@decidio/sdk 0.4.1 → 0.4.3

package/dist/resume.d.ts

@@ -455,9 +455,9 @@ export declare class DecidioSuspendedError extends Error {
  *  to read `unknown`, the word for "not ours" (prodsec V033-06). An `invoking` row is NOT final and answers
  *  `indeterminate` (prodsec V035-02). Both members are additive: an exhaustive switch over this union
  *  gains a case per release, which the changelog announces. */
-/** `lost_race` (0.4.1): this signal lost a durable transition race to ANOTHER ATTEMPT that is still in flight
- *  (it holds the pre-invocation claim, or crossed the invocation boundary first), or the boundary could not be
- *  recorded at all - and it did NOTHING. Nothing ran on this signal; the winner reports, or the entry stays
+/** `lost_race` (0.4.1): this signal lost the pre-invocation claim to ANOTHER ATTEMPT that is still in flight, or
+ *  the invocation boundary could not be recorded at all (a store fault) - and it did NOTHING. (A boundary lost to
+ *  an attempt already in flight reads `indeterminate`: that attempt may be running.) Nothing ran on this signal; the winner reports, or the entry stays
  *  parked for a later signal. It used to read `unknown` (the word for "not ours") for the claim loser and
  *  `no_handler` for the boundary loser although a handler was registered (prodsec V040-01). A loss to a FINAL
  *  answer (a denial, an execution) stays `already_resolved`. Additive, like the two above. */

package/dist/resume.js

@@ -335,8 +335,10 @@ export class FilePendingStore {
             try {
                 names = readdirSync(this.dir);
             }
-            catch {
-                return out;
+            catch (e) {
+                if (e?.code === "ENOENT")
+                    return out;
+                throw new DecidioStateCorruptError(key, [`${this.dir}: ${e?.message ?? e}`]);
             }
         }
         for (const name of names) {
@@ -753,6 +755,20 @@ export class DecidioSuspendedError extends Error {
         this.name = "DecidioSuspendedError";
     }
 }
+function outcomeFromHead(head, decisionId, action) {
+    if (!head)
+        return undefined;
+    const base = action ? { decisionId, action } : { decisionId };
+    switch (head.state) {
+        case "discarded": return { status: "already_resolved", ...base, reason: `this decision was DENIED (${head.verdict ?? "rejected"}); that answer is final and this signal did nothing` };
+        case "executed_unreported":
+        case "reported": return { status: "already_resolved", ...base, reason: `this decision already ran (durable state ${head.state}); this signal arrived after it and did nothing` };
+        case "invoking":
+        case "indeterminate": return { status: "indeterminate", ...base, reason: `this decision is in durable state ${head.state}: its action may still be running or may have finished without reporting - it may or may not have run. Nothing will retry it; check the worker and the downstream system, then settle it with reconcile("${decisionId}", …).` };
+        case "claimed_preinvoke": return { status: "lost_race", ...base, reason: `another attempt holds the pre-invocation claim on this decision; this signal did nothing. If that attempt is alive it will report; if it died, recover() lists the decision and reconcile() can settle it` };
+        default: return undefined;
+    }
+}
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 function sign(secret, body) {
     return "sha256=" + createHmac("sha256", secret).update(body).digest("hex");
@@ -992,15 +1008,9 @@ export function createDecidioResume(opts) {
                 return { status: "unknown", decisionId: String(decisionId ?? ""), reason: `not a decision id this SDK will act on (${idProblem})` };
             const pending = await ctrl.store.get(decisionId);
             if (!pending) {
-                const head = await ctrl.store.getExecution(decisionId).catch(() => undefined);
-                if (head?.state === "discarded")
-                    return { status: "already_resolved", decisionId, reason: `this decision was DENIED (${head.verdict ?? "rejected"}); that answer is final and this signal did nothing` };
-                if (head?.state === "executed_unreported" || head?.state === "reported")
-                    return { status: "already_resolved", decisionId, reason: `this decision already ran (durable state ${head.state}); this signal arrived after it and did nothing` };
-                if (head?.state === "invoking" || head?.state === "indeterminate")
-                    return { status: "indeterminate", decisionId, reason: `this decision is in durable state ${head.state}: its action may still be running or may have finished without reporting - it may or may not have run. Nothing will retry it; check the worker and the downstream system, then settle it with reconcile("${decisionId}", …).` };
-                if (head?.state === "claimed_preinvoke")
-                    return { status: "lost_race", decisionId, reason: `another attempt holds the pre-invocation claim on this decision; this signal did nothing. If that attempt is alive it will report; if it died, recover() lists the decision and reconcile() can settle it` };
+                const mapped = outcomeFromHead(await ctrl.store.getExecution(decisionId), decisionId);
+                if (mapped)
+                    return finish(mapped);
                 return { status: "unknown", decisionId };
             }
             if (verdict === "rejected" || verdict === "blocked") {
@@ -1054,7 +1064,10 @@ export function createDecidioResume(opts) {
                     }
                     return finish({ status: "already_resolved", decisionId, action: pending.action, reason: claim.state === "discarded" ? `this decision was already DENIED (${(await ctrl.store.getExecution(decisionId))?.verdict ?? "rejected"}); that answer is final and this signal lost the race to it` : `this decision already ran (durable state ${claim.state}); this signal lost the race to it` });
                 }
-                return finish({ status: "lost_race", decisionId, action: pending.action, reason: `another attempt holds the pre-invocation claim on this decision (durable state ${claim.state}); this signal lost the race and did nothing. If that attempt is alive it will report; if it died, recover() lists the decision and reconcile() can settle it` });
+                const mapped = outcomeFromHead(await ctrl.store.getExecution(decisionId), decisionId, pending.action);
+                if (mapped)
+                    return finish(mapped);
+                return finish({ status: "lost_race", decisionId, action: pending.action, reason: `another attempt holds the pre-invocation claim on this decision${claim.state ? ` (durable state ${claim.state})` : ""}; this signal lost the race and did nothing. If that attempt is alive it will report; if it died, recover() lists the decision and reconcile() can settle it` });
             }
             try {
                 await ctrl.store.markInvoking(decisionId, attemptId);
@@ -1062,13 +1075,9 @@ export function createDecidioResume(opts) {
             catch (e) {
                 await ctrl.store.releasePreinvoke(decisionId, attemptId).catch(() => { });
                 console.error(`[decidio] ${decisionId}: could not record the invocation boundary (${e?.message ?? e}) — refusing to run the action rather than run it unrecorded.`);
-                const head = await ctrl.store.getExecution(decisionId).catch(() => undefined);
-                if (head?.state === "discarded")
-                    return finish({ status: "already_resolved", decisionId, action: pending.action, reason: `this decision was DENIED (${head.verdict ?? "rejected"}) while this signal was about to invoke; that answer is final and nothing ran` });
-                if (head?.state === "executed_unreported" || head?.state === "reported")
-                    return finish({ status: "already_resolved", decisionId, action: pending.action, reason: `this decision already ran (durable state ${head.state}); this signal lost the race to it and did nothing` });
-                if (head?.state === "invoking" || head?.state === "indeterminate")
-                    return finish({ status: "lost_race", decisionId, action: pending.action, reason: `another attempt crossed the invocation boundary first (durable state ${head.state}); this signal did nothing - the winner reports, or reconcile() settles it` });
+                const mapped = outcomeFromHead(await ctrl.store.getExecution(decisionId), decisionId, pending.action);
+                if (mapped)
+                    return finish(mapped);
                 return finish({ status: "lost_race", decisionId, action: pending.action, reason: `could not durably record the invocation boundary (${e?.message ?? e}); nothing ran, the entry stays parked, and a later signal may retry` });
             }
             let result;
@@ -1115,7 +1124,7 @@ export function createDecidioResume(opts) {
                     }
                     catch (e) {
                         res.statusCode = 500;
-                        res.end(JSON.stringify({ error: e?.message ?? "resume failed" }));
+                        res.end(JSON.stringify({ error: e instanceof DecidioStateCorruptError ? "DecidioStateCorruptError" : "resume failed", message: e?.message ?? String(e) }));
                     }
                 });
             };
@@ -1138,7 +1147,7 @@ export function createDecidioResume(opts) {
                     return new Response(JSON.stringify(webhookBody(outcome)), { status: 200, headers: { "content-type": "application/json" } });
                 }
                 catch (e) {
-                    return new Response(JSON.stringify({ error: e?.message ?? "resume failed" }), { status: 500 });
+                    return new Response(JSON.stringify({ error: e instanceof DecidioStateCorruptError ? "DecidioStateCorruptError" : "resume failed", message: e?.message ?? String(e) }), { status: 500 });
                 }
             };
         },
@@ -1311,12 +1320,23 @@ export function createDecidioResume(opts) {
             return items;
         },
         worker(workerOpts) {
+            const corruptWarned = new Set();
+            let listWarned = false;
             const interval = workerOpts?.intervalMs ?? 2_500;
             const deadline = workerOpts?.timeoutMs ? Date.now() + workerOpts.timeoutMs : Infinity;
             let stopped = false;
             (async () => {
                 while (!stopped) {
-                    const pendings = await ctrl.store.list().catch(() => []);
+                    let pendings = [];
+                    try {
+                        pendings = await ctrl.store.list();
+                    }
+                    catch (e) {
+                        if (!listWarned) {
+                            listWarned = true;
+                            console.error(`[decidio] the durable store could not be listed (${e?.message ?? e}) — this worker resumes nothing until it can be read again.`);
+                        }
+                    }
                     for (const p of pendings) {
                         let st;
                         try {
@@ -1331,7 +1351,20 @@ export function createDecidioResume(opts) {
                         if (!verdict)
                             continue;
                         try {
-                            const outcome = await ctrl.resolve({ decisionId: p.decisionId, verdict, reason: st.reason });
+                            let outcome;
+                            try {
+                                outcome = await ctrl.resolve({ decisionId: p.decisionId, verdict, reason: st.reason });
+                            }
+                            catch (e) {
+                                if (e instanceof DecidioStateCorruptError) {
+                                    if (!corruptWarned.has(p.decisionId)) {
+                                        corruptWarned.add(p.decisionId);
+                                        console.error(`[decidio] LEDGER CORRUPT for ${p.decisionId}: ${e.message} — this worker will not touch it until the ledger is repaired; the other parked actions still resume.`);
+                                    }
+                                    continue;
+                                }
+                                throw e;
+                            }
                             if (outcome.status === "executed" && outcome.reportRecorded)
                                 console.error(`[decidio] resumed ${p.decisionId}: approved → "${p.action}" executed; evidence recorded as ${outcome.evidenceTier}${outcome.executionConfirmed ? "" : " (execution NOT confirmed — see the warning above)"}.`);
                             else if (outcome.status === "executed")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decidio/sdk",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "One-line approval gate for AI-agent actions. Wrap a risky tool call with guard.protect(); Decidio's policy engine decides proceed | route | block, a human approves routed actions, and every outcome is sealed as a verifiable Authority Receipt.",
   "license": "Apache-2.0",
   "type": "module",
@@ -75,6 +75,7 @@
     "@langchain/langgraph": "^1.4.13",
     "@temporalio/workflow": "^1.23.0",
     "@types/node": "^22.20.1",
+    "tsx": "^4.23.13",
     "typescript": "^5.9.3"
   },
   "scripts": {
@@ -83,7 +84,7 @@
     "prepublishOnly": "npm run typecheck && npm run build && node ../publish-boundary/check.mjs --only @decidio/sdk"
   },
   "dependencies": {
-    "@decidio/verify": "0.4.1"
+    "@decidio/verify": "0.4.3"
   },
   "author": "OmniTwin Technologies Inc.",
   "bugs": {