@klum-db/lobby 0.2.0-pre.32 → 0.3.0-pre.1

package/dist/index.d.cts

@@ -1,13 +1,13 @@
-import { Vault, SealingKeyProvider, PublicEnvelope, Noydb } from '@noy-db/hub';
-export { CustodyApi, DeedMarker, GrantCustodianOptions, LiberateOptions, LiberateResult, createDeedOwner, isDeedVault, liberateVault, loadDeedMarker } from '@noy-db/hub';
-import { a as VaultTemplate, S as StateManagementVault, V as VaultGroup, b as SkippedVault, M as MergeCompartmentOptions, c as MergeReport, d as SurfaceDirection, e as SurfaceConflictPolicy, f as SurfaceRow, g as VaultGroupOptions } from './vault-group-BchRCDm5.cjs';
-export { C as CapturedBlueprint, h as CrossVaultAggregation, i as CrossVaultDerivationContext, j as CrossVaultDerivationSpec, k as CrossVaultGroupedAggregation, G as CrossVaultGroupedRow, l as CrossVaultLiveAggregation, m as CrossVaultLiveQuery, D as DecryptedMergeOptions, n as DeploymentEvent, F as FanoutQueryOptions, o as FanoutResult, p as FederatedRetrieveHit, q as FederatedRetrieveOptions, r as FederatedRetrieveResult, s as FederationMeta, t as FieldAuthorityInputs, u as FieldAuthorityPolicy, v as FieldAuthorityPolicyMissingError, w as FieldAuthorityRule, x as FieldLevelDeferredError, y as GroupMeta, L as LiveQueryOptions, z as MergeConflict, A as MergeStrategy, B as MigrationStatusRow, R as RefreshInsightsResult, E as SchemaManifestRow, H as SchemaRolloutResult, I as ShardedCollection, J as ShardedGroupedQuery, K as ShardedQuery, N as ShardingConfig, O as SurfaceStatus, P as VaultRegistryRow, Q as mergeCompartment, T as mergeDecryptedRecords, U as resolveFieldAuthority, W as resolveRecordByFieldAuthority } from './vault-group-BchRCDm5.cjs';
+import { Vault, SealingKeyProvider, Noydb } from '@noy-db/hub/cargo';
+export { CrossShardJoinError, CustodyApi, DataResidencyError, DeedMarker, GrantCustodianOptions, LiberateOptions, LiberateResult, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, VaultTemplateNotFoundError, createDeedOwner, isDeedVault, liberateVault, loadDeedMarker } from '@noy-db/hub/cargo';
+import { a as VaultTemplate, S as StateManagementVault, V as VaultGroup, b as SkippedVault, M as MergeCompartmentOptions, c as MergeReport, d as SurfaceDirection, e as SurfaceConflictPolicy, f as SurfaceRow, g as VaultGroupOptions } from './vault-group-D0EC-D5c.cjs';
+export { C as CapturedBlueprint, h as CrossVaultAggregation, i as CrossVaultDerivationContext, j as CrossVaultDerivationSpec, k as CrossVaultGroupedAggregation, G as CrossVaultGroupedRow, l as CrossVaultLiveAggregation, m as CrossVaultLiveQuery, D as DecryptedMergeOptions, n as DeploymentEvent, F as FanoutQueryOptions, o as FanoutResult, p as FederatedRetrieveHit, q as FederatedRetrieveOptions, r as FederatedRetrieveResult, s as FederationMeta, t as FieldAuthorityInputs, u as FieldAuthorityPolicy, v as FieldAuthorityPolicyMissingError, w as FieldAuthorityRule, x as FieldLevelDeferredError, y as GroupMeta, I as InsightAutoPushConfig, L as LiveQueryOptions, z as MergeConflict, A as MergeStrategy, B as MigrationStatusRow, R as RefreshInsightsResult, E as SchemaManifestRow, H as SchemaRolloutResult, J as ShardedCollection, K as ShardedGroupedQuery, N as ShardedQuery, O as ShardingConfig, P as SurfaceStatus, Q as VaultRegistryRow, T as mergeCompartment, U as mergeDecryptedRecords, W as resolveFieldAuthority, X as resolveRecordByFieldAuthority } from './vault-group-D0EC-D5c.cjs';
 import { AsXlsxSheetOptions } from '@noy-db/as-xlsx';
 export { MultiVaultDenormColumn, MultiVaultXlsxEntry, MultiVaultXlsxOptions } from '@noy-db/as-xlsx';
-import { ExtractionPreview, WriteNoydbBundleOptions } from '@noy-db/hub/bundle';
-import { Vault as Vault$1 } from '@noy-db/hub/kernel';
-export { CrossShardJoinError, DataResidencyError, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, VaultTemplateNotFoundError } from '@noy-db/hub/kernel';
+import { ExtractionPreview } from '@noy-db/hub/bundle';
 import { InspectableContainer } from '@noy-db/in-devtools';
+import { WritePodOptions } from '@noy-db/hub/pod';
+import { PublicEnvelope } from '@noy-db/hub';
 
 /**
  * @klum-db/lobby interchange — cross-vault FK-closure extraction.
@@ -284,7 +284,7 @@ declare function meterGroup<T>(group: VaultGroup<T>, opts?: {
  * that embeds N standard single-vault `.noydb` bundles plus an
  * unencrypted, owner-curated **manifest**. The v1 single-vault format
  * is untouched; each compartment is a complete v1 bundle, produced by
- * `writeNoydbBundle` and read by `readNoydbBundle`.
+ * `writePod` and read by `readNoydbBundle`.
  *
  * Layout: magic 'NDBM'(4) · version(1) · reserved(1) · manifestLen(4 BE)
  *         · manifest JSON · concat(inner v1 bundles, in manifest order).
@@ -338,7 +338,7 @@ declare function decodeMultiBundle(bytes: Uint8Array): {
 };
 /** Per-compartment input to {@link writeMultiVaultBundle}. */
 interface MultiVaultCompartmentInput {
-    readonly vault: Vault$1;
+    readonly vault: Vault;
     /** Owner-curated classification surfaced in the manifest (e.g. 'shard', 'pool'). */
     readonly roleTag?: string;
     /** ISO timestamp for the manifest; defaults to now. */
@@ -352,8 +352,8 @@ interface MultiVaultCompartmentInput {
         /** `true` → surface the inner bundle's public envelope into the manifest. */
         readonly publicEnvelope?: boolean;
     };
-    /** Options forwarded to `writeNoydbBundle` for this compartment's inner bundle. */
-    readonly bundleOptions?: WriteNoydbBundleOptions;
+    /** Options forwarded to `writePod` for this compartment's inner bundle. */
+    readonly bundleOptions?: WritePodOptions;
 }
 /** Write N vaults into one `NDBM` multi-compartment bundle. */
 declare function writeMultiVaultBundle(compartments: readonly MultiVaultCompartmentInput[], opts?: {

package/dist/index.d.ts

@@ -1,13 +1,13 @@
-import { Vault, SealingKeyProvider, PublicEnvelope, Noydb } from '@noy-db/hub';
-export { CustodyApi, DeedMarker, GrantCustodianOptions, LiberateOptions, LiberateResult, createDeedOwner, isDeedVault, liberateVault, loadDeedMarker } from '@noy-db/hub';
-import { a as VaultTemplate, S as StateManagementVault, V as VaultGroup, b as SkippedVault, M as MergeCompartmentOptions, c as MergeReport, d as SurfaceDirection, e as SurfaceConflictPolicy, f as SurfaceRow, g as VaultGroupOptions } from './vault-group-BchRCDm5.js';
-export { C as CapturedBlueprint, h as CrossVaultAggregation, i as CrossVaultDerivationContext, j as CrossVaultDerivationSpec, k as CrossVaultGroupedAggregation, G as CrossVaultGroupedRow, l as CrossVaultLiveAggregation, m as CrossVaultLiveQuery, D as DecryptedMergeOptions, n as DeploymentEvent, F as FanoutQueryOptions, o as FanoutResult, p as FederatedRetrieveHit, q as FederatedRetrieveOptions, r as FederatedRetrieveResult, s as FederationMeta, t as FieldAuthorityInputs, u as FieldAuthorityPolicy, v as FieldAuthorityPolicyMissingError, w as FieldAuthorityRule, x as FieldLevelDeferredError, y as GroupMeta, L as LiveQueryOptions, z as MergeConflict, A as MergeStrategy, B as MigrationStatusRow, R as RefreshInsightsResult, E as SchemaManifestRow, H as SchemaRolloutResult, I as ShardedCollection, J as ShardedGroupedQuery, K as ShardedQuery, N as ShardingConfig, O as SurfaceStatus, P as VaultRegistryRow, Q as mergeCompartment, T as mergeDecryptedRecords, U as resolveFieldAuthority, W as resolveRecordByFieldAuthority } from './vault-group-BchRCDm5.js';
+import { Vault, SealingKeyProvider, Noydb } from '@noy-db/hub/cargo';
+export { CrossShardJoinError, CustodyApi, DataResidencyError, DeedMarker, GrantCustodianOptions, LiberateOptions, LiberateResult, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, VaultTemplateNotFoundError, createDeedOwner, isDeedVault, liberateVault, loadDeedMarker } from '@noy-db/hub/cargo';
+import { a as VaultTemplate, S as StateManagementVault, V as VaultGroup, b as SkippedVault, M as MergeCompartmentOptions, c as MergeReport, d as SurfaceDirection, e as SurfaceConflictPolicy, f as SurfaceRow, g as VaultGroupOptions } from './vault-group-D0EC-D5c.js';
+export { C as CapturedBlueprint, h as CrossVaultAggregation, i as CrossVaultDerivationContext, j as CrossVaultDerivationSpec, k as CrossVaultGroupedAggregation, G as CrossVaultGroupedRow, l as CrossVaultLiveAggregation, m as CrossVaultLiveQuery, D as DecryptedMergeOptions, n as DeploymentEvent, F as FanoutQueryOptions, o as FanoutResult, p as FederatedRetrieveHit, q as FederatedRetrieveOptions, r as FederatedRetrieveResult, s as FederationMeta, t as FieldAuthorityInputs, u as FieldAuthorityPolicy, v as FieldAuthorityPolicyMissingError, w as FieldAuthorityRule, x as FieldLevelDeferredError, y as GroupMeta, I as InsightAutoPushConfig, L as LiveQueryOptions, z as MergeConflict, A as MergeStrategy, B as MigrationStatusRow, R as RefreshInsightsResult, E as SchemaManifestRow, H as SchemaRolloutResult, J as ShardedCollection, K as ShardedGroupedQuery, N as ShardedQuery, O as ShardingConfig, P as SurfaceStatus, Q as VaultRegistryRow, T as mergeCompartment, U as mergeDecryptedRecords, W as resolveFieldAuthority, X as resolveRecordByFieldAuthority } from './vault-group-D0EC-D5c.js';
 import { AsXlsxSheetOptions } from '@noy-db/as-xlsx';
 export { MultiVaultDenormColumn, MultiVaultXlsxEntry, MultiVaultXlsxOptions } from '@noy-db/as-xlsx';
-import { ExtractionPreview, WriteNoydbBundleOptions } from '@noy-db/hub/bundle';
-import { Vault as Vault$1 } from '@noy-db/hub/kernel';
-export { CrossShardJoinError, DataResidencyError, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, VaultTemplateNotFoundError } from '@noy-db/hub/kernel';
+import { ExtractionPreview } from '@noy-db/hub/bundle';
 import { InspectableContainer } from '@noy-db/in-devtools';
+import { WritePodOptions } from '@noy-db/hub/pod';
+import { PublicEnvelope } from '@noy-db/hub';
 
 /**
  * @klum-db/lobby interchange — cross-vault FK-closure extraction.
@@ -284,7 +284,7 @@ declare function meterGroup<T>(group: VaultGroup<T>, opts?: {
  * that embeds N standard single-vault `.noydb` bundles plus an
  * unencrypted, owner-curated **manifest**. The v1 single-vault format
  * is untouched; each compartment is a complete v1 bundle, produced by
- * `writeNoydbBundle` and read by `readNoydbBundle`.
+ * `writePod` and read by `readNoydbBundle`.
  *
  * Layout: magic 'NDBM'(4) · version(1) · reserved(1) · manifestLen(4 BE)
  *         · manifest JSON · concat(inner v1 bundles, in manifest order).
@@ -338,7 +338,7 @@ declare function decodeMultiBundle(bytes: Uint8Array): {
 };
 /** Per-compartment input to {@link writeMultiVaultBundle}. */
 interface MultiVaultCompartmentInput {
-    readonly vault: Vault$1;
+    readonly vault: Vault;
     /** Owner-curated classification surfaced in the manifest (e.g. 'shard', 'pool'). */
     readonly roleTag?: string;
     /** ISO timestamp for the manifest; defaults to now. */
@@ -352,8 +352,8 @@ interface MultiVaultCompartmentInput {
         /** `true` → surface the inner bundle's public envelope into the manifest. */
         readonly publicEnvelope?: boolean;
     };
-    /** Options forwarded to `writeNoydbBundle` for this compartment's inner bundle. */
-    readonly bundleOptions?: WriteNoydbBundleOptions;
+    /** Options forwarded to `writePod` for this compartment's inner bundle. */
+    readonly bundleOptions?: WritePodOptions;
 }
 /** Write N vaults into one `NDBM` multi-compartment bundle. */
 declare function writeMultiVaultBundle(compartments: readonly MultiVaultCompartmentInput[], opts?: {

package/dist/index.js

@@ -25,11 +25,11 @@ var init_uint32 = __esm({
 });
 
 // src/bundle/multi-bundle.ts
-import { sha256Hex, generateULID } from "@noy-db/hub/kernel";
+import { sha256Hex, generateULID } from "@noy-db/hub/cargo";
 import {
-  writeNoydbBundle,
-  readNoydbBundleHeader
-} from "@noy-db/hub/bundle";
+  writePod,
+  readPodHeader
+} from "@noy-db/hub/pod";
 import {
   readNoydbBundlePublicEnvelope,
   hasNoydbBundleMagic
@@ -116,8 +116,8 @@ async function writeMultiVaultBundle(compartments, opts = {}) {
   const inner = [];
   const entries = [];
   for (const c of compartments) {
-    const innerBytes = await writeNoydbBundle(c.vault, c.bundleOptions ?? {});
-    const header = readNoydbBundleHeader(innerBytes);
+    const innerBytes = await writePod(c.vault, c.bundleOptions ?? {});
+    const header = readPodHeader(innerBytes);
     const entry = {
       handle: header.handle,
       exportedAt: c.exportedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
@@ -153,7 +153,7 @@ async function writeMultiVaultBundle(compartments, opts = {}) {
 async function readNoydbBundleManifest(bytes) {
   if (hasMultiMagic(bytes)) return [...decodeMultiBundle(bytes).manifest.compartments];
   if (hasNoydbBundleMagic(bytes)) {
-    const header = readNoydbBundleHeader(bytes);
+    const header = readPodHeader(bytes);
     const env = readNoydbBundlePublicEnvelope(bytes);
     const entry = {
       handle: header.handle,
@@ -170,7 +170,7 @@ function readMultiVaultBundleCompartment(bytes, selector) {
     throw new Error(`readMultiVaultBundleCompartment: numeric selector must be an integer, got ${selector}.`);
   }
   if (hasNoydbBundleMagic(bytes) && !hasMultiMagic(bytes)) {
-    const header = readNoydbBundleHeader(bytes);
+    const header = readPodHeader(bytes);
     if (selector === 0 || selector === header.handle) return bytes;
     throw new Error(`readMultiVaultBundleCompartment: single v1 bundle has only compartment "${header.handle}".`);
   }
@@ -201,10 +201,10 @@ __export(extract_cross_vault_exports, {
 import {
   walkClosure,
   extractPartition,
-  readNoydbBundleHeader as readNoydbBundleHeader2,
   describeExtraction
 } from "@noy-db/hub/bundle";
-import { sha256Hex as sha256Hex2, generateULID as generateULID2 } from "@noy-db/hub/kernel";
+import { readPodHeader as readPodHeader2 } from "@noy-db/hub/pod";
+import { sha256Hex as sha256Hex2, generateULID as generateULID2 } from "@noy-db/hub/cargo";
 function asIdArray(v) {
   if (v === null || v === void 0) return [];
   if (Array.isArray(v)) return v.filter((x) => typeof x === "string" || typeof x === "number").map(String);
@@ -321,7 +321,7 @@ async function extractCrossVaultPartition(openVault, opts) {
       carryLedger: opts.carryLedger ?? false,
       ...opts.compression !== void 0 ? { compression: opts.compression } : {}
     });
-    const header = readNoydbBundleHeader2(bundleBytes);
+    const header = readPodHeader2(bundleBytes);
     const meta = opts.compartmentMeta?.[vaultName];
     const entry = {
       handle: header.handle,
@@ -429,7 +429,7 @@ var init_field_authority = __esm({
 });
 
 // src/interchange/merge-compartment.ts
-import { diffVault } from "@noy-db/hub";
+import { diffVault } from "@noy-db/hub/cargo";
 import { decryptExtractedPartition } from "@noy-db/hub/bundle";
 function strategyFor(opts, collection) {
   if (typeof opts === "string") return opts;
@@ -638,7 +638,7 @@ __export(graduate_exports, {
   UnitGraduationError: () => UnitGraduationError,
   graduate: () => graduate
 });
-import { createDeedOwner } from "@noy-db/hub";
+import { createDeedOwner } from "@noy-db/hub/cargo";
 async function graduate(noydb, docked, opts) {
   const vault = await noydb.openVault(opts.vaultName);
   opts.template.configure(vault);
@@ -724,7 +724,7 @@ __export(surface_exports, {
   markSynced: () => markSynced,
   proposeSurface: () => proposeSurface
 });
-import { generateULID as generateULID3 } from "@noy-db/hub/kernel";
+import { generateULID as generateULID3 } from "@noy-db/hub/cargo";
 import { extractPartition as extractPartition2 } from "@noy-db/hub/bundle";
 async function proposeSurface(smv, def, proposedBy, now) {
   const row = {
@@ -846,7 +846,7 @@ var init_surface = __esm({
 });
 
 // src/federation/schema-manifest.ts
-import { sha256Hex as sha256Hex3 } from "@noy-db/hub/kernel";
+import { sha256Hex as sha256Hex3 } from "@noy-db/hub/cargo";
 function captureBlueprint(configure) {
   const recorded = [];
   const collectionStub = new Proxy(
@@ -906,7 +906,7 @@ var init_schema_manifest = __esm({
 });
 
 // src/federation/constants.ts
-import { STATE_VAULT_NAME } from "@noy-db/hub";
+import { STATE_VAULT_NAME } from "@noy-db/hub/cargo";
 var init_constants = __esm({
   "src/federation/constants.ts"() {
     "use strict";
@@ -919,7 +919,7 @@ __export(state_vault_exports, {
   STATE_VAULT_NAME: () => STATE_VAULT_NAME,
   StateManagementVault: () => StateManagementVault
 });
-import { generateULID as generateULID4 } from "@noy-db/hub/kernel";
+import { generateULID as generateULID4 } from "@noy-db/hub/cargo";
 var REGISTRY, MANIFEST, EVENTS, MIGRATION_STATUS, SURFACES, StateManagementVault;
 var init_state_vault = __esm({
   "src/federation/state-vault.ts"() {
@@ -1056,7 +1056,7 @@ var init_state_vault = __esm({
 });
 
 // src/federation/classify-skip.ts
-import { NoAccessError } from "@noy-db/hub/kernel";
+import { NoAccessError } from "@noy-db/hub/cargo";
 function classifyShardSkip(err) {
   return err instanceof NoAccessError ? "no-grant" : "error";
 }
@@ -1067,7 +1067,7 @@ var init_classify_skip = __esm({
 });
 
 // src/federation/cross-shard-join.ts
-import { readPath } from "@noy-db/hub/kernel";
+import { readPath } from "@noy-db/hub/cargo";
 function coerceKey(value) {
   if (value === null || value === void 0) return null;
   if (typeof value === "string") return value;
@@ -1209,28 +1209,33 @@ var init_insight_auto_push = __esm({
   "src/federation/insight-auto-push.ts"() {
     "use strict";
     InsightAutoPush = class {
-      constructor(recompute, isSource, onError = (err, pk) => console.warn(`[klum-db] insight auto-push failed for shard "${pk}":`, err)) {
+      constructor(recompute, isSource, onError = (err, pk) => console.warn(`[klum-db] insight auto-push failed for shard "${pk}":`, err), debounceMs) {
         this.recompute = recompute;
         this.isSource = isSource;
         this.onError = onError;
+        this.debounceMs = debounceMs;
       }
       recompute;
       isSource;
       onError;
-      /** Partition keys awaiting recompute. */
+      debounceMs;
       dirty = /* @__PURE__ */ new Set();
-      /** The in-flight flush, or null when idle. */
       pending = null;
+      timer = null;
+      resolvePending = null;
+      flushing = false;
       /** Called from a shard's onAfterWrite hook. Marks the shard dirty + schedules a flush. */
       noteWrite(partitionKey, collection) {
         if (!this.isSource(collection)) return;
         this.dirty.add(partitionKey);
-        this.schedule();
+        if (this.debounceMs !== void 0) this.scheduleDebounced();
+        else this.schedule();
       }
       /** Resolve once no flush is pending (drains rescheduled flushes too). */
       async whenSettled() {
         while (this.pending) await this.pending;
       }
+      // ── microtask path (unchanged default) ──
       schedule() {
         if (this.pending) return;
         this.pending = this.runFlush().finally(() => {
@@ -1238,6 +1243,29 @@ var init_insight_auto_push = __esm({
           if (this.dirty.size > 0) this.schedule();
         });
       }
+      // ── debounce path (#13) ──
+      scheduleDebounced() {
+        if (!this.pending) this.pending = new Promise((r) => {
+          this.resolvePending = r;
+        });
+        if (this.timer) clearTimeout(this.timer);
+        this.timer = setTimeout(() => {
+          this.timer = null;
+          if (this.flushing) return;
+          this.flushing = true;
+          void this.runFlush().finally(() => {
+            this.flushing = false;
+            if (this.dirty.size > 0) {
+              this.scheduleDebounced();
+            } else {
+              const resolve = this.resolvePending;
+              this.resolvePending = null;
+              this.pending = null;
+              resolve?.();
+            }
+          });
+        }, this.debounceMs);
+      }
       async runFlush() {
         await Promise.resolve();
         const pks = [...this.dirty];
@@ -1292,8 +1320,8 @@ var init_partial_reduce = __esm({
 });
 
 // src/federation/aggregate-across.ts
-import { reduceRecords } from "@noy-db/hub/kernel";
-import { groupAndReduce } from "@noy-db/hub/kernel";
+import { reduceRecords } from "@noy-db/hub/cargo";
+import { groupAndReduce } from "@noy-db/hub/cargo";
 var CrossVaultAggregation, CrossVaultGroupedAggregation;
 var init_aggregate_across = __esm({
   "src/federation/aggregate-across.ts"() {
@@ -1403,7 +1431,7 @@ var init_aggregate_across = __esm({
 });
 
 // src/federation/retrieve-across.ts
-import { fuseRetrieval } from "@noy-db/hub/kernel";
+import { fuseRetrieval } from "@noy-db/hub/cargo";
 async function retrieveAcross(group, collectionName, query, opts = {}) {
   const { eligible, skipped } = await group.resolveEligible({
     ...opts.minVersion !== void 0 ? { minVersion: opts.minVersion } : {},
@@ -1477,7 +1505,11 @@ __export(vault_group_exports, {
   ShardedQuery: () => ShardedQuery,
   VaultGroup: () => VaultGroup
 });
-import { CrossShardJoinError, DataResidencyError, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, ValidationError } from "@noy-db/hub/kernel";
+import { CrossShardJoinError, DataResidencyError, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, ValidationError } from "@noy-db/hub/cargo";
+function autoPushConfig(spec) {
+  if (!spec.autoPush) return null;
+  return spec.autoPush === true ? {} : spec.autoPush;
+}
 function assertSafePartitionKey(partitionKey) {
   if (partitionKey.length === 0) {
     throw new ValidationError("partitionKey must be a non-empty string");
@@ -1741,9 +1773,12 @@ var init_vault_group = __esm({
         }
         this.crossVaultDerivations.push(spec);
         if (spec.autoPush && !this.insightAutoPush) {
+          const cfg = autoPushConfig(spec);
           const controller = new InsightAutoPush(
             (pk) => this._recomputeShardInsights(pk),
-            (collection) => this.crossVaultDerivations.some((s) => s.autoPush && s.source === collection)
+            (collection) => this.crossVaultDerivations.some((s) => s.autoPush && s.source === collection),
+            void 0,
+            cfg?.debounceMs
           );
           this.insightAutoPush = controller;
           const prefix = `${this.name}${SHARD_SEPARATOR}`;
@@ -1824,6 +1859,8 @@ var init_vault_group = __esm({
         };
         for (const spec of this.crossVaultDerivations) {
           if (!spec.autoPush) continue;
+          const min = autoPushConfig(spec)?.minVersion;
+          if (min !== void 0 && row.schemaVersion < min) continue;
           const records = await shard.collection(spec.source).list();
           const summary = spec.derive(records, ctx);
           const insight = await this.db.openVault(spec.target.vault);
@@ -2104,23 +2141,23 @@ var init_vault_group = __esm({
           isRelevant: (e) => e.collection === collectionName && e.vault.startsWith(`${group.name}--`)
         };
       }
-      /** @internal — joined queries don't support reactive/aggregate surfaces in v1. */
-      assertNoJoinLegs(surface) {
-        if (this.coPartitionedLegs.length || this.broadcastLegs.length) {
-          throw new CrossShardJoinError(
-            `${surface}() is not supported on a ShardedQuery with crossShardJoin/broadcastJoin legs in v1. Use toArray() for joined cross-shard queries.`
-          );
-        }
-      }
-      /** Returns a reactive cross-shard live query — a facade over CrossVaultLive. */
+      /**
+       * Returns a reactive cross-shard live query — a facade over CrossVaultLive.
+       *
+       * Joined queries (crossShardJoin / broadcastJoin) are supported (#14): the live
+       * value reflects the fully-joined rows. **v1 limitation:** recomputes only on
+       * writes to the primary (left) collection; writes to a co-partitioned right
+       * collection or a broadcast-dimension collection do NOT trigger a recompute —
+       * re-run the query to pick those up.
+       */
       live(options = {}) {
-        this.assertNoJoinLegs("live");
         const bind = this.liveBinding();
         const core = new CrossVaultLive({
           ...bind,
           compute: async () => {
             const { records, skippedVaults } = await this.fanoutRecords(options);
-            return { records, skipped: skippedVaults };
+            const joined = await applyBroadcastLegs(records, this.broadcastLegs);
+            return { records: joined, skipped: skippedVaults };
           },
           initialSnapshot: { records: [], skipped: [] },
           ...options.debounceMs !== void 0 ? { debounceMs: options.debounceMs } : {}
@@ -2140,14 +2177,28 @@ var init_vault_group = __esm({
           stop: () => core.stop()
         };
       }
+      /**
+       * @internal — the FanoutRecordSource for aggregate surfaces. With no join legs,
+       * returns `this` (partial-reduce-eligible, #8). With join legs, returns a
+       * toArray-backed source (fully-joined rows) and NO fanoutReduce, forcing
+       * central-reduce over the joined rows (partial-reduce can't span the central
+       * broadcast join). Used by scalar `aggregate()` and `ShardedGroupedQuery`.
+       */
+      aggregateSource() {
+        if (!this.coPartitionedLegs.length && !this.broadcastLegs.length) return this;
+        return {
+          fanoutRecords: async (o) => {
+            const { results, skippedVaults } = await this.toArray(o);
+            return { records: results, skippedVaults };
+          }
+        };
+      }
       /** One-shot distributed aggregate — central reduce over all shard records. */
       aggregate(spec) {
-        this.assertNoJoinLegs("aggregate");
-        return new CrossVaultAggregation(this, spec, this.liveBinding());
+        return new CrossVaultAggregation(this.aggregateSource(), spec, this.liveBinding());
       }
       /** Begin a grouped cross-shard aggregate. */
       groupBy(field) {
-        this.assertNoJoinLegs("groupBy");
         return new ShardedGroupedQuery(this, field);
       }
     };
@@ -2160,7 +2211,7 @@ var init_vault_group = __esm({
       field;
       aggregate(spec) {
         return new CrossVaultGroupedAggregation(
-          { fanoutRecords: (o) => this.query.fanoutRecords(o) },
+          this.query.aggregateSource(),
           this.field,
           spec,
           this.query.liveBinding()
@@ -2171,8 +2222,7 @@ var init_vault_group = __esm({
 });
 
 // src/index.ts
-import { ValidationError as ValidationError2, ReservedVaultNameError as ReservedVaultNameError2, VaultTemplateNotFoundError } from "@noy-db/hub/kernel";
-import { STATE_VAULT_NAME as STATE_VAULT_NAME2 } from "@noy-db/hub";
+import { ValidationError as ValidationError2, ReservedVaultNameError as ReservedVaultNameError2, VaultTemplateNotFoundError, STATE_VAULT_NAME as STATE_VAULT_NAME2 } from "@noy-db/hub/cargo";
 
 // src/dock/docked-unit.ts
 var DockedUnit = class {
@@ -2264,7 +2314,7 @@ import {
   VaultTemplateNotFoundError as VaultTemplateNotFoundError2,
   ReservedVaultNameError as ReservedVaultNameError3,
   DataResidencyError as DataResidencyError2
-} from "@noy-db/hub/kernel";
+} from "@noy-db/hub/cargo";
 
 // src/interchange/migrate-then-merge.ts
 init_merge_compartment();
@@ -2315,7 +2365,7 @@ async function migrateThenMerge(receiver, compartmentBytes, opts) {
 
 // src/index.ts
 init_field_authority();
-import { CustodyApi, liberateVault, createDeedOwner as createDeedOwner2, loadDeedMarker, isDeedVault } from "@noy-db/hub";
+import { CustodyApi, liberateVault, createDeedOwner as createDeedOwner2, loadDeedMarker, isDeedVault } from "@noy-db/hub/cargo";
 
 // src/dock/unit-driver.ts
 var InMemoryUnitDriver = class {