graphvault-studio 0.1.2 → 0.1.4

package/CHANGELOG.md

@@ -1,8 +1,27 @@
 # Changelog
 
+## 0.1.4
+
+- Add production safety status and score to the summary API, Overview, KPI bar, and Operations view.
+- Surface concrete warnings for pending WAL recovery, disabled WAL, missing stale-lock recovery, verification findings, and missing transaction hash-chain metadata.
+
+## 0.1.3
+
+- Fix the published `graphvault-studio` npm binary so it starts correctly through npm's `.bin` symlink.
+- Align CLI help with the published `graphvault-studio` command name.
+- Add a package install smoke gate that verifies the published CLI and programmatic API from a fresh tarball install.
+
 ## 0.1.2
 
 - Publish the Studio CLI under the unscoped `graphvault-studio` npm package name for a reliable `npx graphvault-studio` install path.
+- Add WAL-backed admin mutation commits with writer-lock protection and optional fencing-token validation.
+- Add operational hardening information to the summary API, Studio KPI bar, `/api/operations`, and a dedicated Operations view.
+- Publish `manifest.json` last for Studio mutation commits so late metadata failures remain recoverable instead of partially visible.
+- Add versioned object-record read/write compatibility for GraphVault 0.2+ stores and maintenance.
+- Add role-based access tokens for viewer, operator, and admin workflows.
+- Add bounded graph-slice/subtree endpoints and a Studio graph view depth control for large stores.
+- Show installed GraphVault Library compatibility status in the summary API and KPI bar.
+- Add a CI-friendly compatibility preflight so Studio's dependency range must accept the recommended GraphVault Library runtime.
 
 ## 0.1.1
 

package/README.md

@@ -41,11 +41,18 @@ It is deliberately generic. It does not assume customers, orders, tickets, CMS p
 - parent path lookup from object to root
 - support for objects with multiple direct parents
 - paged object browser for large stores
-- graph edge view
+- depth-limited graph/subtree view for large stores and REST-style graph slices
 - GVQL query console for graph queries and batch-update previews
 - editable primitive fields with preview and confirmation-token safety
+- reads and writes versioned GraphVault object records used by crash-safe 0.2+ stores
+- admin mutations use writer locks, WAL prepare/commit records, and fencing-token validation when the installed GraphVault Library supports it
+- admin mutations preserve GraphVault's SHA-256 transaction hash chain for audit-oriented stores
+- direct edits and committed GVQL updates can attach actor, reason, source, and trace metadata to the transaction record
+- operational hardening KPIs and an Operations view for WAL mode, pending WAL recovery, writer lock status, mutation mode, and latest transaction
+- production safety score with concrete warnings for WAL, stale-lock recovery, verification, and transaction hash-chain readiness
+- visible GraphVault Library compatibility status, including warnings for older runtime packages
 - verification, maintenance, backup, transaction and journal views
-- optional bearer-token protection
+- optional bearer-token protection with viewer, operator, and admin roles
 - zero frontend build step; the UI is embedded in the TypeScript package
 
 ## Install
@@ -93,6 +100,33 @@ Optional auth:
 GRAPHVAULT_ADMIN_TOKEN=secret npx graphvault-studio --dir ./data
 ```
 
+Role-based tokens:
+
+```bash
+npx graphvault-studio \
+  --dir ./data \
+  --viewer-token view-secret \
+  --operator-token ops-secret \
+  --admin-token admin-secret \
+  --allow-mutations \
+  --confirm-token confirm
+```
+
+- viewer: read-only API and UI access.
+- operator: viewer access plus maintenance and backup endpoints.
+- admin: full access, including committed direct edits and GVQL mutations.
+
+For critical stores, run Studio with mutations behind authentication and a confirmation token:
+
+```bash
+GRAPHVAULT_ADMIN_ROLE_TOKEN=secret npx graphvault-studio \
+  --dir ./data \
+  --allow-mutations \
+  --confirm-token "$(openssl rand -hex 16)"
+```
+
+Studio mutation commits are written through the same storage-level safety shape expected from GraphVault deployments: writer lock, WAL prepare, data write, WAL commit marker, transaction journal, parent index, current pointer, and manifest publish as the final visibility step. With GraphVault Library 0.2 or newer, fencing tokens prevent stale recovered writers from publishing or releasing newer locks.
+
 Then open:
 
 ```text
@@ -114,6 +148,9 @@ The storage engine lives in [graphvault-library](https://github.com/Sprengmeiste
 
 - Studio is a pure TypeScript package with no frontend build toolchain.
 - The UI is served from the embedded admin server, so `npx graphvault-studio --dir ./data` is enough to inspect a store.
+- The HTTP API exposes bounded graph slices through `/api/subtree?depth=2` and `/api/objects/:id/subtree?depth=2`, which is useful when you want to preview what an external REST endpoint would return.
+- The Overview API and UI report the installed GraphVault Library version and warn when it is older than the recommended runtime for the current Studio build.
 - The package depends on GraphVault Library for storage layout, verification, parent index reading, and storage targets.
 - Run `npm test` to type-check, emit `dist/`, create a real store, exercise the admin client, and verify the embedded HTTP API.
+- Run `npm run package:smoke` before publishing to install the generated tarball into a fresh temporary project and verify the CLI plus public programmatic API as a consumer would use them.
 - CI runs on Node.js 20 and 22.

package/dist/admin-cli.d.ts

@@ -5,6 +5,9 @@ export interface ParsedAdminCliArgs {
     port: number;
     allowMutations: boolean;
     authToken?: string;
+    viewerToken?: string;
+    operatorToken?: string;
+    adminToken?: string;
     mutationConfirmToken?: string;
     help: boolean;
 }

package/dist/admin-cli.js

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
 import { startAdminServer } from "./admin-server.js";
 const DEFAULT_HOST = "127.0.0.1";
 const DEFAULT_PORT = 4177;
@@ -12,6 +14,15 @@ export function parseAdminCliArgs(argv, env = process.env) {
     if (env["GRAPHVAULT_ADMIN_TOKEN"]) {
         parsed.authToken = env["GRAPHVAULT_ADMIN_TOKEN"];
     }
+    if (env["GRAPHVAULT_VIEWER_TOKEN"]) {
+        parsed.viewerToken = env["GRAPHVAULT_VIEWER_TOKEN"];
+    }
+    if (env["GRAPHVAULT_OPERATOR_TOKEN"]) {
+        parsed.operatorToken = env["GRAPHVAULT_OPERATOR_TOKEN"];
+    }
+    if (env["GRAPHVAULT_ADMIN_ROLE_TOKEN"]) {
+        parsed.adminToken = env["GRAPHVAULT_ADMIN_ROLE_TOKEN"];
+    }
     if (env["GRAPHVAULT_ADMIN_CONFIRM_TOKEN"]) {
         parsed.mutationConfirmToken = env["GRAPHVAULT_ADMIN_CONFIRM_TOKEN"];
     }
@@ -41,6 +52,18 @@ export function parseAdminCliArgs(argv, env = process.env) {
             parsed.authToken = readValue(argv, ++index, arg);
             continue;
         }
+        if (arg === "--viewer-token") {
+            parsed.viewerToken = readValue(argv, ++index, arg);
+            continue;
+        }
+        if (arg === "--operator-token") {
+            parsed.operatorToken = readValue(argv, ++index, arg);
+            continue;
+        }
+        if (arg === "--admin-token") {
+            parsed.adminToken = readValue(argv, ++index, arg);
+            continue;
+        }
         if (arg === "--confirm-token" || arg === "--mutation-confirm-token") {
             parsed.mutationConfirmToken = readValue(argv, ++index, arg);
             continue;
@@ -51,19 +74,25 @@ export function parseAdminCliArgs(argv, env = process.env) {
 }
 export function adminCliHelp() {
     return [
-        "Usage: graphvault-admin --dir <storage-directory> [options]",
+        "Usage: graphvault-studio --dir <storage-directory> [options]",
         "",
         "Options:",
         "  --dir, --storage-directory <path>      Storage directory to inspect.",
         "  --host <host>                         Host to bind. Defaults to 127.0.0.1.",
         "  --port <port>                         Port to bind. Defaults to 4177.",
         "  --token, --auth-token <token>         Bearer token for UI/API access.",
+        "  --viewer-token <token>                Read-only bearer token.",
+        "  --operator-token <token>              Maintenance and backup bearer token.",
+        "  --admin-token <token>                 Full mutation bearer token.",
         "  --confirm-token <token>               Token required to commit mutations.",
         "  --allow-mutations                     Enable maintenance and data mutation APIs.",
         "  -h, --help                            Show this help.",
         "",
         "Environment:",
         "  GRAPHVAULT_ADMIN_TOKEN                Default bearer token.",
+        "  GRAPHVAULT_VIEWER_TOKEN               Read-only bearer token.",
+        "  GRAPHVAULT_OPERATOR_TOKEN             Maintenance and backup bearer token.",
+        "  GRAPHVAULT_ADMIN_ROLE_TOKEN           Full mutation bearer token.",
         "  GRAPHVAULT_ADMIN_CONFIRM_TOKEN        Default mutation confirmation token.",
     ].join("\n");
 }
@@ -85,12 +114,13 @@ async function main(argv) {
     const running = await startAdminServer({
         ...serverOptions,
         ...(options.authToken ? { authToken: options.authToken } : {}),
+        ...(accessTokensFromOptions(options).length ? { accessTokens: accessTokensFromOptions(options) } : {}),
         ...(options.mutationConfirmToken ? { mutationConfirmToken: options.mutationConfirmToken } : {}),
     });
     console.log(`GraphVault Studio: ${running.url}`);
     console.log(`Storage directory: ${options.storageDirectory}`);
     console.log(`Mutations: ${options.allowMutations ? "enabled" : "disabled"}`);
-    if (options.authToken) {
+    if (options.authToken || accessTokensFromOptions(options).length) {
         console.log("Auth: bearer token required");
     }
     if (options.mutationConfirmToken) {
@@ -107,6 +137,13 @@ async function main(argv) {
     process.once("SIGINT", close);
     process.once("SIGTERM", close);
 }
+function accessTokensFromOptions(options) {
+    return [
+        ...(options.viewerToken ? [{ token: options.viewerToken, role: "viewer" }] : []),
+        ...(options.operatorToken ? [{ token: options.operatorToken, role: "operator" }] : []),
+        ...(options.adminToken ? [{ token: options.adminToken, role: "admin" }] : []),
+    ];
+}
 function readValue(argv, index, option) {
     const value = argv[index];
     if (!value || value.startsWith("-")) {
@@ -121,7 +158,19 @@ function parsePort(value) {
     }
     return port;
 }
-if (import.meta.url === `file://${process.argv[1]}`) {
+function isCliEntryPoint(moduleUrl, argvPath) {
+    if (!argvPath) {
+        return false;
+    }
+    const modulePath = fileURLToPath(moduleUrl);
+    try {
+        return realpathSync(argvPath) === realpathSync(modulePath);
+    }
+    catch {
+        return argvPath === modulePath;
+    }
+}
+if (isCliEntryPoint(import.meta.url, process.argv[1])) {
     main(process.argv.slice(2)).catch((error) => {
         console.error(error instanceof Error ? error.message : String(error));
         console.error("");

package/dist/admin-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-cli.js","sourceRoot":"","sources":["../src/admin-cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAYrD,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,UAAU,iBAAiB,CAAC,IAAuB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC7F,MAAM,MAAM,GAAuB;QACjC,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,cAAc,EAAE,KAAK;QACrB,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,IAAI,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,oBAAoB,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YAChC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YACrD,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAChD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,0BAA0B,EAAE,CAAC;YACpE,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,6DAA6D;QAC7D,EAAE;QACF,UAAU;QACV,wEAAwE;QACxE,8EAA8E;QAC9E,yEAAyE;QACzE,yEAAyE;QACzE,6EAA6E;QAC7E,oFAAoF;QACpF,yDAAyD;QACzD,EAAE;QACF,cAAc;QACd,+DAA+D;QAC/D,8EAA8E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAuB;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC;QACrC,GAAG,aAAa;QAChB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB,EAAE,KAAa,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"admin-cli.js","sourceRoot":"","sources":["../src/admin-cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAerD,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,UAAU,iBAAiB,CAAC,IAAuB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC7F,MAAM,MAAM,GAAuB;QACjC,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,cAAc,EAAE,KAAK;QACrB,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,IAAI,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,oBAAoB,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YAChC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YACrD,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAChD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAC7B,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YAC/B,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,0BAA0B,EAAE,CAAC;YACpE,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,8DAA8D;QAC9D,EAAE;QACF,UAAU;QACV,wEAAwE;QACxE,8EAA8E;QAC9E,yEAAyE;QACzE,yEAAyE;QACzE,iEAAiE;QACjE,8EAA8E;QAC9E,qEAAqE;QACrE,6EAA6E;QAC7E,oFAAoF;QACpF,yDAAyD;QACzD,EAAE;QACF,cAAc;QACd,+DAA+D;QAC/D,iEAAiE;QACjE,8EAA8E;QAC9E,qEAAqE;QACrE,8EAA8E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAuB;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC;QACrC,GAAG,aAAa;QAChB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA2B;IAC1D,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,UAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB,EAAE,KAAa,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,QAA4B;IACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,KAAK,UAAU,CAAC;IACjC,CAAC;AACH,CAAC;AAED,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/admin-client.d.ts

@@ -1,7 +1,7 @@
 import type { BackupResult, MaintenanceResult, ObjectRecord, StorageTarget, TransactionRecord, TypeDictionary, VerificationResult } from "@sprengmeister/graphvault/internal/core/types";
 import type { GvqlExecutionOptions, GvqlResult } from "@sprengmeister/graphvault/internal/gvql/gvql";
-import type { AdminGraph, AdminHierarchyPath, AdminMutation, AdminMutationPreview, AdminObjectChild, AdminObjectListItem, AdminObjectPage, AdminRootReference, AdminSearchResult, AdminSummary, StorageAdminClientOptions } from "./admin-types.js";
-export type { AdminGraph, AdminGraphEdge, AdminGraphNode, AdminHierarchyPath, AdminHierarchyPathItem, AdminMutation, AdminMutationPreview, GvqlResult, AdminObjectChild, AdminObjectListItem, AdminObjectPage, AdminObjectParent, AdminRootReference, AdminSearchResult, AdminSummary, StorageAdminClientOptions, } from "./admin-types.js";
+import type { AdminGraph, AdminHierarchyPath, AdminMutation, AdminMutationPreview, AdminObjectChild, AdminObjectListItem, AdminObjectPage, AdminRootReference, AdminSearchResult, AdminSummary, AdminSubtree, AdminTransactionMetadata, StorageAdminClientOptions } from "./admin-types.js";
+export type { AdminGraph, AdminGraphEdge, AdminGraphNode, AdminHierarchyPath, AdminHierarchyPathItem, AdminMutation, AdminMutationPreview, GvqlResult, AdminObjectChild, AdminObjectListItem, AdminObjectPage, AdminObjectParent, AdminOperationalStatus, AdminRootReference, AdminSearchResult, AdminSummary, AdminSubtree, StorageAdminClientOptions, } from "./admin-types.js";
 export declare class StorageAdminClient {
     private readonly options;
     private readonly target;
@@ -24,10 +24,16 @@ export declare class StorageAdminClient {
     listObjectChildren(objectId: string): Promise<AdminObjectChild[]>;
     hierarchyPath(targetObjectId: string): Promise<AdminHierarchyPath>;
     graph(): Promise<AdminGraph>;
+    subtree(options?: {
+        rootObjectId?: string;
+        depth?: number;
+    }): Promise<AdminSubtree>;
     search(query: string, options?: {
         limit?: number;
     }): Promise<AdminSearchResult[]>;
-    gvql(query: string, options?: GvqlExecutionOptions): Promise<GvqlResult>;
+    gvql(query: string, options?: GvqlExecutionOptions & {
+        metadata?: AdminTransactionMetadata;
+    }): Promise<GvqlResult>;
     listTransactions(): Promise<TransactionRecord[]>;
     readJournal(): Promise<string>;
     readTypeDictionary(): Promise<TypeDictionary | undefined>;
@@ -41,7 +47,19 @@ export declare class StorageAdminClient {
     }): Promise<BackupResult>;
     previewMutation(mutation: AdminMutation): Promise<AdminMutationPreview>;
     mutate(mutation: AdminMutation): Promise<TransactionRecord>;
+    private commitEnvelope;
     private requireManifest;
+    private readObjectRecord;
+    private envelopeFromManifest;
+    private get walDirectory();
+    private get transactionLogEnabled();
+    private hardening;
+    private operations;
+    private productionSafety;
+    private acquireWriteLock;
+    private lockOptions;
+    private assertLockValid;
+    private writeWalJson;
     private compact;
     private collectGarbage;
     private assertMutationsAllowed;