@lmzhen/dsh-evolution-feedback 0.3.71 → 0.3.72

package/lib/index.js

@@ -223,6 +223,14 @@ var EvolutionFeedback = class EvolutionFeedback {
 		if (total === 0) return 0;
 		return (record.positive - record.negative) / total;
 	}
+	/**
+	* Deep-copy view of the live aggregate.
+	*
+	* OPT-26 (2026-09): `@internal` — test-support API, NO production consumer
+	* in the family (mirrors the explicit posture of evolution-replay's
+	* `plansSnapshot()`). External consumers should read the rendered
+	* score/warn surfaces instead of relying on this shape.
+	*/
 	snapshot() {
 		const copyRecords = (table) => {
 			const out = {};
@@ -373,12 +381,28 @@ function parseCache(raw, warn = () => {}) {
 /** Per-record numeric-domain validation (S6.4): a record whose `positive` or
 * `negative` is not a finite number >= 0, or whose `lastNote` is not a string,
 * would fold as NaN into the usage aggregate — skip it with a warn instead of
-* corrupting the state. A record with no valid count is dropped entirely. */
+* corrupting the state. A record with no valid count is dropped entirely.
+* OPT-25 (2026-09): a count ABOVE `MAX_MIGRATED_EVENTS_PER_RECORD` is now
+* CLAMPED here with a warn, symmetric with the migration reader's clamp (same
+* file, same threat model — V24-05 covered the migration side only). Before,
+* a poisoned boot-cache count folded as-is into every downstream decision;
+* the clamp bounds the skew to the same ceiling migration accepts. */
 function sanitizeCacheRecords(input, kind, warn) {
 	const out = {};
 	for (const [target, value] of Object.entries(input)) {
 		const record = sanitizeFeedbackRecord(value, target, kind, warn);
-		if (record) out[target] = record;
+		if (record) {
+			let clamped;
+			if (record.positive > MAX_MIGRATED_EVENTS_PER_RECORD || record.negative > MAX_MIGRATED_EVENTS_PER_RECORD) {
+				warn(`evolution-feedback: cache record for ${kind} "${target}" exceeds the clamp ceiling (${MAX_MIGRATED_EVENTS_PER_RECORD}) — clamping like the migration reader`);
+				clamped = {
+					positive: Math.min(record.positive, MAX_MIGRATED_EVENTS_PER_RECORD),
+					negative: Math.min(record.negative, MAX_MIGRATED_EVENTS_PER_RECORD),
+					...record.lastNote !== void 0 ? { lastNote: record.lastNote } : {}
+				};
+			}
+			out[target] = clamped ?? record;
+		}
 	}
 	return out;
 }

package/lib/types/index.d.ts

@@ -98,6 +98,14 @@ export declare class EvolutionFeedback {
     refold(): Promise<void>;
     record(target: string, rating: 'positive' | 'negative', note?: string, kind?: 'skill' | 'session'): void;
     score(target: string, kind?: 'skill' | 'session'): number;
+    /**
+     * Deep-copy view of the live aggregate.
+     *
+     * OPT-26 (2026-09): `@internal` — test-support API, NO production consumer
+     * in the family (mirrors the explicit posture of evolution-replay's
+     * `plansSnapshot()`). External consumers should read the rendered
+     * score/warn surfaces instead of relying on this shape.
+     */
     snapshot(): FeedbackState;
     /** Await the pending record-task chain (unload safety; rc.66). */
     waitIdle(): Promise<unknown>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-feedback",
   "description": "Feedback-to-quality scoring for self-evolution (community build)",
-  "version": "0.3.71",
+  "version": "0.3.72",
   "publishConfig": {
     "access": "public"
   },
@@ -31,18 +31,18 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.3.71"
+    "@lmzhen/dsh-evolution-core": "^0.3.72"
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.5-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-io": "^0.3.71",
-    "@lmzhen/dsh-skill-usage": "^0.3.71"
+    "@lmzhen/dsh-evolution-io": "^0.3.72",
+    "@lmzhen/dsh-skill-usage": "^0.3.72"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-io": "^0.3.71",
-    "@lmzhen/dsh-evolution-io-node": "^0.3.71",
-    "@lmzhen/dsh-skill-usage": "^0.3.71"
+    "@lmzhen/dsh-evolution-io": "^0.3.72",
+    "@lmzhen/dsh-evolution-io-node": "^0.3.72",
+    "@lmzhen/dsh-skill-usage": "^0.3.72"
   }
 }