@noy-db/hub 0.3.0-pre.1 → 0.3.0-pre.11

package/dist/chunk-PKHL44ER.js

@@ -1,124 +0,0 @@
-import {
-  DerivationCapExceededError,
-  DerivationOutputShapeError
-} from "./chunk-ZYUC53LT.js";
-
-// src/with-formula/derivations/executor.ts
-var DerivationExecutor = {
-  /**
-   * Run `derive` once, validate output shape against the spec, stamp
-   * `_derivedFrom` onto every output. Returns per-output success or
-   * failure; throws only for shape mismatches (a contract violation).
-   */
-  async run(strategy, source, sourceVersion, strategyHash, ctx) {
-    const outputs = {};
-    let derived;
-    try {
-      derived = await Promise.resolve(strategy.derive(source, ctx));
-    } catch (err) {
-      for (const key of Object.keys(strategy.outputs)) {
-        outputs[key] = {
-          kind: "failed",
-          value: {},
-          ok: false,
-          error: err instanceof Error ? err : new Error(String(err))
-        };
-      }
-      return { outputs, failed: true };
-    }
-    const meta = {
-      source: strategy.source,
-      sourceId: source.id,
-      sourceVersion,
-      derivedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      strategyHash
-    };
-    for (const key of Object.keys(strategy.outputs)) {
-      const outSpec = strategy.outputs[key];
-      if (!outSpec) continue;
-      const value = derived[key];
-      if (outSpec.shape === "array") {
-        if (value === void 0 || value === null) {
-          outputs[key] = { kind: "array", ok: true, entries: [] };
-          continue;
-        }
-        if (!Array.isArray(value)) {
-          throw new DerivationOutputShapeError(
-            key,
-            `shape 'array' expects an array, got ${typeof value}`
-          );
-        }
-        const maxFanout = outSpec.maxFanout ?? 64;
-        if (value.length > maxFanout) {
-          throw new DerivationCapExceededError(key, value.length, maxFanout);
-        }
-        const entries = [];
-        const seenKeys = /* @__PURE__ */ new Set();
-        for (let i = 0; i < value.length; i++) {
-          const row = value[i];
-          if (row === null || typeof row !== "object") {
-            throw new DerivationOutputShapeError(
-              key,
-              `array member at index ${i} must be a non-null object (got ${row === null ? "null" : typeof row})`
-            );
-          }
-          let derivedKey;
-          try {
-            derivedKey = outSpec.key(row);
-          } catch (err) {
-            throw new DerivationOutputShapeError(
-              key,
-              `key extractor threw on array member at index ${i}: ` + (err instanceof Error ? err.message : String(err))
-            );
-          }
-          if (typeof derivedKey !== "string" || derivedKey.length === 0) {
-            throw new DerivationOutputShapeError(
-              key,
-              `key extractor returned ${typeof derivedKey === "string" ? "empty string" : typeof derivedKey} at index ${i}; expected non-empty string`
-            );
-          }
-          if (seenKeys.has(derivedKey)) {
-            throw new DerivationOutputShapeError(
-              key,
-              `duplicate key "${derivedKey}" in array output (index ${i}); each derived row must have a unique key within a single derive() invocation`
-            );
-          }
-          seenKeys.add(derivedKey);
-          entries.push({
-            key: derivedKey,
-            value: { ...row, _derivedFrom: meta }
-          });
-        }
-        outputs[key] = { kind: "array", ok: true, entries };
-        continue;
-      }
-      if (value === void 0 || value === null) {
-        if (outSpec.optional === true) {
-          outputs[key] = { kind: "record", value: {}, ok: true, skipped: true };
-          continue;
-        }
-        throw new DerivationOutputShapeError(
-          key,
-          `expected object, got ${value === void 0 ? "undefined" : "null"}`
-        );
-      }
-      if (typeof value !== "object") {
-        throw new DerivationOutputShapeError(
-          key,
-          `expected object, got ${typeof value}`
-        );
-      }
-      outputs[key] = {
-        kind: "record",
-        value: { ...value, _derivedFrom: meta },
-        ok: true
-      };
-    }
-    return { outputs, failed: false };
-  }
-};
-
-export {
-  DerivationExecutor
-};
-//# sourceMappingURL=chunk-PKHL44ER.js.map

package/dist/chunk-PSMV73A5.js

@@ -1,117 +0,0 @@
-import {
-  buildAccessibleBundle,
-  resolveAccessibleCollections
-} from "./chunk-HCIPRAGS.js";
-import {
-  sha256Hex
-} from "./chunk-5O3AOPDT.js";
-import {
-  NOYDB_FORMAT_VERSION
-} from "./chunk-5TDJ56JE.js";
-import {
-  ReadOnlyError
-} from "./chunk-ZYUC53LT.js";
-
-// src/with-audit/portability/withdraw-accessible.ts
-var FROZEN_SNAPSHOTS_COLLECTION = "_frozen_snapshots";
-var ENC = new TextEncoder();
-function randomId() {
-  const b = globalThis.crypto.getRandomValues(new Uint8Array(12));
-  return Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
-}
-async function freezeSnapshotOnly(vault, collections, opts) {
-  const { name: vaultName, adapter } = vault._introspectState();
-  const closure = [];
-  for (const c of collections) {
-    for (const id of await adapter.list(vaultName, c)) closure.push({ collection: c, id });
-  }
-  const withdrawalId = opts.withdrawalId ?? `wd-${randomId()}`;
-  const snap = {};
-  for (const { collection, id } of closure) {
-    const env = await adapter.get(vaultName, collection, id);
-    if (env) (snap[collection] ??= {})[id] = env;
-  }
-  const frozenAt = (/* @__PURE__ */ new Date()).toISOString();
-  const body = JSON.stringify({ withdrawalId, frozenAt, by: opts.actorUserId, collections: snap });
-  const sha = await sha256Hex(ENC.encode(body));
-  await adapter.put(
-    vaultName,
-    FROZEN_SNAPSHOTS_COLLECTION,
-    withdrawalId,
-    { _noydb: NOYDB_FORMAT_VERSION, _v: 1, _ts: frozenAt, _iv: "", _data: body, _by: opts.actorUserId },
-    0
-  );
-  await vault._getLedgerOrNull()?.append({
-    op: "lifecycle",
-    collection: "",
-    id: "",
-    version: 0,
-    actor: opts.actorUserId,
-    payloadHash: "",
-    reason: `withdrawal-frozen-snapshot:${withdrawalId}:${sha}`
-  });
-  return { withdrawalId, sha256: sha, recordCount: closure.length, frozenAt };
-}
-async function freezeAndDeleteClosure(vault, collections, opts) {
-  const snapshot = opts.disposition === "freeze" ? await freezeSnapshotOnly(vault, collections, {
-    actorUserId: opts.actorUserId,
-    ...opts.withdrawalId ? { withdrawalId: opts.withdrawalId } : {}
-  }) : void 0;
-  const { name: vaultName, adapter } = vault._introspectState();
-  for (const c of collections) {
-    for (const id of await adapter.list(vaultName, c)) {
-      await vault.collection(c).delete(id);
-    }
-  }
-  return snapshot;
-}
-async function withdrawAccessibleData(vault, opts) {
-  const { keyring } = vault._introspectState();
-  const disposition = opts.disposition ?? "delete";
-  if (keyring.role === "owner" || keyring.role === "admin") {
-    throw new ReadOnlyError(
-      "unilateralWithdrawal is the scoped self-service path; an owner/admin should use extractPartition"
-    );
-  }
-  if (keyring.role === "custodian") {
-    throw new ReadOnlyError(
-      "a custodian cannot destructively withdraw/sever; use vault.custody.liberate for an audited ownership claim"
-    );
-  }
-  if (keyring.role === "client" || keyring.role === "viewer") {
-    throw new ReadOnlyError(
-      "read-only role cannot self-serve a destructive withdrawal \u2014 use requestWithdrawal (two-party)"
-    );
-  }
-  const collections = resolveAccessibleCollections(keyring, opts.scope, true);
-  if (!collections || collections.length === 0) {
-    throw new ReadOnlyError(
-      "unilateralWithdrawal requires rw access on the withdrawn collections \u2014 use requestWithdrawal for read-only scope"
-    );
-  }
-  const bundle = await buildAccessibleBundle(vault, collections, opts.reKey);
-  const snapshot = await freezeAndDeleteClosure(vault, collections, {
-    disposition,
-    actorUserId: keyring.userId,
-    ...opts.withdrawalId ? { withdrawalId: opts.withdrawalId } : {}
-  });
-  await vault._getLedgerOrNull()?.append({
-    op: "lifecycle",
-    collection: "",
-    id: "",
-    version: 0,
-    actor: keyring.userId,
-    payloadHash: "",
-    reason: `user-unilateral-withdrawal:${keyring.userId}:${disposition}:${opts.legalBasis}`
-  });
-  return snapshot ? { bundle, snapshot } : { bundle };
-}
-
-export {
-  FROZEN_SNAPSHOTS_COLLECTION,
-  randomId,
-  freezeSnapshotOnly,
-  freezeAndDeleteClosure,
-  withdrawAccessibleData
-};
-//# sourceMappingURL=chunk-PSMV73A5.js.map

package/dist/chunk-Q7SS3IME.js

@@ -1,120 +0,0 @@
-import {
-  sha256Hex
-} from "./chunk-5O3AOPDT.js";
-import {
-  DerivationCycleError
-} from "./chunk-ZYUC53LT.js";
-
-// src/with-formula/derivations/strategy-hash.ts
-async function computeStrategyHash(source, outputKeys, derive, sources) {
-  const canonical = JSON.stringify({
-    source,
-    outputs: [...outputKeys].sort(),
-    derive: derive.toString(),
-    // Declared sibling sources — adding/removing a trigger
-    // collection invalidates cached derived records. Omitted when empty
-    // so strategies without siblings keep their existing hash.
-    ...sources?.length ? { sources: [...sources].sort() } : {}
-  });
-  const bytes = new TextEncoder().encode(canonical);
-  return sha256Hex(bytes);
-}
-
-// src/with-formula/derivations/registry.ts
-var DerivationRegistry = class {
-  _bySource = /* @__PURE__ */ new Map();
-  _byOutput = /* @__PURE__ */ new Map();
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  async register(spec) {
-    const outputKeys = Object.keys(spec.outputs);
-    const strategyHash = await computeStrategyHash(spec.source, outputKeys, spec.derive, spec.sources);
-    const reg = { spec, strategyHash };
-    const fromSource = this._bySource.get(spec.source);
-    if (fromSource) fromSource.push(reg);
-    else this._bySource.set(spec.source, [reg]);
-    for (const extra of spec.sources ?? []) {
-      const fromExtra = this._bySource.get(extra);
-      if (fromExtra) fromExtra.push(reg);
-      else this._bySource.set(extra, [reg]);
-    }
-    for (const t of spec.triggerBy ?? []) {
-      const fromTrigger = this._bySource.get(t.collection);
-      if (fromTrigger) fromTrigger.push(reg);
-      else this._bySource.set(t.collection, [reg]);
-    }
-    if (spec.rollup) {
-      const fromRollup = this._bySource.get(spec.rollup.from);
-      if (fromRollup) fromRollup.push(reg);
-      else this._bySource.set(spec.rollup.from, [reg]);
-    }
-    for (const key of outputKeys) {
-      const output = spec.outputs[key];
-      if (!output) continue;
-      const outputCollection = output.collection;
-      const arr = this._byOutput.get(outputCollection);
-      if (arr) arr.push(reg);
-      else this._byOutput.set(outputCollection, [reg]);
-    }
-  }
-  strategiesForSource(source) {
-    return this._bySource.get(source) ?? [];
-  }
-  strategiesProducingOutput(collection) {
-    return this._byOutput.get(collection) ?? [];
-  }
-  /**
-   * All registered strategies as a flat, deduplicated array.
-   * Each strategy is indexed once per source (not once per output key),
-   * so iterating `_bySource.values()` naturally yields each strategy
-   * exactly once per source — deduplication is handled by flattening
-   * the per-source arrays and collecting into a Set by identity.
-   *
-   * Used by `dumpSchema()` / `describeDerivations()` in the introspection
-   * walker to populate the derivations map.
-   */
-  all() {
-    const seen = /* @__PURE__ */ new Set();
-    for (const strategies of this._bySource.values()) {
-      for (const s of strategies) seen.add(s);
-    }
-    return [...seen];
-  }
-  /**
-   * Cycle detection over the source → output → … graph. Call after all
-   * `register()` calls complete (i.e. at vault open). Throws
-   * `DerivationCycleError` on the first cycle found.
-   */
-  validate() {
-    const visited = /* @__PURE__ */ new Set();
-    const stack = [];
-    const visit = (node) => {
-      if (stack.includes(node)) {
-        const cycle = stack.slice(stack.indexOf(node)).concat(node);
-        throw new DerivationCycleError(cycle);
-      }
-      if (visited.has(node)) return;
-      stack.push(node);
-      const strategies = this._bySource.get(node);
-      if (strategies) {
-        for (const s of strategies) {
-          for (const key of Object.keys(s.spec.outputs)) {
-            const output = s.spec.outputs[key];
-            if (!output) continue;
-            if (output.shape === "record" && output.collection === s.spec.source && output.denorm !== void 0) {
-              continue;
-            }
-            visit(output.collection);
-          }
-        }
-      }
-      stack.pop();
-      visited.add(node);
-    };
-    for (const src of this._bySource.keys()) visit(src);
-  }
-};
-
-export {
-  DerivationRegistry
-};
-//# sourceMappingURL=chunk-Q7SS3IME.js.map

package/dist/chunk-Q7SS3IME.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-formula/derivations/strategy-hash.ts","../src/with-formula/derivations/registry.ts"],"sourcesContent":["/**\n * Deterministic hash of a derivation strategy's \"shape\": source\n * collection, declared sibling sources, output keys, derive function\n * source. Used to detect\n * strategy drift: a record whose `_derivedFrom.strategyHash` doesn't\n * match the current strategy is considered stale.\n *\n * Web Crypto SHA-256 — no extra deps.\n */\nimport { sha256Hex } from '../../kernel/enclave/index.js'\n\nexport async function computeStrategyHash(\n  source: string,\n  outputKeys: readonly string[],\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  derive: (...args: any[]) => any,\n  sources?: ReadonlyArray<string>,\n): Promise<string> {\n  const canonical = JSON.stringify({\n    source,\n    outputs: [...outputKeys].sort(),\n    derive: derive.toString(),\n    // Declared sibling sources — adding/removing a trigger\n    // collection invalidates cached derived records. Omitted when empty\n    // so strategies without siblings keep their existing hash.\n    ...(sources?.length ? { sources: [...sources].sort() } : {}),\n  })\n  const bytes = new TextEncoder().encode(canonical)\n  return sha256Hex(bytes)\n}\n","import { DerivationCycleError } from '../../kernel/errors.js'\nimport { computeStrategyHash } from './strategy-hash.js'\nimport type { DerivationStrategy } from './types.js'\n\ninterface RegisteredStrategy {\n  // Type-erased to allow the registry to hold heterogeneous strategies.\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  spec: DerivationStrategy<any, any>\n  strategyHash: string\n}\n\n/**\n * Vault-internal registry of derivation strategies. Owned by `Vault`;\n * not exported.\n *\n * @internal\n */\nexport class DerivationRegistry {\n  private readonly _bySource = new Map<string, RegisteredStrategy[]>()\n  private readonly _byOutput = new Map<string, RegisteredStrategy[]>()\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  async register(spec: DerivationStrategy<any, any>): Promise<void> {\n    const outputKeys = Object.keys(spec.outputs)\n    const strategyHash = await computeStrategyHash(spec.source, outputKeys, spec.derive, spec.sources)\n    const reg: RegisteredStrategy = { spec, strategyHash }\n\n    const fromSource = this._bySource.get(spec.source)\n    if (fromSource) fromSource.push(reg)\n    else this._bySource.set(spec.source, [reg])\n\n    // Declared sibling sources index the SAME `reg` under each\n    // extra collection so `strategiesForSource(extra)` returns it and a\n    // sibling write re-fires the derivation. Sibling keys also enter\n    // `_bySource`, so `validate()`'s cycle DFS walks them automatically.\n    for (const extra of spec.sources ?? []) {\n      const fromExtra = this._bySource.get(extra)\n      if (fromExtra) fromExtra.push(reg)\n      else this._bySource.set(extra, [reg])\n    }\n\n    // FK triggers index the SAME `reg` under each parent collection so\n    // a parent write re-fires the derivation (fanned out to matching source\n    // records in `dispatchDerivations`). Like sources[], these keys enter\n    // `_bySource` so the cycle DFS walks the trigger→output edge.\n    for (const t of spec.triggerBy ?? []) {\n      const fromTrigger = this._bySource.get(t.collection)\n      if (fromTrigger) fromTrigger.push(reg)\n      else this._bySource.set(t.collection, [reg])\n    }\n\n    // Rollup: a write to the child `from` collection recomputes\n    // the parent (= spec.source = into) at id child[key]. Index under `from`\n    // so a child write fires it; spec.source (into) is already indexed above,\n    // so a parent write also recomputes its own aggregate (covers the\n    // parent-created-after-children case). The from→into edge enters the cycle\n    // DFS automatically.\n    if (spec.rollup) {\n      const fromRollup = this._bySource.get(spec.rollup.from)\n      if (fromRollup) fromRollup.push(reg)\n      else this._bySource.set(spec.rollup.from, [reg])\n    }\n\n    for (const key of outputKeys) {\n      const output = spec.outputs[key]\n      if (!output) continue\n      const outputCollection = output.collection\n      const arr = this._byOutput.get(outputCollection)\n      if (arr) arr.push(reg)\n      else this._byOutput.set(outputCollection, [reg])\n    }\n  }\n\n  strategiesForSource(source: string): ReadonlyArray<RegisteredStrategy> {\n    return this._bySource.get(source) ?? []\n  }\n\n  strategiesProducingOutput(collection: string): ReadonlyArray<RegisteredStrategy> {\n    return this._byOutput.get(collection) ?? []\n  }\n\n  /**\n   * All registered strategies as a flat, deduplicated array.\n   * Each strategy is indexed once per source (not once per output key),\n   * so iterating `_bySource.values()` naturally yields each strategy\n   * exactly once per source — deduplication is handled by flattening\n   * the per-source arrays and collecting into a Set by identity.\n   *\n   * Used by `dumpSchema()` / `describeDerivations()` in the introspection\n   * walker to populate the derivations map.\n   */\n  all(): ReadonlyArray<RegisteredStrategy> {\n    const seen = new Set<RegisteredStrategy>()\n    for (const strategies of this._bySource.values()) {\n      for (const s of strategies) seen.add(s)\n    }\n    return [...seen]\n  }\n\n  /**\n   * Cycle detection over the source → output → … graph. Call after all\n   * `register()` calls complete (i.e. at vault open). Throws\n   * `DerivationCycleError` on the first cycle found.\n   */\n  validate(): void {\n    const visited = new Set<string>()\n    const stack: string[] = []\n\n    const visit = (node: string): void => {\n      if (stack.includes(node)) {\n        const cycle = stack.slice(stack.indexOf(node)).concat(node)\n        throw new DerivationCycleError(cycle)\n      }\n      if (visited.has(node)) return\n      stack.push(node)\n      const strategies = this._bySource.get(node)\n      if (strategies) {\n        for (const s of strategies) {\n          for (const key of Object.keys(s.spec.outputs)) {\n            const output = s.spec.outputs[key]\n            if (!output) continue\n            // Self-write reverse-denorm: an output back to its own\n            // source is intentional, not an infinite cycle — the value-equality\n            // guard in dispatch terminates it. Skip this edge so it isn't\n            // flagged. (Self-write outputs are required to declare `denorm`.)\n            if (\n              output.shape === 'record' &&\n              output.collection === s.spec.source &&\n              output.denorm !== undefined\n            ) {\n              continue\n            }\n            visit(output.collection)\n          }\n        }\n      }\n      stack.pop()\n      visited.add(node)\n    }\n\n    for (const src of this._bySource.keys()) visit(src)\n  }\n}\n"],"mappings":";;;;;;;;AAWA,eAAsB,oBACpB,QACA,YAEA,QACA,SACiB;AACjB,QAAM,YAAY,KAAK,UAAU;AAAA,IAC/B;AAAA,IACA,SAAS,CAAC,GAAG,UAAU,EAAE,KAAK;AAAA,IAC9B,QAAQ,OAAO,SAAS;AAAA;AAAA;AAAA;AAAA,IAIxB,GAAI,SAAS,SAAS,EAAE,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;AAAA,EAC5D,CAAC;AACD,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,SAAS;AAChD,SAAO,UAAU,KAAK;AACxB;;;ACZO,IAAM,qBAAN,MAAyB;AAAA,EACb,YAAY,oBAAI,IAAkC;AAAA,EAClD,YAAY,oBAAI,IAAkC;AAAA;AAAA,EAGnE,MAAM,SAAS,MAAmD;AAChE,UAAM,aAAa,OAAO,KAAK,KAAK,OAAO;AAC3C,UAAM,eAAe,MAAM,oBAAoB,KAAK,QAAQ,YAAY,KAAK,QAAQ,KAAK,OAAO;AACjG,UAAM,MAA0B,EAAE,MAAM,aAAa;AAErD,UAAM,aAAa,KAAK,UAAU,IAAI,KAAK,MAAM;AACjD,QAAI,WAAY,YAAW,KAAK,GAAG;AAAA,QAC9B,MAAK,UAAU,IAAI,KAAK,QAAQ,CAAC,GAAG,CAAC;AAM1C,eAAW,SAAS,KAAK,WAAW,CAAC,GAAG;AACtC,YAAM,YAAY,KAAK,UAAU,IAAI,KAAK;AAC1C,UAAI,UAAW,WAAU,KAAK,GAAG;AAAA,UAC5B,MAAK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;AAAA,IACtC;AAMA,eAAW,KAAK,KAAK,aAAa,CAAC,GAAG;AACpC,YAAM,cAAc,KAAK,UAAU,IAAI,EAAE,UAAU;AACnD,UAAI,YAAa,aAAY,KAAK,GAAG;AAAA,UAChC,MAAK,UAAU,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC;AAAA,IAC7C;AAQA,QAAI,KAAK,QAAQ;AACf,YAAM,aAAa,KAAK,UAAU,IAAI,KAAK,OAAO,IAAI;AACtD,UAAI,WAAY,YAAW,KAAK,GAAG;AAAA,UAC9B,MAAK,UAAU,IAAI,KAAK,OAAO,MAAM,CAAC,GAAG,CAAC;AAAA,IACjD;AAEA,eAAW,OAAO,YAAY;AAC5B,YAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,UAAI,CAAC,OAAQ;AACb,YAAM,mBAAmB,OAAO;AAChC,YAAM,MAAM,KAAK,UAAU,IAAI,gBAAgB;AAC/C,UAAI,IAAK,KAAI,KAAK,GAAG;AAAA,UAChB,MAAK,UAAU,IAAI,kBAAkB,CAAC,GAAG,CAAC;AAAA,IACjD;AAAA,EACF;AAAA,EAEA,oBAAoB,QAAmD;AACrE,WAAO,KAAK,UAAU,IAAI,MAAM,KAAK,CAAC;AAAA,EACxC;AAAA,EAEA,0BAA0B,YAAuD;AAC/E,WAAO,KAAK,UAAU,IAAI,UAAU,KAAK,CAAC;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAyC;AACvC,UAAM,OAAO,oBAAI,IAAwB;AACzC,eAAW,cAAc,KAAK,UAAU,OAAO,GAAG;AAChD,iBAAW,KAAK,WAAY,MAAK,IAAI,CAAC;AAAA,IACxC;AACA,WAAO,CAAC,GAAG,IAAI;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAiB;AACf,UAAM,UAAU,oBAAI,IAAY;AAChC,UAAM,QAAkB,CAAC;AAEzB,UAAM,QAAQ,CAAC,SAAuB;AACpC,UAAI,MAAM,SAAS,IAAI,GAAG;AACxB,cAAM,QAAQ,MAAM,MAAM,MAAM,QAAQ,IAAI,CAAC,EAAE,OAAO,IAAI;AAC1D,cAAM,IAAI,qBAAqB,KAAK;AAAA,MACtC;AACA,UAAI,QAAQ,IAAI,IAAI,EAAG;AACvB,YAAM,KAAK,IAAI;AACf,YAAM,aAAa,KAAK,UAAU,IAAI,IAAI;AAC1C,UAAI,YAAY;AACd,mBAAW,KAAK,YAAY;AAC1B,qBAAW,OAAO,OAAO,KAAK,EAAE,KAAK,OAAO,GAAG;AAC7C,kBAAM,SAAS,EAAE,KAAK,QAAQ,GAAG;AACjC,gBAAI,CAAC,OAAQ;AAKb,gBACE,OAAO,UAAU,YACjB,OAAO,eAAe,EAAE,KAAK,UAC7B,OAAO,WAAW,QAClB;AACA;AAAA,YACF;AACA,kBAAM,OAAO,UAAU;AAAA,UACzB;AAAA,QACF;AAAA,MACF;AACA,YAAM,IAAI;AACV,cAAQ,IAAI,IAAI;AAAA,IAClB;AAEA,eAAW,OAAO,KAAK,UAAU,KAAK,EAAG,OAAM,GAAG;AAAA,EACpD;AACF;","names":[]}

package/dist/chunk-QHJW5EXU.js

@@ -1,54 +0,0 @@
-import {
-  QuiesceTimeoutError
-} from "./chunk-ZYUC53LT.js";
-
-// src/port/by/types.ts
-function isQuorum(writers, generation, excludeWriterId) {
-  return writers.filter((w) => w.writerId !== excludeWriterId).every((w) => w.quiescedAtVersion === generation);
-}
-async function runDrainBarrier(provider, o, run) {
-  await provider.setFence(o.vault, { currentSchemaVersion: o.generation, fenceState: "draining" });
-  await o.onFlush();
-  const deadline = o.now() + o.quiesceTimeoutMs;
-  const seeded = await provider.reachableWriters(o.vault, { staleMs: o.staleMs, now: o.now() });
-  if (!isQuorum(seeded, o.generation, o.writerId)) {
-    await new Promise((resolve, reject) => {
-      let settled = false;
-      const finish = (fn) => {
-        if (!settled) {
-          settled = true;
-          unsub();
-          fn();
-        }
-      };
-      const unsub = provider.observePresence(o.vault, (writers) => {
-        if (isQuorum(writers, o.generation, o.writerId)) finish(resolve);
-      });
-      const tick = async () => {
-        if (settled) return;
-        if (o.now() >= deadline) {
-          finish(
-            () => reject(
-              new QuiesceTimeoutError(
-                `Cutover of vault "${o.vault}" to generation ${o.generation} timed out after ${o.quiesceTimeoutMs}ms waiting for active writers to quiesce.`
-              )
-            )
-          );
-          return;
-        }
-        if (o.onPoll) await o.onPoll();
-        const w = await provider.reachableWriters(o.vault, { staleMs: o.staleMs, now: o.now() });
-        if (isQuorum(w, o.generation, o.writerId)) finish(resolve);
-        else setTimeout(() => void tick(), 25);
-      };
-      void tick();
-    });
-  }
-  await run();
-}
-
-export {
-  isQuorum,
-  runDrainBarrier
-};
-//# sourceMappingURL=chunk-QHJW5EXU.js.map

package/dist/chunk-RUEKROOS.js

@@ -1,80 +0,0 @@
-import {
-  FieldFrozenError,
-  InvariantError
-} from "./chunk-ZYUC53LT.js";
-
-// src/with-audit/guards/executor.ts
-var GuardExecutor = {
-  /**
-   * Compare existing vs incoming for each `frozenFields.fields` entry
-   * when `frozenFields.when(existing)` is true. Throws
-   * `FieldFrozenError` listing every changed frozen field.
-   *
-   * @param skipFields — field names that are schema-owned computed fields.
-   *   These are excluded from the comparison because `incoming` carries the
-   *   raw user input (computed fields not yet evaluated), so comparing
-   *   `existing[field]` vs `incoming[field]` would always look like a
-   *   change even when the computed result is unchanged.
-   */
-  async checkFrozenFields(guard, id, existing, incoming, skipFields) {
-    const ff = guard.frozenFields;
-    if (!ff) return;
-    if (existing === null) return;
-    if (!ff.when(existing)) return;
-    const changed = [];
-    for (const f of ff.fields) {
-      if (skipFields?.has(String(f))) continue;
-      if (existing[f] !== incoming[f]) {
-        if (!deepEqual(existing[f], incoming[f])) changed.push(String(f));
-      }
-    }
-    if (changed.length > 0) {
-      throw new FieldFrozenError(guard.collection, id, changed);
-    }
-  },
-  /**
-   * Run a single guard's invariant over its slice of the change-set.
-   * Any throw is converted to `InvariantError` unless it already is one.
-   */
-  async runInvariant(guard, changes, ctx) {
-    const amendment = guard.amendment;
-    if (!amendment) return;
-    try {
-      await amendment.invariant(changes, ctx);
-    } catch (err) {
-      if (err instanceof InvariantError) throw err;
-      throw new InvariantError(
-        err instanceof Error ? err.message : `invariant violated: ${String(err)}`
-      );
-    }
-  }
-};
-function deepEqual(a, b) {
-  if (a === b) return true;
-  if (a === null || b === null) return a === b;
-  if (typeof a !== typeof b) return false;
-  if (typeof a !== "object") return a === b;
-  if (Array.isArray(a) !== Array.isArray(b)) return false;
-  if (Array.isArray(a)) {
-    const aa = a;
-    const bb = b;
-    if (aa.length !== bb.length) return false;
-    for (let i = 0; i < aa.length; i++) if (!deepEqual(aa[i], bb[i])) return false;
-    return true;
-  }
-  const ao = a;
-  const bo = b;
-  const ak = Object.keys(ao);
-  const bk = Object.keys(bo);
-  if (ak.length !== bk.length) return false;
-  for (const k of ak) {
-    if (!Object.prototype.hasOwnProperty.call(bo, k)) return false;
-    if (!deepEqual(ao[k], bo[k])) return false;
-  }
-  return true;
-}
-
-export {
-  GuardExecutor
-};
-//# sourceMappingURL=chunk-RUEKROOS.js.map

package/dist/chunk-RUIMKQTA.js

@@ -1,23 +0,0 @@
-// src/with-audit/guards/read-only-facade.ts
-var ReadOnlyVaultFacade = class {
-  _vault;
-  _layer;
-  constructor(vault, layer = "read") {
-    this._vault = vault;
-    this._layer = layer;
-  }
-  collection(name) {
-    const c = this._vault.collection(name);
-    const layer = this._layer;
-    return {
-      get: (id) => c.get(id, { _layer: layer }),
-      list: () => c.list({ _layer: layer }),
-      query: () => c.query()
-    };
-  }
-};
-
-export {
-  ReadOnlyVaultFacade
-};
-//# sourceMappingURL=chunk-RUIMKQTA.js.map

package/dist/chunk-RUIMKQTA.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-audit/guards/read-only-facade.ts"],"sourcesContent":["import type { Vault } from '../../kernel/vault.js'\nimport type { Query } from '../../kernel/query/builder.js'\nimport type { Layer } from '../../with-shape/i18n/policy.js'\nimport type { ReadOnlyVaultFacade as ReadOnlyVaultFacadeContract } from './types.js'\n\n/**\n * Minimal read-only wrapper over a `Vault`. Used as `ctx.vault` inside\n * guard / derivation callbacks so they can fetch related records without\n * acquiring any write capability.\n *\n * The `layer` tags every `get`/`list` read with the resolution layer it\n * belongs to. A guard-seeded facade reads at `'guard'`, a\n * derivation-seeded one at `'derivation'`, so i18nText / dictKey fields\n * resolve under that layer's `onMissing` policy instead of the `'read'`\n * policy — e.g. a guard read can `substitute` a missing locale (lenient\n * default) while the same field `throw`s on an ordinary app read.\n *\n * `query()` is left untagged: the query/aggregate pipeline reads raw\n * `{locale}` maps (no resolution call site), so a layer tag there would be\n * inert. Routing `mv`/`join` resolution through the pipeline is tracked\n * separately.\n */\nexport class ReadOnlyVaultFacade implements ReadOnlyVaultFacadeContract {\n  private readonly _vault: Vault\n  private readonly _layer: Layer\n\n  constructor(vault: Vault, layer: Layer = 'read') {\n    this._vault = vault\n    this._layer = layer\n  }\n\n  collection<T = unknown>(name: string): {\n    get(id: string): Promise<T | null>\n    list(): Promise<T[]>\n    query(): Query<T>\n  } {\n    const c = this._vault.collection<T>(name)\n    const layer = this._layer\n    return {\n      get: (id: string) => c.get(id, { _layer: layer }),\n      list: () => c.list({ _layer: layer }),\n      query: () => c.query(),\n    }\n  }\n}\n"],"mappings":";AAsBO,IAAM,sBAAN,MAAiE;AAAA,EACrD;AAAA,EACA;AAAA,EAEjB,YAAY,OAAc,QAAe,QAAQ;AAC/C,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,WAAwB,MAItB;AACA,UAAM,IAAI,KAAK,OAAO,WAAc,IAAI;AACxC,UAAM,QAAQ,KAAK;AACnB,WAAO;AAAA,MACL,KAAK,CAAC,OAAe,EAAE,IAAI,IAAI,EAAE,QAAQ,MAAM,CAAC;AAAA,MAChD,MAAM,MAAM,EAAE,KAAK,EAAE,QAAQ,MAAM,CAAC;AAAA,MACpC,OAAO,MAAM,EAAE,MAAM;AAAA,IACvB;AAAA,EACF;AACF;","names":[]}