@noy-db/hub 0.2.0-pre.27 → 0.2.0-pre.29

package/dist/{chunk-SKYBEGHB.js → chunk-BEZ2EV43.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/derivations/with-derivation.ts
 function withDerivation(spec) {
@@ -126,4 +126,4 @@ export {
   withDerivation,
   withRollup
 };
-//# sourceMappingURL=chunk-SKYBEGHB.js.map
+//# sourceMappingURL=chunk-BEZ2EV43.js.map

package/dist/{chunk-EJJTUDNI.js → chunk-BITB3T5Z.js}

@@ -6,7 +6,7 @@ import {
   ConflictError,
   InvariantError,
   ValidationError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/tx/transaction.ts
 var TxContext = class {
@@ -216,7 +216,7 @@ async function runTransaction(db, fn, options, txInvariants) {
     db._clearActiveTxContext(ctx);
   }
   if (ctx._amendment) {
-    const { GuardExecutor } = await import("./executor-3SVNESQ3.js");
+    const { GuardExecutor } = await import("./executor-HO3SIRSF.js");
     try {
       for (const [vaultName, v] of ctx._amendmentVaults) {
         const registry = v._getGuardRegistry();
@@ -352,4 +352,4 @@ export {
   runTransaction,
   revertExecuted
 };
-//# sourceMappingURL=chunk-EJJTUDNI.js.map
+//# sourceMappingURL=chunk-BITB3T5Z.js.map

package/dist/{chunk-6M5JKTUQ.js → chunk-CIZDUAHI.js}

@@ -1,12 +1,12 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-AD6RNBAW.js";
+} from "./chunk-A7DNZVAV.js";
 import {
   decrypt
-} from "./chunk-7JSP3E67.js";
+} from "./chunk-E2MDPPOC.js";
 import {
   ReadOnlyAtInstantError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/history/history.ts
 var HISTORY_COLLECTION = "_history";
@@ -335,4 +335,4 @@ export {
   diff,
   formatDiff
 };
-//# sourceMappingURL=chunk-6M5JKTUQ.js.map
+//# sourceMappingURL=chunk-CIZDUAHI.js.map

package/dist/{chunk-5EITJMUJ.js → chunk-CUPTCF4R.js}

@@ -1,16 +1,16 @@
 import {
   ensureCollectionDEK
-} from "./chunk-LXA2E3VI.js";
+} from "./chunk-ZCMOS4H2.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-AD6RNBAW.js";
+} from "./chunk-A7DNZVAV.js";
 import {
   decrypt,
   encrypt
-} from "./chunk-7JSP3E67.js";
+} from "./chunk-E2MDPPOC.js";
 import {
   PermissionDeniedError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/team/sync-credentials.ts
 var SYNC_CREDENTIALS_COLLECTION = "_sync_credentials";
@@ -76,4 +76,4 @@ export {
   listCredentials,
   credentialStatus
 };
-//# sourceMappingURL=chunk-5EITJMUJ.js.map
+//# sourceMappingURL=chunk-CUPTCF4R.js.map

package/dist/{chunk-FO5WEDKF.js → chunk-DEE4CRYN.js}

@@ -1,6 +1,6 @@
 import {
   readPath
-} from "./chunk-3BANVNDH.js";
+} from "./chunk-KJ3K5VZM.js";
 
 // src/aggregate/reducers.ts
 function count(opts) {
@@ -120,4 +120,4 @@ export {
   min,
   max
 };
-//# sourceMappingURL=chunk-FO5WEDKF.js.map
+//# sourceMappingURL=chunk-DEE4CRYN.js.map

package/dist/{chunk-WVYL6HM7.js → chunk-DJO4OYCJ.js}

@@ -30,7 +30,7 @@ async function resolveStaleMVOnRead(accessor, outputCollection) {
       continue;
     }
     if (executor === null) {
-      ({ MaterializedViewExecutor: executor } = await import("./executor-BIW4FT5R.js"));
+      ({ MaterializedViewExecutor: executor } = await import("./executor-HB2YMIYC.js"));
     }
     await executor.refresh(reg, {
       getCollection: (n) => accessor.getCollection(n),
@@ -50,4 +50,4 @@ export {
   resolveStaleMVOnRead,
   clearMVStale
 };
-//# sourceMappingURL=chunk-WVYL6HM7.js.map
+//# sourceMappingURL=chunk-DJO4OYCJ.js.map

package/dist/{chunk-7JSP3E67.js → chunk-E2MDPPOC.js}

@@ -2,7 +2,7 @@ import {
   DecryptionError,
   InvalidKeyError,
   TamperedError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/crypto.ts
 var PBKDF2_ITERATIONS = 6e5;
@@ -307,4 +307,4 @@ export {
   bufferToBase64,
   base64ToBuffer
 };
-//# sourceMappingURL=chunk-7JSP3E67.js.map
+//# sourceMappingURL=chunk-E2MDPPOC.js.map

package/dist/{chunk-LX4CPLU6.js → chunk-FFKQ65YX.js}

@@ -1,7 +1,7 @@
 import {
   FieldFrozenError,
   InvariantError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/guards/executor.ts
 var GuardExecutor = {
@@ -77,4 +77,4 @@ function deepEqual(a, b) {
 export {
   GuardExecutor
 };
-//# sourceMappingURL=chunk-LX4CPLU6.js.map
+//# sourceMappingURL=chunk-FFKQ65YX.js.map

package/dist/{chunk-VUUQYWF5.js → chunk-G7ALNCQH.js}

@@ -1,7 +1,7 @@
 import {
   BundleVersionConflictError,
   ConflictError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/store/bundle-store.ts
 var BUNDLE_STORE_VERSION = 1;
@@ -798,4 +798,4 @@ export {
   withCache,
   withHealthCheck
 };
-//# sourceMappingURL=chunk-VUUQYWF5.js.map
+//# sourceMappingURL=chunk-G7ALNCQH.js.map

package/dist/{chunk-Z3BJF7SF.js → chunk-GGXN73NM.js}

@@ -1,9 +1,9 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-AD6RNBAW.js";
+} from "./chunk-A7DNZVAV.js";
 import {
   QuiesceTimeoutError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/coordination/types.ts
 function isQuorum(writers, generation, excludeWriterId) {
@@ -211,10 +211,42 @@ function unref(timer) {
   if (typeof t.unref === "function") t.unref();
 }
 
+// src/search/fuse.ts
+function fuseRetrieval(lists, opts = {}) {
+  const k = opts.k ?? 60;
+  const acc = /* @__PURE__ */ new Map();
+  for (const list of lists) {
+    for (const hit of list) {
+      const contribution = 1 / (k + hit.rank);
+      const prev = acc.get(hit.id);
+      if (prev === void 0) {
+        acc.set(hit.id, { score: contribution, hit });
+      } else {
+        prev.score += contribution;
+        prev.hit = mergePresentation(prev.hit, hit);
+      }
+    }
+  }
+  const merged = [...acc.values()].sort(
+    (a, b) => b.score - a.score || (a.hit.id < b.hit.id ? -1 : a.hit.id > b.hit.id ? 1 : 0)
+  );
+  const limited = opts.limit !== void 0 ? merged.slice(0, opts.limit) : merged;
+  return limited.map((m, i) => ({ ...m.hit, score: m.score, rank: i + 1 }));
+}
+function mergePresentation(a, b) {
+  const lexical = a.field !== "(vector)" ? a : b;
+  const other = lexical === a ? b : a;
+  return {
+    ...lexical,
+    ...lexical.record === void 0 && other.record !== void 0 ? { record: other.record } : {}
+  };
+}
+
 export {
   isQuorum,
   runDrainBarrier,
   loadFence,
-  StoreCoordinationProvider
+  StoreCoordinationProvider,
+  fuseRetrieval
 };
-//# sourceMappingURL=chunk-Z3BJF7SF.js.map
+//# sourceMappingURL=chunk-GGXN73NM.js.map

package/dist/chunk-GGXN73NM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/coordination/types.ts","../src/schema-update/fence.ts","../src/schema-update/client-registry.ts","../src/coordination/store-provider.ts","../src/search/fuse.ts"],"sourcesContent":["/**\n * Kernel coordination port — the injected `CoordinationProvider` seam for the\n * schema-fence drain-barrier (#469).\n *\n * The kernel defines this port; `@noy-db/by-tabs` / `@noy-db/by-peer` implement\n * it for real-time quorum, and an external orchestrator (`@klum-db/lobby`)\n * drives it through the `Noydb` handle without ever naming a `by-*` package.\n * The dependency arrow is `by-* → kernel ← klum`, the app at the apex.\n *\n * This module carries only the port TYPES plus two pure-ish helpers:\n * {@link isQuorum} (a pure quorum predicate extracted from the legacy\n * `activeQuiesced`) and {@link runDrainBarrier} (the reusable barrier protocol\n * the migration cutover and klum both call).\n *\n * @module\n */\n\nimport { QuiesceTimeoutError } from '../errors.js'\nimport type { Unsubscribe } from '../write-hooks.js'\n\n/** Vault fence state (the existing FenceDoc shape). */\nexport interface FenceState {\n  readonly currentSchemaVersion: number\n  readonly fenceState: 'normal' | 'draining' | 'migrating' | 'complete'\n}\n\n/** A writer's presence + ack, tagged with the session that owns it. */\nexport interface WriterPresence {\n  /** = today's clientId (one per tab/peer). */\n  readonly writerId: string\n  /** Groups one user's writers across vaults (consolidation is klum's job). */\n  readonly sessionId: string\n  readonly lastSeen: number\n  readonly quiescedAtVersion: number | null\n}\n\n/** Session-addressable drain-barrier coordination transport. Per-vault ops. */\nexport interface CoordinationProvider {\n  /** orchestrator → all writers */\n  setFence(vault: string, fence: FenceState): Promise<void>\n  /**\n   * Fresh one-shot fence read for the write-path gate (`assertWritable`).\n   * A direct read (not a cached `observeFence` snapshot) avoids a staleness\n   * window and keeps the timing-sensitive cutover gate exact. The store\n   * default reads `_meta/schema-fence`; `by-*` return their last-pushed fence.\n   */\n  readFence(vault: string): Promise<FenceState>\n  /** writer observes fence changes (default: poll-emit; by-*: push) */\n  observeFence(vault: string, onChange: (f: FenceState) => void): Unsubscribe\n  /** writer → orchestrator: presence + ack (heartbeat + quiescedAtVersion) */\n  reportPresence(vault: string, p: WriterPresence): Promise<void>\n  /** orchestrator observes presence changes (default: poll-emit; by-*: push) */\n  observePresence(vault: string, onChange: (writers: readonly WriterPresence[]) => void): Unsubscribe\n  /** orchestrator one-shot snapshot of reachable writers (quorum input) */\n  reachableWriters(vault: string, o: { staleMs: number; now: number }): Promise<readonly WriterPresence[]>\n}\n\n/**\n * Pure quorum predicate: true when every writer (other than `excludeWriterId`)\n * has acked at exactly `generation`. An empty set is trivially a quorum.\n *\n * Extracted from the legacy `activeQuiesced` store-polling check so the\n * migration cutover, the store default provider, and `by-*` real-time\n * providers all share one definition of \"everyone has drained\".\n */\nexport function isQuorum(\n  writers: readonly WriterPresence[],\n  generation: number,\n  excludeWriterId?: string,\n): boolean {\n  return writers.filter((w) => w.writerId !== excludeWriterId).every((w) => w.quiescedAtVersion === generation)\n}\n\n/** Inputs for {@link runDrainBarrier}. */\nexport interface DrainBarrierOptions {\n  readonly vault: string\n  readonly generation: number\n  readonly writerId: string\n  readonly onFlush: () => Promise<void>\n  readonly staleMs: number\n  readonly quiesceTimeoutMs: number\n  readonly now: () => number\n  /** Optional seam (mainly for deterministic tests) run before each poll tick. */\n  readonly onPoll?: () => Promise<void>\n}\n\n/**\n * The reusable drain-barrier protocol shared by the migration cutover and klum:\n *\n *   drain self → setFence(draining) → await quorum (presence push + isQuorum,\n *   polling as a fallback, or timeout) → run() → release-by-caller.\n *\n * Resolves once every reachable writer (excluding `writerId`) has quiesced at\n * `generation`, at which point `run` is invoked exactly once. Rejects with\n * {@link QuiesceTimeoutError} if `quiesceTimeoutMs` elapses first.\n */\nexport async function runDrainBarrier(\n  provider: CoordinationProvider,\n  o: DrainBarrierOptions,\n  run: () => Promise<void>,\n): Promise<void> {\n  await provider.setFence(o.vault, { currentSchemaVersion: o.generation, fenceState: 'draining' })\n  await o.onFlush()\n\n  const deadline = o.now() + o.quiesceTimeoutMs\n  const seeded = await provider.reachableWriters(o.vault, { staleMs: o.staleMs, now: o.now() })\n  if (!isQuorum(seeded, o.generation, o.writerId)) {\n    await new Promise<void>((resolve, reject) => {\n      let settled = false\n      const finish = (fn: () => void) => {\n        if (!settled) {\n          settled = true\n          unsub()\n          fn()\n        }\n      }\n      const unsub = provider.observePresence(o.vault, (writers) => {\n        if (isQuorum(writers, o.generation, o.writerId)) finish(resolve)\n      })\n      const tick = async () => {\n        if (settled) return\n        if (o.now() >= deadline) {\n          finish(() =>\n            reject(\n              new QuiesceTimeoutError(\n                `Cutover of vault \"${o.vault}\" to generation ${o.generation} timed out ` +\n                  `after ${o.quiesceTimeoutMs}ms waiting for active writers to quiesce.`,\n              ),\n            ),\n          )\n          return\n        }\n        if (o.onPoll) await o.onPoll()\n        const w = await provider.reachableWriters(o.vault, { staleMs: o.staleMs, now: o.now() })\n        if (isQuorum(w, o.generation, o.writerId)) finish(resolve)\n        else setTimeout(() => void tick(), 25)\n      }\n      void tick()\n    })\n  }\n  await run()\n}\n","/**\n * Schema-fence document. Vault-level generation counter + drain\n * state, stored at `_meta/schema-fence` using the plaintext-envelope\n * pattern of `_meta/policy` (no PII — a counter + a state enum).\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../types.js'\nimport { NOYDB_FORMAT_VERSION } from '../types.js'\n\nexport type FenceState = 'normal' | 'draining' | 'migrating' | 'complete'\n\nexport interface FenceDoc {\n  readonly currentSchemaVersion: number\n  readonly fenceState: FenceState\n}\n\nexport const FENCE_RECORD_ID = 'schema-fence'\nconst META_COLLECTION = '_meta'\n\nexport const DEFAULT_FENCE: FenceDoc = { currentSchemaVersion: 0, fenceState: 'normal' }\n\nexport async function loadFence(store: NoydbStore, vault: string): Promise<FenceDoc> {\n  const envelope = await store.get(vault, META_COLLECTION, FENCE_RECORD_ID)\n  if (!envelope) return DEFAULT_FENCE\n  try {\n    const parsed = JSON.parse(envelope._data) as unknown\n    if (!isFenceDoc(parsed)) return DEFAULT_FENCE\n    return parsed\n  } catch {\n    return DEFAULT_FENCE\n  }\n}\n\nexport async function saveFence(store: NoydbStore, vault: string, fence: FenceDoc): Promise<void> {\n  const envelope: EncryptedEnvelope = {\n    _noydb: NOYDB_FORMAT_VERSION,\n    _v: 1,\n    _ts: new Date().toISOString(),\n    _iv: '',\n    _data: JSON.stringify(fence),\n  }\n  await store.put(vault, META_COLLECTION, FENCE_RECORD_ID, envelope)\n}\n\nfunction isFenceDoc(x: unknown): x is FenceDoc {\n  if (x === null || typeof x !== 'object') return false\n  const o = x as Record<string, unknown>\n  return typeof o['currentSchemaVersion'] === 'number'\n    && (o['fenceState'] === 'normal' || o['fenceState'] === 'draining'\n      || o['fenceState'] === 'migrating' || o['fenceState'] === 'complete')\n}\n","/**\n * Schema-cutover client registry. Each client keeps a\n * heartbeat doc at `_meta/schema-fence:client:<clientId>` carrying its\n * liveness (`lastSeen`) and the fence generation it has quiesced for\n * (`quiescedAtVersion`). Plaintext envelope, like the fence doc.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../types.js'\nimport { NOYDB_FORMAT_VERSION } from '../types.js'\n\nconst META_COLLECTION = '_meta'\nconst CLIENT_PREFIX = 'schema-fence:client:'\n\nexport interface ClientDoc {\n  readonly clientId: string\n  readonly lastSeen: number\n  readonly quiescedAtVersion: number | null\n  /**\n   * Session that owns this writer (one user's writers across vaults). Additive\n   * and optional so pre-#469 client docs keep parsing; readers default it.\n   */\n  readonly sessionId?: string\n}\n\nexport async function writeClientDoc(\n  store: NoydbStore,\n  vault: string,\n  clientId: string,\n  doc: { lastSeen: number; quiescedAtVersion: number | null; sessionId?: string },\n): Promise<void> {\n  const envelope: EncryptedEnvelope = {\n    _noydb: NOYDB_FORMAT_VERSION,\n    _v: 1,\n    _ts: new Date().toISOString(),\n    _iv: '',\n    _data: JSON.stringify({ clientId, ...doc }),\n  }\n  await store.put(vault, META_COLLECTION, `${CLIENT_PREFIX}${clientId}`, envelope)\n}\n\nexport async function listClientDocs(store: NoydbStore, vault: string): Promise<ClientDoc[]> {\n  const ids = await store.list(vault, META_COLLECTION)\n  const out: ClientDoc[] = []\n  for (const id of ids) {\n    if (!id.startsWith(CLIENT_PREFIX)) continue\n    const env = await store.get(vault, META_COLLECTION, id)\n    if (!env) continue\n    try {\n      const parsed = JSON.parse(env._data) as unknown\n      if (isClientDoc(parsed)) out.push(parsed)\n    } catch { /* skip corrupt */ }\n  }\n  return out\n}\n\n/**\n * True when every *active* client (lastSeen within staleMs of now) has\n * `quiescedAtVersion === generation`. Stale clients are ignored. An empty\n * active set is vacuously quiesced.\n */\nexport async function activeQuiesced(\n  store: NoydbStore,\n  vault: string,\n  opts: { generation: number; now: number; staleMs: number; excludeClientId?: string },\n): Promise<boolean> {\n  const docs = await listClientDocs(store, vault)\n  const active = docs.filter(\n    d => d.lastSeen >= opts.now - opts.staleMs && d.clientId !== opts.excludeClientId,\n  )\n  return active.every(d => d.quiescedAtVersion === opts.generation)\n}\n\nfunction isClientDoc(x: unknown): x is ClientDoc {\n  if (x === null || typeof x !== 'object') return false\n  const o = x as Record<string, unknown>\n  return typeof o['clientId'] === 'string'\n    && typeof o['lastSeen'] === 'number'\n    && (o['quiescedAtVersion'] === null || typeof o['quiescedAtVersion'] === 'number')\n    && (o['sessionId'] === undefined || typeof o['sessionId'] === 'string')\n}\n","/**\n * Store-backed default {@link CoordinationProvider}.\n *\n * Maps the five coordination-port methods onto today's `_meta/schema-fence`\n * store ops so that, with no `by-*` provider injected, the fence subsystem\n * reproduces its current store-polling behavior byte-for-byte. The `observe*`\n * methods are poll-emit (the legacy {@link FenceWatcher} model); `by-tabs` /\n * `by-peer` override them with real-time push.\n *\n * @module\n */\n\nimport type { NoydbStore } from '../types.js'\nimport type { Unsubscribe } from '../write-hooks.js'\nimport { loadFence, saveFence, type FenceDoc } from '../schema-update/fence.js'\nimport { writeClientDoc, listClientDocs, type ClientDoc } from '../schema-update/client-registry.js'\nimport type { CoordinationProvider, FenceState, WriterPresence } from './types.js'\n\n/**\n * Default poll cadence for the `observe*` fallbacks (ms). Matches the\n * store-poll granularity the fence-controller uses while waiting for quorum\n * (`delay(50)`); the same value the migration cutover falls back to when no\n * real-time provider is injected.\n */\nconst DEFAULT_POLL_INTERVAL_MS = 50\n\n/** Map a stored {@link ClientDoc} to the port's {@link WriterPresence}. */\nfunction toPresence(doc: ClientDoc): WriterPresence {\n  return {\n    writerId: doc.clientId,\n    // Pre-#469 docs (and explicit empty) have no session — fall back to the\n    // writerId so every presence is session-addressable.\n    sessionId: doc.sessionId && doc.sessionId.length > 0 ? doc.sessionId : doc.clientId,\n    lastSeen: doc.lastSeen,\n    quiescedAtVersion: doc.quiescedAtVersion,\n  }\n}\n\nfunction fenceEqual(a: FenceState, b: FenceState): boolean {\n  return a.currentSchemaVersion === b.currentSchemaVersion && a.fenceState === b.fenceState\n}\n\nfunction presenceListEqual(a: readonly WriterPresence[], b: readonly WriterPresence[]): boolean {\n  if (a.length !== b.length) return false\n  const key = (w: WriterPresence) => `${w.writerId}\u0000${w.sessionId}\u0000${w.lastSeen}\u0000${String(w.quiescedAtVersion)}`\n  const bk = new Set(b.map(key))\n  return a.every((w) => bk.has(key(w)))\n}\n\nexport class StoreCoordinationProvider implements CoordinationProvider {\n  readonly #store: NoydbStore\n  readonly #pollIntervalMs: number\n\n  constructor(store: NoydbStore, opts?: { pollIntervalMs?: number }) {\n    this.#store = store\n    this.#pollIntervalMs = opts?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS\n  }\n\n  async setFence(vault: string, fence: FenceState): Promise<void> {\n    // FenceState is structurally FenceDoc (currentSchemaVersion + fenceState).\n    await saveFence(this.#store, vault, fence as FenceDoc)\n  }\n\n  async readFence(vault: string): Promise<FenceState> {\n    // FenceDoc is structurally FenceState (currentSchemaVersion + fenceState).\n    return loadFence(this.#store, vault)\n  }\n\n  observeFence(vault: string, onChange: (f: FenceState) => void): Unsubscribe {\n    let last: FenceState | null = null\n    let busy = false\n    const poll = async () => {\n      if (busy) return\n      busy = true\n      try {\n        const fence = await loadFence(this.#store, vault)\n        if (last === null || !fenceEqual(last, fence)) {\n          last = fence\n          onChange(fence)\n        }\n      } catch {\n        /* transient store error — retry next tick */\n      } finally {\n        busy = false\n      }\n    }\n    void poll() // emit current state once immediately\n    const timer = setInterval(() => void poll(), this.#pollIntervalMs)\n    unref(timer)\n    return () => clearInterval(timer)\n  }\n\n  async reportPresence(vault: string, p: WriterPresence): Promise<void> {\n    await writeClientDoc(this.#store, vault, p.writerId, {\n      lastSeen: p.lastSeen,\n      quiescedAtVersion: p.quiescedAtVersion,\n      sessionId: p.sessionId,\n    })\n  }\n\n  observePresence(vault: string, onChange: (writers: readonly WriterPresence[]) => void): Unsubscribe {\n    let last: readonly WriterPresence[] | null = null\n    let busy = false\n    const poll = async () => {\n      if (busy) return\n      busy = true\n      try {\n        const docs = await listClientDocs(this.#store, vault)\n        const writers = docs.map(toPresence)\n        if (last === null || !presenceListEqual(last, writers)) {\n          last = writers\n          onChange(writers)\n        }\n      } catch {\n        /* transient store error — retry next tick */\n      } finally {\n        busy = false\n      }\n    }\n    void poll() // emit current set once immediately\n    const timer = setInterval(() => void poll(), this.#pollIntervalMs)\n    unref(timer)\n    return () => clearInterval(timer)\n  }\n\n  async reachableWriters(vault: string, o: { staleMs: number; now: number }): Promise<readonly WriterPresence[]> {\n    const docs = await listClientDocs(this.#store, vault)\n    return docs.map(toPresence).filter((w) => o.now - w.lastSeen <= o.staleMs)\n  }\n}\n\n/** Best-effort `unref` so a poll timer never holds the process open (Node only). */\nfunction unref(timer: ReturnType<typeof setInterval>): void {\n  const t = timer as unknown as { unref?: () => void }\n  if (typeof t.unref === 'function') t.unref()\n}\n","/**\n * #308 L3 — Reciprocal Rank Fusion. Merges N ranked `RetrieveHit` lists into\n * one, scoring each id by Σ 1/(k + rank) across the lists it appears in. Pure,\n * deterministic, no I/O — which is why it serves BOTH hybrid lexical⊕semantic\n * fusion AND klum-db's cross-vault federation (the lists are per-vault). The\n * fused `score` is the RRF score, NOT BM25 or cosine.\n */\nimport type { RetrieveHit } from './retrieve-types.js'\n\nexport interface FuseOptions {\n  /** Only 'rrf' in v1 (default). */\n  readonly strategy?: 'rrf'\n  /** RRF constant; larger flattens the rank weighting. Default 60. */\n  readonly k?: number\n  /** Truncate the fused output to this many hits. */\n  readonly limit?: number\n}\n\n/**\n * Callers must supply hits with `rank >= 1` (the retrieve contract guarantees\n * it; a federation caller passing `rank: 0` with `k: 0` would divide by zero).\n * Doc-only note — no runtime guard; rank ≥ 1 is the retrieve contract.\n */\nexport function fuseRetrieval<T>(\n  lists: ReadonlyArray<ReadonlyArray<RetrieveHit<T>>>,\n  opts: FuseOptions = {},\n): RetrieveHit<T>[] {\n  const k = opts.k ?? 60\n  const acc = new Map<string, { score: number; hit: RetrieveHit<T> }>()\n  for (const list of lists) {\n    for (const hit of list) {\n      const contribution = 1 / (k + hit.rank)\n      const prev = acc.get(hit.id)\n      if (prev === undefined) {\n        acc.set(hit.id, { score: contribution, hit })\n      } else {\n        prev.score += contribution\n        prev.hit = mergePresentation(prev.hit, hit)\n      }\n    }\n  }\n  const merged = [...acc.values()].sort(\n    (a, b) => b.score - a.score || (a.hit.id < b.hit.id ? -1 : a.hit.id > b.hit.id ? 1 : 0),\n  )\n  const limited = opts.limit !== undefined ? merged.slice(0, opts.limit) : merged\n  return limited.map((m, i) => ({ ...m.hit, score: m.score, rank: i + 1 }))\n}\n\n/**\n * When an id appears in multiple lists, prefer the more informative\n * presentation: a real `field`/`snippet`/`locale` (lexical) over the vector\n * placeholder (`'(vector)'` / `''`). Recover `record` from whichever hit has it.\n */\nfunction mergePresentation<T>(a: RetrieveHit<T>, b: RetrieveHit<T>): RetrieveHit<T> {\n  const lexical = a.field !== '(vector)' ? a : b\n  const other = lexical === a ? b : a\n  return {\n    ...lexical,\n    ...(lexical.record === undefined && other.record !== undefined ? { record: other.record } : {}),\n  }\n}\n"],"mappings":";;;;;;;;AAiEO,SAAS,SACd,SACA,YACA,iBACS;AACT,SAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,aAAa,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,UAAU;AAC9G;AAyBA,eAAsB,gBACpB,UACA,GACA,KACe;AACf,QAAM,SAAS,SAAS,EAAE,OAAO,EAAE,sBAAsB,EAAE,YAAY,YAAY,WAAW,CAAC;AAC/F,QAAM,EAAE,QAAQ;AAEhB,QAAM,WAAW,EAAE,IAAI,IAAI,EAAE;AAC7B,QAAM,SAAS,MAAM,SAAS,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,KAAK,EAAE,IAAI,EAAE,CAAC;AAC5F,MAAI,CAAC,SAAS,QAAQ,EAAE,YAAY,EAAE,QAAQ,GAAG;AAC/C,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,UAAI,UAAU;AACd,YAAM,SAAS,CAAC,OAAmB;AACjC,YAAI,CAAC,SAAS;AACZ,oBAAU;AACV,gBAAM;AACN,aAAG;AAAA,QACL;AAAA,MACF;AACA,YAAM,QAAQ,SAAS,gBAAgB,EAAE,OAAO,CAAC,YAAY;AAC3D,YAAI,SAAS,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAG,QAAO,OAAO;AAAA,MACjE,CAAC;AACD,YAAM,OAAO,YAAY;AACvB,YAAI,QAAS;AACb,YAAI,EAAE,IAAI,KAAK,UAAU;AACvB;AAAA,YAAO,MACL;AAAA,cACE,IAAI;AAAA,gBACF,qBAAqB,EAAE,KAAK,mBAAmB,EAAE,UAAU,oBAChD,EAAE,gBAAgB;AAAA,cAC/B;AAAA,YACF;AAAA,UACF;AACA;AAAA,QACF;AACA,YAAI,EAAE,OAAQ,OAAM,EAAE,OAAO;AAC7B,cAAM,IAAI,MAAM,SAAS,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,KAAK,EAAE,IAAI,EAAE,CAAC;AACvF,YAAI,SAAS,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAG,QAAO,OAAO;AAAA,YACpD,YAAW,MAAM,KAAK,KAAK,GAAG,EAAE;AAAA,MACvC;AACA,WAAK,KAAK;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,IAAI;AACZ;;;AC9HO,IAAM,kBAAkB;AAC/B,IAAM,kBAAkB;AAEjB,IAAM,gBAA0B,EAAE,sBAAsB,GAAG,YAAY,SAAS;AAEvF,eAAsB,UAAU,OAAmB,OAAkC;AACnF,QAAM,WAAW,MAAM,MAAM,IAAI,OAAO,iBAAiB,eAAe;AACxE,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,QAAI,CAAC,WAAW,MAAM,EAAG,QAAO;AAChC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,UAAU,OAAmB,OAAe,OAAgC;AAChG,QAAM,WAA8B;AAAA,IAClC,QAAQ;AAAA,IACR,IAAI;AAAA,IACJ,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC5B,KAAK;AAAA,IACL,OAAO,KAAK,UAAU,KAAK;AAAA,EAC7B;AACA,QAAM,MAAM,IAAI,OAAO,iBAAiB,iBAAiB,QAAQ;AACnE;AAEA,SAAS,WAAW,GAA2B;AAC7C,MAAI,MAAM,QAAQ,OAAO,MAAM,SAAU,QAAO;AAChD,QAAM,IAAI;AACV,SAAO,OAAO,EAAE,sBAAsB,MAAM,aACtC,EAAE,YAAY,MAAM,YAAY,EAAE,YAAY,MAAM,cACnD,EAAE,YAAY,MAAM,eAAe,EAAE,YAAY,MAAM;AAChE;;;ACxCA,IAAMA,mBAAkB;AACxB,IAAM,gBAAgB;AAatB,eAAsB,eACpB,OACA,OACA,UACA,KACe;AACf,QAAM,WAA8B;AAAA,IAClC,QAAQ;AAAA,IACR,IAAI;AAAA,IACJ,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC5B,KAAK;AAAA,IACL,OAAO,KAAK,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;AAAA,EAC5C;AACA,QAAM,MAAM,IAAI,OAAOA,kBAAiB,GAAG,aAAa,GAAG,QAAQ,IAAI,QAAQ;AACjF;AAEA,eAAsB,eAAe,OAAmB,OAAqC;AAC3F,QAAM,MAAM,MAAM,MAAM,KAAK,OAAOA,gBAAe;AACnD,QAAM,MAAmB,CAAC;AAC1B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,WAAW,aAAa,EAAG;AACnC,UAAM,MAAM,MAAM,MAAM,IAAI,OAAOA,kBAAiB,EAAE;AACtD,QAAI,CAAC,IAAK;AACV,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI,KAAK;AACnC,UAAI,YAAY,MAAM,EAAG,KAAI,KAAK,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAAqB;AAAA,EAC/B;AACA,SAAO;AACT;AAmBA,SAAS,YAAY,GAA4B;AAC/C,MAAI,MAAM,QAAQ,OAAO,MAAM,SAAU,QAAO;AAChD,QAAM,IAAI;AACV,SAAO,OAAO,EAAE,UAAU,MAAM,YAC3B,OAAO,EAAE,UAAU,MAAM,aACxB,EAAE,mBAAmB,MAAM,QAAQ,OAAO,EAAE,mBAAmB,MAAM,cACrE,EAAE,WAAW,MAAM,UAAa,OAAO,EAAE,WAAW,MAAM;AAClE;;;ACtDA,IAAM,2BAA2B;AAGjC,SAAS,WAAW,KAAgC;AAClD,SAAO;AAAA,IACL,UAAU,IAAI;AAAA;AAAA;AAAA,IAGd,WAAW,IAAI,aAAa,IAAI,UAAU,SAAS,IAAI,IAAI,YAAY,IAAI;AAAA,IAC3E,UAAU,IAAI;AAAA,IACd,mBAAmB,IAAI;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,GAAe,GAAwB;AACzD,SAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,eAAe,EAAE;AACjF;AAEA,SAAS,kBAAkB,GAA8B,GAAuC;AAC9F,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,QAAM,MAAM,CAAC,MAAsB,GAAG,EAAE,QAAQ,KAAI,EAAE,SAAS,KAAI,EAAE,QAAQ,KAAI,OAAO,EAAE,iBAAiB,CAAC;AAC5G,QAAM,KAAK,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC;AAC7B,SAAO,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;AACtC;AAEO,IAAM,4BAAN,MAAgE;AAAA,EAC5D;AAAA,EACA;AAAA,EAET,YAAY,OAAmB,MAAoC;AACjE,SAAK,SAAS;AACd,SAAK,kBAAkB,MAAM,kBAAkB;AAAA,EACjD;AAAA,EAEA,MAAM,SAAS,OAAe,OAAkC;AAE9D,UAAM,UAAU,KAAK,QAAQ,OAAO,KAAiB;AAAA,EACvD;AAAA,EAEA,MAAM,UAAU,OAAoC;AAElD,WAAO,UAAU,KAAK,QAAQ,KAAK;AAAA,EACrC;AAAA,EAEA,aAAa,OAAe,UAAgD;AAC1E,QAAI,OAA0B;AAC9B,QAAI,OAAO;AACX,UAAM,OAAO,YAAY;AACvB,UAAI,KAAM;AACV,aAAO;AACP,UAAI;AACF,cAAM,QAAQ,MAAM,UAAU,KAAK,QAAQ,KAAK;AAChD,YAAI,SAAS,QAAQ,CAAC,WAAW,MAAM,KAAK,GAAG;AAC7C,iBAAO;AACP,mBAAS,KAAK;AAAA,QAChB;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,SAAK,KAAK;AACV,UAAM,QAAQ,YAAY,MAAM,KAAK,KAAK,GAAG,KAAK,eAAe;AACjE,UAAM,KAAK;AACX,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC;AAAA,EAEA,MAAM,eAAe,OAAe,GAAkC;AACpE,UAAM,eAAe,KAAK,QAAQ,OAAO,EAAE,UAAU;AAAA,MACnD,UAAU,EAAE;AAAA,MACZ,mBAAmB,EAAE;AAAA,MACrB,WAAW,EAAE;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,gBAAgB,OAAe,UAAqE;AAClG,QAAI,OAAyC;AAC7C,QAAI,OAAO;AACX,UAAM,OAAO,YAAY;AACvB,UAAI,KAAM;AACV,aAAO;AACP,UAAI;AACF,cAAM,OAAO,MAAM,eAAe,KAAK,QAAQ,KAAK;AACpD,cAAM,UAAU,KAAK,IAAI,UAAU;AACnC,YAAI,SAAS,QAAQ,CAAC,kBAAkB,MAAM,OAAO,GAAG;AACtD,iBAAO;AACP,mBAAS,OAAO;AAAA,QAClB;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,SAAK,KAAK;AACV,UAAM,QAAQ,YAAY,MAAM,KAAK,KAAK,GAAG,KAAK,eAAe;AACjE,UAAM,KAAK;AACX,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC;AAAA,EAEA,MAAM,iBAAiB,OAAe,GAAyE;AAC7G,UAAM,OAAO,MAAM,eAAe,KAAK,QAAQ,KAAK;AACpD,WAAO,KAAK,IAAI,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO;AAAA,EAC3E;AACF;AAGA,SAAS,MAAM,OAA6C;AAC1D,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,UAAU,WAAY,GAAE,MAAM;AAC7C;;;AChHO,SAAS,cACd,OACA,OAAoB,CAAC,GACH;AAClB,QAAM,IAAI,KAAK,KAAK;AACpB,QAAM,MAAM,oBAAI,IAAoD;AACpE,aAAW,QAAQ,OAAO;AACxB,eAAW,OAAO,MAAM;AACtB,YAAM,eAAe,KAAK,IAAI,IAAI;AAClC,YAAM,OAAO,IAAI,IAAI,IAAI,EAAE;AAC3B,UAAI,SAAS,QAAW;AACtB,YAAI,IAAI,IAAI,IAAI,EAAE,OAAO,cAAc,IAAI,CAAC;AAAA,MAC9C,OAAO;AACL,aAAK,SAAS;AACd,aAAK,MAAM,kBAAkB,KAAK,KAAK,GAAG;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE;AAAA,IAC/B,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,EAAE,IAAI,KAAK,IAAI;AAAA,EACvF;AACA,QAAM,UAAU,KAAK,UAAU,SAAY,OAAO,MAAM,GAAG,KAAK,KAAK,IAAI;AACzE,SAAO,QAAQ,IAAI,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,OAAO,EAAE,OAAO,MAAM,IAAI,EAAE,EAAE;AAC1E;AAOA,SAAS,kBAAqB,GAAmB,GAAmC;AAClF,QAAM,UAAU,EAAE,UAAU,aAAa,IAAI;AAC7C,QAAM,QAAQ,YAAY,IAAI,IAAI;AAClC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAI,QAAQ,WAAW,UAAa,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,EAC/F;AACF;","names":["META_COLLECTION"]}

package/dist/{chunk-HAKEZTA7.js → chunk-JOJPBZSZ.js}

@@ -2,18 +2,18 @@ import {
   ATTESTATIONS_COLLECTION,
   REVOKED_RECORD_ID,
   loadOrCreateSigner
-} from "./chunk-I2RX62RX.js";
+} from "./chunk-5PTX7PKD.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-AD6RNBAW.js";
+} from "./chunk-A7DNZVAV.js";
 import {
   decrypt,
   encrypt
-} from "./chunk-7JSP3E67.js";
+} from "./chunk-E2MDPPOC.js";
 import {
   AttestationError,
   ConflictError
-} from "./chunk-DDOYOMAD.js";
+} from "./chunk-JZ5DS4DP.js";
 
 // src/attestation/revoke.ts
 import { signRevocationList } from "@noy-db/attestation";
@@ -80,4 +80,4 @@ export {
   getRevokedDocIdsCore,
   publishRevocationListCore
 };
-//# sourceMappingURL=chunk-HAKEZTA7.js.map
+//# sourceMappingURL=chunk-JOJPBZSZ.js.map

package/dist/{chunk-DDOYOMAD.js → chunk-JZ5DS4DP.js}

@@ -1092,6 +1092,34 @@ var RecordCekNotFoundError = class extends NoydbError {
     this.id = id;
   }
 };
+var EmbeddingDimMismatchError = class extends NoydbError {
+  field;
+  expected;
+  actual;
+  constructor(field, expected, actual) {
+    super(
+      "EMBEDDING_DIM_MISMATCH",
+      `Embedding for "${field}" has dim ${actual}, expected ${expected}.`
+    );
+    this.name = "EmbeddingDimMismatchError";
+    this.field = field;
+    this.expected = expected;
+    this.actual = actual;
+  }
+};
+var EmbeddingModelMismatchError = class extends NoydbError {
+  expected;
+  found;
+  constructor(expected, found) {
+    super(
+      "EMBEDDING_MODEL_MISMATCH",
+      `Embedding model mismatch: collection uses "${expected}" but a stored vector is "${found}". Run vault.embeddings.reindex() after changing the encoder.`
+    );
+    this.name = "EmbeddingModelMismatchError";
+    this.expected = expected;
+    this.found = found;
+  }
+};
 
 export {
   NoydbError,
@@ -1193,6 +1221,8 @@ export {
   ForgetStrategyNotConfiguredError,
   SealedRecordExpiredError,
   SealedRecordMismatchError,
-  RecordCekNotFoundError
+  RecordCekNotFoundError,
+  EmbeddingDimMismatchError,
+  EmbeddingModelMismatchError
 };
-//# sourceMappingURL=chunk-DDOYOMAD.js.map
+//# sourceMappingURL=chunk-JZ5DS4DP.js.map