@nicia-ai/typegraph 0.26.0 → 0.28.0

package/dist/{chunk-4TJI44WP.cjs → chunk-ZGEMI7MJ.cjs}

@@ -2362,10 +2362,7 @@ function parseSerializedSchema(json) {
 }
 async function loadActiveSchemaWithBootstrap(backend, graphId) {
   try {
-    const row = await backend.getActiveSchema(graphId);
-    const ensureRuntime = backend.ensureRuntimeContributions ? backend.ensureRuntimeContributions(graphId) : backend.ensureFulltextTable?.(graphId);
-    await ensureRuntime;
-    return row;
+    return await backend.getActiveSchema(graphId);
   } catch (error) {
     if (backend.bootstrapTables && chunkIUIWCFG3_cjs.isMissingTableError(error)) {
       await backend.bootstrapTables();
@@ -2379,11 +2376,17 @@ async function loadAndMergeGraphExtensionDocument(backend, graph) {
   if (activeRow === void 0) {
     return { graph, activeRow: void 0, storedSchema: void 0 };
   }
+  const { graph: merged, storedSchema } = mergeStoredGraphExtension(
+    graph,
+    activeRow
+  );
+  return { graph: merged, activeRow, storedSchema };
+}
+function mergeStoredGraphExtension(graph, activeRow) {
   const storedSchema = parseSerializedSchema(activeRow.schema_doc);
   const merged = storedSchema.extension === void 0 ? graph : mergeGraphExtension(graph, storedSchema.extension);
   return {
     graph: applyDeprecatedKinds(merged, storedSchema.deprecatedKinds),
-    activeRow,
     storedSchema
   };
 }
@@ -2466,6 +2469,69 @@ async function ensureSchema(backend, graph, options) {
   }
   return { status: "breaking", diff, actions };
 }
+async function loadAndVerifyGraph(backend, graph) {
+  const activeRow = await readActiveSchemaPure(backend, graph.id);
+  const { graph: merged, storedSchema } = mergeStoredGraphExtension(
+    graph,
+    activeRow
+  );
+  const storedHash = activeRow.schema_hash;
+  const currentHash = await getSchemaHash(merged, activeRow.version + 1);
+  if (storedHash !== currentHash) {
+    const currentSchema = serializeSchema(merged, activeRow.version + 1);
+    const diff = computeSchemaDiff(storedSchema, currentSchema);
+    if (diff.hasChanges) {
+      throw schemaBehindError(merged.id, activeRow.version, diff);
+    }
+  }
+  await backend.assertRuntimeContributionsInitialized?.(merged.id);
+  return {
+    graph: merged,
+    activeRow,
+    result: { status: "unchanged", version: activeRow.version }
+  };
+}
+function schemaBehindError(graphId, fromVersion, diff) {
+  const actions = getMigrationActions(diff);
+  const qualifier = isBackwardsCompatible(diff) ? "safe auto-migration" : "breaking change";
+  return new chunkYEDQLNVE_cjs.MigrationError(
+    `Schema verification failed for graph "${graphId}": ${diff.summary} (${qualifier}). ${actions.length} migration action(s) needed. The least-privilege runtime cannot migrate \u2014 run createStoreWithSchema(graph, adminBackend) under a privileged role (after any generated migration SQL, if you manage DDL externally) before attaching with createStore() / createVerifiedStore().`,
+    {
+      graphId,
+      fromVersion,
+      toVersion: fromVersion + 1
+    }
+  );
+}
+async function assertSchemaCurrent(backend, graph) {
+  const { result } = await loadAndVerifyGraph(backend, graph);
+  return result;
+}
+async function readActiveSchemaPure(backend, graphId) {
+  let activeRow;
+  try {
+    activeRow = await backend.getActiveSchema(graphId);
+  } catch (error) {
+    if (chunkIUIWCFG3_cjs.isMissingTableError(error)) {
+      throw schemaNotInitializedError(graphId, error);
+    }
+    throw error;
+  }
+  if (activeRow === void 0) {
+    throw schemaNotInitializedError(graphId);
+  }
+  return activeRow;
+}
+function schemaNotInitializedError(graphId, cause) {
+  return new chunkYEDQLNVE_cjs.ConfigurationError(
+    `Cannot verify graph "${graphId}": no schema has been initialized. Run createStoreWithSchema(graph, adminBackend) once under a privileged role (which commits the schema_versions row and materializes contribution markers) before attaching with createStore() / createVerifiedStore(). Generated migration SQL creates the tables but does not initialize the schema row.`,
+    { graphId },
+    {
+      cause,
+      suggestion: "Run createStoreWithSchema(graph, adminBackend) once under a privileged role. If you manage DDL externally with drizzle-kit / generatePostgresMigrationSQL / generateSqliteMigrationSQL, apply that first, then still run createStoreWithSchema to commit the schema row and contribution markers."
+    }
+  );
+}
 async function initializeSchema(backend, graph) {
   const schema = serializeSchema(graph, 1);
   const hash = await computeSchemaHash(schema);
@@ -2603,6 +2669,7 @@ function createValidationError(message, issues, context) {
 exports.KindRegistry = KindRegistry;
 exports.META_EDGE_BRAND = META_EDGE_BRAND;
 exports.applyDeprecatedKinds = applyDeprecatedKinds;
+exports.assertSchemaCurrent = assertSchemaCurrent;
 exports.broader = broader;
 exports.buildGraphExtensionOntologyKeySet = buildGraphExtensionOntologyKeySet;
 exports.commitNewSchemaVersion = commitNewSchemaVersion;
@@ -2634,6 +2701,7 @@ exports.isMetaEdge = isMetaEdge;
 exports.isSchemaInitialized = isSchemaInitialized;
 exports.loadActiveSchemaWithBootstrap = loadActiveSchemaWithBootstrap;
 exports.loadAndMergeGraphExtensionDocument = loadAndMergeGraphExtensionDocument;
+exports.loadAndVerifyGraph = loadAndVerifyGraph;
 exports.mergeGraphExtension = mergeGraphExtension;
 exports.migrateSchema = migrateSchema;
 exports.narrower = narrower;
@@ -2649,5 +2717,5 @@ exports.validateEdgeProps = validateEdgeProps;
 exports.validateNodeProps = validateNodeProps;
 exports.validateProps = validateProps;
 exports.wrapZodError = wrapZodError;
-//# sourceMappingURL=chunk-4TJI44WP.cjs.map
-//# sourceMappingURL=chunk-4TJI44WP.cjs.map
+//# sourceMappingURL=chunk-ZGEMI7MJ.cjs.map
+//# sourceMappingURL=chunk-ZGEMI7MJ.cjs.map