@inerrata-corporation/errata 2.0.0-dev.72 → 2.0.0-dev.74

package/consolidate-worker.mjs

@@ -15219,6 +15219,18 @@ var init_wire = __esm({
        *  self-refute from an independent one. Optional + additive — absent is
        *  exactly today's wire (and leaves the gate fail-open for that node). */
       originProject: external_exports.string().min(1).max(120).optional(),
+      /** PJ-write · PLAN_PROJECT_STORE §5/§5a — the console project uuid this batch
+       *  is contributed TO. Distinct from `originProject` above, which is the salted
+       *  `wp_…` per-checkout workspace id (a refute-gate origin key, not an
+       *  audience): this one names a stratum and IS an audience assertion.
+       *
+       *  Asserted per-request because it cannot ride the 15-min gateway JWT — one
+       *  daemon credential serves N projects. The door verifies it server-side
+       *  against the projected link record (owning org must equal the caller's
+       *  identity-derived org) and REJECTS the batch if it can't, so naming a
+       *  project you don't belong to buys nothing. Optional + additive — absent is
+       *  exactly today's wire, routing to org/team/public as before. */
+      projectId: external_exports.string().min(1).max(120).optional(),
       nodes: external_exports.array(CastaliaIngestNodeSchema).max(1e3),
       edges: external_exports.array(CastaliaIngestEdgeSchema).max(5e3),
       /** Optional symbol→intent-summary sidecar (PP-symbol-intent). Only symbols
@@ -15235,6 +15247,14 @@ var init_repo_locator = __esm({
   }
 });
 
+// ../../packages/shared/src/project-symbol.ts
+var init_project_symbol = __esm({
+  "../../packages/shared/src/project-symbol.ts"() {
+    "use strict";
+    init_hash();
+  }
+});
+
 // ../../packages/shared/src/nlp/canonicalize.ts
 var init_canonicalize = __esm({
   "../../packages/shared/src/nlp/canonicalize.ts"() {
@@ -15270,6 +15290,7 @@ var init_src = __esm({
     init_edge_rules();
     init_symbol_intent();
     init_repo_locator();
+    init_project_symbol();
     init_hash();
     init_error_signature();
     init_canonicalize();

package/errata.mjs

@@ -15388,7 +15388,11 @@ var init_symbol_intent = __esm({
 function isCloudWritableNodeLabel(label) {
   return CLOUD_WRITABLE_NODE_LABEL_SET.has(label);
 }
+function isQuarantinedExtractionSource(source) {
+  return typeof source === "string" && source.startsWith(QUARANTINE_EXTRACTION_SOURCE_PREFIX);
+}
 function provenanceBand(source) {
+  if (isQuarantinedExtractionSource(source)) return "seed";
   switch (source) {
     case "agent-observed":
     case "user-edited":
@@ -15436,7 +15440,7 @@ function summarizeIngestResult(r) {
     ...r.patternReconciliation ? { patternReconciliation: r.patternReconciliation } : {}
   };
 }
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15481,6 +15485,7 @@ var init_wire = __esm({
       "cold-start-seed",
       "user-edited"
     ];
+    QUARANTINE_EXTRACTION_SOURCE_PREFIX = "quarantined:";
     MAX_NODES_PER_PAYLOAD = 200;
     MAX_EDGES_PER_PAYLOAD = 500;
     CastaliaIngestNodeSchema = external_exports.object({
@@ -15534,6 +15539,18 @@ var init_wire = __esm({
        *  self-refute from an independent one. Optional + additive — absent is
        *  exactly today's wire (and leaves the gate fail-open for that node). */
       originProject: external_exports.string().min(1).max(120).optional(),
+      /** PJ-write · PLAN_PROJECT_STORE §5/§5a — the console project uuid this batch
+       *  is contributed TO. Distinct from `originProject` above, which is the salted
+       *  `wp_…` per-checkout workspace id (a refute-gate origin key, not an
+       *  audience): this one names a stratum and IS an audience assertion.
+       *
+       *  Asserted per-request because it cannot ride the 15-min gateway JWT — one
+       *  daemon credential serves N projects. The door verifies it server-side
+       *  against the projected link record (owning org must equal the caller's
+       *  identity-derived org) and REJECTS the batch if it can't, so naming a
+       *  project you don't belong to buys nothing. Optional + additive — absent is
+       *  exactly today's wire, routing to org/team/public as before. */
+      projectId: external_exports.string().min(1).max(120).optional(),
       nodes: external_exports.array(CastaliaIngestNodeSchema).max(1e3),
       edges: external_exports.array(CastaliaIngestEdgeSchema).max(5e3),
       /** Optional symbol→intent-summary sidecar (PP-symbol-intent). Only symbols
@@ -15579,6 +15596,21 @@ var init_repo_locator = __esm({
   }
 });
 
+// ../../packages/shared/src/project-symbol.ts
+function normalizeSymbolPath(relPath) {
+  return relPath.replace(/\\/g, "/").replace(/\/+/g, "/").replace(/^\.\//, "").replace(/^\//, "");
+}
+function projectSymbolId(projectId, relPath, qname, kind) {
+  const path2 = normalizeSymbolPath(relPath);
+  return `sym_${sha256(`${projectId}:${path2}:${qname}:${kind}`).slice(0, 24)}`;
+}
+var init_project_symbol = __esm({
+  "../../packages/shared/src/project-symbol.ts"() {
+    "use strict";
+    init_hash();
+  }
+});
+
 // ../../packages/shared/src/nlp/canonicalize.ts
 function canonicalize(value) {
   return value.normalize("NFC").trim().toLowerCase().replace(/\s+/g, " ");
@@ -15645,6 +15677,7 @@ __export(src_exports, {
   MAX_SYMBOL_SUMMARY_CHARS: () => MAX_SYMBOL_SUMMARY_CHARS,
   PAGERANK_EXCLUSIONS: () => PAGERANK_EXCLUSIONS,
   PROBLEM_RESOLUTION: () => PROBLEM_RESOLUTION,
+  QUARANTINE_EXTRACTION_SOURCE_PREFIX: () => QUARANTINE_EXTRACTION_SOURCE_PREFIX,
   RESOLUTION_EDGES: () => RESOLUTION_EDGES,
   RouteContextCountWireSchema: () => RouteContextCountWireSchema,
   SEMANTIC_NODE_LABELS: () => SEMANTIC_NODE_LABELS,
@@ -15680,6 +15713,7 @@ __export(src_exports, {
   isCodeLabel: () => isCodeLabel,
   isContextLabel: () => isContextLabel,
   isInferredSource: () => isInferredSource,
+  isQuarantinedExtractionSource: () => isQuarantinedExtractionSource,
   isSeedProvenance: () => isSeedProvenance,
   isSemanticLabel: () => isSemanticLabel,
   isTestRelPath: () => isTestRelPath,
@@ -15690,11 +15724,13 @@ __export(src_exports, {
   normalizeExtractionSource: () => normalizeExtractionSource,
   normalizePredicate: () => normalizePredicate,
   normalizeRepoLocator: () => normalizeRepoLocator,
+  normalizeSymbolPath: () => normalizeSymbolPath,
   packageCanonicalId: () => packageCanonicalId,
   pagerankEdgeTypes: () => pagerankEdgeTypes,
   parsePackageRef: () => parsePackageRef,
   prefilterEntities: () => prefilterEntities,
   problemIdFromError: () => problemIdFromError,
+  projectSymbolId: () => projectSymbolId,
   provenanceBand: () => provenanceBand,
   resolveCanonical: () => resolveCanonical,
   resolveCanonicalId: () => resolveCanonicalId,
@@ -15716,6 +15752,7 @@ var init_src = __esm({
     init_edge_rules();
     init_symbol_intent();
     init_repo_locator();
+    init_project_symbol();
     init_hash();
     init_error_signature();
     init_canonicalize();
@@ -43197,7 +43234,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.0-dev.72" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.0-dev.74" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.0-dev.72",
+  "version": "2.0.0-dev.74",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15074,6 +15074,18 @@ var init_wire = __esm({
        *  self-refute from an independent one. Optional + additive — absent is
        *  exactly today's wire (and leaves the gate fail-open for that node). */
       originProject: external_exports.string().min(1).max(120).optional(),
+      /** PJ-write · PLAN_PROJECT_STORE §5/§5a — the console project uuid this batch
+       *  is contributed TO. Distinct from `originProject` above, which is the salted
+       *  `wp_…` per-checkout workspace id (a refute-gate origin key, not an
+       *  audience): this one names a stratum and IS an audience assertion.
+       *
+       *  Asserted per-request because it cannot ride the 15-min gateway JWT — one
+       *  daemon credential serves N projects. The door verifies it server-side
+       *  against the projected link record (owning org must equal the caller's
+       *  identity-derived org) and REJECTS the batch if it can't, so naming a
+       *  project you don't belong to buys nothing. Optional + additive — absent is
+       *  exactly today's wire, routing to org/team/public as before. */
+      projectId: external_exports.string().min(1).max(120).optional(),
       nodes: external_exports.array(CastaliaIngestNodeSchema).max(1e3),
       edges: external_exports.array(CastaliaIngestEdgeSchema).max(5e3),
       /** Optional symbol→intent-summary sidecar (PP-symbol-intent). Only symbols
@@ -15090,6 +15102,14 @@ var init_repo_locator = __esm({
   }
 });
 
+// ../../packages/shared/src/project-symbol.ts
+var init_project_symbol = __esm({
+  "../../packages/shared/src/project-symbol.ts"() {
+    "use strict";
+    init_hash();
+  }
+});
+
 // ../../packages/shared/src/nlp/canonicalize.ts
 var init_canonicalize = __esm({
   "../../packages/shared/src/nlp/canonicalize.ts"() {
@@ -15115,6 +15135,7 @@ var init_src = __esm({
     init_edge_rules();
     init_symbol_intent();
     init_repo_locator();
+    init_project_symbol();
     init_hash();
     init_error_signature();
     init_canonicalize();