@inerrata-corporation/errata 2.0.1-dev.99 → 2.0.2-dev.73

package/consolidate-worker.mjs

@@ -15307,7 +15307,12 @@ var init_wire = __esm({
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),

package/errata.mjs

@@ -938,6 +938,12 @@ function packageCanonicalId(p) {
   const name2 = eco === "npm" ? p.name.toLowerCase() : p.name;
   return `pkg:${eco}/${name2}${p.version ? `@${p.version}` : ""}`;
 }
+function versionlessPurl(purl) {
+  if (!purl.startsWith("pkg:")) return null;
+  const lastSlash = purl.lastIndexOf("/");
+  const lastAt = purl.lastIndexOf("@");
+  return lastAt > lastSlash ? purl.slice(0, lastAt) : purl;
+}
 function parsePackageRef(ref) {
   let rest2 = ref.trim();
   if (rest2.startsWith("pkg:")) {
@@ -15602,7 +15608,12 @@ var init_wire = __esm({
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),
@@ -15993,6 +16004,7 @@ __export(src_exports, {
   toCloudAttrs: () => toCloudAttrs,
   toolCanonicalId: () => toolCanonicalId,
   validateCastaliaPayload: () => validateCastaliaPayload,
+  versionlessPurl: () => versionlessPurl,
   vetSidecarSummaries: () => vetSidecarSummaries
 });
 var init_src = __esm({
@@ -21530,7 +21542,12 @@ function toWirePayload(batch, runId) {
     // attrs travel; node-level bookkeeping (embedding, momentum counters,
     // bi-temporal fields) is local-stratum and never crosses.
     attrs: n.attrs ?? {},
-    extractionSource: n.extractionSource
+    extractionSource: n.extractionSource,
+    // Org-membrane anchor tag (OM-anchor-tag): the batch builders set these
+    // on wire-bound projections only; the door re-validates the claim on the
+    // public spine, so lifting them is routing input, not a grant.
+    ...n.anchorVisibility ? { anchorVisibility: n.anchorVisibility } : {},
+    ...n.anchor ? { anchor: n.anchor } : {}
   }));
   const edges = batch.edges.filter((e) => !droppedNodeIds.has(e.from) && !droppedNodeIds.has(e.to)).map((e) => {
     const perContext = wirePerContext(e.attrs?.["perContext"]);
@@ -21851,8 +21868,14 @@ var init_client = __esm({
        *  the per-decision response into flush accounting.
        *
        *  The v1 door caps a payload at `MAX_NODES_PER_PAYLOAD` / `MAX_EDGES_PER_PAYLOAD`
-       *  (413 over). A batch above the cap is split and drained across calls under ONE
-       *  runId: every NODE chunk first (edges empty), then EDGE chunks (nodes empty).
+       *  (413 over). A batch above the cap is split and drained across calls, every
+       *  NODE chunk first (edges empty), then EDGE chunks (nodes empty). Each chunk
+       *  gets its OWN runId: the door's durable idempotency claim is keyed on
+       *  (agent, org, runId) with the payload digest, so reusing one runId across
+       *  different chunk payloads 409s "runId was already used with a different
+       *  payload" on the second chunk — exactly how the first real >25-node drain
+       *  died (2026-07-22). The runId never grouped anything server-side; it exists
+       *  for duplicate-POST protection, which is per-request by nature.
        *  Recognition resolves an edge's endpoints against nodes already ingested this
        *  drain (endpoint-label validation is deferred to the service when an endpoint
        *  isn't in-payload), so the split never orphans an edge. Sub-results concat into
@@ -21865,6 +21888,7 @@ var init_client = __esm({
         }
         const merged = { runId, nodes: [], edges: [] };
         let pendingEdges = [...batch.edges];
+        const echoedCloudId = /* @__PURE__ */ new Map();
         for (const nodeChunk of chunkArray(batch.nodes, INGEST_NODE_CHUNK)) {
           const ids = new Set(nodeChunk.map((n) => n.id));
           const inChunk = pendingEdges.filter((e) => ids.has(e.from) && ids.has(e.to)).slice(0, MAX_EDGES_PER_PAYLOAD);
@@ -21872,15 +21896,23 @@ var init_client = __esm({
             const shipped = new Set(inChunk);
             pendingEdges = pendingEdges.filter((e) => !shipped.has(e));
           }
-          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: nodeChunk, edges: inChunk }, runId));
+          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: nodeChunk, edges: inChunk }, randomUUID()));
           merged.nodes.push(...r.nodes);
           merged.edges.push(...r.edges);
+          for (const rn of r.nodes) {
+            if (rn.nodeId && rn.nodeId !== rn.canonicalId) echoedCloudId.set(rn.canonicalId, rn.nodeId);
+          }
           if (r.patternReconciliation) {
             merged.patternReconciliation = { ...merged.patternReconciliation, ...r.patternReconciliation };
           }
         }
         for (const edgeChunk of chunkArray(pendingEdges, MAX_EDGES_PER_PAYLOAD)) {
-          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: [], edges: edgeChunk }, runId));
+          const rewritten = edgeChunk.map((e) => ({
+            ...e,
+            from: echoedCloudId.get(e.from) ?? e.from,
+            to: echoedCloudId.get(e.to) ?? e.to
+          }));
+          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: [], edges: rewritten }, randomUUID()));
           merged.edges.push(...r.edges);
         }
         return { ...summarizeIngestResult(merged), result: merged };
@@ -51649,7 +51681,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.1-dev.99" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.2-dev.73" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -53238,13 +53270,21 @@ function buildContextIngest(store, profile, daemonVersion, ignorePatterns = [],
         // Package ids are already the purl (= the cross-stratum canonicalId).
         id: label === "Language" ? languageCanonicalId(String(n.attrs["name"] ?? "").trim() || n.description) : n.id,
         embedding: [],
+        // No `version` attr on the wire: the purl already encodes the resolved
+        // version, and the door's temporal guard rejects ANY `attrs.version` as
+        // bi-temporal bookkeeping (ingest-temporal-guard.ts) — shipping it 422s
+        // the whole batch. `resolved` still travels (range-vs-lockfile signal).
         attrs: label === "Package" ? {
           purl: n.attrs["purl"],
           name: n.attrs["name"],
-          version: n.attrs["version"],
           ecosystem: n.attrs["ecosystem"],
           resolved: n.attrs["resolved"]
-        } : { name: n.attrs["name"] }
+        } : { name: n.attrs["name"] },
+        // OM-anchor-tag: context stubs are self-anchored — the wire id IS the
+        // spine key (purl / languageCanonicalId). The door re-confirms on the
+        // public spine; a private-registry or workspace package never confirms
+        // and fails closed to org, exactly as an untagged one would.
+        anchorVisibility: "public"
       });
       seen.add(n.id);
     }
@@ -53356,13 +53396,20 @@ function wireContextId(n) {
 }
 function shareableContext(n, wireId) {
   const attrs = n.label === "Package" ? {
+    // No `version` attr: the purl encodes it, and the door's temporal
+    // guard 422s any `attrs.version` (mirrors buildContextIngest).
     purl: n.attrs["purl"],
     name: n.attrs["name"],
-    version: n.attrs["version"],
     ecosystem: n.attrs["ecosystem"],
     resolved: n.attrs["resolved"]
   } : n.label === "Domain" ? { name: n.description, canonicalId: n.attrs["canonicalId"] } : { name: n.attrs["name"] };
-  return { ...n, id: wireId, embedding: [], attrs };
+  return {
+    ...n,
+    id: wireId,
+    embedding: [],
+    attrs,
+    ...n.label === "Package" || n.label === "Language" ? { anchorVisibility: "public" } : {}
+  };
 }
 function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [], opts = {}) {
   const level = opts.level ?? 1;
@@ -53380,6 +53427,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   });
   const nodes = [];
   const seen = /* @__PURE__ */ new Set();
+  const shippedById = /* @__PURE__ */ new Map();
   const anchorSources = /* @__PURE__ */ new Set();
   const includedByLabel = /* @__PURE__ */ new Map();
   for (const label of INSTANCE_LABELS) {
@@ -53397,7 +53445,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       }
       if (!noveltyAgainst(n, ref, noveltyOpts).ready) continue;
       ref.push(n);
-      nodes.push(shareable(n));
+      const wireNode = shareable(n);
+      nodes.push(wireNode);
+      shippedById.set(n.id, wireNode);
       seen.add(n.id);
       anchorSources.add(n.id);
     }
@@ -53424,11 +53474,23 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       targets.push({ e, t, wireId: wireContextId(t) });
     }
     if (targets.length === 0) continue;
+    const shipped = shippedById.get(sourceId);
+    if (shipped) {
+      const pick2 = (label) => targets.filter((x) => x.t.label === label).map((x) => x.wireId).sort()[0];
+      const anchor = pick2("Package") ?? pick2("Language");
+      if (anchor) {
+        shipped.anchorVisibility = "public";
+        shipped.anchor = anchor;
+      }
+    }
     const dg = digest(targets.map(({ e, wireId }) => `${e.type}>${wireId}`).sort());
-    if (store.getNode(sourceId)?.attrs["anchorsContributedDigest"] === dg) continue;
+    const sourceNode = store.getNode(sourceId);
+    if (sourceNode?.attrs["anchorsContributedDigest"] === dg) continue;
     anchorDigests[sourceId] = dg;
+    const skippedCloudId = !seen.has(sourceId) ? sourceNode?.attrs["cloudNodeId"] : void 0;
+    const wireFrom = typeof skippedCloudId === "string" && skippedCloudId.length > 0 ? skippedCloudId : sourceId;
     for (const { e, t, wireId } of targets) {
-      anchorEdges.push({ ...e, to: wireId, attrs: {} });
+      anchorEdges.push({ ...e, from: wireFrom, to: wireId, attrs: {} });
       if (t.attrs["source"] === "cloud" || contextSeen.has(wireId)) continue;
       contextSeen.add(wireId);
       contextNodes.push(shareableContext(t, wireId));
@@ -53440,6 +53502,8 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     for (const sourceId of anchorSources) {
       const source = store.getNode(sourceId);
       if (!source) continue;
+      const skippedCloudId = !seen.has(sourceId) ? source.attrs["cloudNodeId"] : void 0;
+      const wireFrom = typeof skippedCloudId === "string" && skippedCloudId.length > 0 ? skippedCloudId : sourceId;
       for (const e of store.outEdges(sourceId, ["ANCHORED_AT"])) {
         const target = store.getNode(e.to);
         if (!target) continue;
@@ -53474,7 +53538,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
             stability: "unstable"
           });
         }
-        anchorEdges.push({ ...e, to: symId, attrs: {} });
+        anchorEdges.push({ ...e, from: wireFrom, to: symId, attrs: {} });
       }
     }
   }
@@ -53522,6 +53586,46 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   return { ...base, payloadDigest: digest(base), anchorDigests };
 }
 
+// src/backfill-edges.ts
+init_src();
+init_src2();
+var CAUSAL_LABELS = ["Problem", "Solution", "RootCause"];
+var CAUSAL_EDGES2 = ["SOLVED_BY", "CAUSED_BY", "FIXED_BY"];
+function cloudWireId(store, id) {
+  const n = store.getNode(id);
+  if (!n || !CAUSAL_LABELS.includes(n.label)) return null;
+  if (n.label === "Problem" && n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) return null;
+  const cloudNodeId = n.attrs["cloudNodeId"];
+  if (typeof cloudNodeId === "string" && cloudNodeId.length > 0) return cloudNodeId;
+  if (n.attrs["source"] === "cloud") return n.id;
+  return typeof n.attrs["contributedAtSeq"] === "number" ? n.id : null;
+}
+function buildCausalEdgeBackfill(store, profile, daemonVersion) {
+  const edges = [];
+  const seenEdge = /* @__PURE__ */ new Set();
+  for (const label of CAUSAL_LABELS) {
+    for (const n of store.findNodesByLabel(label)) {
+      for (const e of store.outEdges(n.id, [...CAUSAL_EDGES2])) {
+        if (seenEdge.has(e.id)) continue;
+        seenEdge.add(e.id);
+        const from = cloudWireId(store, e.from);
+        const to = cloudWireId(store, e.to);
+        if (!from || !to) continue;
+        edges.push({ ...e, from, to, attrs: {} });
+      }
+    }
+  }
+  if (edges.length === 0) return null;
+  const base = {
+    daemonVersion,
+    profile: { stack: profile.stack, languages: profile.languages, domains: profile.domains },
+    originProject: profile.id,
+    nodes: [],
+    edges
+  };
+  return { ...base, payloadDigest: digest(base) };
+}
+
 // src/multi.ts
 init_generalize_graph();
 init_symbol_summaries();
@@ -54533,14 +54637,27 @@ async function startMultiDaemon(opts = {}) {
       const ignore = loadClaimIgnorePatterns(globalDir());
       const client = cloudNow();
       let uploaded = 0;
+      const errors = [];
+      const lane = async (name2, projectName, run3) => {
+        try {
+          await run3();
+        } catch (err2) {
+          const msg = `[${projectName}] ${name2}: ${err2 instanceof Error ? err2.message : String(err2)}`;
+          errors.push(msg);
+          console.error(`[sync\u2192cloud] ${msg}`);
+        }
+      };
       for (const r of records) {
         const store = r.engine.store;
+        const projectName = r.engine.profile.name ?? r.engine.profile.id;
         const context = buildContextIngest(store, r.engine.profile, DAEMON_VERSION, ignore, {
           includePackages: cfg2.consent.contributePackages
         });
         if (context) {
-          const res = await client.ingest(context);
-          uploaded += res.accepted;
+          await lane("context", projectName, async () => {
+            const res = await client.ingest(context);
+            uploaded += res.accepted;
+          });
         }
         let lexicon;
         try {
@@ -54563,34 +54680,58 @@ async function startMultiDaemon(opts = {}) {
         });
         if (instances) {
           if (project) instances.projectId = project.projectId;
-          const res = await client.ingest(instances);
-          uploaded += res.accepted;
-          const seq = store.currentIngestSeq();
-          const cloudIdByLocal = new Map(
-            res.result.nodes.filter((rn) => rn.nodeId).map((rn) => [rn.canonicalId, rn.nodeId])
+          await lane("instances", projectName, async () => {
+            const res = await client.ingest(instances);
+            uploaded += res.accepted;
+            const seq = store.currentIngestSeq();
+            const cloudIdByLocal = new Map(
+              res.result.nodes.filter((rn) => rn.nodeId).map((rn) => [rn.canonicalId, rn.nodeId])
+            );
+            for (const n of instances.nodes) {
+              const local = store.getNode(n.id);
+              if (!local || !["Problem", "Solution", "RootCause"].includes(local.label)) continue;
+              const cloudNodeId = cloudIdByLocal.get(n.id);
+              store.updateNode(n.id, {
+                attrs: {
+                  ...local.attrs,
+                  contributedAtSeq: seq,
+                  ...cloudNodeId && cloudNodeId !== n.id ? { cloudNodeId } : {}
+                }
+              });
+            }
+            for (const [localId, dg] of Object.entries(instances.anchorDigests)) {
+              const local = store.getNode(localId);
+              if (!local) continue;
+              store.updateNode(localId, {
+                attrs: { ...local.attrs, anchorsContributedDigest: dg }
+              });
+            }
+          });
+        }
+      }
+      return { uploaded, ...errors.length > 0 ? { errors } : {} };
+    },
+    async backfillCausalEdges() {
+      if (!loadConfig().consent.sync) return { accepted: 0, rejected: 0, skipped: "consent-off" };
+      const client = cloudNow();
+      let accepted = 0;
+      let rejected = 0;
+      const errors = [];
+      for (const r of records) {
+        const payload = buildCausalEdgeBackfill(r.engine.store, r.engine.profile, DAEMON_VERSION);
+        if (!payload) continue;
+        try {
+          const res = await client.ingest(payload);
+          accepted += res.accepted;
+          rejected += res.rejected;
+          if (res.rejected > 0) errors.push(...res.violations.slice(0, 5));
+        } catch (err2) {
+          errors.push(
+            `[${r.engine.profile.name ?? r.engine.profile.id}] backfill: ${err2 instanceof Error ? err2.message : String(err2)}`
           );
-          for (const n of instances.nodes) {
-            const local = store.getNode(n.id);
-            if (!local || !["Problem", "Solution", "RootCause"].includes(local.label)) continue;
-            const cloudNodeId = cloudIdByLocal.get(n.id);
-            store.updateNode(n.id, {
-              attrs: {
-                ...local.attrs,
-                contributedAtSeq: seq,
-                ...cloudNodeId && cloudNodeId !== n.id ? { cloudNodeId } : {}
-              }
-            });
-          }
-          for (const [localId, dg] of Object.entries(instances.anchorDigests)) {
-            const local = store.getNode(localId);
-            if (!local) continue;
-            store.updateNode(localId, {
-              attrs: { ...local.attrs, anchorsContributedDigest: dg }
-            });
-          }
         }
       }
-      return { uploaded };
+      return { accepted, rejected, ...errors.length > 0 ? { errors } : {} };
     },
     async pullTriagePublic() {
       if (!loadConfig().consent.sync) return { merged: 0, skipped: "consent-off" };
@@ -54640,7 +54781,12 @@ async function startMultiDaemon(opts = {}) {
         }
         const inst = await daemon.syncInstancesPublic();
         const skills = await daemon.syncSkillsAll();
-        return { uploaded: inst.uploaded, written: skills.written, pruned: skills.pruned };
+        return {
+          uploaded: inst.uploaded,
+          written: skills.written,
+          pruned: skills.pruned,
+          ...inst.errors ? { errors: inst.errors } : {}
+        };
       } finally {
         boundaryFlushing = false;
       }
@@ -54671,7 +54817,8 @@ async function startMultiDaemon(opts = {}) {
       const principles = await daemon.syncPrinciplesPublic();
       const triage = await daemon.syncTriagePublic();
       const instances = await daemon.syncInstancesPublic();
-      return c.json({ principles, triage, instances });
+      const edgeBackfill = await daemon.backfillCausalEdges();
+      return c.json({ principles, triage, instances, edgeBackfill });
     } catch (err2) {
       return c.json({ error: err2 instanceof Error ? err2.message : String(err2) }, 500);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.1-dev.99",
+  "version": "2.0.2-dev.73",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15162,7 +15162,12 @@ var init_wire = __esm({
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),