@lucern/graph-primitives 1.0.23 → 1.0.25

package/dist/epistemicBeliefs.js

@@ -1,4 +1,4 @@
-import { v } from 'convex/values';
+import { v, ConvexError } from 'convex/values';
 import { normalizeTupleContradictionPolicy, mkOpinion, createInheritedContractRecord, confidenceFromSL, conditionalDeduction, project, dampedDependencyCascade, hasProjectedOpinionChanged, detectTupleContradiction, evaluateTupleContradictionTransition, readOpinionFromRecord, trustDiscount, applyNegativeSupport, cumulativeFusion, applyNegativeEvidence } from '@lucern/confidence';
 import { checkScopeAccess, checkProjectAccess } from '@lucern/access-control/access';
 import { canAudienceClassAccess, normalizeAudienceKey, classFromAudienceKey } from '@lucern/access-control/audience';
@@ -7,7 +7,7 @@ import { componentsGeneric, anyApi, internalMutationGeneric, mutationGeneric, qu
 import { isNodeType, getLayerForNodeType } from '@lucern/contracts/schema-helpers/spine/tables/epistemicNodes';
 import { permissiveReturn } from '@lucern/contracts/schema-helpers/validators';
 import { assertSchemaEnumValue } from '@lucern/contracts/schema-helpers/enumValidation';
-import { generateGlobalId, assertUuidV7Identity, generateUuidV7, assertStorageEdgeVocabulary, assertCanonicalEdgeEndpoint } from '@lucern/contracts/ids';
+import { generateGlobalId, assertUuidV7Identity, generateUuidV7, assertStorageEdgeVocabulary, assertUuidShapedEdgeEndpoint } from '@lucern/contracts/ids';
 import { assertEdgePolicyAllowed, edgePolicyManifest } from '@lucern/contracts';
 import { listAudienceRegistryRows } from '@lucern/access-control/audienceRegistry';
 
@@ -286,6 +286,9 @@ function materializeTopicProjectOverlay(topic, idMode = "legacy") {
     type: mapProjectType(topic, metadata),
     description: readNonEmptyString(topic.description),
     ownerId: readNonEmptyString(metadata.ownerId) || readNonEmptyString(topic.createdBy) || "system",
+    // FR.7 creator-grant: surface the principal-shaped owner field (column-first,
+    // metadata fallback for legacy rows that recorded it in metadata).
+    ownerPrincipalId: readNonEmptyString(topic.ownerPrincipalId) || readNonEmptyString(metadata.ownerPrincipalId),
     sharedWith: readStringArray(metadata.sharedWith),
     visibility,
     tenantId: readNonEmptyString(topic.tenantId) || readNonEmptyString(metadata.tenantId),
@@ -907,7 +910,18 @@ var DEFAULT_CONFIDENCE_POLICY = {
   tupleContradiction: normalizeTupleContradictionPolicy()
 };
 function throwStructuredMutationError(args) {
-  const error = new Error(args.message);
+  const data = {
+    structuredMutationError: true,
+    message: args.message,
+    status: args.status,
+    code: args.code,
+    invariantCode: args.invariantCode,
+    suggestion: args.suggestion,
+    details: args.details
+  };
+  const error = new ConvexError(
+    data
+  );
   error.status = args.status;
   error.code = args.code;
   error.invariantCode = args.invariantCode;
@@ -1256,12 +1270,12 @@ async function requireProjectWriteAccess(ctx, projectId, userId) {
   );
   if (!hasAccess) {
     throwStructuredMutationError({
-      message: "Project access required.",
+      message: `Project write access denied for topic ${projectId}.`,
       status: 403,
-      code: "FORBIDDEN",
+      code: "PROJECT_ACCESS_DENIED",
       invariantCode: "policy.scope_required",
-      suggestion: "Request write access for the project and retry.",
-      details: { projectId, userId }
+      suggestion: "The acting principal lacks project-write access to this topic. Request a topic grant (or, if the principal created this topic, run the creator-grant backfill) and retry.",
+      details: { topicId: projectId, principalId: userId }
     });
   }
 }
@@ -2085,6 +2099,15 @@ async function insertEpistemicNode(ctx, doc) {
   assertUuidV7Identity("epistemicNodes", doc.globalId);
   return ctx.db.insert("epistemicNodes", doc);
 }
+async function assertExistingNodeEndpoint(ctx, endpointRole, endpoint) {
+  assertUuidShapedEdgeEndpoint(endpointRole, endpoint);
+  const node = await ctx.db.query("epistemicNodes").withIndex("by_globalId", (q) => q.eq("globalId", endpoint)).first();
+  if (!node) {
+    throw new Error(
+      `edge_endpoint_not_canonical: epistemicEdges insert requires ${endpointRole} to be the globalId of an existing epistemicNodes row, received ${endpoint} (no node with that globalId)`
+    );
+  }
+}
 async function insertEpistemicEdge(ctx, doc) {
   assertUuidV7Identity("epistemicEdges", doc.globalId);
   assertStorageEdgeVocabulary(doc.edgeType);
@@ -2098,8 +2121,8 @@ async function insertEpistemicEdge(ctx, doc) {
       "edge_endpoint_missing: epistemicEdges insert requires a non-empty toNodeId"
     );
   }
-  assertCanonicalEdgeEndpoint("fromNodeId", doc.fromNodeId);
-  assertCanonicalEdgeEndpoint("toNodeId", doc.toNodeId);
+  await assertExistingNodeEndpoint(ctx, "fromNodeId", doc.fromNodeId);
+  await assertExistingNodeEndpoint(ctx, "toNodeId", doc.toNodeId);
   if (doc.fromNodeType && doc.toNodeType && doc.edgeType !== "extracted_from") {
     assertEdgePolicyAllowed(
       edgePolicyManifest,