@massa-ai/core 1.2.1

package/dist/services/project-identity/contracts.d.ts

@@ -0,0 +1,103 @@
+import { z } from "zod";
+import type { ProjectIdentityInvalidationReport } from "./invalidator-registry.js";
+export declare const PROJECT_IDENTITY_PLAN_VERSION: 1;
+export declare const PROJECT_IDENTITY_MAX_PROJECT_ID_LENGTH = 255;
+export declare const ProjectIdentityModeSchema: z.ZodEnum<{
+    rename: "rename";
+    merge: "merge";
+}>;
+export type ProjectIdentityMode = z.infer<typeof ProjectIdentityModeSchema>;
+export declare const ProjectIdentityPreviewRequestSchema: z.ZodObject<{
+    dryRun: z.ZodDefault<z.ZodLiteral<true>>;
+    mode: z.ZodEnum<{
+        rename: "rename";
+        merge: "merge";
+    }>;
+    sourceProjectId: z.ZodString;
+    targetProjectId: z.ZodString;
+}, z.core.$strict>;
+export declare const ProjectIdentityApplyRequestSchema: z.ZodObject<{
+    dryRun: z.ZodLiteral<false>;
+    operationId: z.ZodString;
+    expectedPlanHash: z.ZodString;
+    mode: z.ZodEnum<{
+        rename: "rename";
+        merge: "merge";
+    }>;
+    sourceProjectId: z.ZodString;
+    targetProjectId: z.ZodString;
+}, z.core.$strict>;
+export type ProjectIdentityPreviewRequest = z.infer<typeof ProjectIdentityPreviewRequestSchema>;
+export type ProjectIdentityPreviewInput = z.input<typeof ProjectIdentityPreviewRequestSchema>;
+export type ProjectIdentityApplyRequest = z.infer<typeof ProjectIdentityApplyRequestSchema>;
+export type ProjectIdentityApplyInput = z.input<typeof ProjectIdentityApplyRequestSchema>;
+export interface ProjectIdentityStoreCount {
+    storeId: string;
+    directCount: number;
+    adaptedCount: number;
+}
+export interface ProjectIdentityConflict {
+    storeId: string;
+    kind: "key_collision" | "semantic_conflict" | "malformed_payload";
+    count: number;
+}
+/** Hash input. Arrays must already be in deterministic store/kind order. */
+export interface ProjectIdentityPlanMaterial {
+    planVersion: typeof PROJECT_IDENTITY_PLAN_VERSION;
+    mode: ProjectIdentityMode;
+    sourceProjectId: string;
+    targetProjectId: string;
+    sourceCanonicalRoot: string;
+    targetCanonicalRoot: string | null;
+    stores: readonly ProjectIdentityStoreCount[];
+    conflicts: readonly ProjectIdentityConflict[];
+    unknownStores: readonly string[];
+    /** Digest of relevant source and target row material; detects changes without exposing it. */
+    storageFingerprint?: string;
+}
+export interface ProjectIdentityPreview extends ProjectIdentityPlanMaterial {
+    dryRun: true;
+    planHash: string;
+}
+export interface ProjectIdentityApplyResult {
+    mode: ProjectIdentityMode;
+    dryRun: false;
+    operationId: string;
+    sourceProjectId: string;
+    targetProjectId: string;
+    sourceCanonicalRoot: string;
+    targetCanonicalRoot: string;
+    planHash: string;
+    stores: readonly ProjectIdentityStoreCount[];
+    committedAt: string;
+    /**
+     * Sanitized post-commit invalidation report. OPTIONAL so existing snapshot
+     * tests (which do not exercise the invalidator) stay byte-identical; the
+     * planner hash is computed over ProjectIdentityPlanMaterial, not the result,
+     * so plan hashes are unaffected by this field. When present, failures here
+     * MUST NEVER change the committed success status (spec req 8).
+     */
+    invalidation?: ProjectIdentityInvalidationReport;
+}
+export interface ProjectIdentityService {
+    preview(request: ProjectIdentityPreviewInput): Promise<ProjectIdentityPreview>;
+    apply(request: ProjectIdentityApplyInput): Promise<ProjectIdentityApplyResult>;
+}
+/**
+ * Query client that also owns a transaction lifecycle. Apply receives one of
+ * these inside `withIdentityTransaction`; the body must COMMIT or ROLLBACK via
+ * the client. Kept as an interface so tests can substitute a transaction-aware
+ * fake without a real PostgreSQL connection.
+ */
+export interface ProjectIdentityTransactionClient {
+    query<Row = Record<string, unknown>>(text: string, values?: readonly unknown[]): Promise<{
+        rows: Row[];
+    }>;
+    /** SELECT setval('BEGIN') semantics — begin is implicit on the pooled client. */
+    beginTransaction(): Promise<void>;
+    commitTransaction(): Promise<void>;
+    rollbackTransaction(): Promise<void>;
+}
+export declare function parseProjectIdentityPreviewRequest(input: unknown): ProjectIdentityPreviewRequest;
+export declare function parseProjectIdentityApplyRequest(input: unknown): ProjectIdentityApplyRequest;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/services/project-identity/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAEnF,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AACxD,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAgB1D,eAAO,MAAM,yBAAyB;;;EAA8B,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAQ5E,eAAO,MAAM,mCAAmC;;;;;;;;kBAW9C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;kBAa5C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,mCAAmC,CAC3C,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,iCAAiC,CACzC,CAAC;AAEF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,eAAe,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,4EAA4E;AAC5E,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,OAAO,6BAA6B,CAAC;IAClD,IAAI,EAAE,mBAAmB,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC7C,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC9C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAuB,SAAQ,2BAA2B;IACzE,MAAM,EAAE,IAAI,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,KAAK,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,iCAAiC,CAAC;CAClD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/E,KAAK,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAChF;AAED;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,OAAO,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5B,iFAAiF;IACjF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAYD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,GACb,6BAA6B,CAE/B;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,2BAA2B,CAE7B"}

package/dist/services/project-identity/contracts.js

@@ -0,0 +1,63 @@
+import { z } from "zod";
+import { ProjectIdentityError } from "./errors.js";
+export const PROJECT_IDENTITY_PLAN_VERSION = 1;
+export const PROJECT_IDENTITY_MAX_PROJECT_ID_LENGTH = 255;
+const ProjectIdSchema = z.string()
+    .trim()
+    .min(1)
+    .max(PROJECT_IDENTITY_MAX_PROJECT_ID_LENGTH)
+    .refine((value) => !value.includes("\0"), "Project IDs cannot contain NUL bytes");
+const OperationIdSchema = z.string()
+    .trim()
+    .min(1)
+    .max(255)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/);
+const PlanHashSchema = z.string().regex(/^[a-f0-9]{64}$/);
+export const ProjectIdentityModeSchema = z.enum(["rename", "merge"]);
+const BaseRequestShape = {
+    mode: ProjectIdentityModeSchema,
+    sourceProjectId: ProjectIdSchema,
+    targetProjectId: ProjectIdSchema,
+};
+export const ProjectIdentityPreviewRequestSchema = z.object({
+    ...BaseRequestShape,
+    dryRun: z.literal(true).default(true),
+}).strict().superRefine((request, context) => {
+    if (request.sourceProjectId === request.targetProjectId) {
+        context.addIssue({
+            code: "custom",
+            path: ["targetProjectId"],
+            message: "Source and target project IDs must differ",
+        });
+    }
+});
+export const ProjectIdentityApplyRequestSchema = z.object({
+    ...BaseRequestShape,
+    dryRun: z.literal(false),
+    operationId: OperationIdSchema,
+    expectedPlanHash: PlanHashSchema,
+}).strict().superRefine((request, context) => {
+    if (request.sourceProjectId === request.targetProjectId) {
+        context.addIssue({
+            code: "custom",
+            path: ["targetProjectId"],
+            message: "Source and target project IDs must differ",
+        });
+    }
+});
+function parseRequest(schema, input) {
+    const parsed = schema.safeParse(input);
+    if (!parsed.success) {
+        throw new ProjectIdentityError("INVALID_PROJECT_IDENTITY_REQUEST", {
+            cause: parsed.error,
+        });
+    }
+    return parsed.data;
+}
+export function parseProjectIdentityPreviewRequest(input) {
+    return parseRequest(ProjectIdentityPreviewRequestSchema, input);
+}
+export function parseProjectIdentityApplyRequest(input) {
+    return parseRequest(ProjectIdentityApplyRequestSchema, input);
+}
+//# sourceMappingURL=contracts.js.map

package/dist/services/project-identity/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../src/services/project-identity/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGnD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAC;AACxD,MAAM,CAAC,MAAM,sCAAsC,GAAG,GAAG,CAAC;AAE1D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE;KAC/B,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,sCAAsC,CAAC;KAC3C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,sCAAsC,CAAC,CAAC;AAEpF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE;KACjC,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAGrE,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,yBAAyB;IAC/B,eAAe,EAAE,eAAe;IAChC,eAAe,EAAE,eAAe;CACxB,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,GAAG,gBAAgB;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAC3C,IAAI,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,GAAG,gBAAgB;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACxB,WAAW,EAAE,iBAAiB;IAC9B,gBAAgB,EAAE,cAAc;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAC3C,IAAI,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AA0FH,SAAS,YAAY,CAAI,MAAoB,EAAE,KAAc;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,EAAE;YACjE,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAc;IAEd,OAAO,YAAY,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,OAAO,YAAY,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/services/project-identity/discovery.d.ts

@@ -0,0 +1,39 @@
+import { PROJECT_IDENTITY_REGISTRY_VERSION, type IdentityColumn, type PayloadStorePolicy } from "./registry.js";
+export interface ProjectIdentityQueryResult<Row = Record<string, unknown>> {
+    rows: Row[];
+}
+export interface ProjectIdentityQueryClient {
+    query<Row = Record<string, unknown>>(text: string, values?: readonly unknown[]): Promise<ProjectIdentityQueryResult<Row>>;
+}
+export interface DiscoveredDirectStore {
+    storeId: string;
+    identityColumn: IdentityColumn;
+    mutable: boolean;
+    primaryKey: readonly string[];
+    /**
+     * Safe (non-heavy) columns to fingerprint and compare as row material.
+     * Excludes the identity column and heavy types (bytea/vector) so previews
+     * never ship embeddings or large binary payloads to the planner.
+     */
+    materialColumns: readonly string[];
+}
+export interface DiscoveredPayloadStore extends PayloadStorePolicy {
+    /** True when the table carries its own project_id column, so payload scans
+     *  can be scoped to the source/target rows instead of the whole table. */
+    readonly hasProjectIdentityColumn: boolean;
+}
+export interface ProjectIdentityInventory {
+    registryVersion: typeof PROJECT_IDENTITY_REGISTRY_VERSION;
+    directStores: readonly DiscoveredDirectStore[];
+    payloadStores: readonly DiscoveredPayloadStore[];
+    unknownStores: readonly string[];
+}
+export declare function quoteDiscoveredIdentifier(identifier: string): string;
+export declare function discoverProjectIdentityStorage(client: ProjectIdentityQueryClient, schema?: string): Promise<ProjectIdentityInventory>;
+export declare function inspectIdentityPayload(raw: unknown, encoding: PayloadStorePolicy["encoding"], projectId: string): {
+    count: number;
+    malformed: boolean;
+    canonical: string;
+};
+export declare function fingerprintProjectIdentityRows(rows: readonly unknown[]): string;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/services/project-identity/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/discovery.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,iCAAiC,EAIjC,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,0BAA0B,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvE,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,OAAO,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7C;AAaD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;;;;OAIG;IACH,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE;8EAC0E;IAC1E,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,OAAO,iCAAiC,CAAC;IAC1D,YAAY,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/C,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAOD,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGpE;AAoBD,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,0BAA0B,EAClC,MAAM,SAAW,GAChB,OAAO,CAAC,wBAAwB,CAAC,CAgEnC;AAiBD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,EACxC,SAAS,EAAE,MAAM,GAChB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAyB1D;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAO/E"}

package/dist/services/project-identity/discovery.js

@@ -0,0 +1,139 @@
+import { createHash } from "node:crypto";
+import { canonicalProjectIdentityJson } from "./hash.js";
+import { parsePgArrayLiteral } from "./pg-array-codec.js";
+import { PROJECT_IDENTITY_REGISTRY_VERSION, directStorePolicy, isKnownRegistryTable, payloadStorePolicies, } from "./registry.js";
+const IDENTITY_COLUMNS = new Set(["project_id", "workspace_id"]);
+const SAFE_IDENTIFIER = /^[a-z_][a-z0-9_]*$/;
+/** information_schema.data_type values that hold large/derived payloads we never ship to the planner. */
+const HEAVY_DATA_TYPES = new Set(["bytea", "USER-DEFINED"]);
+export function quoteDiscoveredIdentifier(identifier) {
+    if (!SAFE_IDENTIFIER.test(identifier))
+        throw new TypeError("Unsafe discovered SQL identifier");
+    return `"${identifier}"`;
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+/** Columns safe to load as row material: excludes the identity column and heavy binary/vector types. */
+function materialColumnsFor(columns, identityColumn) {
+    const result = [];
+    for (const [column, dataType] of columns) {
+        if (column === identityColumn)
+            continue;
+        if (HEAVY_DATA_TYPES.has(dataType))
+            continue;
+        result.push(column);
+    }
+    return result.sort(compareText);
+}
+export async function discoverProjectIdentityStorage(client, schema = "public") {
+    const columnsResult = await client.query(`SELECT table_name, column_name, data_type
+       FROM information_schema.columns
+      WHERE table_schema = $1
+      ORDER BY table_name, ordinal_position`, [schema]);
+    const primaryKeysResult = await client.query(`SELECT tc.table_name, array_agg(kcu.column_name ORDER BY kcu.ordinal_position) AS columns
+       FROM information_schema.table_constraints tc
+       JOIN information_schema.key_column_usage kcu
+         ON kcu.constraint_schema = tc.constraint_schema
+        AND kcu.constraint_name = tc.constraint_name
+        AND kcu.table_name = tc.table_name
+      WHERE tc.table_schema = $1 AND tc.constraint_type = 'PRIMARY KEY'
+      GROUP BY tc.table_name
+      ORDER BY tc.table_name`, [schema]);
+    const columnsByTable = new Map();
+    for (const row of columnsResult.rows) {
+        if (!SAFE_IDENTIFIER.test(row.table_name) || !SAFE_IDENTIFIER.test(row.column_name))
+            continue;
+        const columns = columnsByTable.get(row.table_name) ?? new Map();
+        if (!columns.has(row.column_name))
+            columns.set(row.column_name, row.data_type);
+        columnsByTable.set(row.table_name, columns);
+    }
+    const primaryKeys = new Map(primaryKeysResult.rows.map((row) => [
+        row.table_name,
+        Array.isArray(row.columns) ? row.columns : String(row.columns).replace(/^\{|\}$/g, "").split(",").filter(Boolean),
+    ]));
+    const directStores = [];
+    const payloadStores = [];
+    const unknown = new Set();
+    for (const [tableName, columns] of columnsByTable) {
+        for (const [column, dataType] of columns) {
+            if (!IDENTITY_COLUMNS.has(column))
+                continue;
+            const policy = directStorePolicy(tableName, column);
+            if (!policy)
+                unknown.add(`${tableName}.${column}`);
+            else
+                directStores.push({
+                    ...policy,
+                    primaryKey: primaryKeys.get(tableName) ?? [],
+                    materialColumns: materialColumnsFor(columns, column),
+                });
+        }
+        for (const policy of payloadStorePolicies(tableName)) {
+            if (columns.has(policy.column)) {
+                payloadStores.push({ ...policy, hasProjectIdentityColumn: columns.has("project_id") });
+            }
+        }
+        if (/project|workspace/.test(tableName) && !isKnownRegistryTable(tableName)) {
+            unknown.add(tableName);
+        }
+    }
+    return {
+        registryVersion: PROJECT_IDENTITY_REGISTRY_VERSION,
+        directStores: directStores.sort((a, b) => compareText(a.storeId, b.storeId)),
+        payloadStores: payloadStores.sort((a, b) => compareText(a.storeId, b.storeId) || compareText(a.column, b.column)),
+        unknownStores: [...unknown].sort(compareText),
+    };
+}
+const IDENTITY_KEYS = new Set(["projectId", "project_id", "workspaceId", "workspace_id"]);
+function countIdentityReferences(value, projectId) {
+    if (Array.isArray(value)) {
+        return value.reduce((total, item) => total + countIdentityReferences(item, projectId), 0);
+    }
+    if (!value || typeof value !== "object")
+        return 0;
+    let count = 0;
+    for (const [key, item] of Object.entries(value)) {
+        if (IDENTITY_KEYS.has(key) && item === projectId)
+            count++;
+        count += countIdentityReferences(item, projectId);
+    }
+    return count;
+}
+export function inspectIdentityPayload(raw, encoding, projectId) {
+    try {
+        if (encoding === "text-array") {
+            // TEXT columns arrive as PG array literals (`{a,b}`); native text[]
+            // columns arrive as JS arrays. Both are valid (see pg-array-codec).
+            const parsed = parsePgArrayLiteral(raw);
+            if (parsed === undefined) {
+                return { count: 0, malformed: raw != null, canonical: "" };
+            }
+            const count = parsed.filter((item) => item === `handoff:${projectId}` || item === `project:${projectId}` || item === projectId).length;
+            return { count, malformed: false, canonical: canonicalProjectIdentityJson(parsed) };
+        }
+        const value = encoding === "json-text" && typeof raw === "string" ? JSON.parse(raw) : raw;
+        if (value == null)
+            return { count: 0, malformed: false, canonical: "null" };
+        if (typeof value !== "object")
+            return { count: 0, malformed: true, canonical: "" };
+        return {
+            count: countIdentityReferences(value, projectId),
+            malformed: false,
+            canonical: canonicalProjectIdentityJson(value),
+        };
+    }
+    catch {
+        return { count: 0, malformed: true, canonical: "" };
+    }
+}
+export function fingerprintProjectIdentityRows(rows) {
+    const hash = createHash("sha256");
+    hash.update(`project-identity-registry:v${PROJECT_IDENTITY_REGISTRY_VERSION}\n`);
+    for (const row of [...rows].map((item) => canonicalProjectIdentityJson(item)).sort(compareText)) {
+        hash.update(row).update("\n");
+    }
+    return hash.digest("hex");
+}
+//# sourceMappingURL=discovery.js.map

package/dist/services/project-identity/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/services/project-identity/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,iCAAiC,EACjC,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,GAGrB,MAAM,eAAe,CAAC;AAkDvB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AACjE,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,yGAAyG;AACzG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AAE5D,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/F,OAAO,IAAI,UAAU,GAAG,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,wGAAwG;AACxG,SAAS,kBAAkB,CACzB,OAA4B,EAC5B,cAAsB;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,IAAI,MAAM,KAAK,cAAc;YAAE,SAAS;QACxC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAkC,EAClC,MAAM,GAAG,QAAQ;IAEjB,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,KAAK,CACtC;;;4CAGwC,EACxC,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,KAAK,CAC1C;;;;;;;;6BAQyB,EACzB,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,MAAM,cAAc,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,SAAS;QAC9F,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/E,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QAC9D,GAAG,CAAC,UAAU;QACd,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KAClH,CAAC,CAAC,CAAC;IAEJ,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,MAAM,aAAa,GAA6B,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAwB,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;;gBAC9C,YAAY,CAAC,IAAI,CAAC;oBACrB,GAAG,MAAM;oBACT,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;oBAC5C,eAAe,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC;iBACrD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO;QACL,eAAe,EAAE,iCAAiC;QAClD,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5E,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvE,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;AAE1F,SAAS,uBAAuB,CAAC,KAAc,EAAE,SAAiB;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,EAAE,CAAC;QAC1D,KAAK,IAAI,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,QAAwC,EACxC,SAAiB;IAEjB,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAC7D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,IAAI,KAAK,WAAW,SAAS,EAAE,IAAI,IAAI,KAAK,WAAW,SAAS,EAAE,IAAI,IAAI,KAAK,SAAS,CACzF,CAAC,MAAM,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,KAAK,WAAW,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1F,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACnF,OAAO;YACL,KAAK,EAAE,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC;YAChD,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,4BAA4B,CAAC,KAAK,CAAC;SAC/C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAwB;IACrE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,8BAA8B,iCAAiC,IAAI,CAAC,CAAC;IACjF,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/services/project-identity/errors.d.ts

@@ -0,0 +1,11 @@
+export type ProjectIdentityErrorCode = "INVALID_PROJECT_IDENTITY_REQUEST" | "PROJECT_IDENTITY_BACKEND_UNAVAILABLE" | "PROJECT_IDENTITY_SOURCE_NOT_FOUND" | "PROJECT_IDENTITY_SOURCE_RETIRED" | "PROJECT_IDENTITY_TARGET_EXISTS" | "PROJECT_IDENTITY_TARGET_NOT_FOUND" | "PROJECT_IDENTITY_TARGET_RETIRED" | "PROJECT_IDENTITY_ROOT_MISMATCH" | "PROJECT_IDENTITY_CONFLICT" | "PROJECT_IDENTITY_UNKNOWN_STORAGE" | "PROJECT_IDENTITY_PLAN_CHANGED" | "PROJECT_IDENTITY_OPERATION_REUSED";
+/** Sanitized public error shared by Core, HTTP, and MCP transports. */
+export declare class ProjectIdentityError extends Error {
+    readonly code: ProjectIdentityErrorCode;
+    readonly statusCode: number;
+    constructor(code: ProjectIdentityErrorCode, options?: {
+        cause?: unknown;
+        statusCode?: number;
+    });
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/services/project-identity/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAChC,kCAAkC,GAClC,sCAAsC,GACtC,mCAAmC,GACnC,iCAAiC,GACjC,gCAAgC,GAChC,mCAAmC,GACnC,iCAAiC,GACjC,gCAAgC,GAChC,2BAA2B,GAC3B,kCAAkC,GAClC,+BAA+B,GAC/B,mCAAmC,CAAC;AAgCxC,uEAAuE;AACvE,qBAAa,oBAAqB,SAAQ,KAAK;IAI3C,QAAQ,CAAC,IAAI,EAAE,wBAAwB;IAHzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAGjB,IAAI,EAAE,wBAAwB,EACvC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CASrD"}

package/dist/services/project-identity/errors.js

@@ -0,0 +1,40 @@
+const ERROR_MESSAGES = {
+    INVALID_PROJECT_IDENTITY_REQUEST: "The project identity request is invalid",
+    PROJECT_IDENTITY_BACKEND_UNAVAILABLE: "The project identity backend is unavailable",
+    PROJECT_IDENTITY_SOURCE_NOT_FOUND: "The source project does not exist",
+    PROJECT_IDENTITY_SOURCE_RETIRED: "The source project ID is retired",
+    PROJECT_IDENTITY_TARGET_EXISTS: "The target project already exists",
+    PROJECT_IDENTITY_TARGET_NOT_FOUND: "The target project does not exist",
+    PROJECT_IDENTITY_TARGET_RETIRED: "The target project ID is retired",
+    PROJECT_IDENTITY_ROOT_MISMATCH: "The projects do not have the same canonical root",
+    PROJECT_IDENTITY_CONFLICT: "The project identities contain conflicting records",
+    PROJECT_IDENTITY_UNKNOWN_STORAGE: "Unclassified project-scoped storage was found",
+    PROJECT_IDENTITY_PLAN_CHANGED: "The project identity preview has changed",
+    PROJECT_IDENTITY_OPERATION_REUSED: "The operation ID was already used for another request",
+};
+const ERROR_STATUS = {
+    INVALID_PROJECT_IDENTITY_REQUEST: 400,
+    PROJECT_IDENTITY_BACKEND_UNAVAILABLE: 503,
+    PROJECT_IDENTITY_SOURCE_NOT_FOUND: 404,
+    PROJECT_IDENTITY_SOURCE_RETIRED: 409,
+    PROJECT_IDENTITY_TARGET_EXISTS: 409,
+    PROJECT_IDENTITY_TARGET_NOT_FOUND: 404,
+    PROJECT_IDENTITY_TARGET_RETIRED: 409,
+    PROJECT_IDENTITY_ROOT_MISMATCH: 409,
+    PROJECT_IDENTITY_CONFLICT: 409,
+    PROJECT_IDENTITY_UNKNOWN_STORAGE: 409,
+    PROJECT_IDENTITY_PLAN_CHANGED: 409,
+    PROJECT_IDENTITY_OPERATION_REUSED: 409,
+};
+/** Sanitized public error shared by Core, HTTP, and MCP transports. */
+export class ProjectIdentityError extends Error {
+    code;
+    statusCode;
+    constructor(code, options) {
+        super(ERROR_MESSAGES[code], options?.cause === undefined ? undefined : { cause: options.cause });
+        this.code = code;
+        this.name = "ProjectIdentityError";
+        this.statusCode = options?.statusCode ?? ERROR_STATUS[code];
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/services/project-identity/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/services/project-identity/errors.ts"],"names":[],"mappings":"AAcA,MAAM,cAAc,GAA6C;IAC/D,gCAAgC,EAAE,yCAAyC;IAC3E,oCAAoC,EAAE,6CAA6C;IACnF,iCAAiC,EAAE,mCAAmC;IACtE,+BAA+B,EAAE,kCAAkC;IACnE,8BAA8B,EAAE,mCAAmC;IACnE,iCAAiC,EAAE,mCAAmC;IACtE,+BAA+B,EAAE,kCAAkC;IACnE,8BAA8B,EAAE,kDAAkD;IAClF,yBAAyB,EAAE,oDAAoD;IAC/E,gCAAgC,EAAE,+CAA+C;IACjF,6BAA6B,EAAE,0CAA0C;IACzE,iCAAiC,EAAE,uDAAuD;CAC3F,CAAC;AAEF,MAAM,YAAY,GAA6C;IAC7D,gCAAgC,EAAE,GAAG;IACrC,oCAAoC,EAAE,GAAG;IACzC,iCAAiC,EAAE,GAAG;IACtC,+BAA+B,EAAE,GAAG;IACpC,8BAA8B,EAAE,GAAG;IACnC,iCAAiC,EAAE,GAAG;IACtC,+BAA+B,EAAE,GAAG;IACpC,8BAA8B,EAAE,GAAG;IACnC,yBAAyB,EAAE,GAAG;IAC9B,gCAAgC,EAAE,GAAG;IACrC,6BAA6B,EAAE,GAAG;IAClC,iCAAiC,EAAE,GAAG;CACvC,CAAC;AAEF,uEAAuE;AACvE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAIlC;IAHF,UAAU,CAAS;IAE5B,YACW,IAA8B,EACvC,OAAkD;QAElD,KAAK,CACH,cAAc,CAAC,IAAI,CAAC,EACpB,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACpE,CAAC;QANO,SAAI,GAAJ,IAAI,CAA0B;QAOvC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/services/project-identity/hash.d.ts

@@ -0,0 +1,16 @@
+import type { ProjectIdentityMode, ProjectIdentityPlanMaterial } from "./contracts.js";
+/**
+ * Stable digest of an APPLY request's identity material. Used by the operation
+ * table to detect operationId reuse with different request material. Excludes
+ * every preview-derived field (expectedPlanHash) so a stale preview hash does
+ * not change the request identity.
+ */
+export declare function hashProjectIdentityRequest(material: {
+    mode: ProjectIdentityMode;
+    sourceProjectId: string;
+    targetProjectId: string;
+    operationId: string;
+}): string;
+export declare function canonicalProjectIdentityJson(value: unknown): string;
+export declare function hashProjectIdentityPlan(plan: ProjectIdentityPlanMaterial): string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/services/project-identity/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/hash.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAEvF;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE;IACnD,IAAI,EAAE,mBAAmB,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAUT;AAqDD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnE;AAMD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,2BAA2B,GAAG,MAAM,CAiBjF"}

package/dist/services/project-identity/hash.js

@@ -0,0 +1,91 @@
+import { createHash } from "node:crypto";
+/**
+ * Stable digest of an APPLY request's identity material. Used by the operation
+ * table to detect operationId reuse with different request material. Excludes
+ * every preview-derived field (expectedPlanHash) so a stale preview hash does
+ * not change the request identity.
+ */
+export function hashProjectIdentityRequest(material) {
+    return createHash("sha256")
+        .update("project-identity-request:v1\n", "utf8")
+        .update(canonicalProjectIdentityJson({
+        mode: material.mode,
+        source: material.sourceProjectId,
+        target: material.targetProjectId,
+        operationId: material.operationId,
+    }), "utf8")
+        .digest("hex");
+}
+function canonicalize(value, seen) {
+    if (value === null || typeof value === "string" || typeof value === "boolean") {
+        return value;
+    }
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new TypeError("Canonical JSON requires finite numbers");
+        return Object.is(value, -0) ? 0 : value;
+    }
+    if (typeof value === "bigint") {
+        // pg int8 (with bigint parsers) — tagged so it can never collide with a
+        // text column holding the same digits.
+        return `bigint:${value.toString()}`;
+    }
+    if (value instanceof Date) {
+        // pg timestamp/timestamptz driver values. Tagged canonical instant.
+        return `date:${value.toISOString()}`;
+    }
+    if (Buffer.isBuffer(value) || value instanceof Uint8Array) {
+        // pg bytea driver values. Tagged base64.
+        return `bytes:${Buffer.from(value).toString("base64")}`;
+    }
+    if (Array.isArray(value)) {
+        if (seen.has(value))
+            throw new TypeError("Canonical JSON cannot contain cycles");
+        seen.add(value);
+        const result = value.map((item) => canonicalize(item, seen));
+        seen.delete(value);
+        return result;
+    }
+    if (typeof value === "object") {
+        if (seen.has(value))
+            throw new TypeError("Canonical JSON cannot contain cycles");
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError("Canonical JSON requires plain objects");
+        }
+        seen.add(value);
+        const result = {};
+        for (const key of Object.keys(value).sort()) {
+            const item = value[key];
+            if (item === undefined)
+                throw new TypeError("Canonical JSON cannot contain undefined");
+            result[key] = canonicalize(item, seen);
+        }
+        seen.delete(value);
+        return result;
+    }
+    throw new TypeError(`Canonical JSON does not support ${typeof value}`);
+}
+export function canonicalProjectIdentityJson(value) {
+    return JSON.stringify(canonicalize(value, new Set()));
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+export function hashProjectIdentityPlan(plan) {
+    const normalized = {
+        ...plan,
+        stores: [...plan.stores].sort((left, right) => compareText(left.storeId, right.storeId) ||
+            left.directCount - right.directCount ||
+            left.adaptedCount - right.adaptedCount),
+        conflicts: [...plan.conflicts].sort((left, right) => compareText(left.storeId, right.storeId) ||
+            compareText(left.kind, right.kind) ||
+            left.count - right.count),
+        unknownStores: [...plan.unknownStores].sort(compareText),
+    };
+    return createHash("sha256")
+        .update(`project-identity-plan:v${plan.planVersion}\n`, "utf8")
+        .update(canonicalProjectIdentityJson(normalized), "utf8")
+        .digest("hex");
+}
+//# sourceMappingURL=hash.js.map

package/dist/services/project-identity/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/services/project-identity/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAK1C;IACC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,+BAA+B,EAAE,MAAM,CAAC;SAC/C,MAAM,CAAC,4BAA4B,CAAC;QACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,eAAe;QAChC,MAAM,EAAE,QAAQ,CAAC,eAAe;QAChC,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC,EAAE,MAAM,CAAC;SACV,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAMD,SAAS,YAAY,CAAC,KAAc,EAAE,IAAiB;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,wEAAwE;QACxE,uCAAuC;QACvC,OAAO,UAAU,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,oEAAoE;QACpE,OAAO,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAC1D,yCAAyC;QACzC,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,MAAM,GAAkC,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,mCAAmC,OAAO,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAiC;IACvE,MAAM,UAAU,GAAgC;QAC9C,GAAG,IAAI;QACP,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACxC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW;YACpC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClD,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;YAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;KACzD,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,0BAA0B,IAAI,CAAC,WAAW,IAAI,EAAE,MAAM,CAAC;SAC9D,MAAM,CAAC,4BAA4B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SACxD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/services/project-identity/identity-guard-installer.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Minimal query surface the installer needs. Production wires this to a pg
+ * `PoolClient` (`pool.connect()`); in-process tests substitute a fake.
+ */
+export interface IdentityGuardInstallerClient {
+    query<Row = Record<string, unknown>>(text: string, values?: readonly unknown[]): Promise<{
+        rows: Row[];
+    }>;
+}
+export interface ProjectIdentityGuardInstallReport {
+    /** Tables on which the guard trigger was (re)installed. */
+    readonly installed: readonly string[];
+    /** Inventoryed tables deliberately left unguarded (project_identity_operations
+     *  has no project_id column; it is the operation authority itself). */
+    readonly skipped: readonly string[];
+    /** Runtime vector_documents* tables discovered via pg_tables and guarded. */
+    readonly runtimeTablesGuarded: readonly string[];
+    /** Per-table failures with SANITIZED codes (PG SQLSTATE only — no message, no row data). */
+    readonly failures: readonly {
+        table: string;
+        code: string;
+    }[];
+}
+/**
+ * Install (or replace — the SQL fn is DROP IF EXISTS + CREATE) the project
+ * identity guard trigger on a single table.column. Idempotent and safe to call
+ * from runtime table-initialization sites (keyword/search/vector init).
+ *
+ * Returns the sanitized code on failure, or undefined on success. NEVER throws.
+ */
+export declare function installGuardOnTable(client: IdentityGuardInstallerClient, schema: string, table: string, column: string): Promise<string | undefined>;
+/**
+ * Iterate the static direct-store registry plus runtime vector_documents* tables
+ * and install the project identity guard on every mutable identity column.
+ *
+ * The SQL function `project_identity_install_guard(target_table REGCLASS,
+ * column_name TEXT)` (T1) is idempotent: it DROPs any existing trigger and
+ * CREATEs a fresh BEFORE INSERT OR UPDATE OF column OR DELETE row-level trigger
+ * that resolves aliases on INSERT/UPDATE and takes a shared advisory lock on
+ * DELETE. So every guarded-table write is already safe — async writers need no
+ * draining.
+ *
+ * Failure isolation (spec req 8): a single install failure is recorded in
+ * `failures` with a SANITIZED code and NEVER aborts the loop or throws. Failure
+ * codes are PG SQLSTATE strings only (e.g. "42703"); error.message, row data,
+ * and SQL are never captured.
+ */
+export declare function installProjectIdentityGuards(client: IdentityGuardInstallerClient, schema?: string): Promise<ProjectIdentityGuardInstallReport>;
+/**
+ * Production startup path: acquire the shared pg pool, install guards on the
+ * static catalog plus runtime vector tables, then release the client. Keeps
+ * the data layer inside core — transport apps call this instead of touching
+ * `pg` pools themselves.
+ *
+ * Throws ONLY on pool acquisition/connect failure (the caller warn-logs with
+ * a sanitized shape and continues startup). Per-table install failures are
+ * already captured inside the report with sanitized SQLSTATE codes.
+ */
+export declare function installProjectIdentityGuardsFromPool(schema?: string): Promise<ProjectIdentityGuardInstallReport>;
+//# sourceMappingURL=identity-guard-installer.d.ts.map

package/dist/services/project-identity/identity-guard-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-guard-installer.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/identity-guard-installer.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,OAAO,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,iCAAiC;IAChD,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;2EACuE;IACvE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,4BAA4B,EACpC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,4BAA4B,EACpC,MAAM,SAAW,GAChB,OAAO,CAAC,iCAAiC,CAAC,CAkD5C;AAED;;;;;;;;;GASG;AACH,wBAAsB,oCAAoC,CACxD,MAAM,SAAW,GAChB,OAAO,CAAC,iCAAiC,CAAC,CAQ5C"}