@lmzhen/dsh-evolution-core 0.5.0 → 0.6.0

package/lib/index.js

@@ -483,6 +483,12 @@ const DEFAULT_REVIEW_CONTEXT_MESSAGES = 60;
 const DEFAULT_REVIEW_MESSAGE_CHARS = 2e3;
 const DEFAULT_CURATOR_BOOT_GRACE_SECONDS = 10;
 const DEFAULT_CURATOR_REVIEW_MAX_TOKENS = 2048;
+/** Threat-scan WINDOW SIZE (not a total cap — E-12: the whole text is scanned in
+* overlapping windows, so content beyond this stays in scope). The coverage
+* floor is `PATTERN_OVERLAP + 1` (V6-05). Single home for the core scanners'
+* default parameter and clamp fallback, plus evolution-threat's Config default
+* — the two packages previously wrote 65_536 independently (G0/S0.1). */
+const DEFAULT_THREAT_MAX_SCAN_CHARS = 65536;
 /** 0.3.17 (S3.10, T-1): control-plane fields a model-facing write call may
 * never carry — single source for plan-validator, evolution-policy and the
 * threat scanner (they used to each hardcode the list).
@@ -3360,8 +3366,8 @@ const PATTERN_OVERLAP = 4096;
 * text is always scanned in overlapping windows, so content beyond 65,536
 * characters (skill files may run to 100,000) is no longer a blind zone.
 */
-function scanThreats(text, scope = "strict", maxScanChars = 65536, options = NO_SCAN_OPTIONS) {
-	const windowSize = clampedNumber(maxScanChars, 65536, { min: 4097 });
+function scanThreats(text, scope = "strict", maxScanChars = DEFAULT_THREAT_MAX_SCAN_CHARS, options = NO_SCAN_OPTIONS) {
+	const windowSize = clampedNumber(maxScanChars, DEFAULT_THREAT_MAX_SCAN_CHARS, { min: 4097 });
 	const findings = [];
 	const excluded = new Set(options.excludeLabels ?? []);
 	if ((ZERO_WIDTH_CHARS.test(text) || ZWJ_OUTSIDE_EMOJI.test(text)) && !excluded.has("unicode_zero_width")) findings.push({
@@ -3415,7 +3421,7 @@ function scanThreats(text, scope = "strict", maxScanChars = 65536, options = NO_
 /** Blocking policy (P1-1, v19): a finding blocks unless it is explicitly
 * `report`-only. Pattern findings carry no severity and therefore block as
 * before. */
-function evaluateThreat(text, scope = "strict", maxScanChars = 65536, options = NO_SCAN_OPTIONS) {
+function evaluateThreat(text, scope = "strict", maxScanChars = DEFAULT_THREAT_MAX_SCAN_CHARS, options = NO_SCAN_OPTIONS) {
 	const findings = scanThreats(text, scope, maxScanChars, options);
 	return {
 		blocked: findings.some((finding) => finding.severity !== "report"),
@@ -3423,7 +3429,7 @@ function evaluateThreat(text, scope = "strict", maxScanChars = 65536, options =
 	};
 }
 /** User-facing block message for memory writes. */
-function scanMemoryThreats(text, maxScanChars = 65536, options = NO_SCAN_OPTIONS) {
+function scanMemoryThreats(text, maxScanChars = DEFAULT_THREAT_MAX_SCAN_CHARS, options = NO_SCAN_OPTIONS) {
 	const { blocked, findings } = evaluateThreat(text, "strict", maxScanChars, options);
 	if (!blocked) return null;
 	const pattern = findings.find((f) => f.category !== "unicode_obfuscation");
@@ -3431,7 +3437,7 @@ function scanMemoryThreats(text, maxScanChars = 65536, options = NO_SCAN_OPTIONS
 	return `Blocked by security scan: invisible or potentially malicious Unicode detected.${THREAT_EXEMPTION_HINT}`;
 }
 /** User-facing block message for skill content writes. */
-function scanContentThreats(text, maxScanChars = 65536, options = NO_SCAN_OPTIONS) {
+function scanContentThreats(text, maxScanChars = DEFAULT_THREAT_MAX_SCAN_CHARS, options = NO_SCAN_OPTIONS) {
 	const { blocked, findings } = evaluateThreat(text, "strict", maxScanChars, options);
 	if (!blocked) return null;
 	const pattern = findings.find((f) => f.category !== "unicode_obfuscation");
@@ -8832,6 +8838,1151 @@ function newSkillLibrary(options) {
 	} : void 0, transact, [...threatExemptLabels ?? []]);
 }
 //#endregion
+//#region lib/types/params.js
+/**
+* Parameter id consolidation (G0/S0.2): one semantic gets ONE id.
+*
+* Nine places in this family carry the same value under two carriers: three use
+* the SAME name in two carriers (reviewMode, staleAfterDays, archiveAfterDays —
+* resolved by the existing policy-shadows-row rule) and six use DIFFERENT names.
+* This module owns the six: the policy/snapshot name is the canonical id, the
+* plugin-row name is a deprecated alias kept readable for one minor version
+* (0.6.x) and removable in 0.7.0.
+*
+* Reading stays compatible (a carrier still spelling the legacy name resolves),
+* writing is strict (the write path accepts canonical ids only, so no new
+* document is created under a deprecated name).
+* @module
+*/
+/** Deprecated alias (plugin-row name) -> canonical id (policy/snapshot name). */
+const PARAM_ALIASES = Object.freeze({
+	memoryInterval: "reviewMemoryInterval",
+	skillInterval: "reviewSkillInterval",
+	intervalHours: "curatorIntervalHours",
+	maxSkillContentChars: "skillContentChars",
+	memoryCharLimit: "memoryChars",
+	userCharLimit: "userChars"
+});
+/** Canonical ids that have at least one deprecated alias, for read fallback. */
+const ALIASES_BY_CANONICAL = (() => {
+	const index = {};
+	for (const [alias, canonical] of Object.entries(PARAM_ALIASES)) (index[canonical] ??= []).push(alias);
+	return index;
+})();
+/**
+* Resolve any parameter id to its canonical form.
+* @param id - canonical id or deprecated alias.
+* @returns the canonical id; ids without an alias pass through unchanged.
+*/
+function resolveParamId(id) {
+	return PARAM_ALIASES[id] ?? id;
+}
+/**
+* Whether an id is a deprecated alias.
+* @param id - parameter id to test.
+* @returns true when the id must be migrated to its canonical form.
+*/
+function isDeprecatedParamId(id) {
+	return PARAM_ALIASES[id] !== void 0;
+}
+/**
+* Guard for the write path: only canonical ids may be written.
+* @param id - parameter id a caller intends to write.
+* @returns the canonical id.
+* @throws {Error} when the id is a deprecated alias; the message names both ids.
+*/
+function canonicalWriteId(id) {
+	const canonical = PARAM_ALIASES[id];
+	if (canonical === void 0) return id;
+	throw new Error(`parameter id \`${id}\` is deprecated; write \`${canonical}\` instead`);
+}
+/**
+* Read a parameter from a carrier that may still spell the legacy name.
+* @param carrier - config/snapshot object to read from, or undefined.
+* @param id - canonical id (a deprecated alias is accepted and resolved first).
+* @returns the canonical value when present, else the alias value, else undefined.
+*/
+function readParam(carrier, id) {
+	if (carrier === void 0) return void 0;
+	const record = carrier;
+	const canonical = resolveParamId(id);
+	if (record[canonical] !== void 0) return record[canonical];
+	for (const alias of ALIASES_BY_CANONICAL[canonical] ?? []) if (record[alias] !== void 0) return record[alias];
+}
+/**
+* The parameter registry. G1/S1.1 seeds it with the review group (G-C); the
+* remaining groups land in S2.1. E3 = behaviour preference the user may change
+* (live); E2 = resource or identity knob that stays with the deployment.
+*/
+const PARAM_EXPOSURE = Object.freeze([
+	{
+		id: "reviewSkillInterval",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Activity units between skill-review injections."
+	},
+	{
+		id: "reviewMemoryInterval",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Activity units between memory-review injections."
+	},
+	{
+		id: "skillReviewTrigger",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Which channel may inject a skill review (cadence, completion, both)."
+	},
+	{
+		id: "skillReviewCompletionMinToolCalls",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Tool calls a task needs before the completion channel injects."
+	},
+	{
+		id: "reviewEnabled",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Master switch for the review plugin."
+	},
+	{
+		id: "reviewMode",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Run the review in the parent session (inject) or on a subagent."
+	},
+	{
+		id: "reviewWakeInject",
+		group: "review",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Deliver the deferred review as a waking follow-up message."
+	},
+	{
+		id: "reviewProvider",
+		group: "review",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "LLM provider for review subagents (deployment identity)."
+	},
+	{
+		id: "reviewTimeoutMs",
+		group: "review",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Bound on one review subagent run and its write leg."
+	},
+	{
+		id: "reviewContextMessages",
+		group: "review",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Messages of context handed to a review subagent."
+	},
+	{
+		id: "reviewMessageChars",
+		group: "review",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Per-message character budget of the review context."
+	},
+	{
+		id: "reviewMaxDepth",
+		group: "review",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Absolute delegation-depth cap of the review subagent."
+	},
+	{
+		id: "reviewToolAllow",
+		group: "review",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#review",
+		summary: "Tools the review subagent may use (safety surface)."
+	},
+	{
+		id: "skillContentChars",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Character cap on a SKILL.md body (tighten-only)."
+	},
+	{
+		id: "maxSkillFileBytes",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Byte cap on one support file (tighten-only)."
+	},
+	{
+		id: "maxSkillNameLength",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Character cap on a skill name (tighten-only)."
+	},
+	{
+		id: "maxDescriptionLength",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Character cap on a skill description (tighten-only)."
+	},
+	{
+		id: "descriptionStrict",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Refuse a description over the authoring bar instead of advising."
+	},
+	{
+		id: "strictCrossSource",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Refuse writes whose catalog entry resolves outside the family."
+	},
+	{
+		id: "citationPolicy",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Refuse a move that would leave a dangling reference, or verify it."
+	},
+	{
+		id: "referenceRewrite",
+		group: "write-caps",
+		tier: "E2",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Re-home support files and rewrite references during a merge (plan or apply)."
+	},
+	{
+		id: "archiveRetention",
+		group: "write-caps",
+		tier: "E2",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Report expired archives, or prune them."
+	},
+	{
+		id: "supportFileCharPolicy",
+		group: "write-caps",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-skill-manage",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#write-caps",
+		summary: "Warn about an oversize support file, or refuse the write."
+	},
+	{
+		id: "memoryChars",
+		group: "memory",
+		tier: "E3",
+		authority: "cordis",
+		owner: "memory-files",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#memory",
+		summary: "Character budget the memory store enforces for MEMORY.md."
+	},
+	{
+		id: "userChars",
+		group: "memory",
+		tier: "E3",
+		authority: "cordis",
+		owner: "memory-files",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#memory",
+		summary: "Character budget the memory store enforces for USER.md."
+	},
+	{
+		id: "memoryEnabled",
+		group: "memory",
+		tier: "E2",
+		authority: "cordis",
+		owner: "tool-memory",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#memory",
+		summary: "Register the memory tool and its prompt section at all (deployment switch)."
+	},
+	{
+		id: "entryPreviewChars",
+		group: "memory",
+		tier: "E3",
+		authority: "cordis",
+		owner: "tool-memory",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#memory",
+		summary: "Characters of one memory entry shown in a tool result preview."
+	},
+	{
+		id: "addDatePrefix",
+		group: "memory",
+		tier: "E3",
+		authority: "cordis",
+		owner: "memory-files",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#memory",
+		summary: "Prefix stored memory entries with their date heading."
+	},
+	{
+		id: "maxConsolidationFailures",
+		group: "memory",
+		tier: "E3",
+		authority: "cordis",
+		owner: "memory-files",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#memory",
+		summary: "Consolidation failures one turn tolerates before the tool gives up."
+	},
+	{
+		id: "curatorIntervalHours",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Minimum hours between deterministic curation passes."
+	},
+	{
+		id: "staleAfterDays",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Inactive days before a skill counts as stale."
+	},
+	{
+		id: "archiveAfterDays",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Inactive days before a stale skill is archived (must be >= staleAfterDays)."
+	},
+	{
+		id: "qualityWarnStaleAfterDays",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Age at which a low quality score starts warning."
+	},
+	{
+		id: "minIdleHours",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Idle hours required before an automatic curation pass runs."
+	},
+	{
+		id: "minIdleFailOpen",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Let the idle gate open when the activity probe is unavailable."
+	},
+	{
+		id: "llmReview",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Enable the LLM nomination pass on top of the deterministic lifecycle."
+	},
+	{
+		id: "curatorReviewMaxTokens",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Token budget of the curator LLM review."
+	},
+	{
+		id: "curatorReviewTimeoutMs",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Wall-clock bound of the curator LLM review."
+	},
+	{
+		id: "healthSoftBodyChars",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Body character line the health view judges against."
+	},
+	{
+		id: "healthStampDensityPerKb",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Stamp density per KB that flags log-like content in a body."
+	},
+	{
+		id: "healthChurnMinPatches",
+		group: "curator",
+		tier: "E3",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "live",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Patches without a read that flag a write-ghost skill."
+	},
+	{
+		id: "evolution-curator.enabled",
+		group: "curator",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Mount the curator plugin at all."
+	},
+	{
+		id: "autoStart",
+		group: "curator",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Arm the hourly due-ness tick with the plugin."
+	},
+	{
+		id: "bootGraceSeconds",
+		group: "curator",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Grace period before the first automatic pass after a restart."
+	},
+	{
+		id: "curatorProvider",
+		group: "curator",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "LLM provider for curator reviews (deployment identity)."
+	},
+	{
+		id: "curatorModel",
+		group: "curator",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#curator",
+		summary: "Model for curator reviews (deployment identity)."
+	},
+	{
+		id: "protectedSkillNames",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Skills the lifecycle never archives or rewrites."
+	},
+	{
+		id: "manageUnmanaged",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Let curation touch skills with no family metadata."
+	},
+	{
+		id: "pruneBuiltins",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Let curation nominate bundled skills for pruning."
+	},
+	{
+		id: "referencedSkillNames",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Names treated as referenced by external docs (never retired)."
+	},
+	{
+		id: "includeSkillNames",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-skill-catalog",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Allow-list of skills the catalog exposes."
+	},
+	{
+		id: "skill-catalog.excludeSkillNames",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-skill-catalog",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Deny-list of skills the catalog hides (row-local name; see the collision note)."
+	},
+	{
+		id: "modelInvocable",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-skill-catalog",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Default for whether the model may invoke a catalog skill."
+	},
+	{
+		id: "userInvocable",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-skill-catalog",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Default for whether the user may invoke a catalog skill."
+	},
+	{
+		id: "maxItems",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-activity",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Entries kept in the activity sidecar window."
+	},
+	{
+		id: "sessionScoped",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Act only on sessions carrying the family model tools."
+	},
+	{
+		id: "skill-usage.sessionScoped",
+		group: "library",
+		tier: "E2",
+		authority: "cordis",
+		owner: "skill-usage",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#library",
+		summary: "Keep the usage sidecar scoped per session (row-local name)."
+	},
+	{
+		id: "evolution-review.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root for review-created skills (empty = shared default)."
+	},
+	{
+		id: "evolution-review.skillsRoot",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Retired alias of root; a value here fails the load (V27 G2.4)."
+	},
+	{
+		id: "evolution-curator.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-curator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root for curator scope, snapshot and archive."
+	},
+	{
+		id: "evolution-commands.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-commands",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root the command surface writes through."
+	},
+	{
+		id: "evolution-commands.skillsRoot",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-commands",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Retired alias of the commands root; a value here fails the load."
+	},
+	{
+		id: "evolution-maintenance.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-maintenance",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root the maintenance probe scans."
+	},
+	{
+		id: "evolution-maintenance.skillsRoot",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-maintenance",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Accepted skill-root spelling for the maintenance row."
+	},
+	{
+		id: "evolution-skill-catalog.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-skill-catalog",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root the catalog lists."
+	},
+	{
+		id: "evolution-learning-graph.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-learning-graph",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root the learning graph reads."
+	},
+	{
+		id: "skill-usage.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "skill-usage",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Skill-tree root the usage store observes."
+	},
+	{
+		id: "skill-usage.eventsHome",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "skill-usage",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Directory holding the family event log the usage store reads."
+	},
+	{
+		id: "evolution-state-json.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-state-json",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Directory holding the JSON state store."
+	},
+	{
+		id: "memory-files.root",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "memory-files",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Directory holding MEMORY.md and USER.md (empty = $DSH_HOME/memories)."
+	},
+	{
+		id: "evolution-feedback.path",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-feedback",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Event log the feedback scorer reads (empty = family events file)."
+	},
+	{
+		id: "evolution-state.provider",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-state",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Registered state-store provider name."
+	},
+	{
+		id: "memory.provider",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "memory",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Registered memory provider name."
+	},
+	{
+		id: "memory-files.providerName",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "memory-files",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Name this package registers as the memory provider."
+	},
+	{
+		id: "memoryReviewModel",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Model for the memory review channel (deployment identity)."
+	},
+	{
+		id: "skillReviewModel",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Model for the skill review channel (deployment identity)."
+	},
+	{
+		id: "maxOpsPerPlan",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-plan-validator",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Operation cap one staged plan may carry."
+	},
+	{
+		id: "substantiveMinToolCalls",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Tool calls that make a turn count as substantive."
+	},
+	{
+		id: "substantiveMinUserChars",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "User characters that make a turn count as substantive."
+	},
+	{
+		id: "substantiveMinAgentChars",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-review",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Assistant characters that make a turn count as substantive."
+	},
+	{
+		id: "threatExemptLabels",
+		group: "deployment",
+		tier: "E1",
+		authority: "cordis",
+		owner: "evolution-threat",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Threat labels the deployment declares benign (safety surface, never user-writable)."
+	},
+	{
+		id: "evolution-threat.enabled",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-threat",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Mount the write-time threat guard at all."
+	},
+	{
+		id: "evolution-threat.maxScanChars",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-threat",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Scan window size of the threat guard."
+	},
+	{
+		id: "evolution-approval.enabled",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-approval",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Require approval before a staged write executes."
+	},
+	{
+		id: "evolution-approval.stageForeground",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-approval",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Stage foreground agent writes for approval too."
+	},
+	{
+		id: "qualityWarnThreshold",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-feedback",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Feedback score below which a skill carries a warning."
+	},
+	{
+		id: "replay.maxPlans",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-replay",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Plans compared in one replay report."
+	},
+	{
+		id: "replay.weights",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-replay",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Scoring weights of the replay comparison."
+	},
+	{
+		id: "evolution-commands.maintainCooldownMs",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-commands",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Cooldown between maintenance runs from the command surface."
+	},
+	{
+		id: "evolution-commands.maintainTimeoutMs",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "evolution-commands",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Timeout of one maintenance run started from the command surface."
+	},
+	{
+		id: "skill-usage.supportReadToolNames",
+		group: "deployment",
+		tier: "E2",
+		authority: "cordis",
+		owner: "skill-usage",
+		applies: "none",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Tool names whose file reads are attributed to support files."
+	},
+	{
+		id: "install.mode",
+		group: "deployment",
+		tier: "E4",
+		authority: "install",
+		owner: "scripts",
+		applies: "restart",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Install target plane (layered preset vs profile-root bundle)."
+	},
+	{
+		id: "install.basePreset",
+		group: "deployment",
+		tier: "E4",
+		authority: "install",
+		owner: "scripts",
+		applies: "restart",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Agent-preset base the layered install composes from (--base)."
+	},
+	{
+		id: "install.home",
+		group: "deployment",
+		tier: "E4",
+		authority: "install",
+		owner: "scripts",
+		applies: "restart",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Harness home the installer writes into (--home)."
+	},
+	{
+		id: "install.presetRowOverrides",
+		group: "deployment",
+		tier: "E4",
+		authority: "install",
+		owner: "scripts",
+		applies: "restart",
+		docAnchor: "PARAMETERS.md#deployment",
+		summary: "Preset row overrides the installer injects (row-overrides.json)."
+	}
+]);
+/** The settings namespace each OWNER PACKAGE registers (design §7.2).
+*
+* Keyed by owner rather than by group because a namespace has exactly one
+* registrant (the platform refuses a second registration of the same name),
+* while a group may span packages — group 'memory' is served by memory-files and
+* tool-memory, each owning its own section. A package without an entry has no
+* user layer (its knobs stay deployment-only). */
+const PARAM_NAMESPACES = Object.freeze({
+	"evolution-review": "evolution-review",
+	"memory-files": "evolution-memory",
+	"tool-memory": "evolution-tool-memory",
+	"evolution-curator": "evolution-curator",
+	"tool-skill-manage": "evolution-skills"
+});
+/**
+* G3: expose one parameter section to the user layer.
+*
+* Precedence stays 'user > deployment > default': the caller keeps reading its
+* deployment carriers (policy snapshot, then the plugin row) and consults
+* {@link ParamOverrides.get} FIRST — an unset key returns undefined, so the
+* deployment value keeps winning and the family's shadowing rules survive.
+*
+* Failure posture: a provider without `describe` (or one whose describe throws)
+* leaves the user layer UNAVAILABLE and warns once — deployment values then
+* apply. Treating an unreadable user layer as 'no overrides' would silently
+* ignore a setting the user did write, so the warning names it.
+* @typeParam T - the section's value type.
+* @param provider - the platform settings provider, or undefined when absent.
+* @param namespace - namespace to register.
+* @param schema - schemastery schema the platform validates against.
+* @param base - composition base layer (the plugin row's values).
+* @param options - warning sink and the change hook.
+* @returns a reader bound to the namespace.
+*/
+function paramSectionOverrides(provider, namespace, schema, base, options = {}) {
+	if (provider === void 0) return unavailableOverrides(namespace, base);
+	const scope = options.validate === void 0 ? provider.register(namespace, schema, {
+		base,
+		applies: "live"
+	}) : provider.register(namespace, schema, {
+		base,
+		applies: "live",
+		validate: options.validate
+	});
+	const warn = options.warn ?? (() => {});
+	let user = readUserLayer(provider, namespace);
+	if (user === void 0) warn("settings provider for " + namespace + " exposes no readable user layer; deployment values apply");
+	scope.watch(() => {
+		const next = readUserLayer(provider, namespace);
+		if (next === void 0) {
+			warn("settings provider for " + namespace + " stopped exposing its user layer; deployment values apply");
+			user = void 0;
+			options.onChange?.();
+			return;
+		}
+		user = next;
+		options.onChange?.();
+	});
+	return {
+		namespace,
+		get: (key) => user === void 0 ? void 0 : user[key],
+		resolved: () => scope.get() ?? base
+	};
+}
+/** The pre-provider reader: no user layer, deployment values only. */
+function unavailableOverrides(namespace, base) {
+	return {
+		namespace,
+		get: () => void 0,
+		resolved: () => base
+	};
+}
+/** Read the raw user section, or undefined when the provider cannot report it. */
+function readUserLayer(provider, namespace) {
+	if (provider.describe === void 0) return void 0;
+	try {
+		return provider.describe({ redactSecrets: false }).find((entry) => entry.ns === namespace)?.user ?? {};
+	} catch {
+		return;
+	}
+}
+/**
+* Attach a parameter section through the optional settings service.
+* @typeParam T - the section's value type.
+* @param host - the plugin context (structurally typed).
+* @param namespace - namespace to register.
+* @param schema - schemastery schema the platform validates against.
+* @param base - composition base layer (the plugin row's values).
+* @param options - warning sink and the change hook.
+* @returns a reader that follows the provider when it appears.
+*/
+function installParamSection(host, namespace, schema, base, options = {}) {
+	let current = unavailableOverrides(namespace, base);
+	host.inject(["settings"], (injected) => {
+		const settings = injected.settings;
+		current = paramSectionOverrides(settings, namespace, schema, base, options);
+		options.onChange?.();
+	});
+	return {
+		namespace,
+		get: (key) => current.get(key),
+		resolved: () => current.resolved()
+	};
+}
+/**
+* Number-typed read over {@link readParam}: the family's tunables are numbers,
+* and a value of another type reads as absent so the caller's default applies
+* (the same outcome the numeric clamps produce for a malformed value).
+* @param carrier - config/snapshot object to read from, or undefined.
+* @param id - canonical id (a deprecated alias is accepted and resolved first).
+* @returns the resolved number, or undefined when absent or not a number.
+*/
+function readNumberParam(carrier, id) {
+	const value = readParam(carrier, id);
+	return typeof value === "number" ? value : void 0;
+}
+//#endregion
 //#region lib/types/opt-in.js
 /**
 * Tool names only a session that mounted the family's MODEL rows can see.
@@ -8928,4 +10079,4 @@ function sessionAudited(ctx, sessionId, sessionScoped) {
 	return false;
 }
 //#endregion
-export { ALIVE_LOCK_TAKEOVER_MS, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEDUP_MAX_PAIR_COMPARISONS, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PATTERN_OVERLAP, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, RESTRUCTURE_TARGET_RE, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UPSTREAM_LIMIT_CHARS_PER_TOKEN, advanceReview, allowRowCollisions, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyReferenceRewrite, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, bodyCost, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, claimInstance, clampedNumber, clearReviewChannel, collectReadSkillNames, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, countDispatches, createGateSet, daysSinceIso, decideTakeover, describeReferenceRewrite, duplicateHeadings, emptyRecord, evaluateThreat, eventsFile, evolutionEventPayloadIssue, evolutionHome, evolutionIoAdapter, evolutionRoot, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurn, frontmatterBlock, frontmatterCatalogInvalid, getRecord, idleDays, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isCommittedWarning, isFileShapedPath, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, latestActivityAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, neutralizePromptVariables, newSkillLibrary, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, observeEvent, overlongLines, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseLockBody, pendingSelfCleanup, persistedWriteSite, persistedWriteSites, planReferenceRewrite, planRehoming, policyStageLimits, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, recordMutation, redactSecrets, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, resolveCitations, resolveExecOrigins, resolveOrigins, resolveRootConfig, resolveSkillsRoot, retainEventArchives, retirementReport, reviewPrompt, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionSeesFamilyTools, skillReadNameOf, skillsRoot, supportFileReadOf, suppressedFile, sweepReviewChannelSessions, tokenLineFor, transactIo, transactTaskGuard, unhookedSupportPointers, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, writeDurableTmp, yamlPlainScalarNeedsQuotes };
+export { ALIVE_LOCK_TAKEOVER_MS, AUTHORING_DESCRIPTION_BAR, AUTHORING_SPLIT_LINE_CHARS, CITATION_SUPPORT_DIRS, COMBINED_REVIEW_PLAN_PROMPT, COMBINED_REVIEW_PROMPT, COMPLETION_SKILL_REVIEW_PROMPT, CONTENT_SPLIT_HINT, COST_ASCII_TOKEN_HIGH, COST_ASCII_TOKEN_LOW, COST_CJK_TOKEN_HIGH, COST_CJK_TOKEN_LOW, CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEAD_LOCK_TAKEOVER_MS, DEDUP_MAX_PAIR_COMPARISONS, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_CITATION_REF_BUDGET, DEFAULT_CONSOLIDATION_FAILURES, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MAX_OPS_PER_PLAN, DEFAULT_MEMORY_CHAR_LIMIT, DEFAULT_MEMORY_REVIEW_MODEL, DEFAULT_MIN_IDLE_HOURS, DEFAULT_MUTATION_CAP, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_REVIEW_CONTEXT_MESSAGES, DEFAULT_REVIEW_MEMORY_INTERVAL, DEFAULT_REVIEW_MESSAGE_CHARS, DEFAULT_REVIEW_SKILL_INTERVAL, DEFAULT_REVIEW_TIMEOUT_MS, DEFAULT_SKILL_CONTENT_CHARS, DEFAULT_SKILL_LIMITS, DEFAULT_SKILL_REVIEW_COMPLETION_MIN_TOOL_CALLS, DEFAULT_SKILL_REVIEW_MODEL, DEFAULT_SKILL_REVIEW_TRIGGER, DEFAULT_STALE_AFTER_DAYS, DEFAULT_SUBSTANTIVE_MIN_AGENT_CHARS, DEFAULT_SUBSTANTIVE_MIN_TOOL_CALLS, DEFAULT_SUBSTANTIVE_MIN_USER_CHARS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DEFAULT_SUPPORT_READ_TOOL_NAMES, DEFAULT_THREAT_MAX_SCAN_CHARS, DEFAULT_USER_CHAR_LIMIT, DISPATCH_EVENT_TYPES, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, DSH_AUTHORING_STANDARDS, EMPTY_LOCK_TAKEOVER_MS, ENTRY_DELIMITER, EVENT_ARCHIVE_PREFIX, EVENT_LOG_RETAIN_ARCHIVES, EVENT_LOG_ROTATE_AT, EVENT_LOG_VERSION, EVOLUTION_WRITE_TOOLS, EvolutionGateSet, FAMILY_SESSION_TOOL_NAMES, FORBIDDEN_CONTROL_KEYS, HEALTH_STAMP_RE, HOOK_LINE_RE, INSTANCE_KEYS, KEEP_LINE_RE, LOCK_BODY_RE, LOCK_SUFFIX, LOCK_TEAR_TAKEOVER_MS, LOW_QUALITY_THRESHOLD, LostWriteLock, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_DESCRIPTION_LENGTH, MAX_RESTRUCTURE_MOVES, MAX_SKILL_CONTENT_CHARS, MAX_SKILL_FILE_BYTES, MAX_SKILL_NAME_LENGTH, MAX_SUPPORT_READ_PATHS, MAX_TIMER_DELAY_MS, MEMORY_GUIDANCE_SECTION_ORDER, MEMORY_REVIEW_PROMPT, MIN_STAMP_BODY_CHARS, MUTATIONS_FILE_VERSION, MemoryStore, NATIVE_CALL_EVENT, NATIVE_RESULT_EVENT, PARAM_ALIASES, PARAM_EXPOSURE, PARAM_NAMESPACES, PATTERN_OVERLAP, PLATFORM_ESTIMATE_CHARS_PER_TOKEN, POLICY_STAGE_DEFAULTS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, PROMPT_BUNDLE_VERSION, PROTECTED_BUILTIN_SKILLS, PTC_DISPATCH_EVENT, PTC_DISPATCH_START_EVENT, QUALITY_WEIGHTS, RESTRUCTURE_TARGET_RE, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, SKILL_NAME_RE, SKILL_REVIEW_PLAN_PROMPT, SKILL_REVIEW_PROMPT, SNAPSHOT_EXTRA_NAME_RE, SUPPORT_DIRS, SUPPRESSED_FILE_VERSION, SkillLibrary, THREAT_EXEMPTION_HINT, TOKEN_ASCII_WEIGHT, TOKEN_CJK_WEIGHT, ToolDispatchNormalizer, ToolDispatchPayloadError, UPSTREAM_LIMIT_CHARS_PER_TOKEN, advanceReview, allowRowCollisions, appendEvolutionEvent, applyCuratorLifecycleFields, applyCuratorMetaFields, applyReferenceRewrite, assertDispatchPayload, assertSkillsRootAliasRetired, assessStructureHealth, authoringFeedback, bodyCost, buildCuratorRunReport, buildLearnPrompt, bumpPatch, bumpSupportRead, bumpUse, bumpView, callingScope, canonicalWriteId, claimInstance, clampedNumber, clearReviewChannel, collectReadSkillNames, composePresetComposition, computeDedupGroups, computeDriftSignals, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, countDispatches, createGateSet, daysSinceIso, decideTakeover, describeReferenceRewrite, duplicateHeadings, emptyRecord, evaluateThreat, eventsFile, evolutionEventPayloadIssue, evolutionHome, evolutionIoAdapter, evolutionRoot, findDriftSignal, foldCuratorFields, foldToolDispatches, foldTurn, frontmatterBlock, frontmatterCatalogInvalid, getRecord, idleDays, installParamSection, instanceClaimKey, instanceClaimedWriteSites, instanceHolder, isAbsent, isCommittedWarning, isDeprecatedParamId, isFileShapedPath, isMissingPath, isPresent, isProcessAlive, isProgramToolName, isReviewChannelSession, isSkillReadToolName, isSkillToolName, isUnknown, latestActivityAt, lifecycleCandidate, listEventArchives, loadMutations, loadRowOverrides, loadSuppressedNames, loadUsage, makeSerialQueue, mapProbe, markAgentCreated, markReviewChannel, markerEntryName, memoryRoot, missingSupportPointers, mutateUsage, mutationsFile, narrowNameMatches, neutralizePromptVariables, newSkillLibrary, nodeEvolutionIo, normalizeFrontmatter, normalizeUsageRecord, observeEvent, overlongLines, paramSectionOverrides, parseCuratorNominations, parseEvolutionEvents, parseFrontmatter, parseLockBody, pendingSelfCleanup, persistedWriteSite, persistedWriteSites, planReferenceRewrite, planRehoming, policyStageLimits, probeAbsent, probeList, probeMtime, probePresent, probeReason, probeUnknown, readDispatchSignal, readEvolutionEvents, readEvolutionTimeline, readNumberParam, readParam, recordMutation, redactSecrets, relatedSkillNames, releaseInstance, renameWithRetry, renderCuratorReportMarkdown, resolveCitations, resolveExecOrigins, resolveOrigins, resolveParamId, resolveRootConfig, resolveSkillsRoot, retainEventArchives, retirementReport, reviewPrompt, saveSuppressedNames, saveUsage, scanBodyHooks, scanContentThreats, scanMemoryThreats, scanThreats, scopedProbeReport, sessionAudited, sessionSeesFamilyTools, skillReadNameOf, skillsRoot, supportFileReadOf, suppressedFile, sweepReviewChannelSessions, tokenLineFor, transactIo, transactTaskGuard, unhookedSupportPointers, updateSuppressedNames, usageFile, usageObserved, validateFrontmatter, validateRestructureTarget, valueOr, verifyPromptBundle, writeDurableTmp, yamlPlainScalarNeedsQuotes };