@lucern/graph-primitives 0.3.0-alpha.0 → 0.3.0-alpha.10

package/dist/workspaceIsolation.js

@@ -1,60 +1,22 @@
+import { isNodeType, getLayerForNodeType } from '@lucern/contracts/schema-helpers/spine/tables/epistemicNodes';
 import { v } from 'convex/values';
 import { componentsGeneric, anyApi } from 'convex/server';
 
-// ../../packages/contracts/src/schema-helpers/spine/tables/epistemicNodes.ts
-var NODE_TYPES = [
-  "decision",
-  "belief",
-  "question",
-  "theme",
-  "deal",
-  "topic",
-  "claim",
-  "evidence",
-  "synthesis",
-  "answer",
-  "atomic_fact",
-  "excerpt",
-  "source",
-  "company",
-  "person",
-  "investor",
-  "function",
-  "value_chain"
-];
-function isNodeType(value) {
-  return NODE_TYPES.includes(value);
+// src/workspaceIsolation.ts
+var api = anyApi;
+componentsGeneric();
+
+// src/debug.ts
+function isGraphPrimitiveDebugEnabled() {
+  const env = globalThis.process?.env;
+  return env?.LUCERN_COMPAT_FALLBACK_DEBUG === "1" || env?.LUCERN_GRAPH_DEBUG === "1";
 }
-function getLayerForNodeType(type) {
-  switch (type) {
-    case "decision":
-      return "L4";
-    case "belief":
-    case "question":
-    case "theme":
-    case "deal":
-      return "L3";
-    case "claim":
-    case "evidence":
-    case "synthesis":
-    case "answer":
-      return "L2";
-    case "atomic_fact":
-    case "excerpt":
-    case "source":
-      return "L1";
-    case "topic":
-      return "organizational";
-    case "company":
-    case "person":
-    case "investor":
-    case "function":
-    case "value_chain":
-      return "ontological";
+function debugGraphPrimitiveFallback(message, context) {
+  if (!isGraphPrimitiveDebugEnabled()) {
+    return;
   }
+  console.debug(message, context ?? {});
 }
-var api = anyApi;
-componentsGeneric();
 
 // src/topicScope.ts
 var LEGACY_SCOPE_FIELD = "graphScopeProjectId";
@@ -98,7 +60,14 @@ async function findTopicsByScopeAlias(ctx, scopeId) {
       "by_graph_scope_project",
       (q) => q.eq(LEGACY_SCOPE_FIELD, scopeId)
     ).collect();
-  } catch {
+  } catch (error) {
+    debugGraphPrimitiveFallback(
+      "[topicScope] Failed to resolve scope alias via index",
+      {
+        error,
+        scopeId
+      }
+    );
     const topics = await ctx.db.query("topics").collect();
     return topics.filter((topic) => {
       const normalizedGlobalId = normalizeScopeValue(topic.globalId);
@@ -115,7 +84,14 @@ async function tryResolveHostTopicById(ctx, topicId) {
     return await ctx.runQuery(api.topics.get, {
       id: topicId
     }) ?? null;
-  } catch {
+  } catch (error) {
+    debugGraphPrimitiveFallback(
+      "[topicScope] Failed to resolve topic by host query",
+      {
+        error,
+        topicId
+      }
+    );
     return null;
   }
 }
@@ -127,7 +103,14 @@ async function tryResolveHostTopicByLegacyScope(ctx, legacyScopeId) {
     return await ctx.runQuery(api.topics.getByLegacyScopeId, {
       projectId: legacyScopeId
     }) ?? null;
-  } catch {
+  } catch (error) {
+    debugGraphPrimitiveFallback(
+      "[topicScope] Failed to resolve topic by legacy scope",
+      {
+        error,
+        legacyScopeId
+      }
+    );
     return null;
   }
 }
@@ -156,8 +139,17 @@ async function resolveTopicProjectScope(ctx, args) {
   if (args.topicId) {
     let topic = null;
     try {
-      topic = await ctx.db.get(args.topicId);
-    } catch {
+      topic = await ctx.db.get(
+        args.topicId
+      );
+    } catch (error) {
+      debugGraphPrimitiveFallback(
+        "[topicScope] Failed to load topic by direct id",
+        {
+          error,
+          topicId: args.topicId
+        }
+      );
     }
     if (!topic) {
       topic = await tryResolveHostTopicById(ctx, String(args.topicId));
@@ -194,7 +186,14 @@ async function resolveTopicProjectScope(ctx, args) {
       directTopic = await ctx.db.get(
         args.projectId
       );
-    } catch {
+    } catch (error) {
+      debugGraphPrimitiveFallback(
+        "[topicScope] Failed to load direct project topic",
+        {
+          error,
+          projectId: args.projectId
+        }
+      );
     }
     if (directTopic) {
       const inherited = await resolveInheritedWorkspaceScope(ctx, directTopic);

package/dist/workspaceIsolation.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../packages/contracts/src/schema-helpers/spine/tables/epistemicNodes.ts","../src/convex.ts","../src/topicScope.ts","../src/workspaceIsolation.ts"],"names":["normalizeScopeValue"],"mappings":";;;;AA4BO,IAAM,UAAA,GAAa;AAAA,EACxB,UAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,aAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,WAAW,KAAA,EAAkC;AAC3D,EAAA,OAAQ,UAAA,CAAiC,SAAS,KAAK,CAAA;AACzD;AAEO,SAAS,oBAAoB,IAAA,EAAgC;AAClE,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,UAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,QAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,OAAA;AAAA,IACL,KAAK,MAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,OAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,WAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,aAAA;AAAA,IACL,KAAK,SAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,OAAA;AACH,MAAA,OAAO,gBAAA;AAAA,IACT,KAAK,SAAA;AAAA,IACL,KAAK,QAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,aAAA;AACH,MAAA,OAAO,aAAA;AAAA;AAEb;ACnEO,IAAM,GAAA,GAAM,MAAA;AACO,iBAAA;;;ACT1B,IAAM,kBAAA,GAAqB,qBAAA;AA2B3B,SAAS,kBACP,KAAA,EACoB;AACpB,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA;AAAA,EACF;AACA,EAAA,MAAM,qBAAA,GAAwB,mBAAA,CAAoB,KAAA,CAAM,kBAAkB,CAAC,CAAA;AAC3E,EAAA,IAAI,qBAAA,EAAuB;AACzB,IAAA,OAAO,qBAAA;AAAA,EACT;AACA,EAAA,MAAM,QAAA,GAAY,KAAA,CAAM,QAAA,IAAY,EAAC;AACrC,EAAA,MAAM,SAAA,GACH,SAAS,kBAAkB,CAAA,IAC3B,SAAS,eAAA,IACT,QAAA,CAAS,aACT,QAAA,CAAS,cAAA;AACZ,EAAA,OAAO,YAAa,SAAA,GAAuB,MAAA;AAC7C;AAEA,SAAS,oBAAoB,KAAA,EAAoC;AAC/D,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,EAAK;AAC9B,EAAA,OAAO,UAAA,CAAW,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,MAAA;AAC9C;AAEA,SAAS,iBAAiB,UAAA,EAA8C;AACtE,EAAA,OAAO,CAAC,GAAG,UAAU,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AACpC,IAAA,MAAM,MAAA,GAAS,EAAE,KAAA,IAAS,IAAA;AAC1B,IAAA,MAAM,MAAA,GAAS,EAAE,KAAA,IAAS,IAAA;AAC1B,IAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,MAAA,OAAO,MAAA,GAAS,MAAA;AAAA,IAClB;AACA,IAAA,MAAM,QAAA,GAAW,CAAA,CAAE,SAAA,IAAa,MAAA,CAAO,gBAAA;AACvC,IAAA,MAAM,QAAA,GAAW,CAAA,CAAE,SAAA,IAAa,MAAA,CAAO,gBAAA;AACvC,IAAA,IAAI,aAAa,QAAA,EAAU;AACzB,MAAA,OAAO,QAAA,GAAW,QAAA;AAAA,IACpB;AACA,IAAA,OAAO,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA,CAAE,cAAc,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAC,CAAA;AAAA,EAChE,CAAC,EAAE,CAAC,CAAA;AACN;AAEA,eAAe,sBAAA,CAAuB,KAAU,OAAA,EAAsC;AACpF,EAAA,IAAI;AACF,IAAA,OAAQ,MAAM,GAAA,CAAI,EAAA,CACf,KAAA,CAAM,QAAQ,CAAA,CACd,SAAA;AAAA,MAAU,wBAAA;AAAA,MAA0B,CAAC,CAAA,KACpC,CAAA,CAAE,EAAA,CAAG,oBAAoB,OAAO;AAAA,MAEjC,OAAA,EAAQ;AAAA,EACb,CAAA,CAAA,MAAQ;AAIN,IAAA,MAAM,SAAU,MAAM,GAAA,CAAI,GAAG,KAAA,CAAM,QAAQ,EAAE,OAAA,EAAQ;AACrD,IAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,KAAA,KAAU;AAC9B,MAAA,MAAM,kBAAA,GAAqB,mBAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AAC7D,MAAA,MAAM,eAAA,GAAkB,kBAAkB,KAAK,CAAA;AAC/C,MAAA,OACE,OAAO,KAAA,CAAM,GAAG,MAAM,OAAA,IACtB,kBAAA,KAAuB,WACvB,eAAA,KAAoB,OAAA;AAAA,IAExB,CAAC,CAAA;AAAA,EACH;AACF;AAEA,eAAe,uBAAA,CACb,KACA,OAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,OAAS,MAAM,GAAA,CAAI,QAAA,CAAS,GAAA,CAAO,OAAO,GAAA,EAAY;AAAA,MACpD,EAAA,EAAI;AAAA,KACL,CAAA,IAAM,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,eAAe,gCAAA,CACb,KACA,aAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,OAAS,MAAM,GAAA,CAAI,QAAA,CAAS,GAAA,CAAO,OAAO,kBAAA,EAA2B;AAAA,MACnE,SAAA,EAAW;AAAA,KACZ,CAAA,IAAM,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAwBA,eAAe,8BAAA,CACb,KACA,KAAA,EACsD;AACtD,EAAA,MAAM,SAAA,GAAY,EAAA;AAClB,EAAA,IAAI,QAAA,GAAW,mBAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AACjD,EAAA,IAAI,WAAA,GAAc,mBAAA,CAAoB,KAAA,CAAM,WAAW,CAAA;AAEvD,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAO,EAAE,UAAU,WAAA,EAAY;AAAA,EACjC;AAEA,EAAA,IAAI,OAAA,GAA2B,KAAA;AAC/B,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,SAAA,IAAa,OAAA,EAAS,eAAe,CAAA,EAAA,EAAK;AAC5D,IAAA,OAAA,GAAW,MAAM,GAAA,CAAI,EAAA,CAAG,GAAA,CAAI,QAAQ,aAAa,CAAA;AACjD,IAAA,IAAI,CAAC,OAAA,EAAS;AAEd,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,QAAA,GAAW,mBAAA,CAAoB,QAAQ,QAAQ,CAAA;AAAA,IACjD;AACA,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,WAAA,GAAc,mBAAA,CAAoB,QAAQ,WAAW,CAAA;AAAA,IACvD;AACA,IAAA,IAAI,YAAY,WAAA,EAAa;AAAA,EAC/B;AAEA,EAAA,OAAO,EAAE,UAAU,WAAA,EAAY;AACjC;AAEA,eAAsB,wBAAA,CACpB,KACA,IAAA,EAC4B;AAC5B,EAAA,IAAI,KAAK,OAAA,EAAS;AAEhB,IAAA,IAAI,KAAA,GAAyB,IAAA;AAC7B,IAAA,IAAI;AACF,MAAA,KAAA,GAAS,MAAM,GAAA,CAAI,EAAA,CAAG,GAAA,CAAI,KAAK,OAAuB,CAAA;AAAA,IACxD,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,KAAA,GAAQ,MAAM,uBAAA,CAAwB,GAAA,EAAK,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IACjE;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AAEV,MAAA,KAAA,GACE,gBAAA;AAAA,QACE,MAAM,sBAAA,CAAuB,GAAA,EAAK,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC;AAAA,OACxD,IAAK,IAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAoB,OAAO,IAAA,CAAK,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,IAC5D;AACA,IAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,KAAK,CAAA;AACjE,IAAA,MAAM,MAAA,GAAS,kBAAkB,KAAK,CAAA;AACtC,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,OAAO;AAAA,QACL,SAAS,KAAA,CAAM,GAAA;AAAA,QACf,SAAA,EAAW,MAAA;AAAA,QACX,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,SAAS,KAAA,CAAM,GAAA;AAAA,MACf,UAAU,SAAA,CAAU,QAAA;AAAA,MACpB,aAAa,SAAA,CAAU,WAAA;AAAA,MACvB,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,IAAI,WAAA,GAA+B,IAAA;AACnC,IAAA,IAAI;AACF,MAAA,WAAA,GAAe,MAAM,IAAI,EAAA,CAAG,GAAA;AAAA,QAC1B,IAAA,CAAK;AAAA,OACP;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,WAAW,CAAA;AACvE,MAAA,MAAM,MAAA,GAAS,kBAAkB,WAAW,CAAA;AAC5C,MAAA,OAAO;AAAA,QACL,SAAS,WAAA,CAAY,GAAA;AAAA,QACrB,SAAA,EAAW,UAAU,IAAA,CAAK,SAAA;AAAA,QAC1B,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AAEA,IAAA,WAAA,GAAc,MAAM,gCAAA,CAAiC,GAAA,EAAK,IAAA,CAAK,SAAS,CAAA;AACxE,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,WAAW,CAAA;AACvE,MAAA,MAAM,MAAA,GAAS,kBAAkB,WAAW,CAAA;AAC5C,MAAA,OAAO;AAAA,QACL,SAAS,WAAA,CAAY,GAAA;AAAA,QACrB,SAAA,EAAW,UAAU,IAAA,CAAK,SAAA;AAAA,QAC1B,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,MAAM,sBAAA,CAAuB,GAAA,EAAK,KAAK,SAAS,CAAA;AAC/D,IAAA,MAAM,OAAA,GAAU,iBAAiB,MAAM,CAAA;AACvC,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,OAAO,CAAA;AACnE,MAAA,OAAO;AAAA,QACL,SAAS,OAAA,CAAQ,GAAA;AAAA,QACjB,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAA,CAAK,SAAS,CAAC,CAAA,qBAAA;AAAA,KAChD;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;CAGiC;AAAA,EAC/B,SAAA,EAAW,CAAA,CAAE,QAAA,CAAS,CAAA,CAAE,QAAQ,CAAA;AAAA,EAChC,OAAA,EAAS,CAAA,CAAE,QAAA,CAAS,CAAA,CAAE,QAAQ;AAChC;;;AC/PO,SAASA,qBAAoB,KAAA,EAAoC;AACtE,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,EAAK;AAC9B,EAAA,OAAO,UAAA,CAAW,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,MAAA;AAC9C;AAEA,SAAS,6BAA6B,IAAA,EAK5B;AACR,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACpC,EAAA,KAAA,CAAM,MAAA,GAAS,GAAA;AACf,EAAA,KAAA,CAAM,IAAA,GAAO,qBAAA;AACb,EAAA,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AAC3B,EAAA,KAAA,CAAM,aAAa,IAAA,CAAK,UAAA;AACxB,EAAA,KAAA,CAAM,UAAU,IAAA,CAAK,OAAA;AACrB,EAAA,MAAM,KAAA;AACR;AAEO,SAAS,wCAAwC,IAAA,EAI/C;AACP,EAAA,MAAM,KAAA,GAAQ,WAAW,IAAA,CAAK,QAAQ,IAClC,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,GACjC,MAAA;AACJ,EAAA,IAAI,UAAU,aAAA,EAAe;AAC3B,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GAAcA,oBAAAA,CAAoB,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AAC9D,EAAA,IAAI,WAAA,EAAa;AACf,IAAA;AAAA,EACF;AAEA,EAAA,4BAAA,CAA6B;AAAA,IAC3B,OAAA,EACE,6FAAA;AAAA,IACF,aAAA,EAAe,8CAAA;AAAA,IACf,UAAA,EACE,kGAAA;AAAA,IACF,OAAA,EAAS;AAAA,MACP,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,OAAA,EAAS,KAAK,KAAA,CAAM,OAAA;AAAA,MACpB,SAAA,EAAW,KAAK,KAAA,CAAM;AAAA;AACxB,GACD,CAAA;AACH;AAEO,SAAS,kCAAA,CACd,MACA,KAAA,EACS;AACT,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,aAAA,GAAgBA,oBAAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AACxD,EAAA,MAAM,gBAAA,GAAmBA,oBAAAA,CAAoB,KAAA,CAAM,WAAW,CAAA;AAC9D,EAAA,MAAM,YAAA,GAAeA,oBAAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA;AACtD,EAAA,MAAM,eAAA,GAAkBA,oBAAAA,CAAoB,IAAA,CAAK,WAAW,CAAA;AAC5D,EAAA,MAAM,iBACJ,OAAO,IAAA,CAAK,cAAA,KAAmB,QAAA,GAAW,KAAK,cAAA,GAAiB,MAAA;AAElE,EAAA,IACE,aAAA,IACA,YAAA,IACA,aAAA,KAAkB,YAAA,EAClB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,IAAI,cAAA,KAAmB,aAAA,IAAiB,eAAA,KAAoB,MAAA,EAAW;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAIA,EAAA,IAAI,CAAC,gBAAA,IAAoB,IAAA,CAAK,iBAAA,KAAsB,WAAA,EAAa;AAC/D,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,IAAA,OAAO,eAAA,KAAoB,MAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,gBAAA,KAAqB,eAAA;AAC9B;AAEO,SAAS,kCAAA,CACd,MACA,KAAA,EACS;AACT,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,aAAA,GAAgBA,oBAAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AACxD,EAAA,MAAM,gBAAA,GAAmBA,oBAAAA,CAAoB,KAAA,CAAM,WAAW,CAAA;AAC9D,EAAA,MAAM,YAAA,GAAeA,oBAAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA;AACtD,EAAA,MAAM,eAAA,GAAkBA,oBAAAA,CAAoB,IAAA,CAAK,WAAW,CAAA;AAE5D,EAAA,IACE,aAAA,IACA,YAAA,IACA,aAAA,KAAkB,YAAA,EAClB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,IAAA,OAAO,eAAA,KAAoB,MAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,gBAAA,KAAqB,eAAA;AAC9B;AAEA,eAAsB,qCAAA,CACpB,KACA,IAAA,EAMC;AACD,EAAA,MAAM,iBACJ,OAAO,IAAA,EAAM,cAAA,KAAmB,QAAA,GAAW,KAAK,cAAA,GAAiB,MAAA;AACnE,EAAA,MAAM,QAAA,GAAW;AAAA,IACf,QAAA,EAAUA,oBAAAA,CAAoB,IAAA,EAAM,QAAQ,CAAA;AAAA,IAC5C,WAAA,EAAaA,oBAAAA,CAAoB,IAAA,EAAM,WAAW,CAAA;AAAA,IAClD,cAAA;AAAA,IACA,UAAU,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,GAAW,KAAK,QAAA,GAAW;AAAA,GACjE;AAEA,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAA,CAAS,mBAAmB,aAAA,EAAe;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAA,CAAS,QAAA,IAAY,QAAA,CAAS,WAAA,EAAa;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,IAAI,KAAK,OAAA,EAAS;AAChB,IAAA,MAAM,UAAA,GAAa,MAAM,wBAAA,CAAyB,GAAA,EAAK;AAAA,MACrD,SAAS,IAAA,CAAK;AAAA,KACf,CAAA;AACD,IAAA,OAAO;AAAA,MACL,GAAG,QAAA;AAAA,MACH,UAAU,UAAA,CAAW,QAAA;AAAA,MACrB,aAAa,UAAA,CAAW;AAAA,KAC1B;AAAA,EACF;AAEA,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,MAAM,UAAA,GAAa,MAAM,wBAAA,CAAyB,GAAA,EAAK;AAAA,MACrD,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS;AAAA,KACjC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,GAAG,QAAA;AAAA,MACH,UAAU,UAAA,CAAW,QAAA;AAAA,MACrB,aAAa,UAAA,CAAW;AAAA,KAC1B;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT;AAEO,SAAS,kCAAkC,IAAA,EAIP;AACzC,EAAA,IACE,CAAC,KAAK,eAAA,IACN,CAAC,KAAK,cAAA,IACN,CAAC,KAAK,uBAAA,EACN;AACA,IAAA;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,UAAU,IAAA,CAAK,eAAA;AAAA,IACf,SAAS,IAAA,CAAK,cAAA;AAAA,IACd,kBAAkB,IAAA,CAAK;AAAA,GACzB;AACF;AAEO,SAAS,yCAAyC,IAAA,EAIhD;AACP,EAAA,IACE,CAAC,IAAA,CAAK,OAAA,EAAS,WACf,IAAA,CAAK,OAAA,CAAQ,qBAAqB,QAAA,EAClC;AACA,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,iBAAA,GAAoBA,oBAAAA,CAAoB,IAAA,CAAK,MAAA,CAAO,WAAW,CAAA;AACrE,EAAA,MAAM,WAAA,GACJ,OAAO,IAAA,CAAK,MAAA,CAAO,mBAAmB,QAAA,GAClC,IAAA,CAAK,OAAO,cAAA,GACZ,MAAA;AAEN,EAAA,IAAI,CAAC,iBAAA,IAAqB,WAAA,KAAgB,aAAA,EAAe;AACvD,IAAA;AAAA,EACF;AAEA,EAAA,4BAAA,CAA6B;AAAA,IAC3B,OAAA,EACE,CAAA,oBAAA,EAAuB,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,iDAAA,CAAA;AAAA,IAC7C,aAAA,EAAe,iDAAA;AAAA,IACf,UAAA,EACE,oIAAA;AAAA,IACF,OAAA,EAAS;AAAA,MACP,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,QAAA,EAAU,KAAK,OAAA,CAAQ,QAAA;AAAA,MACvB,OAAA,EAAS,KAAK,OAAA,CAAQ,OAAA;AAAA,MACtB,iBAAA;AAAA,MACA,cAAA,EAAgB,KAAK,MAAA,CAAO,QAAA;AAAA,MAC5B;AAAA;AACF,GACD,CAAA;AACH","file":"workspaceIsolation.js","sourcesContent":["export type NodeType =\n  | \"decision\"\n  | \"belief\"\n  | \"question\"\n  | \"theme\"\n  | \"deal\"\n  | \"topic\"\n  | \"claim\"\n  | \"evidence\"\n  | \"synthesis\"\n  | \"answer\"\n  | \"atomic_fact\"\n  | \"excerpt\"\n  | \"source\"\n  | \"company\"\n  | \"person\"\n  | \"investor\"\n  | \"function\"\n  | \"value_chain\";\n\nexport type EpistemicLayer =\n  | \"L4\"\n  | \"L3\"\n  | \"L2\"\n  | \"L1\"\n  | \"ontological\"\n  | \"organizational\";\n\nexport const NODE_TYPES = [\n  \"decision\",\n  \"belief\",\n  \"question\",\n  \"theme\",\n  \"deal\",\n  \"topic\",\n  \"claim\",\n  \"evidence\",\n  \"synthesis\",\n  \"answer\",\n  \"atomic_fact\",\n  \"excerpt\",\n  \"source\",\n  \"company\",\n  \"person\",\n  \"investor\",\n  \"function\",\n  \"value_chain\",\n] as const satisfies readonly NodeType[];\n\nexport function isNodeType(value: string): value is NodeType {\n  return (NODE_TYPES as readonly string[]).includes(value);\n}\n\nexport function getLayerForNodeType(type: NodeType): EpistemicLayer {\n  switch (type) {\n    case \"decision\":\n      return \"L4\";\n    case \"belief\":\n    case \"question\":\n    case \"theme\":\n    case \"deal\":\n      return \"L3\";\n    case \"claim\":\n    case \"evidence\":\n    case \"synthesis\":\n    case \"answer\":\n      return \"L2\";\n    case \"atomic_fact\":\n    case \"excerpt\":\n    case \"source\":\n      return \"L1\";\n    case \"topic\":\n      return \"organizational\";\n    case \"company\":\n    case \"person\":\n    case \"investor\":\n    case \"function\":\n    case \"value_chain\":\n      return \"ontological\";\n  }\n}\n\nexport function resolveKnownLayerForNodeType(\n  type: string\n): EpistemicLayer | undefined {\n  return isNodeType(type) ? getLayerForNodeType(type) : undefined;\n}\n\nexport function isEpistemicNodeType(type: NodeType): boolean {\n  return getLayerForNodeType(type) !== \"ontological\";\n}\n","import {\n  actionGeneric,\n  anyApi,\n  componentsGeneric,\n  httpActionGeneric,\n  internalActionGeneric,\n  internalMutationGeneric,\n  internalQueryGeneric,\n  mutationGeneric,\n  queryGeneric,\n} from \"convex/server\";\nimport type { GenericId } from \"convex/values\";\n\nexport const api = anyApi as any;\nexport const components = componentsGeneric() as any;\nexport const internal = anyApi as any;\n\nexport type TableNames = string;\nexport type Id<TableName extends TableNames = string> = GenericId<TableName>;\nexport type Doc<TableName extends TableNames = string> = any;\nexport type DataModel = any;\nexport type ActionCtx = any;\nexport type DatabaseReader = any;\nexport type DatabaseWriter = any;\nexport type MutationCtx = any;\nexport type QueryCtx = any;\n\nexport const action = actionGeneric as any;\nexport const httpAction = httpActionGeneric as any;\nexport const internalAction = internalActionGeneric as any;\nexport const internalMutation = internalMutationGeneric as any;\nexport const internalQuery = internalQueryGeneric as any;\nexport const mutation = mutationGeneric as any;\nexport const query = queryGeneric as any;\n","/** Topic-scope resolution helpers for graph-primitive operations. */\nimport { v } from \"convex/values\";\nimport { api as appApi } from \"./convex\";\nimport type { Id } from \"./convex\";\n\nconst LEGACY_SCOPE_FIELD = \"graphScope\" + \"ProjectId\";\n\ntype TopicDoc = Record<string, unknown> & {\n  _id: Id<\"topics\">;\n  globalId?: string;\n  name?: string;\n  depth?: number;\n  createdAt?: number;\n  parentTopicId?: Id<\"topics\">;\n  tenantId?: string;\n  workspaceId?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type TopicProjectScope = {\n  topicId: Id<\"topics\">;\n  projectId?: string;\n  tenantId?: string;\n  workspaceId?: string;\n  source: \"topic\" | \"project_mapped_topic\" | \"topic_inferred\";\n};\n\ntype MaterializedTopicNodeDoc = {\n  _id: string | Id<\"epistemicNodes\">;\n  metadata?: Record<string, unknown>;\n};\n\nfunction asMappedProjectId(\n  topic: TopicDoc | null | undefined\n): string | undefined {\n  if (!topic) {\n    return;\n  }\n  const directLegacyProjectId = normalizeScopeValue(topic[LEGACY_SCOPE_FIELD]);\n  if (directLegacyProjectId) {\n    return directLegacyProjectId;\n  }\n  const metadata = (topic.metadata || {}) as Record<string, unknown>;\n  const candidate =\n    (metadata[LEGACY_SCOPE_FIELD] as string | undefined) ||\n    (metadata.legacyProjectId as string | undefined) ||\n    (metadata.projectId as string | undefined) ||\n    (metadata.scopeProjectId as string | undefined);\n  return candidate ? (candidate as string) : undefined;\n}\n\nfunction normalizeScopeValue(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return;\n  }\n  const normalized = value.trim();\n  return normalized.length > 0 ? normalized : undefined;\n}\n\nfunction pickPrimaryTopic(candidates: TopicDoc[]): TopicDoc | undefined {\n  return [...candidates].sort((a, b) => {\n    const depthA = a.depth ?? 9999;\n    const depthB = b.depth ?? 9999;\n    if (depthA !== depthB) {\n      return depthA - depthB;\n    }\n    const createdA = a.createdAt ?? Number.MAX_SAFE_INTEGER;\n    const createdB = b.createdAt ?? Number.MAX_SAFE_INTEGER;\n    if (createdA !== createdB) {\n      return createdA - createdB;\n    }\n    return String(a.name || \"\").localeCompare(String(b.name || \"\"));\n  })[0];\n}\n\nasync function findTopicsByScopeAlias(ctx: any, scopeId: string): Promise<TopicDoc[]> {\n  try {\n    return (await ctx.db\n      .query(\"topics\")\n      .withIndex(\"by_graph_scope_project\", (q: any) =>\n        q.eq(LEGACY_SCOPE_FIELD, scopeId)\n      )\n      .collect()) as TopicDoc[];\n  } catch {\n    // Older Lucern dev deployments can lag index backfills while still carrying\n    // the underlying topics table. Scan and filter so scope resolution keeps\n    // working during the rollout.\n    const topics = (await ctx.db.query(\"topics\").collect()) as TopicDoc[];\n    return topics.filter((topic) => {\n      const normalizedGlobalId = normalizeScopeValue(topic.globalId);\n      const mappedProjectId = asMappedProjectId(topic);\n      return (\n        String(topic._id) === scopeId ||\n        normalizedGlobalId === scopeId ||\n        mappedProjectId === scopeId\n      );\n    });\n  }\n}\n\nasync function tryResolveHostTopicById(\n  ctx: any,\n  topicId: string\n): Promise<TopicDoc | null> {\n  if (typeof ctx.runQuery !== \"function\") {\n    return null;\n  }\n  try {\n    return ((await ctx.runQuery(appApi.topics.get as any, {\n      id: topicId,\n    })) ?? null) as TopicDoc | null;\n  } catch {\n    return null;\n  }\n}\n\nasync function tryResolveHostTopicByLegacyScope(\n  ctx: any,\n  legacyScopeId: string\n): Promise<TopicDoc | null> {\n  if (typeof ctx.runQuery !== \"function\") {\n    return null;\n  }\n  try {\n    return ((await ctx.runQuery(appApi.topics.getByLegacyScopeId as any, {\n      projectId: legacyScopeId,\n    })) ?? null) as TopicDoc | null;\n  } catch {\n    return null;\n  }\n}\n\nexport function readMaterializedTopicTableId(\n  topicNode: MaterializedTopicNodeDoc | null | undefined\n): string | undefined {\n  if (!topicNode) {\n    return;\n  }\n\n  const metadata = (topicNode.metadata || {}) as Record<string, unknown>;\n  const topicTableId =\n    (metadata.topicTableId as string | undefined) ||\n    (metadata.topicId as string | undefined);\n\n  return typeof topicTableId === \"string\" && topicTableId.trim().length > 0\n    ? topicTableId.trim()\n    : undefined;\n}\n\n/**\n * Walk the topic parent chain to find inherited workspaceId and tenantId.\n * Mirrors the pattern used by resolveTopicOntology for ontologyId inheritance.\n * Max depth: 10 (defensive limit against pathological nesting).\n */\nasync function resolveInheritedWorkspaceScope(\n  ctx: any,\n  topic: TopicDoc\n): Promise<{ tenantId?: string; workspaceId?: string }> {\n  const MAX_DEPTH = 10;\n  let tenantId = normalizeScopeValue(topic.tenantId);\n  let workspaceId = normalizeScopeValue(topic.workspaceId);\n\n  if (tenantId && workspaceId) {\n    return { tenantId, workspaceId };\n  }\n\n  let current: TopicDoc | null = topic;\n  for (let i = 0; i < MAX_DEPTH && current?.parentTopicId; i++) {\n    current = (await ctx.db.get(current.parentTopicId)) as TopicDoc | null;\n    if (!current) break;\n\n    if (!tenantId) {\n      tenantId = normalizeScopeValue(current.tenantId);\n    }\n    if (!workspaceId) {\n      workspaceId = normalizeScopeValue(current.workspaceId);\n    }\n    if (tenantId && workspaceId) break;\n  }\n\n  return { tenantId, workspaceId };\n}\n\nexport async function resolveTopicProjectScope(\n  ctx: any,\n  args: { topicId?: Id<\"topics\"> | string; projectId?: string }\n): Promise<TopicProjectScope> {\n  if (args.topicId) {\n    // Try direct lookup, fall back to the legacy mapped-project bridge\n    let topic: TopicDoc | null = null;\n    try {\n      topic = (await ctx.db.get(args.topicId as Id<\"topics\">)) as TopicDoc | null;\n    } catch {\n      // Not a valid topics table ID\n    }\n    if (!topic) {\n      topic = await tryResolveHostTopicById(ctx, String(args.topicId));\n    }\n    if (!topic) {\n      // Try as legacy projectId / globalId via the mapped-project bridge.\n      topic =\n        pickPrimaryTopic(\n          await findTopicsByScopeAlias(ctx, String(args.topicId))\n        ) ?? null;\n    }\n    if (!topic) {\n      throw new Error(`Topic not found: ${String(args.topicId)}`);\n    }\n    const inherited = await resolveInheritedWorkspaceScope(ctx, topic);\n    const mapped = asMappedProjectId(topic);\n    if (mapped) {\n      return {\n        topicId: topic._id,\n        projectId: mapped,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"topic\",\n      };\n    }\n    return {\n      topicId: topic._id,\n      tenantId: inherited.tenantId,\n      workspaceId: inherited.workspaceId,\n      source: \"topic\",\n    };\n  }\n\n  if (args.projectId) {\n    let directTopic: TopicDoc | null = null;\n    try {\n      directTopic = (await ctx.db.get(\n        args.projectId as Id<\"topics\">\n      )) as TopicDoc | null;\n    } catch {\n      // Not a valid topics table ID, continue to legacy graph-scope lookup.\n    }\n\n    if (directTopic) {\n      const inherited = await resolveInheritedWorkspaceScope(ctx, directTopic);\n      const mapped = asMappedProjectId(directTopic);\n      return {\n        topicId: directTopic._id,\n        projectId: mapped ?? args.projectId,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"topic_inferred\",\n      };\n    }\n\n    directTopic = await tryResolveHostTopicByLegacyScope(ctx, args.projectId);\n    if (directTopic) {\n      const inherited = await resolveInheritedWorkspaceScope(ctx, directTopic);\n      const mapped = asMappedProjectId(directTopic);\n      return {\n        topicId: directTopic._id,\n        projectId: mapped ?? args.projectId,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"topic_inferred\",\n      };\n    }\n\n    const topics = await findTopicsByScopeAlias(ctx, args.projectId);\n    const primary = pickPrimaryTopic(topics);\n    if (primary) {\n      const inherited = await resolveInheritedWorkspaceScope(ctx, primary);\n      return {\n        topicId: primary._id,\n        projectId: args.projectId,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"project_mapped_topic\",\n      };\n    }\n    throw new Error(\n      `Legacy project scope ${String(args.projectId)} has no mapped topic.`\n    );\n  }\n\n  throw new Error(\n    \"Missing scope: provide topicId (preferred) or legacy projectId alias.\"\n  );\n}\n\n/** Shared scope args for graph-primitive functions. topicId is canonical; projectId is a legacy alias. */\nexport const optionalScopeArgs = {\n  projectId: v.optional(v.string()),\n  topicId: v.optional(v.string()),\n} as const;\n","import {\n  getLayerForNodeType,\n  isNodeType,\n} from \"@lucern/contracts/schema-helpers/spine/tables/epistemicNodes\";\nimport {\n  resolveTopicProjectScope,\n  type TopicProjectScope,\n} from \"./topicScope\";\n\ntype StructuredInvariantError = Error & {\n  status: number;\n  code: string;\n  invariantCode?: string;\n  suggestion?: string;\n  details?: unknown;\n};\n\ntype ScopeLike = {\n  tenantId?: unknown;\n  workspaceId?: unknown;\n  epistemicLayer?: unknown;\n  nodeType?: unknown;\n  topicId?: unknown;\n  projectId?: unknown;\n  publicationStatus?: unknown;\n};\n\nexport type RuntimePackMutationContext = {\n  toolName?: string;\n  packKey?: string;\n  packInstallScope?: \"tenant\" | \"workspace\";\n};\n\nexport function normalizeScopeValue(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return;\n  }\n  const normalized = value.trim();\n  return normalized.length > 0 ? normalized : undefined;\n}\n\nfunction throwWorkspaceIsolationError(args: {\n  message: string;\n  invariantCode: string;\n  suggestion: string;\n  details?: unknown;\n}): never {\n  const error = new Error(args.message) as StructuredInvariantError;\n  error.status = 409;\n  error.code = \"INVARIANT_VIOLATION\";\n  error.invariantCode = args.invariantCode;\n  error.suggestion = args.suggestion;\n  error.details = args.details;\n  throw error;\n}\n\nexport function assertWorkspaceScopedEpistemicNodeScope(args: {\n  scope: TopicProjectScope;\n  nodeType: string;\n  mutationName: string;\n}): void {\n  const layer = isNodeType(args.nodeType)\n    ? getLayerForNodeType(args.nodeType)\n    : undefined;\n  if (layer === \"ontological\") {\n    return;\n  }\n\n  const workspaceId = normalizeScopeValue(args.scope.workspaceId);\n  if (workspaceId) {\n    return;\n  }\n\n  throwWorkspaceIsolationError({\n    message:\n      \"Workspace-scoped reasoning isolation requires workspaceId on non-ontological node creation.\",\n    invariantCode: \"workspace.scope_required_for_epistemic_nodes\",\n    suggestion:\n      \"Resolve the topic/project scope through a workspace-bound topic before creating epistemic nodes.\",\n    details: {\n      mutationName: args.mutationName,\n      nodeType: args.nodeType,\n      topicId: args.scope.topicId,\n      projectId: args.scope.projectId,\n    },\n  });\n}\n\nexport function nodeMatchesWorkspaceReasoningScope(\n  node: ScopeLike | null | undefined,\n  scope: Pick<TopicProjectScope, \"tenantId\" | \"workspaceId\">\n): boolean {\n  if (!node) {\n    return false;\n  }\n\n  const scopeTenantId = normalizeScopeValue(scope.tenantId);\n  const scopeWorkspaceId = normalizeScopeValue(scope.workspaceId);\n  const nodeTenantId = normalizeScopeValue(node.tenantId);\n  const nodeWorkspaceId = normalizeScopeValue(node.workspaceId);\n  const epistemicLayer =\n    typeof node.epistemicLayer === \"string\" ? node.epistemicLayer : undefined;\n\n  if (\n    scopeTenantId &&\n    nodeTenantId &&\n    scopeTenantId !== nodeTenantId\n  ) {\n    return false;\n  }\n\n  // Ontological entities are tenant-global (no workspace required)\n  if (epistemicLayer === \"ontological\" && nodeWorkspaceId === undefined) {\n    return true;\n  }\n\n  // Published nodes are visible at tenant scope — the microservice API surface.\n  // The node stays in its workspace, but tenant-scope queries can see it.\n  if (!scopeWorkspaceId && node.publicationStatus === \"published\") {\n    return true;\n  }\n\n  if (!scopeWorkspaceId) {\n    return nodeWorkspaceId === undefined;\n  }\n\n  return scopeWorkspaceId === nodeWorkspaceId;\n}\n\nexport function edgeMatchesWorkspaceReasoningScope(\n  edge: ScopeLike | null | undefined,\n  scope: Pick<TopicProjectScope, \"tenantId\" | \"workspaceId\">\n): boolean {\n  if (!edge) {\n    return false;\n  }\n\n  const scopeTenantId = normalizeScopeValue(scope.tenantId);\n  const scopeWorkspaceId = normalizeScopeValue(scope.workspaceId);\n  const edgeTenantId = normalizeScopeValue(edge.tenantId);\n  const edgeWorkspaceId = normalizeScopeValue(edge.workspaceId);\n\n  if (\n    scopeTenantId &&\n    edgeTenantId &&\n    scopeTenantId !== edgeTenantId\n  ) {\n    return false;\n  }\n\n  if (!scopeWorkspaceId) {\n    return edgeWorkspaceId === undefined;\n  }\n\n  return scopeWorkspaceId === edgeWorkspaceId;\n}\n\nexport async function resolveNodeScopeForWorkspaceIsolation(\n  ctx: any,\n  node: ScopeLike | null | undefined\n): Promise<{\n  tenantId?: string;\n  workspaceId?: string;\n  epistemicLayer?: string;\n  nodeType?: string;\n}> {\n  const epistemicLayer =\n    typeof node?.epistemicLayer === \"string\" ? node.epistemicLayer : undefined;\n  const resolved = {\n    tenantId: normalizeScopeValue(node?.tenantId),\n    workspaceId: normalizeScopeValue(node?.workspaceId),\n    epistemicLayer,\n    nodeType: typeof node?.nodeType === \"string\" ? node.nodeType : undefined,\n  };\n\n  if (!node) {\n    return resolved;\n  }\n\n  if (resolved.epistemicLayer === \"ontological\") {\n    return resolved;\n  }\n\n  if (resolved.tenantId || resolved.workspaceId) {\n    return resolved;\n  }\n\n  if (node.topicId) {\n    const topicScope = await resolveTopicProjectScope(ctx, {\n      topicId: node.topicId as any,\n    });\n    return {\n      ...resolved,\n      tenantId: topicScope.tenantId,\n      workspaceId: topicScope.workspaceId,\n    };\n  }\n\n  if (node.projectId) {\n    const topicScope = await resolveTopicProjectScope(ctx, {\n      projectId: String(node.projectId),\n    });\n    return {\n      ...resolved,\n      tenantId: topicScope.tenantId,\n      workspaceId: topicScope.workspaceId,\n    };\n  }\n\n  return resolved;\n}\n\nexport function resolveRuntimePackMutationContext(args: {\n  runtimeToolName?: string;\n  runtimePackKey?: string;\n  runtimePackInstallScope?: \"tenant\" | \"workspace\";\n}): RuntimePackMutationContext | undefined {\n  if (\n    !args.runtimeToolName &&\n    !args.runtimePackKey &&\n    !args.runtimePackInstallScope\n  ) {\n    return;\n  }\n\n  return {\n    toolName: args.runtimeToolName,\n    packKey: args.runtimePackKey,\n    packInstallScope: args.runtimePackInstallScope,\n  };\n}\n\nexport function assertTenantPackWorkspaceMutationAllowed(args: {\n  runtime?: RuntimePackMutationContext;\n  target: ScopeLike;\n  mutationName: string;\n}): void {\n  if (\n    !args.runtime?.packKey ||\n    args.runtime.packInstallScope !== \"tenant\"\n  ) {\n    return;\n  }\n\n  const targetWorkspaceId = normalizeScopeValue(args.target.workspaceId);\n  const targetLayer =\n    typeof args.target.epistemicLayer === \"string\"\n      ? args.target.epistemicLayer\n      : undefined;\n\n  if (!targetWorkspaceId || targetLayer === \"ontological\") {\n    return;\n  }\n\n  throwWorkspaceIsolationError({\n    message:\n      `Tenant-scoped pack \"${args.runtime.packKey}\" cannot mutate workspace-scoped reasoning state.`,\n    invariantCode: \"workspace.tenant_pack_reasoning_write_forbidden\",\n    suggestion:\n      \"Use a workspace-scoped pack for workspace-local graph mutations, or route the change through tenant-global canonical entity flows.\",\n    details: {\n      mutationName: args.mutationName,\n      toolName: args.runtime.toolName,\n      packKey: args.runtime.packKey,\n      targetWorkspaceId,\n      targetNodeType: args.target.nodeType,\n      targetLayer,\n    },\n  });\n}\n"]}
+{"version":3,"sources":["../src/convex.ts","../src/debug.ts","../src/topicScope.ts","../src/workspaceIsolation.ts"],"names":["normalizeScopeValue"],"mappings":";;;;;AAaO,IAAM,GAAA,GAAM,MAAA;AACO,iBAAA;;;ACR1B,SAAS,4BAAA,GAAwC;AAC/C,EAAA,MAAM,GAAA,GAAO,WAA8C,OAAA,EAAS,GAAA;AACpE,EAAA,OACE,GAAA,EAAK,4BAAA,KAAiC,GAAA,IACtC,GAAA,EAAK,kBAAA,KAAuB,GAAA;AAEhC;AAsBO,SAAS,2BAAA,CACd,SACA,OAAA,EACM;AACN,EAAA,IAAI,CAAC,8BAA6B,EAAG;AACnC,IAAA;AAAA,EACF;AACA,EAAA,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,OAAA,IAAW,EAAE,CAAA;AACtC;;;ACpCA,IAAM,kBAAA,GAAqB,qBAAA;AA2B3B,SAAS,kBACP,KAAA,EACoB;AACpB,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA;AAAA,EACF;AACA,EAAA,MAAM,qBAAA,GAAwB,mBAAA,CAAoB,KAAA,CAAM,kBAAkB,CAAC,CAAA;AAC3E,EAAA,IAAI,qBAAA,EAAuB;AACzB,IAAA,OAAO,qBAAA;AAAA,EACT;AACA,EAAA,MAAM,QAAA,GAAY,KAAA,CAAM,QAAA,IAAY,EAAC;AACrC,EAAA,MAAM,SAAA,GACH,SAAS,kBAAkB,CAAA,IAC3B,SAAS,eAAA,IACT,QAAA,CAAS,aACT,QAAA,CAAS,cAAA;AACZ,EAAA,OAAO,YAAa,SAAA,GAAuB,MAAA;AAC7C;AAEA,SAAS,oBAAoB,KAAA,EAAoC;AAC/D,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,EAAK;AAC9B,EAAA,OAAO,UAAA,CAAW,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,MAAA;AAC9C;AAEA,SAAS,iBAAiB,UAAA,EAA8C;AACtE,EAAA,OAAO,CAAC,GAAG,UAAU,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AACpC,IAAA,MAAM,MAAA,GAAS,EAAE,KAAA,IAAS,IAAA;AAC1B,IAAA,MAAM,MAAA,GAAS,EAAE,KAAA,IAAS,IAAA;AAC1B,IAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,MAAA,OAAO,MAAA,GAAS,MAAA;AAAA,IAClB;AACA,IAAA,MAAM,QAAA,GAAW,CAAA,CAAE,SAAA,IAAa,MAAA,CAAO,gBAAA;AACvC,IAAA,MAAM,QAAA,GAAW,CAAA,CAAE,SAAA,IAAa,MAAA,CAAO,gBAAA;AACvC,IAAA,IAAI,aAAa,QAAA,EAAU;AACzB,MAAA,OAAO,QAAA,GAAW,QAAA;AAAA,IACpB;AACA,IAAA,OAAO,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA,CAAE,cAAc,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAC,CAAA;AAAA,EAChE,CAAC,EAAE,CAAC,CAAA;AACN;AAEA,eAAe,sBAAA,CACb,KACA,OAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,OAAQ,MAAM,GAAA,CAAI,EAAA,CACf,KAAA,CAAM,QAAQ,CAAA,CACd,SAAA;AAAA,MAAU,wBAAA;AAAA,MAA0B,CAAC,CAAA,KACpC,CAAA,CAAE,EAAA,CAAG,oBAAoB,OAAO;AAAA,MAEjC,OAAA,EAAQ;AAAA,EACb,SAAS,KAAA,EAAO;AACd,IAAA,2BAAA;AAAA,MACE,sDAAA;AAAA,MACA;AAAA,QACE,KAAA;AAAA,QACA;AAAA;AACF,KACF;AAIA,IAAA,MAAM,SAAU,MAAM,GAAA,CAAI,GAAG,KAAA,CAAM,QAAQ,EAAE,OAAA,EAAQ;AACrD,IAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,KAAA,KAAU;AAC9B,MAAA,MAAM,kBAAA,GAAqB,mBAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AAC7D,MAAA,MAAM,eAAA,GAAkB,kBAAkB,KAAK,CAAA;AAC/C,MAAA,OACE,OAAO,KAAA,CAAM,GAAG,MAAM,OAAA,IACtB,kBAAA,KAAuB,WACvB,eAAA,KAAoB,OAAA;AAAA,IAExB,CAAC,CAAA;AAAA,EACH;AACF;AAEA,eAAe,uBAAA,CACb,KACA,OAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,OAAS,MAAM,GAAA,CAAI,QAAA,CAAS,GAAA,CAAO,OAAO,GAAA,EAAY;AAAA,MACpD,EAAA,EAAI;AAAA,KACL,CAAA,IAAM,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,2BAAA;AAAA,MACE,oDAAA;AAAA,MACA;AAAA,QACE,KAAA;AAAA,QACA;AAAA;AACF,KACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,eAAe,gCAAA,CACb,KACA,aAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,OAAS,MAAM,GAAA,CAAI,QAAA,CAAS,GAAA,CAAO,OAAO,kBAAA,EAA2B;AAAA,MACnE,SAAA,EAAW;AAAA,KACZ,CAAA,IAAM,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,2BAAA;AAAA,MACE,sDAAA;AAAA,MACA;AAAA,QACE,KAAA;AAAA,QACA;AAAA;AACF,KACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAwBA,eAAe,8BAAA,CACb,KACA,KAAA,EACsD;AACtD,EAAA,MAAM,SAAA,GAAY,EAAA;AAClB,EAAA,IAAI,QAAA,GAAW,mBAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AACjD,EAAA,IAAI,WAAA,GAAc,mBAAA,CAAoB,KAAA,CAAM,WAAW,CAAA;AAEvD,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAO,EAAE,UAAU,WAAA,EAAY;AAAA,EACjC;AAEA,EAAA,IAAI,OAAA,GAA2B,KAAA;AAC/B,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,SAAA,IAAa,OAAA,EAAS,eAAe,CAAA,EAAA,EAAK;AAC5D,IAAA,OAAA,GAAW,MAAM,GAAA,CAAI,EAAA,CAAG,GAAA,CAAI,QAAQ,aAAa,CAAA;AACjD,IAAA,IAAI,CAAC,OAAA,EAAS;AAEd,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,QAAA,GAAW,mBAAA,CAAoB,QAAQ,QAAQ,CAAA;AAAA,IACjD;AACA,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,WAAA,GAAc,mBAAA,CAAoB,QAAQ,WAAW,CAAA;AAAA,IACvD;AACA,IAAA,IAAI,YAAY,WAAA,EAAa;AAAA,EAC/B;AAEA,EAAA,OAAO,EAAE,UAAU,WAAA,EAAY;AACjC;AAEA,eAAsB,wBAAA,CACpB,KACA,IAAA,EAC4B;AAC5B,EAAA,IAAI,KAAK,OAAA,EAAS;AAEhB,IAAA,IAAI,KAAA,GAAyB,IAAA;AAC7B,IAAA,IAAI;AACF,MAAA,KAAA,GAAS,MAAM,IAAI,EAAA,CAAG,GAAA;AAAA,QACpB,IAAA,CAAK;AAAA,OACP;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,2BAAA;AAAA,QACE,gDAAA;AAAA,QACA;AAAA,UACE,KAAA;AAAA,UACA,SAAS,IAAA,CAAK;AAAA;AAChB,OACF;AAAA,IAEF;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,KAAA,GAAQ,MAAM,uBAAA,CAAwB,GAAA,EAAK,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IACjE;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AAEV,MAAA,KAAA,GACE,gBAAA;AAAA,QACE,MAAM,sBAAA,CAAuB,GAAA,EAAK,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC;AAAA,OACxD,IAAK,IAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAoB,OAAO,IAAA,CAAK,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,IAC5D;AACA,IAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,KAAK,CAAA;AACjE,IAAA,MAAM,MAAA,GAAS,kBAAkB,KAAK,CAAA;AACtC,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,OAAO;AAAA,QACL,SAAS,KAAA,CAAM,GAAA;AAAA,QACf,SAAA,EAAW,MAAA;AAAA,QACX,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,SAAS,KAAA,CAAM,GAAA;AAAA,MACf,UAAU,SAAA,CAAU,QAAA;AAAA,MACpB,aAAa,SAAA,CAAU,WAAA;AAAA,MACvB,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,IAAI,WAAA,GAA+B,IAAA;AACnC,IAAA,IAAI;AACF,MAAA,WAAA,GAAe,MAAM,IAAI,EAAA,CAAG,GAAA;AAAA,QAC1B,IAAA,CAAK;AAAA,OACP;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,2BAAA;AAAA,QACE,kDAAA;AAAA,QACA;AAAA,UACE,KAAA;AAAA,UACA,WAAW,IAAA,CAAK;AAAA;AAClB,OACF;AAAA,IAEF;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,WAAW,CAAA;AACvE,MAAA,MAAM,MAAA,GAAS,kBAAkB,WAAW,CAAA;AAC5C,MAAA,OAAO;AAAA,QACL,SAAS,WAAA,CAAY,GAAA;AAAA,QACrB,SAAA,EAAW,UAAU,IAAA,CAAK,SAAA;AAAA,QAC1B,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AAEA,IAAA,WAAA,GAAc,MAAM,gCAAA,CAAiC,GAAA,EAAK,IAAA,CAAK,SAAS,CAAA;AACxE,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,WAAW,CAAA;AACvE,MAAA,MAAM,MAAA,GAAS,kBAAkB,WAAW,CAAA;AAC5C,MAAA,OAAO;AAAA,QACL,SAAS,WAAA,CAAY,GAAA;AAAA,QACrB,SAAA,EAAW,UAAU,IAAA,CAAK,SAAA;AAAA,QAC1B,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,MAAM,sBAAA,CAAuB,GAAA,EAAK,KAAK,SAAS,CAAA;AAC/D,IAAA,MAAM,OAAA,GAAU,iBAAiB,MAAM,CAAA;AACvC,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,SAAA,GAAY,MAAM,8BAAA,CAA+B,GAAA,EAAK,OAAO,CAAA;AACnE,MAAA,OAAO;AAAA,QACL,SAAS,OAAA,CAAQ,GAAA;AAAA,QACjB,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,UAAU,SAAA,CAAU,QAAA;AAAA,QACpB,aAAa,SAAA,CAAU,WAAA;AAAA,QACvB,MAAA,EAAQ;AAAA,OACV;AAAA,IACF;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAA,CAAK,SAAS,CAAC,CAAA,qBAAA;AAAA,KAChD;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;CAGiC;AAAA,EAC/B,SAAA,EAAW,CAAA,CAAE,QAAA,CAAS,CAAA,CAAE,QAAQ,CAAA;AAAA,EAChC,OAAA,EAAS,CAAA,CAAE,QAAA,CAAS,CAAA,CAAE,QAAQ;AAChC;;;ACxSO,SAASA,qBAAoB,KAAA,EAAoC;AACtE,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,EAAK;AAC9B,EAAA,OAAO,UAAA,CAAW,MAAA,GAAS,CAAA,GAAI,UAAA,GAAa,MAAA;AAC9C;AAEA,SAAS,6BAA6B,IAAA,EAK5B;AACR,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AACpC,EAAA,KAAA,CAAM,MAAA,GAAS,GAAA;AACf,EAAA,KAAA,CAAM,IAAA,GAAO,qBAAA;AACb,EAAA,KAAA,CAAM,gBAAgB,IAAA,CAAK,aAAA;AAC3B,EAAA,KAAA,CAAM,aAAa,IAAA,CAAK,UAAA;AACxB,EAAA,KAAA,CAAM,UAAU,IAAA,CAAK,OAAA;AACrB,EAAA,MAAM,KAAA;AACR;AAEO,SAAS,wCAAwC,IAAA,EAI/C;AACP,EAAA,MAAM,KAAA,GAAQ,WAAW,IAAA,CAAK,QAAQ,IAClC,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,GACjC,MAAA;AACJ,EAAA,IAAI,UAAU,aAAA,EAAe;AAC3B,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GAAcA,oBAAAA,CAAoB,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AAC9D,EAAA,IAAI,WAAA,EAAa;AACf,IAAA;AAAA,EACF;AAEA,EAAA,4BAAA,CAA6B;AAAA,IAC3B,OAAA,EACE,6FAAA;AAAA,IACF,aAAA,EAAe,8CAAA;AAAA,IACf,UAAA,EACE,kGAAA;AAAA,IACF,OAAA,EAAS;AAAA,MACP,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,OAAA,EAAS,KAAK,KAAA,CAAM,OAAA;AAAA,MACpB,SAAA,EAAW,KAAK,KAAA,CAAM;AAAA;AACxB,GACD,CAAA;AACH;AAEO,SAAS,kCAAA,CACd,MACA,KAAA,EACS;AACT,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,aAAA,GAAgBA,oBAAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AACxD,EAAA,MAAM,gBAAA,GAAmBA,oBAAAA,CAAoB,KAAA,CAAM,WAAW,CAAA;AAC9D,EAAA,MAAM,YAAA,GAAeA,oBAAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA;AACtD,EAAA,MAAM,eAAA,GAAkBA,oBAAAA,CAAoB,IAAA,CAAK,WAAW,CAAA;AAC5D,EAAA,MAAM,iBACJ,OAAO,IAAA,CAAK,cAAA,KAAmB,QAAA,GAAW,KAAK,cAAA,GAAiB,MAAA;AAElE,EAAA,IACE,aAAA,IACA,YAAA,IACA,aAAA,KAAkB,YAAA,EAClB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,IAAI,cAAA,KAAmB,aAAA,IAAiB,eAAA,KAAoB,MAAA,EAAW;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAIA,EAAA,IAAI,CAAC,gBAAA,IAAoB,IAAA,CAAK,iBAAA,KAAsB,WAAA,EAAa;AAC/D,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,IAAA,OAAO,eAAA,KAAoB,MAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,gBAAA,KAAqB,eAAA;AAC9B;AAEO,SAAS,kCAAA,CACd,MACA,KAAA,EACS;AACT,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,aAAA,GAAgBA,oBAAAA,CAAoB,KAAA,CAAM,QAAQ,CAAA;AACxD,EAAA,MAAM,gBAAA,GAAmBA,oBAAAA,CAAoB,KAAA,CAAM,WAAW,CAAA;AAC9D,EAAA,MAAM,YAAA,GAAeA,oBAAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA;AACtD,EAAA,MAAM,eAAA,GAAkBA,oBAAAA,CAAoB,IAAA,CAAK,WAAW,CAAA;AAE5D,EAAA,IACE,aAAA,IACA,YAAA,IACA,aAAA,KAAkB,YAAA,EAClB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,IAAA,OAAO,eAAA,KAAoB,MAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,gBAAA,KAAqB,eAAA;AAC9B;AAEA,eAAsB,qCAAA,CACpB,KACA,IAAA,EAMC;AACD,EAAA,MAAM,iBACJ,OAAO,IAAA,EAAM,cAAA,KAAmB,QAAA,GAAW,KAAK,cAAA,GAAiB,MAAA;AACnE,EAAA,MAAM,QAAA,GAAW;AAAA,IACf,QAAA,EAAUA,oBAAAA,CAAoB,IAAA,EAAM,QAAQ,CAAA;AAAA,IAC5C,WAAA,EAAaA,oBAAAA,CAAoB,IAAA,EAAM,WAAW,CAAA;AAAA,IAClD,cAAA;AAAA,IACA,UAAU,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,GAAW,KAAK,QAAA,GAAW;AAAA,GACjE;AAEA,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAA,CAAS,mBAAmB,aAAA,EAAe;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAA,CAAS,QAAA,IAAY,QAAA,CAAS,WAAA,EAAa;AAC7C,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,IAAI,KAAK,OAAA,EAAS;AAChB,IAAA,MAAM,UAAA,GAAa,MAAM,wBAAA,CAAyB,GAAA,EAAK;AAAA,MACrD,SAAS,IAAA,CAAK;AAAA,KACf,CAAA;AACD,IAAA,OAAO;AAAA,MACL,GAAG,QAAA;AAAA,MACH,UAAU,UAAA,CAAW,QAAA;AAAA,MACrB,aAAa,UAAA,CAAW;AAAA,KAC1B;AAAA,EACF;AAEA,EAAA,IAAI,KAAK,SAAA,EAAW;AAClB,IAAA,MAAM,UAAA,GAAa,MAAM,wBAAA,CAAyB,GAAA,EAAK;AAAA,MACrD,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS;AAAA,KACjC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,GAAG,QAAA;AAAA,MACH,UAAU,UAAA,CAAW,QAAA;AAAA,MACrB,aAAa,UAAA,CAAW;AAAA,KAC1B;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT;AAEO,SAAS,kCAAkC,IAAA,EAIP;AACzC,EAAA,IACE,CAAC,KAAK,eAAA,IACN,CAAC,KAAK,cAAA,IACN,CAAC,KAAK,uBAAA,EACN;AACA,IAAA;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,UAAU,IAAA,CAAK,eAAA;AAAA,IACf,SAAS,IAAA,CAAK,cAAA;AAAA,IACd,kBAAkB,IAAA,CAAK;AAAA,GACzB;AACF;AAEO,SAAS,yCAAyC,IAAA,EAIhD;AACP,EAAA,IACE,CAAC,IAAA,CAAK,OAAA,EAAS,WACf,IAAA,CAAK,OAAA,CAAQ,qBAAqB,QAAA,EAClC;AACA,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,iBAAA,GAAoBA,oBAAAA,CAAoB,IAAA,CAAK,MAAA,CAAO,WAAW,CAAA;AACrE,EAAA,MAAM,WAAA,GACJ,OAAO,IAAA,CAAK,MAAA,CAAO,mBAAmB,QAAA,GAClC,IAAA,CAAK,OAAO,cAAA,GACZ,MAAA;AAEN,EAAA,IAAI,CAAC,iBAAA,IAAqB,WAAA,KAAgB,aAAA,EAAe;AACvD,IAAA;AAAA,EACF;AAEA,EAAA,4BAAA,CAA6B;AAAA,IAC3B,OAAA,EACE,CAAA,oBAAA,EAAuB,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,iDAAA,CAAA;AAAA,IAC7C,aAAA,EAAe,iDAAA;AAAA,IACf,UAAA,EACE,oIAAA;AAAA,IACF,OAAA,EAAS;AAAA,MACP,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,QAAA,EAAU,KAAK,OAAA,CAAQ,QAAA;AAAA,MACvB,OAAA,EAAS,KAAK,OAAA,CAAQ,OAAA;AAAA,MACtB,iBAAA;AAAA,MACA,cAAA,EAAgB,KAAK,MAAA,CAAO,QAAA;AAAA,MAC5B;AAAA;AACF,GACD,CAAA;AACH","file":"workspaceIsolation.js","sourcesContent":["import {\n  actionGeneric,\n  anyApi,\n  componentsGeneric,\n  httpActionGeneric,\n  internalActionGeneric,\n  internalMutationGeneric,\n  internalQueryGeneric,\n  mutationGeneric,\n  queryGeneric,\n} from \"convex/server\";\nimport type { GenericId } from \"convex/values\";\n\nexport const api = anyApi as any;\nexport const components = componentsGeneric() as any;\nexport const internal = anyApi as any;\n\nexport type TableNames = string;\nexport type Id<TableName extends TableNames = string> = GenericId<TableName>;\nexport type Doc<TableName extends TableNames = string> = any;\nexport type DataModel = any;\nexport type ActionCtx = any;\nexport type DatabaseReader = any;\nexport type DatabaseWriter = any;\nexport type MutationCtx = any;\nexport type QueryCtx = any;\n\nexport const action = actionGeneric as any;\nexport const httpAction = httpActionGeneric as any;\nexport const internalAction = internalActionGeneric as any;\nexport const internalMutation = internalMutationGeneric as any;\nexport const internalQuery = internalQueryGeneric as any;\nexport const mutation = mutationGeneric as any;\nexport const query = queryGeneric as any;\n","type GraphPrimitiveDebugEnvironment = {\n  process?: {\n    env?: Record<string, string | undefined>;\n  };\n};\n\nfunction isGraphPrimitiveDebugEnabled(): boolean {\n  const env = (globalThis as GraphPrimitiveDebugEnvironment).process?.env;\n  return (\n    env?.LUCERN_COMPAT_FALLBACK_DEBUG === \"1\" ||\n    env?.LUCERN_GRAPH_DEBUG === \"1\"\n  );\n}\n\nexport function formatGraphPrimitiveError(error: unknown): string {\n  if (error instanceof Error) {\n    return `${error.name}: ${error.message}`;\n  }\n  if (typeof error === \"string\") {\n    return error;\n  }\n  if (error === null) {\n    return \"null\";\n  }\n  if (error === undefined) {\n    return \"undefined\";\n  }\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return Object.prototype.toString.call(error);\n  }\n}\n\nexport function debugGraphPrimitiveFallback(\n  message: string,\n  context?: Record<string, unknown>\n): void {\n  if (!isGraphPrimitiveDebugEnabled()) {\n    return;\n  }\n  console.debug(message, context ?? {});\n}\n","/** Topic-scope resolution helpers for graph-primitive operations. */\nimport { v } from \"convex/values\";\nimport { api as appApi } from \"./convex\";\nimport type { Id } from \"./convex\";\nimport { debugGraphPrimitiveFallback } from \"./debug\";\n\nconst LEGACY_SCOPE_FIELD = \"graphScope\" + \"ProjectId\";\n\ntype TopicDoc = Record<string, unknown> & {\n  _id: Id<\"topics\">;\n  globalId?: string;\n  name?: string;\n  depth?: number;\n  createdAt?: number;\n  parentTopicId?: Id<\"topics\">;\n  tenantId?: string;\n  workspaceId?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type TopicProjectScope = {\n  topicId: Id<\"topics\">;\n  projectId?: string;\n  tenantId?: string;\n  workspaceId?: string;\n  source: \"topic\" | \"project_mapped_topic\" | \"topic_inferred\";\n};\n\ntype MaterializedTopicNodeDoc = {\n  _id: string | Id<\"epistemicNodes\">;\n  metadata?: Record<string, unknown>;\n};\n\nfunction asMappedProjectId(\n  topic: TopicDoc | null | undefined,\n): string | undefined {\n  if (!topic) {\n    return;\n  }\n  const directLegacyProjectId = normalizeScopeValue(topic[LEGACY_SCOPE_FIELD]);\n  if (directLegacyProjectId) {\n    return directLegacyProjectId;\n  }\n  const metadata = (topic.metadata || {}) as Record<string, unknown>;\n  const candidate =\n    (metadata[LEGACY_SCOPE_FIELD] as string | undefined) ||\n    (metadata.legacyProjectId as string | undefined) ||\n    (metadata.projectId as string | undefined) ||\n    (metadata.scopeProjectId as string | undefined);\n  return candidate ? (candidate as string) : undefined;\n}\n\nfunction normalizeScopeValue(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return;\n  }\n  const normalized = value.trim();\n  return normalized.length > 0 ? normalized : undefined;\n}\n\nfunction pickPrimaryTopic(candidates: TopicDoc[]): TopicDoc | undefined {\n  return [...candidates].sort((a, b) => {\n    const depthA = a.depth ?? 9999;\n    const depthB = b.depth ?? 9999;\n    if (depthA !== depthB) {\n      return depthA - depthB;\n    }\n    const createdA = a.createdAt ?? Number.MAX_SAFE_INTEGER;\n    const createdB = b.createdAt ?? Number.MAX_SAFE_INTEGER;\n    if (createdA !== createdB) {\n      return createdA - createdB;\n    }\n    return String(a.name || \"\").localeCompare(String(b.name || \"\"));\n  })[0];\n}\n\nasync function findTopicsByScopeAlias(\n  ctx: any,\n  scopeId: string,\n): Promise<TopicDoc[]> {\n  try {\n    return (await ctx.db\n      .query(\"topics\")\n      .withIndex(\"by_graph_scope_project\", (q: any) =>\n        q.eq(LEGACY_SCOPE_FIELD, scopeId),\n      )\n      .collect()) as TopicDoc[];\n  } catch (error) {\n    debugGraphPrimitiveFallback(\n      \"[topicScope] Failed to resolve scope alias via index\",\n      {\n        error,\n        scopeId,\n      },\n    );\n    // Older Lucern dev deployments can lag index backfills while still carrying\n    // the underlying topics table. Scan and filter so scope resolution keeps\n    // working during the rollout.\n    const topics = (await ctx.db.query(\"topics\").collect()) as TopicDoc[];\n    return topics.filter((topic) => {\n      const normalizedGlobalId = normalizeScopeValue(topic.globalId);\n      const mappedProjectId = asMappedProjectId(topic);\n      return (\n        String(topic._id) === scopeId ||\n        normalizedGlobalId === scopeId ||\n        mappedProjectId === scopeId\n      );\n    });\n  }\n}\n\nasync function tryResolveHostTopicById(\n  ctx: any,\n  topicId: string,\n): Promise<TopicDoc | null> {\n  if (typeof ctx.runQuery !== \"function\") {\n    return null;\n  }\n  try {\n    return ((await ctx.runQuery(appApi.topics.get as any, {\n      id: topicId,\n    })) ?? null) as TopicDoc | null;\n  } catch (error) {\n    debugGraphPrimitiveFallback(\n      \"[topicScope] Failed to resolve topic by host query\",\n      {\n        error,\n        topicId,\n      },\n    );\n    return null;\n  }\n}\n\nasync function tryResolveHostTopicByLegacyScope(\n  ctx: any,\n  legacyScopeId: string,\n): Promise<TopicDoc | null> {\n  if (typeof ctx.runQuery !== \"function\") {\n    return null;\n  }\n  try {\n    return ((await ctx.runQuery(appApi.topics.getByLegacyScopeId as any, {\n      projectId: legacyScopeId,\n    })) ?? null) as TopicDoc | null;\n  } catch (error) {\n    debugGraphPrimitiveFallback(\n      \"[topicScope] Failed to resolve topic by legacy scope\",\n      {\n        error,\n        legacyScopeId,\n      },\n    );\n    return null;\n  }\n}\n\nexport function readMaterializedTopicTableId(\n  topicNode: MaterializedTopicNodeDoc | null | undefined,\n): string | undefined {\n  if (!topicNode) {\n    return;\n  }\n\n  const metadata = (topicNode.metadata || {}) as Record<string, unknown>;\n  const topicTableId =\n    (metadata.topicTableId as string | undefined) ||\n    (metadata.topicId as string | undefined);\n\n  return typeof topicTableId === \"string\" && topicTableId.trim().length > 0\n    ? topicTableId.trim()\n    : undefined;\n}\n\n/**\n * Walk the topic parent chain to find inherited workspaceId and tenantId.\n * Mirrors the pattern used by resolveTopicOntology for ontologyId inheritance.\n * Max depth: 10 (defensive limit against pathological nesting).\n */\nasync function resolveInheritedWorkspaceScope(\n  ctx: any,\n  topic: TopicDoc,\n): Promise<{ tenantId?: string; workspaceId?: string }> {\n  const MAX_DEPTH = 10;\n  let tenantId = normalizeScopeValue(topic.tenantId);\n  let workspaceId = normalizeScopeValue(topic.workspaceId);\n\n  if (tenantId && workspaceId) {\n    return { tenantId, workspaceId };\n  }\n\n  let current: TopicDoc | null = topic;\n  for (let i = 0; i < MAX_DEPTH && current?.parentTopicId; i++) {\n    current = (await ctx.db.get(current.parentTopicId)) as TopicDoc | null;\n    if (!current) break;\n\n    if (!tenantId) {\n      tenantId = normalizeScopeValue(current.tenantId);\n    }\n    if (!workspaceId) {\n      workspaceId = normalizeScopeValue(current.workspaceId);\n    }\n    if (tenantId && workspaceId) break;\n  }\n\n  return { tenantId, workspaceId };\n}\n\nexport async function resolveTopicProjectScope(\n  ctx: any,\n  args: { topicId?: Id<\"topics\"> | string; projectId?: string },\n): Promise<TopicProjectScope> {\n  if (args.topicId) {\n    // Try direct lookup, fall back to the legacy mapped-project bridge\n    let topic: TopicDoc | null = null;\n    try {\n      topic = (await ctx.db.get(\n        args.topicId as Id<\"topics\">,\n      )) as TopicDoc | null;\n    } catch (error) {\n      debugGraphPrimitiveFallback(\n        \"[topicScope] Failed to load topic by direct id\",\n        {\n          error,\n          topicId: args.topicId,\n        },\n      );\n      // Not a valid topics table ID\n    }\n    if (!topic) {\n      topic = await tryResolveHostTopicById(ctx, String(args.topicId));\n    }\n    if (!topic) {\n      // Try as legacy projectId / globalId via the mapped-project bridge.\n      topic =\n        pickPrimaryTopic(\n          await findTopicsByScopeAlias(ctx, String(args.topicId)),\n        ) ?? null;\n    }\n    if (!topic) {\n      throw new Error(`Topic not found: ${String(args.topicId)}`);\n    }\n    const inherited = await resolveInheritedWorkspaceScope(ctx, topic);\n    const mapped = asMappedProjectId(topic);\n    if (mapped) {\n      return {\n        topicId: topic._id,\n        projectId: mapped,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"topic\",\n      };\n    }\n    return {\n      topicId: topic._id,\n      tenantId: inherited.tenantId,\n      workspaceId: inherited.workspaceId,\n      source: \"topic\",\n    };\n  }\n\n  if (args.projectId) {\n    let directTopic: TopicDoc | null = null;\n    try {\n      directTopic = (await ctx.db.get(\n        args.projectId as Id<\"topics\">,\n      )) as TopicDoc | null;\n    } catch (error) {\n      debugGraphPrimitiveFallback(\n        \"[topicScope] Failed to load direct project topic\",\n        {\n          error,\n          projectId: args.projectId,\n        },\n      );\n      // Not a valid topics table ID, continue to legacy graph-scope lookup.\n    }\n\n    if (directTopic) {\n      const inherited = await resolveInheritedWorkspaceScope(ctx, directTopic);\n      const mapped = asMappedProjectId(directTopic);\n      return {\n        topicId: directTopic._id,\n        projectId: mapped ?? args.projectId,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"topic_inferred\",\n      };\n    }\n\n    directTopic = await tryResolveHostTopicByLegacyScope(ctx, args.projectId);\n    if (directTopic) {\n      const inherited = await resolveInheritedWorkspaceScope(ctx, directTopic);\n      const mapped = asMappedProjectId(directTopic);\n      return {\n        topicId: directTopic._id,\n        projectId: mapped ?? args.projectId,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"topic_inferred\",\n      };\n    }\n\n    const topics = await findTopicsByScopeAlias(ctx, args.projectId);\n    const primary = pickPrimaryTopic(topics);\n    if (primary) {\n      const inherited = await resolveInheritedWorkspaceScope(ctx, primary);\n      return {\n        topicId: primary._id,\n        projectId: args.projectId,\n        tenantId: inherited.tenantId,\n        workspaceId: inherited.workspaceId,\n        source: \"project_mapped_topic\",\n      };\n    }\n    throw new Error(\n      `Legacy project scope ${String(args.projectId)} has no mapped topic.`,\n    );\n  }\n\n  throw new Error(\n    \"Missing scope: provide topicId (preferred) or legacy projectId alias.\",\n  );\n}\n\n/** Shared scope args for graph-primitive functions. topicId is canonical; projectId is a legacy alias. */\nexport const optionalScopeArgs = {\n  projectId: v.optional(v.string()),\n  topicId: v.optional(v.string()),\n} as const;\n","import {\n  getLayerForNodeType,\n  isNodeType,\n} from \"@lucern/contracts/schema-helpers/spine/tables/epistemicNodes\";\nimport {\n  resolveTopicProjectScope,\n  type TopicProjectScope,\n} from \"./topicScope\";\n\ntype StructuredInvariantError = Error & {\n  status: number;\n  code: string;\n  invariantCode?: string;\n  suggestion?: string;\n  details?: unknown;\n};\n\ntype ScopeLike = {\n  tenantId?: unknown;\n  workspaceId?: unknown;\n  epistemicLayer?: unknown;\n  nodeType?: unknown;\n  topicId?: unknown;\n  projectId?: unknown;\n  publicationStatus?: unknown;\n};\n\nexport type RuntimePackMutationContext = {\n  toolName?: string;\n  packKey?: string;\n  packInstallScope?: \"tenant\" | \"workspace\";\n};\n\nexport function normalizeScopeValue(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return;\n  }\n  const normalized = value.trim();\n  return normalized.length > 0 ? normalized : undefined;\n}\n\nfunction throwWorkspaceIsolationError(args: {\n  message: string;\n  invariantCode: string;\n  suggestion: string;\n  details?: unknown;\n}): never {\n  const error = new Error(args.message) as StructuredInvariantError;\n  error.status = 409;\n  error.code = \"INVARIANT_VIOLATION\";\n  error.invariantCode = args.invariantCode;\n  error.suggestion = args.suggestion;\n  error.details = args.details;\n  throw error;\n}\n\nexport function assertWorkspaceScopedEpistemicNodeScope(args: {\n  scope: TopicProjectScope;\n  nodeType: string;\n  mutationName: string;\n}): void {\n  const layer = isNodeType(args.nodeType)\n    ? getLayerForNodeType(args.nodeType)\n    : undefined;\n  if (layer === \"ontological\") {\n    return;\n  }\n\n  const workspaceId = normalizeScopeValue(args.scope.workspaceId);\n  if (workspaceId) {\n    return;\n  }\n\n  throwWorkspaceIsolationError({\n    message:\n      \"Workspace-scoped reasoning isolation requires workspaceId on non-ontological node creation.\",\n    invariantCode: \"workspace.scope_required_for_epistemic_nodes\",\n    suggestion:\n      \"Resolve the topic/project scope through a workspace-bound topic before creating epistemic nodes.\",\n    details: {\n      mutationName: args.mutationName,\n      nodeType: args.nodeType,\n      topicId: args.scope.topicId,\n      projectId: args.scope.projectId,\n    },\n  });\n}\n\nexport function nodeMatchesWorkspaceReasoningScope(\n  node: ScopeLike | null | undefined,\n  scope: Pick<TopicProjectScope, \"tenantId\" | \"workspaceId\">\n): boolean {\n  if (!node) {\n    return false;\n  }\n\n  const scopeTenantId = normalizeScopeValue(scope.tenantId);\n  const scopeWorkspaceId = normalizeScopeValue(scope.workspaceId);\n  const nodeTenantId = normalizeScopeValue(node.tenantId);\n  const nodeWorkspaceId = normalizeScopeValue(node.workspaceId);\n  const epistemicLayer =\n    typeof node.epistemicLayer === \"string\" ? node.epistemicLayer : undefined;\n\n  if (\n    scopeTenantId &&\n    nodeTenantId &&\n    scopeTenantId !== nodeTenantId\n  ) {\n    return false;\n  }\n\n  // Ontological entities are tenant-global (no workspace required)\n  if (epistemicLayer === \"ontological\" && nodeWorkspaceId === undefined) {\n    return true;\n  }\n\n  // Published nodes are visible at tenant scope — the microservice API surface.\n  // The node stays in its workspace, but tenant-scope queries can see it.\n  if (!scopeWorkspaceId && node.publicationStatus === \"published\") {\n    return true;\n  }\n\n  if (!scopeWorkspaceId) {\n    return nodeWorkspaceId === undefined;\n  }\n\n  return scopeWorkspaceId === nodeWorkspaceId;\n}\n\nexport function edgeMatchesWorkspaceReasoningScope(\n  edge: ScopeLike | null | undefined,\n  scope: Pick<TopicProjectScope, \"tenantId\" | \"workspaceId\">\n): boolean {\n  if (!edge) {\n    return false;\n  }\n\n  const scopeTenantId = normalizeScopeValue(scope.tenantId);\n  const scopeWorkspaceId = normalizeScopeValue(scope.workspaceId);\n  const edgeTenantId = normalizeScopeValue(edge.tenantId);\n  const edgeWorkspaceId = normalizeScopeValue(edge.workspaceId);\n\n  if (\n    scopeTenantId &&\n    edgeTenantId &&\n    scopeTenantId !== edgeTenantId\n  ) {\n    return false;\n  }\n\n  if (!scopeWorkspaceId) {\n    return edgeWorkspaceId === undefined;\n  }\n\n  return scopeWorkspaceId === edgeWorkspaceId;\n}\n\nexport async function resolveNodeScopeForWorkspaceIsolation(\n  ctx: any,\n  node: ScopeLike | null | undefined\n): Promise<{\n  tenantId?: string;\n  workspaceId?: string;\n  epistemicLayer?: string;\n  nodeType?: string;\n}> {\n  const epistemicLayer =\n    typeof node?.epistemicLayer === \"string\" ? node.epistemicLayer : undefined;\n  const resolved = {\n    tenantId: normalizeScopeValue(node?.tenantId),\n    workspaceId: normalizeScopeValue(node?.workspaceId),\n    epistemicLayer,\n    nodeType: typeof node?.nodeType === \"string\" ? node.nodeType : undefined,\n  };\n\n  if (!node) {\n    return resolved;\n  }\n\n  if (resolved.epistemicLayer === \"ontological\") {\n    return resolved;\n  }\n\n  if (resolved.tenantId || resolved.workspaceId) {\n    return resolved;\n  }\n\n  if (node.topicId) {\n    const topicScope = await resolveTopicProjectScope(ctx, {\n      topicId: node.topicId as any,\n    });\n    return {\n      ...resolved,\n      tenantId: topicScope.tenantId,\n      workspaceId: topicScope.workspaceId,\n    };\n  }\n\n  if (node.projectId) {\n    const topicScope = await resolveTopicProjectScope(ctx, {\n      projectId: String(node.projectId),\n    });\n    return {\n      ...resolved,\n      tenantId: topicScope.tenantId,\n      workspaceId: topicScope.workspaceId,\n    };\n  }\n\n  return resolved;\n}\n\nexport function resolveRuntimePackMutationContext(args: {\n  runtimeToolName?: string;\n  runtimePackKey?: string;\n  runtimePackInstallScope?: \"tenant\" | \"workspace\";\n}): RuntimePackMutationContext | undefined {\n  if (\n    !args.runtimeToolName &&\n    !args.runtimePackKey &&\n    !args.runtimePackInstallScope\n  ) {\n    return;\n  }\n\n  return {\n    toolName: args.runtimeToolName,\n    packKey: args.runtimePackKey,\n    packInstallScope: args.runtimePackInstallScope,\n  };\n}\n\nexport function assertTenantPackWorkspaceMutationAllowed(args: {\n  runtime?: RuntimePackMutationContext;\n  target: ScopeLike;\n  mutationName: string;\n}): void {\n  if (\n    !args.runtime?.packKey ||\n    args.runtime.packInstallScope !== \"tenant\"\n  ) {\n    return;\n  }\n\n  const targetWorkspaceId = normalizeScopeValue(args.target.workspaceId);\n  const targetLayer =\n    typeof args.target.epistemicLayer === \"string\"\n      ? args.target.epistemicLayer\n      : undefined;\n\n  if (!targetWorkspaceId || targetLayer === \"ontological\") {\n    return;\n  }\n\n  throwWorkspaceIsolationError({\n    message:\n      `Tenant-scoped pack \"${args.runtime.packKey}\" cannot mutate workspace-scoped reasoning state.`,\n    invariantCode: \"workspace.tenant_pack_reasoning_write_forbidden\",\n    suggestion:\n      \"Use a workspace-scoped pack for workspace-local graph mutations, or route the change through tenant-global canonical entity flows.\",\n    details: {\n      mutationName: args.mutationName,\n      toolName: args.runtime.toolName,\n      packKey: args.runtime.packKey,\n      targetWorkspaceId,\n      targetNodeType: args.target.nodeType,\n      targetLayer,\n    },\n  });\n}\n"]}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@lucern/graph-primitives",
-  "version": "0.3.0-alpha.0",
+  "version": "0.3.0-alpha.10",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
+    "dist/proof-attestation.json",
     "README.md"
   ],
   "publishConfig": {
@@ -31,10 +32,10 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@lucern/access-control": "0.3.0-alpha.0",
-    "@lucern/confidence": "0.3.0-alpha.0",
-    "@lucern/contracts": "0.3.0-alpha.0",
-    "@lucern/reasoning-kernel": "0.3.0-alpha.0",
+    "@lucern/access-control": "0.3.0-alpha.10",
+    "@lucern/confidence": "0.3.0-alpha.10",
+    "@lucern/contracts": "0.3.0-alpha.10",
+    "@lucern/reasoning-kernel": "0.3.0-alpha.10",
     "convex": "^1.17.0"
   },
   "devDependencies": {