@noy-db/hub 0.2.0-pre.15 → 0.2.0-pre.16

package/dist/bundle/index.d.cts

@@ -1,11 +1,11 @@
-import { T as TransferSealPayload } from '../ulid-CiPrpGqm.cjs';
-export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-CiPrpGqm.cjs';
-import { bw as Vault, b3 as NoydbStore, bs as SealingKeyProvider, bx as RecoveryEnrollmentInput, by as ShamirRecoveryProvider } from '../types-BpPV5uyy.cjs';
-export { X as AdoptionStateError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a1 as PartitionExtractionError, a2 as TransferSealError } from '../strategy-CbneC7bS.cjs';
+import { T as TransferSealPayload } from '../ulid-DfZlAh0u.cjs';
+export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-DfZlAh0u.cjs';
+import { bs as Vault, a$ as NoydbStore, bo as SealingKeyProvider, bt as RecoveryEnrollmentInput, bu as ShamirRecoveryProvider } from '../types-Bze6vkwm.cjs';
+export { X as AdoptionStateError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a1 as PartitionExtractionError, a2 as TransferSealError } from '../strategy-BtW8fAjz.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
 import '../strategy-BSxFXGzb.cjs';
-import '../index-D95VK1Qy.cjs';
+import '../index-C8Bk3-VF.cjs';
 import '@noy-db/attestation';
 
 /**

package/dist/bundle/index.d.ts

@@ -1,11 +1,11 @@
-import { T as TransferSealPayload } from '../ulid-DAfenvFd.js';
-export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-DAfenvFd.js';
-import { bw as Vault, b3 as NoydbStore, bs as SealingKeyProvider, bx as RecoveryEnrollmentInput, by as ShamirRecoveryProvider } from '../types-4t1-tWS4.js';
-export { X as AdoptionStateError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a1 as PartitionExtractionError, a2 as TransferSealError } from '../strategy-CbneC7bS.js';
+import { T as TransferSealPayload } from '../ulid-DbBVrNSt.js';
+export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-DbBVrNSt.js';
+import { bs as Vault, a$ as NoydbStore, bo as SealingKeyProvider, bt as RecoveryEnrollmentInput, bu as ShamirRecoveryProvider } from '../types-DrmBTscX.js';
+export { X as AdoptionStateError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a1 as PartitionExtractionError, a2 as TransferSealError } from '../strategy-BtW8fAjz.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-XNB2r6bX.js';
+import '../index-nP99bXLg.js';
 import '@noy-db/attestation';
 
 /**

package/dist/bundle/index.js

@@ -1,7 +1,7 @@
 import {
   SCHEMAS_COLLECTION,
   resolveManagedSecret
-} from "../chunk-WGHU7BLI.js";
+} from "../chunk-GNI5STXQ.js";
 import {
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
@@ -20,11 +20,11 @@ import {
   resetBrotliSupportCache,
   validateBundleHeader,
   writeNoydbBundle
-} from "../chunk-L2FE64BU.js";
-import "../chunk-DKO2QFSA.js";
+} from "../chunk-FFXM3ZIF.js";
+import "../chunk-OB2ZJQ2D.js";
 import {
   createOwnerKeyring
-} from "../chunk-A5ZOOZFB.js";
+} from "../chunk-6H2ZUNR7.js";
 import {
   generateULID,
   isULID
@@ -32,7 +32,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LedgerStore
-} from "../chunk-56DJ7JVK.js";
+} from "../chunk-BR3AMFGS.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -41,7 +41,7 @@ import {
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "../chunk-GC4V7RU7.js";
+} from "../chunk-F3BPIPLS.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -532,7 +532,7 @@ async function createOwnerOnAdoptedPartition(store, vaultName, opts) {
     }
   }
   if (isManaged(opts)) {
-    const { createNoydb } = await import("../noydb-GZGFBA4E.js");
+    const { createNoydb } = await import("../noydb-WCMY2ZOW.js");
     const db = await createNoydb({
       store,
       user: userId,

package/dist/{chunk-BIYRQQV6.js → chunk-3YWP3WBP.js}

@@ -1,13 +1,13 @@
 import {
   ATTESTATIONS_COLLECTION,
   loadOrCreateSigner
-} from "./chunk-7PS7EOCF.js";
+} from "./chunk-IXBIFDEW.js";
 import {
   generateULID
 } from "./chunk-FZU343FL.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-GC4V7RU7.js";
+} from "./chunk-F3BPIPLS.js";
 import {
   encrypt
 } from "./chunk-YULZKK4F.js";
@@ -56,4 +56,4 @@ async function issueAttestationCore(ctx, args) {
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=chunk-BIYRQQV6.js.map
+//# sourceMappingURL=chunk-3YWP3WBP.js.map

package/dist/{chunk-VU7SWWT5.js → chunk-42FEUPZQ.js}

@@ -20,7 +20,7 @@ function recordId(record) {
   return typeof id === "string" ? id : "";
 }
 function immutableGuard(config) {
-  const { collection, after, appendOnly, amendmentRoles } = config;
+  const { collection, after, appendOnly, amendmentRoles, amendmentInvariant } = config;
   if (appendOnly && after !== void 0) {
     throw new ValidationError("immutableGuard: `after` and `appendOnly` are mutually exclusive");
   }
@@ -46,12 +46,16 @@ function immutableGuard(config) {
       }
     },
     // The authorized override: inside an amendment transaction the
-    // check/onDelete are skipped and the change is ledgered. No extra
-    // invariant — the amendment itself is the sanctioned exception.
+    // check/onDelete are skipped and the change is ledgered. By default
+    // there is no extra invariant — the amendment itself is the
+    // sanctioned exception. Callers may supply `amendmentInvariant` to
+    // keep a constraint inviolable even under amendment (e.g. forbid
+    // deletes, or preserve a cross-record sum); a throw reverts the
+    // amendment and surfaces as `InvariantError`.
     amendment: {
       roles: amendmentRoles ?? ["admin", "owner"],
-      invariant: () => {
-      }
+      invariant: amendmentInvariant ?? (() => {
+      })
     }
   };
   return withGuard(spec);
@@ -61,4 +65,4 @@ export {
   withGuard,
   immutableGuard
 };
-//# sourceMappingURL=chunk-VU7SWWT5.js.map
+//# sourceMappingURL=chunk-42FEUPZQ.js.map

package/dist/chunk-42FEUPZQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guards/with-guard.ts","../src/guards/immutable-guard.ts"],"sourcesContent":["import { ValidationError } from '../errors.js'\nimport type { GuardStrategy, GuardStrategyHandle } from './types.js'\n\n/**\n * Register a guard for a collection. Guards run on every `put()` /\n * `delete()` for the named collection (after permissions, before\n * encryption) and may:\n *\n *   - `check` — block writes by throwing (typically `RecordLockedError`)\n *   - `frozenFields` — freeze specific fields once a condition is true\n *   - `amendment` — declare an authorized-override path with invariant\n *\n * Pass the returned handle to `createNoydb({ strategies: [...] })`.\n *\n * @see docs/superpowers/specs/2026-05-18-guards-design.md\n */\nexport function withGuard<T extends Record<string, unknown>>(\n  strategy: GuardStrategy<T>,\n): GuardStrategyHandle<T> {\n  if (!strategy.collection || strategy.collection.length === 0) {\n    throw new ValidationError('withGuard: collection name is required')\n  }\n  return {\n    __noydb_strategy: 'guard',\n    spec: strategy,\n  }\n}\n","/**\n * `immutableGuard` — declarative WORM / append-only sugar over the guard\n * subsystem.\n *\n * Issued fiscal documents (invoices, DDTs) must be immutable after issue.\n * That is expressible today with a hand-rolled `withGuard` (block on\n * `check`/`onDelete`, allow an admin `amendment`), but the boilerplate is\n * repetitive and easy to get subtly wrong. `immutableGuard` generates\n * exactly that guard from a declarative config, reusing the guard\n * machinery wholesale — `check`/`onDelete` rejection, the ledgered\n * `amendment` override, and composition with `periods`/`history`.\n *\n * ```ts\n * createNoydb({ guardStrategies: [\n *   immutableGuard({\n *     collection: 'invoices',\n *     after: (r) => r.status === 'issued',   // immutable once issued\n *   }),\n * ] })\n * ```\n *\n * A record is mutable until `after(record)` holds; from then on, updates\n * and deletes throw `RecordLockedError` unless performed inside an\n * `amendment` transaction by an authorized role (the override is\n * ledgered by the guard amendment mechanism). `appendOnly: true` is\n * shorthand for `after: () => true` — immutable from creation.\n */\n\nimport { withGuard } from './with-guard.js'\nimport type { GuardStrategy, GuardStrategyHandle, GuardContext, GuardChange } from './types.js'\nimport { RecordLockedError, ValidationError } from '../errors.js'\n\nexport interface ImmutableGuardConfig<T extends Record<string, unknown>> {\n  /** The collection to make WORM. */\n  collection: string\n  /**\n   * A record becomes immutable once this predicate holds. Evaluated on\n   * the *existing* (already-persisted) record, so the write that first\n   * makes it true is still allowed; subsequent writes are blocked.\n   * Mutually exclusive with `appendOnly`.\n   */\n  after?: (record: T) => boolean\n  /** Shorthand for `after: () => true` — immutable from creation. */\n  appendOnly?: boolean\n  /** Roles permitted to override via an amendment transaction. Default `['admin', 'owner']`. */\n  amendmentRoles?: ReadonlyArray<'admin' | 'owner'>\n  /**\n   * Optional set-level invariant run over the amendment change-set after\n   * the writes execute. Signature matches `GuardStrategy.amendment.invariant`\n   * exactly: it receives every {before, after} pair touching this\n   * collection in the amendment plus the guard context; throwing reverts\n   * the whole amendment and surfaces as `InvariantError`.\n   *\n   * Use this to keep a constraint inviolable EVEN under amendment — e.g.\n   * forbid deleting an issued document by re-throwing on any\n   * `before !== null && after === null` change, or assert a cross-record\n   * sum is preserved. When omitted the amendment is unconditionally\n   * allowed (the amendment itself is the sanctioned, ledgered override) —\n   * this is the backward-compatible default.\n   */\n  amendmentInvariant?: (\n    changes: ReadonlyArray<GuardChange<T>>,\n    ctx: GuardContext<T>,\n  ) => Promise<void> | void\n}\n\nfunction recordId(record: Record<string, unknown> | null): string {\n  const id = record?.id\n  return typeof id === 'string' ? id : ''\n}\n\n/**\n * Build an immutability guard. Pass the returned handle to\n * `createNoydb({ guardStrategies: [...] })`.\n */\nexport function immutableGuard<T extends Record<string, unknown>>(\n  config: ImmutableGuardConfig<T>,\n): GuardStrategyHandle<T> {\n  const { collection, after, appendOnly, amendmentRoles, amendmentInvariant } = config\n  if (appendOnly && after !== undefined) {\n    throw new ValidationError('immutableGuard: `after` and `appendOnly` are mutually exclusive')\n  }\n  if (!appendOnly && after === undefined) {\n    throw new ValidationError('immutableGuard: provide `after` or `appendOnly: true`')\n  }\n\n  const isImmutable: (record: T) => boolean = appendOnly ? () => true : after!\n  const reason = appendOnly ? 'append-only collection' : 'record is immutable after issue'\n\n  const spec: GuardStrategy<T> = {\n    collection,\n    // Block updates to an already-immutable record. Inserts (existing\n    // null) and the transition write that first makes the record\n    // immutable are allowed — `after` reads the prior state.\n    check: (incoming: T, ctx: GuardContext<T>) => {\n      if (ctx.existing !== null && isImmutable(ctx.existing)) {\n        throw new RecordLockedError(collection, recordId(incoming as Record<string, unknown>), reason)\n      }\n    },\n    // Block deletes of an immutable record.\n    onDelete: (existing: T) => {\n      if (isImmutable(existing)) {\n        throw new RecordLockedError(collection, recordId(existing as Record<string, unknown>), reason)\n      }\n    },\n    // The authorized override: inside an amendment transaction the\n    // check/onDelete are skipped and the change is ledgered. By default\n    // there is no extra invariant — the amendment itself is the\n    // sanctioned exception. Callers may supply `amendmentInvariant` to\n    // keep a constraint inviolable even under amendment (e.g. forbid\n    // deletes, or preserve a cross-record sum); a throw reverts the\n    // amendment and surfaces as `InvariantError`.\n    amendment: {\n      roles: amendmentRoles ?? ['admin', 'owner'],\n      invariant: amendmentInvariant ?? (() => {\n        /* allow — the amendment is the override, and is ledgered */\n      }),\n    },\n  }\n\n  return withGuard<T>(spec)\n}\n"],"mappings":";;;;;;AAgBO,SAAS,UACd,UACwB;AACxB,MAAI,CAAC,SAAS,cAAc,SAAS,WAAW,WAAW,GAAG;AAC5D,UAAM,IAAI,gBAAgB,wCAAwC;AAAA,EACpE;AACA,SAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,MAAM;AAAA,EACR;AACF;;;ACwCA,SAAS,SAAS,QAAgD;AAChE,QAAM,KAAK,QAAQ;AACnB,SAAO,OAAO,OAAO,WAAW,KAAK;AACvC;AAMO,SAAS,eACd,QACwB;AACxB,QAAM,EAAE,YAAY,OAAO,YAAY,gBAAgB,mBAAmB,IAAI;AAC9E,MAAI,cAAc,UAAU,QAAW;AACrC,UAAM,IAAI,gBAAgB,iEAAiE;AAAA,EAC7F;AACA,MAAI,CAAC,cAAc,UAAU,QAAW;AACtC,UAAM,IAAI,gBAAgB,uDAAuD;AAAA,EACnF;AAEA,QAAM,cAAsC,aAAa,MAAM,OAAO;AACtE,QAAM,SAAS,aAAa,2BAA2B;AAEvD,QAAM,OAAyB;AAAA,IAC7B;AAAA;AAAA;AAAA;AAAA,IAIA,OAAO,CAAC,UAAa,QAAyB;AAC5C,UAAI,IAAI,aAAa,QAAQ,YAAY,IAAI,QAAQ,GAAG;AACtD,cAAM,IAAI,kBAAkB,YAAY,SAAS,QAAmC,GAAG,MAAM;AAAA,MAC/F;AAAA,IACF;AAAA;AAAA,IAEA,UAAU,CAAC,aAAgB;AACzB,UAAI,YAAY,QAAQ,GAAG;AACzB,cAAM,IAAI,kBAAkB,YAAY,SAAS,QAAmC,GAAG,MAAM;AAAA,MAC/F;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,WAAW;AAAA,MACT,OAAO,kBAAkB,CAAC,SAAS,OAAO;AAAA,MAC1C,WAAW,uBAAuB,MAAM;AAAA,MAExC;AAAA,IACF;AAAA,EACF;AAEA,SAAO,UAAa,IAAI;AAC1B;","names":[]}

package/dist/{chunk-7EFFHEN5.js → chunk-667MB6AH.js}

@@ -7,10 +7,10 @@ import {
 import {
   TxContext,
   revertExecuted
-} from "./chunk-YHPM5D7Y.js";
+} from "./chunk-QVIEAYTP.js";
 import {
   OverlayedCollection
-} from "./chunk-OHVFWCJP.js";
+} from "./chunk-VLMPU56Q.js";
 import {
   LazyQuery,
   decodeIdxId,
@@ -22,22 +22,22 @@ import {
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-WGHU7BLI.js";
+} from "./chunk-GNI5STXQ.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-DKO2QFSA.js";
+} from "./chunk-OB2ZJQ2D.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-KI6HAJWL.js";
+} from "./chunk-QSUK7YWK.js";
 import {
   getAtPath,
   isDictCollectionName,
   resolvePolicy,
   setAtPathInPlace
-} from "./chunk-7HT2MEZ5.js";
+} from "./chunk-7BQ4QWYX.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
@@ -59,7 +59,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-COFPAMX6.js";
+} from "./chunk-DLZ2ONOD.js";
 import {
   assertTierAccess,
   dekKey
@@ -88,7 +88,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-A5ZOOZFB.js";
+} from "./chunk-6H2ZUNR7.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -98,7 +98,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-56DJ7JVK.js";
+} from "./chunk-BR3AMFGS.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-Z6FNBOTC.js";
@@ -111,10 +111,10 @@ import {
   decodeMoneyFields,
   quantizeMoneyFields,
   validateMoneyFieldPaths
-} from "./chunk-EYVQHAGH.js";
+} from "./chunk-DUREQF5W.js";
 import {
   canonicalGroupKey
-} from "./chunk-3EWXMOK3.js";
+} from "./chunk-L2BNJ6HM.js";
 import {
   readPath
 } from "./chunk-CJORTUJ2.js";
@@ -122,11 +122,11 @@ import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-6AJBSQU4.js";
+} from "./chunk-XL35NSEN.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-GC4V7RU7.js";
+} from "./chunk-F3BPIPLS.js";
 import {
   decrypt,
   encrypt,
@@ -1319,7 +1319,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-JH67FU57.js");
+      const { resolveStaleMVOnRead } = await import("./stale-W5PQTRYH.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     let record;
@@ -1717,7 +1717,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-HSSRXDOB.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-AZLS3KBK.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1726,7 +1726,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-JH67FU57.js");
+          staleHelpers = await import("./stale-W5PQTRYH.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -1757,9 +1757,18 @@ var Collection = class {
         if (DerivationExecutor === null) {
           ({ DerivationExecutor } = await import("./executor-6ZDSDZ6V.js"));
         }
-        const sourceWithId = { ...incoming, id };
+        let sourceWithId;
+        let sourceVersion = version;
+        if (spec.source === this.name) {
+          sourceWithId = { ...incoming, id };
+        } else {
+          const primary = await this.derivationSource.getCollection(spec.source).get(id);
+          if (primary === null || primary === void 0) continue;
+          sourceWithId = { ...primary, id };
+          sourceVersion = 0;
+        }
         const ctx = { vault: this.derivationSource.getReadOnlyFacade() };
-        const result = await DerivationExecutor.run(spec, sourceWithId, version, strategyHash, ctx);
+        const result = await DerivationExecutor.run(spec, sourceWithId, sourceVersion, strategyHash, ctx);
         for (const key of Object.keys(spec.outputs)) {
           const out = result.outputs[key];
           if (!out) continue;
@@ -1774,7 +1783,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-N6OJX6QR.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-67CMI3UT.js");
             const prior = await loadFanoutSidecar(
               this.adapter,
               this.vault,
@@ -2067,7 +2076,7 @@ var Collection = class {
       for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
         if (outSpec.shape !== "array") continue;
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-N6OJX6QR.js");
+          helpers = await import("./fanout-sidecar-67CMI3UT.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(
           this.adapter,
@@ -2107,7 +2116,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-HSSRXDOB.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-AZLS3KBK.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -2116,7 +2125,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-JH67FU57.js");
+          staleHelpers = await import("./stale-W5PQTRYH.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -2139,7 +2148,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-JH67FU57.js");
+      const { resolveStaleMVOnRead } = await import("./stale-W5PQTRYH.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     await this.ensureHydrated();
@@ -3784,6 +3793,21 @@ function withArchive(opts) {
 // src/sequence/index.ts
 var SEQUENCE_COLLECTION = "_sequences";
 var MAX_NEXT_ATTEMPTS = 16;
+function resolveSequenceKey(series, opts) {
+  const partition = opts?.partition;
+  if (!partition || partition.length === 0) return series;
+  const parts = partition.map((p) => {
+    if (typeof p === "number" && !Number.isFinite(p)) {
+      throw new ValidationError(`sequence partition component must be a finite number, got ${p}`);
+    }
+    const s = String(p);
+    if (s === "") {
+      throw new ValidationError("sequence partition component must not be empty");
+    }
+    return encodeURIComponent(s);
+  });
+  return `${series}\0${parts.join("/")}`;
+}
 async function sleepBackoff(attempt) {
   const ceil = Math.min(2 ** attempt, 32);
   const ms = Math.floor(Math.random() * ceil);
@@ -3814,7 +3838,8 @@ var SequenceStore = class {
   handle(name) {
     return {
       next: () => this.next(name),
-      peek: () => this.peek(name)
+      peek: () => this.peek(name),
+      seedTo: (n) => this.seedTo(name, n)
     };
   }
   assertOnline() {
@@ -3867,6 +3892,30 @@ var SequenceStore = class {
     void lastConflict;
     throw new SequenceContentionError(name, MAX_NEXT_ATTEMPTS);
   }
+  async seedTo(name, n) {
+    this.assertOnline();
+    if (n <= 0) return;
+    let lastConflict;
+    for (let attempt = 0; attempt < MAX_NEXT_ATTEMPTS; attempt++) {
+      const { env, value } = await this.read(name);
+      if (value >= n) return;
+      const expectedVersion = env?._v ?? 0;
+      const envelope = await this.encryptState({ value: n }, expectedVersion + 1);
+      try {
+        await this.adapter.put(this.vault, SEQUENCE_COLLECTION, name, envelope, expectedVersion);
+        return;
+      } catch (err) {
+        if (err instanceof ConflictError) {
+          lastConflict = err;
+          if (attempt < MAX_NEXT_ATTEMPTS - 1) await sleepBackoff(attempt);
+          continue;
+        }
+        throw err;
+      }
+    }
+    void lastConflict;
+    throw new SequenceContentionError(name, MAX_NEXT_ATTEMPTS);
+  }
 };
 
 // src/numbering/index.ts
@@ -6005,17 +6054,23 @@ var Vault = class {
    * const cur = await vault.sequence('invoice-2026').peek()  // current value, no allocation
    * ```
    */
-  sequence(name) {
-    if (this.numberingConfigs.has(name)) {
+  sequence(series, opts) {
+    if (series.includes("\0")) {
+      throw new ValidationError(`sequence("${series}"): series name must not contain a null byte (\\x00).`);
+    }
+    if (this.numberingConfigs.has(series)) {
       const eng = this.deferred();
       return {
-        next: async (opts) => {
-          if (!opts?.for) {
-            throw new ValidationError(`sequence("${name}") is a deferred-numbering series; call next({ for: recordId }).`);
+        next: async (nextOpts) => {
+          if (!nextOpts?.for) {
+            throw new ValidationError(`sequence("${series}") is a deferred-numbering series; call next({ for: recordId }).`);
           }
-          return (await eng.enqueue(name, opts.for)).assigned;
+          return (await eng.enqueue(series, nextOpts.for)).assigned;
         },
-        peek: () => eng.peek(name)
+        peek: () => eng.peek(series),
+        seedTo: () => {
+          throw new ValidationError(`sequence("${series}") is a deferred-numbering series; seedTo is CAS-only.`);
+        }
       };
     }
     if (!this.sequenceStore) {
@@ -6027,7 +6082,7 @@ var Vault = class {
         actor: this.keyring.userId
       });
     }
-    return this.sequenceStore.handle(name);
+    return this.sequenceStore.handle(resolveSequenceKey(series, opts));
   }
   /** @internal — lazily build the deferred-numbering engine with a cache-coherent stamp. */
   deferred() {
@@ -6142,12 +6197,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-ADVS4OVP.js");
+    const { issueAttestationCore } = await import("./issue-RZP3VI6O.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-P5D7Y72U.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-DCMNKXSF.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -6173,19 +6228,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-ZDFKMR5E.js");
+    const { revokeDocCore } = await import("./revoke-HNMQZSCL.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-ZDFKMR5E.js");
+    const { unrevokeDocCore } = await import("./revoke-HNMQZSCL.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-ZDFKMR5E.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-HNMQZSCL.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-ZDFKMR5E.js");
+    const { publishRevocationListCore } = await import("./revoke-HNMQZSCL.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -6319,9 +6374,24 @@ var Vault = class {
           });
         }
         if (rule.mode === "cascade") {
+          const txCtx = this.noydb._activeTxContextOrNull;
           for (const match of matches) {
             const matchId = match["id"] ?? null;
             if (matchId === null) continue;
+            if (txCtx !== null) {
+              const prior = await this.adapter.get(this.name, rule.collection, matchId);
+              if (prior !== null) {
+                txCtx._executed.push({
+                  op: {
+                    type: "delete",
+                    vaultName: this.name,
+                    collectionName: rule.collection,
+                    id: matchId
+                  },
+                  priorEnvelope: prior
+                });
+              }
+            }
             await fromCollection.delete(matchId);
           }
         }
@@ -6502,7 +6572,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-XGLNADIE.js"),
+      import("./registry-EB6SISTA.js"),
       import("./read-only-facade-ITU6L7BL.js")
     ]);
     const registry = new DerivationRegistry();
@@ -6533,7 +6603,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-DK5YWAAA.js");
+    const { MaterializedViewRegistry } = await import("./registry-UTA4CLQS.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -6604,13 +6674,13 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-HSSRXDOB.js");
+    const { MaterializedViewExecutor } = await import("./executor-AZLS3KBK.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this
     });
-    const { clearMVStale } = await import("./stale-JH67FU57.js");
+    const { clearMVStale } = await import("./stale-W5PQTRYH.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -6651,7 +6721,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-N6OJX6QR.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-67CMI3UT.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -7363,7 +7433,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-SYHEYQ3X.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-YP2UWMLG.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -8561,7 +8631,7 @@ var NOT_ENABLED5 = new Error(
   'Multi-record transactions require the tx strategy. Import `{ withTransactions }` from "@noy-db/hub/tx" and pass it to `createNoydb({ txStrategy: withTransactions() })`.'
 );
 var NO_TX = {
-  async runTransaction() {
+  async runTransaction(_db, _fn, _options, _txInvariants) {
     throw NOT_ENABLED5;
   },
   async runDryRun() {
@@ -9572,7 +9642,7 @@ var Noydb = class {
     if (name === STATE_VAULT_NAME) throw new ReservedVaultNameError(name);
     const template = this.vaultTemplates.get(opts.sharding.vaultTemplate);
     if (!template) throw new VaultTemplateNotFoundError(opts.sharding.vaultTemplate);
-    const { VaultGroup } = await import("./vault-group-KOM7QRJG.js");
+    const { VaultGroup } = await import("./vault-group-DX2HFQMX.js");
     const { StateManagementVault } = await import("./state-vault-TMXZRTY5.js");
     const stateVault = opts.registry ? void 0 : await StateManagementVault.open(this);
     const registry = opts.registry ?? stateVault.registry;
@@ -11102,6 +11172,7 @@ function normalizeSyncTargets(sync) {
 
 export {
   withArchive,
+  resolveSequenceKey,
   SequenceStore,
   validateSchemaInput,
   validateSchemaOutput,
@@ -11140,4 +11211,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-7EFFHEN5.js.map
+//# sourceMappingURL=chunk-667MB6AH.js.map