(TML-2397) M3 — Contract spaces: cipherstash extension as a contract space#439

Merged

wmadden merged 43 commits into

mainfrom

tml-2397-cipherstash-contract-space

May 10, 2026

Commits on May 10, 2026

chore(extension-cipherstash): scaffold workspace package shell
wmadden
committed
feat(extension-cipherstash): author contract space (T3.1, T3.2, T3.3)
wmadden
committed
docs(extension-contract-spaces): mark T3.1 + T3.2 + T3.3 completed (M3 R1)
wmadden
committed
feat(extension-cipherstash): vendor real EQL bundle (eql-2.2.1)
wmadden
committed
feat(extension-cipherstash): wire cipherstash:string@1 codec lifecycle hook (T3.4)
wmadden
committed
test(extension-cipherstash): pin databaseDependencies absence at three layers (T3.5)
wmadden
committed
test(extension-cipherstash): pin AM11 + AM12 against the cipherstash descriptor
wmadden
committed
docs(extension-contract-spaces): mark T3.4 + T3.5 completed (M3 R2)
wmadden
committed
fix(extension-cipherstash): resolve structural-ops/EQL-bundle CREATE conflict (option c)
wmadden
committed
feat(migration-tools): include additive ops with invariantIds in deriveProvidedInvariants
wmadden
committed
feat(extension-cipherstash): add expandNativeType identity hook to string codec
wmadden
committed
test(extension-cipherstash): T3.6 Scenario A e2e against PGlite
wmadden
committed
docs(extension-contract-spaces): mark T3.6 partial complete (M3 R3)
wmadden
committed
fix(extension-cipherstash): sync EQL_V2 ORE composites + state enum values with vendored bundle (M3 R4 item 22)
wmadden
committed
feat(migration-tools): extract materialiseExtensionMigrationPackageIfMissing primitive (M3 R4 item 21)
wmadden
committed
test(extension-cipherstash): T3.7 Scenario C bump-diff (pure-fixture, AC-14)
wmadden
committed
docs(extension-contract-spaces): fold M3 framework-mechanism amendments (M3 R4 T3.9)
wmadden
committed
docs(extension-contract-spaces): fold M3 cipherstash sub-spec amendments (M3 R4 T3.9)
wmadden
committed
docs(extension-contract-spaces): mark M3 R4 tasks complete in plan (T3.7/T3.8/T3.9 + items 21/22)
wmadden
committed
fix(rebase): adopt M2.5/M2.5b conventions on M3 (cipherstash)
wmadden
committed
fix(rebase): drop stale extension-test-contract-space workspace deps
wmadden
committed
chore(rebase): refresh lockfile after dropping stale workspace deps
wmadden
committed
fix(rebase): import canonical control types from framework-components on M3
wmadden
committed
fix(rebase): cipherstash test typecheck after M2.5 renames
wmadden
committed
test(cipherstash): migrate to M2.5 aggregate APIs (executeDbInit + headRefsBySpace)
wmadden
committed
chore(cipherstash): declare Apache-2.0 license
wmadden
committed
test(integration): align F23 fixture with deriveProvidedInvariants on all invariant ops
wmadden
committed
fix(migration): check isDirectory() to skip only existing dirs, not any fs entry
wmadden
committed
fix(migration): guard readInvariantId against prototype-inherited invariantId
wmadden
committed
test(integration): also assert warn count is 0 in aggregate-schema verify test
wmadden
committed
fix(cipherstash): remove redundant main/module/types fields from package.json
wmadden
committed
fix(cipherstash): use base tsconfig outDir (dist-tsc) instead of dist
wmadden
committed
fix(cipherstash): narrow createDomain/createOreComposite param types; remove transient refs
wmadden
committed
docs(cipherstash): remove transient projects/ links from README
wmadden
committed
refactor(cipherstash): remove transient spec refs; fail fast on impossible codec events
wmadden
committed
docs(cipherstash): remove transient spec/milestone refs from control.ts
wmadden
committed
fix(cipherstash): align synthetic bundle schema with contract IR (id text, state, data jsonb)
wmadden
committed
docs(cipherstash): remove transient spec refs from migrations.ts docblock
wmadden
committed
style(cipherstash): split long throw Error lines to satisfy biome formatter
wmadden
committed
docs(migration): remove @see projects/ links from deriveProvidedInvariants docblock
wmadden
committed
docs(cipherstash): remove AM11/AM12 milestone labels from test header and describe blocks
wmadden
committed
docs(cipherstash): remove transient spec/milestone refs from scenario-a test header
wmadden
committed
docs(cipherstash): update README to reflect codec lifecycle hook is wired up
wmadden
committed