@de-otio/trellis 0.4.0

package/dist/lib/graph/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/lib/graph/errors.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,6EAA6E;AAC7E,qEAAqE;AACrE,iFAAiF;AACjF,MAAM,QAAQ,GAAG,uCAAuC,CAAC;AACzD,MAAM,UAAU,GAAG,8CAA8C,CAAC;AAClE,4GAA4G;AAC5G,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAEhE,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,GAAG;SACP,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC;SACxC,OAAO,CAAC,UAAU,EAAE,sBAAsB,CAAC;SAC3C,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAsB,UAAW,SAAQ,KAAK;IAG5C,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAPD,gCAOC;AAED;;;;;;GAMG;AACH,MAAa,oBAAqB,SAAQ,UAAU;IACzC,IAAI,GAAG,wBAAwB,CAAC;IAEzC,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;CACF;AAND,oDAMC;AAED;;;;;;GAMG;AACH,MAAa,eAAgB,SAAQ,UAAU;IACpC,IAAI,GAAG,mBAAmB,CAAC;IAC3B,KAAK,CAAU;IAExB,YAAY,OAAe,EAAE,KAAc,EAAE,OAAsB;QACjE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AARD,0CAQC;AAED;;;;GAIG;AACH,MAAa,kBAAmB,SAAQ,UAAU;IACvC,IAAI,GAAG,iBAAiB,CAAC;IACzB,QAAQ,CAAU;IAClB,MAAM,CAAU;IAEzB,YAAY,OAAe,EAAE,QAAiB,EAAE,MAAe,EAAE,OAAsB;QACrF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAVD,gDAUC;AAED;;;;;;;;GAQG;AACH,MAAa,kBAAmB,SAAQ,UAAU;IACvC,IAAI,GAAG,gBAAgB,CAAC;IAEjC,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;CACF;AAND,gDAMC;AAED;;;;;;;;GAQG;AACH,MAAa,uBAAwB,SAAQ,UAAU;IAC5C,IAAI,GAAG,2BAA2B,CAAC;IAE5C,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;CACF;AAND,0DAMC;AAED;;;;;;;;GAQG;AACH,MAAa,iBAAkB,SAAQ,UAAU;IACtC,IAAI,GAAG,eAAe,CAAC;IACvB,SAAS,CAAU;IAE5B,YAAY,OAAe,EAAE,SAAkB,EAAE,OAAsB;QACrE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AARD,8CAQC"}

package/dist/lib/graph/graph-factory.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Graph Service Factory
+ *
+ * Creates and configures the GraphService implementation (Neo4j over Bolt)
+ * against either AuraDB (dev/prod) or a local Docker Neo4j (local/integration
+ * tests). Both targets speak the same Cypher dialect, so the factory only
+ * varies authentication and connection string.
+ *
+ * @example
+ * ```typescript
+ * const graphService = await createGraphService({
+ *   uri: "bolt://localhost:7687",
+ *   user: "neo4j",
+ *   password: "test-password",
+ * });
+ *
+ * const health = await graphService.healthCheck();
+ * ```
+ */
+import type { GraphService, GraphConnection } from "./graph-service";
+export interface GraphServiceEnvConfig {
+    /** Graph database Bolt endpoint (bolt:// for local Neo4j, bolt+s:// for AuraDB) */
+    uri: string;
+    /** Username for basic auth. */
+    user?: string;
+    /** Password for basic auth. */
+    password?: string;
+    /** AWS region used by SSM credential lookup in createGraphServiceFromEnv. */
+    region?: string;
+    maxConnectionPoolSize?: number;
+    connectionAcquisitionTimeout?: number;
+    maxConnectionLifetime?: number;
+    connectionLivenessCheckTimeout?: number;
+    /** Per-query timeout in milliseconds. */
+    queryTimeoutMs?: number;
+}
+/**
+ * Create a connected GraphService instance.
+ *
+ * Reads connection config, creates the appropriate implementation,
+ * and establishes the connection (including schema initialization).
+ *
+ * @param envConfig - Connection configuration (typically from process.env)
+ * @returns A connected GraphService instance that also implements GraphConnection
+ * @throws GraphConnectionError if the database is unreachable
+ */
+export declare function createGraphService(envConfig: GraphServiceEnvConfig): Promise<GraphService & GraphConnection>;
+/**
+ * Create a GraphService from standard environment variables or SSM.
+ *
+ * Resolution order:
+ *   1. If GRAPH_DB_URI is set, use direct env vars (local dev, integration tests).
+ *   2. Else if GRAPH_DB_CREDENTIALS_SSM_PARAM is set, fetch and decrypt from SSM.
+ *
+ * Credentials fetched from SSM are kept in function-local scope and passed
+ * directly to the neo4j driver. They never enter process.env, so child
+ * processes, core dumps, and `env` in a shell exec don't leak them.
+ *
+ * @returns A connected GraphService instance
+ * @throws GraphConnectionError if the database is unreachable
+ * @throws Error if neither GRAPH_DB_URI nor GRAPH_DB_CREDENTIALS_SSM_PARAM is set
+ */
+export declare function createGraphServiceFromEnv(_env?: unknown): Promise<GraphService & GraphConnection>;
+//# sourceMappingURL=graph-factory.d.ts.map

package/dist/lib/graph/graph-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-factory.d.ts","sourceRoot":"","sources":["../../../src/lib/graph/graph-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAQrE,MAAM,WAAW,qBAAqB;IACpC,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA8CD;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,qBAAqB,GAC/B,OAAO,CAAC,YAAY,GAAG,eAAe,CAAC,CAMzC;AAyCD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CACtE,YAAY,GAAG,eAAe,CAC/B,CAwCA"}

package/dist/lib/graph/graph-factory.js

@@ -0,0 +1,190 @@
+"use strict";
+/**
+ * Graph Service Factory
+ *
+ * Creates and configures the GraphService implementation (Neo4j over Bolt)
+ * against either AuraDB (dev/prod) or a local Docker Neo4j (local/integration
+ * tests). Both targets speak the same Cypher dialect, so the factory only
+ * varies authentication and connection string.
+ *
+ * @example
+ * ```typescript
+ * const graphService = await createGraphService({
+ *   uri: "bolt://localhost:7687",
+ *   user: "neo4j",
+ *   password: "test-password",
+ * });
+ *
+ * const health = await graphService.healthCheck();
+ * ```
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createGraphService = createGraphService;
+exports.createGraphServiceFromEnv = createGraphServiceFromEnv;
+const neo4j_graph_service_1 = require("./neo4j-graph-service");
+/**
+ * Build a GraphConnectionConfig from environment-style config.
+ */
+function buildConnectionConfig(env) {
+    const auth = env.user && env.password
+        ? { type: "basic", username: env.user, password: env.password }
+        : { type: "none" };
+    return {
+        endpoint: env.uri,
+        auth,
+        pool: {
+            maxConnectionPoolSize: env.maxConnectionPoolSize,
+            connectionAcquisitionTimeout: env.connectionAcquisitionTimeout,
+            maxConnectionLifetime: env.maxConnectionLifetime,
+            connectionLivenessCheckTimeout: env.connectionLivenessCheckTimeout,
+        },
+        queryTimeoutMs: env.queryTimeoutMs,
+    };
+}
+// ---------------------------------------------------------------------------
+// Environment Variable Helpers
+// ---------------------------------------------------------------------------
+function intEnv(name) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === "")
+        return undefined;
+    const parsed = Number.parseInt(raw, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0 || String(parsed) !== raw.trim()) {
+        // Throwing at startup fails the ECS health check, triggering a
+        // rollback via ECS circuitBreaker instead of running with bad config.
+        throw new Error(`${name} must be a positive integer, got: ${JSON.stringify(raw)}`);
+    }
+    return parsed;
+}
+// ---------------------------------------------------------------------------
+// Factory Function
+// ---------------------------------------------------------------------------
+/**
+ * Create a connected GraphService instance.
+ *
+ * Reads connection config, creates the appropriate implementation,
+ * and establishes the connection (including schema initialization).
+ *
+ * @param envConfig - Connection configuration (typically from process.env)
+ * @returns A connected GraphService instance that also implements GraphConnection
+ * @throws GraphConnectionError if the database is unreachable
+ */
+async function createGraphService(envConfig) {
+    const config = buildConnectionConfig(envConfig);
+    const service = new neo4j_graph_service_1.Neo4jGraphService();
+    await service.connect(config);
+    return service;
+}
+/**
+ * Fetch AuraDB credentials from an SSM SecureString without touching process.env.
+ * The returned values live only on the returned object and are passed directly
+ * into the neo4j driver; `process.env` is never mutated.
+ */
+async function fetchGraphCredentialsFromSsm(paramName, region) {
+    const { SSMClient, GetParameterCommand } = await Promise.resolve().then(() => __importStar(require("@aws-sdk/client-ssm")));
+    const client = new SSMClient({ region });
+    const response = await client.send(new GetParameterCommand({ Name: paramName, WithDecryption: true }));
+    const raw = response.Parameter?.Value;
+    if (!raw) {
+        throw new Error(`SSM parameter ${paramName} has no value`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`SSM parameter ${paramName} is not valid JSON`);
+    }
+    const uri = parsed.NEO4J_URI;
+    const user = parsed.NEO4J_USERNAME;
+    const password = parsed.NEO4J_PASSWORD;
+    if (typeof uri !== "string" || typeof user !== "string" || typeof password !== "string") {
+        throw new Error(`SSM parameter ${paramName} missing required fields NEO4J_URI / NEO4J_USERNAME / NEO4J_PASSWORD`);
+    }
+    return { uri, user, password };
+}
+/**
+ * Create a GraphService from standard environment variables or SSM.
+ *
+ * Resolution order:
+ *   1. If GRAPH_DB_URI is set, use direct env vars (local dev, integration tests).
+ *   2. Else if GRAPH_DB_CREDENTIALS_SSM_PARAM is set, fetch and decrypt from SSM.
+ *
+ * Credentials fetched from SSM are kept in function-local scope and passed
+ * directly to the neo4j driver. They never enter process.env, so child
+ * processes, core dumps, and `env` in a shell exec don't leak them.
+ *
+ * @returns A connected GraphService instance
+ * @throws GraphConnectionError if the database is unreachable
+ * @throws Error if neither GRAPH_DB_URI nor GRAPH_DB_CREDENTIALS_SSM_PARAM is set
+ */
+async function createGraphServiceFromEnv(_env) {
+    const region = process.env.AWS_REGION ?? "eu-central-1";
+    const isLambda = !!process.env.AWS_LAMBDA_FUNCTION_NAME;
+    const poolMax = isLambda ? 1 : intEnv("GRAPH_DB_POOL_MAX_SIZE");
+    // Direct env-var path — local dev, docker-compose, integration tests.
+    if (process.env.GRAPH_DB_URI) {
+        return createGraphService({
+            uri: process.env.GRAPH_DB_URI,
+            user: process.env.GRAPH_DB_USER,
+            password: process.env.GRAPH_DB_PASSWORD,
+            region,
+            maxConnectionPoolSize: poolMax,
+            connectionAcquisitionTimeout: intEnv("GRAPH_DB_POOL_ACQUIRE_TIMEOUT_MS"),
+            maxConnectionLifetime: intEnv("GRAPH_DB_POOL_MAX_LIFETIME_MS"),
+            connectionLivenessCheckTimeout: intEnv("GRAPH_DB_POOL_LIVENESS_CHECK_MS"),
+            queryTimeoutMs: intEnv("GRAPH_DB_QUERY_TIMEOUT_MS"),
+        });
+    }
+    // Runtime SSM fetch — prod / dev AWS. Credentials stay in-memory only.
+    const paramName = process.env.GRAPH_DB_CREDENTIALS_SSM_PARAM;
+    if (!paramName) {
+        throw new Error("Graph DB config missing: set either GRAPH_DB_URI (local) or GRAPH_DB_CREDENTIALS_SSM_PARAM (AWS)");
+    }
+    const creds = await fetchGraphCredentialsFromSsm(paramName, region);
+    return createGraphService({
+        uri: creds.uri,
+        user: creds.user,
+        password: creds.password,
+        region,
+        maxConnectionPoolSize: poolMax,
+        connectionAcquisitionTimeout: intEnv("GRAPH_DB_POOL_ACQUIRE_TIMEOUT_MS"),
+        maxConnectionLifetime: intEnv("GRAPH_DB_POOL_MAX_LIFETIME_MS"),
+        connectionLivenessCheckTimeout: intEnv("GRAPH_DB_POOL_LIVENESS_CHECK_MS"),
+        queryTimeoutMs: intEnv("GRAPH_DB_QUERY_TIMEOUT_MS"),
+    });
+}
+//# sourceMappingURL=graph-factory.js.map

package/dist/lib/graph/graph-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-factory.js","sourceRoot":"","sources":["../../../src/lib/graph/graph-factory.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiFH,gDAQC;AAwDD,8DA0CC;AAvLD,+DAA0D;AAuB1D;;GAEG;AACH,SAAS,qBAAqB,CAC5B,GAA0B;IAE1B,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;QAC/D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEvB,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,GAAG;QACjB,IAAI;QACJ,IAAI,EAAE;YACJ,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;YAChD,4BAA4B,EAAE,GAAG,CAAC,4BAA4B;YAC9D,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;YAChD,8BAA8B,EAAE,GAAG,CAAC,8BAA8B;SACnE;QACD,cAAc,EAAE,GAAG,CAAC,cAAc;KACnC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7E,+DAA+D;QAC/D,sEAAsE;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;GASG;AACI,KAAK,UAAU,kBAAkB,CACtC,SAAgC;IAEhC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,uCAAiB,EAAE,CAAC;IACxC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,4BAA4B,CACzC,SAAiB,EACjB,MAAc;IAEd,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,wDAAa,qBAAqB,GAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CACnE,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,eAAe,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,oBAAoB,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC;IAEvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,sEAAsE,CACjG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,yBAAyB,CAAC,IAAc;IAG5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAc,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAEhE,sEAAsE;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YAC7B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;YAC/B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;YACvC,MAAM;YACN,qBAAqB,EAAE,OAAO;YAC9B,4BAA4B,EAAE,MAAM,CAAC,kCAAkC,CAAC;YACxE,qBAAqB,EAAE,MAAM,CAAC,+BAA+B,CAAC;YAC9D,8BAA8B,EAAE,MAAM,CAAC,iCAAiC,CAAC;YACzE,cAAc,EAAE,MAAM,CAAC,2BAA2B,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;IAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,kBAAkB,CAAC;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM;QACN,qBAAqB,EAAE,OAAO;QAC9B,4BAA4B,EAAE,MAAM,CAAC,kCAAkC,CAAC;QACxE,qBAAqB,EAAE,MAAM,CAAC,+BAA+B,CAAC;QAC9D,8BAA8B,EAAE,MAAM,CAAC,iCAAiC,CAAC;QACzE,cAAc,EAAE,MAAM,CAAC,2BAA2B,CAAC;KACpD,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/graph/graph-schema-init.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Graph Schema Initialization
+ *
+ * Creates constraints and indexes in the graph database on first connect.
+ * Idempotent — safe to run multiple times. Uses "CREATE ... IF NOT EXISTS"
+ * syntax supported by Neo4j 5+ (AuraDB and Community).
+ *
+ * @see /analysis/redesign/07-graph-database/04-graph-schema.md
+ */
+import type { Session } from "neo4j-driver";
+/**
+ * Initialize all graph schema constraints and indexes.
+ *
+ * Each statement runs in its own implicit transaction (Neo4j requires
+ * schema operations to be the only statement in a transaction).
+ *
+ * @param session - An open Neo4j session
+ * @throws If any constraint or index creation fails (non-idempotent errors)
+ */
+export declare function initGraphSchema(session: Session): Promise<void>;
+/**
+ * Verify that all expected constraints and indexes exist.
+ *
+ * Useful for health checks and diagnostics. Returns the names of
+ * any missing constraints or indexes.
+ *
+ * @param session - An open Neo4j session
+ * @returns List of missing constraint/index names (empty if all present)
+ */
+export declare function verifyGraphSchema(session: Session): Promise<string[]>;
+//# sourceMappingURL=graph-schema-init.d.ts.map

package/dist/lib/graph/graph-schema-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-schema-init.d.ts","sourceRoot":"","sources":["../../../src/lib/graph/graph-schema-init.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAuD5C;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAUrE;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0B3E"}

package/dist/lib/graph/graph-schema-init.js

@@ -0,0 +1,105 @@
+"use strict";
+/**
+ * Graph Schema Initialization
+ *
+ * Creates constraints and indexes in the graph database on first connect.
+ * Idempotent — safe to run multiple times. Uses "CREATE ... IF NOT EXISTS"
+ * syntax supported by Neo4j 5+ (AuraDB and Community).
+ *
+ * @see /analysis/redesign/07-graph-database/04-graph-schema.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initGraphSchema = initGraphSchema;
+exports.verifyGraphSchema = verifyGraphSchema;
+// ---------------------------------------------------------------------------
+// Constraints (uniqueness + implicit index on id properties)
+// ---------------------------------------------------------------------------
+const CONSTRAINTS = [
+    {
+        name: "user_id_unique",
+        query: "CREATE CONSTRAINT user_id_unique IF NOT EXISTS FOR (u:User) REQUIRE u.id IS UNIQUE",
+    },
+    {
+        name: "entity_id_unique",
+        query: "CREATE CONSTRAINT entity_id_unique IF NOT EXISTS FOR (e:Entity) REQUIRE e.id IS UNIQUE",
+    },
+    {
+        name: "post_id_unique",
+        query: "CREATE CONSTRAINT post_id_unique IF NOT EXISTS FOR (p:Post) REQUIRE p.id IS UNIQUE",
+    },
+];
+// ---------------------------------------------------------------------------
+// Indexes (for discovery filtering and temporal ordering)
+// ---------------------------------------------------------------------------
+const INDEXES = [
+    {
+        name: "entity_type_breed",
+        query: "CREATE INDEX entity_type_breed IF NOT EXISTS FOR (e:Entity) ON (e.entityType, e.breed)",
+    },
+    {
+        name: "entity_type_lifestage",
+        query: "CREATE INDEX entity_type_lifestage IF NOT EXISTS FOR (e:Entity) ON (e.entityType, e.lifeStage)",
+    },
+    {
+        name: "entity_location",
+        query: "CREATE POINT INDEX entity_location IF NOT EXISTS FOR (e:Entity) ON (e.location)",
+    },
+    {
+        name: "post_created",
+        query: "CREATE INDEX post_created IF NOT EXISTS FOR (p:Post) ON (p.createdAt)",
+    },
+    {
+        name: "post_author",
+        query: "CREATE INDEX post_author IF NOT EXISTS FOR (p:Post) ON (p.authorId)",
+    },
+];
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Initialize all graph schema constraints and indexes.
+ *
+ * Each statement runs in its own implicit transaction (Neo4j requires
+ * schema operations to be the only statement in a transaction).
+ *
+ * @param session - An open Neo4j session
+ * @throws If any constraint or index creation fails (non-idempotent errors)
+ */
+async function initGraphSchema(session) {
+    // Create constraints first (they create implicit indexes on the constrained property)
+    for (const constraint of CONSTRAINTS) {
+        await session.run(constraint.query);
+    }
+    // Create additional indexes for query performance
+    for (const index of INDEXES) {
+        await session.run(index.query);
+    }
+}
+/**
+ * Verify that all expected constraints and indexes exist.
+ *
+ * Useful for health checks and diagnostics. Returns the names of
+ * any missing constraints or indexes.
+ *
+ * @param session - An open Neo4j session
+ * @returns List of missing constraint/index names (empty if all present)
+ */
+async function verifyGraphSchema(session) {
+    const missing = [];
+    const constraintResult = await session.run("SHOW CONSTRAINTS");
+    const existingConstraints = new Set(constraintResult.records.map((r) => r.get("name")));
+    for (const constraint of CONSTRAINTS) {
+        if (!existingConstraints.has(constraint.name)) {
+            missing.push(constraint.name);
+        }
+    }
+    const indexResult = await session.run("SHOW INDEXES");
+    const existingIndexes = new Set(indexResult.records.map((r) => r.get("name")));
+    for (const index of INDEXES) {
+        if (!existingIndexes.has(index.name)) {
+            missing.push(index.name);
+        }
+    }
+    return missing;
+}
+//# sourceMappingURL=graph-schema-init.js.map

package/dist/lib/graph/graph-schema-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-schema-init.js","sourceRoot":"","sources":["../../../src/lib/graph/graph-schema-init.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAkEH,0CAUC;AAWD,8CA0BC;AA7GD,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E,MAAM,WAAW,GAAG;IAClB;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,oFAAoF;KAC5F;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EACH,wFAAwF;KAC3F;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,oFAAoF;KAC5F;CACF,CAAC;AAEF,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,OAAO,GAAG;IACd;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,wFAAwF;KAC3F;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EACH,gGAAgG;KACnG;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,iFAAiF;KACzF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,uEAAuE;KAC/E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,qEAAqE;KAC7E;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACI,KAAK,UAAU,eAAe,CAAC,OAAgB;IACpD,sFAAsF;IACtF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,kDAAkD;IAClD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,iBAAiB,CAAC,OAAgB;IACtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC,CAC7D,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC,CACxD,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}