@lmzhen/dsh-evolution-merge 0.30.25 → 0.30.28

package/lib/index.js

@@ -8217,7 +8217,7 @@ function buildValidationPlan(input) {
 	const staged = new Set(files.map((file) => file.path));
 	const manifest = new Set(manifestFiles);
 	const forwardRefs = [...refs].filter((ref) => !staged.has(ref)).sort();
-	const reverseRefs = files.map((file) => file.path).filter((path) => !refs.has(path) && manifest.has(path)).sort();
+	const reverseRefs = files.map((file) => file.path).filter((path) => path !== "SKILL.md" && !refs.has(path) && manifest.has(path)).sort();
 	const orphanFiles = [...new Set(input.existingSupport ?? [])].filter((path) => !staged.has(path)).sort();
 	const byPath = /* @__PURE__ */ new Map();
 	const supportSources = input.supportSources ?? [];
@@ -8234,12 +8234,14 @@ function buildValidationPlan(input) {
 		path,
 		sources: value.sources
 	}));
-	const sourceThreatFiles = (input.cards ?? []).flatMap((card) => (card.files ?? []).filter((file) => scanContentThreats(file.content) !== null).map((file) => card.name + "/" + file.path));
+	const participants = input.participants === void 0 ? void 0 : new Set(input.participants);
+	const participantCards = participants === void 0 ? input.cards ?? [] : (input.cards ?? []).filter((card) => participants.has(card.name));
+	const sourceThreatFiles = participantCards.flatMap((card) => (card.files ?? []).filter((file) => scanContentThreats(file.content) !== null).map((file) => card.name + "/" + file.path));
 	const threat = {
-		body: scanContentThreats(input.tree.body) !== null || (input.cards ?? []).some((card) => scanContentThreats(card.body) !== null),
+		body: scanContentThreats(input.tree.body) !== null || participantCards.some((card) => scanContentThreats(card.body) !== null),
 		files: [...files.filter((file) => scanContentThreats(file.content) !== null).map((file) => file.path), ...sourceThreatFiles]
 	};
-	const sourceRevisions = input.sourceRevisions ?? Object.fromEntries((input.cards ?? []).map((card) => [card.name, digest(card.body)]));
+	const sourceRevisions = input.sourceRevisions ?? Object.fromEntries(participantCards.map((card) => [card.name, digest(card.body)]));
 	const revision = digest(JSON.stringify({
 		target: input.target,
 		body: digest(input.tree.body),
@@ -8377,7 +8379,8 @@ async function runAuthoring(options) {
 		message: "target must be a bare skill name: " + options.target
 	};
 	const targetCard = options.cards.find((card) => card.name === options.target);
-	const mode = options.mode ?? (targetCard === void 0 ? "create-umbrella" : "merge-into-existing");
+	const requestedMode = options.mode ?? (targetCard === void 0 ? "create-umbrella" : "merge-into-existing");
+	const mode = requestedMode === "merge-into-existing" && targetCard === void 0 ? "create-umbrella" : requestedMode;
 	const createMode = mode === "create-umbrella";
 	if (!createMode && targetCard !== void 0) {
 		if (targetCard.managed !== true) return {
@@ -8472,6 +8475,7 @@ async function runAuthoring(options) {
 			source: "staged"
 		})),
 		manifestFiles,
+		...options.sources === void 0 ? {} : { participants: [...options.sources, options.target] },
 		existingSupport: (options.cards.find((card) => card.name === options.target)?.files ?? []).map((file) => file.path)
 	});
 	const findings = [...validateStagedTree(tree.value, limitsSnapshot.skillLimits), ...validationPlan.findings];
@@ -8889,6 +8893,11 @@ async function runNewChildAuthoring(options, row, decision, signal) {
 				source: "staged"
 			})),
 			manifestFiles,
+			participants: [
+				row.a,
+				row.b,
+				decision.target
+			],
 			existingSupport: (options.cards.find((card) => card.name === decision.target)?.files ?? []).map((file) => file.path),
 			supportSources: options.cards.filter((card) => card.name === row.a || card.name === row.b).flatMap((card) => (card.files ?? []).map((file) => ({
 				path: file.path,
@@ -9080,6 +9089,11 @@ function failRun(stage, hint, next, result) {
 		text: formatMergeError(result.error)
 	};
 }
+async function hostOnlyFailure(verb, capabilities) {
+	if (capabilities === void 0) return void 0;
+	const state = await capabilities.hostOnly();
+	return state === void 0 ? void 0 : fail(verb, "e-323", "host data plane unavailable: " + state.code + (state.detail === void 0 ? "" : " (" + state.detail + ")"), "run /evolution merge doctor");
+}
 /**
 * The approved/fuse row that already holds a target. Pair/approve move a row to
 * approved/fuse BEFORE their run starts, so this row IS the in-flight claim a second
@@ -9162,6 +9176,8 @@ function createMergeRuntime(deps) {
 				text: "merge: 技能名不能包含 provider/name 或 provider:name 语法：" + command.a + " / " + command.b + " (provider-conflict)\nusage: /evolution merge pair <a> <b>"
 			};
 			if (agentless) return fail("pair", "e-305", errorText("e-305-this-invocation-carries-no", { a1: "pair" }), "在 GUI 或 CLI 的会话里运行 /evolution merge pair " + command.a + " " + command.b);
+			const pairHost = await hostOnlyFailure("pair", deps.hostCapabilities);
+			if (pairHost !== void 0) return pairHost;
 			const pairKeyValue = pairKey(command.a, command.b);
 			const inFlight = inFlightPairRun(await readRunMetas(deps.io, deps.home), pairKeyValue);
 			let ownerActive = false;
@@ -9239,6 +9255,8 @@ function createMergeRuntime(deps) {
 		}
 		if (command.verb === "scan") {
 			if (agentless) return fail("scan", "e-305", errorText("e-305-this-invocation-carries-no", { a1: "scan" }), "在 GUI 或 CLI 的会话里运行 /evolution merge scan");
+			const scanHost = await hostOnlyFailure("scan", deps.hostCapabilities);
+			if (scanHost !== void 0) return scanHost;
 			const signal = new AbortController().signal;
 			const cards = await deps.cards(signal);
 			const blocked = /* @__PURE__ */ new Set();
@@ -9756,6 +9774,31 @@ function createMergeRuntime(deps) {
 	} };
 }
 //#endregion
+//#region lib/types/host-capabilities.js
+/**
+* The host's data-plane capability as ONE value shared by snapshot, doctor, HTTP and run preflight.
+* The probe is injected so the Cordis wiring stays in index.ts; a rejected probe is the same E-323
+* answer as an unavailable one, never an unhandled promise.
+* @module @lmzhen/dsh-evolution-merge
+*/
+/**
+* Wrap one probe with the shared error normalization.
+* @param probe - the platform-specific availability check.
+* @returns the capability value consumed by snapshot and runtime.
+*/
+function createHostCapabilities(probe) {
+	return { hostOnly: async () => {
+		try {
+			return await probe();
+		} catch (error) {
+			return {
+				code: "E-323",
+				detail: error instanceof Error ? error.message : String(error)
+			};
+		}
+	} };
+}
+//#endregion
 //#region lib/types/params.js
 /**
 * Merge parameter resolution. E2/E3 values arrive as one JSON object; this is the only
@@ -10534,6 +10577,16 @@ function apply(ctx, rawConfig = {}) {
 		});
 		const platformChannel = createSubagentChannel(ctx);
 		const channel = subagentChannelAdapter(platformChannel);
+		const hostCapabilities = createHostCapabilities(async () => {
+			const state = await platformChannel.prepare({
+				kind: "reviewer",
+				allow: ["skill"]
+			});
+			return state.kind === "unavailable" ? {
+				code: "E-323",
+				detail: state.reason
+			} : void 0;
+		});
 		const stage = new StageToolRegistry();
 		const engineInput = resolveEngineInput({ modelsRoot: params.mergeModelsRoot });
 		const engineConfig = engineConfigFromRoot(engineInput.modelsRoot);
@@ -10597,23 +10650,7 @@ function apply(ctx, rawConfig = {}) {
 					runs: runs.runs("merge"),
 					approval: params.mergeApproval,
 					platformWrite,
-					hostOnly: async () => {
-						try {
-							const state = await platformChannel.prepare({
-								kind: "reviewer",
-								allow: ["skill"]
-							});
-							return state.kind === "unavailable" ? {
-								code: "E-323",
-								detail: state.reason
-							} : void 0;
-						} catch (error) {
-							return {
-								code: "E-323",
-								detail: error instanceof Error ? error.message : String(error)
-							};
-						}
-					},
+					hostOnly: hostCapabilities.hostOnly,
 					live: async () => liveRowFactsOf(await readSkillCards(skills)),
 					history: async () => {
 						const items = /* @__PURE__ */ new Map();
@@ -10707,6 +10744,7 @@ function apply(ctx, rawConfig = {}) {
 			parent: void 0,
 			allow: ["merge_stage"],
 			timeoutMinutes: params.mergeRunTimeoutMinutes,
+			hostCapabilities,
 			isBlocked: async (name) => {
 				return await ctx.get("evolutionCurator")?.isBlocked?.(name) === true;
 			},

package/lib/types/authoring-flow.js

@@ -10,7 +10,12 @@ export async function runAuthoring(options) {
     if (options.target.includes('/') || options.target.includes(':'))
         return { ok: false, code: 'target-invalid', message: 'target must be a bare skill name: ' + options.target };
     const targetCard = options.cards.find(card => card.name === options.target);
-    const mode = options.mode ?? (targetCard === undefined ? 'create-umbrella' : 'merge-into-existing');
+    // A decision can name a fresh target yet say merge-into-existing (the model's vocabulary is
+    // about intent, not existence). The target card is the authoritative existence fact: when it is
+    // absent, the only safe mode is create-umbrella; otherwise commit-assembly correctly refuses to
+    // re-create a target that disappeared later.
+    const requestedMode = options.mode ?? (targetCard === undefined ? 'create-umbrella' : 'merge-into-existing');
+    const mode = requestedMode === 'merge-into-existing' && targetCard === undefined ? 'create-umbrella' : requestedMode;
     const createMode = mode === 'create-umbrella';
     if (!createMode && targetCard !== undefined) {
         if (targetCard.managed !== true)
@@ -60,7 +65,7 @@ export async function runAuthoring(options) {
     const limitsSnapshot = limitsSnapshotOf(options.limits ?? DEFAULT_SKILL_LIMITS);
     const participants = new Set(options.sources ?? []);
     const supportSources = options.cards.filter(card => participants.has(card.name)).flatMap(card => (card.files ?? []).map(file => ({ path: file.path, content: file.content, source: card.name })));
-    const validationPlan = buildValidationPlan({ tree: tree.value, target: options.target, limits: limitsSnapshot, cards: options.cards, supportSources, ...(options.promptVersion === undefined ? {} : { promptVersion: options.promptVersion }), ...(options.promptHash === undefined ? {} : { promptHash: options.promptHash }), supportFiles: tree.value.files.map(file => ({ path: file.path, content: file.content, source: 'staged' })), manifestFiles, existingSupport: (options.cards.find(card => card.name === options.target)?.files ?? []).map(file => file.path) });
+    const validationPlan = buildValidationPlan({ tree: tree.value, target: options.target, limits: limitsSnapshot, cards: options.cards, supportSources, ...(options.promptVersion === undefined ? {} : { promptVersion: options.promptVersion }), ...(options.promptHash === undefined ? {} : { promptHash: options.promptHash }), supportFiles: tree.value.files.map(file => ({ path: file.path, content: file.content, source: 'staged' })), manifestFiles, ...(options.sources === undefined ? {} : { participants: [...options.sources, options.target] }), existingSupport: (options.cards.find(card => card.name === options.target)?.files ?? []).map(file => file.path) });
     const findings = [...validateStagedTree(tree.value, limitsSnapshot.skillLimits), ...validationPlan.findings];
     const lengths = { bodyBytes: Buffer.byteLength(tree.value.body, 'utf8'), fileBytes: tree.value.files.reduce((sum, file) => sum + Buffer.byteLength(file.content, 'utf8'), 0), totalBytes: Buffer.byteLength(tree.value.body, 'utf8') + tree.value.files.reduce((sum, file) => sum + Buffer.byteLength(file.content, 'utf8'), 0) };
     if (hasBlockingFinding(findings))

package/lib/types/domain/validation-plan.d.ts

@@ -61,5 +61,7 @@ export declare function buildValidationPlan(input: {
     }[];
     readonly promptVersion?: string;
     readonly promptHash?: string;
+    /** Skills that participate in this merge (pair sources and target); omit for legacy all-card behavior. */
+    readonly participants?: readonly string[];
 }): ValidationPlan;
 //# sourceMappingURL=validation-plan.d.ts.map

package/lib/types/domain/validation-plan.js

@@ -10,7 +10,9 @@ export function buildValidationPlan(input) {
     const staged = new Set(files.map(file => file.path));
     const manifest = new Set(manifestFiles);
     const forwardRefs = [...refs].filter(ref => !staged.has(ref)).sort();
-    const reverseRefs = files.map(file => file.path).filter(path => !refs.has(path) && manifest.has(path)).sort();
+    // SKILL.md is the body itself, never a support reference; a child may list it in the
+    // authoring manifest, but it must not require the body to reference itself.
+    const reverseRefs = files.map(file => file.path).filter(path => path !== 'SKILL.md' && !refs.has(path) && manifest.has(path)).sort();
     const existing = new Set(input.existingSupport ?? []);
     const orphanFiles = [...existing].filter(path => !staged.has(path)).sort();
     const byPath = new Map();
@@ -25,9 +27,11 @@ export function buildValidationPlan(input) {
         byPath.set(file.path, entry);
     }
     const supportConflicts = [...byPath.entries()].filter(([, value]) => value.contents.size > 1).map(([path, value]) => ({ path, sources: value.sources }));
-    const sourceThreatFiles = (input.cards ?? []).flatMap(card => (card.files ?? []).filter(file => scanContentThreats(file.content) !== null).map(file => card.name + '/' + file.path));
-    const threat = { body: scanContentThreats(input.tree.body) !== null || (input.cards ?? []).some(card => scanContentThreats(card.body) !== null), files: [...files.filter(file => scanContentThreats(file.content) !== null).map(file => file.path), ...sourceThreatFiles] };
-    const sourceRevisions = input.sourceRevisions ?? Object.fromEntries((input.cards ?? []).map(card => [card.name, digest(card.body)]));
+    const participants = input.participants === undefined ? undefined : new Set(input.participants);
+    const participantCards = participants === undefined ? (input.cards ?? []) : (input.cards ?? []).filter(card => participants.has(card.name));
+    const sourceThreatFiles = participantCards.flatMap(card => (card.files ?? []).filter(file => scanContentThreats(file.content) !== null).map(file => card.name + '/' + file.path));
+    const threat = { body: scanContentThreats(input.tree.body) !== null || participantCards.some(card => scanContentThreats(card.body) !== null), files: [...files.filter(file => scanContentThreats(file.content) !== null).map(file => file.path), ...sourceThreatFiles] };
+    const sourceRevisions = input.sourceRevisions ?? Object.fromEntries(participantCards.map(card => [card.name, digest(card.body)]));
     const revision = digest(JSON.stringify({ target: input.target, body: digest(input.tree.body), files: files.map(file => [file.path, file.digest]), q09: { forwardRefs, reverseRefs, orphanFiles }, supportConflicts, threat, sourceRevisions, targetRevision: input.targetRevision ?? null }));
     const findings = [];
     const stageDigest = digest(JSON.stringify(files.map(file => [file.path, file.digest])));

package/lib/types/host-capabilities.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The host's data-plane capability as ONE value shared by snapshot, doctor, HTTP and run preflight.
+ * The probe is injected so the Cordis wiring stays in index.ts; a rejected probe is the same E-323
+ * answer as an unavailable one, never an unhandled promise.
+ * @module @lmzhen/dsh-evolution-merge
+ */
+/** The one unavailable answer the merge surface understands. */
+export interface HostOnlyUnavailable {
+    readonly code: 'E-323';
+    readonly detail?: string;
+}
+/** A host capability probe; undefined means the data plane is usable. */
+export interface HostCapabilities {
+    readonly hostOnly: () => Promise<HostOnlyUnavailable | undefined>;
+}
+/**
+ * Wrap one probe with the shared error normalization.
+ * @param probe - the platform-specific availability check.
+ * @returns the capability value consumed by snapshot and runtime.
+ */
+export declare function createHostCapabilities(probe: () => Promise<HostOnlyUnavailable | undefined>): HostCapabilities;
+//# sourceMappingURL=host-capabilities.d.ts.map

package/lib/types/host-capabilities.js

@@ -0,0 +1,24 @@
+/**
+ * The host's data-plane capability as ONE value shared by snapshot, doctor, HTTP and run preflight.
+ * The probe is injected so the Cordis wiring stays in index.ts; a rejected probe is the same E-323
+ * answer as an unavailable one, never an unhandled promise.
+ * @module @lmzhen/dsh-evolution-merge
+ */
+/**
+ * Wrap one probe with the shared error normalization.
+ * @param probe - the platform-specific availability check.
+ * @returns the capability value consumed by snapshot and runtime.
+ */
+export function createHostCapabilities(probe) {
+    return {
+        hostOnly: async () => {
+            try {
+                return await probe();
+            }
+            catch (error) {
+                return { code: 'E-323', detail: error instanceof Error ? error.message : String(error) };
+            }
+        },
+    };
+}
+//# sourceMappingURL=host-capabilities.js.map

package/lib/types/index.js

@@ -31,6 +31,7 @@ import { pairKey, rowIdOf } from "./contracts.js";
 import { makeMergeRoutes } from "./merge-routes.js";
 import { createMergeCommand, runMergeCommand } from "./merge-command.js";
 import { createMergeRuntime } from "./runtime.js";
+import { createHostCapabilities } from "./host-capabilities.js";
 import { resolveMergeParams } from "./params.js";
 import { subagentChannelAdapter } from "./adapters/channel.js";
 import { StageToolRegistry } from "./stage-tool-registry.js";
@@ -234,6 +235,10 @@ export function apply(ctx, rawConfig = {}) {
         }).catch((error) => { ctx.logger.warn('merge state readiness failed: ' + (error instanceof Error ? error.message : String(error))); });
         const platformChannel = createSubagentChannel(ctx);
         const channel = subagentChannelAdapter(platformChannel);
+        const hostCapabilities = createHostCapabilities(async () => {
+            const state = await platformChannel.prepare({ kind: 'reviewer', allow: ['skill'] });
+            return state.kind === 'unavailable' ? { code: 'E-323', detail: state.reason } : undefined;
+        });
         const stage = new StageToolRegistry();
         const engineInput = resolveEngineInput({ modelsRoot: params.mergeModelsRoot });
         const engineConfig = engineConfigFromRoot(engineInput.modelsRoot);
@@ -276,15 +281,7 @@ export function apply(ctx, rawConfig = {}) {
         });
         source = {
             async snapshot() {
-                return await readMergeSnapshot({ io, home, runs: runs.runs('merge'), approval: params.mergeApproval, platformWrite, hostOnly: async () => {
-                        try {
-                            const state = await platformChannel.prepare({ kind: 'reviewer', allow: ['skill'] });
-                            return state.kind === 'unavailable' ? { code: 'E-323', detail: state.reason } : undefined;
-                        }
-                        catch (error) {
-                            return { code: 'E-323', detail: error instanceof Error ? error.message : String(error) };
-                        }
-                    }, live: async () => liveRowFactsOf(await readSkillCards(skills)), history: async () => {
+                return await readMergeSnapshot({ io, home, runs: runs.runs('merge'), approval: params.mergeApproval, platformWrite, hostOnly: hostCapabilities.hostOnly, live: async () => liveRowFactsOf(await readSkillCards(skills)), history: async () => {
                         const items = new Map();
                         const receipts = [...await readCommitReceipts(io, home)].sort((a, b) => a.at - b.at);
                         const generationOf = new Map(receipts.map((receipt, index) => [receipt.runId, index + 1]));
@@ -331,6 +328,7 @@ export function apply(ctx, rawConfig = {}) {
             io, home, registry: runs, skills, now: () => Date.now(), params, platformWrite,
             ...(defaultModel === undefined ? {} : { model: defaultModel.currentSelection().model }),
             channel, parent: undefined, allow: ['merge_stage'], timeoutMinutes: params.mergeRunTimeoutMinutes,
+            hostCapabilities,
             isBlocked: async (name) => {
                 const curator = ctx.get('evolutionCurator');
                 return (await curator?.isBlocked?.(name)) === true;

package/lib/types/new-child-authoring.js

@@ -90,7 +90,7 @@ export async function runNewChildAuthoring(options, row, decision, signal) {
         if (missing !== null)
             return { kind: 'failed', failure: { stage: 'author', code: 'merge-manifest-missing', message: 'manifest file missing from staged tree: ' + missing, retryable: true, retryFrom: 'agent2' } };
         const limitsSnapshot = limitsSnapshotOf(options.limits ?? DEFAULT_SKILL_LIMITS);
-        const validationPlan = buildValidationPlan({ tree: tree.value, target: decision.target, limits: limitsSnapshot, cards: options.cards, promptVersion: MERGE_PROMPT_VERSION, promptHash: promptHashOf(buildRound2Prompt(row, decision)), supportFiles: tree.value.files.map(file => ({ path: file.path, content: file.content, source: 'staged' })), manifestFiles, existingSupport: (options.cards.find(card => card.name === decision.target)?.files ?? []).map(file => file.path), supportSources: options.cards.filter(card => card.name === row.a || card.name === row.b).flatMap(card => (card.files ?? []).map(file => ({ path: file.path, content: file.content, source: card.name }))) });
+        const validationPlan = buildValidationPlan({ tree: tree.value, target: decision.target, limits: limitsSnapshot, cards: options.cards, promptVersion: MERGE_PROMPT_VERSION, promptHash: promptHashOf(buildRound2Prompt(row, decision)), supportFiles: tree.value.files.map(file => ({ path: file.path, content: file.content, source: 'staged' })), manifestFiles, participants: [row.a, row.b, decision.target], existingSupport: (options.cards.find(card => card.name === decision.target)?.files ?? []).map(file => file.path), supportSources: options.cards.filter(card => card.name === row.a || card.name === row.b).flatMap(card => (card.files ?? []).map(file => ({ path: file.path, content: file.content, source: card.name }))) });
         const findings = [...validateStagedTree(tree.value, limitsSnapshot.skillLimits), ...validationPlan.findings];
         if (hasBlockingFinding(findings)) {
             const lengths = { bodyBytes: Buffer.byteLength(tree.value.body, 'utf8'), fileBytes: tree.value.files.reduce((sum, file) => sum + Buffer.byteLength(file.content, 'utf8'), 0), totalBytes: Buffer.byteLength(tree.value.body, 'utf8') + tree.value.files.reduce((sum, file) => sum + Buffer.byteLength(file.content, 'utf8'), 0) };

package/lib/types/runtime.d.ts

@@ -6,6 +6,7 @@ import type { MergeRegistryPort } from './run-shell.ts';
 import type { MergeCommandService } from './merge-command.ts';
 import type { StageToolContext } from './stage-tool.ts';
 import type { ConversationChannelLike } from './channel-port.ts';
+import type { HostCapabilities } from './host-capabilities.ts';
 export declare function forcedDecisionFor(a: string, b: string): MergeDecision;
 export interface MergeStageBindingPort {
     bind(context: StageToolContext): void;
@@ -20,6 +21,7 @@ export interface MergeRuntimeDeps {
     readonly params: MergeParams;
     readonly platformWrite: boolean;
     readonly channel: ConversationChannelLike;
+    readonly hostCapabilities?: HostCapabilities;
     readonly parent: unknown;
     readonly allow: readonly string[];
     readonly cwd?: string;

package/lib/types/runtime.js

@@ -38,6 +38,12 @@ function fail(stage, code, hint, next, runId) {
 function failRun(stage, hint, next, result) {
     return result.error === undefined ? fail(stage, 'run-failed', hint, next, result.runId) : { ok: false, text: formatMergeError(result.error) };
 }
+async function hostOnlyFailure(verb, capabilities) {
+    if (capabilities === undefined)
+        return undefined;
+    const state = await capabilities.hostOnly();
+    return state === undefined ? undefined : fail(verb, 'e-323', 'host data plane unavailable: ' + state.code + (state.detail === undefined ? '' : ' (' + state.detail + ')'), 'run /evolution merge doctor');
+}
 /**
  * The approved/fuse row that already holds a target. Pair/approve move a row to
  * approved/fuse BEFORE their run starts, so this row IS the in-flight claim a second
@@ -100,6 +106,9 @@ export function createMergeRuntime(deps) {
                 // the three-line shape instead of opening a run that is guaranteed to fail.
                 if (agentless)
                     return fail('pair', 'e-305', errorText('e-305-this-invocation-carries-no', { a1: 'pair' }), '在 GUI 或 CLI 的会话里运行 /evolution merge pair ' + command.a + ' ' + command.b);
+                const pairHost = await hostOnlyFailure('pair', deps.hostCapabilities);
+                if (pairHost !== undefined)
+                    return pairHost;
                 // FR-EXEC-17/NFR-04: two pair runs for one pair must not race for the same row.
                 const pairKeyValue = pairKey(command.a, command.b);
                 const inFlight = inFlightPairRun(await readRunMetas(deps.io, deps.home), pairKeyValue);
@@ -179,6 +188,9 @@ export function createMergeRuntime(deps) {
             if (command.verb === 'scan') {
                 if (agentless)
                     return fail('scan', 'e-305', errorText('e-305-this-invocation-carries-no', { a1: 'scan' }), '在 GUI 或 CLI 的会话里运行 /evolution merge scan');
+                const scanHost = await hostOnlyFailure('scan', deps.hostCapabilities);
+                if (scanHost !== undefined)
+                    return scanHost;
                 const signal = new AbortController().signal;
                 const cards = await deps.cards(signal);
                 const blocked = new Set();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-merge",
   "description": "Skill auto-merge domain: screening, two-round authoring, queues and commit orchestration (community build)",
-  "version": "0.30.25",
+  "version": "0.30.28",
   "publishConfig": {
     "access": "public"
   },
@@ -32,14 +32,14 @@
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.5",
-    "@lmzhen/dsh-evolution-core": "^0.30.25",
-    "@lmzhen/dsh-evolution-commands": "^0.30.25",
-    "@lmzhen/dsh-evolution-merge-engine": "0.30.25"
+    "@lmzhen/dsh-evolution-core": "^0.30.28",
+    "@lmzhen/dsh-evolution-commands": "^0.30.28",
+    "@lmzhen/dsh-evolution-merge-engine": "0.30.28"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.5"
   },
   "engines": {
-    "dsh": ">=0.2.1-rc.1 <0.2.2-0"
+    "dsh": ">=0.2.1-rc.2 <0.2.2-0"
   }
 }