@inerrata-corporation/errata 2.0.0-dev.74 → 2.0.0-dev.76

package/consolidate-worker.mjs

@@ -53,7 +53,18 @@ var init_castalia = __esm({
       "OperatingSystem",
       "Paradigm",
       "DataStructure",
-      "AgentModel"
+      "AgentModel",
+      // An OPAQUE anchor identity in a project's stratum (PJ-anchors · plan §6c).
+      // Deliberately NOT one of the CODE_NODE_LABELS below — those are the local code
+      // graph and never cross. A cloud `Symbol` carries the salted `sym_` id and a
+      // coarse `kind`, and NOTHING ELSE: no path, no qualified name. It exists so two
+      // teammates' knowledge about the same function lands on one node; the cloud
+      // learns THAT they concern the same symbol, never WHICH symbol.
+      //
+      // Project-stratum only. The ingest door rejects a `Symbol` node — and any
+      // ANCHORED_AT edge — on a batch that carries no verified projectId, so the
+      // org/team/public lanes can never acquire one by accident.
+      "Symbol"
     ];
     CODE_NODE_LABELS = [
       "File",
@@ -15123,7 +15134,7 @@ var init_symbol_intent = __esm({
 });
 
 // ../../packages/shared/src/wire.ts
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15154,11 +15165,20 @@ var init_wire = __esm({
       "DataStructure",
       "Triage",
       "Claim",
-      "AntiPattern"
+      "AntiPattern",
+      // PJ-anchors (§6c): the OPAQUE project anchor identity — salted `sym_` id +
+      // coarse kind, no path, no qualified name. Writable ONLY on a batch with a
+      // verified projectId; the ingest door rejects it outright otherwise, so its
+      // presence in this list does not admit it to the org/team/public lanes.
+      "Symbol"
     ];
+    PROJECT_ONLY_NODE_LABELS = ["Symbol"];
+    PROJECT_ONLY_NODE_LABEL_SET = new Set(PROJECT_ONLY_NODE_LABELS);
+    PROJECT_ONLY_EDGE_TYPES = ["ANCHORED_AT"];
+    PROJECT_ONLY_EDGE_TYPE_SET = new Set(PROJECT_ONLY_EDGE_TYPES);
     CLOUD_WRITABLE_NODE_LABEL_SET = new Set(CLOUD_WRITABLE_NODE_LABELS);
     CLOUD_EDGE_TYPES = ALL_EDGE_TYPES.filter(
-      (e) => !CODE_EDGES.includes(e) && !GIT_EDGES.includes(e) && !BRIDGE_EDGES.includes(e)
+      (e) => e === "ANCHORED_AT" || !CODE_EDGES.includes(e) && !GIT_EDGES.includes(e) && !BRIDGE_EDGES.includes(e)
     );
     INGEST_SOURCES = ["agent", "daemon", "corpus-importer", "spine-importer"];
     INGEST_EXTRACTION_SOURCES = [
@@ -15251,7 +15271,6 @@ var init_repo_locator = __esm({
 var init_project_symbol = __esm({
   "../../packages/shared/src/project-symbol.ts"() {
     "use strict";
-    init_hash();
   }
 });
 

package/errata.mjs

@@ -103,7 +103,18 @@ var init_castalia = __esm({
       "OperatingSystem",
       "Paradigm",
       "DataStructure",
-      "AgentModel"
+      "AgentModel",
+      // An OPAQUE anchor identity in a project's stratum (PJ-anchors · plan §6c).
+      // Deliberately NOT one of the CODE_NODE_LABELS below — those are the local code
+      // graph and never cross. A cloud `Symbol` carries the salted `sym_` id and a
+      // coarse `kind`, and NOTHING ELSE: no path, no qualified name. It exists so two
+      // teammates' knowledge about the same function lands on one node; the cloud
+      // learns THAT they concern the same symbol, never WHICH symbol.
+      //
+      // Project-stratum only. The ingest door rejects a `Symbol` node — and any
+      // ANCHORED_AT edge — on a batch that carries no verified projectId, so the
+      // org/team/public lanes can never acquire one by accident.
+      "Symbol"
     ];
     CODE_NODE_LABELS = [
       "File",
@@ -15259,6 +15270,18 @@ var init_edge_rules = __esm({
   "../../packages/shared/src/edge-rules.ts"() {
     "use strict";
     EDGE_RULES = {
+      // ── Project anchors (PJ-anchors · PLAN_PROJECT_STORE §6c) ──
+      // ANCHORED_AT is the ONE bridge edge admitted to the cloud, and it exists for
+      // exactly one purpose: point a piece of knowledge at an OPAQUE project `Symbol`
+      // so two teammates' observations about the same function converge on one node.
+      // Constrain it to that purpose — an unconstrained ANCHORED_AT (its state before
+      // this rule, since a missing entry means "anything goes") would let a batch
+      // anchor anything at anything, e.g. at a public `Package`, quietly re-creating
+      // the code↔collective bridge the membrane exists to prevent.
+      ANCHORED_AT: {
+        from: ["Problem", "Solution", "RootCause", "Claim"],
+        to: ["Symbol"]
+      },
       // ── Security spine (v1 taxonomy.ts SECURITY_FORWARD_ONLY commentary) ──
       TARGETS: { from: ["Exploit"], to: ["Vulnerability"] },
       ENABLES: { from: ["AntiPattern"], to: ["Vulnerability"] },
@@ -15385,6 +15408,12 @@ var init_symbol_intent = __esm({
 });
 
 // ../../packages/shared/src/wire.ts
+function isProjectOnlyNodeLabel(label) {
+  return PROJECT_ONLY_NODE_LABEL_SET.has(label);
+}
+function isProjectOnlyEdgeType(type) {
+  return PROJECT_ONLY_EDGE_TYPE_SET.has(type);
+}
 function isCloudWritableNodeLabel(label) {
   return CLOUD_WRITABLE_NODE_LABEL_SET.has(label);
 }
@@ -15440,7 +15469,7 @@ function summarizeIngestResult(r) {
     ...r.patternReconciliation ? { patternReconciliation: r.patternReconciliation } : {}
   };
 }
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15471,11 +15500,20 @@ var init_wire = __esm({
       "DataStructure",
       "Triage",
       "Claim",
-      "AntiPattern"
+      "AntiPattern",
+      // PJ-anchors (§6c): the OPAQUE project anchor identity — salted `sym_` id +
+      // coarse kind, no path, no qualified name. Writable ONLY on a batch with a
+      // verified projectId; the ingest door rejects it outright otherwise, so its
+      // presence in this list does not admit it to the org/team/public lanes.
+      "Symbol"
     ];
+    PROJECT_ONLY_NODE_LABELS = ["Symbol"];
+    PROJECT_ONLY_NODE_LABEL_SET = new Set(PROJECT_ONLY_NODE_LABELS);
+    PROJECT_ONLY_EDGE_TYPES = ["ANCHORED_AT"];
+    PROJECT_ONLY_EDGE_TYPE_SET = new Set(PROJECT_ONLY_EDGE_TYPES);
     CLOUD_WRITABLE_NODE_LABEL_SET = new Set(CLOUD_WRITABLE_NODE_LABELS);
     CLOUD_EDGE_TYPES = ALL_EDGE_TYPES.filter(
-      (e) => !CODE_EDGES.includes(e) && !GIT_EDGES.includes(e) && !BRIDGE_EDGES.includes(e)
+      (e) => e === "ANCHORED_AT" || !CODE_EDGES.includes(e) && !GIT_EDGES.includes(e) && !BRIDGE_EDGES.includes(e)
     );
     INGEST_SOURCES = ["agent", "daemon", "corpus-importer", "spine-importer"];
     INGEST_EXTRACTION_SOURCES = [
@@ -15597,17 +15635,17 @@ var init_repo_locator = __esm({
 });
 
 // ../../packages/shared/src/project-symbol.ts
+import { createHmac } from "node:crypto";
 function normalizeSymbolPath(relPath) {
   return relPath.replace(/\\/g, "/").replace(/\/+/g, "/").replace(/^\.\//, "").replace(/^\//, "");
 }
-function projectSymbolId(projectId, relPath, qname, kind) {
+function projectSymbolId(projectSalt, projectId, relPath, qname, kind) {
   const path2 = normalizeSymbolPath(relPath);
-  return `sym_${sha256(`${projectId}:${path2}:${qname}:${kind}`).slice(0, 24)}`;
+  return `sym_${createHmac("sha256", projectSalt).update(`${projectId}:${path2}:${qname}:${kind}`).digest("hex").slice(0, 24)}`;
 }
 var init_project_symbol = __esm({
   "../../packages/shared/src/project-symbol.ts"() {
     "use strict";
-    init_hash();
   }
 });
 
@@ -15677,6 +15715,8 @@ __export(src_exports, {
   MAX_SYMBOL_SUMMARY_CHARS: () => MAX_SYMBOL_SUMMARY_CHARS,
   PAGERANK_EXCLUSIONS: () => PAGERANK_EXCLUSIONS,
   PROBLEM_RESOLUTION: () => PROBLEM_RESOLUTION,
+  PROJECT_ONLY_EDGE_TYPES: () => PROJECT_ONLY_EDGE_TYPES,
+  PROJECT_ONLY_NODE_LABELS: () => PROJECT_ONLY_NODE_LABELS,
   QUARANTINE_EXTRACTION_SOURCE_PREFIX: () => QUARANTINE_EXTRACTION_SOURCE_PREFIX,
   RESOLUTION_EDGES: () => RESOLUTION_EDGES,
   RouteContextCountWireSchema: () => RouteContextCountWireSchema,
@@ -15713,6 +15753,8 @@ __export(src_exports, {
   isCodeLabel: () => isCodeLabel,
   isContextLabel: () => isContextLabel,
   isInferredSource: () => isInferredSource,
+  isProjectOnlyEdgeType: () => isProjectOnlyEdgeType,
+  isProjectOnlyNodeLabel: () => isProjectOnlyNodeLabel,
   isQuarantinedExtractionSource: () => isQuarantinedExtractionSource,
   isSeedProvenance: () => isSeedProvenance,
   isSemanticLabel: () => isSemanticLabel,
@@ -43234,7 +43276,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.0-dev.74" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.0-dev.76" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.0-dev.74",
+  "version": "2.0.0-dev.76",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -64,7 +64,18 @@ var init_castalia = __esm({
       "OperatingSystem",
       "Paradigm",
       "DataStructure",
-      "AgentModel"
+      "AgentModel",
+      // An OPAQUE anchor identity in a project's stratum (PJ-anchors · plan §6c).
+      // Deliberately NOT one of the CODE_NODE_LABELS below — those are the local code
+      // graph and never cross. A cloud `Symbol` carries the salted `sym_` id and a
+      // coarse `kind`, and NOTHING ELSE: no path, no qualified name. It exists so two
+      // teammates' knowledge about the same function lands on one node; the cloud
+      // learns THAT they concern the same symbol, never WHICH symbol.
+      //
+      // Project-stratum only. The ingest door rejects a `Symbol` node — and any
+      // ANCHORED_AT edge — on a batch that carries no verified projectId, so the
+      // org/team/public lanes can never acquire one by accident.
+      "Symbol"
     ];
     CODE_NODE_LABELS = [
       "File",
@@ -14978,7 +14989,7 @@ var init_symbol_intent = __esm({
 });
 
 // ../../packages/shared/src/wire.ts
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15009,11 +15020,20 @@ var init_wire = __esm({
       "DataStructure",
       "Triage",
       "Claim",
-      "AntiPattern"
+      "AntiPattern",
+      // PJ-anchors (§6c): the OPAQUE project anchor identity — salted `sym_` id +
+      // coarse kind, no path, no qualified name. Writable ONLY on a batch with a
+      // verified projectId; the ingest door rejects it outright otherwise, so its
+      // presence in this list does not admit it to the org/team/public lanes.
+      "Symbol"
     ];
+    PROJECT_ONLY_NODE_LABELS = ["Symbol"];
+    PROJECT_ONLY_NODE_LABEL_SET = new Set(PROJECT_ONLY_NODE_LABELS);
+    PROJECT_ONLY_EDGE_TYPES = ["ANCHORED_AT"];
+    PROJECT_ONLY_EDGE_TYPE_SET = new Set(PROJECT_ONLY_EDGE_TYPES);
     CLOUD_WRITABLE_NODE_LABEL_SET = new Set(CLOUD_WRITABLE_NODE_LABELS);
     CLOUD_EDGE_TYPES = ALL_EDGE_TYPES.filter(
-      (e) => !CODE_EDGES.includes(e) && !GIT_EDGES.includes(e) && !BRIDGE_EDGES.includes(e)
+      (e) => e === "ANCHORED_AT" || !CODE_EDGES.includes(e) && !GIT_EDGES.includes(e) && !BRIDGE_EDGES.includes(e)
     );
     INGEST_SOURCES = ["agent", "daemon", "corpus-importer", "spine-importer"];
     INGEST_EXTRACTION_SOURCES = [
@@ -15106,7 +15126,6 @@ var init_repo_locator = __esm({
 var init_project_symbol = __esm({
   "../../packages/shared/src/project-symbol.ts"() {
     "use strict";
-    init_hash();
   }
 });