@hraness/peopleblade 0.1.0 → 0.1.2

package/dist/migrations/015_phone_identity_normalization.sql

@@ -0,0 +1,15 @@
+PRAGMA foreign_keys = ON;
+
+-- Schema hook for one-shot application-layer phone identity renormalization.
+-- initializeLocalDatabase / rolodex import rewrite contact_methods.normalized_value
+-- with normalizePhoneIdentity and record completion here. Duplicate
+-- (person_id,kind,normalized_value,label) rows are deactivated, not deleted.
+CREATE TABLE phone_identity_renormalization (
+    singleton INTEGER PRIMARY KEY CHECK(singleton = 1),
+    algorithm_version TEXT NOT NULL CHECK(length(algorithm_version) BETWEEN 1 AND 64),
+    applied_at TEXT NOT NULL,
+    methods_scanned INTEGER NOT NULL CHECK(methods_scanned >= 0),
+    methods_updated INTEGER NOT NULL CHECK(methods_updated >= 0),
+    methods_deactivated INTEGER NOT NULL CHECK(methods_deactivated >= 0),
+    methods_inserted INTEGER NOT NULL CHECK(methods_inserted >= 0)
+) STRICT;

package/dist/migrations/016_source_binding_metadata_incarnations.sql

@@ -0,0 +1,205 @@
+PRAGMA foreign_keys = ON;
+
+-- Schema v13 admitted same-identity guards only to reject them later. Purge
+-- those impossible predecessors while the v14 invalidation trigger still
+-- recognizes them, before metadata-only successors become valid.
+DELETE FROM source_binding_transition_guards
+WHERE NOT EXISTS (
+  SELECT 1 FROM source_binding_incarnations successor
+  WHERE successor.source_binding_id=source_binding_transition_guards.source_binding_id
+    AND successor.ordinal=source_binding_transition_guards.next_ordinal
+)
+AND EXISTS (
+  SELECT 1 FROM source_binding_incarnations predecessor
+  WHERE predecessor.id=source_binding_transition_guards.retiring_incarnation_id
+    AND predecessor.source_binding_id=source_binding_transition_guards.source_binding_id
+    AND predecessor.authority=source_binding_transition_guards.authority
+    AND predecessor.retired_at IS NULL
+    AND predecessor.subject_sha256=source_binding_transition_guards.next_subject_sha256
+    AND predecessor.auth_sha256=source_binding_transition_guards.next_auth_sha256
+);
+
+DROP TRIGGER source_binding_transition_guards_snapshot_insert;
+
+CREATE TRIGGER source_binding_transition_guards_snapshot_insert
+BEFORE INSERT ON source_binding_transition_guards FOR EACH ROW
+WHEN NOT EXISTS (
+  SELECT 1 FROM source_binding_incarnations incarnation
+  JOIN source_bindings binding ON binding.id=incarnation.source_binding_id
+  WHERE incarnation.id=NEW.retiring_incarnation_id
+    AND incarnation.source_binding_id=NEW.source_binding_id
+    AND incarnation.retired_at IS NULL
+    AND incarnation.ordinal+1=NEW.next_ordinal
+    AND incarnation.authority=NEW.authority
+    AND julianday(NEW.observed_at)>=julianday(incarnation.last_seen_at)
+    AND incarnation.last_seen_at=NEW.expected_last_seen_at
+    AND incarnation.metadata_json=NEW.expected_metadata_json
+    AND binding.authority=NEW.authority
+    AND binding.subject_sha256=incarnation.subject_sha256
+    AND binding.auth_sha256=incarnation.auth_sha256
+    AND binding.last_seen_at=NEW.expected_last_seen_at
+    AND binding.metadata_json=NEW.expected_metadata_json
+    AND binding.complete_realm_inventory_observed_at
+      IS NEW.expected_complete_realm_inventory_observed_at
+    AND binding.complete_realm_inventory_sha256
+      IS NEW.expected_complete_realm_inventory_sha256
+    AND (
+      (
+        (incarnation.subject_sha256<>NEW.next_subject_sha256
+          OR incarnation.auth_sha256<>NEW.next_auth_sha256)
+        AND NOT EXISTS (
+          SELECT 1 FROM source_binding_incarnations owner
+          WHERE owner.authority=NEW.authority
+            AND owner.subject_sha256=NEW.next_subject_sha256
+            AND owner.source_binding_id<>NEW.source_binding_id
+        )
+      )
+      OR (
+        incarnation.subject_sha256=NEW.next_subject_sha256
+        AND incarnation.auth_sha256=NEW.next_auth_sha256
+        AND incarnation.metadata_json<>NEW.metadata_json
+        AND NEW.expected_complete_realm_inventory_observed_at IS NOT NULL
+        AND NEW.expected_complete_realm_inventory_sha256 IS NOT NULL
+        AND NEW.complete_realm_inventory_sha256
+          =NEW.expected_complete_realm_inventory_sha256
+      )
+    )
+)
+BEGIN SELECT RAISE(ABORT, 'source binding transition guard does not match current reviewed state'); END;
+
+DROP TRIGGER source_binding_incarnations_chain_insert;
+
+CREATE TRIGGER source_binding_incarnations_chain_insert
+BEFORE INSERT ON source_binding_incarnations FOR EACH ROW
+WHEN NEW.transition_kind='explicit-rebind' AND NOT EXISTS (
+  SELECT 1 FROM source_binding_incarnations previous
+  WHERE previous.id=NEW.previous_incarnation_id
+    AND previous.source_binding_id=NEW.source_binding_id
+    AND previous.authority=NEW.authority
+    AND previous.ordinal=NEW.ordinal-1
+    AND previous.retired_at IS NOT NULL
+    AND (
+      previous.subject_sha256<>NEW.subject_sha256
+      OR previous.auth_sha256<>NEW.auth_sha256
+      OR previous.metadata_json<>NEW.metadata_json
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_bindings binding
+      WHERE binding.id=NEW.source_binding_id AND binding.authority=NEW.authority
+    )
+)
+BEGIN SELECT RAISE(ABORT, 'source binding incarnation predecessor is invalid'); END;
+
+-- Schema v13 mirrored an older writer's root metadata into the current
+-- incarnation. Preserve that compatibility only while the writer is not
+-- attempting to overwrite an already-installed successor. The atomic
+-- transition trigger inserts the successor before updating the root shadow, so
+-- its target metadata already equals the one current incarnation here.
+CREATE TRIGGER source_bindings_current_incarnation_metadata_guard
+BEFORE UPDATE OF metadata_json ON source_bindings FOR EACH ROW
+WHEN EXISTS (
+  SELECT 1 FROM source_binding_incarnations current
+  WHERE current.source_binding_id=NEW.id
+    AND current.authority=NEW.authority
+    AND current.retired_at IS NULL
+    AND current.metadata_json<>NEW.metadata_json
+)
+BEGIN SELECT RAISE(ABORT, 'source binding metadata must shadow its current incarnation'); END;
+
+DROP TRIGGER source_binding_transition_guards_consumed_delete;
+
+CREATE TRIGGER source_binding_transition_guards_consumed_delete
+BEFORE DELETE ON source_binding_transition_guards FOR EACH ROW
+WHEN NOT (
+  (
+    EXISTS (
+      SELECT 1 FROM source_binding_incarnations predecessor
+      WHERE predecessor.id=OLD.retiring_incarnation_id
+        AND predecessor.source_binding_id=OLD.source_binding_id
+        AND predecessor.authority=OLD.authority
+        AND predecessor.ordinal=OLD.next_ordinal-1
+        AND predecessor.retired_at=OLD.observed_at
+        AND predecessor.last_seen_at=OLD.expected_last_seen_at
+        AND predecessor.metadata_json=OLD.expected_metadata_json
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_binding_incarnations successor
+      WHERE successor.source_binding_id=OLD.source_binding_id
+        AND successor.authority=OLD.authority
+        AND successor.ordinal=OLD.next_ordinal
+        AND successor.subject_sha256=OLD.next_subject_sha256
+        AND successor.auth_sha256=OLD.next_auth_sha256
+        AND successor.previous_incarnation_id=OLD.retiring_incarnation_id
+        AND successor.transition_kind='explicit-rebind'
+        AND successor.transition_evidence_sha256=OLD.transition_evidence_sha256
+        AND successor.transition_evidence_json=OLD.transition_evidence_json
+        AND successor.first_seen_at=OLD.observed_at
+        AND successor.last_seen_at=OLD.observed_at
+        AND successor.retired_at IS NULL
+        AND successor.metadata_json=OLD.metadata_json
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_bindings binding
+      WHERE binding.id=OLD.source_binding_id
+        AND binding.authority=OLD.authority
+        AND binding.subject_sha256=OLD.next_subject_sha256
+        AND binding.auth_sha256=OLD.next_auth_sha256
+        AND binding.last_seen_at=OLD.observed_at
+        AND binding.complete_realm_inventory_observed_at=OLD.observed_at
+        AND binding.complete_realm_inventory_sha256=OLD.complete_realm_inventory_sha256
+        AND binding.metadata_json=OLD.metadata_json
+    )
+  )
+  OR (
+    NOT EXISTS (
+      SELECT 1 FROM source_binding_incarnations successor
+      WHERE successor.source_binding_id=OLD.source_binding_id
+        AND successor.ordinal=OLD.next_ordinal
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_binding_incarnations predecessor
+      JOIN source_bindings binding ON binding.id=predecessor.source_binding_id
+      WHERE predecessor.id=OLD.retiring_incarnation_id
+        AND predecessor.source_binding_id=OLD.source_binding_id
+        AND predecessor.authority=OLD.authority
+        AND predecessor.ordinal=OLD.next_ordinal-1
+        AND predecessor.retired_at IS NULL
+        AND binding.authority=OLD.authority
+        AND binding.subject_sha256=predecessor.subject_sha256
+        AND binding.auth_sha256=predecessor.auth_sha256
+        AND (
+          (
+            predecessor.subject_sha256=OLD.next_subject_sha256
+            AND predecessor.auth_sha256=OLD.next_auth_sha256
+            AND predecessor.metadata_json=OLD.metadata_json
+          )
+          OR julianday(OLD.observed_at)<julianday(predecessor.last_seen_at)
+          OR predecessor.last_seen_at IS NOT OLD.expected_last_seen_at
+          OR predecessor.metadata_json IS NOT OLD.expected_metadata_json
+          OR binding.last_seen_at IS NOT OLD.expected_last_seen_at
+          OR binding.metadata_json IS NOT OLD.expected_metadata_json
+          OR binding.complete_realm_inventory_observed_at
+            IS NOT OLD.expected_complete_realm_inventory_observed_at
+          OR binding.complete_realm_inventory_sha256
+            IS NOT OLD.expected_complete_realm_inventory_sha256
+          OR (
+            predecessor.subject_sha256=OLD.next_subject_sha256
+            AND predecessor.auth_sha256=OLD.next_auth_sha256
+            AND (
+              OLD.expected_complete_realm_inventory_observed_at IS NULL
+              OR OLD.expected_complete_realm_inventory_sha256 IS NULL
+              OR OLD.complete_realm_inventory_sha256
+                IS NOT OLD.expected_complete_realm_inventory_sha256
+            )
+          )
+          OR EXISTS (
+            SELECT 1 FROM source_binding_incarnations owner
+            WHERE owner.authority=OLD.authority
+              AND owner.subject_sha256=OLD.next_subject_sha256
+              AND owner.source_binding_id<>OLD.source_binding_id
+          )
+        )
+    )
+  )
+)
+BEGIN SELECT RAISE(ABORT, 'source binding transition guard can only be deleted after exact consumption or proven invalidation'); END;