@voybio/ace-swarm 2.4.9 → 2.4.10

package/dist/safe-edit.js

@@ -3,10 +3,11 @@
  * Prevents bricking by never leaving core files in a broken state.
  */
 import { copyFileSync, cpSync, existsSync, mkdtempSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync, } from "node:fs";
-import { createHash } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { basename, dirname, relative, resolve } from "node:path";
 import { spawnSync } from "node:child_process";
 import { tmpdir } from "node:os";
+import { runProgressCommand } from "./progress-command.js";
 import { WORKSPACE_ROOT, safeRead, wsPath } from "./helpers.js";
 import { isInside, isReadError, normalizeRelPath } from "./shared.js";
 import { appendSourceEditEvent, SourceEditLeaseBusyError, withSourceMutationCoordinatorSync, } from "./source-mutation-coordinator.js";
@@ -176,38 +177,31 @@ export function gcStaging(input = {}) {
         errors,
     };
 }
-function runValidation(validationCmd, testCmd, cwd = WORKSPACE_ROOT) {
+async function runValidation(validationCmd, testCmd, cwd = WORKSPACE_ROOT, policy = {}) {
     let validation_passed;
     let validation_output;
     let test_passed;
     let test_output;
+    let reason_code;
     if (validationCmd) {
-        const res = spawnSync("sh", ["-c", validationCmd], {
-            cwd,
-            encoding: "utf-8",
-            timeout: 60_000,
-            maxBuffer: 4 * 1024 * 1024,
-        });
-        validation_passed = res.status === 0;
-        validation_output = ((res.stdout ?? "") + (res.stderr ?? "")).slice(0, 4000);
+        const res = await runProgressCommand(validationCmd, cwd, policy);
+        validation_passed = res.ok;
+        validation_output = res.output.slice(-4000);
+        reason_code = res.reason_code;
     }
     if (testCmd && (validation_passed === undefined || validation_passed)) {
-        const res = spawnSync("sh", ["-c", testCmd], {
-            cwd,
-            encoding: "utf-8",
-            timeout: 120_000,
-            maxBuffer: 4 * 1024 * 1024,
-        });
-        test_passed = res.status === 0;
-        test_output = ((res.stdout ?? "") + (res.stderr ?? "")).slice(0, 4000);
+        const res = await runProgressCommand(testCmd, cwd, policy);
+        test_passed = res.ok;
+        test_output = res.output.slice(-4000);
+        reason_code = res.reason_code;
     }
     const passed = (validation_passed ?? true) && (test_passed ?? true);
-    return { passed, validation_passed, validation_output, test_passed, test_output };
+    return { passed, validation_passed, validation_output, test_passed, test_output, reason_code };
 }
 // ────────────────────────────────────────────────────────────────────
 // Safe edit (copy → modify → validate → swap)
 // ────────────────────────────────────────────────────────────────────
-export function safeEditFile(input) {
+export async function safeEditFile(input) {
     const target = resolveWorkspaceTarget(input.path);
     if ("error" in target) {
         return {
@@ -227,7 +221,7 @@ export function safeEditFile(input) {
     const originalHash = isNew ? "none" : fileHash(originalContent);
     const stagedNewHash = fileHash(input.content);
     // Step 1: Create staging directory
-    const stagingDir = wsPath(STAGING_DIR, `${timestamp}-${isNew ? "new" : originalHash.slice(0, 8)}`);
+    const stagingDir = wsPath(STAGING_DIR, `${timestamp}-${isNew ? "new" : originalHash.slice(0, 8)}-${randomUUID()}`);
     ensureDir(stagingDir);
     const needsValidationWorkspace = Boolean(input.validation_command || input.test_command);
     const flatName = relPath.replace(/\//g, "__");
@@ -260,7 +254,7 @@ export function safeEditFile(input) {
                 restored: true,
             };
         }
-        check = runValidation(input.validation_command, input.test_command, stagedWorkspace);
+        check = await runValidation(input.validation_command, input.test_command, stagedWorkspace, input.command_policy);
         if (!check.passed) {
             return {
                 ok: false,
@@ -273,7 +267,8 @@ export function safeEditFile(input) {
                 validation_output: check.validation_output,
                 test_passed: check.test_passed,
                 test_output: check.test_output,
-                error: "Validation/test failed — staged change not promoted",
+                error: `Validation/test failed — staged change not promoted${check.reason_code ? ` (${check.reason_code})` : ""}`,
+                reason_code: check.reason_code,
                 restored: true,
             };
         }
@@ -281,17 +276,18 @@ export function safeEditFile(input) {
     try {
         return withSourceMutationCoordinatorSync(relPath, (lease) => {
             // Step 4: Promote staged content to the real target only after checks pass.
-            if (input.expected_base_hash) {
+            {
+                const expectedBaseHash = input.expected_base_hash ?? (isNew ? "none" : fullFileHash(originalContent));
                 const currentContent = safeRead(input.path);
                 const observedHash = isReadError(currentContent) ? "none" : fullFileHash(currentContent);
-                if (isReadError(currentContent) || !hashMatchesExpected(input.expected_base_hash, currentContent)) {
+                if (observedHash !== expectedBaseHash && (isReadError(currentContent) || !hashMatchesExpected(expectedBaseHash, currentContent))) {
                     appendSourceEditEvent({
                         event: "SOURCE_EDIT_CONFLICT",
                         target_path: relPath,
                         lock_path: lease.lockPath,
                         waited_ms: lease.waitedMs,
                         base_hash: originalHash,
-                        expected_hash: input.expected_base_hash,
+                        expected_hash: expectedBaseHash,
                         observed_hash: observedHash,
                         reason_code: "source_edit_conflict",
                     });
@@ -301,7 +297,7 @@ export function safeEditFile(input) {
                         backupPath,
                         originalHash,
                         newHash: stagedNewHash,
-                        expectedHash: input.expected_base_hash,
+                        expectedHash: expectedBaseHash,
                         observedHash,
                         validationCheck: check,
                         leaseLockPath: lease.lockPath,
@@ -384,21 +380,16 @@ function detectTestCommand() {
     }
     return "echo 'No test command detected' && exit 1";
 }
-export function runTestSuite(command) {
+export async function runTestSuite(command, options = {}) {
     const cmd = command ?? detectTestCommand();
-    const start = Date.now();
-    const res = spawnSync("sh", ["-c", cmd], {
-        cwd: WORKSPACE_ROOT,
-        encoding: "utf-8",
-        timeout: 300_000,
-        maxBuffer: 8 * 1024 * 1024,
-    });
+    const res = await runProgressCommand(cmd, WORKSPACE_ROOT, options);
     return {
-        ok: res.status === 0,
-        exit_code: res.status ?? -1,
-        output: ((res.stdout ?? "") + (res.stderr ?? "")).slice(0, 8000),
+        ok: res.ok,
+        exit_code: res.exit_code ?? -1,
+        output: res.output.slice(-8000),
         command: cmd,
-        duration_ms: Date.now() - start,
+        duration_ms: res.duration_ms,
+        reason_code: res.reason_code,
     };
 }
 // ────────────────────────────────────────────────────────────────────
@@ -507,7 +498,7 @@ export function diffFiles(pathA, pathB) {
     }
     return diffContents(contentA, contentB);
 }
-export function applyPatch(input) {
+export async function applyPatch(input) {
     const target = resolveWorkspaceTarget(input.path);
     if ("error" in target) {
         return {
@@ -525,7 +516,7 @@ export function applyPatch(input) {
     const isNew = isReadError(originalContent);
     const originalHash = isNew ? "none" : fileHash(originalContent);
     const timestamp = Date.now();
-    const stagingDir = wsPath(STAGING_DIR, `${timestamp}-patch-${isNew ? "new" : originalHash.slice(0, 8)}`);
+    const stagingDir = wsPath(STAGING_DIR, `${timestamp}-patch-${isNew ? "new" : originalHash.slice(0, 8)}-${randomUUID()}`);
     ensureDir(stagingDir);
     const needsValidationWorkspace = Boolean(input.validation_command || input.test_command);
     const stagedWorkspace = needsValidationWorkspace ? prepareStagedWorkspace(stagingDir) : undefined;
@@ -559,7 +550,7 @@ export function applyPatch(input) {
         }
         const patchedContent = readFileSync(stagedTarget, "utf-8");
         const newHash = fileHash(patchedContent);
-        const check = runValidation(input.validation_command, input.test_command, stagedWorkspace ?? stagingDir);
+        const check = await runValidation(input.validation_command, input.test_command, stagedWorkspace ?? stagingDir, input.command_policy);
         if (!check.passed) {
             return {
                 ok: false,
@@ -571,24 +562,26 @@ export function applyPatch(input) {
                 validation_output: check.validation_output,
                 test_passed: check.test_passed,
                 test_output: check.test_output,
-                error: "Validation/test failed — staged patch not promoted",
+                error: `Validation/test failed — staged patch not promoted${check.reason_code ? ` (${check.reason_code})` : ""}`,
+                reason_code: check.reason_code,
                 restored: true,
             };
         }
         try {
             return withSourceMutationCoordinatorSync(relPath, (lease) => {
                 let backupPath;
-                if (input.expected_base_hash) {
+                {
+                    const expectedBaseHash = input.expected_base_hash ?? (isNew ? "none" : fullFileHash(originalContent));
                     const currentContent = safeRead(input.path);
                     const observedHash = isReadError(currentContent) ? "none" : fullFileHash(currentContent);
-                    if (isReadError(currentContent) || !hashMatchesExpected(input.expected_base_hash, currentContent)) {
+                    if (observedHash !== expectedBaseHash && (isReadError(currentContent) || !hashMatchesExpected(expectedBaseHash, currentContent))) {
                         appendSourceEditEvent({
                             event: "SOURCE_EDIT_CONFLICT",
                             target_path: relPath,
                             lock_path: lease.lockPath,
                             waited_ms: lease.waitedMs,
                             base_hash: originalHash,
-                            expected_hash: input.expected_base_hash,
+                            expected_hash: expectedBaseHash,
                             observed_hash: observedHash,
                             reason_code: "source_edit_conflict",
                         });
@@ -597,7 +590,7 @@ export function applyPatch(input) {
                             stagingDir,
                             originalHash,
                             newHash,
-                            expectedHash: input.expected_base_hash,
+                            expectedHash: expectedBaseHash,
                             observedHash,
                             validationCheck: check,
                             leaseLockPath: lease.lockPath,

package/dist/schemas.js

@@ -19,6 +19,8 @@ const REQUIRED_PROVENANCE_FIELDS = [
 ];
 const swarmHandoffSchema = z
     .object({
+    step_ref: z.object({ goal_id: z.string().min(1), step_id: z.string().min(1) }).strict().optional(),
+    recipient_agent: z.string().min(1).optional(),
     handoff_id: NON_EMPTY,
     timestamp_utc: z.string().datetime({ offset: true }),
     router: z
@@ -405,8 +407,8 @@ const runtimeExecutorSessionRecordSchema = z
     objective_id: z.string().optional(),
     tracker_item_id: z.string().optional(),
     command: NON_EMPTY,
-    max_turns: z.number().int().positive(),
-    turn_timeout_ms: z.number().int().positive(),
+    max_turns: z.number().int().nonnegative(),
+    turn_timeout_ms: z.number().int().nonnegative(),
     turn_count: z.number().int().min(0),
     created_at: z.string().datetime({ offset: true }),
     updated_at: z.string().datetime({ offset: true }),

package/dist/server.d.ts

@@ -9,22 +9,8 @@ export interface CreateAceServerOptions {
 }
 export declare function createAceServer(options?: CreateAceServerOptions): McpServer;
 export type AceHostProfile = "host-min" | "full";
-/**
- * Curated premium-host surface (report WS-G). ~15–25 high-value tools instead of the
- * full tool surface, cutting the per-session schema tax. `run_orchestrator` only reaches an
- * omitted tool if the model-bridge child it spawns happens to have that tool in its own MCP
- * session — it is a role/plan dispatcher, not a generic proxy for any omitted tool by name.
- * The reliable way to reach anything below is to start with `--profile full`.
- *
- * Whole domains are intentionally absent, not just individual tools: goal-engine
- * (start_goal/get_goal_status/resume_goal/stop_goal — until WS-F ships), git
- * (git_status/git_diff/git_log/git_commit), scheduler (enqueue_job/dispatch_jobs/
- * heartbeat_job/reap_stale_jobs/get_lock_table/…), drift/change-intelligence
- * (snapshot_state/semantic_diff/drift_report/rewrite_targets/list_snapshots), discovery
- * (scan_workspace_delta/web_research_packet/codemunch_snapshot/codemunch_index/
- * mcp_ingestion_probe/refresh_astgrep_index), skills (skill_catalog_summary/skill_audit/
- * problem_triage), and todo (get_todo/update_todo/get_run_ledger) all have zero
- * representation below.
+/** Compact host surface, including work state and optional execution aids.
+ * Optional git, scheduler, discovery and skill-administration tools remain in full.
  */
 export declare const HOST_MIN_TOOL_PROFILE: readonly string[];
 export declare function resolveHostProfileAllowlist(profile: AceHostProfile): readonly string[] | undefined;

package/dist/server.js

@@ -92,35 +92,30 @@ async function verifyMcpStoreStartup(workspaceRoot, logStartup) {
         console.error(message);
     return false;
 }
-/**
- * Curated premium-host surface (report WS-G). ~15–25 high-value tools instead of the
- * full tool surface, cutting the per-session schema tax. `run_orchestrator` only reaches an
- * omitted tool if the model-bridge child it spawns happens to have that tool in its own MCP
- * session — it is a role/plan dispatcher, not a generic proxy for any omitted tool by name.
- * The reliable way to reach anything below is to start with `--profile full`.
- *
- * Whole domains are intentionally absent, not just individual tools: goal-engine
- * (start_goal/get_goal_status/resume_goal/stop_goal — until WS-F ships), git
- * (git_status/git_diff/git_log/git_commit), scheduler (enqueue_job/dispatch_jobs/
- * heartbeat_job/reap_stale_jobs/get_lock_table/…), drift/change-intelligence
- * (snapshot_state/semantic_diff/drift_report/rewrite_targets/list_snapshots), discovery
- * (scan_workspace_delta/web_research_packet/codemunch_snapshot/codemunch_index/
- * mcp_ingestion_probe/refresh_astgrep_index), skills (skill_catalog_summary/skill_audit/
- * problem_triage), and todo (get_todo/update_todo/get_run_ledger) all have zero
- * representation below.
+/** Compact host surface, including work state and optional execution aids.
+ * Optional git, scheduler, discovery and skill-administration tools remain in full.
  */
 export const HOST_MIN_TOOL_PROFILE = [
+    "get_todo",
+    "get_todo_state",
+    "update_todo",
+    "read_workspace_file",
+    "list_workspace",
+    "start_goal",
+    "next_step",
+    "complete_step",
+    "resume_goal",
+    "stop_goal",
+    "get_goal_status",
     "recall_context",
+    "get_skill_instructions",
     "route_task",
-    "run_orchestrator",
     "propose_plan",
     "validate_plan",
     "create_handoff",
     "ack_handoff",
     "get_handoff_status",
     "execute_gates",
-    "emit_status_event",
-    "append_vericify_process_post",
     "get_vericify_context",
     "get_vericify_delta",
     "astgrep_locate",
@@ -129,7 +124,6 @@ export const HOST_MIN_TOOL_PROFILE = [
     "astgrep_rewrite",
     "safe_edit_file",
     "run_tests",
-    "run_local_model",
     "context_snapshot",
     "build_continuity_packet",
 ];

package/dist/shared.d.ts

@@ -60,6 +60,7 @@ export declare const TODO_STATUS_ENUM: z.ZodEnum<{
     blocked: "blocked";
     gated: "gated";
     done: "done";
+    cancelled: "cancelled";
 }>;
 export declare const HANDOFF_LIFECYCLE_STATUS_ENUM: z.ZodEnum<{
     blocked: "blocked";
@@ -101,6 +102,7 @@ export declare const EVENT_TYPE: {
     readonly RUNTIME_EXECUTOR_SESSION_FAILED: "RUNTIME_EXECUTOR_SESSION_FAILED";
     readonly RUNTIME_EXECUTOR_SESSION_STARTED: "RUNTIME_EXECUTOR_SESSION_STARTED";
     readonly RUNTIME_EXECUTOR_SESSION_STOPPED: "RUNTIME_EXECUTOR_SESSION_STOPPED";
+    readonly RUNTIME_EXECUTOR_SUSPECTED_STALL: "RUNTIME_EXECUTOR_SUSPECTED_STALL";
     readonly RUNTIME_EXECUTOR_TURN_COMPLETED: "RUNTIME_EXECUTOR_TURN_COMPLETED";
     readonly RUNTIME_EXECUTOR_TURN_FAILED: "RUNTIME_EXECUTOR_TURN_FAILED";
     readonly RUNTIME_EXECUTOR_TURN_STARTED: "RUNTIME_EXECUTOR_TURN_STARTED";

package/dist/shared.js

@@ -102,6 +102,7 @@ export const TODO_STATUS_ENUM = z.enum([
     "blocked",
     "gated",
     "done",
+    "cancelled",
 ]);
 export const HANDOFF_LIFECYCLE_STATUS_ENUM = z.enum([
     "open",
@@ -146,6 +147,7 @@ export const EVENT_TYPE = {
     RUNTIME_EXECUTOR_SESSION_FAILED: "RUNTIME_EXECUTOR_SESSION_FAILED",
     RUNTIME_EXECUTOR_SESSION_STARTED: "RUNTIME_EXECUTOR_SESSION_STARTED",
     RUNTIME_EXECUTOR_SESSION_STOPPED: "RUNTIME_EXECUTOR_SESSION_STOPPED",
+    RUNTIME_EXECUTOR_SUSPECTED_STALL: "RUNTIME_EXECUTOR_SUSPECTED_STALL",
     RUNTIME_EXECUTOR_TURN_COMPLETED: "RUNTIME_EXECUTOR_TURN_COMPLETED",
     RUNTIME_EXECUTOR_TURN_FAILED: "RUNTIME_EXECUTOR_TURN_FAILED",
     RUNTIME_EXECUTOR_TURN_STARTED: "RUNTIME_EXECUTOR_TURN_STARTED",

package/dist/skill-auditor.d.ts

@@ -20,7 +20,26 @@ export interface SkillAuditResult {
     rollout_backlog: string[];
     summary: SkillCatalogSummary;
 }
+export declare function auditSkillEntry(entry: SkillCatalogEntry): SkillAuditEntry;
 export declare function auditSkillCatalog(entries?: SkillCatalogEntry[]): SkillAuditResult;
 export declare function renderSkillAuditReport(result: SkillAuditResult): string;
 export declare function writeSkillAuditReport(result: SkillAuditResult, targetPath?: string): string;
+/** Mechanical qualification of host-written learned skills. Commands execute
+ * through the same goal verifier and its progress policy, outside the goal lease. */
+export declare function proveLearnedSkill(content: string, root: string, run: (command: string, root: string, options?: {
+    timeout_ms?: number;
+}) => Promise<{
+    ok: boolean;
+    output: string;
+}>, previous?: string): Promise<{
+    ok: boolean;
+    errors: string[];
+    checks: {
+        command: string;
+        cwd: string;
+        ok: boolean;
+        output: string;
+    }[];
+    description: string;
+}>;
 //# sourceMappingURL=skill-auditor.d.ts.map

package/dist/skill-auditor.js

@@ -1,12 +1,12 @@
 import { safeWrite } from "./helpers.js";
-import { listSkillCatalogEntries, summarizeSkillCatalog, } from "./skill-catalog.js";
+import { listSkillCatalogEntries, readSkillCatalogEntry, summarizeSkillCatalog, } from "./skill-catalog.js";
 function pushFinding(findings, severity, code, message) {
     findings.push({ severity, code, message });
 }
 function clampScore(value) {
     return Math.max(0, Math.min(100, value));
 }
-function auditSkillEntry(entry) {
+export function auditSkillEntry(entry) {
     const findings = [];
     const strengths = [];
     let score = 100;
@@ -181,4 +181,34 @@ export function renderSkillAuditReport(result) {
 export function writeSkillAuditReport(result, targetPath = "agent-state/SKILL_AUDIT_REPORT.md") {
     return safeWrite(targetPath, renderSkillAuditReport(result));
 }
+/** Mechanical qualification of host-written learned skills. Commands execute
+ * through the same goal verifier and its progress policy, outside the goal lease. */
+export async function proveLearnedSkill(content, root, run, previous) {
+    const entry = readSkillCatalogEntry({ name: 'learned/proposal', path: '', source: 'store' }, content);
+    const errors = auditSkillEntry(entry).findings.filter(f => f.severity === 'fail').map(f => f.message);
+    if (content.split(/\r?\n/).length > 500)
+        errors.push('Skill exceeds 500 lines.');
+    if (!/^scope:/m.test(content))
+        errors.push('Skill frontmatter must declare scope.');
+    if (previous && content.length < previous.length * 0.6)
+        errors.push('Edit retains less than 60% of prior skill.');
+    const validation = content.match(/^## Validation[^\n]*\n([\s\S]*?)(?=^## |$(?![\s\S]))/m)?.[1] ?? '';
+    const commands = [...validation.matchAll(/```bash\s*\n([\s\S]*?)```/g)].map(m => m[1].replace(/\r\n/g, '\n').replace(/\n$/, '')).filter(Boolean);
+    if (!commands.length)
+        errors.push('Validation needs at least one fenced bash command.');
+    const checks = [];
+    if (!errors.length)
+        for (const command of commands) {
+            try {
+                const result = await run(command, root);
+                checks.push({ command, cwd: root, ...result, output: result.output.slice(-12000) });
+                if (!result.ok)
+                    errors.push(`Validation failed: ${command}: ${result.output.slice(-1000)}`);
+            }
+            catch (error) {
+                errors.push(`Validation failed: ${command}: ${String(error)}`);
+            }
+        }
+    return { ok: !errors.length, errors, checks, description: entry.description };
+}
 //# sourceMappingURL=skill-auditor.js.map

package/dist/skill-catalog.d.ts

@@ -7,6 +7,9 @@ export interface SkillAdapterOverlay {
 }
 export interface SkillCatalogEntry extends SkillReference {
     description: string;
+    origin?: string;
+    label?: string;
+    learning_status?: string;
     headings: string[];
     normalized_headings: string[];
     line_count: number;
@@ -52,7 +55,7 @@ interface ParsedFrontmatter {
     has_frontmatter: boolean;
 }
 export declare function parseSkillFrontmatter(raw: string): ParsedFrontmatter;
-export declare function readSkillCatalogEntry(skill: SkillReference): SkillCatalogEntry;
+export declare function readSkillCatalogEntry(skill: SkillReference, content?: string): SkillCatalogEntry;
 export declare function listSkillCatalogEntries(): SkillCatalogEntry[];
 export declare function summarizeSkillCatalog(entries?: SkillCatalogEntry[]): SkillCatalogSummary;
 export declare function findSkillCatalogEntry(name: string, entries?: SkillCatalogEntry[]): SkillCatalogEntry | undefined;

package/dist/skill-catalog.js

@@ -134,7 +134,7 @@ function detectAdapterClient(relativePath) {
 function listSkillAdapterOverlays(skillPath) {
     const parsed = parseVirtualStorePath(skillPath);
     if (parsed) {
-        const skillName = parsed.key.split("/")[2] ?? "";
+        const skillName = parsed.key.replace(/^knowledge\/skills\//, "").replace(/\/SKILL\.md$/, "");
         const prefix = `knowledge/skills/${skillName}/agents/`;
         return listStoreKeysByPathSync(parsed.storePath, prefix)
             .filter((key) => key.toLowerCase() !== `${prefix}readme.md`)
@@ -181,10 +181,10 @@ function listSkillAdapterOverlays(skillPath) {
     walk(agentsRoot);
     return overlays.sort((a, b) => a.relative_path.localeCompare(b.relative_path));
 }
-export function readSkillCatalogEntry(skill) {
-    const raw = skill.source === "store" || !existsSync(skill.path)
+export function readSkillCatalogEntry(skill, content) {
+    const raw = content ?? (skill.source === "store" || !existsSync(skill.path)
         ? readVirtualStorePathSync(skill.path) ?? readSkillInstructions(skill.name)
-        : readFileSync(skill.path, "utf-8");
+        : readFileSync(skill.path, "utf-8"));
     const parsed = parseSkillFrontmatter(raw);
     const headings = extractHeadings(parsed.body);
     const normalizedHeadings = headings.map(normalizeHeading);
@@ -203,12 +203,13 @@ export function readSkillCatalogEntry(skill) {
             const parsed = parseVirtualStorePath(skill.path);
             if (!parsed)
                 return false;
-            const skillName = parsed.key.split("/")[2] ?? "";
+            const skillName = parsed.key.replace(/^knowledge\/skills\//, "").replace(/\/SKILL\.md$/, "");
             return listStoreKeysByPathSync(parsed.storePath, `knowledge/skills/${skillName}/references/`).length > 0;
         })();
     return {
         ...skill,
         description: parsed.attributes.description?.trim() ?? "",
+        origin: parsed.attributes.origin, label: parsed.attributes.label, learning_status: parsed.attributes.status,
         headings,
         normalized_headings: normalizedHeadings,
         line_count: raw.replace(/\r\n/g, "\n").split("\n").length,

package/dist/store/ace-packed-store.d.ts

@@ -67,6 +67,7 @@ export interface ArchiveColdEventsResult {
     bytes_written: number;
 }
 export declare class AcePackedStore implements IAcePackedStore {
+    private assertWriteBoundary;
     private storePath;
     private readOnly;
     private fh;
@@ -91,7 +92,10 @@ export declare class AcePackedStore implements IAcePackedStore {
      * first when old hot events should move into BGZF archive batches.
      */
     compact(): Promise<void>;
-    close(): Promise<void>;
+    discardPending(): void;
+    close(options?: {
+        commit?: boolean;
+    }): Promise<void>;
     get(key: string): Promise<Uint8Array | undefined>;
     /** Events dropped as malformed since this instance was opened (v1 migration only). */
     get skippedMalformedEventCount(): number;

package/dist/store/ace-packed-store.js

@@ -59,6 +59,7 @@ import { MAGIC, STORE_VERSION, HEADER_SIZE, HEADER_SIZE_V1, ContentSource, Entit
 import { invalidateStoreSnapshotCache, validateChunkBounds } from "./store-snapshot.js";
 import { crc32 } from "./crc32.js";
 import { bgzfCompress, bgzfDecompress } from "./bgzf.js";
+import { assertTestWriteAllowed, captureTestWriteBoundary } from "./test-write-boundary.js";
 // ── Corruption error ─────────────────────────────────────────────────────────
 export class AcePackedStoreCorruptionError extends Error {
     constructor(message) {
@@ -317,6 +318,7 @@ function loadCommittedStateFromBytes(file) {
 }
 function quarantineCorruptSource(storePath, file, operation, error) {
     const quarantinePath = `${storePath}.corrupt-${Date.now()}`;
+    assertTestWriteAllowed(quarantinePath);
     writeFileSync(quarantinePath, file);
     const message = error instanceof Error ? error.message : String(error);
     throw new AcePackedStoreCorruptionError(`AcePackedStore ${operation} refused: corrupt source store quarantined at ${quarantinePath}; original left in place. Run 'ace repair' or 'ace fsck --repair'. Cause: ${message}`);
@@ -374,6 +376,7 @@ async function readExact(fh, buf, position, context = {}) {
 }
 // ── AcePackedStore ────────────────────────────────────────────────────────────
 export class AcePackedStore {
+    assertWriteBoundary = () => { };
     storePath = "";
     readOnly = false;
     fh = null;
@@ -392,6 +395,8 @@ export class AcePackedStore {
     async open(path, opts = {}) {
         this.storePath = path;
         this.readOnly = opts.readOnly ?? false;
+        if (!this.readOnly)
+            this.assertWriteBoundary = captureTestWriteBoundary(path);
         if (!existsSync(path)) {
             if (this.readOnly)
                 throw new Error(`AcePackedStore: file not found: ${path}`);
@@ -400,9 +405,15 @@ export class AcePackedStore {
         else {
             await this._loadExisting(path);
         }
+        if (!this.readOnly) {
+            this.assertWriteBoundary();
+            // Pin the actual store directory after a permitted first creation.
+            this.assertWriteBoundary = captureTestWriteBoundary(path);
+        }
         this.fh = await fsOpen(path, this.readOnly ? "r" : "r+");
     }
     async _initNew(path) {
+        this.assertWriteBoundary();
         mkdirSync(dirname(path), { recursive: true });
         const evtBytes = serializeEventSection([]);
         const idxBytes = TEXT.encode("{}");
@@ -423,6 +434,7 @@ export class AcePackedStore {
         out.set(header, 0);
         out.set(evtBytes, evtOff);
         out.set(idxBytes, kvIdxOff);
+        this.assertWriteBoundary();
         writeFileSync(path, out);
         this.kvChunkEnd = HEADER_SIZE;
         this.kvIndex = new Map();
@@ -449,6 +461,7 @@ export class AcePackedStore {
     async commit() {
         if (this.readOnly || !this.fh || !this.storePath || !this.dirty)
             return;
+        this.assertWriteBoundary();
         const currentFile = readFileSync(this.storePath);
         const latest = loadCommittedStateOrQuarantine(this.storePath, new Uint8Array(currentFile.buffer, currentFile.byteOffset, currentFile.byteLength), "commit");
         this.skippedMalformedCount += latest.skippedMalformed;
@@ -506,10 +519,13 @@ export class AcePackedStore {
         out.set(evtBytes, evtOff);
         out.set(idxBytes, kvIdxOff);
         const tmpPath = `${this.storePath}.${process.pid}.${Date.now()}.commit.tmp`;
+        this.assertWriteBoundary();
+        assertTestWriteAllowed(tmpPath);
         writeFileSync(tmpPath, out);
         readHeaderV2(readFileSync(tmpPath).slice(0, HEADER_SIZE));
         await this.fh.close();
         this.fh = null;
+        this.assertWriteBoundary();
         renameSync(tmpPath, this.storePath);
         invalidateStoreSnapshotCache(this.storePath);
         this.fh = await fsOpen(this.storePath, "r+");
@@ -530,6 +546,7 @@ export class AcePackedStore {
     async compact() {
         if (!this.storePath || this.readOnly)
             return;
+        this.assertWriteBoundary();
         if (this.dirty) {
             await this.commit();
         }
@@ -585,12 +602,15 @@ export class AcePackedStore {
         out.set(evtBytes, evtOff);
         out.set(idxBytes, kvIdxOff);
         const tmpPath = this.storePath + ".tmp";
+        this.assertWriteBoundary();
+        assertTestWriteAllowed(tmpPath);
         writeFileSync(tmpPath, out);
         readHeaderV2(readFileSync(tmpPath).slice(0, HEADER_SIZE)); // validate
         if (this.fh) {
             await this.fh.close();
             this.fh = null;
         }
+        this.assertWriteBoundary();
         renameSync(tmpPath, this.storePath);
         invalidateStoreSnapshotCache(this.storePath);
         this.fh = await fsOpen(this.storePath, "r+");
@@ -599,7 +619,15 @@ export class AcePackedStore {
         this.pendingDeletes.clear();
         this.dirty = false;
     }
-    async close() {
+    discardPending() {
+        this.pending = [];
+        this.pendingKv.clear();
+        this.pendingDeletes.clear();
+        this.dirty = false;
+    }
+    async close(options = {}) {
+        if (options.commit === false)
+            this.discardPending();
         let commitError;
         try {
             if (this.dirty) {
@@ -746,6 +774,7 @@ export class AcePackedStore {
         if (!this.storePath || this.readOnly) {
             return { batches_written: 0, events_archived: 0, bytes_written: 0 };
         }
+        this.assertWriteBoundary();
         if (this.dirty) {
             await this.commit();
         }
@@ -846,12 +875,15 @@ export class AcePackedStore {
         out.set(evtBytes, evtOff);
         out.set(idxBytes, kvIdxOff);
         const tmpPath = `${this.storePath}.${process.pid}.${Date.now()}.archive.tmp`;
+        this.assertWriteBoundary();
+        assertTestWriteAllowed(tmpPath);
         writeFileSync(tmpPath, out);
         readHeaderV2(readFileSync(tmpPath).slice(0, HEADER_SIZE));
         if (this.fh) {
             await this.fh.close();
             this.fh = null;
         }
+        this.assertWriteBoundary();
         renameSync(tmpPath, this.storePath);
         invalidateStoreSnapshotCache(this.storePath);
         this.fh = await fsOpen(this.storePath, "r+");