@inerrata-corporation/errata 2.0.9 → 2.0.11

package/consolidate-worker.mjs

@@ -15351,7 +15351,7 @@ function anchorLabelAttrs(attrs) {
     ...typeof line === "number" && Number.isInteger(line) && line >= 1 && line <= 1e7 ? { labelLine: line } : {}
   };
 }
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, FILE_ANCHOR_QNAME, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, FILE_ANCHOR_QNAME, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, TRIAGE_DISCRIMINATOR_MAX_LENGTH, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15470,6 +15470,7 @@ var init_wire = __esm({
     FILE_ANCHOR_QNAME = "";
     ANCHOR_LABEL_PATH_RE = /^(?![/])(?![A-Za-z]:)(?!(?:.*\/)?\.\.(?:\/|$))[^\x00-\x1f\x7f\\`]{1,512}$/;
     ANCHOR_LABEL_QNAME_RE = /^[^\x00-\x1f\x7f`]{1,256}$/;
+    TRIAGE_DISCRIMINATOR_MAX_LENGTH = 2e3;
     CastaliaIngestEdgeSchema = external_exports.object({
       fromCanonicalId: external_exports.string().min(6).max(160),
       toCanonicalId: external_exports.string().min(6).max(160),
@@ -15480,6 +15481,8 @@ var init_wire = __esm({
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
         perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** Scrubbed diagnostic check for a triage route, re-scanned at the cloud door. */
+        discriminator: external_exports.string().trim().min(1).max(TRIAGE_DISCRIMINATOR_MAX_LENGTH).optional(),
         /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
          *  witnessed against. Both opaque — the observing checkout's HEAD sha and
          *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible
@@ -18216,6 +18219,15 @@ function generalize(text, opts = {}) {
 // src/instance-ingest.ts
 init_src();
 
+// src/instance-receipts.ts
+function receiptMap(attrs) {
+  const value = attrs["instanceReceipts"];
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function instanceReceipt(n, destination) {
+  return destination ? receiptMap(n.attrs)[destination] ?? {} : n.attrs;
+}
+
 // src/contribution-ready.ts
 function cosine2(a, b) {
   if (a.length === 0 || a.length !== b.length) return 0;
@@ -19085,8 +19097,8 @@ function stripCodebaseScope(scope) {
   delete s["codebase"];
   return s;
 }
-function contributedWireId(n) {
-  const cloudId = n.attrs["cloudNodeId"];
+function contributedWireId(n, destinationKey) {
+  const cloudId = instanceReceipt(n, destinationKey)["cloudNodeId"];
   return isMembraneSaltedId(cloudId) ? cloudId : n.id;
 }
 var WIRE_CANONICAL_ID_MIN = 6;
@@ -19230,10 +19242,26 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     fileRefsSubstituted: 0,
     fileRefLexiconMisses: 0
   };
+  const sharedCauses = /* @__PURE__ */ new Map();
+  const causalQueue = store.findNodesByLabel("Problem").filter(
+    (n) => n.attrs["source"] !== "cloud" && n.attrs["resolvedAs"] !== PROBLEM_RESOLUTION.FALSE_POSITIVE && !ignored(n.description)
+  ).map((n) => n.id);
+  const causalSeen = new Set(causalQueue);
+  for (let i = 0; i < causalQueue.length; i++) {
+    const id = causalQueue[i];
+    for (const e of [...store.outEdges(id, ["CAUSED_BY"]), ...opts.sharedStore?.outEdges(id, ["CAUSED_BY"]) ?? []]) {
+      if (causalSeen.has(e.to)) continue;
+      causalSeen.add(e.to);
+      const cause = nodeOf(e.to);
+      if (!cause || cause.label !== "RootCause" || cause.attrs["source"] === "cloud" || ignored(cause.description)) continue;
+      sharedCauses.set(cause.id, cause);
+      causalQueue.push(cause.id);
+    }
+  }
   for (const label of INSTANCE_LABELS) {
     const ref = [];
     includedByLabel.set(label, ref);
-    const population = label === "RootCause" && opts.sharedStore ? [...store.findNodesByLabel(label), ...opts.sharedStore.findNodesByLabel(label)] : store.findNodesByLabel(label);
+    const population = label === "RootCause" && opts.sharedStore ? [...store.findNodesByLabel(label), ...sharedCauses.values()] : store.findNodesByLabel(label);
     for (const n of population) {
       if (seen.has(n.id)) continue;
       if (walked.has(n.id)) continue;
@@ -19251,18 +19279,18 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         composition.ignored++;
         continue;
       }
-      const contributedAtSeq = n.attrs["contributedAtSeq"];
+      const contributedAtSeq = instanceReceipt(n, opts.destinationKey)["contributedAtSeq"];
       if (typeof contributedAtSeq === "number" && (n.lastReinforcedAtSeq ?? 0) <= contributedAtSeq) {
         composition.watermarked++;
         anchorSources.add(n.id);
-        semanticEndpoints.set(n.id, contributedWireId(n));
+        semanticEndpoints.set(n.id, contributedWireId(n, opts.destinationKey));
         continue;
       }
       if (label === "Solution" && n.description.startsWith(AUTO_MINT_PREFIX)) {
         composition.autoMint++;
         continue;
       }
-      if (isTerminallyRefused(n)) {
+      if (isTerminallyRefused({ ...n, attrs: instanceReceipt(n, opts.destinationKey) })) {
         composition.terminalRefused++;
         continue;
       }
@@ -19321,9 +19349,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     }
     const dg = digest(targets.map(({ e, wireId }) => `${e.type}>${wireId}`).sort());
     const sourceNode = nodeOf(sourceId);
-    if (sourceNode?.attrs["anchorsContributedDigest"] === dg) continue;
+    if ((sourceNode && instanceReceipt(sourceNode, opts.destinationKey)["anchorsContributedDigest"]) === dg) continue;
     anchorDigests[sourceId] = dg;
-    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode);
+    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode, opts.destinationKey);
     for (const { e, t, wireId } of targets) {
       const reject = unshippableReason(wireId, t.label);
       if (reject) {
@@ -19352,7 +19380,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     for (const sourceId of anchorSources) {
       const source = nodeOf(sourceId);
       if (!source) continue;
-      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source);
+      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source, opts.destinationKey);
       const planned = [];
       for (const e of store.outEdges(sourceId, ["ANCHORED_AT"])) {
         const target = nodeOf(e.to);
@@ -19387,7 +19415,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       const dg = digest(
         planned.map(({ symId, wireAttrs }) => `ANCHORED_AT>${symId}>${JSON.stringify(wireAttrs)}`).sort()
       );
-      if (source.attrs["projectAnchorsContributedDigest"] === dg) continue;
+      if (instanceReceipt(source, opts.destinationKey)["projectAnchorsContributedDigest"] === dg) continue;
       projectAnchorDigests[sourceId] = dg;
       for (const { e, target, symId, wireAttrs } of planned) {
         if (!contextSeen.has(symId)) {
@@ -19433,7 +19461,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     if (outs.length === 0) continue;
     const dg = digest(outs.map(({ e, wireTo }) => `${e.type}>${wireTo}`).sort());
     const owner = nodeOf(sourceId);
-    const digestSkip = owner?.attrs["semanticEdgesContributedDigest"] === dg;
+    const digestSkip = (owner && instanceReceipt(owner, opts.destinationKey)["semanticEdgesContributedDigest"]) === dg;
     if (!digestSkip) semanticEdgeDigests[sourceId] = dg;
     for (const { e, wireTo } of outs) {
       if (digestSkip && !shippedById.has(e.to)) continue;
@@ -19490,7 +19518,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   for (const wn of nodes) {
     if (wn.label !== "RootCause" && wn.label !== "Solution") continue;
     const src = nodeOf(wn.id);
-    if (typeof src?.attrs["contributedAtSeq"] === "number") continue;
+    if (src && typeof instanceReceipt(src, opts.destinationKey)["contributedAtSeq"] === "number") continue;
     if (bindingEndpoints.has(wn.id)) continue;
     heldOrphans.add(wn.id);
   }
@@ -19568,6 +19596,7 @@ function buildDrainInstances(store, sharedStore, input) {
     ...input.includePackages !== void 0 ? { includePackages: input.includePackages } : {},
     workspaceRoot: input.workspaceRoot,
     sharedStore,
+    destinationKey: input.destinationKey,
     onComposition: (c) => {
       composition = c;
     },

package/errata.mjs

@@ -15732,6 +15732,13 @@ function isSeedProvenance(source) {
 function isAnchorLabelKind(kind) {
   return typeof kind === "string" && ANCHOR_LABEL_KINDS.includes(kind);
 }
+function triageDiscriminatorAttrs(type, attrs) {
+  if (!["CONFIRMS", "INDICATES", "ROUTES_TO"].includes(type)) return {};
+  const value = attrs?.["discriminator"];
+  if (typeof value !== "string") return {};
+  const test = value.trim();
+  return test && test.length <= TRIAGE_DISCRIMINATOR_MAX_LENGTH && !(test.startsWith("<") && test.endsWith(">")) ? { discriminator: test } : {};
+}
 function anchorVersionAttrs(attrs) {
   if (!attrs) return {};
   const commit = attrs["observedAtCommit"];
@@ -15792,7 +15799,7 @@ function summarizeIngestResult(r) {
     ...r.patternReconciliation ? { patternReconciliation: r.patternReconciliation } : {}
   };
 }
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, FILE_ANCHOR_QNAME, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, ANCHOR_LABEL_KEYS, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, QUARANTINE_EXTRACTION_SOURCE_PREFIX, MAX_NODES_PER_PAYLOAD, MAX_EDGES_PER_PAYLOAD, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, FILE_ANCHOR_QNAME, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, ANCHOR_LABEL_KEYS, TRIAGE_DISCRIMINATOR_MAX_LENGTH, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15915,6 +15922,7 @@ var init_wire = __esm({
     ANCHOR_LABEL_PATH_RE = /^(?![/])(?![A-Za-z]:)(?!(?:.*\/)?\.\.(?:\/|$))[^\x00-\x1f\x7f\\`]{1,512}$/;
     ANCHOR_LABEL_QNAME_RE = /^[^\x00-\x1f\x7f`]{1,256}$/;
     ANCHOR_LABEL_KEYS = ["labelRelPath", "labelQname", "labelKind", "labelLine"];
+    TRIAGE_DISCRIMINATOR_MAX_LENGTH = 2e3;
     CastaliaIngestEdgeSchema = external_exports.object({
       fromCanonicalId: external_exports.string().min(6).max(160),
       toCanonicalId: external_exports.string().min(6).max(160),
@@ -15925,6 +15933,8 @@ var init_wire = __esm({
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
         perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** Scrubbed diagnostic check for a triage route, re-scanned at the cloud door. */
+        discriminator: external_exports.string().trim().min(1).max(TRIAGE_DISCRIMINATOR_MAX_LENGTH).optional(),
         /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
          *  witnessed against. Both opaque — the observing checkout's HEAD sha and
          *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible
@@ -16827,6 +16837,7 @@ __export(src_exports, {
   TAXONOMY_EDGES: () => TAXONOMY_EDGES,
   TOOL_KINDS: () => TOOL_KINDS,
   TRANSFER_EDGES: () => TRANSFER_EDGES,
+  TRIAGE_DISCRIMINATOR_MAX_LENGTH: () => TRIAGE_DISCRIMINATOR_MAX_LENGTH,
   TRIAGE_EDGES: () => TRIAGE_EDGES,
   TRUTH_KIND: () => TRUTH_KIND,
   UnregisteredGraphEventError: () => UnregisteredGraphEventError,
@@ -16910,6 +16921,7 @@ __export(src_exports, {
   summaryRejectionReason: () => summaryRejectionReason,
   toCloudAttrs: () => toCloudAttrs,
   toolCanonicalId: () => toolCanonicalId,
+  triageDiscriminatorAttrs: () => triageDiscriminatorAttrs,
   unregisteredGraphEventKeys: () => unregisteredGraphEventKeys,
   validateCastaliaPayload: () => validateCastaliaPayload,
   versionlessPurl: () => versionlessPurl,
@@ -22620,7 +22632,8 @@ function pendingDiscriminators(l2, opts = {}) {
       const perContext = e.attrs["perContext"] ?? {};
       const global2 = perContext[TRIAGE_GLOBAL_BUCKET] ?? {};
       const observations = Number(global2.confirmed ?? 0);
-      const sources = new Set(global2.contributors ?? []).size;
+      const inferred = new Set(global2.inferredContributors ?? []);
+      const sources = new Set((global2.contributors ?? []).filter((id) => !inferred.has(id))).size;
       if (sources < minSources || observations < minObservations) continue;
       out2.push({ route: e.id, presenting: triage.description, cause: "", sources, observations, causeId: e.to });
     }
@@ -22638,7 +22651,7 @@ function markDiscriminatorAsked(l2, routeIds, ts) {
   }
 }
 function promoteRouteWithDiscriminator(l2, routeId, discriminator, ts, source) {
-  const test = discriminator.trim();
+  const test = triageDiscriminatorAttrs("CONFIRMS", { discriminator }).discriminator;
   if (!test) return false;
   if (isUnfilledPlaceholder(test)) return false;
   const existing = l2.getEdge(routeId);
@@ -22740,9 +22753,12 @@ function parseTriageFences(text) {
   return out2;
 }
 function harvestTriageFences(l2, text, opts) {
+  const seen = [...text.matchAll(/```errata-triage[^\n]*\n([\s\S]*?)```/g)].length;
   let recorded = 0;
   let promoted = 0;
   for (const f of parseTriageFences(text)) {
+    if ([f.presenting, f.cause, f.test, f.fix, f.route].some((value) => value && isUnfilledPlaceholder(value))) continue;
+    if (f.test && !triageDiscriminatorAttrs("CONFIRMS", { discriminator: f.test }).discriminator) continue;
     if (f.route && f.test) {
       if (promoteRouteWithDiscriminator(l2, f.route.trim(), f.test, opts.ts, opts.contributor)) promoted++;
       continue;
@@ -22778,7 +22794,7 @@ function harvestTriageFences(l2, text, opts) {
     }
     recorded++;
   }
-  return { recorded, promoted };
+  return { seen, recorded, promoted, rejected: seen - recorded - promoted };
 }
 var COOCCUR_BONUS, routeEdgeId, ROUTE_EDGE_TYPES, routeTypeFor, isRouterRoute, INDUCTED_MARK, DRIFT_VALUES;
 var init_triage2 = __esm({
@@ -24396,7 +24412,7 @@ function renderSnapshot(s) {
   lines.push("");
   lines.push("### \u270D\uFE0F CAPTURE PROTOCOL \u2014 tags are the record");
   lines.push(
-    "errata records ONLY inline tags: `[!one line]` for every problem you state, `(fix:[id])` when your edit fixed a shown problem, and to JUDGE a prior shown below \u2014 `(confirm:[id])` if it held, `(refute:[id] why)` if it's wrong or didn't hold. Untagged prose is silently lost \u2014 tag as you write (no fences), we filter downstream."
+    "For problems and fixes, errata records inline tags: `[!one line]` for every problem you state, `(fix:[id])` when your edit fixed a shown problem, and to JUDGE a prior shown below \u2014 `(confirm:[id])` if it held, `(refute:[id] why)` if it's wrong or didn't hold. Untagged prose is silently lost \u2014 tag as you write. Requested errata-* answer blocks keep their fences; put them in your turn-final reply."
   );
   lines.push("");
   lines.push(SEARCH_IMPERATIVE_HEADER);
@@ -24682,7 +24698,7 @@ function renderSnapshot(s) {
     for (const item of reviewItems) {
       if (item.kind === "discriminator") {
         lines.push(
-          `- **A recurring diagnosis is one cheap check from promoting** \u2014 "${item.presenting}" usually turns out to be: ${item.cause}. If (and only if) you KNOW a cheap ante-hoc check that confirms it, answer in your reply:`
+          `- **A recurring diagnosis is one cheap check from promoting** \u2014 "${item.presenting}" usually turns out to be: ${item.cause}. If (and only if) you KNOW a cheap ante-hoc check that confirms it, fill this fenced block in your turn-final reply:`
         );
         lines.push("  ```errata-triage");
         lines.push(`  route: ${item.route}`);
@@ -24690,7 +24706,7 @@ function renderSnapshot(s) {
         lines.push("  ```");
       } else {
         lines.push(
-          `- **Name the principle this cluster of your beliefs generalizes** \u2014 it ships to the collective only once named, and the prose must cover ALL members in one sentence:`
+          `- **Name the principle this cluster of your beliefs generalizes** \u2014 it ships to the collective only once named. Cover ALL members in one sentence; fill this fenced block in your turn-final reply:`
         );
         for (const m of item.members) lines.push(`  - ${m.description}`);
         lines.push("  ```errata-abstraction");
@@ -25196,6 +25212,7 @@ function toWirePayload(batch, runId) {
       attrs: {
         ...typeof e.confidence === "number" ? { confidence: clamp012(e.confidence) } : {},
         ...perContext ? { perContext } : {},
+        ...triageDiscriminatorAttrs(e.type, e.attrs),
         // PJ-anchor-version: the two opaque version stamps ride on anchors only.
         ...e.type === "ANCHORED_AT" ? anchorVersionAttrs(e.attrs) : {},
         // PJ-anchor-labels: readable labels ride only when the producer set the
@@ -25802,6 +25819,7 @@ var init_client = __esm({
         if (q.seed?.length) qs.set("seed", q.seed.join(","));
         if (q.q) qs.set("q", q.q);
         if (q.channel) qs.set("channel", q.channel);
+        if (q.includeTriage) qs.set("includeTriage", "true");
         const publicCtx = process.env["ERRATA_PRIMING_PUBLIC_CONTEXT"];
         const usePublicCtx = Boolean(publicCtx && publicCtx !== "0" && q.channel === "priming");
         const UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -29016,7 +29034,7 @@ function buildAgentInstruction(opts = {}) {
   const signals = opts.signals ?? ["prior", "problem", "domain", "fix", "constraint", "triage", "attempt", "link"];
   const ref = opts.referent ?? "its-handle";
   const token = (s) => s === "problem" ? TAG_EXAMPLE.problem() : s === "constraint" ? TAG_EXAMPLE.constraint() : s === "attempt" ? TAG_EXAMPLE.tried() : s === "domain" ? TAG_EXAMPLE.domain() : s === "link" ? TAG_EXAMPLE.pattern() : s === "verdict" ? TAG_EXAMPLE.confirm(ref) : TAG_EXAMPLE[s](ref);
-  const head2 = `We tag the priors we show you with a short handle like [${opts.handleExample ?? "chokidar-glob"}]. Tags are the ONLY signal recorded \u2014 anything you state but don't tag is silently lost. Weave each tag inline in your prose as you state it (no fences or backticks, no extra calls); tag everything, we filter downstream:`;
+  const head2 = `We tag the priors we show you with a short handle like [${opts.handleExample ?? "chokidar-glob"}]. Untagged prose is silently lost. Put each tag inline in prose (no fences or backticks). Requested errata-* answer blocks are the exception: keep their fences in your turn-final reply. Tag everything, we filter downstream:`;
   const tail = "Mid-turn text (between tool calls) can be dropped by the harness \u2014 RESTATE every tag in your turn-final message; the final message is what reliably survives \u2014 EXCEPT one already shown above with an id: that is captured, so cite `[its-handle]` rather than retyping it (drift mints a duplicate).";
   return [
     head2,
@@ -29506,6 +29524,18 @@ function resolveWorkspaceIdentity(cfg, entry, env2 = process.env) {
 function identityKey(id) {
   return id.profileName ?? "@default";
 }
+function publicWorkspaceIdentity(identity) {
+  return {
+    profileName: identity.profileName,
+    rule: identity.rule,
+    invalid: identity.invalid,
+    reason: identity.reason,
+    profile: identity.profile ? {
+      installationId: identity.profile.installationId,
+      cloudUrl: identity.profile.cloudUrl
+    } : null
+  };
+}
 function blockedCloudClient(reason) {
   return new Proxy(
     {},
@@ -41888,7 +41918,7 @@ function takeDiscriminatorNudge(path2) {
     return [
       `\u26A1 errata \u2014 a known wrong-door is one field from ranking: "${top.presenting.slice(0, 90)}"`,
       `  usually turns out to be: ${top.cause.slice(0, 90)}  (seen ${top.observations}x)`,
-      "  Know a CHEAP check that confirms it? Answer in-flow \u2014 it promotes the route so the",
+      "  Know a CHEAP check that confirms it? Fill this fenced block in your turn-final reply so the",
       "  next agent gets it first. Only if you actually know one: a guessed test ranks first",
       "  and misroutes everyone after you.",
       "  ```errata-triage",
@@ -43405,7 +43435,7 @@ var init_mcp = __esm({
               pending,
               ...pending.length > 0 ? {
                 howToAnswer: [
-                  "For each route you know a cheap test for, emit an errata-triage fence",
+                  "For each route you know a cheap test for, emit an errata-triage fence in your turn-final reply",
                   "carrying its `route` id and the `test` \u2014 no presenting/cause needed, the",
                   "route id identifies both endpoints. Attaching a test does NOT count as",
                   "another sighting, so it cannot inflate the route's evidence.",
@@ -74132,18 +74162,21 @@ function readTailWithLosses(path2, maxBytes) {
   try {
     fd = openSync(path2, "r");
   } catch {
-    return { text: "", bytesUnreachable: 0, ioFailed: true };
+    return { text: "", bytesUnreachable: 0, parseStartByte: 0, ioFailed: true };
   }
   try {
     const size = fstatSync(fd).size;
     const start2 = Math.max(0, size - maxBytes);
     const len = size - start2;
-    if (len <= 0) return { text: "", bytesUnreachable: 0, ioFailed: false };
+    if (len <= 0) return { text: "", bytesUnreachable: 0, parseStartByte: 0, ioFailed: false };
     const buf = Buffer.allocUnsafe(len);
     readSync(fd, buf, 0, len, start2);
-    return { text: buf.toString("utf8"), bytesUnreachable: start2, ioFailed: false };
+    const text = buf.toString("utf8");
+    const firstNewline = buf.indexOf(10);
+    const parseStartByte = firstNewline < 0 ? start2 : start2 + firstNewline + 1 - Buffer.byteLength(buf.subarray(0, firstNewline + 1).toString("utf8"));
+    return { text, bytesUnreachable: start2, parseStartByte, ioFailed: false };
   } catch {
-    return { text: "", bytesUnreachable: 0, ioFailed: true };
+    return { text: "", bytesUnreachable: 0, parseStartByte: 0, ioFailed: true };
   } finally {
     closeSync(fd);
   }
@@ -74207,7 +74240,7 @@ function isUserTurnBoundary(obj) {
 }
 function readAssistantTurnsWithLosses(transcriptPath, includeThinking = true, maxBytes = 2e6) {
   const tail = readTailWithLosses(transcriptPath, maxBytes);
-  const parsed = parseAssistantTurns(tail.text, includeThinking, false);
+  const parsed = parseAssistantTurns(tail.text, includeThinking, false, tail.parseStartByte);
   return {
     turns: parsed.turns,
     losses: {
@@ -74219,7 +74252,8 @@ function readAssistantTurnsWithLosses(transcriptPath, includeThinking = true, ma
 }
 function readAssistantTurnsFrom(transcriptPath, fromByte, includeThinking = true, maxBytes) {
   const { text, nextOffset, more, ioFailed } = readFrom(transcriptPath, fromByte, maxBytes);
-  const parsed = parseAssistantTurns(text, includeThinking, fromByte > 0);
+  const startByte = fromByte > 0 && fromByte <= nextOffset ? fromByte : 0;
+  const parsed = parseAssistantTurns(text, includeThinking, fromByte > 0, startByte);
   return {
     turns: parsed.turns,
     nextOffset,
@@ -74255,10 +74289,10 @@ function detectHostHarness(raw2) {
   }
   return "claude_code";
 }
-function parseAssistantTurns(raw2, includeThinking, skipFirstLineParseFailure = false) {
+function parseAssistantTurns(raw2, includeThinking, skipFirstLineParseFailure = false, startByte = 0) {
   if (!raw2) return { turns: [], parseFailures: 0 };
   const harness = detectHostHarness(raw2);
-  if (harness === "codex") return parseCodexAssistantTurns(raw2, skipFirstLineParseFailure);
+  if (harness === "codex") return parseCodexAssistantTurns(raw2, skipFirstLineParseFailure, startByte);
   if (harness === "gemini") return parseGeminiAssistantTurns(raw2, skipFirstLineParseFailure);
   if (harness === "opencode") return parseOpencodeAssistantTurns(raw2, skipFirstLineParseFailure);
   return parseClaudeAssistantTurns(raw2, includeThinking, skipFirstLineParseFailure);
@@ -74349,13 +74383,16 @@ function parseGeminiAssistantTurns(raw2, skipFirstLineParseFailure = false) {
   const turns = [...byId.entries()].sort((a, b) => a[1].order - b[1].order).map(([uuid3, v]) => ({ uuid: uuid3, text: v.text, hostHarness: "gemini" }));
   return { turns, parseFailures };
 }
-function parseCodexAssistantTurns(raw2, skipFirstLineParseFailure = false) {
+function parseCodexAssistantTurns(raw2, skipFirstLineParseFailure = false, startByte = 0) {
   const turns = [];
-  const lines = raw2.split(/\r?\n/);
+  const lines = raw2.split("\n");
   let parseFailures = 0;
+  let nextByte = startByte;
   for (let i2 = 0; i2 < lines.length; i2++) {
     const line = lines[i2];
-    if (!line) continue;
+    const lineByte = nextByte;
+    nextByte += Buffer.byteLength(line ?? "", "utf8") + 1;
+    if (!line?.trim()) continue;
     let obj;
     try {
       obj = JSON.parse(line);
@@ -74374,7 +74411,9 @@ function parseCodexAssistantTurns(raw2, skipFirstLineParseFailure = false) {
     }
     if (parts2.length === 0) continue;
     turns.push({
-      uuid: typeof payload["id"] === "string" ? payload["id"] : `codex-${i2}`,
+      // Slice-local line numbers repeat on every Stop. Position distinguishes
+      // identical messages; the digest distinguishes a replaced row at that position.
+      uuid: typeof payload["id"] === "string" && payload["id"].length > 0 ? payload["id"] : `codex-${lineByte}-${createHash14("sha256").update(line.trimEnd()).digest("hex")}`,
       text: parts2.join("\n\n"),
       hostHarness: "codex"
     });
@@ -74551,6 +74590,7 @@ function readCodexRolloutCwd(path2) {
     }
   }
 }
+var codexRolloutActivity = /* @__PURE__ */ new Map();
 function codexRolloutsForCwd(cwd, opts = {}) {
   const sinceMs = opts.sinceMs ?? 0;
   const limit = opts.limit ?? 25;
@@ -74558,7 +74598,14 @@ function codexRolloutsForCwd(cwd, opts = {}) {
   const owner = checkoutRootOf(cwd);
   const owners = /* @__PURE__ */ new Map();
   for (const root of codexSessionRoots(opts.env, opts.home)) {
-    if (!existsSync16(root)) continue;
+    if (!existsSync16(root)) {
+      codexRolloutActivity.delete(root);
+      continue;
+    }
+    const activity = codexRolloutActivity.get(root) ?? /* @__PURE__ */ new Map();
+    codexRolloutActivity.set(root, activity);
+    const observed = /* @__PURE__ */ new Set();
+    const scannedAt = Date.now();
     const stack = [{ dir: root, depth: 0 }];
     while (stack.length > 0) {
       const { dir, depth } = stack.pop();
@@ -74582,7 +74629,15 @@ function codexRolloutsForCwd(cwd, opts = {}) {
         }
         if (depth < 3) continue;
         if (!name2.startsWith("rollout-") || !name2.endsWith(".jsonl")) continue;
-        if (st.mtimeMs < sinceMs) continue;
+        observed.add(full);
+        const previous = activity.get(full);
+        const activityAtMs = Math.max(
+          st.mtimeMs,
+          previous?.activeAt ?? 0,
+          previous && previous.size !== st.size ? scannedAt : 0
+        );
+        activity.set(full, { size: st.size, activeAt: activityAtMs });
+        if (activityAtMs < sinceMs) continue;
         const sessionCwd = readCodexRolloutCwd(full);
         if (sessionCwd === null) continue;
         let sessionOwner = owners.get(sessionCwd);
@@ -74591,11 +74646,12 @@ function codexRolloutsForCwd(cwd, opts = {}) {
           owners.set(sessionCwd, sessionOwner);
         }
         if (sessionOwner !== owner) continue;
-        out2.push({ path: full, sessionId: `codex:${basename5(name2, ".jsonl")}`, mtimeMs: st.mtimeMs });
+        out2.push({ path: full, sessionId: `codex:${basename5(name2, ".jsonl")}`, mtimeMs: st.mtimeMs, activityAtMs });
       }
     }
+    for (const path2 of activity.keys()) if (!observed.has(path2)) activity.delete(path2);
   }
-  out2.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  out2.sort((a, b) => (b.activityAtMs ?? b.mtimeMs) - (a.activityAtMs ?? a.mtimeMs));
   return out2.slice(0, limit);
 }
 function geminiSessionRoots(env2 = process.env, home = homedir4()) {
@@ -76946,21 +77002,31 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
     stack: profile.stack,
     domains: profile.domains,
     kinds: ["Problem"],
+    includeTriage: true,
     limit
   });
   const byId = new Map(res.nodes.map((n) => [n.id, n]));
   const now = Date.now();
   let merged = 0;
+  const landedTriages = /* @__PURE__ */ new Set();
   const landNode = (id) => {
-    if (shared.getNode(id)) return true;
+    const existing = shared.getNode(id);
     const n = byId.get(id);
+    if (existing) {
+      if (n && existing.attrs["source"] === "cloud") {
+        shared.updateNode(id, { attrs: { ...existing.attrs, ...n.attrs, source: "cloud" }, lastUpdatedAt: now });
+      }
+      return true;
+    }
     if (!n) return false;
     shared.mergeNode({ ...n, extractionSource: "bko-inferred", embedding: [], attrs: { ...n.attrs, source: "cloud" } });
     return true;
   };
   for (const edge2 of res.edges) {
     if (edge2.type !== "CONFIRMS" && edge2.type !== "ROUTES_TO") continue;
+    if (!triageDiscriminatorAttrs(edge2.type, edge2.attrs).discriminator) continue;
     if (!landNode(edge2.from) || !landNode(edge2.to)) continue;
+    landedTriages.add(edge2.from);
     const cloudAttrs = { ...edge2.attrs, source: "cloud", provisional: false };
     const existing = shared.getEdge(edge2.id);
     if (existing && existing.type === "CONFIRMS") {
@@ -76971,6 +77037,11 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
     }
     merged++;
   }
+  for (const edge2 of res.edges) {
+    if (edge2.type !== "TRIAGED_BY" || !landedTriages.has(edge2.to)) continue;
+    if (!landNode(edge2.from)) continue;
+    shared.mergeEdge({ ...edge2, attrs: { ...edge2.attrs, source: "cloud" } });
+  }
   return merged;
 }
 
@@ -80267,7 +80338,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.9" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.11" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -81153,6 +81224,9 @@ function createWorkspaceEngine(opts) {
     let resolved = 0;
     let abstracted = 0;
     let triaged = 0;
+    let triageFencesSeen = 0;
+    let triagePromoted = 0;
+    let triageFencesRejected = 0;
     let priorEdges = 0;
     let exposureShown = 0;
     let exposureEvicted = 0;
@@ -81216,11 +81290,16 @@ function createWorkspaceEngine(opts) {
           console.warn("[errata] abstraction harvest failed:", err2);
         }
         try {
-          triaged += harvestTriageFences(opts.sharedStore, turn.text, {
+          const triage = harvestTriageFences(opts.sharedStore, turn.text, {
             context: { stack: profile.stack, domain: profile.domains[0] },
             contributor: sessionId,
             ts: t
-          }).recorded;
+          });
+          triaged += triage.recorded;
+          triageFencesSeen += triage.seen;
+          triagePromoted += triage.promoted;
+          triageFencesRejected += triage.rejected;
+          if (triage.recorded > 0 || triage.promoted > 0) contextDirty = true;
         } catch (err2) {
           console.warn("[errata] triage harvest failed:", err2);
         }
@@ -81896,8 +81975,8 @@ function createWorkspaceEngine(opts) {
     if (abstracted > 0) {
       console.log(`[errata] abstraction: ${abstracted} principle(s) distilled from the conversation`);
     }
-    if (triaged > 0) {
-      console.log(`[errata] triage: ${triaged} wrong-door(s) captured from the conversation`);
+    if (triaged > 0 || triagePromoted > 0 || triageFencesRejected > 0) {
+      console.log(`[errata] triage: ${triaged} diagnosis(es), ${triagePromoted} route promotion(s), ${triageFencesRejected} rejected fence(s)`);
     }
     if (processedTurns > 0) {
       appendPassLedger(paths.configDir, "capture", Date.now() - t, {
@@ -81912,6 +81991,9 @@ function createWorkspaceEngine(opts) {
         tagsRestated,
         resolved,
         triaged,
+        triageFencesSeen,
+        triagePromoted,
+        triageFencesRejected,
         priorEdges,
         corroboratedEdges,
         // RG-mark: refute witnesses stamped onto local nodes (the local half of
@@ -82114,6 +82196,7 @@ function createWorkspaceEngine(opts) {
           for (const ref of refs) {
             await yieldToLoop();
             await harvestSession(ref.sessionId, ref.path);
+            lastActivityTs = Math.max(lastActivityTs, ref.activityAtMs ?? ref.mtimeMs);
           }
         } catch {
         }
@@ -82713,6 +82796,40 @@ async function listenServer(fetchFn, port) {
 init_registry();
 init_identity2();
 
+// src/instance-receipts.ts
+import { createHash as createHash16 } from "node:crypto";
+var FIELDS = ["contributedAtSeq", "cloudNodeId", "anchorsContributedDigest", "projectAnchorsContributedDigest", "semanticEdgesContributedDigest", "shipRefusedSinceSeq", "shipRefusedCount", "shipRefusedReason", "shipRefusedFingerprint"];
+function instanceDestinationKey(input) {
+  return createHash16("sha256").update(JSON.stringify([
+    input.workspace,
+    input.cloudUrl.replace(/\/+$/, ""),
+    input.installationId ?? input.profileName ?? "default",
+    input.projectId ?? null,
+    input.writeTarget?.visibility ?? null,
+    input.writeTarget?.org_id ?? null,
+    input.writeTarget?.team_id ?? null
+  ])).digest("hex");
+}
+function receiptMap(attrs) {
+  const value = attrs["instanceReceipts"];
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function instanceReceipt(n, destination) {
+  return destination ? receiptMap(n.attrs)[destination] ?? {} : n.attrs;
+}
+function updateInstanceReceipt(n, destination, patch, mirrorLegacy) {
+  const receipt = { ...instanceReceipt(n, destination), ...patch };
+  const attrs = { ...n.attrs, instanceReceipts: { ...receiptMap(n.attrs), [destination]: receipt } };
+  if (mirrorLegacy) for (const field of FIELDS) {
+    if (field in receipt) attrs[field] = receipt[field];
+    else delete attrs[field];
+  }
+  return attrs;
+}
+function instanceReceiptSequence(n) {
+  return Math.max(n.lastReinforcedAtSeq ?? 0, n.createdAtSeq ?? 0);
+}
+
 // src/multi.ts
 init_dist();
 init_src5();
@@ -83117,8 +83234,8 @@ function compositionCounters(c) {
     ...Object.fromEntries(buckets.map((b) => [`sidecarDrop_${b}`, sidecarDropReasons[b] ?? 0]))
   };
 }
-function contributedWireId(n) {
-  const cloudId = n.attrs["cloudNodeId"];
+function contributedWireId(n, destinationKey) {
+  const cloudId = instanceReceipt(n, destinationKey)["cloudNodeId"];
   return isMembraneSaltedId(cloudId) ? cloudId : n.id;
 }
 var WIRE_CANONICAL_ID_MIN = 6;
@@ -83262,10 +83379,26 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     fileRefsSubstituted: 0,
     fileRefLexiconMisses: 0
   };
+  const sharedCauses = /* @__PURE__ */ new Map();
+  const causalQueue = store.findNodesByLabel("Problem").filter(
+    (n) => n.attrs["source"] !== "cloud" && n.attrs["resolvedAs"] !== PROBLEM_RESOLUTION.FALSE_POSITIVE && !ignored(n.description)
+  ).map((n) => n.id);
+  const causalSeen = new Set(causalQueue);
+  for (let i2 = 0; i2 < causalQueue.length; i2++) {
+    const id = causalQueue[i2];
+    for (const e of [...store.outEdges(id, ["CAUSED_BY"]), ...opts.sharedStore?.outEdges(id, ["CAUSED_BY"]) ?? []]) {
+      if (causalSeen.has(e.to)) continue;
+      causalSeen.add(e.to);
+      const cause = nodeOf(e.to);
+      if (!cause || cause.label !== "RootCause" || cause.attrs["source"] === "cloud" || ignored(cause.description)) continue;
+      sharedCauses.set(cause.id, cause);
+      causalQueue.push(cause.id);
+    }
+  }
   for (const label of INSTANCE_LABELS) {
     const ref = [];
     includedByLabel.set(label, ref);
-    const population = label === "RootCause" && opts.sharedStore ? [...store.findNodesByLabel(label), ...opts.sharedStore.findNodesByLabel(label)] : store.findNodesByLabel(label);
+    const population = label === "RootCause" && opts.sharedStore ? [...store.findNodesByLabel(label), ...sharedCauses.values()] : store.findNodesByLabel(label);
     for (const n of population) {
       if (seen.has(n.id)) continue;
       if (walked.has(n.id)) continue;
@@ -83283,18 +83416,18 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         composition.ignored++;
         continue;
       }
-      const contributedAtSeq = n.attrs["contributedAtSeq"];
+      const contributedAtSeq = instanceReceipt(n, opts.destinationKey)["contributedAtSeq"];
       if (typeof contributedAtSeq === "number" && (n.lastReinforcedAtSeq ?? 0) <= contributedAtSeq) {
         composition.watermarked++;
         anchorSources.add(n.id);
-        semanticEndpoints.set(n.id, contributedWireId(n));
+        semanticEndpoints.set(n.id, contributedWireId(n, opts.destinationKey));
         continue;
       }
       if (label === "Solution" && n.description.startsWith(AUTO_MINT_PREFIX)) {
         composition.autoMint++;
         continue;
       }
-      if (isTerminallyRefused(n)) {
+      if (isTerminallyRefused({ ...n, attrs: instanceReceipt(n, opts.destinationKey) })) {
         composition.terminalRefused++;
         continue;
       }
@@ -83353,9 +83486,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     }
     const dg = digest(targets.map(({ e, wireId }) => `${e.type}>${wireId}`).sort());
     const sourceNode = nodeOf(sourceId);
-    if (sourceNode?.attrs["anchorsContributedDigest"] === dg) continue;
+    if ((sourceNode && instanceReceipt(sourceNode, opts.destinationKey)["anchorsContributedDigest"]) === dg) continue;
     anchorDigests[sourceId] = dg;
-    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode);
+    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode, opts.destinationKey);
     for (const { e, t, wireId } of targets) {
       const reject = unshippableReason(wireId, t.label);
       if (reject) {
@@ -83384,7 +83517,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     for (const sourceId of anchorSources) {
       const source = nodeOf(sourceId);
       if (!source) continue;
-      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source);
+      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source, opts.destinationKey);
       const planned = [];
       for (const e of store.outEdges(sourceId, ["ANCHORED_AT"])) {
         const target = nodeOf(e.to);
@@ -83419,7 +83552,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       const dg = digest(
         planned.map(({ symId, wireAttrs }) => `ANCHORED_AT>${symId}>${JSON.stringify(wireAttrs)}`).sort()
       );
-      if (source.attrs["projectAnchorsContributedDigest"] === dg) continue;
+      if (instanceReceipt(source, opts.destinationKey)["projectAnchorsContributedDigest"] === dg) continue;
       projectAnchorDigests[sourceId] = dg;
       for (const { e, target, symId, wireAttrs } of planned) {
         if (!contextSeen.has(symId)) {
@@ -83465,7 +83598,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     if (outs.length === 0) continue;
     const dg = digest(outs.map(({ e, wireTo }) => `${e.type}>${wireTo}`).sort());
     const owner = nodeOf(sourceId);
-    const digestSkip = owner?.attrs["semanticEdgesContributedDigest"] === dg;
+    const digestSkip = (owner && instanceReceipt(owner, opts.destinationKey)["semanticEdgesContributedDigest"]) === dg;
     if (!digestSkip) semanticEdgeDigests[sourceId] = dg;
     for (const { e, wireTo } of outs) {
       if (digestSkip && !shippedById.has(e.to)) continue;
@@ -83522,7 +83655,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   for (const wn of nodes) {
     if (wn.label !== "RootCause" && wn.label !== "Solution") continue;
     const src = nodeOf(wn.id);
-    if (typeof src?.attrs["contributedAtSeq"] === "number") continue;
+    if (src && typeof instanceReceipt(src, opts.destinationKey)["contributedAtSeq"] === "number") continue;
     if (bindingEndpoints.has(wn.id)) continue;
     heldOrphans.add(wn.id);
   }
@@ -83676,6 +83809,7 @@ function buildDrainInstances(store, sharedStore, input) {
     ...input.includePackages !== void 0 ? { includePackages: input.includePackages } : {},
     workspaceRoot: input.workspaceRoot,
     sharedStore,
+    destinationKey: input.destinationKey,
     onComposition: (c) => {
       composition = c;
     },
@@ -85343,7 +85477,7 @@ async function startHistoryStage(root, input, client, walk11 = {}) {
 
 // src/link-flow.ts
 init_cloud_auth();
-import { createHash as createHash16 } from "node:crypto";
+import { createHash as createHash17 } from "node:crypto";
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { existsSync as existsSync30, writeFileSync as writeFileSync23 } from "node:fs";
 import { join as join38 } from "node:path";
@@ -85637,7 +85771,7 @@ async function loginOAuthLoopback(opts) {
 
 // src/link-flow.ts
 function remoteFingerprint(locator) {
-  return createHash16("sha256").update(locator).digest("hex");
+  return createHash17("sha256").update(locator).digest("hex");
 }
 function isDecision(value) {
   if (!value || typeof value !== "object") return false;
@@ -86944,11 +87078,17 @@ async function startMultiDaemon(opts = {}) {
   const ANCHOR_PULL_INTERVAL_MS = 10 * 60 * 1e3;
   const anchorPullAll = async () => {
     const c = loadConfig();
-    if (!hasCloudCredential(c)) return;
-    const client = cloudNow();
+    if (registryCorrupt()) return;
     for (const r of records) {
       const projectId = r.engine.profile.projectId;
       if (!projectId || !effectiveConsent(c, r.engine.profile).sync) continue;
+      const identity = identityFor(liveWorkspaceEntry(r.entry));
+      if (identity.invalid) {
+        noteIdentityBlock(r.id, r.entry.name, identity);
+        continue;
+      }
+      if (identity.rule !== "workspace-binding" && !hasCloudCredential(c)) continue;
+      const client = cloudForIdentity(identity);
       try {
         const { salt } = await resolveProjectSymbolSalt(client, projectId);
         await pullProjectAnchors(r, client, salt);
@@ -86962,11 +87102,17 @@ async function startMultiDaemon(opts = {}) {
   }, ANCHOR_PULL_INTERVAL_MS);
   const ambientLinkAll = async () => {
     const c = loadConfig();
-    if (!hasCloudCredential(c)) return;
-    const client = cloudNow();
+    if (registryCorrupt()) return;
     for (const r of records) {
       const working = loadProfile(r.root) ?? r.engine.profile;
       if (!effectiveConsent(c, working).sync) continue;
+      const identity = identityFor(liveWorkspaceEntry(r.entry));
+      if (identity.invalid) {
+        noteIdentityBlock(r.id, r.entry.name, identity);
+        continue;
+      }
+      if (identity.rule !== "workspace-binding" && !hasCloudCredential(c)) continue;
+      const client = cloudForIdentity(identity);
       const out2 = await ensureProjectLink(r.root, working, client);
       if (working !== r.engine.profile) adoptLinkFields(r.engine.profile, working);
       if (out2.linked) {
@@ -87354,6 +87500,7 @@ async function startMultiDaemon(opts = {}) {
       }
       const ignore2 = loadClaimIgnorePatterns(globalDir());
       const clientPool = /* @__PURE__ */ new Map();
+      const receiptContexts = /* @__PURE__ */ new Map();
       const poolFor = (identity) => {
         const k = identityKey(identity);
         let c = clientPool.get(k);
@@ -87496,7 +87643,26 @@ async function startMultiDaemon(opts = {}) {
             return res.accepted;
           });
         }
+        const receiptProfile = recordIdentity.profile ?? (cfg2.activeInstallationProfile ? cfg2.installationProfiles[cfg2.activeInstallationProfile] : void 0);
+        let receiptContext = receiptContexts.get(identityKey(recordIdentity));
+        if (!receiptContext) {
+          try {
+            receiptContext = await client.context();
+            receiptContexts.set(identityKey(recordIdentity), receiptContext);
+          } catch (err2) {
+            errors.push(`[${projectName}] instance destination unresolved: ${err2 instanceof Error ? err2.message : String(err2)}`);
+            continue;
+          }
+        }
+        const destinationKey = instanceDestinationKey({
+          workspace: r.id,
+          cloudUrl: opts.cloudUrl ?? receiptProfile?.cloudUrl ?? cfg2.cloudUrl,
+          installationId: receiptContext.context.installation_id ?? receiptContext.identity.credential_id,
+          projectId: project?.projectId,
+          writeTarget: project ? null : receiptContext.context.default_write_target
+        });
         const built = await buildInstanceBatch(r, {
+          destinationKey,
           profile: r.engine.profile,
           daemonVersion: DAEMON_VERSION,
           ignorePatterns: [...ignore2],
@@ -87541,7 +87707,6 @@ async function startMultiDaemon(opts = {}) {
               );
             }
             uploaded += res.accepted;
-            const seq = store.currentIngestSeq();
             const cloudIdByLocal = new Map(
               res.result.nodes.filter((rn) => rn.nodeId).map((rn) => [rn.canonicalId, rn.nodeId])
             );
@@ -87550,6 +87715,7 @@ async function startMultiDaemon(opts = {}) {
               if (rn.decision === "rejected") rejected.set(rn.canonicalId, rn.reason ?? "no reason given");
             }
             const rejectedEdges = res.result.edges.filter((re) => re.decision === "rejected");
+            const edgeReceiptsComplete = rejectedEdges.length === 0 && res.result.edges.length === instances.edges.length;
             if (rejectedEdges.length > 0) {
               const byReason = /* @__PURE__ */ new Map();
               for (const re of rejectedEdges) {
@@ -87580,17 +87746,17 @@ async function startMultiDaemon(opts = {}) {
               const owner = owningStore(id);
               if (!owner) return;
               const fp = refusalFingerprint(reason, owner.n.description);
-              const same = owner.n.attrs["shipRefusedFingerprint"] === fp;
-              const count = same ? Number(owner.n.attrs["shipRefusedCount"] ?? 0) + 1 : 1;
-              if (owner.n.attrs["shipRefusedSinceSeq"] !== void 0) repeat();
+              const same = instanceReceipt(owner.n, destinationKey)["shipRefusedFingerprint"] === fp;
+              const count = same ? Number(instanceReceipt(owner.n, destinationKey)["shipRefusedCount"] ?? 0) + 1 : 1;
+              if (instanceReceipt(owner.n, destinationKey)["shipRefusedSinceSeq"] !== void 0) repeat();
               owner.s.updateNode(id, {
-                attrs: {
-                  ...owner.n.attrs,
-                  ...same && owner.n.attrs["shipRefusedSinceSeq"] !== void 0 ? {} : { shipRefusedSinceSeq: seq },
+                attrs: updateInstanceReceipt(owner.n, destinationKey, {
+                  ...instanceReceipt(owner.n, destinationKey),
+                  ...same && instanceReceipt(owner.n, destinationKey)["shipRefusedSinceSeq"] !== void 0 ? {} : { shipRefusedSinceSeq: owner.s.currentIngestSeq() },
                   shipRefusedCount: count,
                   shipRefusedReason: reason,
                   shipRefusedFingerprint: fp
-                }
+                }, owner.s === store)
               });
               if (same && count === SHIP_TERMINAL_REFUSALS && !isRetryableRefusal(reason)) {
                 nowHeld.push({ id, reason });
@@ -87607,6 +87773,7 @@ async function startMultiDaemon(opts = {}) {
               const owner = owningStore(n.id);
               if (!owner || !["Problem", "Solution", "RootCause"].includes(owner.n.label)) return;
               if (blocked.has(n.id)) return;
+              if (!cloudIdByLocal.has(n.id)) return;
               if (rejected.has(n.id)) return;
               const cloudNodeId = cloudIdByLocal.get(n.id);
               const {
@@ -87615,37 +87782,41 @@ async function startMultiDaemon(opts = {}) {
                 shipRefusedReason: _clearedReason,
                 shipRefusedFingerprint: _clearedFp,
                 ...carried
-              } = owner.n.attrs;
+              } = instanceReceipt(owner.n, destinationKey);
               owner.s.updateNode(n.id, {
-                attrs: {
+                attrs: updateInstanceReceipt(owner.n, destinationKey, {
                   ...carried,
-                  contributedAtSeq: seq,
-                  ...cloudNodeId && cloudNodeId !== n.id ? { cloudNodeId } : {}
-                }
+                  shipRefusedSinceSeq: void 0,
+                  shipRefusedCount: void 0,
+                  shipRefusedReason: void 0,
+                  shipRefusedFingerprint: void 0,
+                  contributedAtSeq: instanceReceiptSequence(n),
+                  cloudNodeId
+                }, owner.s === store)
               });
             });
             await stampBatched(Object.entries(instances.anchorDigests), ([localId, dg]) => {
               const owner = owningStore(localId);
               if (!owner) return;
-              if (rejected.has(localId) || blocked.has(localId)) return;
+              if (!edgeReceiptsComplete || !instanceReceipt(owner.n, destinationKey)["cloudNodeId"] || rejected.has(localId) || blocked.has(localId)) return;
               owner.s.updateNode(localId, {
-                attrs: { ...owner.n.attrs, anchorsContributedDigest: dg }
+                attrs: updateInstanceReceipt(owner.n, destinationKey, { anchorsContributedDigest: dg }, owner.s === store)
               });
             });
             await stampBatched(Object.entries(instances.projectAnchorDigests), ([localId, dg]) => {
               const owner = owningStore(localId);
               if (!owner) return;
-              if (rejected.has(localId) || blocked.has(localId)) return;
+              if (!edgeReceiptsComplete || !instanceReceipt(owner.n, destinationKey)["cloudNodeId"] || rejected.has(localId) || blocked.has(localId)) return;
               owner.s.updateNode(localId, {
-                attrs: { ...owner.n.attrs, projectAnchorsContributedDigest: dg }
+                attrs: updateInstanceReceipt(owner.n, destinationKey, { projectAnchorsContributedDigest: dg }, owner.s === store)
               });
             });
             await stampBatched(Object.entries(instances.semanticEdgeDigests), ([localId, dg]) => {
               const owner = owningStore(localId);
               if (!owner) return;
-              if (rejected.has(localId) || blocked.has(localId)) return;
+              if (!edgeReceiptsComplete || !instanceReceipt(owner.n, destinationKey)["cloudNodeId"] || rejected.has(localId) || blocked.has(localId)) return;
               owner.s.updateNode(localId, {
-                attrs: { ...owner.n.attrs, semanticEdgesContributedDigest: dg }
+                attrs: updateInstanceReceipt(owner.n, destinationKey, { semanticEdgesContributedDigest: dg }, owner.s === store)
               });
             });
             appendPassLedger(r.engine.paths.configDir, "ship", Date.now() - shipStartedAt, {
@@ -88385,7 +88556,7 @@ function buildCodexHooksToml(port, options) {
   if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error("Invalid hook port");
   const command = quote(options.nodePath) + " " + quote(options.relayPath) + " " + port;
   const handlers = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"].map(
-    (event) => "[[hooks." + event + "]]\n" + (["UserPromptSubmit", "Stop"].includes(event) ? "" : 'matcher = ".*"\n') + "\n[[hooks." + event + '.hooks]]\ntype = "command"\ncommand = ' + JSON.stringify(command) + "\ntimeout = 10\nadditionalContextLimit = 5000\n"
+    (event) => "[[hooks." + event + "]]\n" + (["UserPromptSubmit", "Stop"].includes(event) ? "" : 'matcher = ".*"\n') + "\n[[hooks." + event + '.hooks]]\ntype = "command"\ncommand = ' + JSON.stringify(command) + "\ntimeout = 10\n" + (event === "Stop" ? "" : "additionalContextLimit = 5000\n")
   );
   return CODEX_HOOKS_BEGIN + "\n" + handlers.join("\n") + CODEX_HOOKS_END + "\n";
 }
@@ -89539,7 +89710,7 @@ async function cmdWhoami(args2) {
       `note: daemon capture and the MCP server resolve identically; a process with ERRATA_CONFIG_PATH set resolves by rule 1 regardless of binding.`
     ];
     if (args2.includes("--json")) {
-      console.log(JSON.stringify({ path: path2, registered: Boolean(entry), ...identity }, null, 2));
+      console.log(JSON.stringify({ path: path2, registered: Boolean(entry), ...publicWorkspaceIdentity(identity) }, null, 2));
     } else {
       for (const l of lines) console.log(l);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.9",
+  "version": "2.0.11",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -15140,7 +15140,7 @@ var init_symbol_intent = __esm({
 });
 
 // ../../packages/shared/src/wire.ts
-var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
+var CLOUD_NODE_LABELS, CLOUD_WRITABLE_NODE_LABELS, PROJECT_ONLY_NODE_LABELS, PROJECT_ONLY_NODE_LABEL_SET, PROJECT_ONLY_EDGE_TYPES, PROJECT_ONLY_EDGE_TYPE_SET, CLOUD_WRITABLE_NODE_LABEL_SET, CLOUD_EDGE_TYPES, INGEST_SOURCES, INGEST_EXTRACTION_SOURCES, CastaliaIngestNodeSchema, RouteContextCountWireSchema, ANCHOR_COMMIT_SHA_RE, ANCHOR_BODY_HASH_RE, ANCHOR_SYMBOL_KINDS, ANCHOR_LABEL_KINDS, ANCHOR_LABEL_PATH_RE, ANCHOR_LABEL_QNAME_RE, TRIAGE_DISCRIMINATOR_MAX_LENGTH, CastaliaIngestEdgeSchema, SymbolSummarySidecarSchema, CastaliaIngestPayloadSchema;
 var init_wire = __esm({
   "../../packages/shared/src/wire.ts"() {
     "use strict";
@@ -15258,6 +15258,7 @@ var init_wire = __esm({
     ANCHOR_LABEL_KINDS = [...ANCHOR_SYMBOL_KINDS, "File"];
     ANCHOR_LABEL_PATH_RE = /^(?![/])(?![A-Za-z]:)(?!(?:.*\/)?\.\.(?:\/|$))[^\x00-\x1f\x7f\\`]{1,512}$/;
     ANCHOR_LABEL_QNAME_RE = /^[^\x00-\x1f\x7f`]{1,256}$/;
+    TRIAGE_DISCRIMINATOR_MAX_LENGTH = 2e3;
     CastaliaIngestEdgeSchema = external_exports.object({
       fromCanonicalId: external_exports.string().min(6).max(160),
       toCanonicalId: external_exports.string().min(6).max(160),
@@ -15268,6 +15269,8 @@ var init_wire = __esm({
         /** Triage route per-context counts (T3 induction). Carried as structured data
          *  here; stored JSON-encoded on the Neo4j rel (`perContextJson`). */
         perContext: external_exports.record(external_exports.string(), RouteContextCountWireSchema).optional(),
+        /** Scrubbed diagnostic check for a triage route, re-scanned at the cloud door. */
+        discriminator: external_exports.string().trim().min(1).max(TRIAGE_DISCRIMINATOR_MAX_LENGTH).optional(),
         /** PJ-anchor-version: WHICH version of a symbol an `ANCHORED_AT` was
          *  witnessed against. Both opaque — the observing checkout's HEAD sha and
          *  the indexer's 16-hex sha256 of the symbol body. Neither is reversible