@sixb/core 0.1.5 → 0.1.6

package/dist/testing/materializer-storage-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"materializer-storage-contract.d.ts","sourceRoot":"","sources":["../../src/testing/materializer-storage-contract.ts"],"names":[],"mappings":"AACA,OAAO,EASL,KAAK,OAAO,EACb,MAAM,IAAI,CAAA;AAeX,MAAM,WAAW,mCAAmC,CAAC,QAAQ,SAAS,OAAO;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D;AAgFD,wBAAgB,mCAAmC,CAAC,QAAQ,SAAS,OAAO,EAC1E,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mCAAmC,CAAC,QAAQ,CAAC,GACtD,IAAI,CAmcN"}
+{"version":3,"file":"materializer-storage-contract.d.ts","sourceRoot":"","sources":["../../src/testing/materializer-storage-contract.ts"],"names":[],"mappings":"AACA,OAAO,EASL,KAAK,OAAO,EACb,MAAM,IAAI,CAAA;AAgBX,MAAM,WAAW,mCAAmC,CAAC,QAAQ,SAAS,OAAO;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D;AA6FD,wBAAgB,mCAAmC,CAAC,QAAQ,SAAS,OAAO,EAC1E,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mCAAmC,CAAC,QAAQ,CAAC,GACtD,IAAI,CA6lBN"}

package/dist/webhooks/internal.js

@@ -5,7 +5,7 @@ import {
 import {
   canRetryWebhookRun,
   isStorageSerializationFailure
-} from "../chunk-v0egge8b.js";
+} from "../chunk-t624af60.js";
 import"../chunk-72q2y8hn.js";
 import"../chunk-xc7hq65b.js";
 import"../chunk-cy0n5dms.js";
@@ -14,11 +14,11 @@ import"../chunk-62c7t4jc.js";
 import {
   WebhookRunError
 } from "../chunk-ezake7g1.js";
-import"../chunk-a09jx26t.js";
+import"../chunk-fe5ev6mr.js";
 import"../chunk-htq0qh7z.js";
 import"../chunk-xkthy56g.js";
-import"../chunk-xdf9yswn.js";
-import"../chunk-nzw7sm3b.js";
+import"../chunk-1g8negke.js";
+import"../chunk-hceck7dq.js";
 import"../chunk-t9xghkva.js";
 import"../chunk-drjqm1aa.js";
 import"../chunk-5gd7tpv6.js";
@@ -32,7 +32,7 @@ import"../chunk-3j7573mj.js";
 import"../chunk-4gz41why.js";
 import"../chunk-zcnhxkvd.js";
 import"../chunk-t0jjkep3.js";
-import"../chunk-tkdscva6.js";
+import"../chunk-1e8m6yn3.js";
 import"../chunk-rhrbz7d4.js";
 import"../chunk-xwnf87e1.js";
 import"../chunk-f83ka50g.js";

package/dist/workflows/index.js

@@ -7,7 +7,7 @@ import {
   defineWorkflowStep,
   interventionField,
   unwrapWorkflowNodeFailure
-} from "../chunk-gadsm794.js";
+} from "../chunk-n4spznws.js";
 import"../chunk-5sz8ta9r.js";
 import"../chunk-979ww6b3.js";
 import"../chunk-74drx9gd.js";
@@ -40,36 +40,36 @@ import {
   validateWorkflowStepInput,
   validateWorkflowStepOutput,
   validateWorkflowsAtStartup
-} from "../chunk-84h6qhmp.js";
-import"../chunk-zp2v2rv6.js";
-import"../chunk-r0rry8dn.js";
-import"../chunk-z3ga9q5m.js";
+} from "../chunk-nva1xkjz.js";
+import"../chunk-tg5mee00.js";
+import"../chunk-8gv5z0zm.js";
+import"../chunk-5sxb1168.js";
 import"../chunk-4rh2m6zg.js";
 import"../chunk-xhy826cz.js";
-import"../chunk-6d5xdj1q.js";
+import"../chunk-md8k0r54.js";
 import"../chunk-rte5sm3z.js";
 import"../chunk-qewtks41.js";
 import"../chunk-8b55ygje.js";
 import"../chunk-51fjndv0.js";
 import"../chunk-8m5ejdpn.js";
 import"../chunk-nf4r78r4.js";
-import"../chunk-78c6xvyr.js";
-import"../chunk-1q02e95s.js";
-import"../chunk-tbv03sx2.js";
+import"../chunk-0hc5j867.js";
+import"../chunk-a44d5zgd.js";
+import"../chunk-nkbfrt0c.js";
 import"../chunk-96swp2wd.js";
 import"../chunk-f6erf2vv.js";
-import"../chunk-v0egge8b.js";
+import"../chunk-t624af60.js";
 import"../chunk-72q2y8hn.js";
 import"../chunk-xc7hq65b.js";
 import"../chunk-cy0n5dms.js";
 import"../chunk-dysw7nsm.js";
 import"../chunk-62c7t4jc.js";
 import"../chunk-ezake7g1.js";
-import"../chunk-a09jx26t.js";
+import"../chunk-fe5ev6mr.js";
 import"../chunk-htq0qh7z.js";
 import"../chunk-xkthy56g.js";
-import"../chunk-xdf9yswn.js";
-import"../chunk-nzw7sm3b.js";
+import"../chunk-1g8negke.js";
+import"../chunk-hceck7dq.js";
 import"../chunk-t9xghkva.js";
 import"../chunk-drjqm1aa.js";
 import"../chunk-5gd7tpv6.js";
@@ -87,7 +87,7 @@ import"../chunk-yt8wphsx.js";
 import"../chunk-rdeagz6b.js";
 import"../chunk-dm72y8wt.js";
 import"../chunk-t0jjkep3.js";
-import"../chunk-tkdscva6.js";
+import"../chunk-1e8m6yn3.js";
 import"../chunk-rhrbz7d4.js";
 import"../chunk-xwnf87e1.js";
 import"../chunk-f83ka50g.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sixb/core",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "The ontology-first runtime for Sixb — objects, links, telemetry, actions, and provider contracts",
   "keywords": [
     "sixb",

package/src/actions/types/definitions.ts

@@ -1,3 +1,4 @@
+import type { ReadonlyJsonValue } from "../../json"
 import type { ObjectTypeWithPropertyTokens } from "../../ontology/tokens"
 import type {
   ActionEditsHandler,
@@ -13,6 +14,18 @@ import type {
 } from "./handlers"
 import type { ActionParamsConfig, InferActionParams } from "./params"
 
+// Validate fields structurally so JSON-shaped interfaces do not need an index signature.
+// Builders infer the original result first, then check it without widening via NoInfer.
+type WritebackJsonValue<T> = T extends ReadonlyJsonValue
+  ? T
+  : T extends (...args: never[]) => unknown
+    ? never
+    : T extends object
+      ? { [K in keyof T]: WritebackJsonValue<T[K]> }
+      : never
+
+type WritebackResult<T> = T extends ReturnType<() => void> ? T : WritebackJsonValue<T>
+
 export interface BaseActionDefinition<
   TId extends string = string,
   TParams extends ActionParamsConfig = ActionParamsConfig,
@@ -136,7 +149,11 @@ export interface GlobalActionPhaseBuilder<TId extends string, TParams extends Ac
     validator: GlobalActionValidator<InferActionParams<TParams>>
   ): GlobalActionPhaseBuilder<TId, TParams>
   writeback<const TResult>(
-    handler: GlobalActionWritebackHandler<InferActionParams<TParams>, TResult>
+    handler: GlobalActionWritebackHandler<InferActionParams<TParams>, TResult> &
+      GlobalActionWritebackHandler<
+        InferActionParams<TParams>,
+        WritebackResult<NoInfer<Awaited<TResult>>>
+      >
   ): GlobalActionAfterWritebackBuilder<TId, TParams, TResult>
   edits<const TResult extends ActionNoResultHandlerResult>(
     handler: GlobalActionEditsHandler<InferActionParams<TParams>, undefined, TResult>
@@ -152,7 +169,12 @@ export interface ObjectActionPhaseBuilder<
     validator: ActionValidator<TObjectType, InferActionParams<TParams>>
   ): ObjectActionPhaseBuilder<TId, TObjectType, TParams>
   writeback<const TResult>(
-    handler: ActionWritebackHandler<TObjectType, InferActionParams<TParams>, TResult>
+    handler: ActionWritebackHandler<TObjectType, InferActionParams<TParams>, TResult> &
+      ActionWritebackHandler<
+        TObjectType,
+        InferActionParams<TParams>,
+        WritebackResult<NoInfer<Awaited<TResult>>>
+      >
   ): ObjectActionAfterWritebackBuilder<TId, TObjectType, TParams, TResult>
   edits<const TResult extends ActionNoResultHandlerResult>(
     handler: ActionEditsHandler<TObjectType, InferActionParams<TParams>, undefined, TResult>

package/src/auth/index.ts

@@ -127,6 +127,7 @@ export type {
   ReactivateMemberInput,
   ReactivateMemberResult,
   ResolvedAuthConfig,
+  RevealedInvitationLink,
   RevokeAccessTokenResult,
   RevokeInvitationInput,
   RevokeInvitationResult,

package/src/auth/runtime.ts

@@ -1242,6 +1242,7 @@ export class AuthRuntime {
         audience: deliveryAudience,
         returnTo: options.delivery?.returnTo ?? sanitizeReturnTo(input.returnTo),
         requestOrigin: options.delivery?.requestOrigin ?? new URL(request.url).origin,
+        revealLink: input.revealLink,
         now,
       })
     } catch (error) {
@@ -1249,6 +1250,13 @@ export class AuthRuntime {
       throw error
     }
 
+    // The runtime owns the disclosure boundary even for third-party strategies. A strategy that
+    // accidentally returns a link must not expose it unless the caller opted in explicitly.
+    delivery = {
+      status: delivery.status,
+      ...(input.revealLink && delivery.link ? { link: delivery.link } : {}),
+    }
+
     if (delivery.status === "not_supported") {
       return { invitation, delivery }
     }

package/src/auth/strategy.ts

@@ -38,6 +38,7 @@ export type {
   OidcCallbackResult,
   OidcStartSignInInput,
   OidcStartSignInResult,
+  RevealedInvitationLink,
 } from "./types"
 export {
   isInvitationDeliveryAuthStrategy,

package/src/auth/types.ts

@@ -73,6 +73,8 @@ export interface InvitationDeliveryInput {
   readonly audience: AuthSessionAudience
   readonly returnTo: string
   readonly requestOrigin: string
+  /** Return the delivered link once so the inviter can copy it through an approved channel. */
+  readonly revealLink?: boolean
   readonly now?: Date
 }
 
@@ -80,8 +82,18 @@ export type AuthEmailDeliveryStatus = "sent" | "skipped" | "rate_limited"
 
 export type InviteDeliveryStatus = AuthEmailDeliveryStatus | "not_supported"
 
+export interface RevealedInvitationLink {
+  readonly url: string
+  readonly expiresAt?: Date
+}
+
 export interface InviteDeliveryResult {
   readonly status: InviteDeliveryStatus
+  /**
+   * Present only when the caller explicitly requests `revealLink`. Treat this as a credential:
+   * never persist it or include it in list responses, logs, or analytics.
+   */
+  readonly link?: RevealedInvitationLink
 }
 
 export interface InvitationDeliveryAuthStrategy extends AuthStrategy {
@@ -214,6 +226,8 @@ export interface InviteUserInput {
   readonly groupIds?: readonly string[]
   readonly expiresAt?: Date
   readonly returnTo?: string
+  /** Reveal the delivered link once in the result. Defaults to false. */
+  readonly revealLink?: boolean
 }
 
 export interface InviteUserResult {

package/src/storage/index.ts

@@ -422,6 +422,7 @@ export type {
   MaterializationClassificationWorkRecord,
   MaterializationEventWorkRecord,
   MaterializationIncidentObjectWorkRecord,
+  MaterializationLinkScopeRevision,
   MaterializationLinkScopeState,
   MaterializationLinkState,
   MaterializationObjectExistence,

package/src/storage/ontology/in-memory/materializations.ts

@@ -38,6 +38,7 @@ import type {
   FinalizeMaterializationInput,
   MaterializationCardinalityOccupantWorkRecord,
   MaterializationEventWorkRecord,
+  MaterializationLinkScopeRevision,
   MaterializationLinkScopeState,
   MaterializationLinkState,
   MaterializationObjectExistence,
@@ -134,7 +135,7 @@ export interface SessionState {
   readonly workStreams: Record<StreamMaterializationWorkInput["order"], WorkStreamState>
   workSealed: boolean
   incidentLinksByObject: Map<string, readonly OntologyLinkRef[]> | null
-  linkScopeStates: Map<string, MaterializationLinkScopeState> | null
+  linkSlotStates: Map<string, MaterializationLinkScopeState> | null
   readonly objectExistence: Map<string, MaterializationObjectExistenceWorkRecord>
   replacement: ReplacementSessionState | null
 }
@@ -209,13 +210,13 @@ export class InMemoryOntologyMaterializationStorage implements OntologyMateriali
       await this.assertObject(expected, input.commit.projectId)
     for (const expected of input.expected.links)
       await this.assertLink(expected, input.commit.projectId)
-    const expectedScopeStates = new Map<string, MaterializationLinkScopeState>()
+    const expectedScopeRevisions = new Map<string, MaterializationLinkScopeRevision>()
     for (const expected of input.expected.linkScopes) {
       const key = linkScopeSortKey(expected.source, expected.linkId)
       const current =
-        expectedScopeStates.get(key) ??
-        this.computeLinkScopeState(input.commit.projectId, expected.source, expected.linkId)
-      expectedScopeStates.set(key, current)
+        expectedScopeRevisions.get(key) ??
+        this.computeEffectiveLinkScope(input.commit.projectId, expected.source, expected.linkId)
+      expectedScopeRevisions.set(key, current)
       if (current.fingerprint !== expected.fingerprint) {
         throw new MaterializationConflictError(
           "effective-state",
@@ -247,7 +248,7 @@ export class InMemoryOntologyMaterializationStorage implements OntologyMateriali
       },
       workSealed: false,
       incidentLinksByObject: null,
-      linkScopeStates: expectedScopeStates,
+      linkSlotStates: new Map(),
       objectExistence: new Map<string, MaterializationObjectExistenceWorkRecord>(),
       replacement: null,
     }
@@ -275,7 +276,7 @@ export class InMemoryOntologyMaterializationStorage implements OntologyMateriali
     session.appliedPlanItems.length = 0
     session.outboxEnvelopes.clear()
     session.incidentLinksByObject = null
-    session.linkScopeStates = null
+    session.linkSlotStates = null
     session.objectExistence.clear()
     session.replacement = null
     this.liveSessions.delete(session)
@@ -329,7 +330,7 @@ export class InMemoryOntologyMaterializationStorage implements OntologyMateriali
         linkScopeSortKey(value.source, value.linkId)
       )) {
         this.requireSession(input.session)
-        const value = this.linkScopeState(session, scope.source, scope.linkId)
+        const value = this.linkSlotState(session, scope.source, scope.linkId)
         // Scope rows are currently only requested for cardinality-one links, so the complete member
         // set is bounded by the ontology invariant. Replacement scope enumeration is flattened in
         // its dedicated stream and never uses this shape.
@@ -1136,25 +1137,44 @@ export class InMemoryOntologyMaterializationStorage implements OntologyMateriali
     }
   }
 
-  private linkScopeState(
+  private linkSlotState(
     session: SessionState,
     source: OntologyObjectRef,
     linkId: string
   ): MaterializationLinkScopeState {
-    session.linkScopeStates ??= new Map()
+    session.linkSlotStates ??= new Map()
     const key = linkScopeSortKey(source, linkId)
-    const existing = session.linkScopeStates.get(key)
+    const existing = session.linkSlotStates.get(key)
     if (existing) return structuredClone(existing)
-    const computed = this.computeLinkScopeState(session.header.commit.projectId, source, linkId)
-    session.linkScopeStates.set(key, computed)
+    const computed = this.computeLinkSlotState(session.header.commit.projectId, source, linkId)
+    session.linkSlotStates.set(key, computed)
     return structuredClone(computed)
   }
 
-  private computeLinkScopeState(
+  private computeLinkSlotState(
     projectId: string,
     source: OntologyObjectRef,
     linkId: string
   ): MaterializationLinkScopeState {
+    const value = this.computeEffectiveLinkScope(projectId, source, linkId)
+    return {
+      ...value,
+      sourceAssertion: this.findActiveLinkScopeSource(projectId, source, linkId),
+      override: structuredClone(
+        publicLinkSlotOverride(
+          this.state.linkSlotOverrides.get(
+            projectEntityKey(projectId, linkScopeKey(source, linkId))
+          )
+        )
+      ),
+    }
+  }
+
+  private computeEffectiveLinkScope(
+    projectId: string,
+    source: OntologyObjectRef,
+    linkId: string
+  ): MaterializationLinkScopeRevision & Pick<MaterializationLinkScopeState, "effective"> {
     const rows: ObjectLinkRow[] = []
     getInMemoryObjectMaterializerAdapter(this.objects).visitExactScopeLinks(
       projectId,
@@ -1177,14 +1197,6 @@ export class InMemoryOntologyMaterializationStorage implements OntologyMateriali
     const effective = rows.length === 1 ? linkSnapshot(rows[0]!) : null
     return {
       ...finishScopeAccumulator(accumulator),
-      sourceAssertion: this.findActiveLinkScopeSource(projectId, source, linkId),
-      override: structuredClone(
-        publicLinkSlotOverride(
-          this.state.linkSlotOverrides.get(
-            projectEntityKey(projectId, linkScopeKey(source, linkId))
-          )
-        )
-      ),
       effective,
     }
   }

package/src/storage/ontology/index.ts

@@ -45,6 +45,7 @@ export type {
   MaterializationClassificationWorkRecord,
   MaterializationEventWorkRecord,
   MaterializationIncidentObjectWorkRecord,
+  MaterializationLinkScopeRevision,
   MaterializationLinkScopeState,
   MaterializationLinkState,
   MaterializationObjectExistence,

package/src/storage/ontology/materializations.ts

@@ -77,17 +77,22 @@ export interface MaterializationLinkState {
   readonly effective: EffectiveLinkSnapshot | null
 }
 
-export interface MaterializationLinkScopeState {
+/** Revision of the complete effective `(source, linkId)` member set, for either cardinality. */
+export interface MaterializationLinkScopeRevision {
   readonly source: OntologyObjectRef
   readonly linkId: string
+  readonly effectiveCount: number
+  readonly fingerprint: string
+}
+
+/** Cardinality-one slot state used while resolving managed and projected authority. */
+export interface MaterializationLinkScopeState extends MaterializationLinkScopeRevision {
   /** Complete active source value for the link slot. */
   readonly sourceAssertion: StoredSourceLinkAssertion | null
   /** Managed slot authority; absence delegates to source authority. */
   readonly override: StoredLinkSlotOverride | null
   /** The single effective edge, if its endpoints are effective. */
   readonly effective: EffectiveLinkSnapshot | null
-  readonly effectiveCount: number
-  readonly fingerprint: string
 }
 
 export interface MaterializationStatePage {

package/src/storage/ontology/provider.ts

@@ -14,7 +14,7 @@ import type { OntologyCommitOriginSelector, OntologyCommitWrite } from "./commit
 import type {
   FinalizeMaterializationInput,
   MaterializationEventWorkRecord,
-  MaterializationLinkScopeState,
+  MaterializationLinkScopeRevision,
   MaterializationPlanChunk,
   MaterializationPlanHeader,
   MaterializationPlanWorkItem,
@@ -99,7 +99,7 @@ export function appendScopeSnapshot(
 
 export function finishScopeAccumulator(
   accumulator: LinkScopeAccumulator
-): Pick<MaterializationLinkScopeState, "source" | "linkId" | "effectiveCount" | "fingerprint"> {
+): MaterializationLinkScopeRevision {
   accumulator.hash.update("]")
   return {
     source: accumulator.source,

package/src/testing/materializer-storage-contract.ts

@@ -15,6 +15,7 @@ import { restoreTrustedPrimitiveExecutionScope } from "../execution/durable"
 import { createTestingScope } from "../execution/scopes"
 import type { OntologyMaterializer } from "../materializer"
 import {
+  createLinkScopeFingerprint,
   createOntologyMaterializer,
   type OntologyEditOperation,
   ProjectionRegistry,
@@ -42,7 +43,7 @@ const Device = defineObjectType({
     prop("name", "string", { required: true }),
     prop("temperature", "double", { mode: "telemetry" }),
   ],
-  links: [link.self("parent", { cardinality: "one" })],
+  links: [link.self("parent", { cardinality: "one" }), link.self("peers", { cardinality: "many" })],
 })
 
 const devices = defineDataset("storage_contract_devices", {
@@ -55,6 +56,9 @@ const devices = defineDataset("storage_contract_devices", {
 const readings = defineDataset("storage_contract_readings", {
   schema: [col("device_id", "string"), col("at", "timestamp"), col("value", "float64")],
 })
+const devicePeers = defineDataset("storage_contract_device_peers", {
+  schema: [col("source_id", "string"), col("target_id", "string")],
+})
 const ConflictDevice = defineObjectType({
   id: "StorageContractConflictDevice",
   name: "Conflict device",
@@ -88,6 +92,10 @@ const temperatureProjection = defineProjection(
 )
   .fromDataset(readings)
   .points({ objectId: "device_id", at: "at", value: "value" })
+const devicePeersProjection = defineProjection("storage_contract_device_peers", Device.l.peers)
+  .fromDataset(devicePeers)
+  .sourceField("source_id")
+  .targetField("target_id")
 const conflictDeviceProjection = defineProjection(
   "storage_contract_conflict_devices",
   ConflictDevice
@@ -98,11 +106,17 @@ const conflictDeviceProjection = defineProjection(
 
 const ontology = new OntologyRegistry({ sources: [Device, ConflictDevice] })
 const projections = new ProjectionRegistry({
-  projections: [deviceProjection, temperatureProjection, conflictDeviceProjection],
+  projections: [
+    deviceProjection,
+    temperatureProjection,
+    devicePeersProjection,
+    conflictDeviceProjection,
+  ],
   ontology,
   datasetsById: new Map<string, DatasetDefinition>([
     [devices.id, devices],
     [readings.id, readings],
+    [devicePeers.id, devicePeers],
     [conflictDevices.id, conflictDevices],
   ]),
 })
@@ -561,6 +575,160 @@ export function runMaterializerStorageContractSuite<TStorage extends Storage>(
       await provider.cleanup?.(createdStorage)
     }
   })
+
+  test(`${name} fences projected cardinality-many link scopes by fingerprint`, async () => {
+    const createdStorage = await provider.createStorage()
+    const storage = requireContractStorage(createdStorage)
+    let materializationOrdinal = 0
+    const materializer = createOntologyMaterializer({
+      projectId: "materializer-storage-contract",
+      ontology,
+      projections,
+      storage,
+      dependencies: {
+        batching: { sourceStageRows: 1, statePageRows: 1, planChunkRows: 1 },
+        clock: () => new Date("2026-02-01T12:00:00.000Z"),
+        materializationId: () => `many-scope-contract-candidate-${++materializationOrdinal}`,
+      },
+    })
+    const runtimeMaterializer = materializer.withScope(runtimeScope())
+    const source = { objectTypeId: Device.id, primaryId: "source" }
+    const peer = (primaryId: string) => ({ objectTypeId: Device.id, primaryId })
+    const linkRef = (targetId: string) => ({
+      source,
+      linkId: "peers",
+      target: peer(targetId),
+    })
+
+    try {
+      await runtimeMaterializer.edits.commit({
+        mode: "atomic",
+        source: { kind: "runtime", requestId: "many-scope-endpoints" },
+        operations: ["source", "peer-a", "peer-b", "peer-c"].map((primaryId) => ({
+          id: `create-${primaryId}`,
+          kind: "object.create" as const,
+          ref: peer(primaryId),
+          properties: { name: primaryId },
+        })),
+        expectedObjects: [],
+        expectedLinks: [],
+        expectedLinkScopes: [],
+      })
+
+      const datasetVersion = {
+        datasetId: devicePeers.id,
+        versionId: "many-links-v1",
+        createdAt: "2026-02-01T00:00:00.000Z",
+      }
+      const execution = await claim(storage, {
+        runId: "many-links-v1",
+        projectionId: devicePeersProjection.id,
+        protocol: "replacement",
+        datasetVersion,
+      })
+      const projectedLinks = [linkRef("peer-a"), linkRef("peer-b")]
+      await (
+        await projectionMaterializer(
+          materializer,
+          storage,
+          devicePeersProjection.id,
+          "many-links-v1"
+        )
+      ).projections.replace({
+        source: { projectionId: devicePeersProjection.id },
+        datasetVersion,
+        execution,
+        entries: entries(
+          projectedLinks.map((ref) => ({
+            root: { kind: "link", ref },
+            assertions: [{ kind: "link", ref }],
+          }))
+        ),
+      })
+
+      const observedLinks = await storage.objects.listLinks({
+        projectId: "materializer-storage-contract",
+        objectTypeId: Device.id,
+        objectId: source.primaryId,
+        linkId: "peers",
+      })
+      const fingerprint = createLinkScopeFingerprint(
+        observedLinks.map((row) => {
+          if (row.lastCommitId === undefined) {
+            throw new Error("Projected contract link is missing materializer provenance.")
+          }
+          return {
+            ref: linkRef(row.targetId),
+            createdAt: row.createdAt.toISOString(),
+            updatedAt: row.updatedAt.toISOString(),
+            lastCommitId: row.lastCommitId,
+          }
+        })
+      )
+      const commitObservation = async (runId: string, name: string) => {
+        await queueTestActionRun(storage, {
+          id: runId,
+          projectId: "materializer-storage-contract",
+          actionId: "observePeers",
+          subject: { kind: "object", objectTypeId: Device.id, primaryId: source.primaryId },
+          params: {},
+          idempotencyKey: runId,
+        })
+        await storage.actionRuns.start({ id: runId, projectId: "materializer-storage-contract" })
+        const actionMaterializer = await primitiveMaterializer(materializer, storage, {
+          kind: "action",
+          id: "observePeers",
+          runId,
+        })
+        return actionMaterializer.edits.commit({
+          mode: "atomic",
+          source: { kind: "action", actionId: "observePeers", runId },
+          operations: [
+            {
+              id: `record-${runId}`,
+              kind: "object.patch",
+              ref: source,
+              set: { name },
+              unset: [],
+              reset: [],
+            },
+          ],
+          expectedObjects: [],
+          expectedLinks: [],
+          expectedLinkScopes: [{ source, linkId: "peers", fingerprint }],
+        })
+      }
+
+      // Regression guard for G-021: make begin() hydrate the expected scope through the
+      // cardinality-one slot reader again and this otherwise unrelated Action commit fails before
+      // its already-stable fingerprint can be compared.
+      await expect(commitObservation("many-scope-action", "observed peers")).resolves.toMatchObject(
+        { kind: "edit", created: true }
+      )
+
+      await runtimeMaterializer.edits.commit({
+        mode: "atomic",
+        source: { kind: "runtime", requestId: "many-scope-change" },
+        operations: [{ id: "add-peer", kind: "link.upsert", ref: linkRef("peer-c") }],
+        expectedObjects: [],
+        expectedLinks: [],
+        expectedLinkScopes: [],
+      })
+
+      await expect(commitObservation("stale-many-scope-action", "must not commit")).rejects.toThrow(
+        "Expected link scope changed"
+      )
+      expect(
+        await storage.objects.getByPrimaryId({
+          projectId: "materializer-storage-contract",
+          objectTypeId: Device.id,
+          primaryId: source.primaryId,
+        })
+      ).toMatchObject({ properties: { name: "observed peers" } })
+    } finally {
+      await provider.cleanup?.(createdStorage)
+    }
+  })
 }
 
 function runtimeScope() {