@legioncodeinc/nectar 0.0.1

package/dist/hive-graph/project-scope.d.ts

@@ -0,0 +1,99 @@
+/** nectar's OWN explicit project override (precedence 1). */
+export declare const ENV_PROJECT_ID: "NECTAR_PROJECT_ID";
+/** Honeycomb's project pin, DETECTED (never required) when present (precedence 2). */
+export declare const DETECTED_HONEYCOMB_PROJECT_ID: "HONEYCOMB_PROJECT_ID";
+/** The reserved per-workspace inbox project id (mirrors the family literal). */
+export declare const UNSORTED_PROJECT_ID: "__unsorted__";
+/** The shared deeplake-family projects cache file, beside `credentials.json`. */
+export declare const PROJECTS_CACHE_FILE_NAME: "projects.json";
+/** The cache schema version this reader understands. */
+export declare const PROJECTS_CACHE_SCHEMA_VERSION: 1;
+/** A folder-to-project binding (longest-prefix matched against the cwd). */
+export interface FolderBinding {
+    readonly path: string;
+    readonly projectId: string;
+}
+/** A cached registry project (for the offline git-signal branch). */
+export interface CachedProject {
+    readonly projectId: string;
+    readonly name: string;
+    /** The canonicalized `host/owner/repo` remote, or "" when none. */
+    readonly remoteSignal: string;
+    readonly boundPaths: readonly string[];
+}
+/** The validated (or empty) projects cache. */
+export interface ProjectsCache {
+    readonly schemaVersion: typeof PROJECTS_CACHE_SCHEMA_VERSION;
+    readonly org: string;
+    readonly workspace: string;
+    readonly bindings: readonly FolderBinding[];
+    readonly projects: readonly CachedProject[];
+}
+/** The empty cache a missing/malformed/mismatched file falls soft to. */
+export declare function emptyProjectsCache(org?: string, workspace?: string): ProjectsCache;
+/** Resolve the cache directory (`~/.deeplake`), overridable for tests. */
+export declare function projectsCacheDir(dir?: string): string;
+/** Resolve the full cache path within the (possibly overridden) dir. */
+export declare function projectsCachePath(dir?: string): string;
+/**
+ * Load + hand-validate the untrusted `projects.json`. FAIL-SOFT: any missing
+ * file, parse error, wrong schema version, malformed row, or dangerous key
+ * shape reads as the empty cache. When `expect` is provided, a cache synced for
+ * a different org/workspace also reads as empty (it would carry the wrong
+ * projects), mirroring honeycomb's tenancy guard.
+ */
+export declare function loadProjectsCache(options?: {
+    dir?: string;
+    expect?: {
+        org: string;
+        workspace: string;
+    };
+}): ProjectsCache;
+/**
+ * Fold a raw git remote URL into the canonical `host/owner/repo` identity the
+ * registry stores in `remoteSignal`, so the SAME repo reached as
+ * `git@github.com:org/x.git`, `https://github.com/org/x`, or
+ * `ssh://git@github.com/org/x.git` produces ONE string. Mirrors honeycomb's
+ * `canonicalizeRemote` (`honeycomb/src/hooks/shared/project-resolver.ts`) rule
+ * for rule; pure, no IO. An input with no usable host+path returns "".
+ */
+export declare function canonicalizeRemote(rawRemote: string): string;
+/**
+ * Read the cwd's `origin` remote signal straight from `.git/config` with
+ * `node:fs` (no shell-out, per the zero-dependency ethos). Walks up from `cwd`
+ * to the repository root; understands both a `.git` DIRECTORY and a `.git`
+ * FILE (a linked worktree's `gitdir: <path>` indirection). FAIL-SOFT: any
+ * missing/unreadable/parse-defying config reads as "" (no git signal).
+ */
+export declare function readGitRemoteSignal(cwd: string): string;
+/** Extract the `[remote "origin"]` url from a git config text; "" when absent. */
+export declare function originUrlFromConfig(configText: string): string;
+/** How the scope was resolved, in ladder order. */
+export type ProjectScopeSource = "env" | "detected-honeycomb-env" | "binding" | "git-signal" | "inbox";
+export interface ResolvedProjectScope {
+    readonly projectId: string;
+    readonly source: ProjectScopeSource;
+}
+export interface ResolveProjectScopeOptions {
+    /** The working directory the scope is resolved for. */
+    readonly cwd: string;
+    /** Env snapshot (default: `process.env`). */
+    readonly env?: NodeJS.ProcessEnv;
+    /** Cache dir override (tests). Default `~/.deeplake`. */
+    readonly cacheDir?: string;
+    /** Tenancy guard for the cache (org/workspace the caller authenticated as). */
+    readonly expect?: {
+        org: string;
+        workspace: string;
+    };
+    /** Injectable git-signal reader (tests). Default {@link readGitRemoteSignal}. */
+    readonly gitRemoteSignal?: (cwd: string) => string;
+}
+/**
+ * Resolve the project scope for `cwd` per the ladder in the module doc.
+ * NEVER throws and NEVER returns an empty id: the terminal fallback is the
+ * workspace `__unsorted__` inbox, so callers (recall, registration, the
+ * projection CLI) always have a usable, correctly-scoped project id.
+ */
+export declare function resolveProjectScope(options: ResolveProjectScopeOptions): ResolvedProjectScope;
+//# sourceMappingURL=project-scope.d.ts.map

package/dist/hive-graph/project-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scope.d.ts","sourceRoot":"","sources":["../../src/hive-graph/project-scope.ts"],"names":[],"mappings":"AAyCA,6DAA6D;AAC7D,eAAO,MAAM,cAAc,EAAG,mBAA4B,CAAC;AAE3D,sFAAsF;AACtF,eAAO,MAAM,6BAA6B,EAAG,sBAA+B,CAAC;AAE7E,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,EAAG,cAAuB,CAAC;AAE3D,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,EAAG,eAAwB,CAAC;AAEjE,wDAAwD;AACxD,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AAExD,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,+CAA+C;AAC/C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,OAAO,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,GAAG,SAAK,EAAE,SAAS,SAAK,GAAG,aAAa,CAE1E;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD;AAMD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GAAG,aAAa,CA0C5H;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAkC5D;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBvD;AAsBD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAe9D;AAaD,mDAAmD;AACnD,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,wBAAwB,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,CAAC;AAEvG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,iFAAiF;IACjF,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACpD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,oBAAoB,CAmC7F"}

package/dist/hive-graph/project-scope.js

@@ -0,0 +1,286 @@
+/**
+ * Per-project scope resolution for nectar (ADR-0002: nectar and honeycomb are
+ * SEPARATE, separately-installable products; nectar never imports honeycomb and
+ * never REQUIRES a honeycomb-owned environment variable).
+ *
+ * This module answers "what project is THIS invocation in?" the same way
+ * honeycomb's resolver does (mirrored from
+ * `honeycomb/src/hooks/shared/project-resolver.ts`, never imported), over the
+ * SHARED Deep Lake family surfaces on disk:
+ *
+ *   - `~/.deeplake/projects.json`: the folder-to-project bindings + cached
+ *     registry projects the deeplake family syncs. Carries no secret. Untrusted
+ *     input: hand-validated (this repo is zero-runtime-dependency; no zod) and
+ *     FAIL-SOFT: a missing, malformed, or tenancy-mismatched cache reads as
+ *     empty, never a throw.
+ *   - the repository's own `.git/config` (read directly with `node:fs`, no
+ *     shell-out) for the canonical remote signal.
+ *
+ * Precedence (a superset of honeycomb's ladder, with nectar's own env first):
+ *   1. `NECTAR_PROJECT_ID` - nectar's OWN explicit override (source: "env").
+ *   2. `HONEYCOMB_PROJECT_ID` - DETECTED when honeycomb is installed alongside
+ *      and has pinned a project; honored as a convenience, never required
+ *      (source: "detected-honeycomb-env").
+ *   3. Folder binding - LONGEST-PREFIX path match of the cwd against the cache
+ *      `bindings` (a child binding wins over a parent) (source: "binding").
+ *   4. Git-remote signal - the cwd's canonicalized `origin` remote matched
+ *      against the cached registry projects' `remoteSignal` (source: "git-signal").
+ *   5. The workspace `__unsorted__` inbox - resolution NEVER fails; recall and
+ *      registration are never dropped for lack of a binding (source: "inbox").
+ *
+ * Resolution is a PURE function of `(cwd, env snapshot, cache snapshot, git
+ * config snapshot)`: no module-level current-project singleton, so concurrent
+ * harness sessions in different folders each resolve their own scope, exactly
+ * like honeycomb's per-session discipline.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+import { CREDENTIALS_DIR_NAME } from "./deeplake-credentials.js";
+/** nectar's OWN explicit project override (precedence 1). */
+export const ENV_PROJECT_ID = "NECTAR_PROJECT_ID";
+/** Honeycomb's project pin, DETECTED (never required) when present (precedence 2). */
+export const DETECTED_HONEYCOMB_PROJECT_ID = "HONEYCOMB_PROJECT_ID";
+/** The reserved per-workspace inbox project id (mirrors the family literal). */
+export const UNSORTED_PROJECT_ID = "__unsorted__";
+/** The shared deeplake-family projects cache file, beside `credentials.json`. */
+export const PROJECTS_CACHE_FILE_NAME = "projects.json";
+/** The cache schema version this reader understands. */
+export const PROJECTS_CACHE_SCHEMA_VERSION = 1;
+/** The empty cache a missing/malformed/mismatched file falls soft to. */
+export function emptyProjectsCache(org = "", workspace = "") {
+    return { schemaVersion: PROJECTS_CACHE_SCHEMA_VERSION, org, workspace, bindings: [], projects: [] };
+}
+/** Resolve the cache directory (`~/.deeplake`), overridable for tests. */
+export function projectsCacheDir(dir) {
+    return dir ?? join(homedir(), CREDENTIALS_DIR_NAME);
+}
+/** Resolve the full cache path within the (possibly overridden) dir. */
+export function projectsCachePath(dir) {
+    return join(projectsCacheDir(dir), PROJECTS_CACHE_FILE_NAME);
+}
+function isStr(v) {
+    return typeof v === "string";
+}
+/**
+ * Load + hand-validate the untrusted `projects.json`. FAIL-SOFT: any missing
+ * file, parse error, wrong schema version, malformed row, or dangerous key
+ * shape reads as the empty cache. When `expect` is provided, a cache synced for
+ * a different org/workspace also reads as empty (it would carry the wrong
+ * projects), mirroring honeycomb's tenancy guard.
+ */
+export function loadProjectsCache(options = {}) {
+    const path = projectsCachePath(options.dir);
+    let parsed;
+    try {
+        if (!existsSync(path))
+            return emptyProjectsCache();
+        parsed = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        return emptyProjectsCache();
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+        return emptyProjectsCache();
+    const rec = parsed;
+    if (rec.schemaVersion !== PROJECTS_CACHE_SCHEMA_VERSION)
+        return emptyProjectsCache();
+    if (!isStr(rec.org) || !isStr(rec.workspace))
+        return emptyProjectsCache();
+    if (!Array.isArray(rec.bindings) || !Array.isArray(rec.projects))
+        return emptyProjectsCache();
+    const bindings = [];
+    for (const b of rec.bindings) {
+        if (typeof b !== "object" || b === null)
+            return emptyProjectsCache();
+        const br = b;
+        if (!isStr(br.path) || !isStr(br.projectId))
+            return emptyProjectsCache();
+        bindings.push({ path: br.path, projectId: br.projectId });
+    }
+    const projects = [];
+    for (const p of rec.projects) {
+        if (typeof p !== "object" || p === null)
+            return emptyProjectsCache();
+        const pr = p;
+        if (!isStr(pr.projectId) || !isStr(pr.name) || !isStr(pr.remoteSignal) || !Array.isArray(pr.boundPaths)) {
+            return emptyProjectsCache();
+        }
+        if (!pr.boundPaths.every(isStr))
+            return emptyProjectsCache();
+        projects.push({
+            projectId: pr.projectId,
+            name: pr.name,
+            remoteSignal: pr.remoteSignal,
+            boundPaths: pr.boundPaths,
+        });
+    }
+    if (options.expect !== undefined && (rec.org !== options.expect.org || rec.workspace !== options.expect.workspace)) {
+        return emptyProjectsCache(rec.org, rec.workspace);
+    }
+    return { schemaVersion: PROJECTS_CACHE_SCHEMA_VERSION, org: rec.org, workspace: rec.workspace, bindings, projects };
+}
+/**
+ * Fold a raw git remote URL into the canonical `host/owner/repo` identity the
+ * registry stores in `remoteSignal`, so the SAME repo reached as
+ * `git@github.com:org/x.git`, `https://github.com/org/x`, or
+ * `ssh://git@github.com/org/x.git` produces ONE string. Mirrors honeycomb's
+ * `canonicalizeRemote` (`honeycomb/src/hooks/shared/project-resolver.ts`) rule
+ * for rule; pure, no IO. An input with no usable host+path returns "".
+ */
+export function canonicalizeRemote(rawRemote) {
+    const raw = rawRemote.trim();
+    if (raw === "")
+        return "";
+    let rest = raw;
+    const schemeMatch = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.exec(rest);
+    if (schemeMatch) {
+        rest = rest.slice(schemeMatch[0].length);
+    }
+    else {
+        const scpMatch = /^([^/:]+):(.+)$/.exec(rest);
+        if (scpMatch)
+            rest = `${scpMatch[1]}/${scpMatch[2]}`;
+    }
+    const firstSlash = rest.indexOf("/");
+    if (firstSlash === -1)
+        return "";
+    let authority = rest.slice(0, firstSlash);
+    const pathPart = rest.slice(firstSlash + 1);
+    const at = authority.lastIndexOf("@");
+    if (at !== -1)
+        authority = authority.slice(at + 1);
+    const colon = authority.indexOf(":");
+    if (colon !== -1)
+        authority = authority.slice(0, colon);
+    const host = authority.toLowerCase();
+    if (host === "")
+        return "";
+    let path = pathPart.replace(/\/+$/, "");
+    path = path.replace(/\.git$/i, "");
+    const segments = path
+        .split("/")
+        .map((s) => s.trim().toLowerCase())
+        .filter((s) => s.length > 0);
+    if (segments.length === 0)
+        return "";
+    return `${host}/${segments.join("/")}`;
+}
+/**
+ * Read the cwd's `origin` remote signal straight from `.git/config` with
+ * `node:fs` (no shell-out, per the zero-dependency ethos). Walks up from `cwd`
+ * to the repository root; understands both a `.git` DIRECTORY and a `.git`
+ * FILE (a linked worktree's `gitdir: <path>` indirection). FAIL-SOFT: any
+ * missing/unreadable/parse-defying config reads as "" (no git signal).
+ */
+export function readGitRemoteSignal(cwd) {
+    try {
+        let dir = resolve(cwd);
+        for (;;) {
+            const dotGit = join(dir, ".git");
+            if (existsSync(dotGit)) {
+                const configPath = gitConfigPathFor(dotGit, dir);
+                if (configPath === "")
+                    return "";
+                return canonicalizeRemote(originUrlFromConfig(readFileSync(configPath, "utf8")));
+            }
+            const parent = dirname(dir);
+            if (parent === dir)
+                return "";
+            dir = parent;
+        }
+    }
+    catch {
+        return "";
+    }
+}
+/** Resolve the config file for a `.git` entry (directory, or worktree `gitdir:` file). */
+function gitConfigPathFor(dotGit, repoDir) {
+    try {
+        const direct = join(dotGit, "config");
+        if (existsSync(direct))
+            return direct;
+        // A linked worktree keeps `.git` as a FILE: `gitdir: <path>`; the shared
+        // config lives two levels up from `<gitdir>/worktrees/<name>`.
+        const content = readFileSync(dotGit, "utf8");
+        const m = /^gitdir:\s*(.+)\s*$/m.exec(content);
+        if (m === null)
+            return "";
+        const gitdir = isAbsolute(m[1] ?? "") ? (m[1] ?? "") : resolve(repoDir, m[1] ?? "");
+        const worktreeConfig = join(gitdir, "config");
+        if (existsSync(worktreeConfig))
+            return worktreeConfig;
+        const commonConfig = resolve(gitdir, "..", "..", "config");
+        return existsSync(commonConfig) ? commonConfig : "";
+    }
+    catch {
+        return "";
+    }
+}
+/** Extract the `[remote "origin"]` url from a git config text; "" when absent. */
+export function originUrlFromConfig(configText) {
+    const lines = configText.split(/\r?\n/);
+    let inOrigin = false;
+    for (const line of lines) {
+        const trimmed = line.trim();
+        const section = /^\[(.+)\]$/.exec(trimmed);
+        if (section !== null) {
+            inOrigin = /^remote\s+"origin"$/.test(section[1] ?? "");
+            continue;
+        }
+        if (!inOrigin)
+            continue;
+        const kv = /^url\s*=\s*(.+)$/.exec(trimmed);
+        if (kv !== null)
+            return (kv[1] ?? "").trim();
+    }
+    return "";
+}
+/** Normalize a path for prefix comparison (forward slashes, no trailing slash, lowercased drive-insensitively on win32 shapes). */
+function normalizeForPrefix(p) {
+    const forward = resolve(p).replace(/\\/g, "/").replace(/\/+$/, "");
+    return process.platform === "win32" ? forward.toLowerCase() : forward;
+}
+/** True when `candidate` equals `prefix` or sits beneath it (segment-safe). */
+function isPathWithin(candidate, prefix) {
+    return candidate === prefix || candidate.startsWith(`${prefix}/`);
+}
+/**
+ * Resolve the project scope for `cwd` per the ladder in the module doc.
+ * NEVER throws and NEVER returns an empty id: the terminal fallback is the
+ * workspace `__unsorted__` inbox, so callers (recall, registration, the
+ * projection CLI) always have a usable, correctly-scoped project id.
+ */
+export function resolveProjectScope(options) {
+    const env = options.env ?? process.env;
+    const own = (env[ENV_PROJECT_ID] ?? "").trim();
+    if (own !== "")
+        return { projectId: own, source: "env" };
+    const detected = (env[DETECTED_HONEYCOMB_PROJECT_ID] ?? "").trim();
+    if (detected !== "")
+        return { projectId: detected, source: "detected-honeycomb-env" };
+    const cache = loadProjectsCache({ dir: options.cacheDir, expect: options.expect });
+    const cwdNorm = normalizeForPrefix(options.cwd);
+    let best = null;
+    let bestLen = -1;
+    for (const b of cache.bindings) {
+        const prefix = normalizeForPrefix(b.path);
+        if (isPathWithin(cwdNorm, prefix) && prefix.length > bestLen) {
+            best = b;
+            bestLen = prefix.length;
+        }
+    }
+    if (best !== null && best.projectId.trim() !== "") {
+        return { projectId: best.projectId, source: "binding" };
+    }
+    const readSignal = options.gitRemoteSignal ?? readGitRemoteSignal;
+    const signal = readSignal(options.cwd);
+    if (signal !== "") {
+        const match = cache.projects.find((p) => p.remoteSignal === signal);
+        if (match !== undefined && match.projectId.trim() !== "") {
+            return { projectId: match.projectId, source: "git-signal" };
+        }
+    }
+    return { projectId: UNSORTED_PROJECT_ID, source: "inbox" };
+}
+//# sourceMappingURL=project-scope.js.map

package/dist/hive-graph/project-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scope.js","sourceRoot":"","sources":["../../src/hive-graph/project-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,mBAA4B,CAAC;AAE3D,sFAAsF;AACtF,MAAM,CAAC,MAAM,6BAA6B,GAAG,sBAA+B,CAAC;AAE7E,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAuB,CAAC;AAE3D,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAwB,CAAC;AAEjE,wDAAwD;AACxD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAC;AA0BxD,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE;IACzD,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACtG,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACtD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAyE,EAAE;IAC3G,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,kBAAkB,EAAE,CAAC;QACnD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,kBAAkB,EAAE,CAAC;IACxG,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,GAAG,CAAC,aAAa,KAAK,6BAA6B;QAAE,OAAO,kBAAkB,EAAE,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,kBAAkB,EAAE,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,kBAAkB,EAAE,CAAC;IAE9F,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,kBAAkB,EAAE,CAAC;QACrE,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,kBAAkB,EAAE,CAAC;QACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,kBAAkB,EAAE,CAAC;QACrE,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YACxG,OAAO,kBAAkB,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,kBAAkB,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,UAAU,EAAE,EAAE,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACnH,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACtH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAE1B,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,MAAM,WAAW,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,IAAI,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAE5C,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAE3B,IAAI,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,OAAO,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,SAAS,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACjD,IAAI,UAAU,KAAK,EAAE;oBAAE,OAAO,EAAE,CAAC;gBACjC,OAAO,kBAAkB,CAAC,mBAAmB,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAC9B,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACtC,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,cAAc,CAAC;YAAE,OAAO,cAAc,CAAC;QACtD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,mIAAmI;AACnI,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,SAAiB,EAAE,MAAc;IACrD,OAAO,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAuBD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEvC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEzD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAEtF,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,IAAI,GAAyB,IAAI,CAAC;IACtC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YAC7D,IAAI,GAAG,CAAC,CAAC;YACT,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,IAAI,mBAAmB,CAAC;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC"}

package/dist/hive-graph/schema.d.ts

@@ -0,0 +1,53 @@
+export type SqlType = "TEXT" | "BIGINT" | "REAL" | "FLOAT4[]";
+export interface ColumnDef {
+    readonly name: string;
+    readonly type: SqlType;
+    /** NOT NULL columns must carry a `default` (the load-time guard). Nullable columns omit it. */
+    readonly notNull: boolean;
+    readonly default?: string | number;
+}
+export interface CatalogTable {
+    readonly name: string;
+    /** Scope is `tenant` for both tables (explicit org/workspace/project columns), mirroring `codebase`. */
+    readonly scope: "tenant";
+    /** How writes reconcile: identity is upserted, versions are append-only. */
+    readonly writePattern: "update-or-insert" | "append-only";
+    readonly columns: readonly ColumnDef[];
+}
+/** `hive_graph` (identity + provenance). All TEXT NOT NULL with defaults; `kind` defaults to 'file'. */
+export declare const HIVE_GRAPH_COLUMNS: readonly ColumnDef[];
+/** `hive_graph_versions` (content + description chain). `embedding` + `confidence` + `fingerprint` are nullable. */
+export declare const HIVE_GRAPH_VERSIONS_COLUMNS: readonly ColumnDef[];
+export declare const HIVE_GRAPH_TABLE: CatalogTable;
+export declare const HIVE_GRAPH_VERSIONS_TABLE: CatalogTable;
+/** The `hive-graph` catalog group appended to the daemon's CATALOG aggregation. */
+export declare const HIVE_GRAPH_CATALOG_GROUP: {
+    readonly name: "hive-graph";
+    readonly tables: readonly [CatalogTable, CatalogTable];
+};
+/**
+ * The load-time guard (mirrors honeycomb `schema.ts:80-100`): valid identifiers,
+ * no duplicate columns, and every NOT NULL column carries a DEFAULT. Throws on
+ * violation. Returns the table unchanged so it can wrap a definition inline.
+ */
+export declare function assertValidCatalogTable(table: CatalogTable): CatalogTable;
+/**
+ * Render `CREATE TABLE IF NOT EXISTS "<name>" (...) USING deeplake` from a
+ * `CatalogTable`, mirroring honeycomb's `buildCreateTableSql`
+ * (`src/daemon/storage/schema.ts:110-114`). `IF NOT EXISTS` is what makes two
+ * concurrent healers converge: the second create is a harmless no-op, not a
+ * duplicate-table error. The table name is validated through `sqlIdent`;
+ * column names are validated at load by `assertValidCatalogTable`, so they are
+ * safe to interpolate via {@link columnClause}.
+ */
+export declare function buildCreateTableSql(table: CatalogTable): string;
+/**
+ * Render `ALTER TABLE "<name>" ADD COLUMN <col>` for one additive column, the
+ * catalog heal path for a column added to the definition after the table already
+ * exists (PRD-018i / `hive-graph-schema.md:145-149`). The table name is validated
+ * through `sqlIdent`; the column clause reuses {@link columnClause} (identifier
+ * validated, default rendered as a guarded literal), so a healable column is only
+ * ever an additive nullable one whose clause carries no NOT NULL surprise.
+ */
+export declare function buildAddColumnSql(table: CatalogTable, col: ColumnDef): string;
+//# sourceMappingURL=schema.d.ts.map

package/dist/hive-graph/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/hive-graph/schema.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wGAAwG;IACxG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,kBAAkB,GAAG,aAAa,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;CACxC;AAED,wGAAwG;AACxG,eAAO,MAAM,kBAAkB,EAAE,SAAS,SAAS,EAUlD,CAAC;AAEF,oHAAoH;AACpH,eAAO,MAAM,2BAA2B,EAAE,SAAS,SAAS,EA2B3D,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,YAK9B,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,YAKvC,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,wBAAwB;;;CAG3B,CAAC;AAIX;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAkBzE;AAoBD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAI/D;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,CAG7E"}

package/dist/hive-graph/schema.js

@@ -0,0 +1,139 @@
+/**
+ * Hive Graph table definitions (PRD-005), transcribed from the DDL in
+ * `library/knowledge/private/data/hive-graph-schema.md`.
+ *
+ * These `ColumnDef[]` arrays are the catalog contract the Deep Lake adapter
+ * (`deeplake-store.ts`) registers (mirroring honeycomb's `CatalogTable` /
+ * `ColumnDef` and its load-time guard: valid identifiers, no duplicates, and
+ * every NOT NULL column carries a DEFAULT, except the nullable
+ * `embedding`/`confidence`/`fingerprint`). Both tables self-create on first write via
+ * `deeplake-heal.ts`'s `withHeal`; there is no DDL pre-step.
+ */
+import { sqlIdent, sqlStr } from "./sql-guards.js";
+/** `hive_graph` (identity + provenance). All TEXT NOT NULL with defaults; `kind` defaults to 'file'. */
+export const HIVE_GRAPH_COLUMNS = [
+    { name: "nectar", type: "TEXT", notNull: true, default: "" },
+    { name: "kind", type: "TEXT", notNull: true, default: "file" },
+    { name: "created_at", type: "TEXT", notNull: true, default: "" },
+    { name: "derived_from_nectar", type: "TEXT", notNull: true, default: "" },
+    { name: "fork_content_hash", type: "TEXT", notNull: true, default: "" },
+    { name: "org_id", type: "TEXT", notNull: true, default: "" },
+    { name: "workspace_id", type: "TEXT", notNull: true, default: "" },
+    { name: "project_id", type: "TEXT", notNull: true, default: "" },
+    { name: "last_update_date", type: "TEXT", notNull: true, default: "" },
+];
+/** `hive_graph_versions` (content + description chain). `embedding` + `confidence` + `fingerprint` are nullable. */
+export const HIVE_GRAPH_VERSIONS_COLUMNS = [
+    { name: "nectar", type: "TEXT", notNull: true, default: "" },
+    { name: "content_hash", type: "TEXT", notNull: true, default: "" },
+    { name: "seq", type: "BIGINT", notNull: true, default: 0 },
+    { name: "path", type: "TEXT", notNull: true, default: "" },
+    { name: "filename", type: "TEXT", notNull: true, default: "" },
+    { name: "ext", type: "TEXT", notNull: true, default: "" },
+    { name: "size_bytes", type: "BIGINT", notNull: true, default: 0 },
+    { name: "mtime_observed", type: "TEXT", notNull: true, default: "" },
+    { name: "title", type: "TEXT", notNull: true, default: "" },
+    { name: "description", type: "TEXT", notNull: true, default: "" },
+    { name: "concepts", type: "TEXT", notNull: true, default: "[]" },
+    { name: "embedding", type: "FLOAT4[]", notNull: false },
+    { name: "confidence", type: "REAL", notNull: false },
+    { name: "fingerprint", type: "TEXT", notNull: false },
+    { name: "described_at", type: "TEXT", notNull: true, default: "" },
+    { name: "describe_model", type: "TEXT", notNull: true, default: "" },
+    // Nullable embedding-model provenance (PRD-018i / NEC-018). Added additively to
+    // pre-existing tables via `healMissingColumn`; old rows read back null. This is
+    // the ONLY schema change in the PRD-018 close-out.
+    { name: "embed_model", type: "TEXT", notNull: false },
+    { name: "describe_status", type: "TEXT", notNull: true, default: "pending" },
+    { name: "observed_at", type: "TEXT", notNull: true, default: "" },
+    { name: "org_id", type: "TEXT", notNull: true, default: "" },
+    { name: "workspace_id", type: "TEXT", notNull: true, default: "" },
+    { name: "project_id", type: "TEXT", notNull: true, default: "" },
+    { name: "last_update_date", type: "TEXT", notNull: true, default: "" },
+];
+export const HIVE_GRAPH_TABLE = {
+    name: "hive_graph",
+    scope: "tenant",
+    writePattern: "update-or-insert",
+    columns: HIVE_GRAPH_COLUMNS,
+};
+export const HIVE_GRAPH_VERSIONS_TABLE = {
+    name: "hive_graph_versions",
+    scope: "tenant",
+    writePattern: "append-only",
+    columns: HIVE_GRAPH_VERSIONS_COLUMNS,
+};
+/** The `hive-graph` catalog group appended to the daemon's CATALOG aggregation. */
+export const HIVE_GRAPH_CATALOG_GROUP = {
+    name: "hive-graph",
+    tables: [HIVE_GRAPH_TABLE, HIVE_GRAPH_VERSIONS_TABLE],
+};
+const IDENT_RE = /^[a-z_][a-z0-9_]*$/;
+/**
+ * The load-time guard (mirrors honeycomb `schema.ts:80-100`): valid identifiers,
+ * no duplicate columns, and every NOT NULL column carries a DEFAULT. Throws on
+ * violation. Returns the table unchanged so it can wrap a definition inline.
+ */
+export function assertValidCatalogTable(table) {
+    if (!IDENT_RE.test(table.name)) {
+        throw new Error(`invalid table name: ${table.name}`);
+    }
+    const seen = new Set();
+    for (const col of table.columns) {
+        if (!IDENT_RE.test(col.name)) {
+            throw new Error(`invalid column identifier: ${table.name}.${col.name}`);
+        }
+        if (seen.has(col.name)) {
+            throw new Error(`duplicate column: ${table.name}.${col.name}`);
+        }
+        seen.add(col.name);
+        if (col.notNull && col.default === undefined) {
+            throw new Error(`NOT NULL column without DEFAULT: ${table.name}.${col.name}`);
+        }
+    }
+    return table;
+}
+/**
+ * Render one column's SQL clause (`<name> <type>[ NOT NULL][ DEFAULT <lit>]`)
+ * from a `ColumnDef`. The identifier is validated through `sqlIdent`; a
+ * string `default` is rendered as a quoted literal via `sqlStr` (the TEXT
+ * columns' defaults, e.g. `''`, `'file'`, `'[]'`, `'pending'`), a numeric
+ * `default` is inlined bare (the BIGINT columns' `0`). `FLOAT4[]`/`REAL`
+ * columns in this catalog are always nullable and carry no default.
+ */
+function columnClause(col) {
+    const name = sqlIdent(col.name);
+    const notNull = col.notNull ? " NOT NULL" : "";
+    let defaultClause = "";
+    if (col.default !== undefined) {
+        defaultClause = typeof col.default === "number" ? ` DEFAULT ${col.default}` : ` DEFAULT '${sqlStr(col.default)}'`;
+    }
+    return `${name} ${col.type}${notNull}${defaultClause}`;
+}
+/**
+ * Render `CREATE TABLE IF NOT EXISTS "<name>" (...) USING deeplake` from a
+ * `CatalogTable`, mirroring honeycomb's `buildCreateTableSql`
+ * (`src/daemon/storage/schema.ts:110-114`). `IF NOT EXISTS` is what makes two
+ * concurrent healers converge: the second create is a harmless no-op, not a
+ * duplicate-table error. The table name is validated through `sqlIdent`;
+ * column names are validated at load by `assertValidCatalogTable`, so they are
+ * safe to interpolate via {@link columnClause}.
+ */
+export function buildCreateTableSql(table) {
+    const safeName = sqlIdent(table.name);
+    const colSql = table.columns.map(columnClause).join(", ");
+    return `CREATE TABLE IF NOT EXISTS "${safeName}" (${colSql}) USING deeplake`;
+}
+/**
+ * Render `ALTER TABLE "<name>" ADD COLUMN <col>` for one additive column, the
+ * catalog heal path for a column added to the definition after the table already
+ * exists (PRD-018i / `hive-graph-schema.md:145-149`). The table name is validated
+ * through `sqlIdent`; the column clause reuses {@link columnClause} (identifier
+ * validated, default rendered as a guarded literal), so a healable column is only
+ * ever an additive nullable one whose clause carries no NOT NULL surprise.
+ */
+export function buildAddColumnSql(table, col) {
+    const safeName = sqlIdent(table.name);
+    return `ALTER TABLE "${safeName}" ADD COLUMN ${columnClause(col)}`;
+}
+//# sourceMappingURL=schema.js.map

package/dist/hive-graph/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/hive-graph/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAqBnD,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAAyB;IACtD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;IAC9D,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACzE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACvE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;CACvE,CAAC;AAEF,oHAAoH;AACpH,MAAM,CAAC,MAAM,2BAA2B,GAAyB;IAC/D,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;IAC1D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC1D,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC9D,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACzD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACpE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC3D,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAChE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;IACvD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;IACpD,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;IACrD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACpE,gFAAgF;IAChF,gFAAgF;IAChF,mDAAmD;IACnD,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;IACrD,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;IAC5E,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5D,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAClE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;CACvE,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,kBAAkB;IAChC,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAiB;IACrD,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,aAAa;IAC3B,OAAO,EAAE,2BAA2B;CACrC,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;CAC7C,CAAC;AAEX,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAmB;IACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAc;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,aAAa,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;IACpH,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,OAAO,GAAG,aAAa,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,+BAA+B,QAAQ,MAAM,MAAM,kBAAkB,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,GAAc;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,gBAAgB,QAAQ,gBAAgB,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;AACrE,CAAC"}