@claudian-collab/protocol 4.1.0 → 4.1.1

package/README.md

@@ -64,7 +64,7 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.1.0`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Package version** (this `package.json`): `4.1.1`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
 - **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `8`. The supported range is exactly `[8, 8]`. This is independent from Cloud binding version `4` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
 - **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `4`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v4 and wire versions before v8 are unsupported rather than translated or dual-interpreted.
 

package/dist/CollabProjectBackupCheckpoint.js

@@ -1358,9 +1358,15 @@ function validateContinuity(records) {
     const recoveries = new Map(records
         .filter((item) => (item.kind === 'authority-transfer-recovery'))
         .map(item => [item.value.transferId, item]));
-    const keys = new Map(records
-        .filter((item) => (item.kind === 'transfer-receipt-key'))
+    const keyRecords = records.filter((item) => (item.kind === 'transfer-receipt-key'));
+    const keys = new Map(keyRecords
         .map(item => [`${item.value.transferId}:${item.value.receiptKeyId}`, item]));
+    const keysByTransfer = new Map();
+    for (const key of keyRecords) {
+        const existing = keysByTransfer.get(key.value.transferId) ?? [];
+        existing.push(key);
+        keysByTransfer.set(key.value.transferId, existing);
+    }
     const claimRecords = records
         .filter((item) => (item.kind === 'transferred-membership-claim'));
     const claims = new Map(claimRecords
@@ -1603,11 +1609,17 @@ function validateContinuity(records) {
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
+        const isEvidenceKey = evidence !== null
+            && evidence !== undefined
+            && evidence.receiptKeyId === key.value.receiptKeyId
+            && evidence.receiptPublicKey === key.value.receiptPublicKey;
+        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && recovery.value.relinquishmentProof !== null
+            && keysByTransfer.get(key.value.transferId)?.length === 2;
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || evidence.receiptKeyId !== key.value.receiptKeyId
-            || evidence.receiptPublicKey !== key.value.receiptPublicKey)
+            || (!isEvidenceKey && !isCloudSourceProofVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1348,9 +1348,15 @@ function validateContinuity(records) {
     const recoveries = new Map(records
         .filter((item) => (item.kind === 'authority-transfer-recovery'))
         .map(item => [item.value.transferId, item]));
-    const keys = new Map(records
-        .filter((item) => (item.kind === 'transfer-receipt-key'))
+    const keyRecords = records.filter((item) => (item.kind === 'transfer-receipt-key'));
+    const keys = new Map(keyRecords
         .map(item => [`${item.value.transferId}:${item.value.receiptKeyId}`, item]));
+    const keysByTransfer = new Map();
+    for (const key of keyRecords) {
+        const existing = keysByTransfer.get(key.value.transferId) ?? [];
+        existing.push(key);
+        keysByTransfer.set(key.value.transferId, existing);
+    }
     const claimRecords = records
         .filter((item) => (item.kind === 'transferred-membership-claim'));
     const claims = new Map(claimRecords
@@ -1593,11 +1599,17 @@ function validateContinuity(records) {
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
+        const isEvidenceKey = evidence !== null
+            && evidence !== undefined
+            && evidence.receiptKeyId === key.value.receiptKeyId
+            && evidence.receiptPublicKey === key.value.receiptPublicKey;
+        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && recovery.value.relinquishmentProof !== null
+            && keysByTransfer.get(key.value.transferId)?.length === 2;
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || evidence.receiptKeyId !== key.value.receiptKeyId
-            || evidence.receiptPublicKey !== key.value.receiptPublicKey)
+            || (!isEvidenceKey && !isCloudSourceProofVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {