@noy-db/hub 0.2.0-pre.2 → 0.2.0-pre.21

package/dist/consent/index.d.ts

@@ -1,10 +1,12 @@
-import { Z as ConsentStrategy } from '../types-BoFFiskX.js';
-export { _ as CONSENT_AUDIT_COLLECTION, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, a3 as loadConsentEntries, a4 as writeConsentEntry } from '../types-BoFFiskX.js';
-import '../lazy-builder-Rpd-V3jP.js';
-import '../predicate-Dnu81tsS.js';
-import '../strategy-DSTrsZ8t.js';
+import { a3 as ConsentStrategy } from '../types-DLfWFr6U.js';
+export { a4 as CONSENT_AUDIT_COLLECTION, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, a9 as loadConsentEntries, aa as writeConsentEntry } from '../types-DLfWFr6U.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
+import '../strategy-54eIwox5.js';
+import '../errors-Dkc_fi-S.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-BCKdioeh.js';
+import '../index-BMmajblo.js';
+import '../index-Bm9hIY7t.js';
 import '@noy-db/attestation';
 
 /**

package/dist/consent/index.js

@@ -2,10 +2,10 @@ import {
   CONSENT_AUDIT_COLLECTION,
   loadConsentEntries,
   writeConsentEntry
-} from "../chunk-VK5EER6C.js";
+} from "../chunk-SQKAECUL.js";
 import "../chunk-FZU343FL.js";
-import "../chunk-2PAQNPE3.js";
-import "../chunk-W3XXT26A.js";
+import "../chunk-37VGJM3T.js";
+import "../chunk-OTWT6BAJ.js";
 
 // src/consent/active.ts
 function withConsent() {

package/dist/{crypto-5ZDIY3NG.js → crypto-456N7UVX.js}

@@ -16,10 +16,12 @@ import {
   generateSalt,
   hmacSha256Hex,
   sha256Hex,
+  unwrapCek,
   unwrapKey,
+  wrapCek,
   wrapKey
-} from "./chunk-2PAQNPE3.js";
-import "./chunk-W3XXT26A.js";
+} from "./chunk-37VGJM3T.js";
+import "./chunk-OTWT6BAJ.js";
 export {
   base64ToBuffer,
   bufferToBase64,
@@ -38,7 +40,9 @@ export {
   generateSalt,
   hmacSha256Hex,
   sha256Hex,
+  unwrapCek,
   unwrapKey,
+  wrapCek,
   wrapKey
 };
-//# sourceMappingURL=crypto-5ZDIY3NG.js.map
+//# sourceMappingURL=crypto-456N7UVX.js.map

package/dist/{delegation-QYXZW25W.js → delegation-DP4COTXB.js}

@@ -3,15 +3,15 @@ import {
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-G6FRSBKK.js";
-import "./chunk-7BUTTVMR.js";
+} from "./chunk-AI4USDRI.js";
+import "./chunk-F5GWNSE2.js";
 import "./chunk-FZU343FL.js";
-import "./chunk-2PAQNPE3.js";
-import "./chunk-W3XXT26A.js";
+import "./chunk-37VGJM3T.js";
+import "./chunk-OTWT6BAJ.js";
 export {
   DELEGATIONS_COLLECTION,
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
 };
-//# sourceMappingURL=delegation-QYXZW25W.js.map
+//# sourceMappingURL=delegation-DP4COTXB.js.map

package/dist/derivations/index.cjs

@@ -27,7 +27,8 @@ __export(derivations_exports, {
   DerivationOutputShapeError: () => DerivationOutputShapeError,
   DerivationOutputUnknownError: () => DerivationOutputUnknownError,
   DerivationRegistry: () => DerivationRegistry,
-  withDerivation: () => withDerivation
+  withDerivation: () => withDerivation,
+  withRollup: () => withRollup
 });
 module.exports = __toCommonJS(derivations_exports);
 
@@ -123,12 +124,53 @@ function withDerivation(spec) {
   if (typeof spec.derive !== "function") {
     throw new ValidationError("withDerivation: derive must be a function");
   }
+  if (spec.sources !== void 0) {
+    for (const extra of spec.sources) {
+      if (typeof extra !== "string" || extra.length === 0) {
+        throw new ValidationError("withDerivation: each entry in sources[] must be a non-empty string");
+      }
+      if (extra === spec.source) {
+        throw new ValidationError(
+          `withDerivation: sources[] must not contain the primary source "${spec.source}"`
+        );
+      }
+    }
+  }
+  if (spec.triggerBy !== void 0) {
+    for (const t of spec.triggerBy) {
+      if (typeof t?.collection !== "string" || t.collection.length === 0) {
+        throw new ValidationError("withDerivation: each triggerBy entry needs a non-empty `collection`");
+      }
+      if (t.collection === spec.source) {
+        throw new ValidationError(
+          `withDerivation: triggerBy.collection must not equal the source "${spec.source}" (use sources[] for same-id triggers)`
+        );
+      }
+      if (typeof t.on !== "string" || t.on.length === 0) {
+        throw new ValidationError(
+          `withDerivation: triggerBy on "${t.collection}" needs a non-empty \`on\` (the FK field on the source)`
+        );
+      }
+      if (t.maxFanout !== void 0 && (!Number.isInteger(t.maxFanout) || t.maxFanout < 1)) {
+        throw new ValidationError(
+          `withDerivation: triggerBy maxFanout on "${t.collection}" must be a positive integer (got ${String(t.maxFanout)}).`
+        );
+      }
+    }
+  }
   const lifecycleMode = typeof spec.lifecycle === "string" ? spec.lifecycle : spec.lifecycle.mode;
   for (const [outputKey, outputSpec] of Object.entries(spec.outputs)) {
+    if (outputSpec.shape === "record" && outputSpec.collection === spec.source) {
+      if (!outputSpec.denorm || outputSpec.denorm.length === 0) {
+        throw new ValidationError(
+          `withDerivation: self-write output "${outputKey}" (collection === source "${spec.source}") must declare \`denorm: [...]\` naming the fields it maintains.`
+        );
+      }
+    }
     if (outputSpec.shape === "array") {
       if (lifecycleMode !== "eager") {
         throw new ValidationError(
-          `withDerivation: shape 'array' supports lifecycle 'eager' only in this release (#200 slice 1). Output "${outputKey}" declared lifecycle '${lifecycleMode}'. Switch to \`lifecycle: "eager"\` or use shape: "record".`
+          `withDerivation: shape 'array' supports lifecycle 'eager' only in this release Output "${outputKey}" declared lifecycle '${lifecycleMode}'. Switch to \`lifecycle: "eager"\` or use shape: "record".`
         );
       }
       if (typeof outputSpec.key !== "function") {
@@ -152,12 +194,52 @@ function withDerivation(spec) {
   };
 }
 
+// src/derivations/with-rollup.ts
+function withRollup(config) {
+  const { from, key, into, field, compute } = config;
+  if (!from || from.length === 0) {
+    throw new ValidationError("withRollup: `from` (child collection) is required");
+  }
+  if (!into || into.length === 0) {
+    throw new ValidationError("withRollup: `into` (parent collection) is required");
+  }
+  if (from === into) {
+    throw new ValidationError("withRollup: `from` and `into` must be different collections");
+  }
+  if (!key || key.length === 0) {
+    throw new ValidationError("withRollup: `key` (FK field on the child) is required");
+  }
+  if (!field || field.length === 0) {
+    throw new ValidationError("withRollup: `field` (target field on the parent) is required");
+  }
+  if (typeof compute !== "function") {
+    throw new ValidationError("withRollup: `compute` must be a function");
+  }
+  const spec = {
+    source: into,
+    // the parent record is what carries the rolled-up field
+    deterministic: true,
+    rollup: { from, key, field, compute },
+    // Synthetic self-write output for registry / cycle bookkeeping. Dispatch
+    // patches `field` directly (value-equality guarded); the executor is not run.
+    outputs: { value: { shape: "record", collection: into, denorm: [field] } },
+    derive: () => ({ value: {} }),
+    // never invoked for a rollup strategy
+    lifecycle: "eager"
+  };
+  return { __noydb_strategy: "derivation", spec };
+}
+
 // src/derivations/strategy-hash.ts
-async function computeStrategyHash(source, outputKeys, derive) {
+async function computeStrategyHash(source, outputKeys, derive, sources) {
   const canonical = JSON.stringify({
     source,
     outputs: [...outputKeys].sort(),
-    derive: derive.toString()
+    derive: derive.toString(),
+    // Declared sibling sources (#344) — adding/removing a trigger
+    // collection invalidates cached derived records. Omitted when empty
+    // so strategies without siblings keep their existing hash.
+    ...sources?.length ? { sources: [...sources].sort() } : {}
   });
   const bytes = new TextEncoder().encode(canonical);
   const digest = await crypto.subtle.digest("SHA-256", bytes);
@@ -171,11 +253,26 @@ var DerivationRegistry = class {
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   async register(spec) {
     const outputKeys = Object.keys(spec.outputs);
-    const strategyHash = await computeStrategyHash(spec.source, outputKeys, spec.derive);
+    const strategyHash = await computeStrategyHash(spec.source, outputKeys, spec.derive, spec.sources);
     const reg = { spec, strategyHash };
     const fromSource = this._bySource.get(spec.source);
     if (fromSource) fromSource.push(reg);
     else this._bySource.set(spec.source, [reg]);
+    for (const extra of spec.sources ?? []) {
+      const fromExtra = this._bySource.get(extra);
+      if (fromExtra) fromExtra.push(reg);
+      else this._bySource.set(extra, [reg]);
+    }
+    for (const t of spec.triggerBy ?? []) {
+      const fromTrigger = this._bySource.get(t.collection);
+      if (fromTrigger) fromTrigger.push(reg);
+      else this._bySource.set(t.collection, [reg]);
+    }
+    if (spec.rollup) {
+      const fromRollup = this._bySource.get(spec.rollup.from);
+      if (fromRollup) fromRollup.push(reg);
+      else this._bySource.set(spec.rollup.from, [reg]);
+    }
     for (const key of outputKeys) {
       const output = spec.outputs[key];
       if (!output) continue;
@@ -191,6 +288,23 @@ var DerivationRegistry = class {
   strategiesProducingOutput(collection) {
     return this._byOutput.get(collection) ?? [];
   }
+  /**
+   * All registered strategies as a flat, deduplicated array.
+   * Each strategy is indexed once per source (not once per output key),
+   * so iterating `_bySource.values()` naturally yields each strategy
+   * exactly once per source — deduplication is handled by flattening
+   * the per-source arrays and collecting into a Set by identity.
+   *
+   * Used by `dumpSchema()` / `describeDerivations()` in the introspection
+   * walker to populate the derivations map.
+   */
+  all() {
+    const seen = /* @__PURE__ */ new Set();
+    for (const strategies of this._bySource.values()) {
+      for (const s of strategies) seen.add(s);
+    }
+    return [...seen];
+  }
   /**
    * Cycle detection over the source → output → … graph. Call after all
    * `register()` calls complete (i.e. at vault open). Throws
@@ -212,6 +326,9 @@ var DerivationRegistry = class {
           for (const key of Object.keys(s.spec.outputs)) {
             const output = s.spec.outputs[key];
             if (!output) continue;
+            if (output.shape === "record" && output.collection === s.spec.source && output.denorm !== void 0) {
+              continue;
+            }
             visit(output.collection);
           }
         }
@@ -346,6 +463,7 @@ var DerivationExecutor = {
   DerivationOutputShapeError,
   DerivationOutputUnknownError,
   DerivationRegistry,
-  withDerivation
+  withDerivation,
+  withRollup
 });
 //# sourceMappingURL=index.cjs.map