (const dir of [unitSnapshotsDir(home, "skill"), unitSnapshotsDir(home)]) {
+				const names = await io.list(dir);
+				for (const name of names) {
+					if (!name.endsWith(".json")) continue;
+					const raw = await io.readText(join(dir, name));
+					if (raw === null) continue;
+					let snapshot;
+					try {
+						snapshot = JSON.parse(raw);
+					} catch {
+						continue;
+					}
+					if (snapshot.kind !== "tree-change" || snapshot.mutationState !== "prepared" || snapshot.ops === void 0) continue;
+					if (seen.has(snapshot.unitId)) continue;
+					seen.add(snapshot.unitId);
+					out.push({
+						unitId: snapshot.unitId,
+						state: "prepared",
+						ops: snapshot.ops,
+						...snapshot.cleanup === void 0 ? {} : { cleanup: snapshot.cleanup },
+						createdAt: snapshot.createdAt
+					});
 				}
-				if (snapshot.kind !== "tree-change" || snapshot.mutationState !== "prepared" || snapshot.ops === void 0) continue;
-				out.push({
-					unitId: snapshot.unitId,
-					state: "prepared",
-					ops: snapshot.ops,
-					...snapshot.cleanup === void 0 ? {} : { cleanup: snapshot.cleanup },
-					createdAt: snapshot.createdAt
-				});
 			}
 			return out;
 		}
 	};
 }
+/** Keep a bounded number of terminal tree-change snapshots; prepared units are never pruned. */
+async function pruneTreeChangeUnits(io, home, keep = 500) {
+	if (!Number.isInteger(keep) || keep < 1) return 0;
+	const dir = unitSnapshotsDir(home, "skill");
+	const names = await io.list(dir);
+	const terminal = [];
+	for (const name of names) {
+		if (!name.endsWith(".json")) continue;
+		try {
+			const snapshot = JSON.parse(await io.readText(join(dir, name)) ?? "");
+			if (snapshot.kind !== "tree-change" || snapshot.mutationState === "prepared") continue;
+			terminal.push({
+				name,
+				unitId: snapshot.unitId,
+				createdAt: snapshot.createdAt
+			});
+		} catch {}
+	}
+	terminal.sort((a, b) => b.createdAt - a.createdAt);
+	let removed = 0;
+	for (const entry of terminal.slice(keep)) {
+		await io.remove(join(dir, entry.name));
+		await io.remove(unitJournalPath(home, entry.unitId, "skill")).catch(() => {});
+		removed += 1;
+	}
+	return removed;
+}
 const PHASE = {
 	prepared: "prepared",
 	"unit-written": "unit-written",
@@ -12126,8 +12432,9 @@ const PHASE = {
 	undone: "rolled-back"
 };
 /**
-* Production adapter onto the existing unit journal. It never writes a second
-* journal file; merge and tree-change units share the one journal directory.
+* Production adapter onto the skill-owned journal directory. Merge recovery
+* reads merge/unit-journals only; legacy tree-change journals carry kind and
+* are skipped by the recovery coordinator.
 */
 function unitJournalPort(io, home) {
 	return { async write(record) {
@@ -12141,8 +12448,9 @@ function unitJournalPort(io, home) {
 			phase: PHASE[record.phase],
 			storageKey: unitStorageKey(record.unitId),
 			snapshotSha256: contentHash(JSON.stringify(record)),
+			kind: "tree-change",
 			updatedAt: Date.now()
-		});
+		}, "skill");
 	} };
 }
 //#endregion
@@ -12711,7 +13019,7 @@ var SkillLibrary = class {
 	/** Recover every prepared tree-change snapshot in the shared unit store. */
 	async recoverPreparedUnits() {
 		const home = dirname(this.root);
-		return await new MutationUnit({
+		const results = await new MutationUnit({
 			io: this.io,
 			limits: {
 				maxSkillFileBytes: this.limits.maxSkillFileBytes,
@@ -12722,6 +13030,8 @@ var SkillLibrary = class {
 			journal: unitJournalPort(this.io, home),
 			snapshots: unitSnapshotPort(this.io, home)
 		}).recoverPrepared();
+		await pruneTreeChangeUnits(this.io, home).catch(() => {});
+		return results;
 	}
 	/**
 	* Run one single-file read-modify-write for a mutator. When `transact` was
@@ -17479,13 +17789,13 @@ const PARAM_EXPOSURE = Object.freeze([
 		owner: "evolution-approval",
 		applies: "live",
 		docAnchor: "PARAMETERS.md#write-caps",
-		summary: "What the confirmation before an APPROVE does: write straight through, ask first, or treat an unanswered prompt as a cancel. The same three words skillWriteConfirm uses for a skill write.",
+		summary: "What the confirmation before an APPROVE does: execute immediately, or ask first.",
 		label: "批准前先确认",
-		hint: "点「批准」时要不要再确认一次：直接执行 / 先确认 / 等待超时即取消。默认直接执行（不打断批量批准）。",
+		hint: "点「批准」时要不要再确认一次：直接执行 / 先确认。默认直接执行（不打断批量批准）。",
 		control: "select",
 		unit: "",
-		values: "auto|ask|timeout",
-		valueLabels: "直接执行|先确认|等待超时即取消",
+		values: "auto|ask",
+		valueLabels: "直接执行|先确认",
 		card: "evolution-approval"
 	},
 	{
@@ -18299,4 +18609,4 @@ function isIgnorableEvent(event) {
 	return classifySessionEvent(event) !== "model";
 }
 //#endregion
-export { AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DIAGNOSTICS_FACT_KEYS, DIAGNOSTICS_RUNTIME_KEYS, DIAGNOSTICS_VIEW_SCHEMA_VERSION, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_PRESET_IDS, EVOLUTION_WRITE_TOOLS, EXTRACT_PROMPT_HASH, EXTRACT_PROMPT_V1, EXTRACT_PROMPT_VERSION, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, HOST_ROUTES, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAINER_PRESET_ID, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MODEL_SESSION_EVENT_TYPES as MODEL_SESSION_EVENTS, MODEL_SESSION_EVENT_TYPES, MUTATIONS_FILE_VERSION, MemoryStore, MutationUnit, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_LINE, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRICTED_PRESET_DISPLAY, RESTRICTED_TOOLS_ROW_ID, RESTRICTOR_MODULE, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, REVIEWER_PRESET_ID, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, SkillModel, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNIT_JOURNAL_PHASES, UNIT_JOURNAL_SCHEMA_VERSION, UNIT_STORAGE_SCHEMA_VERSION, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, UnitTransactions, VERSION_SUMMARY_MAX_CHARS, absentHostServices, acquireTreeWriteLock, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assertUnitJournalTransition, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, blobPath, bodyCost, buildCuratorRunReport, buildExtractPlanFromLibrary, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, classifySessionEvent, clearReviewChannel, collectReadSkillNames, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, createSubagentChannel, daysSinceIso, declaredReportStamp, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, ensureSkillFrontmatter, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionProjectionHistoryProjection, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, executeUnitUndo, externalRefs, fileMutationLock, filterUnreadSkillOps, findDriftSignal, findOwnerCandidate, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, hostSurface, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isIgnorableEvent, isLandmark, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, json, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, methodNotAllowed, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, ownerCandidatesFromSummaries, ownerDecisionText, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planExtract, planNamespaceMigration, planReferenceRewrite, planRehoming, planUnitUndoAcross, policyStageLimits, probeAbsent, probeChannelState, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectExtractBodies, projectionText, proposalFromPlan, proposalReportDir, proposalReportName, protectedSkillNamesOf, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readExternalSupport, readHistoryIndex, readJsonObject, readNumberParam, readParam, readProposalReports, readTreeLock, readUnitEvidence, readUnitIndex, readUnitJournal, readUnitReceipt, readUnitSnapshot, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, registerHostRoutes, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, revisionAnchor, revisionAnchorOf, revisionFingerprint, revisionSupportDigest, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, selectSections, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionSeesFamilyTools, sessionTurnSignals, skillLibraryUnitBackend, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, subagentChannelState, supportFileReadOf, supportRefs, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, treeLockFile, trimPatternBoundaries, unhookedSupportPointers, unitEvidenceDigest, unitEvidencePath, unitIndexPath, unitJournalPath, unitJournalPhaseRank, unitJournalPort, unitMembersAreComplete, unitReceiptPath, unitSnapshotPath, unitSnapshotPort, unitSnapshotsDir, unitStorageKey, unwrapLive, updateSuppressedNames, upsertUnitIndex, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateMutationRequest, validateRestructureTarget, validateSupportPath, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, withTreeWriteLock, writeDurableTmp, writePathSymbols, writeProposalReport, writeUnitEvidence, writeUnitJournal, writeUnitReceipt, writeUnitSnapshot, yamlPlainScalarNeedsQuotes };
+export { AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, BASELINE_ACTION, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEDUP_MAX_PAIR_COMPARISONS, DEDUP_SIMILARITY_THRESHOLD, DEFAULT_ADMISSION, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_PROBE_TIMEOUT_MS, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_RUN_RECORDS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_SKILL_VERSION_KEEP, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DEFAULT_WRITE_CONFIRM_MODE, DEFAULT_WRITE_CONFIRM_TIMEOUT_SECONDS, DIAGNOSTICS_FACT_KEYS, DIAGNOSTICS_RUNTIME_KEYS, DIAGNOSTICS_VIEW_SCHEMA_VERSION, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_ERRORS, EVOLUTION_PRESET_IDS, EVOLUTION_WRITE_TOOLS, EXTRACT_PROMPT_HASH, EXTRACT_PROMPT_V1, EXTRACT_PROMPT_VERSION, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, FUZZY_MAX_PATTERN_CHARS, FUZZY_MAX_WORK, HEALTH_STAMP_RE, HISTORY_DIR, HISTORY_INDEX_VERSION, HOOK_LINE_RE, HOST_ROUTES, INSTANCE_KEYS, KEEP_LINE_RE, LONG_RUNS, LOW_QUALITY_THRESHOLD, MAINTAINER_PRESET_ID, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_REQUEST_BODY_BYTES, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MODEL_SESSION_EVENT_TYPES as MODEL_SESSION_EVENTS, MODEL_SESSION_EVENT_TYPES, MUTATIONS_FILE_VERSION, MemoryStore, MutationUnit, NAMESPACE_MIGRATIONS, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_GROUP_LABELS, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_CATALOG_DESCRIPTION_DEFAULT, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, PLATFORM_LINE, PLATFORM_SERVICE_PROBES, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, READ_REQUIRED_ACTIONS, RESTRICTED_PRESET_DISPLAY, RESTRICTED_TOOLS_ROW_ID, RESTRICTOR_MODULE, RESTRUCTURE_TARGET_RE, RETENTION_FEEDBACK_KEEP_RATIO, RETENTION_FEEDBACK_MIN_CHARS, REVIEWER_PRESET_ID, RULES, RUNS_SCHEMA_VERSION, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, STORE_LEDGER, SUMMARY_DUPLICATE_HINT_THRESHOLD, SUPPORT_DIRS, SUPPORT_SPRAWL_FILES, SUPPRESSED_FILE_VERSION, SkillLibrary, SkillModel, TEXT_DIFF_MAX_CHARS, TEXT_DIFF_MAX_LINES, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UNIT_JOURNAL_PHASES, UNIT_JOURNAL_SCHEMA_VERSION, UNIT_STORAGE_SCHEMA_VERSION, UNTRUSTED_LINE_BREAK, UNTRUSTED_LINE_MARK, UPSTREAM_LIMIT_CHARS_PER_TOKEN, UnitTransactions, VERSION_SUMMARY_MAX_CHARS, WriteKernel, absentHostServices, acquireTreeWriteLock, admissionVerdict, advanceReview, affinity, ageCopyKey, allowRowCollisions, anchorVerdict, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyNamespaceMigration, applyReferenceRewrite, asRecord, assertDispatchPayload, assertSkillsRootAliasRetired, assertUnitJournalTransition, assessStructureHealth, atomicWriteFiles, authoringFeedback, authorityFrom, backupsReachability, blobPath, bodyCost, buildCuratorRunReport, buildExtractPlanFromLibrary, buildHealthBaseline, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, candidateSkills, canonicalWriteId, claimInstance, clampOnce, clampedNumber, classifyNamespaceMigration, classifySessionEvent, clearReviewChannel, collectReadSkillNames, collectReadSupportFiles, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, contentRetentionFeedback, countDispatches, countReferenceFiles, createGateSet, createSubagentChannel, daysSinceIso, declaredReportStamp, describeReferenceRewrite, diffFindings, dispatchKeyOf, dispatchPathOf, dispatchStepOf, displayBodyOf, duplicateHeadings, elapsedSince, emptyRecord, ensureSkillFrontmatter, entryTarget, errorText, evaluateThreat, eventsFile, evidenceKindIndex, evolutionActivityProjection, evolutionEventPayloadIssue, evolutionEvidenceProjection, evolutionHome, evolutionIoAdapter, evolutionProjectionHistoryProjection, evolutionReadsProjection, evolutionRoot, evolutionSignalsProjection, executeUnitUndo, externalRefs, fileMutationLock, filterUnreadSkillOps, findDriftSignal, findOwnerCandidate, foldCuratorFields, foldToolDispatches, foldTurnEvent, foldTurnEvents, foldUntrustedLines, frontmatterBlock, frontmatterCatalogInvalid, fuzzyPatch, getRecord, h2Sections, historyIndexFile, historyReachability, historyRoot, hostSurface, identity, idleDays, initialTurnFold, installEvolutionProjections, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isBookkeepingFrame, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isIgnorableEvent, isLandmark, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isProjectableSession, isRecord, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, isUnreadWrite, json, landmarkVerdict, latestActivityAt, latestVersionAt, lifecycleCandidate, lintBody, lintSkill, listEventArchives, liveBool, liveEnum, liveNumber, liveString, loadMutations, loadSuppressedNames, loadUsage, loadVersionContent, loadVersions, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, methodNotAllowed, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, nearDuplicateSummaries, newRunRegistry, newSkillLibrary, nextHistoryIndex, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, normalizeVersionSummary, observeEvent, orderVersions, overlongLines, ownerCandidatesFromSummaries, ownerDecisionText, paramNamespace, paramRowId, paramSettingsId, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseHistoryIndex, partitionVersions, payloadText, persistedWriteSite, persistedWriteSites, pickWithPolicy, planExtract, planNamespaceMigration, planReferenceRewrite, planRehoming, planUnitUndoAcross, policyStageLimits, probeAbsent, probeChannelState, probeList, probeMtime, probePresent, probeReason, probeText, probeUnknown, projectExtractBodies, projectionText, proposalFromPlan, proposalReportDir, proposalReportName, protectedSkillNamesOf, pruneTreeChangeUnits, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readExternalSupport, readHistoryIndex, readJsonObject, readNumberParam, readParam, readProposalReports, readTreeLock, readUnitEvidence, readUnitIndex, readUnitJournal, readUnitReceipt, readUnitSnapshot, readingStats, recordMutation, recordVersions, redactSecrets, referencedBlobs, registerHostRoutes, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, renderLongRunTable, reportTime, reportsReachability, reportsSweepLockTarget, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, resolveUnitMembers, resolveUnitMembersFromIndexes, restructureCandidates, retainEventArchives, retirementReport, reviewPrompt, revisionAnchor, revisionAnchorOf, revisionFingerprint, revisionSupportDigest, runWriteGates, runsFile, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopeOfNearestManifest, scopedPackageName, scopedProbeReport, selectSections, sessionAudited, sessionEvidenceIndex, sessionLastEventTime, sessionReadNames, sessionReadSkillNames, sessionReadSupportFiles, sessionSeesFamilyTools, sessionTurnSignals, skillLibraryUnitBackend, skillReadNameOf, skillRowCells, skillStateKey, skillWriteGateContext, skillsRoot, staleRouteStubs, subagentChannelState, supportFileReadFromPath, supportFileReadOf, supportRefs, suppressedFile, sweepReports, sweepReviewChannelSessions, textDiffFacts, tokenLineFor, transactIo, transactTaskGuard, treeLockFile, trimPatternBoundaries, unhookedSupportPointers, unitEvidenceDigest, unitEvidencePath, unitIndexPath, unitJournalPath, unitJournalPhaseRank, unitJournalPort, unitMembersAreComplete, unitReceiptPath, unitSnapshotPath, unitSnapshotPort, unitSnapshotsDir, unitStorageKey, unwrapLive, updateSuppressedNames, upsertUnitIndex, usageFile, usageObserved, userSetKeys, validateFrontmatter, validateMutationRequest, validateRestructureTarget, validateSupportPath, valueOr, verifyPromptBundle, versionActionKind, versionRowCells, versionSummaryPrompt, versionTarget, vocabulary, withTreeWrite, withTreeWriteLock, writeDurableTmp, writePathSymbols, writeProposalReport, writeUnitEvidence, writeUnitJournal, writeUnitReceipt, writeUnitSnapshot, yamlPlainScalarNeedsQuotes };