@lmzhen/dsh-evolution-learning-graph 0.26.15 → 0.26.26

package/lib/index.js

@@ -1,6 +1,6 @@
+import { SKILL_NAME_RE, authorityFrom, contentHash, errorText, evolutionIoAdapter, isPresent, isUnknown, newSkillLibrary, relatedSkillNames, resolveExecOrigins, runWriteGates, skillWriteGateContext } from "@lmzhen/dsh-evolution-core";
 import { effectiveSessionPolicy } from "@lmzhen/dsh-evolution-approval";
 import z from "@deepseek-ai/schemastery";
-import { SKILL_NAME_RE, contentHash, errorText, evolutionIoAdapter, newSkillLibrary, relatedSkillNames, resolveExecOrigins } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/index.js
 /**
 * Learning graph over skills and memory, plus node-level commands
@@ -219,6 +219,41 @@ function capRenderedLines(lines) {
 	if (lines.length <= 200) return lines.join("\n");
 	return [...lines.slice(0, 200), `…${lines.length - 200} more`].join("\n");
 }
+/**
+* G1/1.2: the graph commands' write-admission call, as a NAMED function.
+*
+* The gates run at the execution point: these commands write at the bytes, exactly like the tool's
+* execution path, so the read-before-write gate does not apply and a missing session read set is not a
+* refusal. `delete` archives (reversible) and is allowed through by the protection gate by design;
+* `update` is what a protected skill is refused for.
+*
+* Named rather than inlined because the wiring it represents - "this command passes the SAME sequence" -
+* has to be provable by a case that fails when the call disappears.
+* @param services - the policy source and the warn sink, both from the command's own context.
+* @param request - the action, the target name, the new body for an update, and the library write origin.
+* @returns the refusal message, or null when the write may proceed.
+*/
+async function graphWriteGate(services, request) {
+	const isUpdate = request.action === "update";
+	const args = isUpdate ? {
+		action: "update",
+		name: request.name,
+		content: request.content ?? ""
+	} : {
+		action: "delete",
+		name: request.name
+	};
+	return runWriteGates(skillWriteGateContext({
+		policy: services.policy,
+		confirm: void 0,
+		readNames: isUpdate ? new Set([request.name]) : void 0,
+		warn: services.warn
+	}, {
+		point: isUpdate ? "admission" : "execution",
+		args,
+		origin: request.origin
+	}));
+}
 function apply(ctx, rawConfig = {}) {
 	ctx.inject(["commands"], (commandCtx) => {
 		const commands = commandCtx.commands;
@@ -235,6 +270,12 @@ function apply(ctx, rawConfig = {}) {
 					kind: "error",
 					text
 				});
+				let writeGateWarned = false;
+				const warnWriteGateOnce = (message) => {
+					if (writeGateWarned) return;
+					writeGateWarned = true;
+					ctx.logger.warn(message);
+				};
 				const usageService = ctx.get("skillUsage");
 				const memoryService = ctx.get("memory");
 				const ioService = ctx.get("evolutionIo");
@@ -318,6 +359,7 @@ function apply(ctx, rawConfig = {}) {
 				}
 				function withSkills() {
 					return newSkillLibrary({
+						authority: authorityFrom({ origin: "foreground" }),
 						config: rawConfig,
 						io: evolutionIoAdapter(() => io.provider()),
 						ctx,
@@ -344,7 +386,8 @@ function apply(ctx, rawConfig = {}) {
 							const stagesForeground = approval.stageForeground !== false;
 							if (approval.isEnabled !== false && sessionPolicyEdit !== "never" && (origins.approval === "background_review" || stagesForeground) && !approval.hasRunner("skill")) return err("无法暂存 graph 技能写入：没有注册技能回放运行器 —— 请挂载 tool-skill-manage 行（evolution-agent 预设），或禁用 evolution-approval。");
 							const sessionPolicy = sessionPolicyEdit;
-							const stageCurrent = await withSkills().read(parsed.name).catch(() => void 0);
+							const stageProbe = await withSkills().readSkillProbe(parsed.name);
+							const stageCurrent = isUnknown(stageProbe) ? void 0 : isPresent(stageProbe) ? stageProbe.value : null;
 							const decision = await approval.request({
 								kind: "skill",
 								summary: `graph edit ${parsed.name}`,
@@ -365,6 +408,16 @@ function apply(ctx, rawConfig = {}) {
 							});
 							if (decision.action === "staged") return ok(decision.message);
 						}
+						const graphRefusal = await graphWriteGate({
+							policy: ctx.get("evolutionPolicy"),
+							warn: warnWriteGateOnce
+						}, {
+							action: "update",
+							name: parsed.name,
+							content,
+							origin: resolveExecOrigins(invocationAgent && { agent: invocationAgent }).library
+						});
+						if (graphRefusal !== null) return err(graphRefusal);
 						const result = await withSkills().update(parsed.name, content, origins.library);
 						if (result.ok && result.noop !== true) await usageService.record?.(parsed.name, "patch");
 						return result.ok ? ok(result.message) : err(result.message);
@@ -428,6 +481,15 @@ function apply(ctx, rawConfig = {}) {
 							});
 							if (decision.action === "staged") return ok(decision.message);
 						}
+						const graphRefusal = await graphWriteGate({
+							policy: ctx.get("evolutionPolicy"),
+							warn: warnWriteGateOnce
+						}, {
+							action: "delete",
+							name: parsed.name,
+							origin: resolveExecOrigins(invocationAgent && { agent: invocationAgent }).library
+						});
+						if (graphRefusal !== null) return err(graphRefusal);
 						const result = await withSkills().archive(parsed.name);
 						if (result.ok) await usageService?.markArchived?.(parsed.name);
 						return result.ok ? ok(result.message) : err(result.message);
@@ -472,4 +534,4 @@ function apply(ctx, rawConfig = {}) {
 	});
 }
 //#endregion
-export { Config, GRAPH_RENDER_LINE_CAP, apply, buildLearningGraph, capRenderedLines, graphDensity, memorySnapshotOf, name, parseGraphNodeId, readMemoryIndex, renderNodeLine, resolveGraphNode };
+export { Config, GRAPH_RENDER_LINE_CAP, apply, buildLearningGraph, capRenderedLines, graphDensity, graphWriteGate, memorySnapshotOf, name, parseGraphNodeId, readMemoryIndex, renderNodeLine, resolveGraphNode };

package/lib/types/index.d.ts

@@ -10,6 +10,7 @@
  * @module @lmzhen/dsh-evolution-learning-graph
  */
 import type { Context } from '@deepseek-ai/cordis';
+import { type WriteOrigin } from '@lmzhen/dsh-evolution-core';
 import z from '@deepseek-ai/schemastery';
 export interface GraphNode {
     id: string;
@@ -150,5 +151,28 @@ export declare const Config: z<Config>;
 export declare const GRAPH_RENDER_LINE_CAP = 200;
 /** Join lines under the render cap; overflow is summarized, not dropped silently. */
 export declare function capRenderedLines(lines: string[]): string;
+/**
+ * G1/1.2: the graph commands' write-admission call, as a NAMED function.
+ *
+ * The gates run at the execution point: these commands write at the bytes, exactly like the tool's
+ * execution path, so the read-before-write gate does not apply and a missing session read set is not a
+ * refusal. `delete` archives (reversible) and is allowed through by the protection gate by design;
+ * `update` is what a protected skill is refused for.
+ *
+ * Named rather than inlined because the wiring it represents - "this command passes the SAME sequence" -
+ * has to be provable by a case that fails when the call disappears.
+ * @param services - the policy source and the warn sink, both from the command's own context.
+ * @param request - the action, the target name, the new body for an update, and the library write origin.
+ * @returns the refusal message, or null when the write may proceed.
+ */
+export declare function graphWriteGate(services: {
+    readonly policy: unknown;
+    readonly warn: (message: string) => void;
+}, request: {
+    readonly action: 'update' | 'delete';
+    readonly name: string;
+    readonly content?: string | undefined;
+    readonly origin: WriteOrigin;
+}): Promise<string | null>;
 export declare function apply(ctx: Context, rawConfig?: Config): void;
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-learning-graph",
   "description": "Learning graph over skills and memory (community build)",
-  "version": "0.26.15",
+  "version": "0.26.26",
   "publishConfig": {
     "access": "public"
   },
@@ -27,8 +27,8 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.4",
-    "@lmzhen/dsh-evolution-approval": "^0.26.15",
-    "@lmzhen/dsh-evolution-core": "^0.26.15"
+    "@lmzhen/dsh-evolution-approval": "^0.26.26",
+    "@lmzhen/dsh-evolution-core": "^0.26.26"
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-commands": "^0.2.0-rc.1",