@noy-db/hub 0.3.0-pre.5 → 0.3.0-pre.6

package/dist/{chunk-P5WXDYMD.js → chunk-5GQE5IDB.js}

@@ -1,13 +1,13 @@
 import {
   moneyRuntime,
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 import {
   applyI18nLocale
-} from "./chunk-4K3MQ5S3.js";
+} from "./chunk-BASCPHNM.js";
 import {
   GroupCardinalityError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-lookup/aggregate/reducers.ts
 function count(opts) {
@@ -510,4 +510,4 @@ export {
   groupAndReduce,
   GroupedAggregation
 };
-//# sourceMappingURL=chunk-P5WXDYMD.js.map
+//# sourceMappingURL=chunk-5GQE5IDB.js.map

package/dist/{chunk-TLJOJBZD.js → chunk-5HZULLHE.js}

@@ -2,7 +2,7 @@ import {
   DecryptionError,
   InvalidKeyError,
   TamperedError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/enclave/crypto.ts
 var PBKDF2_ITERATIONS = 6e5;
@@ -401,4 +401,4 @@ export {
   bufferToBase64,
   base64ToBuffer
 };
-//# sourceMappingURL=chunk-TLJOJBZD.js.map
+//# sourceMappingURL=chunk-5HZULLHE.js.map

package/dist/chunk-5JQMX2EH.js

@@ -0,0 +1,50 @@
+import {
+  SatelliteConfigError
+} from "./chunk-OJ64XMPJ.js";
+
+// src/with-shape/satellites/validate.ts
+function validateSatelliteDeclaration(input) {
+  if (input.baseIsSatellite) {
+    throw new SatelliteConfigError(
+      `R-S3: "${input.satellite}" declares satelliteOf "${input.satelliteOf}", which is itself a satellite \u2014 no satellite-of-satellite chains.`
+    );
+  }
+  if (input.crdtMode) {
+    throw new SatelliteConfigError(
+      `R-S8: crdtMode is refused on either member of a satellite pair in v1 (revert cannot compensate a merge).`
+    );
+  }
+  if (!input.fields || input.fields.length === 0) {
+    throw new SatelliteConfigError(`R-S5: satellite "${input.satellite}" must declare a non-empty fields list.`);
+  }
+  if (input.fields.includes("id")) {
+    throw new SatelliteConfigError(`R-S5: fields must not contain the shared key "id".`);
+  }
+  if (input.joined !== void 0 && (input.joined === input.satellite || input.joined === input.satelliteOf)) {
+    throw new SatelliteConfigError(`R-S5: joined name "${input.joined}" collides with a pair member.`);
+  }
+  if (input.joinedCollidesWithCollection) {
+    throw new SatelliteConfigError(`R-S5: joined name "${input.joined}" collides with an already-declared collection.`);
+  }
+  return Object.freeze({
+    base: input.satelliteOf,
+    satellite: input.satellite,
+    fields: Object.freeze([...input.fields]),
+    joined: input.joined
+  });
+}
+function hashFields(fields) {
+  const s = [...fields].sort().join("");
+  let h = 2166136261;
+  for (let i = 0; i < s.length; i++) {
+    h ^= s.charCodeAt(i);
+    h = Math.imul(h, 16777619) >>> 0;
+  }
+  return h.toString(16);
+}
+
+export {
+  validateSatelliteDeclaration,
+  hashFields
+};
+//# sourceMappingURL=chunk-5JQMX2EH.js.map

package/dist/chunk-5JQMX2EH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/satellites/validate.ts"],"sourcesContent":["import { SatelliteConfigError } from '../../kernel/errors.js'\nimport type { SatelliteSpec } from './types.js'\n\nexport interface SatelliteDeclarationInput {\n  readonly satellite: string\n  readonly satelliteOf: string\n  readonly fields: readonly string[] | undefined\n  readonly joined?: string | undefined\n  /** True when the named base is itself registered as a satellite (R-S3). */\n  readonly baseIsSatellite: boolean\n  /** True when the declaring collection (or its base) sets crdtMode (R-S8). */\n  readonly crdtMode: boolean\n  /** True when `joined` names an already-declared plain (non-pair) collection (R-S5). */\n  readonly joinedCollidesWithCollection: boolean\n}\n\n/** Sync declaration refusals R-S3/R-S5/R-S8. Async cross-checks live in registry.ts. */\nexport function validateSatelliteDeclaration(input: SatelliteDeclarationInput): SatelliteSpec {\n  if (input.baseIsSatellite) {\n    throw new SatelliteConfigError(\n      `R-S3: \"${input.satellite}\" declares satelliteOf \"${input.satelliteOf}\", which is itself a satellite — no satellite-of-satellite chains.`,\n    )\n  }\n  if (input.crdtMode) {\n    throw new SatelliteConfigError(\n      `R-S8: crdtMode is refused on either member of a satellite pair in v1 (revert cannot compensate a merge).`,\n    )\n  }\n  if (!input.fields || input.fields.length === 0) {\n    throw new SatelliteConfigError(`R-S5: satellite \"${input.satellite}\" must declare a non-empty fields list.`)\n  }\n  if (input.fields.includes('id')) {\n    throw new SatelliteConfigError(`R-S5: fields must not contain the shared key \"id\".`)\n  }\n  if (input.joined !== undefined && (input.joined === input.satellite || input.joined === input.satelliteOf)) {\n    throw new SatelliteConfigError(`R-S5: joined name \"${input.joined}\" collides with a pair member.`)\n  }\n  if (input.joinedCollidesWithCollection) {\n    throw new SatelliteConfigError(`R-S5: joined name \"${input.joined}\" collides with an already-declared collection.`)\n  }\n  return Object.freeze({\n    base: input.satelliteOf,\n    satellite: input.satellite,\n    fields: Object.freeze([...input.fields]),\n    joined: input.joined,\n  })\n}\n\n/** Order-insensitive stable hash of the fields list (FNV-1a over the sorted, joined names). */\nexport function hashFields(fields: readonly string[]): string {\n  // '\\x1f' (unit separator) — NOT '' — joins the sorted names: an empty\n  // delimiter collapses ['ab'] and ['a', 'b'] onto the same hash.\n  const s = [...fields].sort().join('\\x1f')\n  let h = 0x811c9dc5\n  for (let i = 0; i < s.length; i++) {\n    h ^= s.charCodeAt(i)\n    h = Math.imul(h, 0x01000193) >>> 0\n  }\n  return h.toString(16)\n}\n"],"mappings":";;;;;AAiBO,SAAS,6BAA6B,OAAiD;AAC5F,MAAI,MAAM,iBAAiB;AACzB,UAAM,IAAI;AAAA,MACR,UAAU,MAAM,SAAS,2BAA2B,MAAM,WAAW;AAAA,IACvE;AAAA,EACF;AACA,MAAI,MAAM,UAAU;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,UAAM,IAAI,qBAAqB,oBAAoB,MAAM,SAAS,yCAAyC;AAAA,EAC7G;AACA,MAAI,MAAM,OAAO,SAAS,IAAI,GAAG;AAC/B,UAAM,IAAI,qBAAqB,oDAAoD;AAAA,EACrF;AACA,MAAI,MAAM,WAAW,WAAc,MAAM,WAAW,MAAM,aAAa,MAAM,WAAW,MAAM,cAAc;AAC1G,UAAM,IAAI,qBAAqB,sBAAsB,MAAM,MAAM,gCAAgC;AAAA,EACnG;AACA,MAAI,MAAM,8BAA8B;AACtC,UAAM,IAAI,qBAAqB,sBAAsB,MAAM,MAAM,iDAAiD;AAAA,EACpH;AACA,SAAO,OAAO,OAAO;AAAA,IACnB,MAAM,MAAM;AAAA,IACZ,WAAW,MAAM;AAAA,IACjB,QAAQ,OAAO,OAAO,CAAC,GAAG,MAAM,MAAM,CAAC;AAAA,IACvC,QAAQ,MAAM;AAAA,EAChB,CAAC;AACH;AAGO,SAAS,WAAW,QAAmC;AAG5D,QAAM,IAAI,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,GAAM;AACxC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,EAAE,WAAW,CAAC;AACnB,QAAI,KAAK,KAAK,GAAG,QAAU,MAAM;AAAA,EACnC;AACA,SAAO,EAAE,SAAS,EAAE;AACtB;","names":[]}

package/dist/{chunk-PGFY7IRW.js → chunk-5UOPIPZC.js}

@@ -2,10 +2,10 @@ import {
   base64ToBuffer,
   decryptBytesWithAAD,
   encryptBytesWithAAD
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   TamperedError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/enclave/classify/compare.ts
 var subtle = globalThis.crypto.subtle;
@@ -92,4 +92,4 @@ export {
   openVdigPayload,
   evaluateKofN
 };
-//# sourceMappingURL=chunk-PGFY7IRW.js.map
+//# sourceMappingURL=chunk-5UOPIPZC.js.map

package/dist/{chunk-6HNKCKFZ.js → chunk-65FW3ALF.js}

@@ -1,7 +1,7 @@
 import {
   ATTESTATIONS_COLLECTION,
   loadOrCreateSigner
-} from "./chunk-H5XRIJX3.js";
+} from "./chunk-WAW4VFS7.js";
 import {
   generateULID
 } from "./chunk-ZJADGNYF.js";
@@ -10,10 +10,10 @@ import {
 } from "./chunk-LN22XH4B.js";
 import {
   encrypt
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   AttestationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-audit/attestation/issue.ts
 import {
@@ -56,4 +56,4 @@ async function issueAttestationCore(ctx, args) {
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=chunk-6HNKCKFZ.js.map
+//# sourceMappingURL=chunk-65FW3ALF.js.map

package/dist/{chunk-ZKF6HH7V.js → chunk-6P5AJ2ZS.js}

@@ -1,6 +1,6 @@
 import {
   NoydbError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/money-runtime.ts
 var engine = null;
@@ -117,4 +117,4 @@ export {
   evaluateClause,
   hasFnClause
 };
-//# sourceMappingURL=chunk-ZKF6HH7V.js.map
+//# sourceMappingURL=chunk-6P5AJ2ZS.js.map

package/dist/{chunk-QNTEDPWP.js → chunk-6PALJTC2.js}

@@ -1,10 +1,10 @@
 import {
   evaluateClause,
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 import {
   IndexRequiredError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-lookup/indexing/persisted-indexes.ts
 var IDX_PREFIX = "_idx/";
@@ -427,4 +427,4 @@ export {
   PersistedCollectionIndex,
   LazyQuery
 };
-//# sourceMappingURL=chunk-QNTEDPWP.js.map
+//# sourceMappingURL=chunk-6PALJTC2.js.map

package/dist/{chunk-GBTUANXF.js → chunk-6Z435B6N.js}

@@ -1,21 +1,21 @@
 import {
   reducerBuilder
-} from "./chunk-P5WXDYMD.js";
+} from "./chunk-5GQE5IDB.js";
 import {
   evaluateClause,
   hasFnClause,
   moneyRuntime,
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 import {
   applyI18nLocale
-} from "./chunk-4K3MQ5S3.js";
+} from "./chunk-BASCPHNM.js";
 import {
   CrossJoinSourceUnknownError,
   CrossJoinTooLargeError,
   DanglingReferenceError,
   JoinTooLargeError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/query/join.ts
 var DEFAULT_JOIN_MAX_ROWS = 5e4;
@@ -1653,4 +1653,4 @@ export {
   executePlan,
   ScanBuilder
 };
-//# sourceMappingURL=chunk-GBTUANXF.js.map
+//# sourceMappingURL=chunk-6Z435B6N.js.map

package/dist/{chunk-Z3FZC5GV.js → chunk-73C4RPMX.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-LN22XH4B.js";
 import {
   decrypt
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   ReadOnlyAtInstantError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-commit/history/history.ts
 var HISTORY_COLLECTION = "_history";
@@ -277,4 +277,4 @@ export {
   VaultInstant,
   CollectionInstant
 };
-//# sourceMappingURL=chunk-Z3FZC5GV.js.map
+//# sourceMappingURL=chunk-73C4RPMX.js.map

package/dist/{chunk-VMJ5URU7.js → chunk-7A7LTSJR.js}

@@ -1,10 +1,10 @@
 import {
   assertTierAccess,
   dekKey
-} from "./chunk-BMQOH7MM.js";
+} from "./chunk-26FSVNBL.js";
 import {
   rewrapBodyToDek
-} from "./chunk-OVO2RZAE.js";
+} from "./chunk-7AGLCOYE.js";
 import {
   NOYDB_FORMAT_VERSION
 } from "./chunk-LN22XH4B.js";
@@ -12,11 +12,11 @@ import {
   decrypt,
   encrypt,
   unwrapCek
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   TierDemoteDeniedError,
   TiersNotEnabledError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-audit/tiers/active.ts
 function withTiers() {
@@ -272,4 +272,4 @@ export {
   demote,
   classifySealedShred
 };
-//# sourceMappingURL=chunk-VMJ5URU7.js.map
+//# sourceMappingURL=chunk-7A7LTSJR.js.map

package/dist/{chunk-OVO2RZAE.js → chunk-7AGLCOYE.js}

@@ -1,22 +1,22 @@
 import {
   isTombstone
 } from "./chunk-QKVILR7N.js";
-import {
-  NOYDB_FORMAT_VERSION,
-  SealedHandle
-} from "./chunk-LN22XH4B.js";
 import {
   blindedEqual,
   openVdigPayload,
   sealVdigPayload
-} from "./chunk-PGFY7IRW.js";
+} from "./chunk-5UOPIPZC.js";
 import {
   dualReadSealedSlot,
   parseSealedSlot
-} from "./chunk-TCIUO62Z.js";
+} from "./chunk-UWZ7O4NR.js";
+import {
+  NOYDB_FORMAT_VERSION,
+  SealedHandle
+} from "./chunk-LN22XH4B.js";
 import {
   mintBidxTag
-} from "./chunk-UOEWDCUX.js";
+} from "./chunk-VFQOE76I.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -35,7 +35,7 @@ import {
   generateSalt,
   unwrapCek,
   wrapCek
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   ClassifiedConfigError,
   ClassifiedRotationError,
@@ -44,7 +44,7 @@ import {
   SchemaValidationError,
   TamperedError,
   ValidationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/enclave/record-keys/lifecycle.ts
 async function resolveStableCek(deps, id) {
@@ -762,4 +762,4 @@ export {
   hasPerRecordKey,
   envelopeBodyForHash
 };
-//# sourceMappingURL=chunk-OVO2RZAE.js.map
+//# sourceMappingURL=chunk-7AGLCOYE.js.map

package/dist/{chunk-XYYW64LB.js → chunk-7CZ6YXMO.js}

@@ -1,7 +1,7 @@
 import {
   DerivationCapExceededError,
   DerivationOutputShapeError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-formula/derivations/executor.ts
 var DerivationExecutor = {
@@ -121,4 +121,4 @@ var DerivationExecutor = {
 export {
   DerivationExecutor
 };
-//# sourceMappingURL=chunk-XYYW64LB.js.map
+//# sourceMappingURL=chunk-7CZ6YXMO.js.map

package/dist/{chunk-RDHAGBEB.js → chunk-7KTL4RHZ.js}

@@ -1,9 +1,9 @@
 import {
   sha256Hex
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   DerivationCycleError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-formula/derivations/strategy-hash.ts
 async function computeStrategyHash(source, outputKeys, derive, sources) {
@@ -117,4 +117,4 @@ var DerivationRegistry = class {
 export {
   DerivationRegistry
 };
-//# sourceMappingURL=chunk-RDHAGBEB.js.map
+//# sourceMappingURL=chunk-7KTL4RHZ.js.map

package/dist/{chunk-4K3MQ5S3.js → chunk-BASCPHNM.js}

@@ -2,7 +2,7 @@ import {
   LocaleNotSpecifiedError,
   MissingTranslationError,
   ScriptViolationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-shape/i18n/policy.ts
 function resolvePolicy(onMissing, layer) {
@@ -377,4 +377,4 @@ export {
   applyI18nLocale,
   stripI18nFilled
 };
-//# sourceMappingURL=chunk-4K3MQ5S3.js.map
+//# sourceMappingURL=chunk-BASCPHNM.js.map

package/dist/{chunk-TL7QR5T6.js → chunk-BYS45GOJ.js}

@@ -1,12 +1,12 @@
 import {
   openEnvelopeJson
-} from "./chunk-OVO2RZAE.js";
+} from "./chunk-7AGLCOYE.js";
 import {
   NOYDB_FORMAT_VERSION
 } from "./chunk-LN22XH4B.js";
 import {
   encrypt
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 
 // src/with-shape/persisted-schemas/storage.ts
 var SCHEMAS_COLLECTION = "_schemas";
@@ -46,4 +46,4 @@ export {
   loadPersistedSchema,
   savePersistedSchema
 };
-//# sourceMappingURL=chunk-TL7QR5T6.js.map
+//# sourceMappingURL=chunk-BYS45GOJ.js.map

package/dist/{chunk-P2LDXRGP.js → chunk-C2ZKWL37.js}

@@ -1,6 +1,6 @@
 import {
   writePod
-} from "./chunk-EWR7HL3K.js";
+} from "./chunk-C57J6AWN.js";
 
 // src/with-audit/portability/export-accessible.ts
 function resolveAccessibleCollections(keyring, scope, writableOnly = false) {
@@ -42,4 +42,4 @@ export {
   buildAccessibleBundle,
   exportAccessibleData
 };
-//# sourceMappingURL=chunk-P2LDXRGP.js.map
+//# sourceMappingURL=chunk-C2ZKWL37.js.map

package/dist/{chunk-BKGIWGCX.js → chunk-C4NOLA5X.js}

@@ -1,6 +1,6 @@
 import {
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 
 // src/with-lookup/indexing/eager-indexes.ts
 var CollectionIndexes = class {
@@ -129,4 +129,4 @@ function removeFromIndex(idx, id, record) {
 export {
   CollectionIndexes
 };
-//# sourceMappingURL=chunk-BKGIWGCX.js.map
+//# sourceMappingURL=chunk-C4NOLA5X.js.map

package/dist/{chunk-EWR7HL3K.js → chunk-C57J6AWN.js}

@@ -1,14 +1,14 @@
 import {
   pickLocale
-} from "./chunk-3QRQOBS7.js";
+} from "./chunk-I7GTYPWF.js";
 import {
   sha256Hex
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   BundleIntegrityError,
   BundleSealMismatchError,
   ValidationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-pod/format.ts
 var NOYDB_BUNDLE_MAGIC = new Uint8Array([78, 68, 66, 49]);
@@ -608,6 +608,30 @@ function applySliceFilters(dumpJson, opts) {
   }
   return JSON.stringify(backup);
 }
+async function applySatelliteLivenessFilter(vault, dumpJson) {
+  const backup = JSON.parse(dumpJson);
+  if (!backup.collections || typeof backup.collections !== "object") return dumpJson;
+  if (typeof vault._introspectState !== "function") return dumpJson;
+  const { adapter, name, getDEK } = vault._introspectState();
+  const { liveBaseIdSetsForBundle } = await import("./dead-filter-MGWMNRO2.js");
+  const satLive = await liveBaseIdSetsForBundle(adapter, name, Object.keys(backup.collections), getDEK);
+  if (satLive.size === 0) return dumpJson;
+  const next = {};
+  for (const [collName, records] of Object.entries(backup.collections)) {
+    const live = satLive.get(collName);
+    if (!live) {
+      next[collName] = records;
+      continue;
+    }
+    const kept = {};
+    for (const [id, env] of Object.entries(records)) {
+      if (live.has(id)) kept[id] = env;
+    }
+    next[collName] = kept;
+  }
+  backup.collections = next;
+  return JSON.stringify(backup);
+}
 async function applyPlaintextFilters(vault, dumpJson, opts) {
   if (opts.where === void 0 && opts.tierAtMost === void 0) {
     return dumpJson;
@@ -674,7 +698,8 @@ async function writePod(vault, opts = {}) {
   const autoUnlockMode = validateAutoUnlockOptions(opts, normalizedAutoUnlock);
   const handle = await vault.getBundleHandle();
   const dumpJson = await vault.dump();
-  const rekeyed = await applyRecipientRewrap(vault, dumpJson, opts);
+  const satelliteFiltered = await applySatelliteLivenessFilter(vault, dumpJson);
+  const rekeyed = await applyRecipientRewrap(vault, satelliteFiltered, opts);
   const plainFiltered = await applyPlaintextFilters(vault, rekeyed, opts);
   const filtered = applySliceFilters(plainFiltered, opts);
   const bodyJsonStr = normalizedAutoUnlock === null ? filtered : JSON.stringify(await buildAutoUnlockWrapper(filtered, normalizedAutoUnlock));
@@ -795,4 +820,4 @@ export {
   readPod,
   readNoydbBundle
 };
-//# sourceMappingURL=chunk-EWR7HL3K.js.map
+//# sourceMappingURL=chunk-C57J6AWN.js.map