@noy-db/hub 0.3.0-pre.8 → 0.3.0

package/dist/config-drift-RFEVGBKR.js

@@ -1,24 +0,0 @@
-import "./chunk-PZ5AY32C.js";
-
-// src/with-shape/classified/config-drift.ts
-function markerForFields(vdigFields) {
-  if (vdigFields === null || vdigFields.size === 0) return null;
-  const digestOnly = [...vdigFields.keys()];
-  return { digestOnly, equatable: digestOnly.filter((f) => vdigFields.get(f)?.equatable === true) };
-}
-async function persistClassifiedMarkerForFields(store, vault, collectionName, vdigFields, dek) {
-  const marker = markerForFields(vdigFields);
-  if (marker === null) return;
-  const { persistClassifiedMarker } = await import("./register-3D6R2MKN.js");
-  await persistClassifiedMarker({ store, vault, collectionName, dek, marker });
-}
-async function readClassifiedMarkerDigestOnly(store, vault, collectionName, dek) {
-  const { loadPersistedSchema } = await import("./storage-KEXIXLGM.js");
-  const persisted = await loadPersistedSchema(store, vault, collectionName, dek);
-  return persisted?.classified?.digestOnly ?? [];
-}
-export {
-  persistClassifiedMarkerForFields,
-  readClassifiedMarkerDigestOnly
-};
-//# sourceMappingURL=config-drift-RFEVGBKR.js.map

package/dist/config-drift-RFEVGBKR.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-shape/classified/config-drift.ts"],"sourcesContent":["/**\n * C-A / R10 config-drift marker I/O — the store side of the guard, kept OUT of\n * the kernel `Collection` so the always-on kernel surface stays lean. The\n * kernel holds only the per-handle memoization; these helpers do the actual\n * persisted-schema read/write (via the persisted-schemas storage seam, lazily\n * imported so the classified spine tree-shakes).\n *\n * Marker semantics: a collection declaring classified digest-only fields writes\n * an `x-classified` marker into its `_schemas/<collection>` record on the first\n * classified write. A handle later opened WITHOUT `classifiedFields` (a naive\n * handle) reads it back and refuses to write — see RecordCodec.encryptRecord's\n * R10 guard.\n *\n * @module\n */\nimport type { NoydbStore, VdigFieldPolicy, ClassifiedMarker } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\n\n/** Build the marker for a handle's digest-only field map, or null when it declares none. */\nfunction markerForFields(vdigFields: ReadonlyMap<string, VdigFieldPolicy> | null): ClassifiedMarker | null {\n  if (vdigFields === null || vdigFields.size === 0) return null\n  const digestOnly = [...vdigFields.keys()]\n  return { digestOnly, equatable: digestOnly.filter((f) => vdigFields.get(f)?.equatable === true) }\n}\n\n/**\n * Persist the classified marker for a handle's digest-only fields. No-op when\n * the handle declares none. Idempotent (delegates to `persistClassifiedMarker`).\n */\nexport async function persistClassifiedMarkerForFields(\n  store: NoydbStore,\n  vault: string,\n  collectionName: string,\n  vdigFields: ReadonlyMap<string, VdigFieldPolicy> | null,\n  dek: EnclaveKey,\n): Promise<void> {\n  const marker = markerForFields(vdigFields)\n  if (marker === null) return\n  const { persistClassifiedMarker } = await import('../persisted-schemas/register.js')\n  await persistClassifiedMarker({ store, vault, collectionName, dek, marker })\n}\n\n/**\n * Read a collection's persisted classified marker's declared digest-only field\n * set (empty when the collection carries no marker). Cross-session drift signal:\n * the R10 superset guard refuses a handle whose declared classified set does not\n * cover every field in this set.\n */\nexport async function readClassifiedMarkerDigestOnly(\n  store: NoydbStore,\n  vault: string,\n  collectionName: string,\n  dek: EnclaveKey,\n): Promise<readonly string[]> {\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vault, collectionName, dek)\n  return persisted?.classified?.digestOnly ?? []\n}\n"],"mappings":";;;AAmBA,SAAS,gBAAgB,YAAkF;AACzG,MAAI,eAAe,QAAQ,WAAW,SAAS,EAAG,QAAO;AACzD,QAAM,aAAa,CAAC,GAAG,WAAW,KAAK,CAAC;AACxC,SAAO,EAAE,YAAY,WAAW,WAAW,OAAO,CAAC,MAAM,WAAW,IAAI,CAAC,GAAG,cAAc,IAAI,EAAE;AAClG;AAMA,eAAsB,iCACpB,OACA,OACA,gBACA,YACA,KACe;AACf,QAAM,SAAS,gBAAgB,UAAU;AACzC,MAAI,WAAW,KAAM;AACrB,QAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,wBAAkC;AACnF,QAAM,wBAAwB,EAAE,OAAO,OAAO,gBAAgB,KAAK,OAAO,CAAC;AAC7E;AAQA,eAAsB,+BACpB,OACA,OACA,gBACA,KAC4B;AAC5B,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,OAAO,gBAAgB,GAAG;AAC7E,SAAO,WAAW,YAAY,cAAc,CAAC;AAC/C;","names":[]}

package/dist/consent/index.d.ts

@@ -1,23 +0,0 @@
-import { bp as ConsentStrategy } from '../index-Dn5GzPg_.js';
-export { bq as CONSENT_AUDIT_COLLECTION, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bv as loadConsentEntries, bw as writeConsentEntry } from '../index-Dn5GzPg_.js';
-import '../subject-index-O75wKshW.js';
-import '../describe-C6iHNlqJ.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active consent strategy. Calling `withConsent()` returns a
- * `ConsentStrategy` that delegates to the real
- * `writeConsentEntry` / `loadConsentEntries` functions. Only
- * reachable through the `@noy-db/hub/consent` subpath.
- */
-
-/**
- * Build the default consent strategy. Pass into
- * `createNoydb({ consentStrategy: withConsent() })` to enable
- * per-operation audit writes into the reserved `_consent_audit`
- * collection.
- */
-declare function withConsent(): ConsentStrategy;
-
-export { ConsentStrategy, withConsent };

package/dist/crdt/index.d.ts

@@ -1,34 +0,0 @@
-import { bf as CrdtStrategy } from '../index-Dn5GzPg_.js';
-export { bg as CrdtMode, bh as CrdtState, bi as LwwMapState, bj as RgaState, bk as YjsState, bl as buildLwwMapState, bm as buildRgaState, bn as mergeCrdtStates, bo as resolveCrdtSnapshot } from '../index-Dn5GzPg_.js';
-import '../subject-index-O75wKshW.js';
-import '../describe-C6iHNlqJ.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active CRDT strategy factory. Calling `withCrdt()` returns a
- * `CrdtStrategy` whose methods delegate to the real LWW-Map / RGA /
- * merge / snapshot helpers in `./crdt.ts`. Only reachable through
- * the `@noy-db/hub/crdt` subpath.
- */
-
-/**
- * Build the default CRDT strategy. Pass into
- * `createNoydb({ crdtStrategy: withCrdt() })` to enable collections
- * declared with `crdt: 'lww-map' | 'rga' | 'yjs'`.
- *
- * @example
- * ```ts
- * import { createNoydb } from '@noy-db/hub'
- * import { withCrdt } from '@noy-db/hub/crdt'
- *
- * const db = await createNoydb({
- *   store, user, secret,
- *   crdtStrategy: withCrdt(),
- * })
- * const notes = vault.collection('notes', { crdt: 'lww-map' })
- * ```
- */
-declare function withCrdt(): CrdtStrategy;
-
-export { CrdtStrategy, withCrdt };

package/dist/dead-filter-RHMNYOXP.js

@@ -1,28 +0,0 @@
-import {
-  liveBaseIdSet
-} from "./chunk-GYGLAVCX.js";
-import "./chunk-PZ5AY32C.js";
-
-// src/with-shape/satellites/dead-filter.ts
-async function liveBaseIdSetsForBundle(store, vaultName, collectionNames, getDEK) {
-  const { loadPersistedSchema } = await import("./storage-KEXIXLGM.js");
-  const out = /* @__PURE__ */ new Map();
-  for (const name of collectionNames) {
-    if (name.startsWith("_")) continue;
-    let dek;
-    try {
-      dek = await getDEK(name);
-    } catch {
-      continue;
-    }
-    const persisted = await loadPersistedSchema(store, vaultName, name, dek);
-    const marker = persisted?.satellite;
-    if (!marker) continue;
-    out.set(name, await liveBaseIdSet(store, vaultName, marker.base));
-  }
-  return out;
-}
-export {
-  liveBaseIdSetsForBundle
-};
-//# sourceMappingURL=dead-filter-RHMNYOXP.js.map

package/dist/decrypt-partition-IHtxEnTi.d.ts

@@ -1,21 +0,0 @@
-/** One decrypted record from an extracted-partition compartment. */
-interface DecryptedRecord {
-    readonly id: string;
-    readonly record: Record<string, unknown>;
-    /** Source envelope write timestamp (ISO) — for last-write-wins merges. */
-    readonly ts: string;
-    /** Source envelope version. */
-    readonly version: number;
-    /** Provenance source id (FR-5). Present only when the source collection had provenance:true and a source was supplied on put. */
-    readonly source?: string;
-    /** ISO-8601 timestamp the provenance source was recorded (FR-5). */
-    readonly sourceTs?: string;
-}
-/**
- * Decrypt every record of an extracted-partition bundle to plaintext,
- * grouped by collection. Throws if the bundle isn't an
- * extracted-partition or the transfer key is wrong.
- */
-declare function decryptExtractedPartition(bundleBytes: Uint8Array, transferKey: Uint8Array): Promise<Record<string, DecryptedRecord[]>>;
-
-export { type DecryptedRecord as D, decryptExtractedPartition as d };

package/dist/delegation-IHXOASHV.js

@@ -1,25 +0,0 @@
-import {
-  DELEGATIONS_COLLECTION,
-  issueDelegation,
-  loadActiveDelegations,
-  revokeDelegation
-} from "./chunk-TIAYXOEI.js";
-import "./chunk-26FSVNBL.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-7TAV3BFQ.js";
-import "./chunk-PVC2FBCQ.js";
-import "./chunk-5UOPIPZC.js";
-import "./chunk-UWZ7O4NR.js";
-import "./chunk-REWTMYSF.js";
-import "./chunk-VFQOE76I.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-5HZULLHE.js";
-import "./chunk-OJ64XMPJ.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DELEGATIONS_COLLECTION,
-  issueDelegation,
-  loadActiveDelegations,
-  revokeDelegation
-};
-//# sourceMappingURL=delegation-IHXOASHV.js.map

package/dist/derivations/index.d.ts

@@ -1,70 +0,0 @@
-export { w as withDerivation, a as withRollup } from '../with-rollup-K_iwal4b.js';
-import { ca as DerivationStrategy, cb as DerivationContext } from '../index-Dn5GzPg_.js';
-export { cc as ArrayOutputSpec, cd as DerivationCapExceededError, ce as DerivationCycleError, cf as DerivationDepthError, cg as DerivationOutputShapeError, ch as DerivationOutputUnknownError, ci as DerivationRegistry, cj as DerivationStrategyHandle, ck as DerivedFromMeta, cl as OutputSpec, cm as RecordOutputSpec } from '../index-Dn5GzPg_.js';
-import '../subject-index-O75wKshW.js';
-import '../describe-C6iHNlqJ.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-interface RunResult {
-    outputs: Record<string, OutputResult>;
-    failed: boolean;
-}
-/**
- * Per-output result of a strategy invocation. Discriminated by
- * `kind`:
- *
- * - `record` — the existing v1 shape: one value (or a "skipped"
- *   marker if the output was optional and `derive` returned null).
- * - `array` — a list of `(key, value)` entries.
- *   The caller diffs these against the previously-emitted key set
- *   (loaded from the fanout sidecar) to compute deletes + upserts.
- */
-type OutputResult = RecordOutputResult | ArrayOutputResult | FailedOutputResult;
-interface RecordOutputResult {
-    kind: 'record';
-    value: Record<string, unknown>;
-    ok: true;
-    /**
-     * `true` when an optional output returned `null` /
-     * `undefined`. The caller deletes any previously-emitted output at
-     * the same id (mirrors "tombstone for derived data"); a never-emitted
-     * output is a silent no-op. `ok: true` because skipping is a
-     * successful outcome, not a failure.
-     */
-    skipped?: boolean;
-}
-interface ArrayOutputResult {
-    kind: 'array';
-    ok: true;
-    /** One `(key, value)` per derived row. Empty array means "all prior outputs for this source go." */
-    entries: ReadonlyArray<{
-        readonly key: string;
-        readonly value: Record<string, unknown>;
-    }>;
-}
-interface FailedOutputResult {
-    kind: 'failed';
-    ok: false;
-    error: Error;
-    /** Always empty on failure; present so consumers don't have to narrow. */
-    value: Record<string, unknown>;
-}
-/**
- * Stateless functions that execute a derivation strategy. Persistence
- * (encrypt + store.put) is the caller's job — typically
- * `DerivationRegistry.onSourceWrite` which iterates run() results and
- * writes each output via `Collection.put`.
- */
-declare const DerivationExecutor: {
-    /**
-     * Run `derive` once, validate output shape against the spec, stamp
-     * `_derivedFrom` onto every output. Returns per-output success or
-     * failure; throws only for shape mismatches (a contract violation).
-     */
-    run<TSource extends Record<string, unknown>, TOutputs extends Record<string, Record<string, unknown> | ReadonlyArray<Record<string, unknown>>>>(strategy: DerivationStrategy<TSource, TOutputs>, source: TSource & {
-        id: string;
-    }, sourceVersion: number, strategyHash: string, ctx: DerivationContext): Promise<RunResult>;
-};
-
-export { DerivationExecutor, DerivationStrategy };

package/dist/derive-CD3ZVIXK.js

@@ -1,21 +0,0 @@
-import {
-  derivePersistedSchema,
-  isZod4Schema,
-  isZodSchema
-} from "./chunk-55LSDABW.js";
-import "./chunk-7TAV3BFQ.js";
-import "./chunk-PVC2FBCQ.js";
-import "./chunk-5UOPIPZC.js";
-import "./chunk-UWZ7O4NR.js";
-import "./chunk-REWTMYSF.js";
-import "./chunk-VFQOE76I.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-5HZULLHE.js";
-import "./chunk-OJ64XMPJ.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  derivePersistedSchema,
-  isZod4Schema,
-  isZodSchema
-};
-//# sourceMappingURL=derive-CD3ZVIXK.js.map

package/dist/describe/index.d.ts

@@ -1 +0,0 @@
-export { C as CollectionDescription, a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType } from '../describe-C6iHNlqJ.js';

package/dist/describe/index.js

@@ -1 +0,0 @@
-//# sourceMappingURL=index.js.map

package/dist/describe-C6iHNlqJ.d.ts

@@ -1,162 +0,0 @@
-/**
- * Consumer-neutral, data-relatable field descriptors — the canonical,
- * validator-agnostic authoring channel. Merged by `collection.describe()`.
- *
- * Descriptive, never prescriptive: label/semanticType/unit/sensitivity/
- * aggregate/aliases/displayFor only. Layout, styling, and active-locale
- * selection stay app-side.
- *
- * @module
- */
-/** Known semantic types; the union is open — unknown strings pass through. */
-type SemanticType = 'date' | 'datetime' | 'email' | 'url' | 'currency' | 'percent' | 'country' | 'vat' | 'iban' | 'entity' | (string & {});
-interface FieldMeta {
-    /** Human label for any displayable field. Required. */
-    label: string;
-    description?: string;
-    semanticType?: SemanticType;
-    /** Display unit, e.g. '€', '%', 'kg'. */
-    unit?: string;
-    /** Data classification driving redaction/inspector masking. */
-    sensitivity?: 'public' | 'pii' | 'secret';
-    /** Default aggregation for this field. */
-    aggregate?: 'sum' | 'count' | 'distinct' | 'none';
-    /** Canonical search synonyms (data vocabulary, not UI). */
-    aliases?: readonly string[];
-    /** Entity pairing: the field holding the human label for this id (buyerId → buyerName). */
-    displayFor?: string;
-    /**
-     * Override the widget hint derived from semanticType/type.
-     * e.g. 'textarea', 'date', 'money', 'select', 'checkbox', 'number', 'text'.
-     * When absent, the widget is derived automatically by buildDescription.
-     */
-    widget?: string;
-    /**
-     * Card/section grouping hint for detail & form layouts (e.g. 'Identity',
-     * 'Amounts'). Purely descriptive metadata — consumers group; describe()
-     * keeps emitting fields alphabetically.
-     */
-    group?: string;
-    /** Relative ordering hint within (and across) groups. Lower renders first. */
-    order?: number;
-}
-
-/**
- * Descriptive metadata for the collection and vault levels of the metadata
- * ladder (field level = FieldMeta). Identity, not structure: label /
- * description / icon only. Descriptive, never prescriptive.
- * @module
- */
-/** A collection's own descriptive metadata. */
-interface CollectionMeta {
-    /** Friendly name; falls back to the humanized collection name. */
-    label?: string;
-    description?: string;
-    /** Semantic icon NAME (e.g. a Lucide key), not styling. */
-    icon?: string;
-    /** Plural form for list headers ("Invoice" → "Invoices"). */
-    pluralLabel?: string;
-}
-/** A vault's own descriptive metadata. */
-interface VaultMeta {
-    label?: string;
-    description?: string;
-    icon?: string;
-}
-
-/**
- * `buildDescription` — pure assembler that merges collection config
- * (moneyFields / dictKeyFields / refs / computed / fieldMeta) with an
- * optional validator-derived `zodFields` map into a normalised
- * {@link CollectionDescription}.
- *
- * The sync path (`collection.describe()`) passes `zodFields: undefined`.
- * The async path supplies a populated map and validator-derived type
- * strings.
- *
- * @module
- */
-
-interface DescribedField {
-    readonly key: string;
-    /** Sync: inferred from config ('number'|'enum'|'string'|'array'|'unknown'). Async (Task 4): validator-derived. */
-    readonly type: string;
-    readonly optional: boolean;
-    readonly constraints?: Record<string, unknown>;
-    readonly label: string;
-    readonly description?: string;
-    /** Card/section grouping hint for detail & form layouts. From fieldMeta/zod .meta(). */
-    readonly group?: string;
-    /** Relative ordering hint within and across groups. Lower renders first. */
-    readonly order?: number;
-    readonly semanticType?: string;
-    readonly unit?: string;
-    readonly sensitivity?: 'public' | 'pii' | 'secret';
-    readonly aggregate?: 'sum' | 'count' | 'distinct' | 'none';
-    readonly aliases?: readonly string[];
-    readonly ref?: {
-        target: string;
-        mode: string;
-        isArray?: true;
-    };
-    readonly displayFor?: string;
-    readonly money?: {
-        mode: 'fixed' | 'multi';
-        currency?: string;
-        scale?: number;
-        rounding?: string;
-    };
-    readonly dict?: {
-        name: string;
-        static: boolean;
-        values?: readonly {
-            value: string;
-            label?: string;
-        }[];
-    };
-    readonly computed?: true;
-    /** i18n metadata for fields declared with i18nText(). Present only when the field is i18n-enabled. */
-    readonly i18n?: {
-        readonly locales?: readonly string[];
-        readonly densify?: boolean;
-    };
-    /** Widget hint derived from semanticType+type, overridable via fieldMeta.widget. */
-    readonly widget: string;
-    /** Whether the field is user-editable. False for computed, id, and provenance-stamped fields. */
-    readonly editable: boolean;
-    /** Present when the field is classified. Serialized read-projection contract. */
-    readonly classified?: {
-        readonly preset: string;
-        readonly storage: 'recoverable' | 'never' | 'digest-only';
-        readonly list: 'omit' | {
-            readonly mask: string;
-        } | {
-            readonly rider: string;
-        };
-        /**
-         * Present (and `true`) only when the field opted into the equatable blind
-         * index. Additive metadata — emitted UNGATED (no `withClassified()` needed;
-         * `toJSONSchema()` carries it too), so it advertises *that* the field is
-         * equatable beyond the DEK-consent boundary. Intended: it's a structural
-         * property a schema consumer legitimately needs and discloses no value. A
-         * deployment wanting it gated can gate this behind its value-bearing door.
-         */
-        readonly equatable?: true;
-    };
-}
-interface CollectionDescription {
-    readonly collection: string;
-    readonly fields: readonly DescribedField[];
-    /** Collection-level descriptive metadata; label falls back to the humanized collection name. */
-    readonly meta: CollectionMeta;
-}
-/** Options for the async describe(opts) overload. */
-interface DescribeOptions {
-    /**
-     * When true, resolve dynamic-dict labels from vault.dictionary(name).list()
-     * and populate dict.values[].label for dynamic dictKey fields.
-     */
-    readonly resolveDictLabels?: boolean;
-}
-
-export type { CollectionDescription as C, DescribeOptions as D, FieldMeta as F, SemanticType as S, VaultMeta as V, CollectionMeta as a, DescribedField as b };