@inerrata-corporation/errata 2.0.0-dev.50 → 2.0.0-dev.51

package/consolidate-worker.mjs

@@ -15169,6 +15169,12 @@ var init_wire = __esm({
       /** Client-supplied UUID — one batch; pairs with the payload digest for replay. */
       runId: external_exports.string().uuid(),
       source: external_exports.enum(INGEST_SOURCES),
+      /** The contributing project (origin key = project; the salted `wp_…` the
+       *  daemon already sends as telemetry workspaceId). Stamped onto created nodes
+       *  as `authoringProject` so the refute channel's cross-origin gate can tell a
+       *  self-refute from an independent one. Optional + additive — absent is
+       *  exactly today's wire (and leaves the gate fail-open for that node). */
+      originProject: external_exports.string().min(1).max(120).optional(),
       nodes: external_exports.array(CastaliaIngestNodeSchema).max(1e3),
       edges: external_exports.array(CastaliaIngestEdgeSchema).max(5e3),
       /** Optional symbol→intent-summary sidecar (PP-symbol-intent). Only symbols

package/errata.mjs

@@ -15472,6 +15472,12 @@ var init_wire = __esm({
       /** Client-supplied UUID — one batch; pairs with the payload digest for replay. */
       runId: external_exports.string().uuid(),
       source: external_exports.enum(INGEST_SOURCES),
+      /** The contributing project (origin key = project; the salted `wp_…` the
+       *  daemon already sends as telemetry workspaceId). Stamped onto created nodes
+       *  as `authoringProject` so the refute channel's cross-origin gate can tell a
+       *  self-refute from an independent one. Optional + additive — absent is
+       *  exactly today's wire (and leaves the gate fail-open for that node). */
+      originProject: external_exports.string().min(1).max(120).optional(),
       nodes: external_exports.array(CastaliaIngestNodeSchema).max(1e3),
       edges: external_exports.array(CastaliaIngestEdgeSchema).max(5e3),
       /** Optional symbol→intent-summary sidecar (PP-symbol-intent). Only symbols
@@ -20725,7 +20731,16 @@ function toWirePayload(batch, runId) {
     };
   });
   const symbolSummaries = sidecarForNodes(batch.symbolSummaries, nodes);
-  return { runId, source: "daemon", nodes, edges, ...symbolSummaries ? { symbolSummaries } : {} };
+  return {
+    runId,
+    source: "daemon",
+    // Origin key (= project) for the refute channel's cross-origin gate; absent
+    // for id-less batches (principle sync) → those nodes stay fail-open.
+    ...batch.originProject ? { originProject: batch.originProject } : {},
+    nodes,
+    edges,
+    ...symbolSummaries ? { symbolSummaries } : {}
+  };
 }
 function clamp012(x) {
   return Math.max(0, Math.min(1, x));
@@ -21206,6 +21221,12 @@ var init_client = __esm({
       async reportContradictions(payload) {
         return this.json("POST", "/v2/contradict", payload);
       }
+      /** Transport corroborations (an agent leaned on / resolved a shown prior) to
+       *  the cloud's corroborationCount (§5.4). Cross-origin gated (this project vs
+       *  the node's author — no self-corroboration). Best-effort. */
+      async reportCorroborations(payload) {
+        return this.json("POST", "/v2/corroborate", payload);
+      }
       async pushPrinciples(payload) {
         return this.json("POST", "/v2/private/principles", payload);
       }
@@ -41216,7 +41237,7 @@ function harvestInlineTags(store, text, opts) {
   const source = opts.sourceId ? store.getNode(opts.sourceId) : null;
   const mintPriors = opts.mintPriors ?? true;
   const touched = opts.sessionTouchedIds ?? /* @__PURE__ */ new Set();
-  const plan = { priorEdges: 0, problems: [], fixes: [], triages: [], attempts: [], unresolvedFixes: [], transfers: [], instances: [], patterns: [], refutes: [] };
+  const plan = { priorEdges: 0, problems: [], fixes: [], triages: [], attempts: [], unresolvedFixes: [], transfers: [], instances: [], patterns: [], refutes: [], corroborations: [] };
   const tags = parseInlineTags(text);
   const symptomSeqs = tags.filter((t) => (t.kind === "problem" || t.kind === "todo" || t.kind === "constraint") && t.statement).map((t) => ({ seq: t.seq ?? -1, statement: t.statement, threadId: t.threadId })).sort((a, b) => a.seq - b.seq);
   const bindSymptom = (seq, threadId) => {
@@ -41252,8 +41273,13 @@ function harvestInlineTags(store, text, opts) {
     } else if (tag.kind === "fix") {
       if (tag.handle) {
         const problemId = resolveHandle(store, tag.handle, opts.handleMap);
-        if (problemId) plan.fixes.push({ problemId, ...tag.fixRationale ? { fixNote: tag.fixRationale } : {} });
-        else plan.unresolvedFixes.push({ handle: tag.handle, ...tag.fixRationale ? { fixNote: tag.fixRationale } : {} });
+        if (problemId) {
+          plan.fixes.push({ problemId, ...tag.fixRationale ? { fixNote: tag.fixRationale } : {} });
+          const witnessKey = `corrob:${problemId}:${digest({ h: tag.handle })}`.slice(0, 72);
+          if (!plan.corroborations.some((c) => c.witnessKey === witnessKey)) {
+            plan.corroborations.push({ nodeId: problemId, witnessKey });
+          }
+        } else plan.unresolvedFixes.push({ handle: tag.handle, ...tag.fixRationale ? { fixNote: tag.fixRationale } : {} });
       } else if (tag.fixRationale) {
         const b = bindSymptom(tag.seq, tag.threadId);
         if (b.problemId) {
@@ -41690,6 +41716,8 @@ function buildClaimIngest(store, profile, daemonVersion, level = 1, ignorePatter
   const base = {
     daemonVersion,
     profile: { stack: profile.stack, languages: profile.languages, domains: profile.domains },
+    // origin key (= project) for the refute channel's cross-origin gate.
+    originProject: profile.id,
     nodes,
     edges: []
   };
@@ -41734,6 +41762,8 @@ function buildDesignProblemIngest(store, profile, daemonVersion, ignorePatterns
   const base = {
     daemonVersion,
     profile: { stack: profile.stack, languages: profile.languages, domains: profile.domains },
+    // origin key (= project) for the refute channel's cross-origin gate.
+    originProject: profile.id,
     nodes,
     edges
   };
@@ -42724,7 +42754,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.0-dev.50" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.0-dev.51" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -43538,6 +43568,13 @@ function createWorkspaceEngine(opts) {
             (err2) => console.warn("[errata] refute transport failed (continuing):", err2 instanceof Error ? err2.message : err2)
           );
         }
+        if (plan.corroborations.length > 0 && typeof cloud.reportCorroborations === "function") {
+          void cloud.reportCorroborations({ daemonVersion: DAEMON_VERSION, projectId: profile.id, items: plan.corroborations }).then((r) => {
+            if (r?.recorded) console.log(`[errata] corroborate: ${r.recorded} corroboration(s) recorded`);
+          }).catch(
+            (err2) => console.warn("[errata] corroboration transport failed (continuing):", err2 instanceof Error ? err2.message : err2)
+          );
+        }
       } catch (err2) {
         console.warn("[errata] inline-tag harvest failed:", err2);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.0-dev.50",
+  "version": "2.0.0-dev.51",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15015,6 +15015,12 @@ var init_wire = __esm({
       /** Client-supplied UUID — one batch; pairs with the payload digest for replay. */
       runId: external_exports.string().uuid(),
       source: external_exports.enum(INGEST_SOURCES),
+      /** The contributing project (origin key = project; the salted `wp_…` the
+       *  daemon already sends as telemetry workspaceId). Stamped onto created nodes
+       *  as `authoringProject` so the refute channel's cross-origin gate can tell a
+       *  self-refute from an independent one. Optional + additive — absent is
+       *  exactly today's wire (and leaves the gate fail-open for that node). */
+      originProject: external_exports.string().min(1).max(120).optional(),
       nodes: external_exports.array(CastaliaIngestNodeSchema).max(1e3),
       edges: external_exports.array(CastaliaIngestEdgeSchema).max(5e3),
       /** Optional symbol→intent-summary sidecar (PP-symbol-intent). Only symbols