@lmzhen/dsh-evolution-learning-graph 0.3.64 → 0.3.66

package/lib/index.js

@@ -1,6 +1,6 @@
 import { effectiveSessionPolicy } from "@lmzhen/dsh-evolution-approval";
 import z from "@deepseek-ai/schemastery";
-import { SKILL_NAME_RE, SkillLibrary, evolutionIoAdapter, relatedSkillNames, resolveOrigins, resolveSkillsRoot } from "@lmzhen/dsh-evolution-core";
+import { SKILL_NAME_RE, SkillLibrary, contentHash, evolutionIoAdapter, relatedSkillNames, resolveOrigins, resolveSkillsRoot } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/index.js
 /**
 * Learning graph over skills and memory, plus node-level commands
@@ -199,7 +199,10 @@ async function resolveGraphNode(parsed, repository) {
 * manage registers for `kind: 'skill'` replays them on approve.
 */
 const name = "evolution-learning-graph";
-const Config = z.object({ root: z.string().default("") });
+const Config = z.object({
+	root: z.string().default(""),
+	threatExemptLabels: z.array(z.string()).default([])
+});
 /**
 * F-10: rendered-line cap for the `/graph` directory — nodes span the
 * whole usage set plus every memory entry and the edge list is a full join, so
@@ -272,7 +275,7 @@ function apply(ctx, rawConfig = {}) {
 				function withSkills() {
 					return new SkillLibrary(graphSkillsRoot, evolutionIoAdapter(() => io.provider()), void 0, (event) => {
 						ctx.emit("evolution/skill-mutated", event);
-					});
+					}, void 0, [...rawConfig.threatExemptLabels ?? []]);
 				}
 				async function nodeDetail(id) {
 					const parsed = parseGraphNodeId(id);
@@ -294,6 +297,7 @@ function apply(ctx, rawConfig = {}) {
 							const stagesForeground = approval.stageForeground !== false;
 							if (approval.isEnabled !== false && sessionPolicyEdit !== "never" && (origins.approval === "background_review" || stagesForeground) && !approval.hasRunner("skill")) return err("Graph skill write cannot be staged: no skill replay runner is registered — mount the tool-skill-manage row (evolution-agent preset) or disable evolution-approval.");
 							const sessionPolicy = sessionPolicyEdit;
+							const stageCurrent = await withSkills().read(parsed.name).catch(() => null);
 							const decision = await approval.request({
 								kind: "skill",
 								summary: `graph edit ${parsed.name}`,
@@ -301,7 +305,8 @@ function apply(ctx, rawConfig = {}) {
 									operation: {
 										action: "update",
 										name: parsed.name,
-										content
+										content,
+										...stageCurrent !== null ? { staged_from_sha256: contentHash(stageCurrent) } : {}
 									},
 									origin: origins.approval,
 									libraryOrigin: origins.library
@@ -323,7 +328,7 @@ function apply(ctx, rawConfig = {}) {
 					if (memoryApproval) {
 						const originsM = resolveOrigins(session?.header?.origin);
 						const sessionPolicyM = effectiveSessionPolicy(ctx, session);
-						if (memoryApproval.isEnabled !== false && sessionPolicyM !== "never" && (originsM.approval === "background_review" || memoryApproval.stageForeground !== false) && !memoryApproval.hasRunner("memory")) return err("Graph memory write cannot be staged: no memory replay runner is registered — mount the tool-memory row (evolution-host/evolution-all bundle) or disable evolution-approval.");
+						if (memoryApproval.isEnabled !== false && sessionPolicyM !== "never" && (originsM.approval === "background_review" || memoryApproval.stageForeground !== false) && !memoryApproval.hasRunner("memory")) return err("Graph memory write cannot be staged: no memory replay runner is registered — mount the tool-memory row (evolution-all bundle, or the evolution-preset overlay; the host bundle does not carry it) or disable evolution-approval.");
 						const decision = await memoryApproval.request({
 							kind: "memory",
 							summary: `graph edit memory:${parsed.source}:${parsed.index}`,
@@ -386,7 +391,7 @@ function apply(ctx, rawConfig = {}) {
 					if (memoryApproval) {
 						const origins = resolveOrigins(session?.header?.origin);
 						const sessionPolicy = effectiveSessionPolicy(ctx, session);
-						if (memoryApproval.isEnabled !== false && sessionPolicy !== "never" && (origins.approval === "background_review" || memoryApproval.stageForeground !== false) && !memoryApproval.hasRunner("memory")) return err("Graph memory delete cannot be staged: no memory replay runner is registered — mount the tool-memory row (evolution-host/evolution-all bundle) or disable evolution-approval.");
+						if (memoryApproval.isEnabled !== false && sessionPolicy !== "never" && (origins.approval === "background_review" || memoryApproval.stageForeground !== false) && !memoryApproval.hasRunner("memory")) return err("Graph memory delete cannot be staged: no memory replay runner is registered — mount the tool-memory row (evolution-all bundle, or the evolution-preset overlay; the host bundle does not carry it) or disable evolution-approval.");
 						const decision = await memoryApproval.request({
 							kind: "memory",
 							summary: `graph delete memory:${parsed.source}:${parsed.index}`,

package/lib/types/index.d.ts

@@ -150,6 +150,12 @@ export interface Config {
      * the graph on the SAME skills tree the tools/catalog read under a
      * custom-root deployment (previously the default root was hardcoded). */
     root?: string;
+    /** P2-26 (v19): the deployment's benign threat labels. The graph edit/delete
+     * channel writes skill content through the same SkillLibrary as the tools,
+     * so it must honour the same exemption list — without it a label allowed on
+     * the tool channel was refused here, and the refusal named a config key this
+     * channel could not reach. */
+    threatExemptLabels?: string[];
 }
 export declare const Config: z<Config>;
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-learning-graph",
   "description": "Learning graph over skills and memory (community build)",
-  "version": "0.3.64",
+  "version": "0.3.66",
   "publishConfig": {
     "access": "public"
   },
@@ -31,8 +31,8 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-approval": "^0.3.64",
-    "@lmzhen/dsh-evolution-core": "^0.3.64"
+    "@lmzhen/dsh-evolution-approval": "^0.3.66",
+    "@lmzhen/dsh-evolution-core": "^0.3.66"
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",