@massa-ai/core 1.2.1

package/dist/services/project-identity/planner.js

@@ -0,0 +1,206 @@
+import { resolve } from "node:path";
+import { PROJECT_IDENTITY_PLAN_VERSION, parseProjectIdentityPreviewRequest, } from "./contracts.js";
+import { discoverProjectIdentityStorage, fingerprintProjectIdentityRows, inspectIdentityPayload, quoteDiscoveredIdentifier, } from "./discovery.js";
+import { ProjectIdentityError } from "./errors.js";
+import { canonicalProjectIdentityJson, hashProjectIdentityPlan } from "./hash.js";
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function canonicalRoot(projectPath) {
+    return resolve(projectPath);
+}
+function normalizedCollisionKey(row, store) {
+    const keyColumns = store.primaryKey.filter((column) => column !== store.identityColumn);
+    if (keyColumns.length === 0)
+        return null;
+    return canonicalProjectIdentityJson(keyColumns.map((column) => row[column]));
+}
+function normalizedMaterial(row, identityColumn) {
+    const normalized = { ...row };
+    delete normalized[identityColumn];
+    return canonicalProjectIdentityJson(normalized);
+}
+function selectColumnsFor(store) {
+    const seen = new Set();
+    const quoted = [];
+    for (const column of [store.identityColumn, ...store.primaryKey, ...store.materialColumns]) {
+        if (seen.has(column))
+            continue;
+        seen.add(column);
+        quoted.push(quoteDiscoveredIdentifier(column));
+    }
+    return quoted.join(", ");
+}
+async function loadDirectRows(client, store, source, target) {
+    const table = quoteDiscoveredIdentifier(store.storeId);
+    const column = quoteDiscoveredIdentifier(store.identityColumn);
+    const projection = selectColumnsFor(store);
+    const result = await client.query(`SELECT ${projection} FROM ${table} WHERE ${column} = $1 OR ${column} = $2`, [source, target]);
+    return result.rows;
+}
+export async function computeIdentityPlan(client, request, schema = "public") {
+    // Sequential queries on the single pooled client: concurrent query
+    // pipelining is deprecated in pg 8 and REMOVED in pg 9 — under Bun it can
+    // desync the wire protocol and wedge the connection (T6 finding: the next
+    // pool.query on the reused client never resolved).
+    const workspaceResult = await client.query(`SELECT project_id, project_path FROM workspaces WHERE project_id = $1 OR project_id = $2`, [request.sourceProjectId, request.targetProjectId]);
+    const aliasResult = await client.query(`SELECT retired_project_id, target_project_id FROM project_identity_aliases
+      WHERE retired_project_id = $1 OR retired_project_id = $2`, [request.sourceProjectId, request.targetProjectId]);
+    const inventory = await discoverProjectIdentityStorage(client, schema);
+    const workspaces = new Map(workspaceResult.rows.map((row) => [row.project_id, row]));
+    const aliases = new Set(aliasResult.rows.map((row) => row.retired_project_id));
+    const source = workspaces.get(request.sourceProjectId);
+    const target = workspaces.get(request.targetProjectId);
+    if (aliases.has(request.sourceProjectId))
+        throw new ProjectIdentityError("PROJECT_IDENTITY_SOURCE_RETIRED");
+    if (!source)
+        throw new ProjectIdentityError("PROJECT_IDENTITY_SOURCE_NOT_FOUND");
+    if (aliases.has(request.targetProjectId))
+        throw new ProjectIdentityError("PROJECT_IDENTITY_TARGET_RETIRED");
+    if (request.mode === "rename" && target)
+        throw new ProjectIdentityError("PROJECT_IDENTITY_TARGET_EXISTS");
+    if (request.mode === "merge" && !target)
+        throw new ProjectIdentityError("PROJECT_IDENTITY_TARGET_NOT_FOUND");
+    const sourceRoot = canonicalRoot(source.project_path);
+    const targetRoot = target ? canonicalRoot(target.project_path) : "";
+    if (request.mode === "merge" && sourceRoot !== targetRoot) {
+        throw new ProjectIdentityError("PROJECT_IDENTITY_ROOT_MISMATCH");
+    }
+    const counts = new Map();
+    const conflicts = new Map();
+    const fingerprintRows = [];
+    // Fingerprint inputs MUST be order-independent: PostgreSQL makes no row-order
+    // guarantee without ORDER BY, so an unsorted fingerprint can flip a valid
+    // preview/apply pair into PROJECT_IDENTITY_PLAN_CHANGED on identical storage
+    // (T6 finding). Rows and payload fingerprints are sorted canonically below.
+    for (const store of inventory.directStores) {
+        const rows = await loadDirectRows(client, store, request.sourceProjectId, request.targetProjectId);
+        fingerprintRows.push({
+            store: store.storeId,
+            rows: [...rows].sort((a, b) => compareText(canonicalProjectIdentityJson(a), canonicalProjectIdentityJson(b))),
+        });
+        const sourceRows = rows.filter((row) => row[store.identityColumn] === request.sourceProjectId);
+        counts.set(store.storeId, { storeId: store.storeId, directCount: sourceRows.length, adaptedCount: 0 });
+        if (request.mode === "merge") {
+            const targets = new Map();
+            for (const row of rows.filter((item) => item[store.identityColumn] === request.targetProjectId)) {
+                const key = normalizedCollisionKey(row, store);
+                if (key != null)
+                    targets.set(key, normalizedMaterial(row, store.identityColumn));
+            }
+            let collisionCount = 0;
+            for (const row of sourceRows) {
+                const key = normalizedCollisionKey(row, store);
+                const targetMaterial = key == null ? undefined : targets.get(key);
+                if (targetMaterial !== undefined && targetMaterial !== normalizedMaterial(row, store.identityColumn)) {
+                    collisionCount++;
+                }
+            }
+            if (collisionCount > 0)
+                conflicts.set(`${store.storeId}:key_collision`, {
+                    storeId: store.storeId, kind: "key_collision", count: collisionCount,
+                });
+        }
+    }
+    for (const adapter of inventory.payloadStores) {
+        const table = quoteDiscoveredIdentifier(adapter.storeId);
+        const column = quoteDiscoveredIdentifier(adapter.column);
+        // Scope the scan to the source/target rows when the table carries its own
+        // project_id: a GLOBAL scan would let an unrelated project's payload write
+        // between preview and apply flip the fingerprint and spuriously fail apply
+        // with PROJECT_IDENTITY_PLAN_CHANGED (T6 review). scheduled_jobs has no
+        // project_id column and keeps the full scan by design.
+        const scoped = adapter.hasProjectIdentityColumn;
+        const result = await client.query(scoped
+            ? `SELECT ${column} AS payload_value FROM ${table}
+           WHERE ${column} IS NOT NULL AND ("project_id" = $1 OR "project_id" = $2)`
+            : `SELECT ${column} AS payload_value FROM ${table} WHERE ${column} IS NOT NULL`, scoped ? [request.sourceProjectId, request.targetProjectId] : []);
+        let adaptedCount = 0;
+        let malformedCount = 0;
+        const payloadFingerprints = [];
+        for (const row of result.rows) {
+            const inspected = inspectIdentityPayload(row.payload_value, adapter.encoding, request.sourceProjectId);
+            adaptedCount += inspected.count;
+            if (inspected.malformed)
+                malformedCount++;
+            else
+                payloadFingerprints.push(inspected.canonical);
+        }
+        fingerprintRows.push({
+            store: `${adapter.storeId}.${adapter.column}`,
+            payloads: [...payloadFingerprints].sort(compareText),
+        });
+        const count = counts.get(adapter.storeId) ?? {
+            storeId: adapter.storeId, directCount: 0, adaptedCount: 0,
+        };
+        count.adaptedCount += adaptedCount;
+        counts.set(adapter.storeId, count);
+        if (malformedCount > 0)
+            conflicts.set(`${adapter.storeId}:malformed_payload`, {
+                storeId: adapter.storeId, kind: "malformed_payload", count: malformedCount,
+            });
+    }
+    const storageFingerprint = fingerprintProjectIdentityRows(fingerprintRows);
+    const stores = [...counts.values()].sort((a, b) => compareText(a.storeId, b.storeId));
+    const conflictList = [...conflicts.values()].sort((a, b) => compareText(a.storeId, b.storeId) || compareText(a.kind, b.kind));
+    const unknownStores = [...inventory.unknownStores];
+    const planHash = hashProjectIdentityPlan({
+        planVersion: PROJECT_IDENTITY_PLAN_VERSION,
+        mode: request.mode,
+        sourceProjectId: request.sourceProjectId,
+        targetProjectId: request.targetProjectId,
+        sourceCanonicalRoot: sourceRoot,
+        targetCanonicalRoot: target ? targetRoot : null,
+        stores,
+        conflicts: conflictList,
+        unknownStores,
+        storageFingerprint,
+    });
+    return {
+        mode: request.mode,
+        sourceProjectId: request.sourceProjectId,
+        targetProjectId: request.targetProjectId,
+        sourceCanonicalRoot: sourceRoot,
+        targetCanonicalRoot: targetRoot,
+        hasTarget: Boolean(target),
+        stores,
+        conflicts: conflictList,
+        unknownStores,
+        storageFingerprint,
+        planHash,
+    };
+}
+export class ProjectIdentityPreviewPlanner {
+    client;
+    schema;
+    constructor(client, schema = "public") {
+        this.client = client;
+        this.schema = schema;
+    }
+    async preview(input) {
+        const request = parseProjectIdentityPreviewRequest(input);
+        try {
+            const plan = await computeIdentityPlan(this.client, request, this.schema);
+            return {
+                planVersion: PROJECT_IDENTITY_PLAN_VERSION,
+                mode: plan.mode,
+                sourceProjectId: plan.sourceProjectId,
+                targetProjectId: plan.targetProjectId,
+                sourceCanonicalRoot: plan.sourceCanonicalRoot,
+                targetCanonicalRoot: plan.hasTarget ? plan.targetCanonicalRoot : null,
+                stores: plan.stores,
+                conflicts: plan.conflicts,
+                unknownStores: plan.unknownStores,
+                storageFingerprint: plan.storageFingerprint,
+                dryRun: true,
+                planHash: plan.planHash,
+            };
+        }
+        catch (error) {
+            if (error instanceof ProjectIdentityError)
+                throw error;
+            throw new ProjectIdentityError("PROJECT_IDENTITY_BACKEND_UNAVAILABLE", { cause: error });
+        }
+    }
+}
+//# sourceMappingURL=planner.js.map

package/dist/services/project-identity/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../../src/services/project-identity/planner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,GAMnC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,sBAAsB,EACtB,yBAAyB,GAG1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAMlF,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA4B,EAAE,KAA4B;IACxF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,4BAA4B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B,EAAE,cAAsB;IAC9E,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC9B,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IAClC,OAAO,4BAA4B,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA4B;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3F,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAkC,EAClC,KAA4B,EAC5B,MAAc,EACd,MAAc;IAEd,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,UAAU,UAAU,SAAS,KAAK,UAAU,MAAM,YAAY,MAAM,OAAO,EAC3E,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AA4BD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAkC,EAClC,OAAwF,EACxF,MAAM,GAAG,QAAQ;IAEjB,mEAAmE;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,KAAK,CACxC,0FAA0F,EAC1F,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,CACnD,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CACpC;+DAC2D,EAC3D,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,CACnD,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,CAAC,CAAC;IAC5G,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IAE7G,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC1D,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,MAAM,eAAe,GAAc,EAAE,CAAC;IACtC,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,4EAA4E;IAC5E,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,cAAc,CAC/B,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAChE,CAAC;QACF,eAAe,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5B,WAAW,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QACvG,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChG,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/C,IAAI,GAAG,IAAI,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/C,MAAM,cAAc,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClE,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;oBACrG,cAAc,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,IAAI,cAAc,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,gBAAgB,EAAE;oBACtE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc;iBACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,uDAAuD;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,MAAM;YACJ,CAAC,CAAC,UAAU,MAAM,0BAA0B,KAAK;mBACtC,MAAM,2DAA2D;YAC5E,CAAC,CAAC,UAAU,MAAM,0BAA0B,KAAK,UAAU,MAAM,cAAc,EACjF,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CACjE,CAAC;QACF,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,mBAAmB,GAAa,EAAE,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YACvG,YAAY,IAAI,SAAS,CAAC,KAAK,CAAC;YAChC,IAAI,SAAS,CAAC,SAAS;gBAAE,cAAc,EAAE,CAAC;;gBACrC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;QACD,eAAe,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE;YAC7C,QAAQ,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;SAC1D,CAAC;QACF,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,cAAc,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,oBAAoB,EAAE;gBAC5E,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc;aAC3E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,GAAG,8BAA8B,CAAC,eAAe,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzD,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,mBAAmB,EAAE,UAAU;QAC/B,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC/C,MAAM;QACN,SAAS,EAAE,YAAY;QACvB,aAAa;QACb,kBAAkB;KACnB,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,mBAAmB,EAAE,UAAU;QAC/B,mBAAmB,EAAE,UAAU;QAC/B,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;QAC1B,MAAM;QACN,SAAS,EAAE,YAAY;QACvB,aAAa;QACb,kBAAkB;QAClB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,6BAA6B;IAErB;IACA;IAFnB,YACmB,MAAkC,EAClC,SAAS,QAAQ;QADjB,WAAM,GAAN,MAAM,CAA4B;QAClC,WAAM,GAAN,MAAM,CAAW;IACjC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAAkC;QAC9C,MAAM,OAAO,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1E,OAAO;gBACL,WAAW,EAAE,6BAA6B;gBAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;gBACrE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAC;YACvD,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF"}

package/dist/services/project-identity/production-wiring.d.ts

@@ -0,0 +1,60 @@
+/**
+ * production-wiring — composition root helpers for the project-identity
+ * post-commit contract (spec req 8). T5 transports plug these factories into
+ * `createProjectIdentityApplyService`; keeping them here means the wiring is
+ * defined once and unit-testable with injected targets.
+ *
+ * The serving in-memory caches live on the SearchController singleton's
+ * ContextualSearchRLM engine (the same instance MCP tools and HTTP routes
+ * serve from) plus the SymbolGraphService singleton. They are resolved
+ * LAZILY on first invalidation via dynamic import so importing the
+ * project-identity module never pulls the search/controller graph in, and a
+ * cold process that never renames pays nothing.
+ */
+import type { ProjectIdentityChangedPublisher } from "./apply.js";
+import { ProjectIdentityInvalidatorRegistry } from "./invalidator-registry.js";
+/** Minimal surfaces the post-commit invalidators need. */
+export interface ProductionInvalidatorTargets {
+    /** QueryUnderstandingService — rewrite/HyDE cache keyed `${projectId}::${query}`. */
+    readonly queryUnderstanding: {
+        invalidateProject(projectId: string): void;
+    };
+    /** FileFilterCache — key-globs `project:${projectId}|*`. */
+    readonly fileFilterCache: {
+        invalidateProject(projectId: string): unknown;
+    };
+    /** IndexManager.metadataCache — keyed by projectId. Null until engine init. */
+    readonly indexManager: {
+        clearCache(projectId?: string): void;
+    } | null;
+    /** SymbolGraphService.projectRootCache — keyed by projectId. */
+    readonly symbolGraph: {
+        clearProjectRoot(projectId: string): void;
+    };
+}
+export type ProductionInvalidatorTargetResolver = () => Promise<ProductionInvalidatorTargets> | ProductionInvalidatorTargets;
+/**
+ * Compose the production invalidator registry. Registered invalidators:
+ *
+ *  - `query-understanding-cache` — LLM rewrite/HyDE entries for the old ID.
+ *  - `file-filter-cache` — per-project file-filter globs.
+ *  - `index-manager-metadata` — index freshness metadata. Tolerates a cold
+ *    engine (IndexManager is assigned during engine initialization).
+ *  - `symbol-graph-project-root` — cached project-root path resolution.
+ *
+ * L1MemoryCache and the read_file tool cache are deliberately absent: both
+ * are TTL-bounded and self-evict (see invalidator-registry.ts). Durable
+ * caches (search_cache PG rows) are rewritten by apply itself (T3 stores).
+ *
+ * Every invalidation failure is caught by the registry and surfaced as a
+ * sanitized code in the report — a committed rename/merge can NEVER be
+ * flipped to failure by a cache problem (spec req 8).
+ */
+export declare function createProductionProjectIdentityInvalidatorRegistry(resolve?: ProductionInvalidatorTargetResolver): ProjectIdentityInvalidatorRegistry;
+/**
+ * Publisher backed by the shared TypedEventBus singleton. Emits
+ * `project-identity:changed` AFTER commit; the apply service swallows any
+ * listener-side throw, so this stays notification-only (spec req 8).
+ */
+export declare function createEventBusProjectIdentityChangedPublisher(): ProjectIdentityChangedPublisher;
+//# sourceMappingURL=production-wiring.d.ts.map

package/dist/services/project-identity/production-wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-wiring.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/production-wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAEV,+BAA+B,EAChC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAE/E,0DAA0D;AAC1D,MAAM,WAAW,4BAA4B;IAC3C,qFAAqF;IACrF,QAAQ,CAAC,kBAAkB,EAAE;QAAE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5E,4DAA4D;IAC5D,QAAQ,CAAC,eAAe,EAAE;QAAE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC5E,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,EAAE;QAAE,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE;QAAE,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrE;AAED,MAAM,MAAM,mCAAmC,GAC7C,MAAM,OAAO,CAAC,4BAA4B,CAAC,GAAG,4BAA4B,CAAC;AAsB7E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kDAAkD,CAChE,OAAO,GAAE,mCAA2D,GACnE,kCAAkC,CA0CpC;AAED;;;;GAIG;AACH,wBAAgB,6CAA6C,IAAI,+BAA+B,CAM/F"}

package/dist/services/project-identity/production-wiring.js

@@ -0,0 +1,106 @@
+/**
+ * production-wiring — composition root helpers for the project-identity
+ * post-commit contract (spec req 8). T5 transports plug these factories into
+ * `createProjectIdentityApplyService`; keeping them here means the wiring is
+ * defined once and unit-testable with injected targets.
+ *
+ * The serving in-memory caches live on the SearchController singleton's
+ * ContextualSearchRLM engine (the same instance MCP tools and HTTP routes
+ * serve from) plus the SymbolGraphService singleton. They are resolved
+ * LAZILY on first invalidation via dynamic import so importing the
+ * project-identity module never pulls the search/controller graph in, and a
+ * cold process that never renames pays nothing.
+ */
+import { eventBus } from "../events/event-bus.js";
+import { getProjectIdentityAliasResolver } from "./alias-resolver.js";
+import { ProjectIdentityInvalidatorRegistry } from "./invalidator-registry.js";
+/**
+ * Default resolver: the SERVING cache instances. Search traffic flows through
+ * SearchController.getInstance().getSearchEngine() (SearchProjectTool,
+ * SearchCodeTool, and context-controller all share it), so invalidating that
+ * engine's caches is what prevents stale post-rename responses.
+ */
+async function resolveServingTargets() {
+    const [{ SearchController }, { symbolGraphService }] = await Promise.all([
+        import("../../controllers/search-controller.js"),
+        import("../symbol/symbol-graph.service.js"),
+    ]);
+    const engine = SearchController.getInstance().getSearchEngine();
+    return {
+        queryUnderstanding: engine.queryUnderstanding,
+        fileFilterCache: engine.fileFilterCache,
+        indexManager: engine.indexManager ?? null,
+        symbolGraph: symbolGraphService,
+    };
+}
+/**
+ * Compose the production invalidator registry. Registered invalidators:
+ *
+ *  - `query-understanding-cache` — LLM rewrite/HyDE entries for the old ID.
+ *  - `file-filter-cache` — per-project file-filter globs.
+ *  - `index-manager-metadata` — index freshness metadata. Tolerates a cold
+ *    engine (IndexManager is assigned during engine initialization).
+ *  - `symbol-graph-project-root` — cached project-root path resolution.
+ *
+ * L1MemoryCache and the read_file tool cache are deliberately absent: both
+ * are TTL-bounded and self-evict (see invalidator-registry.ts). Durable
+ * caches (search_cache PG rows) are rewritten by apply itself (T3 stores).
+ *
+ * Every invalidation failure is caught by the registry and surfaced as a
+ * sanitized code in the report — a committed rename/merge can NEVER be
+ * flipped to failure by a cache problem (spec req 8).
+ */
+export function createProductionProjectIdentityInvalidatorRegistry(resolve = resolveServingTargets) {
+    const registry = new ProjectIdentityInvalidatorRegistry();
+    registry.register({
+        id: "query-understanding-cache",
+        async invalidateProject(projectId) {
+            const targets = await resolve();
+            targets.queryUnderstanding.invalidateProject(projectId);
+        },
+    });
+    registry.register({
+        id: "file-filter-cache",
+        async invalidateProject(projectId) {
+            const targets = await resolve();
+            await targets.fileFilterCache.invalidateProject(projectId);
+        },
+    });
+    registry.register({
+        id: "index-manager-metadata",
+        async invalidateProject(projectId) {
+            const targets = await resolve();
+            targets.indexManager?.clearCache(projectId);
+        },
+    });
+    registry.register({
+        id: "symbol-graph-project-root",
+        async invalidateProject(projectId) {
+            const targets = await resolve();
+            targets.symbolGraph.clearProjectRoot(projectId);
+        },
+    });
+    // The alias resolver's own cache: a committed rename/merge must drop the
+    // source→source and target mappings immediately so the NEXT scoped writer
+    // resolves the post-commit alias instead of riding the TTL.
+    registry.register({
+        id: "project-identity-alias-resolver",
+        invalidateProject(projectId) {
+            getProjectIdentityAliasResolver().invalidateProject(projectId);
+        },
+    });
+    return registry;
+}
+/**
+ * Publisher backed by the shared TypedEventBus singleton. Emits
+ * `project-identity:changed` AFTER commit; the apply service swallows any
+ * listener-side throw, so this stays notification-only (spec req 8).
+ */
+export function createEventBusProjectIdentityChangedPublisher() {
+    return {
+        publish(payload) {
+            eventBus.publish("project-identity:changed", payload);
+        },
+    };
+}
+//# sourceMappingURL=production-wiring.js.map

package/dist/services/project-identity/production-wiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-wiring.js","sourceRoot":"","sources":["../../../src/services/project-identity/production-wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAKtE,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAiB/E;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB;IAClC,MAAM,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvE,MAAM,CAAC,wCAAwC,CAAC;QAChD,MAAM,CAAC,mCAAmC,CAAC;KAC5C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,eAAe,EAAE,CAAC;IAChE,OAAO;QACL,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;QACzC,WAAW,EAAE,kBAAkB;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kDAAkD,CAChE,UAA+C,qBAAqB;IAEpE,MAAM,QAAQ,GAAG,IAAI,kCAAkC,EAAE,CAAC;IAE1D,QAAQ,CAAC,QAAQ,CAAC;QAChB,EAAE,EAAE,2BAA2B;QAC/B,KAAK,CAAC,iBAAiB,CAAC,SAAS;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,OAAO,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC,CAAC;IACH,QAAQ,CAAC,QAAQ,CAAC;QAChB,EAAE,EAAE,mBAAmB;QACvB,KAAK,CAAC,iBAAiB,CAAC,SAAS;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC,CAAC;IACH,QAAQ,CAAC,QAAQ,CAAC;QAChB,EAAE,EAAE,wBAAwB;QAC5B,KAAK,CAAC,iBAAiB,CAAC,SAAS;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC;IACH,QAAQ,CAAC,QAAQ,CAAC;QAChB,EAAE,EAAE,2BAA2B;QAC/B,KAAK,CAAC,iBAAiB,CAAC,SAAS;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;KACF,CAAC,CAAC;IACH,yEAAyE;IACzE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC;QAChB,EAAE,EAAE,iCAAiC;QACrC,iBAAiB,CAAC,SAAS;YACzB,+BAA+B,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6CAA6C;IAC3D,OAAO;QACL,OAAO,CAAC,OAAsC;YAC5C,QAAQ,CAAC,OAAO,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/project-identity/registry.d.ts

@@ -0,0 +1,24 @@
+export declare const PROJECT_IDENTITY_REGISTRY_VERSION: 1;
+export type IdentityColumn = "project_id" | "workspace_id";
+export interface DirectStorePolicy {
+    readonly storeId: string;
+    readonly identityColumn: IdentityColumn;
+    readonly mutable: boolean;
+}
+export interface PayloadStorePolicy {
+    readonly storeId: string;
+    readonly column: string;
+    readonly encoding: "json" | "json-text" | "text-array";
+}
+/**
+ * Catalog of every direct (non-payload) project/workspace identity column.
+ * Mutable rows are rewritten by apply; immutable rows (operation_log,
+ * project_identity_operations) are inventoried but never rewritten.
+ * Exported so the T4 guard installer can iterate the same catalog and install
+ * a BEFORE INSERT/UPDATE/DELETE trigger on every mutable direct store.
+ */
+export declare const STATIC_DIRECT_STORES: Readonly<Record<string, DirectStorePolicy>>;
+export declare function directStorePolicy(tableName: string, columnName: IdentityColumn): DirectStorePolicy | undefined;
+export declare function payloadStorePolicies(tableName: string): readonly PayloadStorePolicy[];
+export declare function isKnownRegistryTable(tableName: string): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/services/project-identity/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/registry.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAE5D,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,CAAC;CACxD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA8B5E,CAAC;AAeF,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,cAAc,GACzB,iBAAiB,GAAG,SAAS,CAM/B;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,kBAAkB,EAAE,CAMrF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAK/D"}

package/dist/services/project-identity/registry.js

@@ -0,0 +1,72 @@
+export const PROJECT_IDENTITY_REGISTRY_VERSION = 1;
+/**
+ * Catalog of every direct (non-payload) project/workspace identity column.
+ * Mutable rows are rewritten by apply; immutable rows (operation_log,
+ * project_identity_operations) are inventoried but never rewritten.
+ * Exported so the T4 guard installer can iterate the same catalog and install
+ * a BEFORE INSERT/UPDATE/DELETE trigger on every mutable direct store.
+ */
+export const STATIC_DIRECT_STORES = {
+    memories: { storeId: "memories", identityColumn: "project_id", mutable: true },
+    projects: { storeId: "projects", identityColumn: "project_id", mutable: true },
+    documents: { storeId: "documents", identityColumn: "project_id", mutable: true },
+    search_queries: { storeId: "search_queries", identityColumn: "project_id", mutable: true },
+    cache_stats: { storeId: "cache_stats", identityColumn: "project_id", mutable: true },
+    workspaces: { storeId: "workspaces", identityColumn: "project_id", mutable: true },
+    symbol_files: { storeId: "symbol_files", identityColumn: "project_id", mutable: true },
+    symbol_definitions: { storeId: "symbol_definitions", identityColumn: "project_id", mutable: true },
+    symbol_references: { storeId: "symbol_references", identityColumn: "project_id", mutable: true },
+    symbol_imports: { storeId: "symbol_imports", identityColumn: "project_id", mutable: true },
+    symbol_centrality: { storeId: "symbol_centrality", identityColumn: "project_id", mutable: true },
+    index_jobs: { storeId: "index_jobs", identityColumn: "project_id", mutable: true },
+    observations: { storeId: "observations", identityColumn: "project_id", mutable: true },
+    task_checkpoints: { storeId: "task_checkpoints", identityColumn: "project_id", mutable: true },
+    handoffs: { storeId: "handoffs", identityColumn: "project_id", mutable: true },
+    proposals: { storeId: "proposals", identityColumn: "project_id", mutable: true },
+    graph_generations: { storeId: "graph_generations", identityColumn: "project_id", mutable: true },
+    keyword_documents: { storeId: "keyword_documents", identityColumn: "project_id", mutable: true },
+    search_cache: { storeId: "search_cache", identityColumn: "project_id", mutable: true },
+    search_analytics: { storeId: "search_analytics", identityColumn: "project_id", mutable: true },
+    search_events: { storeId: "search_events", identityColumn: "project_id", mutable: true },
+    synapse_sessions: { storeId: "synapse_sessions", identityColumn: "workspace_id", mutable: true },
+    // Historical identity records are deliberately inventoried but never rewritten.
+    operation_log: { storeId: "operation_log", identityColumn: "project_id", mutable: false },
+    project_identity_operations: {
+        storeId: "project_identity_operations",
+        identityColumn: "project_id",
+        mutable: false,
+    },
+};
+const PAYLOAD_STORES = [
+    // memories.metadata is TEXT holding a JSON document (same Prisma/no-OID
+    // mapping class as tags) — the "json-text" encoding parses + re-serializes
+    // so the UPDATE round-trips the text representation (T6 finding).
+    { storeId: "memories", column: "metadata", encoding: "json-text" },
+    { storeId: "memories", column: "tags", encoding: "text-array" },
+    { storeId: "scheduled_jobs", column: "payload", encoding: "json-text" },
+    { storeId: "keyword_documents", column: "metadata", encoding: "json" },
+    { storeId: "observations", column: "payload_json", encoding: "json-text" },
+    { storeId: "proposals", column: "payload_json", encoding: "json-text" },
+    { storeId: "search_cache", column: "results", encoding: "json" },
+];
+export function directStorePolicy(tableName, columnName) {
+    if (/^vector_documents(?:_\d+d)?$/.test(tableName) && columnName === "project_id") {
+        return { storeId: tableName, identityColumn: columnName, mutable: true };
+    }
+    const policy = STATIC_DIRECT_STORES[tableName];
+    return policy?.identityColumn === columnName ? policy : undefined;
+}
+export function payloadStorePolicies(tableName) {
+    const policies = PAYLOAD_STORES.filter((entry) => entry.storeId === tableName);
+    if (/^vector_documents(?:_\d+d)?$/.test(tableName)) {
+        return [...policies, { storeId: tableName, column: "metadata", encoding: "json" }];
+    }
+    return policies;
+}
+export function isKnownRegistryTable(tableName) {
+    return tableName in STATIC_DIRECT_STORES ||
+        PAYLOAD_STORES.some((entry) => entry.storeId === tableName) ||
+        /^vector_documents(?:_\d+d)?$/.test(tableName) ||
+        tableName === "project_identity_aliases";
+}
+//# sourceMappingURL=registry.js.map

package/dist/services/project-identity/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/services/project-identity/registry.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAgB5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgD;IAC/E,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9E,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9E,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAChF,cAAc,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1F,WAAW,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IACpF,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAClF,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IACtF,kBAAkB,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAClG,iBAAiB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAChG,cAAc,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1F,iBAAiB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAChG,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAClF,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IACtF,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9F,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9E,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAChF,iBAAiB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAChG,iBAAiB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAChG,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IACtF,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9F,aAAa,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;IACxF,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE;IAChG,gFAAgF;IAChF,aAAa,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE;IACzF,2BAA2B,EAAE;QAC3B,OAAO,EAAE,6BAA6B;QACtC,cAAc,EAAE,YAAY;QAC5B,OAAO,EAAE,KAAK;KACf;CACF,CAAC;AAEF,MAAM,cAAc,GAAkC;IACpD,wEAAwE;IACxE,2EAA2E;IAC3E,kEAAkE;IAClE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE;IAClE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/D,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE;IACvE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtE,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC1E,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE;IACvE,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE;CACjE,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,UAA0B;IAE1B,IAAI,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,EAAE,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IAC/E,IAAI,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,SAAS,IAAI,oBAAoB;QACtC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAC3D,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,SAAS,KAAK,0BAA0B,CAAC;AAC7C,CAAC"}

package/dist/services/project-identity/service.d.ts

@@ -0,0 +1,28 @@
+/**
+ * service — production composition of the Core `ProjectIdentityService`
+ * (preview + apply) over the shared pg pool (spec public contract). T5
+ * transports (REST/MCP) consume this factory; tests inject their own
+ * client acquisition.
+ *
+ * Composition defaults match the T4 wiring: production invalidator registry
+ * (five cache invalidators incl. the alias resolver) and the EventBus-backed
+ * best-effort publisher.
+ */
+import { type ProjectIdentityChangedPublisher } from "./apply.js";
+import type { ProjectIdentityService, ProjectIdentityTransactionClient } from "./contracts.js";
+import type { ProjectIdentityInvalidatorRegistry } from "./invalidator-registry.js";
+export interface CreateProjectIdentityServiceOptions {
+    readonly schema?: string;
+    readonly invalidators?: ProjectIdentityInvalidatorRegistry;
+    readonly publisher?: ProjectIdentityChangedPublisher;
+    /** Test seam: custom client acquisition. Defaults to the shared pg pool. */
+    readonly acquireClient?: () => Promise<ProjectIdentityTransactionClient>;
+    readonly releaseClient?: (client: ProjectIdentityTransactionClient) => Promise<void>;
+}
+/**
+ * Build the Core identity service. Preview runs on a short-lived pooled
+ * client (read-only); apply runs through the transactional apply service
+ * with ordered locks, idempotency, and T4 post-commit invalidation/event.
+ */
+export declare function createProjectIdentityService(options?: CreateProjectIdentityServiceOptions): ProjectIdentityService;
+//# sourceMappingURL=service.d.ts.map

package/dist/services/project-identity/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/services/project-identity/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAKV,sBAAsB,EACtB,gCAAgC,EACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAkCpF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,kCAAkC,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,+BAA+B,CAAC;IACrD,4EAA4E;IAC5E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACzE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,gCAAgC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtF;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,mCAAwC,GAChD,sBAAsB,CAyCxB"}

package/dist/services/project-identity/service.js

@@ -0,0 +1,79 @@
+/**
+ * service — production composition of the Core `ProjectIdentityService`
+ * (preview + apply) over the shared pg pool (spec public contract). T5
+ * transports (REST/MCP) consume this factory; tests inject their own
+ * client acquisition.
+ *
+ * Composition defaults match the T4 wiring: production invalidator registry
+ * (five cache invalidators incl. the alias resolver) and the EventBus-backed
+ * best-effort publisher.
+ */
+import { getPgPool } from "../../data/db-connection.js";
+import { createProjectIdentityApplyService, } from "./apply.js";
+import { ProjectIdentityError } from "./errors.js";
+import { ProjectIdentityPreviewPlanner } from "./planner.js";
+import { createEventBusProjectIdentityChangedPublisher, createProductionProjectIdentityInvalidatorRegistry, } from "./production-wiring.js";
+/**
+ * Adapt a raw pg PoolClient to the transaction client contract by issuing
+ * real BEGIN/COMMIT/ROLLBACK statements.
+ */
+function wrapPgClient(client) {
+    return Object.assign(client, {
+        async beginTransaction() {
+            await client.query("BEGIN");
+        },
+        async commitTransaction() {
+            await client.query("COMMIT");
+        },
+        async rollbackTransaction() {
+            await client.query("ROLLBACK");
+        },
+    });
+}
+/**
+ * Build the Core identity service. Preview runs on a short-lived pooled
+ * client (read-only); apply runs through the transactional apply service
+ * with ordered locks, idempotency, and T4 post-commit invalidation/event.
+ */
+export function createProjectIdentityService(options = {}) {
+    const schema = options.schema ?? "public";
+    const acquire = options.acquireClient ??
+        (async () => {
+            const pool = await getPgPool();
+            return wrapPgClient(await pool.connect());
+        });
+    const release = options.releaseClient ??
+        (async (client) => {
+            client.release();
+        });
+    const applyService = createProjectIdentityApplyService(acquire, release, {
+        invalidators: options.invalidators ?? createProductionProjectIdentityInvalidatorRegistry(),
+        publisher: options.publisher ?? createEventBusProjectIdentityChangedPublisher(),
+        schema,
+    });
+    return {
+        async preview(input) {
+            // Acquire inside the typed boundary: a pool/connect failure must surface
+            // as PROJECT_IDENTITY_BACKEND_UNAVAILABLE (503), matching apply (req 9).
+            let client;
+            try {
+                client = await acquire();
+            }
+            catch (error) {
+                if (error instanceof ProjectIdentityError)
+                    throw error;
+                throw new ProjectIdentityError("PROJECT_IDENTITY_BACKEND_UNAVAILABLE", { cause: error });
+            }
+            try {
+                return await new ProjectIdentityPreviewPlanner(client, schema).preview(input);
+            }
+            finally {
+                await release(client);
+            }
+        },
+        apply(input) {
+            return applyService.apply(input);
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/services/project-identity/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/services/project-identity/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EACL,iCAAiC,GAElC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAUnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EACL,6CAA6C,EAC7C,kDAAkD,GACnD,MAAM,wBAAwB,CAAC;AAWhC;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAoB;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QAC3B,KAAK,CAAC,gBAAgB;YACpB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,iBAAiB;YACrB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,mBAAmB;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;KACF,CAAoD,CAAC;AACxD,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAA+C,EAAE;IAEjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC1C,MAAM,OAAO,GACX,OAAO,CAAC,aAAa;QACrB,CAAC,KAAK,IAAI,EAAE;YACV,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;YAC/B,OAAO,YAAY,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GACX,OAAO,CAAC,aAAa;QACrB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,MAAkC,CAAC,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;IAEL,MAAM,YAAY,GAAG,iCAAiC,CAAC,OAAO,EAAE,OAAO,EAAE;QACvE,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,kDAAkD,EAAE;QAC1F,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,6CAA6C,EAAE;QAC/E,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAkC;YAC9C,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,MAAwC,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB;oBAAE,MAAM,KAAK,CAAC;gBACvD,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChF,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAgC;YACpC,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/query/prisma-client.d.ts

@@ -0,0 +1,10 @@
+import { PrismaClient } from "../../generated/prisma/index.js";
+/** @internal test seam for adapter-load failures. */
+export declare const _adapters: {
+    loadPg(): typeof import("pg");
+    loadPrismaPg(): typeof import("@prisma/adapter-pg");
+};
+export declare function _resetPrismaForTesting(): void;
+export declare function getPrismaClient(): PrismaClient;
+export declare function disconnectPrisma(): Promise<void>;
+//# sourceMappingURL=prisma-client.d.ts.map