@hraness/peopleblade 0.1.1 → 0.2.1

package/dist/migrations/016_source_binding_metadata_incarnations.sql

@@ -0,0 +1,205 @@
+PRAGMA foreign_keys = ON;
+
+-- Schema v13 admitted same-identity guards only to reject them later. Purge
+-- those impossible predecessors while the v14 invalidation trigger still
+-- recognizes them, before metadata-only successors become valid.
+DELETE FROM source_binding_transition_guards
+WHERE NOT EXISTS (
+  SELECT 1 FROM source_binding_incarnations successor
+  WHERE successor.source_binding_id=source_binding_transition_guards.source_binding_id
+    AND successor.ordinal=source_binding_transition_guards.next_ordinal
+)
+AND EXISTS (
+  SELECT 1 FROM source_binding_incarnations predecessor
+  WHERE predecessor.id=source_binding_transition_guards.retiring_incarnation_id
+    AND predecessor.source_binding_id=source_binding_transition_guards.source_binding_id
+    AND predecessor.authority=source_binding_transition_guards.authority
+    AND predecessor.retired_at IS NULL
+    AND predecessor.subject_sha256=source_binding_transition_guards.next_subject_sha256
+    AND predecessor.auth_sha256=source_binding_transition_guards.next_auth_sha256
+);
+
+DROP TRIGGER source_binding_transition_guards_snapshot_insert;
+
+CREATE TRIGGER source_binding_transition_guards_snapshot_insert
+BEFORE INSERT ON source_binding_transition_guards FOR EACH ROW
+WHEN NOT EXISTS (
+  SELECT 1 FROM source_binding_incarnations incarnation
+  JOIN source_bindings binding ON binding.id=incarnation.source_binding_id
+  WHERE incarnation.id=NEW.retiring_incarnation_id
+    AND incarnation.source_binding_id=NEW.source_binding_id
+    AND incarnation.retired_at IS NULL
+    AND incarnation.ordinal+1=NEW.next_ordinal
+    AND incarnation.authority=NEW.authority
+    AND julianday(NEW.observed_at)>=julianday(incarnation.last_seen_at)
+    AND incarnation.last_seen_at=NEW.expected_last_seen_at
+    AND incarnation.metadata_json=NEW.expected_metadata_json
+    AND binding.authority=NEW.authority
+    AND binding.subject_sha256=incarnation.subject_sha256
+    AND binding.auth_sha256=incarnation.auth_sha256
+    AND binding.last_seen_at=NEW.expected_last_seen_at
+    AND binding.metadata_json=NEW.expected_metadata_json
+    AND binding.complete_realm_inventory_observed_at
+      IS NEW.expected_complete_realm_inventory_observed_at
+    AND binding.complete_realm_inventory_sha256
+      IS NEW.expected_complete_realm_inventory_sha256
+    AND (
+      (
+        (incarnation.subject_sha256<>NEW.next_subject_sha256
+          OR incarnation.auth_sha256<>NEW.next_auth_sha256)
+        AND NOT EXISTS (
+          SELECT 1 FROM source_binding_incarnations owner
+          WHERE owner.authority=NEW.authority
+            AND owner.subject_sha256=NEW.next_subject_sha256
+            AND owner.source_binding_id<>NEW.source_binding_id
+        )
+      )
+      OR (
+        incarnation.subject_sha256=NEW.next_subject_sha256
+        AND incarnation.auth_sha256=NEW.next_auth_sha256
+        AND incarnation.metadata_json<>NEW.metadata_json
+        AND NEW.expected_complete_realm_inventory_observed_at IS NOT NULL
+        AND NEW.expected_complete_realm_inventory_sha256 IS NOT NULL
+        AND NEW.complete_realm_inventory_sha256
+          =NEW.expected_complete_realm_inventory_sha256
+      )
+    )
+)
+BEGIN SELECT RAISE(ABORT, 'source binding transition guard does not match current reviewed state'); END;
+
+DROP TRIGGER source_binding_incarnations_chain_insert;
+
+CREATE TRIGGER source_binding_incarnations_chain_insert
+BEFORE INSERT ON source_binding_incarnations FOR EACH ROW
+WHEN NEW.transition_kind='explicit-rebind' AND NOT EXISTS (
+  SELECT 1 FROM source_binding_incarnations previous
+  WHERE previous.id=NEW.previous_incarnation_id
+    AND previous.source_binding_id=NEW.source_binding_id
+    AND previous.authority=NEW.authority
+    AND previous.ordinal=NEW.ordinal-1
+    AND previous.retired_at IS NOT NULL
+    AND (
+      previous.subject_sha256<>NEW.subject_sha256
+      OR previous.auth_sha256<>NEW.auth_sha256
+      OR previous.metadata_json<>NEW.metadata_json
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_bindings binding
+      WHERE binding.id=NEW.source_binding_id AND binding.authority=NEW.authority
+    )
+)
+BEGIN SELECT RAISE(ABORT, 'source binding incarnation predecessor is invalid'); END;
+
+-- Schema v13 mirrored an older writer's root metadata into the current
+-- incarnation. Preserve that compatibility only while the writer is not
+-- attempting to overwrite an already-installed successor. The atomic
+-- transition trigger inserts the successor before updating the root shadow, so
+-- its target metadata already equals the one current incarnation here.
+CREATE TRIGGER source_bindings_current_incarnation_metadata_guard
+BEFORE UPDATE OF metadata_json ON source_bindings FOR EACH ROW
+WHEN EXISTS (
+  SELECT 1 FROM source_binding_incarnations current
+  WHERE current.source_binding_id=NEW.id
+    AND current.authority=NEW.authority
+    AND current.retired_at IS NULL
+    AND current.metadata_json<>NEW.metadata_json
+)
+BEGIN SELECT RAISE(ABORT, 'source binding metadata must shadow its current incarnation'); END;
+
+DROP TRIGGER source_binding_transition_guards_consumed_delete;
+
+CREATE TRIGGER source_binding_transition_guards_consumed_delete
+BEFORE DELETE ON source_binding_transition_guards FOR EACH ROW
+WHEN NOT (
+  (
+    EXISTS (
+      SELECT 1 FROM source_binding_incarnations predecessor
+      WHERE predecessor.id=OLD.retiring_incarnation_id
+        AND predecessor.source_binding_id=OLD.source_binding_id
+        AND predecessor.authority=OLD.authority
+        AND predecessor.ordinal=OLD.next_ordinal-1
+        AND predecessor.retired_at=OLD.observed_at
+        AND predecessor.last_seen_at=OLD.expected_last_seen_at
+        AND predecessor.metadata_json=OLD.expected_metadata_json
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_binding_incarnations successor
+      WHERE successor.source_binding_id=OLD.source_binding_id
+        AND successor.authority=OLD.authority
+        AND successor.ordinal=OLD.next_ordinal
+        AND successor.subject_sha256=OLD.next_subject_sha256
+        AND successor.auth_sha256=OLD.next_auth_sha256
+        AND successor.previous_incarnation_id=OLD.retiring_incarnation_id
+        AND successor.transition_kind='explicit-rebind'
+        AND successor.transition_evidence_sha256=OLD.transition_evidence_sha256
+        AND successor.transition_evidence_json=OLD.transition_evidence_json
+        AND successor.first_seen_at=OLD.observed_at
+        AND successor.last_seen_at=OLD.observed_at
+        AND successor.retired_at IS NULL
+        AND successor.metadata_json=OLD.metadata_json
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_bindings binding
+      WHERE binding.id=OLD.source_binding_id
+        AND binding.authority=OLD.authority
+        AND binding.subject_sha256=OLD.next_subject_sha256
+        AND binding.auth_sha256=OLD.next_auth_sha256
+        AND binding.last_seen_at=OLD.observed_at
+        AND binding.complete_realm_inventory_observed_at=OLD.observed_at
+        AND binding.complete_realm_inventory_sha256=OLD.complete_realm_inventory_sha256
+        AND binding.metadata_json=OLD.metadata_json
+    )
+  )
+  OR (
+    NOT EXISTS (
+      SELECT 1 FROM source_binding_incarnations successor
+      WHERE successor.source_binding_id=OLD.source_binding_id
+        AND successor.ordinal=OLD.next_ordinal
+    )
+    AND EXISTS (
+      SELECT 1 FROM source_binding_incarnations predecessor
+      JOIN source_bindings binding ON binding.id=predecessor.source_binding_id
+      WHERE predecessor.id=OLD.retiring_incarnation_id
+        AND predecessor.source_binding_id=OLD.source_binding_id
+        AND predecessor.authority=OLD.authority
+        AND predecessor.ordinal=OLD.next_ordinal-1
+        AND predecessor.retired_at IS NULL
+        AND binding.authority=OLD.authority
+        AND binding.subject_sha256=predecessor.subject_sha256
+        AND binding.auth_sha256=predecessor.auth_sha256
+        AND (
+          (
+            predecessor.subject_sha256=OLD.next_subject_sha256
+            AND predecessor.auth_sha256=OLD.next_auth_sha256
+            AND predecessor.metadata_json=OLD.metadata_json
+          )
+          OR julianday(OLD.observed_at)<julianday(predecessor.last_seen_at)
+          OR predecessor.last_seen_at IS NOT OLD.expected_last_seen_at
+          OR predecessor.metadata_json IS NOT OLD.expected_metadata_json
+          OR binding.last_seen_at IS NOT OLD.expected_last_seen_at
+          OR binding.metadata_json IS NOT OLD.expected_metadata_json
+          OR binding.complete_realm_inventory_observed_at
+            IS NOT OLD.expected_complete_realm_inventory_observed_at
+          OR binding.complete_realm_inventory_sha256
+            IS NOT OLD.expected_complete_realm_inventory_sha256
+          OR (
+            predecessor.subject_sha256=OLD.next_subject_sha256
+            AND predecessor.auth_sha256=OLD.next_auth_sha256
+            AND (
+              OLD.expected_complete_realm_inventory_observed_at IS NULL
+              OR OLD.expected_complete_realm_inventory_sha256 IS NULL
+              OR OLD.complete_realm_inventory_sha256
+                IS NOT OLD.expected_complete_realm_inventory_sha256
+            )
+          )
+          OR EXISTS (
+            SELECT 1 FROM source_binding_incarnations owner
+            WHERE owner.authority=OLD.authority
+              AND owner.subject_sha256=OLD.next_subject_sha256
+              AND owner.source_binding_id<>OLD.source_binding_id
+          )
+        )
+    )
+  )
+)
+BEGIN SELECT RAISE(ABORT, 'source binding transition guard can only be deleted after exact consumption or proven invalidation'); END;

package/dist/migrations/017_person_note_content_revisions.sql

@@ -0,0 +1,151 @@
+PRAGMA foreign_keys = ON;
+
+-- User edits are overlays; original provider content and attribution stay immutable.
+CREATE TABLE person_note_content_revisions (
+    note_id INTEGER NOT NULL REFERENCES person_notes(id) ON DELETE RESTRICT,
+    revision INTEGER NOT NULL CHECK(revision BETWEEN 1 AND 9007199254740991),
+    expected_revision INTEGER NOT NULL CHECK(expected_revision BETWEEN 0 AND 9007199254740990),
+    request_id TEXT NOT NULL UNIQUE CHECK(length(request_id) = 36),
+    expected_context_sha256 TEXT NOT NULL CHECK(
+      length(expected_context_sha256) = 64
+      AND expected_context_sha256 NOT GLOB '*[^0-9a-f]*'
+    ),
+    context_json TEXT NOT NULL CHECK(json_valid(context_json)),
+    title TEXT CHECK(title IS NULL OR (length(title) BETWEEN 1 AND 1024 AND instr(title, char(0)) = 0)),
+    body TEXT NOT NULL CHECK(length(CAST(body AS BLOB)) BETWEEN 1 AND 65536 AND instr(body, char(0)) = 0),
+    created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),
+    PRIMARY KEY(note_id, revision),
+    CHECK(revision = expected_revision + 1)
+) STRICT;
+
+CREATE TRIGGER person_note_content_revision_valid
+BEFORE INSERT ON person_note_content_revisions FOR EACH ROW
+BEGIN
+  SELECT CASE WHEN
+    EXISTS (SELECT 1 FROM person_note_content_revisions prior
+      WHERE prior.request_id = NEW.request_id
+        OR (prior.note_id = NEW.note_id AND prior.revision = NEW.revision))
+    OR NEW.expected_revision IS NOT coalesce(
+      (SELECT max(prior.revision) FROM person_note_content_revisions prior WHERE prior.note_id = NEW.note_id), 0)
+    OR NOT EXISTS (SELECT 1 FROM person_notes WHERE id = NEW.note_id)
+    OR json_extract(NEW.context_json, '$.schemaVersion') IS NOT 1
+    OR json_extract(NEW.context_json, '$.databaseInstanceId') IS NOT
+      (SELECT instance_id FROM local_state WHERE singleton = 1)
+    OR json_extract(NEW.context_json, '$.noteId') IS NOT NEW.note_id
+    OR json_extract(NEW.context_json, '$.revision') IS NOT NEW.expected_revision
+    OR json_extract(NEW.context_json, '$.originalPersonId') IS NOT
+      (SELECT person_id FROM person_notes WHERE id = NEW.note_id)
+    OR json_extract(NEW.context_json, '$.attributedPersonId') IS NOT
+      (SELECT person_id FROM person_notes_current WHERE id = NEW.note_id)
+    OR json_extract(NEW.context_json, '$.attributionRevisionId') IS NOT coalesce(
+      (SELECT max(id) FROM person_note_attribution_revisions WHERE note_id = NEW.note_id), 0)
+    OR json_extract(NEW.context_json, '$.identityRevision') IS NOT
+      (SELECT identity_revision FROM local_revisions WHERE singleton = 1)
+    OR json_extract(NEW.context_json, '$.canonicalPersonId') IS NOT
+      (SELECT component.canonical_person_id FROM person_identity_components component
+       JOIN person_notes_current note ON note.person_id = component.person_id WHERE note.id = NEW.note_id)
+    OR json_extract(NEW.context_json, '$.componentPersonIds') IS NOT (
+      SELECT json_group_array(person_id) FROM (
+        SELECT member.person_id FROM person_identity_components member
+        WHERE member.canonical_person_id = (
+          SELECT component.canonical_person_id FROM person_identity_components component
+          JOIN person_notes_current note ON note.person_id = component.person_id WHERE note.id = NEW.note_id
+        ) ORDER BY member.person_id
+      )
+    )
+  THEN RAISE(ABORT, 'person note revision context is not current') END;
+END;
+
+CREATE TABLE person_note_creation_requests (
+    request_id TEXT PRIMARY KEY CHECK(length(request_id) = 36),
+    note_id INTEGER NOT NULL UNIQUE REFERENCES person_notes(id) ON DELETE RESTRICT,
+    requested_person_id INTEGER NOT NULL REFERENCES people(id) ON DELETE RESTRICT,
+    expected_context_sha256 TEXT NOT NULL CHECK(
+      length(expected_context_sha256) = 64 AND expected_context_sha256 NOT GLOB '*[^0-9a-f]*'
+    ),
+    context_json TEXT NOT NULL CHECK(json_valid(context_json)),
+    occurred_at_input TEXT NOT NULL CHECK(length(occurred_at_input) BETWEEN 1 AND 80)
+) STRICT;
+
+CREATE TRIGGER person_note_creation_request_valid
+BEFORE INSERT ON person_note_creation_requests FOR EACH ROW
+BEGIN
+  SELECT CASE WHEN
+    EXISTS (SELECT 1 FROM person_note_creation_requests prior
+      WHERE prior.request_id = NEW.request_id OR prior.note_id = NEW.note_id)
+    OR json_extract(NEW.context_json, '$.schemaVersion') IS NOT 1
+    OR json_extract(NEW.context_json, '$.databaseInstanceId') IS NOT
+      (SELECT instance_id FROM local_state WHERE singleton = 1)
+    OR json_extract(NEW.context_json, '$.personId') IS NOT NEW.requested_person_id
+    OR json_extract(NEW.context_json, '$.identityRevision') IS NOT
+      (SELECT identity_revision FROM local_revisions WHERE singleton = 1)
+    OR json_extract(NEW.context_json, '$.canonicalPersonId') IS NOT
+      (SELECT canonical_person_id FROM person_identity_components WHERE person_id = NEW.requested_person_id)
+    OR json_extract(NEW.context_json, '$.componentPersonIds') IS NOT (
+      SELECT json_group_array(person_id) FROM (
+        SELECT member.person_id FROM person_identity_components member
+        WHERE member.canonical_person_id = (
+          SELECT canonical_person_id FROM person_identity_components WHERE person_id = NEW.requested_person_id
+        ) ORDER BY member.person_id
+      )
+    )
+    OR NOT EXISTS (SELECT 1 FROM person_notes note
+      WHERE note.id = NEW.note_id AND note.source = 'manual' AND note.source_id = NEW.request_id
+        AND note.person_id = json_extract(NEW.context_json, '$.canonicalPersonId'))
+  THEN RAISE(ABORT, 'person note creation context is not current') END;
+END;
+
+CREATE TRIGGER person_note_creation_requests_immutable_update
+BEFORE UPDATE ON person_note_creation_requests FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'person note creation requests are immutable'); END;
+CREATE TRIGGER person_note_creation_requests_immutable_delete
+BEFORE DELETE ON person_note_creation_requests FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'person note creation requests are immutable'); END;
+
+CREATE TRIGGER person_note_content_revisions_immutable_update
+BEFORE UPDATE ON person_note_content_revisions FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'person note content revisions are immutable'); END;
+CREATE TRIGGER person_note_content_revisions_immutable_delete
+BEFORE DELETE ON person_note_content_revisions FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'person note content revisions are immutable'); END;
+
+CREATE VIEW person_notes_effective AS
+SELECT note.id, note.person_id, note.occurred_at, note.source, note.source_id,
+  CASE WHEN revision.revision IS NULL THEN note.title ELSE revision.title END AS title,
+  coalesce(revision.body, note.body) AS body,
+  note.metadata_json, note.created_at,
+  coalesce(revision.revision, 0) AS revision,
+  revision.created_at AS revised_at
+FROM person_notes_current note
+LEFT JOIN person_note_content_revisions revision ON revision.note_id = note.id
+  AND revision.revision = (
+    SELECT max(latest.revision) FROM person_note_content_revisions latest WHERE latest.note_id = note.id
+  );
+
+CREATE VIRTUAL TABLE person_notes_effective_fts USING fts5(
+  title, body, content='person_notes_effective', content_rowid='id',
+  tokenize='unicode61 remove_diacritics 2'
+);
+INSERT INTO person_notes_effective_fts(rowid, title, body)
+SELECT id, coalesce(title, ''), body FROM person_notes_effective;
+
+CREATE TRIGGER person_notes_effective_fts_original_insert
+AFTER INSERT ON person_notes FOR EACH ROW
+BEGIN
+  INSERT INTO person_notes_effective_fts(rowid, title, body)
+  VALUES (NEW.id, coalesce(NEW.title, ''), NEW.body);
+END;
+
+CREATE TRIGGER person_notes_effective_fts_revision_insert
+AFTER INSERT ON person_note_content_revisions FOR EACH ROW
+BEGIN
+  INSERT INTO person_notes_effective_fts(person_notes_effective_fts, rowid, title, body)
+  SELECT 'delete', NEW.note_id, coalesce(note.title, ''), note.body
+  FROM person_notes note WHERE note.id = NEW.note_id AND NEW.expected_revision = 0;
+  INSERT INTO person_notes_effective_fts(person_notes_effective_fts, rowid, title, body)
+  SELECT 'delete', NEW.note_id, coalesce(prior.title, ''), prior.body
+  FROM person_note_content_revisions prior
+  WHERE prior.note_id = NEW.note_id AND prior.revision = NEW.expected_revision;
+  INSERT INTO person_notes_effective_fts(rowid, title, body)
+  VALUES (NEW.note_id, coalesce(NEW.title, ''), NEW.body);
+END;