@noy-db/hub 0.2.0-pre.15 → 0.2.0-pre.17

package/dist/consent/index.d.cts

@@ -1,10 +1,12 @@
-import { a8 as ConsentStrategy } from '../types-BpPV5uyy.cjs';
-export { a9 as CONSENT_AUDIT_COLLECTION, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, ae as loadConsentEntries, af as writeConsentEntry } from '../types-BpPV5uyy.cjs';
+import { ab as ConsentStrategy } from '../types-CrSpRDuG.cjs';
+export { ac as CONSENT_AUDIT_COLLECTION, ad as ConsentAuditEntry, ae as ConsentAuditFilter, af as ConsentContext, ag as ConsentOp, ah as loadConsentEntries, ai as writeConsentEntry } from '../types-CrSpRDuG.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
-import '../strategy-CbneC7bS.cjs';
+import '../strategy-CLC1j79g.cjs';
+import '../errors-Dz64FA65.cjs';
 import '../strategy-BSxFXGzb.cjs';
-import '../index-D95VK1Qy.cjs';
+import '../index-C-SSRIxP.cjs';
+import '../index-u-kWzSrL.cjs';
 import '@noy-db/attestation';
 
 /**

package/dist/consent/index.d.ts

@@ -1,10 +1,12 @@
-import { a8 as ConsentStrategy } from '../types-4t1-tWS4.js';
-export { a9 as CONSENT_AUDIT_COLLECTION, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, ae as loadConsentEntries, af as writeConsentEntry } from '../types-4t1-tWS4.js';
+import { ab as ConsentStrategy } from '../types-CljIHm_J.js';
+export { ac as CONSENT_AUDIT_COLLECTION, ad as ConsentAuditEntry, ae as ConsentAuditFilter, af as ConsentContext, ag as ConsentOp, ah as loadConsentEntries, ai as writeConsentEntry } from '../types-CljIHm_J.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
-import '../strategy-CbneC7bS.js';
+import '../strategy-4M9jo172.js';
+import '../errors-Dz64FA65.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-XNB2r6bX.js';
+import '../index-C-SSRIxP.js';
+import '../index-DpU6KWof.js';
 import '@noy-db/attestation';
 
 /**

package/dist/consent/index.js

@@ -2,10 +2,10 @@ import {
   CONSENT_AUDIT_COLLECTION,
   loadConsentEntries,
   writeConsentEntry
-} from "../chunk-FWPKCXTN.js";
+} from "../chunk-WIAOUFFB.js";
 import "../chunk-FZU343FL.js";
-import "../chunk-YULZKK4F.js";
-import "../chunk-535SSHBS.js";
+import "../chunk-UNTGHX5A.js";
+import "../chunk-ZEGSDPB7.js";
 
 // src/consent/active.ts
 function withConsent() {

package/dist/{crypto-QXQOHMHF.js → crypto-7BN2HDWG.js}

@@ -16,10 +16,12 @@ import {
   generateSalt,
   hmacSha256Hex,
   sha256Hex,
+  unwrapCek,
   unwrapKey,
+  wrapCek,
   wrapKey
-} from "./chunk-YULZKK4F.js";
-import "./chunk-535SSHBS.js";
+} from "./chunk-UNTGHX5A.js";
+import "./chunk-ZEGSDPB7.js";
 export {
   base64ToBuffer,
   bufferToBase64,
@@ -38,7 +40,9 @@ export {
   generateSalt,
   hmacSha256Hex,
   sha256Hex,
+  unwrapCek,
   unwrapKey,
+  wrapCek,
   wrapKey
 };
-//# sourceMappingURL=crypto-QXQOHMHF.js.map
+//# sourceMappingURL=crypto-7BN2HDWG.js.map

package/dist/{delegation-NIQ43IPU.js → delegation-MGH5SODX.js}

@@ -3,15 +3,15 @@ import {
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-F4OJZIWQ.js";
-import "./chunk-4TBBMHVC.js";
+} from "./chunk-NBBMMJ2H.js";
+import "./chunk-5LIROIDM.js";
 import "./chunk-FZU343FL.js";
-import "./chunk-YULZKK4F.js";
-import "./chunk-535SSHBS.js";
+import "./chunk-UNTGHX5A.js";
+import "./chunk-ZEGSDPB7.js";
 export {
   DELEGATIONS_COLLECTION,
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
 };
-//# sourceMappingURL=delegation-NIQ43IPU.js.map
+//# sourceMappingURL=delegation-MGH5SODX.js.map

package/dist/derivations/index.cjs

@@ -123,6 +123,18 @@ function withDerivation(spec) {
   if (typeof spec.derive !== "function") {
     throw new ValidationError("withDerivation: derive must be a function");
   }
+  if (spec.sources !== void 0) {
+    for (const extra of spec.sources) {
+      if (typeof extra !== "string" || extra.length === 0) {
+        throw new ValidationError("withDerivation: each entry in sources[] must be a non-empty string");
+      }
+      if (extra === spec.source) {
+        throw new ValidationError(
+          `withDerivation: sources[] must not contain the primary source "${spec.source}"`
+        );
+      }
+    }
+  }
   const lifecycleMode = typeof spec.lifecycle === "string" ? spec.lifecycle : spec.lifecycle.mode;
   for (const [outputKey, outputSpec] of Object.entries(spec.outputs)) {
     if (outputSpec.shape === "array") {
@@ -153,11 +165,15 @@ function withDerivation(spec) {
 }
 
 // src/derivations/strategy-hash.ts
-async function computeStrategyHash(source, outputKeys, derive) {
+async function computeStrategyHash(source, outputKeys, derive, sources) {
   const canonical = JSON.stringify({
     source,
     outputs: [...outputKeys].sort(),
-    derive: derive.toString()
+    derive: derive.toString(),
+    // Declared sibling sources (#344) — adding/removing a trigger
+    // collection invalidates cached derived records. Omitted when empty
+    // so strategies without siblings keep their existing hash.
+    ...sources?.length ? { sources: [...sources].sort() } : {}
   });
   const bytes = new TextEncoder().encode(canonical);
   const digest = await crypto.subtle.digest("SHA-256", bytes);
@@ -171,11 +187,16 @@ var DerivationRegistry = class {
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   async register(spec) {
     const outputKeys = Object.keys(spec.outputs);
-    const strategyHash = await computeStrategyHash(spec.source, outputKeys, spec.derive);
+    const strategyHash = await computeStrategyHash(spec.source, outputKeys, spec.derive, spec.sources);
     const reg = { spec, strategyHash };
     const fromSource = this._bySource.get(spec.source);
     if (fromSource) fromSource.push(reg);
     else this._bySource.set(spec.source, [reg]);
+    for (const extra of spec.sources ?? []) {
+      const fromExtra = this._bySource.get(extra);
+      if (fromExtra) fromExtra.push(reg);
+      else this._bySource.set(extra, [reg]);
+    }
     for (const key of outputKeys) {
       const output = spec.outputs[key];
       if (!output) continue;