@claudian-collab/protocol 3.3.2 → 4.0.0

package/README.md

@@ -20,7 +20,7 @@ or compatibility rules.
 - Shared limits that client and server must agree on (`COLLAB_LIMITS`)
 - Protocol-version negotiation (`COLLAB_PROTOCOL_VERSION`, envelope decoding)
 - Canonical Project checkpoint profiles, logical records, authority-generation transfer, exact membership claims, target-signed redemption receipts, offline backup operational continuity, and Project retirement contracts
-- Cloud binding v2 route construction/matching, bounded checkpoint streams, capability negotiation, strict success/error envelopes, private-development bootstrap, Project snapshot, and redacted event contracts
+- Cloud binding v3 route construction/matching, bounded checkpoint streams, capability negotiation, strict success/error envelopes, private-development bootstrap, Project snapshot, and redacted event contracts
 - Markdown-derived Ticket-reference and Member-mention semantics shared by
   client rendering and authority derivation
 
@@ -37,7 +37,7 @@ fixed part of the detail so the whole detail stays within
 has one compatible final-serialization limit. Request comments and Ticket
 accepted relations also have shared authority-enforced total limits; summary
 counts let complete consumers reject partial or cross-snapshot assembly.
-Cloud binding v2 adds the authority-neutral Project snapshot, nine redacted durable event kinds plus `snapshot.required`, eighteen capability tokens, the exact ordinary Project/Git route catalog, bounded authority-transfer artifact routes, and six private-development bootstrap bindings. Wire v6 includes the Cloud Project-membership operation family. The shared checkpoint container is exactly `checkpoint.json`, `coordination.ndjson`, and `repository.bundle`; authority-transfer and export use wire-visible coordination format v1, and offline backup uses format v3. Backup v3 adds Project invitations, protected invitation and transferred-claim override envelopes, manager-responsibility offers, membership recovery journals, secret-replay tombstones, and compacted Manager-responsibility idempotency tombstones to the existing continuity records. Portable profiles exclude engine storage, paths, credentials, tokens, private keys, and operational refs, and backups exclude plaintext invitation secrets, raw claims, and private keys. Domain-separated canonical UTF-8 inputs define protected-claim AEAD associated data and bind every declared field of transferred-membership redemption receipts and authority-relinquishment proofs before consumer-owned Ed25519 signing or verification. Existing LAN v9 Join, invitation, endpoint, membership lifecycle, Host-transfer, snapshot, event, and HTTP bindings remain independently application-owned; the dedicated LAN authority-transfer transport binds these shared payloads without creating another shared operation registry.
+Cloud binding v3 retains the authority-neutral Project snapshot, nine redacted durable event kinds plus `snapshot.required`, eighteen capability tokens, the exact ordinary Project/Git route catalog, bounded authority-transfer artifact routes, and six private-development bootstrap bindings. Wire v7 adds the required logical Project generation, state-consistent imported-claim generation, and complete reissued-claim transfer identity to the existing Cloud Project-membership read contracts. The shared checkpoint container is exactly `checkpoint.json`, `coordination.ndjson`, and `repository.bundle`; authority-transfer and export use wire-visible coordination format v1, and offline backup uses format v3. Backup v3 adds Project invitations, protected invitation and transferred-claim override envelopes, manager-responsibility offers, membership recovery journals, secret-replay tombstones, and compacted Manager-responsibility idempotency tombstones to the existing continuity records. Portable profiles exclude engine storage, paths, credentials, tokens, private keys, and operational refs, and backups exclude plaintext invitation secrets, raw claims, and private keys. Domain-separated canonical UTF-8 inputs define protected-claim AEAD associated data and bind every declared field of transferred-membership redemption receipts and authority-relinquishment proofs before consumer-owned Ed25519 signing or verification. Existing LAN v9 Join, invitation, endpoint, membership lifecycle, Host-transfer, snapshot, event, and HTTP bindings remain independently application-owned; the dedicated LAN authority-transfer transport binds these shared payloads without creating another shared operation registry.
 
 Backup coordination artifacts are limited to 256 MiB of actual UTF-8 bytes, including the final newline. The decoder, encoder, and consistency checker apply this same inclusive limit without rewriting principals into an intermediate format. Valid current-format artifacts at the limit are accepted; an additional byte is rejected.
 
@@ -64,14 +64,9 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `3.3.2`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
-- **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `6`. The supported
-  range is exactly `[6, 6]`. This is independent from Cloud binding version `2` and the existing application
-  LAN control version `9`. Any change to an existing envelope, DTO, operation
-  payload shape, or operation definition requires a new wire-protocol version.
-  This includes additive operations: every wire-contract change increases the
-  canonical wire version.
-- **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `2`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Binding v1 and wire versions before v6 are unsupported rather than translated or dual-interpreted.
+- **Package version** (this `package.json`): `4.0.0`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `7`. The supported range is exactly `[7, 7]`. This is independent from Cloud binding version `3` and the existing application LAN control version `9`. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
+- **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `3`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v3 and wire versions before v7 are unsupported rather than translated or dual-interpreted.
 
 ### Compatibility behavior
 

package/dist/CollabCloudBinding.d.ts

@@ -2,7 +2,7 @@ import { COLLAB_PROTOCOL_VERSION } from './CollabConstants';
 import { CollabError, type CollabDiagnosticContext, type CollabErrorCode, type CollabRecoveryAction } from './CollabError';
 import { COLLAB_PROJECT_CHECKPOINT_ARTIFACTS } from './CollabProjectCheckpoint';
 import type { CollabIsoTimestamp, CollabProjectId } from './types';
-export declare const COLLAB_CLOUD_BINDING_VERSION: 2;
+export declare const COLLAB_CLOUD_BINDING_VERSION: 3;
 export declare const COLLAB_CLOUD_CAPABILITY_DOCUMENT_SCHEMA_VERSION: 2;
 export declare const COLLAB_CLOUD_CAPABILITIES: readonly ["accept", "authority-transfer", "cloud-imported-membership-claims", "cloud-project-create", "cloud-project-invitations", "cloud-project-join", "cloud-project-leave", "cloud-project-manager-responsibility", "cloud-project-membership", "development-bootstrap", "git-receive-pack-personal-ref", "git-upload-pack", "project-checkpoint-export", "project-events", "project-retirement", "project-snapshot", "requests", "tickets"];
 export type CollabCloudCapability = typeof COLLAB_CLOUD_CAPABILITIES[number];

package/dist/CollabCloudBinding.js

@@ -23,7 +23,7 @@ const CollabControlOperationCodecs_1 = require("./CollabControlOperationCodecs")
 const CollabError_1 = require("./CollabError");
 const CollabValidation_1 = require("./CollabValidation");
 const CollabProjectCheckpoint_1 = require("./CollabProjectCheckpoint");
-exports.COLLAB_CLOUD_BINDING_VERSION = 2;
+exports.COLLAB_CLOUD_BINDING_VERSION = 3;
 exports.COLLAB_CLOUD_CAPABILITY_DOCUMENT_SCHEMA_VERSION = 2;
 exports.COLLAB_CLOUD_CAPABILITIES = Object.freeze([
     'accept',
@@ -188,7 +188,7 @@ function collabCloudProjectOperationRoute(projectId, operation) {
     assertProjectId(projectId);
     if (!isCloudJsonOperation(operation))
         invalidRoute();
-    return route('POST', `/v2/projects/${projectId}/operations/${operation}`, {
+    return route('POST', `/v3/projects/${projectId}/operations/${operation}`, {
         kind: 'project-operation',
         operation,
         projectId,
@@ -198,7 +198,7 @@ function collabCloudProjectEventsRoute(projectId, afterSequence) {
     assertProjectId(projectId);
     if (!Number.isSafeInteger(afterSequence) || afterSequence < 0)
         invalidRoute();
-    return route('GET', `/v2/projects/${projectId}/events?afterSequence=${afterSequence}`, {
+    return route('GET', `/v3/projects/${projectId}/events?afterSequence=${afterSequence}`, {
         afterSequence,
         kind: 'project-events',
         projectId,
@@ -209,11 +209,11 @@ function collabCloudGitRoute(projectId, routeKind, service) {
     if (routeKind === 'info-refs') {
         if (service !== 'git-upload-pack' && service !== 'git-receive-pack')
             invalidRoute();
-        return route('GET', `/v2/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
+        return route('GET', `/v3/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
     }
     if (service !== undefined)
         invalidRoute();
-    return route('POST', `/v2/projects/${projectId}/repository.git/${routeKind}`, {
+    return route('POST', `/v3/projects/${projectId}/repository.git/${routeKind}`, {
         kind: routeKind,
         projectId,
     });
@@ -224,7 +224,7 @@ function collabCloudAuthorityTransferArtifactRoute(projectId, transferId, direct
     if (direction !== 'download' && direction !== 'upload'
         || !COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route(direction === 'upload' ? 'PUT' : 'GET', `/v2/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
+    return route(direction === 'upload' ? 'PUT' : 'GET', `/v3/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
         artifact,
         direction,
         kind: 'authority-transfer-artifact',
@@ -237,7 +237,7 @@ function collabCloudProjectCheckpointExportArtifactRoute(projectId, exportId, ar
     assertAttemptId(exportId);
     if (!COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route('GET', `/v2/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
+    return route('GET', `/v3/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
         artifact,
         exportId,
         kind: 'project-checkpoint-export-artifact',
@@ -249,7 +249,7 @@ function collabCloudProjectCheckpointExportRoute(projectId, exportId, operation)
     assertAttemptId(exportId);
     if (operation !== 'begin' && operation !== 'status')
         invalidRoute();
-    return route(operation === 'begin' ? 'POST' : 'GET', `/v2/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
+    return route(operation === 'begin' ? 'POST' : 'GET', `/v3/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
 }
 function decodeCollabCloudProjectCheckpointExportStatus(value) {
     const source = exactRecord(value, 'checkpointExport', [
@@ -287,7 +287,7 @@ function decodeCollabCloudProjectCheckpointExportStatus(value) {
     });
 }
 function collabDevelopmentBootstrapRoute(operation, attemptId) {
-    const base = '/v2/development/bootstrap/attempts';
+    const base = '/v3/development/bootstrap/attempts';
     if (operation === 'beginDevelopmentBootstrap') {
         if (attemptId !== undefined)
             invalidRoute();
@@ -346,7 +346,7 @@ function matchCollabCloudRoute(method, target) {
         && url.pathname === '/collab/capabilities'
         && exactQuery(url, []))
         return { kind: 'capabilities' };
-    if (segments[0] === 'v2'
+    if (segments[0] === 'v3'
         && segments[1] === 'projects'
         && (0, CollabValidation_1.isCollabProjectId)(segments[2])) {
         const projectId = segments[2];
@@ -425,7 +425,7 @@ function matchCollabCloudRoute(method, target) {
             && exactQuery(url, []))
             return { kind: segments[4], projectId };
     }
-    if (segments[0] !== 'v2'
+    if (segments[0] !== 'v3'
         || segments[1] !== 'development'
         || segments[2] !== 'bootstrap'
         || segments[3] !== 'attempts'

package/dist/CollabCloudProjectSnapshot.d.ts

@@ -2,6 +2,7 @@ import { COLLAB_MAIN_REF } from './CollabConstants';
 import type { CollabDecodeResult } from './CollabProtocol';
 import type { CollabChangeRequest, CollabGitOid, CollabIsoTimestamp, CollabMemberId, CollabProjectId, CollabRole, CollabTicketSummary } from './types';
 export interface CollabCloudProjectSummary {
+    readonly authorityGeneration: number;
     readonly createdAt: CollabIsoTimestamp;
     readonly expectedMainOid: CollabGitOid;
     readonly id: CollabProjectId;

package/dist/CollabCloudProjectSnapshot.js

@@ -67,6 +67,7 @@ function positiveInteger(source, field) {
 }
 function decodeProject(value) {
     const source = exactRecord(value, 'project', [
+        'authorityGeneration',
         'createdAt',
         'expectedMainOid',
         'id',
@@ -76,6 +77,7 @@ function decodeProject(value) {
     if (source.mainRef !== CollabConstants_1.COLLAB_MAIN_REF)
         throw invalidPayload('mainRef');
     return {
+        authorityGeneration: positiveInteger(source, 'authorityGeneration'),
         createdAt: timestamp(source, 'createdAt'),
         expectedMainOid: stringField(source, 'expectedMainOid', 64, CollabValidation_1.isCollabGitOid),
         id: stringField(source, 'id', 64, CollabValidation_1.isCollabProjectId),

package/dist/CollabConstants.d.ts

@@ -1,4 +1,4 @@
-export declare const COLLAB_PROTOCOL_VERSION: 6;
+export declare const COLLAB_PROTOCOL_VERSION: 7;
 export declare const COLLAB_MAIN_REF: "refs/heads/main";
 export declare const COLLAB_MEMBER_REF_PREFIX: "refs/heads/members/";
 export declare const COLLAB_LIMITS: Readonly<{

package/dist/CollabConstants.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.COLLAB_LIMITS = exports.COLLAB_MEMBER_REF_PREFIX = exports.COLLAB_MAIN_REF = exports.COLLAB_PROTOCOL_VERSION = void 0;
-exports.COLLAB_PROTOCOL_VERSION = 6;
+exports.COLLAB_PROTOCOL_VERSION = 7;
 exports.COLLAB_MAIN_REF = 'refs/heads/main';
 exports.COLLAB_MEMBER_REF_PREFIX = 'refs/heads/members/';
 exports.COLLAB_LIMITS = Object.freeze({

package/dist/CollabProjectMembership.d.ts

@@ -1,3 +1,4 @@
+import type { CollabTransferredMembershipClaim } from './CollabAuthorityTransfer';
 import type { CollabDecodeResult } from './CollabProtocol';
 import type { CollabGitOid, CollabIdempotencyKey, CollabIsoTimestamp, CollabMemberId, CollabProjectId, CollabRequestId, CollabRole } from './types';
 export declare const COLLAB_PROJECT_MEMBERSHIP_LIMITS: Readonly<{
@@ -95,6 +96,7 @@ export interface JoinCloudProjectResponse {
 export interface CollabProjectMemberSummary {
     readonly bindingState: CollabProjectMemberBindingState;
     readonly displayName: string;
+    readonly importedClaimGeneration: number | null;
     readonly importedClaimState: CollabImportedClaimState;
     readonly memberId: CollabMemberId;
     readonly membershipRevision: number;
@@ -112,13 +114,9 @@ export interface ReissueTransferredMembershipClaimRequest extends CollabProjectM
     readonly expectedMembershipRevision: number;
     readonly memberId: CollabMemberId;
 }
-export interface ReissueTransferredMembershipClaimResponse {
-    readonly claim: string;
+export interface ReissueTransferredMembershipClaimResponse extends CollabTransferredMembershipClaim {
     readonly claimGeneration: number;
     readonly createdAt: CollabIsoTimestamp;
-    readonly expiresAt: CollabIsoTimestamp;
-    readonly memberId: CollabMemberId;
-    readonly projectId: CollabProjectId;
     readonly secretReplayExpiresAt: CollabIsoTimestamp;
 }
 export type RevokeTransferredMembershipClaimRequest = ReissueTransferredMembershipClaimRequest;

package/dist/CollabProjectMembership.js

@@ -338,23 +338,37 @@ function decodeMemberSummary(value) {
     const source = exactRecord(value, 'member', [
         'bindingState',
         'displayName',
+        'importedClaimGeneration',
         'importedClaimState',
         'memberId',
         'membershipRevision',
         'role',
     ]);
+    const importedClaimState = literal(source, 'importedClaimState', [
+        'not-applicable',
+        'original-active',
+        'override-active',
+        'revoked',
+        'expired',
+        'redeemed',
+        'hidden',
+    ]);
+    const importedClaimGeneration = source.importedClaimGeneration === null
+        ? null
+        : nonNegativeInteger(source, 'importedClaimGeneration');
+    if (importedClaimState === 'hidden' || importedClaimState === 'not-applicable') {
+        if (importedClaimGeneration !== null)
+            throw invalidPayload('importedClaimGeneration');
+    }
+    else if (importedClaimGeneration === null
+        || (importedClaimState === 'original-active' && importedClaimGeneration !== 0)
+        || (importedClaimState === 'override-active' && importedClaimGeneration === 0))
+        throw invalidPayload('importedClaimGeneration');
     return {
         bindingState: literal(source, 'bindingState', ['bound', 'unbound', 'hidden']),
         displayName: boundedText(source, 'displayName', exports.COLLAB_PROJECT_MEMBERSHIP_LIMITS.maxDisplayNameUtf8Bytes),
-        importedClaimState: literal(source, 'importedClaimState', [
-            'not-applicable',
-            'original-active',
-            'override-active',
-            'revoked',
-            'expired',
-            'redeemed',
-            'hidden',
-        ]),
+        importedClaimGeneration,
+        importedClaimState,
         memberId: token(source, 'memberId', CollabValidation_1.isCollabMemberId),
         membershipRevision: positiveInteger(source, 'membershipRevision'),
         role: literal(source, 'role', ['manager', 'member']),
@@ -401,6 +415,8 @@ function decodeReissueClaimResponse(value) {
         'memberId',
         'projectId',
         'secretReplayExpiresAt',
+        'targetAuthorityGeneration',
+        'transferId',
     ]);
     const createdAt = timestamp(source, 'createdAt');
     const expiresAt = timestamp(source, 'expiresAt');
@@ -416,6 +432,8 @@ function decodeReissueClaimResponse(value) {
         memberId: token(source, 'memberId', CollabValidation_1.isCollabMemberId),
         projectId: token(source, 'projectId', CollabValidation_1.isCollabProjectId),
         secretReplayExpiresAt,
+        targetAuthorityGeneration: positiveInteger(source, 'targetAuthorityGeneration'),
+        transferId: token(source, 'transferId'),
     };
 }
 function decodeRevokeClaimResponse(value) {

package/dist/esm/CollabCloudBinding.mjs

@@ -3,7 +3,7 @@ import { COLLAB_CONTROL_OPERATION_CODECS, } from './CollabControlOperationCodecs
 import { COLLAB_ERROR_CODES, CollabError, sanitizeCollabDiagnosticContext, } from './CollabError.mjs';
 import { isCollabOpaqueId, isCollabProjectId, } from './CollabValidation.mjs';
 import { COLLAB_CHECKPOINT_ARTIFACT_LIMITS, COLLAB_PROJECT_CHECKPOINT_ARTIFACTS, } from './CollabProjectCheckpoint.mjs';
-export const COLLAB_CLOUD_BINDING_VERSION = 2;
+export const COLLAB_CLOUD_BINDING_VERSION = 3;
 export const COLLAB_CLOUD_CAPABILITY_DOCUMENT_SCHEMA_VERSION = 2;
 export const COLLAB_CLOUD_CAPABILITIES = Object.freeze([
     'accept',
@@ -168,7 +168,7 @@ export function collabCloudProjectOperationRoute(projectId, operation) {
     assertProjectId(projectId);
     if (!isCloudJsonOperation(operation))
         invalidRoute();
-    return route('POST', `/v2/projects/${projectId}/operations/${operation}`, {
+    return route('POST', `/v3/projects/${projectId}/operations/${operation}`, {
         kind: 'project-operation',
         operation,
         projectId,
@@ -178,7 +178,7 @@ export function collabCloudProjectEventsRoute(projectId, afterSequence) {
     assertProjectId(projectId);
     if (!Number.isSafeInteger(afterSequence) || afterSequence < 0)
         invalidRoute();
-    return route('GET', `/v2/projects/${projectId}/events?afterSequence=${afterSequence}`, {
+    return route('GET', `/v3/projects/${projectId}/events?afterSequence=${afterSequence}`, {
         afterSequence,
         kind: 'project-events',
         projectId,
@@ -189,11 +189,11 @@ export function collabCloudGitRoute(projectId, routeKind, service) {
     if (routeKind === 'info-refs') {
         if (service !== 'git-upload-pack' && service !== 'git-receive-pack')
             invalidRoute();
-        return route('GET', `/v2/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
+        return route('GET', `/v3/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
     }
     if (service !== undefined)
         invalidRoute();
-    return route('POST', `/v2/projects/${projectId}/repository.git/${routeKind}`, {
+    return route('POST', `/v3/projects/${projectId}/repository.git/${routeKind}`, {
         kind: routeKind,
         projectId,
     });
@@ -204,7 +204,7 @@ export function collabCloudAuthorityTransferArtifactRoute(projectId, transferId,
     if (direction !== 'download' && direction !== 'upload'
         || !COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route(direction === 'upload' ? 'PUT' : 'GET', `/v2/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
+    return route(direction === 'upload' ? 'PUT' : 'GET', `/v3/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
         artifact,
         direction,
         kind: 'authority-transfer-artifact',
@@ -217,7 +217,7 @@ export function collabCloudProjectCheckpointExportArtifactRoute(projectId, expor
     assertAttemptId(exportId);
     if (!COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route('GET', `/v2/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
+    return route('GET', `/v3/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
         artifact,
         exportId,
         kind: 'project-checkpoint-export-artifact',
@@ -229,7 +229,7 @@ export function collabCloudProjectCheckpointExportRoute(projectId, exportId, ope
     assertAttemptId(exportId);
     if (operation !== 'begin' && operation !== 'status')
         invalidRoute();
-    return route(operation === 'begin' ? 'POST' : 'GET', `/v2/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
+    return route(operation === 'begin' ? 'POST' : 'GET', `/v3/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
 }
 export function decodeCollabCloudProjectCheckpointExportStatus(value) {
     const source = exactRecord(value, 'checkpointExport', [
@@ -267,7 +267,7 @@ export function decodeCollabCloudProjectCheckpointExportStatus(value) {
     });
 }
 export function collabDevelopmentBootstrapRoute(operation, attemptId) {
-    const base = '/v2/development/bootstrap/attempts';
+    const base = '/v3/development/bootstrap/attempts';
     if (operation === 'beginDevelopmentBootstrap') {
         if (attemptId !== undefined)
             invalidRoute();
@@ -326,7 +326,7 @@ export function matchCollabCloudRoute(method, target) {
         && url.pathname === '/collab/capabilities'
         && exactQuery(url, []))
         return { kind: 'capabilities' };
-    if (segments[0] === 'v2'
+    if (segments[0] === 'v3'
         && segments[1] === 'projects'
         && isCollabProjectId(segments[2])) {
         const projectId = segments[2];
@@ -405,7 +405,7 @@ export function matchCollabCloudRoute(method, target) {
             && exactQuery(url, []))
             return { kind: segments[4], projectId };
     }
-    if (segments[0] !== 'v2'
+    if (segments[0] !== 'v3'
         || segments[1] !== 'development'
         || segments[2] !== 'bootstrap'
         || segments[3] !== 'attempts'

package/dist/esm/CollabCloudProjectSnapshot.mjs

@@ -63,6 +63,7 @@ function positiveInteger(source, field) {
 }
 function decodeProject(value) {
     const source = exactRecord(value, 'project', [
+        'authorityGeneration',
         'createdAt',
         'expectedMainOid',
         'id',
@@ -72,6 +73,7 @@ function decodeProject(value) {
     if (source.mainRef !== COLLAB_MAIN_REF)
         throw invalidPayload('mainRef');
     return {
+        authorityGeneration: positiveInteger(source, 'authorityGeneration'),
         createdAt: timestamp(source, 'createdAt'),
         expectedMainOid: stringField(source, 'expectedMainOid', 64, isCollabGitOid),
         id: stringField(source, 'id', 64, isCollabProjectId),

package/dist/esm/CollabConstants.mjs

@@ -1,4 +1,4 @@
-export const COLLAB_PROTOCOL_VERSION = 6;
+export const COLLAB_PROTOCOL_VERSION = 7;
 export const COLLAB_MAIN_REF = 'refs/heads/main';
 export const COLLAB_MEMBER_REF_PREFIX = 'refs/heads/members/';
 export const COLLAB_LIMITS = Object.freeze({

package/dist/esm/CollabProjectMembership.mjs

@@ -333,23 +333,37 @@ function decodeMemberSummary(value) {
     const source = exactRecord(value, 'member', [
         'bindingState',
         'displayName',
+        'importedClaimGeneration',
         'importedClaimState',
         'memberId',
         'membershipRevision',
         'role',
     ]);
+    const importedClaimState = literal(source, 'importedClaimState', [
+        'not-applicable',
+        'original-active',
+        'override-active',
+        'revoked',
+        'expired',
+        'redeemed',
+        'hidden',
+    ]);
+    const importedClaimGeneration = source.importedClaimGeneration === null
+        ? null
+        : nonNegativeInteger(source, 'importedClaimGeneration');
+    if (importedClaimState === 'hidden' || importedClaimState === 'not-applicable') {
+        if (importedClaimGeneration !== null)
+            throw invalidPayload('importedClaimGeneration');
+    }
+    else if (importedClaimGeneration === null
+        || (importedClaimState === 'original-active' && importedClaimGeneration !== 0)
+        || (importedClaimState === 'override-active' && importedClaimGeneration === 0))
+        throw invalidPayload('importedClaimGeneration');
     return {
         bindingState: literal(source, 'bindingState', ['bound', 'unbound', 'hidden']),
         displayName: boundedText(source, 'displayName', COLLAB_PROJECT_MEMBERSHIP_LIMITS.maxDisplayNameUtf8Bytes),
-        importedClaimState: literal(source, 'importedClaimState', [
-            'not-applicable',
-            'original-active',
-            'override-active',
-            'revoked',
-            'expired',
-            'redeemed',
-            'hidden',
-        ]),
+        importedClaimGeneration,
+        importedClaimState,
         memberId: token(source, 'memberId', isCollabMemberId),
         membershipRevision: positiveInteger(source, 'membershipRevision'),
         role: literal(source, 'role', ['manager', 'member']),
@@ -396,6 +410,8 @@ function decodeReissueClaimResponse(value) {
         'memberId',
         'projectId',
         'secretReplayExpiresAt',
+        'targetAuthorityGeneration',
+        'transferId',
     ]);
     const createdAt = timestamp(source, 'createdAt');
     const expiresAt = timestamp(source, 'expiresAt');
@@ -411,6 +427,8 @@ function decodeReissueClaimResponse(value) {
         memberId: token(source, 'memberId', isCollabMemberId),
         projectId: token(source, 'projectId', isCollabProjectId),
         secretReplayExpiresAt,
+        targetAuthorityGeneration: positiveInteger(source, 'targetAuthorityGeneration'),
+        transferId: token(source, 'transferId'),
     };
 }
 function decodeRevokeClaimResponse(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "3.3.2",
+  "version": "4.0.0",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {