@lmzhen/dsh-evolution-curator 0.16.0 → 0.17.0-rc.1

package/lib/index.js

@@ -3,7 +3,7 @@ import { randomUUID } from "node:crypto";
 import { join } from "node:path";
 import { BlockAssembler, createUserMessage } from "@deepseek-ai/dsh-llm";
 import z from "@deepseek-ai/schemastery";
-import { CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MIN_IDLE_HOURS, DEFAULT_SKILL_LIMITS, DEFAULT_STALE_AFTER_DAYS, EvolutionGateSet, INSTANCE_KEYS, MAX_TIMER_DELAY_MS, SKILL_NAME_RE, buildCuratorRunReport, claimInstance, clampedNumber, computeDedupGroups, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, emptyRecord, entryTarget, evolutionHome, evolutionIoAdapter, foldCuratorFields, installParamSection, isPresent, isUnknown, loadSuppressedNames, loadUsage, markerEntryName, mutateUsage, newSkillLibrary, paramNamespace, parseCuratorNominations, parseFrontmatter, policyStageLimits, probeList, probeMtime, readNumberParam, relatedSkillNames, releaseInstance, renderCuratorReportMarkdown, transactIo, updateSuppressedNames, usageObserved } from "@lmzhen/dsh-evolution-core";
+import { CURATOR_DRY_RUN_BANNER, CURATOR_PROMPT, DEFAULT_ARCHIVE_AFTER_DAYS, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, DEFAULT_CURATOR_INTERVAL_HOURS, DEFAULT_CURATOR_MODEL, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, DEFAULT_HEALTH_THRESHOLDS, DEFAULT_MIN_IDLE_HOURS, DEFAULT_SKILL_LIMITS, DEFAULT_STALE_AFTER_DAYS, EvolutionGateSet, INSTANCE_KEYS, MAX_TIMER_DELAY_MS, SKILL_NAME_RE, buildCuratorRunReport, claimInstance, clampedNumber, computeDedupGroups, computeLifecycleTransitions, computePrefixClusters, computeQualityScores, computeScopeView, contentHash, emptyRecord, entryTarget, evolutionHome, evolutionIoAdapter, foldCuratorFields, isPresent, isUnknown, loadSuppressedNames, loadUsage, markerEntryName, mutateUsage, newSkillLibrary, paramRowId, parseCuratorNominations, parseFrontmatter, policyStageLimits, probeList, probeMtime, readNumberParam, relatedSkillNames, releaseInstance, renderCuratorReportMarkdown, sessionLastEventTime, transactIo, updateSuppressedNames, usageObserved } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/index.js
 /**
 * Deterministic skill lifecycle curator with interval gate and archive.
@@ -17,23 +17,6 @@ const DEFAULT_QUALITY_WARN_STALE_AFTER_DAYS = 7;
 * 120s matches the review subagent default; the 32-bit ceiling is Node's
 * timer-delay limit (`AbortSignal.timeout` throws above it). */
 const DEFAULT_CURATOR_REVIEW_TIMEOUT_MS = 12e4;
-/** Schema the platform validates the user layer against; defaults mirror the core
-* constants and the bounds mirror the row schema, so an empty document resolves to
-* today's behaviour and an out-of-range value is refused instead of clamped. */
-const CURATOR_SETTINGS_SCHEMA = z.object({
-	curatorIntervalHours: z.number().min(1).default(DEFAULT_CURATOR_INTERVAL_HOURS),
-	staleAfterDays: z.number().min(1).default(DEFAULT_STALE_AFTER_DAYS),
-	archiveAfterDays: z.number().min(1).default(DEFAULT_ARCHIVE_AFTER_DAYS),
-	qualityWarnStaleAfterDays: z.number().min(1).default(DEFAULT_QUALITY_WARN_STALE_AFTER_DAYS),
-	minIdleHours: z.number().min(0).default(DEFAULT_MIN_IDLE_HOURS),
-	minIdleFailOpen: z.boolean().default(true),
-	llmReview: z.boolean().default(false),
-	curatorReviewMaxTokens: z.number().min(1).default(DEFAULT_CURATOR_REVIEW_MAX_TOKENS),
-	curatorReviewTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS).default(DEFAULT_CURATOR_REVIEW_TIMEOUT_MS),
-	healthSoftBodyChars: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.softBodyChars),
-	healthStampDensityPerKb: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb),
-	healthChurnMinPatches: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.churnMinPatches)
-});
 /**
 * The cross-field rule the schema cannot express (A2-17): an archive threshold
 * below the stale threshold makes the engine reactivate stale records instead of
@@ -60,54 +43,43 @@ var EvolutionCurator = class extends Service {
 	static Config = z.object({
 		root: z.string().default(""),
 		enabled: z.boolean().default(true),
-		intervalHours: z.number().min(1).default(DEFAULT_CURATOR_INTERVAL_HOURS),
-		staleAfterDays: z.number().min(1).default(DEFAULT_STALE_AFTER_DAYS),
-		archiveAfterDays: z.number().min(1).default(DEFAULT_ARCHIVE_AFTER_DAYS),
-		llmReview: z.boolean().default(false),
+		curatorIntervalHours: z.number().min(1).volatile(),
+		intervalHours: z.number().min(1),
+		staleAfterDays: z.number().min(1).default(DEFAULT_STALE_AFTER_DAYS).volatile(),
+		archiveAfterDays: z.number().min(1).default(DEFAULT_ARCHIVE_AFTER_DAYS).volatile(),
+		llmReview: z.boolean().default(false).volatile(),
 		curatorProvider: z.string().default("deepseek-official"),
-		qualityWarnStaleAfterDays: z.number().min(1).default(DEFAULT_QUALITY_WARN_STALE_AFTER_DAYS),
-		minIdleHours: z.number().min(0).default(DEFAULT_MIN_IDLE_HOURS),
-		minIdleFailOpen: z.boolean().default(true),
+		qualityWarnStaleAfterDays: z.number().min(1).default(DEFAULT_QUALITY_WARN_STALE_AFTER_DAYS).volatile(),
+		minIdleHours: z.number().min(0).default(DEFAULT_MIN_IDLE_HOURS).volatile(),
+		minIdleFailOpen: z.boolean().default(true).volatile(),
 		excludeSkillNames: z.array(z.string()).default([]),
 		manageUnmanaged: z.boolean().default(false),
 		pruneBuiltins: z.boolean().default(false),
 		referencedSkillNames: z.array(z.string()).default([]),
 		autoStart: z.boolean().default(true),
 		bootGraceSeconds: z.number().min(0).default(DEFAULT_CURATOR_BOOT_GRACE_SECONDS),
-		curatorReviewMaxTokens: z.number().min(1).default(DEFAULT_CURATOR_REVIEW_MAX_TOKENS),
-		curatorReviewTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS).default(DEFAULT_CURATOR_REVIEW_TIMEOUT_MS),
-		healthSoftBodyChars: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.softBodyChars),
-		healthStampDensityPerKb: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb),
-		healthChurnMinPatches: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.churnMinPatches)
+		curatorReviewMaxTokens: z.number().min(1).default(DEFAULT_CURATOR_REVIEW_MAX_TOKENS).volatile(),
+		curatorReviewTimeoutMs: z.number().min(1).max(MAX_TIMER_DELAY_MS).default(DEFAULT_CURATOR_REVIEW_TIMEOUT_MS).volatile(),
+		healthSoftBodyChars: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.softBodyChars).volatile(),
+		healthStampDensityPerKb: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb).volatile(),
+		healthChurnMinPatches: z.number().min(1).default(DEFAULT_HEALTH_THRESHOLDS.churnMinPatches).volatile()
 	});
 	skills;
 	io;
 	enabled;
-	intervalHours;
-	staleAfterDays;
-	archiveAfterDays;
-	llmReview;
+	/** This row's live config (G1 §8.3): its volatile fields are resolved at USE time. */
+	config;
 	/** S1-C3: one warn per instance when `llmReview` is on but the llm service
 	* is absent — the channel silently degrading must be visible at least once. */
 	llmAbsentWarned = false;
 	curatorProvider;
-	qualityWarnStaleAfterDays;
-	minIdleHours;
-	minIdleFailOpen;
 	excludeSkillNames;
 	manageUnmanaged;
 	pruneBuiltins;
 	referencedSkillNames;
 	bootGraceSeconds;
-	curatorReviewMaxTokens;
-	curatorReviewTimeoutMs;
-	healthSoftBodyChars;
-	healthStampDensityPerKb;
-	healthChurnMinPatches;
-	/** G3/S3.3: this row's resolved values — the base layer of the settings section. */
-	settingsBase;
-	/** The user layer for this row's namespace (absent provider = deployment values). */
-	overrides;
+	/** Keys whose supplied value had to be corrected; each warns once (G3.1). */
+	clampedKeys = /* @__PURE__ */ new Set();
 	lastRun = 0;
 	timer;
 	/** B-8 (v18): set by the fiber disposer; a triggered autoCheck must not
@@ -138,6 +110,12 @@ var EvolutionCurator = class extends Service {
 	instanceOwner = `evolution-curator[${process.pid}:${randomUUID().slice(0, 8)}]`;
 	constructor(ctx, config = {}) {
 		super(ctx, "evolutionCurator");
+		ctx.inject(["settings"], (injected) => {
+			const settings = injected.settings;
+			if (typeof settings?.configure !== "function") return;
+			const disposer = settings.configure({ auto: false });
+			if (typeof disposer === "function") ctx.effect(() => disposer, "evolution-curator: settings presentation");
+		});
 		this.io = evolutionIoAdapter(() => ctx.evolutionIo.provider());
 		this.skills = newSkillLibrary({
 			config,
@@ -148,62 +126,31 @@ var EvolutionCurator = class extends Service {
 				...policyStageLimits(this.ctx.get("evolutionPolicy")?.get?.())
 			}
 		});
+		this.config = config;
 		this.enabled = config.enabled ?? true;
 		this.instanceHome = evolutionHome();
 		const claim = claimInstance(this.instanceHome, INSTANCE_KEYS.curator, this.instanceOwner);
 		this.holdsInstance = claim.granted;
 		if (!claim.granted) this.ctx.logger.warn(`evolution-curator: this instance YIELDS — ${claim.key} is already held by ${claim.holder} IN THIS PROCESS (the claim is a module-scope Map, so it does not exclude another process); a second curator ROW over one home would run a second gate set and a second lifecycle pass over the same tree. It schedules nothing and every run() returns skipped "instance-held"; the report sweep itself is cross-process locked (v43 FLOW2-1).`);
-		const clamped = [];
-		const field = (name, value, fallback, min, max) => {
-			const result = clampedNumber(value, fallback, max === void 0 ? { min } : {
-				min,
-				max
-			});
-			if (value !== void 0 && result !== value) clamped.push(name);
-			return result;
-		};
-		this.intervalHours = field("intervalHours", readNumberParam(config, "curatorIntervalHours"), DEFAULT_CURATOR_INTERVAL_HOURS, 1);
-		this.staleAfterDays = field("staleAfterDays", config.staleAfterDays, DEFAULT_STALE_AFTER_DAYS, 1);
-		this.archiveAfterDays = field("archiveAfterDays", config.archiveAfterDays, DEFAULT_ARCHIVE_AFTER_DAYS, 1);
-		if (this.archiveAfterDays < this.staleAfterDays) {
-			this.ctx.logger.warn(`evolution-curator: archiveAfterDays (${this.archiveAfterDays}) < staleAfterDays (${this.staleAfterDays}); using staleAfterDays as the archive threshold`);
-			this.archiveAfterDays = this.staleAfterDays;
-		}
-		this.llmReview = config.llmReview ?? false;
 		this.curatorProvider = config.curatorProvider ?? "deepseek-official";
-		this.qualityWarnStaleAfterDays = field("qualityWarnStaleAfterDays", config.qualityWarnStaleAfterDays, DEFAULT_QUALITY_WARN_STALE_AFTER_DAYS, 1);
-		this.minIdleHours = field("minIdleHours", config.minIdleHours, DEFAULT_MIN_IDLE_HOURS, 0);
-		this.minIdleFailOpen = config.minIdleFailOpen ?? true;
 		this.excludeSkillNames = new Set(config.excludeSkillNames ?? []);
 		this.manageUnmanaged = config.manageUnmanaged ?? false;
 		this.pruneBuiltins = config.pruneBuiltins ?? false;
 		this.referencedSkillNames = new Set(config.referencedSkillNames ?? []);
-		this.bootGraceSeconds = field("bootGraceSeconds", config.bootGraceSeconds, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, 0, 3600);
-		this.curatorReviewMaxTokens = field("curatorReviewMaxTokens", config.curatorReviewMaxTokens, DEFAULT_CURATOR_REVIEW_MAX_TOKENS, 1);
-		this.curatorReviewTimeoutMs = field("curatorReviewTimeoutMs", config.curatorReviewTimeoutMs, DEFAULT_CURATOR_REVIEW_TIMEOUT_MS, 1, MAX_TIMER_DELAY_MS);
-		this.healthSoftBodyChars = field("healthSoftBodyChars", config.healthSoftBodyChars, DEFAULT_HEALTH_THRESHOLDS.softBodyChars, 1);
-		this.healthStampDensityPerKb = field("healthStampDensityPerKb", config.healthStampDensityPerKb, DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb, 1);
-		this.healthChurnMinPatches = field("healthChurnMinPatches", config.healthChurnMinPatches, DEFAULT_HEALTH_THRESHOLDS.churnMinPatches, 1);
-		if (clamped.length > 0) this.ctx.logger.warn(`evolution-curator: ${clamped.join(", ")} provided an invalid value; falling back to the default`);
-		this.settingsBase = {
-			curatorIntervalHours: this.intervalHours,
-			staleAfterDays: this.staleAfterDays,
-			archiveAfterDays: this.archiveAfterDays,
-			qualityWarnStaleAfterDays: this.qualityWarnStaleAfterDays,
-			minIdleHours: this.minIdleHours,
-			minIdleFailOpen: this.minIdleFailOpen,
-			llmReview: this.llmReview,
-			curatorReviewMaxTokens: this.curatorReviewMaxTokens,
-			curatorReviewTimeoutMs: this.curatorReviewTimeoutMs,
-			healthSoftBodyChars: this.healthSoftBodyChars,
-			healthStampDensityPerKb: this.healthStampDensityPerKb,
-			healthChurnMinPatches: this.healthChurnMinPatches
-		};
-		this.overrides = installParamSection(ctx, paramNamespace("evolution-curator"), CURATOR_SETTINGS_SCHEMA, this.settingsBase, {
-			warn: (message) => {
-				this.ctx.logger.warn("dsh-evolution-curator: " + message);
-			},
-			validate: validateCuratorSettings
+		this.bootGraceSeconds = this.clampOnce("bootGraceSeconds", config.bootGraceSeconds, DEFAULT_CURATOR_BOOT_GRACE_SECONDS, 0, 3600);
+		const archiveAtBoot = this.rowNumber("archiveAfterDays", DEFAULT_ARCHIVE_AFTER_DAYS, 1);
+		const staleAtBoot = this.rowNumber("staleAfterDays", DEFAULT_STALE_AFTER_DAYS, 1);
+		if (archiveAtBoot < staleAtBoot) this.ctx.logger.warn(`evolution-curator: archiveAfterDays (${archiveAtBoot}) < staleAfterDays (${staleAtBoot}); using staleAfterDays as the archive threshold`);
+		ctx.on("internal/config", function(_previous, next) {
+			const value = next();
+			if (this !== ctx.fiber) return value;
+			const archive = readNumberParam(value, "archiveAfterDays");
+			const stale = readNumberParam(value, "staleAfterDays");
+			if (typeof archive === "number" && typeof stale === "number") validateCuratorSettings({
+				archiveAfterDays: archive,
+				staleAfterDays: stale
+			});
+			return value;
 		});
 		this.lastRun = Date.now();
 		this.ctx.effect(() => {
@@ -215,24 +162,112 @@ var EvolutionCurator = class extends Service {
 		}, "evolution-curator.stop");
 		if (config.autoStart ?? true) this.start();
 	}
+	/**
+	* Clamp one supplied numeric value, warning once per key (G3.1).
+	* @param key - the config key, for the warning.
+	* @param value - the value as supplied by the deployment or the user.
+	* @param fallback - the package default a corrected value falls back to.
+	* @param min - the smallest value the engine can act on.
+	* @param max - the largest value the carrier can hold, when bounded.
+	* @returns the value the engine may use.
+	*/
+	clampOnce(key, value, fallback, min, max) {
+		const result = clampedNumber(value, fallback, max === void 0 ? { min } : {
+			min,
+			max
+		});
+		if (value !== void 0 && result !== value && !this.clampedKeys.has(key)) {
+			this.clampedKeys.add(key);
+			this.ctx.logger.warn(`evolution-curator: ${key} provided an invalid value; falling back to the default`);
+		}
+		return result;
+	}
+	/**
+	* One live numeric row field at USE time (G1 §8.3): the row config carries the
+	* platform-resolved layers (schema default < bundle row < profile override) and the
+	* field stays a live reference, so a committed edit applies without a watcher.
+	* @param key - the canonical registry id of the field.
+	* @returns the current plain value, or undefined when nothing supplied one.
+	*/
+	liveNumber(key) {
+		if (key === "curatorIntervalHours") return this.config.curatorIntervalHours?.get() ?? this.config.intervalHours;
+		return this.config[key]?.get();
+	}
+	/**
+	* One live numeric row field, clamped and warned once (G3.1).
+	* @param key - the canonical registry id of the field.
+	* @param fallback - the package default a corrected value falls back to.
+	* @param min - the smallest value the engine can act on.
+	* @param max - the largest value the carrier can hold, when bounded.
+	* @returns the value the engine may use.
+	*/
+	rowNumber(key, fallback, min, max) {
+		return this.clampOnce(key, this.liveNumber(key), fallback, min, max);
+	}
+	/**
+	* One live boolean row field at USE time.
+	* @param key - the canonical registry id of the field.
+	* @param fallback - the value used when the deployment supplied none.
+	* @returns the current value.
+	*/
+	rowBoolean(key, fallback) {
+		return this.config[key]?.get() ?? fallback;
+	}
+	/**
+	* This row's resolved values — the base layer of the precedence chain (G1 §8.3).
+	* Resolved per call so a user edit is live; every numeric field is clamped.
+	* @returns the row layer of the curator's behaviour knobs.
+	*/
+	rowSettings() {
+		const number = (key, fallback, min, max) => this.rowNumber(key, fallback, min, max);
+		return {
+			curatorIntervalHours: number("curatorIntervalHours", DEFAULT_CURATOR_INTERVAL_HOURS, 1),
+			staleAfterDays: number("staleAfterDays", DEFAULT_STALE_AFTER_DAYS, 1),
+			archiveAfterDays: number("archiveAfterDays", DEFAULT_ARCHIVE_AFTER_DAYS, 1),
+			qualityWarnStaleAfterDays: number("qualityWarnStaleAfterDays", DEFAULT_QUALITY_WARN_STALE_AFTER_DAYS, 1),
+			minIdleHours: number("minIdleHours", DEFAULT_MIN_IDLE_HOURS, 0),
+			minIdleFailOpen: this.rowBoolean("minIdleFailOpen", true),
+			llmReview: this.rowBoolean("llmReview", false),
+			curatorReviewMaxTokens: number("curatorReviewMaxTokens", DEFAULT_CURATOR_REVIEW_MAX_TOKENS, 1),
+			curatorReviewTimeoutMs: number("curatorReviewTimeoutMs", DEFAULT_CURATOR_REVIEW_TIMEOUT_MS, 1, MAX_TIMER_DELAY_MS),
+			healthSoftBodyChars: number("healthSoftBodyChars", DEFAULT_HEALTH_THRESHOLDS.softBodyChars, 1),
+			healthStampDensityPerKb: number("healthStampDensityPerKb", DEFAULT_HEALTH_THRESHOLDS.stampDensityPerKb, 1),
+			healthChurnMinPatches: number("healthChurnMinPatches", DEFAULT_HEALTH_THRESHOLDS.churnMinPatches, 1)
+		};
+	}
+	/**
+	* The keys the user set in this row's namespace (G1 §8.4-A).
+	*
+	* This is the ONLY remaining read of the settings user layer, and it reads KEY
+	* NAMES, never values: the platform resolves the user layer into the row config,
+	* so a value is needed from `config` — but the precedence rule (user > policy)
+	* needs to know WHICH keys the user set, or a deployment policy would silently
+	* override the user.
+	* @returns the keys present in this row's user layer.
+	*/
+	userSetKeys() {
+		const entry = this.ctx.get("settings")?.describe?.({ redactSecrets: false }).find((item) => item.ns === paramRowId("evolution-curator"));
+		return new Set(Object.keys(entry?.user ?? {}));
+	}
 	/** The policy-snapshot carrier for this group (unmounted service = no policy). */
 	policyFields() {
 		return this.ctx.get("evolutionPolicy")?.get() ?? {};
 	}
 	/**
-	* G3/S3.3: the ONE reader of the curator's behaviour knobs. Precedence is
-	* user > policy snapshot > this row, and {@link ParamOverrides.get} returns
-	* undefined for a key the user never set, so the deployment carriers keep
-	* winning exactly as before. Read at USE time: a committed settings change is
-	* live without a restart and without a watcher.
+	* G3/S3.3 + G1: the ONE reader of the curator's behaviour knobs. Precedence is
+	* user > policy snapshot > this row: the row layer already carries the user value
+	* (a live field), and {@link userSetKeys} answers whether the user set the key —
+	* so an untouched key keeps following the deployment carriers exactly as before.
+	* Read at USE time: a committed settings change is live without a restart and
+	* without a watcher.
 	* @returns the resolved section, every numeric field sanitized.
 	*/
 	settings() {
 		const snapshot = this.policyFields();
-		const row = this.settingsBase;
+		const row = this.rowSettings();
+		const userSet = this.userSetKeys();
 		const pick = (key) => {
-			const user = this.overrides.get(key);
-			if (user !== void 0) return user;
+			if (userSet.has(key)) return row[key];
 			return snapshot[key] ?? row[key];
 		};
 		const number = (key, min, max) => {
@@ -412,8 +447,7 @@ var EvolutionCurator = class extends Service {
 						text: prompt
 					}],
 					source: {
-						kind: "plugin",
-						plugin: "dsh-evolution-curator",
+						kind: "evolution-curator",
 						form: "notice",
 						summary: "curator review"
 					}
@@ -1049,11 +1083,14 @@ var EvolutionCurator = class extends Service {
 		const agents = this.ctx.get("agents");
 		if (!agents) return !settings.minIdleFailOpen;
 		let latest = 0;
+		let measured = 0;
 		for (const agent of agents.list()) {
-			const events = agent.session.snapshotEvents();
-			const last = events.length === 0 ? 0 : events[events.length - 1]?.time ?? 0;
+			const last = sessionLastEventTime(this.ctx, agent.session);
+			if (last === void 0) continue;
+			measured += 1;
 			latest = Math.max(latest, last);
 		}
+		if (measured === 0) return !settings.minIdleFailOpen;
 		return latest > 0 && Date.now() - latest < settings.minIdleHours * 36e5;
 	}
 	/**
@@ -1435,4 +1472,4 @@ function reportsSweepLockTarget() {
 	return join(evolutionHome(), "reports", ".retention");
 }
 //#endregion
-export { CURATOR_SETTINGS_SCHEMA, EvolutionCurator, EvolutionCurator as default, gateConsolidations, validateCuratorSettings };
+export { EvolutionCurator, EvolutionCurator as default, gateConsolidations, validateCuratorSettings };

package/lib/types/index.d.ts

@@ -3,8 +3,16 @@
  * @module @lmzhen/dsh-evolution-curator
  */
 import { Context, Service } from '@deepseek-ai/cordis';
+import type { Volatile } from '@deepseek-ai/cordis';
+import type { ContextFormed } from '@deepseek-ai/dsh-llm';
+declare module '@deepseek-ai/dsh-llm' {
+    interface MessageSourceMap {
+        'evolution-curator': {
+            kind: 'evolution-curator';
+        } & ContextFormed;
+    }
+}
 import z from '@deepseek-ai/schemastery';
-import type Schema from '@deepseek-ai/schemastery';
 import { EvolutionGateSet, type SkillLibrary } from '@lmzhen/dsh-evolution-core';
 import { type CuratorConsolidation, type CuratorNominations, type CuratorRunReport, type ScopeView, type SkillActionResult, type SkillHealthVerdict } from '@lmzhen/dsh-evolution-core';
 import type { SkillVersion } from '@lmzhen/dsh-evolution-core';
@@ -16,29 +24,31 @@ declare module '@deepseek-ai/cordis' {
 }
 export interface Config {
     enabled?: boolean;
+    /** Canonical registry id for the due-ness interval (see PARAM_ALIASES). */
+    curatorIntervalHours?: Volatile<number | undefined>;
     /** The due-ness interval. The policy snapshot shadows it in every shipped
      * composition — configure `curatorIntervalHours` there; that name is the
      * canonical id. Deprecated alias (G0/S0.3): still readable, refused by
      * writes; removed 0.7.0. */
     intervalHours?: number;
-    staleAfterDays?: number;
-    archiveAfterDays?: number;
+    staleAfterDays?: Volatile<number>;
+    archiveAfterDays?: Volatile<number>;
     /** Skill-tree root for curator scope/snapshot/archive (D2, v11) — a custom
      * root deployment (review/tool-skill-manage write another tree) must point
      * the curator at the SAME tree or lifecycle decisions land on the default
      * tree and never see the deployed skills. Empty uses skillsRoot(). */
     root?: string;
     /** Spend one LLM review pass on stale candidates before the deterministic archive step. */
-    llmReview?: boolean;
+    llmReview?: Volatile<boolean>;
     curatorProvider?: string;
     /** Quality-warned skills may turn stale after this many idle days. */
-    qualityWarnStaleAfterDays?: number;
+    qualityWarnStaleAfterDays?: Volatile<number>;
     /** Skip automatic runs while any session was active within this many hours (0 disables). */
-    minIdleHours?: number;
+    minIdleHours?: Volatile<number>;
     /** When true (default), a missing `agents` service is treated as "no active
      * session" (fail-open — the idle gate lets the run proceed); when false the
      * gate fails closed and defers the run until activity can be measured. */
-    minIdleFailOpen?: boolean;
+    minIdleFailOpen?: Volatile<boolean>;
     /** Skill names excluded from the automated lifecycle. */
     excludeSkillNames?: string[];
     /** Include usage records whose created_by is not 'agent' in lifecycle decisions. */
@@ -52,15 +62,15 @@ export interface Config {
     /** Seconds between host boot and the first automatic schedule check (restart catch-up). */
     bootGraceSeconds?: number;
     /** Max tokens for the optional LLM nomination pass. */
-    curatorReviewMaxTokens?: number;
+    curatorReviewMaxTokens?: Volatile<number>;
     /** Timeout (ms) for the optional LLM nomination pass (B-10, v18). */
-    curatorReviewTimeoutMs?: number;
+    curatorReviewTimeoutMs?: Volatile<number>;
     /** Structure-health soft body limit (chars) — see DEFAULT_HEALTH_THRESHOLDS (rc.73 A1). */
-    healthSoftBodyChars?: number;
+    healthSoftBodyChars?: Volatile<number>;
     /** Structure-health stamp-density ceiling per KB — see DEFAULT_HEALTH_THRESHOLDS. */
-    healthStampDensityPerKb?: number;
+    healthStampDensityPerKb?: Volatile<number>;
     /** Structure-health write-ghost floor: patches at/above with zero reads (A2). */
-    healthChurnMinPatches?: number;
+    healthChurnMinPatches?: Volatile<number>;
 }
 /** Curator behaviour a user may change (G3/S3.3). Field names are the CANONICAL
  * parameter ids from the registry, so the settings document, the params output,
@@ -91,10 +101,6 @@ export interface CuratorSettings {
     /** Patches without a read that flag a write-ghost skill. */
     healthChurnMinPatches: number;
 }
-/** Schema the platform validates the user layer against; defaults mirror the core
- * constants and the bounds mirror the row schema, so an empty document resolves to
- * today's behaviour and an out-of-range value is refused instead of clamped. */
-export declare const CURATOR_SETTINGS_SCHEMA: z<CuratorSettings>;
 /**
  * The cross-field rule the schema cannot express (A2-17): an archive threshold
  * below the stale threshold makes the engine reactivate stale records instead of
@@ -103,7 +109,7 @@ export declare const CURATOR_SETTINGS_SCHEMA: z<CuratorSettings>;
  * snapshot and the plugin row).
  * @param value - the resolved section the platform hands the owner.
  */
-export declare function validateCuratorSettings(value: CuratorSettings): void;
+export declare function validateCuratorSettings(value: Pick<CuratorSettings, 'archiveAfterDays' | 'staleAfterDays'>): void;
 /** Outcome of one curator run pass. */
 export interface CuratorRunOutcome {
     stale: string[];
@@ -136,35 +142,69 @@ export declare function gateConsolidations(consolidations: CuratorConsolidation[
 }): CuratorConsolidation[];
 export declare class EvolutionCurator extends Service {
     static inject: string[];
-    static Config: Schema<Config>;
+    static Config: z<Schemastery.ObjectS<NoInfer<{
+        root: z<string, string, "defined">;
+        enabled: z<boolean, boolean, "defined">;
+        curatorIntervalHours: z<number, number, "volatile">;
+        intervalHours: z<number, number, "plain">;
+        staleAfterDays: z<number, number, "volatile-defined">;
+        archiveAfterDays: z<number, number, "volatile-defined">;
+        llmReview: z<boolean, boolean, "volatile-defined">;
+        curatorProvider: z<string, string, "defined">;
+        qualityWarnStaleAfterDays: z<number, number, "volatile-defined">;
+        minIdleHours: z<number, number, "volatile-defined">;
+        minIdleFailOpen: z<boolean, boolean, "volatile-defined">;
+        excludeSkillNames: z<string[], string[], "defined">;
+        manageUnmanaged: z<boolean, boolean, "defined">;
+        pruneBuiltins: z<boolean, boolean, "defined">;
+        referencedSkillNames: z<string[], string[], "defined">;
+        autoStart: z<boolean, boolean, "defined">;
+        bootGraceSeconds: z<number, number, "defined">;
+        curatorReviewMaxTokens: z<number, number, "volatile-defined">;
+        curatorReviewTimeoutMs: z<number, number, "volatile-defined">;
+        healthSoftBodyChars: z<number, number, "volatile-defined">;
+        healthStampDensityPerKb: z<number, number, "volatile-defined">;
+        healthChurnMinPatches: z<number, number, "volatile-defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        root: z<string, string, "defined">;
+        enabled: z<boolean, boolean, "defined">;
+        curatorIntervalHours: z<number, number, "volatile">;
+        intervalHours: z<number, number, "plain">;
+        staleAfterDays: z<number, number, "volatile-defined">;
+        archiveAfterDays: z<number, number, "volatile-defined">;
+        llmReview: z<boolean, boolean, "volatile-defined">;
+        curatorProvider: z<string, string, "defined">;
+        qualityWarnStaleAfterDays: z<number, number, "volatile-defined">;
+        minIdleHours: z<number, number, "volatile-defined">;
+        minIdleFailOpen: z<boolean, boolean, "volatile-defined">;
+        excludeSkillNames: z<string[], string[], "defined">;
+        manageUnmanaged: z<boolean, boolean, "defined">;
+        pruneBuiltins: z<boolean, boolean, "defined">;
+        referencedSkillNames: z<string[], string[], "defined">;
+        autoStart: z<boolean, boolean, "defined">;
+        bootGraceSeconds: z<number, number, "defined">;
+        curatorReviewMaxTokens: z<number, number, "volatile-defined">;
+        curatorReviewTimeoutMs: z<number, number, "volatile-defined">;
+        healthSoftBodyChars: z<number, number, "volatile-defined">;
+        healthStampDensityPerKb: z<number, number, "volatile-defined">;
+        healthChurnMinPatches: z<number, number, "volatile-defined">;
+    }>>, "plain">;
     readonly skills: SkillLibrary;
     private readonly io;
     private readonly enabled;
-    private readonly intervalHours;
-    private readonly staleAfterDays;
-    private readonly archiveAfterDays;
-    private readonly llmReview;
+    /** This row's live config (G1 §8.3): its volatile fields are resolved at USE time. */
+    private readonly config;
     /** S1-C3: one warn per instance when `llmReview` is on but the llm service
      * is absent — the channel silently degrading must be visible at least once. */
     private llmAbsentWarned;
     private readonly curatorProvider;
-    private readonly qualityWarnStaleAfterDays;
-    private readonly minIdleHours;
-    private readonly minIdleFailOpen;
     private readonly excludeSkillNames;
     private readonly manageUnmanaged;
     private readonly pruneBuiltins;
     private readonly referencedSkillNames;
     private readonly bootGraceSeconds;
-    private readonly curatorReviewMaxTokens;
-    private readonly curatorReviewTimeoutMs;
-    private readonly healthSoftBodyChars;
-    private readonly healthStampDensityPerKb;
-    private readonly healthChurnMinPatches;
-    /** G3/S3.3: this row's resolved values — the base layer of the settings section. */
-    private readonly settingsBase;
-    /** The user layer for this row's namespace (absent provider = deployment values). */
-    private readonly overrides;
+    /** Keys whose supplied value had to be corrected; each warns once (G3.1). */
+    private readonly clampedKeys;
     private lastRun;
     private timer;
     /** B-8 (v18): set by the fiber disposer; a triggered autoCheck must not
@@ -192,14 +232,66 @@ export declare class EvolutionCurator extends Service {
      * yielding instance's log line names a concrete holder. */
     private readonly instanceOwner;
     constructor(ctx: Context, config?: Config);
+    /**
+     * Clamp one supplied numeric value, warning once per key (G3.1).
+     * @param key - the config key, for the warning.
+     * @param value - the value as supplied by the deployment or the user.
+     * @param fallback - the package default a corrected value falls back to.
+     * @param min - the smallest value the engine can act on.
+     * @param max - the largest value the carrier can hold, when bounded.
+     * @returns the value the engine may use.
+     */
+    private clampOnce;
+    /**
+     * One live numeric row field at USE time (G1 §8.3): the row config carries the
+     * platform-resolved layers (schema default < bundle row < profile override) and the
+     * field stays a live reference, so a committed edit applies without a watcher.
+     * @param key - the canonical registry id of the field.
+     * @returns the current plain value, or undefined when nothing supplied one.
+     */
+    private liveNumber;
+    /**
+     * One live numeric row field, clamped and warned once (G3.1).
+     * @param key - the canonical registry id of the field.
+     * @param fallback - the package default a corrected value falls back to.
+     * @param min - the smallest value the engine can act on.
+     * @param max - the largest value the carrier can hold, when bounded.
+     * @returns the value the engine may use.
+     */
+    private rowNumber;
+    /**
+     * One live boolean row field at USE time.
+     * @param key - the canonical registry id of the field.
+     * @param fallback - the value used when the deployment supplied none.
+     * @returns the current value.
+     */
+    private rowBoolean;
+    /**
+     * This row's resolved values — the base layer of the precedence chain (G1 §8.3).
+     * Resolved per call so a user edit is live; every numeric field is clamped.
+     * @returns the row layer of the curator's behaviour knobs.
+     */
+    private rowSettings;
+    /**
+     * The keys the user set in this row's namespace (G1 §8.4-A).
+     *
+     * This is the ONLY remaining read of the settings user layer, and it reads KEY
+     * NAMES, never values: the platform resolves the user layer into the row config,
+     * so a value is needed from `config` — but the precedence rule (user > policy)
+     * needs to know WHICH keys the user set, or a deployment policy would silently
+     * override the user.
+     * @returns the keys present in this row's user layer.
+     */
+    private userSetKeys;
     /** The policy-snapshot carrier for this group (unmounted service = no policy). */
     private policyFields;
     /**
-     * G3/S3.3: the ONE reader of the curator's behaviour knobs. Precedence is
-     * user > policy snapshot > this row, and {@link ParamOverrides.get} returns
-     * undefined for a key the user never set, so the deployment carriers keep
-     * winning exactly as before. Read at USE time: a committed settings change is
-     * live without a restart and without a watcher.
+     * G3/S3.3 + G1: the ONE reader of the curator's behaviour knobs. Precedence is
+     * user > policy snapshot > this row: the row layer already carries the user value
+     * (a live field), and {@link userSetKeys} answers whether the user set the key —
+     * so an untouched key keeps following the deployment carriers exactly as before.
+     * Read at USE time: a committed settings change is live without a restart and
+     * without a watcher.
      * @returns the resolved section, every numeric field sanitized.
      */
     private settings;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-curator",
   "description": "Deterministic skill lifecycle and recovery (community build)",
-  "version": "0.16.0",
+  "version": "0.17.0-rc.1",
   "publishConfig": {
     "access": "public"
   },
@@ -27,20 +27,20 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.16.0"
+    "@lmzhen/dsh-evolution-core": "^0.17.0-rc.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-io": "^0.16.0",
-    "@lmzhen/dsh-evolution-state": "^0.16.0"
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-session": "^0.2.0-rc.1",
+    "@lmzhen/dsh-evolution-io": "^0.17.0-rc.1",
+    "@lmzhen/dsh-evolution-state": "^0.17.0-rc.1"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-core": "^0.16.0",
-    "@lmzhen/dsh-evolution-io": "^0.16.0",
-    "@lmzhen/dsh-evolution-state": "^0.16.0"
+    "@deepseek-ai/dsh-llm": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-session": "^0.2.0-rc.1",
+    "@lmzhen/dsh-evolution-core": "^0.17.0-rc.1",
+    "@lmzhen/dsh-evolution-io": "^0.17.0-rc.1",
+    "@lmzhen/dsh-evolution-state": "^0.17.0-rc.1"
   }
 }