@legioncodeinc/nectar 0.0.1 → 0.1.0

package/dist/source-graph/schema.js

@@ -1,123 +0,0 @@
-/**
- * Source Graph table definitions (PRD-005), transcribed from the DDL in
- * `library/knowledge/private/data/source-graph-schema.md`.
- *
- * These `ColumnDef[]` arrays are the catalog contract the Deep Lake adapter
- * (`deeplake-store.ts`) registers (mirroring honeycomb's `CatalogTable` /
- * `ColumnDef` and its load-time guard: valid identifiers, no duplicates, and
- * every NOT NULL column carries a DEFAULT, except the nullable
- * `embedding`/`confidence`/`fingerprint`). Both tables self-create on first write via
- * `deeplake-heal.ts`'s `withHeal`; there is no DDL pre-step.
- */
-import { sqlIdent, sqlStr } from "./sql-guards.js";
-/** `source_graph` (identity + provenance). All TEXT NOT NULL with defaults; `kind` defaults to 'file'. */
-export const SOURCE_GRAPH_COLUMNS = [
-    { name: "nectar", type: "TEXT", notNull: true, default: "" },
-    { name: "kind", type: "TEXT", notNull: true, default: "file" },
-    { name: "created_at", type: "TEXT", notNull: true, default: "" },
-    { name: "derived_from_nectar", type: "TEXT", notNull: true, default: "" },
-    { name: "fork_content_hash", type: "TEXT", notNull: true, default: "" },
-    { name: "org_id", type: "TEXT", notNull: true, default: "" },
-    { name: "workspace_id", type: "TEXT", notNull: true, default: "" },
-    { name: "project_id", type: "TEXT", notNull: true, default: "" },
-    { name: "last_update_date", type: "TEXT", notNull: true, default: "" },
-];
-/** `source_graph_versions` (content + description chain). `embedding` + `confidence` + `fingerprint` are nullable. */
-export const SOURCE_GRAPH_VERSIONS_COLUMNS = [
-    { name: "nectar", type: "TEXT", notNull: true, default: "" },
-    { name: "content_hash", type: "TEXT", notNull: true, default: "" },
-    { name: "seq", type: "BIGINT", notNull: true, default: 0 },
-    { name: "path", type: "TEXT", notNull: true, default: "" },
-    { name: "filename", type: "TEXT", notNull: true, default: "" },
-    { name: "ext", type: "TEXT", notNull: true, default: "" },
-    { name: "size_bytes", type: "BIGINT", notNull: true, default: 0 },
-    { name: "mtime_observed", type: "TEXT", notNull: true, default: "" },
-    { name: "title", type: "TEXT", notNull: true, default: "" },
-    { name: "description", type: "TEXT", notNull: true, default: "" },
-    { name: "concepts", type: "TEXT", notNull: true, default: "[]" },
-    { name: "embedding", type: "FLOAT4[]", notNull: false },
-    { name: "confidence", type: "REAL", notNull: false },
-    { name: "fingerprint", type: "TEXT", notNull: false },
-    { name: "described_at", type: "TEXT", notNull: true, default: "" },
-    { name: "describe_model", type: "TEXT", notNull: true, default: "" },
-    { name: "describe_status", type: "TEXT", notNull: true, default: "pending" },
-    { name: "observed_at", type: "TEXT", notNull: true, default: "" },
-    { name: "org_id", type: "TEXT", notNull: true, default: "" },
-    { name: "workspace_id", type: "TEXT", notNull: true, default: "" },
-    { name: "project_id", type: "TEXT", notNull: true, default: "" },
-    { name: "last_update_date", type: "TEXT", notNull: true, default: "" },
-];
-export const SOURCE_GRAPH_TABLE = {
-    name: "source_graph",
-    scope: "tenant",
-    writePattern: "update-or-insert",
-    columns: SOURCE_GRAPH_COLUMNS,
-};
-export const SOURCE_GRAPH_VERSIONS_TABLE = {
-    name: "source_graph_versions",
-    scope: "tenant",
-    writePattern: "append-only",
-    columns: SOURCE_GRAPH_VERSIONS_COLUMNS,
-};
-/** The `source-graph` catalog group appended to the daemon's CATALOG aggregation. */
-export const SOURCE_GRAPH_CATALOG_GROUP = {
-    name: "source-graph",
-    tables: [SOURCE_GRAPH_TABLE, SOURCE_GRAPH_VERSIONS_TABLE],
-};
-const IDENT_RE = /^[a-z_][a-z0-9_]*$/;
-/**
- * The load-time guard (mirrors honeycomb `schema.ts:80-100`): valid identifiers,
- * no duplicate columns, and every NOT NULL column carries a DEFAULT. Throws on
- * violation. Returns the table unchanged so it can wrap a definition inline.
- */
-export function assertValidCatalogTable(table) {
-    if (!IDENT_RE.test(table.name)) {
-        throw new Error(`invalid table name: ${table.name}`);
-    }
-    const seen = new Set();
-    for (const col of table.columns) {
-        if (!IDENT_RE.test(col.name)) {
-            throw new Error(`invalid column identifier: ${table.name}.${col.name}`);
-        }
-        if (seen.has(col.name)) {
-            throw new Error(`duplicate column: ${table.name}.${col.name}`);
-        }
-        seen.add(col.name);
-        if (col.notNull && col.default === undefined) {
-            throw new Error(`NOT NULL column without DEFAULT: ${table.name}.${col.name}`);
-        }
-    }
-    return table;
-}
-/**
- * Render one column's SQL clause (`<name> <type>[ NOT NULL][ DEFAULT <lit>]`)
- * from a `ColumnDef`. The identifier is validated through `sqlIdent`; a
- * string `default` is rendered as a quoted literal via `sqlStr` (the TEXT
- * columns' defaults, e.g. `''`, `'file'`, `'[]'`, `'pending'`), a numeric
- * `default` is inlined bare (the BIGINT columns' `0`). `FLOAT4[]`/`REAL`
- * columns in this catalog are always nullable and carry no default.
- */
-function columnClause(col) {
-    const name = sqlIdent(col.name);
-    const notNull = col.notNull ? " NOT NULL" : "";
-    let defaultClause = "";
-    if (col.default !== undefined) {
-        defaultClause = typeof col.default === "number" ? ` DEFAULT ${col.default}` : ` DEFAULT '${sqlStr(col.default)}'`;
-    }
-    return `${name} ${col.type}${notNull}${defaultClause}`;
-}
-/**
- * Render `CREATE TABLE IF NOT EXISTS "<name>" (...) USING deeplake` from a
- * `CatalogTable`, mirroring honeycomb's `buildCreateTableSql`
- * (`src/daemon/storage/schema.ts:110-114`). `IF NOT EXISTS` is what makes two
- * concurrent healers converge: the second create is a harmless no-op, not a
- * duplicate-table error. The table name is validated through `sqlIdent`;
- * column names are validated at load by `assertValidCatalogTable`, so they are
- * safe to interpolate via {@link columnClause}.
- */
-export function buildCreateTableSql(table) {
-    const safeName = sqlIdent(table.name);
-    const colSql = table.columns.map(columnClause).join(", ");
-    return `CREATE TABLE IF NOT EXISTS "${safeName}" (${colSql}) USING deeplake`;
-}
-//# sourceMappingURL=schema.js.map

package/dist/source-graph/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/source-graph/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAqBnD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;IAC9D,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACzE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACvE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;CACvE,CAAC;AAEF,sHAAsH;AACtH,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;IAC1D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC1D,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC9D,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACzD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACpE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC3D,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAChE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;IACvD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;IACpD,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;IACrD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACpE,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;IAC5E,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;CACvE,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAiB;IAC9C,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,kBAAkB;IAChC,OAAO,EAAE,oBAAoB;CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAiB;IACvD,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,aAAa;IAC3B,OAAO,EAAE,6BAA6B;CACvC,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;CACjD,CAAC;AAEX,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAmB;IACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAc;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,aAAa,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;IACpH,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,OAAO,GAAG,aAAa,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,+BAA+B,QAAQ,MAAM,MAAM,kBAAkB,CAAC;AAC/E,CAAC"}

package/dist/source-graph/sql-guards.d.ts

@@ -1,99 +0,0 @@
-/**
- * SQL-safety escaping helpers for the Deep Lake adapter (PRD-005).
- *
- * Ported (not imported) from honeycomb's `src/daemon/storage/sql.ts`, per
- * ADR-0002: hivenectar reaches Deep Lake over the network through its own
- * client and never imports the honeycomb runtime in-process, so the escaping
- * floor is mirrored here rather than shared across the process boundary.
- *
- * The Deep Lake HTTP query endpoint binds no parameters: every value is
- * escaped and interpolated into the statement by hand before it is sent.
- * There is no parameterized fallback to forget to use, so these helpers ARE
- * the parameter binding. Every dynamic value the Deep Lake adapter builds
- * (`schema.ts`'s `buildCreateTableSql`, `deeplake-store.ts`'s query builders)
- * routes through `sqlStr` / `sqlLike` / `sqlIdent` / `sLiteral` / `eLiteral`.
- *
- * These functions are pure, synchronous, side-effect-free, and dependency-free
- * beyond the language runtime (hivenectar's zero-runtime-dependency rule).
- */
-/**
- * Escape a string for use inside a single-quoted SQL literal.
- *
- * Order matters: backslashes are doubled FIRST (so the backslash added for a
- * doubled quote is not itself re-escaped), then single quotes are doubled,
- * then NUL and the C0/C1 control characters are dropped. The result is the
- * inner body of the literal; the caller wraps it in quotes (`'${sqlStr(v)}'`,
- * or via {@link sLiteral}) or uses the `E'...'` form via {@link eLiteral} when
- * the body carries escape sequences.
- *
- * Because every quote is doubled and every backslash is doubled, an injection
- * payload like `'; DROP TABLE x; --` collapses to one inert literal: the
- * embedded quote can never close the string early, so no second statement is
- * ever produced.
- */
-export declare function sqlStr(value: string): string;
-/**
- * Escape a string for use inside a `LIKE` / `ILIKE` pattern.
- *
- * Escapes the `LIKE` metacharacters (`%` and `_`) so a literal substring
- * search is never reinterpreted as a wildcard match, alongside the same
- * quote-doubling and control stripping {@link sqlStr} performs. Not currently
- * exercised by the source-graph store's equality-only reads, but ported
- * alongside `sqlStr`/`sqlIdent` so a future prefix/substring query never has
- * to reach for a hand-rolled escape.
- */
-export declare function sqlLike(value: string): string;
-/**
- * Validate a table/column identifier against `^[a-zA-Z_][a-zA-Z0-9_]*$`.
- * Returns the name UNCHANGED on success; throws on anything else.
- *
- * Strict by design: it THROWS rather than sanitizing, because a silently
- * rewritten identifier would be a worse, harder-to-debug failure than a
- * rejected one. Callers pass only known schema names (table and column
- * identifiers from `SOURCE_GRAPH_COLUMNS` / `SOURCE_GRAPH_VERSIONS_COLUMNS`),
- * so a rejection is always a programmer error worth surfacing.
- */
-export declare function sqlIdent(name: string): string;
-/**
- * Build an ordinary single-quoted literal from a value. Thin convenience
- * around `'${sqlStr(v)}'` so call sites read as a builder call rather than raw
- * quote assembly. Use for ids, paths, hashes, enum-like values, and dates.
- * Use {@link eLiteral} instead when the body may carry escape sequences
- * (free-text title/description/concepts).
- */
-export declare function sLiteral(value: string): string;
-/**
- * Build an `E'...'` escape-string literal from a raw text body.
- *
- * Free-text bodies that may contain escape sequences (a description or title
- * with a literal backslash) must use the `E'...'` form so the
- * doubled-backslash escaping from {@link sqlStr} round-trips to the intended
- * bytes; a plain `'...'` literal for a body with backslashes would corrupt it.
- */
-export declare function eLiteral(body: string): string;
-/**
- * Validate and render a numeric value for bare (unquoted) SQL interpolation.
- * Throws unless `value` is, at runtime, a finite JavaScript `number` -
- * TypeScript's `number` type is erased at runtime, so a value that merely
- * carries the `number` type at compile time (e.g. `row.seq`, `row.sizeBytes`,
- * `row.confidence`, or one entry of an embedding vector) is not actually
- * guaranteed to be a safe, quote-free numeric literal unless this is checked
- * here. Without this guard, a non-numeric value smuggled past the type
- * system (a string, `NaN`, `Infinity`, or an object) would be interpolated
- * bare via `String(value)` with no escaping at all - the same injection
- * shape `sqlStr`/`sqlIdent` close for text and identifiers, just for the
- * numeric case. Rejects `NaN`/`Infinity`/`-Infinity` too, since those are not
- * valid bare-numeric SQL tokens.
- */
-export declare function sqlNum(value: number): string;
-/**
- * Serialize a `number[]` to a `FLOAT4[]` SQL literal (`ARRAY[...]::float4[]`),
- * mirroring honeycomb's `serializeFloat4Array` (`src/daemon/storage/vector.ts`).
- * Every entry is validated via {@link sqlNum} before interpolation - the
- * dimension contract (`isValidEmbedding`, 768) is a separate application-level
- * check the caller is still responsible for, but this function does not rely
- * on the caller to have validated *finiteness*: a non-numeric or non-finite
- * entry throws here rather than being interpolated bare into the statement.
- */
-export declare function sqlFloat4Array(vector: readonly number[]): string;
-//# sourceMappingURL=sql-guards.d.ts.map

package/dist/source-graph/sql-guards.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sql-guards.d.ts","sourceRoot":"","sources":["../../src/source-graph/sql-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7C;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGhE"}

package/dist/source-graph/sql-guards.js

@@ -1,129 +0,0 @@
-/**
- * SQL-safety escaping helpers for the Deep Lake adapter (PRD-005).
- *
- * Ported (not imported) from honeycomb's `src/daemon/storage/sql.ts`, per
- * ADR-0002: hivenectar reaches Deep Lake over the network through its own
- * client and never imports the honeycomb runtime in-process, so the escaping
- * floor is mirrored here rather than shared across the process boundary.
- *
- * The Deep Lake HTTP query endpoint binds no parameters: every value is
- * escaped and interpolated into the statement by hand before it is sent.
- * There is no parameterized fallback to forget to use, so these helpers ARE
- * the parameter binding. Every dynamic value the Deep Lake adapter builds
- * (`schema.ts`'s `buildCreateTableSql`, `deeplake-store.ts`'s query builders)
- * routes through `sqlStr` / `sqlLike` / `sqlIdent` / `sLiteral` / `eLiteral`.
- *
- * These functions are pure, synchronous, side-effect-free, and dependency-free
- * beyond the language runtime (hivenectar's zero-runtime-dependency rule).
- */
-/**
- * Escape a string for use inside a single-quoted SQL literal.
- *
- * Order matters: backslashes are doubled FIRST (so the backslash added for a
- * doubled quote is not itself re-escaped), then single quotes are doubled,
- * then NUL and the C0/C1 control characters are dropped. The result is the
- * inner body of the literal; the caller wraps it in quotes (`'${sqlStr(v)}'`,
- * or via {@link sLiteral}) or uses the `E'...'` form via {@link eLiteral} when
- * the body carries escape sequences.
- *
- * Because every quote is doubled and every backslash is doubled, an injection
- * payload like `'; DROP TABLE x; --` collapses to one inert literal: the
- * embedded quote can never close the string early, so no second statement is
- * ever produced.
- */
-export function sqlStr(value) {
-    return value
-        .replace(/\\/g, "\\\\")
-        .replace(/'/g, "''")
-        .replace(/\0/g, "")
-        // Drop C0 controls except \t (0x09) \n (0x0A) \r (0x0D), plus DEL (0x7f).
-        .replace(/[\x01-\x08\x0b\x0c\x0e-\x1f\x7f]/g, "");
-}
-/**
- * Escape a string for use inside a `LIKE` / `ILIKE` pattern.
- *
- * Escapes the `LIKE` metacharacters (`%` and `_`) so a literal substring
- * search is never reinterpreted as a wildcard match, alongside the same
- * quote-doubling and control stripping {@link sqlStr} performs. Not currently
- * exercised by the source-graph store's equality-only reads, but ported
- * alongside `sqlStr`/`sqlIdent` so a future prefix/substring query never has
- * to reach for a hand-rolled escape.
- */
-export function sqlLike(value) {
-    return value
-        .replace(/[\\%_]/g, "\\$&")
-        .replace(/'/g, "''")
-        .replace(/\0/g, "")
-        .replace(/[\x01-\x08\x0b\x0c\x0e-\x1f\x7f]/g, "");
-}
-/**
- * Validate a table/column identifier against `^[a-zA-Z_][a-zA-Z0-9_]*$`.
- * Returns the name UNCHANGED on success; throws on anything else.
- *
- * Strict by design: it THROWS rather than sanitizing, because a silently
- * rewritten identifier would be a worse, harder-to-debug failure than a
- * rejected one. Callers pass only known schema names (table and column
- * identifiers from `SOURCE_GRAPH_COLUMNS` / `SOURCE_GRAPH_VERSIONS_COLUMNS`),
- * so a rejection is always a programmer error worth surfacing.
- */
-export function sqlIdent(name) {
-    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
-        throw new Error(`Invalid SQL identifier: ${JSON.stringify(name)}`);
-    }
-    return name;
-}
-/**
- * Build an ordinary single-quoted literal from a value. Thin convenience
- * around `'${sqlStr(v)}'` so call sites read as a builder call rather than raw
- * quote assembly. Use for ids, paths, hashes, enum-like values, and dates.
- * Use {@link eLiteral} instead when the body may carry escape sequences
- * (free-text title/description/concepts).
- */
-export function sLiteral(value) {
-    return `'${sqlStr(value)}'`;
-}
-/**
- * Build an `E'...'` escape-string literal from a raw text body.
- *
- * Free-text bodies that may contain escape sequences (a description or title
- * with a literal backslash) must use the `E'...'` form so the
- * doubled-backslash escaping from {@link sqlStr} round-trips to the intended
- * bytes; a plain `'...'` literal for a body with backslashes would corrupt it.
- */
-export function eLiteral(body) {
-    return `E'${sqlStr(body)}'`;
-}
-/**
- * Validate and render a numeric value for bare (unquoted) SQL interpolation.
- * Throws unless `value` is, at runtime, a finite JavaScript `number` -
- * TypeScript's `number` type is erased at runtime, so a value that merely
- * carries the `number` type at compile time (e.g. `row.seq`, `row.sizeBytes`,
- * `row.confidence`, or one entry of an embedding vector) is not actually
- * guaranteed to be a safe, quote-free numeric literal unless this is checked
- * here. Without this guard, a non-numeric value smuggled past the type
- * system (a string, `NaN`, `Infinity`, or an object) would be interpolated
- * bare via `String(value)` with no escaping at all - the same injection
- * shape `sqlStr`/`sqlIdent` close for text and identifiers, just for the
- * numeric case. Rejects `NaN`/`Infinity`/`-Infinity` too, since those are not
- * valid bare-numeric SQL tokens.
- */
-export function sqlNum(value) {
-    if (typeof value !== "number" || !Number.isFinite(value)) {
-        throw new Error(`Invalid SQL numeric value: ${JSON.stringify(value)}`);
-    }
-    return String(value);
-}
-/**
- * Serialize a `number[]` to a `FLOAT4[]` SQL literal (`ARRAY[...]::float4[]`),
- * mirroring honeycomb's `serializeFloat4Array` (`src/daemon/storage/vector.ts`).
- * Every entry is validated via {@link sqlNum} before interpolation - the
- * dimension contract (`isValidEmbedding`, 768) is a separate application-level
- * check the caller is still responsible for, but this function does not rely
- * on the caller to have validated *finiteness*: a non-numeric or non-finite
- * entry throws here rather than being interpolated bare into the statement.
- */
-export function sqlFloat4Array(vector) {
-    const numbersLit = vector.map((v) => sqlNum(v)).join(",");
-    return `ARRAY[${numbersLit}]::float4[]`;
-}
-//# sourceMappingURL=sql-guards.js.map

package/dist/source-graph/sql-guards.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sql-guards.js","sourceRoot":"","sources":["../../src/source-graph/sql-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACnB,0EAA0E;SACzE,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,KAAK;SACT,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,SAAS,UAAU,aAAa,CAAC;AAC1C,CAAC"}

package/dist/source-graph/store.d.ts

@@ -1,101 +0,0 @@
-/**
- * The SourceGraphStore seam (PRD-005).
- *
- * The interface both the in-memory adapter (PRD-005, this project, tests + local
- * dev) and the future Deep Lake adapter (the real substrate, per ADR-0002 reached
- * through hivenectar's own client) implement. The file-registration ladder
- * (PRD-006) is written entirely against this interface, so it is testable with the
- * in-memory adapter and unchanged when the Deep Lake adapter lands.
- *
- * All reads/writes are tenancy-scoped (org+workspace at the layer, project_id as a
- * column filter, per PRD-005c). "latest version" always means MAX(seq) for a nectar.
- */
-import type { SourceGraphRow, SourceGraphVersionRow, Tenancy } from "./model.js";
-/** A candidate for re-association: a nectar plus its latest observed version. */
-export interface LatestVersion {
-    readonly identity: SourceGraphRow;
-    readonly version: SourceGraphVersionRow;
-}
-export interface SourceGraphStore {
-    /** Insert a `source_graph` identity row (mint). Throws if the nectar already exists. */
-    insertIdentity(row: SourceGraphRow): void;
-    /** Fetch an identity row by nectar, or undefined. */
-    getIdentity(nectar: string): SourceGraphRow | undefined;
-    /** Bump a nectar's `last_update_date` (called when a new version is appended). */
-    touchIdentity(nectar: string, lastUpdateDate: string): void;
-    /** Append a `source_graph_versions` row. The caller supplies seq via `nextSeq`. */
-    appendVersion(row: SourceGraphVersionRow): void;
-    /** The next monotonic seq for a nectar (0 if it has no versions yet). */
-    nextSeq(nectar: string): number;
-    /** The latest (MAX seq) version row for a nectar, or undefined. */
-    latestVersion(nectar: string): SourceGraphVersionRow | undefined;
-    /**
-     * Every nectar's latest version, scoped to the tenancy. The ladder derives the
-     * known-paths set, the missing-files set, and the by-latest-hash copy index from this.
-     */
-    listLatestVersions(tenancy: Tenancy): LatestVersion[];
-    /** The latest version whose current path equals `path` (ladder steps 1-2), scoped. */
-    latestVersionByPath(tenancy: Tenancy, path: string): LatestVersion | undefined;
-    /**
-     * A nectar whose latest version content_hash equals `contentHash` (ladder step 3
-     * exact-move, and the copy-event index), scoped. Returns the first match.
-     */
-    latestVersionByHash(tenancy: Tenancy, contentHash: string): LatestVersion | undefined;
-    /**
-     * Delete a nectar (its identity row + every version row), scoped to `tenancy`.
-     * This is the SOLE nectar-deletion path (`prune --confirm`, PRD-006d); the
-     * re-association ladder never deletes or reuses nectars. A no-op if the nectar
-     * does not exist OR its identity is outside `tenancy` (a cross-project delete
-     * is refused, never applied, per AC-20).
-     */
-    deleteNectar(tenancy: Tenancy, nectar: string): void;
-}
-/**
- * The async twin of {@link SourceGraphStore} (PRD-005's Deep Lake adapter).
- *
- * `SourceGraphStore` is synchronous by design: the in-memory adapter backs it
- * with plain `Map`s, and the file-registration ladder (`registration/ladder.ts`)
- * calls it synchronously throughout, with no `await` anywhere in the ladder's
- * control flow. A real Deep Lake adapter does its work over HTTP and cannot
- * honor that synchronous contract, so this is a SEPARATE interface with the
- * same method names and semantics, each wrapped in a `Promise` — not a
- * variant of `SourceGraphStore` and not a substitute for it.
- *
- * `DeepLakeSourceGraphStore` (`deeplake-store.ts`) implements this interface,
- * not `SourceGraphStore`. Wiring the ladder to run against an async store is
- * out of scope for PRD-005's adapter work: that would mean either making the
- * ladder's own control flow async (touching `registration/ladder.ts`, which
- * this task does not touch) or adapting between the two seams at the call
- * site. Either is a future PRD's decision once a caller actually needs the
- * durable adapter wired into the live worker loop; today `InMemorySourceGraphStore`
- * remains the ladder's only consumer and is unchanged by this addition.
- */
-export interface AsyncSourceGraphStore {
-    /** Insert a `source_graph` identity row (mint). Rejects if the nectar already exists. */
-    insertIdentity(row: SourceGraphRow): Promise<void>;
-    /** Fetch an identity row by nectar, or undefined. */
-    getIdentity(nectar: string): Promise<SourceGraphRow | undefined>;
-    /** Bump a nectar's `last_update_date` (called when a new version is appended). */
-    touchIdentity(nectar: string, lastUpdateDate: string): Promise<void>;
-    /** Append a `source_graph_versions` row. The caller supplies seq via `nextSeq`. */
-    appendVersion(row: SourceGraphVersionRow): Promise<void>;
-    /** The next monotonic seq for a nectar (0 if it has no versions yet). */
-    nextSeq(nectar: string): Promise<number>;
-    /** The latest (MAX seq) version row for a nectar, or undefined. */
-    latestVersion(nectar: string): Promise<SourceGraphVersionRow | undefined>;
-    /** Every nectar's latest version, scoped to the tenancy (soft-filtered by `project_id`). */
-    listLatestVersions(tenancy: Tenancy): Promise<LatestVersion[]>;
-    /** The latest version whose current path equals `path`, scoped. */
-    latestVersionByPath(tenancy: Tenancy, path: string): Promise<LatestVersion | undefined>;
-    /** A nectar whose latest version content_hash equals `contentHash`, scoped. First match. */
-    latestVersionByHash(tenancy: Tenancy, contentHash: string): Promise<LatestVersion | undefined>;
-    /**
-     * Delete a nectar (identity + versions), scoped to `tenancy`. The SOLE
-     * deletion path (`prune --confirm`); a no-op when the nectar does not exist or
-     * its identity is outside `tenancy` (a cross-project delete is refused, AC-20).
-     * The tenancy predicate makes the Deep Lake adapter inherit the same guard the
-     * in-memory adapter enforces, so no delete crosses a project boundary.
-     */
-    deleteNectar(tenancy: Tenancy, nectar: string): Promise<void>;
-}
-//# sourceMappingURL=store.d.ts.map

package/dist/source-graph/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/source-graph/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,OAAO,EACR,MAAM,YAAY,CAAC;AAEpB,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,WAAW,gBAAgB;IAC/B,wFAAwF;IACxF,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IAE1C,qDAAqD;IACrD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAExD,kFAAkF;IAClF,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5D,mFAAmF;IACnF,aAAa,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAEhD,yEAAyE;IACzE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhC,mEAAmE;IACnE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IAEjE;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,EAAE,CAAC;IAEtD,sFAAsF;IACtF,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAE/E;;;OAGG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAEtF;;;;;;OAMG;IACH,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,qBAAqB;IACpC,yFAAyF;IACzF,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,qDAAqD;IACrD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAEjE,kFAAkF;IAClF,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,mFAAmF;IACnF,aAAa,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,yEAAyE;IACzE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzC,mEAAmE;IACnE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAE1E,4FAA4F;IAC5F,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAE/D,mEAAmE;IACnE,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAExF,4FAA4F;IAC5F,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAE/F;;;;;;OAMG;IACH,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D"}

package/dist/source-graph/store.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=store.js.map

package/dist/source-graph/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/source-graph/store.ts"],"names":[],"mappings":""}

package/dist/source-graph/ulid.d.ts

@@ -1,9 +0,0 @@
-/** Mint a fresh nectar (26-char ULID). Never derived from content; created once. */
-export declare function mintNectar(nowMs?: number): string;
-/** Decode a nectar's embedded 48-bit timestamp back to milliseconds since epoch. */
-export declare function nectarTimestampMs(nectar: string): number;
-/** The nectar's creation time as an ISO 8601 string (for source_graph.created_at). */
-export declare function nectarCreatedAt(nectar: string): string;
-/** Shape check: 26 chars, all in the Crockford alphabet. */
-export declare function isValidNectar(value: string): boolean;
-//# sourceMappingURL=ulid.d.ts.map

package/dist/source-graph/ulid.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ulid.d.ts","sourceRoot":"","sources":["../../src/source-graph/ulid.ts"],"names":[],"mappings":"AAkCA,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,KAAK,GAAE,MAAmB,GAAG,MAAM,CAE7D;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CASxD;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIpD"}

package/dist/source-graph/ulid.js

@@ -1,61 +0,0 @@
-/**
- * ULID minting for nectars (PRD-005 / PRD-006, per ai/identity-and-reassociation.md).
- *
- * A nectar is a 26-char ULID: 48-bit millisecond timestamp + 80 bits of
- * randomness, Crockford base32, uppercase. Two load-bearing properties (per the
- * corpus): lexicographic sortability by creation time, and registry-free
- * collision resistance so minting is lock-free and parallel-safe. Node built-ins
- * only (`node:crypto`); no `ulid` package dependency.
- */
-import { randomBytes } from "node:crypto";
-/** Crockford base32 alphabet (excludes I, L, O, U). 32 symbols, 5 bits each. */
-const ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
-const TIME_LEN = 10; // 10 chars * 5 bits = 50 bits, covers the 48-bit ms timestamp
-const RANDOM_LEN = 16; // 16 chars * 5 bits = 80 bits of randomness
-function encodeTime(ms, len) {
-    let now = Math.floor(ms);
-    let out = "";
-    for (let i = 0; i < len; i++) {
-        out = ENCODING[now % 32] + out;
-        now = Math.floor(now / 32);
-    }
-    return out;
-}
-function encodeRandom(len) {
-    // 256 is divisible by 32, so byte % 32 is unbiased across 0..31.
-    const bytes = randomBytes(len);
-    let out = "";
-    for (let i = 0; i < len; i++)
-        out += ENCODING[bytes[i] % 32];
-    return out;
-}
-/** Mint a fresh nectar (26-char ULID). Never derived from content; created once. */
-export function mintNectar(nowMs = Date.now()) {
-    return encodeTime(nowMs, TIME_LEN) + encodeRandom(RANDOM_LEN);
-}
-/** Decode a nectar's embedded 48-bit timestamp back to milliseconds since epoch. */
-export function nectarTimestampMs(nectar) {
-    const timeChars = nectar.slice(0, TIME_LEN);
-    let ms = 0;
-    for (const ch of timeChars) {
-        const idx = ENCODING.indexOf(ch);
-        if (idx === -1)
-            throw new Error(`invalid ULID time char: ${ch}`);
-        ms = ms * 32 + idx;
-    }
-    return ms;
-}
-/** The nectar's creation time as an ISO 8601 string (for source_graph.created_at). */
-export function nectarCreatedAt(nectar) {
-    return new Date(nectarTimestampMs(nectar)).toISOString();
-}
-/** Shape check: 26 chars, all in the Crockford alphabet. */
-export function isValidNectar(value) {
-    if (value.length !== TIME_LEN + RANDOM_LEN)
-        return false;
-    for (const ch of value)
-        if (ENCODING.indexOf(ch) === -1)
-            return false;
-    return true;
-}
-//# sourceMappingURL=ulid.js.map

package/dist/source-graph/ulid.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ulid.js","sourceRoot":"","sources":["../../src/source-graph/ulid.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,gFAAgF;AAChF,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AACpD,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,8DAA8D;AACnF,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,4CAA4C;AAEnE,SAAS,UAAU,CAAC,EAAU,EAAE,GAAW;IACzC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,GAAG,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QAC/B,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,iEAAiE;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,QAAQ,CAAE,KAAK,CAAC,CAAC,CAAY,GAAG,EAAE,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;IACnD,OAAO,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAChE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QACjE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,GAAG,UAAU;QAAE,OAAO,KAAK,CAAC;IACzD,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC"}