@noy-db/hub 0.2.0-pre.3 → 0.2.0-pre.31

package/dist/executor-KYSKFJ2R.js

@@ -0,0 +1,9 @@
+import {
+  DerivationExecutor
+} from "./chunk-4L6N56B4.js";
+import "./chunk-JZ5DS4DP.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-KYSKFJ2R.js.map

package/dist/executor-M7W3NEKR.js

@@ -0,0 +1,9 @@
+import {
+  GuardExecutor
+} from "./chunk-FFKQ65YX.js";
+import "./chunk-JZ5DS4DP.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-M7W3NEKR.js.map

package/dist/executor-VDTDGWO6.js

@@ -0,0 +1,13 @@
+import {
+  MaterializedViewExecutor
+} from "./chunk-SHJ3BRTZ.js";
+import "./chunk-RCB6GWTC.js";
+import "./chunk-K6NVSHAH.js";
+import "./chunk-KJ3K5VZM.js";
+import "./chunk-QXWJQ7UU.js";
+import "./chunk-JZ5DS4DP.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MaterializedViewExecutor
+};
+//# sourceMappingURL=executor-VDTDGWO6.js.map

package/dist/{fanout-sidecar-NRBWSLRK.js → fanout-sidecar-AZALISHB.js}

@@ -1,6 +1,7 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-FXQYZNOW.js";
+} from "./chunk-A7DNZVAV.js";
+import "./chunk-PZ5AY32C.js";
 
 // src/derivations/fanout-sidecar.ts
 function recordId(source, sourceId, outputKey) {
@@ -48,4 +49,4 @@ export {
   loadFanoutSidecar,
   saveFanoutSidecar
 };
-//# sourceMappingURL=fanout-sidecar-NRBWSLRK.js.map
+//# sourceMappingURL=fanout-sidecar-AZALISHB.js.map

package/dist/fanout-sidecar-AZALISHB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/derivations/fanout-sidecar.ts"],"sourcesContent":["/**\n * Per-source-row fanout sidecar for `shape: 'array'` derivations.\n *\n * Each `(sourceCollection, sourceId, outputKey)` triple gets its own\n * envelope at:\n *\n *     _meta/derivations-fanout/<sourceCollection>/<sourceId>/<outputKey>\n *\n * The envelope records the last-emitted derived row ids so the\n * dispatcher can compute the diff on every source-row update in O(1):\n * read prior keys, compute `toDelete = prev \\ new`, write new, persist\n * back.\n *\n * Stored as plain JSON with AES-GCM bypassed (same pattern as\n * `_meta/policy`, `_meta/recovery-paper`, `_meta/sealed-passphrase`,\n * etc.): the sidecar is system metadata, not user data, and the\n * derived outputs themselves carry their own encryption envelopes.\n *\n * @module\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../types.js'\nimport { NOYDB_FORMAT_VERSION } from '../types.js'\n\n/** Magic-prefixed JSON payload at `_meta/<recordId>`. */\nexport interface FanoutSidecar {\n  readonly _noydb_fanout: 1\n  /** Source collection name. */\n  readonly source: string\n  /** Source record id. */\n  readonly sourceId: string\n  /** Strategy output key (the key in `strategy.outputs`). */\n  readonly outputKey: string\n  /** Output collection name (audit / forensics). */\n  readonly outputCollection: string\n  /** Derived-row ids last emitted for this (source, output) pair. */\n  readonly keys: ReadonlyArray<string>\n  /** ISO timestamp of last dispatch. */\n  readonly emittedAt: string\n}\n\n/**\n * Build the canonical `_meta` record id for a fanout sidecar.\n *\n * The full path inside the store is `_meta/<this-string>`. We pack the\n * full triple into the id so a single `_meta` collection holds all\n * sidecars (collection-per-source would proliferate names; the\n * existing `_meta` flat namespace is cheaper).\n */\nfunction recordId(source: string, sourceId: string, outputKey: string): string {\n  // Use `/` as a separator. None of the components is supposed to\n  // contain it (collection names + output keys are bare identifiers;\n  // source ids are typically ULIDs / UUIDs / app-chosen strings\n  // without slashes). If a future source carries `/` in its id, we'd\n  // need an escape; deferred until that's a real case.\n  return `derivations-fanout/${source}/${sourceId}/${outputKey}`\n}\n\n/** Read the sidecar; returns empty if absent. */\nexport async function loadFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  source: string,\n  sourceId: string,\n  outputKey: string,\n): Promise<FanoutSidecar | undefined> {\n  const envelope = await store.get(vault, '_meta', recordId(source, sourceId, outputKey))\n  if (!envelope) return undefined\n  try {\n    const parsed = JSON.parse(envelope._data) as FanoutSidecar\n    if (parsed._noydb_fanout !== 1) return undefined\n    if (!Array.isArray(parsed.keys)) return undefined\n    return parsed\n  } catch {\n    return undefined\n  }\n}\n\n/** Persist (insert/replace) the sidecar with a fresh key set. */\nexport async function saveFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  payload: {\n    readonly source: string\n    readonly sourceId: string\n    readonly outputKey: string\n    readonly outputCollection: string\n    readonly keys: ReadonlyArray<string>\n  },\n): Promise<void> {\n  const doc: FanoutSidecar = {\n    _noydb_fanout: 1,\n    source: payload.source,\n    sourceId: payload.sourceId,\n    outputKey: payload.outputKey,\n    outputCollection: payload.outputCollection,\n    keys: payload.keys,\n    emittedAt: new Date().toISOString(),\n  }\n  const id = recordId(payload.source, payload.sourceId, payload.outputKey)\n  const prior = await store.get(vault, '_meta', id)\n  const envelope: EncryptedEnvelope = {\n    _noydb: NOYDB_FORMAT_VERSION,\n    _v: (prior?._v ?? 0) + 1,\n    _ts: new Date().toISOString(),\n    // AES-GCM bypassed — sidecar is system metadata, no user data inside.\n    _iv: '',\n    _data: JSON.stringify(doc),\n  }\n  await store.put(vault, '_meta', id, envelope)\n}\n\n/** Delete the sidecar (used on source-row delete cascade). */\nexport async function deleteFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  source: string,\n  sourceId: string,\n  outputKey: string,\n): Promise<void> {\n  await store.delete(vault, '_meta', recordId(source, sourceId, outputKey))\n}\n"],"mappings":";;;;;;AAgDA,SAAS,SAAS,QAAgB,UAAkB,WAA2B;AAM7E,SAAO,sBAAsB,MAAM,IAAI,QAAQ,IAAI,SAAS;AAC9D;AAGA,eAAsB,kBACpB,OACA,OACA,QACA,UACA,WACoC;AACpC,QAAM,WAAW,MAAM,MAAM,IAAI,OAAO,SAAS,SAAS,QAAQ,UAAU,SAAS,CAAC;AACtF,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,QAAI,OAAO,kBAAkB,EAAG,QAAO;AACvC,QAAI,CAAC,MAAM,QAAQ,OAAO,IAAI,EAAG,QAAO;AACxC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAsB,kBACpB,OACA,OACA,SAOe;AACf,QAAM,MAAqB;AAAA,IACzB,eAAe;AAAA,IACf,QAAQ,QAAQ;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,kBAAkB,QAAQ;AAAA,IAC1B,MAAM,QAAQ;AAAA,IACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACA,QAAM,KAAK,SAAS,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;AACvE,QAAM,QAAQ,MAAM,MAAM,IAAI,OAAO,SAAS,EAAE;AAChD,QAAM,WAA8B;AAAA,IAClC,QAAQ;AAAA,IACR,KAAK,OAAO,MAAM,KAAK;AAAA,IACvB,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA;AAAA,IAE5B,KAAK;AAAA,IACL,OAAO,KAAK,UAAU,GAAG;AAAA,EAC3B;AACA,QAAM,MAAM,IAAI,OAAO,SAAS,IAAI,QAAQ;AAC9C;AAGA,eAAsB,oBACpB,OACA,OACA,QACA,UACA,WACe;AACf,QAAM,MAAM,OAAO,OAAO,SAAS,SAAS,QAAQ,UAAU,SAAS,CAAC;AAC1E;","names":[]}

package/dist/forget/index.d.ts

@@ -0,0 +1 @@
+export { b as ForgetResult, F as ForgetStrategy, N as NO_FORGET, d as SUBJECT_INDEX_COLLECTION, e as SubjectDeclaration, S as SubjectRef, w as withForgetCascade } from '../index-BMmajblo.js';

package/dist/forget/index.js

@@ -0,0 +1,15 @@
+import {
+  NO_FORGET,
+  SUBJECT_INDEX_COLLECTION,
+  withForgetCascade
+} from "../chunk-SQXTKZL7.js";
+import "../chunk-A7DNZVAV.js";
+import "../chunk-E2MDPPOC.js";
+import "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
+export {
+  NO_FORGET,
+  SUBJECT_INDEX_COLLECTION,
+  withForgetCascade
+};
+//# sourceMappingURL=index.js.map

package/dist/guards/index.d.ts

@@ -1,11 +1,13 @@
-export { w as withGuard } from '../with-guard-DR7U-l4v.js';
-import { ah as GuardStrategy, ai as GuardChange, aj as GuardContext } from '../types-D9eB0Rvh.js';
-export { ak as GuardRegistry, al as GuardStrategyHandle, am as ReadOnlyVaultFacade } from '../types-D9eB0Rvh.js';
-export { A as AmendmentForbiddenError, F as FieldFrozenError, I as InvariantError, d as RecordLockedError } from '../index-BF1B2HB9.js';
-import '../lazy-builder-Rpd-V3jP.js';
-import '../predicate-Dnu81tsS.js';
-import '../strategy-DSTrsZ8t.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from '../transition-guard-Dy3NioQr.js';
+import { an as GuardStrategy, ao as GuardChange, ap as GuardContext } from '../index-DHn9lEP0.js';
+export { aq as GuardRegistry, ar as GuardStrategyHandle, as as ReadOnlyVaultFacade } from '../index-DHn9lEP0.js';
+export { A as AmendmentForbiddenError, F as FieldFrozenError, I as IllegalTransitionError, f as InvariantError, g as RecordLockedError } from '../errors-BAWO5Z5a.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
+import '../strategy-8QGs5KQE.js';
 import '../strategy-BSxFXGzb.js';
+import '../index-BMmajblo.js';
+import '../index-Ddm8D3Oo.js';
 import '@noy-db/attestation';
 
 /**
@@ -19,8 +21,14 @@ declare const GuardExecutor: {
      * Compare existing vs incoming for each `frozenFields.fields` entry
      * when `frozenFields.when(existing)` is true. Throws
      * `FieldFrozenError` listing every changed frozen field.
+     *
+     * @param skipFields — field names that are schema-owned computed fields.
+     *   These are excluded from the comparison because `incoming` carries the
+     *   raw user input (computed fields not yet evaluated), so comparing
+     *   `existing[field]` vs `incoming[field]` would always look like a
+     *   change even when the computed result is unchanged.
      */
-    checkFrozenFields<T extends Record<string, unknown>>(guard: GuardStrategy<T>, id: string, existing: T | null, incoming: T): Promise<void>;
+    checkFrozenFields<T extends Record<string, unknown>>(guard: GuardStrategy<T>, id: string, existing: T | null, incoming: T, skipFields?: ReadonlySet<string>): Promise<void>;
     /**
      * Run a single guard's invariant over its slice of the change-set.
      * Any throw is converted to `InvariantError` unless it already is one.

package/dist/guards/index.js

@@ -1,29 +1,36 @@
 import {
+  immutableGuard,
+  transitionGuard,
   withGuard
-} from "../chunk-5YHWBPOT.js";
+} from "../chunk-XAYDHD2O.js";
 import {
   GuardRegistry
-} from "../chunk-EPK6A3WJ.js";
+} from "../chunk-A3JMGXPG.js";
 import {
   ReadOnlyVaultFacade
-} from "../chunk-UMLVJTYV.js";
+} from "../chunk-ADB7GPM3.js";
 import {
   GuardExecutor
-} from "../chunk-SAVQ6E2O.js";
+} from "../chunk-FFKQ65YX.js";
 import {
   AmendmentForbiddenError,
   FieldFrozenError,
+  IllegalTransitionError,
   InvariantError,
   RecordLockedError
-} from "../chunk-YDLAFP36.js";
+} from "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
 export {
   AmendmentForbiddenError,
   FieldFrozenError,
   GuardExecutor,
   GuardRegistry,
+  IllegalTransitionError,
   InvariantError,
   ReadOnlyVaultFacade,
   RecordLockedError,
+  immutableGuard,
+  transitionGuard,
   withGuard
 };
 //# sourceMappingURL=index.js.map

package/dist/{hash-gVn_uKhp.d.ts → hash-oc5paYl0.d.ts}

@@ -1,4 +1,4 @@
-import { aQ as EncryptedEnvelope } from './types-D9eB0Rvh.js';
+import { aY as EncryptedEnvelope } from './index-DHn9lEP0.js';
 
 /**
  * Ledger storage constants — pinned in their own leaf module so

package/dist/history/index.d.ts

@@ -1,11 +1,13 @@
-import { aN as HistoryStrategy, aO as NoydbStore, aP as HistoryOptions, aQ as EncryptedEnvelope, aR as PruneOptions } from '../types-D9eB0Rvh.js';
-export { aS as AppendInput, aT as ChangeType, aU as CollectionInstant, aV as DiffEntry, aW as JsonPatch, aX as JsonPatchOp, aY as LedgerEntry, aZ as LedgerStore, a_ as VaultEngine, a$ as VaultInstant, b0 as VerifyResult, b1 as applyPatch, b2 as canonicalJson, b3 as computePatch, b4 as diff, b5 as formatDiff, b6 as hashEntry, b7 as paddedIndex, b8 as parseIndex, b9 as sha256Hex } from '../types-D9eB0Rvh.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from '../hash-gVn_uKhp.js';
-import '../lazy-builder-Rpd-V3jP.js';
-import '../predicate-Dnu81tsS.js';
-import '../strategy-DSTrsZ8t.js';
+import { aV as HistoryStrategy, aW as NoydbStore, aX as HistoryOptions, aY as EncryptedEnvelope, aZ as PruneOptions } from '../index-DHn9lEP0.js';
+export { a_ as AppendInput, a$ as ChangeType, b0 as CollectionInstant, b1 as DiffEntry, b2 as JsonPatch, b3 as JsonPatchOp, b4 as LedgerStore, b5 as VaultEngine, b6 as VaultInstant, b7 as VerifyResult, b8 as applyPatch, b9 as computePatch, ba as diff, bb as formatDiff } from '../index-DHn9lEP0.js';
+export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from '../index-BMmajblo.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from '../hash-oc5paYl0.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
+import '../strategy-8QGs5KQE.js';
+import '../errors-BAWO5Z5a.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-BF1B2HB9.js';
+import '../index-Ddm8D3Oo.js';
 import '@noy-db/attestation';
 
 /**

package/dist/history/index.js

@@ -7,15 +7,16 @@ import {
   getHistory,
   getVersionEnvelope,
   pruneHistory,
-  saveHistory
-} from "../chunk-IS5HWQO7.js";
+  saveHistory,
+  tombstoneHistory
+} from "../chunk-CIZDUAHI.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION,
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-74JEQFMT.js";
+} from "../chunk-2UT7HJJR.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -23,10 +24,11 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-NCO2JGKK.js";
-import "../chunk-FXQYZNOW.js";
-import "../chunk-UOF74WQY.js";
-import "../chunk-YDLAFP36.js";
+} from "../chunk-PDVP3C2I.js";
+import "../chunk-A7DNZVAV.js";
+import "../chunk-E2MDPPOC.js";
+import "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
 
 // src/history/active.ts
 function withHistory() {
@@ -36,6 +38,7 @@ function withHistory() {
     getVersionEnvelope,
     pruneHistory,
     clearHistory,
+    tombstoneHistory,
     envelopePayloadHash,
     computePatch,
     diff,

package/dist/history/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}

package/dist/i18n/index.d.ts

@@ -1,10 +1,12 @@
-import { I as I18nStrategy } from '../types-D9eB0Rvh.js';
-export { D as DICT_COLLECTION_PREFIX, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, e as I18nTextDescriptor, f as I18nTextOptions, g as applyI18nLocale, h as dictCollectionName, i as dictKey, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, r as resolveI18nText, v as validateI18nTextValue } from '../types-D9eB0Rvh.js';
-export { D as DictKeyInUseError, a as DictKeyMissingError, L as LocaleNotSpecifiedError, M as MissingTranslationError, R as ReservedCollectionNameError, T as TranslatorNotConfiguredError } from '../index-BF1B2HB9.js';
-import '../lazy-builder-Rpd-V3jP.js';
-import '../predicate-Dnu81tsS.js';
-import '../strategy-DSTrsZ8t.js';
+export { I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, O as OnMissing, c as OnMissingPolicy, R as ResolveI18nOptions, d as applyI18nLocale, g as getAtPath, i as i18nText, e as isI18nTextDescriptor, r as resolveI18nText, f as resolvePolicy, s as setAtPathInPlace, h as stripI18nFilled, v as validateI18nTextValue } from '../strategy-8QGs5KQE.js';
+import { I as I18nStrategy } from '../index-DHn9lEP0.js';
+export { D as DICT_COLLECTION_PREFIX, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, S as ScriptWarning, e as StaticDictDescriptor, f as dictCollectionName, g as dictKey, h as enforceScript, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, l as isStaticDictDescriptor, s as staticDict } from '../index-DHn9lEP0.js';
+export { D as DictKeyInUseError, a as DictKeyMissingError, L as LocaleNotSpecifiedError, M as MissingTranslationError, R as ReservedCollectionNameError, S as ScriptViolationError, b as StaticDictReadonlyError, T as TranslatorNotConfiguredError, U as UnknownDictCodeError } from '../errors-BAWO5Z5a.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
 import '../strategy-BSxFXGzb.js';
+import '../index-BMmajblo.js';
+import '../index-Ddm8D3Oo.js';
 import '@noy-db/attestation';
 
 /**

package/dist/i18n/index.js

@@ -1,36 +1,126 @@
-import {
-  applyI18nLocale,
-  i18nText,
-  isI18nTextDescriptor,
-  resolveI18nText,
-  validateI18nTextValue
-} from "../chunk-A6SWRXUQ.js";
 import {
   DICT_COLLECTION_PREFIX,
   DictionaryHandle,
   dictCollectionName,
   dictKey,
   isDictCollectionName,
-  isDictKeyDescriptor
-} from "../chunk-KMI2NBBF.js";
-import "../chunk-TLFUDXVV.js";
-import "../chunk-NCO2JGKK.js";
-import "../chunk-FXQYZNOW.js";
-import "../chunk-UOF74WQY.js";
+  isDictKeyDescriptor,
+  isStaticDictDescriptor,
+  staticDict
+} from "../chunk-K4JID2ZE.js";
+import {
+  applyI18nLocale,
+  enforceScript,
+  getAtPath,
+  i18nText,
+  inferScripts,
+  isI18nTextDescriptor,
+  resolveI18nText,
+  resolvePolicy,
+  setAtPathInPlace,
+  stripI18nFilled,
+  validateI18nTextValue
+} from "../chunk-QXWJQ7UU.js";
+import "../chunk-ZCMOS4H2.js";
+import "../chunk-PDVP3C2I.js";
+import "../chunk-A7DNZVAV.js";
+import "../chunk-E2MDPPOC.js";
 import {
   DictKeyInUseError,
   DictKeyMissingError,
   LocaleNotSpecifiedError,
   MissingTranslationError,
   ReservedCollectionNameError,
-  TranslatorNotConfiguredError
-} from "../chunk-YDLAFP36.js";
+  ScriptViolationError,
+  StaticDictReadonlyError,
+  TranslatorNotConfiguredError,
+  UnknownDictCodeError
+} from "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
+
+// src/i18n/densify.ts
+var MARKER = "_i18nFilled";
+function priorFilled(prior, field) {
+  if (!prior) return /* @__PURE__ */ new Set();
+  const marker = prior[MARKER];
+  return new Set(marker?.[field] ?? []);
+}
+function singleLeaf(record, field) {
+  const leaves = getAtPath(record, field);
+  if (leaves.length !== 1) return void 0;
+  const leaf = leaves[0];
+  if (!leaf || typeof leaf !== "object" || Array.isArray(leaf)) return void 0;
+  return leaf;
+}
+function computeExemptFills(prior, incoming, fields) {
+  const out = /* @__PURE__ */ new Map();
+  if (!prior) return out;
+  for (const field of Object.keys(fields)) {
+    const filled = priorFilled(prior, field);
+    if (filled.size === 0) continue;
+    const priorLeaf = singleLeaf(prior, field);
+    const incLeaf = singleLeaf(incoming, field);
+    if (!priorLeaf || !incLeaf) continue;
+    const exempt = /* @__PURE__ */ new Set();
+    for (const loc of filled) {
+      if (incLeaf[loc] !== void 0 && incLeaf[loc] !== "" && incLeaf[loc] === priorLeaf[loc]) {
+        exempt.add(loc);
+      }
+    }
+    if (exempt.size > 0) out.set(field, exempt);
+  }
+  return out;
+}
+function densify(record, prior, fields) {
+  let marker = record[MARKER];
+  for (const [field, descriptor] of Object.entries(fields)) {
+    const leaf = singleLeaf(record, field);
+    if (!leaf) continue;
+    const { languages, substitute, smartSubstitute } = descriptor.options;
+    const filledSet = priorFilled(prior, field);
+    const priorLeaf = singleLeaf(prior ?? {}, field);
+    const isUnchangedFill = (loc) => filledSet.has(loc) && priorLeaf?.[loc] !== void 0 && leaf[loc] === priorLeaf[loc];
+    const authored = {};
+    for (const [loc, val] of Object.entries(leaf)) {
+      if (typeof val === "string" && val !== "" && !isUnchangedFill(loc)) authored[loc] = val;
+    }
+    const filled = [];
+    for (const loc of languages) {
+      if (authored[loc] !== void 0) continue;
+      const sub = resolveI18nText(authored, loc, void 0, field, {
+        policy: "substitute",
+        substitute: substitute ?? ["any"],
+        ...smartSubstitute ? { smartSubstitute } : {}
+      });
+      if (typeof sub === "string" && sub !== "") {
+        leaf[loc] = sub;
+        filled.push(loc);
+      } else if (isUnchangedFill(loc)) {
+        delete leaf[loc];
+      }
+    }
+    if (filled.length > 0) {
+      marker ??= {};
+      marker[field] = filled;
+    } else if (marker) {
+      delete marker[field];
+    }
+  }
+  if (marker && Object.keys(marker).length > 0) {
+    record[MARKER] = marker;
+  } else {
+    delete record[MARKER];
+  }
+}
 
 // src/i18n/active.ts
 function withI18n() {
   return {
     applyI18nLocale,
     validateI18nTextValue,
+    enforceScript,
+    computeExemptFills,
+    densify,
     buildDictionaryHandle(opts) {
       return new DictionaryHandle(
         opts.adapter,
@@ -55,15 +145,26 @@ export {
   LocaleNotSpecifiedError,
   MissingTranslationError,
   ReservedCollectionNameError,
+  ScriptViolationError,
+  StaticDictReadonlyError,
   TranslatorNotConfiguredError,
+  UnknownDictCodeError,
   applyI18nLocale,
   dictCollectionName,
   dictKey,
+  enforceScript,
+  getAtPath,
   i18nText,
+  inferScripts,
   isDictCollectionName,
   isDictKeyDescriptor,
   isI18nTextDescriptor,
+  isStaticDictDescriptor,
   resolveI18nText,
+  resolvePolicy,
+  setAtPathInPlace,
+  staticDict,
+  stripI18nFilled,
   validateI18nTextValue,
   withI18n
 };

package/dist/i18n/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/i18n/active.ts"],"sourcesContent":["/**\n * Active i18n strategy — `withI18n()` returns the real implementation\n * that wires multi-locale resolution, i18nText validation, and the\n * `DictionaryHandle` for `dictKey` fields into the core read/write\n * paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withI18n } from '@noy-db/hub/i18n'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   i18nStrategy: withI18n(),\n * })\n * ```\n *\n * The factory delegates to the existing `core.ts` and `dictionary.ts`\n * modules. Splitting the import chain through this file is what lets\n * tsup tree-shake the `~854 LOC` of dictionary + locale resolution\n * out of the default bundle when no `withI18n()` import is present.\n *\n * @public\n */\n\nimport type { I18nStrategy, BuildDictionaryHandleOptions } from './strategy.js'\nimport { applyI18nLocale, validateI18nTextValue } from './core.js'\nimport { DictionaryHandle } from './dictionary.js'\n\nexport function withI18n(): I18nStrategy {\n  return {\n    applyI18nLocale,\n    validateI18nTextValue,\n    buildDictionaryHandle<Keys extends string = string>(\n      opts: BuildDictionaryHandleOptions<Keys>,\n    ): DictionaryHandle<Keys> {\n      return new DictionaryHandle<Keys>(\n        opts.adapter,\n        opts.compartmentName,\n        opts.dictionaryName,\n        opts.keyring,\n        opts.getDEK,\n        opts.encrypted,\n        opts.ledger,\n        opts.options,\n        opts.findAndUpdateReferences,\n        opts.emitter,\n      )\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,sBACE,MACwB;AACxB,aAAO,IAAI;AAAA,QACT,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/i18n/densify.ts","../../src/i18n/active.ts"],"sourcesContent":["/**\n * #435 v1.x densifyOnWrite — eager-fill empty i18n slots from each field's\n * substitute chain at write time, recording provenance in the internal\n * `_i18nFilled` marker (decision A: dense map + prior-read).\n *\n * Pure functions over plain records; all DB wiring lives in collection.ts.\n * Only single-leaf i18n fields are supported (array-wildcard paths are\n * skipped, mirroring auto-translate).\n */\nimport { getAtPath, resolveI18nText } from './core.js'\nimport type { I18nTextDescriptor } from './core.js'\n\nconst MARKER = '_i18nFilled'\n\ntype Leaf = Record<string, string>\n\n/** Locales recorded as densify-filled on the prior record for `field`. */\nfunction priorFilled(prior: Record<string, unknown> | undefined, field: string): Set<string> {\n  if (!prior) return new Set()\n  const marker = prior[MARKER] as Record<string, string[]> | undefined\n  return new Set(marker?.[field] ?? [])\n}\n\n/** The single leaf map for `field`, or undefined for absent / array-wildcard / non-object. */\nfunction singleLeaf(record: Record<string, unknown>, field: string): Leaf | undefined {\n  const leaves = getAtPath(record, field)\n  if (leaves.length !== 1) return undefined\n  const leaf = leaves[0]\n  if (!leaf || typeof leaf !== 'object' || Array.isArray(leaf)) return undefined\n  return leaf as Leaf\n}\n\n/**\n * Per field, the locales that are UNCHANGED round-tripped densify fills — i.e.\n * marked filled on the prior record AND identical in the incoming record.\n * These are exempt from write-time script enforcement (they are derived copies,\n * not authored text). Slots the user changed are NOT exempt (validated as authored).\n */\nexport function computeExemptFills(\n  prior: Record<string, unknown> | undefined,\n  incoming: Record<string, unknown>,\n  fields: Record<string, I18nTextDescriptor>,\n): Map<string, Set<string>> {\n  const out = new Map<string, Set<string>>()\n  if (!prior) return out\n  for (const field of Object.keys(fields)) {\n    const filled = priorFilled(prior, field)\n    if (filled.size === 0) continue\n    const priorLeaf = singleLeaf(prior, field)\n    const incLeaf = singleLeaf(incoming, field)\n    if (!priorLeaf || !incLeaf) continue\n    const exempt = new Set<string>()\n    for (const loc of filled) {\n      if (incLeaf[loc] !== undefined && incLeaf[loc] !== '' && incLeaf[loc] === priorLeaf[loc]) {\n        exempt.add(loc)\n      }\n    }\n    if (exempt.size > 0) out.set(field, exempt)\n  }\n  return out\n}\n\n/**\n * Mutate `record` in place: fill empty declared-language slots for each\n * densify-enabled field from the field's substitute chain, recompute unchanged\n * prior fills, clear marks for slots that became authored, and write the\n * resulting `_i18nFilled` marker (removed when empty).\n *\n * `prior` is read-only — it is never mutated.\n *\n * Provenance uses value-equality (decision A): a slot counts as an unchanged\n * fill when it was prior-marked AND its value still equals the prior value. A\n * consequence is that re-authoring a value byte-identical to the existing fill\n * keeps it classified as a fill (the visible value is unchanged either way; the\n * slot stays script-exempt and will auto-refresh if its source later changes).\n * This is inherent to value-equality provenance, not a bug.\n */\nexport function densify(\n  record: Record<string, unknown>,\n  prior: Record<string, unknown> | undefined,\n  fields: Record<string, I18nTextDescriptor>,\n): void {\n  let marker = record[MARKER] as Record<string, string[]> | undefined\n\n  for (const [field, descriptor] of Object.entries(fields)) {\n    const leaf = singleLeaf(record, field)\n    if (!leaf) continue\n    const { languages, substitute, smartSubstitute } = descriptor.options\n    const filledSet = priorFilled(prior, field)\n    const priorLeaf = singleLeaf(prior ?? {}, field)\n    const isUnchangedFill = (loc: string): boolean =>\n      filledSet.has(loc) && priorLeaf?.[loc] !== undefined && leaf[loc] === priorLeaf[loc]\n\n    // Authored source = present, non-empty, NOT an unchanged prior fill.\n    const authored: Leaf = {}\n    for (const [loc, val] of Object.entries(leaf)) {\n      if (typeof val === 'string' && val !== '' && !isUnchangedFill(loc)) authored[loc] = val\n    }\n\n    const filled: string[] = []\n    for (const loc of languages) {\n      if (authored[loc] !== undefined) continue // real value present → not a fill\n      const sub = resolveI18nText(authored, loc, undefined, field, {\n        policy: 'substitute',\n        substitute: substitute ?? ['any'],\n        ...(smartSubstitute ? { smartSubstitute } : {}),\n      })\n      if (typeof sub === 'string' && sub !== '') {\n        leaf[loc] = sub\n        filled.push(loc)\n      } else if (isUnchangedFill(loc)) {\n        delete leaf[loc] // stale fill with no source left → drop it\n      }\n    }\n\n    if (filled.length > 0) {\n      marker ??= {}\n      marker[field] = filled\n    } else if (marker) {\n      delete marker[field]\n    }\n  }\n\n  if (marker && Object.keys(marker).length > 0) {\n    record[MARKER] = marker\n  } else {\n    delete record[MARKER]\n  }\n}\n","/**\n * Active i18n strategy — `withI18n()` returns the real implementation\n * that wires multi-locale resolution, i18nText validation, and the\n * `DictionaryHandle` for `dictKey` fields into the core read/write\n * paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withI18n } from '@noy-db/hub/i18n'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   i18nStrategy: withI18n(),\n * })\n * ```\n *\n * The factory delegates to the existing `core.ts` and `dictionary.ts`\n * modules. Splitting the import chain through this file is what lets\n * tsup tree-shake the `~854 LOC` of dictionary + locale resolution\n * out of the default bundle when no `withI18n()` import is present.\n *\n * @public\n */\n\nimport type { I18nStrategy, BuildDictionaryHandleOptions } from './strategy.js'\nimport { applyI18nLocale, validateI18nTextValue } from './core.js'\nimport { enforceScript } from './script.js'\nimport { computeExemptFills, densify } from './densify.js'\nimport { DictionaryHandle } from './dictionary.js'\n\nexport function withI18n(): I18nStrategy {\n  return {\n    applyI18nLocale,\n    validateI18nTextValue,\n    enforceScript,\n    computeExemptFills,\n    densify,\n    buildDictionaryHandle<Keys extends string = string>(\n      opts: BuildDictionaryHandleOptions<Keys>,\n    ): DictionaryHandle<Keys> {\n      return new DictionaryHandle<Keys>(\n        opts.adapter,\n        opts.compartmentName,\n        opts.dictionaryName,\n        opts.keyring,\n        opts.getDEK,\n        opts.encrypted,\n        opts.ledger,\n        opts.options,\n        opts.findAndUpdateReferences,\n        opts.emitter,\n      )\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAM,SAAS;AAKf,SAAS,YAAY,OAA4C,OAA4B;AAC3F,MAAI,CAAC,MAAO,QAAO,oBAAI,IAAI;AAC3B,QAAM,SAAS,MAAM,MAAM;AAC3B,SAAO,IAAI,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC;AACtC;AAGA,SAAS,WAAW,QAAiC,OAAiC;AACpF,QAAM,SAAS,UAAU,QAAQ,KAAK;AACtC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,QAAM,OAAO,OAAO,CAAC;AACrB,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,SAAO;AACT;AAQO,SAAS,mBACd,OACA,UACA,QAC0B;AAC1B,QAAM,MAAM,oBAAI,IAAyB;AACzC,MAAI,CAAC,MAAO,QAAO;AACnB,aAAW,SAAS,OAAO,KAAK,MAAM,GAAG;AACvC,UAAM,SAAS,YAAY,OAAO,KAAK;AACvC,QAAI,OAAO,SAAS,EAAG;AACvB,UAAM,YAAY,WAAW,OAAO,KAAK;AACzC,UAAM,UAAU,WAAW,UAAU,KAAK;AAC1C,QAAI,CAAC,aAAa,CAAC,QAAS;AAC5B,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,OAAO,QAAQ;AACxB,UAAI,QAAQ,GAAG,MAAM,UAAa,QAAQ,GAAG,MAAM,MAAM,QAAQ,GAAG,MAAM,UAAU,GAAG,GAAG;AACxF,eAAO,IAAI,GAAG;AAAA,MAChB;AAAA,IACF;AACA,QAAI,OAAO,OAAO,EAAG,KAAI,IAAI,OAAO,MAAM;AAAA,EAC5C;AACA,SAAO;AACT;AAiBO,SAAS,QACd,QACA,OACA,QACM;AACN,MAAI,SAAS,OAAO,MAAM;AAE1B,aAAW,CAAC,OAAO,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACxD,UAAM,OAAO,WAAW,QAAQ,KAAK;AACrC,QAAI,CAAC,KAAM;AACX,UAAM,EAAE,WAAW,YAAY,gBAAgB,IAAI,WAAW;AAC9D,UAAM,YAAY,YAAY,OAAO,KAAK;AAC1C,UAAM,YAAY,WAAW,SAAS,CAAC,GAAG,KAAK;AAC/C,UAAM,kBAAkB,CAAC,QACvB,UAAU,IAAI,GAAG,KAAK,YAAY,GAAG,MAAM,UAAa,KAAK,GAAG,MAAM,UAAU,GAAG;AAGrF,UAAM,WAAiB,CAAC;AACxB,eAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC7C,UAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM,CAAC,gBAAgB,GAAG,EAAG,UAAS,GAAG,IAAI;AAAA,IACtF;AAEA,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,WAAW;AAC3B,UAAI,SAAS,GAAG,MAAM,OAAW;AACjC,YAAM,MAAM,gBAAgB,UAAU,KAAK,QAAW,OAAO;AAAA,QAC3D,QAAQ;AAAA,QACR,YAAY,cAAc,CAAC,KAAK;AAAA,QAChC,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC/C,CAAC;AACD,UAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;AACzC,aAAK,GAAG,IAAI;AACZ,eAAO,KAAK,GAAG;AAAA,MACjB,WAAW,gBAAgB,GAAG,GAAG;AAC/B,eAAO,KAAK,GAAG;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,GAAG;AACrB,iBAAW,CAAC;AACZ,aAAO,KAAK,IAAI;AAAA,IAClB,WAAW,QAAQ;AACjB,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,WAAO,MAAM,IAAI;AAAA,EACnB,OAAO;AACL,WAAO,OAAO,MAAM;AAAA,EACtB;AACF;;;AC/FO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,sBACE,MACwB;AACxB,aAAO,IAAI;AAAA,QACT,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACF;","names":[]}