@lmzhen/dsh-evolution-approval 0.1.0-rc.7 → 0.1.0-rc.71

package/lib/index.js

@@ -36,11 +36,22 @@ var EvolutionApproval = class extends Service {
 		return this.enabled;
 	}
 	registerRunner(kind, runner) {
+		if (this.runners.has(kind)) throw new Error(`approval runner for "${kind}" is already registered`);
 		this.runners.set(kind, runner);
 		return () => {
 			if (this.runners.get(kind) === runner) this.runners.delete(kind);
 		};
 	}
+	/**
+	* Whether a replay runner is registered for `kind` (rc.42 audit P1-9
+	* pre-check surface): callers that can execute a write directly (the review
+	* pipeline) use it to avoid staging a pending record that no runner could
+	* ever replay. `capability` records are answerable without a runner by
+	* design, so they are exempt from the staging pre-check.
+	*/
+	hasRunner(kind) {
+		return this.runners.has(kind);
+	}
 	/** Trusted plan-executor entry point: replay a write through the registered runner exactly once. */
 	async run(kind, args) {
 		const runner = this.runners.get(kind);
@@ -52,15 +63,21 @@ var EvolutionApproval = class extends Service {
 	}
 	/** Evaluate one mutation. Returns allow, or stores the write and returns staged. */
 	async request(input) {
+		const summary = normalizeSummary(input);
 		if (!this.enabled) return {
 			action: "allow",
 			message: "Approval disabled."
 		};
+		if (input.sessionPolicy === "never") return {
+			action: "allow",
+			message: "Session approval policy is \"never\"; write allowed without staging."
+		};
 		if (input.origin === "background_review" || this.stageForeground) {
+			if (input.kind !== "capability" && !this.runners.has(input.kind)) this.ctx.logger.warn(`evolution-approval: staging "${input.kind}" write with no replay runner registered - it will not be approvable`);
 			const record = {
 				id: randomUUID(),
 				kind: input.kind,
-				summary: input.summary,
+				summary,
 				args: input.args,
 				createdAt: (/* @__PURE__ */ new Date()).toISOString(),
 				status: "pending"
@@ -81,10 +98,15 @@ var EvolutionApproval = class extends Service {
 		return await this.state().listPending(status);
 	}
 	async approve(id) {
-		return await this.dedupe(id, () => this.doApprove(id));
+		return await this.dedupe(`approve:${id}`, () => this.doApprove(id));
 	}
 	async reject(id) {
-		return await this.dedupe(id, async () => {
+		return await this.dedupe(`reject:${id}`, async () => {
+			const claimId = randomUUID();
+			if (!await this.state().claimPending(id, claimId)) return {
+				ok: false,
+				message: `Pending write "${id}" is already being resolved by another writer.`
+			};
 			const resolution = await this.state().tryResolvePending(id, "rejected");
 			if (!resolution.applied || !resolution.record) return {
 				ok: false,
@@ -157,5 +179,15 @@ var EvolutionApproval = class extends Service {
 		};
 	}
 };
+/** Compact, batch-aware approval summary so pending lists stay scannable. */
+function normalizeSummary(input) {
+	const trimmed = input.summary.length > 120 ? `${input.summary.slice(0, 117)}...` : input.summary;
+	if (input.kind === "memory") {
+		const candidate = input.args;
+		if (Array.isArray(candidate?.operations) && candidate.operations.length > 1) return `memory ${candidate.target ?? "memory"} batch of ${candidate.operations.length} operations`;
+	}
+	if (input.kind === "skill" && /^skill delete /.test(trimmed)) return `${trimmed} (warning: archive)`;
+	return trimmed;
+}
 //#endregion
 export { EvolutionApproval, EvolutionApproval as default };

package/lib/types/index.d.ts

@@ -22,6 +22,15 @@ export interface ApprovalRequest {
     summary: string;
     args: unknown;
     origin: 'foreground' | 'background_review';
+    /**
+     * The requesting session's effective approval policy (platform vocabulary:
+     * 'ask' | 'never' — see `dsh-user-approval`). When 'never', the session has
+     * declared the deterministic unattended stance (CI, cron, automated runs),
+     * so the write is allowed instead of staging an unanswerable pending record
+     * (claw alignment: "skip approval for non-interactive contexts"). Absent
+     * (no session / no approval service) keeps the previous behavior.
+     */
+    sessionPolicy?: 'ask' | 'never';
 }
 export interface ApprovalDecision {
     action: 'allow' | 'staged';
@@ -51,6 +60,14 @@ export declare class EvolutionApproval extends Service {
     /** Fail-closed capability adapters need to distinguish "allowed" from "enabled". */
     get isEnabled(): boolean;
     registerRunner(kind: PendingKind, runner: WriteRunner): () => void;
+    /**
+     * Whether a replay runner is registered for `kind` (rc.42 audit P1-9
+     * pre-check surface): callers that can execute a write directly (the review
+     * pipeline) use it to avoid staging a pending record that no runner could
+     * ever replay. `capability` records are answerable without a runner by
+     * design, so they are exempt from the staging pre-check.
+     */
+    hasRunner(kind: PendingKind): boolean;
     /** Trusted plan-executor entry point: replay a write through the registered runner exactly once. */
     run(kind: PendingKind, args: unknown): Promise<{
         ok: boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-approval",
   "description": "Stage/pending approval service for Hermes-style self-evolution writes (community build)",
-  "version": "0.1.0-rc.7",
+  "version": "0.1.0-rc.71",
   "publishConfig": {
     "access": "public"
   },
@@ -35,17 +35,17 @@
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-state-storage": "^0.1.0-rc.7",
-    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.7"
+    "@lmzhen/dsh-evolution-state-storage": "^0.1.0-rc.71",
+    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.71"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
-    "@lmzhen/dsh-evolution-state-storage": "^0.1.0-rc.7",
-    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.7",
-    "@lmzhen/dsh-evolution-io": "^0.1.0-rc.7",
-    "@lmzhen/dsh-evolution-io-node": "^0.1.0-rc.7",
-    "@lmzhen/dsh-evolution-state-json": "^0.1.0-rc.7"
+    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
+    "@lmzhen/dsh-evolution-state-storage": "^0.1.0-rc.71",
+    "@lmzhen/dsh-evolution-state": "^0.1.0-rc.71",
+    "@lmzhen/dsh-evolution-io": "^0.1.0-rc.71",
+    "@lmzhen/dsh-evolution-io-node": "^0.1.0-rc.71",
+    "@lmzhen/dsh-evolution-state-json": "^0.1.0-rc.71"
   }
 }