@inerrata-corporation/errata 2.0.17-dev.3465 → 2.0.17-dev.3477

package/consolidate-worker.mjs

@@ -18584,13 +18584,18 @@ var INSTANCE_ANCHOR_EDGE_TYPES = ["OCCURS_IN", "DEPENDS_ON", "PERTAIN_TO", "CONC
 function instanceCloudWithdrawal(n, destination, getMeta) {
   const id = n.attrs["source"] === "cloud" ? n.attrs["cloudNodeId"] ?? n.id : instanceReceipt(n, destination)["cloudNodeId"];
   if (typeof id !== "string") return false;
+  const receipt = instanceReceipt(n, destination);
+  const held = receipt["cloudWithdrawn"] === true;
   const raw = getMeta(`history-correction:${id}`);
-  if (!raw) return false;
+  if (!raw) return held;
   try {
     const correction = JSON.parse(raw);
-    return correction.nodeId === id && correction.action === "quarantine" && correction.sourceSupport !== "supported";
-  } catch {
+    if (correction.nodeId !== id) return held;
+    if (correction.action === "quarantine" && correction.sourceSupport !== "supported") return true;
+    if (held && (correction.seq ?? 0) <= Number(receipt["withdrawnAtCorrectionSeq"] ?? 0)) return true;
     return false;
+  } catch {
+    return held;
   }
 }
 function receiptMap(attrs) {
@@ -19727,6 +19732,13 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   const anchorEdges = [];
   const contextNodes = [];
   const contextSeen = /* @__PURE__ */ new Set();
+  const contextNodeSources = {};
+  const endpointSources = {};
+  const trackEndpoint = (wireId, localId) => {
+    const sources = endpointSources[wireId] ??= [];
+    if (!sources.includes(localId)) sources.push(localId);
+  };
+  for (const [localId, wireId] of semanticEndpoints) trackEndpoint(wireId, localId);
   const anchorDigests = {};
   for (const sourceId of anchorSources) {
     const targets = [];
@@ -19743,13 +19755,16 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       if (e.type === "CONCERNS" && t.label !== "Component") continue;
       if ((t.label === "Package" || t.label === "Component") && opts.includePackages !== true) continue;
       if (ignored(t.description) || ignored(String(t.attrs["name"] ?? ""))) continue;
-      targets.push({ e, t, wireId: wireContextId(t) });
+      const receipt = instanceReceipt(t, opts.destinationKey);
+      const wireId = typeof receipt["contributedAtSeq"] === "number" && typeof receipt["cloudNodeId"] === "string" ? receipt["cloudNodeId"] : wireContextId(t);
+      targets.push({ e, t, wireId });
+      trackEndpoint(wireId, t.id);
     }
     if (targets.length === 0) continue;
     const shipped = shippedById.get(sourceId);
     if (shipped && !shipped.attrs["privateFinding"]) {
       const anchors = (label) => targets.filter((x) => x.t.label === label).map(
-        (x) => label === "Language" ? langAnchor(x.t) : label === "Component" ? `component:${x.wireId}` : x.wireId
+        (x) => label === "Language" ? langAnchor(x.t) : label === "Component" ? `component:${wireContextId(x.t)}` : wireContextId(x.t)
       ).filter((a) => a != null).sort();
       const anchor = anchors("Package")[0] ?? anchors("Component")[0] ?? anchors("Language")[0];
       if (anchor) {
@@ -19769,8 +19784,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         continue;
       }
       anchorEdges.push({ ...e, from: wireFrom, to: wireId, attrs: {} });
-      if (t.attrs["source"] === "cloud" || contextSeen.has(wireId)) continue;
+      if (t.attrs["source"] === "cloud" || contextSeen.has(wireId) || typeof instanceReceipt(t, opts.destinationKey)["contributedAtSeq"] === "number") continue;
       contextSeen.add(wireId);
+      contextNodeSources[wireId] = t.id;
       contextNodes.push(shareableContext(t, wireId));
     }
   }
@@ -19974,7 +19990,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     ...symbolSummaries ? { symbolSummaries } : {}
   };
   opts.onComposition?.(composition);
-  return { ...base, payloadDigest: digest(base), anchorDigests, semanticEdgeDigests, projectAnchorDigests, composition };
+  return { ...base, payloadDigest: digest(base), contextNodeSources, endpointSources, anchorDigests, semanticEdgeDigests, projectAnchorDigests, composition };
 }
 
 // src/drain-build.ts

package/errata.mjs

@@ -17056,7 +17056,7 @@ function depsForUnit(spine, touched, readParentText) {
   for (const purl of declared.keys()) context.delete(purl);
   return { declared: [...declared.values()], context: [...context.values()] };
 }
-var ECOSYSTEM_SYSTEM, ECOSYSTEM_LANGUAGE, TOOL_KINDS, MANIFEST_PATH_RE, LOCAL_IMAGE_RE, PACKAGE_JSON_SECTIONS, GRADLE_CONFIGS, POM_FOREIGN_BLOCKS;
+var ECOSYSTEM_SYSTEM, ECOSYSTEM_LANGUAGE, TOOL_KINDS, MANIFEST_PATH_RE, LOCAL_IMAGE_RE, PACKAGE_JSON_SECTIONS, GRADLE_CONFIGS, POM_FOREIGN_BLOCKS, HISTORY_MAX_SPINE_DEPS;
 var init_manifests = __esm({
   "../../packages/shared/src/manifests.ts"() {
     "use strict";
@@ -17089,6 +17089,7 @@ var init_manifests = __esm({
     PACKAGE_JSON_SECTIONS = ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"];
     GRADLE_CONFIGS = "implementation|api|compileOnly|compileOnlyApi|runtimeOnly|testImplementation|testCompileOnly|testRuntimeOnly|annotationProcessor|kapt|ksp|classpath|developmentOnly";
     POM_FOREIGN_BLOCKS = /<(parent|dependencies|dependencyManagement|build|profiles|reporting|distributionManagement|modules)>[\s\S]*?<\/\1>/g;
+    HISTORY_MAX_SPINE_DEPS = 64;
   }
 });
 
@@ -17346,6 +17347,7 @@ __export(src_exports, {
   GIT_EDGES: () => GIT_EDGES,
   GRAPH_EVENT_VOCABULARIES: () => GRAPH_EVENT_VOCABULARIES,
   HISTORY_EVIDENCE_SCHEMA_VERSION: () => HISTORY_EVIDENCE_SCHEMA_VERSION,
+  HISTORY_MAX_SPINE_DEPS: () => HISTORY_MAX_SPINE_DEPS,
   HISTORY_SCRUBBER_VERSION: () => HISTORY_SCRUBBER_VERSION,
   HistoryAnchorSourceSchema: () => HistoryAnchorSourceSchema,
   HistoryCandidateBatchSchema: () => HistoryCandidateBatchSchema,
@@ -82232,7 +82234,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.17-dev.3465" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.17-dev.3477" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -85148,16 +85150,21 @@ function instanceEdgeReceipts(sent, received, cloudIds) {
 function instanceCloudWithdrawal(n, destination, getMeta) {
   const id = n.attrs["source"] === "cloud" ? n.attrs["cloudNodeId"] ?? n.id : instanceReceipt(n, destination)["cloudNodeId"];
   if (typeof id !== "string") return false;
+  const receipt = instanceReceipt(n, destination);
+  const held = receipt["cloudWithdrawn"] === true;
   const raw2 = getMeta(`history-correction:${id}`);
-  if (!raw2) return false;
+  if (!raw2) return held;
   try {
     const correction = JSON.parse(raw2);
-    return correction.nodeId === id && correction.action === "quarantine" && correction.sourceSupport !== "supported";
-  } catch {
+    if (correction.nodeId !== id) return held;
+    if (correction.action === "quarantine" && correction.sourceSupport !== "supported") return true;
+    if (held && (correction.seq ?? 0) <= Number(receipt["withdrawnAtCorrectionSeq"] ?? 0)) return true;
     return false;
+  } catch {
+    return held;
   }
 }
-var FIELDS = ["contributedAtSeq", "cloudNodeId", "anchorsContributedDigest", "projectAnchorsContributedDigest", "semanticEdgesContributedDigest", "shipRefusedSinceSeq", "shipRefusedCount", "shipRefusedReason", "shipRefusedFingerprint"];
+var FIELDS = ["cloudWithdrawn", "withdrawnAtCorrectionSeq", "contributedAtSeq", "cloudNodeId", "anchorsContributedDigest", "projectAnchorsContributedDigest", "semanticEdgesContributedDigest", "shipRefusedSinceSeq", "shipRefusedCount", "shipRefusedReason", "shipRefusedFingerprint"];
 function instanceDestinationKey(input) {
   return createHash18("sha256").update(JSON.stringify([
     input.workspace,
@@ -85189,16 +85196,59 @@ function instanceReceiptSequence(n) {
   return Math.max(n.lastReinforcedAtSeq ?? 0, n.createdAtSeq ?? 0);
 }
 function acceptedInstanceReceipt(current, sent, decision, destination, mirrorLegacy) {
-  if (!["Problem", "Vulnerability", "Solution", "RootCause"].includes(current.label) || !["created", "reinforced"].includes(decision.decision) || !decision.nodeId) return null;
+  if (!["Problem", "Vulnerability", "Solution", "RootCause", "Language", "Package", "Domain", "Component"].includes(current.label) || !["created", "reinforced"].includes(decision.decision) || !decision.nodeId) return null;
   return updateInstanceReceipt(current, destination, {
     contributedAtSeq: instanceReceiptSequence(sent),
     cloudNodeId: decision.nodeId,
+    cloudWithdrawn: void 0,
+    withdrawnAtCorrectionSeq: void 0,
     shipRefusedSinceSeq: void 0,
     shipRefusedCount: void 0,
     shipRefusedReason: void 0,
     shipRefusedFingerprint: void 0
   }, mirrorLegacy);
 }
+function withdrawnInstanceReceipt(current, destination, decision, getMeta, mirrorLegacy) {
+  if (decision.decision !== "rejected" || !decision.nodeId || !decision.reason?.startsWith("cloud node withdrawn")) return null;
+  let seq = 0;
+  try {
+    seq = Number(JSON.parse(getMeta(`history-correction:${decision.nodeId}`) ?? "{}").seq ?? 0);
+  } catch {
+  }
+  return updateInstanceReceipt(current, destination, {
+    cloudNodeId: decision.nodeId,
+    cloudWithdrawn: true,
+    withdrawnAtCorrectionSeq: seq,
+    contributedAtSeq: void 0,
+    anchorsContributedDigest: void 0,
+    projectAnchorsContributedDigest: void 0,
+    semanticEdgesContributedDigest: void 0
+  }, mirrorLegacy);
+}
+function invalidInstanceEndpointIds(edges) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const edge2 of edges) {
+    if (edge2.decision !== "rejected") continue;
+    if (edge2.reason === "edge endpoints are outside the authorized write scope") {
+      ids.add(edge2.from);
+      ids.add(edge2.to);
+    } else {
+      const missing = /^unresolved endpoint '([^']+)'/.exec(edge2.reason ?? "");
+      if (missing) ids.add(missing[1]);
+    }
+  }
+  return ids;
+}
+function invalidateInstanceReceipt(current, destination, failedId, mirrorLegacy) {
+  if (instanceReceipt(current, destination)["cloudNodeId"] !== failedId) return null;
+  return updateInstanceReceipt(current, destination, {
+    cloudNodeId: void 0,
+    contributedAtSeq: void 0,
+    anchorsContributedDigest: void 0,
+    projectAnchorsContributedDigest: void 0,
+    semanticEdgesContributedDigest: void 0
+  }, mirrorLegacy);
+}
 
 // src/multi.ts
 init_dist();
@@ -85851,6 +85901,13 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   const anchorEdges = [];
   const contextNodes = [];
   const contextSeen = /* @__PURE__ */ new Set();
+  const contextNodeSources = {};
+  const endpointSources = {};
+  const trackEndpoint = (wireId, localId) => {
+    const sources = endpointSources[wireId] ??= [];
+    if (!sources.includes(localId)) sources.push(localId);
+  };
+  for (const [localId, wireId] of semanticEndpoints) trackEndpoint(wireId, localId);
   const anchorDigests = {};
   for (const sourceId of anchorSources) {
     const targets = [];
@@ -85867,13 +85924,16 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       if (e.type === "CONCERNS" && t.label !== "Component") continue;
       if ((t.label === "Package" || t.label === "Component") && opts.includePackages !== true) continue;
       if (ignored(t.description) || ignored(String(t.attrs["name"] ?? ""))) continue;
-      targets.push({ e, t, wireId: wireContextId(t) });
+      const receipt = instanceReceipt(t, opts.destinationKey);
+      const wireId = typeof receipt["contributedAtSeq"] === "number" && typeof receipt["cloudNodeId"] === "string" ? receipt["cloudNodeId"] : wireContextId(t);
+      targets.push({ e, t, wireId });
+      trackEndpoint(wireId, t.id);
     }
     if (targets.length === 0) continue;
     const shipped = shippedById.get(sourceId);
     if (shipped && !shipped.attrs["privateFinding"]) {
       const anchors = (label) => targets.filter((x) => x.t.label === label).map(
-        (x) => label === "Language" ? langAnchor(x.t) : label === "Component" ? `component:${x.wireId}` : x.wireId
+        (x) => label === "Language" ? langAnchor(x.t) : label === "Component" ? `component:${wireContextId(x.t)}` : wireContextId(x.t)
       ).filter((a) => a != null).sort();
       const anchor = anchors("Package")[0] ?? anchors("Component")[0] ?? anchors("Language")[0];
       if (anchor) {
@@ -85893,8 +85953,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         continue;
       }
       anchorEdges.push({ ...e, from: wireFrom, to: wireId, attrs: {} });
-      if (t.attrs["source"] === "cloud" || contextSeen.has(wireId)) continue;
+      if (t.attrs["source"] === "cloud" || contextSeen.has(wireId) || typeof instanceReceipt(t, opts.destinationKey)["contributedAtSeq"] === "number") continue;
       contextSeen.add(wireId);
+      contextNodeSources[wireId] = t.id;
       contextNodes.push(shareableContext(t, wireId));
     }
   }
@@ -86098,7 +86159,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     ...symbolSummaries ? { symbolSummaries } : {}
   };
   opts.onComposition?.(composition);
-  return { ...base, payloadDigest: digest(base), anchorDigests, semanticEdgeDigests, projectAnchorDigests, composition };
+  return { ...base, payloadDigest: digest(base), contextNodeSources, endpointSources, anchorDigests, semanticEdgeDigests, projectAnchorDigests, composition };
 }
 
 // src/backfill-edges.ts
@@ -87687,7 +87748,14 @@ function manifestBlobs(listing) {
   }
   return out2;
 }
-async function spineForUnit(git3, root, unit, readBlob) {
+function boundedHistorySpine(rings, log) {
+  const omittedDeclared = Math.max(0, rings.declared.length - HISTORY_MAX_SPINE_DEPS);
+  const omittedContext = Math.max(0, rings.context.length - HISTORY_MAX_SPINE_DEPS);
+  if (omittedDeclared || omittedContext) log(`dependency context bounded: omitted ${omittedDeclared} declared and ${omittedContext} context entries (limit ${HISTORY_MAX_SPINE_DEPS} per ring; source diff retained)`);
+  const wire = (d) => ({ ecosystem: d.ecosystem, name: d.name, version: d.version, kind: d.kind, manifest: d.manifest });
+  return { declared: rings.declared.slice(0, HISTORY_MAX_SPINE_DEPS).map(wire), context: rings.context.slice(0, HISTORY_MAX_SPINE_DEPS).map(wire) };
+}
+async function spineForUnit(git3, root, unit, readBlob, log) {
   const blobs = manifestBlobs(await git3(root, ["ls-tree", "-r", unit.sha]));
   if (blobs.size === 0) return void 0;
   const texts = /* @__PURE__ */ new Map();
@@ -87701,8 +87769,7 @@ async function spineForUnit(git3, root, unit, readBlob) {
     parentTexts.set(f.path, await readBlob(`${unit.sha}^:${f.path}`).catch(() => null));
   }
   const rings = depsForUnit(spine, unit.files.map((f) => f.path), readParent);
-  const wire = (d) => ({ ecosystem: d.ecosystem, name: d.name, version: d.version, kind: d.kind, manifest: d.manifest });
-  return { declared: rings.declared.map(wire), context: rings.context.map(wire) };
+  return boundedHistorySpine(rings, log);
 }
 function stage(profile, patch, now) {
   const at = now().toISOString();
@@ -87878,7 +87945,7 @@ async function walk10(root, input, client, opts, readBlob) {
         ...prev ? { after: { sha: prev.sha, subIndex: prev.subIndex } } : {},
         ...!dryRun && u.index <= anchor.index ? { backfill: { anchorIndex: anchor.index, ...anchor.seq !== void 0 ? { anchorSeq: anchor.seq } : {} } } : {}
       };
-      const spine = await spineForUnit(git3, root, u, readBlob);
+      const spine = await spineForUnit(git3, root, u, readBlob, (line) => log(`[errata] history ${u.sha.slice(0, 12)}/${u.subIndex}: ${line}`));
       if (spine) body2.spine = spine;
       const anchors = opts.anchors ? await historicalAnchors({
         root,
@@ -90471,10 +90538,11 @@ async function startMultiDaemon(opts = {}) {
                 for (const id of p.blockedNodeIds ?? []) blocked.add(id);
                 for (const decision of p.result.nodes) {
                   const sent = sentById.get(decision.canonicalId);
-                  const owner = owningStore(decision.canonicalId);
+                  const localId = instances.contextNodeSources[decision.canonicalId] ?? decision.canonicalId;
+                  const owner = owningStore(localId);
                   if (!sent || !owner || blocked.has(sent.id)) continue;
-                  const attrs = acceptedInstanceReceipt(owner.n, sent, decision, destinationKey, owner.s === store);
-                  if (attrs) owner.s.updateNode(sent.id, { attrs });
+                  const attrs = acceptedInstanceReceipt(owner.n, sent, decision, destinationKey, owner.s === store) ?? withdrawnInstanceReceipt(owner.n, destinationKey, decision, (key) => store.getMeta?.(key) ?? sharedStore.getMeta?.(key), owner.s === store);
+                  if (attrs) owner.s.updateNode(localId, { attrs });
                 }
                 noteFlushProgress(p.accepted, p.nodeIds.length, `instances ${p.chunkIndex}/${p.totalChunks}`);
               }
@@ -90574,9 +90642,26 @@ async function startMultiDaemon(opts = {}) {
                 attrs: updateInstanceReceipt(owner.n, destinationKey, { semanticEdgesContributedDigest: dg }, owner.s === store)
               });
             });
+            let invalidatedReceipts = 0;
+            for (const failedId of invalidInstanceEndpointIds(res.result.edges)) {
+              const localIds = new Set(instances.endpointSources[failedId] ?? []);
+              for (const [wireId, cloudId] of cloudIds) if (cloudId === failedId) {
+                for (const id of instances.endpointSources[wireId] ?? [instances.contextNodeSources[wireId] ?? wireId]) localIds.add(id);
+              }
+              for (const localId of localIds) {
+                const owner = owningStore(localId);
+                if (!owner || instanceCloudWithdrawal(owner.n, destinationKey, (key) => store.getMeta?.(key) ?? sharedStore.getMeta?.(key))) continue;
+                const attrs = invalidateInstanceReceipt(owner.n, destinationKey, failedId, owner.s === store);
+                if (attrs) {
+                  owner.s.updateNode(localId, { attrs });
+                  invalidatedReceipts++;
+                }
+              }
+            }
             appendPassLedger(r.engine.paths.configDir, "ship", Date.now() - shipStartedAt, {
               ...compositionCounters(instances.composition),
               accepted: res.accepted,
+              invalidatedReceipts,
               rejected: rejected.size,
               blocked: blocked.size,
               // The half of the refusal count that is NOT news. `blocked` flat

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.17-dev.3465",
+  "version": "2.0.17-dev.3477",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {