@fabricorg/platform-host 7.1.0 → 7.1.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @fabricorg/platform-host
 
+## 7.1.1
+
+### Patch Changes
+
+- 91f7d7e: A repeated completion was judged identical by outcome alone, so a second `completed` callback carrying a different result was absorbed as a replay and its evidence discarded. A recorded completion now carries a canonical digest of provider, reference, outcome, result, error, and evidence, with observation time left out because a redelivery carries a new one. A repeat with the same digest is absorbed; the same outcome with a different digest is a contradiction and is handled as one: reconciliation, the first outcome kept, the second logged, `ExternalOperationContradicted` emitted.
+
 ## 7.1.0
 
 ### Minor Changes

package/README.md

@@ -265,7 +265,9 @@ await host.completeExternalInvocation(actionInvocationId, tenantId, spaceId, {
 ```
 
 Matching is by reference: a completion naming a reference the invocation is not waiting on is
-refused. A repeated identical completion is absorbed. A contradictory one moves the invocation to
+refused. A repeated identical completion is absorbed, identity being a digest of provider,
+reference, outcome, result, error, and evidence. A contradictory one, a flipped outcome or the same
+outcome with different evidence, moves the invocation to
 `reconciliation_required`, keeps the first outcome on record, logs the second, and emits
 `ExternalOperationContradicted`. Under an atomic store the read and write happen under one lock. The
 callback's result is validated against the action's result schema and stripped of private fields.

package/dist/index.cjs

@@ -1352,11 +1352,12 @@ function createGovernedActionHost(options) {
       if (completion.provider !== void 0 && recorded.provider !== void 0 && completion.provider !== recorded.provider) {
         throw new ExternalCompletionError("provider_mismatch", `ActionInvocation ${actionInvocationId} was completed by "${recorded.provider}", not "${completion.provider}".`);
       }
-      if (recorded.outcome === completion.outcome) {
+      const incomingDigest = completionDigest(completion, recorded.provider ?? completion.provider);
+      if (recorded.digest === incomingDigest) {
         return withConsistency(actionResult(invocation), invocation.actionId);
       }
-      const message = `External operation "${completion.externalReference}" reported ${completion.outcome} after reporting ${recorded.outcome}.`;
-      await recordCompletionReconciliation(invocation, { ...completion, kind: `contradicted:${completion.outcome}` }, message);
+      const message = recorded.outcome === completion.outcome ? `External operation "${completion.externalReference}" reported ${completion.outcome} again with different evidence.` : `External operation "${completion.externalReference}" reported ${completion.outcome} after reporting ${recorded.outcome}.`;
+      await recordCompletionReconciliation(invocation, { ...completion, kind: `contradicted:${incomingDigest.slice(0, 16)}` }, message);
       await appendEvent(invocation, {
         eventType: "ExternalOperationContradicted",
         subjectType: "AdapterInvocation",
@@ -1386,7 +1387,8 @@ function createGovernedActionHost(options) {
       ...completion,
       provider: completion.provider ?? pending.provider,
       observedAt: completion.observedAt instanceof Date ? completion.observedAt.toISOString() : completion.observedAt,
-      recordedAt
+      recordedAt,
+      digest: completionDigest(completion, completion.provider ?? pending.provider)
     };
     const subject = { subjectType: "AdapterInvocation", subjectId: pending.adapterInvocationId };
     const settles = invocation.status === "running" && pending.parkedAt !== void 0 || invocation.status === "reconciliation_required" && invocation.error?.includes("did not complete by") === true;
@@ -1425,6 +1427,16 @@ function createGovernedActionHost(options) {
     if (settles) emitInvocationStatusTelemetry(invocation, "failed", options.telemetry, now(), invocation.status);
     return withConsistency(actionResult({ ...invocation, ...patch }), invocation.actionId);
   }
+  function completionDigest(completion, provider) {
+    return crypto.createHash("sha256").update(canonicalJson({
+      provider: provider ?? null,
+      externalReference: completion.externalReference,
+      outcome: completion.outcome,
+      result: completion.result ?? null,
+      error: completion.error ?? null,
+      evidenceReferences: completion.evidenceReferences ?? null
+    })).digest("hex");
+  }
   async function recordCompletionReconciliation(invocation, completion, reason) {
     const governanceStore = asGovernanceStore(options.store);
     if (!governanceStore) throw new Error("External completion reconciliation requires a governance-capable store.");