@inerrata-corporation/errata 2.0.8-dev.2929 → 2.0.8-dev.2932

package/errata.mjs

@@ -29506,6 +29506,18 @@ function resolveWorkspaceIdentity(cfg, entry, env2 = process.env) {
 function identityKey(id) {
   return id.profileName ?? "@default";
 }
+function publicWorkspaceIdentity(identity) {
+  return {
+    profileName: identity.profileName,
+    rule: identity.rule,
+    invalid: identity.invalid,
+    reason: identity.reason,
+    profile: identity.profile ? {
+      installationId: identity.profile.installationId,
+      cloudUrl: identity.profile.cloudUrl
+    } : null
+  };
+}
 function blockedCloudClient(reason) {
   return new Proxy(
     {},
@@ -80267,7 +80279,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.8-dev.2929" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.8-dev.2932" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -86995,11 +87007,17 @@ async function startMultiDaemon(opts = {}) {
   const ANCHOR_PULL_INTERVAL_MS = 10 * 60 * 1e3;
   const anchorPullAll = async () => {
     const c = loadConfig();
-    if (!hasCloudCredential(c)) return;
-    const client = cloudNow();
+    if (registryCorrupt()) return;
     for (const r of records) {
       const projectId = r.engine.profile.projectId;
       if (!projectId || !effectiveConsent(c, r.engine.profile).sync) continue;
+      const identity = identityFor(liveWorkspaceEntry(r.entry));
+      if (identity.invalid) {
+        noteIdentityBlock(r.id, r.entry.name, identity);
+        continue;
+      }
+      if (identity.rule !== "workspace-binding" && !hasCloudCredential(c)) continue;
+      const client = cloudForIdentity(identity);
       try {
         const { salt } = await resolveProjectSymbolSalt(client, projectId);
         await pullProjectAnchors(r, client, salt);
@@ -87013,11 +87031,17 @@ async function startMultiDaemon(opts = {}) {
   }, ANCHOR_PULL_INTERVAL_MS);
   const ambientLinkAll = async () => {
     const c = loadConfig();
-    if (!hasCloudCredential(c)) return;
-    const client = cloudNow();
+    if (registryCorrupt()) return;
     for (const r of records) {
       const working = loadProfile(r.root) ?? r.engine.profile;
       if (!effectiveConsent(c, working).sync) continue;
+      const identity = identityFor(liveWorkspaceEntry(r.entry));
+      if (identity.invalid) {
+        noteIdentityBlock(r.id, r.entry.name, identity);
+        continue;
+      }
+      if (identity.rule !== "workspace-binding" && !hasCloudCredential(c)) continue;
+      const client = cloudForIdentity(identity);
       const out2 = await ensureProjectLink(r.root, working, client);
       if (working !== r.engine.profile) adoptLinkFields(r.engine.profile, working);
       if (out2.linked) {
@@ -89615,7 +89639,7 @@ async function cmdWhoami(args2) {
       `note: daemon capture and the MCP server resolve identically; a process with ERRATA_CONFIG_PATH set resolves by rule 1 regardless of binding.`
     ];
     if (args2.includes("--json")) {
-      console.log(JSON.stringify({ path: path2, registered: Boolean(entry), ...identity }, null, 2));
+      console.log(JSON.stringify({ path: path2, registered: Boolean(entry), ...publicWorkspaceIdentity(identity) }, null, 2));
     } else {
       for (const l of lines) console.log(l);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.8-dev.2929",
+  "version": "2.0.8-dev.2932",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {