@noy-db/hub 0.3.0-pre.8 → 0.3.0

package/dist/derive-H2BJTLUI.js

@@ -0,0 +1,21 @@
+import {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+} from "./chunk-W22IKJE2.js";
+import "./chunk-XDYREZWE.js";
+import "./chunk-7DSTRQIJ.js";
+import "./chunk-HB3RFQSC.js";
+import "./chunk-JKJOGPZN.js";
+import "./chunk-5M5DVGV7.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-CIE2BASH.js";
+import "./chunk-JNAI2HN2.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+};
+//# sourceMappingURL=derive-H2BJTLUI.js.map

package/dist/enclave-AP3I5W7O.js

@@ -0,0 +1,141 @@
+import {
+  RecordCodec,
+  SEALED_CEK_NS,
+  applyRewrappedBody,
+  computeBrokerProof,
+  deriveBrokerProofBits,
+  deriveBrokerProofKey,
+  envelopeBodyForHash,
+  findByDet,
+  hasPerRecordKey,
+  isRewrappedUnder,
+  issueChallenge,
+  makeReservedEnvelopes,
+  openEnvelopeJson,
+  queryByDet,
+  resolveStableCek,
+  revokeSealedRecord,
+  rewrapBodyToDek,
+  rewrapEnvelope,
+  rotateRecordCek,
+  sealRecordToHost,
+  verifyBrokerProof,
+  writeEnvelopeBody
+} from "./chunk-XDYREZWE.js";
+import {
+  buildDeleteMarker,
+  buildTombstone,
+  isDeleteMarker,
+  isTombstone,
+  isTombstoneShape
+} from "./chunk-7DSTRQIJ.js";
+import {
+  ctEqualTags,
+  deriveVdigSlotKey,
+  evaluateKofN
+} from "./chunk-HB3RFQSC.js";
+import "./chunk-JKJOGPZN.js";
+import {
+  computeBidxTarget,
+  deriveClassifyIndexKey,
+  deriveClassifyIndexSalt,
+  mintBidxTag
+} from "./chunk-5M5DVGV7.js";
+import {
+  pbkdf2VerifyDigest
+} from "./chunk-LP7BEXCT.js";
+import {
+  base64ToBuffer,
+  bufferToBase64,
+  decrypt,
+  decryptBytes,
+  decryptBytesWithAAD,
+  decryptDeterministic,
+  deriveDeterministicKey,
+  deriveKey,
+  derivePassphraseKey,
+  derivePresenceKey,
+  deriveSealedFieldKey,
+  deriveSealedFieldKeyFromCek,
+  encrypt,
+  encryptBytes,
+  encryptBytesWithAAD,
+  encryptDeterministic,
+  generateDEK,
+  generateIV,
+  generateSalt,
+  hmacSha256Hex,
+  importCek,
+  sha256Hex,
+  unwrapCek,
+  unwrapKey,
+  wrapCek,
+  wrapKey
+} from "./chunk-CIE2BASH.js";
+import "./chunk-JNAI2HN2.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  RecordCodec,
+  SEALED_CEK_NS,
+  applyRewrappedBody,
+  base64ToBuffer,
+  bufferToBase64,
+  buildDeleteMarker,
+  buildTombstone,
+  computeBidxTarget,
+  computeBrokerProof,
+  ctEqualTags,
+  decrypt,
+  decryptBytes,
+  decryptBytesWithAAD,
+  decryptDeterministic,
+  deriveBrokerProofBits,
+  deriveBrokerProofKey,
+  deriveClassifyIndexKey,
+  deriveClassifyIndexSalt,
+  deriveDeterministicKey,
+  deriveKey,
+  derivePassphraseKey,
+  derivePresenceKey,
+  deriveSealedFieldKey,
+  deriveSealedFieldKeyFromCek,
+  deriveVdigSlotKey,
+  encrypt,
+  encryptBytes,
+  encryptBytesWithAAD,
+  encryptDeterministic,
+  envelopeBodyForHash,
+  evaluateKofN,
+  findByDet,
+  generateDEK,
+  generateIV,
+  generateSalt,
+  hasPerRecordKey,
+  hmacSha256Hex,
+  importCek,
+  isDeleteMarker,
+  isRewrappedUnder,
+  isTombstone,
+  isTombstoneShape,
+  issueChallenge,
+  makeReservedEnvelopes,
+  mintBidxTag,
+  openEnvelopeJson,
+  pbkdf2VerifyDigest,
+  queryByDet,
+  resolveStableCek,
+  revokeSealedRecord,
+  rewrapBodyToDek,
+  rewrapEnvelope,
+  rotateRecordCek,
+  sealRecordToHost,
+  sha256Hex,
+  unwrapCek,
+  unwrapKey,
+  verifyBrokerProof,
+  wrapCek,
+  wrapKey,
+  writeEnvelopeBody
+};
+//# sourceMappingURL=enclave-AP3I5W7O.js.map

package/dist/executor-KGWTNEQD.js

@@ -0,0 +1,9 @@
+import {
+  GuardExecutor
+} from "./chunk-GKEWXIV5.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-KGWTNEQD.js.map

package/dist/executor-OVEXR6RT.js

@@ -0,0 +1,9 @@
+import {
+  DerivationExecutor
+} from "./chunk-VN3DBQAU.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-OVEXR6RT.js.map

package/dist/executor-UNEH5ZYH.js

@@ -0,0 +1,25 @@
+import {
+  MaterializedViewExecutor
+} from "./chunk-FM3G3NOY.js";
+import "./chunk-4CTHCN4J.js";
+import "./chunk-KSKBRKGJ.js";
+import "./chunk-LXEXBTKL.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-NJ4EOKMB.js";
+import "./chunk-6JTIAGHD.js";
+import "./chunk-4VNQOLML.js";
+import "./chunk-Q5VNKNE5.js";
+import "./chunk-XDYREZWE.js";
+import "./chunk-7DSTRQIJ.js";
+import "./chunk-HB3RFQSC.js";
+import "./chunk-JKJOGPZN.js";
+import "./chunk-5M5DVGV7.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-CIE2BASH.js";
+import "./chunk-JNAI2HN2.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MaterializedViewExecutor
+};
+//# sourceMappingURL=executor-UNEH5ZYH.js.map

package/dist/export-accessible-PCMXSUZS.js

@@ -0,0 +1,23 @@
+import {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+} from "./chunk-F64IRYG3.js";
+import "./chunk-FHS2HQSH.js";
+import "./chunk-X3YYQWOQ.js";
+import "./chunk-XDYREZWE.js";
+import "./chunk-7DSTRQIJ.js";
+import "./chunk-HB3RFQSC.js";
+import "./chunk-JKJOGPZN.js";
+import "./chunk-5M5DVGV7.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-CIE2BASH.js";
+import "./chunk-JNAI2HN2.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+};
+//# sourceMappingURL=export-accessible-PCMXSUZS.js.map

package/dist/extract-partition-SWHFSYJO.js

@@ -0,0 +1,38 @@
+import {
+  extractPartition,
+  extractPartitionCore,
+  reKeyBlobs,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+} from "./chunk-JIF24JPM.js";
+import "./chunk-VZRODIM3.js";
+import "./chunk-SNZ6URZZ.js";
+import "./chunk-FHS2HQSH.js";
+import "./chunk-X3YYQWOQ.js";
+import "./chunk-ZICD77GM.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-PN2XMATY.js";
+import "./chunk-Q5VNKNE5.js";
+import "./chunk-XDYREZWE.js";
+import "./chunk-7DSTRQIJ.js";
+import "./chunk-HB3RFQSC.js";
+import "./chunk-JKJOGPZN.js";
+import "./chunk-5M5DVGV7.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-CIE2BASH.js";
+import "./chunk-JNAI2HN2.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  extractPartition,
+  extractPartitionCore,
+  reKeyBlobs,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+};
+//# sourceMappingURL=extract-partition-SWHFSYJO.js.map

package/dist/fanout-sidecar-A765THMX.js

@@ -0,0 +1,74 @@
+import {
+  openEnvelopeJson
+} from "./chunk-XDYREZWE.js";
+import "./chunk-7DSTRQIJ.js";
+import "./chunk-HB3RFQSC.js";
+import "./chunk-JKJOGPZN.js";
+import "./chunk-5M5DVGV7.js";
+import "./chunk-LP7BEXCT.js";
+import {
+  encrypt
+} from "./chunk-CIE2BASH.js";
+import {
+  NOYDB_FORMAT_VERSION
+} from "./chunk-JNAI2HN2.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-formula/derivations/fanout-sidecar.ts
+var FANOUT_DEK_COLLECTION = "_meta";
+function recordId(source, sourceId, outputKey) {
+  return `derivations-fanout/${source}/${sourceId}/${outputKey}`;
+}
+async function loadFanoutSidecar(store, vault, source, sourceId, outputKey, getDEK, encrypted) {
+  const envelope = await store.get(vault, "_meta", recordId(source, sourceId, outputKey));
+  if (!envelope) return void 0;
+  const json = !encrypted || envelope._iv === "" ? envelope._data : await openEnvelopeJson(envelope, await getDEK(FANOUT_DEK_COLLECTION));
+  const parsed = JSON.parse(json);
+  if (parsed._noydb_fanout !== 1) return void 0;
+  if (!Array.isArray(parsed.keys)) return void 0;
+  return parsed;
+}
+async function saveFanoutSidecar(store, vault, payload, getDEK, encrypted) {
+  const doc = {
+    _noydb_fanout: 1,
+    source: payload.source,
+    sourceId: payload.sourceId,
+    outputKey: payload.outputKey,
+    outputCollection: payload.outputCollection,
+    keys: payload.keys,
+    emittedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const id = recordId(payload.source, payload.sourceId, payload.outputKey);
+  const prior = await store.get(vault, "_meta", id);
+  const json = JSON.stringify(doc);
+  let envelope;
+  if (!encrypted) {
+    envelope = {
+      _noydb: NOYDB_FORMAT_VERSION,
+      _v: (prior?._v ?? 0) + 1,
+      _ts: (/* @__PURE__ */ new Date()).toISOString(),
+      _iv: "",
+      _data: json
+    };
+  } else {
+    const { iv, data } = await encrypt(json, await getDEK(FANOUT_DEK_COLLECTION));
+    envelope = {
+      _noydb: NOYDB_FORMAT_VERSION,
+      _v: (prior?._v ?? 0) + 1,
+      _ts: (/* @__PURE__ */ new Date()).toISOString(),
+      _iv: iv,
+      _data: data
+    };
+  }
+  await store.put(vault, "_meta", id, envelope);
+}
+async function deleteFanoutSidecar(store, vault, source, sourceId, outputKey) {
+  await store.delete(vault, "_meta", recordId(source, sourceId, outputKey));
+}
+export {
+  deleteFanoutSidecar,
+  loadFanoutSidecar,
+  saveFanoutSidecar
+};
+//# sourceMappingURL=fanout-sidecar-A765THMX.js.map

package/dist/find-N6345CNT.js

@@ -0,0 +1,11 @@
+import {
+  computeBidxTarget
+} from "./chunk-5M5DVGV7.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-CIE2BASH.js";
+import "./chunk-BIOUI4HL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  computeBidxTarget
+};
+//# sourceMappingURL=find-N6345CNT.js.map

package/dist/forget/index.js

@@ -1,21 +1,21 @@
 import {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION
-} from "../chunk-VVLOWY74.js";
-import "../chunk-7TAV3BFQ.js";
-import "../chunk-PVC2FBCQ.js";
-import "../chunk-5UOPIPZC.js";
-import "../chunk-UWZ7O4NR.js";
-import "../chunk-REWTMYSF.js";
-import "../chunk-VFQOE76I.js";
+} from "../chunk-5O3XF4DV.js";
+import "../chunk-XDYREZWE.js";
+import "../chunk-7DSTRQIJ.js";
+import "../chunk-HB3RFQSC.js";
+import "../chunk-JKJOGPZN.js";
+import "../chunk-5M5DVGV7.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-5HZULLHE.js";
-import "../chunk-OJ64XMPJ.js";
+import "../chunk-CIE2BASH.js";
+import "../chunk-JNAI2HN2.js";
+import "../chunk-BIOUI4HL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/forget/active.ts
 function withForgetCascade(opts) {
-  return { subjects: { ...opts.subjects } };
+  return { subjects: { ...opts.subjects }, ...opts.scopedPurge !== void 0 ? { scopedPurge: opts.scopedPurge } : {} };
 }
 export {
   NO_FORGET,

package/dist/forget/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForgetCascade` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForgetCascade(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects } }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BO,SAAS,kBAAkB,MAA0C;AAC1E,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,EAAE;AAC1C;","names":[]}
+{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForgetCascade` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForgetCascade(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BO,SAAS,kBAAkB,MAA0C;AAC1E,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;","names":[]}

package/dist/guards/index.js

@@ -2,23 +2,23 @@ import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "../chunk-PAJCRV7O.js";
-import {
-  ReadOnlyVaultFacade
-} from "../chunk-RUIMKQTA.js";
+} from "../chunk-QRB7NAOJ.js";
 import {
   GuardRegistry
 } from "../chunk-YMUGBZN2.js";
+import {
+  ReadOnlyVaultFacade
+} from "../chunk-JK733I5V.js";
 import {
   GuardExecutor
-} from "../chunk-HU55NPHZ.js";
+} from "../chunk-GKEWXIV5.js";
 import {
   AmendmentForbiddenError,
   FieldFrozenError,
   IllegalTransitionError,
   InvariantError,
   RecordLockedError
-} from "../chunk-OJ64XMPJ.js";
+} from "../chunk-BIOUI4HL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   AmendmentForbiddenError,

package/dist/history/index.js

@@ -5,9 +5,10 @@ import {
   getHistory,
   getVersionEnvelope,
   pruneHistory,
+  rewrapHistory,
   saveHistory,
   tombstoneHistory
-} from "../chunk-62APEMF3.js";
+} from "../chunk-VFUPHI2Z.js";
 import {
   diff,
   formatDiff
@@ -16,11 +17,12 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-3YKBGS3I.js";
+} from "../chunk-XWZVFISC.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "../chunk-I7FD46FF.js";
+import "../chunk-PN2XMATY.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -28,16 +30,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-UMH35AQV.js";
-import "../chunk-7TAV3BFQ.js";
-import "../chunk-PVC2FBCQ.js";
-import "../chunk-5UOPIPZC.js";
-import "../chunk-UWZ7O4NR.js";
-import "../chunk-REWTMYSF.js";
-import "../chunk-VFQOE76I.js";
+} from "../chunk-Q5VNKNE5.js";
+import "../chunk-XDYREZWE.js";
+import "../chunk-7DSTRQIJ.js";
+import "../chunk-HB3RFQSC.js";
+import "../chunk-JKJOGPZN.js";
+import "../chunk-5M5DVGV7.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-5HZULLHE.js";
-import "../chunk-OJ64XMPJ.js";
+import "../chunk-CIE2BASH.js";
+import "../chunk-JNAI2HN2.js";
+import "../chunk-BIOUI4HL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/history/active.ts
@@ -49,6 +51,7 @@ function withHistory() {
     pruneHistory,
     clearHistory,
     tombstoneHistory,
+    rewrapHistory,
     envelopePayloadHash,
     computePatch,
     diff,

package/dist/history/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-commit/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-commit/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n  rewrapHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    rewrapHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}

package/dist/i18n/index.js

@@ -1,37 +1,41 @@
 import {
-  DICT_COLLECTION_PREFIX,
-  DictionaryHandle,
-  dictCollectionName,
+  withLookup
+} from "../chunk-FUG4SFN3.js";
+import {
   dictKey,
-  isDictCollectionName,
-  isDictKeyDescriptor,
-  isStaticDictDescriptor,
   staticDict
-} from "../chunk-PMMV5SQC.js";
-import "../chunk-TUL5YQWF.js";
-import "../chunk-FZK3JJJK.js";
-import "../chunk-UMH35AQV.js";
-import "../chunk-7TAV3BFQ.js";
-import "../chunk-PVC2FBCQ.js";
-import "../chunk-5UOPIPZC.js";
-import "../chunk-UWZ7O4NR.js";
-import "../chunk-REWTMYSF.js";
-import "../chunk-VFQOE76I.js";
-import "../chunk-LP7BEXCT.js";
-import "../chunk-5HZULLHE.js";
+} from "../chunk-EVX47VBM.js";
+import {
+  DICT_COLLECTION_PREFIX,
+  LookupHandle,
+  dictCollectionName
+} from "../chunk-NJ4EOKMB.js";
 import {
   applyI18nLocale,
   enforceScript,
   getAtPath,
   i18nText,
   inferScripts,
+  isDictCollectionName,
+  isDictKeyDescriptor,
   isI18nTextDescriptor,
+  isStaticDictDescriptor,
+  presentI18nForJoin,
   resolveI18nText,
   resolvePolicy,
-  setAtPathInPlace,
   stripI18nFilled,
   validateI18nTextValue
-} from "../chunk-BASCPHNM.js";
+} from "../chunk-6JTIAGHD.js";
+import "../chunk-4VNQOLML.js";
+import "../chunk-Q5VNKNE5.js";
+import "../chunk-XDYREZWE.js";
+import "../chunk-7DSTRQIJ.js";
+import "../chunk-HB3RFQSC.js";
+import "../chunk-JKJOGPZN.js";
+import "../chunk-5M5DVGV7.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-CIE2BASH.js";
+import "../chunk-JNAI2HN2.js";
 import {
   DictKeyInUseError,
   DictKeyMissingError,
@@ -42,10 +46,10 @@ import {
   StaticDictReadonlyError,
   TranslatorNotConfiguredError,
   UnknownDictCodeError
-} from "../chunk-OJ64XMPJ.js";
+} from "../chunk-BIOUI4HL.js";
 import "../chunk-PZ5AY32C.js";
 
-// src/with-shape/i18n/densify.ts
+// src/via/i18n/densify.ts
 var MARKER = "_i18nFilled";
 function priorFilled(prior, field) {
   if (!prior) return /* @__PURE__ */ new Set();
@@ -120,8 +124,9 @@ function densify(record, prior, fields) {
   }
 }
 
-// src/with-shape/i18n/active.ts
+// src/via/i18n/active.ts
 function withI18n() {
+  const lookup = withLookup();
   return {
     applyI18nLocale,
     validateI18nTextValue,
@@ -129,18 +134,26 @@ function withI18n() {
     computeExemptFills,
     densify,
     buildDictionaryHandle(opts) {
-      return new DictionaryHandle(
-        opts.adapter,
-        opts.compartmentName,
-        opts.dictionaryName,
-        opts.keyring,
-        opts.getDEK,
-        opts.encrypted,
-        opts.ledger,
-        opts.options,
-        opts.findAndUpdateReferences,
-        opts.emitter
-      );
+      return lookup.buildLookupHandle({
+        adapter: opts.adapter,
+        compartmentName: opts.compartmentName,
+        dimensionName: opts.dictionaryName,
+        keyring: opts.keyring,
+        reservedEnvelopes: opts.reservedEnvelopes,
+        encrypted: opts.encrypted,
+        ledger: opts.ledger,
+        options: opts.options,
+        findAndUpdateReferences: opts.findAndUpdateReferences,
+        emitter: opts.emitter,
+        buildDeleteMarker: opts.buildDeleteMarker,
+        // #647 fix wave 1
+        onDirty: opts.onDirty,
+        // #650 Task 4
+        onRecordMutated: opts.onRecordMutated,
+        // #650 Task 4
+        checkReferencesOnDelete: opts.checkReferencesOnDelete
+        // #650 Task 5
+      });
     }
   };
 }
@@ -148,7 +161,7 @@ export {
   DICT_COLLECTION_PREFIX,
   DictKeyInUseError,
   DictKeyMissingError,
-  DictionaryHandle,
+  LookupHandle as DictionaryHandle,
   LocaleNotSpecifiedError,
   MissingTranslationError,
   ReservedCollectionNameError,
@@ -167,9 +180,9 @@ export {
   isDictKeyDescriptor,
   isI18nTextDescriptor,
   isStaticDictDescriptor,
+  presentI18nForJoin,
   resolveI18nText,
   resolvePolicy,
-  setAtPathInPlace,
   staticDict,
   stripI18nFilled,
   validateI18nTextValue,