@lucern/graph-primitives 0.1.0-alpha.4 → 0.3.0-alpha.1

package/dist/epistemicSources.js

@@ -1,814 +1,12 @@
 import { v } from 'convex/values';
-import { componentsGeneric, defineTable, mutationGeneric, anyApi, queryGeneric } from 'convex/server';
+import { checkScopeAccess, requireProjectAccess } from '@lucern/access-control/access';
+import { permissiveReturn } from '@lucern/contracts/schema-helpers/validators';
+import { componentsGeneric, mutationGeneric, anyApi, queryGeneric } from 'convex/server';
+import { isNodeType, getLayerForNodeType } from '@lucern/contracts/schema-helpers/spine/tables/epistemicNodes';
 
 // src/epistemicSources.ts
 var api = anyApi;
 componentsGeneric();
-
-// ../access-control/src/topicProjectOverlay.ts
-var LEGACY_SCOPE_FIELD = "graphScopeProjectId";
-function readNonEmptyString(value) {
-  if (typeof value !== "string") {
-    return;
-  }
-  const normalized = value.trim();
-  return normalized.length > 0 ? normalized : void 0;
-}
-function readStringArray(value) {
-  if (!Array.isArray(value)) {
-    return [];
-  }
-  return value.map((entry) => readNonEmptyString(entry)).filter((entry) => Boolean(entry));
-}
-function readMetadata(topic) {
-  return topic.metadata && typeof topic.metadata === "object" ? topic.metadata : {};
-}
-function readLegacyProjectId(value) {
-  if (!value) {
-    return;
-  }
-  return readNonEmptyString(value[LEGACY_SCOPE_FIELD]);
-}
-function coerceVisibility(value) {
-  return value === "private" || value === "team" || value === "firm" || value === "external" || value === "public" ? value : void 0;
-}
-function coerceStatus(value) {
-  return value === "active" || value === "archived" || value === "watching" ? value : void 0;
-}
-function mapProjectType(topic, metadata) {
-  const explicit = readNonEmptyString(metadata.projectType);
-  if (explicit) {
-    return explicit;
-  }
-  if (topic.type === "theme") {
-    return "thematic";
-  }
-  return readNonEmptyString(topic.type) || "general";
-}
-function isProjectLikeTopic(topic) {
-  const metadata = readMetadata(topic);
-  return topic.type === "theme" || topic.type === "thematic" || topic.type === "deal" || topic.type === "monitoring" || readLegacyProjectId(topic) !== void 0 || readNonEmptyString(metadata.projectType) !== void 0;
-}
-async function resolveTopicDoc(ctx, scopeId) {
-  if (ctx?.db && typeof ctx.db.get === "function") {
-    try {
-      const directTopic = await ctx.db.get(scopeId);
-      if (directTopic) {
-        return directTopic;
-      }
-    } catch {
-    }
-  }
-  if (typeof ctx.runQuery !== "function") {
-    return null;
-  }
-  try {
-    const topic = await ctx.runQuery(api.topics.get, {
-      id: String(scopeId)
-    });
-    if (topic?.name !== void 0 && topic?.type !== void 0) {
-      return topic;
-    }
-  } catch {
-  }
-  try {
-    const topic = await ctx.runQuery(api.topics.getByLegacyScopeId, {
-      projectId: String(scopeId)
-    });
-    if (topic?.name !== void 0 && topic?.type !== void 0) {
-      return topic;
-    }
-  } catch {
-  }
-  return null;
-}
-function materializeTopicProjectOverlay(topic, idMode = "legacy") {
-  const metadata = readMetadata(topic);
-  const topicId = String(topic._id);
-  const legacyProjectId = readLegacyProjectId(topic) || readLegacyProjectId(metadata) || readNonEmptyString(metadata.legacyProjectId);
-  const storageProjectId = legacyProjectId || topicId;
-  const outwardId = idMode === "topic" ? topicId : storageProjectId;
-  const visibility = coerceVisibility(topic.visibility) || coerceVisibility(metadata.visibility) || "private";
-  const status = coerceStatus(topic.status) || coerceStatus(metadata.status) || "active";
-  const createdAt = typeof topic.createdAt === "number" ? topic.createdAt : typeof topic._creationTime === "number" ? topic._creationTime : 0;
-  const updatedAt = typeof topic.updatedAt === "number" ? topic.updatedAt : typeof metadata.updatedAt === "number" ? metadata.updatedAt : createdAt;
-  return {
-    ...metadata,
-    _id: outwardId,
-    projectId: outwardId,
-    topicId,
-    storageProjectId,
-    legacyProjectId,
-    name: readNonEmptyString(topic.name) || "Untitled Theme",
-    type: mapProjectType(topic, metadata),
-    description: readNonEmptyString(topic.description),
-    ownerId: readNonEmptyString(metadata.ownerId) || readNonEmptyString(topic.createdBy) || "system",
-    sharedWith: readStringArray(metadata.sharedWith),
-    visibility,
-    tenantId: readNonEmptyString(topic.tenantId) || readNonEmptyString(metadata.tenantId),
-    workspaceId: readNonEmptyString(topic.workspaceId) || readNonEmptyString(metadata.workspaceId),
-    status,
-    tags: readStringArray(metadata.tags),
-    chatCount: typeof metadata.chatCount === "number" ? metadata.chatCount : 0,
-    artifactCount: typeof metadata.artifactCount === "number" ? metadata.artifactCount : 0,
-    lastActivityAt: typeof metadata.lastActivityAt === "number" ? metadata.lastActivityAt : updatedAt,
-    _creationTime: typeof topic._creationTime === "number" ? topic._creationTime : createdAt,
-    createdAt,
-    updatedAt
-  };
-}
-async function resolveTopicProjectOverlay(ctx, scopeId, options = {}) {
-  const topic = await resolveTopicDoc(ctx, scopeId);
-  if (!topic) {
-    return null;
-  }
-  if (options.projectLikeOnly !== false && !isProjectLikeTopic(topic)) {
-    return null;
-  }
-  return materializeTopicProjectOverlay(topic, options.idMode);
-}
-async function listTopicProjectOverlays(ctx, options = {}) {
-  let allTopics = [];
-  if (ctx?.db?.query && typeof ctx.db.query === "function") {
-    try {
-      allTopics = await ctx.db.query("topics").collect();
-    } catch {
-      allTopics = [];
-    }
-  }
-  if (allTopics.length === 0 && typeof ctx.runQuery === "function") {
-    allTopics = (await ctx.runQuery(api.topics.list, {}) ?? []) || [];
-  }
-  return allTopics.filter(
-    (topic) => options.projectLikeOnly === false || isProjectLikeTopic(topic)
-  ).map((topic) => materializeTopicProjectOverlay(topic, options.idMode));
-}
-
-// ../access-control/src/projectGrantsBridge.ts
-var PROJECT_GRANT_STATUSES = ["active", "revoked", "expired"];
-function normalizeString(value) {
-  if (typeof value !== "string") {
-    return;
-  }
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
-async function resolveGrantScopeIds(ctx, args) {
-  const topicId = normalizeString(args.topicId);
-  const projectId = normalizeString(args.projectId);
-  for (const scopeId of [topicId, projectId]) {
-    if (!scopeId) {
-      continue;
-    }
-    try {
-      const overlay = await resolveTopicProjectOverlay(ctx, scopeId, {
-        idMode: "legacy",
-        projectLikeOnly: false
-      });
-      if (overlay) {
-        return {
-          topicId: normalizeString(overlay.topicId) ?? topicId,
-          projectId: normalizeString(overlay.projectId) ?? projectId ?? scopeId
-        };
-      }
-    } catch {
-    }
-  }
-  return { topicId, projectId };
-}
-async function normalizeProjectGrantRow(ctx, row) {
-  const scope = await resolveGrantScopeIds(ctx, {
-    topicId: row.topicId,
-    projectId: row.projectId
-  });
-  return {
-    ...row,
-    ...scope.topicId ? { topicId: scope.topicId } : {},
-    ...scope.projectId ?? scope.topicId ? { projectId: scope.projectId ?? scope.topicId } : {}
-  };
-}
-async function normalizeProjectGrantRows(ctx, rows) {
-  return await Promise.all(rows.map((row) => normalizeProjectGrantRow(ctx, row)));
-}
-async function listProjectGrantsByPrincipal(ctx, principalId) {
-  const rows = await Promise.all(
-    PROJECT_GRANT_STATUSES.map(
-      (status) => ctx.db.query("projectGrants").withIndex(
-        "by_principal_status",
-        (q) => q.eq("principalId", principalId).eq("status", status)
-      ).collect()
-    )
-  );
-  return await normalizeProjectGrantRows(ctx, rows.flat());
-}
-async function listProjectGrantsByGroup(ctx, groupId) {
-  const rows = await Promise.all(
-    PROJECT_GRANT_STATUSES.map(
-      (status) => ctx.db.query("projectGrants").withIndex(
-        "by_group_status",
-        (q) => q.eq("groupId", groupId).eq("status", status)
-      ).collect()
-    )
-  );
-  return await normalizeProjectGrantRows(ctx, rows.flat());
-}
-function buildScopeMatchers(inputScopeId, resolved) {
-  return new Set(
-    [inputScopeId, resolved.topicId, resolved.projectId].map((value) => normalizeString(value)).filter((value) => Boolean(value))
-  );
-}
-function matchesResolvedScope(row, scopeIds) {
-  const rowTopicId = normalizeString(row.topicId);
-  const rowProjectId = normalizeString(row.projectId);
-  return rowTopicId !== void 0 && scopeIds.has(rowTopicId) || rowProjectId !== void 0 && scopeIds.has(rowProjectId);
-}
-async function bridgeListProjectGrantsByTopicAndPrincipal(ctx, topicId, principalId) {
-  const resolved = await resolveGrantScopeIds(ctx, { topicId });
-  const scopeIds = buildScopeMatchers(topicId, resolved);
-  const rows = await listProjectGrantsByPrincipal(ctx, principalId);
-  return rows.filter((row) => matchesResolvedScope(row, scopeIds));
-}
-async function bridgeListProjectGrantsByTopicAndGroup(ctx, topicId, groupId) {
-  const resolved = await resolveGrantScopeIds(ctx, { topicId });
-  const scopeIds = buildScopeMatchers(topicId, resolved);
-  const rows = await listProjectGrantsByGroup(ctx, groupId);
-  return rows.filter((row) => matchesResolvedScope(row, scopeIds));
-}
-async function bridgeListProjectGrantsByPrincipalStatus(ctx, principalId, status) {
-  const rows = await listProjectGrantsByPrincipal(ctx, principalId);
-  return rows.filter((row) => row.status === status);
-}
-async function bridgeListProjectGrantsByGroupStatus(ctx, groupId, status) {
-  const rows = await listProjectGrantsByGroup(ctx, groupId);
-  return rows.filter((row) => row.status === status);
-}
-async function bridgeInsertProjectGrant(ctx, value) {
-  const resolved = await resolveGrantScopeIds(ctx, value);
-  return await ctx.db.insert("projectGrants", {
-    ...value,
-    ...resolved.topicId ? { topicId: resolved.topicId } : {},
-    ...resolved.projectId ?? resolved.topicId ? { projectId: resolved.projectId ?? resolved.topicId } : {}
-  });
-}
-
-// ../access-control/src/resolvers.ts
-async function findUserByClerkId(ctx, clerkId) {
-  const normalizedClerkId = clerkId.trim();
-  if (!normalizedClerkId) {
-    return null;
-  }
-  if (typeof ctx.runQuery === "function") {
-    try {
-      const bridgedUser = await ctx.runQuery(api.users.getUserByClerkId, {
-        clerkId: normalizedClerkId
-      });
-      if (bridgedUser) {
-        return bridgedUser;
-      }
-    } catch {
-    }
-  }
-  try {
-    const users = await ctx.db.query("users").collect();
-    return users.find((user) => String(user.clerkId ?? "") === normalizedClerkId) ?? null;
-  } catch {
-    return null;
-  }
-}
-async function findUserByPrincipalId(ctx, principalId) {
-  const normalizedPrincipalId = principalId.trim();
-  if (!normalizedPrincipalId) {
-    return null;
-  }
-  try {
-    const users = await ctx.db.query("users").collect();
-    return users.find(
-      (user) => String(user.defaultPrincipalId ?? "") === normalizedPrincipalId
-    ) ?? null;
-  } catch {
-    return null;
-  }
-}
-async function findAgentByPrincipalId(ctx, principalId) {
-  const normalizedPrincipalId = principalId.trim();
-  if (!normalizedPrincipalId) {
-    return null;
-  }
-  if (typeof ctx.runQuery === "function") {
-    try {
-      const bridgedAgent = await ctx.runQuery(
-        api.agents.getAgentByPrincipalId,
-        {
-          principalId: normalizedPrincipalId
-        }
-      );
-      if (bridgedAgent) {
-        return bridgedAgent;
-      }
-    } catch {
-    }
-  }
-  try {
-    const agents = await ctx.db.query("agents").collect();
-    return agents.find(
-      (agent) => String(agent.principalId ?? "") === normalizedPrincipalId
-    ) ?? null;
-  } catch {
-    return null;
-  }
-}
-function defaultResolvers() {
-  return {
-    async getProject(ctx, topicId) {
-      return await resolveTopicProjectOverlay(ctx, topicId, {
-        idMode: "legacy",
-        projectLikeOnly: false
-      });
-    },
-    async listTopics(ctx) {
-      return await listTopicProjectOverlays(ctx, { idMode: "legacy" });
-    },
-    async listTopicsByOwner(ctx, ownerId) {
-      const topics = await listTopicProjectOverlays(ctx, { idMode: "legacy" });
-      return topics.filter((topic) => topic.ownerId === ownerId);
-    },
-    async listTopicsByVisibility(ctx, visibility) {
-      const topics = await listTopicProjectOverlays(ctx, { idMode: "legacy" });
-      return topics.filter((topic) => topic.visibility === visibility);
-    },
-    async listProjectGrantsByProjectAndPrincipal(ctx, topicId, principalId) {
-      return await bridgeListProjectGrantsByTopicAndPrincipal(
-        ctx,
-        topicId,
-        principalId
-      );
-    },
-    async listProjectGrantsByProjectAndGroup(ctx, topicId, groupId) {
-      return await bridgeListProjectGrantsByTopicAndGroup(ctx, topicId, groupId);
-    },
-    async listProjectGrantsByPrincipalStatus(ctx, principalId, status) {
-      return await bridgeListProjectGrantsByPrincipalStatus(
-        ctx,
-        principalId,
-        status
-      );
-    },
-    async listProjectGrantsByGroupStatus(ctx, groupId, status) {
-      return await bridgeListProjectGrantsByGroupStatus(ctx, groupId, status);
-    },
-    async insertProjectGrant(ctx, value) {
-      return await bridgeInsertProjectGrant(ctx, value);
-    },
-    async getAgentByPrincipalId(ctx, principalId) {
-      return await findAgentByPrincipalId(ctx, principalId);
-    },
-    async getUserByClerkId(ctx, clerkId) {
-      return await findUserByClerkId(ctx, clerkId);
-    },
-    async getUserByPrincipalId(ctx, principalId) {
-      return await findUserByPrincipalId(ctx, principalId);
-    }
-  };
-}
-var resolverOverrides = {};
-function resolveAccessControlAppResolvers(_ctx) {
-  return {
-    ...defaultResolvers(),
-    ...resolverOverrides
-  };
-}
-
-// ../access-control/src/principalContext.ts
-function requireCanonicalResolvedUser(user, clerkId) {
-  const resolved = user;
-  if (!resolved) {
-    throw new Error(
-      `[AccessControl] Canonical user identity required for ${clerkId}. Sync users.upsertUser before user-bound access checks.`
-    );
-  }
-  const { mcRole, defaultTenantId, defaultWorkspaceId, defaultPrincipalId } = resolved;
-  if (mcRole !== "platform_admin" && mcRole !== "tenant_admin" && mcRole !== "workspace_admin" && mcRole !== "editor" && mcRole !== "viewer" && mcRole !== "auditor" && mcRole !== "service_agent") {
-    throw new Error(
-      `[AccessControl] Canonical MC role required for ${clerkId}. Re-sync Master Control identity before user-bound access checks.`
-    );
-  }
-  if (typeof defaultTenantId !== "string" || defaultTenantId.trim().length === 0) {
-    throw new Error(
-      `[AccessControl] Canonical home tenant required for ${clerkId}. Re-sync Master Control identity before user-bound access checks.`
-    );
-  }
-  if (typeof defaultWorkspaceId !== "string" || defaultWorkspaceId.trim().length === 0) {
-    throw new Error(
-      `[AccessControl] Canonical home workspace required for ${clerkId}. Re-sync Master Control identity before user-bound access checks.`
-    );
-  }
-  if (typeof defaultPrincipalId !== "string" || defaultPrincipalId.trim().length === 0) {
-    throw new Error(
-      `[AccessControl] Canonical federated principal required for ${clerkId}. Re-sync Master Control identity before user-bound access checks.`
-    );
-  }
-  return {
-    mcRole,
-    defaultTenantId: defaultTenantId.trim(),
-    defaultWorkspaceId: defaultWorkspaceId.trim(),
-    defaultPrincipalId: defaultPrincipalId.trim()
-  };
-}
-function isPrincipalIdInput(value) {
-  return value.startsWith("user:") || value.startsWith("group:") || value.startsWith("service:") || value.startsWith("agent:") || value.startsWith("external_viewer:");
-}
-async function resolveCanonicalUserRecord(ctx, actorId) {
-  const normalizedActorId = actorId.trim();
-  const clerkId = isPrincipalIdInput(normalizedActorId) && normalizedActorId.startsWith("user:") ? normalizedActorId.slice("user:".length) : normalizedActorId;
-  const resolvers = resolveAccessControlAppResolvers();
-  const resolvedByClerkId = await resolvers.getUserByClerkId(ctx, clerkId);
-  if (resolvedByClerkId) {
-    return {
-      resolvedUser: resolvedByClerkId,
-      clerkId,
-      contextClerkId: clerkId
-    };
-  }
-  const resolvedByPrincipalId = await resolvers.getUserByPrincipalId(
-    ctx,
-    normalizedActorId
-  );
-  return {
-    resolvedUser: resolvedByPrincipalId ?? null,
-    clerkId,
-    contextClerkId: normalizedActorId.startsWith("user:") && clerkId.length > 0 ? clerkId : normalizedActorId
-  };
-}
-function uniqRoles(roles) {
-  const roleSet = /* @__PURE__ */ new Set();
-  for (const role of roles) {
-    if (role === "platform_admin" || role === "tenant_admin" || role === "workspace_admin" || role === "editor" || role === "viewer" || role === "auditor" || role === "service_agent") {
-      roleSet.add(role);
-    }
-  }
-  return [...roleSet];
-}
-function normalizeGroupIds(value) {
-  if (!Array.isArray(value)) {
-    return [];
-  }
-  return [...new Set(
-    value.filter((entry) => typeof entry === "string").map((entry) => entry.trim()).filter(Boolean)
-  )];
-}
-function requireServiceAgentUser(user, actorId) {
-  const canonicalUser = requireCanonicalResolvedUser(user, actorId);
-  if (canonicalUser.mcRole !== "service_agent") {
-    throw new Error(
-      `[AccessControl] Canonical service_agent identity required for ${actorId}. Sync users.upsertUser before agent-bound access checks.`
-    );
-  }
-  return canonicalUser;
-}
-function requireCanonicalResolvedAgent(agent, actorId) {
-  const resolved = agent;
-  if (!resolved) {
-    throw new Error(
-      `[AccessControl] Agent "${actorId}" not found in agents or users table.`
-    );
-  }
-  if (typeof resolved.principalId !== "string" || resolved.principalId.trim().length === 0) {
-    throw new Error(
-      `[AccessControl] Canonical agent principalId required for ${actorId}.`
-    );
-  }
-  if (typeof resolved.tenantId !== "string" || resolved.tenantId.trim().length === 0) {
-    throw new Error(
-      `[AccessControl] Canonical home tenant required for ${actorId}.`
-    );
-  }
-  if (typeof resolved.workspaceId !== "string" || resolved.workspaceId.trim().length === 0) {
-    throw new Error(
-      `[AccessControl] Canonical home workspace required for ${actorId}.`
-    );
-  }
-  return {
-    principalId: resolved.principalId.trim(),
-    tenantId: resolved.tenantId.trim(),
-    workspaceId: resolved.workspaceId.trim(),
-    roles: uniqRoles(Array.isArray(resolved.roles) ? resolved.roles : []) ?? ["service_agent"],
-    groupIds: normalizeGroupIds(resolved.groupIds)
-  };
-}
-async function resolvePrincipalContext(ctx, actorId) {
-  if (actorId.startsWith("agent:")) {
-    const resolvers = resolveAccessControlAppResolvers();
-    const resolvedAgent = await resolvers.getAgentByPrincipalId(ctx, actorId);
-    if (resolvedAgent) {
-      const agent = requireCanonicalResolvedAgent(
-        resolvedAgent,
-        actorId
-      );
-      return {
-        principalId: agent.principalId,
-        principalType: "service",
-        clerkId: actorId,
-        tenantId: agent.tenantId,
-        workspaceId: agent.workspaceId,
-        roles: agent.roles.length > 0 ? agent.roles : ["service_agent"],
-        groupIds: agent.groupIds,
-        isPlatformAdmin: false,
-        isTenantAdmin: false,
-        isWorkspaceAdmin: false,
-        isSystemFallback: false
-      };
-    }
-    const resolvedUser2 = await resolvers.getUserByClerkId(
-      ctx,
-      actorId
-    );
-    if (!resolvedUser2) {
-      throw new Error(
-        `[AccessControl] Agent "${actorId}" not found in agents or users table.`
-      );
-    }
-    const user2 = requireServiceAgentUser(
-      resolvedUser2,
-      actorId
-    );
-    console.warn(
-      `[AccessControl] Deprecated legacy service-agent fallback for ${actorId}; migrate this principal into identity.agents.`
-    );
-    return {
-      principalId: user2.defaultPrincipalId,
-      principalType: "service",
-      clerkId: actorId,
-      tenantId: user2.defaultTenantId,
-      workspaceId: user2.defaultWorkspaceId,
-      roles: ["service_agent"],
-      groupIds: normalizeGroupIds(resolvedUser2?.principalGroupIds),
-      isPlatformAdmin: false,
-      isTenantAdmin: false,
-      isWorkspaceAdmin: false,
-      isSystemFallback: false
-    };
-  }
-  const {
-    resolvedUser,
-    contextClerkId
-  } = await resolveCanonicalUserRecord(ctx, actorId);
-  const user = requireCanonicalResolvedUser(
-    resolvedUser,
-    contextClerkId
-  );
-  if (!user.defaultPrincipalId) {
-    throw new Error(
-      `[AccessControl] Canonical federated principal required for ${contextClerkId}. Re-sync Master Control identity before user-bound access checks.`
-    );
-  }
-  if (user.mcRole === "service_agent") {
-    return {
-      principalId: user.defaultPrincipalId,
-      principalType: "service",
-      clerkId: contextClerkId,
-      tenantId: user.defaultTenantId,
-      workspaceId: user.defaultWorkspaceId,
-      roles: ["service_agent"],
-      groupIds: normalizeGroupIds(resolvedUser?.principalGroupIds),
-      isPlatformAdmin: false,
-      isTenantAdmin: false,
-      isWorkspaceAdmin: false,
-      isSystemFallback: false
-    };
-  }
-  const principalId = user.defaultPrincipalId;
-  const effectiveRole = user.mcRole;
-  const roles = effectiveRole === "platform_admin" ? ["platform_admin", "tenant_admin"] : effectiveRole === "tenant_admin" ? ["tenant_admin"] : [effectiveRole];
-  const tenantId = user.defaultTenantId;
-  const workspaceId = user.defaultWorkspaceId;
-  const isPlatformAdmin = effectiveRole === "platform_admin";
-  return {
-    principalId,
-    principalType: "user",
-    clerkId: contextClerkId,
-    tenantId,
-    workspaceId,
-    roles: uniqRoles(roles),
-    groupIds: normalizeGroupIds(resolvedUser?.principalGroupIds),
-    isPlatformAdmin,
-    isTenantAdmin: isPlatformAdmin || effectiveRole === "tenant_admin",
-    isWorkspaceAdmin: isPlatformAdmin || effectiveRole === "tenant_admin" || effectiveRole === "workspace_admin",
-    isSystemFallback: false
-  };
-}
-
-// ../access-control/src/access.ts
-function isTopicInPrincipalTenant(topic, principalTenantId) {
-  if (!topic.tenantId) {
-    return false;
-  }
-  if (!principalTenantId) {
-    return false;
-  }
-  return String(topic.tenantId) === String(principalTenantId);
-}
-function isTopicInPrincipalWorkspace(topic, principalWorkspaceId) {
-  if (!topic.workspaceId) {
-    return false;
-  }
-  if (!principalWorkspaceId) {
-    return false;
-  }
-  return String(topic.workspaceId) === String(principalWorkspaceId);
-}
-function isLegacyUnscopedTopic(topic) {
-  return !topic.tenantId || !topic.workspaceId;
-}
-function isGrantScopeAlignedToTopic(topic, grant) {
-  if (topic.tenantId && grant.tenantId && String(topic.tenantId) !== String(grant.tenantId)) {
-    return false;
-  }
-  if (topic.workspaceId && grant.workspaceId && String(topic.workspaceId) !== String(grant.workspaceId)) {
-    return false;
-  }
-  return true;
-}
-function isGrantSourceAllowedForVisibility(visibility, source) {
-  if (source !== "external_share") {
-    return true;
-  }
-  return visibility === "external" || visibility === "public";
-}
-function isGrantActive(grant) {
-  if (grant.status !== "active") {
-    return false;
-  }
-  if (grant.expiresAt !== void 0 && grant.expiresAt <= Date.now()) {
-    return false;
-  }
-  return true;
-}
-async function hasPrincipalGrant(ctx, args) {
-  const grants = await resolveAccessControlAppResolvers().listProjectGrantsByProjectAndPrincipal(
-    ctx,
-    args.topic._id,
-    args.principalId
-  );
-  if (grants.some(
-    (grant) => isGrantActive(grant) && isGrantScopeAlignedToTopic(args.topic, grant) && isGrantSourceAllowedForVisibility(
-      args.topic.visibility,
-      grant.source
-    ) && (!args.principalIsExternal || args.topic.visibility === "public" || grant.source === "external_share")
-  )) {
-    return true;
-  }
-  return false;
-}
-async function hasGroupGrant(ctx, args) {
-  if (args.groupIds.length === 0) {
-    return false;
-  }
-  for (const groupId of args.groupIds) {
-    const grants = await resolveAccessControlAppResolvers().listProjectGrantsByProjectAndGroup(ctx, args.topic._id, groupId);
-    if (grants.some(
-      (grant) => isGrantActive(grant) && isGrantScopeAlignedToTopic(args.topic, grant) && isGrantSourceAllowedForVisibility(
-        args.topic.visibility,
-        grant.source
-      )
-    )) {
-      return true;
-    }
-  }
-  return false;
-}
-function isExternalPrincipal(_ctx, _args) {
-  return false;
-}
-async function evaluateTopicAccessDetailed(ctx, args) {
-  if (args.legacyUserId) {
-    return {
-      hasAccess: true,
-      isAdmin: false,
-      isOwner: false,
-      isShared: false,
-      hasGrant: true,
-      isFirmVisible: true,
-      isExternalVisible: false,
-      isPublicVisible: false,
-      isTenantScopeMatch: true,
-      isWorkspaceScopeMatch: true,
-      isPrincipalExternal: false
-    };
-  }
-  const topic = await resolveAccessControlAppResolvers().getProject(
-    ctx,
-    args.topicId
-  );
-  if (!topic) {
-    return {
-      hasAccess: false,
-      isAdmin: false,
-      isOwner: false,
-      isShared: false,
-      hasGrant: false,
-      isFirmVisible: false,
-      isExternalVisible: false,
-      isPublicVisible: false,
-      isTenantScopeMatch: false,
-      isWorkspaceScopeMatch: false,
-      isPrincipalExternal: false
-    };
-  }
-  const { principalContext, legacyUserId } = args;
-  const userIsAdmin = principalContext.isPlatformAdmin;
-  const isOwner = topic.ownerId === legacyUserId;
-  const isShared = (topic.sharedWith ?? []).includes(legacyUserId);
-  const principalIsExternal = await isExternalPrincipal(ctx, {
-    groupIds: principalContext.groupIds,
-    topicTenantId: topic.tenantId,
-    topicWorkspaceId: topic.workspaceId
-  });
-  const hasPrincipalGrantResult = await hasPrincipalGrant(ctx, {
-    topic,
-    principalId: principalContext.principalId,
-    principalIsExternal
-  });
-  const hasGroupGrantResult = await hasGroupGrant(ctx, {
-    topic,
-    groupIds: principalContext.groupIds
-  });
-  const hasGrant = isShared || hasPrincipalGrantResult || hasGroupGrantResult;
-  const legacyUnscoped = isLegacyUnscopedTopic(topic);
-  const tenantScopeMatch = isTopicInPrincipalTenant(
-    topic,
-    principalContext.tenantId
-  );
-  const workspaceScopeMatch = isTopicInPrincipalWorkspace(
-    topic,
-    principalContext.workspaceId
-  );
-  const isPublicVisible = topic.visibility === "public";
-  const isFirmVisible = topic.visibility === "firm" && !legacyUnscoped && tenantScopeMatch && workspaceScopeMatch && !principalIsExternal;
-  const hasScopedGrant = hasGrant && (legacyUnscoped || tenantScopeMatch && workspaceScopeMatch);
-  const isExternalVisible = topic.visibility === "external" && hasScopedGrant;
-  const hasAccess = userIsAdmin || isOwner || hasScopedGrant || isPublicVisible || isFirmVisible;
-  return {
-    hasAccess,
-    isAdmin: userIsAdmin,
-    isOwner,
-    isShared,
-    hasGrant,
-    isFirmVisible,
-    isExternalVisible,
-    isPublicVisible,
-    isTenantScopeMatch: tenantScopeMatch,
-    isWorkspaceScopeMatch: workspaceScopeMatch,
-    isPrincipalExternal: principalIsExternal
-  };
-}
-async function checkTopicAccessDetailed(ctx, topicId, userId) {
-  const principalContext = await resolvePrincipalContext(ctx, userId);
-  return evaluateTopicAccessDetailed(ctx, {
-    topicId,
-    legacyUserId: userId,
-    principalContext
-  });
-}
-async function checkTopicAccess(ctx, topicId, userId) {
-  const result = await checkTopicAccessDetailed(ctx, topicId, userId);
-  return result.hasAccess;
-}
-async function checkScopeAccess(ctx, scopeId, userId) {
-  try {
-    const topic = await ctx.db.get(scopeId);
-    if (topic && topic.name !== void 0 && topic.type !== void 0) {
-      return true;
-    }
-  } catch {
-  }
-  try {
-    return await checkTopicAccess(ctx, scopeId, userId);
-  } catch {
-    return false;
-  }
-}
-async function requireTopicAccess(ctx, topicId, userId) {
-  const hasAccess = await checkTopicAccess(ctx, topicId, userId);
-  if (!hasAccess) {
-    throw new Error(
-      "Access denied: You don't have permission to access this topic"
-    );
-  }
-}
-var requireProjectAccess = requireTopicAccess;
-var permissiveReturn = v.optional(v.any());
-var looseJsonObject = v.record(v.string(), v.any());
-var looseJsonArray = v.array(v.any());
-v.union(
-  v.string(),
-  v.number(),
-  v.boolean(),
-  v.null(),
-  looseJsonObject,
-  looseJsonArray
-);
-var api2 = anyApi;
-componentsGeneric();
 var internal = anyApi;
 var mutation = mutationGeneric;
 var query = queryGeneric;
@@ -845,17 +43,17 @@ function generateGlobalId() {
   );
   return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
-var LEGACY_SCOPE_FIELD2 = "graphScopeProjectId";
+var LEGACY_SCOPE_FIELD = "graphScopeProjectId";
 function asMappedProjectId(topic) {
   if (!topic) {
     return;
   }
-  const directLegacyProjectId = normalizeScopeValue(topic[LEGACY_SCOPE_FIELD2]);
+  const directLegacyProjectId = normalizeScopeValue(topic[LEGACY_SCOPE_FIELD]);
   if (directLegacyProjectId) {
     return directLegacyProjectId;
   }
   const metadata = topic.metadata || {};
-  const candidate = metadata[LEGACY_SCOPE_FIELD2] || metadata.legacyProjectId || metadata.projectId || metadata.scopeProjectId;
+  const candidate = metadata[LEGACY_SCOPE_FIELD] || metadata.legacyProjectId || metadata.projectId || metadata.scopeProjectId;
   return candidate ? candidate : void 0;
 }
 function normalizeScopeValue(value) {
@@ -884,7 +82,7 @@ async function findTopicsByScopeAlias(ctx, scopeId) {
   try {
     return await ctx.db.query("topics").withIndex(
       "by_graph_scope_project",
-      (q) => q.eq(LEGACY_SCOPE_FIELD2, scopeId)
+      (q) => q.eq(LEGACY_SCOPE_FIELD, scopeId)
     ).collect();
   } catch {
     const topics = await ctx.db.query("topics").collect();
@@ -900,7 +98,7 @@ async function tryResolveHostTopicById(ctx, topicId) {
     return null;
   }
   try {
-    return await ctx.runQuery(api2.topics.get, {
+    return await ctx.runQuery(api.topics.get, {
       id: topicId
     }) ?? null;
   } catch {
@@ -912,7 +110,7 @@ async function tryResolveHostTopicByLegacyScope(ctx, legacyScopeId) {
     return null;
   }
   try {
-    return await ctx.runQuery(api2.topics.getByLegacyScopeId, {
+    return await ctx.runQuery(api.topics.getByLegacyScopeId, {
       projectId: legacyScopeId
     }) ?? null;
   } catch {
@@ -1031,597 +229,6 @@ async function resolveTopicProjectScope(ctx, args) {
   projectId: v.optional(v.string()),
   topicId: v.optional(v.string())
 });
-v.number();
-v.union(
-  v.literal("very_high"),
-  // 0.9+
-  v.literal("high"),
-  // 0.7-0.9
-  v.literal("medium"),
-  // 0.4-0.7
-  v.literal("low"),
-  // 0.2-0.4
-  v.literal("very_low")
-  // 0-0.2
-);
-v.union(
-  v.literal(1),
-  // Critical
-  v.literal(2),
-  // High
-  v.literal(3),
-  // Medium
-  v.literal(4),
-  // Low
-  v.literal(5)
-  // Backlog
-);
-v.union(
-  v.literal("critical"),
-  v.literal("high"),
-  v.literal("medium"),
-  v.literal("low"),
-  v.literal("backlog")
-);
-v.union(
-  v.literal("active"),
-  v.literal("paused"),
-  v.literal("completed"),
-  v.literal("archived")
-);
-v.union(
-  v.literal("pending"),
-  v.literal("processing"),
-  v.literal("completed"),
-  v.literal("failed")
-);
-v.object({
-  crunchbaseId: v.optional(v.string()),
-  linkedinUrl: v.optional(v.string()),
-  pitchbookId: v.optional(v.string()),
-  twitterUrl: v.optional(v.string()),
-  domain: v.optional(v.string())
-});
-var sourceType = v.union(
-  v.literal("proprietary"),
-  // Internal Stack research
-  v.literal("primary"),
-  // Direct interviews, calls
-  v.literal("secondary"),
-  // Published sources
-  v.literal("ai_generated"),
-  // AI-synthesized
-  v.literal("user_input"),
-  // Manual user entry
-  v.literal("inferred")
-  // System inference
-);
-v.object({
-  sourceType: v.optional(sourceType),
-  sourceId: v.optional(v.string()),
-  // Reference to source entity
-  sourceUrl: v.optional(v.string()),
-  sourceDate: v.optional(v.number()),
-  sourceName: v.optional(v.string())
-});
-v.object({
-  cursor: v.optional(v.string()),
-  limit: v.optional(v.number())
-});
-v.object({
-  hasMore: v.boolean(),
-  nextCursor: v.optional(v.string()),
-  totalCount: v.optional(v.number())
-});
-var richTextContent = v.object({
-  type: v.literal("doc"),
-  content: looseJsonArray
-});
-v.union(v.string(), richTextContent);
-v.object({
-  promptTokens: v.optional(v.number()),
-  completionTokens: v.optional(v.number()),
-  totalTokens: v.optional(v.number())
-});
-v.object({
-  fileName: v.optional(v.string()),
-  fileSize: v.optional(v.number()),
-  mimeType: v.optional(v.string()),
-  storageId: v.optional(v.id("_storage")),
-  externalUrl: v.optional(v.string())
-});
-
-// ../schema-management/src/spine/tables/epistemicNodes.ts
-var nodeType = v.union(
-  // --- L4: Audit Targets (decisions, outcomes) ---
-  v.literal("decision"),
-  // Investment decision with knowledge horizon snapshot
-  // --- L3: Traversal Anchors (epistemic structure) ---
-  v.literal("belief"),
-  // Structured conviction (immutable formulation)
-  v.literal("question"),
-  // Unit of uncertainty
-  v.literal("theme"),
-  // Investment thesis / conviction cluster
-  v.literal("deal"),
-  // Investment evaluation process
-  v.literal("topic"),
-  // Hierarchical knowledge container
-  // --- L2: Compression Boundary (minimum reasoning unit) ---
-  v.literal("claim"),
-  // Atomic assertion that can be true/false
-  v.literal("evidence"),
-  // Interpreted signal linked to beliefs
-  v.literal("synthesis"),
-  // Primers, deep research
-  v.literal("answer"),
-  // Immutable answer snapshot for a question
-  // --- L1: Terminal Leaves (non-traversable, grounding) ---
-  v.literal("atomic_fact"),
-  // Raw fact from source (not interpreted)
-  v.literal("excerpt"),
-  // Direct quote from source document
-  v.literal("source"),
-  // News, documents, transcripts
-  // --- Ontological Entities (things in the world) ---
-  v.literal("company"),
-  // Organization (subtype: private, corporate, portfolio)
-  v.literal("person"),
-  // Individual (founder, expert, LP, contact)
-  v.literal("investor"),
-  // Investment entity (subtype: vc, lp, cvc, pe, family_office, angel)
-  v.literal("function"),
-  // What a company does (from classifier)
-  v.literal("value_chain")
-  // Market structure / value flow
-);
-var epistemicLayer = v.union(
-  v.literal("L4"),
-  // Decisions, outcomes - audit targets
-  v.literal("L3"),
-  // Beliefs, questions, themes - traversal anchors
-  v.literal("L2"),
-  // Claims, evidence, synthesis - compression boundary
-  v.literal("L1"),
-  // Atomic facts, excerpts, sources - terminal leaves
-  v.literal("ontological"),
-  // Companies, people, etc - not epistemic
-  v.literal("organizational")
-  // Topics, lenses, worktrees — structural containers
-);
-var nodeStatus = v.union(
-  v.literal("active"),
-  v.literal("superseded"),
-  // Replaced by newer version
-  v.literal("archived"),
-  v.literal("deleted")
-);
-var sourceType2 = v.union(
-  v.literal("human"),
-  // User created directly
-  v.literal("ai_extracted"),
-  // LLM extracted from a source
-  v.literal("ai_generated"),
-  // LLM synthesized/created
-  v.literal("imported"),
-  // External system import
-  v.literal("system"),
-  // System-generated (migrations, classifiers)
-  v.literal("verified"),
-  // Human-verified source
-  v.literal("proprietary")
-  // Proprietary/internal data
-);
-var verificationStatus = v.union(
-  v.literal("unverified"),
-  v.literal("human_verified"),
-  v.literal("ai_verified"),
-  v.literal("contradicted"),
-  v.literal("outdated")
-);
-var syncStatus = v.union(
-  v.literal("synced"),
-  // Node and edges fully synced to Neo4j
-  v.literal("pending_edges"),
-  // Node created, edges being created
-  v.literal("edge_creation_failed")
-  // Edge creation failed, needs retry
-);
-var audienceLabel = v.string();
-var sensitivityTier = v.union(
-  v.literal("low"),
-  v.literal("medium"),
-  v.literal("high"),
-  v.literal("restricted")
-);
-var exportClass = v.union(
-  v.literal("internal_only"),
-  v.literal("client_safe"),
-  v.literal("public_safe"),
-  v.literal("restricted")
-);
-var anonymizationClass = v.union(
-  v.literal("none"),
-  v.literal("standard"),
-  v.literal("strict")
-);
-var epistemicStatus = v.union(
-  v.literal("hypothesis"),
-  // Initial conjecture, low evidence
-  v.literal("emerging"),
-  // Building evidence, gaining traction
-  v.literal("established"),
-  // Well-evidenced, core to thesis
-  v.literal("challenged"),
-  // Contradicting evidence appeared
-  v.literal("assumption"),
-  // Taken as given, not actively tested
-  v.literal("deprecated")
-  // Superseded or abandoned
-);
-var beliefStatus = v.union(
-  v.literal("assumption"),
-  v.literal("hypothesis"),
-  v.literal("belief"),
-  v.literal("fact")
-);
-var reversibility = v.union(
-  v.literal("irreversible"),
-  // One-way door decision
-  v.literal("hard_to_reverse"),
-  // Significant cost to undo
-  v.literal("reversible"),
-  // Can change course with moderate effort
-  v.literal("trivial")
-  // Easy to adjust
-);
-var predictionOutcome = v.union(
-  v.literal("pending"),
-  v.literal("confirmed"),
-  v.literal("disconfirmed"),
-  v.literal("partial"),
-  v.literal("expired")
-);
-var predictionMeta = v.object({
-  isPrediction: v.boolean(),
-  registeredAt: v.number(),
-  // When prediction was made
-  expectedBy: v.optional(v.number()),
-  // When we expect resolution
-  outcome: v.optional(predictionOutcome),
-  outcomeRecordedAt: v.optional(v.number()),
-  outcomeEvidenceId: v.optional(v.string()),
-  // globalId of confirming evidence
-  confidenceAtPrediction: v.optional(v.number()),
-  // 0-1
-  actualVsPredicted: v.optional(v.string())
-  // Notes on how outcome compared
-});
-var methodology = v.union(
-  // Primary Research (high value)
-  v.literal("primary_research"),
-  // Direct investigation
-  v.literal("expert_interview"),
-  // Expert call/interview
-  v.literal("customer_interview"),
-  // Customer research
-  v.literal("field_observation"),
-  // On-site observation
-  v.literal("proprietary_data"),
-  // Internal data analysis
-  // Secondary Research
-  v.literal("desk_research"),
-  // Public sources
-  v.literal("regulatory_filing"),
-  // SEC, regulatory docs
-  v.literal("news_article"),
-  // News/press
-  v.literal("academic_paper"),
-  // Academic research
-  // AI-Assisted
-  v.literal("ai_synthesis"),
-  // AI-generated synthesis
-  v.literal("ai_extraction")
-  // AI-extracted from source
-);
-var informationAsymmetry = v.union(
-  v.literal("proprietary"),
-  // Only we have this
-  v.literal("early"),
-  // We're early but others will get it
-  v.literal("common")
-  // Everyone has access
-);
-var temporalNature = v.union(
-  v.literal("factual"),
-  // Resolved outcome. Grounded in reality.
-  v.literal("forecast"),
-  // Prediction. Will resolve. Discounted weight.
-  v.literal("unknown")
-  // Not yet classified.
-);
-var questionType = v.union(
-  v.literal("validation"),
-  // Does evidence support this belief?
-  v.literal("falsification"),
-  // What would prove this belief wrong?
-  v.literal("assumption_probe"),
-  // Is this unstated assumption true?
-  v.literal("prediction_test"),
-  // Will this predicted outcome occur?
-  v.literal("counterfactual"),
-  // What would we expect if X were false?
-  v.literal("discovery"),
-  // What don't we know yet?
-  v.literal("clarification"),
-  // What does X actually mean?
-  v.literal("comparison"),
-  // How does X compare to Y?
-  v.literal("causal"),
-  // What caused X?
-  v.literal("mechanism"),
-  // How does X work?
-  v.literal("general")
-  // Unclassified
-);
-var questionPriority = v.union(
-  v.literal("critical"),
-  // Blocks decision-making
-  v.literal("high"),
-  // Important for thesis
-  v.literal("medium"),
-  // Would be nice to know
-  v.literal("low")
-  // Background/curiosity
-);
-var answerQuality = v.union(
-  v.literal("definitive"),
-  // Clear, well-supported
-  v.literal("strong"),
-  // Good evidence, high confidence
-  v.literal("moderate"),
-  // Some evidence
-  v.literal("weak"),
-  // Limited evidence
-  v.literal("speculative"),
-  // Mostly conjecture
-  v.literal("unanswered")
-  // No answer yet
-);
-var consensusView = v.union(
-  v.literal("aligned"),
-  // We agree with market consensus
-  v.literal("ahead_of"),
-  // We see this before consensus does
-  v.literal("contrarian"),
-  // We actively disagree with consensus
-  v.literal("orthogonal"),
-  // We're looking at something consensus isn't discussing
-  v.literal("unknown")
-  // We don't know what consensus thinks
-);
-var themeConviction = v.union(
-  v.literal("high"),
-  // Strong conviction, actively deploying
-  v.literal("medium"),
-  // Building conviction
-  v.literal("low"),
-  // Exploring, not convicted
-  v.literal("negative")
-  // Actively avoiding
-);
-var decisionType = v.union(
-  v.literal("invest"),
-  v.literal("pass"),
-  v.literal("follow_on"),
-  v.literal("exit"),
-  v.literal("deep_dive"),
-  v.literal("monitor"),
-  v.literal("deprioritize"),
-  v.literal("thesis_adopt"),
-  v.literal("thesis_revise"),
-  v.literal("thesis_abandon")
-);
-var decisionOutcome = v.union(
-  v.literal("pending"),
-  v.literal("successful"),
-  v.literal("unsuccessful"),
-  v.literal("mixed"),
-  v.literal("unknown")
-);
-var externalIds2 = v.object({
-  crunchbase: v.optional(v.string()),
-  linkedin: v.optional(v.string()),
-  pitchbook: v.optional(v.string()),
-  twitter: v.optional(v.string()),
-  website: v.optional(v.string())
-});
-defineTable({
-  // === IDENTITY ===
-  globalId: v.string(),
-  // UUID - survives migration to Neo4j
-  // === TYPE ===
-  nodeType,
-  // === EPISTEMIC LAYER ===
-  epistemicLayer: v.optional(epistemicLayer),
-  // === SUBTYPE (for typed entities) ===
-  subtype: v.optional(v.string()),
-  // company: private|corporate|portfolio, investor: vc|lp|cvc|pe|family_office|angel
-  // === CONTENT ===
-  canonicalText: v.string(),
-  // The core content (belief statement, company name, etc.)
-  contentHash: v.string(),
-  // SHA256(nodeType + canonicalText) for deduplication
-  // Extended content (for sources/syntheses)
-  content: v.optional(v.string()),
-  // Full text for documents/articles
-  contentType: v.optional(v.string()),
-  // "markdown", "html", "pdf", "text"
-  // === METADATA ===
-  title: v.optional(v.string()),
-  // Display title
-  tags: v.optional(v.array(v.string())),
-  domain: v.optional(v.string()),
-  // For companies: website domain
-  // Type-specific metadata (flexible object - LEGACY)
-  // New code should use the typed fields below when available
-  metadata: v.optional(looseJsonObject),
-  // === POLICY / ENTITLEMENT ===
-  tenantId: v.optional(v.string()),
-  workspaceId: v.optional(v.string()),
-  ownerPrincipalId: v.optional(v.string()),
-  audienceLabel: v.optional(audienceLabel),
-  policyTags: v.optional(v.array(v.string())),
-  sensitivityTier: v.optional(sensitivityTier),
-  exportClass: v.optional(exportClass),
-  anonymizationClass: v.optional(anonymizationClass),
-  // === PUBLICATION (visibility-based, not copy-based) ===
-  // Publication expands who can see a workspace-local node — the node stays
-  // in its workspace, like a microservice exposing part of its API surface.
-  // Rules-based: pack/tenant-level publicationRules auto-evaluate on
-  // confidence changes and node creation. No manual click-by-click.
-  publicationStatus: v.optional(
-    v.union(
-      v.literal("unpublished"),
-      // Default: workspace-local only
-      v.literal("published"),
-      // Visible at tenant scope (rules matched)
-      v.literal("suppressed")
-      // Manually blocked even if rules match
-    )
-  ),
-  publishedAt: v.optional(v.number()),
-  // When publication status last changed to published
-  publishedBy: v.optional(v.string()),
-  // userId or "system:publication_rules" for auto-publish
-  // === TYPED METADATA FIELDS ===
-  // --- Belief ---
-  // Belief type — validated against schemaEnumConfig category "belief_type"
-  // Platform core: hypothesis, belief, principle, invariant, assumption,
-  //                tenet, prior, preference, goal, forecast
-  beliefType: v.optional(v.string()),
-  beliefStatus: v.optional(beliefStatus),
-  epistemicStatus: v.optional(epistemicStatus),
-  reversibility: v.optional(reversibility),
-  predictionMeta: v.optional(predictionMeta),
-  // Consensus tracking (for non-consensus detection)
-  consensusView: v.optional(consensusView),
-  consensusConfidence: v.optional(v.number()),
-  // 0-1: What we think consensus confidence is
-  consensusSource: v.optional(v.string()),
-  // Where we got the consensus view (twitter, reports, etc.)
-  // --- Evidence ---
-  methodology: v.optional(methodology),
-  informationAsymmetry: v.optional(informationAsymmetry),
-  temporalNature: v.optional(temporalNature),
-  // --- Question ---
-  questionType: v.optional(questionType),
-  questionPriority: v.optional(questionPriority),
-  answerQuality: v.optional(answerQuality),
-  // --- Theme ---
-  themeConviction: v.optional(themeConviction),
-  // Market timing (for "early on theme" detection)
-  marketAwarenessDate: v.optional(v.number()),
-  // When this theme became broadly discussed
-  marketAwarenessSource: v.optional(v.string()),
-  // How we know (first major report, twitter volume spike, etc.)
-  earlySignalIds: v.optional(v.array(v.string())),
-  // globalIds of evidence we had before market awareness
-  // --- Decision ---
-  decisionType: v.optional(decisionType),
-  decisionOutcome: v.optional(decisionOutcome),
-  // === EXTERNAL IDS (for ontological entities) ===
-  externalIds: v.optional(externalIds2),
-  // === PROVENANCE ===
-  sourceType: sourceType2,
-  aiProvider: v.optional(v.string()),
-  // "claude", "gemini", "gpt-4", etc.
-  extractedFromNodeId: v.optional(v.id("epistemicNodes")),
-  // Quick reference to source
-  // === EXTRACTION CONTEXT ===
-  extractionModel: v.optional(v.string()),
-  // "claude-sonnet-4-20250514"
-  extractionPromptName: v.optional(v.string()),
-  // "lucern/extract-evidence"
-  extractionPromptVersion: v.optional(v.number()),
-  extractionTemperature: v.optional(v.number()),
-  extractionLangfuseTraceId: v.optional(v.string()),
-  // === GROUNDING VERIFICATION ===
-  groundingVerified: v.optional(v.boolean()),
-  groundingConfidence: v.optional(v.number()),
-  // 0-1 match quality
-  groundingMatchedText: v.optional(v.string()),
-  // Actual text from source
-  groundingStartOffset: v.optional(v.number()),
-  groundingEndOffset: v.optional(v.number()),
-  groundingRejectionReason: v.optional(v.string()),
-  // === CONFIDENCE & VERIFICATION ===
-  confidence: v.optional(v.number()),
-  // 0-1 projected probability P(x) = b + a*u
-  verificationStatus: v.optional(verificationStatus),
-  // === SL OPINION (Subjective Logic — Kernel v2) ===
-  // Replaces scalar confidence with rich epistemic state.
-  // b + d + u = 1. P(x) = b + a*u is stored in `confidence` for backward compat.
-  opinion_b: v.optional(v.number()),
-  // Belief: evidence FOR (0-1)
-  opinion_d: v.optional(v.number()),
-  // Disbelief: evidence AGAINST (0-1)
-  opinion_u: v.optional(v.number()),
-  // Uncertainty: absence of evidence (0-1)
-  opinion_a: v.optional(v.number()),
-  // Base rate / prior probability (0-1)
-  tupleContradicted: v.optional(v.boolean()),
-  // Single-belief tuple-space contradiction flag
-  // === LIFECYCLE ===
-  status: nodeStatus,
-  supersededBy: v.optional(v.id("epistemicNodes")),
-  // === OWNERSHIP ===
-  topicId: v.optional(v.string()),
-  // Canonical scope container (topic-first model)
-  projectId: v.optional(v.string()),
-  // DEPRECATED: Use belongs_to edges
-  createdBy: v.string(),
-  // Clerk user ID
-  createdAt: v.number(),
-  updatedAt: v.number(),
-  // === NEO4J SYNC STATUS ===
-  syncStatus: v.optional(syncStatus),
-  syncError: v.optional(v.string())
-  // Error message if sync failed
-}).index("by_globalId", ["globalId"]).index("by_contentHash", ["contentHash"]).index("by_nodeType", ["nodeType"]).index("by_subtype", ["nodeType", "subtype"]).index("by_domain", ["domain"]).index("by_project", ["projectId"]).index("by_project_type", ["projectId", "nodeType"]).index("by_topic", ["topicId"]).index("by_topic_type", ["topicId", "nodeType"]).index("by_tenantId", ["tenantId"]).index("by_workspaceId", ["workspaceId"]).index("by_tenant_workspace", ["tenantId", "workspaceId"]).index("by_audienceLabel", ["audienceLabel"]).index("by_sensitivityTier", ["sensitivityTier"]).index("by_exportClass", ["exportClass"]).index("by_status", ["status"]).index("by_sourceType", ["sourceType"]).index("by_verification", ["verificationStatus"]).index("by_layer", ["epistemicLayer"]).index("by_layer_type", ["epistemicLayer", "nodeType"]).index("by_syncStatus", ["syncStatus"]).index("by_publicationStatus", ["publicationStatus"]).index("by_tenant_publicationStatus", ["tenantId", "publicationStatus"]).index("by_belief_status", ["nodeType", "beliefStatus"]).index("by_epistemic_status", ["nodeType", "epistemicStatus"]).index("by_temporal_nature", ["nodeType", "temporalNature"]).index("by_methodology", ["nodeType", "methodology"]).index("by_reversibility", ["nodeType", "reversibility"]).index("by_questionType", ["nodeType", "questionType"]).index("by_questionPriority", ["nodeType", "questionPriority"]).searchIndex("search_canonicalText", {
-  searchField: "canonicalText",
-  filterFields: ["nodeType", "projectId", "topicId", "status"]
-});
-function getLayerForNodeType(type) {
-  switch (type) {
-    case "decision":
-      return "L4";
-    case "belief":
-    case "question":
-    case "theme":
-    case "deal":
-      return "L3";
-    case "claim":
-    case "evidence":
-    case "synthesis":
-    case "answer":
-      return "L2";
-    case "atomic_fact":
-    case "excerpt":
-    case "source":
-      return "L1";
-    case "topic":
-      return "organizational";
-    case "company":
-    case "person":
-    case "investor":
-    case "function":
-    case "value_chain":
-      return "ontological";
-  }
-}
-
-// src/workspaceIsolation.ts
 function normalizeScopeValue2(value) {
   if (typeof value !== "string") {
     return;
@@ -1639,7 +246,7 @@ function throwWorkspaceIsolationError(args) {
   throw error;
 }
 function assertWorkspaceScopedEpistemicNodeScope(args) {
-  const layer = getLayerForNodeType(args.nodeType);
+  const layer = isNodeType(args.nodeType) ? getLayerForNodeType(args.nodeType) : void 0;
   if (layer === "ontological") {
     return;
   }
@@ -1670,7 +277,7 @@ function throwStructuredSourceError(args) {
   error.details = args.details;
   throw error;
 }
-function normalizeString2(value) {
+function normalizeString(value) {
   if (typeof value !== "string") {
     return void 0;
   }
@@ -1689,16 +296,16 @@ function normalizeMetadata(metadata) {
   return rest;
 }
 function generateSourceContentHash(identity) {
-  const content2 = `source:${identity.trim().toLowerCase()}`;
+  const content = `source:${identity.trim().toLowerCase()}`;
   let hash = 5381;
-  for (let index = 0; index < content2.length; index += 1) {
-    hash = (hash << 5) + hash + content2.charCodeAt(index);
+  for (let index = 0; index < content.length; index += 1) {
+    hash = (hash << 5) + hash + content.charCodeAt(index);
     hash &= hash;
   }
   return Math.abs(hash).toString(16).padStart(8, "0");
 }
 function normalizeSourceUrl(url) {
-  const trimmed = normalizeString2(url);
+  const trimmed = normalizeString(url);
   if (!trimmed) {
     throwStructuredSourceError({
       message: "Source URL is required.",
@@ -1741,10 +348,10 @@ async function findSourceByIdentity(ctx, args) {
   let shaMatch = null;
   for (const node of sourceNodes) {
     const metadata = asRecord(node.metadata);
-    if (args.normalizedUrl && normalizeString2(metadata.url) === args.normalizedUrl && !urlMatch) {
+    if (args.normalizedUrl && normalizeString(metadata.url) === args.normalizedUrl && !urlMatch) {
       urlMatch = node;
     }
-    if (args.sha && normalizeString2(metadata.contentSha) === args.sha && !shaMatch) {
+    if (args.sha && normalizeString(metadata.contentSha) === args.sha && !shaMatch) {
       shaMatch = node;
     }
     if (urlMatch && (!args.sha || shaMatch)) {
@@ -1790,10 +397,10 @@ function buildSourceMetadata(args) {
 }
 function sourceEmbeddingText(args) {
   const lines = [
-    normalizeString2(args.title),
-    normalizeString2(args.url),
+    normalizeString(args.title),
+    normalizeString(args.url),
     args.kind,
-    normalizeString2(args.metadata.sourceDescription)
+    normalizeString(args.metadata.sourceDescription)
   ].filter((value) => Boolean(value));
   return lines.join("\n");
 }
@@ -1810,8 +417,8 @@ var upsertSource = mutation({
   },
   returns: permissiveReturn,
   handler: async (ctx, args) => {
-    const normalizedUrl = normalizeString2(args.url) ? normalizeSourceUrl(args.url) : void 0;
-    const sha = normalizeString2(args.sha);
+    const normalizedUrl = normalizeString(args.url) ? normalizeSourceUrl(args.url) : void 0;
+    const sha = normalizeString(args.sha);
     if (!normalizedUrl && !sha) {
       throwStructuredSourceError({
         message: "Source identity requires a URL or content SHA.",
@@ -1836,7 +443,7 @@ var upsertSource = mutation({
         });
       }
       const existingMetadata = asRecord(existing.metadata);
-      const existingSha = normalizeString2(existingMetadata.contentSha);
+      const existingSha = normalizeString(existingMetadata.contentSha);
       if (sha && existingSha && existingSha !== sha) {
         throwStructuredSourceError({
           message: "Same URL cannot be reused with a different content hash.",
@@ -1862,7 +469,7 @@ var upsertSource = mutation({
         metadata: nextMetadata2,
         updatedAt: now
       };
-      const title2 = normalizeString2(args.title);
+      const title2 = normalizeString(args.title);
       if (title2) {
         patch.title = title2;
         patch.canonicalText = title2;
@@ -1891,7 +498,7 @@ var upsertSource = mutation({
       });
       return await ctx.db.get(existing._id) ?? existing;
     }
-    if (!normalizeString2(args.topicId)) {
+    if (!normalizeString(args.topicId)) {
       throwStructuredSourceError({
         message: "topicId is required when creating a new source.",
         status: 400,
@@ -1912,7 +519,7 @@ var upsertSource = mutation({
       await requireProjectAccess(ctx, scope.projectId, args.userId);
     }
     const globalId = generateGlobalId();
-    const title = normalizeString2(args.title);
+    const title = normalizeString(args.title);
     const nextMetadata = buildSourceMetadata({
       normalizedUrl,
       sha,
@@ -2011,7 +618,7 @@ var findBySha = query({
   },
   returns: permissiveReturn,
   handler: async (ctx, args) => {
-    const sha = normalizeString2(args.sha);
+    const sha = normalizeString(args.sha);
     if (!sha) {
       return null;
     }