@noy-db/hub 0.3.0-pre.10 → 0.3.0-pre.12

package/dist/chunk-XJ47GS53.js

@@ -0,0 +1,291 @@
+import {
+  sha256Hex
+} from "./chunk-37WOJQWY.js";
+import {
+  MaterializedViewSourceUnknownError
+} from "./chunk-FZCGIJEJ.js";
+
+// src/with-formula/materialized-views/dependency-analyzer.ts
+function analyzeDependencies(query) {
+  const deps = /* @__PURE__ */ new Set();
+  const plan = query._plan();
+  const ctx = query._joinContext();
+  if (ctx?.leftCollection) {
+    deps.add(ctx.leftCollection);
+  }
+  for (const leg of plan.joins) {
+    deps.add(leg.target);
+  }
+  for (const clause of plan.clauses) {
+    if (clause.type === "crossJoin") {
+      deps.add(clause.target);
+    }
+  }
+  walkClausesForJoins(plan, deps, ctx);
+  return deps;
+}
+function walkClausesForJoins(plan, deps, ctx) {
+  void ctx;
+  for (const clause of plan.clauses) {
+    if (clause.type === "group") {
+    }
+  }
+}
+function summarizeQueryPlan(query) {
+  const plan = query._plan();
+  const ctx = query._joinContext();
+  return JSON.stringify({
+    root: ctx?.leftCollection ?? null,
+    clauses: plan.clauses.map((c) => {
+      if (c.type === "crossJoin") {
+        return {
+          type: "crossJoin",
+          target: c.target,
+          as: c.as,
+          // Inline on: callback: use sentinel — drift detection disabled for this MV
+          onPredicateName: c.onPredicateName ?? (c.on ? "[inline]" : null),
+          maxRows: c.maxRows ?? null
+        };
+      }
+      return c;
+    }),
+    orderBy: plan.orderBy,
+    limit: plan.limit ?? null,
+    offset: plan.offset,
+    joins: plan.joins.map((j) => ({ field: j.field, as: j.as, target: j.target, mode: j.mode }))
+  });
+}
+function summarizeUnionPlan(spec) {
+  const arms = (spec.unionSources ?? []).map((s) => {
+    const joins = s.join?.length ? `[${s.join.map((j) => `${j.field}\u2192${j.as}`).join(";")}]` : "";
+    return `${s.collection}${joins}`;
+  }).join(",");
+  const groupBy = Array.isArray(spec.groupBy) ? [...spec.groupBy].sort().join(",") : typeof spec.groupBy === "string" ? spec.groupBy : "";
+  const aggKeys = spec.aggregate ? Object.keys(spec.aggregate).sort().join(",") : "";
+  const moneyKeys = spec.moneyFields ? Object.keys(spec.moneyFields).sort().join(",") : "";
+  return `union(${arms})|groupBy(${groupBy})|aggregate(${aggKeys})|money(${moneyKeys})`;
+}
+
+// src/with-formula/materialized-views/query-hash.ts
+async function computeQueryHash(mvName, dependencies, queryPlanSummary) {
+  const canonical = JSON.stringify({
+    mvName,
+    dependencies: [...dependencies].sort(),
+    queryPlanSummary
+  });
+  const bytes = new TextEncoder().encode(canonical);
+  return sha256Hex(bytes);
+}
+function canonicalizeQueryPlan(plan) {
+  return JSON.stringify(plan, (_key, value) => {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+      const sorted = {};
+      for (const k of Object.keys(value).sort()) {
+        sorted[k] = value[k];
+      }
+      return sorted;
+    }
+    return value;
+  });
+}
+
+// src/with-formula/materialized-views/registry.ts
+var WHOLE_RECORD = "*";
+var MaterializedViewRegistry = class {
+  /** Keyed by `spec.name`. */
+  _byName = /* @__PURE__ */ new Map();
+  /** Keyed by dependency source-collection → MVs that depend on it. */
+  _bySource = /* @__PURE__ */ new Map();
+  /**
+   * Register an MV. Invokes `spec.query()` once at registration time to
+   * read the plan + join context; the resulting `Query<T>` is discarded
+   * after dependency extraction. `vault.collection(...)` must therefore
+   * be functional by the time this runs — typically wired from
+   * `Vault._initMaterializedViews` after collection bootstrap.
+   *
+   * Throws `MaterializedViewSourceUnknownError` if the analyzer
+   * surfaces a dependency the vault doesn't know about (when a
+   * `knownCollections` checker is supplied).
+   */
+  async register(spec, db, options) {
+    const dbForQuery = spec.predicates ? wrapDbWithPredicates(db, spec.predicates) : db;
+    let dependencies;
+    let queryPlanSummary;
+    let qAny = null;
+    let isQuery = false;
+    if (spec.unionSources) {
+      dependencies = new Set(spec.unionSources.map((s) => s.collection));
+      if (spec.sources) for (const s of spec.sources) dependencies.add(s);
+      queryPlanSummary = summarizeUnionPlan(spec);
+    } else {
+      const q = spec.query(dbForQuery);
+      qAny = q;
+      isQuery = typeof qAny._plan === "function";
+      if (isQuery) {
+        dependencies = analyzeDependencies(qAny);
+        queryPlanSummary = summarizeQueryPlan(qAny);
+        const predicateRefs = extractPredicateRefs(qAny._plan());
+        if (predicateRefs.length > 0) {
+          queryPlanSummary = JSON.stringify({ plan: queryPlanSummary, predicates: predicateRefs });
+        }
+        if (spec.sources) for (const s of spec.sources) dependencies.add(s);
+      } else {
+        if (!spec.sources || spec.sources.length === 0) {
+          throw new Error(
+            `withMaterializedView "${spec.name}": query() returned an aggregate (Aggregation or GroupedAggregation) but no \`sources\` field is declared. The dependency analyzer cannot walk through groupBy().aggregate() back to the source \u2014 declare sources: [...] explicitly.`
+          );
+        }
+        dependencies = new Set(spec.sources);
+        queryPlanSummary = JSON.stringify({ aggregate: true, sources: [...spec.sources].sort() });
+      }
+    }
+    if (options?.knownCollections) {
+      for (const dep of dependencies) {
+        if (!options.knownCollections(dep)) {
+          throw new MaterializedViewSourceUnknownError(spec.name, dep);
+        }
+      }
+    }
+    const outputCollection = spec.output?.collection ?? spec.name;
+    const queryHash = await computeQueryHash(spec.name, dependencies, queryPlanSummary);
+    const partitionClauses = [];
+    const partitionField = spec.output?.partition?.field;
+    if (partitionField !== void 0 && isQuery) {
+      const plan = qAny._plan();
+      for (const clause of plan.clauses) {
+        if (isFieldClauseOnField(clause, partitionField)) partitionClauses.push(clause);
+      }
+    }
+    const grain = spec.unionSources || isQuery ? "record" : "aggregate";
+    const reg = { spec, outputCollection, dependencies, queryHash, partitionClauses, grain };
+    this._byName.set(spec.name, reg);
+    for (const dep of dependencies) {
+      const arr = this._bySource.get(dep);
+      if (arr) arr.push(reg);
+      else this._bySource.set(dep, [reg]);
+    }
+  }
+  /** All MVs that depend on `source`, in registration order. */
+  mvsForSource(source) {
+    return this._bySource.get(source) ?? [];
+  }
+  /** Single MV by name, or `undefined`. */
+  byName(name) {
+    return this._byName.get(name);
+  }
+  /** Iterate over every registered MV. */
+  all() {
+    return [...this._byName.values()];
+  }
+  /**
+   * Graph edges for #638 Task 2: one `'mv'` edge per registered MV — target
+   * = the output collection (a `WHOLE_RECORD` artifact node), sources =
+   * every dependency (also `WHOLE_RECORD` nodes). Same-collection edges
+   * (`dep === outputCollection`) are skipped IFF the MV declares an
+   * `output.partition` discriminator AND the query has a where-clause that
+   * provably excludes the partition value (`partitionDisjoint`) — the SAME
+   * condition the old local DFS used. Grain comes from the registration-time
+   * `RegisteredMV.grain`.
+   */
+  edges() {
+    const out = [];
+    for (const reg of this._byName.values()) {
+      const sources = [];
+      for (const dep of reg.dependencies) {
+        if (dep === reg.outputCollection && partitionDisjoint(reg)) continue;
+        sources.push({ collection: dep, field: WHOLE_RECORD });
+      }
+      if (sources.length === 0) continue;
+      out.push({ target: { collection: reg.outputCollection, field: WHOLE_RECORD }, sources, kind: "mv", grain: reg.grain });
+    }
+    return out;
+  }
+  /**
+   * Cycle detection, delegated to `ViaGraph.assertAcyclic()` (#638 Task 2 —
+   * retires the local DFS). `graph` is the caller's shared per-vault graph,
+   * ALREADY carrying this registry's `edges()` AND `DerivationRegistry`'s
+   * (registered by the caller — see `Vault._initMaterializedViews`, which
+   * runs after `_initDerivations`, so a pure-derivation cycle already threw
+   * `DerivationCycleError` there; any cycle surfacing here necessarily
+   * touches an MV edge). Throws `MaterializedViewCycleError` — SAME class as
+   * before.
+   */
+  validate(graph) {
+    graph.assertAcyclic();
+  }
+};
+function isFieldClauseOnField(clause, field) {
+  return clause.type === "field" && clause.field === field;
+}
+function wrapDbWithPredicates(db, predicates) {
+  const map = /* @__PURE__ */ new Map();
+  for (const [name, decl] of Object.entries(predicates)) {
+    map.set(name, {
+      hash: decl.hash,
+      fn: decl.fn
+    });
+  }
+  return {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    collection(name) {
+      const c = db.collection(name);
+      return new Proxy(c, {
+        get(target, prop, receiver) {
+          if (prop === "query") {
+            return (...args) => {
+              const q = target.query(...args);
+              if (q && typeof q._withPredicates === "function") {
+                return q._withPredicates(map);
+              }
+              return q;
+            };
+          }
+          return Reflect.get(target, prop, receiver);
+        }
+      });
+    }
+  };
+}
+function extractPredicateRefs(plan) {
+  const refs = [];
+  const walk = (clauses) => {
+    for (const c of clauses) {
+      if (c.type === "wherePredicate") {
+        refs.push({ name: c.name, predicateHash: c.predicateHash, ctxHash: c.ctxHash });
+      } else if (c.type === "group") {
+        walk(c.clauses);
+      }
+    }
+  };
+  walk(plan.clauses);
+  refs.sort((a, b) => {
+    if (a.name !== b.name) return a.name < b.name ? -1 : 1;
+    if (a.predicateHash !== b.predicateHash) return a.predicateHash < b.predicateHash ? -1 : 1;
+    return a.ctxHash < b.ctxHash ? -1 : a.ctxHash > b.ctxHash ? 1 : 0;
+  });
+  return refs;
+}
+function partitionDisjoint(reg) {
+  const partition = reg.spec.output?.partition;
+  if (partition === void 0) return false;
+  const value = partition.value;
+  for (const c of reg.partitionClauses) {
+    if (c.op === "==" && c.value !== value) return true;
+    if (c.op === "!=" && c.value === value) return true;
+    if (c.op === "in" && Array.isArray(c.value)) {
+      const list = c.value;
+      if (!list.includes(value)) return true;
+    }
+  }
+  return false;
+}
+
+export {
+  analyzeDependencies,
+  summarizeQueryPlan,
+  computeQueryHash,
+  canonicalizeQueryPlan,
+  MaterializedViewRegistry,
+  wrapDbWithPredicates
+};
+//# sourceMappingURL=chunk-XJ47GS53.js.map

package/dist/chunk-XS6DLN67.js

@@ -0,0 +1,95 @@
+import {
+  base64ToBuffer,
+  decryptBytesWithAAD,
+  encryptBytesWithAAD
+} from "./chunk-37WOJQWY.js";
+import {
+  TamperedError
+} from "./chunk-FZCGIJEJ.js";
+
+// src/kernel/enclave/classify/compare.ts
+var subtle = globalThis.crypto.subtle;
+function ctEqualTags(a, b) {
+  if (a.length !== 32 || b.length !== 32) {
+    throw new Error(
+      `ctEqualTags: tags must be exactly 32 bytes (got ${a.length}/${b.length}) \u2014 caller bug; reduce comparands with blindedEqual first`
+    );
+  }
+  let diff = 0;
+  for (let i = 0; i < 32; i++) diff |= a[i] ^ b[i];
+  return diff === 0;
+}
+async function blindedEqual(a, b) {
+  const ke = await subtle.generateKey({ name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const tagA = new Uint8Array(await subtle.sign("HMAC", ke, a));
+  const tagB = new Uint8Array(await subtle.sign("HMAC", ke, b));
+  return ctEqualTags(tagA, tagB);
+}
+
+// src/kernel/enclave/classify/vdig.ts
+var subtle2 = globalThis.crypto.subtle;
+var VDIG_SALT_DOMAIN = "noydb-classify-vdig";
+function buildVdigAad(collection, recordId, field) {
+  return new TextEncoder().encode(JSON.stringify([VDIG_SALT_DOMAIN, collection, recordId, field]));
+}
+async function deriveVdigSlotKey(cek, collection, field) {
+  const raw = await subtle2.exportKey("raw", cek);
+  const hkdf = await subtle2.importKey("raw", raw, "HKDF", false, ["deriveBits"]);
+  const salt = new TextEncoder().encode(VDIG_SALT_DOMAIN);
+  const info = new TextEncoder().encode(JSON.stringify([VDIG_SALT_DOMAIN, collection, field]));
+  const bits = await subtle2.deriveBits({ name: "HKDF", hash: "SHA-256", salt, info }, hkdf, 256);
+  return subtle2.importKey("raw", bits, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+}
+async function sealVdigPayload(payload, cek, collection, recordId, field) {
+  const key = await deriveVdigSlotKey(cek, collection, field);
+  const { iv, data } = await encryptBytesWithAAD(
+    new TextEncoder().encode(JSON.stringify(payload)),
+    key,
+    buildVdigAad(collection, recordId, field)
+  );
+  return `${iv}:${data}`;
+}
+async function openVdigPayload(blob, cek, collection, recordId, field) {
+  const sep = blob.indexOf(":");
+  if (sep === -1) throw new TamperedError();
+  const ivPart = blob.slice(0, sep);
+  const dataPart = blob.slice(sep + 1);
+  try {
+    base64ToBuffer(ivPart);
+    base64ToBuffer(dataPart);
+  } catch {
+    throw new TamperedError();
+  }
+  const key = await deriveVdigSlotKey(cek, collection, field);
+  const bytes = await decryptBytesWithAAD(
+    ivPart,
+    dataPart,
+    key,
+    buildVdigAad(collection, recordId, field)
+  );
+  return JSON.parse(new TextDecoder().decode(bytes));
+}
+
+// src/kernel/enclave/classify/kofn.ts
+function evaluateKofN(results, min) {
+  if (!Number.isInteger(min) || min < 1 || min > results.length) {
+    throw new Error(
+      `evaluateKofN: min ${min} out of range 1..${results.length} \u2014 caller bug (matchGroup validates bounds up front, before any PBKDF2)`
+    );
+  }
+  let count = 0;
+  for (const r of results) {
+    if (r) count += 1;
+  }
+  return count >= min;
+}
+
+export {
+  ctEqualTags,
+  blindedEqual,
+  deriveVdigSlotKey,
+  sealVdigPayload,
+  openVdigPayload,
+  evaluateKofN
+};
+//# sourceMappingURL=chunk-XS6DLN67.js.map

package/dist/chunk-Y5TWPBNW.js

@@ -0,0 +1,91 @@
+import {
+  canonicalJson,
+  sha256Hex
+} from "./chunk-EIZ4YOG2.js";
+import {
+  PeriodClosedError,
+  ValidationError
+} from "./chunk-FZCGIJEJ.js";
+
+// src/with-audit/periods/periods.ts
+var PERIODS_COLLECTION = "_periods";
+var PERIOD_FREEZES_COLLECTION = "_period_freezes";
+var PERIOD_ARCHIVES_COLLECTION = "_period_archives";
+var PERIOD_TARGET_PURGES_COLLECTION = "_period_target_purges";
+function periodExclusiveUpperBound(endDate) {
+  const ms = Date.parse(endDate);
+  if (Number.isNaN(ms)) throw new ValidationError(`freezePeriod: unparseable period endDate "${endDate}".`);
+  const dateOnly = /^\d{4}-\d{2}-\d{2}$/.test(endDate);
+  return new Date(ms + (dateOnly ? 864e5 : 1)).toISOString();
+}
+async function loadPeriods(adapter, vault, decrypt) {
+  const ids = await adapter.list(vault, PERIODS_COLLECTION);
+  const records = [];
+  for (const id of ids) {
+    const env = await adapter.get(vault, PERIODS_COLLECTION, id);
+    if (env) records.push(await decrypt(env));
+  }
+  records.sort((a, b) => a.closedAt.localeCompare(b.closedAt));
+  return records;
+}
+async function chainAnchor(records) {
+  const last = records[records.length - 1];
+  if (!last) return { priorPeriodHash: "" };
+  const hash = await sha256Hex(canonicalJson(last));
+  return { priorPeriodName: last.name, priorPeriodHash: hash };
+}
+function assertTsWritable(existing, incomingRecord, closedPeriods) {
+  for (const p of closedPeriods) {
+    if (p.kind !== "closed") continue;
+    if (p.dateField) {
+      const checkRecord = (label, r) => {
+        if (!r) return;
+        const v = r[p.dateField];
+        if (typeof v === "string" && v <= p.endDate) {
+          throw new PeriodClosedError(p.name, p.endDate, `${label}[${p.dateField}]=${v}`);
+        }
+      };
+      checkRecord("existing", existing?.record ?? null);
+      checkRecord("incoming", incomingRecord);
+      continue;
+    }
+    const existingTs = existing?.ts ?? null;
+    if (existingTs !== null && existingTs <= p.endDate) {
+      throw new PeriodClosedError(p.name, p.endDate, existingTs);
+    }
+  }
+}
+function validatePeriodName(name, existing) {
+  if (name.length === 0) {
+    throw new ValidationError("Period name cannot be empty.");
+  }
+  if (existing.some((p) => p.name === name)) {
+    throw new ValidationError(`Period "${name}" already exists.`);
+  }
+}
+async function appendPeriodLedgerEntry(ledger, actor, envelope, name, collection = PERIODS_COLLECTION) {
+  if (!ledger) return;
+  const { envelopePayloadHash } = await import("./ledger-UAQKPWNM.js");
+  await ledger.append({
+    op: "put",
+    collection,
+    id: name,
+    version: envelope._v,
+    actor,
+    payloadHash: await envelopePayloadHash(envelope)
+  });
+}
+
+export {
+  PERIODS_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
+  periodExclusiveUpperBound,
+  loadPeriods,
+  chainAnchor,
+  assertTsWritable,
+  validatePeriodName,
+  appendPeriodLedgerEntry
+};
+//# sourceMappingURL=chunk-Y5TWPBNW.js.map