@noy-db/hub 0.2.0-pre.11 → 0.2.0-pre.13

package/dist/vault-group-UO4YUZOG.js

@@ -0,0 +1,493 @@
+import {
+  STATE_VAULT_NAME
+} from "./chunk-ZC7J6ZYV.js";
+import {
+  groupAndReduce,
+  reduceRecords
+} from "./chunk-YWBHS25M.js";
+import "./chunk-TV3YZ35S.js";
+import {
+  NoAccessError,
+  ReservedVaultNameError,
+  ShardProvisioningError,
+  UnknownShardError,
+  ValidationError
+} from "./chunk-NKGY3C53.js";
+
+// src/federation/classify-skip.ts
+function classifyShardSkip(err) {
+  return err instanceof NoAccessError ? "no-grant" : "error";
+}
+
+// src/federation/cross-vault-live.ts
+var CrossVaultLive = class {
+  snapshot;
+  error = null;
+  ready;
+  subs = /* @__PURE__ */ new Set();
+  unsubChange;
+  opts;
+  stopped = false;
+  computing = false;
+  dirty = false;
+  scheduled = false;
+  timer = null;
+  resolveReady;
+  settledOnce = false;
+  constructor(opts) {
+    this.opts = opts;
+    this.snapshot = opts.initialSnapshot;
+    this.ready = new Promise((res) => {
+      this.resolveReady = res;
+    });
+    this.unsubChange = opts.subscribeToChanges((e) => {
+      if (this.stopped || !opts.isRelevant(e)) return;
+      this.schedule();
+    });
+    this.schedule();
+  }
+  subscribe(cb) {
+    if (this.stopped) return () => {
+    };
+    this.subs.add(cb);
+    return () => this.subs.delete(cb);
+  }
+  stop() {
+    if (this.stopped) return;
+    this.stopped = true;
+    this.unsubChange();
+    if (this.timer !== null) clearTimeout(this.timer);
+    this.subs.clear();
+    if (!this.settledOnce) this.resolveReady();
+  }
+  schedule() {
+    if (this.stopped) return;
+    if (this.computing) {
+      this.dirty = true;
+      return;
+    }
+    if (this.scheduled) return;
+    this.scheduled = true;
+    const run = () => {
+      this.scheduled = false;
+      void this.runCompute();
+    };
+    const ms = this.opts.debounceMs ?? 0;
+    if (ms > 0) this.timer = setTimeout(run, ms);
+    else queueMicrotask(run);
+  }
+  async runCompute() {
+    if (this.stopped) return;
+    this.computing = true;
+    this.dirty = false;
+    try {
+      const next = await this.opts.compute();
+      if (this.stopped) return;
+      this.snapshot = next;
+      this.error = null;
+    } catch (err) {
+      if (this.stopped) return;
+      this.error = err instanceof Error ? err : new Error(String(err));
+    } finally {
+      this.computing = false;
+      if (!this.stopped) {
+        if (!this.settledOnce) {
+          this.settledOnce = true;
+          this.resolveReady();
+        }
+        for (const cb of this.subs) cb();
+        if (this.dirty) this.schedule();
+      }
+    }
+  }
+};
+
+// src/federation/aggregate-across.ts
+var CrossVaultAggregation = class {
+  constructor(src, spec, bind) {
+    this.src = src;
+    this.spec = spec;
+    this.bind = bind;
+  }
+  src;
+  spec;
+  bind;
+  async run(options = {}) {
+    const { records, skippedVaults } = await this.src.fanoutRecords(options);
+    return { result: reduceRecords(records, this.spec), skippedVaults };
+  }
+  live(options = {}) {
+    if (!this.bind) throw new Error("CrossVaultAggregation: live() requires a LiveBinding \u2014 use ShardedQuery.aggregate()");
+    const spec = this.spec;
+    const src = this.src;
+    const core = new CrossVaultLive({
+      subscribeToChanges: this.bind.subscribeToChanges,
+      isRelevant: this.bind.isRelevant,
+      compute: async () => {
+        const { records, skippedVaults } = await src.fanoutRecords(options);
+        return { value: reduceRecords(records, spec), skipped: skippedVaults };
+      },
+      initialSnapshot: { value: void 0, skipped: [] },
+      ...options.debounceMs !== void 0 ? { debounceMs: options.debounceMs } : {}
+    });
+    return {
+      get value() {
+        return core.snapshot.value;
+      },
+      get skippedVaults() {
+        return core.snapshot.skipped;
+      },
+      get error() {
+        return core.error;
+      },
+      ready: core.ready,
+      subscribe: (cb) => core.subscribe(cb),
+      stop: () => core.stop()
+    };
+  }
+};
+var CrossVaultGroupedAggregation = class {
+  constructor(src, field, spec, bind) {
+    this.src = src;
+    this.field = field;
+    this.spec = spec;
+    this.bind = bind;
+  }
+  src;
+  field;
+  spec;
+  bind;
+  async run(options = {}) {
+    const { records, skippedVaults } = await this.src.fanoutRecords(options);
+    return {
+      results: groupAndReduce(records, this.field, this.spec),
+      skippedVaults
+    };
+  }
+  live(options = {}) {
+    if (!this.bind) throw new Error("CrossVaultGroupedAggregation: live() requires a LiveBinding \u2014 use ShardedQuery.groupBy().aggregate()");
+    const field = this.field;
+    const spec = this.spec;
+    const src = this.src;
+    const core = new CrossVaultLive({
+      subscribeToChanges: this.bind.subscribeToChanges,
+      isRelevant: this.bind.isRelevant,
+      compute: async () => {
+        const { records, skippedVaults } = await src.fanoutRecords(options);
+        return {
+          records: groupAndReduce(records, field, spec),
+          skipped: skippedVaults
+        };
+      },
+      initialSnapshot: { records: [], skipped: [] },
+      ...options.debounceMs !== void 0 ? { debounceMs: options.debounceMs } : {}
+    });
+    return {
+      get value() {
+        return core.snapshot.records;
+      },
+      get skippedVaults() {
+        return core.snapshot.skipped;
+      },
+      get error() {
+        return core.error;
+      },
+      ready: core.ready,
+      subscribe: (cb) => core.subscribe(cb),
+      stop: () => core.stop()
+    };
+  }
+};
+
+// src/federation/vault-group.ts
+var SHARD_SEPARATOR = "--";
+var SAFE_PARTITION_KEY = /^[A-Za-z0-9._-]+$/;
+function assertSafePartitionKey(partitionKey) {
+  if (partitionKey.length === 0) {
+    throw new ValidationError("partitionKey must be a non-empty string");
+  }
+  if (partitionKey === STATE_VAULT_NAME) {
+    throw new ReservedVaultNameError(partitionKey);
+  }
+  if (!SAFE_PARTITION_KEY.test(partitionKey)) {
+    throw new ValidationError(
+      `partitionKey "${partitionKey}" contains characters outside [A-Za-z0-9._-]. Map your records to a store-safe key in sharding.keyOf.`
+    );
+  }
+  if (partitionKey.includes(SHARD_SEPARATOR)) {
+    throw new ValidationError(
+      `partitionKey "${partitionKey}" must not contain "--" \u2014 it is reserved as the shard vault-id separator and would risk shard-id collisions.`
+    );
+  }
+}
+var VaultGroup = class {
+  constructor(db, name, registry, sharding, template) {
+    this.db = db;
+    this.name = name;
+    this.registry = registry;
+    this.sharding = sharding;
+    this.template = template;
+    if (name.includes(SHARD_SEPARATOR)) {
+      throw new ValidationError(
+        `VaultGroup name "${name}" must not contain "--" (reserved shard vault-id separator).`
+      );
+    }
+  }
+  db;
+  name;
+  registry;
+  sharding;
+  template;
+  /** @internal — set when the group is managed (no explicit registry). */
+  stateVault;
+  /** @internal */
+  _attachStateVault(sv) {
+    this.stateVault = sv;
+  }
+  /** Deterministic vault name for a partition key, namespaced by the group. */
+  shardVaultId(partitionKey) {
+    assertSafePartitionKey(partitionKey);
+    return `${this.name}${SHARD_SEPARATOR}${partitionKey}`;
+  }
+  /**
+   * @internal — group-qualified registry record key (avoids cross-group key
+   * collisions). Identical to the shard vault id by design — the registry row
+   * for a shard is keyed by that shard's vault id — so it delegates to
+   * `shardVaultId`, reusing its partition-key validation.
+   */
+  registryId(partitionKey) {
+    return this.shardVaultId(partitionKey);
+  }
+  /**
+   * Registry rows for THIS group (hydrates the registry collection first).
+   * The registry may be shared across groups (the auto-wired StateManagement
+   * vault holds one `vaultRegistry` for the whole instance), so rows are
+   * filtered by `group` — without this, a group's fan-out reads would leak
+   * across into other groups' shards. Mirrors the `${group}--` scoping that
+   * `liveBinding().isRelevant` already applies to the reactive path.
+   */
+  async allRows() {
+    await this.registry.list();
+    const rows = this.registry.query().toArray();
+    return rows.filter((r) => r.group === this.name);
+  }
+  /** Open an existing shard and apply the template. */
+  async openShard(partitionKey) {
+    const vault = await this.db.openVault(this.shardVaultId(partitionKey), { create: false });
+    this.template.configure(vault);
+    return vault;
+  }
+  /**
+   * Idempotently provision a shard for `partitionKey`. Returns the
+   * configured vault handle.
+   *
+   * - row + vault present → no-op, return handle
+   * - row present, vault gone → ShardProvisioningError
+   * - row absent (vault present or not) → open-or-create, configure, write row
+   */
+  async createShard(partitionKey) {
+    const vaultId = this.shardVaultId(partitionKey);
+    const row = await this.registry.get(this.registryId(partitionKey));
+    const provisioned = await this.db._shardVaultProvisioned(vaultId);
+    if (row && !provisioned) throw new ShardProvisioningError(vaultId, partitionKey);
+    if (row && provisioned) return this.openShard(partitionKey);
+    const vault = await this.db.openVault(vaultId);
+    this.template.configure(vault);
+    await this.registry.put(this.registryId(partitionKey), {
+      vaultId,
+      partitionKey,
+      templateName: this.sharding.vaultTemplate,
+      schemaVersion: this.template.version,
+      createdAt: Date.now(),
+      group: this.name
+    });
+    if (this.stateVault) {
+      try {
+        await this.stateVault.appendEvent({
+          type: "shard-created",
+          group: this.name,
+          vaultId,
+          templateName: this.sharding.vaultTemplate,
+          version: this.template.version
+        });
+      } catch {
+      }
+    }
+    return vault;
+  }
+  /**
+   * Drill down to a single shard's full Collection API. Throws if the shard is unknown.
+   * Also throws ShardProvisioningError if the registry row exists but the vault has been deleted
+   * (registry/store divergence).
+   */
+  async shard(partitionKey) {
+    const vaultId = this.shardVaultId(partitionKey);
+    const row = await this.registry.get(this.registryId(partitionKey));
+    if (!row) throw new UnknownShardError(partitionKey, this.name);
+    const provisioned = await this.db._shardVaultProvisioned(vaultId);
+    if (!provisioned) throw new ShardProvisioningError(vaultId, partitionKey);
+    return this.openShard(partitionKey);
+  }
+  /** A sharded view over one logical collection across all shards. */
+  collection(collectionName) {
+    return new ShardedCollection(this, collectionName);
+  }
+  /** @internal — eligible (openable-candidate) rows + drift/divergence skips. */
+  async resolveEligible(options = {}) {
+    const rows = await this.allRows();
+    const skipped = [];
+    const versionOk = [];
+    for (const row of rows) {
+      if (options.minVersion !== void 0 && row.schemaVersion < options.minVersion) {
+        skipped.push({ vaultId: row.vaultId, reason: "schema-drift" });
+      } else versionOk.push(row);
+    }
+    const provisioned = await Promise.all(versionOk.map((r) => this.db._shardVaultProvisioned(r.vaultId)));
+    const eligible = [];
+    versionOk.forEach((row, i) => {
+      if (provisioned[i]) eligible.push(row);
+      else skipped.push({ vaultId: row.vaultId, reason: "error", error: new ShardProvisioningError(row.vaultId, row.partitionKey) });
+    });
+    return { eligible, skipped };
+  }
+};
+var ShardedCollection = class {
+  constructor(group, collectionName) {
+    this.group = group;
+    this.collectionName = collectionName;
+  }
+  group;
+  collectionName;
+  /** Route a write to the shard owning `keyOf(record)`. */
+  async put(id, record) {
+    const key = this.group.sharding.keyOf(record);
+    const row = await this.group.registry.get(this.group.registryId(key));
+    let vault;
+    if (!row) {
+      if (this.group.sharding.autoCreate === false) {
+        throw new UnknownShardError(key, this.group.name);
+      }
+      vault = await this.group.createShard(key);
+    } else {
+      vault = await this.group.openShard(key);
+    }
+    await vault.collection(this.collectionName).put(id, record);
+  }
+  /** Begin a cross-shard fan-out query. */
+  query() {
+    return new ShardedQuery(this.group, this.collectionName, []);
+  }
+};
+var ShardedQuery = class _ShardedQuery {
+  constructor(group, collectionName, clauses) {
+    this.group = group;
+    this.collectionName = collectionName;
+    this.clauses = clauses;
+  }
+  group;
+  collectionName;
+  clauses;
+  where(field, op, value) {
+    return new _ShardedQuery(this.group, this.collectionName, [
+      ...this.clauses,
+      { field, op, value }
+    ]);
+  }
+  /** @internal — fan out the where-filtered records across eligible shards. */
+  async fanoutRecords(options = {}) {
+    const { eligible, skipped } = await this.group.resolveEligible(options);
+    const across = await this.group.db.queryAcross(
+      eligible.map((r) => r.vaultId),
+      async (vault) => {
+        this.group.template.configure(vault);
+        const coll = vault.collection(this.collectionName);
+        await coll.list();
+        let q = coll.query();
+        for (const c of this.clauses) q = q.where(c.field, c.op, c.value);
+        return q.toArray();
+      },
+      { concurrency: options.concurrency ?? 1, create: false }
+    );
+    const results = [];
+    for (const r of across) {
+      if (r.error) skipped.push({ vaultId: r.vault, reason: classifyShardSkip(r.error), error: r.error });
+      else for (const item of r.result) results.push(item);
+    }
+    return { records: results, skippedVaults: skipped };
+  }
+  /** Fan out across eligible shards and merge results. */
+  async toArray(options = {}) {
+    const { records, skippedVaults } = await this.fanoutRecords(options);
+    return { results: records, skippedVaults };
+  }
+  /** @internal — build the change-subscription + relevance binding for this query's group+collection. */
+  liveBinding() {
+    const group = this.group;
+    const collectionName = this.collectionName;
+    return {
+      subscribeToChanges: (h) => {
+        group.db.on("change", h);
+        return () => group.db.off("change", h);
+      },
+      isRelevant: (e) => e.collection === collectionName && e.vault.startsWith(`${group.name}--`)
+    };
+  }
+  /** Returns a reactive cross-shard live query — a facade over CrossVaultLive. */
+  live(options = {}) {
+    const bind = this.liveBinding();
+    const core = new CrossVaultLive({
+      ...bind,
+      compute: async () => {
+        const { records, skippedVaults } = await this.fanoutRecords(options);
+        return { records, skipped: skippedVaults };
+      },
+      initialSnapshot: { records: [], skipped: [] },
+      ...options.debounceMs !== void 0 ? { debounceMs: options.debounceMs } : {}
+    });
+    return {
+      get value() {
+        return core.snapshot.records;
+      },
+      get skippedVaults() {
+        return core.snapshot.skipped;
+      },
+      get error() {
+        return core.error;
+      },
+      ready: core.ready,
+      subscribe: (cb) => core.subscribe(cb),
+      stop: () => core.stop()
+    };
+  }
+  /** One-shot distributed aggregate — central reduce over all shard records. */
+  aggregate(spec) {
+    return new CrossVaultAggregation(this, spec, this.liveBinding());
+  }
+  /** Begin a grouped cross-shard aggregate. */
+  groupBy(field) {
+    return new ShardedGroupedQuery(this, field);
+  }
+};
+var ShardedGroupedQuery = class {
+  constructor(query, field) {
+    this.query = query;
+    this.field = field;
+  }
+  query;
+  field;
+  aggregate(spec) {
+    return new CrossVaultGroupedAggregation(
+      { fanoutRecords: (o) => this.query.fanoutRecords(o) },
+      this.field,
+      spec,
+      this.query.liveBinding()
+    );
+  }
+};
+export {
+  ShardedCollection,
+  ShardedGroupedQuery,
+  ShardedQuery,
+  VaultGroup
+};
+//# sourceMappingURL=vault-group-UO4YUZOG.js.map

package/dist/vault-group-UO4YUZOG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/federation/classify-skip.ts","../src/federation/cross-vault-live.ts","../src/federation/aggregate-across.ts","../src/federation/vault-group.ts"],"sourcesContent":["import { NoAccessError } from '../errors.js'\nimport type { SkippedVault } from './types.js'\n\n/**\n * Classify a per-shard fan-out failure. `NoAccessError` (no keyring envelope for\n * the calling identity) is the unambiguous not-granted signal → `'no-grant'`\n * (expected under scoped access, not a fault). Everything else → `'error'` —\n * `InvalidKeyError`/`DecryptionError`/`KeyringCorruptError` can mean \"wrong KEK\n * OR whole-file corruption\" per loadKeyring, so they must not hide as no-grant.\n */\nexport function classifyShardSkip(err: Error): Exclude<SkippedVault['reason'], 'schema-drift'> {\n  return err instanceof NoAccessError ? 'no-grant' : 'error'\n}\n","/**\n * @category capability\n * Reactive core for cross-vault live queries/aggregations. Generic over a\n * snapshot S. Single-flight + microtask-coalesced recompute on relevant\n * change. Mirrors the LiveQuery/LiveAggregation contracts via facades.\n * Spec: docs/superpowers/specs/2026-06-07-cross-vault-live-and-aggregate-design.md.\n */\nimport type { ChangeEvent } from '../types.js'\n\nexport interface CrossVaultLiveOptions<S> {\n  readonly subscribeToChanges: (handler: (e: ChangeEvent) => void) => () => void\n  readonly isRelevant: (e: ChangeEvent) => boolean\n  readonly compute: () => Promise<S>\n  readonly initialSnapshot: S\n  readonly debounceMs?: number\n}\n\nexport class CrossVaultLive<S> {\n  snapshot: S\n  error: Error | null = null\n  readonly ready: Promise<void>\n\n  private readonly subs = new Set<() => void>()\n  private readonly unsubChange: () => void\n  private readonly opts: CrossVaultLiveOptions<S>\n  private stopped = false\n  private computing = false\n  private dirty = false\n  private scheduled = false\n  private timer: ReturnType<typeof setTimeout> | null = null\n  private resolveReady!: () => void\n  private settledOnce = false\n\n  constructor(opts: CrossVaultLiveOptions<S>) {\n    this.opts = opts\n    this.snapshot = opts.initialSnapshot\n    this.ready = new Promise<void>((res) => { this.resolveReady = res })\n    this.unsubChange = opts.subscribeToChanges((e) => {\n      if (this.stopped || !opts.isRelevant(e)) return\n      this.schedule()\n    })\n    this.schedule() // initial compute\n  }\n\n  subscribe(cb: () => void): () => void {\n    if (this.stopped) return () => {}\n    this.subs.add(cb)\n    return () => this.subs.delete(cb)\n  }\n\n  stop(): void {\n    if (this.stopped) return\n    this.stopped = true\n    this.unsubChange()\n    if (this.timer !== null) clearTimeout(this.timer)\n    this.subs.clear()\n    if (!this.settledOnce) this.resolveReady() // never leave ready dangling\n  }\n\n  private schedule(): void {\n    if (this.stopped) return\n    if (this.computing) { this.dirty = true; return }\n    if (this.scheduled) return\n    this.scheduled = true\n    const run = () => { this.scheduled = false; void this.runCompute() }\n    const ms = this.opts.debounceMs ?? 0\n    if (ms > 0) this.timer = setTimeout(run, ms)\n    // queueMicrotask is non-cancellable; the `if (this.stopped) return` guard at the top of runCompute makes a post-stop fire a no-op.\n    else queueMicrotask(run)\n  }\n\n  private async runCompute(): Promise<void> {\n    if (this.stopped) return\n    this.computing = true\n    this.dirty = false\n    try {\n      const next = await this.opts.compute()\n      if (this.stopped) return\n      this.snapshot = next\n      this.error = null\n    } catch (err) {\n      if (this.stopped) return\n      this.error = err instanceof Error ? err : new Error(String(err))\n    } finally {\n      this.computing = false\n      if (!this.stopped) {\n        if (!this.settledOnce) { this.settledOnce = true; this.resolveReady() }\n        for (const cb of this.subs) cb()\n        if (this.dirty) this.schedule()\n      }\n    }\n  }\n}\n","/**\n * @category capability\n * One-shot distributed aggregate wrappers for cross-vault fan-out.\n * Central-reduce: all shard records are concatenated and reduced in one pass\n * so avg/mean values are computed over the full union, not as avg-of-avgs.\n * Spec: docs/superpowers/specs/2026-06-07-cross-vault-live-and-aggregate-design.md.\n */\nimport { reduceRecords } from '../aggregate/aggregation.js'\nimport { groupAndReduce } from '../aggregate/groupby.js'\nimport type { AggregateResult, AggregateSpec } from '../aggregate/aggregation.js'\nimport type {\n  FanoutQueryOptions,\n  SkippedVault,\n  GroupedRow,\n  LiveQueryOptions,\n  CrossVaultLiveAggregation,\n  CrossVaultLiveQuery,\n} from './types.js'\nimport { CrossVaultLive } from './cross-vault-live.js'\nimport type { ChangeEvent } from '../types.js'\n\n/** A source that can fan out records across shards. Satisfied by ShardedQuery. */\nexport interface FanoutRecordSource<R> {\n  fanoutRecords(options: FanoutQueryOptions): Promise<{ records: R[]; skippedVaults: SkippedVault[] }>\n}\n\n/** Live-binding hooks (change subscription + relevance) threaded from ShardedQuery. */\nexport interface LiveBinding {\n  subscribeToChanges: (handler: (e: ChangeEvent) => void) => () => void\n  isRelevant: (e: ChangeEvent) => boolean\n}\n\n/**\n * One-shot cross-vault aggregate. Concatenates all shard records and runs a\n * single central reduce, ensuring correct avg/mean values.\n */\nexport class CrossVaultAggregation<R, Spec extends AggregateSpec> {\n  constructor(\n    private readonly src: FanoutRecordSource<R>,\n    private readonly spec: Spec,\n    private readonly bind?: LiveBinding,\n  ) {}\n\n  async run(options: FanoutQueryOptions = {}): Promise<{\n    result: AggregateResult<Spec>\n    skippedVaults: SkippedVault[]\n  }> {\n    const { records, skippedVaults } = await this.src.fanoutRecords(options)\n    return { result: reduceRecords(records, this.spec), skippedVaults }\n  }\n\n  live(options: LiveQueryOptions = {}): CrossVaultLiveAggregation<AggregateResult<Spec>> {\n    if (!this.bind) throw new Error('CrossVaultAggregation: live() requires a LiveBinding — use ShardedQuery.aggregate()')\n    const spec = this.spec\n    const src = this.src\n    const core = new CrossVaultLive<{ value: AggregateResult<Spec> | undefined; skipped: SkippedVault[] }>({\n      subscribeToChanges: this.bind.subscribeToChanges,\n      isRelevant: this.bind.isRelevant,\n      compute: async () => {\n        const { records, skippedVaults } = await src.fanoutRecords(options)\n        return { value: reduceRecords(records, spec), skipped: skippedVaults }\n      },\n      initialSnapshot: { value: undefined, skipped: [] },\n      ...(options.debounceMs !== undefined ? { debounceMs: options.debounceMs } : {}),\n    })\n    return {\n      get value() { return core.snapshot.value },\n      get skippedVaults() { return core.snapshot.skipped as readonly SkippedVault[] },\n      get error() { return core.error },\n      ready: core.ready,\n      subscribe: (cb) => core.subscribe(cb),\n      stop: () => core.stop(),\n    }\n  }\n}\n\n/**\n * One-shot cross-vault grouped aggregate. Concatenates all shard records and\n * runs a single central group-and-reduce, emitting one row per bucket.\n */\nexport class CrossVaultGroupedAggregation<R, F extends string, Spec extends AggregateSpec> {\n  constructor(\n    private readonly src: FanoutRecordSource<R>,\n    private readonly field: F,\n    private readonly spec: Spec,\n    private readonly bind?: LiveBinding,\n  ) {}\n\n  async run(options: FanoutQueryOptions = {}): Promise<{\n    results: GroupedRow<F, Spec>[]\n    skippedVaults: SkippedVault[]\n  }> {\n    const { records, skippedVaults } = await this.src.fanoutRecords(options)\n    return {\n      results: groupAndReduce<GroupedRow<F, Spec>>(records, this.field, this.spec),\n      skippedVaults,\n    }\n  }\n\n  live(options: LiveQueryOptions = {}): CrossVaultLiveQuery<GroupedRow<F, Spec>> {\n    if (!this.bind) throw new Error('CrossVaultGroupedAggregation: live() requires a LiveBinding — use ShardedQuery.groupBy().aggregate()')\n    const field = this.field\n    const spec = this.spec\n    const src = this.src\n    const core = new CrossVaultLive<{ records: GroupedRow<F, Spec>[]; skipped: SkippedVault[] }>({\n      subscribeToChanges: this.bind.subscribeToChanges,\n      isRelevant: this.bind.isRelevant,\n      compute: async () => {\n        const { records, skippedVaults } = await src.fanoutRecords(options)\n        return {\n          records: groupAndReduce<GroupedRow<F, Spec>>(records, field, spec),\n          skipped: skippedVaults,\n        }\n      },\n      initialSnapshot: { records: [], skipped: [] },\n      ...(options.debounceMs !== undefined ? { debounceMs: options.debounceMs } : {}),\n    })\n    return {\n      get value() { return core.snapshot.records as readonly GroupedRow<F, Spec>[] },\n      get skippedVaults() { return core.snapshot.skipped as readonly SkippedVault[] },\n      get error() { return core.error },\n      ready: core.ready,\n      subscribe: (cb) => core.subscribe(cb),\n      stop: () => core.stop(),\n    }\n  }\n}\n","/**\n * @category capability\n * Multi-vault partition federation — VaultGroup transparent shard\n * routing. Spec:\n * docs/superpowers/specs/2026-06-07-mvf-vaultgroup-routing-mvp-design.md.\n */\nimport type { Noydb } from '../noydb.js'\nimport type { Vault } from '../vault.js'\nimport type { Collection } from '../collection.js'\nimport type { StateManagementVault } from './state-vault.js'\nimport { ReservedVaultNameError, ShardProvisioningError, UnknownShardError, ValidationError } from '../errors.js'\nimport { STATE_VAULT_NAME } from './constants.js'\nimport { classifyShardSkip } from './classify-skip.js'\nimport { CrossVaultLive } from './cross-vault-live.js'\nimport { CrossVaultAggregation, CrossVaultGroupedAggregation } from './aggregate-across.js'\nimport type { FanoutRecordSource, LiveBinding } from './aggregate-across.js'\nimport type { AggregateSpec } from '../aggregate/aggregation.js'\nimport type {\n  ShardingConfig,\n  VaultRegistryRow,\n  VaultTemplate,\n  FanoutQueryOptions,\n  FanoutResult,\n  SkippedVault,\n  WhereClause,\n  LiveQueryOptions,\n  CrossVaultLiveQuery,\n} from './types.js'\n\n/** Reserved separator between group name and partition key in a shard vault id. */\nconst SHARD_SEPARATOR = '--'\n/** Store-safe partition-key charset (single hyphens OK; '--' is the reserved separator). */\nconst SAFE_PARTITION_KEY = /^[A-Za-z0-9._-]+$/\n\nfunction assertSafePartitionKey(partitionKey: string): void {\n  if (partitionKey.length === 0) {\n    throw new ValidationError('partitionKey must be a non-empty string')\n  }\n  if (partitionKey === STATE_VAULT_NAME) {\n    throw new ReservedVaultNameError(partitionKey)\n  }\n  if (!SAFE_PARTITION_KEY.test(partitionKey)) {\n    throw new ValidationError(\n      `partitionKey \"${partitionKey}\" contains characters outside [A-Za-z0-9._-]. ` +\n        `Map your records to a store-safe key in sharding.keyOf.`,\n    )\n  }\n  if (partitionKey.includes(SHARD_SEPARATOR)) {\n    throw new ValidationError(\n      `partitionKey \"${partitionKey}\" must not contain \"--\" — it is reserved as the ` +\n        `shard vault-id separator and would risk shard-id collisions.`,\n    )\n  }\n}\n\nexport class VaultGroup<T> {\n  constructor(\n    /** @internal */ readonly db: Noydb,\n    /** @internal */ readonly name: string,\n    /** @internal */ readonly registry: Collection<VaultRegistryRow>,\n    /** @internal */ readonly sharding: ShardingConfig<T>,\n    /** @internal */ readonly template: VaultTemplate,\n  ) {\n    if (name.includes(SHARD_SEPARATOR)) {\n      throw new ValidationError(\n        `VaultGroup name \"${name}\" must not contain \"--\" (reserved shard vault-id separator).`,\n      )\n    }\n  }\n\n  /** @internal — set when the group is managed (no explicit registry). */\n  private stateVault: StateManagementVault | undefined\n\n  /** @internal */\n  _attachStateVault(sv: StateManagementVault): void {\n    this.stateVault = sv\n  }\n\n  /** Deterministic vault name for a partition key, namespaced by the group. */\n  shardVaultId(partitionKey: string): string {\n    assertSafePartitionKey(partitionKey)\n    return `${this.name}${SHARD_SEPARATOR}${partitionKey}`\n  }\n\n  /**\n   * @internal — group-qualified registry record key (avoids cross-group key\n   * collisions). Identical to the shard vault id by design — the registry row\n   * for a shard is keyed by that shard's vault id — so it delegates to\n   * `shardVaultId`, reusing its partition-key validation.\n   */\n  registryId(partitionKey: string): string {\n    return this.shardVaultId(partitionKey)\n  }\n\n  /**\n   * Registry rows for THIS group (hydrates the registry collection first).\n   * The registry may be shared across groups (the auto-wired StateManagement\n   * vault holds one `vaultRegistry` for the whole instance), so rows are\n   * filtered by `group` — without this, a group's fan-out reads would leak\n   * across into other groups' shards. Mirrors the `${group}--` scoping that\n   * `liveBinding().isRelevant` already applies to the reactive path.\n   */\n  async allRows(): Promise<VaultRegistryRow[]> {\n    await this.registry.list()\n    const rows = this.registry.query().toArray() // toArray() is synchronous\n    return rows.filter((r) => r.group === this.name)\n  }\n\n  /** Open an existing shard and apply the template. */\n  async openShard(partitionKey: string): Promise<Vault> {\n    const vault = await this.db.openVault(this.shardVaultId(partitionKey), { create: false })\n    this.template.configure(vault)\n    return vault\n  }\n\n  /**\n   * Idempotently provision a shard for `partitionKey`. Returns the\n   * configured vault handle.\n   *\n   * - row + vault present → no-op, return handle\n   * - row present, vault gone → ShardProvisioningError\n   * - row absent (vault present or not) → open-or-create, configure, write row\n   */\n  async createShard(partitionKey: string): Promise<Vault> {\n    const vaultId = this.shardVaultId(partitionKey)\n    const row = await this.registry.get(this.registryId(partitionKey))\n    const provisioned = await this.db._shardVaultProvisioned(vaultId)\n\n    if (row && !provisioned) throw new ShardProvisioningError(vaultId, partitionKey)\n    if (row && provisioned) return this.openShard(partitionKey)\n\n    // Row absent → create (or reconcile a provisioned-but-unregistered vault).\n    const vault = await this.db.openVault(vaultId)\n    this.template.configure(vault)\n    await this.registry.put(this.registryId(partitionKey), {\n      vaultId,\n      partitionKey,\n      templateName: this.sharding.vaultTemplate,\n      schemaVersion: this.template.version,\n      createdAt: Date.now(),\n      group: this.name,\n    })\n    if (this.stateVault) {\n      try {\n        await this.stateVault.appendEvent({\n          type: 'shard-created',\n          group: this.name,\n          vaultId,\n          templateName: this.sharding.vaultTemplate,\n          version: this.template.version,\n        })\n      } catch {\n        /* best-effort: event logging never fails the shard write */\n      }\n    }\n    return vault\n  }\n\n  /**\n   * Drill down to a single shard's full Collection API. Throws if the shard is unknown.\n   * Also throws ShardProvisioningError if the registry row exists but the vault has been deleted\n   * (registry/store divergence).\n   */\n  async shard(partitionKey: string): Promise<Vault> {\n    const vaultId = this.shardVaultId(partitionKey)\n    const row = await this.registry.get(this.registryId(partitionKey))\n    if (!row) throw new UnknownShardError(partitionKey, this.name)\n    const provisioned = await this.db._shardVaultProvisioned(vaultId)\n    if (!provisioned) throw new ShardProvisioningError(vaultId, partitionKey)\n    return this.openShard(partitionKey)\n  }\n\n  /** A sharded view over one logical collection across all shards. */\n  collection<R = T>(collectionName: string): ShardedCollection<T, R> {\n    return new ShardedCollection<T, R>(this, collectionName)\n  }\n\n  /** @internal — eligible (openable-candidate) rows + drift/divergence skips. */\n  async resolveEligible(options: { minVersion?: number } = {}): Promise<{\n    eligible: VaultRegistryRow[]\n    skipped: SkippedVault[]\n  }> {\n    const rows = await this.allRows()\n    const skipped: SkippedVault[] = []\n    const versionOk: VaultRegistryRow[] = []\n    for (const row of rows) {\n      if (options.minVersion !== undefined && row.schemaVersion < options.minVersion) {\n        skipped.push({ vaultId: row.vaultId, reason: 'schema-drift' })\n      } else versionOk.push(row)\n    }\n    const provisioned = await Promise.all(versionOk.map((r) => this.db._shardVaultProvisioned(r.vaultId)))\n    const eligible: VaultRegistryRow[] = []\n    versionOk.forEach((row, i) => {\n      if (provisioned[i]) eligible.push(row)\n      else skipped.push({ vaultId: row.vaultId, reason: 'error', error: new ShardProvisioningError(row.vaultId, row.partitionKey) })\n    })\n    return { eligible, skipped }\n  }\n}\n\nexport class ShardedCollection<T, R = T> {\n  constructor(\n    private readonly group: VaultGroup<T>,\n    private readonly collectionName: string,\n  ) {}\n\n  /** Route a write to the shard owning `keyOf(record)`. */\n  async put(id: string, record: T): Promise<void> {\n    const key = this.group.sharding.keyOf(record)\n    const row = await this.group.registry.get(this.group.registryId(key))\n    let vault: Vault\n    if (!row) {\n      if (this.group.sharding.autoCreate === false) {\n        throw new UnknownShardError(key, this.group.name)\n      }\n      vault = await this.group.createShard(key)\n    } else {\n      vault = await this.group.openShard(key)\n    }\n    await vault.collection<T>(this.collectionName).put(id, record)\n  }\n\n  /** Begin a cross-shard fan-out query. */\n  query(): ShardedQuery<T, R> {\n    return new ShardedQuery<T, R>(this.group, this.collectionName, [])\n  }\n}\n\nexport class ShardedQuery<T, R = T> {\n  constructor(\n    private readonly group: VaultGroup<T>,\n    private readonly collectionName: string,\n    private readonly clauses: readonly WhereClause[],\n  ) {}\n\n  where(field: string, op: WhereClause['op'], value: unknown): ShardedQuery<T, R> {\n    return new ShardedQuery<T, R>(this.group, this.collectionName, [\n      ...this.clauses,\n      { field, op, value },\n    ])\n  }\n\n  /** @internal — fan out the where-filtered records across eligible shards. */\n  async fanoutRecords(options: FanoutQueryOptions = {}): Promise<{ records: R[]; skippedVaults: SkippedVault[] }> {\n    const { eligible, skipped } = await this.group.resolveEligible(options)\n    const across = await this.group.db.queryAcross<R[]>(\n      eligible.map((r) => r.vaultId),\n      async (vault) => {\n        this.group.template.configure(vault)\n        const coll = vault.collection<R>(this.collectionName)\n        await coll.list() // hydrate the in-memory cache before the sync query\n        let q = coll.query()\n        for (const c of this.clauses) q = q.where(c.field, c.op, c.value)\n        return q.toArray()\n      },\n      { concurrency: options.concurrency ?? 1, create: false },\n    )\n    const results: R[] = []\n    for (const r of across) {\n      if (r.error) skipped.push({ vaultId: r.vault, reason: classifyShardSkip(r.error), error: r.error })\n      else for (const item of r.result) results.push(item)\n    }\n    return { records: results, skippedVaults: skipped }\n  }\n\n  /** Fan out across eligible shards and merge results. */\n  async toArray(options: FanoutQueryOptions = {}): Promise<FanoutResult<R>> {\n    const { records, skippedVaults } = await this.fanoutRecords(options)\n    return { results: records, skippedVaults }\n  }\n\n  /** @internal — build the change-subscription + relevance binding for this query's group+collection. */\n  liveBinding(): LiveBinding {\n    const group = this.group\n    const collectionName = this.collectionName\n    return {\n      subscribeToChanges: (h) => { group.db.on('change', h); return () => group.db.off('change', h) },\n      isRelevant: (e) => e.collection === collectionName && e.vault.startsWith(`${group.name}--`),\n    }\n  }\n\n  /** Returns a reactive cross-shard live query — a facade over CrossVaultLive. */\n  live(options: LiveQueryOptions = {}): CrossVaultLiveQuery<R> {\n    const bind = this.liveBinding()\n    const core = new CrossVaultLive<{ records: R[]; skipped: SkippedVault[] }>({\n      ...bind,\n      compute: async () => {\n        const { records, skippedVaults } = await this.fanoutRecords(options)\n        return { records, skipped: skippedVaults }\n      },\n      initialSnapshot: { records: [], skipped: [] },\n      ...(options.debounceMs !== undefined ? { debounceMs: options.debounceMs } : {}),\n    })\n    return {\n      get value() { return core.snapshot.records as readonly R[] },\n      get skippedVaults() { return core.snapshot.skipped as readonly SkippedVault[] },\n      get error() { return core.error },\n      ready: core.ready,\n      subscribe: (cb) => core.subscribe(cb),\n      stop: () => core.stop(),\n    }\n  }\n\n  /** One-shot distributed aggregate — central reduce over all shard records. */\n  aggregate<Spec extends AggregateSpec>(spec: Spec): CrossVaultAggregation<R, Spec> {\n    return new CrossVaultAggregation<R, Spec>(this, spec, this.liveBinding())\n  }\n\n  /** Begin a grouped cross-shard aggregate. */\n  groupBy<F extends string>(field: F): ShardedGroupedQuery<T, R, F> {\n    return new ShardedGroupedQuery<T, R, F>(this, field)\n  }\n}\n\n/** Grouped cross-shard query — intermediate after `.groupBy(field)`, terminates with `.aggregate(spec)`. */\nexport class ShardedGroupedQuery<T, R, F extends string> {\n  constructor(\n    private readonly query: ShardedQuery<T, R>,\n    private readonly field: F,\n  ) {}\n\n  aggregate<Spec extends AggregateSpec>(spec: Spec): CrossVaultGroupedAggregation<R, F, Spec> {\n    return new CrossVaultGroupedAggregation<R, F, Spec>(\n      { fanoutRecords: (o) => this.query.fanoutRecords(o) } satisfies FanoutRecordSource<R>,\n      this.field,\n      spec,\n      this.query.liveBinding(),\n    )\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAUO,SAAS,kBAAkB,KAA6D;AAC7F,SAAO,eAAe,gBAAgB,aAAa;AACrD;;;ACKO,IAAM,iBAAN,MAAwB;AAAA,EAC7B;AAAA,EACA,QAAsB;AAAA,EACb;AAAA,EAEQ,OAAO,oBAAI,IAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACT,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,QAA8C;AAAA,EAC9C;AAAA,EACA,cAAc;AAAA,EAEtB,YAAY,MAAgC;AAC1C,SAAK,OAAO;AACZ,SAAK,WAAW,KAAK;AACrB,SAAK,QAAQ,IAAI,QAAc,CAAC,QAAQ;AAAE,WAAK,eAAe;AAAA,IAAI,CAAC;AACnE,SAAK,cAAc,KAAK,mBAAmB,CAAC,MAAM;AAChD,UAAI,KAAK,WAAW,CAAC,KAAK,WAAW,CAAC,EAAG;AACzC,WAAK,SAAS;AAAA,IAChB,CAAC;AACD,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,UAAU,IAA4B;AACpC,QAAI,KAAK,QAAS,QAAO,MAAM;AAAA,IAAC;AAChC,SAAK,KAAK,IAAI,EAAE;AAChB,WAAO,MAAM,KAAK,KAAK,OAAO,EAAE;AAAA,EAClC;AAAA,EAEA,OAAa;AACX,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,SAAK,YAAY;AACjB,QAAI,KAAK,UAAU,KAAM,cAAa,KAAK,KAAK;AAChD,SAAK,KAAK,MAAM;AAChB,QAAI,CAAC,KAAK,YAAa,MAAK,aAAa;AAAA,EAC3C;AAAA,EAEQ,WAAiB;AACvB,QAAI,KAAK,QAAS;AAClB,QAAI,KAAK,WAAW;AAAE,WAAK,QAAQ;AAAM;AAAA,IAAO;AAChD,QAAI,KAAK,UAAW;AACpB,SAAK,YAAY;AACjB,UAAM,MAAM,MAAM;AAAE,WAAK,YAAY;AAAO,WAAK,KAAK,WAAW;AAAA,IAAE;AACnE,UAAM,KAAK,KAAK,KAAK,cAAc;AACnC,QAAI,KAAK,EAAG,MAAK,QAAQ,WAAW,KAAK,EAAE;AAAA,QAEtC,gBAAe,GAAG;AAAA,EACzB;AAAA,EAEA,MAAc,aAA4B;AACxC,QAAI,KAAK,QAAS;AAClB,SAAK,YAAY;AACjB,SAAK,QAAQ;AACb,QAAI;AACF,YAAM,OAAO,MAAM,KAAK,KAAK,QAAQ;AACrC,UAAI,KAAK,QAAS;AAClB,WAAK,WAAW;AAChB,WAAK,QAAQ;AAAA,IACf,SAAS,KAAK;AACZ,UAAI,KAAK,QAAS;AAClB,WAAK,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,IACjE,UAAE;AACA,WAAK,YAAY;AACjB,UAAI,CAAC,KAAK,SAAS;AACjB,YAAI,CAAC,KAAK,aAAa;AAAE,eAAK,cAAc;AAAM,eAAK,aAAa;AAAA,QAAE;AACtE,mBAAW,MAAM,KAAK,KAAM,IAAG;AAC/B,YAAI,KAAK,MAAO,MAAK,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACF;;;ACxDO,IAAM,wBAAN,MAA2D;AAAA,EAChE,YACmB,KACA,MACA,MACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EAGnB,MAAM,IAAI,UAA8B,CAAC,GAGtC;AACD,UAAM,EAAE,SAAS,cAAc,IAAI,MAAM,KAAK,IAAI,cAAc,OAAO;AACvE,WAAO,EAAE,QAAQ,cAAc,SAAS,KAAK,IAAI,GAAG,cAAc;AAAA,EACpE;AAAA,EAEA,KAAK,UAA4B,CAAC,GAAqD;AACrF,QAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,0FAAqF;AACrH,UAAM,OAAO,KAAK;AAClB,UAAM,MAAM,KAAK;AACjB,UAAM,OAAO,IAAI,eAAsF;AAAA,MACrG,oBAAoB,KAAK,KAAK;AAAA,MAC9B,YAAY,KAAK,KAAK;AAAA,MACtB,SAAS,YAAY;AACnB,cAAM,EAAE,SAAS,cAAc,IAAI,MAAM,IAAI,cAAc,OAAO;AAClE,eAAO,EAAE,OAAO,cAAc,SAAS,IAAI,GAAG,SAAS,cAAc;AAAA,MACvE;AAAA,MACA,iBAAiB,EAAE,OAAO,QAAW,SAAS,CAAC,EAAE;AAAA,MACjD,GAAI,QAAQ,eAAe,SAAY,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC/E,CAAC;AACD,WAAO;AAAA,MACL,IAAI,QAAQ;AAAE,eAAO,KAAK,SAAS;AAAA,MAAM;AAAA,MACzC,IAAI,gBAAgB;AAAE,eAAO,KAAK,SAAS;AAAA,MAAmC;AAAA,MAC9E,IAAI,QAAQ;AAAE,eAAO,KAAK;AAAA,MAAM;AAAA,MAChC,OAAO,KAAK;AAAA,MACZ,WAAW,CAAC,OAAO,KAAK,UAAU,EAAE;AAAA,MACpC,MAAM,MAAM,KAAK,KAAK;AAAA,IACxB;AAAA,EACF;AACF;AAMO,IAAM,+BAAN,MAAoF;AAAA,EACzF,YACmB,KACA,OACA,MACA,MACjB;AAJiB;AACA;AACA;AACA;AAAA,EAChB;AAAA,EAJgB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAGnB,MAAM,IAAI,UAA8B,CAAC,GAGtC;AACD,UAAM,EAAE,SAAS,cAAc,IAAI,MAAM,KAAK,IAAI,cAAc,OAAO;AACvE,WAAO;AAAA,MACL,SAAS,eAAoC,SAAS,KAAK,OAAO,KAAK,IAAI;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AAAA,EAEA,KAAK,UAA4B,CAAC,GAA6C;AAC7E,QAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,2GAAsG;AACtI,UAAM,QAAQ,KAAK;AACnB,UAAM,OAAO,KAAK;AAClB,UAAM,MAAM,KAAK;AACjB,UAAM,OAAO,IAAI,eAA4E;AAAA,MAC3F,oBAAoB,KAAK,KAAK;AAAA,MAC9B,YAAY,KAAK,KAAK;AAAA,MACtB,SAAS,YAAY;AACnB,cAAM,EAAE,SAAS,cAAc,IAAI,MAAM,IAAI,cAAc,OAAO;AAClE,eAAO;AAAA,UACL,SAAS,eAAoC,SAAS,OAAO,IAAI;AAAA,UACjE,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,iBAAiB,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC,EAAE;AAAA,MAC5C,GAAI,QAAQ,eAAe,SAAY,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC/E,CAAC;AACD,WAAO;AAAA,MACL,IAAI,QAAQ;AAAE,eAAO,KAAK,SAAS;AAAA,MAA0C;AAAA,MAC7E,IAAI,gBAAgB;AAAE,eAAO,KAAK,SAAS;AAAA,MAAmC;AAAA,MAC9E,IAAI,QAAQ;AAAE,eAAO,KAAK;AAAA,MAAM;AAAA,MAChC,OAAO,KAAK;AAAA,MACZ,WAAW,CAAC,OAAO,KAAK,UAAU,EAAE;AAAA,MACpC,MAAM,MAAM,KAAK,KAAK;AAAA,IACxB;AAAA,EACF;AACF;;;AChGA,IAAM,kBAAkB;AAExB,IAAM,qBAAqB;AAE3B,SAAS,uBAAuB,cAA4B;AAC1D,MAAI,aAAa,WAAW,GAAG;AAC7B,UAAM,IAAI,gBAAgB,yCAAyC;AAAA,EACrE;AACA,MAAI,iBAAiB,kBAAkB;AACrC,UAAM,IAAI,uBAAuB,YAAY;AAAA,EAC/C;AACA,MAAI,CAAC,mBAAmB,KAAK,YAAY,GAAG;AAC1C,UAAM,IAAI;AAAA,MACR,iBAAiB,YAAY;AAAA,IAE/B;AAAA,EACF;AACA,MAAI,aAAa,SAAS,eAAe,GAAG;AAC1C,UAAM,IAAI;AAAA,MACR,iBAAiB,YAAY;AAAA,IAE/B;AAAA,EACF;AACF;AAEO,IAAM,aAAN,MAAoB;AAAA,EACzB,YAC4B,IACA,MACA,UACA,UACA,UAC1B;AAL0B;AACA;AACA;AACA;AACA;AAE1B,QAAI,KAAK,SAAS,eAAe,GAAG;AAClC,YAAM,IAAI;AAAA,QACR,oBAAoB,IAAI;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA,EAX4B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAUpB;AAAA;AAAA,EAGR,kBAAkB,IAAgC;AAChD,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA,EAGA,aAAa,cAA8B;AACzC,2BAAuB,YAAY;AACnC,WAAO,GAAG,KAAK,IAAI,GAAG,eAAe,GAAG,YAAY;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAW,cAA8B;AACvC,WAAO,KAAK,aAAa,YAAY;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,UAAuC;AAC3C,UAAM,KAAK,SAAS,KAAK;AACzB,UAAM,OAAO,KAAK,SAAS,MAAM,EAAE,QAAQ;AAC3C,WAAO,KAAK,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI;AAAA,EACjD;AAAA;AAAA,EAGA,MAAM,UAAU,cAAsC;AACpD,UAAM,QAAQ,MAAM,KAAK,GAAG,UAAU,KAAK,aAAa,YAAY,GAAG,EAAE,QAAQ,MAAM,CAAC;AACxF,SAAK,SAAS,UAAU,KAAK;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,YAAY,cAAsC;AACtD,UAAM,UAAU,KAAK,aAAa,YAAY;AAC9C,UAAM,MAAM,MAAM,KAAK,SAAS,IAAI,KAAK,WAAW,YAAY,CAAC;AACjE,UAAM,cAAc,MAAM,KAAK,GAAG,uBAAuB,OAAO;AAEhE,QAAI,OAAO,CAAC,YAAa,OAAM,IAAI,uBAAuB,SAAS,YAAY;AAC/E,QAAI,OAAO,YAAa,QAAO,KAAK,UAAU,YAAY;AAG1D,UAAM,QAAQ,MAAM,KAAK,GAAG,UAAU,OAAO;AAC7C,SAAK,SAAS,UAAU,KAAK;AAC7B,UAAM,KAAK,SAAS,IAAI,KAAK,WAAW,YAAY,GAAG;AAAA,MACrD;AAAA,MACA;AAAA,MACA,cAAc,KAAK,SAAS;AAAA,MAC5B,eAAe,KAAK,SAAS;AAAA,MAC7B,WAAW,KAAK,IAAI;AAAA,MACpB,OAAO,KAAK;AAAA,IACd,CAAC;AACD,QAAI,KAAK,YAAY;AACnB,UAAI;AACF,cAAM,KAAK,WAAW,YAAY;AAAA,UAChC,MAAM;AAAA,UACN,OAAO,KAAK;AAAA,UACZ;AAAA,UACA,cAAc,KAAK,SAAS;AAAA,UAC5B,SAAS,KAAK,SAAS;AAAA,QACzB,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAM,cAAsC;AAChD,UAAM,UAAU,KAAK,aAAa,YAAY;AAC9C,UAAM,MAAM,MAAM,KAAK,SAAS,IAAI,KAAK,WAAW,YAAY,CAAC;AACjE,QAAI,CAAC,IAAK,OAAM,IAAI,kBAAkB,cAAc,KAAK,IAAI;AAC7D,UAAM,cAAc,MAAM,KAAK,GAAG,uBAAuB,OAAO;AAChE,QAAI,CAAC,YAAa,OAAM,IAAI,uBAAuB,SAAS,YAAY;AACxE,WAAO,KAAK,UAAU,YAAY;AAAA,EACpC;AAAA;AAAA,EAGA,WAAkB,gBAAiD;AACjE,WAAO,IAAI,kBAAwB,MAAM,cAAc;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,gBAAgB,UAAmC,CAAC,GAGvD;AACD,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,UAAM,UAA0B,CAAC;AACjC,UAAM,YAAgC,CAAC;AACvC,eAAW,OAAO,MAAM;AACtB,UAAI,QAAQ,eAAe,UAAa,IAAI,gBAAgB,QAAQ,YAAY;AAC9E,gBAAQ,KAAK,EAAE,SAAS,IAAI,SAAS,QAAQ,eAAe,CAAC;AAAA,MAC/D,MAAO,WAAU,KAAK,GAAG;AAAA,IAC3B;AACA,UAAM,cAAc,MAAM,QAAQ,IAAI,UAAU,IAAI,CAAC,MAAM,KAAK,GAAG,uBAAuB,EAAE,OAAO,CAAC,CAAC;AACrG,UAAM,WAA+B,CAAC;AACtC,cAAU,QAAQ,CAAC,KAAK,MAAM;AAC5B,UAAI,YAAY,CAAC,EAAG,UAAS,KAAK,GAAG;AAAA,UAChC,SAAQ,KAAK,EAAE,SAAS,IAAI,SAAS,QAAQ,SAAS,OAAO,IAAI,uBAAuB,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;AAAA,IAC/H,CAAC;AACD,WAAO,EAAE,UAAU,QAAQ;AAAA,EAC7B;AACF;AAEO,IAAM,oBAAN,MAAkC;AAAA,EACvC,YACmB,OACA,gBACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA;AAAA,EAInB,MAAM,IAAI,IAAY,QAA0B;AAC9C,UAAM,MAAM,KAAK,MAAM,SAAS,MAAM,MAAM;AAC5C,UAAM,MAAM,MAAM,KAAK,MAAM,SAAS,IAAI,KAAK,MAAM,WAAW,GAAG,CAAC;AACpE,QAAI;AACJ,QAAI,CAAC,KAAK;AACR,UAAI,KAAK,MAAM,SAAS,eAAe,OAAO;AAC5C,cAAM,IAAI,kBAAkB,KAAK,KAAK,MAAM,IAAI;AAAA,MAClD;AACA,cAAQ,MAAM,KAAK,MAAM,YAAY,GAAG;AAAA,IAC1C,OAAO;AACL,cAAQ,MAAM,KAAK,MAAM,UAAU,GAAG;AAAA,IACxC;AACA,UAAM,MAAM,WAAc,KAAK,cAAc,EAAE,IAAI,IAAI,MAAM;AAAA,EAC/D;AAAA;AAAA,EAGA,QAA4B;AAC1B,WAAO,IAAI,aAAmB,KAAK,OAAO,KAAK,gBAAgB,CAAC,CAAC;AAAA,EACnE;AACF;AAEO,IAAM,eAAN,MAAM,cAAuB;AAAA,EAClC,YACmB,OACA,gBACA,SACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EAGnB,MAAM,OAAe,IAAuB,OAAoC;AAC9E,WAAO,IAAI,cAAmB,KAAK,OAAO,KAAK,gBAAgB;AAAA,MAC7D,GAAG,KAAK;AAAA,MACR,EAAE,OAAO,IAAI,MAAM;AAAA,IACrB,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,cAAc,UAA8B,CAAC,GAA6D;AAC9G,UAAM,EAAE,UAAU,QAAQ,IAAI,MAAM,KAAK,MAAM,gBAAgB,OAAO;AACtE,UAAM,SAAS,MAAM,KAAK,MAAM,GAAG;AAAA,MACjC,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO;AAAA,MAC7B,OAAO,UAAU;AACf,aAAK,MAAM,SAAS,UAAU,KAAK;AACnC,cAAM,OAAO,MAAM,WAAc,KAAK,cAAc;AACpD,cAAM,KAAK,KAAK;AAChB,YAAI,IAAI,KAAK,MAAM;AACnB,mBAAW,KAAK,KAAK,QAAS,KAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK;AAChE,eAAO,EAAE,QAAQ;AAAA,MACnB;AAAA,MACA,EAAE,aAAa,QAAQ,eAAe,GAAG,QAAQ,MAAM;AAAA,IACzD;AACA,UAAM,UAAe,CAAC;AACtB,eAAW,KAAK,QAAQ;AACtB,UAAI,EAAE,MAAO,SAAQ,KAAK,EAAE,SAAS,EAAE,OAAO,QAAQ,kBAAkB,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,CAAC;AAAA,UAC7F,YAAW,QAAQ,EAAE,OAAQ,SAAQ,KAAK,IAAI;AAAA,IACrD;AACA,WAAO,EAAE,SAAS,SAAS,eAAe,QAAQ;AAAA,EACpD;AAAA;AAAA,EAGA,MAAM,QAAQ,UAA8B,CAAC,GAA6B;AACxE,UAAM,EAAE,SAAS,cAAc,IAAI,MAAM,KAAK,cAAc,OAAO;AACnE,WAAO,EAAE,SAAS,SAAS,cAAc;AAAA,EAC3C;AAAA;AAAA,EAGA,cAA2B;AACzB,UAAM,QAAQ,KAAK;AACnB,UAAM,iBAAiB,KAAK;AAC5B,WAAO;AAAA,MACL,oBAAoB,CAAC,MAAM;AAAE,cAAM,GAAG,GAAG,UAAU,CAAC;AAAG,eAAO,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;AAAA,MAAE;AAAA,MAC9F,YAAY,CAAC,MAAM,EAAE,eAAe,kBAAkB,EAAE,MAAM,WAAW,GAAG,MAAM,IAAI,IAAI;AAAA,IAC5F;AAAA,EACF;AAAA;AAAA,EAGA,KAAK,UAA4B,CAAC,GAA2B;AAC3D,UAAM,OAAO,KAAK,YAAY;AAC9B,UAAM,OAAO,IAAI,eAA0D;AAAA,MACzE,GAAG;AAAA,MACH,SAAS,YAAY;AACnB,cAAM,EAAE,SAAS,cAAc,IAAI,MAAM,KAAK,cAAc,OAAO;AACnE,eAAO,EAAE,SAAS,SAAS,cAAc;AAAA,MAC3C;AAAA,MACA,iBAAiB,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC,EAAE;AAAA,MAC5C,GAAI,QAAQ,eAAe,SAAY,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC/E,CAAC;AACD,WAAO;AAAA,MACL,IAAI,QAAQ;AAAE,eAAO,KAAK,SAAS;AAAA,MAAwB;AAAA,MAC3D,IAAI,gBAAgB;AAAE,eAAO,KAAK,SAAS;AAAA,MAAmC;AAAA,MAC9E,IAAI,QAAQ;AAAE,eAAO,KAAK;AAAA,MAAM;AAAA,MAChC,OAAO,KAAK;AAAA,MACZ,WAAW,CAAC,OAAO,KAAK,UAAU,EAAE;AAAA,MACpC,MAAM,MAAM,KAAK,KAAK;AAAA,IACxB;AAAA,EACF;AAAA;AAAA,EAGA,UAAsC,MAA4C;AAChF,WAAO,IAAI,sBAA+B,MAAM,MAAM,KAAK,YAAY,CAAC;AAAA,EAC1E;AAAA;AAAA,EAGA,QAA0B,OAAwC;AAChE,WAAO,IAAI,oBAA6B,MAAM,KAAK;AAAA,EACrD;AACF;AAGO,IAAM,sBAAN,MAAkD;AAAA,EACvD,YACmB,OACA,OACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAGnB,UAAsC,MAAsD;AAC1F,WAAO,IAAI;AAAA,MACT,EAAE,eAAe,CAAC,MAAM,KAAK,MAAM,cAAc,CAAC,EAAE;AAAA,MACpD,KAAK;AAAA,MACL;AAAA,MACA,KAAK,MAAM,YAAY;AAAA,IACzB;AAAA,EACF;AACF;","names":[]}

package/dist/{with-derivation-DWMTpgEH.d.ts → with-derivation-BjdOxUBn.d.ts}

@@ -1,4 +1,4 @@
-import { aN as DerivationStrategy, aR as DerivationStrategyHandle } from './types-CD8mc8zR.js';
+import { aN as DerivationStrategy, aR as DerivationStrategyHandle } from './types-pax34sec.js';
 
 /**
  * Register a deterministic derivation: one source collection → one or

package/dist/{with-derivation-CVT7-dUt.d.cts → with-derivation-D8wFlb6V.d.cts}

@@ -1,4 +1,4 @@
-import { aN as DerivationStrategy, aR as DerivationStrategyHandle } from './types-DiSXn3a4.cjs';
+import { aN as DerivationStrategy, aR as DerivationStrategyHandle } from './types-CDwSSXiI.cjs';
 
 /**
  * Register a deterministic derivation: one source collection → one or

package/dist/{with-materialized-view-BTTU3BNK.d.cts → with-materialized-view-5QMF1rS_.d.cts}

@@ -1,4 +1,4 @@
-import { aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle } from './types-DiSXn3a4.cjs';
+import { aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle } from './types-CDwSSXiI.cjs';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-materialized-view-X0CoL8-L.d.ts → with-materialized-view-DJb-HO65.d.ts}

@@ -1,4 +1,4 @@
-import { aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle } from './types-CD8mc8zR.js';
+import { aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle } from './types-pax34sec.js';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-overlayed-view-DQjO_DSG.d.ts → with-overlayed-view-CkqTefbz.d.ts}

@@ -1,4 +1,4 @@
-import { aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle } from './types-CD8mc8zR.js';
+import { aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle } from './types-pax34sec.js';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to

package/dist/{with-overlayed-view-DcacRRsS.d.cts → with-overlayed-view-DDNflPvC.d.cts}

@@ -1,4 +1,4 @@
-import { aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle } from './types-DiSXn3a4.cjs';
+import { aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle } from './types-CDwSSXiI.cjs';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.2.0-pre.11",
+  "version": "0.2.0-pre.13",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -269,14 +269,14 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.2.0-pre.11"
+    "@noy-db/attestation": "0.2.0-pre.13"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^3.23.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.2.0-pre.11"
+    "@noy-db/on-shamir": "0.2.0-pre.13"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"