@claudian-collab/protocol 4.2.0 → 4.2.1

package/README.md

@@ -64,7 +64,7 @@ part of the public surface.
 
 Package SemVer, canonical wire version, and Cloud binding version are independent concepts.
 
-- **Package version** (this `package.json`): `4.2.0`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
+- **Package version** (this `package.json`): `4.2.1`. Behavior-preserving implementation refactors and reviewed compatible defect corrections may use a patch release when public declarations, runtime exports, and accepted wire/binding semantics remain unchanged. Minor releases may add backward-compatible API. Removing or incompatibly changing an existing declaration, export, runtime behavior, codec, error, limit, ref rule, operation, or compatibility rule requires a major release. Package API SemVer is classified independently from the wire and Cloud binding contracts, but a compatible package addition cannot exempt a changed wire contract from a wire-version increase or a changed Cloud binding contract from a binding-version increase. The package version never signals wire compatibility by itself.
 - **Wire version** (`COLLAB_PROTOCOL_VERSION`): currently `9`. The supported range is exactly `[9, 9]`. This is independent from Cloud binding version `5` and the application-owned LAN bindings. Any change to an existing envelope, DTO, operation payload shape, or operation definition requires a new wire-protocol version. This includes additive operations: every wire-contract change increases the canonical wire version.
 - **Cloud binding version** (`COLLAB_CLOUD_BINDING_VERSION`): currently `5`. It versions Cloud routes, bounded transfer streams, and capabilities independently from package and wire versions. Every Cloud binding-contract change increases this version. Bindings before v5 and wire versions before v9 are unsupported rather than translated or dual-interpreted.
 

package/dist/CollabMemberMentionParser.js

@@ -2,7 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseCollabMemberMentions = parseCollabMemberMentions;
 const CollabMarkdownProse_1 = require("./CollabMarkdownProse");
-const MENTION_ADJACENT_CHARACTER = /[\p{L}\p{N}_@-]/u;
+const MENTION_PRECEDING_CHARACTER = /[\p{L}\p{N}_@-]$/u;
+const MENTION_FOLLOWING_CHARACTER = /^[\p{L}\p{N}_@-]/u;
 function parseCollabMemberMentions(markdown, targets) {
     const candidates = mentionCandidates(targets);
     if (candidates.length === 0)
@@ -15,14 +16,15 @@ function parseCollabMemberMentions(markdown, targets) {
         if (mentionStart < 0)
             break;
         searchFrom = mentionStart + 1;
-        const preceding = prose[mentionStart - 1];
-        if (preceding !== undefined && MENTION_ADJACENT_CHARACTER.test(preceding))
+        const preceding = prose.slice(Math.max(0, mentionStart - 2), mentionStart);
+        if (MENTION_PRECEDING_CHARACTER.test(preceding))
             continue;
         const candidate = candidates.find(entry => {
             if (!prose.startsWith(entry.name, mentionStart + 1))
                 return false;
-            const following = prose[mentionStart + entry.name.length + 1];
-            return following === undefined || !MENTION_ADJACENT_CHARACTER.test(following);
+            const followingOffset = mentionStart + entry.name.length + 1;
+            const following = prose.slice(followingOffset, followingOffset + 2);
+            return !MENTION_FOLLOWING_CHARACTER.test(following);
         });
         if (!candidate)
             continue;

package/dist/CollabProjectBackupCheckpoint.js

@@ -1384,6 +1384,13 @@ function validateContinuity(records) {
     const terminalResponders = new Map(records
         .filter((item) => (item.kind === 'terminal-responder'))
         .map(item => [item.value.operationId, item]));
+    const terminalMembers = new Map([...terminalResponders].map(([operationId, terminal]) => [
+        operationId,
+        {
+            acknowledgements: new Map(terminal.value.acknowledgements.map(item => [item.memberId, item])),
+            eligibleMemberIds: new Set(terminal.value.eligibleMemberIds),
+        },
+    ]));
     const terminalPrincipals = new Map(records
         .filter((item) => (item.kind === 'terminal-principal'))
         .map(item => [`${item.value.operationId}:${item.value.memberId}`, item]));
@@ -1400,6 +1407,9 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'protected-invitation-envelope'))
         .map(item => [item.value.invitationId, item]));
     const claimOverrides = records.filter((item) => (item.kind === 'transferred-membership-claim-override'));
+    const redeemedOverrideIdentities = new Set(claimOverrides
+        .filter(item => item.value.state === 'redeemed')
+        .map(item => (`${item.value.transferId}:${item.value.memberId}:${item.value.claimSha256}:${item.value.redemptionReceiptId}`)));
     const claimOverrideEnvelopes = new Map(records
         .filter((item) => (item.kind === 'protected-claim-override-envelope'))
         .map(item => [
@@ -1412,6 +1422,28 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'project-membership-recovery'))
         .map(item => [item.value.operationId, item]));
     const secretReplayTombstones = records.filter((item) => (item.kind === 'secret-replay-tombstone'));
+    const secretTombstonesByIdentity = new Map(secretReplayTombstones.map(item => [
+        `${item.recordId}:${item.value.requestFingerprint}`,
+        item,
+    ]));
+    const liveSecretIdentities = new Set();
+    for (const invitation of invitations.values()) {
+        if (invitationEnvelopes.has(invitation.value.invitationId)) {
+            liveSecretIdentities.add(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}`);
+        }
+    }
+    for (const override of claimOverrides) {
+        if (claimOverrideEnvelopes.has(override.recordId)) {
+            liveSecretIdentities.add(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}`);
+        }
+    }
+    const liveIdempotencyIdentities = new Set(records
+        .filter(item => item.kind === 'idempotency-result')
+        .map(item => `${item.value.operation}:${item.value.memberId}:${item.value.idempotencyKey}`));
+    for (const offer of managerOffers) {
+        liveIdempotencyIdentities.add(`createManagerResponsibilityOffer:${offer.value.sourceManagerMemberId}:${offer.value.idempotencyKey}`);
+    }
+    const claimOverrideRecordIds = new Set(claimOverrides.map(item => item.recordId));
     const nonterminalLifecycles = [...lifecycles.values()].filter(item => (item.value.state === 'active' || item.value.state === 'recovery-required'));
     if (nonterminalLifecycles.length > 1
         || principalBindingRecords.some(item => (memberRecords.get(item.value.memberId)?.value.status !== 'active'))
@@ -1664,13 +1696,8 @@ function validateContinuity(records) {
         const recovery = recoveries.get(claim.value.transferId);
         const member = memberRecords.get(claim.value.memberId);
         const redemptionReceipt = redemptionReceipts.get(`${claim.value.transferId}:${claim.value.memberId}`);
-        const redeemedOverride = redemptionReceipt === undefined
-            ? undefined
-            : claimOverrides.find(item => (item.value.transferId === claim.value.transferId
-                && item.value.memberId === claim.value.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === redemptionReceipt.value.receipt.claimSha256
-                && item.value.redemptionReceiptId === redemptionReceipt.value.receipt.receiptId));
+        const hasRedeemedOverride = redemptionReceipt !== undefined
+            && redeemedOverrideIdentities.has(`${claim.value.transferId}:${claim.value.memberId}:${redemptionReceipt.value.receipt.claimSha256}:${redemptionReceipt.value.receipt.receiptId}`);
         if (member?.value.status !== 'active'
             || recovery === undefined
             || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
@@ -1684,8 +1711,8 @@ function validateContinuity(records) {
             || (claim.value.state === 'redeemed' && redemptionReceipt === undefined)
             || (redemptionReceipt !== undefined
                 && claim.value.state !== 'redeemed'
-                && redeemedOverride === undefined)
-            || (claim.value.state === 'redeemed' && redeemedOverride !== undefined)) {
+                && !hasRedeemedOverride)
+            || (claim.value.state === 'redeemed' && hasRedeemedOverride)) {
             throw invalidPayload('records');
         }
     }
@@ -1728,10 +1755,7 @@ function validateContinuity(records) {
     }
     for (const invitation of invitations.values()) {
         const envelope = invitationEnvelopes.get(invitation.value.invitationId);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'createProjectInvitation'
-            && item.value.actorMemberId === invitation.value.issuedByMemberId
-            && item.value.idempotencyKey === invitation.value.idempotencyKey
-            && item.value.requestFingerprint === invitation.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}:${invitation.value.requestFingerprint}`);
         if (!members.has(invitation.value.issuedByMemberId)
             || (envelope === undefined) === (tombstone === undefined)
             || (tombstone !== undefined
@@ -1752,10 +1776,7 @@ function validateContinuity(records) {
         values.push(override);
         overridesByMember.set(identity, values);
         const envelope = claimOverrideEnvelopes.get(`${identity}:${override.value.claimGeneration}`);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'reissueTransferredMembershipClaim'
-            && item.value.actorMemberId === override.value.managerMemberId
-            && item.value.idempotencyKey === override.value.idempotencyKey
-            && item.value.requestFingerprint === override.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}:${override.value.requestFingerprint}`);
         if (!members.has(override.value.memberId)
             || !members.has(override.value.managerMemberId)
             || (envelope === undefined) === (tombstone === undefined)
@@ -1810,9 +1831,7 @@ function validateContinuity(records) {
             throw invalidPayload('records');
     }
     for (const envelope of claimOverrideEnvelopes.values()) {
-        if (!claimOverrides.some(item => (item.value.transferId === envelope.value.transferId
-            && item.value.memberId === envelope.value.memberId
-            && item.value.claimGeneration === envelope.value.claimGeneration)))
+        if (!claimOverrideRecordIds.has(envelope.recordId))
             throw invalidPayload('records');
     }
     const currentOffers = managerOffers.filter(item => (item.value.state === 'offered' || item.value.state === 'acknowledged'));
@@ -1825,26 +1844,14 @@ function validateContinuity(records) {
             !== currentOffers.length)
         throw invalidPayload('records');
     for (const tombstone of secretReplayTombstones) {
-        const liveSecretRecord = tombstone.value.operation === 'createProjectInvitation'
-            ? [...invitations.values()].some(item => (item.value.issuedByMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && invitationEnvelopes.has(item.value.invitationId)))
-            : claimOverrides.some(item => (item.value.managerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && claimOverrideEnvelopes.has(`${item.value.transferId}:${item.value.memberId}:${item.value.claimGeneration}`)));
-        if (!members.has(tombstone.value.actorMemberId) || liveSecretRecord) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveSecretIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
     for (const tombstone of membershipIdempotencyTombstones) {
-        const exactResult = records.some(item => (item.kind === 'idempotency-result'
-            && item.value.memberId === tombstone.value.actorMemberId
-            && item.value.operation === tombstone.value.operation
-            && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        const exactOffer = tombstone.value.operation === 'createManagerResponsibilityOffer'
-            && managerOffers.some(item => (item.value.sourceManagerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        if (!members.has(tombstone.value.actorMemberId) || exactResult || exactOffer) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveIdempotencyIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
@@ -1901,18 +1908,14 @@ function validateContinuity(records) {
             const lifecycle = lifecycles.get(receipt.transferId);
             const terminalPrincipal = terminalPrincipals.get(identity);
             const lanToCloud = recovery?.value.sourceAuthority.kind === 'lan';
-            const redeemedOverride = claimOverrides.find(item => (item.value.transferId === receipt.transferId
-                && item.value.memberId === receipt.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === receipt.claimSha256
-                && item.value.redemptionReceiptId === receipt.receiptId));
+            const hasRedeemedOverride = redeemedOverrideIdentities.has(`${receipt.transferId}:${receipt.memberId}:${receipt.claimSha256}:${receipt.receiptId}`);
             const matchesSourceClaim = claim?.value.state === 'redeemed'
                 && claim.value.claimSha256 === receipt.claimSha256
                 && claim.value.checkpointSha256 === receipt.checkpointSha256
                 && claim.value.operationIntentId === receipt.operationIntentId
                 && claim.value.redemptionReceiptId === receipt.receiptId;
             const matchesOverride = claim !== undefined
-                && redeemedOverride !== undefined
+                && hasRedeemedOverride
                 && claim.value.checkpointSha256 === receipt.checkpointSha256;
             if (recovery === undefined
                 || lifecycle === undefined
@@ -1932,7 +1935,8 @@ function validateContinuity(records) {
         }
         if (item.kind === 'terminal-principal') {
             const terminal = terminalResponders.get(item.value.operationId);
-            const acknowledgement = terminal?.value.acknowledgements.find(value => (value.memberId === item.value.memberId));
+            const terminalMemberIndex = terminalMembers.get(item.value.operationId);
+            const acknowledgement = terminalMemberIndex?.acknowledgements.get(item.value.memberId);
             const expectedOperationKind = terminal?.value.operation === 'getProjectAuthorityTransfer'
                 ? 'authority-transfer'
                 : terminal?.value.operation === 'retireProject'
@@ -1941,7 +1945,7 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || terminal === undefined
                 || expectedOperationKind !== item.value.operationKind
-                || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
+                || !terminalMemberIndex?.eligibleMemberIds.has(item.value.memberId)
                 || (item.value.acknowledgedAt === null) !== (acknowledgement === undefined)
                 || (acknowledgement !== undefined && (acknowledgement.acknowledgedAt !== item.value.acknowledgedAt
                     || acknowledgement.principalId !== item.value.principalId))
@@ -2097,8 +2101,8 @@ function decodeCollabProjectBackupCheckpointCoordinationNdjson(value) {
 }
 function encodeCollabProjectBackupCheckpointCoordinationNdjson(records) {
     const value = records.map(item => JSON.stringify(item)).join('\n') + '\n';
-    return decodeCollabProjectBackupCheckpointCoordinationNdjson(value)
-        .map(item => JSON.stringify(item)).join('\n') + '\n';
+    decodeCollabProjectBackupCheckpointCoordinationNdjson(value);
+    return value;
 }
 function validateCollabProjectBackupCheckpointConsistency(manifest, records) {
     const decodedManifest = decodeCollabProjectBackupCheckpointManifest(manifest);

package/dist/CollabProjectCheckpoint.js

@@ -939,9 +939,10 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
                 : token(acknowledgement, 'principalId'),
         };
     });
+    const eligibleMemberIdSet = new Set(eligibleMemberIds);
     const acknowledgementPrincipals = new Set();
     acknowledgements.forEach((item, index) => {
-        if (!eligibleMemberIds.includes(item.memberId)
+        if (!eligibleMemberIdSet.has(item.memberId)
             || (index > 0 && acknowledgements[index - 1].memberId.localeCompare(item.memberId, 'en-US') >= 0)
             || (!deferPrincipals && acknowledgementPrincipals.has(item.principalId)))
             throw invalidPayload('acknowledgements');
@@ -1313,8 +1314,8 @@ function decodeCollabProjectCheckpointCoordinationNdjson(value, profile) {
 }
 function encodeCollabProjectCheckpointCoordinationNdjson(records, profile) {
     const encoded = records.map(record => JSON.stringify(record)).join('\n') + '\n';
-    return decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile)
-        .map(record => JSON.stringify(record)).join('\n') + '\n';
+    decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile);
+    return encoded;
 }
 function checkpointRecordGitOids(checkpointRecord) {
     switch (checkpointRecord.kind) {

package/dist/CollabTicketReferenceParser.js

@@ -4,11 +4,26 @@ exports.parseCollabTicketReferences = parseCollabTicketReferences;
 exports.scanCollabTicketReferences = scanCollabTicketReferences;
 const CollabConstants_1 = require("./CollabConstants");
 const CollabMarkdownProse_1 = require("./CollabMarkdownProse");
-const CLOSING_KEYWORD_PATTERN = /(?:^|[^A-Za-z])(close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)[ \t]*:?[ \t]*$/i;
+const CLOSING_KEYWORD_PATTERN = /^(?:close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)$/i;
 const TICKET_REFERENCE_PATTERN = /(^|[^#0-9A-Za-z_])#([1-9][0-9]*)(?![#0-9A-Za-z_])/gm;
 function relationKindBefore(maskedDescription, referenceOffset) {
-    const prefix = maskedDescription.slice(0, referenceOffset);
-    return CLOSING_KEYWORD_PATTERN.test(prefix) ? 'resolves' : 'references';
+    let wordEnd = referenceOffset;
+    while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+        wordEnd -= 1;
+    }
+    if (maskedDescription[wordEnd - 1] === ':') {
+        wordEnd -= 1;
+        while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+            wordEnd -= 1;
+        }
+    }
+    let wordStart = wordEnd;
+    while (wordStart > 0 && /[A-Za-z]/.test(maskedDescription[wordStart - 1])) {
+        wordStart -= 1;
+    }
+    return CLOSING_KEYWORD_PATTERN.test(maskedDescription.slice(wordStart, wordEnd))
+        ? 'resolves'
+        : 'references';
 }
 function parseCollabTicketReferences(description) {
     if (new TextEncoder().encode(description).byteLength >

package/dist/esm/CollabMemberMentionParser.mjs

@@ -1,5 +1,6 @@
 import { maskCollabMarkdownProse } from './CollabMarkdownProse.mjs';
-const MENTION_ADJACENT_CHARACTER = /[\p{L}\p{N}_@-]/u;
+const MENTION_PRECEDING_CHARACTER = /[\p{L}\p{N}_@-]$/u;
+const MENTION_FOLLOWING_CHARACTER = /^[\p{L}\p{N}_@-]/u;
 export function parseCollabMemberMentions(markdown, targets) {
     const candidates = mentionCandidates(targets);
     if (candidates.length === 0)
@@ -12,14 +13,15 @@ export function parseCollabMemberMentions(markdown, targets) {
         if (mentionStart < 0)
             break;
         searchFrom = mentionStart + 1;
-        const preceding = prose[mentionStart - 1];
-        if (preceding !== undefined && MENTION_ADJACENT_CHARACTER.test(preceding))
+        const preceding = prose.slice(Math.max(0, mentionStart - 2), mentionStart);
+        if (MENTION_PRECEDING_CHARACTER.test(preceding))
             continue;
         const candidate = candidates.find(entry => {
             if (!prose.startsWith(entry.name, mentionStart + 1))
                 return false;
-            const following = prose[mentionStart + entry.name.length + 1];
-            return following === undefined || !MENTION_ADJACENT_CHARACTER.test(following);
+            const followingOffset = mentionStart + entry.name.length + 1;
+            const following = prose.slice(followingOffset, followingOffset + 2);
+            return !MENTION_FOLLOWING_CHARACTER.test(following);
         });
         if (!candidate)
             continue;

package/dist/esm/CollabProjectBackupCheckpoint.mjs

@@ -1374,6 +1374,13 @@ function validateContinuity(records) {
     const terminalResponders = new Map(records
         .filter((item) => (item.kind === 'terminal-responder'))
         .map(item => [item.value.operationId, item]));
+    const terminalMembers = new Map([...terminalResponders].map(([operationId, terminal]) => [
+        operationId,
+        {
+            acknowledgements: new Map(terminal.value.acknowledgements.map(item => [item.memberId, item])),
+            eligibleMemberIds: new Set(terminal.value.eligibleMemberIds),
+        },
+    ]));
     const terminalPrincipals = new Map(records
         .filter((item) => (item.kind === 'terminal-principal'))
         .map(item => [`${item.value.operationId}:${item.value.memberId}`, item]));
@@ -1390,6 +1397,9 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'protected-invitation-envelope'))
         .map(item => [item.value.invitationId, item]));
     const claimOverrides = records.filter((item) => (item.kind === 'transferred-membership-claim-override'));
+    const redeemedOverrideIdentities = new Set(claimOverrides
+        .filter(item => item.value.state === 'redeemed')
+        .map(item => (`${item.value.transferId}:${item.value.memberId}:${item.value.claimSha256}:${item.value.redemptionReceiptId}`)));
     const claimOverrideEnvelopes = new Map(records
         .filter((item) => (item.kind === 'protected-claim-override-envelope'))
         .map(item => [
@@ -1402,6 +1412,28 @@ function validateContinuity(records) {
         .filter((item) => (item.kind === 'project-membership-recovery'))
         .map(item => [item.value.operationId, item]));
     const secretReplayTombstones = records.filter((item) => (item.kind === 'secret-replay-tombstone'));
+    const secretTombstonesByIdentity = new Map(secretReplayTombstones.map(item => [
+        `${item.recordId}:${item.value.requestFingerprint}`,
+        item,
+    ]));
+    const liveSecretIdentities = new Set();
+    for (const invitation of invitations.values()) {
+        if (invitationEnvelopes.has(invitation.value.invitationId)) {
+            liveSecretIdentities.add(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}`);
+        }
+    }
+    for (const override of claimOverrides) {
+        if (claimOverrideEnvelopes.has(override.recordId)) {
+            liveSecretIdentities.add(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}`);
+        }
+    }
+    const liveIdempotencyIdentities = new Set(records
+        .filter(item => item.kind === 'idempotency-result')
+        .map(item => `${item.value.operation}:${item.value.memberId}:${item.value.idempotencyKey}`));
+    for (const offer of managerOffers) {
+        liveIdempotencyIdentities.add(`createManagerResponsibilityOffer:${offer.value.sourceManagerMemberId}:${offer.value.idempotencyKey}`);
+    }
+    const claimOverrideRecordIds = new Set(claimOverrides.map(item => item.recordId));
     const nonterminalLifecycles = [...lifecycles.values()].filter(item => (item.value.state === 'active' || item.value.state === 'recovery-required'));
     if (nonterminalLifecycles.length > 1
         || principalBindingRecords.some(item => (memberRecords.get(item.value.memberId)?.value.status !== 'active'))
@@ -1654,13 +1686,8 @@ function validateContinuity(records) {
         const recovery = recoveries.get(claim.value.transferId);
         const member = memberRecords.get(claim.value.memberId);
         const redemptionReceipt = redemptionReceipts.get(`${claim.value.transferId}:${claim.value.memberId}`);
-        const redeemedOverride = redemptionReceipt === undefined
-            ? undefined
-            : claimOverrides.find(item => (item.value.transferId === claim.value.transferId
-                && item.value.memberId === claim.value.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === redemptionReceipt.value.receipt.claimSha256
-                && item.value.redemptionReceiptId === redemptionReceipt.value.receipt.receiptId));
+        const hasRedeemedOverride = redemptionReceipt !== undefined
+            && redeemedOverrideIdentities.has(`${claim.value.transferId}:${claim.value.memberId}:${redemptionReceipt.value.receipt.claimSha256}:${redemptionReceipt.value.receipt.receiptId}`);
         if (member?.value.status !== 'active'
             || recovery === undefined
             || Date.parse(member.value.createdAt) > Date.parse(recovery.value.createdAt)
@@ -1674,8 +1701,8 @@ function validateContinuity(records) {
             || (claim.value.state === 'redeemed' && redemptionReceipt === undefined)
             || (redemptionReceipt !== undefined
                 && claim.value.state !== 'redeemed'
-                && redeemedOverride === undefined)
-            || (claim.value.state === 'redeemed' && redeemedOverride !== undefined)) {
+                && !hasRedeemedOverride)
+            || (claim.value.state === 'redeemed' && hasRedeemedOverride)) {
             throw invalidPayload('records');
         }
     }
@@ -1718,10 +1745,7 @@ function validateContinuity(records) {
     }
     for (const invitation of invitations.values()) {
         const envelope = invitationEnvelopes.get(invitation.value.invitationId);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'createProjectInvitation'
-            && item.value.actorMemberId === invitation.value.issuedByMemberId
-            && item.value.idempotencyKey === invitation.value.idempotencyKey
-            && item.value.requestFingerprint === invitation.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`createProjectInvitation:${invitation.value.issuedByMemberId}:${invitation.value.idempotencyKey}:${invitation.value.requestFingerprint}`);
         if (!members.has(invitation.value.issuedByMemberId)
             || (envelope === undefined) === (tombstone === undefined)
             || (tombstone !== undefined
@@ -1742,10 +1766,7 @@ function validateContinuity(records) {
         values.push(override);
         overridesByMember.set(identity, values);
         const envelope = claimOverrideEnvelopes.get(`${identity}:${override.value.claimGeneration}`);
-        const tombstone = secretReplayTombstones.find(item => (item.value.operation === 'reissueTransferredMembershipClaim'
-            && item.value.actorMemberId === override.value.managerMemberId
-            && item.value.idempotencyKey === override.value.idempotencyKey
-            && item.value.requestFingerprint === override.value.requestFingerprint));
+        const tombstone = secretTombstonesByIdentity.get(`reissueTransferredMembershipClaim:${override.value.managerMemberId}:${override.value.idempotencyKey}:${override.value.requestFingerprint}`);
         if (!members.has(override.value.memberId)
             || !members.has(override.value.managerMemberId)
             || (envelope === undefined) === (tombstone === undefined)
@@ -1800,9 +1821,7 @@ function validateContinuity(records) {
             throw invalidPayload('records');
     }
     for (const envelope of claimOverrideEnvelopes.values()) {
-        if (!claimOverrides.some(item => (item.value.transferId === envelope.value.transferId
-            && item.value.memberId === envelope.value.memberId
-            && item.value.claimGeneration === envelope.value.claimGeneration)))
+        if (!claimOverrideRecordIds.has(envelope.recordId))
             throw invalidPayload('records');
     }
     const currentOffers = managerOffers.filter(item => (item.value.state === 'offered' || item.value.state === 'acknowledged'));
@@ -1815,26 +1834,14 @@ function validateContinuity(records) {
             !== currentOffers.length)
         throw invalidPayload('records');
     for (const tombstone of secretReplayTombstones) {
-        const liveSecretRecord = tombstone.value.operation === 'createProjectInvitation'
-            ? [...invitations.values()].some(item => (item.value.issuedByMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && invitationEnvelopes.has(item.value.invitationId)))
-            : claimOverrides.some(item => (item.value.managerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey
-                && claimOverrideEnvelopes.has(`${item.value.transferId}:${item.value.memberId}:${item.value.claimGeneration}`)));
-        if (!members.has(tombstone.value.actorMemberId) || liveSecretRecord) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveSecretIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
     for (const tombstone of membershipIdempotencyTombstones) {
-        const exactResult = records.some(item => (item.kind === 'idempotency-result'
-            && item.value.memberId === tombstone.value.actorMemberId
-            && item.value.operation === tombstone.value.operation
-            && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        const exactOffer = tombstone.value.operation === 'createManagerResponsibilityOffer'
-            && managerOffers.some(item => (item.value.sourceManagerMemberId === tombstone.value.actorMemberId
-                && item.value.idempotencyKey === tombstone.value.idempotencyKey));
-        if (!members.has(tombstone.value.actorMemberId) || exactResult || exactOffer) {
+        if (!members.has(tombstone.value.actorMemberId)
+            || liveIdempotencyIdentities.has(tombstone.recordId)) {
             throw invalidPayload('records');
         }
     }
@@ -1891,18 +1898,14 @@ function validateContinuity(records) {
             const lifecycle = lifecycles.get(receipt.transferId);
             const terminalPrincipal = terminalPrincipals.get(identity);
             const lanToCloud = recovery?.value.sourceAuthority.kind === 'lan';
-            const redeemedOverride = claimOverrides.find(item => (item.value.transferId === receipt.transferId
-                && item.value.memberId === receipt.memberId
-                && item.value.state === 'redeemed'
-                && item.value.claimSha256 === receipt.claimSha256
-                && item.value.redemptionReceiptId === receipt.receiptId));
+            const hasRedeemedOverride = redeemedOverrideIdentities.has(`${receipt.transferId}:${receipt.memberId}:${receipt.claimSha256}:${receipt.receiptId}`);
             const matchesSourceClaim = claim?.value.state === 'redeemed'
                 && claim.value.claimSha256 === receipt.claimSha256
                 && claim.value.checkpointSha256 === receipt.checkpointSha256
                 && claim.value.operationIntentId === receipt.operationIntentId
                 && claim.value.redemptionReceiptId === receipt.receiptId;
             const matchesOverride = claim !== undefined
-                && redeemedOverride !== undefined
+                && hasRedeemedOverride
                 && claim.value.checkpointSha256 === receipt.checkpointSha256;
             if (recovery === undefined
                 || lifecycle === undefined
@@ -1922,7 +1925,8 @@ function validateContinuity(records) {
         }
         if (item.kind === 'terminal-principal') {
             const terminal = terminalResponders.get(item.value.operationId);
-            const acknowledgement = terminal?.value.acknowledgements.find(value => (value.memberId === item.value.memberId));
+            const terminalMemberIndex = terminalMembers.get(item.value.operationId);
+            const acknowledgement = terminalMemberIndex?.acknowledgements.get(item.value.memberId);
             const expectedOperationKind = terminal?.value.operation === 'getProjectAuthorityTransfer'
                 ? 'authority-transfer'
                 : terminal?.value.operation === 'retireProject'
@@ -1931,7 +1935,7 @@ function validateContinuity(records) {
             if (!members.has(item.value.memberId)
                 || terminal === undefined
                 || expectedOperationKind !== item.value.operationKind
-                || !terminal.value.eligibleMemberIds.includes(item.value.memberId)
+                || !terminalMemberIndex?.eligibleMemberIds.has(item.value.memberId)
                 || (item.value.acknowledgedAt === null) !== (acknowledgement === undefined)
                 || (acknowledgement !== undefined && (acknowledgement.acknowledgedAt !== item.value.acknowledgedAt
                     || acknowledgement.principalId !== item.value.principalId))
@@ -2087,8 +2091,8 @@ export function decodeCollabProjectBackupCheckpointCoordinationNdjson(value) {
 }
 export function encodeCollabProjectBackupCheckpointCoordinationNdjson(records) {
     const value = records.map(item => JSON.stringify(item)).join('\n') + '\n';
-    return decodeCollabProjectBackupCheckpointCoordinationNdjson(value)
-        .map(item => JSON.stringify(item)).join('\n') + '\n';
+    decodeCollabProjectBackupCheckpointCoordinationNdjson(value);
+    return value;
 }
 export function validateCollabProjectBackupCheckpointConsistency(manifest, records) {
     const decodedManifest = decodeCollabProjectBackupCheckpointManifest(manifest);

package/dist/esm/CollabProjectCheckpoint.mjs

@@ -924,9 +924,10 @@ function terminalResponderRecord(source, recordId, revision, deferPrincipals) {
                 : token(acknowledgement, 'principalId'),
         };
     });
+    const eligibleMemberIdSet = new Set(eligibleMemberIds);
     const acknowledgementPrincipals = new Set();
     acknowledgements.forEach((item, index) => {
-        if (!eligibleMemberIds.includes(item.memberId)
+        if (!eligibleMemberIdSet.has(item.memberId)
             || (index > 0 && acknowledgements[index - 1].memberId.localeCompare(item.memberId, 'en-US') >= 0)
             || (!deferPrincipals && acknowledgementPrincipals.has(item.principalId)))
             throw invalidPayload('acknowledgements');
@@ -1298,8 +1299,8 @@ export function decodeCollabProjectCheckpointCoordinationNdjson(value, profile)
 }
 export function encodeCollabProjectCheckpointCoordinationNdjson(records, profile) {
     const encoded = records.map(record => JSON.stringify(record)).join('\n') + '\n';
-    return decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile)
-        .map(record => JSON.stringify(record)).join('\n') + '\n';
+    decodeCollabProjectCheckpointCoordinationNdjson(encoded, profile);
+    return encoded;
 }
 function checkpointRecordGitOids(checkpointRecord) {
     switch (checkpointRecord.kind) {

package/dist/esm/CollabTicketReferenceParser.mjs

@@ -1,10 +1,25 @@
 import { COLLAB_LIMITS } from './CollabConstants.mjs';
 import { maskCollabMarkdownProse } from './CollabMarkdownProse.mjs';
-const CLOSING_KEYWORD_PATTERN = /(?:^|[^A-Za-z])(close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)[ \t]*:?[ \t]*$/i;
+const CLOSING_KEYWORD_PATTERN = /^(?:close|closes|closed|fix|fixes|fixed|resolve|resolves|resolved)$/i;
 const TICKET_REFERENCE_PATTERN = /(^|[^#0-9A-Za-z_])#([1-9][0-9]*)(?![#0-9A-Za-z_])/gm;
 function relationKindBefore(maskedDescription, referenceOffset) {
-    const prefix = maskedDescription.slice(0, referenceOffset);
-    return CLOSING_KEYWORD_PATTERN.test(prefix) ? 'resolves' : 'references';
+    let wordEnd = referenceOffset;
+    while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+        wordEnd -= 1;
+    }
+    if (maskedDescription[wordEnd - 1] === ':') {
+        wordEnd -= 1;
+        while (maskedDescription[wordEnd - 1] === ' ' || maskedDescription[wordEnd - 1] === '\t') {
+            wordEnd -= 1;
+        }
+    }
+    let wordStart = wordEnd;
+    while (wordStart > 0 && /[A-Za-z]/.test(maskedDescription[wordStart - 1])) {
+        wordStart -= 1;
+    }
+    return CLOSING_KEYWORD_PATTERN.test(maskedDescription.slice(wordStart, wordEnd))
+        ? 'resolves'
+        : 'references';
 }
 export function parseCollabTicketReferences(description) {
     if (new TextEncoder().encode(description).byteLength >

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudian-collab/protocol",
-  "version": "4.2.0",
+  "version": "4.2.1",
   "description": "Canonical Collab wire and Cloud binding contract for Claudian clients and servers.",
   "license": "MIT",
   "repository": {
@@ -39,14 +39,13 @@
   "scripts": {
     "build": "npm run clean && tsc -p tsconfig.json && tsc -p tsconfig.esm.json && node scripts/finalize-esm.mjs",
     "check:compatibility": "node scripts/run-compatibility-check.mjs",
-    "check:migration-provenance": "node scripts/check-migration-provenance.mjs --verify-standalone",
     "clean": "node scripts/clean.mjs",
     "lint": "eslint src tests scripts",
     "prepack": "npm run build",
     "release:candidate": "node scripts/release-candidate.mjs --output .context/release",
     "test": "jest && node --test tests/*.test.mjs",
     "typecheck": "tsc --noEmit -p tsconfig.jest.json",
-    "verify": "npm run lint && npm run typecheck && npm run release:candidate && npm run test && npm run check:compatibility && npm run check:migration-provenance && npm run verify:pack",
+    "verify": "npm run lint && npm run typecheck && npm run release:candidate && npm run test && npm run check:compatibility && npm run verify:pack",
     "verify:pack": "node scripts/verify-pack.mjs"
   },
   "dependencies": {