@lmzhen/dsh-evolution-state-json 0.3.57 → 0.3.59

package/lib/index.js

@@ -119,7 +119,27 @@ function gateScan(file, parsed) {
 * @internal Exported only for this package's own tests — not public API
 * surface (audit v10 S-03); other packages must go through the provider seam.
 */
-async function jsonTransact(io, root, file, task) {
+const recordGateWarned = /* @__PURE__ */ new Set();
+const corruptWritten = /* @__PURE__ */ new Map();
+const corruptWriteWarned = /* @__PURE__ */ new Set();
+function reportGateViolation(ctx, file, failing) {
+	if (recordGateWarned.has(file)) return;
+	recordGateWarned.add(file);
+	ctx.logger.warn(`evolution-state-json: ${failing.length} record(s) in "${file}" failed the record schema gate and were quarantined to "${file}.corrupt": ${failing.map(([id]) => id).join(", ")}`);
+}
+async function ensureCorruptCopy(ctx, io, root, file, bad) {
+	const corruptPath = `${join(root, file)}.corrupt`;
+	const corruptKey = JSON.stringify(Object.keys(bad).sort());
+	if (corruptWritten.get(file) === corruptKey && await io().exists(corruptPath)) return;
+	if (await io().writeText(corruptPath, JSON.stringify(bad, null, 2)).then(() => true).catch(() => false)) {
+		corruptWritten.set(file, corruptKey);
+		corruptWriteWarned.delete(file);
+	} else if (!corruptWriteWarned.has(file)) {
+		corruptWriteWarned.add(file);
+		ctx.logger.warn(`evolution-state-json: could not write quarantine copy "${corruptPath}" for ${Object.keys(bad).length} failed record(s) — the main file keeps them; the copy is retried on the next access`);
+	}
+}
+async function jsonTransact(ctx, io, root, file, task) {
 	await transactIo(io(), join(root, file), async (current) => {
 		let parsed = null;
 		if (current !== null) {
@@ -137,7 +157,8 @@ async function jsonTransact(io, root, file, task) {
 				const good = {};
 				for (const [id, record] of Object.entries(parsed)) if (failing.some(([failedId]) => failedId === id)) bad[id] = record;
 				else good[id] = record;
-				await io().writeText(`${join(root, file)}.corrupt`, JSON.stringify(bad, null, 2)).catch(() => {});
+				reportGateViolation(ctx, file, failing);
+				await ensureCorruptCopy(ctx, io, root, file, bad);
 				parsed = good;
 			}
 		}
@@ -151,8 +172,6 @@ function apply(ctx, rawConfig) {
 	if (rawConfig.root !== void 0 && rawConfig.root.trim() !== "" && !isAbsolute(rawConfig.root)) ctx.logger.warn(`evolution-state-json: config.root "${rawConfig.root}" is a relative path and resolves against the process CWD ("${root}") — pass an absolute path to make the store location launch-independent`);
 	const io = () => ctx.evolutionIo.provider();
 	const pathOf = (file) => join(root, file);
-	const recordGateWarned = /* @__PURE__ */ new Set();
-	const corruptWritten = /* @__PURE__ */ new Map();
 	async function readJson(file) {
 		const raw = await io().readText(pathOf(file));
 		if (raw === null) return null;
@@ -171,15 +190,8 @@ function apply(ctx, rawConfig) {
 			const good = {};
 			for (const [id, record] of Object.entries(parsed)) if (failing.some(([failedId]) => failedId === id)) bad[id] = record;
 			else good[id] = record;
-			const corruptKey = JSON.stringify(failing.map(([id]) => id).sort());
-			if (corruptWritten.get(file) !== corruptKey) {
-				await io().writeText(`${pathOf(file)}.corrupt`, JSON.stringify(bad, null, 2)).catch(() => {});
-				corruptWritten.set(file, corruptKey);
-			}
-			if (!recordGateWarned.has(file)) {
-				recordGateWarned.add(file);
-				ctx.logger.warn(`evolution-state-json: ${failing.length} record(s) in "${file}" failed the record schema gate and were quarantined to "${file}.corrupt": ${failing.map(([id]) => id).join(", ")}`);
-			}
+			reportGateViolation(ctx, file, failing);
+			await ensureCorruptCopy(ctx, io, root, file, bad);
 			return good;
 		}
 		return parsed;
@@ -215,7 +227,7 @@ function apply(ctx, rawConfig) {
 		if (legacyMigrated) return {};
 		try {
 			const retired = filterLegacy(legacy, current, await readArchivedIds());
-			await jsonTransact(io, root, PENDING_STATE_FILE, (fresh) => ({
+			await jsonTransact(ctx, io, root, PENDING_STATE_FILE, (fresh) => ({
 				...retired,
 				...fresh ?? {}
 			}));
@@ -326,7 +338,7 @@ function apply(ctx, rawConfig) {
 		},
 		async saveReviewState(sessionId, record) {
 			await mutate(async () => {
-				await jsonTransact(io, root, REVIEW_STATE_FILE, (current) => ({
+				await jsonTransact(ctx, io, root, REVIEW_STATE_FILE, (current) => ({
 					...current ?? {},
 					[sessionId]: record
 				}));
@@ -339,7 +351,7 @@ function apply(ctx, rawConfig) {
 		},
 		async saveCuratorState(record) {
 			await mutate(async () => {
-				await jsonTransact(io, root, CURATOR_STATE_FILE, (current) => ({
+				await jsonTransact(ctx, io, root, CURATOR_STATE_FILE, (current) => ({
 					...current ?? {},
 					[CURATOR_STATE_KEY]: record
 				}));
@@ -347,7 +359,7 @@ function apply(ctx, rawConfig) {
 		},
 		async transactCuratorState(task) {
 			await mutate(async () => {
-				await jsonTransact(io, root, CURATOR_STATE_FILE, (current) => {
+				await jsonTransact(ctx, io, root, CURATOR_STATE_FILE, (current) => {
 					const next = task(current?.[CURATOR_STATE_KEY] ?? null);
 					if (next === null) return current;
 					return {
@@ -365,7 +377,7 @@ function apply(ctx, rawConfig) {
 		},
 		async savePending(record) {
 			await mutate(async () => {
-				await jsonTransact(io, root, PENDING_STATE_FILE, async (current) => {
+				await jsonTransact(ctx, io, root, PENDING_STATE_FILE, async (current) => {
 					return {
 						...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}),
 						[record.id]: record
@@ -376,7 +388,7 @@ function apply(ctx, rawConfig) {
 		async claimPending(id, claimId) {
 			return await mutate(async () => {
 				const slot = { claimed: null };
-				await jsonTransact(io, root, PENDING_STATE_FILE, async (current) => {
+				await jsonTransact(ctx, io, root, PENDING_STATE_FILE, async (current) => {
 					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}) };
 					const record = map[id] ?? null;
 					if (record === null || !canClaimPending(record.status)) return map;
@@ -395,7 +407,7 @@ function apply(ctx, rawConfig) {
 		},
 		async releasePendingClaim(id, claimId) {
 			await mutate(async () => {
-				await jsonTransact(io, root, PENDING_STATE_FILE, async (current) => {
+				await jsonTransact(ctx, io, root, PENDING_STATE_FILE, async (current) => {
 					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}) };
 					const record = map[id];
 					if (!record || record.claimedBy !== claimId) return map;
@@ -414,7 +426,7 @@ function apply(ctx, rawConfig) {
 					applied: false
 				};
 				let evicted = [];
-				await jsonTransact(io, root, PENDING_STATE_FILE, async (current) => {
+				await jsonTransact(ctx, io, root, PENDING_STATE_FILE, async (current) => {
 					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}) };
 					const record = map[id] ?? null;
 					if (record === null || !canResolvePending(record.status)) {

package/lib/types/index.d.ts

@@ -14,19 +14,6 @@ export interface Config {
     root?: string;
 }
 export declare const Config: z<Config>;
-/**
- * Cross-process JSON-file RMW (v3-audit M-8): every read-modify-write state
- * mutation runs inside the IO backend's transact lock (via transactIo) so a
- * second process sharing DSH_HOME cannot interleave its claim/resolve.
- * `task` returns the next value; null = ENSURE-ABSENT (the file is deleted
- * when it exists — the parity of the transact seam, V6-32). For a record-map
- * file the return must be null or a plain object map of records, and an
- * array/scalar would be persisted as a corrupt map — so it fails loud before
- * any write (0.3.28, V4-08). The legacy `pending.json` merge stays inside the
- * task via `readJson` where relevant.
- * @internal Exported only for this package's own tests — not public API
- * surface (audit v10 S-03); other packages must go through the provider seam.
- */
-export declare function jsonTransact<T>(io: () => EvolutionIoLike, root: string, file: string, task: (current: T | null) => T | null | Promise<T | null>): Promise<void>;
+export declare function jsonTransact<T>(ctx: Context, io: () => EvolutionIoLike, root: string, file: string, task: (current: T | null) => T | null | Promise<T | null>): Promise<void>;
 export declare function apply(ctx: Context, rawConfig: Config): void;
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-state-json",
   "description": "JSON-file evolution state provider over the IO seam (community build)",
-  "version": "0.3.57",
+  "version": "0.3.59",
   "publishConfig": {
     "access": "public"
   },
@@ -31,18 +31,18 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.3.57"
+    "@lmzhen/dsh-evolution-core": "^0.3.59"
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-io": "^0.3.57",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.57"
+    "@lmzhen/dsh-evolution-io": "^0.3.59",
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.59"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-invariants": "^0.1.1-rc.2",
-    "@lmzhen/dsh-evolution-io": "^0.3.57",
-    "@lmzhen/dsh-evolution-state-storage": "^0.3.57",
-    "@lmzhen/dsh-evolution-io-node": "^0.3.57"
+    "@lmzhen/dsh-evolution-io": "^0.3.59",
+    "@lmzhen/dsh-evolution-state-storage": "^0.3.59",
+    "@lmzhen/dsh-evolution-io-node": "^0.3.59"
   }
 }