@lucern/graph-primitives 1.0.28 → 1.0.29

package/dist/epistemicBeliefs.js

@@ -1,10 +1,11 @@
-import { v, ConvexError } from 'convex/values';
+import { v } from 'convex/values';
+import { throwStructuredMutationError } from '@lucern/access-control/structuredMutationError';
 import { normalizeTupleContradictionPolicy, mkOpinion, createInheritedContractRecord, confidenceFromSL, conditionalDeduction, project, dampedDependencyCascade, hasProjectedOpinionChanged, detectTupleContradiction, evaluateTupleContradictionTransition, readOpinionFromRecord, trustDiscount, applyNegativeSupport, cumulativeFusion, applyNegativeEvidence } from '@lucern/confidence';
-import { checkScopeAccess, checkProjectAccess } from '@lucern/access-control/access';
 import { canAudienceClassAccess, normalizeAudienceKey, classFromAudienceKey } from '@lucern/access-control/audience';
 import { getCurrentUserId } from '@lucern/access-control/auth';
 import { componentsGeneric, anyApi, internalMutationGeneric, mutationGeneric, queryGeneric, internalQueryGeneric } from 'convex/server';
 import { isNodeType, getLayerForNodeType } from '@lucern/contracts/schema-helpers/spine/tables/epistemicNodes';
+import { requireScopeWriteAccess, checkScopeAccess } from '@lucern/access-control/access';
 import { permissiveReturn } from '@lucern/contracts/schema-helpers/validators';
 import { assertSchemaEnumValue } from '@lucern/contracts/schema-helpers/enumValidation';
 import { generateGlobalId, assertUuidV7Identity, generateUuidV7, assertStorageEdgeVocabulary, assertUuidShapedEdgeEndpoint } from '@lucern/contracts/ids';
@@ -914,26 +915,6 @@ var DEFAULT_CONFIDENCE_POLICY = {
   scoringMode: "after_worktree",
   tupleContradiction: normalizeTupleContradictionPolicy()
 };
-function throwStructuredMutationError(args) {
-  const data = {
-    structuredMutationError: true,
-    message: args.message,
-    status: args.status,
-    code: args.code,
-    invariantCode: args.invariantCode,
-    suggestion: args.suggestion,
-    details: args.details
-  };
-  const error = new ConvexError(
-    data
-  );
-  error.status = args.status;
-  error.code = args.code;
-  error.invariantCode = args.invariantCode;
-  error.suggestion = args.suggestion;
-  error.details = args.details;
-  throw error;
-}
 function readFiniteNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
@@ -1267,23 +1248,6 @@ async function requireAuthenticatedUserId(ctx) {
   }
   return userId;
 }
-async function requireProjectWriteAccess(ctx, projectId, userId) {
-  const hasAccess = await checkProjectAccess(
-    ctx,
-    projectId,
-    userId
-  );
-  if (!hasAccess) {
-    throwStructuredMutationError({
-      message: `Project write access denied for topic ${projectId}.`,
-      status: 403,
-      code: "PROJECT_ACCESS_DENIED",
-      invariantCode: "policy.scope_required",
-      suggestion: "The acting principal lacks project-write access to this topic. Request a topic grant (or, if the principal created this topic, run the creator-grant backfill) and retry.",
-      details: { topicId: projectId, principalId: userId }
-    });
-  }
-}
 
 // src/edges/contains.ts
 var containsPropagationSpec = {
@@ -1729,7 +1693,7 @@ async function applyBeliefConfidenceChange(ctx, args) {
       details: { nodeId: args.nodeId }
     });
   }
-  await requireProjectWriteAccess(
+  await requireScopeWriteAccess(
     ctx,
     node.projectId,
     args.authenticatedUserId
@@ -2285,8 +2249,6 @@ async function scheduleEmbeddingGeneration(args) {
     );
   }
 }
-
-// src/epistemicBeliefs.core.ts
 var create = mutation({
   args: {
     ...optionalBeliefScopeArgs,
@@ -2365,7 +2327,7 @@ var create = mutation({
       context: "epistemicBeliefs.create"
     });
     if (scope.projectId) {
-      await requireProjectWriteAccess(
+      await requireScopeWriteAccess(
         ctx,
         scope.projectId,
         authenticatedUserId
@@ -2605,7 +2567,7 @@ var refineBelief = mutation({
         details: { nodeId: args.nodeId }
       });
     }
-    await requireProjectWriteAccess(ctx, node.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, node.projectId, authenticatedUserId);
     if (typeof node.confidence === "number" && Number.isFinite(node.confidence)) {
       throwStructuredMutationError({
         message: "Scored beliefs are immutable. Use forkBelief to evolve a scored belief.",
@@ -2825,7 +2787,7 @@ var forkBelief = mutation({
         details: { parentNodeId: args.parentNodeId }
       });
     }
-    await requireProjectWriteAccess(ctx, parent.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, parent.projectId, authenticatedUserId);
     const metadata = parent.metadata;
     const forkBeliefStatus = "hypothesis";
     const forkMode = args.forkMode ?? "supersede";
@@ -3123,7 +3085,7 @@ var updateStatus = mutation({
     if (!node.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(ctx, node.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, node.projectId, authenticatedUserId);
     const previousStatus = node.status;
     const metadata = node.metadata || {};
     await ctx.db.patch(args.nodeId, {
@@ -3168,7 +3130,7 @@ var archive = mutation({
     if (!node.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(ctx, node.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, node.projectId, authenticatedUserId);
     return await ctx.runMutation(
       // Use updateStatus internally
       internal.epistemicBeliefs.updateStatusInternal,
@@ -3198,7 +3160,7 @@ var updateRationale = mutation({
     if (!node.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(ctx, node.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, node.projectId, authenticatedUserId);
     const metadata = node.metadata || {};
     const previousRationale = typeof metadata.rationale === "string" ? metadata.rationale : void 0;
     const nextRationale = args.rationale?.trim();
@@ -3457,7 +3419,7 @@ var updatePillar = mutation({
     if (!existingNode.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(
+    await requireScopeWriteAccess(
       ctx,
       existingNode.projectId,
       authenticatedUserId
@@ -3563,7 +3525,7 @@ var linkBeliefs = mutation({
     if (!fromNode.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(
+    await requireScopeWriteAccess(
       ctx,
       fromNode.projectId,
       authenticatedUserId
@@ -3619,7 +3581,7 @@ var linkEvidence = mutation({
     if (!belief.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(ctx, belief.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, belief.projectId, authenticatedUserId);
     const insight = await ctx.db.get(args.insightId);
     if (!insight || insight.nodeType !== "evidence") {
       throw new Error("Insight not found");
@@ -3710,7 +3672,7 @@ var unlinkEvidence = mutation({
     if (!evidenceNode.projectId) {
       throw new Error("Evidence has no project scope");
     }
-    await requireProjectWriteAccess(
+    await requireScopeWriteAccess(
       ctx,
       evidenceNode.projectId,
       authenticatedUserId
@@ -3891,7 +3853,7 @@ var deleteRelationship = mutation({
     if (!edge.projectId) {
       throw new Error("Edge has no project scope");
     }
-    await requireProjectWriteAccess(ctx, edge.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, edge.projectId, authenticatedUserId);
     const previousState = {
       fromNodeId: edge.fromNodeId,
       toNodeId: edge.toNodeId,
@@ -3938,7 +3900,7 @@ var updateCriticality = mutation({
     if (!node.projectId) {
       throw new Error("Belief has no project scope");
     }
-    await requireProjectWriteAccess(ctx, node.projectId, authenticatedUserId);
+    await requireScopeWriteAccess(ctx, node.projectId, authenticatedUserId);
     const metadata = node.metadata || {};
     const previousCriticality = metadata.criticality;
     await ctx.db.patch(args.nodeId, {
@@ -4007,7 +3969,7 @@ var batchUpdateCriticality = mutation({
           results.push({ beliefId: update.beliefId, success: false });
           continue;
         }
-        await requireProjectWriteAccess(
+        await requireScopeWriteAccess(
           ctx,
           node.projectId,
           authenticatedUserId