@claudian-collab/protocol 4.1.2 → 4.1.4

package/README.md

@@ -64,7 +64,7 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.1.2`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Package version** (this `package.json`): `4.1.4`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
 - **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `8`. The supported range is exactly `[8, 8]`. This is independent from Cloud binding version `4` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
 - **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `4`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v4 and wire versions before v8 are unsupported rather than translated or dual-interpreted.
 

package/dist/CollabProjectBackupCheckpoint.js

@@ -1520,7 +1520,10 @@ function validateContinuity(records) {
         const recoveryEvidenceInvalid = direction === null
             || (direction === 'lan-to-cloud' && recovery.value.sourceEvidence === null)
             || (targetEvidenceRequired && recovery.value.targetEvidence === null)
-            || (!isCancellation && (stageRequired !== (recovery.value.stageSha256 !== null)))
+            || (isCancellation
+                ? (lifecycle.value.batchRevision !== null)
+                    !== (recovery.value.stageSha256 !== null)
+                : stageRequired !== (recovery.value.stageSha256 !== null))
             || (direction === 'lan-to-cloud'
                 && recovery.value.stageSha256 !== null
                 && recovery.value.stageSha256 !== lifecycle.value.checkpointSha256)
@@ -1543,33 +1546,51 @@ function validateContinuity(records) {
         if (projectAuthorityGeneration !== expectedProjectAuthorityGeneration) {
             throw invalidPayload('records');
         }
+        const hostMemberId = direction === 'lan-to-cloud'
+            ? recovery.value.sourceHostMemberId
+            : recovery.value.targetHostMemberId;
+        const transferMemberIds = [...memberRecords.values()]
+            .filter(item => (item.value.status === 'active'
+            && item.value.memberId !== hostMemberId
+            && Date.parse(item.value.createdAt) <= Date.parse(recovery.value.createdAt)))
+            .map(item => item.value.memberId);
         if (!isCancellation) {
-            const hostMemberId = direction === 'lan-to-cloud'
-                ? recovery.value.sourceHostMemberId
-                : recovery.value.targetHostMemberId;
-            const eligibleMemberIds = [...memberRecords.values()]
-                .filter(item => item.value.status === 'active' && item.value.memberId !== hostMemberId)
-                .map(item => item.value.memberId);
-            const memberCustodyRequired = normalPhaseIndex >= 3;
             const batchReceiptRequired = direction === 'cloud-to-lan'
                 ? normalPhaseIndex >= 3
                 : normalPhaseIndex >= 4;
             if ((batchReceipt !== undefined) !== batchReceiptRequired) {
                 throw invalidPayload('records');
             }
-            for (const memberId of eligibleMemberIds) {
-                const identity = `${recovery.value.transferId}:${memberId}`;
-                const claimPresent = claims.has(identity);
-                const envelopePresent = protectedEnvelopes.has(identity);
-                const redemptionPresent = redemptionReceipts.has(identity);
-                const exactMemberCustody = direction === 'lan-to-cloud'
+        }
+        const memberCustody = transferMemberIds.map((memberId) => {
+            const identity = `${recovery.value.transferId}:${memberId}`;
+            const claimPresent = claims.has(identity);
+            const envelopePresent = protectedEnvelopes.has(identity);
+            const redemptionPresent = redemptionReceipts.has(identity);
+            return {
+                absent: !claimPresent && !envelopePresent && !redemptionPresent,
+                exact: direction === 'lan-to-cloud'
                     ? claimPresent && !envelopePresent
-                    : !claimPresent && envelopePresent !== redemptionPresent;
-                if (memberCustodyRequired !== exactMemberCustody) {
-                    throw invalidPayload('records');
-                }
+                    : !claimPresent && envelopePresent !== redemptionPresent,
+            };
+        });
+        const cleanupInProgress = isCancellation
+            && cancellationIndex === 1
+            && lifecycle.value.batchRevision !== null;
+        if (cleanupInProgress) {
+            const allAbsent = memberCustody.every(item => item.absent);
+            const allExact = memberCustody.every(item => item.exact);
+            if (!allAbsent && !allExact) {
+                throw invalidPayload('records');
             }
         }
+        else {
+            const memberCustodyRequired = isCancellation
+                ? !cleanupCompleted && lifecycle.value.batchRevision !== null
+                : normalPhaseIndex >= 3;
+            if (memberCustody.some(item => (memberCustodyRequired ? !item.exact : !item.absent)))
+                throw invalidPayload('records');
+        }
         if (recovery.value.targetEvidence !== null && (recovery.value.targetHostMemberId === null
             || principalBindings.get(recovery.value.targetHostMemberId)
                 !== recovery.value.targetEvidence.principalId))
@@ -1585,6 +1606,7 @@ function validateContinuity(records) {
                 ? 'cloud-to-lan'
                 : 'lan-to-cloud')
             || lifecycle.value.expectedAuthorityGeneration !== recovery.value.sourceAuthority.generation
+            || lifecycle.value.createdAt !== recovery.value.createdAt
             || lifecycle.value.scheduledAt !== recovery.value.expiresAt
             || (recovery.value.sourceHostMemberId !== null
                 && !members.has(recovery.value.sourceHostMemberId))
@@ -1608,23 +1630,39 @@ function validateContinuity(records) {
     }
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
+        const lifecycle = lifecycles.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
         const isEvidenceKey = evidence !== null
             && evidence !== undefined
             && evidence.receiptKeyId === key.value.receiptKeyId
             && evidence.receiptPublicKey === key.value.receiptPublicKey;
-        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
-            && recovery.value.relinquishmentProof !== null
-            && keysByTransfer.get(key.value.transferId)?.length === 2;
+        const effectivePhase = lifecycle?.value.state === 'recovery-required'
+            ? lifecycle.value.recoveryFromPhase
+            : lifecycle?.value.phase;
+        const cancellationIndex = effectivePhase === null || effectivePhase === undefined
+            ? undefined
+            : CANCELLATION_PHASE_INDEX.get(effectivePhase);
+        const normalPhaseIndex = lifecycle?.value.direction === 'cloud-to-lan'
+            ? CollabAuthorityTransfer_1.COLLAB_CLOUD_TO_LAN_TRANSFER_PHASES.indexOf(effectivePhase)
+            : -1;
+        const isCloudSourceVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && lifecycle?.value.direction === 'cloud-to-lan'
+            && keysByTransfer.get(key.value.transferId)?.length === 2
+            && (recovery.value.relinquishmentProof !== null
+                || (cancellationIndex === undefined && normalPhaseIndex >= 2)
+                || (cancellationIndex !== undefined
+                    && cancellationIndex <= 1
+                    && lifecycle.value.checkpointSha256 !== null));
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || (!isEvidenceKey && !isCloudSourceProofVerifier))
+            || (!isEvidenceKey && !isCloudSourceVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {
         const lifecycle = lifecycles.get(claim.value.transferId);
         const recovery = recoveries.get(claim.value.transferId);
+        const member = memberRecords.get(claim.value.memberId);
         const redemptionReceipt = redemptionReceipts.get(`${claim.value.transferId}:${claim.value.memberId}`);
         const redeemedOverride = redemptionReceipt === undefined
             ? undefined
@@ -1633,8 +1671,9 @@ function validateContinuity(records) {
                 && item.value.state === 'redeemed'
                 && item.value.claimSha256 === redemptionReceipt.value.receipt.claimSha256
                 && item.value.redemptionReceiptId === redemptionReceipt.value.receipt.receiptId));
-        if (memberRecords.get(claim.value.memberId)?.value.status !== 'active'
+        if (member?.value.status !== 'active'
             || recovery === undefined
+            || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
             || recovery.value.sourceAuthority.kind !== 'lan'
             || claim.value.memberId === recovery.value.sourceHostMemberId
             || lifecycle?.value.batchRevision !== claim.value.batchRevision
@@ -1817,10 +1856,12 @@ function validateContinuity(records) {
             const identity = `${item.value.transferId}:${item.value.memberId}`;
             const recovery = recoveries.get(item.value.transferId);
             const lifecycle = lifecycles.get(item.value.transferId);
+            const member = memberRecords.get(item.value.memberId);
             if (item.recordId !== identity
                 || recovery === undefined
                 || lifecycle === undefined
-                || memberRecords.get(item.value.memberId)?.value.status !== 'active'
+                || member?.value.status !== 'active'
+                || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
                 || item.value.memberId === recovery.value.targetHostMemberId
                 || item.value.associatedData.authorityGeneration
                     !== recovery.value.sourceAuthority.generation

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1510,7 +1510,10 @@ function validateContinuity(records) {
         const recoveryEvidenceInvalid = direction === null
             || (direction === 'lan-to-cloud' && recovery.value.sourceEvidence === null)
             || (targetEvidenceRequired && recovery.value.targetEvidence === null)
-            || (!isCancellation && (stageRequired !== (recovery.value.stageSha256 !== null)))
+            || (isCancellation
+                ? (lifecycle.value.batchRevision !== null)
+                    !== (recovery.value.stageSha256 !== null)
+                : stageRequired !== (recovery.value.stageSha256 !== null))
             || (direction === 'lan-to-cloud'
                 && recovery.value.stageSha256 !== null
                 && recovery.value.stageSha256 !== lifecycle.value.checkpointSha256)
@@ -1533,33 +1536,51 @@ function validateContinuity(records) {
         if (projectAuthorityGeneration !== expectedProjectAuthorityGeneration) {
             throw invalidPayload('records');
         }
+        const hostMemberId = direction === 'lan-to-cloud'
+            ? recovery.value.sourceHostMemberId
+            : recovery.value.targetHostMemberId;
+        const transferMemberIds = [...memberRecords.values()]
+            .filter(item => (item.value.status === 'active'
+            && item.value.memberId !== hostMemberId
+            && Date.parse(item.value.createdAt) <= Date.parse(recovery.value.createdAt)))
+            .map(item => item.value.memberId);
         if (!isCancellation) {
-            const hostMemberId = direction === 'lan-to-cloud'
-                ? recovery.value.sourceHostMemberId
-                : recovery.value.targetHostMemberId;
-            const eligibleMemberIds = [...memberRecords.values()]
-                .filter(item => item.value.status === 'active' && item.value.memberId !== hostMemberId)
-                .map(item => item.value.memberId);
-            const memberCustodyRequired = normalPhaseIndex >= 3;
             const batchReceiptRequired = direction === 'cloud-to-lan'
                 ? normalPhaseIndex >= 3
                 : normalPhaseIndex >= 4;
             if ((batchReceipt !== undefined) !== batchReceiptRequired) {
                 throw invalidPayload('records');
             }
-            for (const memberId of eligibleMemberIds) {
-                const identity = `${recovery.value.transferId}:${memberId}`;
-                const claimPresent = claims.has(identity);
-                const envelopePresent = protectedEnvelopes.has(identity);
-                const redemptionPresent = redemptionReceipts.has(identity);
-                const exactMemberCustody = direction === 'lan-to-cloud'
+        }
+        const memberCustody = transferMemberIds.map((memberId) => {
+            const identity = `${recovery.value.transferId}:${memberId}`;
+            const claimPresent = claims.has(identity);
+            const envelopePresent = protectedEnvelopes.has(identity);
+            const redemptionPresent = redemptionReceipts.has(identity);
+            return {
+                absent: !claimPresent && !envelopePresent && !redemptionPresent,
+                exact: direction === 'lan-to-cloud'
                     ? claimPresent && !envelopePresent
-                    : !claimPresent && envelopePresent !== redemptionPresent;
-                if (memberCustodyRequired !== exactMemberCustody) {
-                    throw invalidPayload('records');
-                }
+                    : !claimPresent && envelopePresent !== redemptionPresent,
+            };
+        });
+        const cleanupInProgress = isCancellation
+            && cancellationIndex === 1
+            && lifecycle.value.batchRevision !== null;
+        if (cleanupInProgress) {
+            const allAbsent = memberCustody.every(item => item.absent);
+            const allExact = memberCustody.every(item => item.exact);
+            if (!allAbsent && !allExact) {
+                throw invalidPayload('records');
             }
         }
+        else {
+            const memberCustodyRequired = isCancellation
+                ? !cleanupCompleted && lifecycle.value.batchRevision !== null
+                : normalPhaseIndex >= 3;
+            if (memberCustody.some(item => (memberCustodyRequired ? !item.exact : !item.absent)))
+                throw invalidPayload('records');
+        }
         if (recovery.value.targetEvidence !== null && (recovery.value.targetHostMemberId === null
             || principalBindings.get(recovery.value.targetHostMemberId)
                 !== recovery.value.targetEvidence.principalId))
@@ -1575,6 +1596,7 @@ function validateContinuity(records) {
                 ? 'cloud-to-lan'
                 : 'lan-to-cloud')
             || lifecycle.value.expectedAuthorityGeneration !== recovery.value.sourceAuthority.generation
+            || lifecycle.value.createdAt !== recovery.value.createdAt
             || lifecycle.value.scheduledAt !== recovery.value.expiresAt
             || (recovery.value.sourceHostMemberId !== null
                 && !members.has(recovery.value.sourceHostMemberId))
@@ -1598,23 +1620,39 @@ function validateContinuity(records) {
     }
     for (const key of keys.values()) {
         const recovery = recoveries.get(key.value.transferId);
+        const lifecycle = lifecycles.get(key.value.transferId);
         const evidence = recovery?.value.sourceEvidence ?? recovery?.value.targetEvidence;
         const isEvidenceKey = evidence !== null
             && evidence !== undefined
             && evidence.receiptKeyId === key.value.receiptKeyId
             && evidence.receiptPublicKey === key.value.receiptPublicKey;
-        const isCloudSourceProofVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
-            && recovery.value.relinquishmentProof !== null
-            && keysByTransfer.get(key.value.transferId)?.length === 2;
+        const effectivePhase = lifecycle?.value.state === 'recovery-required'
+            ? lifecycle.value.recoveryFromPhase
+            : lifecycle?.value.phase;
+        const cancellationIndex = effectivePhase === null || effectivePhase === undefined
+            ? undefined
+            : CANCELLATION_PHASE_INDEX.get(effectivePhase);
+        const normalPhaseIndex = lifecycle?.value.direction === 'cloud-to-lan'
+            ? COLLAB_CLOUD_TO_LAN_TRANSFER_PHASES.indexOf(effectivePhase)
+            : -1;
+        const isCloudSourceVerifier = recovery?.value.sourceAuthority.kind === 'cloud'
+            && lifecycle?.value.direction === 'cloud-to-lan'
+            && keysByTransfer.get(key.value.transferId)?.length === 2
+            && (recovery.value.relinquishmentProof !== null
+                || (cancellationIndex === undefined && normalPhaseIndex >= 2)
+                || (cancellationIndex !== undefined
+                    && cancellationIndex <= 1
+                    && lifecycle.value.checkpointSha256 !== null));
         if (recovery === undefined
             || evidence === null
             || evidence === undefined
-            || (!isEvidenceKey && !isCloudSourceProofVerifier))
+            || (!isEvidenceKey && !isCloudSourceVerifier))
             throw invalidPayload('records');
     }
     for (const claim of claims.values()) {
         const lifecycle = lifecycles.get(claim.value.transferId);
         const recovery = recoveries.get(claim.value.transferId);
+        const member = memberRecords.get(claim.value.memberId);
         const redemptionReceipt = redemptionReceipts.get(`${claim.value.transferId}:${claim.value.memberId}`);
         const redeemedOverride = redemptionReceipt === undefined
             ? undefined
@@ -1623,8 +1661,9 @@ function validateContinuity(records) {
                 && item.value.state === 'redeemed'
                 && item.value.claimSha256 === redemptionReceipt.value.receipt.claimSha256
                 && item.value.redemptionReceiptId === redemptionReceipt.value.receipt.receiptId));
-        if (memberRecords.get(claim.value.memberId)?.value.status !== 'active'
+        if (member?.value.status !== 'active'
             || recovery === undefined
+            || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
             || recovery.value.sourceAuthority.kind !== 'lan'
             || claim.value.memberId === recovery.value.sourceHostMemberId
             || lifecycle?.value.batchRevision !== claim.value.batchRevision
@@ -1807,10 +1846,12 @@ function validateContinuity(records) {
             const identity = `${item.value.transferId}:${item.value.memberId}`;
             const recovery = recoveries.get(item.value.transferId);
             const lifecycle = lifecycles.get(item.value.transferId);
+            const member = memberRecords.get(item.value.memberId);
             if (item.recordId !== identity
                 || recovery === undefined
                 || lifecycle === undefined
-                || memberRecords.get(item.value.memberId)?.value.status !== 'active'
+                || member?.value.status !== 'active'
+                || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
                 || item.value.memberId === recovery.value.targetHostMemberId
                 || item.value.associatedData.authorityGeneration
                     !== recovery.value.sourceAuthority.generation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.1.2",
+  "version": "4.1.4",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {