@inerrata-corporation/errata 2.0.6-dev.2282 → 2.0.6-dev.2333

package/consolidate-worker.mjs

@@ -15355,7 +15355,7 @@ var init_wire = __esm({
       /** Org-membrane (M2): the daemon's anchor tag — it owns the lockfile, so it
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
-       *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
+       *  org-private. Ignored only where ORG_MEMBRANE_ENABLED=false (default ON). */
       anchorVisibility: external_exports.enum(["public", "private"]).optional(),
       /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
        *  Package purl or `languageCanonicalId`. The door validates THIS on the

package/errata.mjs

@@ -600,6 +600,15 @@ var init_graph_events = __esm({
         prefixes: ["mergegate."],
         consumer: "graph-health.mjs 'Graph merge gate' triggers (truncation + refused backlog, pending a live baseline) beside ingest.judge.*"
       },
+      "graph.causalroutes": {
+        // Causal-route induction + its membrane heal (PRIV-causal-route-membrane), up to two
+        // events per nightly run: causalroutes.heal.* (what the heal did to Triages minted
+        // before the public-only gate) and causalroutes.mint.* (incl. skippedNonPublicPairs —
+        // the cost of the gate). causalroutes.heal.stillExposed is the alertable number:
+        // private-sourced text still publicly readable. It must be 0.
+        prefixes: ["causalroutes."],
+        consumer: "scripts/probes/deep-health.ts \xA710b (pnpm probe:graph-health) reads the same counters off the day's MemoryReport (triageHeal*) and recomputes stillExposed live; a graph-health.mjs trigger on causalroutes.heal.stillExposed > 0 is owed once a live baseline exists"
+      },
       "graph.census": {
         prefixes: [
           "nodes.",
@@ -15849,7 +15858,7 @@ var init_wire = __esm({
       /** Org-membrane (M2): the daemon's anchor tag — it owns the lockfile, so it
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
-       *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
+       *  org-private. Ignored only where ORG_MEMBRANE_ENABLED=false (default ON). */
       anchorVisibility: external_exports.enum(["public", "private"]).optional(),
       /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
        *  Package purl or `languageCanonicalId`. The door validates THIS on the
@@ -78115,7 +78124,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.6-dev.2282" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.6-dev.2333" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.6-dev.2282",
+  "version": "2.0.6-dev.2333",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15228,7 +15228,7 @@ var init_wire = __esm({
       /** Org-membrane (M2): the daemon's anchor tag — it owns the lockfile, so it
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
-       *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
+       *  org-private. Ignored only where ORG_MEMBRANE_ENABLED=false (default ON). */
       anchorVisibility: external_exports.enum(["public", "private"]).optional(),
       /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
        *  Package purl or `languageCanonicalId`. The door validates THIS on the