Implement V39 Depository supply indexing

Add the package-owned DepositorySupplyIndex, source-safe search documents, vector/storage projections, rights boundary, and repair-aware Finding Fits handoff.

Generate the V39 Gate 2 proof artifact, checker, protocol tests, package tests, docs, roadmap updates, and workflow wiring for Gate 2 closure.

Author: geraldarthurdavis

.bitcode/v39-depository-supply-indexing.json

@@ -184,6 +184,9 @@ jobs:
             if [ -f BITCODE_SPEC_V39.md ]; then
               node scripts/check-bitcode-spec-family.mjs --version V39 --mode draft --current-target V38
               node scripts/check-v39-gate1-commercial-reading-roadmap-opening.mjs --skip-branch-check
+              if [ -f scripts/check-v39-gate2-depository-supply-indexing.mjs ]; then
+                node scripts/check-v39-gate2-depository-supply-indexing.mjs --skip-branch-check --skip-package-tests
+              fi
             fi
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2

.github/workflows/bitcode-canon-quality.yml

@@ -313,6 +313,9 @@ jobs:
             if [ -f BITCODE_SPEC_V39.md ]; then
               node scripts/check-bitcode-spec-family.mjs --version V39 --mode draft --current-target V38
               node scripts/check-v39-gate1-commercial-reading-roadmap-opening.mjs --skip-branch-check
+              if [ -f scripts/check-v39-gate2-depository-supply-indexing.mjs ]; then
+                node scripts/check-v39-gate2-depository-supply-indexing.mjs --skip-branch-check --skip-package-tests
+              fi
             fi
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2

.github/workflows/bitcode-gate-quality.yml

@@ -86,6 +86,20 @@ Gate 2 closes Depository supply reality for Reading.
 It must make deposited source materials measurable, indexable, vector-searchable, metadata-searchable, rights-aware, and repairable as the source set that Finding Fits can search.
 The gate is closed by package-backed source, deterministic source-safe artifact generation, deposit lifecycle tests, embedding/vector policy tests, Supabase/storage projection readback, and a checker that proves no protected source or credentials enter public artifacts.
 
+Gate 2 introduces `DepositorySupplyIndex` as the package-owned source-safe
+index over deposited source supply. Each `DepositorySupplyRecord` binds
+repository, branch, commit, proof root, measurement root, reconciliation
+readback root, source-safe search documents, vector projection rows, storage
+readback posture, repair actions, and the depositor/reader rights boundary.
+Its search documents are lexical, metadata, measurement, and vector documents
+derived from source-safe metadata only. Raw protected source remains stored
+outside the index and is never visible to the Reader before settlement. The
+active vector policy remains OpenAI `text-embedding-3-small`, 1536 dimensions,
+cosine `match_deliverable_vectors`; rows that are missing or dimension-invalid
+produce repair posture rather than pretending the corpus is searchable.
+`ReadFitsFindingSynthesis` consumes the index by converting records into
+source-safe `DepositoryAsset` candidates for Finding Fits.
+
 ### Gate 3: Enterprise Reading UX State Machine
 
 Gate 3 implements the five-step enterprise Reading path in Terminal and connected Conversation handoffs.
@@ -199,6 +213,8 @@ Current source-bearing implementation basis: package source and route contracts
 Current validating commands and parity basis: active V38 promoted checks plus V39 gate checks.
 Current accepted boundaries: V39 only changes inference/search surfaces that consume deposits.
 
+Gate 2 implementation basis: `packages/pipelines/asset-pack/src/depository-supply-index.ts` owns `DepositorySupplyIndex`, `DepositorySupplyRecord`, `DepositorySupplySearchDocument`, `DepositorySupplyVectorProjection`, and `DepositorySupplyStorageProjection`. The deterministic source-safe proof artifact is `.bitcode/v39-depository-supply-indexing.json`, generated by `pnpm run generate:v39-depository-supply-indexing` and checked by `pnpm run check:v39-gate2`.
+
 ### Reading and prompt/inference ownership
 
 Current canonical objects and emitted artifacts: Read Request, synthesized Need, prompt registry receipts, PromptPart benchmark fixtures, Failsafe receipts, ThricifiedGeneration receipts, and typed Need outputs.

BITCODE_SPEC_V39.md

@@ -81,8 +81,13 @@ Closure acceptance:
 
 Closure implementation:
 
-- Pending Gate 2 work must define its package-owned canonical source and deterministic artifact path before implementation begins.
-- The artifact must use a source-safe disclosure posture and include repair/replay acceptance criteria.
+- V39 Gate 2 package source is `packages/pipelines/asset-pack/src/depository-supply-index.ts`.
+- `DepositorySupplyIndex` and `DepositorySupplyRecord` normalize deposited source supply into source-safe lifecycle receipts with repository, branch, commit, proof, measurement, reconciliation readback, BTD range, depositor wallet, and source-safe search document roots.
+- Source-safe search documents are lexical, metadata, measurement, and vector projections. They carry source-safe text roots, source path roots, symbol roots, constraint roots, and active vector policy metadata without protected source text.
+- Vector projection preserves OpenAI `text-embedding-3-small`, 1536 dimensions, cosine `match_deliverable_vectors`; pending or invalid vector rows emit repair actions.
+- Storage projection binds the retained physical `deliverables` and `deliverable_vectors` tables to the active AssetPack evidence semantics.
+- `ReadFitsFindingSynthesis` consumes `DepositorySupplyIndex` through `depositorySupplyAssetsFromIndex`, preserving source-safe handoff into candidate recall and ranking.
+- The deterministic artifact path is `.bitcode/v39-depository-supply-indexing.json`; `pnpm run check:v39-gate2` validates artifact freshness, protocol tests, package tests, source-safety markers, docs, and workflow wiring.
 
 ### Gate 3: Enterprise Reading UX State Machine
 

BITCODE_SPEC_V39_DELTA.md

@@ -175,6 +175,17 @@ Gate 1 adds `check:v39-gate1`, workflow posture updates, README and package docu
 
 Gate 2 closes Depository supply indexing and searchable deposit lifecycle. The artifact must prove deposited source can be measured, embedded, indexed, rights-aware, and searched without exposing protected source or credentials.
 
+Gate 2 closure note: `DepositorySupplyIndex` is now the package-owned
+source-safe index for deposited supply. It produces `DepositorySupplyRecord`
+receipts with source binding, proof roots, measurement roots, reconciliation
+readback roots, lexical/metadata/measurement/vector source-safe search
+documents, active embedding vector projections, storage projection readback,
+depositor/reader BTD rights boundary, and repair actions. The index converts
+into `DepositoryAsset` candidates for `ReadFitsFindingSynthesis` through
+`depositorySupplyAssetsFromIndex`, so Finding Fits can search deposited supply
+without reading source-bearing payloads before settlement. The proof artifact is
+`.bitcode/v39-depository-supply-indexing.json`.
+
 ## Gate 3 implementation notes
 
 Gate 3 closes the enterprise Reading UX state machine. Terminal and Conversation handoff must expose the five-step Reading path with low-detail guidance by default and expandable source-safe pipeline detail.

BITCODE_SPEC_V39_NOTES.md

@@ -70,7 +70,7 @@ No `_legacy/` source is active source truth.
 | Inference vocabulary | Gate 1 | `PipelineExecution`, PTRR Plan/Try/Refine/Retry, `FailsafeGenerationSequence`, `ThricifiedGeneration`, `ToolExecution`, `DocCodeToolPrompt` | drafted | V38 inference law remains binding on V39 product implementation. |
 | Depository search scope | Gate 1 | depository-search source and tools, embedding policy, fit ranking expectations | drafted | Gate plan requires many-candidate Finding Fits across lexical, symbolic, path, metadata, measurement, vector, and provider channels. |
 | Settlement and delivery scope | Gate 1 | BTD receipts, source-to-shares compensation, ledger/database/storage synchronization, pull-request delivery | drafted | Gate plan keeps source-bearing AssetPack delivery blocked until settlement unlock. |
-| Depository supply indexing | Gate 2 | package source, generated artifact, deposit lifecycle tests, embedding/search projection tests | pending | Deposited source becomes measurable, indexable, rights-aware, searchable, and repairable. |
+| Depository supply indexing | Gate 2 | `packages/pipelines/asset-pack/src/depository-supply-index.ts`, `.bitcode/v39-depository-supply-indexing.json`, `packages/pipelines/asset-pack/src/__tests__/depository-supply-index.test.ts`, `packages/protocol/test/v39-depository-supply-indexing.test.js` | implemented | Deposited source becomes measurable, indexable, rights-aware, searchable, and repairable through source-safe `DepositorySupplyIndex` records. |
 | Enterprise Reading UX state machine | Gate 3 | Terminal route state, Conversation handoff, rich execution log, browser proof | pending | The five-step enterprise Reading UX is implemented with low-detail defaults and expandable source-safe detail. |
 | ReadNeed review and resynthesis | Gate 4 | `ReadNeedComprehensionSynthesis`, Need storage, feedback, resynthesis, accepted-Need admission | pending | Finding Fits remains blocked until a reviewed Need is accepted. |
 | ReadFitsFinding runtime and replay | Gate 5 | `ReadFitsFindingSynthesis`, search tools, embeddings, ranking, selected-fit provenance, replay receipts | pending | Finding Fits searches the whole available Depository for many above-threshold candidates. |
@@ -92,7 +92,7 @@ No `_legacy/` source is active source truth.
 | Gate-quality workflow | Gate workflow validates V38 active / V39 draft posture and the V39 Gate 1 checker | drafted |
 | Canon-quality workflow | Canon workflow validates promoted V38 canon, V39 draft family when present, and V38/V39 posture | drafted |
 | Package docs | README, protocol package README, demonstration README, and PR template state V38 active / V39 draft workflow | drafted |
-| Depository supply indexing | Deposits become measurable, embedded, indexable, rights-aware, searchable, and repairable | pending |
+| Depository supply indexing | Deposits become measurable, embedded, indexable, rights-aware, searchable, and repairable | implemented |
 | Enterprise Reading UX | Terminal implements request read, review Need, request Finding Fits, review preview, buy and settle | pending |
 | ReadNeed runtime | `ReadNeedComprehensionSynthesis` persists reviewable Needs, feedback, resynthesis, measurements, and accepted-Need admission | pending |
 | ReadFitsFinding runtime | `ReadFitsFindingSynthesis` searches many above-threshold deposits with replayable query, ranking, threshold, and selected-fit provenance receipts | pending |
@@ -123,15 +123,31 @@ No `_legacy/` source is active source truth.
 | Finding Fits is plural and depository-wide | `packages/pipelines/asset-pack/src/depository-search.ts`, V39 SPEC/DELTA | drafted |
 | Gate checker is wired | `scripts/check-v39-gate1-commercial-reading-roadmap-opening.mjs`, `package.json`, workflows | drafted |
 
+## Gate 2 Parity
+
+| Requirement | Source evidence | Current V39 judgment |
+| --- | --- | --- |
+| Depository supply index type exists | `packages/pipelines/asset-pack/src/depository-supply-index.ts` | implemented |
+| Deposited source lifecycle is source-bound | `DepositorySupplyRecord.sourceBinding`, `DepositorySupplyRecord.lifecycle`, `depository-supply-index.test.ts` | implemented |
+| Source-safe search documents exist | `DepositorySupplySearchDocument`, lexical/metadata/measurement/vector document kinds | implemented |
+| Active vector policy is projected | `DepositorySupplyVectorProjection`, `embedding-config.ts`, `match_deliverable_vectors`, `text-embedding-3-small`, 1536 dimensions | implemented |
+| Supabase/storage readback projection exists | `DepositorySupplyStorageProjection`, retained `deliverables` and `deliverable_vectors` storage-edge names | implemented |
+| Depositor and Reader rights boundary is explicit | `DepositorySupplyRecord.rightsBoundary`, BTD range, depositor wallet, settlement-required source-bearing unlock | implemented |
+| Repair posture is deterministic | lifecycle blockers, warnings, and `repairActions` including `sync-active-embedding-vector-rows` | implemented |
+| Finding Fits handoff is source-safe | `depositorySupplyAssetsFromIndex`, `depository-search.ts`, package tests returning `worthy_fit` without raw source text | implemented |
+| Gate 2 proof artifact is source-safe | `.bitcode/v39-depository-supply-indexing.json`, `packages/protocol/src/canonical/v39-depository-supply-indexing.js`, `packages/protocol/test/v39-depository-supply-indexing.test.js` | implemented |
+| Gate 2 checker is wired | `scripts/check-v39-gate2-depository-supply-indexing.mjs`, `package.json`, canon/gate workflows | implemented |
+
 ## Later Gate Parity
 
-Later V39 gates must add gate-specific parity sections when their implementation begins. Gate 1 intentionally does not claim closure for Depository indexing, enterprise Reading UX, Need review, Finding Fits runtime, preview/quote, settlement/delivery, telemetry/repair, interface parity, rehearsal, or promotion readiness.
+Later V39 gates must add gate-specific parity sections when their implementation begins. Gates 1 and 2 intentionally do not claim closure for enterprise Reading UX, Need review, Finding Fits runtime, preview/quote, settlement/delivery, telemetry/repair, interface parity, rehearsal, or promotion readiness.
 
 ## accepted boundaries and reopen conditions
 
 V39 Gate 1 accepts only draft-family, roadmap, workflow, branch, and documentation posture closure.
+V39 Gate 2 accepts only Depository supply indexing, source-safe search document, vector projection, storage readback posture, rights boundary, repair posture, and Finding Fits handoff closure.
 Later gate scope is intentionally pending and must be reopened into gate-specific parity sections before implementation starts.
 
 ## completion condition
 
-V39 Gate 1 is complete when `check:v39-gate1`, V39 draft spec-family validation, V38/V39 canon-posture drift validation, and promoted V38 spec-family validation all pass on a `v39/gate-1-*` branch.
+V39 Gate 2 is complete when `check:v39-gate2`, package Depository supply tests, V39 draft spec-family validation, V38/V39 canon-posture drift validation, and promoted V38 spec-family validation all pass on a `v39/gate-2-*` branch.

BITCODE_SPEC_V39_PARITY_MATRIX.md

@@ -249,6 +249,14 @@ ReadFitsFinding runtime and replay, source-safe AssetPack preview and
 deterministic BTC quote, settlement, BTD rights transfer, post-settlement
 delivery, ledger/database/storage synchronization, telemetry/repair, interface
 parity, local/staging rehearsal, and promotion readiness.
+V39 Gate 2 adds the package-owned `DepositorySupplyIndex` and source-safe
+generated artifact `.bitcode/v39-depository-supply-indexing.json`. Deposited
+source supply is normalized into rights-aware records with repository, branch,
+commit, proof, measurement, reconciliation readback, BTD range, depositor
+wallet, source-safe search documents, active embedding/vector projection,
+Supabase storage readback posture, deterministic repair actions, and a
+source-safe Finding Fits handoff. Use `pnpm run generate:v39-depository-supply-indexing`
+and `pnpm run check:v39-gate2` before closing the gate.
 V36 Gate 2 anchors market-wide activity through the package-owned
 `ExchangeActivityBook` and the source-safe generated artifact
 `.bitcode/v36-exchange-activity-book.json`, including listing, bid, ask,

README.md

@@ -5,8 +5,8 @@
 - Current active canonical pointer: `BITCODE_SPEC.txt` -> `V38`
 - Current active canon: `BITCODE_SPEC_V38.md`
 - Current draft target: `BITCODE_SPEC_V39.md`.
-- Current working gate: V39 Gate 1 Commercial Reading Roadmap And Spec Opening.
-- Next queued gate after V39 Gate 1 closure: V39 Gate 2 Depository Supply Indexing And Searchable Deposit Lifecycle.
+- Current working gate: V39 Gate 2 Depository Supply Indexing And Searchable Deposit Lifecycle.
+- Next queued gate after V39 Gate 2 closure: V39 Gate 3 Enterprise Reading UX State Machine.
 - Latest closed version: V38 Inference Correctness, which promoted pipeline execution call-stack law, PTRR/Failsafe/Thricified parity, prompt and PromptPart benchmarking, source-safe inference telemetry, ReadNeedComprehensionSynthesis hardening, ReadFitsFindingSynthesis search and embeddings, AssetPack economic traceability, local/staging inference rehearsal, and V38 promotion readiness.
 - Recent V38 closure anchor: V38 Gate 11 Promotion Readiness generated V38 proof support, promoted `BITCODE_SPEC.txt` to `V38`, prepared V38 active / V39 draft runtime posture, and closed inference correctness canon.
 - V34 Gate 2 closure anchor: deployment-depth now owns package-backed `DeploymentHostCapabilityCatalog` and `EnvironmentLaneContract` source, deterministic `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, and visible `value-bearing-mainnet` blocking through `blocked_future_canon_required`.
@@ -61,6 +61,7 @@
 - V38 Gate 10 closure anchor: Inference correctness depth now owns package-backed `V38LocalStagingInferenceDepositorySearchRehearsal` source, deterministic `.bitcode/v38-local-staging-inference-depository-search-rehearsal.json`, `source-safe-local-staging-inference-depository-search-rehearsal-metadata`, protocol test, Vercel Sandbox harness tests, Reading depository-search tests, route preflight/harness tests, Terminal stream UI tests, generator/checker scripts, workflow wiring, 8 rehearsal rows, 2 lanes, local sandbox opt-in, staging-testnet bounded real-inference preflight, Supabase readback validation, ReadNeedComprehensionSynthesis and ReadFitsFindingSynthesis rehearsal, many-fit search, source-safe AssetPack preview, telemetry streaming/readback, ledger/database posture, blocked production-mainnet value-bearing admission, and protected source/raw prompt/raw provider response/live log payload/unpaid AssetPack source/credential/private wallet/private settlement payloads kept private or blocked.
 - V38 Gate 11 closure anchor: Inference correctness depth now owns package-backed `V38InferencePromotionReadinessReport` source, deterministic `.bitcode/v38-promotion-readiness-report.json`, `source-safe-inference-promotion-readiness-metadata`, source-safe coverage for all V38 inference artifacts, `BITCODE_SPEC_V38_PROVEN.md` generation support, promotion command dry-run support, `v38-canon-promotion.yml`, active V38 / draft V39 posture preparation, package tests, workflow wiring, and `check:v38-gate11`.
 - V39 Gate 1 opening anchor: Commercial Reading readiness opens over promoted V38 with V39 SPEC, DELTA, NOTES, and PARITY files, `check:v39-gate1`, V38 active / V39 draft posture, and an eleven-gate plan for Depository supply indexing, enterprise Reading UX state, ReadNeed review/resynthesis, ReadFitsFinding runtime and replay, AssetPack preview/quote disclosure, settlement/BTD rights/delivery, operational telemetry/repair, interface parity, local/staging rehearsal, and promotion readiness.
+- V39 Gate 2 closure anchor: Commercial Reading readiness now owns package-backed `DepositorySupplyIndex` source, deterministic `.bitcode/v39-depository-supply-indexing.json`, source-safe Depository supply records, lexical/metadata/measurement/vector search documents, active OpenAI embedding/vector projection, Supabase storage readback posture, depositor/Reader settlement boundary, repair actions, Finding Fits handoff, package tests, protocol tests, workflow wiring, and `check:v39-gate2`.
 - Purpose: concise running index of Bitcode/ENGI specification history, current work, and planned work.
 
 This roadmap is not an active system specification.

SPECIFICATIONS_ROADMAP.md

@@ -215,6 +215,9 @@
     "check:v37-gate1": "node scripts/check-v37-gate1-conversations-roadmap-opening.mjs",
     "check:v38-gate1": "node scripts/check-v38-gate1-inference-stack-roadmap-opening.mjs",
     "check:v39-gate1": "node scripts/check-v39-gate1-commercial-reading-roadmap-opening.mjs",
+    "generate:v39-depository-supply-indexing": "node scripts/generate-v39-depository-supply-indexing.mjs",
+    "check:v39-depository-supply-indexing": "node scripts/generate-v39-depository-supply-indexing.mjs --check",
+    "check:v39-gate2": "node scripts/check-v39-gate2-depository-supply-indexing.mjs",
     "generate:v38-inference-surface-inventory": "node scripts/generate-v38-inference-surface-inventory.mjs",
     "check:v38-inference-surface-inventory": "node scripts/generate-v38-inference-surface-inventory.mjs --check",
     "check:v38-gate2": "node scripts/check-v38-gate2-inference-surface-inventory.mjs",