@inerrata-corporation/errata 2.0.17-dev.3501 → 2.0.17-dev.3527

package/consolidate-worker.mjs

@@ -828,6 +828,11 @@ function genericCanonicalId(prefix, content) {
 function languageCanonicalId(name) {
   return genericCanonicalId("Language", { name: name.trim().toLowerCase() });
 }
+function packageCanonicalId(p) {
+  const eco = p.ecosystem.toLowerCase();
+  const name = eco === "npm" ? p.name.toLowerCase() : p.name;
+  return `pkg:${eco}/${name}${p.version ? `@${p.version}` : ""}`;
+}
 var DESIGN_PROBLEM_PREFIX, DESIGN_PROBLEM_ID_LENGTH, DIAGNOSTIC_PROBLEM_PREFIX, DIAGNOSTIC_HASH_LENGTH, TRIAGE_PREFIX, TRIAGE_ID_LENGTH;
 var init_identity = __esm({
   "../../packages/shared/src/identity.ts"() {
@@ -1949,10 +1954,10 @@ var init_regexes = __esm({
     duration = /^P(?:(\d+W)|(?!.*W)(?=\d|T\d)(\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+([.,]\d+)?S)?)?)$/;
     extendedDuration = /^[-+]?P(?!$)(?:(?:[-+]?\d+Y)|(?:[-+]?\d+[.,]\d+Y$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:(?:[-+]?\d+W)|(?:[-+]?\d+[.,]\d+W$))?(?:(?:[-+]?\d+D)|(?:[-+]?\d+[.,]\d+D$))?(?:T(?=[\d+-])(?:(?:[-+]?\d+H)|(?:[-+]?\d+[.,]\d+H$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:[-+]?\d+(?:[.,]\d+)?S)?)??$/;
     guid = /^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$/;
-    uuid = (version2) => {
-      if (!version2)
+    uuid = (version3) => {
+      if (!version3)
         return /^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/;
-      return new RegExp(`^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-${version2}[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$`);
+      return new RegExp(`^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-${version3}[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$`);
     };
     uuid4 = /* @__PURE__ */ uuid(4);
     uuid6 = /* @__PURE__ */ uuid(6);
@@ -14761,10 +14766,10 @@ function fromJSONSchema(schema, params) {
   if (typeof schema === "boolean") {
     return schema ? z.any() : z.never();
   }
-  const version2 = detectVersion(schema, params?.defaultTarget);
+  const version3 = detectVersion(schema, params?.defaultTarget);
   const defs = schema.$defs || schema.definitions || {};
   const ctx = {
-    version: version2,
+    version: version3,
     defs,
     refs: /* @__PURE__ */ new Map(),
     processing: /* @__PURE__ */ new Set(),
@@ -15236,6 +15241,40 @@ var init_history_evidence = __esm({
   }
 });
 
+// ../../packages/shared/src/history-dependencies.ts
+var version2, HistoryDependencySchema, HistoryDependencyContextSchema;
+var init_history_dependencies = __esm({
+  "../../packages/shared/src/history-dependencies.ts"() {
+    "use strict";
+    init_zod();
+    init_hash();
+    init_identity();
+    version2 = external_exports.string().max(160).nullable();
+    HistoryDependencySchema = external_exports.object({
+      packageId: external_exports.string().startsWith("pkg:").max(300),
+      ecosystem: external_exports.string().min(1).max(20),
+      name: external_exports.string().min(1).max(200),
+      kind: external_exports.enum(["package", "sdk", "engine", "runtime", "image"]),
+      manifestId: external_exports.string().regex(/^hmanifest_[a-f0-9]{32}$/),
+      sourceCommit: external_exports.string().regex(/^[a-f0-9]{7,64}$/),
+      side: external_exports.enum(["before", "after"]),
+      /** Environment-only entries constrain applicability but never mint a package edge. */
+      binding: external_exports.enum(["named", "import", "environment"]).optional(),
+      declaredRange: version2,
+      resolvedVersion: version2,
+      pathTokens: external_exports.array(external_exports.string().regex(/^p\d+$/)).max(500),
+      importTokens: external_exports.array(external_exports.string().regex(/^p\d+$/)).max(500)
+    }).refine((d) => d.packageId === packageCanonicalId({ ecosystem: d.ecosystem, name: d.name }), "package identity must match its evidence");
+    HistoryDependencyContextSchema = external_exports.object({
+      schemaVersion: external_exports.literal("history-deps-1"),
+      complete: external_exports.boolean(),
+      dependencies: external_exports.array(HistoryDependencySchema).max(256),
+      statedVersions: external_exports.array(external_exports.object({ packageId: external_exports.string().max(300), version: external_exports.string().max(80) })).max(64).optional(),
+      conflict: external_exports.boolean().optional()
+    });
+  }
+});
+
 // ../../packages/shared/src/edge-rules.ts
 function isValidEdge(from, type, to) {
   const rule = EDGE_RULES[type];
@@ -15442,6 +15481,7 @@ var init_wire = __esm({
     "use strict";
     init_zod();
     init_history_evidence();
+    init_history_dependencies();
     init_castalia();
     init_edge_rules();
     init_symbol_intent();
@@ -15566,6 +15606,7 @@ var init_wire = __esm({
         extractedBy: external_exports.enum(INGEST_EXTRACTION_SOURCES).optional(),
         sourceSupport: external_exports.literal("supported").optional(),
         historicalAnchors: external_exports.array(HistoryAnchorSourceSchema).max(160).optional(),
+        dependencyEvidence: external_exports.array(HistoryDependencySchema).max(256).optional(),
         evidence: external_exports.array(HistoryEvidenceRefSchema).max(12).optional(),
         verificationEvidence: external_exports.array(HistoryEvidenceRefSchema).max(12).optional(),
         verifierBuild: external_exports.string().max(80).optional(),
@@ -15688,6 +15729,7 @@ var init_history_quality = __esm({
 var init_history_read = __esm({
   "../../packages/shared/src/history-read.ts"() {
     "use strict";
+    init_history_dependencies();
   }
 });
 
@@ -15706,6 +15748,7 @@ var init_history_revision = __esm({
     init_zod();
     init_hash();
     init_history_evidence();
+    init_history_dependencies();
     Sha = external_exports.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/);
     HistoryRevisionRequestSchema = external_exports.strictObject({
       atCommit: Sha,
@@ -15714,7 +15757,8 @@ var init_history_revision = __esm({
         occurrenceId: external_exports.string().min(1).max(100),
         symbols: external_exports.array(external_exports.strictObject({ symbolId: external_exports.string().regex(/^sym_[a-f0-9]{8,64}$/), bodyHash: external_exports.string().regex(/^[a-f0-9]{8,64}$/) })).max(32),
         /** Scrubbed, tokenized net change from this occurrence's source to atCommit. */
-        diff: external_exports.string().max(16e3).optional()
+        diff: external_exports.string().max(16e3).optional(),
+        dependencyContext: HistoryDependencyContextSchema.optional()
       })).max(50)
     });
   }
@@ -15771,6 +15815,7 @@ var init_src = __esm({
     init_history_temporal();
     init_history_revision();
     init_history_evidence();
+    init_history_dependencies();
     init_hash();
     init_error_signature();
     init_canonicalize();
@@ -17422,8 +17467,8 @@ var SqliteGraphStore = class {
   freezeNode(liveId, t) {
     const live = this.getNode(liveId);
     if (!live) return null;
-    const version2 = live.version ?? 1;
-    const frozenId = `${liveId}@v${version2}`;
+    const version3 = live.version ?? 1;
+    const frozenId = `${liveId}@v${version3}`;
     if (this.getNode(frozenId)) {
       this.stmts.advanceLive.run({ live_id: liveId, t });
       return frozenId;