@lmzhen/dsh-evolution-state-json 0.4.0 → 0.4.1

package/lib/index.js

@@ -274,6 +274,36 @@ function apply(ctx, rawConfig = {}) {
 		if (file === PENDING_STATE_FILE) gateDroppedCurrent.clear();
 		return parsed;
 	}
+	/** A5 (audit P2-9): the LEGACY pending sidecar is read LENIENTLY — the
+	* deliberate opposite of the live state file's fail-loud posture. This
+	* file's whole purpose is to be retired, but the retirement merge reads
+	* it first, so one truncated pre-migration `pending.json` used to make
+	* EVERY pending read and mutation throw `EvolutionStateCorruptFile`
+	* forever (a permanent operator outage no warning can repair). A
+	* QUARANTINE-CLASS failure (unreadable/corrupt content) is renamed aside
+	* so every later load sees a clean absence; any OTHER failure (EACCES,
+	* EIO — a permission-locked but possibly VALID file) is left in place and
+	* only skips this read, so a transient hold never exiles real records.
+	* Either way the view continues current-only with one warn per process.
+	* Note the moved-aside copy is NOT auto-swept (the stale-copy sweep only
+	* inspects entries prefixed like the file being written, and nothing
+	* writes a `pending.json` prefix anymore) — it persists until an operator
+	* deletes it after rescue, at most one per corruption episode. */
+	let legacyQuarantineWarned = false;
+	async function readLegacyPending() {
+		try {
+			return await readJson(PENDING_LEGACY_FILE);
+		} catch (error) {
+			if (error instanceof Error && error.name === QUARANTINE_ERROR_NAME) try {
+				await io().rename(pathOf(PENDING_LEGACY_FILE), `${pathOf(PENDING_LEGACY_FILE)}.corrupt.${Date.now()}`);
+			} catch {}
+			if (!legacyQuarantineWarned) {
+				legacyQuarantineWarned = true;
+				ctx.logger.warn(`evolution-state-json: legacy ${PENDING_LEGACY_FILE} is unreadable and was set aside (${error instanceof Error ? error.message : String(error)}); continuing WITHOUT legacy records`);
+			}
+			return null;
+		}
+	}
 	const mutate = makeSerialQueue();
 	let legacyMigrated = false;
 	async function readArchivedIds() {
@@ -356,7 +386,7 @@ function apply(ctx, rawConfig = {}) {
 		}
 	}
 	async function loadPendingMap() {
-		const [current, legacy] = await Promise.all([readJson(PENDING_STATE_FILE), readJson(PENDING_LEGACY_FILE)]);
+		const [current, legacy] = await Promise.all([readJson(PENDING_STATE_FILE), readLegacyPending()]);
 		const keyed = keyPendingById(current);
 		if (legacy !== null) return {
 			...await retireLegacyOnce(legacy),
@@ -564,7 +594,7 @@ function apply(ctx, rawConfig = {}) {
 				const guard = transactTaskGuard(`pending record "${record.id}" (${PENDING_STATE_FILE})`);
 				await pendingTransact(guard.wrap(async (current) => {
 					const map = {
-						...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}),
+						...await mergedWithFilteredLegacy(legacyMigrated ? null : await readLegacyPending(), current ?? {}),
 						[record.id]: record
 					};
 					warnPendingGrowth(map, "save");
@@ -577,7 +607,7 @@ function apply(ctx, rawConfig = {}) {
 			return await mutate(async () => {
 				const slot = { claimed: null };
 				await pendingTransact(async (current) => {
-					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}) };
+					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readLegacyPending(), current ?? {}) };
 					const record = map[id] ?? null;
 					if (record === null || !canClaimPending(record.status)) return map;
 					const now = Date.now();
@@ -597,7 +627,7 @@ function apply(ctx, rawConfig = {}) {
 		async releasePendingClaim(id, claimId) {
 			await mutate(async () => {
 				await pendingTransact(async (current) => {
-					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}) };
+					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readLegacyPending(), current ?? {}) };
 					const record = map[id];
 					if (!record || record.claimedBy !== claimId) return map;
 					if (record.status !== "pending" && record.status !== "executing") return map;
@@ -615,7 +645,7 @@ function apply(ctx, rawConfig = {}) {
 					applied: false
 				};
 				await pendingTransact(async (current) => {
-					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readJson(PENDING_LEGACY_FILE), current ?? {}) };
+					const map = { ...await mergedWithFilteredLegacy(legacyMigrated ? null : await readLegacyPending(), current ?? {}) };
 					const record = map[id] ?? null;
 					if (record === null || !canResolvePending(record.status)) {
 						result = {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-state-json",
   "description": "JSON-file evolution state provider over the IO seam (community build)",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "publishConfig": {
     "access": "public"
   },
@@ -27,16 +27,16 @@
   "license": "MIT",
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@lmzhen/dsh-evolution-core": "^0.4.0"
+    "@lmzhen/dsh-evolution-core": "^0.4.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@lmzhen/dsh-evolution-io": "^0.4.0",
-    "@lmzhen/dsh-evolution-state-storage": "^0.4.0"
+    "@lmzhen/dsh-evolution-io": "^0.4.1",
+    "@lmzhen/dsh-evolution-state-storage": "^0.4.1"
   },
   "devDependencies": {
-    "@lmzhen/dsh-evolution-io": "^0.4.0",
-    "@lmzhen/dsh-evolution-state-storage": "^0.4.0",
-    "@lmzhen/dsh-evolution-io-node": "^0.4.0"
+    "@lmzhen/dsh-evolution-io": "^0.4.1",
+    "@lmzhen/dsh-evolution-state-storage": "^0.4.1",
+    "@lmzhen/dsh-evolution-io-node": "^0.4.1"
   }
 }