@lmzhen/dsh-evolution-approval 0.3.79 → 0.3.80

package/lib/index.js

@@ -134,6 +134,42 @@ var EvolutionApproval = class extends Service {
 	async approve(id) {
 		return await this.dedupe(`approve:${id}`, () => this.doApprove(id));
 	}
+	/** S2-P2-22 (0.3.80): return an ORPHANED executing record to the pending
+	* window. "Orphaned" = status `executing` with no approve running in THIS
+	* process (the family single-instance claim rules out any other live
+	* process, so a claim that is not in this service's in-flight dedupe map
+	* belongs to a dead one). The stored `claimedBy` rides along as the seam's
+	* release credential, so no state-seam expansion is needed. The operator is
+	* expected to verify the effect first: re-approving replays the write
+	* deliberately (duplicates possible if the effect already landed);
+	* rejecting closes the record. */
+	async release(id) {
+		const executing = (await this.state().listPending("executing")).find((item) => item.id === id);
+		if (!executing) {
+			if ((await this.state().listPending("pending")).find((item) => item.id === id)) return {
+				ok: false,
+				message: `Pending write "${id}" is already in the pending window — approve or reject it.`
+			};
+			return {
+				ok: false,
+				message: `Pending write "${id}" is not in the executing window — nothing to release.`
+			};
+		}
+		if (this.inFlight.has(`approve:${id}`) || this.inFlight.has(`reject:${id}`)) return {
+			ok: false,
+			message: `Pending write "${id}" has an approve/reject RUNNING in this process — do not release it. Verify the effect instead; a completed approve resolves its own record.`
+		};
+		const claimId = typeof executing.claimedBy === "string" ? executing.claimedBy : "";
+		if (claimId === "") return {
+			ok: false,
+			message: `Pending write "${id}" carries no claim to release (unexpected record shape) — reject it instead.`
+		};
+		await this.state().releasePendingClaim(id, claimId);
+		return {
+			ok: true,
+			message: `Released "${id}" back to the pending window. VERIFY the effect first: approve re-runs the write deliberately (duplicates possible if the effect already landed); reject closes the record.`
+		};
+	}
 	async reject(id) {
 		return await this.dedupe(`reject:${id}`, async () => {
 			const claimId = randomUUID();

package/lib/types/index.d.ts

@@ -95,6 +95,13 @@ export type ApprovalLike = {
         ok: boolean;
         message: string;
     }>;
+    /** S2-P2-22 (0.3.80): return an ORPHANED executing record (an approve that
+     * crashed mid-run) to the pending window, so it can be deliberately
+     * re-approved or rejected. Optional: only the real service implements it. */
+    release?(id: string): Promise<{
+        ok: boolean;
+        message: string;
+    }>;
 };
 /** The requesting session's effective policy (override ?? configured default);
  * undefined when the approval service is not mounted or no session is
@@ -156,6 +163,19 @@ export declare class EvolutionApproval extends Service {
         ok: boolean;
         message: string;
     }>;
+    /** S2-P2-22 (0.3.80): return an ORPHANED executing record to the pending
+     * window. "Orphaned" = status `executing` with no approve running in THIS
+     * process (the family single-instance claim rules out any other live
+     * process, so a claim that is not in this service's in-flight dedupe map
+     * belongs to a dead one). The stored `claimedBy` rides along as the seam's
+     * release credential, so no state-seam expansion is needed. The operator is
+     * expected to verify the effect first: re-approving replays the write
+     * deliberately (duplicates possible if the effect already landed);
+     * rejecting closes the record. */
+    release(id: string): Promise<{
+        ok: boolean;
+        message: string;
+    }>;
     reject(id: string): Promise<{
         ok: boolean;
         message: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-approval",
   "description": "Stage/pending approval service for Hermes-style self-evolution writes (community build)",
-  "version": "0.3.79",
+  "version": "0.3.80",
   "publishConfig": {
     "access": "public"
   },
@@ -30,11 +30,11 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.79",
-    "@lmzhen/dsh-evolution-state": "^0.3.79"
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.80",
+    "@lmzhen/dsh-evolution-state": "^0.3.80"
   },
   "devDependencies": {
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.79",
-    "@lmzhen/dsh-evolution-state": "^0.3.79"
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.80",
+    "@lmzhen/dsh-evolution-state": "^0.3.80"
   }
 }