@inerrata-corporation/errata 2.0.2-dev.70 → 2.0.2-dev.73

package/consolidate-worker.mjs

@@ -15307,7 +15307,12 @@ var init_wire = __esm({
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),

package/errata.mjs

@@ -938,6 +938,12 @@ function packageCanonicalId(p) {
   const name2 = eco === "npm" ? p.name.toLowerCase() : p.name;
   return `pkg:${eco}/${name2}${p.version ? `@${p.version}` : ""}`;
 }
+function versionlessPurl(purl) {
+  if (!purl.startsWith("pkg:")) return null;
+  const lastSlash = purl.lastIndexOf("/");
+  const lastAt = purl.lastIndexOf("@");
+  return lastAt > lastSlash ? purl.slice(0, lastAt) : purl;
+}
 function parsePackageRef(ref) {
   let rest2 = ref.trim();
   if (rest2.startsWith("pkg:")) {
@@ -15602,7 +15608,12 @@ var init_wire = __esm({
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),
@@ -15993,6 +16004,7 @@ __export(src_exports, {
   toCloudAttrs: () => toCloudAttrs,
   toolCanonicalId: () => toolCanonicalId,
   validateCastaliaPayload: () => validateCastaliaPayload,
+  versionlessPurl: () => versionlessPurl,
   vetSidecarSummaries: () => vetSidecarSummaries
 });
 var init_src = __esm({
@@ -21530,7 +21542,12 @@ function toWirePayload(batch, runId) {
     // attrs travel; node-level bookkeeping (embedding, momentum counters,
     // bi-temporal fields) is local-stratum and never crosses.
     attrs: n.attrs ?? {},
-    extractionSource: n.extractionSource
+    extractionSource: n.extractionSource,
+    // Org-membrane anchor tag (OM-anchor-tag): the batch builders set these
+    // on wire-bound projections only; the door re-validates the claim on the
+    // public spine, so lifting them is routing input, not a grant.
+    ...n.anchorVisibility ? { anchorVisibility: n.anchorVisibility } : {},
+    ...n.anchor ? { anchor: n.anchor } : {}
   }));
   const edges = batch.edges.filter((e) => !droppedNodeIds.has(e.from) && !droppedNodeIds.has(e.to)).map((e) => {
     const perContext = wirePerContext(e.attrs?.["perContext"]);
@@ -51664,7 +51681,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.2-dev.70" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.2-dev.73" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -53262,7 +53279,12 @@ function buildContextIngest(store, profile, daemonVersion, ignorePatterns = [],
           name: n.attrs["name"],
           ecosystem: n.attrs["ecosystem"],
           resolved: n.attrs["resolved"]
-        } : { name: n.attrs["name"] }
+        } : { name: n.attrs["name"] },
+        // OM-anchor-tag: context stubs are self-anchored — the wire id IS the
+        // spine key (purl / languageCanonicalId). The door re-confirms on the
+        // public spine; a private-registry or workspace package never confirms
+        // and fails closed to org, exactly as an untagged one would.
+        anchorVisibility: "public"
       });
       seen.add(n.id);
     }
@@ -53381,7 +53403,13 @@ function shareableContext(n, wireId) {
     ecosystem: n.attrs["ecosystem"],
     resolved: n.attrs["resolved"]
   } : n.label === "Domain" ? { name: n.description, canonicalId: n.attrs["canonicalId"] } : { name: n.attrs["name"] };
-  return { ...n, id: wireId, embedding: [], attrs };
+  return {
+    ...n,
+    id: wireId,
+    embedding: [],
+    attrs,
+    ...n.label === "Package" || n.label === "Language" ? { anchorVisibility: "public" } : {}
+  };
 }
 function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [], opts = {}) {
   const level = opts.level ?? 1;
@@ -53399,6 +53427,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   });
   const nodes = [];
   const seen = /* @__PURE__ */ new Set();
+  const shippedById = /* @__PURE__ */ new Map();
   const anchorSources = /* @__PURE__ */ new Set();
   const includedByLabel = /* @__PURE__ */ new Map();
   for (const label of INSTANCE_LABELS) {
@@ -53416,7 +53445,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       }
       if (!noveltyAgainst(n, ref, noveltyOpts).ready) continue;
       ref.push(n);
-      nodes.push(shareable(n));
+      const wireNode = shareable(n);
+      nodes.push(wireNode);
+      shippedById.set(n.id, wireNode);
       seen.add(n.id);
       anchorSources.add(n.id);
     }
@@ -53443,6 +53474,15 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       targets.push({ e, t, wireId: wireContextId(t) });
     }
     if (targets.length === 0) continue;
+    const shipped = shippedById.get(sourceId);
+    if (shipped) {
+      const pick2 = (label) => targets.filter((x) => x.t.label === label).map((x) => x.wireId).sort()[0];
+      const anchor = pick2("Package") ?? pick2("Language");
+      if (anchor) {
+        shipped.anchorVisibility = "public";
+        shipped.anchor = anchor;
+      }
+    }
     const dg = digest(targets.map(({ e, wireId }) => `${e.type}>${wireId}`).sort());
     const sourceNode = store.getNode(sourceId);
     if (sourceNode?.attrs["anchorsContributedDigest"] === dg) continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.2-dev.70",
+  "version": "2.0.2-dev.73",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15162,7 +15162,12 @@ var init_wire = __esm({
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),