@lmzhen/dsh-evolution-review 0.1.0-rc.25 → 0.1.0-rc.27

package/lib/index.js

@@ -310,16 +310,26 @@ function collectReadSkillNames(session) {
 	return names;
 }
 /**
-* Drop patch/update ops whose target was not read this session, in place.
-* Create is exempt (no read required to author a new skill). Returns the count
-* of dropped ops so the plan event can report them as rejected.
+* Drop mutating ops whose target was not read this session, in place.
+* Create is exempt (no read required to author a new skill). Covers the same
+* mutating surface Hermes guards (edit/patch/write_file/remove_file), so a
+* background review cannot blind-touch support files or edits of skills it
+* never loaded. Returns the count of dropped ops so the plan event can report
+* them as rejected.
 */
 function filterUnreadSkillOps(ops, readNames) {
+	const READ_REQUIRED = [
+		"edit",
+		"update",
+		"patch",
+		"write_file",
+		"remove_file"
+	];
 	let dropped = 0;
 	for (let index = ops.length - 1; index >= 0; index -= 1) {
 		const op = ops[index];
 		if (!op) continue;
-		if ((op.action === "patch" || op.action === "update") && op.name && !readNames.has(op.name)) {
+		if (op.action !== void 0 && READ_REQUIRED.includes(op.action) && op.name && !readNames.has(op.name)) {
 			ops.splice(index, 1);
 			dropped += 1;
 		}

package/lib/types/index.d.ts

@@ -35,9 +35,12 @@ export declare function shouldCompletionReview(reason: {
 /** Skill names this session loaded (read-before-write source for the background review). */
 export declare function collectReadSkillNames(session: Session): Set<string>;
 /**
- * Drop patch/update ops whose target was not read this session, in place.
- * Create is exempt (no read required to author a new skill). Returns the count
- * of dropped ops so the plan event can report them as rejected.
+ * Drop mutating ops whose target was not read this session, in place.
+ * Create is exempt (no read required to author a new skill). Covers the same
+ * mutating surface Hermes guards (edit/patch/write_file/remove_file), so a
+ * background review cannot blind-touch support files or edits of skills it
+ * never loaded. Returns the count of dropped ops so the plan event can report
+ * them as rejected.
  */
 export declare function filterUnreadSkillOps(ops: Array<{
     action?: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-review",
   "description": "Background review orchestration (community build)",
-  "version": "0.1.0-rc.25",
+  "version": "0.1.0-rc.27",
   "publishConfig": {
     "access": "public"
   },
@@ -33,8 +33,8 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.1.0-rc.25",
-    "@lmzhen/dsh-evolution-plan-validator": "^0.1.0-rc.25"
+    "@lmzhen/dsh-evolution-core": "^0.1.0-rc.27",
+    "@lmzhen/dsh-evolution-plan-validator": "^0.1.0-rc.27"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -43,7 +43,7 @@
     "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
-    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.25"
+    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.27"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
@@ -52,8 +52,8 @@
     "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
-    "@lmzhen/dsh-evolution-core": "^0.1.0-rc.25",
-    "@lmzhen/dsh-evolution-plan-validator": "^0.1.0-rc.25",
-    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.25"
+    "@lmzhen/dsh-evolution-core": "^0.1.0-rc.27",
+    "@lmzhen/dsh-evolution-plan-validator": "^0.1.0-rc.27",
+    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.27"
   }
 }