@equationalapplications/core-llm-wiki 7.1.2 → 7.1.3

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { M as MemoryBundle, F as FormatContextOptions, G as GraphNeighborhood, a as MemoryDump, b as FormattedMemoryDump, O as OntologyManifest, R as ReadOptions, S as SQLiteAdapter, W as WikiOptions, c as WikiMemory } from './testing-CA7723qk.mjs';
-export { C as ChunkFailure, D as DegradedRecord, E as EmbedFactResult, d as EmbedFailureKind, e as EmbeddingMarkerKind, f as EntityStatus, g as ExtractedFact, h as ExtractedFactEdge, i as ExtractedFactWithOntology, j as ExtractedTask, k as GraphTraversalOptions, H as HEAL_BATCH_SIZE, l as HEAL_RECHECK_MS, m as HOOK_TIMEOUT_MARKER, n as HealResult, I as IngestDocumentResult, L as LLMProvider, o as ONTOLOGY_BACKFILL_BATCH_SIZE, p as ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, q as ONTOLOGY_BACKFILL_RECHECK_MS, r as OntologyBackfillResult, s as OntologyConfig, t as OntologyEdgeType, u as OntologyMode, v as OntologyNodeType, w as OntologyPromptContext, x as OntologyUpdates, P as PromptOverrides, y as PromptService, z as PrunePartialFailureError, A as ReembedResult, V as VectorRanker, B as VectorRankerFallback, J as VectorRankerRankArgs, K as VectorRankerSemanticResult, N as WikiBusyError, Q as WikiBusyOperation, T as WikiCheckpoint, U as WikiConfig, X as WikiDuplicateHashError, Y as WikiEdge, Z as WikiEvent, _ as WikiFact, $ as WikiIngestEmptyError, a0 as WikiInvalidReadOptions, a1 as WikiMemoryTestAccess, a2 as WikiOutboxEvent, a3 as WikiParseError, a4 as WikiSourceRefHashCollision, a5 as WikiStrictOntologyViolation, a6 as WikiTask, a7 as WikiTransactionError } from './testing-CA7723qk.mjs';
+import { M as MemoryBundle, F as FormatContextOptions, G as GraphNeighborhood, a as MemoryDump, b as FormattedMemoryDump, O as OntologyManifest, R as ReadOptions, S as SQLiteAdapter, W as WikiOptions, c as WikiMemory } from './testing-DYeMd9d1.mjs';
+export { C as ChunkFailure, D as DegradedRecord, E as EmbedFactResult, d as EmbedFailureKind, e as EmbeddingMarkerKind, f as EntityStatus, g as ExtractedFact, h as ExtractedFactEdge, i as ExtractedFactWithOntology, j as ExtractedTask, k as GraphTraversalOptions, H as HEAL_BATCH_SIZE, l as HEAL_RECHECK_MS, m as HOOK_TIMEOUT_MARKER, n as HealResult, I as IngestDocumentResult, L as LLMProvider, o as ONTOLOGY_BACKFILL_BATCH_SIZE, p as ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, q as ONTOLOGY_BACKFILL_RECHECK_MS, r as OntologyBackfillResult, s as OntologyConfig, t as OntologyEdgeType, u as OntologyMode, v as OntologyNodeType, w as OntologyPromptContext, x as OntologyUpdates, P as PromptOverrides, y as PromptService, z as PrunePartialFailureError, A as ReembedResult, V as VectorRanker, B as VectorRankerFallback, J as VectorRankerRankArgs, K as VectorRankerSemanticResult, N as WikiBusyError, Q as WikiBusyOperation, T as WikiCheckpoint, U as WikiConfig, X as WikiDuplicateHashError, Y as WikiEdge, Z as WikiEvent, _ as WikiFact, $ as WikiGraphNodeOwnershipConflict, a0 as WikiIngestEmptyError, a1 as WikiInvalidReadOptions, a2 as WikiMemoryTestAccess, a3 as WikiOutboxEvent, a4 as WikiParseError, a5 as WikiSourceRefHashCollision, a6 as WikiStrictOntologyViolation, a7 as WikiTask, a8 as WikiTransactionError } from './testing-DYeMd9d1.mjs';
 import { OkfFile } from '@equationalapplications/core-okf';
 import 'minisearch';
 

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { M as MemoryBundle, F as FormatContextOptions, G as GraphNeighborhood, a as MemoryDump, b as FormattedMemoryDump, O as OntologyManifest, R as ReadOptions, S as SQLiteAdapter, W as WikiOptions, c as WikiMemory } from './testing-CA7723qk.js';
-export { C as ChunkFailure, D as DegradedRecord, E as EmbedFactResult, d as EmbedFailureKind, e as EmbeddingMarkerKind, f as EntityStatus, g as ExtractedFact, h as ExtractedFactEdge, i as ExtractedFactWithOntology, j as ExtractedTask, k as GraphTraversalOptions, H as HEAL_BATCH_SIZE, l as HEAL_RECHECK_MS, m as HOOK_TIMEOUT_MARKER, n as HealResult, I as IngestDocumentResult, L as LLMProvider, o as ONTOLOGY_BACKFILL_BATCH_SIZE, p as ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, q as ONTOLOGY_BACKFILL_RECHECK_MS, r as OntologyBackfillResult, s as OntologyConfig, t as OntologyEdgeType, u as OntologyMode, v as OntologyNodeType, w as OntologyPromptContext, x as OntologyUpdates, P as PromptOverrides, y as PromptService, z as PrunePartialFailureError, A as ReembedResult, V as VectorRanker, B as VectorRankerFallback, J as VectorRankerRankArgs, K as VectorRankerSemanticResult, N as WikiBusyError, Q as WikiBusyOperation, T as WikiCheckpoint, U as WikiConfig, X as WikiDuplicateHashError, Y as WikiEdge, Z as WikiEvent, _ as WikiFact, $ as WikiIngestEmptyError, a0 as WikiInvalidReadOptions, a1 as WikiMemoryTestAccess, a2 as WikiOutboxEvent, a3 as WikiParseError, a4 as WikiSourceRefHashCollision, a5 as WikiStrictOntologyViolation, a6 as WikiTask, a7 as WikiTransactionError } from './testing-CA7723qk.js';
+import { M as MemoryBundle, F as FormatContextOptions, G as GraphNeighborhood, a as MemoryDump, b as FormattedMemoryDump, O as OntologyManifest, R as ReadOptions, S as SQLiteAdapter, W as WikiOptions, c as WikiMemory } from './testing-DYeMd9d1.js';
+export { C as ChunkFailure, D as DegradedRecord, E as EmbedFactResult, d as EmbedFailureKind, e as EmbeddingMarkerKind, f as EntityStatus, g as ExtractedFact, h as ExtractedFactEdge, i as ExtractedFactWithOntology, j as ExtractedTask, k as GraphTraversalOptions, H as HEAL_BATCH_SIZE, l as HEAL_RECHECK_MS, m as HOOK_TIMEOUT_MARKER, n as HealResult, I as IngestDocumentResult, L as LLMProvider, o as ONTOLOGY_BACKFILL_BATCH_SIZE, p as ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, q as ONTOLOGY_BACKFILL_RECHECK_MS, r as OntologyBackfillResult, s as OntologyConfig, t as OntologyEdgeType, u as OntologyMode, v as OntologyNodeType, w as OntologyPromptContext, x as OntologyUpdates, P as PromptOverrides, y as PromptService, z as PrunePartialFailureError, A as ReembedResult, V as VectorRanker, B as VectorRankerFallback, J as VectorRankerRankArgs, K as VectorRankerSemanticResult, N as WikiBusyError, Q as WikiBusyOperation, T as WikiCheckpoint, U as WikiConfig, X as WikiDuplicateHashError, Y as WikiEdge, Z as WikiEvent, _ as WikiFact, $ as WikiGraphNodeOwnershipConflict, a0 as WikiIngestEmptyError, a1 as WikiInvalidReadOptions, a2 as WikiMemoryTestAccess, a3 as WikiOutboxEvent, a4 as WikiParseError, a5 as WikiSourceRefHashCollision, a6 as WikiStrictOntologyViolation, a7 as WikiTask, a8 as WikiTransactionError } from './testing-DYeMd9d1.js';
 import { OkfFile } from '@equationalapplications/core-okf';
 import 'minisearch';
 

package/dist/index.js

@@ -270,6 +270,21 @@ var WikiSourceRefHashCollision = class extends Error {
     this.name = "WikiSourceRefHashCollision";
   }
 };
+var WikiGraphNodeOwnershipConflict = class extends Error {
+  /**
+   * Privacy-preserving constructor: accepts no arguments, so neither the foreign
+   * owner, the conflicting node ID, the stored content, nor any provenance can
+   * leak through this error. The fixed message and `code` are the entire signal.
+   *
+   * @returns a contextless `WikiGraphNodeOwnershipConflict` instance. See the
+   *   class-level JSDoc for the privacy rationale.
+   */
+  constructor() {
+    super("Graph write rejected because a node ID is unavailable for this entity.");
+    this.code = "WIKI_GRAPH_NODE_OWNERSHIP_CONFLICT";
+    this.name = "WikiGraphNodeOwnershipConflict";
+  }
+};
 var WikiTransactionError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -764,6 +779,26 @@ var EntryRepository = class extends BaseRepository {
    * diagnostic that inflates runReembed's permanentlyFailed counter. A conflict
    * with no blob leaves marker state alone, matching the "absent means don't
    * touch" semantics used for embedding_blob itself.
+   *
+   * Graph node ownership (spec §2.4 + §3, REQ-OWN-01 + REQ-GRAPH-01): entry
+   * IDs share one database-wide namespace, so an ID stays owned by its
+   * existing entity for as long as the row exists — soft deletion included.
+   * The pre-write lookup already reads the existing row for OKF metadata; we
+   * project `entity_id` off that same SELECT and reject the write before
+   * any outbox payload construction when the stored owner differs from
+   * `fact.entity_id`. Soft-deleted foreign rows keep their IDs reserved;
+   * permanent reservation is NOT introduced, so a physically absent ID may
+   * still be inserted under the requested entity. The ON CONFLICT UPDATE SET
+   * clause carries a final `WHERE entries.entity_id = excluded.entity_id`
+   * guard so the database itself refuses a cross-owner row overwrite even if
+   * a future caller bypasses the pre-write check. When `runAsync` reports
+   * 0 changes (a legitimate conflict-suppressed write, OR an adapter that
+   * under-reports a permitted write) we re-read the stored owner; only a
+   * foreign owner throws — this is local defensive behavior, not permission
+   * for adapters to under-report. The thrown error is
+   * `WikiGraphNodeOwnershipConflict` (no owner, node ID, or stored content
+   * is disclosed). Upserts that pass both gates retain existing same-entity
+   * update + resurrection semantics.
    */
   async upsert(fact, tx) {
     const executor = this.getExecutor(tx);
@@ -771,12 +806,15 @@ var EntryRepository = class extends BaseRepository {
     const tagsJson = JSON.stringify(fact.tags);
     const embeddingBlob = this.normalizeEmbeddingBlob(fact.embedding_blob);
     const existingRow = await executor.getFirstAsync(
-      `SELECT id, lifecycle_status, stale_after, generated_by,
+      `SELECT id, entity_id, lifecycle_status, stale_after, generated_by,
               okf_sources, okf_verified, okf_usage_window,
               last_verified_at, last_verified_by
          FROM ${this.prefix}entries WHERE id = ?`,
       [fact.id]
     );
+    if (existingRow && existingRow.entity_id !== fact.entity_id) {
+      throw new WikiGraphNodeOwnershipConflict();
+    }
     const operation = fact.deleted_at ? "DELETE" : existingRow ? "UPDATE" : "INSERT";
     const result = await executor.runAsync(
       `INSERT INTO ${this.prefix}entries (
@@ -787,7 +825,6 @@ var EntryRepository = class extends BaseRepository {
         okf_sources, okf_verified, okf_usage_window
       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       ON CONFLICT(id) DO UPDATE SET
-        entity_id = excluded.entity_id,
         title = excluded.title,
         body = excluded.body,
         tags = excluded.tags,
@@ -804,7 +841,8 @@ var EntryRepository = class extends BaseRepository {
         embedding_failed_at = CASE WHEN excluded.embedding_blob IS NOT NULL THEN NULL ELSE embedding_failed_at END,
         embedding_failure_kind = CASE WHEN excluded.embedding_blob IS NOT NULL THEN NULL ELSE embedding_failure_kind END,
         embedding_attempts = CASE WHEN excluded.embedding_blob IS NOT NULL THEN 0 ELSE embedding_attempts END,
-        okf_type = excluded.okf_type`,
+        okf_type = excluded.okf_type
+      WHERE ${this.prefix}entries.entity_id = excluded.entity_id`,
       [
         fact.id,
         fact.entity_id,
@@ -836,6 +874,18 @@ var EntryRepository = class extends BaseRepository {
         fact.okf_usage_window ? JSON.stringify(fact.okf_usage_window) : null
       ]
     );
+    if (result.changes === 0) {
+      const stored = await tx.getFirstAsync(
+        `SELECT entity_id FROM ${this.prefix}entries WHERE id = ?`,
+        [fact.id]
+      );
+      if (!stored) {
+        throw new Error("Entry upsert reported no change and stored no row; the SQLiteAdapter did not perform the write");
+      }
+      if (stored.entity_id !== fact.entity_id) {
+        throw new WikiGraphNodeOwnershipConflict();
+      }
+    }
     const persistedOkf = existingRow ? {
       lifecycle_status: existingRow.lifecycle_status ?? "stable",
       stale_after: existingRow.stale_after != null ? Number(existingRow.stale_after) : null,
@@ -4510,6 +4560,36 @@ var IngestionService = class {
       releaseIngestLocks();
     }
   }
+  /**
+   * Reject the whole write when any incoming node ID is already owned by a
+   * different entity. Runs entirely inside the supplied `tx`, through the
+   * repository abstraction, and — being the first thing `upsertGraphCore`
+   * does — before ontology resolution, which can itself persist a configured
+   * seed manifest.
+   *
+   * The lookup has no deleted-row filter, so a soft-deleted foreign row keeps
+   * its ID reserved. Only the lookup IDs are deduplicated; `params.nodes` and
+   * the later write loops keep their ordering and counts.
+   *
+   * The error is deliberately contextless — see WikiGraphNodeOwnershipConflict.
+   *
+   * @param entityId - the entity the caller is writing on behalf of. Foreign
+   *   rows under a different entity trigger the rejection.
+   * @param nodes - incoming node set; only the IDs are inspected, so callers
+   *   may pass the public `params.nodes` shape directly without slicing.
+   * @param tx - the open transaction. Reuses the same handle every later
+   *   statement in `upsertGraphCore` runs against, so atomicity is enforced
+   *   by the host transaction's commit/rollback, not by this method.
+   */
+  async assertGraphNodeOwnership(entityId, nodes, tx) {
+    const ids = [...new Set(nodes.map((node) => node.id))];
+    const existing = await this.entryRepo.findExistingMetadataByIds(ids, tx);
+    for (const row of existing) {
+      if (row.entity_id !== entityId) {
+        throw new WikiGraphNodeOwnershipConflict();
+      }
+    }
+  }
   /**
    * Implements spec §2 data flow steps a–j with the host-facing
    * `{sourceRef, sourceHash, nodes, edges}` parameter shape. Shared between
@@ -4528,8 +4608,19 @@ var IngestionService = class {
    * @returns Counts: nodesWritten (validated nodes persisted), edgesWritten
    *   (manifest-valid edges persisted), superseded (prior facts soft-deleted
    *   plus prior source-ref edges hard-deleted).
+   *
+   * Node-ownership pre-flight (spec §3, REQ-GRAPH-01): the first statement
+   * is `assertGraphNodeOwnership(entityId, params.nodes, tx)`, which runs
+   * before ontology resolution, seed-manifest persistence, and every other
+   * write. A foreign-owned ID throws `WikiGraphNodeOwnershipConflict` with
+   * no disclosed owner, node ID, or content; the caller's transaction
+   * remains open and must be rolled back by the host. Soft-deleted foreign
+   * rows keep their IDs reserved. Duplicate incoming IDs are deduplicated
+   * only for the lookup; `params.nodes` and the write loops keep their
+   * ordering and counts so success counts match the pre-change contract.
    */
   async upsertGraphCore(entityId, params, tx, opts) {
+    await this.assertGraphNodeOwnership(entityId, params.nodes, tx);
     const now = Date.now();
     const ontologyState = await this.ontologyService?.getEffectiveState(entityId, tx) ?? { mode: "off", manifest: { node_types: [], edge_types: [] } };
     let { mode, manifest } = ontologyState;
@@ -7975,6 +8066,11 @@ var WikiMemory = class {
     return this.maintenanceService.forget(entityId, params, opts);
   }
   /**
+   * Full and partial ingestion both reject foreign-owned generated fact IDs with
+   * `WikiGraphNodeOwnershipConflict`. Such collisions are unexpected. Ingestion
+   * may already have persisted ontology or other state before rejection; unlike
+   * direct graph preflight, it relies on transaction rollback for atomicity.
+   *
    * @param params.promptOverride - Overrides the system prompt for this ingest call only.
    * For persistent customization, set `options.config.prompts.ingestSystemPrompt` at
    * WikiMemory construction time.
@@ -8006,6 +8102,19 @@ var WikiMemory = class {
    *   or edge `type` throws `WikiStrictOntologyViolation` (pre-flight,
    *   all-or-nothing — NONE written on failure).
    *
+   * Entry IDs share one database-wide namespace. Existing rows, including
+   * soft-deleted rows, reserve their IDs for their entity; same-entity updates
+   * and resurrection remain supported. Hosts authenticate callers and select
+   * the authorized entity ID; entity-qualified IDs are optional, not required.
+   * After the live-only C2 probe above, a foreign node ID throws the fixed,
+   * privacy-preserving `WikiGraphNodeOwnershipConflict` before persistent writes
+   * (including seed manifests). Deleted source mappings do not trigger C2.
+   *
+   * Propagate later failures to roll back the host transaction. In particular,
+   * foreign edge-ID collisions remain late bare `Error`s: the foreign edge is
+   * not overwritten, but catching and committing can retain earlier writes.
+   * This method neither commits nor rolls back the caller's transaction.
+   *
    * @returns Counts: nodesWritten (validated nodes persisted), edgesWritten
    *   (manifest-valid edges persisted), superseded (prior facts soft-deleted
    *   plus prior source-ref edges hard-deleted).
@@ -9100,6 +9209,7 @@ exports.PromptService = PromptService;
 exports.PrunePartialFailureError = PrunePartialFailureError;
 exports.WikiBusyError = WikiBusyError;
 exports.WikiDuplicateHashError = WikiDuplicateHashError;
+exports.WikiGraphNodeOwnershipConflict = WikiGraphNodeOwnershipConflict;
 exports.WikiIngestEmptyError = WikiIngestEmptyError;
 exports.WikiInvalidReadOptions = WikiInvalidReadOptions;
 exports.WikiMemory = WikiMemory;