@lmzhen/dsh-tool-skill-manage 0.5.0 → 0.6.0

package/README.md

@@ -20,6 +20,15 @@ Mutations (create/edit/update/patch/delete/write_file/remove_file/restructure) p
 
 `pin` and `unpin` are deliberately **outside** the approval seam. Pinning only lifts/restores the curator-lifecycle freeze (a lifecycle flag, never content) and is fully reversible by the same tool. Routing it through `policy:'ask'` would let a staged-but-never-approved request hold the library in a pinned state invisibly. Tradeoff accepted: no approval on a lifecycle-flag flip; if product policy changes, pin/unpin should be wired into the same staging path as `patch`.
 
+## Configuration
+
+- `maxSkillContentChars` / `maxSkillFileBytes` bound SKILL.md reads and support-file writes on this row.
+- Deprecated name (G0/S0.3): `maxSkillContentChars` is the legacy spelling of the
+  policy row's `skillContentChars` (canonical id). The two are not auto-synchronised
+  yet — this row's value is what the write paths use (the G3 unification closes
+  that gap). Reading the legacy name still works; writing it is refused, and it is
+  removed in 0.7.0.
+
 ## Known limitations
 
 - No known durable consumer gaps at this time. Runtime contracts are covered by package and boundary tests.

package/lib/index.js

@@ -1,7 +1,7 @@
 import { effectiveSessionPolicy } from "@lmzhen/dsh-evolution-approval";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
-import { DEFAULT_SKILL_LIMITS, DSH_AUTHORING_STANDARDS, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, authoringFeedback, callingScope, clampedNumber, computeDedupGroups, contentHash, evolutionIoAdapter, isPresent, isUnknown, newSkillLibrary, parseFrontmatter, policyStageLimits, probePresent, probeUnknown, resolveExecOrigins } from "@lmzhen/dsh-evolution-core";
+import { DEFAULT_ARCHIVE_RETENTION_POLICY, DEFAULT_CITATION_POLICY, DEFAULT_REFERENCE_REWRITE_POLICY, DEFAULT_SKILL_LIMITS, DEFAULT_SUPPORT_FILE_CHAR_POLICY, DSH_AUTHORING_STANDARDS, PARAM_NAMESPACES, SKILLS_GUIDANCE, SKILLS_GUIDANCE_SECTION_ORDER, SKILL_ACTION_REQUIRED_FIELDS, authoringFeedback, callingScope, clampedNumber, computeDedupGroups, contentHash, evolutionIoAdapter, installParamSection, isPresent, isUnknown, newSkillLibrary, parseFrontmatter, policyStageLimits, probePresent, probeUnknown, readNumberParam, resolveExecOrigins } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/index.js
 /**
 * Model-facing skill_manage tool over ctx.evolutionIo + ctx.skillUsage.
@@ -41,6 +41,37 @@ const Config = z.object({
 	threatExemptLabels: z.array(z.string()).default([]),
 	strictCrossSource: z.boolean().default(false)
 });
+/** Namespace the write caps and the four stage policies live in (core's PARAM_NAMESPACES). */
+const SKILLS_SETTINGS_NAMESPACE = "evolution-skills";
+/** Schema the platform validates the user layer against; defaults mirror the core
+* constants and the row schema, so an empty document resolves to today's behaviour. */
+const SKILLS_SETTINGS_SCHEMA = z.object({
+	skillContentChars: z.number().min(1).default(DEFAULT_SKILL_LIMITS.maxSkillContentChars),
+	maxSkillFileBytes: z.number().min(1).default(DEFAULT_SKILL_LIMITS.maxSkillFileBytes),
+	maxSkillNameLength: z.number().min(1).default(DEFAULT_SKILL_LIMITS.maxNameLength),
+	maxDescriptionLength: z.number().min(1).default(DEFAULT_SKILL_LIMITS.maxDescriptionLength),
+	descriptionStrict: z.boolean().default(false),
+	strictCrossSource: z.boolean().default(false),
+	citationPolicy: z.union([z.const("verify"), z.const("refuse")]).default(DEFAULT_CITATION_POLICY),
+	supportFileCharPolicy: z.union([z.const("report"), z.const("enforce")]).default(DEFAULT_SUPPORT_FILE_CHAR_POLICY)
+});
+/** The four caps a user may only tighten, in schema order (the sentry reads it). */
+const SKILL_SETTINGS_CAPS = [
+	"skillContentChars",
+	"maxSkillFileBytes",
+	"maxSkillNameLength",
+	"maxDescriptionLength"
+];
+/**
+* Refuse a resolved section whose cap sits ABOVE the deployment's allocation.
+* Windows have no single-field bound the schema could express, and a user who
+* widened one would spend a budget the deployment set for the whole library.
+* @param value - the resolved section the platform hands the owner.
+* @param ceilings - the deployment values (the plugin row, after its clamps).
+*/
+function validateSkillSettings(value, ceilings) {
+	for (const key of SKILL_SETTINGS_CAPS) if (value[key] > ceilings[key]) throw new Error(`${key} may only be tightened: ${value[key]} exceeds the deployment value ${ceilings[key]}`);
+}
 /** v30 REV-02: read the protected-skill list off the (optional) policy
 * snapshot through an `unknown` boundary — the Context augmentation types the
 * getter non-optionally, but at runtime the row can be absent. */
@@ -73,27 +104,86 @@ function apply(ctx, rawConfig = {}) {
 		if (value !== void 0 && result !== value) numericClamped.push(name);
 		return result;
 	};
+	const libraryLimits = {
+		...policyStageLimits(policySnapshotOf(ctx.get("evolutionPolicy"))),
+		maxNameLength: limit("maxSkillNameLength", rawConfig.maxSkillNameLength, DEFAULT_SKILL_LIMITS.maxNameLength),
+		maxDescriptionLength: limit("maxDescriptionLength", rawConfig.maxDescriptionLength, DEFAULT_SKILL_LIMITS.maxDescriptionLength),
+		maxSkillContentChars: limit("maxSkillContentChars", readNumberParam(rawConfig, "skillContentChars"), DEFAULT_SKILL_LIMITS.maxSkillContentChars),
+		maxSkillFileBytes: limit("maxSkillFileBytes", rawConfig.maxSkillFileBytes, DEFAULT_SKILL_LIMITS.maxSkillFileBytes)
+	};
 	const library = newSkillLibrary({
 		config: rawConfig,
 		io,
-		limits: {
-			...policyStageLimits(policySnapshotOf(ctx.get("evolutionPolicy"))),
-			maxNameLength: limit("maxSkillNameLength", rawConfig.maxSkillNameLength, DEFAULT_SKILL_LIMITS.maxNameLength),
-			maxDescriptionLength: limit("maxDescriptionLength", rawConfig.maxDescriptionLength, DEFAULT_SKILL_LIMITS.maxDescriptionLength),
-			maxSkillContentChars: limit("maxSkillContentChars", rawConfig.maxSkillContentChars, DEFAULT_SKILL_LIMITS.maxSkillContentChars),
-			maxSkillFileBytes: limit("maxSkillFileBytes", rawConfig.maxSkillFileBytes, DEFAULT_SKILL_LIMITS.maxSkillFileBytes)
-		},
+		limits: libraryLimits,
 		ctx,
 		threatExemptLabels: rawConfig.threatExemptLabels
 	});
 	if (numericClamped.length > 0) ctx.logger.warn(`tool-skill-manage: ${numericClamped.join(", ")} provided an invalid value; falling back to the default`);
+	const settingsBase = {
+		skillContentChars: libraryLimits.maxSkillContentChars,
+		maxSkillFileBytes: libraryLimits.maxSkillFileBytes,
+		maxSkillNameLength: libraryLimits.maxNameLength,
+		maxDescriptionLength: libraryLimits.maxDescriptionLength,
+		descriptionStrict: rawConfig.descriptionStrict ?? false,
+		strictCrossSource: rawConfig.strictCrossSource ?? false,
+		citationPolicy: libraryLimits.citationPolicy ?? DEFAULT_CITATION_POLICY,
+		supportFileCharPolicy: libraryLimits.supportFileCharPolicy ?? DEFAULT_SUPPORT_FILE_CHAR_POLICY
+	};
+	const section = {};
+	const settings = () => {
+		const stages = policyStageLimits(policySnapshotOf(ctx.get("evolutionPolicy")));
+		const overridden = (key) => section.overrides?.get(key);
+		const pick = (key) => overridden(key) ?? settingsBase[key];
+		const cap = (value, lower) => clampedNumber(value, lower, { min: 1 });
+		return {
+			skillContentChars: cap(pick("skillContentChars"), settingsBase.skillContentChars),
+			maxSkillFileBytes: cap(pick("maxSkillFileBytes"), settingsBase.maxSkillFileBytes),
+			maxSkillNameLength: cap(pick("maxSkillNameLength"), settingsBase.maxSkillNameLength),
+			maxDescriptionLength: cap(pick("maxDescriptionLength"), settingsBase.maxDescriptionLength),
+			descriptionStrict: pick("descriptionStrict"),
+			strictCrossSource: pick("strictCrossSource"),
+			citationPolicy: overridden("citationPolicy") ?? stages.citationPolicy ?? settingsBase.citationPolicy,
+			supportFileCharPolicy: overridden("supportFileCharPolicy") ?? stages.supportFileCharPolicy ?? settingsBase.supportFileCharPolicy
+		};
+	};
+	const applyLimits = () => {
+		const resolved = settings();
+		const stages = policyStageLimits(policySnapshotOf(ctx.get("evolutionPolicy")));
+		Object.assign(libraryLimits, {
+			maxNameLength: resolved.maxSkillNameLength,
+			maxDescriptionLength: resolved.maxDescriptionLength,
+			maxSkillContentChars: resolved.skillContentChars,
+			maxSkillFileBytes: resolved.maxSkillFileBytes,
+			citationPolicy: resolved.citationPolicy,
+			referenceRewrite: stages.referenceRewrite ?? DEFAULT_REFERENCE_REWRITE_POLICY,
+			archiveRetention: stages.archiveRetention ?? DEFAULT_ARCHIVE_RETENTION_POLICY,
+			supportFileCharPolicy: resolved.supportFileCharPolicy
+		});
+	};
+	section.overrides = installParamSection(ctx, PARAM_NAMESPACES["tool-skill-manage"] ?? "evolution-skills", SKILLS_SETTINGS_SCHEMA, settingsBase, {
+		warn: (message) => {
+			ctx.logger.warn("dsh-evolution-skills: " + message);
+		},
+		validate: (value) => {
+			validateSkillSettings(value, {
+				skillContentChars: settingsBase.skillContentChars,
+				maxSkillFileBytes: settingsBase.maxSkillFileBytes,
+				maxSkillNameLength: settingsBase.maxSkillNameLength,
+				maxDescriptionLength: settingsBase.maxDescriptionLength
+			});
+		},
+		onChange: () => {
+			applyLimits();
+		}
+	});
+	applyLimits();
 	let crossSourceViewWarned = false;
 	const crossSourceRefusal = async (rawName, phase = "stage") => {
 		const replay = phase === "replay";
 		if (typeof rawName !== "string" || rawName === "") return null;
 		const probe = await catalogWinner(rawName);
 		if (isUnknown(probe)) {
-			if (rawConfig.strictCrossSource === true) return replay ? `Refused: the cross-source check could not be performed — ${probe.reason}. Reject this staged write, fix the catalog view, and re-stage "${rawName}".` : `Refused: the cross-source check could not be performed — ${probe.reason}. Fix the catalog view (or drop strictCrossSource) before writing "${rawName}".`;
+			if (settings().strictCrossSource) return replay ? `Refused: the cross-source check could not be performed — ${probe.reason}. Reject this staged write, fix the catalog view, and re-stage "${rawName}".` : `Refused: the cross-source check could not be performed — ${probe.reason}. Fix the catalog view (or drop strictCrossSource) before writing "${rawName}".`;
 			if (!crossSourceViewWarned) {
 				crossSourceViewWarned = true;
 				ctx.logger.warn(`skill_manage: cross-source check skipped for this session — ${probe.reason}`);
@@ -103,7 +193,7 @@ function apply(ctx, rawConfig = {}) {
 		if (isPresent(probe) && probe.value !== void 0 && probe.value.provider !== "dsh-evolution") {
 			const winner = probe.value;
 			const message = `skill "${rawName}" resolves to a higher-priority "${winner.source}" skill (provider "${winner.provider}"); this write lands on the family copy, which the catalog does NOT serve — edit the "${winner.source}" copy or rename.`;
-			if (rawConfig.strictCrossSource === true) return `Refused: ${message}`;
+			if (settings().strictCrossSource) return `Refused: ${message}`;
 			ctx.logger.warn(`skill_manage: ${message}`);
 		}
 		return null;
@@ -183,7 +273,7 @@ function apply(ctx, rawConfig = {}) {
 			if (parsed) {
 				const feedback = authoringFeedback(parsed.frontmatter);
 				feedbackLines = feedback.lines;
-				if (rawConfig.descriptionStrict === true && feedback.over60) return {
+				if (settings().descriptionStrict && feedback.over60) return {
 					ok: false,
 					message: `Authoring check: description ${feedback.descriptionChars}/60 characters exceeds the strict bar; tighten it to <=60 or set descriptionStrict=false.`,
 					skills: []
@@ -417,4 +507,4 @@ function apply(ctx, rawConfig = {}) {
 	});
 }
 //#endregion
-export { Config, apply, inject, name };
+export { Config, SKILLS_SETTINGS_NAMESPACE, SKILLS_SETTINGS_SCHEMA, SKILL_SETTINGS_CAPS, apply, inject, name, validateSkillSettings };

package/lib/types/index.d.ts

@@ -19,6 +19,7 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
+import type { CitationPolicy, SupportFileCharPolicy } from '@lmzhen/dsh-evolution-core';
 export declare const name = "tool-skill-manage";
 export declare const inject: string[];
 export interface Config {
@@ -26,6 +27,11 @@ export interface Config {
     root?: string;
     maxSkillNameLength?: number;
     maxDescriptionLength?: number;
+    /** Read cap for SKILL.md writes. Same semantic as the policy row's
+     * `skillContentChars` (the canonical id, G0/S0.2) — but NO automatic
+     * shadowing today: this row's value is what the write paths use, which is
+     * what the G3 unification has to close. Deprecated alias (G0/S0.3): still
+     * readable, refused by writes; removed in 0.7.0. */
     maxSkillContentChars?: number;
     maxSkillFileBytes?: number;
     /** When true, create/update refuse a description over the 60-char authoring bar (default: advisory feedback only). */
@@ -42,5 +48,42 @@ export interface Config {
     strictCrossSource?: boolean;
 }
 export declare const Config: z<Config>;
+/** Namespace the write caps and the four stage policies live in (core's PARAM_NAMESPACES). */
+export declare const SKILLS_SETTINGS_NAMESPACE = "evolution-skills";
+/** Write behaviour a user may change (G3/S3.4). Field names are the CANONICAL
+ * parameter ids from the registry. The four caps are TIGHTEN-ONLY: the settings
+ * `validate` hook refuses a value above what the deployment allocated, because
+ * raising them would let one user widen a shared library's write budget. */
+export interface SkillSettings {
+    /** Character cap on a SKILL.md body. */
+    skillContentChars: number;
+    /** Byte cap on one support file. */
+    maxSkillFileBytes: number;
+    /** Character cap on a skill name. */
+    maxSkillNameLength: number;
+    /** Character cap on a skill description. */
+    maxDescriptionLength: number;
+    /** Refuse a description over the authoring bar instead of advising. */
+    descriptionStrict: boolean;
+    /** Refuse writes whose catalog entry resolves outside the family. */
+    strictCrossSource: boolean;
+    /** Refuse a move that would leave a dangling reference, or verify it. */
+    citationPolicy: CitationPolicy;
+    /** Warn about an oversize support file, or refuse the write. */
+    supportFileCharPolicy: SupportFileCharPolicy;
+}
+/** Schema the platform validates the user layer against; defaults mirror the core
+ * constants and the row schema, so an empty document resolves to today's behaviour. */
+export declare const SKILLS_SETTINGS_SCHEMA: z<SkillSettings>;
+/** The four caps a user may only tighten, in schema order (the sentry reads it). */
+export declare const SKILL_SETTINGS_CAPS: readonly ["skillContentChars", "maxSkillFileBytes", "maxSkillNameLength", "maxDescriptionLength"];
+/**
+ * Refuse a resolved section whose cap sits ABOVE the deployment's allocation.
+ * Windows have no single-field bound the schema could express, and a user who
+ * widened one would spend a budget the deployment set for the whole library.
+ * @param value - the resolved section the platform hands the owner.
+ * @param ceilings - the deployment values (the plugin row, after its clamps).
+ */
+export declare function validateSkillSettings(value: SkillSettings, ceilings: Pick<SkillSettings, (typeof SKILL_SETTINGS_CAPS)[number]>): void;
 export declare function apply(ctx: Context, rawConfig?: Config): void;
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-tool-skill-manage",
   "description": "Model-facing skill_manage tool (community build)",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "publishConfig": {
     "access": "public"
   },
@@ -27,24 +27,24 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-approval": "^0.5.0",
-    "@lmzhen/dsh-evolution-core": "^0.5.0"
+    "@lmzhen/dsh-evolution-approval": "^0.6.0",
+    "@lmzhen/dsh-evolution-core": "^0.6.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-skill": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-system-prompt": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-io": "^0.5.0",
-    "@lmzhen/dsh-skill-usage": "^0.5.0"
+    "@lmzhen/dsh-evolution-io": "^0.6.0",
+    "@lmzhen/dsh-skill-usage": "^0.6.0"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-skill": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-system-prompt": "^0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "^0.1.5-rc.2",
-    "@lmzhen/dsh-evolution-core": "^0.5.0",
-    "@lmzhen/dsh-evolution-io": "^0.5.0",
-    "@lmzhen/dsh-skill-usage": "^0.5.0"
+    "@lmzhen/dsh-evolution-core": "^0.6.0",
+    "@lmzhen/dsh-evolution-io": "^0.6.0",
+    "@lmzhen/dsh-skill-usage": "^0.6.0"
   }
 }