@claudian-collab/protocol 4.1.4 → 4.2.1

package/README.md

@@ -20,7 +20,7 @@ or compatibility rules.
 - Shared limits that client and server must agree on (`COLLAB_LIMITS`)
 - Protocol-version negotiation (`COLLAB_PROTOCOL_VERSION`, envelope decoding)
 - Canonical Project checkpoint profiles, logical records, authority-generation transfer, exact membership claims, target-signed redemption receipts, offline backup operational continuity, and Project retirement contracts
-- Cloud binding v4 route construction/matching, bounded checkpoint streams, capability negotiation, strict success/error envelopes, private-development bootstrap, Project snapshot, and redacted event contracts
+- Cloud binding v5 route construction/matching, bounded checkpoint streams, capability negotiation, strict success/error envelopes, private-development bootstrap, Project snapshot, and redacted event contracts
 - Markdown-derived Ticket-reference and Member-mention semantics shared by
   client rendering and authority derivation
 
@@ -37,7 +37,7 @@ fixed part of the detail so the whole detail stays within
 has one compatible final-serialization limit. Request comments and Ticket
 accepted relations also have shared authority-enforced total limits; summary
 counts let complete consumers reject partial or cross-snapshot assembly.
-Cloud binding v4 retains the authority-neutral Project snapshot, nine redacted durable event kinds plus `snapshot.required`, eighteen capability tokens, the exact ordinary Project/Git route catalog, bounded authority-transfer artifact routes, and six private-development bootstrap bindings. Wire v8 adds target-confirmed Cloud-to-LAN invalidation and cleanup to the existing authority-transfer contract. Its domain-separated Ed25519 proof binds the exact target Member, source and target generations, checkpoint, stage, current claim batch when present, and cleanup digest; Manager cancellation, timeout, disconnect, or target absence does not prove cleanup. The shared checkpoint container is exactly `checkpoint.json`, `coordination.ndjson`, and `repository.bundle`; authority-transfer and export use wire-visible coordination format v1, and offline backup uses format v3. Portable profiles exclude engine storage, paths, credentials, tokens, private keys, and operational refs, and backups exclude plaintext invitation secrets, raw claims, and private keys. Existing LAN Join, invitation, endpoint, membership lifecycle, Host-transfer, snapshot, event, and HTTP bindings remain independently application-owned; the dedicated LAN authority-transfer transport binds shared payloads without creating another shared operation registry.
+Cloud binding v5 retains the authority-neutral Project snapshot, nine redacted durable event kinds plus `snapshot.required`, eighteen capability tokens, the exact ordinary Project/Git route catalog, bounded authority-transfer artifact routes, and six private-development bootstrap bindings. Wire v9 retains target-confirmed Cloud-to-LAN invalidation and cleanup to the existing authority-transfer contract. Its domain-separated Ed25519 proof binds the exact target Member, source and target generations, checkpoint, stage, current claim batch when present, and cleanup digest; Manager cancellation, timeout, disconnect, or target absence does not prove cleanup. The shared checkpoint container is exactly `checkpoint.json`, `coordination.ndjson`, and `repository.bundle`; authority-transfer and export use wire-visible coordination format v1, and offline backup uses format v3. Portable profiles exclude engine storage, paths, credentials, tokens, private keys, and operational refs, and backups exclude plaintext invitation secrets, raw claims, and private keys. Existing LAN Join, invitation, endpoint, membership lifecycle, Host-transfer, snapshot, event, and HTTP bindings remain independently application-owned; the dedicated LAN authority-transfer transport binds shared payloads without creating another shared operation registry.
 
 Backup coordination artifacts are limited to 256 MiB of actual UTF-8 bytes, including the final newline. The decoder, encoder, and consistency checker apply this same inclusive limit without rewriting principals into an intermediate format. Valid current-format artifacts at the limit are accepted; an additional byte is rejected.
 
@@ -64,12 +64,13 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.1.4`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
-- **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `8`. The supported range is exactly `[8, 8]`. This is independent from Cloud binding version `4` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
-- **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `4`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v4 and wire versions before v8 are unsupported rather than translated or dual-interpreted.
+- **Package version** (this `package.json`): `4.2.1`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `9`. The supported range is exactly `[9, 9]`. This is independent from Cloud binding version `5` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
+- **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `5`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v5 and wire versions before v9 are unsupported rather than translated or dual-interpreted.
 
 ### Compatibility behavior
 
+- A Cloud error envelope may carry `mutationOutcome: 'rejected'` only when the authority has checked the exact request's retained result and nonterminal journal under its Project write lane and durable state prevents that request from ever applying. A persisted rejection fence or a strictly advanced monotone expected-state value can establish that guarantee; a later snapshot, missing row, ordinary rejection code, timeout, or diagnostic reason cannot. The envelope's request ID binds the proof to the submitted operation and request. Without this property, clients must preserve ambiguous mutation recovery. The authority must preserve the facts establishing this guarantee in backup/restore and delayed-duplicate handling.
 - Envelope decoders reject unknown fields (`protocol-payload-invalid`).
   Operation request and response compatibility is
   decoder-defined and pinned by package fixtures; decoded DTOs are reconstructed

package/dist/CollabCloudBinding.d.ts

@@ -2,7 +2,7 @@ import { COLLAB_PROTOCOL_VERSION } from './CollabConstants';
 import { CollabError, type CollabDiagnosticContext, type CollabErrorCode, type CollabRecoveryAction } from './CollabError';
 import { COLLAB_PROJECT_CHECKPOINT_ARTIFACTS } from './CollabProjectCheckpoint';
 import type { CollabIsoTimestamp, CollabProjectId } from './types';
-export declare const COLLAB_CLOUD_BINDING_VERSION: 4;
+export declare const COLLAB_CLOUD_BINDING_VERSION: 5;
 export declare const COLLAB_CLOUD_CAPABILITY_DOCUMENT_SCHEMA_VERSION: 2;
 export declare const COLLAB_CLOUD_CAPABILITIES: readonly ["accept", "authority-transfer", "cloud-imported-membership-claims", "cloud-project-create", "cloud-project-invitations", "cloud-project-join", "cloud-project-leave", "cloud-project-manager-responsibility", "cloud-project-membership", "development-bootstrap", "git-receive-pack-personal-ref", "git-upload-pack", "project-checkpoint-export", "project-events", "project-retirement", "project-snapshot", "requests", "tickets"];
 export type CollabCloudCapability = typeof COLLAB_CLOUD_CAPABILITIES[number];
@@ -122,6 +122,12 @@ export interface CollabCloudWireError {
 }
 export interface CollabCloudErrorEnvelope {
     readonly error: CollabCloudWireError;
+    /**
+     * Exact request-correlated proof of no retained success or nonterminal journal,
+     * and durable authority state preventing this request from applying later.
+     * Omission leaves the mutation outcome unknown, regardless of the error code.
+     */
+    readonly mutationOutcome?: 'rejected';
     readonly protocolVersion: typeof COLLAB_PROTOCOL_VERSION;
     readonly requestId: string;
 }
@@ -142,5 +148,5 @@ export declare function collabCloudCapabilityDocument(capabilities: readonly Col
 export declare function collabCloudCapabilitySupported(document: CollabCloudCapabilityDocument, capability: CollabCloudCapability): boolean;
 export declare function collabCloudSuccessEnvelope<T>(requestId: string, data: T): CollabCloudSuccessEnvelope<T>;
 export declare function decodeCollabCloudSuccessEnvelope<T = unknown>(value: unknown): CollabCloudSuccessEnvelope<T>;
-export declare function collabCloudErrorEnvelope(requestId: string, error: CollabError): CollabCloudErrorEnvelope;
+export declare function collabCloudErrorEnvelope(requestId: string, error: CollabError, mutationOutcome?: CollabCloudErrorEnvelope['mutationOutcome']): CollabCloudErrorEnvelope;
 export declare function decodeCollabCloudErrorEnvelope(value: unknown): CollabCloudErrorEnvelope;

package/dist/CollabCloudBinding.js

@@ -23,7 +23,7 @@ const CollabControlOperationCodecs_1 = require("./CollabControlOperationCodecs")
 const CollabError_1 = require("./CollabError");
 const CollabValidation_1 = require("./CollabValidation");
 const CollabProjectCheckpoint_1 = require("./CollabProjectCheckpoint");
-exports.COLLAB_CLOUD_BINDING_VERSION = 4;
+exports.COLLAB_CLOUD_BINDING_VERSION = 5;
 exports.COLLAB_CLOUD_CAPABILITY_DOCUMENT_SCHEMA_VERSION = 2;
 exports.COLLAB_CLOUD_CAPABILITIES = Object.freeze([
     'accept',
@@ -188,7 +188,7 @@ function collabCloudProjectOperationRoute(projectId, operation) {
     assertProjectId(projectId);
     if (!isCloudJsonOperation(operation))
         invalidRoute();
-    return route('POST', `/v4/projects/${projectId}/operations/${operation}`, {
+    return route('POST', `/v5/projects/${projectId}/operations/${operation}`, {
         kind: 'project-operation',
         operation,
         projectId,
@@ -198,7 +198,7 @@ function collabCloudProjectEventsRoute(projectId, afterSequence) {
     assertProjectId(projectId);
     if (!Number.isSafeInteger(afterSequence) || afterSequence < 0)
         invalidRoute();
-    return route('GET', `/v4/projects/${projectId}/events?afterSequence=${afterSequence}`, {
+    return route('GET', `/v5/projects/${projectId}/events?afterSequence=${afterSequence}`, {
         afterSequence,
         kind: 'project-events',
         projectId,
@@ -209,11 +209,11 @@ function collabCloudGitRoute(projectId, routeKind, service) {
     if (routeKind === 'info-refs') {
         if (service !== 'git-upload-pack' && service !== 'git-receive-pack')
             invalidRoute();
-        return route('GET', `/v4/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
+        return route('GET', `/v5/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
     }
     if (service !== undefined)
         invalidRoute();
-    return route('POST', `/v4/projects/${projectId}/repository.git/${routeKind}`, {
+    return route('POST', `/v5/projects/${projectId}/repository.git/${routeKind}`, {
         kind: routeKind,
         projectId,
     });
@@ -224,7 +224,7 @@ function collabCloudAuthorityTransferArtifactRoute(projectId, transferId, direct
     if (direction !== 'download' && direction !== 'upload'
         || !COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route(direction === 'upload' ? 'PUT' : 'GET', `/v4/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
+    return route(direction === 'upload' ? 'PUT' : 'GET', `/v5/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
         artifact,
         direction,
         kind: 'authority-transfer-artifact',
@@ -237,7 +237,7 @@ function collabCloudProjectCheckpointExportArtifactRoute(projectId, exportId, ar
     assertAttemptId(exportId);
     if (!COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route('GET', `/v4/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
+    return route('GET', `/v5/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
         artifact,
         exportId,
         kind: 'project-checkpoint-export-artifact',
@@ -249,7 +249,7 @@ function collabCloudProjectCheckpointExportRoute(projectId, exportId, operation)
     assertAttemptId(exportId);
     if (operation !== 'begin' && operation !== 'status')
         invalidRoute();
-    return route(operation === 'begin' ? 'POST' : 'GET', `/v4/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
+    return route(operation === 'begin' ? 'POST' : 'GET', `/v5/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
 }
 function decodeCollabCloudProjectCheckpointExportStatus(value) {
     const source = exactRecord(value, 'checkpointExport', [
@@ -287,7 +287,7 @@ function decodeCollabCloudProjectCheckpointExportStatus(value) {
     });
 }
 function collabDevelopmentBootstrapRoute(operation, attemptId) {
-    const base = '/v4/development/bootstrap/attempts';
+    const base = '/v5/development/bootstrap/attempts';
     if (operation === 'beginDevelopmentBootstrap') {
         if (attemptId !== undefined)
             invalidRoute();
@@ -346,7 +346,7 @@ function matchCollabCloudRoute(method, target) {
         && url.pathname === '/collab/capabilities'
         && exactQuery(url, []))
         return { kind: 'capabilities' };
-    if (segments[0] === 'v4'
+    if (segments[0] === 'v5'
         && segments[1] === 'projects'
         && (0, CollabValidation_1.isCollabProjectId)(segments[2])) {
         const projectId = segments[2];
@@ -425,7 +425,7 @@ function matchCollabCloudRoute(method, target) {
             && exactQuery(url, []))
             return { kind: segments[4], projectId };
     }
-    if (segments[0] !== 'v4'
+    if (segments[0] !== 'v5'
         || segments[1] !== 'development'
         || segments[2] !== 'bootstrap'
         || segments[3] !== 'attempts'
@@ -533,21 +533,32 @@ function decodeCollabCloudSuccessEnvelope(value) {
         requestId: source.requestId,
     });
 }
-function collabCloudErrorEnvelope(requestId, error) {
+function collabCloudErrorEnvelope(requestId, error, mutationOutcome) {
     if (!(0, CollabValidation_1.isCollabOpaqueId)(requestId))
         throw invalidPayload('requestId');
+    if (mutationOutcome !== undefined && mutationOutcome !== 'rejected') {
+        throw invalidPayload('mutationOutcome');
+    }
     return Object.freeze({
         error: Object.freeze({
             code: error.code,
             recoveryActions: Object.freeze([...error.recoveryActions]),
             safeContext: error.safeContext,
         }),
+        ...(mutationOutcome === undefined ? {} : { mutationOutcome }),
         protocolVersion: CollabConstants_1.COLLAB_PROTOCOL_VERSION,
         requestId,
     });
 }
 function decodeCollabCloudErrorEnvelope(value) {
-    const source = exactRecord(value, 'envelope', ['error', 'protocolVersion', 'requestId']);
+    const source = record(value, 'envelope');
+    const hasOutcome = Object.hasOwn(source, 'mutationOutcome');
+    if (!hasExactKeys(source, hasOutcome
+        ? ['error', 'mutationOutcome', 'protocolVersion', 'requestId']
+        : ['error', 'protocolVersion', 'requestId']))
+        throw invalidPayload('envelope');
+    if (hasOutcome && source.mutationOutcome !== 'rejected')
+        throw invalidPayload('mutationOutcome');
     const wireError = exactRecord(source.error, 'error', [
         'code',
         'recoveryActions',
@@ -573,6 +584,7 @@ function decodeCollabCloudErrorEnvelope(value) {
             ]),
             safeContext,
         }),
+        ...(hasOutcome ? { mutationOutcome: 'rejected' } : {}),
         protocolVersion: CollabConstants_1.COLLAB_PROTOCOL_VERSION,
         requestId: source.requestId,
     });

package/dist/CollabConstants.d.ts

@@ -1,4 +1,4 @@
-export declare const COLLAB_PROTOCOL_VERSION: 8;
+export declare const COLLAB_PROTOCOL_VERSION: 9;
 export declare const COLLAB_MAIN_REF: "refs/heads/main";
 export declare const COLLAB_MEMBER_REF_PREFIX: "refs/heads/members/";
 export declare const COLLAB_LIMITS: Readonly<{

package/dist/CollabConstants.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.COLLAB_LIMITS = exports.COLLAB_MEMBER_REF_PREFIX = exports.COLLAB_MAIN_REF = exports.COLLAB_PROTOCOL_VERSION = void 0;
-exports.COLLAB_PROTOCOL_VERSION = 8;
+exports.COLLAB_PROTOCOL_VERSION = 9;
 exports.COLLAB_MAIN_REF = 'refs/heads/main';
 exports.COLLAB_MEMBER_REF_PREFIX = 'refs/heads/members/';
 exports.COLLAB_LIMITS = Object.freeze({

package/dist/CollabMemberMentionParser.js

@@ -2,7 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseCollabMemberMentions = parseCollabMemberMentions;
 const CollabMarkdownProse_1 = require("./CollabMarkdownProse");
-const MENTION_ADJACENT_CHARACTER = /[\p{L}\p{N}_@-]/u;
+const MENTION_PRECEDING_CHARACTER = /[\p{L}\p{N}_@-]$/u;
+const MENTION_FOLLOWING_CHARACTER = /^[\p{L}\p{N}_@-]/u;
 function parseCollabMemberMentions(markdown, targets) {
     const candidates = mentionCandidates(targets);
     if (candidates.length === 0)
@@ -15,14 +16,15 @@ function parseCollabMemberMentions(markdown, targets) {
         if (mentionStart < 0)
             break;
         searchFrom = mentionStart + 1;
-        const preceding = prose[mentionStart - 1];
-        if (preceding !== undefined && MENTION_ADJACENT_CHARACTER.test(preceding))
+        const preceding = prose.slice(Math.max(0, mentionStart - 2), mentionStart);
+        if (MENTION_PRECEDING_CHARACTER.test(preceding))
             continue;
         const candidate = candidates.find(entry => {
             if (!prose.startsWith(entry.name, mentionStart + 1))
                 return false;
-            const following = prose[mentionStart + entry.name.length + 1];
-            return following === undefined || !MENTION_ADJACENT_CHARACTER.test(following);
+            const followingOffset = mentionStart + entry.name.length + 1;
+            const following = prose.slice(followingOffset, followingOffset + 2);
+            return !MENTION_FOLLOWING_CHARACTER.test(following);
         });
         if (!candidate)
             continue;

package/dist/CollabProjectBackupCheckpoint.js

@@ -1384,6 +1384,13 @@ function validateContinuity(records) {
     const terminalResponders = new Map(records
         .filter((item) => (item.kind === 'terminal-responder'))
         .map(item => [item.value.operationId, item]));
+    const terminalMembers = new Map([...terminalResponders].map(([operationId, terminal]) => [
+        operationId,
+        {
+            acknowledgements: new Map(terminal.value.acknowledgements.map(item => [item.memberId, item])),
+            eligibleMemberIds: new Set(terminal.value.eligibleMemberIds),
+        },
+    ]));
     const terminalPrincipals = new Map(records
         .filter((item) => (item.kind === 'terminal-principal'))
         .map(item => [`${item.value.operationId}:${item.value.memberId}`, item]));
@@ -1400,6 +1407,9 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'protected-invitation-envelope'))
         .map(item => [item.value.invitationId, item]));
     const claimOverrides = records.filter((item) => (item.kind === 'transferred-membership-claim-override'));
+    const redeemedOverrideIdentities = new Set(claimOverrides
+        .filter(item => item.value.state === 'redeemed')
+        .map(item => (`${item.value.transferId}:${item.value.memberId}:${item.value.claimSha256}:${item.value.redemptionReceiptId}`)));
     const claimOverrideEnvelopes = new Map(records
         .filter((item) => (item.kind === 'protected-claim-override-envelope'))
         .map(item => [
@@ -1412,6 +1422,28 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'project-membership-recovery'))
         .map(item => [item.value.operationId, item]));
     const secretReplayTombstones = records.filter((item) => (item.kind === 'secret-replay-tombstone'));
+    const secretTombstonesByIdentity = new Map(secretReplayTombstones.map(item => [
+        `${item.recordId}:${item.value.requestFingerprint}`,
+        item,
+    ]));
+    const liveSecretIdentities = new Set();
+    for (const invitation of invitations.values()) {
+        if (invitationEnvelopes.has(invitation.value.invitationId)) {
+            liveSecretIdentities.add(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}`);
+        }
+    }
+    for (const override of claimOverrides) {
+        if (claimOverrideEnvelopes.has(override.recordId)) {
+            liveSecretIdentities.add(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}`);
+        }
+    }
+    const liveIdempotencyIdentities = new Set(records
+        .filter(item => item.kind === 'idempotency-result')
+        .map(item => `${item.value.operation}:${item.value.memberId}:${item.value.idempotencyKey}`));
+    for (const offer of managerOffers) {
+        liveIdempotencyIdentities.add(`createManagerResponsibilityOffer:${offer.value.sourceManagerMemberId}:${offer.value.idempotencyKey}`);
+    }
+    const claimOverrideRecordIds = new Set(claimOverrides.map(item => item.recordId));
     const nonterminalLifecycles = [...lifecycles.values()].filter(item => (item.value.state === 'active' || item.value.state === 'recovery-required'));
     if (nonterminalLifecycles.length > 1
         || principalBindingRecords.some(item => (memberRecords.get(item.value.memberId)?.value.status !== 'active'))
@@ -1664,13 +1696,8 @@ function validateContinuity(records) {
         const recovery = recoveries.get(claim.value.transferId);
         const member = memberRecords.get(claim.value.memberId);
         const redemptionReceipt = redemptionReceipts.get(`${claim.value.transferId}:${claim.value.memberId}`);
-        const redeemedOverride = redemptionReceipt === undefined
-            ? undefined
-            : claimOverrides.find(item => (item.value.transferId === claim.value.transferId
-                && item.value.memberId === claim.value.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === redemptionReceipt.value.receipt.claimSha256
-                && item.value.redemptionReceiptId === redemptionReceipt.value.receipt.receiptId));
+        const hasRedeemedOverride = redemptionReceipt !== undefined
+            && redeemedOverrideIdentities.has(`${claim.value.transferId}:${claim.value.memberId}:${redemptionReceipt.value.receipt.claimSha256}:${redemptionReceipt.value.receipt.receiptId}`);
         if (member?.value.status !== 'active'
             || recovery === undefined
             || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
@@ -1684,8 +1711,8 @@ function validateContinuity(records) {
             || (claim.value.state === 'redeemed' && redemptionReceipt === undefined)
             || (redemptionReceipt !== undefined
                 && claim.value.state !== 'redeemed'
-                && redeemedOverride === undefined)
-            || (claim.value.state === 'redeemed' && redeemedOverride !== undefined)) {
+                && !hasRedeemedOverride)
+            || (claim.value.state === 'redeemed' && hasRedeemedOverride)) {
             throw invalidPayload('records');
         }
     }
@@ -1728,10 +1755,7 @@ function validateContinuity(records) {
     }
     for (const invitation of invitations.values()) {
         const envelope = invitationEnvelopes.get(invitation.value.invitationId);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'createProjectInvitation'
-            && item.value.actorMemberId === invitation.value.issuedByMemberId
-            && item.value.idempotencyKey === invitation.value.idempotencyKey
-            && item.value.requestFingerprint === invitation.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}:${invitation.value.requestFingerprint}`);
         if (!members.has(invitation.value.issuedByMemberId)
             || (envelope === undefined) === (tombstone === undefined)
             || (tombstone !== undefined
@@ -1752,10 +1776,7 @@ function validateContinuity(records) {
         values.push(override);
         overridesByMember.set(identity, values);
         const envelope = claimOverrideEnvelopes.get(`${identity}:${override.value.claimGeneration}`);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'reissueTransferredMembershipClaim'
-            && item.value.actorMemberId === override.value.managerMemberId
-            && item.value.idempotencyKey === override.value.idempotencyKey
-            && item.value.requestFingerprint === override.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}:${override.value.requestFingerprint}`);
         if (!members.has(override.value.memberId)
             || !members.has(override.value.managerMemberId)
             || (envelope === undefined) === (tombstone === undefined)
@@ -1810,9 +1831,7 @@ function validateContinuity(records) {
             throw invalidPayload('records');
     }
     for (const envelope of claimOverrideEnvelopes.values()) {
-        if (!claimOverrides.some(item => (item.value.transferId === envelope.value.transferId
-            && item.value.memberId === envelope.value.memberId
-            && item.value.claimGeneration === envelope.value.claimGeneration)))
+        if (!claimOverrideRecordIds.has(envelope.recordId))
             throw invalidPayload('records');
     }
     const currentOffers = managerOffers.filter(item => (item.value.state === 'offered' || item.value.state === 'acknowledged'));
@@ -1825,26 +1844,14 @@ function validateContinuity(records) {
             !== currentOffers.length)
         throw invalidPayload('records');
     for (const tombstone of secretReplayTombstones) {
-        const liveSecretRecord = tombstone.value.operation === 'createProjectInvitation'
-            ? [...invitations.values()].some(item => (item.value.issuedByMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && invitationEnvelopes.has(item.value.invitationId)))
-            : claimOverrides.some(item => (item.value.managerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && claimOverrideEnvelopes.has(`${item.value.transferId}:${item.value.memberId}:${item.value.claimGeneration}`)));
-        if (!members.has(tombstone.value.actorMemberId) || liveSecretRecord) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveSecretIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
     for (const tombstone of membershipIdempotencyTombstones) {
-        const exactResult = records.some(item => (item.kind === 'idempotency-result'
-            && item.value.memberId === tombstone.value.actorMemberId
-            && item.value.operation === tombstone.value.operation
-            && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        const exactOffer = tombstone.value.operation === 'createManagerResponsibilityOffer'
-            && managerOffers.some(item => (item.value.sourceManagerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        if (!members.has(tombstone.value.actorMemberId) || exactResult || exactOffer) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveIdempotencyIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
@@ -1901,18 +1908,14 @@ function validateContinuity(records) {
             const lifecycle = lifecycles.get(receipt.transferId);
             const terminalPrincipal = terminalPrincipals.get(identity);
             const lanToCloud = recovery?.value.sourceAuthority.kind === 'lan';
-            const redeemedOverride = claimOverrides.find(item => (item.value.transferId === receipt.transferId
-                && item.value.memberId === receipt.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === receipt.claimSha256
-                && item.value.redemptionReceiptId === receipt.receiptId));
+            const hasRedeemedOverride = redeemedOverrideIdentities.has(`${receipt.transferId}:${receipt.memberId}:${receipt.claimSha256}:${receipt.receiptId}`);
             const matchesSourceClaim = claim?.value.state === 'redeemed'
                 && claim.value.claimSha256 === receipt.claimSha256
                 && claim.value.checkpointSha256 === receipt.checkpointSha256
                 && claim.value.operationIntentId === receipt.operationIntentId
                 && claim.value.redemptionReceiptId === receipt.receiptId;
             const matchesOverride = claim !== undefined
-                && redeemedOverride !== undefined
+                && hasRedeemedOverride
                 && claim.value.checkpointSha256 === receipt.checkpointSha256;
             if (recovery === undefined
                 || lifecycle === undefined
@@ -1932,7 +1935,8 @@ function validateContinuity(records) {
         }
         if (item.kind === 'terminal-principal') {
             const terminal = terminalResponders.get(item.value.operationId);
-            const acknowledgement = terminal?.value.acknowledgements.find(value => (value.memberId === item.value.memberId));
+            const terminalMemberIndex = terminalMembers.get(item.value.operationId);
+            const acknowledgement = terminalMemberIndex?.acknowledgements.get(item.value.memberId);
             const expectedOperationKind = terminal?.value.operation === 'getProjectAuthorityTransfer'
                 ? 'authority-transfer'
                 : terminal?.value.operation === 'retireProject'
@@ -1941,7 +1945,7 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || terminal === undefined
                 || expectedOperationKind !== item.value.operationKind
-                || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
+                || !terminalMemberIndex?.eligibleMemberIds.has(item.value.memberId)
                 || (item.value.acknowledgedAt === null) !== (acknowledgement === undefined)
                 || (acknowledgement !== undefined && (acknowledgement.acknowledgedAt !== item.value.acknowledgedAt
                     || acknowledgement.principalId !== item.value.principalId))
@@ -2097,8 +2101,8 @@ function decodeCollabProjectBackupCheckpointCoordinationNdjson(value) {
 }
 function encodeCollabProjectBackupCheckpointCoordinationNdjson(records) {
     const value = records.map(item => JSON.stringify(item)).join('\n') + '\n';
-    return decodeCollabProjectBackupCheckpointCoordinationNdjson(value)
-        .map(item => JSON.stringify(item)).join('\n') + '\n';
+    decodeCollabProjectBackupCheckpointCoordinationNdjson(value);
+    return value;
 }
 function validateCollabProjectBackupCheckpointConsistency(manifest, records) {
     const decodedManifest = decodeCollabProjectBackupCheckpointManifest(manifest);

package/dist/CollabProjectCheckpoint.js

@@ -939,9 +939,10 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
                 : token(acknowledgement, 'principalId'),
         };
     });
+    const eligibleMemberIdSet = new Set(eligibleMemberIds);
     const acknowledgementPrincipals = new Set();
     acknowledgements.forEach((item, index) => {
-        if (!eligibleMemberIds.includes(item.memberId)
+        if (!eligibleMemberIdSet.has(item.memberId)
             || (index > 0 && acknowledgements[index - 1].memberId.localeCompare(item.memberId, 'en-US') >= 0)
             || (!deferPrincipals && acknowledgementPrincipals.has(item.principalId)))
             throw invalidPayload('acknowledgements');
@@ -1313,8 +1314,8 @@ function decodeCollabProjectCheckpointCoordinationNdjson(value, profile) {
 }
 function encodeCollabProjectCheckpointCoordinationNdjson(records, profile) {
     const encoded = records.map(record => JSON.stringify(record)).join('\n') + '\n';
-    return decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile)
-        .map(record => JSON.stringify(record)).join('\n') + '\n';
+    decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile);
+    return encoded;
 }
 function checkpointRecordGitOids(checkpointRecord) {
     switch (checkpointRecord.kind) {

package/dist/CollabTicketReferenceParser.js

@@ -4,11 +4,26 @@ exports.parseCollabTicketReferences = parseCollabTicketReferences;
 exports.scanCollabTicketReferences = scanCollabTicketReferences;
 const CollabConstants_1 = require("./CollabConstants");
 const CollabMarkdownProse_1 = require("./CollabMarkdownProse");
-const CLOSING_KEYWORD_PATTERN = /(?:^|[^A-Za-z])(close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)[ \t]*:?[ \t]*$/i;
+const CLOSING_KEYWORD_PATTERN = /^(?:close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)$/i;
 const TICKET_REFERENCE_PATTERN = /(^|[^#0-9A-Za-z_])#([1-9][0-9]*)(?![#0-9A-Za-z_])/gm;
 function relationKindBefore(maskedDescription, referenceOffset) {
-    const prefix = maskedDescription.slice(0, referenceOffset);
-    return CLOSING_KEYWORD_PATTERN.test(prefix) ? 'resolves' : 'references';
+    let wordEnd = referenceOffset;
+    while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+        wordEnd -= 1;
+    }
+    if (maskedDescription[wordEnd - 1] === ':') {
+        wordEnd -= 1;
+        while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+            wordEnd -= 1;
+        }
+    }
+    let wordStart = wordEnd;
+    while (wordStart > 0 && /[A-Za-z]/.test(maskedDescription[wordStart - 1])) {
+        wordStart -= 1;
+    }
+    return CLOSING_KEYWORD_PATTERN.test(maskedDescription.slice(wordStart, wordEnd))
+        ? 'resolves'
+        : 'references';
 }
 function parseCollabTicketReferences(description) {
     if (new TextEncoder().encode(description).byteLength >

package/dist/esm/CollabCloudBinding.mjs

@@ -3,7 +3,7 @@ import { COLLAB_CONTROL_OPERATION_CODECS, } from './CollabControlOperationCodecs
 import { COLLAB_ERROR_CODES, CollabError, sanitizeCollabDiagnosticContext, } from './CollabError.mjs';
 import { isCollabOpaqueId, isCollabProjectId, } from './CollabValidation.mjs';
 import { COLLAB_CHECKPOINT_ARTIFACT_LIMITS, COLLAB_PROJECT_CHECKPOINT_ARTIFACTS, } from './CollabProjectCheckpoint.mjs';
-export const COLLAB_CLOUD_BINDING_VERSION = 4;
+export const COLLAB_CLOUD_BINDING_VERSION = 5;
 export const COLLAB_CLOUD_CAPABILITY_DOCUMENT_SCHEMA_VERSION = 2;
 export const COLLAB_CLOUD_CAPABILITIES = Object.freeze([
     'accept',
@@ -168,7 +168,7 @@ export function collabCloudProjectOperationRoute(projectId, operation) {
     assertProjectId(projectId);
     if (!isCloudJsonOperation(operation))
         invalidRoute();
-    return route('POST', `/v4/projects/${projectId}/operations/${operation}`, {
+    return route('POST', `/v5/projects/${projectId}/operations/${operation}`, {
         kind: 'project-operation',
         operation,
         projectId,
@@ -178,7 +178,7 @@ export function collabCloudProjectEventsRoute(projectId, afterSequence) {
     assertProjectId(projectId);
     if (!Number.isSafeInteger(afterSequence) || afterSequence < 0)
         invalidRoute();
-    return route('GET', `/v4/projects/${projectId}/events?afterSequence=${afterSequence}`, {
+    return route('GET', `/v5/projects/${projectId}/events?afterSequence=${afterSequence}`, {
         afterSequence,
         kind: 'project-events',
         projectId,
@@ -189,11 +189,11 @@ export function collabCloudGitRoute(projectId, routeKind, service) {
     if (routeKind === 'info-refs') {
         if (service !== 'git-upload-pack' && service !== 'git-receive-pack')
             invalidRoute();
-        return route('GET', `/v4/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
+        return route('GET', `/v5/projects/${projectId}/repository.git/info/refs?service=${service}`, { kind: 'git-info-refs', projectId, service });
     }
     if (service !== undefined)
         invalidRoute();
-    return route('POST', `/v4/projects/${projectId}/repository.git/${routeKind}`, {
+    return route('POST', `/v5/projects/${projectId}/repository.git/${routeKind}`, {
         kind: routeKind,
         projectId,
     });
@@ -204,7 +204,7 @@ export function collabCloudAuthorityTransferArtifactRoute(projectId, transferId,
     if (direction !== 'download' && direction !== 'upload'
         || !COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route(direction === 'upload' ? 'PUT' : 'GET', `/v4/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
+    return route(direction === 'upload' ? 'PUT' : 'GET', `/v5/projects/${projectId}/authority-transfers/${transferId}/checkpoint/${artifact}`, {
         artifact,
         direction,
         kind: 'authority-transfer-artifact',
@@ -217,7 +217,7 @@ export function collabCloudProjectCheckpointExportArtifactRoute(projectId, expor
     assertAttemptId(exportId);
     if (!COLLAB_PROJECT_CHECKPOINT_ARTIFACTS_SET.has(artifact))
         invalidRoute();
-    return route('GET', `/v4/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
+    return route('GET', `/v5/projects/${projectId}/checkpoint-exports/${exportId}/checkpoint/${artifact}`, {
         artifact,
         exportId,
         kind: 'project-checkpoint-export-artifact',
@@ -229,7 +229,7 @@ export function collabCloudProjectCheckpointExportRoute(projectId, exportId, ope
     assertAttemptId(exportId);
     if (operation !== 'begin' && operation !== 'status')
         invalidRoute();
-    return route(operation === 'begin' ? 'POST' : 'GET', `/v4/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
+    return route(operation === 'begin' ? 'POST' : 'GET', `/v5/projects/${projectId}/checkpoint-exports/${exportId}`, { exportId, kind: 'project-checkpoint-export', operation, projectId });
 }
 export function decodeCollabCloudProjectCheckpointExportStatus(value) {
     const source = exactRecord(value, 'checkpointExport', [
@@ -267,7 +267,7 @@ export function decodeCollabCloudProjectCheckpointExportStatus(value) {
     });
 }
 export function collabDevelopmentBootstrapRoute(operation, attemptId) {
-    const base = '/v4/development/bootstrap/attempts';
+    const base = '/v5/development/bootstrap/attempts';
     if (operation === 'beginDevelopmentBootstrap') {
         if (attemptId !== undefined)
             invalidRoute();
@@ -326,7 +326,7 @@ export function matchCollabCloudRoute(method, target) {
         && url.pathname === '/collab/capabilities'
         && exactQuery(url, []))
         return { kind: 'capabilities' };
-    if (segments[0] === 'v4'
+    if (segments[0] === 'v5'
         && segments[1] === 'projects'
         && isCollabProjectId(segments[2])) {
         const projectId = segments[2];
@@ -405,7 +405,7 @@ export function matchCollabCloudRoute(method, target) {
             && exactQuery(url, []))
             return { kind: segments[4], projectId };
     }
-    if (segments[0] !== 'v4'
+    if (segments[0] !== 'v5'
         || segments[1] !== 'development'
         || segments[2] !== 'bootstrap'
         || segments[3] !== 'attempts'
@@ -513,21 +513,32 @@ export function decodeCollabCloudSuccessEnvelope(value) {
         requestId: source.requestId,
     });
 }
-export function collabCloudErrorEnvelope(requestId, error) {
+export function collabCloudErrorEnvelope(requestId, error, mutationOutcome) {
     if (!isCollabOpaqueId(requestId))
         throw invalidPayload('requestId');
+    if (mutationOutcome !== undefined && mutationOutcome !== 'rejected') {
+        throw invalidPayload('mutationOutcome');
+    }
     return Object.freeze({
         error: Object.freeze({
             code: error.code,
             recoveryActions: Object.freeze([...error.recoveryActions]),
             safeContext: error.safeContext,
         }),
+        ...(mutationOutcome === undefined ? {} : { mutationOutcome }),
         protocolVersion: COLLAB_PROTOCOL_VERSION,
         requestId,
     });
 }
 export function decodeCollabCloudErrorEnvelope(value) {
-    const source = exactRecord(value, 'envelope', ['error', 'protocolVersion', 'requestId']);
+    const source = record(value, 'envelope');
+    const hasOutcome = Object.hasOwn(source, 'mutationOutcome');
+    if (!hasExactKeys(source, hasOutcome
+        ? ['error', 'mutationOutcome', 'protocolVersion', 'requestId']
+        : ['error', 'protocolVersion', 'requestId']))
+        throw invalidPayload('envelope');
+    if (hasOutcome && source.mutationOutcome !== 'rejected')
+        throw invalidPayload('mutationOutcome');
     const wireError = exactRecord(source.error, 'error', [
         'code',
         'recoveryActions',
@@ -553,6 +564,7 @@ export function decodeCollabCloudErrorEnvelope(value) {
             ]),
             safeContext,
         }),
+        ...(hasOutcome ? { mutationOutcome: 'rejected' } : {}),
         protocolVersion: COLLAB_PROTOCOL_VERSION,
         requestId: source.requestId,
     });

package/dist/esm/CollabConstants.mjs

@@ -1,4 +1,4 @@
-export const COLLAB_PROTOCOL_VERSION = 8;
+export const COLLAB_PROTOCOL_VERSION = 9;
 export const COLLAB_MAIN_REF = 'refs/heads/main';
 export const COLLAB_MEMBER_REF_PREFIX = 'refs/heads/members/';
 export const COLLAB_LIMITS = Object.freeze({

package/dist/esm/CollabMemberMentionParser.mjs

@@ -1,5 +1,6 @@
 import { maskCollabMarkdownProse } from './CollabMarkdownProse.mjs';
-const MENTION_ADJACENT_CHARACTER = /[\p{L}\p{N}_@-]/u;
+const MENTION_PRECEDING_CHARACTER = /[\p{L}\p{N}_@-]$/u;
+const MENTION_FOLLOWING_CHARACTER = /^[\p{L}\p{N}_@-]/u;
 export function parseCollabMemberMentions(markdown, targets) {
     const candidates = mentionCandidates(targets);
     if (candidates.length === 0)
@@ -12,14 +13,15 @@ export function parseCollabMemberMentions(markdown, targets) {
         if (mentionStart < 0)
             break;
         searchFrom = mentionStart + 1;
-        const preceding = prose[mentionStart - 1];
-        if (preceding !== undefined && MENTION_ADJACENT_CHARACTER.test(preceding))
+        const preceding = prose.slice(Math.max(0, mentionStart - 2), mentionStart);
+        if (MENTION_PRECEDING_CHARACTER.test(preceding))
             continue;
         const candidate = candidates.find(entry => {
             if (!prose.startsWith(entry.name, mentionStart + 1))
                 return false;
-            const following = prose[mentionStart + entry.name.length + 1];
-            return following === undefined || !MENTION_ADJACENT_CHARACTER.test(following);
+            const followingOffset = mentionStart + entry.name.length + 1;
+            const following = prose.slice(followingOffset, followingOffset + 2);
+            return !MENTION_FOLLOWING_CHARACTER.test(following);
         });
         if (!candidate)
             continue;

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1374,6 +1374,13 @@ function validateContinuity(records) {
     const terminalResponders = new Map(records
         .filter((item) => (item.kind === 'terminal-responder'))
         .map(item => [item.value.operationId, item]));
+    const terminalMembers = new Map([...terminalResponders].map(([operationId, terminal]) => [
+        operationId,
+        {
+            acknowledgements: new Map(terminal.value.acknowledgements.map(item => [item.memberId, item])),
+            eligibleMemberIds: new Set(terminal.value.eligibleMemberIds),
+        },
+    ]));
     const terminalPrincipals = new Map(records
         .filter((item) => (item.kind === 'terminal-principal'))
         .map(item => [`${item.value.operationId}:${item.value.memberId}`, item]));
@@ -1390,6 +1397,9 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'protected-invitation-envelope'))
         .map(item => [item.value.invitationId, item]));
     const claimOverrides = records.filter((item) => (item.kind === 'transferred-membership-claim-override'));
+    const redeemedOverrideIdentities = new Set(claimOverrides
+        .filter(item => item.value.state === 'redeemed')
+        .map(item => (`${item.value.transferId}:${item.value.memberId}:${item.value.claimSha256}:${item.value.redemptionReceiptId}`)));
     const claimOverrideEnvelopes = new Map(records
         .filter((item) => (item.kind === 'protected-claim-override-envelope'))
         .map(item => [
@@ -1402,6 +1412,28 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'project-membership-recovery'))
         .map(item => [item.value.operationId, item]));
     const secretReplayTombstones = records.filter((item) => (item.kind === 'secret-replay-tombstone'));
+    const secretTombstonesByIdentity = new Map(secretReplayTombstones.map(item => [
+        `${item.recordId}:${item.value.requestFingerprint}`,
+        item,
+    ]));
+    const liveSecretIdentities = new Set();
+    for (const invitation of invitations.values()) {
+        if (invitationEnvelopes.has(invitation.value.invitationId)) {
+            liveSecretIdentities.add(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}`);
+        }
+    }
+    for (const override of claimOverrides) {
+        if (claimOverrideEnvelopes.has(override.recordId)) {
+            liveSecretIdentities.add(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}`);
+        }
+    }
+    const liveIdempotencyIdentities = new Set(records
+        .filter(item => item.kind === 'idempotency-result')
+        .map(item => `${item.value.operation}:${item.value.memberId}:${item.value.idempotencyKey}`));
+    for (const offer of managerOffers) {
+        liveIdempotencyIdentities.add(`createManagerResponsibilityOffer:${offer.value.sourceManagerMemberId}:${offer.value.idempotencyKey}`);
+    }
+    const claimOverrideRecordIds = new Set(claimOverrides.map(item => item.recordId));
     const nonterminalLifecycles = [...lifecycles.values()].filter(item => (item.value.state === 'active' || item.value.state === 'recovery-required'));
     if (nonterminalLifecycles.length > 1
         || principalBindingRecords.some(item => (memberRecords.get(item.value.memberId)?.value.status !== 'active'))
@@ -1654,13 +1686,8 @@ function validateContinuity(records) {
         const recovery = recoveries.get(claim.value.transferId);
         const member = memberRecords.get(claim.value.memberId);
         const redemptionReceipt = redemptionReceipts.get(`${claim.value.transferId}:${claim.value.memberId}`);
-        const redeemedOverride = redemptionReceipt === undefined
-            ? undefined
-            : claimOverrides.find(item => (item.value.transferId === claim.value.transferId
-                && item.value.memberId === claim.value.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === redemptionReceipt.value.receipt.claimSha256
-                && item.value.redemptionReceiptId === redemptionReceipt.value.receipt.receiptId));
+        const hasRedeemedOverride = redemptionReceipt !== undefined
+            && redeemedOverrideIdentities.has(`${claim.value.transferId}:${claim.value.memberId}:${redemptionReceipt.value.receipt.claimSha256}:${redemptionReceipt.value.receipt.receiptId}`);
         if (member?.value.status !== 'active'
             || recovery === undefined
             || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
@@ -1674,8 +1701,8 @@ function validateContinuity(records) {
             || (claim.value.state === 'redeemed' && redemptionReceipt === undefined)
             || (redemptionReceipt !== undefined
                 && claim.value.state !== 'redeemed'
-                && redeemedOverride === undefined)
-            || (claim.value.state === 'redeemed' && redeemedOverride !== undefined)) {
+                && !hasRedeemedOverride)
+            || (claim.value.state === 'redeemed' && hasRedeemedOverride)) {
             throw invalidPayload('records');
         }
     }
@@ -1718,10 +1745,7 @@ function validateContinuity(records) {
     }
     for (const invitation of invitations.values()) {
         const envelope = invitationEnvelopes.get(invitation.value.invitationId);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'createProjectInvitation'
-            && item.value.actorMemberId === invitation.value.issuedByMemberId
-            && item.value.idempotencyKey === invitation.value.idempotencyKey
-            && item.value.requestFingerprint === invitation.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}:${invitation.value.requestFingerprint}`);
         if (!members.has(invitation.value.issuedByMemberId)
             || (envelope === undefined) === (tombstone === undefined)
             || (tombstone !== undefined
@@ -1742,10 +1766,7 @@ function validateContinuity(records) {
         values.push(override);
         overridesByMember.set(identity, values);
         const envelope = claimOverrideEnvelopes.get(`${identity}:${override.value.claimGeneration}`);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'reissueTransferredMembershipClaim'
-            && item.value.actorMemberId === override.value.managerMemberId
-            && item.value.idempotencyKey === override.value.idempotencyKey
-            && item.value.requestFingerprint === override.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}:${override.value.requestFingerprint}`);
         if (!members.has(override.value.memberId)
             || !members.has(override.value.managerMemberId)
             || (envelope === undefined) === (tombstone === undefined)
@@ -1800,9 +1821,7 @@ function validateContinuity(records) {
             throw invalidPayload('records');
     }
     for (const envelope of claimOverrideEnvelopes.values()) {
-        if (!claimOverrides.some(item => (item.value.transferId === envelope.value.transferId
-            && item.value.memberId === envelope.value.memberId
-            && item.value.claimGeneration === envelope.value.claimGeneration)))
+        if (!claimOverrideRecordIds.has(envelope.recordId))
             throw invalidPayload('records');
     }
     const currentOffers = managerOffers.filter(item => (item.value.state === 'offered' || item.value.state === 'acknowledged'));
@@ -1815,26 +1834,14 @@ function validateContinuity(records) {
             !== currentOffers.length)
         throw invalidPayload('records');
     for (const tombstone of secretReplayTombstones) {
-        const liveSecretRecord = tombstone.value.operation === 'createProjectInvitation'
-            ? [...invitations.values()].some(item => (item.value.issuedByMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && invitationEnvelopes.has(item.value.invitationId)))
-            : claimOverrides.some(item => (item.value.managerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && claimOverrideEnvelopes.has(`${item.value.transferId}:${item.value.memberId}:${item.value.claimGeneration}`)));
-        if (!members.has(tombstone.value.actorMemberId) || liveSecretRecord) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveSecretIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
     for (const tombstone of membershipIdempotencyTombstones) {
-        const exactResult = records.some(item => (item.kind === 'idempotency-result'
-            && item.value.memberId === tombstone.value.actorMemberId
-            && item.value.operation === tombstone.value.operation
-            && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        const exactOffer = tombstone.value.operation === 'createManagerResponsibilityOffer'
-            && managerOffers.some(item => (item.value.sourceManagerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        if (!members.has(tombstone.value.actorMemberId) || exactResult || exactOffer) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveIdempotencyIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
@@ -1891,18 +1898,14 @@ function validateContinuity(records) {
             const lifecycle = lifecycles.get(receipt.transferId);
             const terminalPrincipal = terminalPrincipals.get(identity);
             const lanToCloud = recovery?.value.sourceAuthority.kind === 'lan';
-            const redeemedOverride = claimOverrides.find(item => (item.value.transferId === receipt.transferId
-                && item.value.memberId === receipt.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === receipt.claimSha256
-                && item.value.redemptionReceiptId === receipt.receiptId));
+            const hasRedeemedOverride = redeemedOverrideIdentities.has(`${receipt.transferId}:${receipt.memberId}:${receipt.claimSha256}:${receipt.receiptId}`);
             const matchesSourceClaim = claim?.value.state === 'redeemed'
                 && claim.value.claimSha256 === receipt.claimSha256
                 && claim.value.checkpointSha256 === receipt.checkpointSha256
                 && claim.value.operationIntentId === receipt.operationIntentId
                 && claim.value.redemptionReceiptId === receipt.receiptId;
             const matchesOverride = claim !== undefined
-                && redeemedOverride !== undefined
+                && hasRedeemedOverride
                 && claim.value.checkpointSha256 === receipt.checkpointSha256;
             if (recovery === undefined
                 || lifecycle === undefined
@@ -1922,7 +1925,8 @@ function validateContinuity(records) {
         }
         if (item.kind === 'terminal-principal') {
             const terminal = terminalResponders.get(item.value.operationId);
-            const acknowledgement = terminal?.value.acknowledgements.find(value => (value.memberId === item.value.memberId));
+            const terminalMemberIndex = terminalMembers.get(item.value.operationId);
+            const acknowledgement = terminalMemberIndex?.acknowledgements.get(item.value.memberId);
             const expectedOperationKind = terminal?.value.operation === 'getProjectAuthorityTransfer'
                 ? 'authority-transfer'
                 : terminal?.value.operation === 'retireProject'
@@ -1931,7 +1935,7 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || terminal === undefined
                 || expectedOperationKind !== item.value.operationKind
-                || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
+                || !terminalMemberIndex?.eligibleMemberIds.has(item.value.memberId)
                 || (item.value.acknowledgedAt === null) !== (acknowledgement === undefined)
                 || (acknowledgement !== undefined && (acknowledgement.acknowledgedAt !== item.value.acknowledgedAt
                     || acknowledgement.principalId !== item.value.principalId))
@@ -2087,8 +2091,8 @@ export function decodeCollabProjectBackupCheckpointCoordinationNdjson(value) {
 }
 export function encodeCollabProjectBackupCheckpointCoordinationNdjson(records) {
     const value = records.map(item => JSON.stringify(item)).join('\n') + '\n';
-    return decodeCollabProjectBackupCheckpointCoordinationNdjson(value)
-        .map(item => JSON.stringify(item)).join('\n') + '\n';
+    decodeCollabProjectBackupCheckpointCoordinationNdjson(value);
+    return value;
 }
 export function validateCollabProjectBackupCheckpointConsistency(manifest, records) {
     const decodedManifest = decodeCollabProjectBackupCheckpointManifest(manifest);

package/dist/esm/CollabProjectCheckpoint.mjs

@@ -924,9 +924,10 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
                 : token(acknowledgement, 'principalId'),
         };
     });
+    const eligibleMemberIdSet = new Set(eligibleMemberIds);
     const acknowledgementPrincipals = new Set();
     acknowledgements.forEach((item, index) => {
-        if (!eligibleMemberIds.includes(item.memberId)
+        if (!eligibleMemberIdSet.has(item.memberId)
             || (index > 0 && acknowledgements[index - 1].memberId.localeCompare(item.memberId, 'en-US') >= 0)
             || (!deferPrincipals && acknowledgementPrincipals.has(item.principalId)))
             throw invalidPayload('acknowledgements');
@@ -1298,8 +1299,8 @@ export function decodeCollabProjectCheckpointCoordinationNdjson(value, profile)
 }
 export function encodeCollabProjectCheckpointCoordinationNdjson(records, profile) {
     const encoded = records.map(record => JSON.stringify(record)).join('\n') + '\n';
-    return decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile)
-        .map(record => JSON.stringify(record)).join('\n') + '\n';
+    decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile);
+    return encoded;
 }
 function checkpointRecordGitOids(checkpointRecord) {
     switch (checkpointRecord.kind) {

package/dist/esm/CollabTicketReferenceParser.mjs

@@ -1,10 +1,25 @@
 import { COLLAB_LIMITS } from './CollabConstants.mjs';
 import { maskCollabMarkdownProse } from './CollabMarkdownProse.mjs';
-const CLOSING_KEYWORD_PATTERN = /(?:^|[^A-Za-z])(close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)[ \t]*:?[ \t]*$/i;
+const CLOSING_KEYWORD_PATTERN = /^(?:close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)$/i;
 const TICKET_REFERENCE_PATTERN = /(^|[^#0-9A-Za-z_])#([1-9][0-9]*)(?![#0-9A-Za-z_])/gm;
 function relationKindBefore(maskedDescription, referenceOffset) {
-    const prefix = maskedDescription.slice(0, referenceOffset);
-    return CLOSING_KEYWORD_PATTERN.test(prefix) ? 'resolves' : 'references';
+    let wordEnd = referenceOffset;
+    while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+        wordEnd -= 1;
+    }
+    if (maskedDescription[wordEnd - 1] === ':') {
+        wordEnd -= 1;
+        while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+            wordEnd -= 1;
+        }
+    }
+    let wordStart = wordEnd;
+    while (wordStart > 0 && /[A-Za-z]/.test(maskedDescription[wordStart - 1])) {
+        wordStart -= 1;
+    }
+    return CLOSING_KEYWORD_PATTERN.test(maskedDescription.slice(wordStart, wordEnd))
+        ? 'resolves'
+        : 'references';
 }
 export function parseCollabTicketReferences(description) {
     if (new TextEncoder().encode(description).byteLength >

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.1.4",
+  "version": "4.2.1",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {
@@ -39,14 +39,13 @@
   "scripts": {
     "build": "npm run clean && tsc -p tsconfig.json && tsc -p tsconfig.esm.json && node scripts/finalize-esm.mjs",
     "check:compatibility": "node scripts/run-compatibility-check.mjs",
-    "check:migration-provenance": "node scripts/check-migration-provenance.mjs --verify-standalone",
     "clean": "node scripts/clean.mjs",
     "lint": "eslint src tests scripts",
     "prepack": "npm run build",
     "release:candidate": "node scripts/release-candidate.mjs --output .context/release",
     "test": "jest && node --test tests/*.test.mjs",
     "typecheck": "tsc --noEmit -p tsconfig.jest.json",
-    "verify": "npm run lint && npm run typecheck && npm run release:candidate && npm run test && npm run check:compatibility && npm run check:migration-provenance && npm run verify:pack",
+    "verify": "npm run lint && npm run typecheck && npm run release:candidate && npm run test && npm run check:compatibility && npm run verify:pack",
     "verify:pack": "node scripts/verify-pack.mjs"
   },
   "dependencies": {