@inerrata-corporation/errata 2.0.8 → 2.0.10

package/errata.mjs

@@ -15732,6 +15732,13 @@ function isSeedProvenance(source) {
 function isAnchorLabelKind(kind) {
   return typeof kind === "string" && ANCHOR_LABEL_KINDS.includes(kind);
 }
+function triageDiscriminatorAttrs(type, attrs) {
+  if (!["CONFIRMS", "INDICATES", "ROUTES_TO"].includes(type)) return {};
+  const value = attrs?.["discriminator"];
+  if (typeof value !== "string") return {};
+  const test = value.trim();
+  return test && test.length <= TRIAGE_DISCRIMINATOR_MAX_LENGTH && !(test.startsWith("<") && test.endsWith(">")) ? { discriminator: test } : {};
+}
 function anchorVersionAttrs(attrs) {
   if (!attrs) return {};
   const commit = attrs["observedAtCommit"];
@@ -15792,7 +15799,7 @@ function summarizeIngestResult(r) {
     ...r.patternReconciliation ? { patternReconciliation: r.patternReconciliation } : {}
   };
 }
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, FILE_ANCHOR_QNAME, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, ANCHOR_LABEL_KEYS, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, FILE_ANCHOR_QNAME, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, ANCHOR_LABEL_KEYS, TRIAGE_DISCRIMINATOR_MAX_LENGTH, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15915,6 +15922,7 @@ var init_wire = __esm({
     ANCHOR_LABEL_PATH_RE = /^(?![/])(?![A-Za-z]:)(?!(?:.*\/)?\.\.(?:\/|$))[^\x00-\x1f\x7f\\`]{1,512}$/;
     ANCHOR_LABEL_QNAME_RE = /^[^\x00-\x1f\x7f`]{1,256}$/;
     ANCHOR_LABEL_KEYS = ["labelRelPath", "labelQname", "labelKind", "labelLine"];
+    TRIAGE_DISCRIMINATOR_MAX_LENGTH = 2e3;
     CastaliaIngestEdgeSchema = external_exports.object({
       fromCanonicalId: external_exports.string().min(6).max(160),
       toCanonicalId: external_exports.string().min(6).max(160),
@@ -15925,6 +15933,8 @@ var init_wire = __esm({
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
         perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** Scrubbed diagnostic check for a triage route, re-scanned at the cloud door. */
+        discriminator: external_exports.string().trim().min(1).max(TRIAGE_DISCRIMINATOR_MAX_LENGTH).optional(),
         /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
          *  witnessed against. Both opaque — the observing checkout's HEAD sha and
          *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible
@@ -16827,6 +16837,7 @@ __export(src_exports, {
   TAXONOMY_EDGES: () => TAXONOMY_EDGES,
   TOOL_KINDS: () => TOOL_KINDS,
   TRANSFER_EDGES: () => TRANSFER_EDGES,
+  TRIAGE_DISCRIMINATOR_MAX_LENGTH: () => TRIAGE_DISCRIMINATOR_MAX_LENGTH,
   TRIAGE_EDGES: () => TRIAGE_EDGES,
   TRUTH_KIND: () => TRUTH_KIND,
   UnregisteredGraphEventError: () => UnregisteredGraphEventError,
@@ -16910,6 +16921,7 @@ __export(src_exports, {
   summaryRejectionReason: () => summaryRejectionReason,
   toCloudAttrs: () => toCloudAttrs,
   toolCanonicalId: () => toolCanonicalId,
+  triageDiscriminatorAttrs: () => triageDiscriminatorAttrs,
   unregisteredGraphEventKeys: () => unregisteredGraphEventKeys,
   validateCastaliaPayload: () => validateCastaliaPayload,
   versionlessPurl: () => versionlessPurl,
@@ -17438,7 +17450,7 @@ function rowToEdge(r) {
 function openGraphStore(opts) {
   return new SqliteGraphStore(opts);
 }
-var LOCAL_RULE_OVERRIDES, SCHEMA_VERSION, SCHEMA_SQL, TEMPORAL_INDEX_SQL, SqliteGraphStore;
+var LOCAL_RULE_OVERRIDES, SCHEMA_VERSION, SCHEMA_SQL, TEMPORAL_INDEX_SQL, FINGERPRINT_INDEXED_LABELS, SqliteGraphStore;
 var init_store = __esm({
   "../../packages/local-graph/src/store.ts"() {
     "use strict";
@@ -17559,6 +17571,12 @@ CREATE UNIQUE INDEX IF NOT EXISTS edges_triple ON edges(from_id, type, to_id);
 `;
     TEMPORAL_INDEX_SQL = `
 CREATE INDEX IF NOT EXISTS nodes_live ON nodes(label, valid_to);
+-- Covering + partial index for labelFingerprint over the instance labels: the
+-- live-push probe runs it per workspace on a timer, and each hit used to read
+-- its table row. Partial, so it maintains a few thousand rows instead of adding
+-- a write to every node write. Its label list is FINGERPRINT_INDEXED_LABELS.
+DROP INDEX IF EXISTS nodes_live_fingerprint;
+CREATE INDEX IF NOT EXISTS nodes_instance_fingerprint ON nodes(label, last_updated_at, last_reinforced_at_seq, created_at_seq) WHERE valid_to IS NULL AND label IN ('Problem','Solution','RootCause');
 CREATE INDEX IF NOT EXISTS nodes_logical ON nodes(logical_id, version);
 CREATE INDEX IF NOT EXISTS edges_live ON edges(valid_to);
 -- Expression index on the per-node relPath (stored in attrs_json) so the
@@ -17572,6 +17590,7 @@ CREATE INDEX IF NOT EXISTS nodes_live_description ON nodes(description, label) W
 -- every edited file of every turn, and a scan parses every Problem's attrs.
 CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_json, '$.anchorHint.path')) WHERE valid_to IS NULL;
 `;
+    FINGERPRINT_INDEXED_LABELS = ["Problem", "Solution", "RootCause"];
     SqliteGraphStore = class {
       db;
       // Typed edge lookups build their SQL from the number of types asked for, and
@@ -18048,6 +18067,32 @@ CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_js
           attrs: JSON.parse(r.attrs_json)
         }));
       }
+      *iterateNodeIdentitiesByLabel(label, pageSize = 2e3) {
+        const page = this.db.prepare(
+          "SELECT rowid AS rid, id, json_extract(attrs_json, '$.relPath') AS relPath, json_extract(attrs_json, '$.qname') AS qname FROM nodes WHERE rowid > ? AND label = ? AND valid_to IS NULL ORDER BY rowid LIMIT ?"
+        );
+        let after = 0;
+        for (; ; ) {
+          const rows = page.all(after, label, pageSize);
+          for (const r of rows) {
+            yield {
+              id: r.id,
+              relPath: typeof r.relPath === "string" ? r.relPath : null,
+              qname: typeof r.qname === "string" ? r.qname : null
+            };
+          }
+          if (rows.length < pageSize) return;
+          after = rows[rows.length - 1].rid;
+        }
+      }
+      recentNodeIds(label, limit) {
+        const rows = this.db.prepare("SELECT id FROM nodes WHERE label = ? AND valid_to IS NULL ORDER BY last_updated_at DESC LIMIT ?").all(label, Math.max(0, limit));
+        return rows.map((r) => r.id);
+      }
+      hasLiveNodes() {
+        const r = this.db.prepare("SELECT EXISTS(SELECT 1 FROM nodes WHERE valid_to IS NULL) AS e").get();
+        return r.e === 1;
+      }
       findNodeIdentitiesByLabel(label) {
         const rows = this.stmts.identitiesByLabel.all(label);
         return rows.map((r) => ({
@@ -18195,6 +18240,15 @@ CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_js
       }
       labelFingerprint(labels) {
         if (labels.length === 0) return "0";
+        if (labels.length === FINGERPRINT_INDEXED_LABELS.length && FINGERPRINT_INDEXED_LABELS.every((l) => labels.includes(l))) {
+          const r2 = this.db.prepare(
+            `SELECT COUNT(*) AS n, MAX(last_updated_at) AS t,
+                  MAX(COALESCE(last_reinforced_at_seq, created_at_seq, 0)) AS s
+             FROM nodes INDEXED BY nodes_instance_fingerprint
+            WHERE valid_to IS NULL AND label IN ('Problem','Solution','RootCause')`
+          ).get();
+          return `${r2.n}:${r2.t ?? 0}:${r2.s ?? 0}`;
+        }
         const r = this.db.prepare(
           `SELECT COUNT(*) AS n, MAX(last_updated_at) AS t,
                 MAX(COALESCE(last_reinforced_at_seq, created_at_seq, 0)) AS s
@@ -22578,7 +22632,8 @@ function pendingDiscriminators(l2, opts = {}) {
       const perContext = e.attrs["perContext"] ?? {};
       const global2 = perContext[TRIAGE_GLOBAL_BUCKET] ?? {};
       const observations = Number(global2.confirmed ?? 0);
-      const sources = new Set(global2.contributors ?? []).size;
+      const inferred = new Set(global2.inferredContributors ?? []);
+      const sources = new Set((global2.contributors ?? []).filter((id) => !inferred.has(id))).size;
       if (sources < minSources || observations < minObservations) continue;
       out2.push({ route: e.id, presenting: triage.description, cause: "", sources, observations, causeId: e.to });
     }
@@ -22596,7 +22651,7 @@ function markDiscriminatorAsked(l2, routeIds, ts) {
   }
 }
 function promoteRouteWithDiscriminator(l2, routeId, discriminator, ts, source) {
-  const test = discriminator.trim();
+  const test = triageDiscriminatorAttrs("CONFIRMS", { discriminator }).discriminator;
   if (!test) return false;
   if (isUnfilledPlaceholder(test)) return false;
   const existing = l2.getEdge(routeId);
@@ -22698,9 +22753,12 @@ function parseTriageFences(text) {
   return out2;
 }
 function harvestTriageFences(l2, text, opts) {
+  const seen = [...text.matchAll(/```errata-triage[^\n]*\n([\s\S]*?)```/g)].length;
   let recorded = 0;
   let promoted = 0;
   for (const f of parseTriageFences(text)) {
+    if ([f.presenting, f.cause, f.test, f.fix, f.route].some((value) => value && isUnfilledPlaceholder(value))) continue;
+    if (f.test && !triageDiscriminatorAttrs("CONFIRMS", { discriminator: f.test }).discriminator) continue;
     if (f.route && f.test) {
       if (promoteRouteWithDiscriminator(l2, f.route.trim(), f.test, opts.ts, opts.contributor)) promoted++;
       continue;
@@ -22736,7 +22794,7 @@ function harvestTriageFences(l2, text, opts) {
     }
     recorded++;
   }
-  return { recorded, promoted };
+  return { seen, recorded, promoted, rejected: seen - recorded - promoted };
 }
 var COOCCUR_BONUS, routeEdgeId, ROUTE_EDGE_TYPES, routeTypeFor, isRouterRoute, INDUCTED_MARK, DRIFT_VALUES;
 var init_triage2 = __esm({
@@ -23978,6 +24036,7 @@ __export(src_exports2, {
   CODE_REACH_EDGES: () => CODE_REACH_EDGES,
   CREDIT_FAMILY: () => CREDIT_FAMILY,
   DEFAULT_MIN_COVERAGE: () => DEFAULT_MIN_COVERAGE,
+  FINGERPRINT_INDEXED_LABELS: () => FINGERPRINT_INDEXED_LABELS,
   FIX_CANDIDATE_ASK_LIMIT: () => FIX_CANDIDATE_ASK_LIMIT,
   FOLD_EMBED_AUTO_COSINE: () => FOLD_EMBED_AUTO_COSINE,
   FOLD_JUDGE_MIN_COSINE: () => FOLD_JUDGE_MIN_COSINE,
@@ -24353,7 +24412,7 @@ function renderSnapshot(s) {
   lines.push("");
   lines.push("### \u270D\uFE0F CAPTURE PROTOCOL \u2014 tags are the record");
   lines.push(
-    "errata records ONLY inline tags: `[!one line]` for every problem you state, `(fix:[id])` when your edit fixed a shown problem, and to JUDGE a prior shown below \u2014 `(confirm:[id])` if it held, `(refute:[id] why)` if it's wrong or didn't hold. Untagged prose is silently lost \u2014 tag as you write (no fences), we filter downstream."
+    "For problems and fixes, errata records inline tags: `[!one line]` for every problem you state, `(fix:[id])` when your edit fixed a shown problem, and to JUDGE a prior shown below \u2014 `(confirm:[id])` if it held, `(refute:[id] why)` if it's wrong or didn't hold. Untagged prose is silently lost \u2014 tag as you write. Requested errata-* answer blocks keep their fences; put them in your turn-final reply."
   );
   lines.push("");
   lines.push(SEARCH_IMPERATIVE_HEADER);
@@ -24639,7 +24698,7 @@ function renderSnapshot(s) {
     for (const item of reviewItems) {
       if (item.kind === "discriminator") {
         lines.push(
-          `- **A recurring diagnosis is one cheap check from promoting** \u2014 "${item.presenting}" usually turns out to be: ${item.cause}. If (and only if) you KNOW a cheap ante-hoc check that confirms it, answer in your reply:`
+          `- **A recurring diagnosis is one cheap check from promoting** \u2014 "${item.presenting}" usually turns out to be: ${item.cause}. If (and only if) you KNOW a cheap ante-hoc check that confirms it, fill this fenced block in your turn-final reply:`
         );
         lines.push("  ```errata-triage");
         lines.push(`  route: ${item.route}`);
@@ -24647,7 +24706,7 @@ function renderSnapshot(s) {
         lines.push("  ```");
       } else {
         lines.push(
-          `- **Name the principle this cluster of your beliefs generalizes** \u2014 it ships to the collective only once named, and the prose must cover ALL members in one sentence:`
+          `- **Name the principle this cluster of your beliefs generalizes** \u2014 it ships to the collective only once named. Cover ALL members in one sentence; fill this fenced block in your turn-final reply:`
         );
         for (const m of item.members) lines.push(`  - ${m.description}`);
         lines.push("  ```errata-abstraction");
@@ -25153,6 +25212,7 @@ function toWirePayload(batch, runId) {
       attrs: {
         ...typeof e.confidence === "number" ? { confidence: clamp012(e.confidence) } : {},
         ...perContext ? { perContext } : {},
+        ...triageDiscriminatorAttrs(e.type, e.attrs),
         // PJ-anchor-version: the two opaque version stamps ride on anchors only.
         ...e.type === "ANCHORED_AT" ? anchorVersionAttrs(e.attrs) : {},
         // PJ-anchor-labels: readable labels ride only when the producer set the
@@ -25759,6 +25819,7 @@ var init_client = __esm({
         if (q.seed?.length) qs.set("seed", q.seed.join(","));
         if (q.q) qs.set("q", q.q);
         if (q.channel) qs.set("channel", q.channel);
+        if (q.includeTriage) qs.set("includeTriage", "true");
         const publicCtx = process.env["ERRATA_PRIMING_PUBLIC_CONTEXT"];
         const usePublicCtx = Boolean(publicCtx && publicCtx !== "0" && q.channel === "priming");
         const UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -28973,7 +29034,7 @@ function buildAgentInstruction(opts = {}) {
   const signals = opts.signals ?? ["prior", "problem", "domain", "fix", "constraint", "triage", "attempt", "link"];
   const ref = opts.referent ?? "its-handle";
   const token = (s) => s === "problem" ? TAG_EXAMPLE.problem() : s === "constraint" ? TAG_EXAMPLE.constraint() : s === "attempt" ? TAG_EXAMPLE.tried() : s === "domain" ? TAG_EXAMPLE.domain() : s === "link" ? TAG_EXAMPLE.pattern() : s === "verdict" ? TAG_EXAMPLE.confirm(ref) : TAG_EXAMPLE[s](ref);
-  const head2 = `We tag the priors we show you with a short handle like [${opts.handleExample ?? "chokidar-glob"}]. Tags are the ONLY signal recorded \u2014 anything you state but don't tag is silently lost. Weave each tag inline in your prose as you state it (no fences or backticks, no extra calls); tag everything, we filter downstream:`;
+  const head2 = `We tag the priors we show you with a short handle like [${opts.handleExample ?? "chokidar-glob"}]. Untagged prose is silently lost. Put each tag inline in prose (no fences or backticks). Requested errata-* answer blocks are the exception: keep their fences in your turn-final reply. Tag everything, we filter downstream:`;
   const tail = "Mid-turn text (between tool calls) can be dropped by the harness \u2014 RESTATE every tag in your turn-final message; the final message is what reliably survives \u2014 EXCEPT one already shown above with an id: that is captured, so cite `[its-handle]` rather than retyping it (drift mints a duplicate).";
   return [
     head2,
@@ -29131,6 +29192,12 @@ function statuslineText(sessionId, now = Date.now()) {
   if (!hit || now - hit.at > STATUS_CARD_TTL_MS) return IDLE_STATUS;
   return renderStatusCard(hit.card);
 }
+function statuslineDir(body2) {
+  const ws = body2["workspace"];
+  const current = ws && typeof ws === "object" ? ws["current_dir"] : void 0;
+  if (typeof current === "string" && current) return current;
+  return typeof body2["cwd"] === "string" && body2["cwd"] ? body2["cwd"] : null;
+}
 function recallCardEnabled(env2 = process.env) {
   const v = (env2["ERRATA_RECALL_CARD"] ?? "").trim().toLowerCase();
   return !(v === "0" || v === "off" || v === "false" || v === "no");
@@ -29457,6 +29524,18 @@ function resolveWorkspaceIdentity(cfg, entry, env2 = process.env) {
 function identityKey(id) {
   return id.profileName ?? "@default";
 }
+function publicWorkspaceIdentity(identity) {
+  return {
+    profileName: identity.profileName,
+    rule: identity.rule,
+    invalid: identity.invalid,
+    reason: identity.reason,
+    profile: identity.profile ? {
+      installationId: identity.profile.installationId,
+      cloudUrl: identity.profile.cloudUrl
+    } : null
+  };
+}
 function blockedCloudClient(reason) {
   return new Proxy(
     {},
@@ -41839,7 +41918,7 @@ function takeDiscriminatorNudge(path2) {
     return [
       `\u26A1 errata \u2014 a known wrong-door is one field from ranking: "${top.presenting.slice(0, 90)}"`,
       `  usually turns out to be: ${top.cause.slice(0, 90)}  (seen ${top.observations}x)`,
-      "  Know a CHEAP check that confirms it? Answer in-flow \u2014 it promotes the route so the",
+      "  Know a CHEAP check that confirms it? Fill this fenced block in your turn-final reply so the",
       "  next agent gets it first. Only if you actually know one: a guessed test ranks first",
       "  and misroutes everyone after you.",
       "  ```errata-triage",
@@ -43356,7 +43435,7 @@ var init_mcp = __esm({
               pending,
               ...pending.length > 0 ? {
                 howToAnswer: [
-                  "For each route you know a cheap test for, emit an errata-triage fence",
+                  "For each route you know a cheap test for, emit an errata-triage fence in your turn-final reply",
                   "carrying its `route` id and the `test` \u2014 no presenting/cause needed, the",
                   "route id identifies both endpoints. Attaching a test does NOT count as",
                   "another sighting, so it cannot inflate the route's evidence.",
@@ -71393,7 +71472,7 @@ var init_report_render = __esm({
 
 // src/cli.ts
 init_src6();
-import { closeSync as closeSync2, existsSync as existsSync34, openSync as openSync2, readFileSync as readFileSync35, renameSync as renameSync4, statSync as statSync10 } from "node:fs";
+import { closeSync as closeSync2, existsSync as existsSync35, openSync as openSync2, readFileSync as readFileSync36, renameSync as renameSync4, statSync as statSync10 } from "node:fs";
 import { join as join43, resolve as pathResolve2 } from "node:path";
 import { spawn as spawn5 } from "node:child_process";
 
@@ -72715,9 +72794,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname13 = sysPath.dirname(file2);
+    const dirname14 = sysPath.dirname(file2);
     const basename8 = sysPath.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname13);
+    const parent = this.fsw._getWatchedDir(dirname14);
     let prevStats = stats;
     if (parent.has(basename8))
       return;
@@ -72744,7 +72823,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error48) {
-          this.fsw._remove(dirname13, basename8);
+          this.fsw._remove(dirname14, basename8);
         }
       } else if (parent.has(basename8)) {
         const at = newStats.atimeMs;
@@ -74083,18 +74162,21 @@ function readTailWithLosses(path2, maxBytes) {
   try {
     fd = openSync(path2, "r");
   } catch {
-    return { text: "", bytesUnreachable: 0, ioFailed: true };
+    return { text: "", bytesUnreachable: 0, parseStartByte: 0, ioFailed: true };
   }
   try {
     const size = fstatSync(fd).size;
     const start2 = Math.max(0, size - maxBytes);
     const len = size - start2;
-    if (len <= 0) return { text: "", bytesUnreachable: 0, ioFailed: false };
+    if (len <= 0) return { text: "", bytesUnreachable: 0, parseStartByte: 0, ioFailed: false };
     const buf = Buffer.allocUnsafe(len);
     readSync(fd, buf, 0, len, start2);
-    return { text: buf.toString("utf8"), bytesUnreachable: start2, ioFailed: false };
+    const text = buf.toString("utf8");
+    const firstNewline = buf.indexOf(10);
+    const parseStartByte = firstNewline < 0 ? start2 : start2 + firstNewline + 1 - Buffer.byteLength(buf.subarray(0, firstNewline + 1).toString("utf8"));
+    return { text, bytesUnreachable: start2, parseStartByte, ioFailed: false };
   } catch {
-    return { text: "", bytesUnreachable: 0, ioFailed: true };
+    return { text: "", bytesUnreachable: 0, parseStartByte: 0, ioFailed: true };
   } finally {
     closeSync(fd);
   }
@@ -74158,7 +74240,7 @@ function isUserTurnBoundary(obj) {
 }
 function readAssistantTurnsWithLosses(transcriptPath, includeThinking = true, maxBytes = 2e6) {
   const tail = readTailWithLosses(transcriptPath, maxBytes);
-  const parsed = parseAssistantTurns(tail.text, includeThinking, false);
+  const parsed = parseAssistantTurns(tail.text, includeThinking, false, tail.parseStartByte);
   return {
     turns: parsed.turns,
     losses: {
@@ -74170,7 +74252,8 @@ function readAssistantTurnsWithLosses(transcriptPath, includeThinking = true, ma
 }
 function readAssistantTurnsFrom(transcriptPath, fromByte, includeThinking = true, maxBytes) {
   const { text, nextOffset, more, ioFailed } = readFrom(transcriptPath, fromByte, maxBytes);
-  const parsed = parseAssistantTurns(text, includeThinking, fromByte > 0);
+  const startByte = fromByte > 0 && fromByte <= nextOffset ? fromByte : 0;
+  const parsed = parseAssistantTurns(text, includeThinking, fromByte > 0, startByte);
   return {
     turns: parsed.turns,
     nextOffset,
@@ -74206,10 +74289,10 @@ function detectHostHarness(raw2) {
   }
   return "claude_code";
 }
-function parseAssistantTurns(raw2, includeThinking, skipFirstLineParseFailure = false) {
+function parseAssistantTurns(raw2, includeThinking, skipFirstLineParseFailure = false, startByte = 0) {
   if (!raw2) return { turns: [], parseFailures: 0 };
   const harness = detectHostHarness(raw2);
-  if (harness === "codex") return parseCodexAssistantTurns(raw2, skipFirstLineParseFailure);
+  if (harness === "codex") return parseCodexAssistantTurns(raw2, skipFirstLineParseFailure, startByte);
   if (harness === "gemini") return parseGeminiAssistantTurns(raw2, skipFirstLineParseFailure);
   if (harness === "opencode") return parseOpencodeAssistantTurns(raw2, skipFirstLineParseFailure);
   return parseClaudeAssistantTurns(raw2, includeThinking, skipFirstLineParseFailure);
@@ -74300,13 +74383,16 @@ function parseGeminiAssistantTurns(raw2, skipFirstLineParseFailure = false) {
   const turns = [...byId.entries()].sort((a, b) => a[1].order - b[1].order).map(([uuid3, v]) => ({ uuid: uuid3, text: v.text, hostHarness: "gemini" }));
   return { turns, parseFailures };
 }
-function parseCodexAssistantTurns(raw2, skipFirstLineParseFailure = false) {
+function parseCodexAssistantTurns(raw2, skipFirstLineParseFailure = false, startByte = 0) {
   const turns = [];
-  const lines = raw2.split(/\r?\n/);
+  const lines = raw2.split("\n");
   let parseFailures = 0;
+  let nextByte = startByte;
   for (let i2 = 0; i2 < lines.length; i2++) {
     const line = lines[i2];
-    if (!line) continue;
+    const lineByte = nextByte;
+    nextByte += Buffer.byteLength(line ?? "", "utf8") + 1;
+    if (!line?.trim()) continue;
     let obj;
     try {
       obj = JSON.parse(line);
@@ -74325,7 +74411,9 @@ function parseCodexAssistantTurns(raw2, skipFirstLineParseFailure = false) {
     }
     if (parts2.length === 0) continue;
     turns.push({
-      uuid: typeof payload["id"] === "string" ? payload["id"] : `codex-${i2}`,
+      // Slice-local line numbers repeat on every Stop. Position distinguishes
+      // identical messages; the digest distinguishes a replaced row at that position.
+      uuid: typeof payload["id"] === "string" && payload["id"].length > 0 ? payload["id"] : `codex-${lineByte}-${createHash14("sha256").update(line.trimEnd()).digest("hex")}`,
       text: parts2.join("\n\n"),
       hostHarness: "codex"
     });
@@ -76897,21 +76985,31 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
     stack: profile.stack,
     domains: profile.domains,
     kinds: ["Problem"],
+    includeTriage: true,
     limit
   });
   const byId = new Map(res.nodes.map((n) => [n.id, n]));
   const now = Date.now();
   let merged = 0;
+  const landedTriages = /* @__PURE__ */ new Set();
   const landNode = (id) => {
-    if (shared.getNode(id)) return true;
+    const existing = shared.getNode(id);
     const n = byId.get(id);
+    if (existing) {
+      if (n && existing.attrs["source"] === "cloud") {
+        shared.updateNode(id, { attrs: { ...existing.attrs, ...n.attrs, source: "cloud" }, lastUpdatedAt: now });
+      }
+      return true;
+    }
     if (!n) return false;
     shared.mergeNode({ ...n, extractionSource: "bko-inferred", embedding: [], attrs: { ...n.attrs, source: "cloud" } });
     return true;
   };
   for (const edge2 of res.edges) {
     if (edge2.type !== "CONFIRMS" && edge2.type !== "ROUTES_TO") continue;
+    if (!triageDiscriminatorAttrs(edge2.type, edge2.attrs).discriminator) continue;
     if (!landNode(edge2.from) || !landNode(edge2.to)) continue;
+    landedTriages.add(edge2.from);
     const cloudAttrs = { ...edge2.attrs, source: "cloud", provisional: false };
     const existing = shared.getEdge(edge2.id);
     if (existing && existing.type === "CONFIRMS") {
@@ -76922,6 +77020,11 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
     }
     merged++;
   }
+  for (const edge2 of res.edges) {
+    if (edge2.type !== "TRIAGED_BY" || !landedTriages.has(edge2.to)) continue;
+    if (!landNode(edge2.from)) continue;
+    shared.mergeEdge({ ...edge2, attrs: { ...edge2.attrs, source: "cloud" } });
+  }
   return merged;
 }
 
@@ -80218,7 +80321,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.8" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.10" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -80785,7 +80888,7 @@ function createWorkspaceEngine(opts) {
     lastRemoteAt = now;
     try {
       const norm = normStackTokens;
-      const seed = store.findNodesByLabel("Problem").sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt).slice(0, 6).map((p) => p.id);
+      const seed = store.recentNodeIds("Problem", 6);
       const q = {
         stack: outboundStack(),
         domains: norm(profile.domains),
@@ -81104,6 +81207,9 @@ function createWorkspaceEngine(opts) {
     let resolved = 0;
     let abstracted = 0;
     let triaged = 0;
+    let triageFencesSeen = 0;
+    let triagePromoted = 0;
+    let triageFencesRejected = 0;
     let priorEdges = 0;
     let exposureShown = 0;
     let exposureEvicted = 0;
@@ -81167,11 +81273,16 @@ function createWorkspaceEngine(opts) {
           console.warn("[errata] abstraction harvest failed:", err2);
         }
         try {
-          triaged += harvestTriageFences(opts.sharedStore, turn.text, {
+          const triage = harvestTriageFences(opts.sharedStore, turn.text, {
             context: { stack: profile.stack, domain: profile.domains[0] },
             contributor: sessionId,
             ts: t
-          }).recorded;
+          });
+          triaged += triage.recorded;
+          triageFencesSeen += triage.seen;
+          triagePromoted += triage.promoted;
+          triageFencesRejected += triage.rejected;
+          if (triage.recorded > 0 || triage.promoted > 0) contextDirty = true;
         } catch (err2) {
           console.warn("[errata] triage harvest failed:", err2);
         }
@@ -81847,8 +81958,8 @@ function createWorkspaceEngine(opts) {
     if (abstracted > 0) {
       console.log(`[errata] abstraction: ${abstracted} principle(s) distilled from the conversation`);
     }
-    if (triaged > 0) {
-      console.log(`[errata] triage: ${triaged} wrong-door(s) captured from the conversation`);
+    if (triaged > 0 || triagePromoted > 0 || triageFencesRejected > 0) {
+      console.log(`[errata] triage: ${triaged} diagnosis(es), ${triagePromoted} route promotion(s), ${triageFencesRejected} rejected fence(s)`);
     }
     if (processedTurns > 0) {
       appendPassLedger(paths.configDir, "capture", Date.now() - t, {
@@ -81863,6 +81974,9 @@ function createWorkspaceEngine(opts) {
         tagsRestated,
         resolved,
         triaged,
+        triageFencesSeen,
+        triagePromoted,
+        triageFencesRejected,
         priorEdges,
         corroboratedEdges,
         // RG-mark: refute witnesses stamped onto local nodes (the local half of
@@ -82664,6 +82778,40 @@ async function listenServer(fetchFn, port) {
 init_registry();
 init_identity2();
 
+// src/instance-receipts.ts
+import { createHash as createHash16 } from "node:crypto";
+var FIELDS = ["contributedAtSeq", "cloudNodeId", "anchorsContributedDigest", "projectAnchorsContributedDigest", "semanticEdgesContributedDigest", "shipRefusedSinceSeq", "shipRefusedCount", "shipRefusedReason", "shipRefusedFingerprint"];
+function instanceDestinationKey(input) {
+  return createHash16("sha256").update(JSON.stringify([
+    input.workspace,
+    input.cloudUrl.replace(/\/+$/, ""),
+    input.installationId ?? input.profileName ?? "default",
+    input.projectId ?? null,
+    input.writeTarget?.visibility ?? null,
+    input.writeTarget?.org_id ?? null,
+    input.writeTarget?.team_id ?? null
+  ])).digest("hex");
+}
+function receiptMap(attrs) {
+  const value = attrs["instanceReceipts"];
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function instanceReceipt(n, destination) {
+  return destination ? receiptMap(n.attrs)[destination] ?? {} : n.attrs;
+}
+function updateInstanceReceipt(n, destination, patch, mirrorLegacy) {
+  const receipt = { ...instanceReceipt(n, destination), ...patch };
+  const attrs = { ...n.attrs, instanceReceipts: { ...receiptMap(n.attrs), [destination]: receipt } };
+  if (mirrorLegacy) for (const field of FIELDS) {
+    if (field in receipt) attrs[field] = receipt[field];
+    else delete attrs[field];
+  }
+  return attrs;
+}
+function instanceReceiptSequence(n) {
+  return Math.max(n.lastReinforcedAtSeq ?? 0, n.createdAtSeq ?? 0);
+}
+
 // src/multi.ts
 init_dist();
 init_src5();
@@ -83068,8 +83216,8 @@ function compositionCounters(c) {
     ...Object.fromEntries(buckets.map((b) => [`sidecarDrop_${b}`, sidecarDropReasons[b] ?? 0]))
   };
 }
-function contributedWireId(n) {
-  const cloudId = n.attrs["cloudNodeId"];
+function contributedWireId(n, destinationKey) {
+  const cloudId = instanceReceipt(n, destinationKey)["cloudNodeId"];
   return isMembraneSaltedId(cloudId) ? cloudId : n.id;
 }
 var WIRE_CANONICAL_ID_MIN = 6;
@@ -83213,10 +83361,26 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     fileRefsSubstituted: 0,
     fileRefLexiconMisses: 0
   };
+  const sharedCauses = /* @__PURE__ */ new Map();
+  const causalQueue = store.findNodesByLabel("Problem").filter(
+    (n) => n.attrs["source"] !== "cloud" && n.attrs["resolvedAs"] !== PROBLEM_RESOLUTION.FALSE_POSITIVE && !ignored(n.description)
+  ).map((n) => n.id);
+  const causalSeen = new Set(causalQueue);
+  for (let i2 = 0; i2 < causalQueue.length; i2++) {
+    const id = causalQueue[i2];
+    for (const e of [...store.outEdges(id, ["CAUSED_BY"]), ...opts.sharedStore?.outEdges(id, ["CAUSED_BY"]) ?? []]) {
+      if (causalSeen.has(e.to)) continue;
+      causalSeen.add(e.to);
+      const cause = nodeOf(e.to);
+      if (!cause || cause.label !== "RootCause" || cause.attrs["source"] === "cloud" || ignored(cause.description)) continue;
+      sharedCauses.set(cause.id, cause);
+      causalQueue.push(cause.id);
+    }
+  }
   for (const label of INSTANCE_LABELS) {
     const ref = [];
     includedByLabel.set(label, ref);
-    const population = label === "RootCause" && opts.sharedStore ? [...store.findNodesByLabel(label), ...opts.sharedStore.findNodesByLabel(label)] : store.findNodesByLabel(label);
+    const population = label === "RootCause" && opts.sharedStore ? [...store.findNodesByLabel(label), ...sharedCauses.values()] : store.findNodesByLabel(label);
     for (const n of population) {
       if (seen.has(n.id)) continue;
       if (walked.has(n.id)) continue;
@@ -83234,18 +83398,18 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         composition.ignored++;
         continue;
       }
-      const contributedAtSeq = n.attrs["contributedAtSeq"];
+      const contributedAtSeq = instanceReceipt(n, opts.destinationKey)["contributedAtSeq"];
       if (typeof contributedAtSeq === "number" && (n.lastReinforcedAtSeq ?? 0) <= contributedAtSeq) {
         composition.watermarked++;
         anchorSources.add(n.id);
-        semanticEndpoints.set(n.id, contributedWireId(n));
+        semanticEndpoints.set(n.id, contributedWireId(n, opts.destinationKey));
         continue;
       }
       if (label === "Solution" && n.description.startsWith(AUTO_MINT_PREFIX)) {
         composition.autoMint++;
         continue;
       }
-      if (isTerminallyRefused(n)) {
+      if (isTerminallyRefused({ ...n, attrs: instanceReceipt(n, opts.destinationKey) })) {
         composition.terminalRefused++;
         continue;
       }
@@ -83304,9 +83468,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     }
     const dg = digest(targets.map(({ e, wireId }) => `${e.type}>${wireId}`).sort());
     const sourceNode = nodeOf(sourceId);
-    if (sourceNode?.attrs["anchorsContributedDigest"] === dg) continue;
+    if ((sourceNode && instanceReceipt(sourceNode, opts.destinationKey)["anchorsContributedDigest"]) === dg) continue;
     anchorDigests[sourceId] = dg;
-    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode);
+    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode, opts.destinationKey);
     for (const { e, t, wireId } of targets) {
       const reject = unshippableReason(wireId, t.label);
       if (reject) {
@@ -83335,7 +83499,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     for (const sourceId of anchorSources) {
       const source = nodeOf(sourceId);
       if (!source) continue;
-      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source);
+      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source, opts.destinationKey);
       const planned = [];
       for (const e of store.outEdges(sourceId, ["ANCHORED_AT"])) {
         const target = nodeOf(e.to);
@@ -83370,7 +83534,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       const dg = digest(
         planned.map(({ symId, wireAttrs }) => `ANCHORED_AT>${symId}>${JSON.stringify(wireAttrs)}`).sort()
       );
-      if (source.attrs["projectAnchorsContributedDigest"] === dg) continue;
+      if (instanceReceipt(source, opts.destinationKey)["projectAnchorsContributedDigest"] === dg) continue;
       projectAnchorDigests[sourceId] = dg;
       for (const { e, target, symId, wireAttrs } of planned) {
         if (!contextSeen.has(symId)) {
@@ -83416,7 +83580,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     if (outs.length === 0) continue;
     const dg = digest(outs.map(({ e, wireTo }) => `${e.type}>${wireTo}`).sort());
     const owner = nodeOf(sourceId);
-    const digestSkip = owner?.attrs["semanticEdgesContributedDigest"] === dg;
+    const digestSkip = (owner && instanceReceipt(owner, opts.destinationKey)["semanticEdgesContributedDigest"]) === dg;
     if (!digestSkip) semanticEdgeDigests[sourceId] = dg;
     for (const { e, wireTo } of outs) {
       if (digestSkip && !shippedById.has(e.to)) continue;
@@ -83473,7 +83637,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   for (const wn of nodes) {
     if (wn.label !== "RootCause" && wn.label !== "Solution") continue;
     const src = nodeOf(wn.id);
-    if (typeof src?.attrs["contributedAtSeq"] === "number") continue;
+    if (src && typeof instanceReceipt(src, opts.destinationKey)["contributedAtSeq"] === "number") continue;
     if (bindingEndpoints.has(wn.id)) continue;
     heldOrphans.add(wn.id);
   }
@@ -83627,6 +83791,7 @@ function buildDrainInstances(store, sharedStore, input) {
     ...input.includePackages !== void 0 ? { includePackages: input.includePackages } : {},
     workspaceRoot: input.workspaceRoot,
     sharedStore,
+    destinationKey: input.destinationKey,
     onComposition: (c) => {
       composition = c;
     },
@@ -84124,7 +84289,7 @@ function buildReverseSymbolMap(opts) {
 function* reverseSymbolEntries(opts) {
   const { store, salt, projectId } = opts;
   for (const kind of ANCHOR_SYMBOL_KINDS2) {
-    for (const n of store.findNodeIdentitiesByLabel(kind)) {
+    for (const n of store.iterateNodeIdentitiesByLabel(kind)) {
       const { relPath, qname } = n;
       if (relPath === null || qname === null) continue;
       const sym = projectSymbolId(salt, projectId, relPath, qname, kind);
@@ -84132,7 +84297,7 @@ function* reverseSymbolEntries(opts) {
       yield [projectSaltedNodeId(sym, salt), n.id];
     }
   }
-  for (const n of store.findNodeIdentitiesByLabel("File")) {
+  for (const n of store.iterateNodeIdentitiesByLabel("File")) {
     if (n.relPath === null) continue;
     const sym = projectSymbolId(salt, projectId, n.relPath, FILE_ANCHOR_QNAME, "File");
     yield [sym, n.id];
@@ -84172,7 +84337,7 @@ function buildOwnKnowledgeMap(opts) {
 function* ownKnowledgeEntries(opts) {
   const { store, salt } = opts;
   for (const kind of ANCHOR_SOURCE_KINDS) {
-    for (const n of store.findNodeIdentitiesByLabel(kind)) {
+    for (const n of store.iterateNodeIdentitiesByLabel(kind)) {
       if (n.id.startsWith("projn_")) continue;
       yield [projectSaltedNodeId(n.id, salt), n.id];
     }
@@ -85294,7 +85459,7 @@ async function startHistoryStage(root, input, client, walk11 = {}) {
 
 // src/link-flow.ts
 init_cloud_auth();
-import { createHash as createHash16 } from "node:crypto";
+import { createHash as createHash17 } from "node:crypto";
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync30, writeFileSync as writeFileSync23 } from "node:fs";
 import { join as join38 } from "node:path";
@@ -85588,7 +85753,7 @@ async function loginOAuthLoopback(opts) {
 
 // src/link-flow.ts
 function remoteFingerprint(locator) {
-  return createHash16("sha256").update(locator).digest("hex");
+  return createHash17("sha256").update(locator).digest("hex");
 }
 function isDecision(value) {
   if (!value || typeof value !== "object") return false;
@@ -86483,7 +86648,7 @@ async function startMultiDaemon(opts = {}) {
       registerWorkspace(rec.engine.profile, rec.root);
     } catch {
     }
-    if (wakeIndexPlan(rec.engine.store.nodeCount(), opts.reindexOnStart !== false) === "full-index") {
+    if (wakeIndexPlan(rec.engine.store.hasLiveNodes() ? 1 : 0, opts.reindexOnStart !== false) === "full-index") {
       void enqueueWakeIndex(async () => {
         const done = markPass(`wake-index:${rec.entry.name}`);
         try {
@@ -86706,6 +86871,15 @@ async function startMultiDaemon(opts = {}) {
   app.post("/api/context-inject", (c) => forward(c, cwdOf, { affinity: "follow" }));
   app.post("/api/statusline", async (c) => {
     const body2 = await c.req.json().catch(() => ({}));
+    const dir = statuslineDir(body2);
+    if (dir !== null) {
+      const d = normPath(dir);
+      const known = listWorkspaceEntries().some((e) => {
+        const root = normPath(e.path);
+        return d === root || d.startsWith(`${root}/`);
+      });
+      if (!known) return c.text("");
+    }
     return c.text(statuslineText(String(body2["session_id"] ?? "")));
   });
   for (const r of records) {
@@ -86886,11 +87060,17 @@ async function startMultiDaemon(opts = {}) {
   const ANCHOR_PULL_INTERVAL_MS = 10 * 60 * 1e3;
   const anchorPullAll = async () => {
     const c = loadConfig();
-    if (!hasCloudCredential(c)) return;
-    const client = cloudNow();
+    if (registryCorrupt()) return;
     for (const r of records) {
       const projectId = r.engine.profile.projectId;
       if (!projectId || !effectiveConsent(c, r.engine.profile).sync) continue;
+      const identity = identityFor(liveWorkspaceEntry(r.entry));
+      if (identity.invalid) {
+        noteIdentityBlock(r.id, r.entry.name, identity);
+        continue;
+      }
+      if (identity.rule !== "workspace-binding" && !hasCloudCredential(c)) continue;
+      const client = cloudForIdentity(identity);
       try {
         const { salt } = await resolveProjectSymbolSalt(client, projectId);
         await pullProjectAnchors(r, client, salt);
@@ -86904,11 +87084,17 @@ async function startMultiDaemon(opts = {}) {
   }, ANCHOR_PULL_INTERVAL_MS);
   const ambientLinkAll = async () => {
     const c = loadConfig();
-    if (!hasCloudCredential(c)) return;
-    const client = cloudNow();
+    if (registryCorrupt()) return;
     for (const r of records) {
       const working = loadProfile(r.root) ?? r.engine.profile;
       if (!effectiveConsent(c, working).sync) continue;
+      const identity = identityFor(liveWorkspaceEntry(r.entry));
+      if (identity.invalid) {
+        noteIdentityBlock(r.id, r.entry.name, identity);
+        continue;
+      }
+      if (identity.rule !== "workspace-binding" && !hasCloudCredential(c)) continue;
+      const client = cloudForIdentity(identity);
       const out2 = await ensureProjectLink(r.root, working, client);
       if (working !== r.engine.profile) adoptLinkFields(r.engine.profile, working);
       if (out2.linked) {
@@ -87296,6 +87482,7 @@ async function startMultiDaemon(opts = {}) {
       }
       const ignore2 = loadClaimIgnorePatterns(globalDir());
       const clientPool = /* @__PURE__ */ new Map();
+      const receiptContexts = /* @__PURE__ */ new Map();
       const poolFor = (identity) => {
         const k = identityKey(identity);
         let c = clientPool.get(k);
@@ -87438,7 +87625,26 @@ async function startMultiDaemon(opts = {}) {
             return res.accepted;
           });
         }
+        const receiptProfile = recordIdentity.profile ?? (cfg2.activeInstallationProfile ? cfg2.installationProfiles[cfg2.activeInstallationProfile] : void 0);
+        let receiptContext = receiptContexts.get(identityKey(recordIdentity));
+        if (!receiptContext) {
+          try {
+            receiptContext = await client.context();
+            receiptContexts.set(identityKey(recordIdentity), receiptContext);
+          } catch (err2) {
+            errors.push(`[${projectName}] instance destination unresolved: ${err2 instanceof Error ? err2.message : String(err2)}`);
+            continue;
+          }
+        }
+        const destinationKey = instanceDestinationKey({
+          workspace: r.id,
+          cloudUrl: opts.cloudUrl ?? receiptProfile?.cloudUrl ?? cfg2.cloudUrl,
+          installationId: receiptContext.context.installation_id ?? receiptContext.identity.credential_id,
+          projectId: project?.projectId,
+          writeTarget: project ? null : receiptContext.context.default_write_target
+        });
         const built = await buildInstanceBatch(r, {
+          destinationKey,
           profile: r.engine.profile,
           daemonVersion: DAEMON_VERSION,
           ignorePatterns: [...ignore2],
@@ -87483,7 +87689,6 @@ async function startMultiDaemon(opts = {}) {
               );
             }
             uploaded += res.accepted;
-            const seq = store.currentIngestSeq();
             const cloudIdByLocal = new Map(
               res.result.nodes.filter((rn) => rn.nodeId).map((rn) => [rn.canonicalId, rn.nodeId])
             );
@@ -87492,6 +87697,7 @@ async function startMultiDaemon(opts = {}) {
               if (rn.decision === "rejected") rejected.set(rn.canonicalId, rn.reason ?? "no reason given");
             }
             const rejectedEdges = res.result.edges.filter((re) => re.decision === "rejected");
+            const edgeReceiptsComplete = rejectedEdges.length === 0 && res.result.edges.length === instances.edges.length;
             if (rejectedEdges.length > 0) {
               const byReason = /* @__PURE__ */ new Map();
               for (const re of rejectedEdges) {
@@ -87522,17 +87728,17 @@ async function startMultiDaemon(opts = {}) {
               const owner = owningStore(id);
               if (!owner) return;
               const fp = refusalFingerprint(reason, owner.n.description);
-              const same = owner.n.attrs["shipRefusedFingerprint"] === fp;
-              const count = same ? Number(owner.n.attrs["shipRefusedCount"] ?? 0) + 1 : 1;
-              if (owner.n.attrs["shipRefusedSinceSeq"] !== void 0) repeat();
+              const same = instanceReceipt(owner.n, destinationKey)["shipRefusedFingerprint"] === fp;
+              const count = same ? Number(instanceReceipt(owner.n, destinationKey)["shipRefusedCount"] ?? 0) + 1 : 1;
+              if (instanceReceipt(owner.n, destinationKey)["shipRefusedSinceSeq"] !== void 0) repeat();
               owner.s.updateNode(id, {
-                attrs: {
-                  ...owner.n.attrs,
-                  ...same && owner.n.attrs["shipRefusedSinceSeq"] !== void 0 ? {} : { shipRefusedSinceSeq: seq },
+                attrs: updateInstanceReceipt(owner.n, destinationKey, {
+                  ...instanceReceipt(owner.n, destinationKey),
+                  ...same && instanceReceipt(owner.n, destinationKey)["shipRefusedSinceSeq"] !== void 0 ? {} : { shipRefusedSinceSeq: owner.s.currentIngestSeq() },
                   shipRefusedCount: count,
                   shipRefusedReason: reason,
                   shipRefusedFingerprint: fp
-                }
+                }, owner.s === store)
               });
               if (same && count === SHIP_TERMINAL_REFUSALS && !isRetryableRefusal(reason)) {
                 nowHeld.push({ id, reason });
@@ -87549,6 +87755,7 @@ async function startMultiDaemon(opts = {}) {
               const owner = owningStore(n.id);
               if (!owner || !["Problem", "Solution", "RootCause"].includes(owner.n.label)) return;
               if (blocked.has(n.id)) return;
+              if (!cloudIdByLocal.has(n.id)) return;
               if (rejected.has(n.id)) return;
               const cloudNodeId = cloudIdByLocal.get(n.id);
               const {
@@ -87557,37 +87764,41 @@ async function startMultiDaemon(opts = {}) {
                 shipRefusedReason: _clearedReason,
                 shipRefusedFingerprint: _clearedFp,
                 ...carried
-              } = owner.n.attrs;
+              } = instanceReceipt(owner.n, destinationKey);
               owner.s.updateNode(n.id, {
-                attrs: {
+                attrs: updateInstanceReceipt(owner.n, destinationKey, {
                   ...carried,
-                  contributedAtSeq: seq,
-                  ...cloudNodeId && cloudNodeId !== n.id ? { cloudNodeId } : {}
-                }
+                  shipRefusedSinceSeq: void 0,
+                  shipRefusedCount: void 0,
+                  shipRefusedReason: void 0,
+                  shipRefusedFingerprint: void 0,
+                  contributedAtSeq: instanceReceiptSequence(n),
+                  cloudNodeId
+                }, owner.s === store)
               });
             });
             await stampBatched(Object.entries(instances.anchorDigests), ([localId, dg]) => {
               const owner = owningStore(localId);
               if (!owner) return;
-              if (rejected.has(localId) || blocked.has(localId)) return;
+              if (!edgeReceiptsComplete || !instanceReceipt(owner.n, destinationKey)["cloudNodeId"] || rejected.has(localId) || blocked.has(localId)) return;
               owner.s.updateNode(localId, {
-                attrs: { ...owner.n.attrs, anchorsContributedDigest: dg }
+                attrs: updateInstanceReceipt(owner.n, destinationKey, { anchorsContributedDigest: dg }, owner.s === store)
               });
             });
             await stampBatched(Object.entries(instances.projectAnchorDigests), ([localId, dg]) => {
               const owner = owningStore(localId);
               if (!owner) return;
-              if (rejected.has(localId) || blocked.has(localId)) return;
+              if (!edgeReceiptsComplete || !instanceReceipt(owner.n, destinationKey)["cloudNodeId"] || rejected.has(localId) || blocked.has(localId)) return;
               owner.s.updateNode(localId, {
-                attrs: { ...owner.n.attrs, projectAnchorsContributedDigest: dg }
+                attrs: updateInstanceReceipt(owner.n, destinationKey, { projectAnchorsContributedDigest: dg }, owner.s === store)
               });
             });
             await stampBatched(Object.entries(instances.semanticEdgeDigests), ([localId, dg]) => {
               const owner = owningStore(localId);
               if (!owner) return;
-              if (rejected.has(localId) || blocked.has(localId)) return;
+              if (!edgeReceiptsComplete || !instanceReceipt(owner.n, destinationKey)["cloudNodeId"] || rejected.has(localId) || blocked.has(localId)) return;
               owner.s.updateNode(localId, {
-                attrs: { ...owner.n.attrs, semanticEdgesContributedDigest: dg }
+                attrs: updateInstanceReceipt(owner.n, destinationKey, { semanticEdgesContributedDigest: dg }, owner.s === store)
               });
             });
             appendPassLedger(r.engine.paths.configDir, "ship", Date.now() - shipStartedAt, {
@@ -88566,9 +88777,10 @@ function consolidationGapMs(lastPassMs, policy) {
 }
 
 // src/claude-statusline.ts
-import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join42 } from "node:path";
-var STATUSLINE_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata install-hooks claude
+import { existsSync as existsSync34, mkdirSync as mkdirSync10, readFileSync as readFileSync35, writeFileSync as writeFileSync26 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { dirname as dirname13, join as join42 } from "node:path";
+var STATUSLINE_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata init / install-hooks claude
 import { readFileSync } from 'node:fs';
 
 try {
@@ -88594,15 +88806,57 @@ function buildStatusLine(port, nodePath, relayPath) {
 function isErrataStatusLine(value) {
   return !!value && typeof value === "object" && typeof value["command"] === "string" && value["command"].includes(STATUSLINE_RELAY_FILE);
 }
-function installStatusLine(settings, root, port, nodePath = process.execPath) {
-  if (settings["statusLine"] !== void 0 && !isErrataStatusLine(settings["statusLine"])) return false;
-  const dir = join42(root, ".claude", "hooks");
-  const relay = join42(dir, STATUSLINE_RELAY_FILE);
-  mkdirSync10(dir, { recursive: true });
-  writeFileSync26(relay, STATUSLINE_RELAY_SOURCE, "utf8");
-  settings["statusLine"] = buildStatusLine(port, nodePath, relay);
+function removeProjectStatusLine(settings) {
+  if (!isErrataStatusLine(settings["statusLine"])) return false;
+  delete settings["statusLine"];
   return true;
 }
+function userClaudeSettingsPath() {
+  const base = process.env["CLAUDE_CONFIG_DIR"] ?? join42(homedir8(), ".claude");
+  return join42(base, "settings.json");
+}
+function ensureUserStatusLine(opts) {
+  const env2 = opts.env ?? process.env;
+  const off = (env2["ERRATA_STATUSLINE"] ?? "").trim().toLowerCase();
+  if (off === "0" || off === "off" || off === "false" || off === "no") return "disabled";
+  const settingsPath = opts.userSettingsPath ?? userClaudeSettingsPath();
+  let settings = {};
+  if (existsSync34(settingsPath)) {
+    try {
+      const parsed = JSON.parse(readFileSync35(settingsPath, "utf8"));
+      if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return "unreadable";
+      settings = parsed;
+    } catch {
+      return "unreadable";
+    }
+  }
+  if (settings["statusLine"] !== void 0 && !isErrataStatusLine(settings["statusLine"])) return "kept-own";
+  const relay = join42(opts.relayDir, STATUSLINE_RELAY_FILE);
+  mkdirSync10(opts.relayDir, { recursive: true });
+  if (!existsSync34(relay) || readFileSync35(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
+    writeFileSync26(relay, STATUSLINE_RELAY_SOURCE, "utf8");
+  }
+  const next = buildStatusLine(opts.port, opts.nodePath ?? process.execPath, relay);
+  if (JSON.stringify(settings["statusLine"]) === JSON.stringify(next)) return "unchanged";
+  settings["statusLine"] = next;
+  mkdirSync10(dirname13(settingsPath), { recursive: true });
+  writeFileSync26(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  return "installed";
+}
+function describeStatusLineOutcome(outcome) {
+  switch (outcome) {
+    case "installed":
+      return "status line: errata recall card in colour (user settings; ERRATA_STATUSLINE=off opts out)";
+    case "unchanged":
+      return "status line: errata recall card already set up";
+    case "kept-own":
+      return "status line: kept your own \u2014 errata's recall card shows inline only";
+    case "disabled":
+      return "status line: skipped (ERRATA_STATUSLINE=off)";
+    case "unreadable":
+      return "status line: skipped \u2014 ~/.claude/settings.json is not valid JSON";
+  }
+}
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "// @inerrata opencode plugin \u2014 errata-managed (errata install-hooks opencode)";
@@ -89009,14 +89263,14 @@ async function cmdInit() {
   if (!skipHooks) {
     console.log("");
     console.log("installing harness hooks...");
-    const { existsSync: existsSync35 } = await import("node:fs");
+    const { existsSync: existsSync36 } = await import("node:fs");
     const { join: join44 } = await import("node:path");
     try {
       await installClaudeHooks(port);
     } catch (err2) {
       console.warn(`  \u26A0\uFE0F  Claude hook install failed: ${err2 instanceof Error ? err2.message : err2}`);
     }
-    if (existsSync35(join44(ROOT, ".cursor"))) {
+    if (existsSync36(join44(ROOT, ".cursor"))) {
       try {
         await installCursorMcpConfig();
       } catch (err2) {
@@ -89118,6 +89372,7 @@ async function cmdStart() {
   await ensureProfile();
   const profile = loadProfile(ROOT);
   if (profile) registerWorkspace(profile, ROOT);
+  if (profile) console.log(`errata: ${ensureStatusLine(resolveHookPort())}`);
   const lockPath = globalDaemonLock();
   const running = isDaemonAlive(lockPath) ? readDaemonLock(lockPath) : null;
   const where = profile ? `${profile.name} (${profile.id})` : ROOT;
@@ -89205,9 +89460,9 @@ async function cmdStatus() {
     console.log(`    stack:     ${profile.stack.join(", ") || "(none)"}`);
     console.log(`    languages: ${profile.languages.join(", ") || "(none)"}`);
   }
-  console.log(`  graph db:  ${existsSync34(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
-  console.log(`  event log: ${existsSync34(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
-  if (existsSync34(paths.castalia)) {
+  console.log(`  graph db:  ${existsSync35(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
+  console.log(`  event log: ${existsSync35(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
+  if (existsSync35(paths.castalia)) {
     try {
       const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src5(), src_exports2));
       const store = openGraphStore2({ path: paths.castalia });
@@ -89437,7 +89692,7 @@ async function cmdWhoami(args2) {
       `note: daemon capture and the MCP server resolve identically; a process with ERRATA_CONFIG_PATH set resolves by rule 1 regardless of binding.`
     ];
     if (args2.includes("--json")) {
-      console.log(JSON.stringify({ path: path2, registered: Boolean(entry), ...identity }, null, 2));
+      console.log(JSON.stringify({ path: path2, registered: Boolean(entry), ...publicWorkspaceIdentity(identity) }, null, 2));
     } else {
       for (const l of lines) console.log(l);
     }
@@ -89840,6 +90095,7 @@ async function cmdLink(args2) {
     process.exitCode = 1;
     return;
   }
+  console.log(ensureStatusLine(resolveHookPort()));
   delete profile.projectLinkDisabled;
   const remote = flag("--remote");
   if (remote) {
@@ -90176,11 +90432,11 @@ function cmdInstallationProfile(args2) {
 }
 async function cmdReview() {
   const paths = workspacePaths(ROOT);
-  if (!existsSync34(paths.reviewQueue)) {
+  if (!existsSync35(paths.reviewQueue)) {
     console.log("(review queue empty)");
     return;
   }
-  const queue = JSON.parse(readFileSync35(paths.reviewQueue, "utf8"));
+  const queue = JSON.parse(readFileSync36(paths.reviewQueue, "utf8"));
   if (queue.length === 0) {
     console.log("(review queue empty)");
     return;
@@ -90851,7 +91107,7 @@ async function gatherRepo(store, ws) {
   };
 }
 async function gatherReportData(generatedAt) {
-  const { existsSync: existsSync35 } = await import("node:fs");
+  const { existsSync: existsSync36 } = await import("node:fs");
   const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src5(), src_exports2));
   const cfg = loadConfig();
   const outbound = cfg.consent.sync ? "auto" : "off";
@@ -90859,7 +91115,7 @@ async function gatherReportData(generatedAt) {
   for (const ws of listWorkspaces()) {
     if (ws.missing) continue;
     const dbPath = workspacePaths(ws.path).castalia;
-    if (!existsSync35(dbPath)) continue;
+    if (!existsSync36(dbPath)) continue;
     let store = null;
     try {
       store = openGraphStore2({ path: dbPath });
@@ -91024,13 +91280,13 @@ async function cmdInstallHooks(args2) {
   }
 }
 async function installOpencodePlugin(port) {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync27 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync36, readFileSync: readFileSync37, writeFileSync: writeFileSync27 } = await import("node:fs");
   const { join: join44 } = await import("node:path");
   const dir = join44(ROOT, ".opencode", "plugin");
-  if (!existsSync35(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync36(dir)) mkdirSync11(dir, { recursive: true });
   const file2 = join44(dir, "inerrata.js");
-  if (existsSync35(file2)) {
-    const head2 = readFileSync36(file2, "utf8").split("\n")[0] ?? "";
+  if (existsSync36(file2)) {
+    const head2 = readFileSync37(file2, "utf8").split("\n")[0] ?? "";
     if (head2.trim() !== OPENCODE_PLUGIN_MARKER) {
       console.error(`refusing to overwrite ${file2}: not an errata-managed plugin (line 1 lacks the marker)`);
       process.exit(2);
@@ -91039,9 +91295,9 @@ async function installOpencodePlugin(port) {
   writeFileSync27(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
   const cfgFile = join44(ROOT, "opencode.json");
   let cfg = { $schema: "https://opencode.ai/config.json" };
-  if (existsSync35(cfgFile)) {
+  if (existsSync36(cfgFile)) {
     try {
-      cfg = JSON.parse(readFileSync36(cfgFile, "utf8"));
+      cfg = JSON.parse(readFileSync37(cfgFile, "utf8"));
     } catch {
       console.error(`refusing to touch invalid JSON at ${cfgFile} \u2014 fix it and re-run`);
       process.exit(2);
@@ -91071,16 +91327,23 @@ function errataMcpInvocation() {
   const { cmd: cmd2, args: args2 } = selfArgv("mcp");
   return { command: cmd2, args: args2 };
 }
+function ensureStatusLine(port) {
+  try {
+    return describeStatusLineOutcome(ensureUserStatusLine({ port, relayDir: globalDir() }));
+  } catch (err2) {
+    return `status line: not installed (${err2 instanceof Error ? err2.message : err2})`;
+  }
+}
 async function installClaudeHooks(port) {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync27 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync36, readFileSync: readFileSync37, writeFileSync: writeFileSync27 } = await import("node:fs");
   const { join: join44 } = await import("node:path");
   const dir = join44(ROOT, ".claude");
-  if (!existsSync35(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync36(dir)) mkdirSync11(dir, { recursive: true });
   const file2 = join44(dir, "settings.json");
   let settings = {};
-  if (existsSync35(file2)) {
+  if (existsSync36(file2)) {
     try {
-      settings = JSON.parse(readFileSync36(file2, "utf8"));
+      settings = JSON.parse(readFileSync37(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -91127,18 +91390,10 @@ async function installClaudeHooks(port) {
     dropErrata(list);
     list.push({ hooks: [{ type: "command", command: injectCmd }] });
   }
-  const { homedir: homedir8 } = await import("node:os");
-  let userStatusLine;
-  try {
-    userStatusLine = JSON.parse(readFileSync36(join44(homedir8(), ".claude", "settings.json"), "utf8"))["statusLine"];
-  } catch {
-  }
-  const statusLineInstalled = (userStatusLine === void 0 || isErrataStatusLine(userStatusLine)) && installStatusLine(settings, ROOT, port);
+  removeProjectStatusLine(settings);
   writeFileSync27(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code hooks \u2192 ${file2}`);
-  console.log(
-    statusLineInstalled ? "  status line: errata recall card in colour (daemon env ERRATA_RECALL_CARD=off hides the cards)" : "  status line: kept your own \u2014 errata's recall card shows inline only"
-  );
+  console.log(`  ${ensureStatusLine(port)}`);
   await installClaudeMcpConfig();
   const claudeMd = join44(ROOT, "CLAUDE.md");
   const recall = writeManagedBlock(claudeMd, { body: RECALL_FIRST_BLOCK });
@@ -91152,15 +91407,15 @@ async function installClaudeHooks(port) {
   console.log(`  endpoint: http://127.0.0.1:${port}/api/hook`);
 }
 async function installClaudeMcpConfig() {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync27 } = await import("node:fs");
-  const { join: join44, dirname: dirname13 } = await import("node:path");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync36, readFileSync: readFileSync37, writeFileSync: writeFileSync27 } = await import("node:fs");
+  const { join: join44, dirname: dirname14 } = await import("node:path");
   const file2 = join44(ROOT, ".mcp.json");
-  const dir = dirname13(file2);
-  if (!existsSync35(dir)) mkdirSync11(dir, { recursive: true });
+  const dir = dirname14(file2);
+  if (!existsSync36(dir)) mkdirSync11(dir, { recursive: true });
   let cfg = {};
-  if (existsSync35(file2)) {
+  if (existsSync36(file2)) {
     try {
-      cfg = JSON.parse(readFileSync36(file2, "utf8"));
+      cfg = JSON.parse(readFileSync37(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -91174,15 +91429,15 @@ async function installClaudeMcpConfig() {
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses / show / similar`);
 }
 async function installCursorMcpConfig() {
-  const { mkdirSync: mkdirSync11, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync27 } = await import("node:fs");
+  const { mkdirSync: mkdirSync11, existsSync: existsSync36, readFileSync: readFileSync37, writeFileSync: writeFileSync27 } = await import("node:fs");
   const { join: join44 } = await import("node:path");
   const dir = join44(ROOT, ".cursor");
-  if (!existsSync35(dir)) mkdirSync11(dir, { recursive: true });
+  if (!existsSync36(dir)) mkdirSync11(dir, { recursive: true });
   const file2 = join44(dir, "mcp.json");
   let cfg = {};
-  if (existsSync35(file2)) {
+  if (existsSync36(file2)) {
     try {
-      cfg = JSON.parse(readFileSync36(file2, "utf8"));
+      cfg = JSON.parse(readFileSync37(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);