poe-code 12.0.8 → 12.0.9

package/README.md

@@ -323,6 +323,27 @@ Full browser SafeJS SDK/runtime support remains pending. Guest codec integration
 portable SDK declaration closure and shared host-call policy/replay metadata
 require separate integration; a browser filesystem build does not prove them.
 
+#### Host-operation recovery policy
+
+The Node SafeJS SDK selects recovery policy when a host call is issued:
+`declareHostOperation(function, policy)` takes precedence, otherwise the exact
+journaled module/operation pair registered with `registerPendingHostCallPolicy`
+supplies the default, otherwise the call is `re-issue`. Named registration is not
+limited to legacy snapshot reconciliation. Caller bindings use module ID
+`<bindings>`. Registration affects subsequent calls, not previously captured
+history; a changed policy on replay fails closed rather than downgrading a
+captured side effect.
+
+Recorded outcomes are reused. A pending `read-side-effect` call requires a
+matching external reconciliation proof and is not blindly invoked again;
+`re-issue` permits another invocation. Neither registration nor checkpointing
+makes arbitrary external effects exactly-once. Shared function aliases retain
+their existing canonical journal identity, so declare the function itself when
+its aliases must share an effect policy. See the
+[host-policy contract](packages/safe-js/CHECKPOINT_REPLAY.md#host-operation-policy-selection)
+for registration lifetime, naming and reconciliation requirements. This changes
+no CLI flags and adds no browser SafeJS runtime support.
+
 ## Building from Source
 
 Run `npm run build` to compile the workspace and generate the published bundles.

package/dist/index.js

@@ -137803,6 +137803,9 @@ function registerPendingHostCallPolicy(registration) {
   MODULE_PENDING_HOST_CALL_POLICIES[moduleId] ??= /* @__PURE__ */ Object.create(null);
   MODULE_PENDING_HOST_CALL_POLICIES[moduleId][operation] = policy;
 }
+function readRegisteredPendingHostCallPolicy(moduleId, operation) {
+  return MODULE_PENDING_HOST_CALL_POLICIES[moduleId]?.[operation];
+}
 function pendingHostCallResumeIdentityMatches(expected, actual) {
   return actual.callId === expected.callId && actual.sourceHash === expected.sourceHash && actual.moduleId === expected.moduleId && actual.operation === expected.operation && actual.argumentDigest === expected.argumentDigest;
 }
@@ -141684,10 +141687,10 @@ function wrapCallerInjectedFunction(name, value, options, state) {
         const hostArgs = deepCopyFromSandbox([...args], {
           wrapClosure: (closure) => wrapSandboxClosureForHost(closure, stackFrames, options.budget, callbacks)
         });
-        const policy = readHostOperationPolicy(value) ?? "re-issue";
         const hostCalls = options.hostCalls;
         const operation = options.operation ?? bindingName;
         const moduleId = options.moduleId ?? "<bindings>";
+        const policy = readHostOperationPolicy(value) ?? readRegisteredPendingHostCallPolicy(moduleId, operation) ?? "re-issue";
         if (hostCalls === void 0) {
           return copyHostResultToSandbox(
             invokeHostCallback(() => Reflect.apply(callable, void 0, hostArgs), options),
@@ -142515,6 +142518,7 @@ var init_host_bridge = __esm({
     init_float32();
     init_exceptions();
     init_otel2();
+    init_policy();
     init_host_call();
     init_values();
     init_running_state();
@@ -156452,7 +156456,7 @@ var init_package2 = __esm({
   "package.json"() {
     package_default2 = {
       name: "poe-code",
-      version: "12.0.8",
+      version: "12.0.9",
       description: "CLI tool to configure Poe API for developer workflows.",
       license: "MIT",
       type: "module",