@lmzhen/dsh-evolution-state-domain 0.3.62 → 0.3.64

package/README.md

@@ -23,4 +23,5 @@ Independent of request-prefix construction. This package does not alter the asse
 
 
 - Requires the host-plane `storage-domain` facility. The bundle row stays dormant when it is absent.
+- P2-4 (v15): the live pending table is BOUNDED — resolved (approved/rejected) records are kept to the most recent `PENDING_RESOLVED_CAP` (200, seam constant in `evolution-state-storage`); the oldest by `resolvedAt` are deleted on resolve. The audit ARCHIVE sidecar that the json provider maintains beyond the cap is json-specific (the domain seam has no sidecar facility) — resolved records past the cap are gone, not archived.
 

package/lib/index.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { DomainError, defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
-import { CURATOR_STATE_KEY, CURATOR_STATE_TABLE, PENDING_TABLE, PROVIDER_DOMAIN, REVIEW_STATE_TABLE, canClaimPending, canResolvePending, releasedStatus } from "@lmzhen/dsh-evolution-state-storage";
+import { CURATOR_STATE_KEY, CURATOR_STATE_TABLE, PENDING_RESOLVED_CAP, PENDING_TABLE, PROVIDER_DOMAIN, REVIEW_STATE_TABLE, canClaimPending, canResolvePending, releasedStatus } from "@lmzhen/dsh-evolution-state-storage";
 //#region lib/types/index.js
 /**
 * storage-domain provider for evolution state.
@@ -116,16 +116,22 @@ function apply(ctx) {
 	const provider = {
 		name: PROVIDER_DOMAIN,
 		async loadReviewState(sessionId) {
-			return (await ensure()).table(REVIEW_STATE_TABLE).get(sessionId) ?? null;
+			const record = (await ensure()).table(REVIEW_STATE_TABLE).get(sessionId);
+			return record === void 0 ? null : structuredClone(record);
 		},
 		async saveReviewState(sessionId, record) {
-			await (await ensure()).table(REVIEW_STATE_TABLE).put(sessionId, record);
+			const parsed = reviewStateSchema.safeParse(record);
+			if (!parsed.success) throw new Error(`evolution-state-domain: refusing to persist an invalid review-state record: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`);
+			await (await ensure()).table(REVIEW_STATE_TABLE).put(sessionId, parsed.data);
 		},
 		async loadCuratorState() {
-			return (await ensure()).table(CURATOR_STATE_TABLE).get(CURATOR_STATE_KEY) ?? null;
+			const record = (await ensure()).table(CURATOR_STATE_TABLE).get(CURATOR_STATE_KEY);
+			return record === void 0 ? null : structuredClone(record);
 		},
 		async saveCuratorState(record) {
-			await (await ensure()).table(CURATOR_STATE_TABLE).put(CURATOR_STATE_KEY, record);
+			const parsed = curatorStateSchema.safeParse(record);
+			if (!parsed.success) throw new Error(`evolution-state-domain: refusing to persist an invalid curator-state record: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`);
+			await (await ensure()).table(CURATOR_STATE_TABLE).put(CURATOR_STATE_KEY, parsed.data);
 		},
 		async transactCuratorState(task) {
 			const table = (await ensure()).table(CURATOR_STATE_TABLE);
@@ -146,10 +152,16 @@ function apply(ctx) {
 			else await table.delete(CURATOR_STATE_KEY);
 		},
 		async listPending(status = "pending") {
-			return [...(await ensure()).table(PENDING_TABLE).entries()].map(([, value]) => value).filter((record) => record.status === status);
+			return [...(await ensure()).table(PENDING_TABLE).entries()].map(([, value]) => structuredClone(value)).filter((record) => record.status === status);
 		},
 		async savePending(record) {
-			await (await ensure()).table(PENDING_TABLE).put(record.id, record);
+			if (!Object.prototype.hasOwnProperty.call(record, "args")) throw new Error("evolution-state-domain: refusing to persist a pending record without the required \"args\" key");
+			const parsed = pendingSchema.safeParse({
+				...record,
+				args: record.args
+			});
+			if (!parsed.success) throw new Error(`evolution-state-domain: refusing to persist an invalid pending record: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`);
+			await (await ensure()).table(PENDING_TABLE).put(record.id, parsed.data);
 		},
 		async claimPending(id, claimId) {
 			const table = (await ensure()).table(PENDING_TABLE);
@@ -166,7 +178,7 @@ function apply(ctx) {
 					};
 					return slot.record;
 				});
-				return slot.record === null ? null : { ...slot.record };
+				return slot.record === null ? null : structuredClone(slot.record);
 			} catch (error) {
 				if (error instanceof DomainError && error.code === "missing-key") return null;
 				throw error;
@@ -195,7 +207,7 @@ function apply(ctx) {
 			const table = (await ensure()).table(PENDING_TABLE);
 			try {
 				const resolved = { record: null };
-				const rawRecord = await table.update(id, (current) => {
+				const record = await table.update(id, (current) => {
 					if (!canResolvePending(current.status)) return current;
 					if (expectedClaimId !== void 0 && current.claimedBy !== expectedClaimId) return current;
 					resolved.record = {
@@ -205,12 +217,32 @@ function apply(ctx) {
 					};
 					return resolved.record;
 				});
+				if (resolved.record !== null) {
+					const resolvedEntries = [...table.entries()].map(([key, record]) => ({
+						key,
+						record
+					})).filter((entry) => entry.record.status === "approved" || entry.record.status === "rejected");
+					const resolvedAtMs = (record) => {
+						const parsed = Date.parse(record.resolvedAt ?? "");
+						return Number.isNaN(parsed) ? Number.MAX_SAFE_INTEGER : parsed;
+					};
+					resolvedEntries.sort((a, b) => resolvedAtMs(a.record) - resolvedAtMs(b.record));
+					const evicted = resolvedEntries.slice(0, Math.max(0, resolvedEntries.length - PENDING_RESOLVED_CAP));
+					for (const entry of evicted) {
+						const current = table.get(entry.key);
+						if (!(current !== void 0 && (current.status === "approved" || current.status === "rejected") && current.resolvedAt === entry.record.resolvedAt)) continue;
+						await table.delete(entry.key).catch((error) => {
+							ctx.logger.warn(`evolution-state-domain: pending-cap eviction for "${entry.key}" failed (will retry on the next resolve): ${error instanceof Error ? error.message : String(error)}`);
+						});
+					}
+				}
+				const rawRecord = record;
 				if (resolved.record === null) return {
-					record: rawRecord === null ? null : { ...rawRecord },
+					record: rawRecord === null ? null : structuredClone(rawRecord),
 					applied: false
 				};
 				return {
-					record: { ...resolved.record },
+					record: structuredClone(resolved.record),
 					applied: true
 				};
 			} catch (error) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-state-domain",
   "description": "storage-domain provider for evolution state (community build)",
-  "version": "0.3.62",
+  "version": "0.3.64",
   "publishConfig": {
     "access": "public"
   },
@@ -36,13 +36,13 @@
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-storage-domain": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.62"
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.64"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-storage-domain": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-storage": "^0.1.1-rc.2",
     "@deepseek-ai/dsh-storage-json": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.62"
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.64"
   }
 }