BE-780, BE-788: hgraph: Label property provenance and masked property-summary query paths

[indietyp]

🌟 What is the purpose of this PR?

The entity edition cache records which property produced each cached label. entity_edition_cache gains label_properties. Both arrays aggregate over the same rows in the same order under the same non-null filter. labels[i] is therefore the value of the property named by label_properties[i], and the first element names the property behind the display label. A reader capping or attributing properties stops re-deriving the winning path on every read.

The migrations pair up. V58 alters deployed databases and backfills the column from the closed schemas. The fresh-database schema (graph-migrations/v009, the pre-production schema line that is edited in place by design) gains the same column in this PR, so a fresh database and a migrated one agree at this layer.

Review focus: the two arrays stay index-aligned because both aggregates share row set, order, and filter, so the V58 backfill aggregation and insert_entity_edition_cache_statement read well side by side.

🔍 What does this change?

• postgres_migrations/V58__entity_edition_cache_label_properties.sql: the column and its backfill.
• graph-migrations/v009__entities/up.sql: the paired fresh-database column.
• EntityQueryPath::{FirstLabelProperty, ScalarProperties, PropertyCount} in store/src/entity/query.rs, with compile arms and filter/protection.rs support.
• insert_entity_edition_cache_statement writes the new column (knowledge/entity/mod.rs). EntityEditionCache::LabelProperties names it (query/table.rs).

Pre-Merge Checklist 🚀

🚢 Has this modified a publishable library?

This PR:

• does not modify any publishable blocks or libraries, or modifications do not need publishing

📜 Does this require a change to the docs?

The changes in this PR:

• are internal and do not require a docs change

🕸️ Does this require a change to the Turbo Graph?

The changes in this PR:

• do not affect the execution graph

🛡 What tests cover this?

• The scalar_properties test module and select_first_label_property are new.
• The existing postgres-store lib suite covers this, plus the workspace battery: cargo check, clippy at zero warnings, fmt clean. The OpenAPI generator reproduces the committed spec byte-exact.

❓ How to test this?

cargo nextest run -p hash-graph-postgres-store --lib

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hash	Ready	Preview	Aug 27, 2026 3:30pm

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
hashdotdesign-tokens	Ignored	Preview	Aug 27, 2026 3:30pm
petrinaut	Skipped		Aug 27, 2026 3:30pm
petrinaut-docs	Skipped		Aug 27, 2026 3:30pm

[codecov]

Codecov Report

❌ Patch coverage is 94.44444% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 60.79%. Comparing base (57396c9) to head (5793745).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
...h/postgres-store/src/store/postgres/query/table.rs	66.66%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #9302      +/-   ##
==========================================
+ Coverage   60.73%   60.79%   +0.05%     
==========================================
  Files        1440     1440              
  Lines      143477   143491      +14     
  Branches     6662     6662              
==========================================
+ Hits        87145    87231      +86     
+ Misses      55240    55169      -71     
+ Partials     1092     1091       -1     

Flag	Coverage Δ
apps.hash-ai-worker-ts	1.99% <ø> (ø)
apps.hash-api	14.68% <ø> (ø)
local.hash-backend-utils	3.27% <ø> (ø)
local.hash-graph-sdk	10.02% <ø> (ø)
local.hash-isomorphic-utils	12.22% <ø> (ø)
rust.hash-graph-api	24.95% <ø> (ø)
rust.hash-graph-postgres-store	32.09% <94.44%> (+0.38%)	⬆️
rust.hashql-compiletest	28.39% <ø> (ø)
rust.hashql-eval	79.82% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[cursor]

PR Summary

Medium Risk
Adds a migrated cache column with a backfill and new SQL compilation paths over entity properties and labels; misaligned backfill or masking around labels could leak or mis-attribute data.

Overview
Entity edition cache now stores label_properties beside labels, index-aligned so each label value pairs with the labelProperty path that produced it; FirstLabelProperty reads label_properties[1] from the cache. Fresh installs and V58 migration both add the column, and the cache rebuild/backfill SQL mirrors insert_entity_edition_cache.

Entity queries gain ScalarProperties (a jsonb map of string/number/boolean/null entries) and PropertyCount (entry count on the same properties object). Both compile through the editions properties column and honor property masking like full properties selections.

Property protection docs note that protected fields must not be entity label properties, since cached labels are derived without masking; FirstLabelProperty is wired into protection collection with a follow-up TODO.

^{Reviewed by Cursor Bugbot for commit 5793745. Bugbot is set up for automated code reviews on this repo. Configure here.}

The merge-base changed after approval.

[github-actions]

Benchmark results

@rust/hash-graph-benches – Integrations

policy_resolution_large

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 2002	$$27.6 \mathrm{ms} \pm 254 \mathrm{μs}\left({\color{gray}-1.754 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$3.43 \mathrm{ms} \pm 21.4 \mathrm{μs}\left({\color{gray}0.822 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 1002	$$12.2 \mathrm{ms} \pm 104 \mathrm{μs}\left({\color{lightgreen}-5.406 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 3314	$$43.2 \mathrm{ms} \pm 440 \mathrm{μs}\left({\color{gray}-1.749 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$14.3 \mathrm{ms} \pm 170 \mathrm{μs}\left({\color{lightgreen}-6.449 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 1527	$$23.4 \mathrm{ms} \pm 196 \mathrm{μs}\left({\color{lightgreen}-7.006 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 2078	$$28.1 \mathrm{ms} \pm 262 \mathrm{μs}\left({\color{gray}-2.281 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.74 \mathrm{ms} \pm 22.8 \mathrm{μs}\left({\color{gray}-0.796 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 1033	$$13.4 \mathrm{ms} \pm 138 \mathrm{μs}\left({\color{lightgreen}-5.913 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_medium

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 102	$$3.89 \mathrm{ms} \pm 28.7 \mathrm{μs}\left({\color{gray}0.585 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$3.05 \mathrm{ms} \pm 20.2 \mathrm{μs}\left({\color{gray}1.02 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 52	$$3.40 \mathrm{ms} \pm 23.4 \mathrm{μs}\left({\color{gray}-0.380 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 269	$$5.28 \mathrm{ms} \pm 48.5 \mathrm{μs}\left({\color{gray}0.973 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$3.61 \mathrm{ms} \pm 27.2 \mathrm{μs}\left({\color{gray}-0.156 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 108	$$4.19 \mathrm{ms} \pm 25.6 \mathrm{μs}\left({\color{gray}0.230 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 133	$$4.46 \mathrm{ms} \pm 33.2 \mathrm{μs}\left({\color{gray}0.477 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.48 \mathrm{ms} \pm 24.8 \mathrm{μs}\left({\color{gray}-0.358 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 63	$$4.14 \mathrm{ms} \pm 24.8 \mathrm{μs}\left({\color{gray}-0.638 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_none

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 2	$$2.68 \mathrm{ms} \pm 17.3 \mathrm{μs}\left({\color{gray}-2.652 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$2.53 \mathrm{ms} \pm 17.2 \mathrm{μs}\left({\color{gray}-0.832 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 2	$$2.67 \mathrm{ms} \pm 15.9 \mathrm{μs}\left({\color{gray}-1.060 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 8	$$2.95 \mathrm{ms} \pm 23.6 \mathrm{μs}\left({\color{gray}-1.947 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$2.75 \mathrm{ms} \pm 19.9 \mathrm{μs}\left({\color{gray}-1.455 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 3	$$2.95 \mathrm{ms} \pm 19.4 \mathrm{μs}\left({\color{gray}-1.579 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_small

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 52	$$3.07 \mathrm{ms} \pm 20.9 \mathrm{μs}\left({\color{gray}-2.814 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$2.78 \mathrm{ms} \pm 20.1 \mathrm{μs}\left({\color{gray}-2.448 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 26	$$2.92 \mathrm{ms} \pm 14.7 \mathrm{μs}\left({\color{lightgreen}-6.825 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 94	$$3.46 \mathrm{ms} \pm 25.3 \mathrm{μs}\left({\color{gray}-4.027 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$3.02 \mathrm{ms} \pm 21.0 \mathrm{μs}\left({\color{gray}-0.882 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 27	$$3.27 \mathrm{ms} \pm 26.6 \mathrm{μs}\left({\color{gray}-2.880 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 66	$$3.39 \mathrm{ms} \pm 25.9 \mathrm{μs}\left({\color{gray}-1.758 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$2.97 \mathrm{ms} \pm 21.0 \mathrm{μs}\left({\color{gray}-3.062 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 29	$$3.37 \mathrm{ms} \pm 33.8 \mathrm{μs}\left({\color{gray}-0.688 \mathrm{\%}}\right) $$	Flame Graph

read_scaling_complete

Function	Value	Mean	Flame graphs
entity_by_id;one_depth	1 entities	$$41.8 \mathrm{ms} \pm 281 \mathrm{μs}\left({\color{gray}-0.651 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	10 entities	$$32.8 \mathrm{ms} \pm 208 \mathrm{μs}\left({\color{gray}-0.123 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	25 entities	$$35.9 \mathrm{ms} \pm 276 \mathrm{μs}\left({\color{gray}3.38 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	5 entities	$$32.7 \mathrm{ms} \pm 243 \mathrm{μs}\left({\color{gray}4.17 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	50 entities	$$42.3 \mathrm{ms} \pm 259 \mathrm{μs}\left({\color{gray}4.28 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	1 entities	$$50.3 \mathrm{ms} \pm 455 \mathrm{μs}\left({\color{gray}1.93 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	10 entities	$$40.7 \mathrm{ms} \pm 277 \mathrm{μs}\left({\color{gray}3.29 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	25 entities	$$94.0 \mathrm{ms} \pm 702 \mathrm{μs}\left({\color{gray}4.49 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	5 entities	$$34.2 \mathrm{ms} \pm 240 \mathrm{μs}\left({\color{gray}4.13 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	50 entities	$$312 \mathrm{ms} \pm 1.26 \mathrm{ms}\left({\color{red}23.4 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	1 entities	$$10.6 \mathrm{ms} \pm 70.8 \mathrm{μs}\left({\color{gray}3.87 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	10 entities	$$10.9 \mathrm{ms} \pm 68.2 \mathrm{μs}\left({\color{gray}3.53 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	25 entities	$$10.7 \mathrm{ms} \pm 78.8 \mathrm{μs}\left({\color{gray}2.63 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	5 entities	$$10.8 \mathrm{ms} \pm 83.7 \mathrm{μs}\left({\color{gray}4.21 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	50 entities	$$10.7 \mathrm{ms} \pm 66.1 \mathrm{μs}\left({\color{gray}3.31 \mathrm{\%}}\right) $$	Flame Graph

read_scaling_linkless

Function	Value	Mean	Flame graphs
entity_by_id	1 entities	$$10.7 \mathrm{ms} \pm 67.9 \mathrm{μs}\left({\color{gray}3.01 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	10 entities	$$10.8 \mathrm{ms} \pm 94.5 \mathrm{μs}\left({\color{gray}2.18 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	100 entities	$$10.7 \mathrm{ms} \pm 81.6 \mathrm{μs}\left({\color{gray}1.65 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	1000 entities	$$10.7 \mathrm{ms} \pm 65.8 \mathrm{μs}\left({\color{gray}1.94 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	10000 entities	$$11.0 \mathrm{ms} \pm 81.6 \mathrm{μs}\left({\color{gray}1.42 \mathrm{\%}}\right) $$	Flame Graph

representative_read_entity

Function	Value	Mean	Flame graphs
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/block/v/1	$$10.9 \mathrm{ms} \pm 67.7 \mathrm{μs}\left({\color{lightgreen}-5.593 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/book/v/1	$$11.3 \mathrm{ms} \pm 89.4 \mathrm{μs}\left({\color{gray}3.27 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/building/v/1	$$11.1 \mathrm{ms} \pm 74.5 \mathrm{μs}\left({\color{gray}-1.483 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/organization/v/1	$$11.0 \mathrm{ms} \pm 93.2 \mathrm{μs}\left({\color{gray}-4.483 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/page/v/2	$$11.2 \mathrm{ms} \pm 70.4 \mathrm{μs}\left({\color{gray}2.04 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/person/v/1	$$11.1 \mathrm{ms} \pm 76.2 \mathrm{μs}\left({\color{gray}0.401 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/playlist/v/1	$$10.9 \mathrm{ms} \pm 79.9 \mathrm{μs}\left({\color{gray}-4.078 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/song/v/1	$$11.4 \mathrm{ms} \pm 124 \mathrm{μs}\left({\color{gray}-1.014 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/uk-address/v/1	$$11.0 \mathrm{ms} \pm 71.4 \mathrm{μs}\left({\color{gray}1.67 \mathrm{\%}}\right) $$	Flame Graph

representative_read_entity_type

Function	Value	Mean	Flame graphs
get_entity_type_by_id	Account ID: bf5a9ef5-dc3b-43cf-a291-6210c0321eba	$$8.11 \mathrm{ms} \pm 49.9 \mathrm{μs}\left({\color{gray}-2.960 \mathrm{\%}}\right) $$	Flame Graph

representative_read_multiple_entities

Function	Value	Mean	Flame graphs
entity_by_property	traversal_paths=0	0	$$56.3 \mathrm{ms} \pm 648 \mathrm{μs}\left({\color{lightgreen}-5.465 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=255	1,resolve_depths=inherit:1;values:255;properties:255;links:127;link_dests:126;type:true	$$107 \mathrm{ms} \pm 680 \mathrm{μs}\left({\color{lightgreen}-12.161 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:0;link_dests:0;type:false	$$61.5 \mathrm{ms} \pm 556 \mathrm{μs}\left({\color{lightgreen}-8.315 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:1;link_dests:0;type:true	$$71.8 \mathrm{ms} \pm 619 \mathrm{μs}\left({\color{lightgreen}-6.081 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:2;links:1;link_dests:0;type:true	$$79.9 \mathrm{ms} \pm 639 \mathrm{μs}\left({\color{lightgreen}-7.424 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:2;properties:2;links:1;link_dests:0;type:true	$$85.4 \mathrm{ms} \pm 653 \mathrm{μs}\left({\color{lightgreen}-7.610 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=0	0	$$43.0 \mathrm{ms} \pm 325 \mathrm{μs}\left({\color{lightgreen}-8.248 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=255	1,resolve_depths=inherit:1;values:255;properties:255;links:127;link_dests:126;type:true	$$70.7 \mathrm{ms} \pm 556 \mathrm{μs}\left({\color{gray}-3.604 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:0;link_dests:0;type:false	$$49.2 \mathrm{ms} \pm 346 \mathrm{μs}\left({\color{gray}-4.774 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:1;link_dests:0;type:true	$$58.7 \mathrm{ms} \pm 500 \mathrm{μs}\left({\color{gray}-2.240 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:2;links:1;link_dests:0;type:true	$$60.0 \mathrm{ms} \pm 536 \mathrm{μs}\left({\color{gray}-2.132 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:2;properties:2;links:1;link_dests:0;type:true	$$61.0 \mathrm{ms} \pm 512 \mathrm{μs}\left({\color{gray}-1.630 \mathrm{\%}}\right) $$

scenarios

Function	Value	Mean	Flame graphs
full_test	query-limited	$$119 \mathrm{ms} \pm 987 \mathrm{μs}\left({\color{gray}-1.082 \mathrm{\%}}\right) $$	Flame Graph
full_test	query-unlimited	$$130 \mathrm{ms} \pm 962 \mathrm{μs}\left({\color{gray}-3.119 \mathrm{\%}}\right) $$	Flame Graph
linked_queries	query-limited	$$22.6 \mathrm{ms} \pm 169 \mathrm{μs}\left({\color{red}20.3 \mathrm{\%}}\right) $$	Flame Graph
linked_queries	query-unlimited	$$552 \mathrm{ms} \pm 1.43 \mathrm{ms}\left({\color{gray}4.25 \mathrm{\%}}\right) $$	Flame Graph