@hasna/mementos 0.14.79 → 0.14.81

package/dist/cli/commands/project.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/project.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6V9D"}
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/project.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmW9D"}

package/dist/cli/index.js

@@ -6460,8 +6460,8 @@ function normalizeProjectUpdateInput(input) {
   }
   return normalized;
 }
-function assertProjectUpdateIdentity(identity) {
-  if (identity.authority_id !== PROJECT_UPDATE_AUTHORITY.authority_id || identity.tenant_id !== PROJECT_UPDATE_AUTHORITY.tenant_id || identity.corpus_id !== PROJECT_UPDATE_AUTHORITY.corpus_id) {
+function assertProjectUpdateIdentity(identity, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  if (identity.authority_id !== expectedIdentity.authority_id || identity.tenant_id !== expectedIdentity.tenant_id || identity.corpus_id !== expectedIdentity.corpus_id) {
     throw new ProjectGuardedUpdateError("PROJECT_UPDATE_AUTHORITY_MISMATCH", "guarded project update does not match this authority, tenant, and corpus");
   }
 }
@@ -6470,8 +6470,8 @@ function assertBoundedIdentifier(value, field) {
     throw new ProjectGuardedUpdateError("PROJECT_UPDATE_INVALID_INPUT", `${field} must be an 8-128 character bounded identifier`);
   }
 }
-function assertProjectUpdateRequest(request) {
-  assertProjectUpdateIdentity(request);
+function assertProjectUpdateRequest(request, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  assertProjectUpdateIdentity(request, expectedIdentity);
   assertBoundedIdentifier(request.operation_id, "operation_id");
   assertBoundedIdentifier(request.step_id, "step_id");
   assertBoundedIdentifier(request.idempotency_key, "idempotency_key");
@@ -6584,7 +6584,7 @@ function makeProjectUpdateReceipt(input) {
     target_id: input.target_id,
     expected_revision: input.request.expected_revision,
     result_revision: input.after_project.updated_at,
-    result_digest: digestProjectUpdateValue(input.after_project),
+    result_digest: input.result_digest ?? digestProjectUpdateValue(input.after_project),
     accepted_receipt_id: input.accepted_receipt_id ?? null,
     before_project: input.before_project,
     after_project: input.after_project,
@@ -6648,8 +6648,8 @@ function listProjects(db) {
   const rows = d.query("SELECT * FROM projects ORDER BY updated_at DESC").all();
   return rows.map(parseProjectRow);
 }
-function previewProjectUpdate(id, request, db) {
-  assertProjectUpdateRequest(request);
+function previewProjectUpdate(id, request, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  assertProjectUpdateRequest(request, expectedIdentity);
   const normalized = normalizeProjectUpdateInput(request.updates);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/guarded-update`, { ...request, updates: normalized, dry_run: true });
@@ -6671,8 +6671,8 @@ function previewProjectUpdate(id, request, db) {
     receipt: null
   };
 }
-function applyProjectUpdate(id, request, db) {
-  assertProjectUpdateRequest(request);
+function applyProjectUpdate(id, request, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY, resultDigestForProject) {
+  assertProjectUpdateRequest(request, expectedIdentity);
   const normalized = normalizeProjectUpdateInput(request.updates);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/guarded-update`, { ...request, updates: normalized, dry_run: false });
@@ -6733,14 +6733,15 @@ function applyProjectUpdate(id, request, db) {
       request_digest: requestDigest,
       target_id: id,
       before_project: before,
-      after_project: readback
+      after_project: readback,
+      result_digest: resultDigestForProject?.(readback)
     });
     insertProjectUpdateReceipt(d, receipt);
     return { dry_run: false, applied: true, project: readback, receipt };
   });
 }
-function rollbackProjectUpdate(id, request, db) {
-  assertProjectUpdateRequest(request);
+function rollbackProjectUpdate(id, request, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY, resultDigestForProject) {
+  assertProjectUpdateRequest(request, expectedIdentity);
   assertBoundedIdentifier(request.accepted_receipt_id, "accepted_receipt_id");
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/guarded-rollback`, request);
@@ -6806,14 +6807,15 @@ function rollbackProjectUpdate(id, request, db) {
       target_id: id,
       before_project: current,
       after_project: readback,
+      result_digest: resultDigestForProject?.(readback),
       accepted_receipt_id: accepted.receipt_id
     });
     insertProjectUpdateReceipt(d, receipt);
     return { dry_run: false, applied: true, project: readback, receipt };
   });
 }
-function getProjectUpdateReceipt(id, receiptId, identity = PROJECT_UPDATE_AUTHORITY, db) {
-  assertProjectUpdateIdentity(identity);
+function getProjectUpdateReceipt(id, receiptId, identity = PROJECT_UPDATE_AUTHORITY, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  assertProjectUpdateIdentity(identity, expectedIdentity);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/update-receipts/lookup`, { ...identity, receipt_id: receiptId });
     return data;
@@ -63996,11 +63998,12 @@ function registerProjectCommands(program2) {
       const allProjects = listProjects();
       const limit = positiveIntOrDefault(opts.limit, DEFAULT_COMPACT_LIMIT);
       const offset = cursorOrOffset(opts.cursor, opts.offset) ?? 0;
-      const projects = globalOpts.json ? allProjects : allProjects.slice(offset, offset + limit + 1);
+      const explicitPagination = opts.limit !== undefined || opts.cursor !== undefined || opts.offset !== undefined;
+      const projects = globalOpts.json ? explicitPagination ? allProjects.slice(offset, offset + limit) : allProjects : allProjects.slice(offset, offset + limit + 1);
       const hasMore = !globalOpts.json && projects.length > limit;
       const displayProjects = hasMore ? projects.slice(0, limit) : projects;
       if (globalOpts.json) {
-        outputJson(allProjects);
+        outputJson(projects);
         return;
       }
       if (displayProjects.length === 0) {

package/dist/db/projects.d.ts

@@ -14,10 +14,10 @@ export declare class ProjectGuardedUpdateError extends Error {
 export declare function registerProject(name: string, path: string, description?: string, memoryPrefix?: string, db?: Database): Project;
 export declare function getProject(idOrPath: string, db?: Database): Project | null;
 export declare function listProjects(db?: Database): Project[];
-export declare function previewProjectUpdate(id: string, request: ProjectGuardedUpdateRequest, db?: Database): ProjectGuardedUpdateResult;
-export declare function applyProjectUpdate(id: string, request: ProjectGuardedUpdateRequest, db?: Database): ProjectGuardedUpdateResult;
-export declare function rollbackProjectUpdate(id: string, request: ProjectGuardedRollbackRequest, db?: Database): ProjectGuardedUpdateResult;
-export declare function getProjectUpdateReceipt(id: string, receiptId: string, identity?: ProjectAuthorityIdentity, db?: Database): ProjectUpdateReceipt;
+export declare function previewProjectUpdate(id: string, request: ProjectGuardedUpdateRequest, db?: Database, expectedIdentity?: ProjectAuthorityIdentity): ProjectGuardedUpdateResult;
+export declare function applyProjectUpdate(id: string, request: ProjectGuardedUpdateRequest, db?: Database, expectedIdentity?: ProjectAuthorityIdentity, resultDigestForProject?: (project: Project) => string): ProjectGuardedUpdateResult;
+export declare function rollbackProjectUpdate(id: string, request: ProjectGuardedRollbackRequest, db?: Database, expectedIdentity?: ProjectAuthorityIdentity, resultDigestForProject?: (project: Project) => string): ProjectGuardedUpdateResult;
+export declare function getProjectUpdateReceipt(id: string, receiptId: string, identity?: ProjectAuthorityIdentity, db?: Database, expectedIdentity?: ProjectAuthorityIdentity): ProjectUpdateReceipt;
 /**
  * Package-internal compatibility helper for old tests and migrations.
  * Public callers use applyProjectUpdate so every mutation is CAS-guarded and

package/dist/db/projects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/db/projects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EACV,OAAO,EACP,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAkB3B,qBAAa,qBAAsB,SAAQ,KAAK;aAE5B,KAAK,EAAE,MAAM,GAAG,MAAM;aACtB,KAAK,EAAE,MAAM;gBADb,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,KAAK,EAAE,MAAM;CAKhC;AAED,MAAM,MAAM,6BAA6B,GACrC,8BAA8B,GAC9B,mCAAmC,GACnC,0BAA0B,GAC1B,+BAA+B,GAC/B,0BAA0B,GAC1B,qCAAqC,GACrC,kCAAkC,GAClC,wCAAwC,CAAC;AAE7C,qBAAa,yBAA0B,SAAQ,KAAK;aAEhC,IAAI,EAAE,6BAA6B;aAEnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,IAAI,EAAE,6BAA6B,EACnD,OAAO,EAAE,MAAM,EACC,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAKxD;AA+SD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,EACrB,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,CAkCT;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,GAAG,IAAI,CAyBhB;AAED,wBAAgB,YAAY,CAAC,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,EAAE,CAUrD;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,2BAA2B,EACpC,EAAE,CAAC,EAAE,QAAQ,GACZ,0BAA0B,CAiC5B;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,2BAA2B,EACpC,EAAE,CAAC,EAAE,QAAQ,GACZ,0BAA0B,CA2F5B;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,6BAA6B,EACtC,EAAE,CAAC,EAAE,QAAQ,GACZ,0BAA0B,CAsG5B;AAED,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,wBAAmD,EAC7D,EAAE,CAAC,EAAE,QAAQ,GACZ,oBAAoB,CAmBtB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,kBAAkB,EACzB,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,GAAG,IAAI,CAkFhB"}
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/db/projects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EACV,OAAO,EACP,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAkB3B,qBAAa,qBAAsB,SAAQ,KAAK;aAE5B,KAAK,EAAE,MAAM,GAAG,MAAM;aACtB,KAAK,EAAE,MAAM;gBADb,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,KAAK,EAAE,MAAM;CAKhC;AAED,MAAM,MAAM,6BAA6B,GACrC,8BAA8B,GAC9B,mCAAmC,GACnC,0BAA0B,GAC1B,+BAA+B,GAC/B,0BAA0B,GAC1B,qCAAqC,GACrC,kCAAkC,GAClC,wCAAwC,CAAC;AAE7C,qBAAa,yBAA0B,SAAQ,KAAK;aAEhC,IAAI,EAAE,6BAA6B;aAEnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,IAAI,EAAE,6BAA6B,EACnD,OAAO,EAAE,MAAM,EACC,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAKxD;AAoTD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,EACrB,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,CAkCT;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,GAAG,IAAI,CAyBhB;AAED,wBAAgB,YAAY,CAAC,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,EAAE,CAUrD;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,2BAA2B,EACpC,EAAE,CAAC,EAAE,QAAQ,EACb,gBAAgB,GAAE,wBAAmD,GACpE,0BAA0B,CAiC5B;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,2BAA2B,EACpC,EAAE,CAAC,EAAE,QAAQ,EACb,gBAAgB,GAAE,wBAAmD,EACrE,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GACpD,0BAA0B,CA4F5B;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,6BAA6B,EACtC,EAAE,CAAC,EAAE,QAAQ,EACb,gBAAgB,GAAE,wBAAmD,EACrE,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GACpD,0BAA0B,CAuG5B;AAED,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,wBAAmD,EAC7D,EAAE,CAAC,EAAE,QAAQ,EACb,gBAAgB,GAAE,wBAAmD,GACpE,oBAAoB,CAmBtB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,kBAAkB,EACzB,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,GAAG,IAAI,CAkFhB"}

package/dist/index.js

@@ -51683,8 +51683,8 @@ function normalizeProjectUpdateInput(input) {
   }
   return normalized;
 }
-function assertProjectUpdateIdentity(identity) {
-  if (identity.authority_id !== PROJECT_UPDATE_AUTHORITY.authority_id || identity.tenant_id !== PROJECT_UPDATE_AUTHORITY.tenant_id || identity.corpus_id !== PROJECT_UPDATE_AUTHORITY.corpus_id) {
+function assertProjectUpdateIdentity(identity, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  if (identity.authority_id !== expectedIdentity.authority_id || identity.tenant_id !== expectedIdentity.tenant_id || identity.corpus_id !== expectedIdentity.corpus_id) {
     throw new ProjectGuardedUpdateError("PROJECT_UPDATE_AUTHORITY_MISMATCH", "guarded project update does not match this authority, tenant, and corpus");
   }
 }
@@ -51693,8 +51693,8 @@ function assertBoundedIdentifier2(value, field) {
     throw new ProjectGuardedUpdateError("PROJECT_UPDATE_INVALID_INPUT", `${field} must be an 8-128 character bounded identifier`);
   }
 }
-function assertProjectUpdateRequest(request) {
-  assertProjectUpdateIdentity(request);
+function assertProjectUpdateRequest(request, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  assertProjectUpdateIdentity(request, expectedIdentity);
   assertBoundedIdentifier2(request.operation_id, "operation_id");
   assertBoundedIdentifier2(request.step_id, "step_id");
   assertBoundedIdentifier2(request.idempotency_key, "idempotency_key");
@@ -51807,7 +51807,7 @@ function makeProjectUpdateReceipt(input) {
     target_id: input.target_id,
     expected_revision: input.request.expected_revision,
     result_revision: input.after_project.updated_at,
-    result_digest: digestProjectUpdateValue(input.after_project),
+    result_digest: input.result_digest ?? digestProjectUpdateValue(input.after_project),
     accepted_receipt_id: input.accepted_receipt_id ?? null,
     before_project: input.before_project,
     after_project: input.after_project,
@@ -51871,8 +51871,8 @@ function listProjects(db) {
   const rows = d.query("SELECT * FROM projects ORDER BY updated_at DESC").all();
   return rows.map(parseProjectRow2);
 }
-function previewProjectUpdate(id, request, db) {
-  assertProjectUpdateRequest(request);
+function previewProjectUpdate(id, request, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  assertProjectUpdateRequest(request, expectedIdentity);
   const normalized = normalizeProjectUpdateInput(request.updates);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/guarded-update`, { ...request, updates: normalized, dry_run: true });
@@ -51894,8 +51894,8 @@ function previewProjectUpdate(id, request, db) {
     receipt: null
   };
 }
-function applyProjectUpdate(id, request, db) {
-  assertProjectUpdateRequest(request);
+function applyProjectUpdate(id, request, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY, resultDigestForProject) {
+  assertProjectUpdateRequest(request, expectedIdentity);
   const normalized = normalizeProjectUpdateInput(request.updates);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/guarded-update`, { ...request, updates: normalized, dry_run: false });
@@ -51956,14 +51956,15 @@ function applyProjectUpdate(id, request, db) {
       request_digest: requestDigest,
       target_id: id,
       before_project: before,
-      after_project: readback
+      after_project: readback,
+      result_digest: resultDigestForProject?.(readback)
     });
     insertProjectUpdateReceipt(d, receipt);
     return { dry_run: false, applied: true, project: readback, receipt };
   });
 }
-function rollbackProjectUpdate(id, request, db) {
-  assertProjectUpdateRequest(request);
+function rollbackProjectUpdate(id, request, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY, resultDigestForProject) {
+  assertProjectUpdateRequest(request, expectedIdentity);
   assertBoundedIdentifier2(request.accepted_receipt_id, "accepted_receipt_id");
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/guarded-rollback`, request);
@@ -52029,14 +52030,15 @@ function rollbackProjectUpdate(id, request, db) {
       target_id: id,
       before_project: current,
       after_project: readback,
+      result_digest: resultDigestForProject?.(readback),
       accepted_receipt_id: accepted.receipt_id
     });
     insertProjectUpdateReceipt(d, receipt);
     return { dry_run: false, applied: true, project: readback, receipt };
   });
 }
-function getProjectUpdateReceipt(id, receiptId, identity = PROJECT_UPDATE_AUTHORITY, db) {
-  assertProjectUpdateIdentity(identity);
+function getProjectUpdateReceipt(id, receiptId, identity = PROJECT_UPDATE_AUTHORITY, db, expectedIdentity = PROJECT_UPDATE_AUTHORITY) {
+  assertProjectUpdateIdentity(identity, expectedIdentity);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", `/projects/${encodeURIComponent(id)}/update-receipts/lookup`, { ...identity, receipt_id: receiptId });
     return data;
@@ -52178,9 +52180,9 @@ function assertWithinBounds(value, bounds, startedAt) {
   }
   return { response_bytes: bytes, elapsed_ms: elapsed };
 }
-function withResponseControl(receipt, bounds, startedAt) {
+function withBoundedResponseControl(payload, bounds, startedAt) {
   const result = {
-    receipt,
+    ...payload,
     response_control: {
       response_byte_limit: bounds.response_byte_limit,
       time_budget_ms: bounds.time_budget_ms,
@@ -52203,6 +52205,9 @@ function withResponseControl(receipt, bounds, startedAt) {
   result.response_control.elapsed_ms = measured.elapsed_ms;
   return result;
 }
+function withResponseControl(receipt, bounds, startedAt) {
+  return withBoundedResponseControl({ receipt }, bounds, startedAt);
+}
 function requireString(value, field, options = {}) {
   const min = options.min ?? 1;
   const max = options.max ?? 512;
@@ -52229,6 +52234,80 @@ function ownedPath(target) {
   }
   return path;
 }
+function guardedAuthorityIdentity(capability) {
+  return {
+    authority_id: capability.authority_id,
+    tenant_id: capability.tenant_id,
+    corpus_id: capability.corpus_id
+  };
+}
+function assertGuardedAuthorityRequest(targetId, request, capability) {
+  assertBounds(request);
+  requireString(targetId, "target_id", { min: 8, max: 128, pattern: OPERATION_PATTERN });
+  if (request.authority !== "mementos" || request.authority_route !== MEMENTOS_PROJECT_GUARDED_UPDATE_ROUTE || request.package_version !== capability.package_version || request.authority_id !== capability.authority_id || request.tenant_id !== capability.tenant_id || request.corpus_id !== capability.corpus_id) {
+    throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_CAPABILITY_MISMATCH", "guarded project request does not match this authority capability identity");
+  }
+  return guardedAuthorityIdentity(capability);
+}
+function assertGuardedOperationFields(request) {
+  requireString(request.operation_id, "operation_id", {
+    min: 8,
+    max: 128,
+    pattern: OPERATION_PATTERN
+  });
+  requireString(request.step_id, "step_id", {
+    min: 8,
+    max: 128,
+    pattern: OPERATION_PATTERN
+  });
+  requireString(request.idempotency_key, "idempotency_key", {
+    min: 8,
+    max: 128,
+    pattern: OPERATION_PATTERN
+  });
+  requireString(request.expected_revision, "expected_revision", { max: 128 });
+}
+function assertGuardedUpdateRequest(targetId, request, capability) {
+  const identity = assertGuardedAuthorityRequest(targetId, request, capability);
+  assertGuardedOperationFields(request);
+  if (!request.updates || typeof request.updates !== "object") {
+    throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "guarded project updates must contain exactly one private path handle");
+  }
+  exactKeys(request.updates, ["path"], "updates");
+  return { identity, path: ownedPath(request.updates.path) };
+}
+function publicGuardedUpdateReceipt(receipt, capability) {
+  return {
+    receipt_id: receipt.receipt_id,
+    authority: "mementos",
+    route: MEMENTOS_PROJECT_GUARDED_UPDATE_ROUTE,
+    package_version: capability.package_version,
+    authority_id: capability.authority_id,
+    tenant_id: capability.tenant_id,
+    corpus_id: capability.corpus_id,
+    operation_id: receipt.operation_id,
+    step_id: receipt.step_id,
+    direction: receipt.direction,
+    idempotency_key: receipt.idempotency_key,
+    request_digest: receipt.request_digest,
+    outcome: "accepted",
+    target_id: receipt.target_id,
+    expected_revision: receipt.expected_revision,
+    result_revision: receipt.result_revision,
+    result_digest: receipt.result_digest,
+    accepted_receipt_id: receipt.accepted_receipt_id,
+    created_at: receipt.created_at
+  };
+}
+function guardedProjectError(cause) {
+  if (cause instanceof MementosProjectRegistrationError)
+    throw cause;
+  if (cause instanceof ProjectGuardedUpdateError) {
+    const code = cause.code === "PROJECT_UPDATE_INVALID_INPUT" ? "MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT" : cause.code === "PROJECT_UPDATE_AUTHORITY_MISMATCH" ? "MEMENTOS_PROJECT_REGISTRATION_CAPABILITY_MISMATCH" : cause.code === "PROJECT_UPDATE_NOT_FOUND" ? "MEMENTOS_PROJECT_REGISTRATION_RECORD_NOT_FOUND" : cause.code === "PROJECT_UPDATE_RECEIPT_NOT_FOUND" ? "MEMENTOS_PROJECT_REGISTRATION_RECEIPT_NOT_FOUND" : "MEMENTOS_PROJECT_REGISTRATION_CONFLICT";
+    throw new MementosProjectRegistrationError(code, "guarded project operation was rejected without exposing private project data", { project_update_code: cause.code });
+  }
+  throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_ATOMICITY_UNAVAILABLE", "guarded project operation failed before a bounded public result was available");
+}
 function normalizedCallDigest(request) {
   return digestMementosProjectRegistrationValue({
     authority_route: request.authority_route,
@@ -52615,6 +52694,7 @@ class PackageOwnedMementosProjectRegistrationAuthority {
       conditional_inverse: true,
       ambiguous_outcome_reconciliation: true,
       guarded_update: true,
+      guarded_update_route: MEMENTOS_PROJECT_GUARDED_UPDATE_ROUTE,
       no_write_dry_run: true,
       expected_revision_compare_and_swap: true,
       caller_idempotency: true,
@@ -52676,6 +52756,90 @@ class PackageOwnedMementosProjectRegistrationAuthority {
       supported_resources: ["project"]
     };
   }
+  boundedGuardedUpdateResult(targetId2, project, receipt, bounds, startedAt) {
+    if (!receipt || project.id !== targetId2 || receipt.target_id !== targetId2) {
+      throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_ATOMICITY_UNAVAILABLE", "guarded project operation did not return its exact immutable receipt");
+    }
+    if (project.updated_at !== receipt.result_revision) {
+      throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_ATOMICITY_UNAVAILABLE", "guarded project result revision did not match its immutable receipt");
+    }
+    const record = {
+      target_id: targetId2,
+      revision: receipt.result_revision,
+      digest: receipt.result_digest
+    };
+    return withBoundedResponseControl({
+      dry_run: false,
+      applied: true,
+      record,
+      receipt: publicGuardedUpdateReceipt(receipt, this.capabilityValue)
+    }, bounds, startedAt);
+  }
+  async guardedUpdateProject(targetId2, request) {
+    const startedAt = Date.now();
+    const { identity, path } = assertGuardedUpdateRequest(targetId2, request, this.capabilityValue);
+    try {
+      const result = applyProjectUpdate(targetId2, {
+        ...identity,
+        operation_id: request.operation_id,
+        step_id: request.step_id,
+        idempotency_key: request.idempotency_key,
+        expected_revision: request.expected_revision,
+        updates: { path }
+      }, this.db, identity, (project) => projectRecord(this.db, project).digest);
+      return this.boundedGuardedUpdateResult(targetId2, result.project, result.receipt, request, startedAt);
+    } catch (cause) {
+      return guardedProjectError(cause);
+    }
+  }
+  async getGuardedProjectUpdateReceipt(targetId2, receiptId2, request) {
+    const startedAt = Date.now();
+    const identity = assertGuardedAuthorityRequest(targetId2, request, this.capabilityValue);
+    requireString(receiptId2, "receipt_id", {
+      min: 8,
+      max: 128,
+      pattern: OPERATION_PATTERN
+    });
+    try {
+      const receipt = getProjectUpdateReceipt(targetId2, receiptId2, identity, this.db, identity);
+      return withBoundedResponseControl({
+        receipt: publicGuardedUpdateReceipt(receipt, this.capabilityValue)
+      }, request, startedAt);
+    } catch (cause) {
+      return guardedProjectError(cause);
+    }
+  }
+  async rollbackGuardedProjectUpdate(targetId2, request) {
+    const startedAt = Date.now();
+    const identity = assertGuardedAuthorityRequest(targetId2, request, this.capabilityValue);
+    assertGuardedOperationFields(request);
+    if (!request.accepted_receipt || typeof request.accepted_receipt !== "object") {
+      throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "conditional rollback requires the exact sanitized accepted receipt");
+    }
+    requireString(request.accepted_receipt.receipt_id, "accepted_receipt.receipt_id", {
+      min: 8,
+      max: 128,
+      pattern: OPERATION_PATTERN
+    });
+    try {
+      const internalAccepted = getProjectUpdateReceipt(targetId2, request.accepted_receipt.receipt_id, identity, this.db, identity);
+      const accepted = publicGuardedUpdateReceipt(internalAccepted, this.capabilityValue);
+      if (accepted.direction !== "forward" || accepted.target_id !== targetId2 || request.expected_revision !== accepted.result_revision || canonicalMementosProjectRegistrationJson(request.accepted_receipt) !== canonicalMementosProjectRegistrationJson(accepted)) {
+        throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "conditional rollback receipt does not exactly match the accepted forward update");
+      }
+      const result = rollbackProjectUpdate(targetId2, {
+        ...identity,
+        operation_id: request.operation_id,
+        step_id: request.step_id,
+        idempotency_key: request.idempotency_key,
+        expected_revision: request.expected_revision,
+        accepted_receipt_id: accepted.receipt_id
+      }, this.db, identity, (project) => projectRecord(this.db, project).digest);
+      return this.boundedGuardedUpdateResult(targetId2, result.project, result.receipt, request, startedAt);
+    } catch (cause) {
+      return guardedProjectError(cause);
+    }
+  }
   async create(request) {
     const startedAt = Date.now();
     const path = assertForwardRequest2(request, this.capabilityValue);
@@ -52772,9 +52936,9 @@ class PackageOwnedMementosProjectRegistrationAuthority {
       throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "resource_kind must be project");
     }
     requireString(request.target_id, "target_id", {
-      min: 51,
-      max: 51,
-      pattern: PROJECT_ID_PATTERN
+      min: 8,
+      max: 128,
+      pattern: OPERATION_PATTERN
     });
     const path = ownedPath(request.target);
     const project = getProjectByExactId3(this.db, request.target_id);
@@ -53033,6 +53197,31 @@ function fromWireReadRequest(body) {
     target: new WirePathHandle(canonicalPath)
   };
 }
+function fromWireGuardedUpdateRequest(body) {
+  const { target_id: targetId2, updates, ...request } = body;
+  if (typeof targetId2 !== "string") {
+    throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "target_id is required on the private guarded-update transport");
+  }
+  if (!updates || typeof updates !== "object" || Array.isArray(updates) || typeof updates["path"] !== "string") {
+    throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "updates.path is required on the private guarded-update transport");
+  }
+  return {
+    targetId: targetId2,
+    request: {
+      ...request,
+      updates: {
+        path: new WirePathHandle(String(updates["path"]))
+      }
+    }
+  };
+}
+function exactWireIdentifier(body, field) {
+  const value = body[field];
+  if (typeof value !== "string") {
+    throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", `${field} is required on the guarded-update transport`);
+  }
+  return value;
+}
 async function handleMementosProjectRegistrationHttpRequest(request, url, authority, basePath = "/v1/project-registration") {
   const path = url.pathname;
   if (path !== basePath && !path.startsWith(`${basePath}/`))
@@ -53067,6 +53256,21 @@ async function handleMementosProjectRegistrationHttpRequest(request, url, author
     if (action === "verify-inverse") {
       return json({ verification: await authority.verifyInverse(fromWireRequest(body)) });
     }
+    if (action === "projects/guarded-update") {
+      const guarded = fromWireGuardedUpdateRequest(body);
+      return json(await authority.guardedUpdateProject(guarded.targetId, guarded.request));
+    }
+    if (action === "projects/update-receipts/lookup") {
+      const targetId2 = exactWireIdentifier(body, "target_id");
+      const receiptId2 = exactWireIdentifier(body, "receipt_id");
+      const { target_id: _targetId, receipt_id: _receiptId, ...lookup } = body;
+      return json(await authority.getGuardedProjectUpdateReceipt(targetId2, receiptId2, lookup));
+    }
+    if (action === "projects/guarded-rollback") {
+      const targetId2 = exactWireIdentifier(body, "target_id");
+      const { target_id: _targetId, ...rollback } = body;
+      return json(await authority.rollbackGuardedProjectUpdate(targetId2, rollback));
+    }
     return json({
       error: "unknown Mementos project-registration route",
       code: "MEMENTOS_PROJECT_REGISTRATION_RECEIPT_NOT_FOUND"
@@ -53099,6 +53303,15 @@ function toWireRequest(request) {
     canonical_path: extractPath(target)
   };
 }
+function toWireGuardedUpdateRequest(targetId2, request) {
+  return {
+    ...request,
+    target_id: targetId2,
+    updates: {
+      path: extractPath(request.updates.path)
+    }
+  };
+}
 
 class MementosProjectRegistrationHttpClient {
   authority = "mementos";
@@ -53160,6 +53373,24 @@ class MementosProjectRegistrationHttpClient {
     });
     return body.verification;
   }
+  async guardedUpdateProject(targetId2, request) {
+    return this.request("/projects/guarded-update", {
+      method: "POST",
+      body: JSON.stringify(toWireGuardedUpdateRequest(targetId2, request))
+    });
+  }
+  async getGuardedProjectUpdateReceipt(targetId2, receiptId2, request) {
+    return this.request("/projects/update-receipts/lookup", {
+      method: "POST",
+      body: JSON.stringify({ ...request, target_id: targetId2, receipt_id: receiptId2 })
+    });
+  }
+  async rollbackGuardedProjectUpdate(targetId2, request) {
+    return this.request("/projects/guarded-rollback", {
+      method: "POST",
+      body: JSON.stringify({ ...request, target_id: targetId2 })
+    });
+  }
 }
 function createMementosProjectRegistrationHttpClient(options) {
   return new MementosProjectRegistrationHttpClient(options);

package/dist/project-registration/authority.d.ts

@@ -1,5 +1,5 @@
 import type { DbAdapter } from "../storage.js";
-import { type MementosProjectRegistrationAuthority, type MementosProjectRegistrationAuthorityOptions, type MementosProjectRegistrationCapability, type MementosProjectRegistrationDirection, type MementosProjectRegistrationInverseVerification, type MementosProjectRegistrationLookupRequest, type MementosProjectRegistrationLookupResult, type MementosProjectRegistrationPathHandle, type MementosProjectRegistrationReceipt, type MementosProjectRegistrationRecord, type MementosProjectRegistrationRequest } from "./types.js";
+import { type MementosProjectGuardedRollbackRequest, type MementosProjectGuardedUpdateReceiptLookupRequest, type MementosProjectGuardedUpdateReceiptLookupResult, type MementosProjectGuardedUpdateRequest, type MementosProjectGuardedUpdateResult, type MementosProjectRegistrationAuthority, type MementosProjectRegistrationAuthorityOptions, type MementosProjectRegistrationCapability, type MementosProjectRegistrationDirection, type MementosProjectRegistrationInverseVerification, type MementosProjectRegistrationLookupRequest, type MementosProjectRegistrationLookupResult, type MementosProjectRegistrationPathHandle, type MementosProjectRegistrationReceipt, type MementosProjectRegistrationRecord, type MementosProjectRegistrationRequest } from "./types.js";
 export declare function canonicalMementosProjectRegistrationJson(value: unknown): string;
 export declare function digestMementosProjectRegistrationValue(value: unknown): string;
 export declare function deriveMementosProjectRegistrationIdempotencyKey(input: {
@@ -22,6 +22,10 @@ export declare class PackageOwnedMementosProjectRegistrationAuthority implements
     private terminal;
     private duplicateForwardOrTerminal;
     capability(): Promise<MementosProjectRegistrationCapability>;
+    private boundedGuardedUpdateResult;
+    guardedUpdateProject(targetId: string, request: MementosProjectGuardedUpdateRequest): Promise<MementosProjectGuardedUpdateResult>;
+    getGuardedProjectUpdateReceipt(targetId: string, receiptId: string, request: MementosProjectGuardedUpdateReceiptLookupRequest): Promise<MementosProjectGuardedUpdateReceiptLookupResult>;
+    rollbackGuardedProjectUpdate(targetId: string, request: MementosProjectGuardedRollbackRequest): Promise<MementosProjectGuardedUpdateResult>;
     create(request: MementosProjectRegistrationRequest): Promise<MementosProjectRegistrationReceipt>;
     readExact(request: {
         resource_kind: "project";

package/dist/project-registration/authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/project-registration/authority.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAS/C,OAAO,EAIL,KAAK,oCAAoC,EACzC,KAAK,2CAA2C,EAEhD,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EAEzC,KAAK,8CAA8C,EACnD,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACxC,MAAM,YAAY,CAAC;AA8CpB,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/E;AAaD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI7E;AAMD,wBAAgB,+CAA+C,CAAC,KAAK,EAAE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oCAAoC,CAAC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GAAG,MAAM,CAUT;AAqwBD,qBAAa,gDACb,YAAW,oCAAoC;IAO3C,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,SAAS,EAAG,UAAU,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IACxE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAA+D;gBAG3E,EAAE,EAAE,SAAS,EAC9B,OAAO,GAAE,2CAAgD;IA0B3D,OAAO,CAAC,KAAK;IAYb,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,QAAQ;IAyBhB,OAAO,CAAC,0BAA0B;IA6C5B,UAAU,IAAI,OAAO,CAAC,qCAAqC,CAAC;IAO5D,MAAM,CACV,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IAkHxC,SAAS,CAAC,OAAO,EAAE;QACvB,aAAa,EAAE,SAAS,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,qCAAqC,CAAC;QAC9C,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC;IA2BxC,aAAa,CACjB,OAAO,EAAE,wCAAwC,GAChD,OAAO,CAAC,uCAAuC,CAAC;IAa7C,UAAU,CACd,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IA4LxC,aAAa,CACjB,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,8CAA8C,CAAC;CAgD3D;AAED,wBAAgB,0CAA0C,CACxD,EAAE,EAAE,SAAS,EACb,OAAO,GAAE,2CAAgD,GACxD,oCAAoC,CAEtC;AAED,eAAO,MAAM,+CAA+C,mDAChB,CAAC"}
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/project-registration/authority.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,eAAe,CAAC;AAmB9D,OAAO,EAKL,KAAK,qCAAqC,EAE1C,KAAK,gDAAgD,EACrD,KAAK,+CAA+C,EACpD,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,2CAA2C,EAEhD,KAAK,qCAAqC,EAC1C,KAAK,oCAAoC,EAEzC,KAAK,8CAA8C,EACnD,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACxC,MAAM,YAAY,CAAC;AA8CpB,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/E;AAaD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI7E;AAMD,wBAAgB,+CAA+C,CAAC,KAAK,EAAE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oCAAoC,CAAC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GAAG,MAAM,CAUT;AA04BD,qBAAa,gDACb,YAAW,oCAAoC;IAO3C,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,SAAS,EAAG,UAAU,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IACxE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAA+D;gBAG3E,EAAE,EAAE,SAAS,EAC9B,OAAO,GAAE,2CAAgD;IA2B3D,OAAO,CAAC,KAAK;IAYb,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,QAAQ;IAyBhB,OAAO,CAAC,0BAA0B;IA6C5B,UAAU,IAAI,OAAO,CAAC,qCAAqC,CAAC;IAOlE,OAAO,CAAC,0BAA0B;IAgC5B,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,kCAAkC,CAAC;IA4BxC,8BAA8B,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,gDAAgD,GACxD,OAAO,CAAC,+CAA+C,CAAC;IA4BrD,4BAA4B,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,qCAAqC,GAC7C,OAAO,CAAC,kCAAkC,CAAC;IA+DxC,MAAM,CACV,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IAkHxC,SAAS,CAAC,OAAO,EAAE;QACvB,aAAa,EAAE,SAAS,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,qCAAqC,CAAC;QAC9C,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC;IA2BxC,aAAa,CACjB,OAAO,EAAE,wCAAwC,GAChD,OAAO,CAAC,uCAAuC,CAAC;IAa7C,UAAU,CACd,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IA4LxC,aAAa,CACjB,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,8CAA8C,CAAC;CAgD3D;AAED,wBAAgB,0CAA0C,CACxD,EAAE,EAAE,SAAS,EACb,OAAO,GAAE,2CAAgD,GACxD,oCAAoC,CAEtC;AAED,eAAO,MAAM,+CAA+C,mDAChB,CAAC"}

package/dist/project-registration/http.d.ts

@@ -1,4 +1,4 @@
-import { type MementosProjectRegistrationAuthority, type MementosProjectRegistrationCapability, type MementosProjectRegistrationHttpClientOptions, type MementosProjectRegistrationInverseVerification, type MementosProjectRegistrationLookupRequest, type MementosProjectRegistrationLookupResult, type MementosProjectRegistrationPathHandle, type MementosProjectRegistrationReceipt, type MementosProjectRegistrationRecord, type MementosProjectRegistrationRequest } from "./types.js";
+import { type MementosProjectGuardedRollbackRequest, type MementosProjectGuardedUpdateReceiptLookupRequest, type MementosProjectGuardedUpdateReceiptLookupResult, type MementosProjectGuardedUpdateRequest, type MementosProjectGuardedUpdateResult, type MementosProjectRegistrationAuthority, type MementosProjectRegistrationCapability, type MementosProjectRegistrationHttpClientOptions, type MementosProjectRegistrationInverseVerification, type MementosProjectRegistrationLookupRequest, type MementosProjectRegistrationLookupResult, type MementosProjectRegistrationPathHandle, type MementosProjectRegistrationReceipt, type MementosProjectRegistrationRecord, type MementosProjectRegistrationRequest } from "./types.js";
 /**
  * Handle one package-owned registration request. The canonical path is private
  * request material and is converted back to a structural handle before the
@@ -24,6 +24,9 @@ export declare class MementosProjectRegistrationHttpClient implements MementosPr
     lookupReceipt(request: MementosProjectRegistrationLookupRequest): Promise<MementosProjectRegistrationLookupResult>;
     compensate(request: MementosProjectRegistrationRequest): Promise<MementosProjectRegistrationReceipt>;
     verifyInverse(request: MementosProjectRegistrationRequest): Promise<MementosProjectRegistrationInverseVerification>;
+    guardedUpdateProject(targetId: string, request: MementosProjectGuardedUpdateRequest): Promise<MementosProjectGuardedUpdateResult>;
+    getGuardedProjectUpdateReceipt(targetId: string, receiptId: string, request: MementosProjectGuardedUpdateReceiptLookupRequest): Promise<MementosProjectGuardedUpdateReceiptLookupResult>;
+    rollbackGuardedProjectUpdate(targetId: string, request: MementosProjectGuardedRollbackRequest): Promise<MementosProjectGuardedUpdateResult>;
 }
 export declare function createMementosProjectRegistrationHttpClient(options: MementosProjectRegistrationHttpClientOptions): MementosProjectRegistrationAuthority;
 //# sourceMappingURL=http.d.ts.map

package/dist/project-registration/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/project-registration/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,oCAAoC,EACzC,KAAK,qCAAqC,EAC1C,KAAK,4CAA4C,EACjD,KAAK,8CAA8C,EACnD,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EAExC,MAAM,YAAY,CAAC;AA2FpB;;;;GAIG;AACH,wBAAsB,4CAA4C,CAChE,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,oCAAoC,EAC/C,QAAQ,GAAE,0BAA0B,GAAG,2BACX,GAC3B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAqD1B;AAsBD,qBAAa,qCACb,YAAW,oCAAoC;IAC7C,QAAQ,CAAC,SAAS,EAAG,UAAU,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAErC,OAAO,EAAE,4CAA4C;YAUnD,OAAO;IAiCf,UAAU,IAAI,OAAO,CAAC,qCAAqC,CAAC;IAO5D,MAAM,CACV,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IAQxC,SAAS,CAAC,OAAO,EAAE;QACvB,aAAa,EAAE,SAAS,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,qCAAqC,CAAC;QAC9C,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAYxC,aAAa,CACjB,OAAO,EAAE,wCAAwC,GAChD,OAAO,CAAC,uCAAuC,CAAC;IAO7C,UAAU,CACd,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IAQxC,aAAa,CACjB,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,8CAA8C,CAAC;CAS3D;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,4CAA4C,GACpD,oCAAoC,CAEtC"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/project-registration/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qCAAqC,EAC1C,KAAK,gDAAgD,EACrD,KAAK,+CAA+C,EACpD,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EAEvC,KAAK,oCAAoC,EACzC,KAAK,qCAAqC,EAC1C,KAAK,4CAA4C,EACjD,KAAK,8CAA8C,EACnD,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EAExC,MAAM,YAAY,CAAC;AAuIpB;;;;GAIG;AACH,wBAAsB,4CAA4C,CAChE,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,oCAAoC,EAC/C,QAAQ,GAAE,0BAA0B,GAAG,2BACX,GAC3B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA2E1B;AAmCD,qBAAa,qCACb,YAAW,oCAAoC;IAC7C,QAAQ,CAAC,SAAS,EAAG,UAAU,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAErC,OAAO,EAAE,4CAA4C;YAUnD,OAAO;IAiCf,UAAU,IAAI,OAAO,CAAC,qCAAqC,CAAC;IAO5D,MAAM,CACV,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IAQxC,SAAS,CAAC,OAAO,EAAE;QACvB,aAAa,EAAE,SAAS,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,qCAAqC,CAAC;QAC9C,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAYxC,aAAa,CACjB,OAAO,EAAE,wCAAwC,GAChD,OAAO,CAAC,uCAAuC,CAAC;IAO7C,UAAU,CACd,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,kCAAkC,CAAC;IAQxC,aAAa,CACjB,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,8CAA8C,CAAC;IAUpD,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,kCAAkC,CAAC;IAUxC,8BAA8B,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,gDAAgD,GACxD,OAAO,CAAC,+CAA+C,CAAC;IAUrD,4BAA4B,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,qCAAqC,GAC7C,OAAO,CAAC,kCAAkC,CAAC;CAS/C;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,4CAA4C,GACpD,oCAAoC,CAEtC"}

package/dist/project-registration/index.d.ts

@@ -4,5 +4,5 @@ export { postgresMementosProjectRegistrationSchemaSql, postgresMementosProjectGu
 export { MEMENTOS_PROJECT_REFERENCE_SURFACES, hasMementosProjectReferences, mementosProjectReferenceCounts, } from "./project-references.js";
 export type { MementosProjectReferenceCounts, MementosProjectReferenceKey, } from "./project-references.js";
 export { MEMENTOS_PROJECT_REGISTRATION_CALLER_ROUTE, MEMENTOS_PROJECT_REGISTRATION_ROUTE, MEMENTOS_PROJECT_REGISTRATION_SCHEMA_VERSION, MEMENTOS_PROJECT_GUARDED_UPDATE_ROUTE, MementosProjectRegistrationError, } from "./types.js";
-export type { MementosProjectRegistrationAuthority, MementosProjectRegistrationAuthorityOptions, MementosProjectRegistrationBounds, MementosProjectRegistrationCapability, MementosProjectRegistrationDirection, MementosProjectRegistrationErrorCode, MementosProjectRegistrationFaultPoint, MementosProjectRegistrationHttpClientOptions, MementosProjectRegistrationInverseVerification, MementosProjectRegistrationLookupRequest, MementosProjectRegistrationLookupResult, MementosProjectRegistrationOutcome, MementosProjectRegistrationPathHandle, MementosProjectRegistrationReceipt, MementosProjectRegistrationRecord, MementosProjectRegistrationRequest, MementosProjectRegistrationResourceKind, MementosProjectRegistrationResponseControl, } from "./types.js";
+export type { MementosProjectGuardedRollbackRequest, MementosProjectGuardedUpdateReceipt, MementosProjectGuardedUpdateReceiptLookupRequest, MementosProjectGuardedUpdateReceiptLookupResult, MementosProjectGuardedUpdateRequest, MementosProjectGuardedUpdateResult, MementosProjectRegistrationAuthority, MementosProjectRegistrationAuthorityOptions, MementosProjectRegistrationBounds, MementosProjectRegistrationCapability, MementosProjectRegistrationDirection, MementosProjectRegistrationErrorCode, MementosProjectRegistrationFaultPoint, MementosProjectRegistrationHttpClientOptions, MementosProjectRegistrationInverseVerification, MementosProjectRegistrationLookupRequest, MementosProjectRegistrationLookupResult, MementosProjectRegistrationOutcome, MementosProjectRegistrationPathHandle, MementosProjectRegistrationReceipt, MementosProjectRegistrationRecord, MementosProjectRegistrationRequest, MementosProjectRegistrationResourceKind, MementosProjectRegistrationResponseControl, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/project-registration/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/project-registration/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gDAAgD,EAChD,wCAAwC,EACxC,+CAA+C,EAC/C,0CAA0C,EAC1C,+CAA+C,EAC/C,sCAAsC,GACvC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qCAAqC,EACrC,2CAA2C,EAC3C,4CAA4C,GAC7C,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,4CAA4C,EAC5C,6CAA6C,EAC7C,0CAA0C,EAC1C,2CAA2C,GAC5C,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0CAA0C,EAC1C,mCAAmC,EACnC,4CAA4C,EAC5C,qCAAqC,EACrC,gCAAgC,GACjC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,oCAAoC,EACpC,2CAA2C,EAC3C,iCAAiC,EACjC,qCAAqC,EACrC,oCAAoC,EACpC,oCAAoC,EACpC,qCAAqC,EACrC,4CAA4C,EAC5C,8CAA8C,EAC9C,wCAAwC,EACxC,uCAAuC,EACvC,kCAAkC,EAClC,qCAAqC,EACrC,kCAAkC,EAClC,iCAAiC,EACjC,kCAAkC,EAClC,uCAAuC,EACvC,0CAA0C,GAC3C,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/project-registration/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gDAAgD,EAChD,wCAAwC,EACxC,+CAA+C,EAC/C,0CAA0C,EAC1C,+CAA+C,EAC/C,sCAAsC,GACvC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qCAAqC,EACrC,2CAA2C,EAC3C,4CAA4C,GAC7C,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,4CAA4C,EAC5C,6CAA6C,EAC7C,0CAA0C,EAC1C,2CAA2C,GAC5C,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0CAA0C,EAC1C,mCAAmC,EACnC,4CAA4C,EAC5C,qCAAqC,EACrC,gCAAgC,GACjC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qCAAqC,EACrC,mCAAmC,EACnC,gDAAgD,EAChD,+CAA+C,EAC/C,mCAAmC,EACnC,kCAAkC,EAClC,oCAAoC,EACpC,2CAA2C,EAC3C,iCAAiC,EACjC,qCAAqC,EACrC,oCAAoC,EACpC,oCAAoC,EACpC,qCAAqC,EACrC,4CAA4C,EAC5C,8CAA8C,EAC9C,wCAAwC,EACxC,uCAAuC,EACvC,kCAAkC,EAClC,qCAAqC,EACrC,kCAAkC,EAClC,iCAAiC,EACjC,kCAAkC,EAClC,uCAAuC,EACvC,0CAA0C,GAC3C,MAAM,YAAY,CAAC"}