@wrongstack/requirement-intake 1.0.17 → 1.0.24

package/dist/index.js

@@ -430,6 +430,14 @@ var RequirementIntakeStore = class {
     return this.baseDir;
   }
   recordPath(id) {
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(id)) {
+      throw new IntakeValidationError([
+        {
+          field: "id",
+          message: "record id must contain only letters, numbers, underscores, or hyphens"
+        }
+      ]);
+    }
     return path.join(this.baseDir, `${id}.json`);
   }
   // -------------------------------------------------------------------------
@@ -1203,6 +1211,12 @@ function applyAnswerUpdateToRecord(record, answerId, newAnswer) {
     question.answer = newAnswer;
     question.status = "answered";
   }
+  const mapping = ANSWER_FIELD_MAPPING[answer.field];
+  if (mapping) {
+    mapping.set(record, newAnswer);
+    const sourceKey = answer.field;
+    record.fieldSources[sourceKey] = "user";
+  }
 }
 function applyAttachmentToRecord(record, validated, actorId, now) {
   if (record.attachments.length >= MAX_ATTACHMENTS) {
@@ -1305,6 +1319,23 @@ var RequirementIntakeService = class {
     const now = Date.now();
     const record = this.buildNewRecord(validated, ctx, now);
     const result = await this.store.create(record, validated.idempotencyKey?.trim());
+    if (!result.created) {
+      if (result.record.projectId !== ctx.projectId) {
+        throw new IntakeValidationError([
+          {
+            field: "idempotencyKey",
+            message: "idempotency key already used for a different project"
+          }
+        ]);
+      }
+      this.metrics.increment("intake.duplicate_create");
+      this.logger.info("intake", "intake.duplicate_create", {
+        intakeId: result.record.id,
+        projectId: result.record.projectId,
+        actorId: ctx.id
+      });
+      return result;
+    }
     this.logger.info("intake", "intake.created", {
       intakeId: result.record.id,
       projectId: result.record.projectId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/requirement-intake",
-  "version": "1.0.17",
+  "version": "1.0.24",
   "license": "MIT",
   "description": "WrongStack Requirements Intake — collect, preserve, validate, normalize, and submit unstructured software development requests as structured intake records. Upstream of spec-driven development: it never plans, specifies, or implements.",
   "repository": {
@@ -27,7 +27,7 @@
     "!dist/**/*.map"
   ],
   "dependencies": {
-    "@wrongstack/core": "1.0.17",
+    "@wrongstack/core": "1.0.24",
     "zod": "4.6.2"
   },
   "devDependencies": {