@lmzhen/dsh-evolution-maintenance 0.3.74 → 0.3.76

package/README.md

@@ -26,3 +26,5 @@ package owns assembly and rendering only.
   instruction (`MAINTAIN_OUTPUT_INSTRUCTION`, V10 F-16) ship in `evolution-core`
   `PROMPT_BUNDLE`; the joint-signature mismatch protocol is honored by
   `renderFacts` callers, not by this package alone.
+
+**Runtime invariant:** No companion is published. The platform auto-assembles nothing and the family mounts no `<pkg>/invariant` cordis row, so a companion here would never execute (v37 S2.1 / I-3).

package/lib/{enrichment-2NEuOAZU.js → enrichment-BDlI9z8k.js}

@@ -141,8 +141,14 @@ async function buildEnrichment(ctx, library) {
 	for (const entry of await library.list()) {
 		if (entry.protectionUnknown) protectedMap.set(entry.name, "unknown");
 		else if (entry.protectedBy) protectedMap.set(entry.name, entry.protectedBy);
-		const body = await library.read(entry.name);
-		if (body === void 0 || body === null) continue;
+		let body;
+		try {
+			body = await library.read(entry.name);
+		} catch (error) {
+			ctx.logger.warn(`evolution-maintenance: enrichment skipped unreadable skill "${entry.name}": ${error instanceof Error ? error.message : String(error)}`);
+			continue;
+		}
+		if (typeof body !== "string") continue;
 		const parsed = parseFrontmatter(body);
 		if (frontmatterCatalogInvalid(body)) catalogInvalid.set(entry.name, true);
 		const description = parsed?.frontmatter.description;

package/lib/index.js

@@ -1,4 +1,4 @@
-import { i as snapshotFromLibrary, n as PROBE_SIGNALS, r as computeProbe, t as buildEnrichment } from "./enrichment-2NEuOAZU.js";
+import { i as snapshotFromLibrary, n as PROBE_SIGNALS, r as computeProbe, t as buildEnrichment } from "./enrichment-BDlI9z8k.js";
 import { AUTHORING_DESCRIPTION_BAR, DEFAULT_CURATOR_MODEL, DEFAULT_HEALTH_THRESHOLDS, DRIFT_MAX_LINE_CHARS, DRIFT_SIGNALS_VERSION, DRIFT_SIGNAL_NOUNS, LOW_QUALITY_THRESHOLD, MAINTAIN_OUTPUT_INSTRUCTION, MAINTAIN_PROMPT, MAX_TIMER_DELAY_MS, MIN_STAMP_BODY_CHARS, PROMPT_BUNDLE, PROMPT_BUNDLE_ID, computeDriftSignals, findDriftSignal, redactSecrets, verifyPromptBundle } from "@lmzhen/dsh-evolution-core";
 import { createHash, randomUUID } from "node:crypto";
 //#region lib/types/render-facts.js
@@ -8,18 +8,19 @@ import { createHash, randomUUID } from "node:crypto";
 * One canonical block: opening tag with version + joint signature, one
 * `[FACT]`/`[UNKNOWN]` line per signal, closing tag. The template side
 * renders its own `<MAINTAIN_PROMPT>` header with the same signature, so
-* the model can compare the two heads (011 mismatch protocol). All rendered
-* value/detail text passes through the optional redactor before it leaves
-* the session.
+* the model can compare the two heads (011 mismatch protocol). Every rendered
+* field (value/detail/threshold/skill name) passes through the optional
+* redactor and the delimiter/newline escaping before it leaves the session.
 */
 function renderFacts(report, options) {
 	const redact = options.redact ?? redactSecrets;
+	const sanitize = sanitizerFor(redact);
 	const lines = [];
 	lines.push(`<<<MECHANICAL_FACTS v=${options.signalsVersion} sig=${options.signature}>>>`);
 	for (const signal of report.library) lines.push(...renderSignal(signal, redact));
 	for (const skill of report.skills) {
 		const meta = [`protected=${skill.protected ?? "none"}`, `catalog=${skill.catalogInvalid === true ? "yaml-invalid" : "visible"}`];
-		lines.push(`# skill=${skill.name} (${meta.join(" ")})`);
+		lines.push(`# skill=${sanitize(skill.name)} (${meta.join(" ")})`);
 		for (const signal of skill.signals) lines.push(...renderSignal(signal, redact));
 	}
 	lines.push("<<<END FACTS>>>");
@@ -27,17 +28,23 @@ function renderFacts(report, options) {
 }
 function renderSignal(signal, redact) {
 	const prefix = signal.verdict === "unknown" ? "[UNKNOWN]" : "[FACT]";
-	const sanitize = (text) => redact(text).replaceAll("<<<END FACTS>>>", "<<<END FACTS (escaped)>>>").replaceAll("\n", " ").replaceAll("\r", " ");
+	const sanitize = sanitizerFor(redact);
 	const value = sanitize(signal.value);
 	const parts = [
 		`${prefix} signal=${signal.id}`,
 		`value=${value}`,
 		`verdict=${signal.verdict}`
 	];
-	if (signal.threshold !== void 0) parts.push(`threshold=${signal.threshold}`);
+	if (signal.threshold !== void 0) parts.push(`threshold=${sanitize(signal.threshold)}`);
 	if (signal.detail !== void 0) parts.push(`detail=${sanitize(signal.detail)}`);
 	return [parts.join(" ")];
 }
+/** A2-13: a value carrying the closing delimiter (or a raw newline) could end
+* the facts block early and inject instructions, so EVERY piece of rendered
+* model-facing text — value, detail, threshold, skill name — passes here. */
+function sanitizerFor(redact) {
+	return (text) => redact(text).replaceAll("<<<END FACTS>>>", "<<<END FACTS (escaped)>>>").replaceAll("\n", " ").replaceAll("\r", " ");
+}
 //#endregion
 //#region lib/types/validate-plan.js
 /**
@@ -346,21 +353,23 @@ function buildMaintainFacts(snapshots, usageObserved, redact) {
 		signature
 	};
 }
-/** V6-38 (0.3.36): a field value carrying its own standalone `Notes:` line is
-* indistinguishable from the plan's section header in the RENDERED text, which
-* made the rendered plan read as if it ended early. Mark such lines so they
-* can never read as the header. (The former text-based recommendation counter
-* that motivated this marker is gone — V10-09/F-05 moved the count into
-* `MaintainOutcome.recommendationCount` — but the rendered text stays
-* unambiguous for the human reader.) */
+/** V6-38: a field value carrying its own standalone `Notes:` line is
+* indistinguishable from the plan's section header in the RENDERED text, and a
+* line shaped like a rendered recommendation (`- [kind] …`) reads as a plan
+* entry that the validated plan does not contain. Mark both while leaving the
+* rest of the field untouched. Notes/undo/override are free text and need this
+* exactly as much as finding/recommendation do. */
 function sanitizeField(value) {
-	return value.split("\n").map((line) => line === "Notes:" ? "> Notes: (inside the field above)" : line).join("\n");
+	return value.split("\n").map((line) => {
+		if (line === "Notes:") return "> Notes: (inside the field above)";
+		return /^\s*- \[/.test(line) ? `> (inside the field above) ${line}` : line;
+	}).join("\n");
 }
 function formatPlan(validated, runId) {
 	const { plan, forcedHuman } = validated;
 	const lines = [];
 	lines.push(`Maintenance scan ${runId}: verdict=${plan.verdict} (${plan.plan.length} recommendations, ${plan.notes.length} notes)`);
-	const noteLines = plan.notes.length === 0 ? [] : ["Notes:", ...plan.notes.map((note) => `- ${note}`)];
+	const noteLines = plan.notes.length === 0 ? [] : ["Notes:", ...plan.notes.map((note) => `- ${sanitizeField(note)}`)];
 	if (plan.verdict === "no_issues") {
 		lines.push("No drift issues detected. Nothing to do.");
 		lines.push(...noteLines);
@@ -376,8 +385,8 @@ function formatPlan(validated, runId) {
 		lines.push(`- [${item.kind}] ${item.names.join(", ")} · rule=${item.rule} · ${flags.join(" ")}`);
 		lines.push(`  finding: ${sanitizeField(item.finding)}`);
 		lines.push(`  action: ${sanitizeField(item.recommendation)}`);
-		if (item.undo_path && item.undo_path !== "n/a") lines.push(`  undo: ${item.undo_path}`);
-		if (item.is_override && item.override_reason) lines.push(`  override: ${item.override_reason}`);
+		if (item.undo_path && item.undo_path !== "n/a") lines.push(`  undo: ${sanitizeField(item.undo_path)}`);
+		if (item.is_override && item.override_reason) lines.push(`  override: ${sanitizeField(item.override_reason)}`);
 	}
 	if (forcedHuman.length > 0) lines.push(`(quality_low gate: forced needs_human for ${[...new Set(forcedHuman)].join(", ")})`);
 	lines.push(...noteLines);
@@ -528,9 +537,9 @@ ${MAINTAIN_OUTPUT_INSTRUCTION}`;
 		});
 		try {
 			const runResult = await run.result;
-			const raw = runResult?.structured;
+			const raw = runResult.structured;
 			if (raw === void 0) {
-				if (runResult?.stopReason === "aborted") return {
+				if (runResult.stopReason === "aborted") return {
 					ok: false,
 					recommendationCount: 0,
 					error: "Maintenance scan was aborted (the run was cancelled before the subagent produced a plan) — retry when the session is idle; concurrent re-submission cancels the previous scan."
@@ -558,7 +567,7 @@ ${MAINTAIN_OUTPUT_INSTRUCTION}`;
 			};
 		} finally {
 			try {
-				await run.dispose?.();
+				await run.dispose();
 			} catch (disposeError) {
 				runtime.logger?.warn(`dsh-evolution-maintenance: subagent dispose failed: ${disposeError instanceof Error ? disposeError.message : String(disposeError)}`);
 			}

package/lib/tools.js

@@ -1,5 +1,5 @@
-import { i as snapshotFromLibrary, n as PROBE_SIGNALS, r as computeProbe, t as buildEnrichment } from "./enrichment-2NEuOAZU.js";
-import { SkillLibrary, assertSkillsRootAliasRetired, redactSecrets, resolveRootConfig, resolveSkillsRoot } from "@lmzhen/dsh-evolution-core";
+import { i as snapshotFromLibrary, n as PROBE_SIGNALS, r as computeProbe, t as buildEnrichment } from "./enrichment-BDlI9z8k.js";
+import { assertSkillsRootAliasRetired, newSkillLibrary, redactSecrets, resolveRootConfig } from "@lmzhen/dsh-evolution-core";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 //#region lib/types/tools.js
@@ -65,7 +65,10 @@ function apply(ctx, rawConfig = {}) {
 					detail: ["evolution-io registry not mounted"],
 					...target ? { target } : {}
 				};
-				const library = new SkillLibrary(resolveSkillsRoot({ root: rootConfig.root }), ioRegistry.provider());
+				const library = newSkillLibrary({
+					config: rootConfig,
+					io: ioRegistry.provider()
+				});
 				const enrichment = await buildEnrichment(ctx, library);
 				const probe = computeProbe(signal, target, await snapshotFromLibrary(library, {
 					descriptions: enrichment.descriptions,

package/lib/types/orchestrate.d.ts

@@ -5,21 +5,54 @@
  * external dependency (injected, fake-able in tests).
  */
 import { type DriftReport, type DriftSkillSnapshot } from '@lmzhen/dsh-evolution-core';
+import type { Agent } from '@deepseek-ai/dsh-agent';
 import { type SkillLibraryLike } from './drift-scan.ts';
+/** I-5 (v37): the platform's `SubagentStartRequest` fields this orchestrator sends.
+ * Typed locally (not imported) because the platform type lives behind the subagent row this
+ * package does not depend on; the required `parent` and `signal` mirror the platform. */
+export interface SubagentStartRequestLike {
+    readonly label: string;
+    readonly prompt: readonly {
+        readonly type: 'text';
+        readonly text: string;
+    }[];
+    readonly parent: Agent;
+    readonly signal: AbortSignal;
+    readonly maxDepth: number;
+    readonly agentOptions: Record<string, string>;
+    readonly persona: string;
+    readonly toolFilter: {
+        readonly allow: readonly string[];
+    };
+    readonly outputSchema: Record<string, unknown>;
+}
+/** I-5 (v37): the platform's `SubagentResult` fields the outcome mapping reads. The
+ * index signature keeps a REAL platform result assignable (the platform type is
+ * wider than these three fields); the fields below are the ones this code relies on. */
+export interface SubagentResultLike {
+    readonly structured?: unknown;
+    readonly diagnostic?: string;
+    readonly stopReason: string;
+}
+/** I-5 (v37): the platform's `SubagentRun` contract the orchestrator owns — `dispose` is
+ * NOT optional (the platform declares it required and every exit path here awaits it). */
+export interface SubagentRunLike {
+    readonly result: Promise<SubagentResultLike>;
+    dispose(): Promise<void>;
+}
 export interface MaintainRuntime {
     /** SkillLibrary-like reader for snapshot assembly. */
     library: SkillLibraryLike;
-    /** Subagent spawner (platform `subagents` service — minimal shape for injection).
-     * `dispose` is optional: not every provider exposes it, so the run is only
-     * disposed when the platform provides the handle (rc.42 P1-3 parity with review). */
+    /** Subagent spawner (platform `subagents` service — the request fields this
+     * orchestrator sends, typed as the platform requires them: I-5 (v37) tightened the
+     * request from `unknown` and `dispose` from optional to the platform's
+     * always-present handle, so a future miss fails `tsc` instead of a runtime TypeError. */
     subagents: {
-        start(kind: string, options: unknown): Promise<{
-            result: Promise<unknown>;
-            dispose?: () => Promise<void>;
-        }>;
+        start(kind: 'spawn', options: SubagentStartRequestLike): Promise<SubagentRunLike>;
     };
-    /** Parent agent/session handle passed through to the subagent, when available. */
-    parent?: unknown;
+    /** The spawning agent (platform `SubagentStartRequest.parent`, required: in-process
+     * providers derive workspace, lineage and delegation depth from its durable session). */
+    parent: Agent;
     /** Optional logger for dispose-failure traces; when absent the failure is
      * swallowed without surfacing (the orchestrator is a pure function). */
     logger?: {

package/lib/types/render-facts.d.ts

@@ -4,9 +4,9 @@
  * One canonical block: opening tag with version + joint signature, one
  * `[FACT]`/`[UNKNOWN]` line per signal, closing tag. The template side
  * renders its own `<MAINTAIN_PROMPT>` header with the same signature, so
- * the model can compare the two heads (011 mismatch protocol). All rendered
- * value/detail text passes through the optional redactor before it leaves
- * the session.
+ * the model can compare the two heads (011 mismatch protocol). Every rendered
+ * field (value/detail/threshold/skill name) passes through the optional
+ * redactor and the delimiter/newline escaping before it leaves the session.
  */
 import { type DriftReport } from '@lmzhen/dsh-evolution-core';
 export interface RenderFactsOptions {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-maintenance",
   "description": "Deterministic maintenance-scan surface: skill-library snapshot assembly, drift signals and mechanical-facts rendering (design 011) (community build)",
-  "version": "0.3.74",
+  "version": "0.3.76",
   "publishConfig": {
     "access": "public"
   },
@@ -18,10 +18,6 @@
       "types": "./lib/types/index.d.ts",
       "default": "./lib/index.js"
     },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
     "./tools": {
       "types": "./lib/types/tools.d.ts",
       "default": "./lib/tools.js"
@@ -35,15 +31,15 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.3.74"
+    "@lmzhen/dsh-evolution-core": "^0.3.76"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-invariants": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "^0.1.5-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-tools": "^0.1.5-rc.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-invariants": "^0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.5-rc.2"
   }
 }

package/lib/invariant.js

@@ -1,8 +0,0 @@
-//#region lib/types/invariant.js
-const PACKAGE_NAME = "@lmzhen/dsh-evolution-maintenance";
-const name = "evolution-maintenance-invariant";
-const inject = ["invariants"];
-const install = () => {};
-const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-//#endregion
-export { apply, inject, name };

package/lib/types/invariant.d.ts

@@ -1,5 +0,0 @@
-import type { Context } from '@deepseek-ai/cordis';
-export declare const name = "evolution-maintenance-invariant";
-export declare const inject: string[];
-export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map