@lmzhen/dsh-evolution-state-storage 0.31.1 → 0.32.1

package/lib/index.js

@@ -510,8 +510,8 @@ const MEDIUM_PROCESS_DECLARATION = [
 * @returns one message per claim the capability cannot back up; empty when every claim holds.
 */
 function processScopeViolations(io) {
-	const backed = typeof io?.transact === "function";
-	return MEDIUM_PROCESS_DECLARATION.filter((claim) => claim.scope === "cross-process" && !backed).map((claim) => claim.record + " claims cross-process (" + claim.because + ") but the mounted io exposes no transact lock");
+	const backed = io?.processScope === "cross-process";
+	return MEDIUM_PROCESS_DECLARATION.filter((claim) => claim.scope === "cross-process" && !backed).map((claim) => claim.record + " claims cross-process (" + claim.because + ") but the mounted io declares " + (io?.processScope ?? "no process scope"));
 }
 //#endregion
 //#region lib/types/index.js

package/lib/types/index.d.ts

@@ -7,7 +7,8 @@
  * @module @lmzhen/dsh-evolution-state-storage
  */
 import { Context, Service } from '@deepseek-ai/cordis';
-import type { PendingKind, PendingStatus } from './record-contract.ts';
+import type { EvolutionStateStorage, PendingRecord, PendingStatus } from '@lmzhen/dsh-evolution-contract';
+export type { CuratorStateRecord, EvolutionStateStorage, PendingKind, PendingRecord, PendingResolution, PendingStatus, ReviewStateRecord } from '@lmzhen/dsh-evolution-contract';
 export * from './constants.ts';
 export * from './record-contract.ts';
 export * from './conformance.ts';
@@ -74,83 +75,6 @@ export declare function selectSessionOverflow<T>(rows: readonly T[], options: {
  * the release credential; a record whose approve runs in this process is
  * refused) followed by a deliberate re-approve or reject.
  */
-export interface ReviewStateRecord {
-    turnsSinceMemory: number;
-    turnsSinceSkill: number;
-    lastTurn: number;
-}
-export interface CuratorStateRecord {
-    lastRunAt: number;
-    runCount: number;
-    lastSummary: string;
-    paused: boolean;
-}
-export interface PendingRecord {
-    id: string;
-    kind: PendingKind;
-    summary: string;
-    args: unknown;
-    createdAt: string;
-    status: PendingStatus;
-    resolvedAt?: string | undefined;
-    claimedBy?: string | undefined;
-    claimedAt?: string | undefined;
-    /** 0.3.17 (E-25): who staged this (foreground vs background review) and
-     * which session — kept so resolved audit history is attributable. */
-    origin?: string | undefined;
-    sessionId?: string | undefined;
-    /** W6/G4: the platform's admission decision that resolved this record (channel/principal/
-     * deploymentAllowsRemote). Optional and read-tolerant: records resolved before 0.2.1 (or by TTL
-     * expiry, which has no request) carry none — readers must never backfill it. Structural shape
-     * (not an import) keeps the storage domain independent of core's http-routes module. */
-    decidedBy?: {
-        readonly channel: 'connection.fetch' | 'command';
-        readonly principal: 'owner';
-        readonly deploymentAllowsRemote: boolean;
-    } | undefined;
-}
-export interface PendingResolution {
-    record: PendingRecord | null;
-    applied: boolean;
-}
-export interface EvolutionStateStorage {
-    readonly name: string;
-    loadReviewState(sessionId: string): Promise<ReviewStateRecord | null>;
-    saveReviewState(sessionId: string, record: ReviewStateRecord): Promise<void>;
-    loadCuratorState(): Promise<CuratorStateRecord | null>;
-    saveCuratorState(record: CuratorStateRecord): Promise<void>;
-    /**
-     * Atomically read-modify-write the curator-state record (S5.5): `task`
-     * receives the current record (or null when none exists) and returns the
-     * next record; returning null keeps the current record unchanged (the
-     * domain update primitive cannot delete, and json aligns with it). The
-     * whole read → transform → write runs inside one provider transact, so a
-     * setPaused racing the run-core bookkeeping write can never interleave a
-     * stale load with a newer save.
-     *
-     * V27 S4: the record handed to `task` belongs to the task — a provider must
-     * NEVER pass the object it stores (both current providers hand out a copy:
-     * json re-parses its medium, the domain clones its record). Mutating the
-     * argument is not a supported way to write: a task that does so and then lets
-     * validation refuse the result would otherwise leave a mutated object in the
-     * provider's in-memory store.
-     */
-    transactCuratorState(task: (current: CuratorStateRecord | null) => CuratorStateRecord | null): Promise<void>;
-    listPending(status?: PendingStatus): Promise<PendingRecord[]>;
-    savePending(record: PendingRecord): Promise<void>;
-    /**
-     * Atomically transition a pending record exactly once.
-     * @param expectedClaimId - when given, the transition applies only while the
-     * record is STILL claimed by this approver (P2-2, v14). A record resolved or
-     * re-claimed by another writer is left untouched and reported as
-     * `applied: false`, so an approve can never overwrite a concurrent reject.
-     */
-    tryResolvePending(id: string, status: Exclude<PendingStatus, 'pending'>, expectedClaimId?: string): Promise<PendingResolution>;
-    /** Atomically mark a pending record as claimed by one approver, or return null. */
-    claimPending(id: string, claimId: string): Promise<PendingRecord | null>;
-    /** Release this claim when the replay runner cannot complete. */
-    releasePendingClaim(id: string, claimId: string): Promise<void>;
-}
 declare module '@deepseek-ai/cordis' {
     interface Context {
         evolutionStateStorage: EvolutionStateStorageRegistry;

package/lib/types/medium-declaration.d.ts

@@ -28,8 +28,8 @@ export interface MediumProcessClaim {
 export declare const MEDIUM_PROCESS_DECLARATION: readonly MediumProcessClaim[];
 /** The capability the claims are checked against: the io the medium writes through. */
 export interface ProcessScopeProbe {
-    /** The IO backend transact entry point, when it has one. */
-    readonly transact?: unknown;
+    /** The scope the backend actually declares; `transact` alone is not proof. */
+    readonly processScope?: 'single-process' | 'cross-process' | undefined;
 }
 /**
  * Falsify the declaration against a capability reading.

package/lib/types/record-contract.d.ts

@@ -16,6 +16,8 @@
  * @module @lmzhen/dsh-evolution-state-storage/src/record-contract
  */
 import { CURATOR_STATE_TABLE, PENDING_TABLE, REVIEW_STATE_TABLE } from './constants.ts';
+import type { PendingKind, PendingStatus } from '@lmzhen/dsh-evolution-contract';
+export type { PendingKind, PendingStatus } from '@lmzhen/dsh-evolution-contract';
 /** The three seam tables a record can belong to. */
 export type SeamRecordTable = typeof REVIEW_STATE_TABLE | typeof CURATOR_STATE_TABLE | typeof PENDING_TABLE;
 /** Unknown fields survive a provider round-trip (json preserves by
@@ -35,15 +37,11 @@ export declare const UNKNOWN_FIELD_POLICY: "preserve";
  * S2.9/1-10: this array is the ONE source of the vocabulary — the types, the write gate below and
  * the domain provider's schema all derive from it. A second literal copy is the E-10 drift class
  * this module exists to end. */
-export declare const PENDING_KINDS: readonly ["memory", "skill", "capability"];
+export declare const PENDING_KINDS: readonly PendingKind[];
 /** 0.3.17 (S3.3, E-24): 'executing' = claimed, runner in flight — a fresh claim only takes
  * 'pending', and resolve accepts 'pending'/'executing', so a crash mid-approve can never
  * double-execute the runner. Same one-source rule as PENDING_KINDS. */
-export declare const PENDING_STATUSES: readonly ["pending", "executing", "approved", "rejected"];
-/** The legal kind of one pending record. */
-export type PendingKind = (typeof PENDING_KINDS)[number];
-/** The legal status of one pending record. */
-export type PendingStatus = (typeof PENDING_STATUSES)[number];
+export declare const PENDING_STATUSES: readonly PendingStatus[];
 /**
  * The write gate for one record. Both providers call this before persisting,
  * so a record the other provider would refuse can never land.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-state-storage",
   "description": "Provider registry seam for durable evolution state (community build)",
-  "version": "0.31.1",
+  "version": "0.32.1",
   "publishConfig": {
     "access": "public"
   },
@@ -25,7 +25,9 @@
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
-  "dependencies": {},
+  "dependencies": {
+    "@lmzhen/dsh-evolution-contract": "^0.32.1"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.5"
   },