@noy-db/hub 0.3.0-pre.10 → 0.3.0-pre.12

package/dist/chunk-NUEQU36L.js

@@ -1,392 +0,0 @@
-import {
-  envelopePayloadHash
-} from "./chunk-UF362QVH.js";
-import {
-  NOYDB_FORMAT_VERSION
-} from "./chunk-YN5IAHN6.js";
-import {
-  DictKeyMissingError,
-  PermissionDeniedError
-} from "./chunk-S7VFUQM2.js";
-
-// src/via/lookup/handle.ts
-function isDeleteMarker(envelope) {
-  return envelope._del === true;
-}
-var DICT_COLLECTION_PREFIX = "_dict_";
-function dictCollectionName(dictionaryName) {
-  return `${DICT_COLLECTION_PREFIX}${dictionaryName}`;
-}
-var LookupHandle = class {
-  constructor(adapter, compartmentName, dictionaryName, keyring, reservedEnvelopes, encrypted, ledger, options, findAndUpdateReferences, emitter, buildDeleteMarker, onDirty, onRecordMutated, checkReferencesOnDelete) {
-    this.adapter = adapter;
-    this.compartmentName = compartmentName;
-    this.dictionaryName = dictionaryName;
-    this.keyring = keyring;
-    this.reservedEnvelopes = reservedEnvelopes;
-    this.encrypted = encrypted;
-    this.ledger = ledger;
-    this.options = options;
-    this.findAndUpdateReferences = findAndUpdateReferences;
-    this.emitter = emitter;
-    this.buildDeleteMarker = buildDeleteMarker;
-    this.onDirty = onDirty;
-    this.onRecordMutated = onRecordMutated;
-    this.checkReferencesOnDelete = checkReferencesOnDelete;
-    this.collName = dictCollectionName(dictionaryName);
-  }
-  adapter;
-  compartmentName;
-  dictionaryName;
-  keyring;
-  reservedEnvelopes;
-  encrypted;
-  ledger;
-  options;
-  findAndUpdateReferences;
-  emitter;
-  buildDeleteMarker;
-  onDirty;
-  onRecordMutated;
-  checkReferencesOnDelete;
-  collName;
-  /**
-   * Synchronous write-through cache for dict-join support.
-   * Populated on every `put()`, `delete()`, and `rename()`. The snapshot
-   * is built from this cache by `snapshotEntries()` — the query executor
-   * calls this synchronously inside `.toArray()`.
-   *
-   * `null` means "not yet initialized" — callers should use `list()`
-   * to warm the cache before using dict joins on pre-existing data.
-   */
-  _syncCache = /* @__PURE__ */ new Map();
-  /**
-   * Return all cached entries as `{ key, labels, ...labels }` records —
-   * usable synchronously by the join executor's `snapshot()` call.
-   * Returns an empty array when the cache has never been populated.
-   */
-  snapshotEntries() {
-    return Array.from(this._syncCache.values()).map((e) => ({
-      key: e.key,
-      labels: e.labels,
-      ...e.labels
-    }));
-  }
-  // ─── Access checks ────────────────────────────────────────────────
-  requireWriteAccess() {
-    const minRole = this.options.writableBy ?? "admin";
-    const roleRank = {
-      client: 1,
-      viewer: 2,
-      operator: 3,
-      admin: 4,
-      owner: 5
-    };
-    const callerRank = roleRank[this.keyring.role] ?? 0;
-    const requiredRank = roleRank[minRole] ?? 4;
-    if (callerRank < requiredRank) {
-      throw new PermissionDeniedError(
-        `Dictionary "${this.dictionaryName}" writes require "${minRole}" role or above. Current role: "${this.keyring.role}".`
-      );
-    }
-  }
-  // ─── Internal helpers ─────────────────────────────────────────────
-  async encryptEntry(entry, version) {
-    if (!this.encrypted) {
-      return {
-        _noydb: NOYDB_FORMAT_VERSION,
-        _v: version,
-        _ts: (/* @__PURE__ */ new Date()).toISOString(),
-        _iv: "",
-        _data: JSON.stringify(entry),
-        _by: this.keyring.userId
-      };
-    }
-    const envelope = await this.reservedEnvelopes.encrypt(this.collName, JSON.stringify(entry), version);
-    return { ...envelope, _by: this.keyring.userId };
-  }
-  async decryptEntry(envelope) {
-    if (!this.encrypted) {
-      return JSON.parse(envelope._data);
-    }
-    const json = await this.reservedEnvelopes.decrypt(this.collName, envelope);
-    return JSON.parse(json);
-  }
-  /** @internal #650 Task 4 — re-read `key`'s CURRENT adapter truth into `_syncCache` (delete the
-   *  cache entry when the key is now gone). Called by `Vault._invalidateSyncApplied` after a
-   *  reserved-lookup row applies via sync, so an already-warmed snapshot/membership/altIndex read
-   *  never sees a stale verdict for a pulled vocabulary edit — the same invalidation a local
-   *  put()/delete()/rename() already triggers via `_syncCache.set`/`delete` above. */
-  async _refreshSyncCache(key) {
-    const envelope = await this.adapter.get(this.compartmentName, this.collName, key);
-    if (!envelope || isDeleteMarker(envelope)) {
-      this._syncCache.delete(key);
-      return;
-    }
-    this._syncCache.set(key, await this.decryptEntry(envelope));
-  }
-  // ─── Public API ───────────────────────────────────────────────────
-  /**
-   * Add or overwrite a single dictionary entry.
-   *
-   * @param key    The stable key to store (e.g. `'paid'`).
-   * @param labels Locale → label map (e.g. `{ en: 'Paid', th: 'ชำระแล้ว' }`).
-   */
-  async put(key, labels) {
-    this.requireWriteAccess();
-    const entry = { key, labels };
-    const existing = await this.adapter.get(
-      this.compartmentName,
-      this.collName,
-      key
-    );
-    const version = existing ? existing._v + 1 : 1;
-    const envelope = await this.encryptEntry(entry, version);
-    await this.adapter.put(
-      this.compartmentName,
-      this.collName,
-      key,
-      envelope,
-      existing ? existing._v : void 0
-    );
-    this._syncCache.set(key, entry);
-    await this.onDirty?.(this.collName, key, "put", version);
-    this.emitter.emit("change", {
-      vault: this.compartmentName,
-      collection: this.collName,
-      id: key,
-      action: "put"
-    });
-    await this.onRecordMutated?.(this.collName, key, "put", version);
-    if (this.ledger) {
-      await this.ledger.append({
-        op: "put",
-        collection: this.collName,
-        id: key,
-        version,
-        actor: this.keyring.userId,
-        //  — must be the real envelope hash so
-        // vault.verifyBackupIntegrity()'s data-cross-check matches.
-        payloadHash: await envelopePayloadHash(envelope)
-      });
-    }
-  }
-  /**
-   * Batch-add or overwrite multiple dictionary entries in one call.
-   *
-   * @param entries  `{ key: { locale: label } }` map.
-   */
-  async putAll(entries) {
-    this.requireWriteAccess();
-    for (const [key, labels] of Object.entries(entries)) {
-      await this.put(key, labels);
-    }
-  }
-  /**
-   * Load the label map for a single key.
-   *
-   * @returns The label map, or `null` if the key doesn't exist.
-   */
-  async get(key) {
-    const envelope = await this.adapter.get(
-      this.compartmentName,
-      this.collName,
-      key
-    );
-    if (!envelope || isDeleteMarker(envelope)) return null;
-    const entry = await this.decryptEntry(envelope);
-    return entry.labels;
-  }
-  /**
-   * Delete a dictionary key.
-   *
-   * Default mode is `'strict'` — throws `DictKeyInUseError` if any
-   * registered collection has a record referencing this key. Pass
-   * `{ mode: 'warn' }` to skip the check (dev-mode cleanup only).
-   *
-   * Under sync, deletion writes a version-ordered delete-marker row rather than removing the
-   * adapter key outright (#647 fix wave 1) — markers accumulate over time; GC is future work,
-   * acceptable for vocabulary-scale data.
-   */
-  async delete(key, opts = {}) {
-    this.requireWriteAccess();
-    const existing = await this.adapter.get(
-      this.compartmentName,
-      this.collName,
-      key
-    );
-    if (!existing || isDeleteMarker(existing)) {
-      throw new DictKeyMissingError(this.dictionaryName, key);
-    }
-    const mode = opts.mode ?? "strict";
-    if (mode === "strict") {
-      await this.checkReferencesOnDelete?.(key);
-    }
-    const nextVersion = existing._v + 1;
-    if (this.onDirty) {
-      await this.adapter.put(this.compartmentName, this.collName, key, this.buildDeleteMarker(nextVersion, this.keyring.userId));
-    } else {
-      await this.adapter.delete(this.compartmentName, this.collName, key);
-    }
-    this._syncCache.delete(key);
-    await this.onDirty?.(this.collName, key, "put", nextVersion);
-    this.emitter.emit("change", {
-      vault: this.compartmentName,
-      collection: this.collName,
-      id: key,
-      action: "delete"
-    });
-    await this.onRecordMutated?.(this.collName, key, "delete", nextVersion);
-    if (this.ledger) {
-      await this.ledger.append({
-        op: "delete",
-        collection: this.collName,
-        id: key,
-        version: existing._v,
-        actor: this.keyring.userId,
-        //  — for delete the prior envelope is what was just
-        // removed; we hash it so the chain captures intent. The
-        // verifyBackupIntegrity data-cross-check skips delete
-        // entries entirely (the live record is gone), but the
-        // chain still benefits from a stable non-empty hash.
-        payloadHash: await envelopePayloadHash(existing)
-      });
-    }
-  }
-  /**
-   * Rename a dictionary key — the only sanctioned mass-mutation path.
-   *
-   * Atomically:
-   * 1. Adds the new key with the same labels as the old key.
-   * 2. Updates every registered record that stores the old key to
-   *    store the new key instead.
-   * 3. Deletes the old key.
-   * 4. Appends a single ledger entry recording the rename.
-   *
-   * Respects ACL: throws `PermissionDeniedError` before any mutation
-   * if the caller can't write. The cascade is best-effort atomic
-   * within this call — no two-phase commit across adapter calls.
-   *
-   * Cascade-on-delete is NOT supported. Use `rename()` when you need
-   * to change a key that records reference.
-   */
-  async rename(oldKey, newKey) {
-    this.requireWriteAccess();
-    const existing = await this.adapter.get(
-      this.compartmentName,
-      this.collName,
-      oldKey
-    );
-    if (!existing || isDeleteMarker(existing)) {
-      throw new DictKeyMissingError(this.dictionaryName, oldKey);
-    }
-    const oldEntry = await this.decryptEntry(existing);
-    const newEntry = { key: newKey, labels: oldEntry.labels };
-    const newEnvelope = await this.encryptEntry(newEntry, 1);
-    await this.adapter.put(
-      this.compartmentName,
-      this.collName,
-      newKey,
-      newEnvelope
-    );
-    this._syncCache.set(newKey, newEntry);
-    if (this.findAndUpdateReferences) {
-      await this.findAndUpdateReferences(this.dictionaryName, oldKey, newKey);
-    }
-    const oldKeyNextVersion = existing._v + 1;
-    if (this.onDirty) {
-      await this.adapter.put(this.compartmentName, this.collName, oldKey, this.buildDeleteMarker(oldKeyNextVersion, this.keyring.userId));
-    } else {
-      await this.adapter.delete(this.compartmentName, this.collName, oldKey);
-    }
-    this._syncCache.delete(oldKey);
-    await this.onDirty?.(this.collName, oldKey, "put", oldKeyNextVersion);
-    this.emitter.emit("change", {
-      vault: this.compartmentName,
-      collection: this.collName,
-      id: oldKey,
-      action: "delete"
-    });
-    await this.onRecordMutated?.(this.collName, oldKey, "delete", oldKeyNextVersion);
-    await this.onDirty?.(this.collName, newKey, "put", 1);
-    this.emitter.emit("change", {
-      vault: this.compartmentName,
-      collection: this.collName,
-      id: newKey,
-      action: "put"
-    });
-    await this.onRecordMutated?.(this.collName, newKey, "put", 1);
-    if (this.ledger) {
-      await this.ledger.append({
-        op: "delete",
-        collection: this.collName,
-        id: oldKey,
-        version: existing._v,
-        actor: this.keyring.userId,
-        payloadHash: await envelopePayloadHash(existing)
-      });
-      await this.ledger.append({
-        op: "put",
-        collection: this.collName,
-        id: newKey,
-        version: 1,
-        actor: this.keyring.userId,
-        payloadHash: await envelopePayloadHash(newEnvelope)
-      });
-    }
-  }
-  /**
-   * List all entries in this dictionary.
-   *
-   * @returns Array of `{ key, labels }` objects.
-   */
-  async list() {
-    const keys = await this.adapter.list(this.compartmentName, this.collName);
-    const entries = [];
-    for (const key of keys) {
-      const envelope = await this.adapter.get(
-        this.compartmentName,
-        this.collName,
-        key
-      );
-      if (!envelope || isDeleteMarker(envelope)) {
-        this._syncCache.delete(key);
-        continue;
-      }
-      const entry = await this.decryptEntry(envelope);
-      entries.push(entry);
-      this._syncCache.set(key, entry);
-    }
-    return entries;
-  }
-  /**
-   * Resolve a key to its label for the given locale.
-   *
-   * Used by the collection's locale-aware read path to populate
-   * `<field>Label` virtual fields. Returns `undefined` when the
-   * key doesn't exist or has no label for the requested locale
-   * (after exhausting the fallback chain).
-   */
-  async resolveLabel(key, locale, fallback) {
-    const labels = await this.get(key);
-    if (!labels) return void 0;
-    if (labels[locale] !== void 0) return labels[locale];
-    const chain = Array.isArray(fallback) ? fallback : fallback ? [fallback] : [];
-    for (const fb of chain) {
-      if (fb === "any") {
-        const any = Object.values(labels)[0];
-        if (any !== void 0) return any;
-      } else if (labels[fb] !== void 0) {
-        return labels[fb];
-      }
-    }
-    return void 0;
-  }
-};
-
-export {
-  DICT_COLLECTION_PREFIX,
-  dictCollectionName,
-  LookupHandle
-};
-//# sourceMappingURL=chunk-NUEQU36L.js.map

package/dist/chunk-O45M6LDB.js

@@ -1,38 +0,0 @@
-import {
-  NoydbError
-} from "./chunk-S7VFUQM2.js";
-
-// src/with-formula/computed/index.ts
-var ComputedFieldError = class extends NoydbError {
-  constructor(field, id, cause) {
-    super(
-      "COMPUTED_FIELD",
-      `computed field "${field}" threw for record "${id}": ` + (cause instanceof Error ? cause.message : String(cause))
-    );
-    this.field = field;
-    this.id = id;
-    this.cause = cause;
-    this.name = "ComputedFieldError";
-  }
-  field;
-  id;
-  cause;
-};
-function evalComputedFields(record, computed, id) {
-  const out = { ...record };
-  for (const [field, entry] of Object.entries(computed)) {
-    const fn = typeof entry === "function" ? entry : entry.fn;
-    try {
-      out[field] = fn(out);
-    } catch (cause) {
-      throw new ComputedFieldError(field, id, cause);
-    }
-  }
-  return out;
-}
-
-export {
-  ComputedFieldError,
-  evalComputedFields
-};
-//# sourceMappingURL=chunk-O45M6LDB.js.map

package/dist/chunk-OBKWYKYC.js

@@ -1,117 +0,0 @@
-import {
-  buildAccessibleBundle,
-  resolveAccessibleCollections
-} from "./chunk-OT76OZL6.js";
-import {
-  sha256Hex
-} from "./chunk-3OPY6MK2.js";
-import {
-  NOYDB_FORMAT_VERSION
-} from "./chunk-YN5IAHN6.js";
-import {
-  ReadOnlyError
-} from "./chunk-S7VFUQM2.js";
-
-// src/with-audit/portability/withdraw-accessible.ts
-var FROZEN_SNAPSHOTS_COLLECTION = "_frozen_snapshots";
-var ENC = new TextEncoder();
-function randomId() {
-  const b = globalThis.crypto.getRandomValues(new Uint8Array(12));
-  return Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
-}
-async function freezeSnapshotOnly(vault, collections, opts) {
-  const { name: vaultName, adapter } = vault._introspectState();
-  const closure = [];
-  for (const c of collections) {
-    for (const id of await adapter.list(vaultName, c)) closure.push({ collection: c, id });
-  }
-  const withdrawalId = opts.withdrawalId ?? `wd-${randomId()}`;
-  const snap = {};
-  for (const { collection, id } of closure) {
-    const env = await adapter.get(vaultName, collection, id);
-    if (env) (snap[collection] ??= {})[id] = env;
-  }
-  const frozenAt = (/* @__PURE__ */ new Date()).toISOString();
-  const body = JSON.stringify({ withdrawalId, frozenAt, by: opts.actorUserId, collections: snap });
-  const sha = await sha256Hex(ENC.encode(body));
-  await adapter.put(
-    vaultName,
-    FROZEN_SNAPSHOTS_COLLECTION,
-    withdrawalId,
-    { _noydb: NOYDB_FORMAT_VERSION, _v: 1, _ts: frozenAt, _iv: "", _data: body, _by: opts.actorUserId },
-    0
-  );
-  await vault._getLedgerOrNull()?.append({
-    op: "lifecycle",
-    collection: "",
-    id: "",
-    version: 0,
-    actor: opts.actorUserId,
-    payloadHash: "",
-    reason: `withdrawal-frozen-snapshot:${withdrawalId}:${sha}`
-  });
-  return { withdrawalId, sha256: sha, recordCount: closure.length, frozenAt };
-}
-async function freezeAndDeleteClosure(vault, collections, opts) {
-  const snapshot = opts.disposition === "freeze" ? await freezeSnapshotOnly(vault, collections, {
-    actorUserId: opts.actorUserId,
-    ...opts.withdrawalId ? { withdrawalId: opts.withdrawalId } : {}
-  }) : void 0;
-  const { name: vaultName, adapter } = vault._introspectState();
-  for (const c of collections) {
-    for (const id of await adapter.list(vaultName, c)) {
-      await vault.collection(c).delete(id);
-    }
-  }
-  return snapshot;
-}
-async function withdrawAccessibleData(vault, opts) {
-  const { keyring } = vault._introspectState();
-  const disposition = opts.disposition ?? "delete";
-  if (keyring.role === "owner" || keyring.role === "admin") {
-    throw new ReadOnlyError(
-      "unilateralWithdrawal is the scoped self-service path; an owner/admin should use extractPartition"
-    );
-  }
-  if (keyring.role === "custodian") {
-    throw new ReadOnlyError(
-      "a custodian cannot destructively withdraw/sever; use vault.custody.liberate for an audited ownership claim"
-    );
-  }
-  if (keyring.role === "client" || keyring.role === "viewer") {
-    throw new ReadOnlyError(
-      "read-only role cannot self-serve a destructive withdrawal \u2014 use requestWithdrawal (two-party)"
-    );
-  }
-  const collections = resolveAccessibleCollections(keyring, opts.scope, true);
-  if (!collections || collections.length === 0) {
-    throw new ReadOnlyError(
-      "unilateralWithdrawal requires rw access on the withdrawn collections \u2014 use requestWithdrawal for read-only scope"
-    );
-  }
-  const bundle = await buildAccessibleBundle(vault, collections, opts.reKey);
-  const snapshot = await freezeAndDeleteClosure(vault, collections, {
-    disposition,
-    actorUserId: keyring.userId,
-    ...opts.withdrawalId ? { withdrawalId: opts.withdrawalId } : {}
-  });
-  await vault._getLedgerOrNull()?.append({
-    op: "lifecycle",
-    collection: "",
-    id: "",
-    version: 0,
-    actor: keyring.userId,
-    payloadHash: "",
-    reason: `user-unilateral-withdrawal:${keyring.userId}:${disposition}:${opts.legalBasis}`
-  });
-  return snapshot ? { bundle, snapshot } : { bundle };
-}
-
-export {
-  FROZEN_SNAPSHOTS_COLLECTION,
-  randomId,
-  freezeSnapshotOnly,
-  freezeAndDeleteClosure,
-  withdrawAccessibleData
-};
-//# sourceMappingURL=chunk-OBKWYKYC.js.map