@noy-db/hub 0.2.0-pre.5 → 0.2.0-pre.7

package/dist/bundle/index.d.cts

@@ -1,9 +1,9 @@
-import { T as TransferSealPayload } from '../ulid-Cvljl7ZZ.cjs';
-export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-Cvljl7ZZ.cjs';
-import { bf as Vault, aO as NoydbStore, bb as SealingKeyProvider, bg as RecoveryEnrollmentInput, bh as ShamirRecoveryProvider } from '../types-BeKi0hCx.cjs';
-export { n as AdoptionStateError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, P as PartitionExtractionError, s as TransferSealError } from '../index-5I0MZ0jQ.cjs';
-import '../lazy-builder-DXlSCNCJ.cjs';
-import '../predicate-B0IKeBXx.cjs';
+import { T as TransferSealPayload } from '../ulid-BkW3mLlz.cjs';
+export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-BkW3mLlz.cjs';
+import { bl as Vault, aU as NoydbStore, bh as SealingKeyProvider, bm as RecoveryEnrollmentInput, bn as ShamirRecoveryProvider } from '../types-r-y7TIqj.cjs';
+export { o as AdoptionStateError, B as BackupCorruptedError, p as BackupLedgerError, q as BundleIntegrityError, r as BundleSealMismatchError, s as BundleVersionConflictError, P as PartitionExtractionError, t as TransferSealError } from '../index-vB43MAt4.cjs';
+import '../lazy-builder-wY4pMCEe.cjs';
+import '../predicate-BSAGEyu5.cjs';
 import '../strategy-DSTrsZ8t.cjs';
 import '../strategy-BSxFXGzb.cjs';
 import '@noy-db/attestation';

package/dist/bundle/index.d.ts

@@ -1,9 +1,9 @@
-import { T as TransferSealPayload } from '../ulid-CQc0eBxE.js';
-export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-CQc0eBxE.js';
-import { bf as Vault, aO as NoydbStore, bb as SealingKeyProvider, bg as RecoveryEnrollmentInput, bh as ShamirRecoveryProvider } from '../types-BV4AZKmx.js';
-export { n as AdoptionStateError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, P as PartitionExtractionError, s as TransferSealError } from '../index-fIPPh5dg.js';
-import '../lazy-builder-D1MyR1qH.js';
-import '../predicate-B0IKeBXx.js';
+import { T as TransferSealPayload } from '../ulid-Dt55yn4s.js';
+export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-Dt55yn4s.js';
+import { bl as Vault, aU as NoydbStore, bh as SealingKeyProvider, bm as RecoveryEnrollmentInput, bn as ShamirRecoveryProvider } from '../types-DT7cXRHq.js';
+export { o as AdoptionStateError, B as BackupCorruptedError, p as BackupLedgerError, q as BundleIntegrityError, r as BundleSealMismatchError, s as BundleVersionConflictError, P as PartitionExtractionError, t as TransferSealError } from '../index-CmWQyC4e.js';
+import '../lazy-builder-7tIpFyWN.js';
+import '../predicate-BSAGEyu5.js';
 import '../strategy-DSTrsZ8t.js';
 import '../strategy-BSxFXGzb.js';
 import '@noy-db/attestation';

package/dist/bundle/index.js

@@ -1,3 +1,7 @@
+import {
+  SCHEMAS_COLLECTION,
+  resolveManagedSecret
+} from "../chunk-22ESLVUM.js";
 import {
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
@@ -16,15 +20,11 @@ import {
   resetBrotliSupportCache,
   validateBundleHeader,
   writeNoydbBundle
-} from "../chunk-5QPF2MJ5.js";
-import {
-  SCHEMAS_COLLECTION,
-  resolveManagedSecret
-} from "../chunk-E225X5CQ.js";
-import "../chunk-WEA4TDTJ.js";
+} from "../chunk-2TXMTYWZ.js";
+import "../chunk-BNUCCUES.js";
 import {
   createOwnerKeyring
-} from "../chunk-T6MTNGBM.js";
+} from "../chunk-N4CDTRDH.js";
 import {
   generateULID,
   isULID
@@ -32,7 +32,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LedgerStore
-} from "../chunk-6A4AMQ2H.js";
+} from "../chunk-QYO6I7KK.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -41,7 +41,7 @@ import {
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "../chunk-5OVIFUQE.js";
+} from "../chunk-WIRRPTFH.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -49,7 +49,7 @@ import {
   encrypt,
   generateDEK,
   wrapKey
-} from "../chunk-EKTOYEZ3.js";
+} from "../chunk-YAMTXW77.js";
 import {
   AdoptionStateError,
   BackupCorruptedError,
@@ -60,7 +60,7 @@ import {
   PartitionExtractionError,
   TransferSealError,
   ValidationError
-} from "../chunk-6HJ2ZALB.js";
+} from "../chunk-REQJJIPP.js";
 
 // src/bundle/walk-closure.ts
 async function walkClosure(vault, opts) {
@@ -532,7 +532,7 @@ async function createOwnerOnAdoptedPartition(store, vaultName, opts) {
     }
   }
   if (isManaged(opts)) {
-    const { createNoydb } = await import("../noydb-6TADQIYH.js");
+    const { createNoydb } = await import("../noydb-MK4UQ626.js");
     const db = await createNoydb({
       store,
       user: userId,

package/dist/{chunk-E225X5CQ.js → chunk-22ESLVUM.js}

@@ -1,10 +1,10 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-5OVIFUQE.js";
+} from "./chunk-WIRRPTFH.js";
 import {
   decrypt,
   encrypt
-} from "./chunk-EKTOYEZ3.js";
+} from "./chunk-YAMTXW77.js";
 
 // src/persisted-schemas/storage.ts
 var SCHEMAS_COLLECTION = "_schemas";
@@ -248,4 +248,4 @@ export {
   loadSealedPassphrase,
   resolveManagedSecret
 };
-//# sourceMappingURL=chunk-E225X5CQ.js.map
+//# sourceMappingURL=chunk-22ESLVUM.js.map

package/dist/{chunk-5QPF2MJ5.js → chunk-2TXMTYWZ.js}

@@ -1,11 +1,11 @@
 import {
   pickLocale
-} from "./chunk-WEA4TDTJ.js";
+} from "./chunk-BNUCCUES.js";
 import {
   BundleIntegrityError,
   BundleSealMismatchError,
   ValidationError
-} from "./chunk-6HJ2ZALB.js";
+} from "./chunk-REQJJIPP.js";
 
 // src/bundle/format.ts
 var NOYDB_BUNDLE_MAGIC = new Uint8Array([78, 68, 66, 49]);
@@ -792,4 +792,4 @@ export {
   readNoydbBundlePublicEnvelope,
   readNoydbBundle
 };
-//# sourceMappingURL=chunk-5QPF2MJ5.js.map
+//# sourceMappingURL=chunk-2TXMTYWZ.js.map

package/dist/{chunk-BT7544RM.js → chunk-3O5FNO5O.js}

@@ -4,34 +4,36 @@ import {
 import {
   TxContext,
   revertExecuted
-} from "./chunk-LJO6Q3X6.js";
+} from "./chunk-OA6HE2RW.js";
 import {
   OverlayedCollection
-} from "./chunk-34XGYMQT.js";
+} from "./chunk-3XCXUJTM.js";
 import {
   LazyQuery,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-RIHZBSWJ.js";
+} from "./chunk-CBHPW77B.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   resolveManagedSecret,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-E225X5CQ.js";
+} from "./chunk-22ESLVUM.js";
 import {
   loadPublicEnvelope,
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-WEA4TDTJ.js";
+} from "./chunk-BNUCCUES.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-ZQMYB56Z.js";
+} from "./chunk-O3JCRQT3.js";
 import {
-  isDictCollectionName
-} from "./chunk-YZ6JETII.js";
+  getAtPath,
+  isDictCollectionName,
+  setAtPathInPlace
+} from "./chunk-AYRTGXF3.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
@@ -53,11 +55,11 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-Y3P5DEMZ.js";
+} from "./chunk-7IH5FDXD.js";
 import {
   assertTierAccess,
   dekKey
-} from "./chunk-TNBIWSQ7.js";
+} from "./chunk-GI6S5ZF2.js";
 import {
   USER_ENVELOPE_COLLECTION,
   buildRecipientKeyringFile,
@@ -81,7 +83,7 @@ import {
   rotateKeys,
   saveUserEnvelope,
   updateKeyringIdentity
-} from "./chunk-T6MTNGBM.js";
+} from "./chunk-N4CDTRDH.js";
 import {
   INDEXED_STORE_POLICY
 } from "./chunk-2QR2PQTT.js";
@@ -91,7 +93,7 @@ import {
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
-} from "./chunk-6A4AMQ2H.js";
+} from "./chunk-QYO6I7KK.js";
 import {
   sha256Hex as sha256Hex2
 } from "./chunk-Z6FNBOTC.js";
@@ -99,22 +101,22 @@ import {
   NO_AGGREGATE,
   Query,
   ScanBuilder
-} from "./chunk-XDW37COG.js";
+} from "./chunk-4EOVWJL6.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-JSYTGEX4.js";
+} from "./chunk-WBUG3324.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-5OVIFUQE.js";
+} from "./chunk-WIRRPTFH.js";
 import {
   decrypt,
   encrypt,
   encryptDeterministic,
   sha256Hex
-} from "./chunk-EKTOYEZ3.js";
+} from "./chunk-YAMTXW77.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -141,7 +143,7 @@ import {
   TierNotGrantedError,
   TranslatorNotConfiguredError,
   ValidationError
-} from "./chunk-6HJ2ZALB.js";
+} from "./chunk-REQJJIPP.js";
 
 // src/policy/storage.ts
 var META_COLLECTION = "_meta";
@@ -644,7 +646,7 @@ async function resolveStaleOnRead(accessor, outputCollection, id) {
     }
     const sourceWithId = { ...source, id };
     if (DerivationExecutor === null) {
-      ({ DerivationExecutor } = await import("./executor-SOLEQVUB.js"));
+      ({ DerivationExecutor } = await import("./executor-XO4M4243.js"));
     }
     const ctx = { vault: accessor.getReadOnlyFacade() };
     const result = await DerivationExecutor.run(spec, sourceWithId, 0, strategyHash, ctx);
@@ -1112,7 +1114,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-74WGLVZ2.js");
+      const { resolveStaleMVOnRead } = await import("./stale-F4V5E7ZK.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     let record;
@@ -1282,7 +1284,9 @@ var Collection = class {
       const obj = record;
       for (const [field, descriptor] of Object.entries(this.i18nFields)) {
         if (!descriptor.options.autoTranslate) continue;
-        const value = obj[field];
+        const leafValues = getAtPath(obj, field);
+        if (leafValues.length !== 1) continue;
+        const value = leafValues[0];
         if (!value || typeof value !== "object" || Array.isArray(value)) continue;
         const map = value;
         const { languages, required } = descriptor.options;
@@ -1306,8 +1310,7 @@ var Collection = class {
             this.name
           );
         }
-        ;
-        record[field] = translated;
+        setAtPathInPlace(obj, field, translated);
       }
     }
     if (this.i18nPutValidator !== void 0) {
@@ -1482,7 +1485,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-RWICJI7J.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-HAVRTQN4.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1491,7 +1494,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-74WGLVZ2.js");
+          staleHelpers = await import("./stale-F4V5E7ZK.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -1520,7 +1523,7 @@ var Collection = class {
       const mode = typeof spec.lifecycle === "string" ? spec.lifecycle : spec.lifecycle.mode;
       if (mode === "eager") {
         if (DerivationExecutor === null) {
-          ({ DerivationExecutor } = await import("./executor-SOLEQVUB.js"));
+          ({ DerivationExecutor } = await import("./executor-XO4M4243.js"));
         }
         const sourceWithId = { ...incoming, id };
         const ctx = { vault: this.derivationSource.getReadOnlyFacade() };
@@ -1539,7 +1542,7 @@ var Collection = class {
           const outputCollection = this.derivationSource.getCollection(outSpec.collection);
           const txCtx = this.derivationSource.getActiveTxContext();
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-EVICRM46.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-OKPMMPLG.js");
             const prior = await loadFanoutSidecar(
               this.adapter,
               this.vault,
@@ -1831,7 +1834,7 @@ var Collection = class {
       for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
         if (outSpec.shape !== "array") continue;
         if (helpers === null) {
-          helpers = await import("./fanout-sidecar-EVICRM46.js");
+          helpers = await import("./fanout-sidecar-OKPMMPLG.js");
         }
         const sidecar = await helpers.loadFanoutSidecar(
           this.adapter,
@@ -1871,7 +1874,7 @@ var Collection = class {
       if (mode === "eager") {
         if (executor === null) {
           ;
-          ({ MaterializedViewExecutor: executor } = await import("./executor-RWICJI7J.js"));
+          ({ MaterializedViewExecutor: executor } = await import("./executor-HAVRTQN4.js"));
         }
         await executor.refresh(reg, {
           getCollection: (name) => this.materializedViewSource.getCollection(name),
@@ -1880,7 +1883,7 @@ var Collection = class {
         });
       } else if (mode === "lazy") {
         if (staleHelpers === null) {
-          staleHelpers = await import("./stale-74WGLVZ2.js");
+          staleHelpers = await import("./stale-F4V5E7ZK.js");
         }
         staleHelpers.markMVStale(registry, reg.spec.name);
       }
@@ -1903,7 +1906,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-74WGLVZ2.js");
+      const { resolveStaleMVOnRead } = await import("./stale-F4V5E7ZK.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name);
     }
     await this.ensureHydrated();
@@ -5020,9 +5023,11 @@ var Vault = class {
     if (!record || typeof record !== "object") return;
     const obj = record;
     for (const [field, descriptor] of Object.entries(i18nFields)) {
-      const value = obj[field];
-      if (value === void 0 || value === null) continue;
-      this.i18nStrategy.validateI18nTextValue(value, field, descriptor);
+      const values = getAtPath(obj, field);
+      for (const value of values) {
+        if (value === void 0 || value === null) continue;
+        this.i18nStrategy.validateI18nTextValue(value, field, descriptor);
+      }
     }
   }
   /**
@@ -5334,12 +5339,12 @@ var Vault = class {
     if (!fieldSchema) {
       throw new AttestationError(`issueAttestation: collection '${collectionName}' has no attestation field-schema. Declare it via vault.collection('${collectionName}', { attestation: { fields: [...] } }).`);
     }
-    const { issueAttestationCore } = await import("./issue-IODMTPME.js");
+    const { issueAttestationCore } = await import("./issue-EJKUQ6FA.js");
     const out = await issueAttestationCore(this.makeIssueContext(), { collection: collectionName, id, fieldSchema });
     return { docId: out.docId, qr: out.qr, keyId: out.keyId, publicKeyB64: out.publicKeyB64 };
   }
   async getDocumentSigningPublicKey() {
-    const { loadSigner, loadOrCreateSigner } = await import("./signer-WGDJNWSU.js");
+    const { loadSigner, loadOrCreateSigner } = await import("./signer-UD2ZSVDJ.js");
     const existing = await loadSigner(this.adapter, this.name, this.getDEK);
     if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
     if (this.keyring.role !== "owner") {
@@ -5365,19 +5370,19 @@ var Vault = class {
     };
   }
   async revokeAttestation(docId) {
-    const { revokeDocCore } = await import("./revoke-R5NIQ74J.js");
+    const { revokeDocCore } = await import("./revoke-Y7UDOXGH.js");
     await revokeDocCore(this.makeRevokeContext(), docId);
   }
   async unrevokeAttestation(docId) {
-    const { unrevokeDocCore } = await import("./revoke-R5NIQ74J.js");
+    const { unrevokeDocCore } = await import("./revoke-Y7UDOXGH.js");
     await unrevokeDocCore(this.makeRevokeContext(), docId);
   }
   async getRevokedDocIds() {
-    const { getRevokedDocIdsCore } = await import("./revoke-R5NIQ74J.js");
+    const { getRevokedDocIdsCore } = await import("./revoke-Y7UDOXGH.js");
     return getRevokedDocIdsCore(this.makeRevokeContext());
   }
   async publishRevocationList() {
-    const { publishRevocationListCore } = await import("./revoke-R5NIQ74J.js");
+    const { publishRevocationListCore } = await import("./revoke-Y7UDOXGH.js");
     return publishRevocationListCore(this.makeRevokeContext());
   }
   makeRevokeContext() {
@@ -5694,7 +5699,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-446I2NMN.js"),
+      import("./registry-ZON5HNIV.js"),
       import("./read-only-facade-ITU6L7BL.js")
     ]);
     const registry = new DerivationRegistry();
@@ -5725,7 +5730,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-4NEW7LQY.js");
+    const { MaterializedViewRegistry } = await import("./registry-4R4IURUM.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -5749,7 +5754,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-524KJZG4.js");
+    const { OverlayedViewRegistry } = await import("./registry-GPBLCHG7.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -5796,13 +5801,13 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-RWICJI7J.js");
+    const { MaterializedViewExecutor } = await import("./executor-HAVRTQN4.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this
     });
-    const { clearMVStale } = await import("./stale-74WGLVZ2.js");
+    const { clearMVStale } = await import("./stale-F4V5E7ZK.js");
     clearMVStale(registry, name);
     return result;
   }
@@ -5818,7 +5823,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0 };
-    const { DerivationExecutor } = await import("./executor-SOLEQVUB.js");
+    const { DerivationExecutor } = await import("./executor-XO4M4243.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.readOnlyFacade ?? new (await import("./read-only-facade-ITU6L7BL.js")).ReadOnlyVaultFacade(this) };
@@ -5843,7 +5848,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-EVICRM46.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-OKPMMPLG.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -6064,7 +6069,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-42LO4WFO.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-TLZTK2XW.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (passphrase) first."
@@ -6086,7 +6091,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-42LO4WFO.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-TLZTK2XW.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -6555,7 +6560,7 @@ var Vault = class {
    * @see docs/subsystems/public-envelope.md
    */
   async getPublicEnvelope(opts = {}) {
-    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-YKHKP74C.js");
+    const { readPublicEnvelope: readPublicEnvelope2 } = await import("./public-envelope-BXPXMN3U.js");
     return readPublicEnvelope2(this.adapter, this.name, opts);
   }
   /**
@@ -7619,16 +7624,32 @@ var QuickUnlockStore = class {
   }
 };
 
-// src/tx/strategy.ts
+// src/snapshots/strategy.ts
 var NOT_ENABLED4 = new Error(
+  'Snapshots require the snapshot strategy. Import `{ withSnapshots }` from "@noy-db/hub/snapshots" and pass it to `createNoydb({ snapshotStrategy: withSnapshots({ store }) })`.'
+);
+var NO_SNAPSHOTS = {
+  async snapshot() {
+    throw NOT_ENABLED4;
+  },
+  async listSnapshots() {
+    throw NOT_ENABLED4;
+  },
+  async restoreSnapshot() {
+    throw NOT_ENABLED4;
+  }
+};
+
+// src/tx/strategy.ts
+var NOT_ENABLED5 = new Error(
   'Multi-record transactions require the tx strategy. Import `{ withTransactions }` from "@noy-db/hub/tx" and pass it to `createNoydb({ txStrategy: withTransactions() })`.'
 );
 var NO_TX = {
   async runTransaction() {
-    throw NOT_ENABLED4;
+    throw NOT_ENABLED5;
   },
   async runDryRun() {
-    throw NOT_ENABLED4;
+    throw NOT_ENABLED5;
   }
 };
 
@@ -7971,6 +7992,7 @@ var Noydb = class {
   txStrategy;
   sessionStrategy;
   syncStrategy;
+  snapshotStrategy;
   /**
    * Currently-running multi-record transaction, set by
    * `runTransaction` at the start of Phase 2 (commit) and cleared in
@@ -7995,6 +8017,7 @@ var Noydb = class {
     this.txStrategy = options.txStrategy ?? NO_TX;
     this.sessionStrategy = options.sessionStrategy ?? NO_SESSION;
     this.syncStrategy = options.syncStrategy ?? NO_SYNC;
+    this.snapshotStrategy = options.snapshotStrategy ?? NO_SNAPSHOTS;
     this.publicEnvelopeSchema = resolveSchema(options.publicEnvelope);
     if (options.sessionPolicy) {
       this.sessionStrategy.validateSessionPolicy(options.sessionPolicy);
@@ -8030,7 +8053,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-AWCHQ2KN.js");
+      const { GuardExecutor } = await import("./executor-V3DKOADS.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming);
       }
@@ -9981,6 +10004,45 @@ var Noydb = class {
     this.keyringCache.set(vault, keyring);
     return keyring;
   }
+  /**
+   * Take an on-demand checkpoint of the given vault.
+   * Requires `snapshotStrategy: withSnapshots({ store })` in `createNoydb`.
+   * @throws ValidationError when the vault is not open
+   */
+  async snapshot(vault, opts) {
+    if (this.closed) throw new ValidationError("Instance is closed");
+    const v = this.vaultCache.get(vault);
+    if (!v) {
+      throw new ValidationError(
+        `Vault "${vault}" is not open. Call openVault() first.`
+      );
+    }
+    return this.snapshotStrategy.snapshot(v, this.options.user, opts);
+  }
+  /**
+   * List all snapshots for the given vault, newest first.
+   * Reads only the sidecar index — does not download snapshot bytes.
+   */
+  async listSnapshots(vault) {
+    if (this.closed) throw new ValidationError("Instance is closed");
+    return this.snapshotStrategy.listSnapshots(vault);
+  }
+  /**
+   * Restore the vault to a previously snapshotted state.
+   * Runs `verifyBackupIntegrity()` automatically on restore.
+   * @throws SnapshotNotFoundError when `version` doesn't exist in the store
+   * @throws ValidationError when the vault is not open
+   */
+  async restoreSnapshot(vault, version) {
+    if (this.closed) throw new ValidationError("Instance is closed");
+    const v = this.vaultCache.get(vault);
+    if (!v) {
+      throw new ValidationError(
+        `Vault "${vault}" is not open. Call openVault() first.`
+      );
+    }
+    return this.snapshotStrategy.restoreSnapshot(v, version);
+  }
 };
 async function createNoydb(options) {
   const encrypted = options.encrypt !== false;
@@ -10055,4 +10117,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-BT7544RM.js.map
+//# sourceMappingURL=chunk-3O5FNO5O.js.map