[tiye]

本次把 Timegrass 配对到已发布的 Calcit / @calcit/procs 0.30.1-alpha.5 与已正式发布的模块版本，让升级使用可正常安装的最终依赖图。应用程序、原测试和协议不变；本机已完成严格检查、原业务测试及回环浏览器/重启验收。本 PR 已审查合并且精确 main Upload 成功。按维护者最新决定，Actions 只负责现有构建、验证和资源上传，不访问服务器内部状态，生产探测不作为 Calcit 发布前置。

中文

Refs calcit-lang/calcit#2080、#112、#116。

变更

• CLI/runtime alpha.4 → alpha.5，保持两个包版本精确一致。
• 使用实际正式 tag：Cumulo Reel 0.0.55 → 0.0.58、Recollect 0.0.62 → 0.0.63、WS-EDN 0.0.41 → 0.0.43；其余模块不变，正常解析16模块，不覆盖模块根、不使用未发布源码。
• Yarn按原一小时门槛正常安装并再执行immutable；生成lock文本仅对应procs条目、checksum与root引用，无例外或其他npm升级。
• README说明当前配对及生产实际进程核实要求。calcit.cirru仍为main40a9的blob 8cb653f5b721a06fdda4adb2b80386faebf2689d；schema、原断言、运行器、CI、生产配置及项目版本0.1.2不变。

实际验证

正式CLI 0.30.1-alpha.5、procs同版、Node24.4.1、Yarn4.18.0：

• caps --strict --ci、yarn install --immutable、caps verify --toolchain通过，16模块。
• 原完整fix --workflow strict --verify通过，diagnostics/suggestions为空，default377/server108定义验证通过。
• 原client48/server152定义测试全部通过，原Dayjs同源22组/111项与title、session-messages、typed-database宿主运行器通过。
• 原前端/服务端生成及production build通过；已有require标记和Vite体积warning保留，不宣称CLI全无warning。
• 同源码的独立合成存储副本，正常安装同一最终图后实际启动native/Vite，仅监听127.0.0.1:45201/45185；浏览器显式连接本地，未访问生产。恢复既有合成账号，编辑任务/笔记、Clear、Done/Put back、刷新自动登录和独立访客2→1通过。正常业务两页warn/error为空。
• 原Persist/SIGINT退出0，以同一文件重启新原生进程，任务/笔记在重连和再次刷新后恢复。655字节存储的SHA256 fd9ca5496608cbb6cc05d3575a32f0e0ae29803f560bb0d113cfa2d836a836d5重启前后及最终退出后相同。停机注入产生预期连接失败，单独记录，不冒称全程零错误。tab和测试服务均已停止，源码未改。

保留的门槛

维护者另行授权的独立 agent 已完整审查本 PR 的精确四文件，并实跑完整 strict、原48/152测试及原JS宿主回放，无可操作缺陷；精确71a1793的CI39147573970成功、CLEAN、零threads。这不是沿用#117的审查。Caps本轮独立复跑因全局缓存文档写入权限被拒，未绕过或计为通过；原精确CI及既有本地Caps证据保留。实际浏览器/重启由本任务此前完成，独立agent审阅收据而未重跑。

维护者于2026-10-19明确撤销服务器内部状态发布前置，#116已撤回关闭、未合并。Actions保留既有构建、验证和资源上传，不探测进程、Caps安装记录或加载库，不扩大服务器权限。本PR已完成独立完整审查并合并，精确main0387f949的Upload成功；生产内部状态仍未验证，也不冒称已部署/重启。Calcit稳定版继续保留其余完整语言、消费者、配对发布与成果Discussion要求。

English

Refs calcit-lang/calcit#2080, #112 and #116.

Changes

Pair published CLI/procs alpha.5 exactly. Use actual formal tags Cumulo Reel0.0.58, Recollect0.0.63 and WS-EDN0.0.43, keeping all other dependencies and the normal16-module graph. No root overrides or unpublished source. Normal Yarn installation retains the1h age gate; immutable passes and the generated lock changes only the procs entry/checksum/root reference.

README documents the pair and actual production-process verification. The program remains the exact main40a9 Snapshot blob above; schemas, original assertions/runners/CI, production configuration and project version0.1.2 are unchanged.

Actual verification

Published alpha.5 CLI/procs, Node24.4.1 and Yarn4.18.0 pass strict Caps installation, immutable and toolchain verification for16modules. Original full strict --verify passes with empty diagnostics/suggestions (default377/server108definitions). Original client48/server152tests pass, along with22shared Dayjs groups/111tests and the original title/session/typed-database host runners. Original codegen and production build pass; existing require/chunk warnings remain disclosed.

An independent same-source synthetic-storage copy normally installs the final graph. Actual native/Vite listeners are loopback-only on45201/45185 and browser URLs explicitly target local services. Restore the synthetic account, edit tasks/notes, exercise Clear and Done/Put back, reload/auto-login and an independent guest2→1. Normal-business browser warn/error logs are empty. Original Persist/SIGINT exits0; a new native process loads the same655-byte file, reconnect/reload restores both edits, and the exact hash above remains unchanged across restart/final exit. Expected outage connection failures are recorded separately, not claimed as zero errors throughout. Tabs/services are stopped and source is unchanged.

Retained gates

The newly authorized independent agent reviewed this complete exact four-file change and independently reran full strict, original48/152tests and JS host runners, finding no actionable defect. Exact71a1793 CI39147573970 succeeds, CLEAN and zero threads; this is not inherited from#117. Independent Caps rerun was denied because it writes global cache documentation, with no bypass or success claim; actual exact-head CI/prior Caps receipts remain. Browser/restart were previously executed by the parent task; the independent agent inspected receipts without rerunning them.

The maintainer's2026-10-19 decision withdraws server-internal release prerequisites. #116 is closed without merging. Actions retains existing build/validation/resource uploads, without process/Caps/loaded-library inspection or expanded server permissions. This PR is independently reviewed/merged and exact-main0387f949 Upload succeeds. Production internals remain unverified, with no claim of installation/restart. Preserve all other Calcit language/consumer/paired-publication and outcomes Discussion requirements.

[tiye]

@coderabbitai review

[tiye]

中文：独立完整审查结果

按维护者本轮另行授权，独立 agent 审查完整 40a9e397c9e0563de073bd5d044483168dfde049 → 71a1793e5d277bcac8c0c52874bd174e1ec1ad4f，覆盖 README、deps、package 与锁文件全文变化，未发现可操作缺陷。Snapshot 与 base 同为 8cb653f5b721a06fdda4adb2b80386faebf2689d，业务代码、schema、原断言/脚本和 CI 未改。

独立实际复跑：正式 CLI 与本项目实际安装的 npm runtime 均为 alpha.5；完整 strict --verify passed、diagnostics/suggestions 为空，default377/server108定义；双入口检查、client48/48、server152/152；原 Dayjs 回放（按原选取查询确认22组111项）及 title/session-messages/typed-database 宿主均通过，数据库宿主使用本次重新生成的 server JS。原 require 和开放数据方法 warning 保留，不宣称全部动态边界消除。

完整锁变化只涉及 procs 版本/checksum/workspace引用；读取实际安装状态、模块依赖及远端正式 tag，确认 Cumulo0.0.58→25a55d4、Recollect0.0.63→8d36700、WS-EDN0.0.43→c60c07d、核心alpha.5→878c13a。精确 CI39147573970 SUCCESS，实际日志证明正常安装16模块、类型/原测试/JS/构建执行成功，PR生产rsync为skipped；最终HEAD仍相同、CLEAN、零threads。

限制：本轮独立 Caps verify/tree 因其先写全局 module-caches/AGENTS.md 被权限审查拒绝，未绕过、未计为独立通过；Caps证据来自精确CI及既有本地收据。独立未重复浏览器/重启，而审阅既有最终图实际收据。未修改源码、新增监听、安装或操作生产。

继续 HOLD：管理员生产 CLI/完整模块图/加载库配对与#116实际证据仍未完成，不能据本次审查合并触发上传或发布stable。

English: independent full review

An independent agent reviewed the entire exact base-to-head change above under the new maintainer authorization, including all four files and the complete lock diff. No actionable findings. The program blob matches base; business/schema/assertions/scripts/CI are unchanged.

Independent runs with the published alpha.5 CLI and the actual project npm runtime pass full strict --verify (empty diagnostics/suggestions; default377/server108definitions), both entry checks, client48/48, server152/152, the original Dayjs replay (original selector confirms22groups/111tests) and title/session/typed-database host tests using newly generated server JS. Existing warnings remain disclosed.

Installed metadata and formal tag identities match the versions/commits listed above; lock changes are limited to procs version/checksum/workspace references. Exact CI39147573970 succeeds, with actual logs confirming normal16-module installation and original type/test/JS/build gates; production rsync is skipped on the PR. Head unchanged, CLEAN and zero threads.

Limits: independent Caps verify/tree was denied because it first writes global module-cache documentation; no bypass or claimed rerun success. Caps evidence is the actual exact-head CI and prior local receipts. Browser/restart receipts were inspected, not independently rerun. No source changes, new listeners, installation or production operation.

Retain HOLD for administrator actual-service CLI/full graph/loaded-library pairing and#116 evidence. Review completion does not authorize merge/upload or stable release.