@noy-db/hub 0.2.0-pre.11 → 0.2.0-pre.13

package/dist/derivations/index.js

@@ -1,19 +1,19 @@
 import {
   withDerivation
-} from "../chunk-DAP2XL7Q.js";
+} from "../chunk-NIUXQDWD.js";
 import {
   DerivationRegistry
-} from "../chunk-CH22FZHT.js";
+} from "../chunk-QFYVGJLI.js";
 import {
   DerivationExecutor
-} from "../chunk-5OEJ6GOT.js";
+} from "../chunk-GL3Z7LH7.js";
 import {
   DerivationCapExceededError,
   DerivationCycleError,
   DerivationDepthError,
   DerivationOutputShapeError,
   DerivationOutputUnknownError
-} from "../chunk-O6EJ6WTI.js";
+} from "../chunk-NKGY3C53.js";
 export {
   DerivationCapExceededError,
   DerivationCycleError,

package/dist/{dev-unlock-BH6y3Hx0.d.ts → dev-unlock-BW0GNBEV.d.ts}

@@ -1,4 +1,4 @@
-import { b0 as Role, b1 as UnlockedKeyring } from './types-CD8mc8zR.js';
+import { b0 as Role, b1 as UnlockedKeyring } from './types-pax34sec.js';
 
 /**
  * Session tokens —

package/dist/{dev-unlock-H1Xwxc3U.d.cts → dev-unlock-a7SOtaV0.d.cts}

@@ -1,4 +1,4 @@
-import { b0 as Role, b1 as UnlockedKeyring } from './types-DiSXn3a4.cjs';
+import { b0 as Role, b1 as UnlockedKeyring } from './types-CDwSSXiI.cjs';
 
 /**
  * Session tokens —

package/dist/executor-AVJ7UEWA.js

@@ -0,0 +1,8 @@
+import {
+  DerivationExecutor
+} from "./chunk-GL3Z7LH7.js";
+import "./chunk-NKGY3C53.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-AVJ7UEWA.js.map

package/dist/executor-IQO3KGXQ.js

@@ -0,0 +1,11 @@
+import {
+  MaterializedViewExecutor
+} from "./chunk-CWFQTAD4.js";
+import "./chunk-KKB42D3Q.js";
+import "./chunk-YWBHS25M.js";
+import "./chunk-TV3YZ35S.js";
+import "./chunk-NKGY3C53.js";
+export {
+  MaterializedViewExecutor
+};
+//# sourceMappingURL=executor-IQO3KGXQ.js.map

package/dist/executor-VT7TKGE4.js

@@ -0,0 +1,8 @@
+import {
+  GuardExecutor
+} from "./chunk-JPOQMXGT.js";
+import "./chunk-NKGY3C53.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-VT7TKGE4.js.map

package/dist/{fanout-sidecar-F3ZRFU4H.js → fanout-sidecar-N6OJX6QR.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-SLV4LAKX.js";
+} from "./chunk-GC4V7RU7.js";
 
 // src/derivations/fanout-sidecar.ts
 function recordId(source, sourceId, outputKey) {
@@ -48,4 +48,4 @@ export {
   loadFanoutSidecar,
   saveFanoutSidecar
 };
-//# sourceMappingURL=fanout-sidecar-F3ZRFU4H.js.map
+//# sourceMappingURL=fanout-sidecar-N6OJX6QR.js.map

package/dist/guards/index.cjs

@@ -27,6 +27,7 @@ __export(guards_exports, {
   InvariantError: () => InvariantError,
   ReadOnlyVaultFacade: () => ReadOnlyVaultFacade,
   RecordLockedError: () => RecordLockedError,
+  immutableGuard: () => immutableGuard,
   withGuard: () => withGuard
 });
 module.exports = __toCommonJS(guards_exports);
@@ -108,6 +109,49 @@ function withGuard(strategy) {
   };
 }
 
+// src/guards/immutable-guard.ts
+function recordId(record) {
+  const id = record?.id;
+  return typeof id === "string" ? id : "";
+}
+function immutableGuard(config) {
+  const { collection, after, appendOnly, amendmentRoles } = config;
+  if (appendOnly && after !== void 0) {
+    throw new ValidationError("immutableGuard: `after` and `appendOnly` are mutually exclusive");
+  }
+  if (!appendOnly && after === void 0) {
+    throw new ValidationError("immutableGuard: provide `after` or `appendOnly: true`");
+  }
+  const isImmutable = appendOnly ? () => true : after;
+  const reason = appendOnly ? "append-only collection" : "record is immutable after issue";
+  const spec = {
+    collection,
+    // Block updates to an already-immutable record. Inserts (existing
+    // null) and the transition write that first makes the record
+    // immutable are allowed — `after` reads the prior state.
+    check: (incoming, ctx) => {
+      if (ctx.existing !== null && isImmutable(ctx.existing)) {
+        throw new RecordLockedError(collection, recordId(incoming), reason);
+      }
+    },
+    // Block deletes of an immutable record.
+    onDelete: (existing) => {
+      if (isImmutable(existing)) {
+        throw new RecordLockedError(collection, recordId(existing), reason);
+      }
+    },
+    // The authorized override: inside an amendment transaction the
+    // check/onDelete are skipped and the change is ledgered. No extra
+    // invariant — the amendment itself is the sanctioned exception.
+    amendment: {
+      roles: amendmentRoles ?? ["admin", "owner"],
+      invariant: () => {
+      }
+    }
+  };
+  return withGuard(spec);
+}
+
 // src/guards/registry.ts
 var GuardRegistry = class {
   _byCollection = /* @__PURE__ */ new Map();
@@ -235,14 +279,21 @@ var GuardExecutor = {
    * Compare existing vs incoming for each `frozenFields.fields` entry
    * when `frozenFields.when(existing)` is true. Throws
    * `FieldFrozenError` listing every changed frozen field.
+   *
+   * @param skipFields — field names that are schema-owned computed fields.
+   *   These are excluded from the comparison because `incoming` carries the
+   *   raw user input (computed fields not yet evaluated), so comparing
+   *   `existing[field]` vs `incoming[field]` would always look like a
+   *   change even when the computed result is unchanged.
    */
-  async checkFrozenFields(guard, id, existing, incoming) {
+  async checkFrozenFields(guard, id, existing, incoming, skipFields) {
     const ff = guard.frozenFields;
     if (!ff) return;
     if (existing === null) return;
     if (!ff.when(existing)) return;
     const changed = [];
     for (const f of ff.fields) {
+      if (skipFields?.has(String(f))) continue;
       if (existing[f] !== incoming[f]) {
         if (!deepEqual(existing[f], incoming[f])) changed.push(String(f));
       }
@@ -317,6 +368,7 @@ var ReadOnlyVaultFacade = class {
   InvariantError,
   ReadOnlyVaultFacade,
   RecordLockedError,
+  immutableGuard,
   withGuard
 });
 //# sourceMappingURL=index.cjs.map