@lmzhen/dsh-evolution-state-storage 0.3.61 → 0.3.63

package/lib/index.js

@@ -50,6 +50,13 @@ const canResolvePending = (status) => status === "pending" || status === "execut
 /** Releasing a claim on an executing record rolls it back to pending (a
 * runner FAILURE is retryable); other statuses pass through unchanged. */
 const releasedStatus = (status) => status === "executing" ? "pending" : status;
+/** P2-4 (v15): the live pending map/table is BOUNDED — both providers keep at
+* most this many resolved (approved/rejected) records, dropping the oldest by
+* `resolvedAt`. Single source (the v15 audit found the bound was json-only,
+* so domain deployments grew the table without bound). The audit ARCHIVE
+* sidecar that json maintains beyond the cap stays json-specific (domain has
+* no sidecar facility) — declared in both READMEs. */
+const PENDING_RESOLVED_CAP = 200;
 var EvolutionStateStorageRegistry = class extends Service {
 	providers = /* @__PURE__ */ new Map();
 	constructor(ctx) {
@@ -81,4 +88,4 @@ var EvolutionStateStorageRegistry = class extends Service {
 	}
 };
 //#endregion
-export { CURATOR_STATE_FILE, CURATOR_STATE_KEY, CURATOR_STATE_TABLE, EvolutionStateStorageRegistry, EvolutionStateStorageRegistry as default, PENDING_ARCHIVE_BAK_FILE, PENDING_ARCHIVE_FILE, PENDING_LEGACY_FILE, PENDING_STATE_FILE, PENDING_TABLE, PROVIDER_DOMAIN, PROVIDER_JSON, REVIEW_STATE_FILE, REVIEW_STATE_TABLE, canClaimPending, canResolvePending, releasedStatus };
+export { CURATOR_STATE_FILE, CURATOR_STATE_KEY, CURATOR_STATE_TABLE, EvolutionStateStorageRegistry, EvolutionStateStorageRegistry as default, PENDING_ARCHIVE_BAK_FILE, PENDING_ARCHIVE_FILE, PENDING_LEGACY_FILE, PENDING_RESOLVED_CAP, PENDING_STATE_FILE, PENDING_TABLE, PROVIDER_DOMAIN, PROVIDER_JSON, REVIEW_STATE_FILE, REVIEW_STATE_TABLE, canClaimPending, canResolvePending, releasedStatus };

package/lib/types/index.d.ts

@@ -24,6 +24,13 @@ export declare const canResolvePending: (status: PendingStatus) => boolean;
 /** Releasing a claim on an executing record rolls it back to pending (a
  * runner FAILURE is retryable); other statuses pass through unchanged. */
 export declare const releasedStatus: (status: PendingStatus) => PendingStatus;
+/** P2-4 (v15): the live pending map/table is BOUNDED — both providers keep at
+ * most this many resolved (approved/rejected) records, dropping the oldest by
+ * `resolvedAt`. Single source (the v15 audit found the bound was json-only,
+ * so domain deployments grew the table without bound). The audit ARCHIVE
+ * sidecar that json maintains beyond the cap stays json-specific (domain has
+ * no sidecar facility) — declared in both READMEs. */
+export declare const PENDING_RESOLVED_CAP = 200;
 /**
  * Claim lifecycle (S3.3): pending →(claim)→ executing →(resolve)→ approved/rejected.
  * release() rolls executing back to pending (failure path). A crash between
@@ -81,8 +88,14 @@ export interface EvolutionStateStorage {
     transactCuratorState(task: (current: CuratorStateRecord | null) => CuratorStateRecord | null): Promise<void>;
     listPending(status?: PendingStatus): Promise<PendingRecord[]>;
     savePending(record: PendingRecord): Promise<void>;
-    /** Atomically transition a pending record exactly once. */
-    tryResolvePending(id: string, status: Exclude<PendingStatus, 'pending'>): Promise<PendingResolution>;
+    /**
+     * Atomically transition a pending record exactly once.
+     * @param expectedClaimId - when given, the transition applies only while the
+     * record is STILL claimed by this approver (P2-2, v14). A record resolved or
+     * re-claimed by another writer is left untouched and reported as
+     * `applied: false`, so an approve can never overwrite a concurrent reject.
+     */
+    tryResolvePending(id: string, status: Exclude<PendingStatus, 'pending'>, expectedClaimId?: string): Promise<PendingResolution>;
     /** Atomically mark a pending record as claimed by one approver, or return null. */
     claimPending(id: string, claimId: string): Promise<PendingRecord | null>;
     /** Release this claim when the replay runner cannot complete. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-state-storage",
   "description": "Provider registry seam for durable evolution state (community build)",
-  "version": "0.3.61",
+  "version": "0.3.63",
   "publishConfig": {
     "access": "public"
   },