@noy-db/hub 0.2.0-pre.9 → 0.3.0-pre.10

package/dist/overlay-views/index.d.ts

@@ -1,11 +1,8 @@
-export { w as withOverlayedView } from '../with-overlayed-view-CRsSEwHR.js';
-import { aX as OverlayedViewStrategy, aY as Collection } from '../types-Df28QFKb.js';
-export { aZ as OverlayedViewRegistry, a_ as OverlayedViewStrategyHandle } from '../types-Df28QFKb.js';
-export { O as OverlayBaseIsVirtualError, l as OverlayCollectionUnavailableError, m as OverlayIdMismatchError, n as OverlayNameCollisionError } from '../index-D8I_pyJD.js';
-import '../lazy-builder-7tIpFyWN.js';
-import '../predicate-BSAGEyu5.js';
-import '../strategy-DSTrsZ8t.js';
-import '../strategy-BSxFXGzb.js';
+export { w as withOverlayedView } from '../with-overlayed-view-m4FaXXTO.js';
+import { bM as OverlayedViewStrategy, bN as Collection } from '../index-DjWbxsjb.js';
+export { bO as OverlayBaseIsVirtualError, bP as OverlayCollectionUnavailableError, bQ as OverlayFieldMergeMode, bR as OverlayFieldMergeRule, bS as OverlayIdMismatchError, bT as OverlayNameCollisionError, bU as OverlayedViewRegistry, bV as OverlayedViewStrategyHandle } from '../index-DjWbxsjb.js';
+import '../subject-index-CyOgGMJL.js';
+import '../index-B9QdHytu.js';
 import '@noy-db/attestation';
 
 /**
@@ -14,7 +11,9 @@ import '@noy-db/attestation';
  *
  * Implements the core `Collection<T>`-shaped read/write surface with
  * merge-on-read semantics:
- *   - `get(id)`: overlay row wins iff `overlay[shadowField] === shadowValue`
+ *   - `get(id)`: overlay row wins iff `overlay[shadowField] === shadowValue`;
+ *     when `spec.mergeMode` is set, an intermediate status may instead pull
+ *     a declared subset of fields from the overlay over the base
  *   - `list()` / `.query()`: union of ids, per-id merge applied
  *   - `put(record)` / `put(id, record)`: routes to overlay; id derived
  *     via the base MV's `rowKey` (validated on the two-arg form)
@@ -57,8 +56,24 @@ declare class OverlayedCollection<T extends Record<string, unknown> = any> {
      * subsequent reads return it.
      */
     delete(id: string): Promise<void>;
-    /** True when `overlay[shadowField] === shadowValue`. */
-    private shadowPredicateApplies;
+    /**
+     * Merge a single id's overlay + base rows into the visible row.
+     *
+     * Priority (first match wins):
+     *  1. Binary shadow win — overlay present AND
+     *     `overlay[shadowField] === shadowValue` → return the overlay row
+     *     entirely. This stays FIRST so the original binary behaviour is
+     *     unchanged whether or not `mergeMode` is configured.
+     *  2. Field-level merge — overlay present, `mergeMode` configured,
+     *     and a rule whose `whenStatus` equals `overlay[shadowField]`.
+     *     The matched rule pulls its `overlayFields` (those present on
+     *     the overlay row) on top of the base row. With no base row, the
+     *     overlay row is returned as-is.
+     *  3. Fallback — return the base row (possibly `null`). An
+     *     overlay-only row that qualifies under neither (1) nor (2) and
+     *     has no base is therefore NOT surfaced.
+     */
+    private mergeRows;
     /** @throws — chainable Query<T> over a virtual collection is deferred. */
     query(): never;
     /** @throws — change-stream subscription over a virtual collection is deferred. */

package/dist/overlay-views/index.js

@@ -1,18 +1,19 @@
 import {
   withOverlayedView
-} from "../chunk-SYMWGEET.js";
-import {
-  OverlayedViewRegistry
-} from "../chunk-VTKGMEPP.js";
+} from "../chunk-PS2NEWEX.js";
 import {
   OverlayedCollection
-} from "../chunk-DJHHA6XH.js";
+} from "../chunk-OHHKHSJP.js";
+import {
+  OverlayedViewRegistry
+} from "../chunk-6P5XCKSD.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-B6PB7JLN.js";
+} from "../chunk-S7VFUQM2.js";
+import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,

package/dist/periods/index.d.ts

@@ -1,10 +1,7 @@
-import { ag as PeriodsStrategy } from '../types-Df28QFKb.js';
-export { ah as CarryForwardContext, ai as ClosePeriodOptions, aj as OpenPeriodOptions, ak as PERIODS_COLLECTION, al as PeriodRecord, am as ReadOnlyCollection, an as appendPeriodLedgerEntry, ao as assertTsWritable, ap as chainAnchor, aq as loadPeriods, ar as validatePeriodName } from '../types-Df28QFKb.js';
-import '../lazy-builder-7tIpFyWN.js';
-import '../predicate-BSAGEyu5.js';
-import '../strategy-DSTrsZ8t.js';
-import '../strategy-BSxFXGzb.js';
-import '../index-D8I_pyJD.js';
+import { aU as PeriodsStrategy } from '../index-DjWbxsjb.js';
+export { aV as CarryForwardContext, aW as ClosePeriodOptions, aX as OpenPeriodOptions, aY as PERIODS_COLLECTION, aZ as PERIOD_ARCHIVES_COLLECTION, a_ as PERIOD_FREEZES_COLLECTION, a$ as PERIOD_TARGET_PURGES_COLLECTION, b0 as PeriodArchiveRecord, b1 as PeriodFreezeRecord, b2 as PeriodRecord, b3 as PeriodTargetPurgeRecord, b4 as ReadOnlyCollection, b5 as TargetPurgeCount, b6 as appendPeriodLedgerEntry, b7 as assertTsWritable, b8 as chainAnchor, b9 as loadPeriods, ba as periodExclusiveUpperBound, bb as validatePeriodName } from '../index-DjWbxsjb.js';
+import '../subject-index-CyOgGMJL.js';
+import '../index-B9QdHytu.js';
 import '@noy-db/attestation';
 
 /**

package/dist/periods/index.js

@@ -1,24 +1,42 @@
+import {
+  withPeriods
+} from "../chunk-DJ7KIPLV.js";
 import {
   PERIODS_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
   appendPeriodLedgerEntry,
   assertTsWritable,
   chainAnchor,
   loadPeriods,
-  validatePeriodName,
-  withPeriods
-} from "../chunk-JWRVQKRZ.js";
-import "../chunk-UF3BUNQZ.js";
-import "../chunk-PE2FR4J3.js";
-import "../chunk-Z6FNBOTC.js";
-import "../chunk-WIRRPTFH.js";
-import "../chunk-PP6W64Y3.js";
-import "../chunk-B6PB7JLN.js";
+  periodExclusiveUpperBound,
+  validatePeriodName
+} from "../chunk-FRP6D2DM.js";
+import "../chunk-GHVIKOHT.js";
+import "../chunk-3JXPAHOZ.js";
+import "../chunk-I7FD46FF.js";
+import "../chunk-UF362QVH.js";
+import "../chunk-MCHVVJIA.js";
+import "../chunk-QA2KUPCP.js";
+import "../chunk-2OV5NVE7.js";
+import "../chunk-VEPTFUJY.js";
+import "../chunk-HYR4WZZ3.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-3OPY6MK2.js";
+import "../chunk-YN5IAHN6.js";
+import "../chunk-S7VFUQM2.js";
+import "../chunk-PZ5AY32C.js";
 export {
   PERIODS_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
   appendPeriodLedgerEntry,
   assertTsWritable,
   chainAnchor,
   loadPeriods,
+  periodExclusiveUpperBound,
   validatePeriodName,
   withPeriods
 };

package/dist/pod/index.d.ts

@@ -0,0 +1,62 @@
+export { C as COMPRESSION_BROTLI, b as COMPRESSION_GZIP, c as COMPRESSION_NONE, d as CompressionAlgo, F as FLAG_COMPRESSED, e as FLAG_HAS_INTEGRITY_HASH, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, l as encodeBundleHeader, m as readNoydbBundle, n as readNoydbBundleHeader, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, v as validateBundleHeader, p as writeNoydbBundle, w as writePod } from '../bundle-D6GxiUfq.js';
+export { g as generateULID, i as isULID } from '../ulid-DRH25k3y.js';
+import { c_ as NoydbStore, bq as NoydbPodStore } from '../index-DjWbxsjb.js';
+import '../subject-index-CyOgGMJL.js';
+import '../index-B9QdHytu.js';
+import '@noy-db/attestation';
+
+interface WrapPodStoreOptions {
+    /**
+     * When `true` (default), every `put()` and `delete()` flushes the full
+     * vault snapshot to the bundle backend. Set to `false` for bulk operations
+     * and call `store.flush(vaultId)` manually.
+     */
+    autoFlush?: boolean;
+}
+interface WrappedPodNoydbStore extends NoydbStore {
+    /** Manually flush the in-memory snapshot to the bundle backend. */
+    flush(vaultId: string): Promise<void>;
+    /**
+     * Run a batch of mutations without flushing until the callback completes.
+     * A single flush is performed at the end.
+     */
+    batch(vaultId: string, fn: () => Promise<void>): Promise<void>;
+}
+/**
+ * Convert a `NoydbPodStore` (blob-oriented read/write with OCC) into the
+ * standard six-method `NoydbStore` interface expected by `createNoydb({ store })`.
+ *
+ * Bundle stores operate on the entire vault as a single serialised unit —
+ * ideal for backends like Google Drive, WebDAV, or iCloud Drive that work
+ * best with whole-file I/O rather than per-record KV operations.
+ *
+ * ## Optimistic concurrency
+ *
+ * The wrapper tracks the `version` token from the last `readBundle` and
+ * passes it as `expectedVersion` on every flush. On
+ * `PodVersionConflictError`, it re-reads, merges the remote snapshot
+ * (last-write-wins per record key), and retries (max 3 attempts).
+ *
+ * ## Flush modes
+ *
+ * By default, flushes on every mutation (O(vault size) per write). Options:
+ * - `autoFlush: false` + explicit `store.flush(vaultId)` calls
+ * - `store.batch(vaultId, async () => { ... })` — defers flush until end
+ * - Pair with `syncPolicy: { push: { mode: 'debounce' } }` from
+ */
+declare function wrapPodStore(bundle: NoydbPodStore, options?: WrapPodStoreOptions): WrappedPodNoydbStore;
+/**
+ * Type-safe factory helper for `NoydbPodStore` implementations,
+ * analogous to `createStore` for KV stores.
+ */
+declare function createPodStore<TOptions>(factory: (options: TOptions) => NoydbPodStore): (options: TOptions) => NoydbPodStore;
+/** @deprecated Use wrapPodStore. */
+declare const wrapBundleStore: typeof wrapPodStore;
+/** @deprecated Use createPodStore. */
+declare const createBundleStore: typeof createPodStore;
+/** @deprecated Use WrappedPodNoydbStore. */
+type WrappedBundleNoydbStore = WrappedPodNoydbStore;
+/** @deprecated Use WrapPodStoreOptions. */
+type WrapBundleStoreOptions = WrapPodStoreOptions;
+
+export { type WrapBundleStoreOptions, type WrapPodStoreOptions, type WrappedBundleNoydbStore, type WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore };

package/dist/pod/index.js

@@ -0,0 +1,67 @@
+import "../chunk-CHFZDSE4.js";
+import {
+  createBundleStore,
+  createPodStore,
+  wrapBundleStore,
+  wrapPodStore
+} from "../chunk-5YESYH2C.js";
+import {
+  COMPRESSION_BROTLI,
+  COMPRESSION_GZIP,
+  COMPRESSION_NONE,
+  FLAG_COMPRESSED,
+  FLAG_HAS_INTEGRITY_HASH,
+  NOYDB_BUNDLE_FORMAT_VERSION,
+  NOYDB_BUNDLE_MAGIC,
+  NOYDB_BUNDLE_PREFIX_BYTES,
+  encodeBundleHeader,
+  readNoydbBundle,
+  readNoydbBundleHeader,
+  readPod,
+  readPodHeader,
+  resetBrotliSupportCache,
+  validateBundleHeader,
+  writeNoydbBundle,
+  writePod
+} from "../chunk-QSFOZUYL.js";
+import "../chunk-OXCSVM3B.js";
+import {
+  generateULID,
+  isULID
+} from "../chunk-ZJADGNYF.js";
+import "../chunk-MCHVVJIA.js";
+import "../chunk-QA2KUPCP.js";
+import "../chunk-2OV5NVE7.js";
+import "../chunk-VEPTFUJY.js";
+import "../chunk-HYR4WZZ3.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-3OPY6MK2.js";
+import "../chunk-YN5IAHN6.js";
+import "../chunk-S7VFUQM2.js";
+import "../chunk-PZ5AY32C.js";
+export {
+  COMPRESSION_BROTLI,
+  COMPRESSION_GZIP,
+  COMPRESSION_NONE,
+  FLAG_COMPRESSED,
+  FLAG_HAS_INTEGRITY_HASH,
+  NOYDB_BUNDLE_FORMAT_VERSION,
+  NOYDB_BUNDLE_MAGIC,
+  NOYDB_BUNDLE_PREFIX_BYTES,
+  createBundleStore,
+  createPodStore,
+  encodeBundleHeader,
+  generateULID,
+  isULID,
+  readNoydbBundle,
+  readNoydbBundleHeader,
+  readPod,
+  readPodHeader,
+  resetBrotliSupportCache,
+  validateBundleHeader,
+  wrapBundleStore,
+  wrapPodStore,
+  writeNoydbBundle,
+  writePod
+};
+//# sourceMappingURL=index.js.map

package/dist/pod/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/policy-WGNAG5H6.js

@@ -0,0 +1,41 @@
+import {
+  DEFAULT_FRESHNESS_MS,
+  PERSONAL_POLICY,
+  STRICT_POLICY,
+  checkGate,
+  createNoydbPolicy,
+  describeGate,
+  mergePolicy
+} from "./chunk-2OZXVKVP.js";
+import {
+  META_COLLECTION,
+  POLICY_RECORD_ID,
+  loadVaultPolicy,
+  saveVaultPolicy
+} from "./chunk-G4JYND6L.js";
+import "./chunk-YN5IAHN6.js";
+import {
+  ManagedRecoveryNotEnrolledError,
+  PolicyDeniedError,
+  RecoveryNotEnrolledError,
+  RecoveryProfileNotImplementedError
+} from "./chunk-S7VFUQM2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DEFAULT_FRESHNESS_MS,
+  META_COLLECTION,
+  ManagedRecoveryNotEnrolledError,
+  PERSONAL_POLICY,
+  POLICY_RECORD_ID,
+  PolicyDeniedError,
+  RecoveryNotEnrolledError,
+  RecoveryProfileNotImplementedError,
+  STRICT_POLICY,
+  checkGate,
+  createNoydbPolicy,
+  describeGate,
+  loadVaultPolicy,
+  mergePolicy,
+  saveVaultPolicy
+};
+//# sourceMappingURL=policy-WGNAG5H6.js.map

package/dist/policy-WGNAG5H6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/portability/index.d.ts

@@ -0,0 +1,19 @@
+import { bX as PortabilityStrategy } from '../index-DjWbxsjb.js';
+export { bY as ApproveWithdrawalOptions, bZ as ExportAccessibleOptions, b_ as NO_PORTABILITY, b$ as PortabilityNotEnabledError, c0 as RejectWithdrawalOptions, c1 as RequestWithdrawalOptions, c2 as RequestWithdrawalResult, c3 as WithdrawAccessibleOptions, c4 as WithdrawResult, c5 as WithdrawalRequest, c6 as WithdrawalRequestStatus } from '../index-DjWbxsjb.js';
+import '../subject-index-CyOgGMJL.js';
+import '../index-B9QdHytu.js';
+import '@noy-db/attestation';
+
+/**
+ * Enable the portability capability.
+ * Pass to `createNoydb({ portabilityStrategy: withPortability() })` to make a
+ * vault's `user.exportMyAccessibleData` / `user.unilateralWithdrawal` /
+ * `user.requestWithdrawal` / `user.listWithdrawalRequests` /
+ * `user.approveWithdrawal` / `user.rejectWithdrawal` methods live. The
+ * export/withdraw/request engines are dynamically imported here, so they stay
+ * reachable only via opt-in.
+ */
+
+declare function withPortability(): PortabilityStrategy;
+
+export { PortabilityStrategy, withPortability };

package/dist/portability/index.js

@@ -0,0 +1,43 @@
+import {
+  NO_PORTABILITY
+} from "../chunk-RHK32N73.js";
+import {
+  PortabilityNotEnabledError
+} from "../chunk-S7VFUQM2.js";
+import "../chunk-PZ5AY32C.js";
+
+// src/with-audit/portability/active.ts
+function withPortability() {
+  return {
+    async exportAccessibleData(vault, opts) {
+      const { exportAccessibleData } = await import("../export-accessible-DACHM5VT.js");
+      return exportAccessibleData(vault, opts);
+    },
+    async withdrawAccessibleData(vault, opts) {
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-WLV4MTEN.js");
+      return withdrawAccessibleData(vault, opts);
+    },
+    async requestWithdrawal(vault, opts) {
+      const { requestWithdrawal } = await import("../request-withdrawal-KAH2AAXC.js");
+      return requestWithdrawal(vault, opts);
+    },
+    async listWithdrawalRequests(vault, opts) {
+      const { listWithdrawalRequests } = await import("../request-withdrawal-KAH2AAXC.js");
+      return listWithdrawalRequests(vault, opts);
+    },
+    async approveWithdrawal(vault, requestId, opts) {
+      const { approveWithdrawal } = await import("../request-withdrawal-KAH2AAXC.js");
+      return approveWithdrawal(vault, requestId, opts);
+    },
+    async rejectWithdrawal(vault, requestId, opts) {
+      const { rejectWithdrawal } = await import("../request-withdrawal-KAH2AAXC.js");
+      return rejectWithdrawal(vault, requestId, opts);
+    }
+  };
+}
+export {
+  NO_PORTABILITY,
+  PortabilityNotEnabledError,
+  withPortability
+};
+//# sourceMappingURL=index.js.map

package/dist/portability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/with-audit/portability/active.ts"],"sourcesContent":["/**\n * Enable the portability capability.\n * Pass to `createNoydb({ portabilityStrategy: withPortability() })` to make a\n * vault's `user.exportMyAccessibleData` / `user.unilateralWithdrawal` /\n * `user.requestWithdrawal` / `user.listWithdrawalRequests` /\n * `user.approveWithdrawal` / `user.rejectWithdrawal` methods live. The\n * export/withdraw/request engines are dynamically imported here, so they stay\n * reachable only via opt-in.\n */\nimport type { PortabilityStrategy } from './strategy.js'\n\nexport function withPortability(): PortabilityStrategy {\n  return {\n    async exportAccessibleData(vault, opts) {\n      const { exportAccessibleData } = await import('./export-accessible.js')\n      return exportAccessibleData(vault, opts)\n    },\n    async withdrawAccessibleData(vault, opts) {\n      const { withdrawAccessibleData } = await import('./withdraw-accessible.js')\n      return withdrawAccessibleData(vault, opts)\n    },\n    async requestWithdrawal(vault, opts) {\n      const { requestWithdrawal } = await import('./request-withdrawal.js')\n      return requestWithdrawal(vault, opts)\n    },\n    async listWithdrawalRequests(vault, opts) {\n      const { listWithdrawalRequests } = await import('./request-withdrawal.js')\n      return listWithdrawalRequests(vault, opts)\n    },\n    async approveWithdrawal(vault, requestId, opts) {\n      const { approveWithdrawal } = await import('./request-withdrawal.js')\n      return approveWithdrawal(vault, requestId, opts)\n    },\n    async rejectWithdrawal(vault, requestId, opts) {\n      const { rejectWithdrawal } = await import('./request-withdrawal.js')\n      return rejectWithdrawal(vault, requestId, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;AAWO,SAAS,kBAAuC;AACrD,SAAO;AAAA,IACL,MAAM,qBAAqB,OAAO,MAAM;AACtC,YAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,kCAAwB;AACtE,aAAO,qBAAqB,OAAO,IAAI;AAAA,IACzC;AAAA,IACA,MAAM,uBAAuB,OAAO,MAAM;AACxC,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,oCAA0B;AAC1E,aAAO,uBAAuB,OAAO,IAAI;AAAA,IAC3C;AAAA,IACA,MAAM,kBAAkB,OAAO,MAAM;AACnC,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,mCAAyB;AACpE,aAAO,kBAAkB,OAAO,IAAI;AAAA,IACtC;AAAA,IACA,MAAM,uBAAuB,OAAO,MAAM;AACxC,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,mCAAyB;AACzE,aAAO,uBAAuB,OAAO,IAAI;AAAA,IAC3C;AAAA,IACA,MAAM,kBAAkB,OAAO,WAAW,MAAM;AAC9C,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,mCAAyB;AACpE,aAAO,kBAAkB,OAAO,WAAW,IAAI;AAAA,IACjD;AAAA,IACA,MAAM,iBAAiB,OAAO,WAAW,MAAM;AAC7C,YAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,mCAAyB;AACnE,aAAO,iBAAiB,OAAO,WAAW,IAAI;AAAA,IAChD;AAAA,EACF;AACF;","names":[]}

package/dist/post-register-CWKBQRC7.js

@@ -0,0 +1,55 @@
+import {
+  hashFields
+} from "./chunk-VQRAIPYF.js";
+import {
+  SatelliteConfigError
+} from "./chunk-S7VFUQM2.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-shape/satellites/marker.ts
+async function ensureSatelliteMarker(store, vaultName, spec, dek) {
+  const next = { base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined };
+  const { loadPersistedSchema } = await import("./storage-ADNP2UWI.js");
+  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
+  const prior = persisted?.satellite;
+  if (prior) {
+    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {
+      throw new SatelliteConfigError(
+        `R-S9: satellite "${spec.satellite}" re-declared divergently from its persisted pairing marker (persisted base="${prior.base}" fieldsHash=${prior.fieldsHash}; declared base="${next.base}" fieldsHash=${next.fieldsHash}). Evolve the marker deliberately, don't redeclare.`
+      );
+    }
+    return;
+  }
+  const { persistSatelliteMarker } = await import("./register-SBIX7TVV.js");
+  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
+}
+
+// src/with-shape/satellites/post-register.ts
+async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry) {
+  try {
+    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite));
+  } catch (err) {
+    registry.poison(spec.satellite, err.message);
+    return;
+  }
+  if (baseSchema !== void 0) {
+    try {
+      const { derivePersistedSchema } = await import("./derive-BME7HDWO.js");
+      const envelope = await derivePersistedSchema(baseSchema);
+      const properties = envelope.jsonSchema?.["properties"];
+      const baseFields = Object.keys(properties ?? {});
+      const overlap = spec.fields.filter((f) => baseFields.includes(f));
+      if (overlap.length > 0) {
+        registry.poison(
+          spec.satellite,
+          `R-S1: satellite "${spec.satellite}" fields overlap the base schema: ${overlap.join(", ")} \u2014 routing must be unambiguous.`
+        );
+      }
+    } catch {
+    }
+  }
+}
+export {
+  postRegister
+};
+//# sourceMappingURL=post-register-CWKBQRC7.js.map

package/dist/post-register-CWKBQRC7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/satellites/marker.ts","../src/with-shape/satellites/post-register.ts"],"sourcesContent":["import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport { SatelliteConfigError } from '../../kernel/errors.js'\nimport { hashFields } from './validate.js'\nimport type { PairingMarker, SatelliteSpec } from './types.js'\n\n/**\n * Persist-or-reconcile the pairing marker in `_schemas/<satellite>`.\n * First declaration writes { base, fieldsHash, joined }; later declarations\n * must match exactly or are refused (R-S9). Lazy imports keep the satellite\n * spine tree-shakeable (config-drift.ts pattern).\n */\nexport async function ensureSatelliteMarker(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec, dek: EnclaveKey,\n): Promise<void> {\n  const next: PairingMarker = { base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined }\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek)\n  const prior = persisted?.satellite\n  if (prior) {\n    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {\n      throw new SatelliteConfigError(\n        `R-S9: satellite \"${spec.satellite}\" re-declared divergently from its persisted pairing marker ` +\n        `(persisted base=\"${prior.base}\" fieldsHash=${prior.fieldsHash}; declared base=\"${next.base}\" fieldsHash=${next.fieldsHash}). ` +\n        `Evolve the marker deliberately, don't redeclare.`,\n      )\n    }\n    return\n  }\n  const { persistSatelliteMarker } = await import('../persisted-schemas/register.js')\n  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next })\n}\n","import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport type { SatelliteSpec } from './types.js'\nimport type { SatelliteRegistry } from './registry.js'\nimport { ensureSatelliteMarker } from './marker.js'\n\n/** Async post-registration: R-S9 marker reconcile + R-S1/R-S5 derivable-schema cross-check. Failures poison, never throw. */\nexport async function postRegister(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec,\n  getDEK: (collectionName: string) => Promise<EnclaveKey>,\n  baseSchema: unknown, registry: SatelliteRegistry,\n): Promise<void> {\n  try {\n    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite))\n  } catch (err) {\n    registry.poison(spec.satellite, (err as Error).message); return\n  }\n  if (baseSchema !== undefined) {\n    try {\n      const { derivePersistedSchema } = await import('../persisted-schemas/derive.js')\n      const envelope = await derivePersistedSchema(baseSchema)\n      const properties = (envelope.jsonSchema as Record<string, unknown> | null)?.['properties'] as Record<string, unknown> | undefined\n      const baseFields: string[] = Object.keys(properties ?? {})\n      const overlap = spec.fields.filter(f => baseFields.includes(f))\n      if (overlap.length > 0) {\n        registry.poison(spec.satellite,\n          `R-S1: satellite \"${spec.satellite}\" fields overlap the base schema: ${overlap.join(', ')} — routing must be unambiguous.`)\n      }\n    } catch { /* non-derivable validator → cross-check unavailable, by design (spec R-S5) */ }\n  }\n}\n"],"mappings":";;;;;;;;;AAYA,eAAsB,sBACpB,OAAmB,WAAmB,MAAqB,KAC5C;AACf,QAAM,OAAsB,EAAE,MAAM,KAAK,MAAM,YAAY,WAAW,KAAK,MAAM,GAAG,QAAQ,KAAK,OAAO;AACxG,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,WAAW,KAAK,WAAW,GAAG;AACjF,QAAM,QAAQ,WAAW;AACzB,MAAI,OAAO;AACT,QAAI,MAAM,SAAS,KAAK,QAAQ,MAAM,eAAe,KAAK,eAAe,MAAM,UAAU,WAAW,KAAK,UAAU,OAAO;AACxH,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,SAAS,gFACd,MAAM,IAAI,gBAAgB,MAAM,UAAU,oBAAoB,KAAK,IAAI,gBAAgB,KAAK,UAAU;AAAA,MAE5H;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,wBAAkC;AAClF,QAAM,uBAAuB,EAAE,OAAO,OAAO,WAAW,gBAAgB,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC7G;;;ACxBA,eAAsB,aACpB,OAAmB,WAAmB,MACtC,QACA,YAAqB,UACN;AACf,MAAI;AACF,UAAM,sBAAsB,OAAO,WAAW,MAAM,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAClF,SAAS,KAAK;AACZ,aAAS,OAAO,KAAK,WAAY,IAAc,OAAO;AAAG;AAAA,EAC3D;AACA,MAAI,eAAe,QAAW;AAC5B,QAAI;AACF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAgC;AAC/E,YAAM,WAAW,MAAM,sBAAsB,UAAU;AACvD,YAAM,aAAc,SAAS,aAAgD,YAAY;AACzF,YAAM,aAAuB,OAAO,KAAK,cAAc,CAAC,CAAC;AACzD,YAAM,UAAU,KAAK,OAAO,OAAO,OAAK,WAAW,SAAS,CAAC,CAAC;AAC9D,UAAI,QAAQ,SAAS,GAAG;AACtB,iBAAS;AAAA,UAAO,KAAK;AAAA,UACnB,oBAAoB,KAAK,SAAS,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAAA,QAAiC;AAAA,MAC9H;AAAA,IACF,QAAQ;AAAA,IAAiF;AAAA,EAC3F;AACF;","names":[]}

package/dist/{public-envelope-BW6OXORV.js → public-envelope-EJLVIFX7.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
   PUBLIC_ENVELOPE_FIELDS,
   resolveSchema
-} from "./chunk-EMIGCR7X.js";
+} from "./chunk-WXSYDNBT.js";
 import {
   PUBLIC_ENVELOPE_RECORD_ID,
   isPublicEnvelope,
@@ -12,9 +12,10 @@ import {
   resolveLocale,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-ML236QKC.js";
-import "./chunk-WIRRPTFH.js";
-import "./chunk-B6PB7JLN.js";
+} from "./chunk-OXCSVM3B.js";
+import "./chunk-YN5IAHN6.js";
+import "./chunk-S7VFUQM2.js";
+import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
   PUBLIC_ENVELOPE_FIELDS,
@@ -28,4 +29,4 @@ export {
   savePublicEnvelope,
   validatePublicEnvelopeInput
 };
-//# sourceMappingURL=public-envelope-BW6OXORV.js.map
+//# sourceMappingURL=public-envelope-EJLVIFX7.js.map

package/dist/public-envelope-EJLVIFX7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/query/index.d.ts

@@ -1,3 +1,4 @@
-export { E as CrossJoinSourceUnknownError, G as CrossJoinTooLargeError, H as DEFAULT_CROSS_JOIN_MAX_ROWS, J as DEFAULT_JOIN_MAX_ROWS, K as DanglingReferenceError, _ as GroupCardinalityError, a0 as IndexRequiredError, a1 as IndexWriteFailureError, a3 as JoinContext, a4 as JoinLeg, a5 as JoinStrategy, a6 as JoinTooLargeError, a7 as JoinableSource, ab as LiveQuery, ac as LiveUpstream, ai as OrderBy, Q as Query, an as QueryPlan, ao as QuerySource, az as ScanBuilder, aA as ScanPageProvider, aK as applyJoins, aL as buildLiveQuery, aM as executePlan, aO as resetJoinWarnings } from '../index-D8I_pyJD.js';
-export { a as Clause, C as CollectionIndexes, d as CrossJoinClause, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from '../predicate-BSAGEyu5.js';
-export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, R as Reducer, k as ReducerOptions, l as avg, m as buildLiveAggregation, n as count, o as groupAndReduce, p as max, q as min, r as reduceRecords, s as resetGroupByWarnings, t as sum } from '../strategy-DSTrsZ8t.js';
+export { aa as AggregateResult, ab as AggregateSpec, ac as Aggregation, ad as AggregationUpstream, f0 as Clause, U as CollectionIndexes, lR as CrossJoinClause, ff as CrossJoinSourceUnknownError, fg as CrossJoinTooLargeError, fl as DEFAULT_CROSS_JOIN_MAX_ROWS, fm as DEFAULT_JOIN_MAX_ROWS, fp as DanglingReferenceError, g1 as FieldClause, g4 as FieldNotQueryableError, g7 as FilterClause, ae as GROUPBY_MAX_CARDINALITY, af as GROUPBY_WARN_CARDINALITY, ge as GroupCardinalityError, gf as GroupClause, ag as GroupedAggregation, ah as GroupedQuery, ai as GroupedQueryN, aj as GroupedRow, ak as GroupedRowN, W as HashIndex, Y as IndexDef, gn as IndexRequiredError, go as IndexWriteFailureError, gu as JoinContext, gv as JoinLeg, gw as JoinStrategy, gx as JoinTooLargeError, gy as JoinableSource, al as LiveAggregation, gR as LiveQuery, gS as LiveUpstream, hz as Operator, hA as OrderBy, ef as Query, i9 as QueryPlan, ia as QuerySource, am as Reducer, an as ReducerBuilder, ao as ReducerOptions, iH as ScanBuilder, iI as ScanPageProvider, kb as applyJoins, ap as avg, aq as buildLiveAggregation, kh as buildLiveQuery, ar as count, ky as evaluateClause, kA as evaluateFieldClause, kC as executePlan, as as groupAndReduce, at as max, au as min, av as moneyMax, aw as moneyMin, ax as moneySum, l9 as readPath, ay as reduceRecords, az as reducerBuilder, aA as resetGroupByWarnings, lg as resetJoinWarnings, aB as sum } from '../index-DjWbxsjb.js';
+import '../subject-index-CyOgGMJL.js';
+import '../index-B9QdHytu.js';
+import '@noy-db/attestation';

package/dist/query/index.js

@@ -7,17 +7,10 @@ import {
   buildLiveQuery,
   executePlan,
   resetJoinWarnings
-} from "../chunk-2GLDA55J.js";
+} from "../chunk-BUAQ7YI3.js";
 import {
   CollectionIndexes
-} from "../chunk-OIF6LZUR.js";
-import {
-  avg,
-  count,
-  max,
-  min,
-  sum
-} from "../chunk-W6EQLGMB.js";
+} from "../chunk-KPZS5QAQ.js";
 import {
   Aggregation,
   GROUPBY_MAX_CARDINALITY,
@@ -25,25 +18,38 @@ import {
   GroupedAggregation,
   GroupedQuery,
   GroupedQueryN,
+  avg,
   buildLiveAggregation,
+  count,
   groupAndReduce,
+  max,
+  min,
+  moneyMax,
+  moneyMin,
+  moneySum,
   reduceRecords,
-  resetGroupByWarnings
-} from "../chunk-5XHKQ56N.js";
+  reducerBuilder,
+  resetGroupByWarnings,
+  sum
+} from "../chunk-DFVUTGT2.js";
 import {
   evaluateClause,
   evaluateFieldClause,
   readPath
-} from "../chunk-TV3YZ35S.js";
+} from "../chunk-IGJCYUT5.js";
+import "../chunk-EOXAAJTY.js";
+import "../chunk-VEAVKDDB.js";
 import {
   CrossJoinSourceUnknownError,
   CrossJoinTooLargeError,
   DanglingReferenceError,
+  FieldNotQueryableError,
   GroupCardinalityError,
   IndexRequiredError,
   IndexWriteFailureError,
   JoinTooLargeError
-} from "../chunk-B6PB7JLN.js";
+} from "../chunk-S7VFUQM2.js";
+import "../chunk-PZ5AY32C.js";
 export {
   Aggregation,
   CollectionIndexes,
@@ -52,6 +58,7 @@ export {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   DEFAULT_JOIN_MAX_ROWS,
   DanglingReferenceError,
+  FieldNotQueryableError,
   GROUPBY_MAX_CARDINALITY,
   GROUPBY_WARN_CARDINALITY,
   GroupCardinalityError,
@@ -74,8 +81,12 @@ export {
   groupAndReduce,
   max,
   min,
+  moneyMax,
+  moneyMin,
+  moneySum,
   readPath,
   reduceRecords,
+  reducerBuilder,
   resetGroupByWarnings,
   resetJoinWarnings,
   sum

package/dist/read-only-facade-CHCKSEPD.js

@@ -0,0 +1,8 @@
+import {
+  ReadOnlyVaultFacade
+} from "./chunk-JK733I5V.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ReadOnlyVaultFacade
+};
+//# sourceMappingURL=read-only-facade-CHCKSEPD.js.map

package/dist/read-only-facade-CHCKSEPD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/register-SBIX7TVV.js

@@ -0,0 +1,23 @@
+import {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+} from "./chunk-WBJIQSLL.js";
+import "./chunk-5I35DOHK.js";
+import "./chunk-T7WSLRAU.js";
+import "./chunk-MCHVVJIA.js";
+import "./chunk-QA2KUPCP.js";
+import "./chunk-2OV5NVE7.js";
+import "./chunk-VEPTFUJY.js";
+import "./chunk-HYR4WZZ3.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-3OPY6MK2.js";
+import "./chunk-YN5IAHN6.js";
+import "./chunk-S7VFUQM2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+};
+//# sourceMappingURL=register-SBIX7TVV.js.map

package/dist/register-SBIX7TVV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}