@inerrata-corporation/errata 2.0.6-dev.1983 → 2.0.6-dev.1986

package/consolidate-worker.mjs

@@ -15375,7 +15375,17 @@ var init_wire = __esm({
         extractedBy: external_exports.enum(INGEST_EXTRACTION_SOURCES).optional(),
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
-        perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional()
+        perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
+         *  witnessed against. Both opaque — the observing checkout's HEAD sha and
+         *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible
+         *  to code or names (a sha identifies a commit only to someone holding the
+         *  repo), so they add nothing to the §6c disclosure surface. A consumer
+         *  (reanchor) compares the hash with its local symbol's `bodyHash` to
+         *  classify the anchor current / pre-change; absent ⇒ the pre-versioning
+         *  contract, unverified. Only meaningful on `ANCHORED_AT`. */
+        observedAtCommit: external_exports.string().regex(/^[0-9a-f]{7,40}$/).optional(),
+        symbolContentHash: external_exports.string().regex(/^[0-9a-f]{8,64}$/).optional()
       }).optional()
     });
     SymbolSummarySidecarSchema = external_exports.record(

package/errata.mjs

@@ -15818,7 +15818,17 @@ var init_wire = __esm({
         extractedBy: external_exports.enum(INGEST_EXTRACTION_SOURCES).optional(),
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
-        perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional()
+        perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
+         *  witnessed against. Both opaque — the observing checkout's HEAD sha and
+         *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible
+         *  to code or names (a sha identifies a commit only to someone holding the
+         *  repo), so they add nothing to the §6c disclosure surface. A consumer
+         *  (reanchor) compares the hash with its local symbol's `bodyHash` to
+         *  classify the anchor current / pre-change; absent ⇒ the pre-versioning
+         *  contract, unverified. Only meaningful on `ANCHORED_AT`. */
+        observedAtCommit: external_exports.string().regex(/^[0-9a-f]{7,40}$/).optional(),
+        symbolContentHash: external_exports.string().regex(/^[0-9a-f]{8,64}$/).optional()
       }).optional()
     });
     SymbolSummarySidecarSchema = external_exports.record(
@@ -19716,7 +19726,16 @@ function anchorProblemToWorkingFile(store, problemId, relPath, workspaceId2, ts,
           captureTime: true,
           anchorProvenance: provenance,
           anchorLine: opts.line,
-          enclosingSymbol: true
+          enclosingSymbol: true,
+          // PJ-anchor-version: WHICH version of the symbol this was witnessed
+          // against. `bodyHash` is the indexer's 16-hex sha256 of the body;
+          // `headSha` is the checkout's HEAD at capture. Both opaque, both
+          // cross the membrane on the anchor edge, and a teammate's reanchor
+          // compares the hash with their own symbol to tell "current" from
+          // "pre-change" — the branch hazard where a fix witnessed on feat/x
+          // would otherwise read as a fact about the unchanged symbol on dev.
+          ...typeof sym.attrs["bodyHash"] === "string" ? { symbolContentHash: sym.attrs["bodyHash"] } : {},
+          ...opts.headSha ? { observedAtCommit: opts.headSha } : {}
         }
       });
     }
@@ -24268,7 +24287,9 @@ function toWirePayload(batch, runId) {
       type: e.type,
       attrs: {
         ...typeof e.confidence === "number" ? { confidence: clamp012(e.confidence) } : {},
-        ...perContext ? { perContext } : {}
+        ...perContext ? { perContext } : {},
+        // PJ-anchor-version: the two opaque version stamps ride on anchors only.
+        ...e.type === "ANCHORED_AT" ? wireAnchorVersion(e.attrs) : {}
       }
     };
   });
@@ -24304,6 +24325,15 @@ function textOrThrow(value, field) {
   if (!text) throw new TypeError(`${field} must be a non-empty string`);
   return text;
 }
+function wireAnchorVersion(attrs) {
+  if (!attrs) return {};
+  const commit = attrs["observedAtCommit"];
+  const hash2 = attrs["symbolContentHash"];
+  return {
+    ...typeof commit === "string" && HEX_SHA.test(commit) ? { observedAtCommit: commit } : {},
+    ...typeof hash2 === "string" && HEX_BODY.test(hash2) ? { symbolContentHash: hash2 } : {}
+  };
+}
 function optionalEdgeAttrs(confidence) {
   return typeof confidence === "number" ? { confidence: clamp012(confidence) } : void 0;
 }
@@ -24429,13 +24459,15 @@ function provenanceHeaders(provenance) {
     ...provenance.agentModel ? { "x-inerrata-agent-model": provenance.agentModel } : {}
   };
 }
-var asWireCount, INGEST_NODE_CHUNK, E6B_PUBLIC_CONTEXT_SENTINEL, CloudClient, CloudError;
+var asWireCount, HEX_SHA, HEX_BODY, INGEST_NODE_CHUNK, E6B_PUBLIC_CONTEXT_SENTINEL, CloudClient, CloudError;
 var init_client = __esm({
   "../../packages/cloud-client/src/client.ts"() {
     "use strict";
     init_oauth();
     init_src();
     asWireCount = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0 ? Math.floor(n) : null;
+    HEX_SHA = /^[0-9a-f]{7,40}$/;
+    HEX_BODY = /^[0-9a-f]{8,64}$/;
     INGEST_NODE_CHUNK = 8;
     E6B_PUBLIC_CONTEXT_SENTINEL = "00000000-0000-4e6b-8000-000000000e6b";
     CloudClient = class {
@@ -57934,7 +57966,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.6-dev.1983" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.6-dev.1986" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -59089,7 +59121,12 @@ function createWorkspaceEngine(opts) {
                 let enclosing = {};
                 if (p.location?.line !== void 0) {
                   try {
-                    enclosing = { line: p.location.line, fileText: readFileSync24(join29(opts.workspaceRoot, anchorPath), "utf8") };
+                    const headSha = readGitRefState(join29(opts.workspaceRoot, ".git")).sha ?? void 0;
+                    enclosing = {
+                      line: p.location.line,
+                      fileText: readFileSync24(join29(opts.workspaceRoot, anchorPath), "utf8"),
+                      ...headSha ? { headSha } : {}
+                    };
                   } catch {
                     enclosing = {};
                   }
@@ -60653,6 +60690,15 @@ function contributedWireId(n) {
 }
 var WIRE_CANONICAL_ID_MIN = 6;
 var SHIP_TERMINAL_REFUSALS = 3;
+function anchorVersionAttrs(attrs) {
+  if (!attrs) return {};
+  const commit = attrs["observedAtCommit"];
+  const hash2 = attrs["symbolContentHash"];
+  return {
+    ...typeof commit === "string" && /^[0-9a-f]{7,40}$/.test(commit) ? { observedAtCommit: commit } : {},
+    ...typeof hash2 === "string" && /^[0-9a-f]{8,64}$/.test(hash2) ? { symbolContentHash: hash2 } : {}
+  };
+}
 function refusalFingerprint(reason, description) {
   return digest(`${reason}\0${description}`);
 }
@@ -60935,7 +60981,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
             stability: "unstable"
           });
         }
-        anchorEdges.push({ ...e, from: wireFrom, to: symId, attrs: {} });
+        anchorEdges.push({ ...e, from: wireFrom, to: symId, attrs: anchorVersionAttrs(e.attrs) });
       }
     }
   }
@@ -61417,6 +61463,12 @@ var ANCHOR_SYMBOL_KINDS = [
   "Namespace",
   "Property"
 ];
+function classifyAnchorVersion(cloudAttrs, localSymbol) {
+  const seen = cloudAttrs["symbolContentHash"];
+  const have = localSymbol?.attrs["bodyHash"];
+  if (typeof seen !== "string" || typeof have !== "string") return "unverified";
+  return seen === have ? "current" : "pre-change";
+}
 function buildReverseSymbolMap(opts) {
   const { store, salt, projectId } = opts;
   const reverse = /* @__PURE__ */ new Map();
@@ -61469,7 +61521,7 @@ async function reanchorProject(opts) {
         // Tagged `source: 'cloud'` (C7 — never re-shipped outward). GUARDRAIL 2 holds
         // by construction: we merge the EDGE onto the LOCAL node id, never the `sym_`
         // Symbol node — that stayed a translation key and never enters the store.
-        attrs: { ...a.attrs, source: "cloud" }
+        attrs: { ...a.attrs, source: "cloud", anchorState: classifyAnchorVersion(a.attrs, store.getNode(localTo)) }
       };
       store.mergeEdge(edge2);
       anchors++;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.6-dev.1983",
+  "version": "2.0.6-dev.1986",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15248,7 +15248,17 @@ var init_wire = __esm({
         extractedBy: external_exports.enum(INGEST_EXTRACTION_SOURCES).optional(),
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
-        perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional()
+        perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
+         *  witnessed against. Both opaque — the observing checkout's HEAD sha and
+         *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible
+         *  to code or names (a sha identifies a commit only to someone holding the
+         *  repo), so they add nothing to the §6c disclosure surface. A consumer
+         *  (reanchor) compares the hash with its local symbol's `bodyHash` to
+         *  classify the anchor current / pre-change; absent ⇒ the pre-versioning
+         *  contract, unverified. Only meaningful on `ANCHORED_AT`. */
+        observedAtCommit: external_exports.string().regex(/^[0-9a-f]{7,40}$/).optional(),
+        symbolContentHash: external_exports.string().regex(/^[0-9a-f]{8,64}$/).optional()
       }).optional()
     });
     SymbolSummarySidecarSchema = external_exports.record(