@claudian-collab/protocol 4.1.0 → 4.1.2

package/README.md

@@ -64,7 +64,7 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.1.0`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Package version** (this `package.json`): `4.1.2`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
 - **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `8`. The supported range is exactly `[8, 8]`. This is independent from Cloud binding version `4` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
 - **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `4`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v4 and wire versions before v8 are unsupported rather than translated or dual-interpreted.
 

package/dist/CollabProjectBackupCheckpoint.js

@@ -1358,9 +1358,15 @@ function validateContinuity(records) {
     const recoveries = new Map(records
         .filter((item) => (item.kind === 'authority-transfer-recovery'))
         .map(item => [item.value.transferId, item]));
-    const keys = new Map(records
-        .filter((item) => (item.kind === 'transfer-receipt-key'))
+    const keyRecords = records.filter((item) => (item.kind === 'transfer-receipt-key'));
+    const keys = new Map(keyRecords
         .map(item => [`${item.value.transferId}:${item.value.receiptKeyId}`, item]));
+    const keysByTransfer = new Map();
+    for (const key of keyRecords) {
+        const existing = keysByTransfer.get(key.value.transferId) ?? [];
+        existing.push(key);
+        keysByTransfer.set(key.value.transferId, existing);
+    }
     const claimRecords = records
         .filter((item) => (item.kind === 'transferred-membership-claim'));
     const claims = new Map(claimRecords
@@ -1603,11 +1609,17 @@ function validateContinuity(records) {
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
+        const isEvidenceKey = evidence !== null
+            && evidence !== undefined
+            && evidence.receiptKeyId === key.value.receiptKeyId
+            && evidence.receiptPublicKey === key.value.receiptPublicKey;
+        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && recovery.value.relinquishmentProof !== null
+            && keysByTransfer.get(key.value.transferId)?.length === 2;
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || evidence.receiptKeyId !== key.value.receiptKeyId
-            || evidence.receiptPublicKey !== key.value.receiptPublicKey)
+            || (!isEvidenceKey && !isCloudSourceProofVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {
@@ -1912,13 +1924,16 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || lifecycle?.value.operationKind !== 'authority-transfer'
                 || lifecycle.value.direction !== 'cloud-to-lan'
-                || lifecycle.value.state !== 'completed'
+                || (lifecycle.value.state !== 'completed' && lifecycle.value.state !== 'cancelled')
                 || terminal === undefined
                 || recovery === undefined
                 || item.value.memberId !== recovery.value.targetHostMemberId
-                || item.value.requestSha256 !== recovery.value.targetActivationRequestSha256
                 || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
                 || response === undefined
+                || response.phase !== lifecycle.value.phase
+                || response.state !== lifecycle.value.state
+                || (response.state === 'completed'
+                    && item.value.requestSha256 !== recovery.value.targetActivationRequestSha256)
                 || response.batchRevision !== lifecycle.value.batchRevision
                 || response.batchSha256 !== lifecycle.value.batchSha256
                 || response.checkpointSha256 !== lifecycle.value.checkpointSha256

package/dist/CollabProjectCheckpoint.js

@@ -906,8 +906,8 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
     }
     else if (operation === 'getProjectAuthorityTransfer') {
         if (response.decoded.direction !== 'cloud-to-lan'
-            || response.decoded.phase !== 'completed'
-            || response.decoded.state !== 'completed'
+            || !((response.decoded.phase === 'completed' && response.decoded.state === 'completed')
+                || (response.decoded.phase === 'cancelled' && response.decoded.state === 'cancelled'))
             || response.decoded.expiresAt !== expiresAt)
             throw invalidPayload('responseJson');
     }
@@ -1218,9 +1218,17 @@ function validateCheckpointRecordSequence(records, profile, acknowledgementBindi
         .map(item => [item.value.memberId, item.value.principalId]));
     const terminalResponders = records.filter((item) => (item.kind === 'terminal-responder'));
     const tombstones = records.filter((item) => (item.kind === 'tombstone'));
+    const terminalResponder = terminalResponders[0];
+    const transferTerminalResponse = terminalResponder?.value.operation
+        === 'getProjectAuthorityTransfer'
+        ? canonicalOperationResponseJson({ responseJson: terminalResponder.value.responseJson }, 'responseJson', 'getProjectAuthorityTransfer').decoded
+        : undefined;
+    const terminalRequiresTombstone = terminalResponder !== undefined && (terminalResponder.value.operation === 'retireProject'
+        || transferTerminalResponse?.state === 'completed');
     if (terminalResponders.length > 1
-        || (terminalResponders.length === 1 && (tombstones.length !== 1
-            || terminalResponders[0].value.expiresAt !== tombstones[0].value.terminalExpiresAt)))
+        || (terminalRequiresTombstone && (tombstones.length !== 1
+            || terminalResponder.value.expiresAt !== tombstones[0].value.terminalExpiresAt))
+        || (terminalResponder !== undefined && !terminalRequiresTombstone && tombstones.length !== 0))
         throw invalidPayload('records');
     const tombstone = tombstones[0];
     const retirementTerminal = terminalResponders.find(item => (item.value.operation === 'retireProject'));

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1348,9 +1348,15 @@ function validateContinuity(records) {
     const recoveries = new Map(records
         .filter((item) => (item.kind === 'authority-transfer-recovery'))
         .map(item => [item.value.transferId, item]));
-    const keys = new Map(records
-        .filter((item) => (item.kind === 'transfer-receipt-key'))
+    const keyRecords = records.filter((item) => (item.kind === 'transfer-receipt-key'));
+    const keys = new Map(keyRecords
         .map(item => [`${item.value.transferId}:${item.value.receiptKeyId}`, item]));
+    const keysByTransfer = new Map();
+    for (const key of keyRecords) {
+        const existing = keysByTransfer.get(key.value.transferId) ?? [];
+        existing.push(key);
+        keysByTransfer.set(key.value.transferId, existing);
+    }
     const claimRecords = records
         .filter((item) => (item.kind === 'transferred-membership-claim'));
     const claims = new Map(claimRecords
@@ -1593,11 +1599,17 @@ function validateContinuity(records) {
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
+        const isEvidenceKey = evidence !== null
+            && evidence !== undefined
+            && evidence.receiptKeyId === key.value.receiptKeyId
+            && evidence.receiptPublicKey === key.value.receiptPublicKey;
+        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && recovery.value.relinquishmentProof !== null
+            && keysByTransfer.get(key.value.transferId)?.length === 2;
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || evidence.receiptKeyId !== key.value.receiptKeyId
-            || evidence.receiptPublicKey !== key.value.receiptPublicKey)
+            || (!isEvidenceKey && !isCloudSourceProofVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {
@@ -1902,13 +1914,16 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || lifecycle?.value.operationKind !== 'authority-transfer'
                 || lifecycle.value.direction !== 'cloud-to-lan'
-                || lifecycle.value.state !== 'completed'
+                || (lifecycle.value.state !== 'completed' && lifecycle.value.state !== 'cancelled')
                 || terminal === undefined
                 || recovery === undefined
                 || item.value.memberId !== recovery.value.targetHostMemberId
-                || item.value.requestSha256 !== recovery.value.targetActivationRequestSha256
                 || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
                 || response === undefined
+                || response.phase !== lifecycle.value.phase
+                || response.state !== lifecycle.value.state
+                || (response.state === 'completed'
+                    && item.value.requestSha256 !== recovery.value.targetActivationRequestSha256)
                 || response.batchRevision !== lifecycle.value.batchRevision
                 || response.batchSha256 !== lifecycle.value.batchSha256
                 || response.checkpointSha256 !== lifecycle.value.checkpointSha256

package/dist/esm/CollabProjectCheckpoint.mjs

@@ -891,8 +891,8 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
     }
     else if (operation === 'getProjectAuthorityTransfer') {
         if (response.decoded.direction !== 'cloud-to-lan'
-            || response.decoded.phase !== 'completed'
-            || response.decoded.state !== 'completed'
+            || !((response.decoded.phase === 'completed' && response.decoded.state === 'completed')
+                || (response.decoded.phase === 'cancelled' && response.decoded.state === 'cancelled'))
             || response.decoded.expiresAt !== expiresAt)
             throw invalidPayload('responseJson');
     }
@@ -1203,9 +1203,17 @@ export function validateCheckpointRecordSequence(records, profile, acknowledgeme
         .map(item => [item.value.memberId, item.value.principalId]));
     const terminalResponders = records.filter((item) => (item.kind === 'terminal-responder'));
     const tombstones = records.filter((item) => (item.kind === 'tombstone'));
+    const terminalResponder = terminalResponders[0];
+    const transferTerminalResponse = terminalResponder?.value.operation
+        === 'getProjectAuthorityTransfer'
+        ? canonicalOperationResponseJson({ responseJson: terminalResponder.value.responseJson }, 'responseJson', 'getProjectAuthorityTransfer').decoded
+        : undefined;
+    const terminalRequiresTombstone = terminalResponder !== undefined && (terminalResponder.value.operation === 'retireProject'
+        || transferTerminalResponse?.state === 'completed');
     if (terminalResponders.length > 1
-        || (terminalResponders.length === 1 && (tombstones.length !== 1
-            || terminalResponders[0].value.expiresAt !== tombstones[0].value.terminalExpiresAt)))
+        || (terminalRequiresTombstone && (tombstones.length !== 1
+            || terminalResponder.value.expiresAt !== tombstones[0].value.terminalExpiresAt))
+        || (terminalResponder !== undefined && !terminalRequiresTombstone && tombstones.length !== 0))
         throw invalidPayload('records');
     const tombstone = tombstones[0];
     const retirementTerminal = terminalResponders.find(item => (item.value.operation === 'retireProject'));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.1.0",
+  "version": "4.1.2",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {