@lmzhen/dsh-evolution-approval 0.3.22 → 0.3.24

package/README.md

@@ -35,3 +35,5 @@ Independent of request-prefix construction. This package does not alter the asse
 
 
 - `approve()` deduplicates concurrent approvals inside one process, and state providers resolve the pending record atomically. However, the replay runner executes **before** that atomic resolution, so two OS processes approving the same id can each perform the write once while only one process wins the audit transition. Run approvals from a single writer process, or make replay runners idempotent when multi-process approval is required.
+- **Concurrent approve + reject on the same id (F-204).** Inside one process the dedupe keys are `approve:<id>` / `reject:<id>`, so the two paths are not serialized against each other. When an approve runner is slow, a reject resolves the still-executing record to `rejected` **without holding a claim**; the runner may then complete and the write can still land while the audit history reads `rejected` — the write effect, not the audit verdict, is what actually persists (`写效果以实际为准`). `reject` on an executing record reports this and asks you to verify the write state manually. Only reject a write after confirming no approve is in flight, or verify the write effect manually afterwards.
+- **No staged-content freshness re-validation (F-328).** The staged record stores the `args` snapshot captured at request time and replays exactly those args, but does not record a content hash, so `approve()` does **not** re-check whether the on-disk skill/memory the write targets changed since staging. The write is applied as staged regardless. The pending surface (`/evolution pending --detail`) exposes the staged `args` so you can review what will actually be replayed before approving; there is no automatic drift warning if the target changed in the meantime.

package/lib/index.js

@@ -15,6 +15,15 @@ import z from "@deepseek-ai/schemastery";
 *
 * @module @lmzhen/dsh-evolution-approval
 */
+/** The requesting session's effective policy (override ?? configured default);
+* undefined when the approval service is not mounted or no session is
+* available — callers keep their previous behavior. Single source (G4.8,
+* F-341): the model tools each copied this helper; it lives here now. */
+function effectiveSessionPolicy(ctx, session) {
+	const approval = ctx.get("approval");
+	if (!approval || session === void 0) return void 0;
+	return approval.overrideOf(session) ?? approval.config.policy ?? "ask";
+}
 var EvolutionApproval = class extends Service {
 	static inject = ["evolutionState"];
 	static Config = z.object({
@@ -120,7 +129,7 @@ var EvolutionApproval = class extends Service {
 			if (!await this.state().claimPending(id, claimId)) {
 				if ((await this.state().listPending("executing")).find((item) => item.id === id)) return (await this.state().tryResolvePending(id, "rejected")).applied ? {
 					ok: true,
-					message: `Rejected executing write "${id}" (crashed approve cleaned up; verify the write state manually).`
+					message: `Rejected executing write "${id}" (no claim held — this may race an in-flight approve runner; if the write already landed its effect stands as-is. Verify the write state manually).`
 				} : {
 					ok: false,
 					message: `Pending write "${id}" could not be rejected: it resolved concurrently.`
@@ -235,4 +244,4 @@ function normalizeSummary(input) {
 	return trimmed;
 }
 //#endregion
-export { EvolutionApproval, EvolutionApproval as default };
+export { EvolutionApproval, EvolutionApproval as default, effectiveSessionPolicy };

package/lib/types/index.d.ts

@@ -69,6 +69,20 @@ export type ApprovalLike = {
         message: string;
     }>;
 };
+/** 0.3.23 (G4.8): the ONE shape of the platform approval-policy probe that
+ * `effectiveSessionPolicy` reads. The model tools used to copy this view
+ * locally (F-341). */
+export interface ApprovalPolicyLike {
+    overrideOf(session: unknown): 'ask' | 'never' | undefined;
+    config: {
+        policy?: 'ask' | 'never';
+    };
+}
+/** The requesting session's effective policy (override ?? configured default);
+ * undefined when the approval service is not mounted or no session is
+ * available — callers keep their previous behavior. Single source (G4.8,
+ * F-341): the model tools each copied this helper; it lives here now. */
+export declare function effectiveSessionPolicy(ctx: Context, session: unknown): 'ask' | 'never' | undefined;
 declare module '@deepseek-ai/cordis' {
     interface Context {
         evolutionApproval: EvolutionApproval;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-approval",
   "description": "Stage/pending approval service for Hermes-style self-evolution writes (community build)",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "publishConfig": {
     "access": "public"
   },
@@ -35,15 +35,15 @@
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.22",
-    "@lmzhen/dsh-evolution-state": "^0.3.22"
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.24",
+    "@lmzhen/dsh-evolution-state": "^0.3.24"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.22",
-    "@lmzhen/dsh-evolution-state": "^0.3.22",
-    "@lmzhen/dsh-evolution-io": "^0.3.22",
-    "@lmzhen/dsh-evolution-io-node": "^0.3.22",
-    "@lmzhen/dsh-evolution-state-json": "^0.3.22"
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.24",
+    "@lmzhen/dsh-evolution-state": "^0.3.24",
+    "@lmzhen/dsh-evolution-io": "^0.3.24",
+    "@lmzhen/dsh-evolution-io-node": "^0.3.24",
+    "@lmzhen/dsh-evolution-state-json": "^0.3.24"
   }
 }