@noy-db/hub 0.3.0-pre.7 → 0.3.0-pre.9

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   checkGate,
   describeGate,
   mergePolicy
-} from "./chunk-UJJJPKJO.js";
+} from "./chunk-YBFOBRTO.js";
 import {
   Collection,
   ELEVATION_AUDIT_COLLECTION,
@@ -16,29 +16,32 @@ import {
   RefRegistry,
   RefScopeError,
   Vault,
+  buildLookupSnapshot,
   createNoydb,
   describeAllUsersAuth,
   describeAuthConfig,
   describeUserAuth,
   diagramAuthConfig,
   isRefArray,
+  isViaFieldSpec,
   memoryStore,
   ref,
   refArray,
+  via,
   withArchive
-} from "./chunk-5K7KZMXG.js";
+} from "./chunk-4C4WBS4V.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "./chunk-NO53W6O5.js";
+} from "./chunk-X66MXMR5.js";
 import {
   DELEGATIONS_COLLECTION,
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-U5IJHUHZ.js";
+} from "./chunk-A4MAD6PO.js";
 import "./chunk-TQ3REHVF.js";
 import {
   DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
@@ -51,137 +54,139 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "./chunk-IEKK2XI4.js";
+} from "./chunk-5SAZMBW7.js";
 import {
   UserApi
-} from "./chunk-VFG5YXWM.js";
+} from "./chunk-7IZQTCTR.js";
 import {
   persistSchemaIfNeeded
-} from "./chunk-7AERMJP6.js";
+} from "./chunk-2UQ4RMHV.js";
 import {
   LinkEndpointError
-} from "./chunk-AZPGB4OD.js";
+} from "./chunk-LEOXZY36.js";
 import {
   LinkIntegrityError,
   isLinkCollectionName
-} from "./chunk-V76PHWLE.js";
-import "./chunk-5JQMX2EH.js";
+} from "./chunk-PEDZFFKW.js";
+import "./chunk-ICV32FPK.js";
 import {
   ComputedFieldError,
   evalComputedFields
-} from "./chunk-VK6OC22R.js";
+} from "./chunk-KWLD2D75.js";
 import {
   WithdrawalRequestError,
   approveWithdrawal,
   listWithdrawalRequests,
   rejectWithdrawal,
   requestWithdrawal
-} from "./chunk-HV3VNAYI.js";
-import "./chunk-WRLPV6SI.js";
+} from "./chunk-OV4CMJGR.js";
+import "./chunk-CTSFKDGA.js";
 import {
   NO_SEARCH,
   tokenize,
   withSearch
-} from "./chunk-CP3GUIAN.js";
+} from "./chunk-FGOGS7CE.js";
 import {
   derivePersistedSchema,
   isZodSchema
-} from "./chunk-55LSDABW.js";
+} from "./chunk-HBTT7YQX.js";
 import "./chunk-GYGLAVCX.js";
 import {
   withCargo
-} from "./chunk-K6WHZBCO.js";
+} from "./chunk-KBBWY46Y.js";
 import {
   CustodyApi,
   NO_CARGO,
   NO_CUSTODY,
   withCustody
-} from "./chunk-RUWEHFRB.js";
+} from "./chunk-42KVY3OC.js";
 import {
   DEED_RECORD_ID,
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "./chunk-PE25C4QL.js";
+} from "./chunk-NNWK3PSY.js";
 import {
   withdrawAccessibleData
-} from "./chunk-DJ4TNF4N.js";
+} from "./chunk-GX2BYNCT.js";
 import {
   diffVault
 } from "./chunk-LB7FD65R.js";
 import {
   exportAccessibleData
-} from "./chunk-DKGZIX6S.js";
-import "./chunk-HBVEGUON.js";
+} from "./chunk-OQAODTYR.js";
+import "./chunk-QTXQ6RNZ.js";
 import {
   isDiscriminant
 } from "./chunk-PY4KJPYU.js";
-import "./chunk-LFGJG4XZ.js";
+import "./chunk-3I4KYWNP.js";
 import {
   classified,
   luhnCheck
-} from "./chunk-QYNBPDGO.js";
+} from "./chunk-2644KEGW.js";
 import {
   ClassifiedNeverStoredError,
   ClassifiedValidationError,
   isClassifiedFieldSpec,
   isClassifiedGroup,
   resolveClassifiedFields
-} from "./chunk-47C4CI7R.js";
-import "./chunk-E3LURVGQ.js";
-import "./chunk-II6DLDZM.js";
+} from "./chunk-V7RNIND6.js";
+import "./chunk-SSFC3IYA.js";
+import "./chunk-5TZZUL5X.js";
 import "./chunk-BGIZAFY7.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
-import "./chunk-EU7HDMT3.js";
-import "./chunk-OFYY5Q4R.js";
+import "./chunk-ZWQFOXBR.js";
+import "./chunk-CWCCYH34.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-YSU2E4GZ.js";
+} from "./chunk-IUKGIB2Q.js";
 import "./chunk-GHVIKOHT.js";
 import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "./chunk-PAJCRV7O.js";
-import "./chunk-RUIMKQTA.js";
+} from "./chunk-KYC4LIEU.js";
+import "./chunk-QJR3W3MF.js";
 import "./chunk-YMUGBZN2.js";
-import "./chunk-HU55NPHZ.js";
+import "./chunk-Y2OCKFZ3.js";
 import {
   CollectionFrame,
   VaultFrame
-} from "./chunk-U7LV2DUN.js";
+} from "./chunk-6ULCYCMU.js";
 import {
   TxCollection,
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-FCOZ7DEC.js";
+} from "./chunk-JC5R7P44.js";
 import {
   withDerivation,
   withRollup
-} from "./chunk-OWGAXPRE.js";
-import "./chunk-7KTL4RHZ.js";
-import "./chunk-7CZ6YXMO.js";
+} from "./chunk-IWTYFS3D.js";
+import "./chunk-PF3FQCCF.js";
+import "./chunk-7ZANJ6JZ.js";
+import "./chunk-WVCQ75OK.js";
 import {
   withMaterializedView
-} from "./chunk-I6JJ6VJS.js";
-import "./chunk-UB3XHGFG.js";
-import "./chunk-YTCCC6NG.js";
-import "./chunk-WJEMUO32.js";
+} from "./chunk-YLN33ADH.js";
+import "./chunk-TDPEJINP.js";
+import "./chunk-H57P2SJB.js";
+import "./chunk-GZ2MOPVX.js";
+import "./chunk-4RQ62VSR.js";
 import {
   withOverlayedView
-} from "./chunk-PYIUDUGS.js";
-import "./chunk-MOQ5M46U.js";
-import "./chunk-VIWOGJ2O.js";
+} from "./chunk-HOCEGVGQ.js";
+import "./chunk-SZCHEDML.js";
+import "./chunk-34RRRIC3.js";
 import {
   importExternalObjects,
   memoryObjectProjection
 } from "./chunk-4Q6HSHHL.js";
-import "./chunk-I6Q7YECW.js";
-import "./chunk-6PALJTC2.js";
+import "./chunk-NYVQCZ54.js";
+import "./chunk-XJK2WIYN.js";
 import {
   withLazy
 } from "./chunk-THNJ3IKU.js";
@@ -196,12 +201,12 @@ import {
 } from "./chunk-6S7T6WC4.js";
 import {
   decryptExtractedPartition
-} from "./chunk-2L7PPF2C.js";
+} from "./chunk-M5I354EE.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   savePersistedSchema
-} from "./chunk-7F2P2NHX.js";
+} from "./chunk-KXKLKJW4.js";
 import {
   MemoryRecipientSealer,
   MemorySealingKeyProvider,
@@ -212,7 +217,7 @@ import {
   parseSealedEnvelope,
   saveSealedPassphrase,
   sealRsaOaepTlv
-} from "./chunk-H7WQMGXH.js";
+} from "./chunk-CJEMA2Z6.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -224,13 +229,13 @@ import {
   detectMagic,
   detectMimeType,
   isPreCompressed
-} from "./chunk-QAVFI23O.js";
+} from "./chunk-4ZSGSRBI.js";
 import {
   createBundleStore,
   createPodStore,
   wrapBundleStore,
   wrapPodStore
-} from "./chunk-CHK5VVMI.js";
+} from "./chunk-S6AQXDN4.js";
 import {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
@@ -244,7 +249,7 @@ import {
   resetBrotliSupportCache,
   writeNoydbBundle,
   writePod
-} from "./chunk-CND5WQLO.js";
+} from "./chunk-Q2KVKTC2.js";
 import {
   PUBLIC_ENVELOPE_RECORD_ID,
   isPublicEnvelope,
@@ -252,20 +257,18 @@ import {
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-T4NQMPBN.js";
+} from "./chunk-KNXN47MO.js";
 import {
   CONSENT_AUDIT_COLLECTION
-} from "./chunk-YSJG4L4A.js";
+} from "./chunk-AYGZMQP5.js";
+import "./chunk-ANDBBA2P.js";
 import {
   DICT_COLLECTION_PREFIX,
-  DictionaryHandle,
+  LookupHandle,
   dictCollectionName,
   dictKey,
-  isDictCollectionName,
-  isDictKeyDescriptor,
-  isStaticDictDescriptor,
   staticDict
-} from "./chunk-WFBZRXS5.js";
+} from "./chunk-IIP5WFVT.js";
 import {
   credentialStatus,
   deleteCredential,
@@ -273,7 +276,7 @@ import {
   listCredentials,
   putCredential,
   withTeam
-} from "./chunk-AG2PLGQ2.js";
+} from "./chunk-FC3XK5JT.js";
 import {
   MAGIC_LINK_CONTENT_INFO_PREFIX,
   MAGIC_LINK_GRANTS_COLLECTION,
@@ -293,7 +296,7 @@ import {
   rotatePassphrase,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-WGH3YV6Y.js";
+} from "./chunk-DEYAO3N6.js";
 import {
   burnPaperRecoveryEntry,
   hasRecoveryEnrolled,
@@ -307,12 +310,12 @@ import {
   unwrapDeksFromBlob,
   unwrapDeksFromPaperEntry,
   unwrapDeksFromShamirEntry
-} from "./chunk-VUHXLL32.js";
+} from "./chunk-VJ3NQK4K.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-H3MPSYCH.js";
+} from "./chunk-RMUXPHIH.js";
 import {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
@@ -323,7 +326,7 @@ import {
   assertTierAccess,
   dekKey,
   effectiveClearance
-} from "./chunk-26FSVNBL.js";
+} from "./chunk-MK2BSS44.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   WeakPassphraseError,
@@ -337,7 +340,7 @@ import {
   listUsers,
   listUsersWithEnvelopes,
   validatePassphrase
-} from "./chunk-GMZFHDSG.js";
+} from "./chunk-6CU3FN74.js";
 import {
   DIRECTORY_RECORD_ID,
   VISIBILITY_RECORD_PREFIX,
@@ -351,7 +354,7 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "./chunk-3CHNKEFI.js";
+} from "./chunk-E5AHO65E.js";
 import {
   PolicyEnforcer,
   activeSessionCount,
@@ -366,7 +369,7 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-RNYDHIQL.js";
+} from "./chunk-KBF5GSGX.js";
 import {
   generateULID,
   isULID
@@ -374,7 +377,7 @@ import {
 import {
   CollectionInstant,
   VaultInstant
-} from "./chunk-J54DC5IC.js";
+} from "./chunk-4G3IT7J7.js";
 import {
   diff,
   formatDiff
@@ -383,7 +386,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-62TTFKU4.js";
+} from "./chunk-WNA6T3MA.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -395,25 +398,17 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-G5CFMITA.js";
-import "./chunk-VMRXI3IF.js";
-import "./chunk-XW5LZYV4.js";
+} from "./chunk-MSVY7ULZ.js";
+import "./chunk-A2APWS32.js";
+import "./chunk-2HVUKRNE.js";
 import {
   validateSchemaInput,
   validateSchemaOutput
-} from "./chunk-JIW3Q5JN.js";
-import "./chunk-HGQ6UNHE.js";
-import "./chunk-5UOPIPZC.js";
-import "./chunk-UWZ7O4NR.js";
-import {
-  NOYDB_BACKUP_VERSION,
-  NOYDB_FORMAT_VERSION,
-  NOYDB_KEYRING_VERSION,
-  NOYDB_SYNC_VERSION,
-  SealedHandle,
-  createStore
-} from "./chunk-HCK2DFEK.js";
-import "./chunk-VFQOE76I.js";
+} from "./chunk-XHD3L3JO.js";
+import "./chunk-Z5YFRMG5.js";
+import "./chunk-XQ7UYPVN.js";
+import "./chunk-6MWUANRF.js";
+import "./chunk-2KOSJTMU.js";
 import "./chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
@@ -423,7 +418,15 @@ import {
   derivePresenceKey,
   encryptBytes,
   encryptDeterministic
-} from "./chunk-5HZULLHE.js";
+} from "./chunk-AUR7MRHA.js";
+import {
+  NOYDB_BACKUP_VERSION,
+  NOYDB_FORMAT_VERSION,
+  NOYDB_KEYRING_VERSION,
+  NOYDB_SYNC_VERSION,
+  SealedHandle,
+  createStore
+} from "./chunk-UNJU345Q.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   DEFAULT_JOIN_MAX_ROWS,
@@ -433,10 +436,10 @@ import {
   buildLiveQuery,
   executePlan,
   resetJoinWarnings
-} from "./chunk-6Z435B6N.js";
+} from "./chunk-7HAPHVRJ.js";
 import {
   CollectionIndexes
-} from "./chunk-C4NOLA5X.js";
+} from "./chunk-5GAX2QOH.js";
 import {
   Aggregation,
   GROUPBY_MAX_CARDINALITY,
@@ -455,23 +458,30 @@ import {
   reduceRecords,
   reducerBuilder,
   sum
-} from "./chunk-5GQE5IDB.js";
+} from "./chunk-2XE6LIXT.js";
 import {
   evaluateClause,
   evaluateFieldClause,
-  installMoneyEngine,
   readPath
-} from "./chunk-6P5AJ2ZS.js";
+} from "./chunk-KCG3BHFG.js";
 import {
   applyI18nLocale,
   enforceScript,
+  getAtPath,
   i18nText,
   inferScripts,
+  isDictCollectionName,
+  isDictKeyDescriptor,
   isI18nTextDescriptor,
+  isStaticDictDescriptor,
   resolveI18nText,
   resolvePolicy,
+  setAtPathInPlace,
   validateI18nTextValue
-} from "./chunk-BASCPHNM.js";
+} from "./chunk-3C5CKXFI.js";
+import {
+  installViaBinder
+} from "./chunk-6G2SCQYS.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -512,6 +522,7 @@ import {
   EnclaveNotSupportedError,
   ExportCapabilityError,
   FieldFrozenError,
+  FieldNotQueryableError,
   FilenameSanitizationError,
   ForgetStrategyNotConfiguredError,
   GroupCardinalityError,
@@ -590,12 +601,13 @@ import {
   USER_ENVELOPE_MAX_BYTES,
   UniqueConstraintError,
   UnknownDictCodeError,
+  UnknownLookupKeyError,
   UnknownShardError,
   UnsupportedIndexOptionError,
   UserEnvelopeOversizedError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "./chunk-OJ64XMPJ.js";
+} from "./chunk-CU62BBRB.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/debug.ts
@@ -816,18 +828,19 @@ function routeStore(opts) {
     }
     return tieredBlobs.large;
   }
-  function isCold(collection, envelope) {
+  function isCold(collection, envelope, before) {
     if (!opts.age) return false;
     if (isInternal(collection)) return false;
     if (opts.age.collections && opts.age.collections.length > 0) {
       if (!opts.age.collections.includes(collection)) return false;
     }
-    const cutoff = Date.now() - opts.age.coldAfterDays * 24 * 60 * 60 * 1e3;
-    const ts = new Date(envelope._ts).getTime();
-    return ts < cutoff;
+    const cutoffIso = before ?? (opts.age.coldAfterDays != null ? new Date(Date.now() - opts.age.coldAfterDays * 24 * 60 * 60 * 1e3).toISOString() : void 0);
+    if (cutoffIso === void 0) return false;
+    return envelope._ts < cutoffIso;
   }
   const store = {
     name: buildName(),
+    ...opts.age?.cold ? { capabilities: { ...primary.capabilities, coldArchival: true } } : primary.capabilities ? { capabilities: { ...primary.capabilities, coldArchival: false } } : {},
     async get(vault, collection, id) {
       const s = storeFor(vault, collection);
       const result = await s.get(vault, collection, id);
@@ -896,16 +909,16 @@ function routeStore(opts) {
         [...partitioned.entries()].map(([s, snap]) => s.saveAll(vault, snap))
       );
     },
-    async compact(vault) {
+    async compact(vault, compactOpts) {
       if (!opts.age) return 0;
       let migrated = 0;
-      const collections = opts.age.collections?.length ? opts.age.collections : await primary.list(vault, "").catch(() => []);
+      const collections = opts.age.collections?.length ? opts.age.collections : Object.keys(await primary.loadAll(vault).catch(() => ({})));
       for (const collection of collections) {
         const ids = await primary.list(vault, collection).catch(() => []);
         for (const id of ids) {
           const envelope = await primary.get(vault, collection, id);
           if (!envelope) continue;
-          if (isCold(collection, envelope)) {
+          if (isCold(collection, envelope, compactOpts?.before)) {
             await opts.age.cold.put(vault, collection, id, envelope);
             await primary.delete(vault, collection, id);
             migrated++;
@@ -1347,7 +1360,7 @@ function withDeferredNumbering(config) {
   };
 }
 
-// src/with-shape/money/iso4217.ts
+// src/shape/via-money/iso4217.ts
 var MINOR_UNITS = {
   // 2-decimal majors
   EUR: 2,
@@ -1405,7 +1418,7 @@ function scaleForCurrency(code) {
   return v === void 0 ? null : v;
 }
 
-// src/with-shape/money/fixed-point.ts
+// src/shape/via-money/fixed-point.ts
 function expandExponent(s) {
   const m = /^([+-]?)(\d+)(?:\.(\d+))?[eE]([+-]?\d+)$/.exec(s);
   if (!m) return s;
@@ -1523,7 +1536,7 @@ function formatScaledInt(value, scale) {
   return (negative ? "-" : "") + intPart + "." + fracPart;
 }
 
-// src/with-shape/money/paths.ts
+// src/shape/via-money/paths.ts
 var SEGMENT_RE = /^(\*|[^.[\]*]+)(\[\])?$/;
 var parseCache = /* @__PURE__ */ new Map();
 function parseMoneyPath(path) {
@@ -1625,7 +1638,7 @@ function transformAtMoneyPath(node, path, segments, index, visit, lenient) {
   return clone;
 }
 
-// src/with-shape/money/normalize.ts
+// src/shape/via-money/normalize.ts
 function isMoneyValueObject(v) {
   return typeof v === "object" && v !== null && "currency" in v;
 }
@@ -1794,7 +1807,7 @@ function decodeMoneyFields(record, moneyFields, locale) {
   return out;
 }
 
-// src/with-shape/money/where.ts
+// src/shape/via-money/where.ts
 function isMoneyValueObject2(v) {
   return typeof v === "object" && v !== null && "currency" in v;
 }
@@ -1839,7 +1852,7 @@ function moneyFieldClause(field, op, value, desc) {
     case ">":
     case ">=": {
       const e = parseOperand(field, value, desc);
-      return withMoney(field, op, value, desc, [e]);
+      return { mode: desc.mode, entries: [e] };
     }
     case "between": {
       if (!Array.isArray(value) || value.length !== 2) {
@@ -1852,13 +1865,13 @@ function moneyFieldClause(field, op, value, desc) {
           `where("${field}"): 'between' bounds mix currencies (${lo.currency} vs ${hi.currency})`
         );
       }
-      return withMoney(field, op, value, desc, [lo, hi]);
+      return { mode: desc.mode, entries: [lo, hi] };
     }
     case "in": {
       if (!Array.isArray(value)) {
         throw new MoneyUnsupportedError(`where("${field}"): 'in' needs an array of amounts`);
       }
-      return withMoney(field, op, value, desc, value.map((v) => parseOperand(field, v, desc)));
+      return { mode: desc.mode, entries: value.map((v) => parseOperand(field, v, desc)) };
     }
     default:
       throw new MoneyUnsupportedError(
@@ -1866,11 +1879,6 @@ function moneyFieldClause(field, op, value, desc) {
       );
   }
 }
-function withMoney(field, op, originalValue, desc, entries) {
-  const money2 = { mode: desc.mode, entries };
-  const value = desc.mode !== "fixed" ? originalValue : entries.length === 1 && op !== "in" && op !== "between" ? entries[0].scaled : entries.map((e) => e.scaled);
-  return { type: "field", field, op, value, money: money2 };
-}
 function readStored(actual, operand) {
   let amount;
   let currency;
@@ -1927,7 +1935,7 @@ function evaluateMoneyClause(actual, op, operand) {
   }
 }
 
-// src/with-shape/money/money-reducer.ts
+// src/shape/via-money/money-reducer.ts
 function toScaledIntFromAny(v, scale) {
   if (typeof v === "bigint") return v;
   if (typeof v === "number") {
@@ -2112,22 +2120,41 @@ function wrapMoneyReducers(spec, moneyFields) {
   return changed ? out : spec;
 }
 
-// src/with-shape/money/engine.ts
-function linkMoneyEngine() {
-  installMoneyEngine({
-    quantizeMoneyFields,
-    decodeMoneyFields,
-    canonicalizeStoredMoney,
-    canonicalizeIncomingMoney,
-    moneyScaledValue,
-    validateMoneyFieldPaths,
-    moneyFieldClause,
-    evaluateMoneyClause,
-    wrapMoneyReducers
-  });
+// src/shape/via-money/binding.ts
+function moneyBinding(moneyFields) {
+  validateMoneyFieldPaths(moneyFields);
+  return {
+    brand: "money",
+    posture: { encryptedAtRest: "envelope", queryable: "ordered", exportable: true, forgettable: true },
+    covers: (field) => field in moneyFields,
+    ingest: (r) => canonicalizeIncomingMoney(r, moneyFields),
+    canonicalizeStored: (r) => canonicalizeStoredMoney(r, moneyFields),
+    encodeWrite: (r) => quantizeMoneyFields(r, moneyFields),
+    present: (r, ctx) => decodeMoneyFields(r, moneyFields, typeof ctx.locale === "string" ? ctx.locale : void 0),
+    buildClause: (field, op, value) => {
+      const desc = moneyFields[field];
+      if (!desc) return void 0;
+      return moneyFieldClause(field, op, value, desc);
+    },
+    evaluateClause: (actual, op, payload) => evaluateMoneyClause(actual, op, payload),
+    decodeResults: (r) => decodeMoneyFields(r, moneyFields, "raw"),
+    compareForOrder: (field, a, b) => {
+      const desc = moneyFields[field];
+      if (!desc) return void 0;
+      const av = moneyScaledValue(a, desc);
+      const bv = moneyScaledValue(b, desc);
+      if (av === null) return bv === null ? 0 : 1;
+      if (bv === null) return -1;
+      return av < bv ? -1 : av > bv ? 1 : 0;
+    },
+    wrapReducers: (spec) => wrapMoneyReducers(spec, moneyFields)
+  };
+}
+function linkMoneyVia() {
+  installViaBinder("money", (cfg) => moneyBinding(cfg));
 }
 
-// src/with-shape/money/descriptor.ts
+// src/shape/via-money/descriptor.ts
 var MoneyPrecisionError = class extends NoydbError {
   constructor(field, value, scale) {
     super(
@@ -2173,7 +2200,7 @@ function isMultiOptions(o) {
   return "currencies" in o;
 }
 function money(options) {
-  linkMoneyEngine();
+  linkMoneyVia();
   const hasFixed = "currency" in options;
   const hasMulti = "currencies" in options;
   if (hasFixed && hasMulti) {
@@ -2197,6 +2224,7 @@ function money(options) {
     const soleCurrency = () => allowList !== "any" && allowList.length === 1 ? allowList[0] : void 0;
     return {
       _noydbMoney: true,
+      _viaBrand: "money",
       mode: "multi",
       options,
       rounding,
@@ -2213,6 +2241,7 @@ function money(options) {
   }
   return {
     _noydbMoney: true,
+    _viaBrand: "money",
     mode: "fixed",
     options,
     rounding,
@@ -2229,7 +2258,7 @@ function isMoneyDescriptor(x) {
   return typeof x === "object" && x !== null && x._noydbMoney === true;
 }
 
-// src/with-shape/money/arith.ts
+// src/shape/via-money/arith.ts
 function parseAmount(label, amount, scale, rounding) {
   const r = parseToScaledInt(amount, scale, rounding);
   if (!r.ok) {
@@ -2314,7 +2343,7 @@ function allocate(amount, weights, opts = {}) {
   return base.map((p) => formatScaledInt(negative && p !== 0n ? -p : p, scale));
 }
 
-// src/with-shape/money/branded.ts
+// src/shape/via-money/branded.ts
 function asMoney(value) {
   if (!isMoneyLike(value)) {
     throw new MoneyUnsupportedError(`asMoney: ${JSON.stringify(value)} is not a finite decimal`);
@@ -2335,6 +2364,246 @@ function isMoneyLike(value) {
   if (typeof value !== "string") return false;
   return decimalScaleOf(value) !== null;
 }
+
+// src/shape/via-computed/descriptor.ts
+function computed(fn, opts) {
+  return {
+    _viaBrand: "computed",
+    fn,
+    ...opts?.deps !== void 0 ? { deps: opts.deps } : {},
+    mode: opts?.mode ?? "materialized"
+  };
+}
+function isComputedDescriptor(x) {
+  return typeof x === "object" && x !== null && x._viaBrand === "computed";
+}
+
+// src/shape/via-lookup/binding.ts
+function hasLabelSource(desc) {
+  return !(desc.backing === "static" && desc.table === void 0);
+}
+async function fetchLookupLabel(desc, key, effLocale, fieldFallback, cfg) {
+  if (desc.backing === "collection") {
+    const getRow = cfg.getLookupBacking?.(desc.dimension);
+    const row = getRow ? await getRow(key) : void 0;
+    const labelField = desc.present?.label;
+    if (!row || labelField === void 0) return void 0;
+    const raw = row[labelField];
+    if (desc.present?.by !== void 0) {
+      return raw && typeof raw === "object" ? raw[effLocale] : void 0;
+    }
+    return typeof raw === "string" ? raw : void 0;
+  }
+  return cfg.lookupLabelResolver?.(desc.dimension, key, effLocale, fieldFallback);
+}
+async function runLookupPresent(record, ctx, cfg) {
+  const fields = Object.entries(cfg.lookupFields).filter(([, d]) => hasLabelSource(d));
+  if (fields.length === 0) return record;
+  const locale = typeof ctx.locale === "string" ? ctx.locale : void 0;
+  const fallback = ctx.fallback;
+  const layer = ctx.layer;
+  if (locale === "raw") return record;
+  const hasStaticDisplay = fields.some(([, d]) => d.backing === "static" && d.displayLocale !== void 0);
+  if (!locale && !hasStaticDisplay) return record;
+  let result = record;
+  const withLabels = { ...result };
+  for (const [field, desc] of fields) {
+    const policy = desc.onMissing ? resolvePolicy(desc.onMissing, layer) : "null";
+    const fieldFallback = policy === "substitute" ? fallback ?? desc.substitute : fallback;
+    const effLocale = locale ?? (desc.backing === "static" ? desc.displayLocale : void 0);
+    const resolveKey = async (key) => {
+      if (!effLocale) {
+        if (policy === "throw") {
+          throw new LocaleNotSpecifiedError(field, `lookup "${field}": no locale active to resolve key "${key}".`);
+        }
+        return null;
+      }
+      const label = await fetchLookupLabel(desc, key, effLocale, fieldFallback, cfg);
+      if (label === void 0) {
+        if (policy === "throw") {
+          throw new LocaleNotSpecifiedError(field, `lookup "${field}": no label for key "${key}" in locale "${effLocale}".`);
+        }
+        return null;
+      }
+      return label;
+    };
+    if (field.includes("[].")) {
+      const parts = field.split("[].");
+      const arrayKey = parts[0];
+      const leaf = parts[1];
+      if (!leaf || leaf.includes(".")) continue;
+      const arr = withLabels[arrayKey];
+      if (!Array.isArray(arr)) continue;
+      const labelKey = `${leaf}Label`;
+      withLabels[arrayKey] = await Promise.all(
+        arr.map(async (el) => {
+          if (!el || typeof el !== "object" || Array.isArray(el)) return el;
+          const k = el[leaf];
+          if (typeof k !== "string") return el;
+          return { ...el, [labelKey]: await resolveKey(k) };
+        })
+      );
+      continue;
+    }
+    const val = result[field];
+    if (Array.isArray(val)) {
+      withLabels[`${field}Label`] = await Promise.all(
+        val.map(async (k) => ({ key: k, label: typeof k === "string" ? await resolveKey(k) : null }))
+      );
+    } else if (typeof val === "string") {
+      const label = await resolveKey(val);
+      if (label !== null) withLabels[`${field}Label`] = label;
+    }
+  }
+  result = withLabels;
+  return result;
+}
+function buildLookupDescribeFragment(cfg) {
+  const lookupFields = {};
+  for (const [field, desc] of Object.entries(cfg.lookupFields)) {
+    lookupFields[field] = {
+      ...desc.dimension !== "" ? { dimension: desc.dimension } : {},
+      backing: desc.backing,
+      vocabulary: desc.vocabulary,
+      key: desc.key,
+      onDelete: desc.onDelete,
+      ...desc.altKeys !== void 0 ? { altKeys: desc.altKeys } : {},
+      ...desc.present !== void 0 ? { present: desc.present } : {},
+      ...desc.sortBy !== void 0 ? { sortBy: desc.sortBy } : {},
+      ...desc.keys !== void 0 ? { keys: desc.keys } : {}
+    };
+  }
+  return { lookupFields };
+}
+function getAltIndexOrThrow(field, desc, cfg) {
+  try {
+    return cfg.getAltIndex?.(desc);
+  } catch (err) {
+    if (err instanceof Error && err.message.includes("lazy-mode")) {
+      throw new ValidationError(
+        `lookup: altKeys on "${field}" require the backing collection "${desc.dimension}" to be prefetch-enabled (lazy mode unsupported); open it without {prefetch:false} or drop altKeys.`
+      );
+    }
+    throw err;
+  }
+}
+function runLookupIngest(record, cfg) {
+  const withAltKeys = Object.entries(cfg.lookupFields).filter(([, d]) => (d.altKeys?.length ?? 0) > 0);
+  if (withAltKeys.length === 0) return record;
+  let result = record;
+  for (const [field, desc] of withAltKeys) {
+    const backing = getAltIndexOrThrow(field, desc, cfg);
+    if (!backing || backing.altIndex.size === 0) continue;
+    const values = getAtPath(record, field);
+    if (values.length !== 1) continue;
+    const value = values[0];
+    if (typeof value !== "string") continue;
+    const canonical = backing.altIndex.get(value);
+    if (canonical === void 0 || canonical === value) continue;
+    if (result === record) result = { ...record };
+    setAtPathInPlace(result, field, canonical);
+  }
+  return result;
+}
+async function runLookupEnforceWrite(record, cfg) {
+  for (const [field, desc] of Object.entries(cfg.lookupFields)) {
+    if (desc.vocabulary !== "closed") continue;
+    for (const value of getAtPath(record, field)) {
+      if (typeof value !== "string") continue;
+      const known = cfg.membership ? await cfg.membership(field, value) : true;
+      if (!known) throw new UnknownLookupKeyError(desc.dimension, field, value);
+    }
+  }
+}
+function compareLookupOrder(field, a, b, cfg) {
+  if (typeof a !== "string" || typeof b !== "string") return void 0;
+  const desc = cfg.lookupFields[field];
+  if (!desc || desc.sortBy === void 0) return void 0;
+  const rows = desc.backing === "static" ? desc.table ? new Map(Object.entries(desc.table)) : void 0 : cfg.snapshotFor?.(desc);
+  if (!rows) return void 0;
+  return buildLookupSnapshot(desc.dimension, rows, desc).compareKeys(a, b, desc.displayLocale ?? "");
+}
+function resolveLookupOrderLabel(field, key, locale, cfg) {
+  const desc = cfg.lookupFields[field];
+  if (!desc) return void 0;
+  const rows = desc.backing === "static" ? desc.table ? new Map(Object.entries(desc.table)) : void 0 : cfg.snapshotFor?.(desc);
+  if (!rows) return void 0;
+  return buildLookupSnapshot(desc.dimension, rows, desc).label(key, locale ?? desc.displayLocale ?? "");
+}
+function lookupBinding(cfg) {
+  return {
+    brand: "lookup",
+    posture: { encryptedAtRest: "envelope", queryable: "full", exportable: true, forgettable: false },
+    reservedPrefixes: ["_dict_", "_lookup_"],
+    covers: (field) => field in cfg.lookupFields,
+    ingest: (record) => runLookupIngest(record, cfg),
+    enforceWrite: (record) => runLookupEnforceWrite(record, cfg),
+    present: async (record, ctx) => runLookupPresent(record, ctx, cfg),
+    compareForOrder: (field, a, b) => compareLookupOrder(field, a, b, cfg),
+    resolveOrderLabel: (field, key, locale) => resolveLookupOrderLabel(field, key, locale, cfg),
+    describeFragment: () => buildLookupDescribeFragment(cfg)
+  };
+}
+function linkLookupVia() {
+  installViaBinder("lookup", (c) => lookupBinding(c));
+}
+
+// src/shape/via-lookup/descriptor.ts
+function warnIfSortByNeedsDisplayLocale(dimension, opts) {
+  if (opts?.sortBy !== void 0 && opts.present?.by !== void 0 && opts.displayLocale === void 0) {
+    console.warn(
+      `[noy-db] lookup("${dimension}"): sortBy "${opts.sortBy}" is locale-keyed (present.by is set) but no displayLocale is declared \u2014 a locale-less orderBy() will silently sort by the raw stored key instead of the resolved label. Declare displayLocale, or sort via orderBy(field, dir, { by: 'label' }), which resolves at the query's own per-call locale.`
+    );
+  }
+}
+function lookup(dimension, opts) {
+  linkLookupVia();
+  warnIfSortByNeedsDisplayLocale(dimension, opts);
+  return {
+    _viaBrand: "lookup",
+    dimension,
+    key: opts?.key ?? "id",
+    vocabulary: opts?.vocabulary ?? "open",
+    backing: opts?.backing ?? "collection",
+    onDelete: opts?.onDelete ?? "restrict",
+    ...opts?.altKeys !== void 0 ? { altKeys: opts.altKeys } : {},
+    ...opts?.present !== void 0 ? { present: opts.present } : {},
+    ...opts?.sortBy !== void 0 ? { sortBy: opts.sortBy } : {},
+    ...opts?.keys !== void 0 ? { keys: opts.keys } : {},
+    ...opts?.table !== void 0 ? { table: opts.table } : {},
+    ...opts?.displayLocale !== void 0 ? { displayLocale: opts.displayLocale } : {},
+    ...opts?.onMissing !== void 0 ? { onMissing: opts.onMissing } : {},
+    ...opts?.substitute !== void 0 ? { substitute: opts.substitute } : {},
+    ...opts?.labels !== void 0 ? { labels: opts.labels } : {}
+  };
+}
+function enumOf(keys) {
+  linkLookupVia();
+  return {
+    _viaBrand: "lookup",
+    dimension: "",
+    key: "id",
+    vocabulary: "closed",
+    backing: "static",
+    onDelete: "restrict",
+    keys
+  };
+}
+function dict(dimension, opts) {
+  linkLookupVia();
+  return {
+    _viaBrand: "lookup",
+    dimension,
+    key: "id",
+    vocabulary: opts?.vocabulary ?? "open",
+    backing: "reserved",
+    onDelete: opts?.onDelete ?? "restrict",
+    ...opts?.keys !== void 0 ? { keys: opts.keys } : {},
+    ...opts?.present !== void 0 ? { present: opts.present } : {},
+    ...opts?.onMissing !== void 0 ? { onMissing: opts.onMissing } : {},
+    ...opts?.substitute !== void 0 ? { substitute: opts.substitute } : {}
+  };
+}
 export {
   Aggregation,
   AlreadyElevatedError,
@@ -2394,7 +2663,7 @@ export {
   DerivationOutputUnknownError,
   DictKeyInUseError,
   DictKeyMissingError,
-  DictionaryHandle,
+  LookupHandle as DictionaryHandle,
   DirectoryDisabledError,
   ELEVATION_AUDIT_COLLECTION,
   ElevatedHandle,
@@ -2404,6 +2673,7 @@ export {
   EnclaveNotSupportedError,
   ExportCapabilityError,
   FieldFrozenError,
+  FieldNotQueryableError,
   FilenameSanitizationError,
   ForgetStrategyNotConfiguredError,
   GROUPBY_MAX_CARDINALITY,
@@ -2542,6 +2812,7 @@ export {
   USER_ENVELOPE_MAX_BYTES,
   UniqueConstraintError,
   UnknownDictCodeError,
+  UnknownLookupKeyError,
   UnknownShardError,
   UnsupportedIndexOptionError,
   UserApi,
@@ -2579,6 +2850,7 @@ export {
   clearDevUnlock,
   compileSequenceFormat,
   computePatch,
+  computed,
   coordinatedCutover,
   count,
   createBundleStore,
@@ -2606,6 +2878,7 @@ export {
   detectMagic,
   detectMimeType,
   diagramAuthConfig,
+  dict,
   dictCollectionName,
   dictKey,
   diff,
@@ -2616,6 +2889,8 @@ export {
   encryptDeterministic,
   enforceScript,
   enrollAuthenticator,
+  enumOf as enum,
+  enumOf,
   envelopePayloadHash,
   estimateEntropy,
   estimateRecordBytes,
@@ -2643,6 +2918,7 @@ export {
   inferScripts,
   isClassifiedFieldSpec,
   isClassifiedGroup,
+  isComputedDescriptor,
   isDeedVault,
   isDevUnlockActive,
   isDictCollectionName,
@@ -2659,6 +2935,7 @@ export {
   isSessionAlive,
   isStaticDictDescriptor,
   isULID,
+  isViaFieldSpec,
   isZodSchema,
   issueDelegation,
   recoverPassphrase as keyringRecoverPassphrase,
@@ -2681,6 +2958,7 @@ export {
   loadUserEnvelope,
   loadVaultPolicy,
   lockSchema,
+  lookup,
   luhnCheck,
   magicLinkGrantRecordId,
   max,
@@ -2765,6 +3043,7 @@ export {
   validateSchemaInput,
   validateSchemaOutput,
   validateSessionPolicy,
+  via,
   visibilityRecordId,
   withArchive,
   withCache,