@wowyuarm/dsh-agent-team 0.1.9 → 0.1.11

package/packages/agent-team/lib/invariant.js

@@ -5,16 +5,50 @@ export const name = 'agent-team-invariant';
 /** Services required before the companion can validate Team state. */
 export const inject = ['invariants'];
 const install = Object.assign(async (ctx, fail) => {
-    const validateLedger = () => {
+    const divergence = (error) => `durable ledger and Team projection diverged: ${String(error)}`;
+    // Mounting stays synchronous: a durable ledger that cannot be re-derived
+    // must fail startup instead of racing the first commit. The mount adopts
+    // the record-level replay the constructor already ran, once and only while
+    // nothing has committed since; every later validation, and every
+    // commit-driven one below, replays the whole durable table.
+    try {
+        ctx.agentTeam.validateLedgerAtMount();
+    }
+    catch (error) {
+        fail(divergence(error));
+    }
+    // The commit path cannot pay a full replay before its Remote response
+    // returns, and opening a Thread commits. The replay stays the same full one
+    // over the durable table, but commits coalesce into a single run in the
+    // check phase, after the I/O turn carrying the response. A divergence stays
+    // loud: it is logged where it is detected, and every later commit re-raises
+    // it on a caller-owned frame until a replay comes back clean.
+    let latched;
+    let pending;
+    const check = () => {
+        pending = undefined;
         try {
             ctx.agentTeam.validateLedger();
+            latched = undefined;
         }
         catch (error) {
-            fail(`durable ledger and Team projection diverged: ${String(error)}`);
+            latched = divergence(error);
+            ctx.logger.error(`agent-team: ${latched}`);
         }
     };
-    validateLedger();
-    ctx.on('agent-team/committed', validateLedger);
+    ctx.effect(() => () => {
+        if (pending !== undefined)
+            clearImmediate(pending);
+        pending = undefined;
+    }, 'agent-team.invariant.pending-validation');
+    ctx.on('agent-team/committed', () => {
+        // Scheduled before the latch re-raises: a replay that comes back clean is
+        // what releases it.
+        if (pending === undefined)
+            pending = setImmediate(check);
+        if (latched !== undefined)
+            fail(latched);
+    });
 }, { inject: ['agentTeam'] });
 /**
  * Register the Agent Team ledger invariant.