@claudian-collab/protocol 4.1.2 → 4.1.3

package/README.md

@@ -64,7 +64,7 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.1.2`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Package version** (this `package.json`): `4.1.3`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
 - **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `8`. The supported range is exactly `[8, 8]`. This is independent from Cloud binding version `4` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
 - **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `4`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v4 and wire versions before v8 are unsupported rather than translated or dual-interpreted.
 

package/dist/CollabProjectBackupCheckpoint.js

@@ -1608,18 +1608,33 @@ function validateContinuity(records) {
     }
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
+        const lifecycle = lifecycles.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
         const isEvidenceKey = evidence !== null
             && evidence !== undefined
             && evidence.receiptKeyId === key.value.receiptKeyId
             && evidence.receiptPublicKey === key.value.receiptPublicKey;
-        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
-            && recovery.value.relinquishmentProof !== null
-            && keysByTransfer.get(key.value.transferId)?.length === 2;
+        const effectivePhase = lifecycle?.value.state === 'recovery-required'
+            ? lifecycle.value.recoveryFromPhase
+            : lifecycle?.value.phase;
+        const cancellationIndex = effectivePhase === null || effectivePhase === undefined
+            ? undefined
+            : CANCELLATION_PHASE_INDEX.get(effectivePhase);
+        const normalPhaseIndex = lifecycle?.value.direction === 'cloud-to-lan'
+            ? CollabAuthorityTransfer_1.COLLAB_CLOUD_TO_LAN_TRANSFER_PHASES.indexOf(effectivePhase)
+            : -1;
+        const isCloudSourceVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && lifecycle?.value.direction === 'cloud-to-lan'
+            && keysByTransfer.get(key.value.transferId)?.length === 2
+            && (recovery.value.relinquishmentProof !== null
+                || (cancellationIndex === undefined && normalPhaseIndex >= 2)
+                || (cancellationIndex !== undefined
+                    && cancellationIndex <= 1
+                    && lifecycle.value.checkpointSha256 !== null));
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || (!isEvidenceKey && !isCloudSourceProofVerifier))
+            || (!isEvidenceKey && !isCloudSourceVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1598,18 +1598,33 @@ function validateContinuity(records) {
     }
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
+        const lifecycle = lifecycles.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
         const isEvidenceKey = evidence !== null
             && evidence !== undefined
             && evidence.receiptKeyId === key.value.receiptKeyId
             && evidence.receiptPublicKey === key.value.receiptPublicKey;
-        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
-            && recovery.value.relinquishmentProof !== null
-            && keysByTransfer.get(key.value.transferId)?.length === 2;
+        const effectivePhase = lifecycle?.value.state === 'recovery-required'
+            ? lifecycle.value.recoveryFromPhase
+            : lifecycle?.value.phase;
+        const cancellationIndex = effectivePhase === null || effectivePhase === undefined
+            ? undefined
+            : CANCELLATION_PHASE_INDEX.get(effectivePhase);
+        const normalPhaseIndex = lifecycle?.value.direction === 'cloud-to-lan'
+            ? COLLAB_CLOUD_TO_LAN_TRANSFER_PHASES.indexOf(effectivePhase)
+            : -1;
+        const isCloudSourceVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && lifecycle?.value.direction === 'cloud-to-lan'
+            && keysByTransfer.get(key.value.transferId)?.length === 2
+            && (recovery.value.relinquishmentProof !== null
+                || (cancellationIndex === undefined && normalPhaseIndex >= 2)
+                || (cancellationIndex !== undefined
+                    && cancellationIndex <= 1
+                    && lifecycle.value.checkpointSha256 !== null));
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || (!isEvidenceKey && !isCloudSourceProofVerifier))
+            || (!isEvidenceKey && !isCloudSourceVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.1.2",
+  "version": "4.1.3",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {