@equationalapplications/core-llm-wiki 7.15.1 → 7.16.0

package/dist/{chunk-BC3QHSF3.mjs → chunk-G7F5QPVR.mjs}

@@ -3887,7 +3887,7 @@ var MIGRATIONS = [
       if (duplicates.length > 0) {
         const sample = duplicates.slice(0, 5).map((d) => `(entity_id=${d.entity_id}, source_hash=${d.source_hash.slice(0, 12)}\u2026, n_refs=${d.n_refs})`).join(", ");
         throw new Error(
-          `Migration v9 (add_source_ref_index) failed: existing live rows have multiple sourceRefs sharing a hash. Found ${duplicates.length} duplicate (entity_id, source_hash) groups. First ${Math.min(5, duplicates.length)}: ${sample}. Resolve each by calling forget({ sourceRef: <loser> }) for the offending sourceRef, then re-run setup.`
+          `Migration v9 (add_source_ref_index) failed: existing live rows have multiple sourceRefs sharing a hash. Found ${duplicates.length} duplicate (entity_id, source_hash) groups. First ${Math.min(5, duplicates.length)}: ${sample}. Resolve each group by calling forget(entityId, { sourceRef: <loser>, sourceHash: <group's full source_hash> }) for every losing sourceRef in that group (works on pre-v9 databases; list full hashes with the query in the docs' errors reference), then re-run setup().`
         );
       }
       await db.execAsync(
@@ -5262,6 +5262,7 @@ var MaintenanceService = class {
           if (params.sourceRef !== void 0 && !sourceRef) throw new Error("Invalid sourceRef");
           const sourceHash = params.sourceHash !== void 0 ? normalizeSourceHash(params.sourceHash) : null;
           if (params.sourceHash !== void 0 && !sourceHash) throw new Error("Invalid sourceHash (must be 64-char hex string)");
+          const touchSourceRefIndex = sourceRef !== null && await this.sourceRefIndexPresent(tx);
           if (params.entryId) {
             const entryId = await this.entryRepo.findIdById(params.entryId, entityId, tx);
             if (entryId) deletedEntryIds.push(entryId);
@@ -5272,7 +5273,7 @@ var MaintenanceService = class {
           const entryPromise = params.entryId ? this.entryRepo.softDelete(params.entryId, entityId, tx).then((r) => r.changes > 0) : null;
           const taskDeletedPromise = params.taskId ? this.taskRepo.softDeleteById(params.taskId, entityId, tx).then((r) => r.changes > 0) : null;
           const refPromise = sourceRef || sourceHash ? this.entryRepo.softDeleteBySource(entityId, tx, sourceRef, sourceHash) : null;
-          const sourceRefIndexPromise = sourceRef ? this.sourceRefIndexRepo.softDeleteByEntityAndSourceRef(entityId, sourceRef, tx).then(() => void 0) : null;
+          const sourceRefIndexPromise = touchSourceRefIndex && sourceRef ? this.sourceRefIndexRepo.softDeleteByEntityAndSourceRef(entityId, sourceRef, tx).then(() => void 0) : null;
           const [entryResult, taskResult, refResult] = await Promise.all([
             entryPromise ?? Promise.resolve(false),
             taskDeletedPromise ?? Promise.resolve(false),
@@ -5306,6 +5307,33 @@ var MaintenanceService = class {
       this.jobManager.releaseLock("forget", entityId);
     }
   }
+  /**
+   * Whether forget() should soft-delete in source_ref_index (#316,
+   * specs/forget-pre-v9 §3.1). Normally true: setup()'s DDL creates the table.
+   * False only when the table is absent AND the store is pre-v9 (stored
+   * schema_version < 9; a missing key or unparseable value counts as 0, like
+   * detectSchemaVersion; a store without the meta table at all is not
+   * supported and fails as before) — the v9 recovery path, where there is no index row
+   * to retire and v9's backfill reads live entries only. A v9+ store without
+   * its index is corrupt: throw rather than skip, so the TOCTOU guard is never
+   * silently bypassed.
+   *
+   * Every read runs on `tx`, so a v9 committed by *another connection* between
+   * this probe and forget()'s writes can only fail the write-lock upgrade
+   * (SQLite serializes writers), never make forget() skip a live index. A
+   * setup() racing forget() on the *same* connection (expo passes the shared
+   * db as tx) is not serialized against it; v9 runs in autocommit, a
+   * pre-existing limit out of scope here. Await setup() before other calls,
+   * as WikiMemory.setup() documents.
+   */
+  async sourceRefIndexPresent(tx) {
+    if (await this.metadataRepo.tableExists(`${this.prefix}source_ref_index`, tx)) return true;
+    const raw = await this.metadataRepo.getMeta("schema_version", tx);
+    const parsed = raw ? parseInt(raw, 10) : 0;
+    const version = Number.isFinite(parsed) ? parsed : 0;
+    if (version < 9) return false;
+    throw new Error(`forget(): source_ref_index is missing on a schema_version=${version} database; run setup()`);
+  }
   /**
    * Read-only dry-run preview of {@link forget}. Returns the same shape as a
    * real call would, without acquiring the lock, opening a transaction, staging
@@ -7679,5 +7707,5 @@ var WriteService = class {
 };
 
 export { BaseRepository, CURRENT_SCHEMA_VERSION, DEFAULT_CHUNK_OVERLAP, DEFAULT_MAX_CHUNK_LENGTH, DEFAULT_MAX_EMBED_CHARS, DiagnosticBuffer, EMBED_CHARS_CEILING, EmbeddingService, FTS5_DRAIN_CHUNK, FTS5_REBUILD_SNAPSHOT_KEY, FTS5_REBUILD_WM_KEY, FTS5_RECLAIM_MERGE_PAGES, FTS5_RETIRED_COUNTER_KEY, FTS5_RETIRED_TABLES_KEY, FTS5_STATE_KEY, FTS5_SWEEP_CURSOR_KEY, HEAL_ANCHORS_PER_CANDIDATE, HEAL_BATCH_SIZE, HEAL_MAX_FACT_BODY_CHARS_L3, HEAL_MAX_TASKS, HEAL_RECHECK_MS, HOOK_TIMEOUT_MARKER, ImportExportService, IngestionService, JobManager, MAX_EMBED_ATTEMPTS, MIGRATIONS, MaintenanceService, MetadataRepository, ONTOLOGY_BACKFILL_BATCH_SIZE, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, ONTOLOGY_BACKFILL_RECHECK_MS, ONTOLOGY_BACKFILL_SYSTEM_PROMPT, PromptService, PrunePartialFailureError, RetrievalService, SearchService, TemporalService, UnavailableIndexStrategy, UsageMeter, WikiBusyError, WikiDraftNotFound, WikiDuplicateHashError, WikiGraphNodeOwnershipConflict, WikiIngestEmptyError, WikiInvalidReadOptions, WikiMigrationRequiredError, WikiParseError, WikiSearchUnavailableError, WikiSourceRefHashCollision, WikiStrictOntologyViolation, WikiSupersedeError, WikiTransactionError, WriteService, __privateAdd, __privateGet, __privateSet, assertEntityId, assertEpochMs, chunkText, configureRandomSource, createLegacySourceTypeIndex, detectSchemaVersion, drainChunkSql, drainHiSql, edgeTripleAllowed, emptyManifest, entityDrainChunkSql, entityDrainHiSql, entitySummaryMetaKey, extractSqliteCode, factTokenCost, fts5LedgerDropSql, fts5PendingIndexesDdl, fts5TablesDdl, fts5TriggerNames, fts5TriggersDdl, generateId, idDrainChunkSql, idReindexChunkSql, isLiveAt, isRetiredTableName, isWikiSearchUnavailableError, liveAtSql, normalizeSourceHash, normalizeSourceRef, normalizeTitleKey, packFactsByBudget, parseEmbedding, parseJsonArray, parseJsonObject, probePendingWork, readRebuildProgress, reanchorRebuildFingerprint, resolveEdgeDefinitions, resolveGrounding, resolveNodeType, retiredTableName, runSourceRefNormalize, safeSlice, setupDatabase, sweepChunkSql, sweepHiSql, typeSatisfies, validateInlineEdges, validateManifest, windowChunkSql, windowHiSql, writeNormalizeStamp, writeRebuildStart };
-//# sourceMappingURL=chunk-BC3QHSF3.mjs.map
-//# sourceMappingURL=chunk-BC3QHSF3.mjs.map
+//# sourceMappingURL=chunk-G7F5QPVR.mjs.map
+//# sourceMappingURL=chunk-G7F5QPVR.mjs.map