@atscript/db 0.1.132 → 0.1.134

package/dist/agg.d.cts

@@ -1,4 +1,4 @@
-import { n as TResolvedBucket } from "./buckets-BvoYYQ2Q.cjs";
+import { n as TResolvedBucket } from "./buckets-Bo2IcPZ_.cjs";
 import { AggregateControls, AggregateExpr, AggregateFn, AggregateQuery, AggregateResult, BucketExpr, BucketUnit, CalendarBucketLabel, ComputedExpr, ResolvedBucket, WeekStart, isAggregateExpr, isBucketExpr, resolveAlias } from "@uniqu/core";
 
 //#region src/agg.d.ts

package/dist/agg.d.mts

@@ -1,4 +1,4 @@
-import { n as TResolvedBucket } from "./buckets-D2XPrwSC.mjs";
+import { n as TResolvedBucket } from "./buckets-Bys2QXyk.mjs";
 import { AggregateControls, AggregateExpr, AggregateFn, AggregateQuery, AggregateResult, BucketExpr, BucketUnit, CalendarBucketLabel, ComputedExpr, ResolvedBucket, WeekStart, isAggregateExpr, isBucketExpr, resolveAlias } from "@uniqu/core";
 
 //#region src/agg.d.ts

package/dist/{buckets-BvoYYQ2Q.d.cts → buckets-Bo2IcPZ_.d.cts}

@@ -361,6 +361,14 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
   get preferredId(): readonly string[];
   /** Legitimate row-identifier shapes (primary key + every unique index). */
   get identifications(): readonly TIdentification[];
+  /**
+   * The {@link identifications} an id may resolve through when fields are
+   * hidden per request (since 0.1.134): a unique index with a field that
+   * fails `isFieldVisible` is dropped, as if it did not exist. Primary-key,
+   * `preferredId` and `@meta.id` fields always count as visible. Without a
+   * predicate, every identification.
+   */
+  identificationsVisibleTo(isFieldVisible?: TIdResolveOptions["isFieldVisible"]): readonly TIdentification[];
   /**
    * Physical column name of the single `@meta.id` field, or `null` when the
    * schema has zero or multiple `@meta.id` fields. Used by adapters to return
@@ -414,6 +422,19 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
    * Pre-computed field metadata for adapter use.
    */
   get fieldDescriptors(): readonly TDbFieldMeta[];
+  /**
+   * The target table of the navigation relation `navField` (since 0.1.134),
+   * resolved through the table resolver this readable was built with (the
+   * `DbSpace`'s). `undefined` when `navField` is not a relation of this table
+   * or no resolver is available (a table constructed without a `DbSpace`).
+   * Top-level relation names only — no dotted paths.
+   *
+   * ```typescript
+   * const users = posts.relatedTable('author')
+   * users?.primaryKeys // ['id']
+   * ```
+   */
+  relatedTable(navField: string): ReturnType<TTableResolver>;
   /**
    * Resolves whether `path` references a real field — directly via `flatMap`
    * or transitively through a nav relation by recursing into the target
@@ -460,10 +481,11 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
    *   `resolveCalendarBuckets`: shapes, unit, zone, alias, grouping)
    * - Plain fields in $select are a subset of $groupBy
    * - When dimensions/measures are defined (strict mode): $groupBy fields
-   *   must be dimensions (a calendar bucket's source field included),
-   *   aggregate $field values must be measures (or '*')
-   * - the path guard (a bucket source must be a timestamp field) and the
-   *   adapter's calendar-bucket units (`BUCKET_NOT_SUPPORTED`)
+   *   must be dimensions, aggregate $field values must be measures (or '*')
+   * - the path guard (a bucket source must pass `bucketSourceVerdict` —
+   *   timestamp type, no JSON ancestor, a dimension in strict mode, an
+   *   adapter with calendar buckets) and the adapter's calendar-bucket units
+   *   (`BUCKET_NOT_SUPPORTED`)
    *
    * Translates field names, delegates to adapter.aggregate(),
    * then reverse-maps and applies fromStorage formatters on results.
@@ -566,17 +588,20 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
    * same identification resolution as {@link findById}. Public so callers can
    * AND-combine the id-filter with a row-level read overlay before issuing
    * `findOne` (avoiding the existence leak that `findById` would cause).
+   * `opts.isFieldVisible` (since 0.1.134) drops unique indexes over hidden
+   * fields — see {@link identificationsVisibleTo}.
    */
-  resolveIdFilter(id: unknown): FilterExpr | null;
+  resolveIdFilter(id: unknown, opts?: TIdResolveOptions): FilterExpr | null;
   /**
    * Resolve an id value into a filter expression.
    *
    * When `preferredId` differs from the PK, scalar ids resolve only against
    * the preferred field (deterministic addressing). Otherwise scalars try PK
    * + every single-field unique index; objects try PK + compound unique
-   * indexes.
+   * indexes. With `opts.isFieldVisible`, only the identifications
+   * {@link identificationsVisibleTo} keeps are tried.
    */
-  protected _resolveIdFilter(id: unknown): FilterExpr | null;
+  protected _resolveIdFilter(id: unknown, opts?: TIdResolveOptions): FilterExpr | null;
   /** Build a single-key filter from `idObj` over `fields`, or null if any field is missing/incompatible. */
   private _tryCompoundFilter;
   /**
@@ -1390,6 +1415,7 @@ declare class TableMetadata {
   physicalNames: ReadonlySet<string>;
   private _built;
   private _identifications?;
+  private _alwaysAddressable?;
   private _collateMap;
   private _columnFromMap;
   constructor(nestedObjects: boolean);
@@ -1486,6 +1512,12 @@ declare class TableMetadata {
   private _buildIdentifications;
   /** Legitimate row-identifier shapes — primary key first, then each unique index. */
   getIdentifications(): readonly TIdentification[];
+  /**
+   * Fields that always count as visible for row identification (since
+   * 0.1.134): primary key, `preferredId` and `@meta.id` fields — see
+   * `AtscriptDbReadable.identificationsVisibleTo`.
+   */
+  getAlwaysAddressable(): ReadonlySet<string>;
   private _resolvePreferredId;
 }
 //#endregion
@@ -2113,8 +2145,13 @@ interface TTouchManyOptions {
    */
   require?: "all" | "any";
 }
-/** Options of `insertOne/Many`, `replaceOne` / `bulkReplace`, `updateOne` / `bulkUpdate`. */
-interface TWriteOptions<Row = Record<string, unknown>> {
+/**
+ * Options of `insertOne/Many`, `replaceOne` / `bulkReplace`, `updateOne` / `bulkUpdate`.
+ * `isFieldVisible` (since 0.1.134, see {@link TIdResolveOptions}) applies to the
+ * top-level rows only — a payload without its primary key identifies through
+ * a unique index; nested-relation writes ignore it.
+ */
+interface TWriteOptions<Row = Record<string, unknown>> extends TIdResolveOptions {
   /** Nested-relation write recursion limit (default 3). */
   maxDepth?: number;
   /**
@@ -2127,8 +2164,8 @@ interface TWriteOptions<Row = Record<string, unknown>> {
    */
   guard?: TDbWriteGuard<Row>;
 }
-/** Options of `deleteOne`. */
-interface TDeleteOptions<Row = Record<string, unknown>> {
+/** Options of `deleteOne`. `isFieldVisible` since 0.1.134 — see {@link TIdResolveOptions}. */
+interface TDeleteOptions<Row = Record<string, unknown>> extends TIdResolveOptions {
   /**
    * Validated-stage guard (since 0.1.128): invoked inside the table's
    * transaction after the id resolved to a filter and before cascade /
@@ -2136,6 +2173,17 @@ interface TDeleteOptions<Row = Record<string, unknown>> {
    */
   guard?: TDbRemoveGuard<Row>;
 }
+/** Options of `resolveIdFilter` / `identificationsVisibleTo` (since 0.1.134). */
+interface TIdResolveOptions {
+  /**
+   * Field-visibility predicate (e.g. a per-request read scope). A unique-index
+   * identification with a field that fails it is ignored — the id resolves
+   * exactly as if that index did not exist, so a hidden unique key can never
+   * answer "a row with this value exists". Primary-key, `preferredId` and
+   * `@meta.id` fields always count as visible.
+   */
+  isFieldVisible?: (path: string) => boolean;
+}
 /**
  * Adds `null` to every optional property of `O`. Optional columns store SQL
  * NULL / Mongo null, and the runtime validator accepts `null` for optional
@@ -2184,10 +2232,12 @@ interface TBucketFieldSource {
  *   moost-db's HTTP gate — so both layers answer with the same wording.
  *   Everything downstream (`collectQueryPaths`, the field mappers,
  *   `UniquSelect`, adapters) assumes normalized input and does not re-check.
- * - **Schema** (timestamp-typed source, JSON ancestor, encryption, physical
- *   filterability) is the path guard's (`guardPath` op `bucket`), mirrored by
- *   moost-db's capability index; dimensions are the aggregate rules'.
- * - **Adapter capability** (`calendarBucketUnits()`) is `guardAggregate`'s
+ * - **The source field** (encryption, JSON ancestor, timestamp type,
+ *   physical filterability, strict-mode dimension, an adapter with calendar
+ *   buckets) is `bucketSourceVerdict` — ONE function, called by the path
+ *   guard (`guardPath` op `bucket`) and by moost-db's capability index, so
+ *   `/meta.fields[P].bucketable` and the core cannot disagree.
+ * - **The unit** (`calendarBucketUnits()` lacks it) is `guardAggregate`'s
  *   (`BUCKET_NOT_SUPPORTED`); SQL builders only re-assert the inlined
  *   literals (defense in depth).
  *
@@ -2200,11 +2250,14 @@ declare function resolveCalendarBuckets(controls: {
   $groupBy?: unknown;
 } | undefined, fields: TBucketFieldSource, aggregate?: boolean): ResolvedBucket[];
 /**
- * Whether a field can be the source of a calendar bucket: a `number` /
- * `integer` leaf carrying the `timestamp` tag (`number.timestamp`,
- * `.created`, `.updated`) that is not `@db.encrypted`. The type is the
- * declaration — no annotation opts a field in. Physical filterability is the
- * caller's (the core path guard and moost-db's capability index both add it).
+ * Whether a field's TYPE allows it to be the source of a calendar bucket: a
+ * `number` / `integer` leaf carrying the `timestamp` tag
+ * (`number.timestamp`, `.created`, `.updated`) that is not
+ * `@db.encrypted`. The type is the declaration — no annotation opts a field
+ * in.
+ *
+ * @deprecated since 0.1.133 — the type rule alone; use `bucketSourceVerdict`,
+ * the full bucket-source rule the core and moost-db apply.
  */
 declare function isBucketableField(fd: TDbFieldMeta): boolean;
 /**
@@ -2221,4 +2274,4 @@ declare function isJsonValueField(fd: TDbFieldMeta): boolean;
  */
 declare function jsonValueAncestor(path: string, jsonValueParents: ReadonlySet<string>): string | undefined;
 //#endregion
-export { TDbWriteGuardContext as $, TDbActionIntent as A, isGeoPointType as At, TDbIndexField as B, NoopLogger as Bt, PrimaryKeyOf$1 as C, TypedWithRelation as Ct, TCrudOp as D, TableMetadata as Dt, TColumnDiff as E, WithRelation$1 as Et, TDbDefaultValue as F, resolveDesignType as Ft, TDbReferentialAction as G, TDbInsertManyResult as H, UniquSelect as Ht, TDbDeleteResult as I, DbEncryption as It, TDbRemoveGuardContext as J, TDbRelation as K, TDbFieldMeta as L, TDbEncryptionOptions as Lt, TDbActionProcessor as M, BaseDbAdapter as Mt, TDbCollation as N, AtscriptDbReadable as Nt, TCrudPermissions as O, findAncestorInSet as Ot, TDbDefaultFn as P, DbResponse as Pt, TDbWriteGuard as Q, TDbForeignKey as R, DocumentFieldMapper as Rt, OwnPropsOf$1 as S, TWriteTableResolver as St, TCascadeTarget as T, UniqueryControls$1 as Tt, TDbInsertResult as U, TDbIndexType as V, TGenericLogger as Vt, TDbObjectKind as W, TDbUpdateResult as X, TDbStorageType as Y, TDbWriteAction as Z, FieldOpsFor as _, TTableOptionDiff as _t, jsonValueAncestor as a, TFieldMeta as at, NavPropsOf$1 as b, TValueFormatterPair as bt, AggregateExpr$1 as c, TIdDescriptor as ct, AggregateResult as d, TMetadataOverrides as dt, TDeleteOptions as et, AtscriptDbWritable as f, TPrimaryKeyChange as ft, DbRow as g, TSyncColumnResult as gt, DbQuery as h, TSearchIndexInfo as ht, isJsonValueField as i, TExistingTableOption as it, TDbActionLevel as j, ALL_BUCKET_UNITS as jt, TDbActionInfo as k, isGeoIndexableType as kt, AggregateFn as l, TIdentification as lt, DbPatch as m, TRelationInfo as mt, TResolvedBucket as n, TExistingColumn as nt, resolveCalendarBuckets as o, TFkLookupResolver as ot, DbControls as p, TReferencingForeignKey as pt, TDbRemoveGuard as q, isBucketableField as r, TExistingForeignKey as rt, AggregateControls as s, TFkLookupTarget as st, TBucketFieldSource as t, TEnsureTableOptions as tt, AggregateQuery$1 as u, TMetaResponse as ut, FilterExpr$1 as v, TTableResolver as vt, TCascadeResolver as w, Uniquery$1 as wt, NullableOptional as x, TWriteOptions as xt, FlatOf$1 as y, TTouchManyOptions as yt, TDbIndex as z, FieldMappingStrategy as zt };
+export { TDbWriteGuardContext as $, TDbActionIntent as A, isGeoIndexableType as At, TDbIndexField as B, FieldMappingStrategy as Bt, PrimaryKeyOf$1 as C, TWriteTableResolver as Ct, TCrudOp as D, WithRelation$1 as Dt, TColumnDiff as E, UniqueryControls$1 as Et, TDbDefaultValue as F, DbResponse as Ft, TDbReferentialAction as G, TDbInsertManyResult as H, TGenericLogger as Ht, TDbDeleteResult as I, resolveDesignType as It, TDbRemoveGuardContext as J, TDbRelation as K, TDbFieldMeta as L, DbEncryption as Lt, TDbActionProcessor as M, ALL_BUCKET_UNITS as Mt, TDbCollation as N, BaseDbAdapter as Nt, TCrudPermissions as O, TableMetadata as Ot, TDbDefaultFn as P, AtscriptDbReadable as Pt, TDbWriteGuard as Q, TDbForeignKey as R, TDbEncryptionOptions as Rt, OwnPropsOf$1 as S, TWriteOptions as St, TCascadeTarget as T, Uniquery$1 as Tt, TDbInsertResult as U, UniquSelect as Ut, TDbIndexType as V, NoopLogger as Vt, TDbObjectKind as W, TDbUpdateResult as X, TDbStorageType as Y, TDbWriteAction as Z, FieldOpsFor as _, TSyncColumnResult as _t, jsonValueAncestor as a, TFieldMeta as at, NavPropsOf$1 as b, TTouchManyOptions as bt, AggregateExpr$1 as c, TIdDescriptor as ct, AggregateResult as d, TMetaResponse as dt, TDeleteOptions as et, AtscriptDbWritable as f, TMetadataOverrides as ft, DbRow as g, TSearchIndexInfo as gt, DbQuery as h, TRelationInfo as ht, isJsonValueField as i, TExistingTableOption as it, TDbActionLevel as j, isGeoPointType as jt, TDbActionInfo as k, findAncestorInSet as kt, AggregateFn as l, TIdResolveOptions as lt, DbPatch as m, TReferencingForeignKey as mt, TResolvedBucket as n, TExistingColumn as nt, resolveCalendarBuckets as o, TFkLookupResolver as ot, DbControls as p, TPrimaryKeyChange as pt, TDbRemoveGuard as q, isBucketableField as r, TExistingForeignKey as rt, AggregateControls as s, TFkLookupTarget as st, TBucketFieldSource as t, TEnsureTableOptions as tt, AggregateQuery$1 as u, TIdentification as ut, FilterExpr$1 as v, TTableOptionDiff as vt, TCascadeResolver as w, TypedWithRelation as wt, NullableOptional as x, TValueFormatterPair as xt, FlatOf$1 as y, TTableResolver as yt, TDbIndex as z, DocumentFieldMapper as zt };

package/dist/{buckets-D2XPrwSC.d.mts → buckets-Bys2QXyk.d.mts}

@@ -361,6 +361,14 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
   get preferredId(): readonly string[];
   /** Legitimate row-identifier shapes (primary key + every unique index). */
   get identifications(): readonly TIdentification[];
+  /**
+   * The {@link identifications} an id may resolve through when fields are
+   * hidden per request (since 0.1.134): a unique index with a field that
+   * fails `isFieldVisible` is dropped, as if it did not exist. Primary-key,
+   * `preferredId` and `@meta.id` fields always count as visible. Without a
+   * predicate, every identification.
+   */
+  identificationsVisibleTo(isFieldVisible?: TIdResolveOptions["isFieldVisible"]): readonly TIdentification[];
   /**
    * Physical column name of the single `@meta.id` field, or `null` when the
    * schema has zero or multiple `@meta.id` fields. Used by adapters to return
@@ -414,6 +422,19 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
    * Pre-computed field metadata for adapter use.
    */
   get fieldDescriptors(): readonly TDbFieldMeta[];
+  /**
+   * The target table of the navigation relation `navField` (since 0.1.134),
+   * resolved through the table resolver this readable was built with (the
+   * `DbSpace`'s). `undefined` when `navField` is not a relation of this table
+   * or no resolver is available (a table constructed without a `DbSpace`).
+   * Top-level relation names only — no dotted paths.
+   *
+   * ```typescript
+   * const users = posts.relatedTable('author')
+   * users?.primaryKeys // ['id']
+   * ```
+   */
+  relatedTable(navField: string): ReturnType<TTableResolver>;
   /**
    * Resolves whether `path` references a real field — directly via `flatMap`
    * or transitively through a nav relation by recursing into the target
@@ -460,10 +481,11 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
    *   `resolveCalendarBuckets`: shapes, unit, zone, alias, grouping)
    * - Plain fields in $select are a subset of $groupBy
    * - When dimensions/measures are defined (strict mode): $groupBy fields
-   *   must be dimensions (a calendar bucket's source field included),
-   *   aggregate $field values must be measures (or '*')
-   * - the path guard (a bucket source must be a timestamp field) and the
-   *   adapter's calendar-bucket units (`BUCKET_NOT_SUPPORTED`)
+   *   must be dimensions, aggregate $field values must be measures (or '*')
+   * - the path guard (a bucket source must pass `bucketSourceVerdict` —
+   *   timestamp type, no JSON ancestor, a dimension in strict mode, an
+   *   adapter with calendar buckets) and the adapter's calendar-bucket units
+   *   (`BUCKET_NOT_SUPPORTED`)
    *
    * Translates field names, delegates to adapter.aggregate(),
    * then reverse-maps and applies fromStorage formatters on results.
@@ -566,17 +588,20 @@ declare class AtscriptDbReadable<T extends TAtscriptAnnotatedType = TAtscriptAnn
    * same identification resolution as {@link findById}. Public so callers can
    * AND-combine the id-filter with a row-level read overlay before issuing
    * `findOne` (avoiding the existence leak that `findById` would cause).
+   * `opts.isFieldVisible` (since 0.1.134) drops unique indexes over hidden
+   * fields — see {@link identificationsVisibleTo}.
    */
-  resolveIdFilter(id: unknown): FilterExpr | null;
+  resolveIdFilter(id: unknown, opts?: TIdResolveOptions): FilterExpr | null;
   /**
    * Resolve an id value into a filter expression.
    *
    * When `preferredId` differs from the PK, scalar ids resolve only against
    * the preferred field (deterministic addressing). Otherwise scalars try PK
    * + every single-field unique index; objects try PK + compound unique
-   * indexes.
+   * indexes. With `opts.isFieldVisible`, only the identifications
+   * {@link identificationsVisibleTo} keeps are tried.
    */
-  protected _resolveIdFilter(id: unknown): FilterExpr | null;
+  protected _resolveIdFilter(id: unknown, opts?: TIdResolveOptions): FilterExpr | null;
   /** Build a single-key filter from `idObj` over `fields`, or null if any field is missing/incompatible. */
   private _tryCompoundFilter;
   /**
@@ -1390,6 +1415,7 @@ declare class TableMetadata {
   physicalNames: ReadonlySet<string>;
   private _built;
   private _identifications?;
+  private _alwaysAddressable?;
   private _collateMap;
   private _columnFromMap;
   constructor(nestedObjects: boolean);
@@ -1486,6 +1512,12 @@ declare class TableMetadata {
   private _buildIdentifications;
   /** Legitimate row-identifier shapes — primary key first, then each unique index. */
   getIdentifications(): readonly TIdentification[];
+  /**
+   * Fields that always count as visible for row identification (since
+   * 0.1.134): primary key, `preferredId` and `@meta.id` fields — see
+   * `AtscriptDbReadable.identificationsVisibleTo`.
+   */
+  getAlwaysAddressable(): ReadonlySet<string>;
   private _resolvePreferredId;
 }
 //#endregion
@@ -2113,8 +2145,13 @@ interface TTouchManyOptions {
    */
   require?: "all" | "any";
 }
-/** Options of `insertOne/Many`, `replaceOne` / `bulkReplace`, `updateOne` / `bulkUpdate`. */
-interface TWriteOptions<Row = Record<string, unknown>> {
+/**
+ * Options of `insertOne/Many`, `replaceOne` / `bulkReplace`, `updateOne` / `bulkUpdate`.
+ * `isFieldVisible` (since 0.1.134, see {@link TIdResolveOptions}) applies to the
+ * top-level rows only — a payload without its primary key identifies through
+ * a unique index; nested-relation writes ignore it.
+ */
+interface TWriteOptions<Row = Record<string, unknown>> extends TIdResolveOptions {
   /** Nested-relation write recursion limit (default 3). */
   maxDepth?: number;
   /**
@@ -2127,8 +2164,8 @@ interface TWriteOptions<Row = Record<string, unknown>> {
    */
   guard?: TDbWriteGuard<Row>;
 }
-/** Options of `deleteOne`. */
-interface TDeleteOptions<Row = Record<string, unknown>> {
+/** Options of `deleteOne`. `isFieldVisible` since 0.1.134 — see {@link TIdResolveOptions}. */
+interface TDeleteOptions<Row = Record<string, unknown>> extends TIdResolveOptions {
   /**
    * Validated-stage guard (since 0.1.128): invoked inside the table's
    * transaction after the id resolved to a filter and before cascade /
@@ -2136,6 +2173,17 @@ interface TDeleteOptions<Row = Record<string, unknown>> {
    */
   guard?: TDbRemoveGuard<Row>;
 }
+/** Options of `resolveIdFilter` / `identificationsVisibleTo` (since 0.1.134). */
+interface TIdResolveOptions {
+  /**
+   * Field-visibility predicate (e.g. a per-request read scope). A unique-index
+   * identification with a field that fails it is ignored — the id resolves
+   * exactly as if that index did not exist, so a hidden unique key can never
+   * answer "a row with this value exists". Primary-key, `preferredId` and
+   * `@meta.id` fields always count as visible.
+   */
+  isFieldVisible?: (path: string) => boolean;
+}
 /**
  * Adds `null` to every optional property of `O`. Optional columns store SQL
  * NULL / Mongo null, and the runtime validator accepts `null` for optional
@@ -2184,10 +2232,12 @@ interface TBucketFieldSource {
  *   moost-db's HTTP gate — so both layers answer with the same wording.
  *   Everything downstream (`collectQueryPaths`, the field mappers,
  *   `UniquSelect`, adapters) assumes normalized input and does not re-check.
- * - **Schema** (timestamp-typed source, JSON ancestor, encryption, physical
- *   filterability) is the path guard's (`guardPath` op `bucket`), mirrored by
- *   moost-db's capability index; dimensions are the aggregate rules'.
- * - **Adapter capability** (`calendarBucketUnits()`) is `guardAggregate`'s
+ * - **The source field** (encryption, JSON ancestor, timestamp type,
+ *   physical filterability, strict-mode dimension, an adapter with calendar
+ *   buckets) is `bucketSourceVerdict` — ONE function, called by the path
+ *   guard (`guardPath` op `bucket`) and by moost-db's capability index, so
+ *   `/meta.fields[P].bucketable` and the core cannot disagree.
+ * - **The unit** (`calendarBucketUnits()` lacks it) is `guardAggregate`'s
  *   (`BUCKET_NOT_SUPPORTED`); SQL builders only re-assert the inlined
  *   literals (defense in depth).
  *
@@ -2200,11 +2250,14 @@ declare function resolveCalendarBuckets(controls: {
   $groupBy?: unknown;
 } | undefined, fields: TBucketFieldSource, aggregate?: boolean): ResolvedBucket[];
 /**
- * Whether a field can be the source of a calendar bucket: a `number` /
- * `integer` leaf carrying the `timestamp` tag (`number.timestamp`,
- * `.created`, `.updated`) that is not `@db.encrypted`. The type is the
- * declaration — no annotation opts a field in. Physical filterability is the
- * caller's (the core path guard and moost-db's capability index both add it).
+ * Whether a field's TYPE allows it to be the source of a calendar bucket: a
+ * `number` / `integer` leaf carrying the `timestamp` tag
+ * (`number.timestamp`, `.created`, `.updated`) that is not
+ * `@db.encrypted`. The type is the declaration — no annotation opts a field
+ * in.
+ *
+ * @deprecated since 0.1.133 — the type rule alone; use `bucketSourceVerdict`,
+ * the full bucket-source rule the core and moost-db apply.
  */
 declare function isBucketableField(fd: TDbFieldMeta): boolean;
 /**
@@ -2221,4 +2274,4 @@ declare function isJsonValueField(fd: TDbFieldMeta): boolean;
  */
 declare function jsonValueAncestor(path: string, jsonValueParents: ReadonlySet<string>): string | undefined;
 //#endregion
-export { TDbWriteGuardContext as $, TDbActionIntent as A, isGeoPointType as At, TDbIndexField as B, NoopLogger as Bt, PrimaryKeyOf$1 as C, TypedWithRelation as Ct, TCrudOp as D, TableMetadata as Dt, TColumnDiff as E, WithRelation$1 as Et, TDbDefaultValue as F, resolveDesignType as Ft, TDbReferentialAction as G, TDbInsertManyResult as H, UniquSelect as Ht, TDbDeleteResult as I, DbEncryption as It, TDbRemoveGuardContext as J, TDbRelation as K, TDbFieldMeta as L, TDbEncryptionOptions as Lt, TDbActionProcessor as M, BaseDbAdapter as Mt, TDbCollation as N, AtscriptDbReadable as Nt, TCrudPermissions as O, findAncestorInSet as Ot, TDbDefaultFn as P, DbResponse as Pt, TDbWriteGuard as Q, TDbForeignKey as R, DocumentFieldMapper as Rt, OwnPropsOf$1 as S, TWriteTableResolver as St, TCascadeTarget as T, UniqueryControls$1 as Tt, TDbInsertResult as U, TDbIndexType as V, TGenericLogger as Vt, TDbObjectKind as W, TDbUpdateResult as X, TDbStorageType as Y, TDbWriteAction as Z, FieldOpsFor as _, TTableOptionDiff as _t, jsonValueAncestor as a, TFieldMeta as at, NavPropsOf$1 as b, TValueFormatterPair as bt, AggregateExpr$1 as c, TIdDescriptor as ct, AggregateResult as d, TMetadataOverrides as dt, TDeleteOptions as et, AtscriptDbWritable as f, TPrimaryKeyChange as ft, DbRow as g, TSyncColumnResult as gt, DbQuery as h, TSearchIndexInfo as ht, isJsonValueField as i, TExistingTableOption as it, TDbActionLevel as j, ALL_BUCKET_UNITS as jt, TDbActionInfo as k, isGeoIndexableType as kt, AggregateFn as l, TIdentification as lt, DbPatch as m, TRelationInfo as mt, TResolvedBucket as n, TExistingColumn as nt, resolveCalendarBuckets as o, TFkLookupResolver as ot, DbControls as p, TReferencingForeignKey as pt, TDbRemoveGuard as q, isBucketableField as r, TExistingForeignKey as rt, AggregateControls as s, TFkLookupTarget as st, TBucketFieldSource as t, TEnsureTableOptions as tt, AggregateQuery$1 as u, TMetaResponse as ut, FilterExpr$1 as v, TTableResolver as vt, TCascadeResolver as w, Uniquery$1 as wt, NullableOptional as x, TWriteOptions as xt, FlatOf$1 as y, TTouchManyOptions as yt, TDbIndex as z, FieldMappingStrategy as zt };
+export { TDbWriteGuardContext as $, TDbActionIntent as A, isGeoIndexableType as At, TDbIndexField as B, FieldMappingStrategy as Bt, PrimaryKeyOf$1 as C, TWriteTableResolver as Ct, TCrudOp as D, WithRelation$1 as Dt, TColumnDiff as E, UniqueryControls$1 as Et, TDbDefaultValue as F, DbResponse as Ft, TDbReferentialAction as G, TDbInsertManyResult as H, TGenericLogger as Ht, TDbDeleteResult as I, resolveDesignType as It, TDbRemoveGuardContext as J, TDbRelation as K, TDbFieldMeta as L, DbEncryption as Lt, TDbActionProcessor as M, ALL_BUCKET_UNITS as Mt, TDbCollation as N, BaseDbAdapter as Nt, TCrudPermissions as O, TableMetadata as Ot, TDbDefaultFn as P, AtscriptDbReadable as Pt, TDbWriteGuard as Q, TDbForeignKey as R, TDbEncryptionOptions as Rt, OwnPropsOf$1 as S, TWriteOptions as St, TCascadeTarget as T, Uniquery$1 as Tt, TDbInsertResult as U, UniquSelect as Ut, TDbIndexType as V, NoopLogger as Vt, TDbObjectKind as W, TDbUpdateResult as X, TDbStorageType as Y, TDbWriteAction as Z, FieldOpsFor as _, TSyncColumnResult as _t, jsonValueAncestor as a, TFieldMeta as at, NavPropsOf$1 as b, TTouchManyOptions as bt, AggregateExpr$1 as c, TIdDescriptor as ct, AggregateResult as d, TMetaResponse as dt, TDeleteOptions as et, AtscriptDbWritable as f, TMetadataOverrides as ft, DbRow as g, TSearchIndexInfo as gt, DbQuery as h, TRelationInfo as ht, isJsonValueField as i, TExistingTableOption as it, TDbActionLevel as j, isGeoPointType as jt, TDbActionInfo as k, findAncestorInSet as kt, AggregateFn as l, TIdResolveOptions as lt, DbPatch as m, TReferencingForeignKey as mt, TResolvedBucket as n, TExistingColumn as nt, resolveCalendarBuckets as o, TFkLookupResolver as ot, DbControls as p, TPrimaryKeyChange as pt, TDbRemoveGuard as q, isBucketableField as r, TExistingForeignKey as rt, AggregateControls as s, TFkLookupTarget as st, TBucketFieldSource as t, TEnsureTableOptions as tt, AggregateQuery$1 as u, TIdentification as ut, FilterExpr$1 as v, TTableOptionDiff as vt, TCascadeResolver as w, TypedWithRelation as wt, NullableOptional as x, TValueFormatterPair as xt, FlatOf$1 as y, TTableResolver as yt, TDbIndex as z, DocumentFieldMapper as zt };

package/dist/{db-space-BQQEgB3d.d.mts → db-space-DtGx5HIC.d.cts}

@@ -1,6 +1,6 @@
-import { Dt as TableMetadata, H as TDbInsertManyResult, I as TDbDeleteResult, It as DbEncryption, Lt as TDbEncryptionOptions, Mt as BaseDbAdapter, Nt as AtscriptDbReadable, St as TWriteTableResolver, U as TDbInsertResult, Vt as TGenericLogger, X as TDbUpdateResult, et as TDeleteOptions, g as DbRow, m as DbPatch, ot as TFkLookupResolver, pt as TReferencingForeignKey, vt as TTableResolver, w as TCascadeResolver, x as NullableOptional, xt as TWriteOptions, yt as TTouchManyOptions } from "./buckets-D2XPrwSC.mjs";
-import { AtscriptQueryComparison, AtscriptQueryFieldRef, AtscriptQueryFieldRef as AtscriptQueryFieldRef$1, AtscriptQueryNode, AtscriptQueryNode as AtscriptQueryNode$1, AtscriptRef, FlatOf, NavPropsOf, OwnPropsOf, PrimaryKeyOf, TAtscriptAnnotatedType, TAtscriptDataType, Validator } from "@atscript/typescript/utils";
+import { Ct as TWriteTableResolver, H as TDbInsertManyResult, Ht as TGenericLogger, I as TDbDeleteResult, Lt as DbEncryption, Nt as BaseDbAdapter, Ot as TableMetadata, Pt as AtscriptDbReadable, Rt as TDbEncryptionOptions, St as TWriteOptions, U as TDbInsertResult, X as TDbUpdateResult, bt as TTouchManyOptions, et as TDeleteOptions, g as DbRow, lt as TIdResolveOptions, m as DbPatch, mt as TReferencingForeignKey, ot as TFkLookupResolver, w as TCascadeResolver, x as NullableOptional, yt as TTableResolver } from "./buckets-Bo2IcPZ_.cjs";
 import { FilterExpr } from "@uniqu/core";
+import { AtscriptQueryComparison, AtscriptQueryFieldRef, AtscriptQueryFieldRef as AtscriptQueryFieldRef$1, AtscriptQueryNode, AtscriptQueryNode as AtscriptQueryNode$1, AtscriptRef, FlatOf, NavPropsOf, OwnPropsOf, PrimaryKeyOf, TAtscriptAnnotatedType, TAtscriptDataType, Validator } from "@atscript/typescript/utils";
 
 //#region src/strategies/integrity.d.ts
 /**
@@ -202,9 +202,11 @@ declare class AtscriptDbTable<T extends TAtscriptAnnotatedType = TAtscriptAnnota
    * 2. Single-field unique index — first `@db.index.unique` field found.
    * 3. Compound unique index — first compound unique index whose fields are all present.
    *
-   * Throws when no identifying fields can be found.
+   * Throws when no identifying fields can be found. With `isFieldVisible`
+   * (since 0.1.134), a unique index over a hidden field is skipped, as if it
+   * did not exist — see {@link identificationsVisibleTo}.
    */
-  protected _extractRecordFilter(payload: Record<string, unknown>): FilterExpr;
+  protected _extractRecordFilter(payload: Record<string, unknown>, opts?: TIdResolveOptions): FilterExpr;
   private _prepareFilterValue;
   /**
    * Lazy — builds a `normalized-path → from-depth` map from `this._meta.flatMap`

package/dist/{db-space-Cslq5Dux.d.cts → db-space-grfuZcPR.d.mts}

@@ -1,6 +1,6 @@
-import { Dt as TableMetadata, H as TDbInsertManyResult, I as TDbDeleteResult, It as DbEncryption, Lt as TDbEncryptionOptions, Mt as BaseDbAdapter, Nt as AtscriptDbReadable, St as TWriteTableResolver, U as TDbInsertResult, Vt as TGenericLogger, X as TDbUpdateResult, et as TDeleteOptions, g as DbRow, m as DbPatch, ot as TFkLookupResolver, pt as TReferencingForeignKey, vt as TTableResolver, w as TCascadeResolver, x as NullableOptional, xt as TWriteOptions, yt as TTouchManyOptions } from "./buckets-BvoYYQ2Q.cjs";
-import { FilterExpr } from "@uniqu/core";
+import { Ct as TWriteTableResolver, H as TDbInsertManyResult, Ht as TGenericLogger, I as TDbDeleteResult, Lt as DbEncryption, Nt as BaseDbAdapter, Ot as TableMetadata, Pt as AtscriptDbReadable, Rt as TDbEncryptionOptions, St as TWriteOptions, U as TDbInsertResult, X as TDbUpdateResult, bt as TTouchManyOptions, et as TDeleteOptions, g as DbRow, lt as TIdResolveOptions, m as DbPatch, mt as TReferencingForeignKey, ot as TFkLookupResolver, w as TCascadeResolver, x as NullableOptional, yt as TTableResolver } from "./buckets-Bys2QXyk.mjs";
 import { AtscriptQueryComparison, AtscriptQueryFieldRef, AtscriptQueryFieldRef as AtscriptQueryFieldRef$1, AtscriptQueryNode, AtscriptQueryNode as AtscriptQueryNode$1, AtscriptRef, FlatOf, NavPropsOf, OwnPropsOf, PrimaryKeyOf, TAtscriptAnnotatedType, TAtscriptDataType, Validator } from "@atscript/typescript/utils";
+import { FilterExpr } from "@uniqu/core";
 
 //#region src/strategies/integrity.d.ts
 /**
@@ -202,9 +202,11 @@ declare class AtscriptDbTable<T extends TAtscriptAnnotatedType = TAtscriptAnnota
    * 2. Single-field unique index — first `@db.index.unique` field found.
    * 3. Compound unique index — first compound unique index whose fields are all present.
    *
-   * Throws when no identifying fields can be found.
+   * Throws when no identifying fields can be found. With `isFieldVisible`
+   * (since 0.1.134), a unique index over a hidden field is skipped, as if it
+   * did not exist — see {@link identificationsVisibleTo}.
    */
-  protected _extractRecordFilter(payload: Record<string, unknown>): FilterExpr;
+  protected _extractRecordFilter(payload: Record<string, unknown>, opts?: TIdResolveOptions): FilterExpr;
   private _prepareFilterValue;
   /**
    * Lazy — builds a `normalized-path → from-depth` map from `this._meta.flatMap`