@equationalapplications/core-llm-wiki 7.1.2 → 7.2.0

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { __privateAdd, MetadataRepository, EmbeddingService, SearchService, JobManager, PromptService, IngestionService, MaintenanceService, ImportExportService, RetrievalService, WriteService, __privateGet, __privateSet, normalizeSourceRef, normalizeSourceHash, entitySummaryMetaKey, WikiSourceRefHashCollision, validateManifest, generateId, BaseRepository, emptyManifest, resolveNodeType, WikiStrictOntologyViolation, validateInlineEdges, resolveEdgeDefinitions, typeSatisfies, normalizeTitleKey, WikiTransactionError, extractSqliteCode } from './chunk-ZU7K6NAU.mjs';
-export { DEFAULT_CHUNK_OVERLAP, DEFAULT_MAX_CHUNK_LENGTH, DEFAULT_MAX_EMBED_CHARS, EMBED_CHARS_CEILING, HEAL_ANCHORS_PER_CANDIDATE, HEAL_BATCH_SIZE, HEAL_MAX_FACT_BODY_CHARS_L3, HEAL_MAX_TASKS, HEAL_RECHECK_MS, HOOK_TIMEOUT_MARKER, ONTOLOGY_BACKFILL_BATCH_SIZE, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, ONTOLOGY_BACKFILL_RECHECK_MS, ONTOLOGY_BACKFILL_SYSTEM_PROMPT, PromptService, PrunePartialFailureError, WikiBusyError, WikiDuplicateHashError, WikiIngestEmptyError, WikiInvalidReadOptions, WikiParseError, WikiSourceRefHashCollision, WikiStrictOntologyViolation, WikiTransactionError, chunkText, configureRandomSource, parseEmbedding, safeSlice, validateManifest } from './chunk-ZU7K6NAU.mjs';
+import { __privateAdd, MetadataRepository, EmbeddingService, SearchService, JobManager, PromptService, IngestionService, MaintenanceService, ImportExportService, RetrievalService, WriteService, __privateGet, __privateSet, normalizeSourceRef, normalizeSourceHash, entitySummaryMetaKey, WikiSourceRefHashCollision, validateManifest, generateId, BaseRepository, WikiGraphNodeOwnershipConflict, emptyManifest, resolveNodeType, WikiStrictOntologyViolation, validateInlineEdges, resolveEdgeDefinitions, typeSatisfies, normalizeTitleKey, WikiTransactionError, extractSqliteCode } from './chunk-TTECJ3S3.mjs';
+export { DEFAULT_CHUNK_OVERLAP, DEFAULT_MAX_CHUNK_LENGTH, DEFAULT_MAX_EMBED_CHARS, EMBED_CHARS_CEILING, HEAL_ANCHORS_PER_CANDIDATE, HEAL_BATCH_SIZE, HEAL_MAX_FACT_BODY_CHARS_L3, HEAL_MAX_TASKS, HEAL_RECHECK_MS, HOOK_TIMEOUT_MARKER, ONTOLOGY_BACKFILL_BATCH_SIZE, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, ONTOLOGY_BACKFILL_RECHECK_MS, ONTOLOGY_BACKFILL_SYSTEM_PROMPT, PromptService, PrunePartialFailureError, WikiBusyError, WikiDuplicateHashError, WikiGraphNodeOwnershipConflict, WikiIngestEmptyError, WikiInvalidReadOptions, WikiParseError, WikiSourceRefHashCollision, WikiStrictOntologyViolation, WikiTransactionError, chunkText, configureRandomSource, parseEmbedding, safeSlice, validateManifest } from './chunk-TTECJ3S3.mjs';
 import { appendRelatedSection, buildConceptDocument, buildLogMd, buildEntityIndexMd, buildRootIndexMd, isAllowedOkfPath, parseRootIndexMd, parseEntityIndexMd, parseConcept, splitRelatedSection, extractMarkdownLinks, parseLogMd, parseEventIdComment, latestVerified, formatSourcesJson, appendEventIdComment, parseVerifiedFlexible, parseCitationsList, deriveTrustTier, isStaleAfter } from '@equationalapplications/core-okf';
 
 // src/db/schema.ts
@@ -591,6 +591,26 @@ var EntryRepository = class extends BaseRepository {
    * diagnostic that inflates runReembed's permanentlyFailed counter. A conflict
    * with no blob leaves marker state alone, matching the "absent means don't
    * touch" semantics used for embedding_blob itself.
+   *
+   * Graph node ownership (spec §2.4 + §3, REQ-OWN-01 + REQ-GRAPH-01): entry
+   * IDs share one database-wide namespace, so an ID stays owned by its
+   * existing entity for as long as the row exists — soft deletion included.
+   * The pre-write lookup already reads the existing row for OKF metadata; we
+   * project `entity_id` off that same SELECT and reject the write before
+   * any outbox payload construction when the stored owner differs from
+   * `fact.entity_id`. Soft-deleted foreign rows keep their IDs reserved;
+   * permanent reservation is NOT introduced, so a physically absent ID may
+   * still be inserted under the requested entity. The ON CONFLICT UPDATE SET
+   * clause carries a final `WHERE entries.entity_id = excluded.entity_id`
+   * guard so the database itself refuses a cross-owner row overwrite even if
+   * a future caller bypasses the pre-write check. When `runAsync` reports
+   * 0 changes (a legitimate conflict-suppressed write, OR an adapter that
+   * under-reports a permitted write) we re-read the stored owner; only a
+   * foreign owner throws — this is local defensive behavior, not permission
+   * for adapters to under-report. The thrown error is
+   * `WikiGraphNodeOwnershipConflict` (no owner, node ID, or stored content
+   * is disclosed). Upserts that pass both gates retain existing same-entity
+   * update + resurrection semantics.
    */
   async upsert(fact, tx) {
     const executor = this.getExecutor(tx);
@@ -598,12 +618,15 @@ var EntryRepository = class extends BaseRepository {
     const tagsJson = JSON.stringify(fact.tags);
     const embeddingBlob = this.normalizeEmbeddingBlob(fact.embedding_blob);
     const existingRow = await executor.getFirstAsync(
-      `SELECT id, lifecycle_status, stale_after, generated_by,
+      `SELECT id, entity_id, lifecycle_status, stale_after, generated_by,
               okf_sources, okf_verified, okf_usage_window,
               last_verified_at, last_verified_by
          FROM ${this.prefix}entries WHERE id = ?`,
       [fact.id]
     );
+    if (existingRow && existingRow.entity_id !== fact.entity_id) {
+      throw new WikiGraphNodeOwnershipConflict();
+    }
     const operation = fact.deleted_at ? "DELETE" : existingRow ? "UPDATE" : "INSERT";
     const result = await executor.runAsync(
       `INSERT INTO ${this.prefix}entries (
@@ -614,7 +637,6 @@ var EntryRepository = class extends BaseRepository {
         okf_sources, okf_verified, okf_usage_window
       ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       ON CONFLICT(id) DO UPDATE SET
-        entity_id = excluded.entity_id,
         title = excluded.title,
         body = excluded.body,
         tags = excluded.tags,
@@ -631,7 +653,8 @@ var EntryRepository = class extends BaseRepository {
         embedding_failed_at = CASE WHEN excluded.embedding_blob IS NOT NULL THEN NULL ELSE embedding_failed_at END,
         embedding_failure_kind = CASE WHEN excluded.embedding_blob IS NOT NULL THEN NULL ELSE embedding_failure_kind END,
         embedding_attempts = CASE WHEN excluded.embedding_blob IS NOT NULL THEN 0 ELSE embedding_attempts END,
-        okf_type = excluded.okf_type`,
+        okf_type = excluded.okf_type
+      WHERE ${this.prefix}entries.entity_id = excluded.entity_id`,
       [
         fact.id,
         fact.entity_id,
@@ -663,6 +686,18 @@ var EntryRepository = class extends BaseRepository {
         fact.okf_usage_window ? JSON.stringify(fact.okf_usage_window) : null
       ]
     );
+    if (result.changes === 0) {
+      const stored = await tx.getFirstAsync(
+        `SELECT entity_id FROM ${this.prefix}entries WHERE id = ?`,
+        [fact.id]
+      );
+      if (!stored) {
+        throw new Error("Entry upsert reported no change and stored no row; the SQLiteAdapter did not perform the write");
+      }
+      if (stored.entity_id !== fact.entity_id) {
+        throw new WikiGraphNodeOwnershipConflict();
+      }
+    }
     const persistedOkf = existingRow ? {
       lifecycle_status: existingRow.lifecycle_status ?? "stable",
       stale_after: existingRow.stale_after != null ? Number(existingRow.stale_after) : null,
@@ -3058,6 +3093,11 @@ var WikiMemory = class {
     return this.maintenanceService.forget(entityId, params, opts);
   }
   /**
+   * Full and partial ingestion both reject foreign-owned generated fact IDs with
+   * `WikiGraphNodeOwnershipConflict`. Such collisions are unexpected. Ingestion
+   * may already have persisted ontology or other state before rejection; unlike
+   * direct graph preflight, it relies on transaction rollback for atomicity.
+   *
    * @param params.promptOverride - Overrides the system prompt for this ingest call only.
    * For persistent customization, set `options.config.prompts.ingestSystemPrompt` at
    * WikiMemory construction time.
@@ -3089,6 +3129,19 @@ var WikiMemory = class {
    *   or edge `type` throws `WikiStrictOntologyViolation` (pre-flight,
    *   all-or-nothing — NONE written on failure).
    *
+   * Entry IDs share one database-wide namespace. Existing rows, including
+   * soft-deleted rows, reserve their IDs for their entity; same-entity updates
+   * and resurrection remain supported. Hosts authenticate callers and select
+   * the authorized entity ID; entity-qualified IDs are optional, not required.
+   * After the live-only C2 probe above, a foreign node ID throws the fixed,
+   * privacy-preserving `WikiGraphNodeOwnershipConflict` before persistent writes
+   * (including seed manifests). Deleted source mappings do not trigger C2.
+   *
+   * Propagate later failures to roll back the host transaction. In particular,
+   * foreign edge-ID collisions remain late bare `Error`s: the foreign edge is
+   * not overwritten, but catching and committing can retain earlier writes.
+   * This method neither commits nor rolls back the caller's transaction.
+   *
    * @returns Counts: nodesWritten (validated nodes persisted), edgesWritten
    *   (manifest-valid edges persisted), superseded (prior facts soft-deleted
    *   plus prior source-ref edges hard-deleted).