poe-code 12.0.8 → 12.0.10

package/README.md

@@ -323,6 +323,34 @@ Full browser SafeJS SDK/runtime support remains pending. Guest codec integration
 portable SDK declaration closure and shared host-call policy/replay metadata
 require separate integration; a browser filesystem build does not prove them.
 
+#### Host-operation recovery policy
+
+The Node SafeJS SDK selects recovery policy when a host call is issued:
+`declareHostOperation(function, policy)` takes precedence, otherwise the exact
+journaled module/operation pair registered with `registerPendingHostCallPolicy`
+supplies the default, otherwise the call is `re-issue`. Named registration is not
+limited to legacy snapshot reconciliation. Caller bindings use module ID
+`<bindings>`. Registration affects subsequent calls, not previously captured
+history; a changed policy on replay fails closed rather than downgrading a
+captured side effect.
+
+A restored invocation identity conflict rejects with the actual
+`HostCallResumabilityError` class and `action: "reset"`. Native engine errors
+retain their identity across synchronous and asynchronous host-error paths;
+guest catch/finally handlers cannot turn them into successful recovery. Names,
+action fields and copied prototypes do not grant engine-error identity. Ordinary
+guest/host errors and cancellation retain their separate conversion rules.
+
+Recorded outcomes are reused. A pending `read-side-effect` call requires a
+matching external reconciliation proof and is not blindly invoked again;
+`re-issue` permits another invocation. Neither registration nor checkpointing
+makes arbitrary external effects exactly-once. Shared function aliases retain
+their existing canonical journal identity, so declare the function itself when
+its aliases must share an effect policy. See the
+[host-policy contract](packages/safe-js/CHECKPOINT_REPLAY.md#host-operation-policy-selection)
+for registration lifetime, naming and reconciliation requirements. This changes
+no CLI flags and adds no browser SafeJS runtime support.
+
 ## Building from Source
 
 Run `npm run build` to compile the workspace and generate the published bundles.

package/dist/index.js

@@ -137803,6 +137803,9 @@ function registerPendingHostCallPolicy(registration) {
   MODULE_PENDING_HOST_CALL_POLICIES[moduleId] ??= /* @__PURE__ */ Object.create(null);
   MODULE_PENDING_HOST_CALL_POLICIES[moduleId][operation] = policy;
 }
+function readRegisteredPendingHostCallPolicy(moduleId, operation) {
+  return MODULE_PENDING_HOST_CALL_POLICIES[moduleId]?.[operation];
+}
 function pendingHostCallResumeIdentityMatches(expected, actual) {
   return actual.callId === expected.callId && actual.sourceHash === expected.sourceHash && actual.moduleId === expected.moduleId && actual.operation === expected.operation && actual.argumentDigest === expected.argumentDigest;
 }
@@ -138071,9 +138074,13 @@ var init_host_call = __esm({
     init_validation();
     init_policy();
     HostCallResumabilityError = class extends Error {
+      #nativeInstance = true;
       action;
       callId;
       lifecycle;
+      static [Symbol.hasInstance](value) {
+        return typeof value === "object" && value !== null && #nativeInstance in value && Function.prototype[Symbol.hasInstance].call(this, value);
+      }
       constructor(record2, action, message2) {
         super(message2);
         this.name = "HostCallResumabilityError";
@@ -138503,6 +138510,9 @@ function isCapturedException(value) {
   return typeof value === "object" && value !== null && capturedExceptionBrand in value;
 }
 function coerceThrownValue(reason, budget, stackFrames, span, sandbox = false) {
+  if (reason instanceof HostCallResumabilityError) {
+    throw reason;
+  }
   if (isSubsetErrorValue(reason)) {
     attachErrorSpan(reason, readErrorSpan(reason) ?? span);
     return reason;
@@ -141684,10 +141694,10 @@ function wrapCallerInjectedFunction(name, value, options, state) {
         const hostArgs = deepCopyFromSandbox([...args], {
           wrapClosure: (closure) => wrapSandboxClosureForHost(closure, stackFrames, options.budget, callbacks)
         });
-        const policy = readHostOperationPolicy(value) ?? "re-issue";
         const hostCalls = options.hostCalls;
         const operation = options.operation ?? bindingName;
         const moduleId = options.moduleId ?? "<bindings>";
+        const policy = readHostOperationPolicy(value) ?? readRegisteredPendingHostCallPolicy(moduleId, operation) ?? "re-issue";
         if (hostCalls === void 0) {
           return copyHostResultToSandbox(
             invokeHostCallback(() => Reflect.apply(callable, void 0, hostArgs), options),
@@ -141888,6 +141898,9 @@ function executeHostCall(record2, restored, invoke2, stackFrames, options, span,
   try {
     result = invoke2();
   } catch (error3) {
+    if (error3 instanceof HostCallResumabilityError) {
+      throw error3;
+    }
     const reason = createHostErrorValue(error3, stackFrames, options.budget, span);
     hostCalls.settle(record2, { status: "rejected", reason });
     throw error3;
@@ -142515,6 +142528,7 @@ var init_host_bridge = __esm({
     init_float32();
     init_exceptions();
     init_otel2();
+    init_policy();
     init_host_call();
     init_values();
     init_running_state();
@@ -156452,7 +156466,7 @@ var init_package2 = __esm({
   "package.json"() {
     package_default2 = {
       name: "poe-code",
-      version: "12.0.8",
+      version: "12.0.10",
       description: "CLI tool to configure Poe API for developer workflows.",
       license: "MIT",
       type: "module",