@claudian-collab/protocol 4.1.1 → 4.1.3

package/README.md

@@ -64,7 +64,7 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.1.1`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Package version** (this `package.json`): `4.1.3`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
 - **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `8`. The supported range is exactly `[8, 8]`. This is independent from Cloud binding version `4` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
 - **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `4`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v4 and wire versions before v8 are unsupported rather than translated or dual-interpreted.
 

package/dist/CollabProjectBackupCheckpoint.js

@@ -1608,18 +1608,33 @@ function validateContinuity(records) {
     }
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
+        const lifecycle = lifecycles.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
         const isEvidenceKey = evidence !== null
             && evidence !== undefined
             && evidence.receiptKeyId === key.value.receiptKeyId
             && evidence.receiptPublicKey === key.value.receiptPublicKey;
-        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
-            && recovery.value.relinquishmentProof !== null
-            && keysByTransfer.get(key.value.transferId)?.length === 2;
+        const effectivePhase = lifecycle?.value.state === 'recovery-required'
+            ? lifecycle.value.recoveryFromPhase
+            : lifecycle?.value.phase;
+        const cancellationIndex = effectivePhase === null || effectivePhase === undefined
+            ? undefined
+            : CANCELLATION_PHASE_INDEX.get(effectivePhase);
+        const normalPhaseIndex = lifecycle?.value.direction === 'cloud-to-lan'
+            ? CollabAuthorityTransfer_1.COLLAB_CLOUD_TO_LAN_TRANSFER_PHASES.indexOf(effectivePhase)
+            : -1;
+        const isCloudSourceVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && lifecycle?.value.direction === 'cloud-to-lan'
+            && keysByTransfer.get(key.value.transferId)?.length === 2
+            && (recovery.value.relinquishmentProof !== null
+                || (cancellationIndex === undefined && normalPhaseIndex >= 2)
+                || (cancellationIndex !== undefined
+                    && cancellationIndex <= 1
+                    && lifecycle.value.checkpointSha256 !== null));
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || (!isEvidenceKey && !isCloudSourceProofVerifier))
+            || (!isEvidenceKey && !isCloudSourceVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {
@@ -1924,13 +1939,16 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || lifecycle?.value.operationKind !== 'authority-transfer'
                 || lifecycle.value.direction !== 'cloud-to-lan'
-                || lifecycle.value.state !== 'completed'
+                || (lifecycle.value.state !== 'completed' && lifecycle.value.state !== 'cancelled')
                 || terminal === undefined
                 || recovery === undefined
                 || item.value.memberId !== recovery.value.targetHostMemberId
-                || item.value.requestSha256 !== recovery.value.targetActivationRequestSha256
                 || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
                 || response === undefined
+                || response.phase !== lifecycle.value.phase
+                || response.state !== lifecycle.value.state
+                || (response.state === 'completed'
+                    && item.value.requestSha256 !== recovery.value.targetActivationRequestSha256)
                 || response.batchRevision !== lifecycle.value.batchRevision
                 || response.batchSha256 !== lifecycle.value.batchSha256
                 || response.checkpointSha256 !== lifecycle.value.checkpointSha256

package/dist/CollabProjectCheckpoint.js

@@ -906,8 +906,8 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
     }
     else if (operation === 'getProjectAuthorityTransfer') {
         if (response.decoded.direction !== 'cloud-to-lan'
-            || response.decoded.phase !== 'completed'
-            || response.decoded.state !== 'completed'
+            || !((response.decoded.phase === 'completed' && response.decoded.state === 'completed')
+                || (response.decoded.phase === 'cancelled' && response.decoded.state === 'cancelled'))
             || response.decoded.expiresAt !== expiresAt)
             throw invalidPayload('responseJson');
     }
@@ -1218,9 +1218,17 @@ function validateCheckpointRecordSequence(records, profile, acknowledgementBindi
         .map(item => [item.value.memberId, item.value.principalId]));
     const terminalResponders = records.filter((item) => (item.kind === 'terminal-responder'));
     const tombstones = records.filter((item) => (item.kind === 'tombstone'));
+    const terminalResponder = terminalResponders[0];
+    const transferTerminalResponse = terminalResponder?.value.operation
+        === 'getProjectAuthorityTransfer'
+        ? canonicalOperationResponseJson({ responseJson: terminalResponder.value.responseJson }, 'responseJson', 'getProjectAuthorityTransfer').decoded
+        : undefined;
+    const terminalRequiresTombstone = terminalResponder !== undefined && (terminalResponder.value.operation === 'retireProject'
+        || transferTerminalResponse?.state === 'completed');
     if (terminalResponders.length > 1
-        || (terminalResponders.length === 1 && (tombstones.length !== 1
-            || terminalResponders[0].value.expiresAt !== tombstones[0].value.terminalExpiresAt)))
+        || (terminalRequiresTombstone && (tombstones.length !== 1
+            || terminalResponder.value.expiresAt !== tombstones[0].value.terminalExpiresAt))
+        || (terminalResponder !== undefined && !terminalRequiresTombstone && tombstones.length !== 0))
         throw invalidPayload('records');
     const tombstone = tombstones[0];
     const retirementTerminal = terminalResponders.find(item => (item.value.operation === 'retireProject'));

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1598,18 +1598,33 @@ function validateContinuity(records) {
     }
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
+        const lifecycle = lifecycles.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
         const isEvidenceKey = evidence !== null
             && evidence !== undefined
             && evidence.receiptKeyId === key.value.receiptKeyId
             && evidence.receiptPublicKey === key.value.receiptPublicKey;
-        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
-            && recovery.value.relinquishmentProof !== null
-            && keysByTransfer.get(key.value.transferId)?.length === 2;
+        const effectivePhase = lifecycle?.value.state === 'recovery-required'
+            ? lifecycle.value.recoveryFromPhase
+            : lifecycle?.value.phase;
+        const cancellationIndex = effectivePhase === null || effectivePhase === undefined
+            ? undefined
+            : CANCELLATION_PHASE_INDEX.get(effectivePhase);
+        const normalPhaseIndex = lifecycle?.value.direction === 'cloud-to-lan'
+            ? COLLAB_CLOUD_TO_LAN_TRANSFER_PHASES.indexOf(effectivePhase)
+            : -1;
+        const isCloudSourceVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && lifecycle?.value.direction === 'cloud-to-lan'
+            && keysByTransfer.get(key.value.transferId)?.length === 2
+            && (recovery.value.relinquishmentProof !== null
+                || (cancellationIndex === undefined && normalPhaseIndex >= 2)
+                || (cancellationIndex !== undefined
+                    && cancellationIndex <= 1
+                    && lifecycle.value.checkpointSha256 !== null));
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || (!isEvidenceKey && !isCloudSourceProofVerifier))
+            || (!isEvidenceKey && !isCloudSourceVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {
@@ -1914,13 +1929,16 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || lifecycle?.value.operationKind !== 'authority-transfer'
                 || lifecycle.value.direction !== 'cloud-to-lan'
-                || lifecycle.value.state !== 'completed'
+                || (lifecycle.value.state !== 'completed' && lifecycle.value.state !== 'cancelled')
                 || terminal === undefined
                 || recovery === undefined
                 || item.value.memberId !== recovery.value.targetHostMemberId
-                || item.value.requestSha256 !== recovery.value.targetActivationRequestSha256
                 || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
                 || response === undefined
+                || response.phase !== lifecycle.value.phase
+                || response.state !== lifecycle.value.state
+                || (response.state === 'completed'
+                    && item.value.requestSha256 !== recovery.value.targetActivationRequestSha256)
                 || response.batchRevision !== lifecycle.value.batchRevision
                 || response.batchSha256 !== lifecycle.value.batchSha256
                 || response.checkpointSha256 !== lifecycle.value.checkpointSha256

package/dist/esm/CollabProjectCheckpoint.mjs

@@ -891,8 +891,8 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
     }
     else if (operation === 'getProjectAuthorityTransfer') {
         if (response.decoded.direction !== 'cloud-to-lan'
-            || response.decoded.phase !== 'completed'
-            || response.decoded.state !== 'completed'
+            || !((response.decoded.phase === 'completed' && response.decoded.state === 'completed')
+                || (response.decoded.phase === 'cancelled' && response.decoded.state === 'cancelled'))
             || response.decoded.expiresAt !== expiresAt)
             throw invalidPayload('responseJson');
     }
@@ -1203,9 +1203,17 @@ export function validateCheckpointRecordSequence(records, profile, acknowledgeme
         .map(item => [item.value.memberId, item.value.principalId]));
     const terminalResponders = records.filter((item) => (item.kind === 'terminal-responder'));
     const tombstones = records.filter((item) => (item.kind === 'tombstone'));
+    const terminalResponder = terminalResponders[0];
+    const transferTerminalResponse = terminalResponder?.value.operation
+        === 'getProjectAuthorityTransfer'
+        ? canonicalOperationResponseJson({ responseJson: terminalResponder.value.responseJson }, 'responseJson', 'getProjectAuthorityTransfer').decoded
+        : undefined;
+    const terminalRequiresTombstone = terminalResponder !== undefined && (terminalResponder.value.operation === 'retireProject'
+        || transferTerminalResponse?.state === 'completed');
     if (terminalResponders.length > 1
-        || (terminalResponders.length === 1 && (tombstones.length !== 1
-            || terminalResponders[0].value.expiresAt !== tombstones[0].value.terminalExpiresAt)))
+        || (terminalRequiresTombstone && (tombstones.length !== 1
+            || terminalResponder.value.expiresAt !== tombstones[0].value.terminalExpiresAt))
+        || (terminalResponder !== undefined && !terminalRequiresTombstone && tombstones.length !== 0))
         throw invalidPayload('records');
     const tombstone = tombstones[0];
     const retirementTerminal = terminalResponders.find(item => (item.value.operation === 'retireProject'));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.1.1",
+  "version": "4.1.3",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {