@nicia-ai/typegraph 0.44.0 → 0.46.0

package/dist/{index-By89Sezh.d.ts → index-BSHvKfok.d.ts}

@@ -1,5 +1,5 @@
-import { K as KindEntity } from './types-Cjvkj0jA.js';
-import { M as MaterializeIndexesResult, S as SchemaDiff } from './materialize-indexes-BD4V3svD.js';
+import { K as KindEntity } from './types-HkveCCx0.js';
+import { M as MaterializeIndexesResult, S as SchemaDiff } from './materialize-indexes-BMJP6Tms.js';
 
 /**
  * TypeGraph Error Hierarchy
@@ -81,7 +81,66 @@ type ValidationIssue = Readonly<{
     message: string;
     /** Zod error code if from Zod validation */
     code?: string;
+    /**
+     * The identity assertion the issue is about, carried structurally so
+     * consumers (e.g. interchange import error reporting) never have to parse
+     * the human-readable message for it.
+     */
+    assertionId?: string;
 }>;
+/**
+ * The stable {@link ValidationIssue.code} every inverted-validity-window
+ * refusal carries, so a caller can recognize that specific failure without
+ * matching on the message. `ValidationError`'s own code is the family-wide
+ * `VALIDATION_ERROR`, so the discriminator lives on the issue — mirroring the
+ * identity-import window refusal (`IDENTITY_IMPORT_INVALID_WINDOW`).
+ *
+ * A write carrying it was refused because `validTo` precedes the row's
+ * effective `validFrom`: the row would have stopped being true before it
+ * started, observable at no `asOf` coordinate at all. Zero-width windows
+ * (`validTo === validFrom`) are legal and never raise it.
+ */
+declare const INVERTED_VALIDITY_WINDOW_CODE = "INVERTED_VALIDITY_WINDOW";
+/**
+ * The stable {@link ValidationIssue.code} carried by a refusal to accept a
+ * `validFrom` the write cannot apply: the target row is LIVE, and an in-place
+ * update never rewrites a live row's lower bound — that bound is history.
+ * `ValidationError`'s own code is the family-wide `VALIDATION_ERROR`, so the
+ * discriminator lives on the issue — mirroring
+ * {@link INVERTED_VALIDITY_WINDOW_CODE}.
+ *
+ * Only a bound naming a DIFFERENT instant than the row already stores raises it.
+ * Restating the stored bound is legal and writes nothing new, and a resurrection
+ * — which does rewrite `valid_from` — applies a stated bound rather than
+ * refusing it.
+ *
+ * The message names both instants: the one stated and the one the row stores, so
+ * the caller can restate the stored bound without a second read.
+ */
+declare const IMMUTABLE_VALIDITY_LOWER_BOUND_CODE = "IMMUTABLE_VALIDITY_LOWER_BOUND";
+/**
+ * Stable {@link ValidationIssue.code} for an edge-id ownership mismatch.
+ *
+ * Edge ids are graph-global. A collection-scoped write therefore has to prove
+ * that the stored row has the collection's kind and, when the caller supplies
+ * endpoints, the same immutable endpoints. This refusal prevents a collection
+ * from mutating another kind's row and prevents an upsert from silently
+ * ignoring an attempted repoint.
+ */
+declare const EDGE_IDENTITY_MISMATCH_CODE = "EDGE_IDENTITY_MISMATCH";
+/**
+ * The stable {@link ValidationIssue.code} every "this id is already taken"
+ * create refusal carries, whichever way the create found out: its own existence
+ * probe, or the engine refusing the INSERT. `ValidationError`'s own code is the
+ * family-wide `VALIDATION_ERROR`, so the discriminator lives on the issue —
+ * mirroring {@link INVERTED_VALIDITY_WINDOW_CODE}.
+ *
+ * `details.entityType` says whether a node or an edge was refused and
+ * `details.kind` names its kind. `details.id` names the taken id, and is absent
+ * only when the refused statement inserted MORE THAN ONE row: the engine reports
+ * that the statement collided without saying which row did.
+ */
+declare const ENTITY_ALREADY_EXISTS_CODE = "ENTITY_ALREADY_EXISTS";
 /**
  * Details for ValidationError.
  */
@@ -91,7 +150,7 @@ type ValidationErrorDetails = Readonly<{
     /** Kind/type name of the entity */
     kind?: string;
     /** Operation being performed */
-    operation?: "create" | "update";
+    operation?: "create" | "update" | "delete" | "hardDelete";
     /** Entity ID if updating */
     id?: string;
     /** Individual validation issues */
@@ -315,6 +374,71 @@ declare class DisjointError extends TypeGraphError {
         cause?: unknown;
     });
 }
+type IdentityContradictionErrorDetails = Readonly<{
+    /**
+     * The identity write that could not stand. `merge` is the post-write
+     * affected-class assertion a graph merge runs inside its commit
+     * transaction, which names the whole merge rather than a single assertion
+     * because the contradiction is a property of the state the merge would
+     * leave behind.
+     */
+    operation: "assertSame" | "assertDifferent" | "fold" | "import" | "merge";
+    a: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+    b: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+    reason: "different-assertion" | "same-class" | "disjoint-kinds";
+    conflictingAssertionId?: string;
+    conflictingKinds?: readonly [string, string];
+}>;
+/** Thrown when an identity mutation would make the ledger contradictory. */
+declare class IdentityContradictionError extends TypeGraphError {
+    readonly details: IdentityContradictionErrorDetails;
+    constructor(details: IdentityContradictionErrorDetails, options?: Readonly<{
+        cause?: unknown;
+    }>);
+}
+type IdentitySeparationViolationErrorDetails = Readonly<{
+    graphId: string;
+    /**
+     * `"database"` when the CHECK constraint on the separation relation aborted
+     * the write — the backstop firing as designed. `"writer"` when the write was
+     * accepted, which means the relation was provisioned without its constraint
+     * and only the writer's own re-check caught the contradiction.
+     */
+    enforcedBy: "database" | "writer";
+    /** The single class key both endpoints collapsed onto. */
+    classKey: string;
+    /** The `different` assertion whose endpoints landed in one class. */
+    assertionId: string;
+    a: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+    b: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+}>;
+/**
+ * Thrown when the derived separation relation refuses a write that would place
+ * both endpoints of a current `different` assertion in one identity class.
+ *
+ * This is the database-level backstop beneath the plan-time simulation and the
+ * applier's validation. Reaching it means an earlier layer let a contradiction
+ * through: the transaction is aborted rather than committed, but the layer that
+ * should have refused it typed and early is worth investigating.
+ */
+declare class IdentitySeparationViolationError extends TypeGraphError {
+    readonly details: IdentitySeparationViolationErrorDetails;
+    constructor(details: IdentitySeparationViolationErrorDetails, options?: Readonly<{
+        cause?: unknown;
+    }>);
+}
 /**
  * Details for RestrictedDeleteError.
  */
@@ -486,8 +610,12 @@ declare class EagerMaterializationError extends TypeGraphError {
     get failedIndexNames(): readonly string[];
 }
 /**
- * Details for StaleVersionError. `actual` is `0` when no active version
- * exists yet (initial-commit race where another writer initialized first).
+ * Details for StaleVersionError. `actual` is the active version the rejecting
+ * read observed, and is `0` only when the graph genuinely has no active version
+ * (an initial-commit race where another writer initialized first, or a graph
+ * whose schema rows were removed out of band). A concurrent advance always
+ * reports the newly active version, so `0` is a reliable signal of absence
+ * rather than of contention.
  */
 type StaleVersionErrorDetails = Readonly<{
     graphId: string;
@@ -495,9 +623,10 @@ type StaleVersionErrorDetails = Readonly<{
     actual: number;
 }>;
 /**
- * Thrown by `commitSchemaVersion` and `setActiveVersion` when the
- * caller's view of the active schema version is out of date — another
- * writer has already advanced it.
+ * Thrown by `commitSchemaVersion`, `setActiveVersion`, and the schema write
+ * fence a schema-managed Store write takes, when the caller's view of the
+ * active schema version is out of date — another writer has already advanced
+ * it.
  *
  * Recovery: re-read the active version with `getActiveSchema(graphId)`,
  * recompute against the new baseline, and retry. This is a routine
@@ -546,6 +675,49 @@ declare class ConfigurationError extends TypeGraphError {
         suggestion?: string;
     });
 }
+/**
+ * Why a destructive contribution rebuild is refused.
+ *
+ * - `vector-source-unavailable` — the projection is vector storage.
+ *   TypeGraph stores caller-supplied embeddings and nothing else: the
+ *   vectors exist only in the table a rebuild would drop, so there is no
+ *   source to reconstruct them from. Dropping anyway would silently
+ *   destroy the embeddings and hand back storage that looks healthy and
+ *   returns nothing. `store.reembedVectorField(kind, fieldPath, {
+ *   embed })` is the sanctioned destructive path — it takes the callback
+ *   that can regenerate what the drop destroys.
+ * - `no-drop-ddl` — the active strategy declares no `dropDdl` for the
+ *   contribution, so TypeGraph does not know how to tear its storage
+ *   down. Synthesizing a `DROP TABLE` from the resolved name would
+ *   guess at a teardown the strategy never sanctioned.
+ * - `no-schema-fence` — the backend exposes no transactional schema
+ *   fence (`schemaWriteTransaction`), so the drop, recreate, refill, and
+ *   stamp could not be made atomic. Running them unfenced could leave
+ *   storage attested but empty, or a concurrent schema writer
+ *   interleaved with the drop.
+ * - `shared-storage-in-use` — the contribution's recorded shape is stale,
+ *   so only recreating its storage repairs it, but that storage is one
+ *   table holding other graphs' rows as well. Their content is derived
+ *   from their own nodes through their own schemas, so this process cannot
+ *   put it back. A rebuild that dropped anyway would leave every other
+ *   graph's search silently empty; one that re-stamped this graph's marker
+ *   without the drop would bless a physical shape nothing verified.
+ */
+type ContributionRebuildRefusal = "vector-source-unavailable" | "no-drop-ddl" | "no-schema-fence" | "shared-storage-in-use";
+/**
+ * Thrown when `store.rebuildContribution()` cannot honor a rebuild.
+ *
+ * A refusal, never a partial attempt: nothing has been dropped when this
+ * throws. The point is that the alternative — proceeding — destroys data
+ * that cannot be reconstructed, so the operation declines instead of
+ * quietly doing less than its name promises.
+ */
+declare class ContributionRebuildUnsupportedError extends TypeGraphError {
+    readonly reason: ContributionRebuildRefusal;
+    constructor(reason: ContributionRebuildRefusal, details?: Readonly<Record<string, unknown>>, options?: {
+        cause?: unknown;
+    });
+}
 /**
  * Thrown when an iterative graph algorithm exhausts its caller-visible round
  * budget before reaching its convergence predicate.
@@ -585,7 +757,7 @@ declare class UnsupportedBackendCapabilityError extends TypeGraphError {
     constructor(operation: string, capability: string, details?: Readonly<Record<string, unknown>>, suggestion?: string);
 }
 /** Stable reasons an intentionally trusted initial import can be rejected. */
-type TrustedImportErrorReason = "backend_unsupported" | "database_not_empty" | "fulltext_unsupported" | "history_unsupported" | "invalid_stream" | "revision_tracking_unsupported" | "uniqueness_unsupported" | "vector_unsupported";
+type TrustedImportErrorReason = "backend_unsupported" | "database_not_empty" | "fulltext_unsupported" | "history_unsupported" | "identity_unsupported" | "invalid_stream" | "revision_tracking_unsupported" | "uniqueness_unsupported" | "vector_unsupported";
 /** Thrown when the trusted initial-import contract is unavailable or violated. */
 declare class TrustedImportError extends TypeGraphError {
     constructor(message: string, reason: TrustedImportErrorReason, details?: Readonly<Record<string, unknown>>, options?: Readonly<{
@@ -593,6 +765,26 @@ declare class TrustedImportError extends TypeGraphError {
         suggestion?: string;
     }>);
 }
+/**
+ * Thrown to a graph export stream's consumer when the caller's `AbortSignal`
+ * settled the stream instead of it reaching its end.
+ *
+ * Raised only after the export has given back everything it took, so receiving
+ * it means the connection is already usable again. WHAT it took depends on the
+ * backend: an export on one reporting `capabilities.transactions` holds a
+ * repeatable-read snapshot (and, on a serialized connection, that connection's
+ * stream lease), and both are settled before this is thrown; an export on a
+ * backend without transactions holds neither, and its remaining reads are
+ * simply abandoned — its already-delivered chunks were never one snapshot to
+ * begin with. The message says which case applies. `cause` carries the signal's
+ * own `reason` when the caller supplied one.
+ */
+declare class ExportStreamCancelledError extends TypeGraphError {
+    constructor(message: string, details?: Readonly<Record<string, unknown>>, options?: Readonly<{
+        cause?: unknown;
+        suggestion?: string;
+    }>);
+}
 /**
  * The stable `details.code` values raised by the recorded-capture guards on a
  * history- or revision-tracked store. These are the sanctioned branch points
@@ -710,6 +902,25 @@ declare class StoreNotInitializedError extends TypeGraphError {
 type DatabaseOperationErrorDetails = Readonly<{
     operation: string;
     entity: string;
+    /**
+     * `"duplicate_key"` means the engine refused the write because the entity's
+     * identity is already taken — the shape a concurrent create of the same new id
+     * produces on an engine that does not serialize the two writers. It is a
+     * *classified* driver failure, so callers that own a better error for the
+     * condition (the create paths, which report it as "already exists") translate
+     * it rather than surfacing it.
+     */
+    reason?: "no_row_returned" | "duplicate_key";
+    /**
+     * The entities the failed statement tried to insert, carried structurally so a
+     * translating caller never has to parse the driver's message for them. One
+     * element for a single insert; for a batch, every row in the failing chunk —
+     * the engine reports the collision without saying which row lost.
+     */
+    attempted?: readonly Readonly<{
+        kind: string;
+        id: string;
+    }>[];
 }>;
 /**
  * Thrown when a database operation fails unexpectedly.
@@ -857,4 +1068,4 @@ declare function isConstraintError(error: unknown): boolean;
  */
 declare function getErrorSuggestion(error: unknown): string | undefined;
 
-export { TrustedImportError as $, NodeNotFoundError as A, BackendDisposedError as B, CardinalityError as C, DatabaseOperationError as D, EagerMaterializationError as E, type NodeNotFoundErrorDetails as F, GraphAlgorithmConvergenceError as G, type RecordedCaptureGuardCode as H, InvalidEdgeWeightError as I, type RecordedCaptureGuardError as J, KindNotFoundError as K, RestrictedDeleteError as L, MIGRATION_FAILURE_REASONS as M, NodeConstraintNotFoundError as N, type RestrictedDeleteErrorDetails as O, type SchemaContentConflictErrorDetails as P, SchemaMismatchError as Q, RECORDED_CAPTURE_GUARD_CODES as R, SchemaContentConflictError as S, type SchemaMismatchErrorDetails as T, StaleVersionError as U, type ValidationIssue as V, type StaleVersionErrorDetails as W, StoreNotInitializedError as X, type StoreNotInitializedErrorDetails as Y, type StoreNotInitializedReason as Z, TransactionClosedError as _, ValidationError as a, type TrustedImportErrorReason as a0, TypeGraphError as a1, type TypeGraphErrorOptions as a2, UniquenessError as a3, type UniquenessErrorDetails as a4, UnsupportedBackendCapabilityError as a5, UnsupportedPredicateError as a6, type ValidationErrorDetails as a7, VersionConflictError as a8, type VersionConflictErrorDetails as a9, getErrorSuggestion as aa, isConstraintError as ab, isRecordedCaptureGuardError as ac, isSystemError as ad, isTypeGraphError as ae, isUserRecoverable as af, type CardinalityErrorDetails as b, CompilerInvariantError as c, ConfigurationError as d, type DatabaseOperationErrorDetails as e, DisjointError as f, type DisjointErrorDetails as g, type EagerMaterializationErrorDetails as h, EdgeNotFoundError as i, type EdgeNotFoundErrorDetails as j, EmbeddingDimensionChangedError as k, type EmbeddingDimensionChangedErrorDetails as l, EndpointError as m, type EndpointErrorDetails as n, EndpointNotFoundError as o, type EndpointNotFoundErrorDetails as p, type ErrorCategory as q, type InvalidEdgeWeightErrorDetails as r, type InvalidEdgeWeightReason as s, type KindNotFoundErrorDetails as t, MigrationError as u, type MigrationErrorDetails as v, type MigrationFailureReason as w, type NodeConstraintNotFoundErrorDetails as x, NodeIndexNotFoundError as y, type NodeIndexNotFoundErrorDetails as z };
+export { type RecordedCaptureGuardError as $, IdentitySeparationViolationError as A, BackendDisposedError as B, CardinalityError as C, DatabaseOperationError as D, EDGE_IDENTITY_MISMATCH_CODE as E, type IdentitySeparationViolationErrorDetails as F, GraphAlgorithmConvergenceError as G, InvalidEdgeWeightError as H, IMMUTABLE_VALIDITY_LOWER_BOUND_CODE as I, type InvalidEdgeWeightErrorDetails as J, type InvalidEdgeWeightReason as K, KindNotFoundError as L, type KindNotFoundErrorDetails as M, MIGRATION_FAILURE_REASONS as N, MigrationError as O, type MigrationErrorDetails as P, type MigrationFailureReason as Q, NodeConstraintNotFoundError as R, type NodeConstraintNotFoundErrorDetails as S, TypeGraphError as T, NodeIndexNotFoundError as U, type ValidationIssue as V, type NodeIndexNotFoundErrorDetails as W, NodeNotFoundError as X, type NodeNotFoundErrorDetails as Y, RECORDED_CAPTURE_GUARD_CODES as Z, type RecordedCaptureGuardCode as _, ValidationError as a, RestrictedDeleteError as a0, type RestrictedDeleteErrorDetails as a1, SchemaContentConflictError as a2, type SchemaContentConflictErrorDetails as a3, SchemaMismatchError as a4, type SchemaMismatchErrorDetails as a5, StaleVersionError as a6, type StaleVersionErrorDetails as a7, StoreNotInitializedError as a8, type StoreNotInitializedErrorDetails as a9, type StoreNotInitializedReason as aa, TransactionClosedError as ab, TrustedImportError as ac, type TrustedImportErrorReason as ad, UniquenessError as ae, type UniquenessErrorDetails as af, UnsupportedBackendCapabilityError as ag, UnsupportedPredicateError as ah, type ValidationErrorDetails as ai, VersionConflictError as aj, type VersionConflictErrorDetails as ak, getErrorSuggestion as al, isConstraintError as am, isRecordedCaptureGuardError as an, isSystemError as ao, isTypeGraphError as ap, isUserRecoverable as aq, type TypeGraphErrorOptions as b, type CardinalityErrorDetails as c, CompilerInvariantError as d, ConfigurationError as e, type ContributionRebuildRefusal as f, ContributionRebuildUnsupportedError as g, type DatabaseOperationErrorDetails as h, DisjointError as i, type DisjointErrorDetails as j, ENTITY_ALREADY_EXISTS_CODE as k, EagerMaterializationError as l, type EagerMaterializationErrorDetails as m, EdgeNotFoundError as n, type EdgeNotFoundErrorDetails as o, EmbeddingDimensionChangedError as p, type EmbeddingDimensionChangedErrorDetails as q, EndpointError as r, type EndpointErrorDetails as s, EndpointNotFoundError as t, type EndpointNotFoundErrorDetails as u, type ErrorCategory as v, ExportStreamCancelledError as w, INVERTED_VALIDITY_WINDOW_CODE as x, IdentityContradictionError as y, type IdentityContradictionErrorDetails as z };

package/dist/{index-DcQ3Sxs-.d.cts → index-DxaYCv8Y.d.cts}

@@ -1,5 +1,5 @@
-import { K as KindEntity } from './types-Cjvkj0jA.cjs';
-import { M as MaterializeIndexesResult, S as SchemaDiff } from './materialize-indexes-DVRhd5h4.cjs';
+import { K as KindEntity } from './types-HkveCCx0.cjs';
+import { M as MaterializeIndexesResult, S as SchemaDiff } from './materialize-indexes-6A7dWGtb.cjs';
 
 /**
  * TypeGraph Error Hierarchy
@@ -81,7 +81,66 @@ type ValidationIssue = Readonly<{
     message: string;
     /** Zod error code if from Zod validation */
     code?: string;
+    /**
+     * The identity assertion the issue is about, carried structurally so
+     * consumers (e.g. interchange import error reporting) never have to parse
+     * the human-readable message for it.
+     */
+    assertionId?: string;
 }>;
+/**
+ * The stable {@link ValidationIssue.code} every inverted-validity-window
+ * refusal carries, so a caller can recognize that specific failure without
+ * matching on the message. `ValidationError`'s own code is the family-wide
+ * `VALIDATION_ERROR`, so the discriminator lives on the issue — mirroring the
+ * identity-import window refusal (`IDENTITY_IMPORT_INVALID_WINDOW`).
+ *
+ * A write carrying it was refused because `validTo` precedes the row's
+ * effective `validFrom`: the row would have stopped being true before it
+ * started, observable at no `asOf` coordinate at all. Zero-width windows
+ * (`validTo === validFrom`) are legal and never raise it.
+ */
+declare const INVERTED_VALIDITY_WINDOW_CODE = "INVERTED_VALIDITY_WINDOW";
+/**
+ * The stable {@link ValidationIssue.code} carried by a refusal to accept a
+ * `validFrom` the write cannot apply: the target row is LIVE, and an in-place
+ * update never rewrites a live row's lower bound — that bound is history.
+ * `ValidationError`'s own code is the family-wide `VALIDATION_ERROR`, so the
+ * discriminator lives on the issue — mirroring
+ * {@link INVERTED_VALIDITY_WINDOW_CODE}.
+ *
+ * Only a bound naming a DIFFERENT instant than the row already stores raises it.
+ * Restating the stored bound is legal and writes nothing new, and a resurrection
+ * — which does rewrite `valid_from` — applies a stated bound rather than
+ * refusing it.
+ *
+ * The message names both instants: the one stated and the one the row stores, so
+ * the caller can restate the stored bound without a second read.
+ */
+declare const IMMUTABLE_VALIDITY_LOWER_BOUND_CODE = "IMMUTABLE_VALIDITY_LOWER_BOUND";
+/**
+ * Stable {@link ValidationIssue.code} for an edge-id ownership mismatch.
+ *
+ * Edge ids are graph-global. A collection-scoped write therefore has to prove
+ * that the stored row has the collection's kind and, when the caller supplies
+ * endpoints, the same immutable endpoints. This refusal prevents a collection
+ * from mutating another kind's row and prevents an upsert from silently
+ * ignoring an attempted repoint.
+ */
+declare const EDGE_IDENTITY_MISMATCH_CODE = "EDGE_IDENTITY_MISMATCH";
+/**
+ * The stable {@link ValidationIssue.code} every "this id is already taken"
+ * create refusal carries, whichever way the create found out: its own existence
+ * probe, or the engine refusing the INSERT. `ValidationError`'s own code is the
+ * family-wide `VALIDATION_ERROR`, so the discriminator lives on the issue —
+ * mirroring {@link INVERTED_VALIDITY_WINDOW_CODE}.
+ *
+ * `details.entityType` says whether a node or an edge was refused and
+ * `details.kind` names its kind. `details.id` names the taken id, and is absent
+ * only when the refused statement inserted MORE THAN ONE row: the engine reports
+ * that the statement collided without saying which row did.
+ */
+declare const ENTITY_ALREADY_EXISTS_CODE = "ENTITY_ALREADY_EXISTS";
 /**
  * Details for ValidationError.
  */
@@ -91,7 +150,7 @@ type ValidationErrorDetails = Readonly<{
     /** Kind/type name of the entity */
     kind?: string;
     /** Operation being performed */
-    operation?: "create" | "update";
+    operation?: "create" | "update" | "delete" | "hardDelete";
     /** Entity ID if updating */
     id?: string;
     /** Individual validation issues */
@@ -315,6 +374,71 @@ declare class DisjointError extends TypeGraphError {
         cause?: unknown;
     });
 }
+type IdentityContradictionErrorDetails = Readonly<{
+    /**
+     * The identity write that could not stand. `merge` is the post-write
+     * affected-class assertion a graph merge runs inside its commit
+     * transaction, which names the whole merge rather than a single assertion
+     * because the contradiction is a property of the state the merge would
+     * leave behind.
+     */
+    operation: "assertSame" | "assertDifferent" | "fold" | "import" | "merge";
+    a: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+    b: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+    reason: "different-assertion" | "same-class" | "disjoint-kinds";
+    conflictingAssertionId?: string;
+    conflictingKinds?: readonly [string, string];
+}>;
+/** Thrown when an identity mutation would make the ledger contradictory. */
+declare class IdentityContradictionError extends TypeGraphError {
+    readonly details: IdentityContradictionErrorDetails;
+    constructor(details: IdentityContradictionErrorDetails, options?: Readonly<{
+        cause?: unknown;
+    }>);
+}
+type IdentitySeparationViolationErrorDetails = Readonly<{
+    graphId: string;
+    /**
+     * `"database"` when the CHECK constraint on the separation relation aborted
+     * the write — the backstop firing as designed. `"writer"` when the write was
+     * accepted, which means the relation was provisioned without its constraint
+     * and only the writer's own re-check caught the contradiction.
+     */
+    enforcedBy: "database" | "writer";
+    /** The single class key both endpoints collapsed onto. */
+    classKey: string;
+    /** The `different` assertion whose endpoints landed in one class. */
+    assertionId: string;
+    a: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+    b: Readonly<{
+        kind: string;
+        id: string;
+    }>;
+}>;
+/**
+ * Thrown when the derived separation relation refuses a write that would place
+ * both endpoints of a current `different` assertion in one identity class.
+ *
+ * This is the database-level backstop beneath the plan-time simulation and the
+ * applier's validation. Reaching it means an earlier layer let a contradiction
+ * through: the transaction is aborted rather than committed, but the layer that
+ * should have refused it typed and early is worth investigating.
+ */
+declare class IdentitySeparationViolationError extends TypeGraphError {
+    readonly details: IdentitySeparationViolationErrorDetails;
+    constructor(details: IdentitySeparationViolationErrorDetails, options?: Readonly<{
+        cause?: unknown;
+    }>);
+}
 /**
  * Details for RestrictedDeleteError.
  */
@@ -486,8 +610,12 @@ declare class EagerMaterializationError extends TypeGraphError {
     get failedIndexNames(): readonly string[];
 }
 /**
- * Details for StaleVersionError. `actual` is `0` when no active version
- * exists yet (initial-commit race where another writer initialized first).
+ * Details for StaleVersionError. `actual` is the active version the rejecting
+ * read observed, and is `0` only when the graph genuinely has no active version
+ * (an initial-commit race where another writer initialized first, or a graph
+ * whose schema rows were removed out of band). A concurrent advance always
+ * reports the newly active version, so `0` is a reliable signal of absence
+ * rather than of contention.
  */
 type StaleVersionErrorDetails = Readonly<{
     graphId: string;
@@ -495,9 +623,10 @@ type StaleVersionErrorDetails = Readonly<{
     actual: number;
 }>;
 /**
- * Thrown by `commitSchemaVersion` and `setActiveVersion` when the
- * caller's view of the active schema version is out of date — another
- * writer has already advanced it.
+ * Thrown by `commitSchemaVersion`, `setActiveVersion`, and the schema write
+ * fence a schema-managed Store write takes, when the caller's view of the
+ * active schema version is out of date — another writer has already advanced
+ * it.
  *
  * Recovery: re-read the active version with `getActiveSchema(graphId)`,
  * recompute against the new baseline, and retry. This is a routine
@@ -546,6 +675,49 @@ declare class ConfigurationError extends TypeGraphError {
         suggestion?: string;
     });
 }
+/**
+ * Why a destructive contribution rebuild is refused.
+ *
+ * - `vector-source-unavailable` — the projection is vector storage.
+ *   TypeGraph stores caller-supplied embeddings and nothing else: the
+ *   vectors exist only in the table a rebuild would drop, so there is no
+ *   source to reconstruct them from. Dropping anyway would silently
+ *   destroy the embeddings and hand back storage that looks healthy and
+ *   returns nothing. `store.reembedVectorField(kind, fieldPath, {
+ *   embed })` is the sanctioned destructive path — it takes the callback
+ *   that can regenerate what the drop destroys.
+ * - `no-drop-ddl` — the active strategy declares no `dropDdl` for the
+ *   contribution, so TypeGraph does not know how to tear its storage
+ *   down. Synthesizing a `DROP TABLE` from the resolved name would
+ *   guess at a teardown the strategy never sanctioned.
+ * - `no-schema-fence` — the backend exposes no transactional schema
+ *   fence (`schemaWriteTransaction`), so the drop, recreate, refill, and
+ *   stamp could not be made atomic. Running them unfenced could leave
+ *   storage attested but empty, or a concurrent schema writer
+ *   interleaved with the drop.
+ * - `shared-storage-in-use` — the contribution's recorded shape is stale,
+ *   so only recreating its storage repairs it, but that storage is one
+ *   table holding other graphs' rows as well. Their content is derived
+ *   from their own nodes through their own schemas, so this process cannot
+ *   put it back. A rebuild that dropped anyway would leave every other
+ *   graph's search silently empty; one that re-stamped this graph's marker
+ *   without the drop would bless a physical shape nothing verified.
+ */
+type ContributionRebuildRefusal = "vector-source-unavailable" | "no-drop-ddl" | "no-schema-fence" | "shared-storage-in-use";
+/**
+ * Thrown when `store.rebuildContribution()` cannot honor a rebuild.
+ *
+ * A refusal, never a partial attempt: nothing has been dropped when this
+ * throws. The point is that the alternative — proceeding — destroys data
+ * that cannot be reconstructed, so the operation declines instead of
+ * quietly doing less than its name promises.
+ */
+declare class ContributionRebuildUnsupportedError extends TypeGraphError {
+    readonly reason: ContributionRebuildRefusal;
+    constructor(reason: ContributionRebuildRefusal, details?: Readonly<Record<string, unknown>>, options?: {
+        cause?: unknown;
+    });
+}
 /**
  * Thrown when an iterative graph algorithm exhausts its caller-visible round
  * budget before reaching its convergence predicate.
@@ -585,7 +757,7 @@ declare class UnsupportedBackendCapabilityError extends TypeGraphError {
     constructor(operation: string, capability: string, details?: Readonly<Record<string, unknown>>, suggestion?: string);
 }
 /** Stable reasons an intentionally trusted initial import can be rejected. */
-type TrustedImportErrorReason = "backend_unsupported" | "database_not_empty" | "fulltext_unsupported" | "history_unsupported" | "invalid_stream" | "revision_tracking_unsupported" | "uniqueness_unsupported" | "vector_unsupported";
+type TrustedImportErrorReason = "backend_unsupported" | "database_not_empty" | "fulltext_unsupported" | "history_unsupported" | "identity_unsupported" | "invalid_stream" | "revision_tracking_unsupported" | "uniqueness_unsupported" | "vector_unsupported";
 /** Thrown when the trusted initial-import contract is unavailable or violated. */
 declare class TrustedImportError extends TypeGraphError {
     constructor(message: string, reason: TrustedImportErrorReason, details?: Readonly<Record<string, unknown>>, options?: Readonly<{
@@ -593,6 +765,26 @@ declare class TrustedImportError extends TypeGraphError {
         suggestion?: string;
     }>);
 }
+/**
+ * Thrown to a graph export stream's consumer when the caller's `AbortSignal`
+ * settled the stream instead of it reaching its end.
+ *
+ * Raised only after the export has given back everything it took, so receiving
+ * it means the connection is already usable again. WHAT it took depends on the
+ * backend: an export on one reporting `capabilities.transactions` holds a
+ * repeatable-read snapshot (and, on a serialized connection, that connection's
+ * stream lease), and both are settled before this is thrown; an export on a
+ * backend without transactions holds neither, and its remaining reads are
+ * simply abandoned — its already-delivered chunks were never one snapshot to
+ * begin with. The message says which case applies. `cause` carries the signal's
+ * own `reason` when the caller supplied one.
+ */
+declare class ExportStreamCancelledError extends TypeGraphError {
+    constructor(message: string, details?: Readonly<Record<string, unknown>>, options?: Readonly<{
+        cause?: unknown;
+        suggestion?: string;
+    }>);
+}
 /**
  * The stable `details.code` values raised by the recorded-capture guards on a
  * history- or revision-tracked store. These are the sanctioned branch points
@@ -710,6 +902,25 @@ declare class StoreNotInitializedError extends TypeGraphError {
 type DatabaseOperationErrorDetails = Readonly<{
     operation: string;
     entity: string;
+    /**
+     * `"duplicate_key"` means the engine refused the write because the entity's
+     * identity is already taken — the shape a concurrent create of the same new id
+     * produces on an engine that does not serialize the two writers. It is a
+     * *classified* driver failure, so callers that own a better error for the
+     * condition (the create paths, which report it as "already exists") translate
+     * it rather than surfacing it.
+     */
+    reason?: "no_row_returned" | "duplicate_key";
+    /**
+     * The entities the failed statement tried to insert, carried structurally so a
+     * translating caller never has to parse the driver's message for them. One
+     * element for a single insert; for a batch, every row in the failing chunk —
+     * the engine reports the collision without saying which row lost.
+     */
+    attempted?: readonly Readonly<{
+        kind: string;
+        id: string;
+    }>[];
 }>;
 /**
  * Thrown when a database operation fails unexpectedly.
@@ -857,4 +1068,4 @@ declare function isConstraintError(error: unknown): boolean;
  */
 declare function getErrorSuggestion(error: unknown): string | undefined;
 
-export { TrustedImportError as $, NodeNotFoundError as A, BackendDisposedError as B, CardinalityError as C, DatabaseOperationError as D, EagerMaterializationError as E, type NodeNotFoundErrorDetails as F, GraphAlgorithmConvergenceError as G, type RecordedCaptureGuardCode as H, InvalidEdgeWeightError as I, type RecordedCaptureGuardError as J, KindNotFoundError as K, RestrictedDeleteError as L, MIGRATION_FAILURE_REASONS as M, NodeConstraintNotFoundError as N, type RestrictedDeleteErrorDetails as O, type SchemaContentConflictErrorDetails as P, SchemaMismatchError as Q, RECORDED_CAPTURE_GUARD_CODES as R, SchemaContentConflictError as S, type SchemaMismatchErrorDetails as T, StaleVersionError as U, type ValidationIssue as V, type StaleVersionErrorDetails as W, StoreNotInitializedError as X, type StoreNotInitializedErrorDetails as Y, type StoreNotInitializedReason as Z, TransactionClosedError as _, ValidationError as a, type TrustedImportErrorReason as a0, TypeGraphError as a1, type TypeGraphErrorOptions as a2, UniquenessError as a3, type UniquenessErrorDetails as a4, UnsupportedBackendCapabilityError as a5, UnsupportedPredicateError as a6, type ValidationErrorDetails as a7, VersionConflictError as a8, type VersionConflictErrorDetails as a9, getErrorSuggestion as aa, isConstraintError as ab, isRecordedCaptureGuardError as ac, isSystemError as ad, isTypeGraphError as ae, isUserRecoverable as af, type CardinalityErrorDetails as b, CompilerInvariantError as c, ConfigurationError as d, type DatabaseOperationErrorDetails as e, DisjointError as f, type DisjointErrorDetails as g, type EagerMaterializationErrorDetails as h, EdgeNotFoundError as i, type EdgeNotFoundErrorDetails as j, EmbeddingDimensionChangedError as k, type EmbeddingDimensionChangedErrorDetails as l, EndpointError as m, type EndpointErrorDetails as n, EndpointNotFoundError as o, type EndpointNotFoundErrorDetails as p, type ErrorCategory as q, type InvalidEdgeWeightErrorDetails as r, type InvalidEdgeWeightReason as s, type KindNotFoundErrorDetails as t, MigrationError as u, type MigrationErrorDetails as v, type MigrationFailureReason as w, type NodeConstraintNotFoundErrorDetails as x, NodeIndexNotFoundError as y, type NodeIndexNotFoundErrorDetails as z };
+export { type RecordedCaptureGuardError as $, IdentitySeparationViolationError as A, BackendDisposedError as B, CardinalityError as C, DatabaseOperationError as D, EDGE_IDENTITY_MISMATCH_CODE as E, type IdentitySeparationViolationErrorDetails as F, GraphAlgorithmConvergenceError as G, InvalidEdgeWeightError as H, IMMUTABLE_VALIDITY_LOWER_BOUND_CODE as I, type InvalidEdgeWeightErrorDetails as J, type InvalidEdgeWeightReason as K, KindNotFoundError as L, type KindNotFoundErrorDetails as M, MIGRATION_FAILURE_REASONS as N, MigrationError as O, type MigrationErrorDetails as P, type MigrationFailureReason as Q, NodeConstraintNotFoundError as R, type NodeConstraintNotFoundErrorDetails as S, TypeGraphError as T, NodeIndexNotFoundError as U, type ValidationIssue as V, type NodeIndexNotFoundErrorDetails as W, NodeNotFoundError as X, type NodeNotFoundErrorDetails as Y, RECORDED_CAPTURE_GUARD_CODES as Z, type RecordedCaptureGuardCode as _, ValidationError as a, RestrictedDeleteError as a0, type RestrictedDeleteErrorDetails as a1, SchemaContentConflictError as a2, type SchemaContentConflictErrorDetails as a3, SchemaMismatchError as a4, type SchemaMismatchErrorDetails as a5, StaleVersionError as a6, type StaleVersionErrorDetails as a7, StoreNotInitializedError as a8, type StoreNotInitializedErrorDetails as a9, type StoreNotInitializedReason as aa, TransactionClosedError as ab, TrustedImportError as ac, type TrustedImportErrorReason as ad, UniquenessError as ae, type UniquenessErrorDetails as af, UnsupportedBackendCapabilityError as ag, UnsupportedPredicateError as ah, type ValidationErrorDetails as ai, VersionConflictError as aj, type VersionConflictErrorDetails as ak, getErrorSuggestion as al, isConstraintError as am, isRecordedCaptureGuardError as an, isSystemError as ao, isTypeGraphError as ap, isUserRecoverable as aq, type TypeGraphErrorOptions as b, type CardinalityErrorDetails as c, CompilerInvariantError as d, ConfigurationError as e, type ContributionRebuildRefusal as f, ContributionRebuildUnsupportedError as g, type DatabaseOperationErrorDetails as h, DisjointError as i, type DisjointErrorDetails as j, ENTITY_ALREADY_EXISTS_CODE as k, EagerMaterializationError as l, type EagerMaterializationErrorDetails as m, EdgeNotFoundError as n, type EdgeNotFoundErrorDetails as o, EmbeddingDimensionChangedError as p, type EmbeddingDimensionChangedErrorDetails as q, EndpointError as r, type EndpointErrorDetails as s, EndpointNotFoundError as t, type EndpointNotFoundErrorDetails as u, type ErrorCategory as v, ExportStreamCancelledError as w, INVERTED_VALIDITY_WINDOW_CODE as x, IdentityContradictionError as y, type IdentityContradictionErrorDetails as z };