@sixb/sqlite 0.1.11 → 0.1.12

package/src/migrations/043-vector-indexing.sql

@@ -0,0 +1,197 @@
+CREATE TABLE object_vector_indexing (
+  project_id TEXT NOT NULL,
+  id TEXT NOT NULL,
+  object_type_id TEXT NOT NULL,
+  primary_id TEXT NOT NULL,
+  profile TEXT NOT NULL,
+  request TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'running', 'ready', 'failed')),
+  available_at TEXT NOT NULL,
+  dispatch_at TEXT NOT NULL,
+  values_json TEXT,
+  error TEXT,
+  PRIMARY KEY (project_id, id),
+  UNIQUE (project_id, object_type_id, primary_id, profile)
+);
+CREATE INDEX object_vector_indexing_due ON object_vector_indexing (project_id, dispatch_at, id)
+  WHERE status <> 'failed';
+
+CREATE TABLE executions_v2 (
+  project_id TEXT NOT NULL CHECK (length(trim(project_id)) > 0),
+  id TEXT NOT NULL CHECK (length(trim(id)) > 0),
+  executor_kind TEXT NOT NULL CHECK (
+    executor_kind IN (
+      'request', 'action', 'pipeline', 'projection', 'rule', 'sync', 'webhook', 'workflow',
+      'agent', 'kernel'
+    )
+  ),
+  executor_id TEXT NOT NULL CHECK (length(trim(executor_id)) > 0),
+  source_kind TEXT NOT NULL CHECK (
+    source_kind IN ('http', 'webhook', 'schedule', 'event', 'datasetVersion', 'execution', 'ontologyCommit')
+  ),
+  source_id TEXT NOT NULL CHECK (length(trim(source_id)) > 0),
+  requested_by_user_id TEXT,
+  requested_by_service_account_id TEXT,
+  correlation_id TEXT NOT NULL CHECK (length(trim(correlation_id)) > 0),
+  parent_execution_id TEXT,
+  authority_kind TEXT NOT NULL CHECK (
+    authority_kind IN ('principal', 'trustedPrimitive', 'delegated', 'kernel', 'disabled')
+  ),
+  authority_user_id TEXT,
+  authority_service_account_id TEXT,
+  authority_session_id TEXT,
+  authority_access_token_id TEXT,
+  authority_primitive_kind TEXT CHECK (
+    authority_primitive_kind IS NULL
+      OR authority_primitive_kind IN (
+        'action', 'pipeline', 'projection', 'rule', 'sync', 'webhook', 'workflow'
+      )
+  ),
+  authority_primitive_id TEXT,
+  authority_kernel_operation TEXT CHECK (
+    authority_kernel_operation IS NULL OR authority_kernel_operation IN ('ontology.recover', 'ontology.indexVectors')
+  ),
+  authority_delegation_kind TEXT CHECK (
+    authority_delegation_kind IS NULL OR authority_delegation_kind = 'share'
+  ),
+  authority_delegation_id TEXT,
+  authority_delegation_session_id TEXT,
+  requester_group_ids TEXT NOT NULL DEFAULT '[]',
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (project_id, id),
+  FOREIGN KEY (project_id, parent_execution_id) REFERENCES executions (project_id, id),
+  FOREIGN KEY (project_id, requested_by_user_id) REFERENCES auth_users (project_id, id),
+  FOREIGN KEY (project_id, requested_by_service_account_id)
+    REFERENCES auth_service_accounts (project_id, id),
+  FOREIGN KEY (project_id, authority_user_id) REFERENCES auth_users (project_id, id),
+  FOREIGN KEY (project_id, authority_service_account_id)
+    REFERENCES auth_service_accounts (project_id, id),
+  FOREIGN KEY (project_id, authority_session_id) REFERENCES auth_sessions (project_id, id),
+  FOREIGN KEY (project_id, authority_access_token_id)
+    REFERENCES auth_access_tokens (project_id, id),
+  FOREIGN KEY (
+    project_id, authority_delegation_session_id, authority_delegation_id
+  ) REFERENCES share_sessions (project_id, id, grant_id),
+  CHECK ((requested_by_user_id IS NOT NULL) + (requested_by_service_account_id IS NOT NULL) <= 1),
+  CHECK (
+    (source_kind = 'execution' AND parent_execution_id = source_id)
+      OR (source_kind <> 'execution' AND parent_execution_id IS NULL)
+  ),
+  CHECK (
+    (
+      authority_kind = 'principal'
+      AND (authority_user_id IS NOT NULL) + (authority_service_account_id IS NOT NULL) = 1
+      AND (authority_session_id IS NOT NULL) + (authority_access_token_id IS NOT NULL) <= 1
+      AND (authority_session_id IS NULL OR authority_user_id IS NOT NULL)
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NULL
+      AND authority_delegation_kind IS NULL
+      AND authority_delegation_id IS NULL
+      AND authority_delegation_session_id IS NULL
+    )
+    OR (
+      authority_kind = 'trustedPrimitive'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NOT NULL
+      AND authority_primitive_id IS NOT NULL
+      AND length(trim(authority_primitive_id)) > 0
+      AND authority_kernel_operation IS NULL
+      AND authority_delegation_kind IS NULL
+      AND authority_delegation_id IS NULL
+      AND authority_delegation_session_id IS NULL
+    )
+    OR (
+      authority_kind = 'delegated'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NULL
+      AND authority_delegation_kind IS NOT NULL
+      AND authority_delegation_kind = 'share'
+      AND authority_delegation_id IS NOT NULL
+      AND length(trim(authority_delegation_id)) > 0
+      AND authority_delegation_session_id IS NOT NULL
+      AND length(trim(authority_delegation_session_id)) > 0
+    )
+    OR (
+      authority_kind = 'kernel'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NOT NULL
+      AND authority_delegation_kind IS NULL
+      AND authority_delegation_id IS NULL
+      AND authority_delegation_session_id IS NULL
+    )
+    OR (
+      authority_kind = 'disabled'
+      AND authority_user_id IS NULL
+      AND authority_service_account_id IS NULL
+      AND authority_session_id IS NULL
+      AND authority_access_token_id IS NULL
+      AND authority_primitive_kind IS NULL
+      AND authority_primitive_id IS NULL
+      AND authority_kernel_operation IS NULL
+      AND authority_delegation_kind IS NULL
+      AND authority_delegation_id IS NULL
+      AND authority_delegation_session_id IS NULL
+    )
+  ),
+  CHECK (
+    (
+      executor_kind = 'request'
+      AND source_kind = 'http'
+      AND executor_id = source_id
+      AND (
+        (
+          authority_kind = 'principal'
+          AND requested_by_user_id IS authority_user_id
+          AND requested_by_service_account_id IS authority_service_account_id
+        )
+        OR (
+          authority_kind IN ('delegated', 'disabled')
+          AND requested_by_user_id IS NULL
+          AND requested_by_service_account_id IS NULL
+        )
+      )
+    )
+    OR (
+      executor_kind IN ('action', 'pipeline', 'projection', 'rule', 'sync', 'webhook', 'workflow')
+      AND authority_kind = 'trustedPrimitive'
+      AND executor_kind = authority_primitive_kind
+    )
+    OR (
+      executor_kind = 'agent'
+      AND source_kind = 'execution'
+      AND (
+        (
+          authority_kind = 'principal'
+          AND authority_service_account_id IS NOT NULL
+          AND authority_session_id IS NULL
+          AND authority_access_token_id IS NULL
+        )
+        OR (
+          authority_kind = 'principal'
+          AND authority_user_id IS NOT NULL
+          AND (authority_session_id IS NOT NULL) + (authority_access_token_id IS NOT NULL) = 1
+        )
+        OR authority_kind = 'disabled'
+      )
+    )
+    OR (executor_kind = 'kernel' AND authority_kind = 'kernel')
+  )
+);
+
+INSERT INTO executions_v2 (project_id, id, executor_kind, executor_id, source_kind, source_id, requested_by_user_id, requested_by_service_account_id, correlation_id, parent_execution_id, authority_kind, authority_user_id, authority_service_account_id, authority_session_id, authority_access_token_id, authority_primitive_kind, authority_primitive_id, authority_kernel_operation, authority_delegation_kind, authority_delegation_id, authority_delegation_session_id, requester_group_ids, created_at) SELECT project_id, id, executor_kind, executor_id, source_kind, source_id, requested_by_user_id, requested_by_service_account_id, correlation_id, parent_execution_id, authority_kind, authority_user_id, authority_service_account_id, authority_session_id, authority_access_token_id, authority_primitive_kind, authority_primitive_id, authority_kernel_operation, authority_delegation_kind, authority_delegation_id, authority_delegation_session_id, requester_group_ids, created_at FROM executions;
+DROP TABLE executions;
+ALTER TABLE executions_v2 RENAME TO executions;

package/src/migrations/044-vector-batching.sql

@@ -0,0 +1,3 @@
+ALTER TABLE object_vector_indexing ADD COLUMN batch_id TEXT;
+CREATE INDEX object_vector_indexing_batch ON object_vector_indexing (project_id, batch_id, id)
+  WHERE batch_id IS NOT NULL;

package/src/migrations/045-agent-thread-sandbox-state.sql

@@ -0,0 +1,2 @@
+ALTER TABLE agent_threads ADD COLUMN sandbox_state TEXT
+  CHECK (sandbox_state IS NULL OR (json_valid(sandbox_state) AND json_type(sandbox_state) = 'object'));

package/src/migrations.ts

@@ -96,6 +96,15 @@ import projectionSourceRootsSql from "./migrations/038-projection-source-roots.s
 import outboxPublicationOrderSql from "./migrations/040-outbox-publication-order.sql" with {
   type: "text",
 }
+import agentThreadWorkspacesSql from "./migrations/041-agent-thread-workspaces.sql" with {
+  type: "text",
+}
+import vectorProfilesSql from "./migrations/042-vector-profiles.sql" with { type: "text" }
+import vectorIndexingSql from "./migrations/043-vector-indexing.sql" with { type: "text" }
+import vectorBatchingSql from "./migrations/044-vector-batching.sql" with { type: "text" }
+import agentThreadSandboxStateSql from "./migrations/045-agent-thread-sandbox-state.sql" with {
+  type: "text",
+}
 
 const MIGRATIONS_TABLE_SQL = `
   CREATE TABLE IF NOT EXISTS sixb_migrations (
@@ -191,6 +200,11 @@ export const sqliteStorageMigrations = defineMigrations({
     sqliteSql("038-projection-source-roots", projectionSourceRootsSql),
     sqliteSql("039-connector-optional-pkce", connectorOptionalPkceSql),
     sqliteSql("040-outbox-publication-order", outboxPublicationOrderSql),
+    sqliteSql("041-agent-thread-workspaces", agentThreadWorkspacesSql),
+    sqliteSql("042-vector-profiles", vectorProfilesSql),
+    sqliteSql("043-vector-indexing", vectorIndexingSql),
+    sqliteSql("044-vector-batching", vectorBatchingSql),
+    sqliteSql("045-agent-thread-sandbox-state", agentThreadSandboxStateSql),
   ],
 })
 

package/src/objects/query-compiler.ts

@@ -6,8 +6,15 @@ import {
   type ObjectQuerySetOperation,
   type ObjectQuerySortField,
 } from "@sixb/core"
+import {
+  hasVectorProfile,
+  isVectorProfileQuery,
+  normalizeVector,
+  vectorSearchCandidateLimit,
+} from "@sixb/core/internal/query"
+import { encodeSqliteVector } from "../vector-encoding"
 
-export type SqliteValue = string | number | bigint | boolean | null
+export type SqliteValue = string | number | bigint | boolean | null | Uint8Array
 
 export interface SqliteObjectQueryPageRow {
   object_type_id: string
@@ -17,6 +24,7 @@ export interface SqliteObjectQueryPageRow {
 }
 
 export interface CompiledObjectQuery {
+  vectorProbe?: { sql: string; args: SqliteValue[]; limit: number }
   sql: string
   args: SqliteValue[]
   totalSql: string
@@ -59,7 +67,8 @@ type CompiledOrderField =
     }
   | {
       kind: "column"
-      column: "object_type_id" | "primary_id"
+      column: "object_type_id" | "primary_id" | "_vector_score"
+      binary?: boolean
       direction: "asc" | "desc"
     }
 
@@ -86,6 +95,12 @@ export function compileObjectQuery(
   query: ObjectQuery,
   options: { includeTotal?: boolean; source?: SqliteObjectQuerySource } = {}
 ): CompiledObjectQuery {
+  if (hasVectorProfile(query) && !isVectorProfileQuery(query)) {
+    throw new ObjectQueryExecutionError(
+      "unsupported_vector_composition",
+      "Vector search supports one profile with filters before ranking and limit/project after."
+    )
+  }
   const source = options.source ?? DEFAULT_OBJECT_QUERY_SOURCE
   const ctx: CompileContext = { probeLimit: options.includeTotal === false, source }
   return source.wrapQuery(compileObjectQueryInternal(projectId, query, ctx))
@@ -95,6 +110,7 @@ export function compileObjectQuery(
 export interface SqliteObjectQuerySource {
   readonly objectsTable: string
   readonly linksTable: string
+  readonly objectPropertyPermissionsTable?: string
   /** Wrap a terminal SELECT without its own WITH clause; the selected source owns the only WITH. */
   wrapStatement(
     sql: string,
@@ -160,7 +176,79 @@ function compileObjectQueryInternal(
     case "expand":
       return compileExpand(projectId, query.input, query.expansions, ctx)
     case "vector":
-      throw new Error(`[Sixb] SQLite object storage does not support query node '${query.kind}'`)
+      return compileVector(projectId, query, ctx)
+  }
+}
+
+function compileVector(
+  projectId: string,
+  query: Extract<ObjectQuery, { kind: "vector" }>,
+  ctx: CompileContext
+): CompiledObjectQuery {
+  if (
+    typeof query.vector === "string" ||
+    !isVectorProfileQuery(query) ||
+    !query.configuration ||
+    !Number.isSafeInteger(query.k) ||
+    query.k < 1 ||
+    query.k > 1000 ||
+    query.vector.length < 1 ||
+    query.vector.length > 16000
+  ) {
+    throw new ObjectQueryExecutionError(
+      "invalid_vector_query",
+      "A validated named vector profile is required."
+    )
+  }
+  const input = compileObjectQueryInternal(projectId, query.input, exactContext(ctx))
+  const permissions = ctx.source.objectPropertyPermissionsTable
+  const permissionJoin = permissions
+    ? `CROSS JOIN (
+      SELECT project_id, object_type_id, primary_id, json_group_array(property_id) AS property_ids
+      FROM ${permissions}
+      GROUP BY project_id, object_type_id, primary_id
+    ) AS vector_permissions ON vector_permissions.project_id = vectors.project_id
+      AND vector_permissions.object_type_id = vectors.object_type_id
+      AND vector_permissions.primary_id = vectors.primary_id`
+    : ""
+  const authorized = permissions
+    ? `AND NOT EXISTS (
+    SELECT 1 FROM json_each(vectors.source) AS required
+    WHERE required.value NOT IN (SELECT value FROM json_each(vector_permissions.property_ids))
+  )`
+    : ""
+  const candidates = `FROM (${input.sql}) AS input
+    CROSS JOIN object_vectors AS vectors ON vectors.project_id = input.project_id
+      AND vectors.object_type_id = input.object_type_id AND vectors.primary_id = input.primary_id
+    ${permissionJoin}
+    WHERE vectors.profile = ? AND vectors.configuration = ?
+      AND length(vectors.embedding) / 4 = ? ${authorized}`
+  const candidateArgs = [...input.args, query.profile!, query.configuration, query.vector.length]
+  // Bound distance work, not just returned rows. Exceeding the envelope fails before ranking.
+  const limit = vectorSearchCandidateLimit(query.vector.length)
+  const values = normalizeVector(query.vector, query.vector.length)
+  const order = compileOrder([
+    { kind: "column", column: "_vector_score", direction: "desc" },
+    ...identityOrderFields().map((field) => ({ ...field, binary: true })),
+  ])
+  const sql = `SELECT * FROM (SELECT input.*, max(-1, min(1, 1 - vec_distance_cosine(vectors.embedding, ?))) AS _vector_score
+    ${candidates}) AS ranked ORDER BY ${order.sql} LIMIT ?`
+  const args = [encodeSqliteVector(values), ...candidateArgs, query.k]
+  return {
+    sql,
+    args,
+    // Top-k cardinality depends on eligibility, not distances or ranking.
+    totalSql: `SELECT COUNT(*) AS total FROM (SELECT 1 ${candidates} LIMIT ?) AS eligible`,
+    totalArgs: [...candidateArgs, query.k],
+    order,
+    vectorProbe: {
+      sql: `SELECT COUNT(*) AS total FROM (SELECT 1 ${candidates} LIMIT ?) AS candidates`,
+      args: [...candidateArgs, limit + 1],
+      limit,
+    },
+    hasMore: () => false,
+    trimRows: identityRows,
+    nextPageToken: () => undefined,
   }
 }
 
@@ -274,6 +362,7 @@ function compileWhere(
       WHERE ${predicate.sql}
     `,
     totalArgs: [...input.args, ...predicate.args],
+    vectorProbe: input.vectorProbe,
     order: input.order,
     hasMore: () => false,
     trimRows: identityRows,
@@ -324,7 +413,7 @@ function compileSort(
         input.created_at,
         input.updated_at,
         input.version,
-        input.last_commit_id
+        input.last_commit_id${input.vectorProbe ? ", input._vector_score" : ""}
       FROM (${input.sql}) AS input
       ORDER BY ${order.sql}
     `,
@@ -362,6 +451,7 @@ function compileLimit(
       FROM (${input.sql}) AS input
     `,
     totalArgs: input.args,
+    vectorProbe: input.vectorProbe,
     order: input.order,
     hasMore: (rowCount, total) =>
       total === undefined ? ctx.probeLimit && rowCount > limit : limit < total,
@@ -399,6 +489,7 @@ function compilePage(
       FROM (${input.sql}) AS input
     `,
     totalArgs: input.args,
+    vectorProbe: input.vectorProbe,
     order: input.order,
     hasMore: (rowCount) => rowCount > pageSize,
     trimRows: (rows) => rows.slice(0, pageSize),
@@ -507,6 +598,7 @@ function compileExpand(
     args: [...expand.args, ...input.args, ...inputOrder.args],
     totalSql: input.totalSql,
     totalArgs: input.totalArgs,
+    vectorProbe: input.vectorProbe,
     order: input.order,
     hasMoreProbe: input.hasMoreProbe,
     hasMore: input.hasMore,
@@ -760,13 +852,14 @@ function compileProject(
         input.created_at,
         input.updated_at,
         input.version,
-        input.last_commit_id
+        input.last_commit_id${input.vectorProbe ? ", input._vector_score" : ""}
       FROM (${input.sql}) AS input
       ORDER BY ${inputOrder.sql}
     `,
     args: [...projection.args, ...input.args, ...inputOrder.args],
     totalSql: input.totalSql,
     totalArgs: input.totalArgs,
+    vectorProbe: input.vectorProbe,
     order: outputOrder,
     hasMoreProbe: input.hasMoreProbe,
     hasMore: input.hasMore,
@@ -1026,7 +1119,9 @@ function compileOrder(
 
   for (const field of fields) {
     if (field.kind === "column") {
-      clauses.push(`${columnExpression(field.column, qualifier)} ${field.direction.toUpperCase()}`)
+      clauses.push(
+        `${columnExpression(field.column, qualifier)}${field.binary ? " COLLATE BINARY" : ""} ${field.direction.toUpperCase()}`
+      )
       continue
     }
 
@@ -1238,7 +1333,10 @@ function orderFieldKey(field: CompiledOrderField): string {
     : `property:${field.propertyId}:${field.direction}`
 }
 
-function columnExpression(column: "object_type_id" | "primary_id", qualifier?: string): string {
+function columnExpression(
+  column: "object_type_id" | "primary_id" | "_vector_score",
+  qualifier?: string
+): string {
   return qualifier ? `${qualifier}.${column}` : column
 }
 

package/src/objects/read-scope.ts

@@ -19,6 +19,9 @@ export interface SqliteSelectedObjectReadSource extends SqliteObjectQuerySource
  *
  * The complete compiled scope is serialized once. Every statement receives that one JSON document
  * and the bound project id, keeping the host-parameter count constant as selections grow.
+ * CROSS JOIN keeps authorized parents/grants before indexed edge/object lookups, even when
+ * statistics would otherwise make SQLite rescan all grants for every stored object.
+ * Property grants are grouped only after path-sensitive reachability has been resolved.
  */
 export function compileSqliteSelectedObjectReadSource(
   projectId: string,
@@ -44,6 +47,9 @@ export function compileSqliteSelectedObjectReadSource(
     wrapQuery: (query: CompiledObjectQuery): CompiledObjectQuery => ({
       ...query,
       ...wrapStatement(query.sql, query.args),
+      vectorProbe: query.vectorProbe
+        ? { ...query.vectorProbe, ...wrapStatement(query.vectorProbe.sql, query.vectorProbe.args) }
+        : undefined,
       totalSql: `${compiled.sql}\n${query.totalSql}`,
       totalArgs: [...compiled.args, ...query.totalArgs],
       ...(query.hasMoreProbe
@@ -140,16 +146,16 @@ function compileSelectedReadScopeCte(scopeJson: string, projectId: string): Comp
 
         SELECT edge.project_id, selection.node_id, edge.target_type_id, edge.target_id
         FROM _sixb_scope_reachable AS parent
-        JOIN _sixb_scope_link_selections AS selection
+        CROSS JOIN _sixb_scope_link_selections AS selection
           ON selection.parent_node_id = parent.node_id
          AND selection.source_object_type_id = parent.object_type_id
-        JOIN links AS edge
+        CROSS JOIN links AS edge
           ON edge.project_id = parent.project_id
          AND edge.source_type_id = parent.object_type_id
          AND edge.source_id = parent.primary_id
          AND edge.link_id = selection.link_id
          AND edge.target_type_id = selection.target_object_type_id
-        JOIN objects AS target
+        CROSS JOIN objects AS target
           ON target.project_id = edge.project_id
          AND target.object_type_id = edge.target_type_id
          AND target.primary_id = edge.target_id
@@ -170,32 +176,29 @@ function compileSelectedReadScopeCte(scopeJson: string, projectId: string): Comp
         SELECT DISTINCT project_id, object_type_id, primary_id
         FROM _sixb_scope_reachable
       ),
+      _sixb_scope_object_grants AS (
+        SELECT reachable.project_id, reachable.object_type_id, reachable.primary_id,
+          json_group_array(DISTINCT selected_property.value) FILTER (WHERE selected_property.value IS NOT NULL) AS property_ids
+        FROM _sixb_scope_reachable AS reachable
+        LEFT JOIN _sixb_scope_object_selections AS selection
+          ON selection.node_id = reachable.node_id
+         AND selection.object_type_id = reachable.object_type_id
+        LEFT JOIN json_each(selection.property_ids) AS selected_property ON true
+        GROUP BY reachable.project_id, reachable.object_type_id, reachable.primary_id
+      ),
       _sixb_scope_objects AS (
-        SELECT
-          stored.project_id,
-          stored.object_type_id,
-          stored.primary_id,
-          COALESCE(
-            (
-              SELECT json_group_object(property.key, ${sqliteJsonEachValue("property")})
-              FROM json_each(stored.properties) AS property
-              JOIN _sixb_scope_object_permissions AS permission
-                ON permission.project_id = stored.project_id
-               AND permission.object_type_id = stored.object_type_id
-               AND permission.primary_id = stored.primary_id
-               AND permission.property_id = property.key
-            ),
-            json('{}')
-          ) AS properties,
-          stored.created_at,
-          stored.updated_at,
-          stored.version,
-          stored.last_commit_id
-        FROM objects AS stored
-        JOIN _sixb_scope_object_ids AS visible
-          ON visible.project_id = stored.project_id
-         AND visible.object_type_id = stored.object_type_id
-         AND visible.primary_id = stored.primary_id
+        SELECT stored.project_id, stored.object_type_id, stored.primary_id,
+          COALESCE((
+            SELECT json_group_object(property.key, ${sqliteJsonEachValue("property")})
+            FROM json_each(stored.properties) AS property
+            WHERE property.key IN (SELECT value FROM json_each(grants.property_ids))
+          ), json('{}')) AS properties,
+          stored.created_at, stored.updated_at, stored.version, stored.last_commit_id
+        FROM _sixb_scope_object_grants AS grants
+        CROSS JOIN objects AS stored
+          ON stored.project_id = grants.project_id
+         AND stored.object_type_id = grants.object_type_id
+         AND stored.primary_id = grants.primary_id
       ),
       _sixb_scope_reached_links(
         project_id,
@@ -221,16 +224,16 @@ function compileSelectedReadScopeCte(scopeJson: string, projectId: string): Comp
           edge.target_id,
           selection.property_ids
         FROM _sixb_scope_reachable AS parent
-        JOIN _sixb_scope_link_selections AS selection
+        CROSS JOIN _sixb_scope_link_selections AS selection
           ON selection.parent_node_id = parent.node_id
          AND selection.source_object_type_id = parent.object_type_id
-        JOIN links AS edge
+        CROSS JOIN links AS edge
           ON edge.project_id = parent.project_id
          AND edge.source_type_id = parent.object_type_id
          AND edge.source_id = parent.primary_id
          AND edge.link_id = selection.link_id
          AND edge.target_type_id = selection.target_object_type_id
-        JOIN objects AS target
+        CROSS JOIN objects AS target
           ON target.project_id = edge.project_id
          AND target.object_type_id = edge.target_type_id
          AND target.primary_id = edge.target_id

package/src/objects/reader.ts

@@ -1,5 +1,6 @@
 import type { Database } from "bun:sqlite"
-import type { ObjectQuery } from "@sixb/core"
+import { type ObjectQuery, ObjectQueryExecutionError } from "@sixb/core"
+import { hasVectorProfile } from "@sixb/core/internal/query"
 import type {
   CountObjectsInput,
   CountObjectsResult,
@@ -24,6 +25,7 @@ import {
   type CompiledObjectQuery,
   compileObjectQuery,
   type SqliteObjectQuerySource,
+  type SqliteValue,
 } from "./query-compiler"
 import type { SqliteSelectedObjectReadSource } from "./read-scope"
 import {
@@ -34,6 +36,7 @@ import {
   rowToLink,
   rowToObject,
 } from "./rows"
+import { ensureSqliteVectorSearch } from "./vector-extension"
 
 /** Synchronous SQL reads over one explicit source; transaction and budget ownership stay outside. */
 export class SqliteObjectReader {
@@ -42,7 +45,25 @@ export class SqliteObjectReader {
     private readonly source: SqliteObjectQuerySource | SqliteSelectedObjectReadSource
   ) {}
 
+  private assertVectorSearch(
+    params: QueryObjectsInput | CountObjectsInput | ExistsObjectsInput | FacetObjectsInput
+  ): void {
+    if (!hasVectorProfile(params.query)) return
+    const compiled = compileObjectQuery(params.projectId, params.query, { source: this.source })
+    if (!compiled.vectorProbe) return
+    ensureSqliteVectorSearch(this.db)
+    const probe = compiled.vectorProbe
+    const row = this.db.query<{ total: number }, SqliteValue[]>(probe.sql).get(...probe.args)
+    if (Number(row?.total ?? 0) > probe.limit) {
+      throw new ObjectQueryExecutionError(
+        "vector_work_limit_exceeded",
+        `Exact vector search supports at most ${probe.limit} eligible vectors at this dimension. Narrow the query filters.`
+      )
+    }
+  }
+
   queryObjects(params: QueryObjectsInput): QueryObjectsResult {
+    this.assertVectorSearch(params)
     const source = this.source
     const compiled = compileObjectQuery(params.projectId, params.query, {
       includeTotal: params.includeTotal,
@@ -67,6 +88,7 @@ export class SqliteObjectReader {
   }
 
   countObjects(params: CountObjectsInput): CountObjectsResult {
+    this.assertVectorSearch(params)
     const source = this.source
     return {
       count: readTotal(
@@ -79,6 +101,7 @@ export class SqliteObjectReader {
   }
 
   existsObjects(params: ExistsObjectsInput): ExistsObjectsResult {
+    this.assertVectorSearch(params)
     const source = this.source
     const compiled = compileObjectQuery(params.projectId, existsProbeQuery(params.query), {
       source,
@@ -87,6 +110,7 @@ export class SqliteObjectReader {
   }
 
   facetObjects(params: FacetObjectsInput): FacetObjectsResult {
+    this.assertVectorSearch(params)
     const source = this.source
     const compiled = compileObjectQuery(params.projectId, stripOuterRowShape(params.query), {
       source,

package/src/objects/rows.ts

@@ -21,7 +21,10 @@ export function rowToObject(row: DatabaseRow): ObjectRow {
 
 /** Decode an expanded query row with the same shape as Core link hydration. */
 export function queryRowToObject(row: ObjectQueryDatabaseRow): ObjectRow {
-  const base = rowToObject(row)
+  const base = {
+    ...rowToObject(row),
+    ...(row._vector_score === undefined ? {} : { score: row._vector_score }),
+  }
   const links = reviveExpandedLinks(parseExpandColumn(row._expand))
   return links ? { ...base, links } : base
 }
@@ -104,6 +107,7 @@ export interface DatabaseRow {
 }
 
 export interface ObjectQueryDatabaseRow extends DatabaseRow {
+  _vector_score?: number
   _cursor_properties?: string
   /** `json_object(linkId, value, ...)` serialized text from an `expand` pushdown; absent otherwise. */
   _expand?: string | null