@noy-db/hub 0.2.0-pre.13 → 0.2.0-pre.15

package/dist/{chunk-P5MW7BG2.js → chunk-7EFFHEN5.js}

@@ -7,37 +7,37 @@ import {
 import {
   TxContext,
   revertExecuted
-} from "./chunk-M6KXHRIA.js";
+} from "./chunk-YHPM5D7Y.js";
 import {
   OverlayedCollection
-} from "./chunk-3XZRRBFW.js";
+} from "./chunk-OHVFWCJP.js";
 import {
   LazyQuery,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-D5Y3HIC6.js";
+} from "./chunk-CZI2A4MQ.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-HHZ77DHM.js";
+} from "./chunk-WGHU7BLI.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-KJF7EPUE.js";
+} from "./chunk-DKO2QFSA.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-J67BP5EP.js";
+} from "./chunk-KI6HAJWL.js";
 import {
   getAtPath,
   isDictCollectionName,
   resolvePolicy,
   setAtPathInPlace
-} from "./chunk-7TEI2K2A.js";
+} from "./chunk-7HT2MEZ5.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
@@ -59,11 +59,11 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-SYSKC237.js";
+} from "./chunk-COFPAMX6.js";
 import {
   assertTierAccess,
   dekKey
-} from "./chunk-SJ24GHID.js";
+} from "./chunk-4TBBMHVC.js";
 import {
   USER_ENVELOPE_COLLECTION,
   assertKeyringOpenAllowed,
@@ -88,7 +88,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-C3WRKABE.js";
+} from "./chunk-A5ZOOZFB.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -98,7 +98,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-HQXOEWLZ.js";
+} from "./chunk-56DJ7JVK.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-Z6FNBOTC.js";
@@ -106,20 +106,23 @@ import {
   NO_AGGREGATE,
   Query,
   ScanBuilder,
+  canonicalizeIncomingMoney,
+  canonicalizeStoredMoney,
   decodeMoneyFields,
-  quantizeMoneyFields
-} from "./chunk-NJMKHRQI.js";
+  quantizeMoneyFields,
+  validateMoneyFieldPaths
+} from "./chunk-EYVQHAGH.js";
 import {
   canonicalGroupKey
-} from "./chunk-YWBHS25M.js";
+} from "./chunk-3EWXMOK3.js";
 import {
   readPath
-} from "./chunk-TV3YZ35S.js";
+} from "./chunk-CJORTUJ2.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-TDECYU4Y.js";
+} from "./chunk-6AJBSQU4.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
@@ -129,7 +132,7 @@ import {
   encrypt,
   encryptDeterministic,
   sha256Hex
-} from "./chunk-E3DIBDKA.js";
+} from "./chunk-YULZKK4F.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -164,7 +167,7 @@ import {
   UnsupportedIndexOptionError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "./chunk-NKGY3C53.js";
+} from "./chunk-535SSHBS.js";
 
 // src/policy/storage.ts
 var META_COLLECTION = "_meta";
@@ -807,7 +810,7 @@ async function resolveStaleOnRead(accessor, outputCollection, id) {
     }
     const sourceWithId = { ...source, id };
     if (DerivationExecutor === null) {
-      ({ DerivationExecutor } = await import("./executor-AVJ7UEWA.js"));
+      ({ DerivationExecutor } = await import("./executor-6ZDSDZ6V.js"));
     }
     const ctx = { vault: accessor.getReadOnlyFacade() };
     const result = await DerivationExecutor.run(spec, sourceWithId, 0, strategyHash, ctx);
@@ -1153,6 +1156,7 @@ var Collection = class {
     this.joinResolver = opts.joinResolver;
     this.i18nFields = opts.i18nFields;
     this.dictKeyFields = opts.dictKeyFields;
+    if (opts.moneyFields) validateMoneyFieldPaths(opts.moneyFields);
     this.moneyFields = opts.moneyFields;
     this.computed = opts.computed;
     this.dictLabelResolver = opts.dictLabelResolver;
@@ -1286,7 +1290,9 @@ var Collection = class {
    * declaration; this reconciles that ordering. First-wins. Not public.
    */
   _applyMoneyFields(moneyFields) {
-    if (this.moneyFields === void 0) this.moneyFields = moneyFields;
+    if (this.moneyFields !== void 0) return;
+    validateMoneyFieldPaths(moneyFields);
+    this.moneyFields = moneyFields;
   }
   /** @internal — attach computed fields post-construction. See {@link _applyMoneyFields}. */
   _applyComputed(computed) {
@@ -1313,7 +1319,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-LZYMMDDS.js");
+      const { resolveStaleMVOnRead } = await import("./stale-JH67FU57.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     let record;
@@ -1453,6 +1459,7 @@ var Collection = class {
     if (!hasWritePermission(this.keyring, this.name)) {
       throw new ReadOnlyError();
     }
+    record = canonicalizeIncomingMoney(record, this.moneyFields);
     if (this.subsystemBus?.hasGateHandlers("beforePut")) {
       const existingEnv = await this.adapter.get(this.vault, this.name, id);
       let existingRecord = null;
@@ -1469,7 +1476,7 @@ var Collection = class {
         collection: this.name,
         docId: id,
         incoming: record,
-        existing: existingRecord,
+        existing: canonicalizeStoredMoney(existingRecord, this.moneyFields),
         existingVersion: existingEnv?._v ?? 0,
         existingTs: existingEnv?._ts,
         userId: this.keyring.userId,
@@ -1710,7 +1717,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-IQO3KGXQ.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-HSSRXDOB.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1719,7 +1726,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-LZYMMDDS.js");
+          staleHelpers = await import("./stale-JH67FU57.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -1738,7 +1745,7 @@ var Collection = class {
    */
   async dispatchDerivations(id, record, version) {
     if (this.derivationSource === void 0) return;
-    const incoming = record;
+    const incoming = canonicalizeStoredMoney(record, this.moneyFields);
     if (incoming && typeof incoming === "object" && "_derivedFrom" in incoming) return;
     const registry = this.derivationSource.registry();
     const strategies = registry.strategiesForSource(this.name);
@@ -1748,7 +1755,7 @@ var Collection = class {
       const mode = typeof spec.lifecycle === "string" ? spec.lifecycle : spec.lifecycle.mode;
       if (mode === "eager") {
         if (DerivationExecutor === null) {
-          ({ DerivationExecutor } = await import("./executor-AVJ7UEWA.js"));
+          ({ DerivationExecutor } = await import("./executor-6ZDSDZ6V.js"));
         }
         const sourceWithId = { ...incoming, id };
         const ctx = { vault: this.derivationSource.getReadOnlyFacade() };
@@ -1971,7 +1978,7 @@ var Collection = class {
           vault: this.vault,
           collection: this.name,
           docId: id,
-          existing: existingRecord,
+          existing: canonicalizeStoredMoney(existingRecord, this.moneyFields),
           existingVersion: existingEnv._v,
           existingTs: existingEnv._ts,
           internal,
@@ -2100,7 +2107,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-IQO3KGXQ.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-HSSRXDOB.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -2109,7 +2116,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-LZYMMDDS.js");
+          staleHelpers = await import("./stale-JH67FU57.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2132,7 +2139,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-LZYMMDDS.js");
+      const { resolveStaleMVOnRead } = await import("./stale-JH67FU57.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     await this.ensureHydrated();
@@ -6135,12 +6142,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-ZH27C23Y.js");
+    const { issueAttestationCore } = await import("./issue-ADVS4OVP.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-GRIYBA22.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-P5D7Y72U.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -6166,19 +6173,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-5BOLVJ3N.js");
+    const { revokeDocCore } = await import("./revoke-ZDFKMR5E.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-5BOLVJ3N.js");
+    const { unrevokeDocCore } = await import("./revoke-ZDFKMR5E.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-5BOLVJ3N.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-ZDFKMR5E.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-5BOLVJ3N.js");
+    const { publishRevocationListCore } = await import("./revoke-ZDFKMR5E.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -6495,7 +6502,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-2PKBQDCH.js"),
+      import("./registry-XGLNADIE.js"),
       import("./read-only-facade-ITU6L7BL.js")
     ]);
     const registry = new DerivationRegistry();
@@ -6526,7 +6533,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-PV4G3OPA.js");
+    const { MaterializedViewRegistry } = await import("./registry-DK5YWAAA.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -6550,7 +6557,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-4VXFKCBJ.js");
+    const { OverlayedViewRegistry } = await import("./registry-IUZQVVBB.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -6597,13 +6604,13 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-IQO3KGXQ.js");
+    const { MaterializedViewExecutor } = await import("./executor-HSSRXDOB.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this
     });
-    const { clearMVStale } = await import("./stale-LZYMMDDS.js");
+    const { clearMVStale } = await import("./stale-JH67FU57.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -6619,7 +6626,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0 };
-    const { DerivationExecutor } = await import("./executor-AVJ7UEWA.js");
+    const { DerivationExecutor } = await import("./executor-6ZDSDZ6V.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.readOnlyFacade ?? new (await import("./read-only-facade-ITU6L7BL.js")).ReadOnlyVaultFacade(this) };
@@ -6865,7 +6872,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-K5ERUH6A.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-NIQ43IPU.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (passphrase) first."
@@ -6887,7 +6894,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-K5ERUH6A.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-NIQ43IPU.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -7356,7 +7363,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-MHG6YVXW.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-SYHEYQ3X.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -8966,7 +8973,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-VT7TKGE4.js");
+      const { GuardExecutor } = await import("./executor-IDZDAFNH.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -9565,8 +9572,8 @@ var Noydb = class {
     if (name === STATE_VAULT_NAME) throw new ReservedVaultNameError(name);
     const template = this.vaultTemplates.get(opts.sharding.vaultTemplate);
     if (!template) throw new VaultTemplateNotFoundError(opts.sharding.vaultTemplate);
-    const { VaultGroup } = await import("./vault-group-UO4YUZOG.js");
-    const { StateManagementVault } = await import("./state-vault-QFJWU23A.js");
+    const { VaultGroup } = await import("./vault-group-KOM7QRJG.js");
+    const { StateManagementVault } = await import("./state-vault-TMXZRTY5.js");
     const stateVault = opts.registry ? void 0 : await StateManagementVault.open(this);
     const registry = opts.registry ?? stateVault.registry;
     const group = new VaultGroup(this, name, registry, opts.sharding, template);
@@ -9593,7 +9600,7 @@ var Noydb = class {
    */
   async openStateManagementVault() {
     if (this.closed) throw new ValidationError("Instance is closed");
-    const { StateManagementVault } = await import("./state-vault-QFJWU23A.js");
+    const { StateManagementVault } = await import("./state-vault-TMXZRTY5.js");
     return StateManagementVault.open(this);
   }
   /**
@@ -11133,4 +11140,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-P5MW7BG2.js.map
+//# sourceMappingURL=chunk-7EFFHEN5.js.map