@noy-db/hub 0.2.0-pre.11 → 0.2.0-pre.13

package/dist/snapshots/index.d.cts

@@ -1,10 +1,10 @@
-import { aB as NoydbBundleStore, aC as RetentionPolicy, aD as SnapshotPolicy, aE as SnapshotStrategy } from '../types-DiSXn3a4.cjs';
-export { aF as SnapshotMeta, aG as SnapshotMode } from '../types-DiSXn3a4.cjs';
-export { f as SnapshotNotFoundError } from '../index-B8bjExET.cjs';
+import { aB as NoydbBundleStore, aC as RetentionPolicy, aD as SnapshotPolicy, aE as SnapshotStrategy } from '../types-CDwSSXiI.cjs';
+export { aF as SnapshotMeta, aG as SnapshotMode } from '../types-CDwSSXiI.cjs';
+export { E as SnapshotNotFoundError } from '../strategy-CrS7PnbE.cjs';
 import '../lazy-builder-Ci5_YG73.cjs';
 import '../predicate-Bt5ft-9c.cjs';
-import '../strategy-CT2LCKAX.cjs';
 import '../strategy-BSxFXGzb.cjs';
+import '../index-CUVOMtgg.cjs';
 import '@noy-db/attestation';
 
 interface WithSnapshotsOptions {

package/dist/snapshots/index.d.ts

@@ -1,10 +1,10 @@
-import { aB as NoydbBundleStore, aC as RetentionPolicy, aD as SnapshotPolicy, aE as SnapshotStrategy } from '../types-CD8mc8zR.js';
-export { aF as SnapshotMeta, aG as SnapshotMode } from '../types-CD8mc8zR.js';
-export { f as SnapshotNotFoundError } from '../index-DfUbNad8.js';
+import { aB as NoydbBundleStore, aC as RetentionPolicy, aD as SnapshotPolicy, aE as SnapshotStrategy } from '../types-pax34sec.js';
+export { aF as SnapshotMeta, aG as SnapshotMode } from '../types-pax34sec.js';
+export { E as SnapshotNotFoundError } from '../strategy-CrS7PnbE.js';
 import '../lazy-builder-D5GU14TS.js';
 import '../predicate-Bt5ft-9c.js';
-import '../strategy-CT2LCKAX.js';
 import '../strategy-BSxFXGzb.js';
+import '../index-Cqzp4tt9.js';
 import '@noy-db/attestation';
 
 interface WithSnapshotsOptions {

package/dist/snapshots/index.js

@@ -1,12 +1,12 @@
 import {
   readNoydbBundle,
   writeNoydbBundle
-} from "../chunk-TGALXXLV.js";
-import "../chunk-JQ4NEJJ6.js";
-import "../chunk-SLV4LAKX.js";
+} from "../chunk-PW26DAXS.js";
+import "../chunk-KJF7EPUE.js";
+import "../chunk-GC4V7RU7.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-O6EJ6WTI.js";
+} from "../chunk-NKGY3C53.js";
 
 // src/snapshots/engine.ts
 var SnapshotEngine = class {

package/dist/{stale-VKXSXJF4.js → stale-LZYMMDDS.js}

@@ -3,11 +3,11 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-6T2UDBKG.js";
+} from "./chunk-AYNF7PVX.js";
 export {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-VKXSXJF4.js.map
+//# sourceMappingURL=stale-LZYMMDDS.js.map

package/dist/state-vault-QFJWU23A.js

@@ -0,0 +1,147 @@
+import {
+  STATE_VAULT_NAME
+} from "./chunk-ZC7J6ZYV.js";
+import {
+  generateULID
+} from "./chunk-FZU343FL.js";
+import {
+  sha256Hex
+} from "./chunk-E3DIBDKA.js";
+import "./chunk-NKGY3C53.js";
+
+// src/federation/schema-manifest.ts
+function captureBlueprint(configure) {
+  const recorded = [];
+  const collectionStub = new Proxy(
+    {},
+    {
+      get: () => () => collectionStub
+    }
+  );
+  const proxy = new Proxy(
+    {},
+    {
+      get: (_t, prop) => {
+        if (prop === "collection") {
+          return (name, opts) => {
+            recorded.push({
+              name,
+              indexes: opts?.indexes ?? [],
+              persistJsonSchema: !!opts?.persistJsonSchema
+            });
+            return collectionStub;
+          };
+        }
+        return () => proxy;
+      }
+    }
+  );
+  configure(proxy);
+  const sorted = [...recorded].sort((a, b) => a.name.localeCompare(b.name));
+  const indexes = {};
+  const persistJsonSchema = [];
+  for (const c of sorted) {
+    indexes[c.name] = c.indexes;
+    if (c.persistJsonSchema) persistJsonSchema.push(c.name);
+  }
+  return {
+    // `persistJsonSchema` is already name-sorted: it is populated while
+    // iterating `sorted` (collections in name order).
+    collections: sorted.map((c) => c.name),
+    indexes,
+    persistJsonSchema
+  };
+}
+function canonical(value) {
+  if (value === null || typeof value !== "object") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+  const obj = value;
+  const keys = Object.keys(obj).sort();
+  return `{${keys.map((k) => `${JSON.stringify(k)}:${canonical(obj[k])}`).join(",")}}`;
+}
+async function fingerprintBlueprint(bp) {
+  return sha256Hex(new TextEncoder().encode(canonical(bp)));
+}
+
+// src/federation/state-vault.ts
+var REGISTRY = "vaultRegistry";
+var MANIFEST = "schemaManifest";
+var EVENTS = "deploymentEvents";
+var StateManagementVault = class _StateManagementVault {
+  constructor(registry, schemaManifest, events) {
+    this.registry = registry;
+    this.schemaManifest = schemaManifest;
+    this.#events = events;
+  }
+  registry;
+  schemaManifest;
+  /**
+   * The append-only deployment-events log is kept truly private so the raw
+   * mutable Collection is never surfaced — events may only be written via
+   * `appendEvent` and read via `queryEvents`. (`registry` and
+   * `schemaManifest` are deliberately public: consumers read and write them.)
+   */
+  #events;
+  /** Idempotently open the reserved state vault and bind the three control-plane collections. */
+  static async open(db) {
+    const vault = await db.openVault(STATE_VAULT_NAME);
+    return new _StateManagementVault(
+      vault.collection(REGISTRY),
+      vault.collection(MANIFEST),
+      vault.collection(EVENTS)
+    );
+  }
+  /** Read-only query over the append-only deployment-events log. */
+  queryEvents() {
+    return this.#events.query();
+  }
+  /**
+   * Append a deployment event with a fresh unique (ULID) id. This is the
+   * only write path to the events log; no update/delete is exposed.
+   * Callers should treat failures as non-fatal — this method does not
+   * swallow errors, so wrap the call site in try/catch where appropriate.
+   */
+  async appendEvent(event) {
+    const ts = event.ts ?? Date.now();
+    const id = generateULID();
+    await this.#events.put(id, { ...event, id, ts });
+  }
+  /**
+   * Ensure a manifest row exists for `(templateName, template.version)`.
+   * Safe to call repeatedly: the `fingerprint` is a deterministic hash of
+   * the template's declared shape (stable across calls), though each call
+   * refreshes `recordedAt`.
+   */
+  async recordManifest(templateName, template) {
+    const bp = captureBlueprint(template.configure);
+    const fingerprint = await fingerprintBlueprint(bp);
+    await this.schemaManifest.put(`${templateName}:${template.version}`, {
+      templateName,
+      version: template.version,
+      collections: bp.collections,
+      indexes: bp.indexes,
+      persistJsonSchema: bp.persistJsonSchema,
+      fingerprint,
+      recordedAt: Date.now()
+    });
+    return fingerprint;
+  }
+  /**
+   * True when `template`'s current declared shape does not match the recorded
+   * manifest for `(templateName, template.version)`. Because shards carry no
+   * schema state independent of their template, this catches "a template's
+   * shape changed without bumping `version`" — not independent per-shard drift.
+   * A missing manifest is treated as drift (nothing to verify against).
+   */
+  async detectDrift(templateName, template) {
+    const row = await this.schemaManifest.get(`${templateName}:${template.version}`);
+    if (!row) return true;
+    const current = await fingerprintBlueprint(captureBlueprint(template.configure));
+    return current !== row.fingerprint;
+  }
+};
+export {
+  STATE_VAULT_NAME,
+  StateManagementVault
+};
+//# sourceMappingURL=state-vault-QFJWU23A.js.map

package/dist/state-vault-QFJWU23A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/federation/schema-manifest.ts","../src/federation/state-vault.ts"],"sourcesContent":["/**\n * @category capability\n * StateManagement Vault — schema blueprint capture + deterministic\n * fingerprint. See\n * docs/superpowers/specs/2026-06-08-statemanagement-vault-design.md.\n */\nimport type { Vault } from '../vault.js'\nimport type { IndexDef } from '../indexing/eager-indexes.js'\nimport { sha256Hex } from '../crypto.js'\nimport type { CapturedBlueprint } from './types.js'\n\ninterface RecordedCollection {\n  name: string\n  indexes: IndexDef[]\n  persistJsonSchema: boolean\n}\n\n/**\n * Run `configure` against a recording proxy that intercepts\n * `collection(name, opts)` calls and captures the declared blueprint.\n * The proxy delegates every other access to a no-op stub so unrelated\n * `configure` calls (guards, blob setup) do not throw — only the\n * declared collections/indexes feed the fingerprint.\n */\nexport function captureBlueprint(configure: (vault: Vault) => void): CapturedBlueprint {\n  const recorded: RecordedCollection[] = []\n  // Minimal chainable stub returned by intercepted collection() — supports\n  // the fluent calls a template might make without affecting the blueprint.\n  const collectionStub = new Proxy(\n    {},\n    {\n      get: () => () => collectionStub,\n    },\n  )\n  const proxy = new Proxy(\n    {},\n    {\n      get: (_t, prop) => {\n        if (prop === 'collection') {\n          return (name: string, opts?: { indexes?: IndexDef[]; persistJsonSchema?: boolean }) => {\n            recorded.push({\n              name,\n              indexes: opts?.indexes ?? [],\n              persistJsonSchema: !!opts?.persistJsonSchema,\n            })\n            return collectionStub\n          }\n        }\n        // Any other vault method/property: a no-op callable that returns the proxy.\n        return () => proxy\n      },\n    },\n  ) as unknown as Vault\n\n  configure(proxy)\n\n  const sorted = [...recorded].sort((a, b) => a.name.localeCompare(b.name))\n  const indexes: Record<string, IndexDef[]> = {}\n  const persistJsonSchema: string[] = []\n  for (const c of sorted) {\n    indexes[c.name] = c.indexes\n    if (c.persistJsonSchema) persistJsonSchema.push(c.name)\n  }\n  return {\n    // `persistJsonSchema` is already name-sorted: it is populated while\n    // iterating `sorted` (collections in name order).\n    collections: sorted.map((c) => c.name),\n    indexes,\n    persistJsonSchema,\n  }\n}\n\n/** Canonical JSON: object keys sorted recursively so the bytes are stable. */\nfunction canonical(value: unknown): string {\n  if (value === null || typeof value !== 'object') return JSON.stringify(value)\n  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`\n  const obj = value as Record<string, unknown>\n  const keys = Object.keys(obj).sort()\n  return `{${keys.map((k) => `${JSON.stringify(k)}:${canonical(obj[k])}`).join(',')}}`\n}\n\n/** sha256 (hex) over the canonicalized serializable blueprint. Uses the shared hub helper. */\nexport async function fingerprintBlueprint(bp: CapturedBlueprint): Promise<string> {\n  return sha256Hex(new TextEncoder().encode(canonical(bp)))\n}\n","/**\n * @category capability\n * StateManagement Vault — federation control plane (registry +\n * schema-manifest + append-only deployment-events). See\n * docs/superpowers/specs/2026-06-08-statemanagement-vault-design.md.\n */\nimport type { Noydb } from '../noydb.js'\nimport type { Collection } from '../collection.js'\nimport type { Query } from '../query/builder.js'\nimport type { VaultRegistryRow, SchemaManifestRow, DeploymentEvent, VaultTemplate } from './types.js'\nimport { captureBlueprint, fingerprintBlueprint } from './schema-manifest.js'\nimport { STATE_VAULT_NAME } from './constants.js'\nimport { generateULID } from '../bundle/ulid.js'\n\n// Re-export so consumers can `import { STATE_VAULT_NAME } from '@noy-db/hub'`.\nexport { STATE_VAULT_NAME } from './constants.js'\n\n// Physical collection names — single-token (camelCase) to stay clear of any\n// collection-name charset restrictions; the existing suite uses single-word names.\nconst REGISTRY = 'vaultRegistry'\nconst MANIFEST = 'schemaManifest'\nconst EVENTS = 'deploymentEvents'\n\nexport class StateManagementVault {\n  /**\n   * The append-only deployment-events log is kept truly private so the raw\n   * mutable Collection is never surfaced — events may only be written via\n   * `appendEvent` and read via `queryEvents`. (`registry` and\n   * `schemaManifest` are deliberately public: consumers read and write them.)\n   */\n  readonly #events: Collection<DeploymentEvent>\n\n  private constructor(\n    readonly registry: Collection<VaultRegistryRow>,\n    readonly schemaManifest: Collection<SchemaManifestRow>,\n    events: Collection<DeploymentEvent>,\n  ) {\n    this.#events = events\n  }\n\n  /** Idempotently open the reserved state vault and bind the three control-plane collections. */\n  static async open(db: Noydb): Promise<StateManagementVault> {\n    const vault = await db.openVault(STATE_VAULT_NAME)\n    return new StateManagementVault(\n      vault.collection<VaultRegistryRow>(REGISTRY),\n      vault.collection<SchemaManifestRow>(MANIFEST),\n      vault.collection<DeploymentEvent>(EVENTS),\n    )\n  }\n\n  /** Read-only query over the append-only deployment-events log. */\n  queryEvents(): Query<DeploymentEvent> {\n    return this.#events.query()\n  }\n\n  /**\n   * Append a deployment event with a fresh unique (ULID) id. This is the\n   * only write path to the events log; no update/delete is exposed.\n   * Callers should treat failures as non-fatal — this method does not\n   * swallow errors, so wrap the call site in try/catch where appropriate.\n   */\n  async appendEvent(event: Omit<DeploymentEvent, 'id' | 'ts'> & { ts?: number }): Promise<void> {\n    const ts = event.ts ?? Date.now()\n    const id = generateULID()\n    await this.#events.put(id, { ...event, id, ts })\n  }\n\n  /**\n   * Ensure a manifest row exists for `(templateName, template.version)`.\n   * Safe to call repeatedly: the `fingerprint` is a deterministic hash of\n   * the template's declared shape (stable across calls), though each call\n   * refreshes `recordedAt`.\n   */\n  async recordManifest(templateName: string, template: VaultTemplate): Promise<string> {\n    const bp = captureBlueprint(template.configure)\n    const fingerprint = await fingerprintBlueprint(bp)\n    await this.schemaManifest.put(`${templateName}:${template.version}`, {\n      templateName,\n      version: template.version,\n      collections: bp.collections,\n      indexes: bp.indexes,\n      persistJsonSchema: bp.persistJsonSchema,\n      fingerprint,\n      recordedAt: Date.now(),\n    })\n    return fingerprint\n  }\n\n  /**\n   * True when `template`'s current declared shape does not match the recorded\n   * manifest for `(templateName, template.version)`. Because shards carry no\n   * schema state independent of their template, this catches \"a template's\n   * shape changed without bumping `version`\" — not independent per-shard drift.\n   * A missing manifest is treated as drift (nothing to verify against).\n   */\n  async detectDrift(templateName: string, template: VaultTemplate): Promise<boolean> {\n    const row = await this.schemaManifest.get(`${templateName}:${template.version}`)\n    if (!row) return true\n    const current = await fingerprintBlueprint(captureBlueprint(template.configure))\n    return current !== row.fingerprint\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAwBO,SAAS,iBAAiB,WAAsD;AACrF,QAAM,WAAiC,CAAC;AAGxC,QAAM,iBAAiB,IAAI;AAAA,IACzB,CAAC;AAAA,IACD;AAAA,MACE,KAAK,MAAM,MAAM;AAAA,IACnB;AAAA,EACF;AACA,QAAM,QAAQ,IAAI;AAAA,IAChB,CAAC;AAAA,IACD;AAAA,MACE,KAAK,CAAC,IAAI,SAAS;AACjB,YAAI,SAAS,cAAc;AACzB,iBAAO,CAAC,MAAc,SAAiE;AACrF,qBAAS,KAAK;AAAA,cACZ;AAAA,cACA,SAAS,MAAM,WAAW,CAAC;AAAA,cAC3B,mBAAmB,CAAC,CAAC,MAAM;AAAA,YAC7B,CAAC;AACD,mBAAO;AAAA,UACT;AAAA,QACF;AAEA,eAAO,MAAM;AAAA,MACf;AAAA,IACF;AAAA,EACF;AAEA,YAAU,KAAK;AAEf,QAAM,SAAS,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AACxE,QAAM,UAAsC,CAAC;AAC7C,QAAM,oBAA8B,CAAC;AACrC,aAAW,KAAK,QAAQ;AACtB,YAAQ,EAAE,IAAI,IAAI,EAAE;AACpB,QAAI,EAAE,kBAAmB,mBAAkB,KAAK,EAAE,IAAI;AAAA,EACxD;AACA,SAAO;AAAA;AAAA;AAAA,IAGL,aAAa,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IACrC;AAAA,IACA;AAAA,EACF;AACF;AAGA,SAAS,UAAU,OAAwB;AACzC,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC5E,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,QAAM,MAAM;AACZ,QAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,SAAO,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,KAAK,UAAU,CAAC,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC;AACnF;AAGA,eAAsB,qBAAqB,IAAwC;AACjF,SAAO,UAAU,IAAI,YAAY,EAAE,OAAO,UAAU,EAAE,CAAC,CAAC;AAC1D;;;ACjEA,IAAM,WAAW;AACjB,IAAM,WAAW;AACjB,IAAM,SAAS;AAER,IAAM,uBAAN,MAAM,sBAAqB;AAAA,EASxB,YACG,UACA,gBACT,QACA;AAHS;AACA;AAGT,SAAK,UAAU;AAAA,EACjB;AAAA,EALW;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF;AAAA;AAAA,EAWT,aAAa,KAAK,IAA0C;AAC1D,UAAM,QAAQ,MAAM,GAAG,UAAU,gBAAgB;AACjD,WAAO,IAAI;AAAA,MACT,MAAM,WAA6B,QAAQ;AAAA,MAC3C,MAAM,WAA8B,QAAQ;AAAA,MAC5C,MAAM,WAA4B,MAAM;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA,EAGA,cAAsC;AACpC,WAAO,KAAK,QAAQ,MAAM;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAY,OAA4E;AAC5F,UAAM,KAAK,MAAM,MAAM,KAAK,IAAI;AAChC,UAAM,KAAK,aAAa;AACxB,UAAM,KAAK,QAAQ,IAAI,IAAI,EAAE,GAAG,OAAO,IAAI,GAAG,CAAC;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,eAAe,cAAsB,UAA0C;AACnF,UAAM,KAAK,iBAAiB,SAAS,SAAS;AAC9C,UAAM,cAAc,MAAM,qBAAqB,EAAE;AACjD,UAAM,KAAK,eAAe,IAAI,GAAG,YAAY,IAAI,SAAS,OAAO,IAAI;AAAA,MACnE;AAAA,MACA,SAAS,SAAS;AAAA,MAClB,aAAa,GAAG;AAAA,MAChB,SAAS,GAAG;AAAA,MACZ,mBAAmB,GAAG;AAAA,MACtB;AAAA,MACA,YAAY,KAAK,IAAI;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,YAAY,cAAsB,UAA2C;AACjF,UAAM,MAAM,MAAM,KAAK,eAAe,IAAI,GAAG,YAAY,IAAI,SAAS,OAAO,EAAE;AAC/E,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,UAAU,MAAM,qBAAqB,iBAAiB,SAAS,SAAS,CAAC;AAC/E,WAAO,YAAY,IAAI;AAAA,EACzB;AACF;","names":[]}