@noy-db/hub 0.3.0-pre.9 → 0.3.0

package/dist/chunk-KBF5GSGX.js

@@ -1,367 +0,0 @@
-import {
-  generateULID
-} from "./chunk-ZJADGNYF.js";
-import {
-  base64ToBuffer,
-  bufferToBase64
-} from "./chunk-AUR7MRHA.js";
-import {
-  SessionExpiredError,
-  SessionNotFoundError,
-  SessionPolicyError,
-  ValidationError
-} from "./chunk-CU62BBRB.js";
-
-// src/with-party/session/session.ts
-var subtle = globalThis.crypto.subtle;
-var DEFAULT_TTL_MS = 60 * 60 * 1e3;
-var sessionKeyStore = /* @__PURE__ */ new Map();
-async function createSession(keyring, vault, options = {}) {
-  const ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;
-  const sessionId = generateULID();
-  const expiresAt = new Date(Date.now() + ttlMs).toISOString();
-  const sessionKey = await subtle.generateKey(
-    { name: "AES-GCM", length: 256 },
-    false,
-    // non-extractable — this is the tab-scope security invariant
-    ["encrypt", "decrypt"]
-  );
-  const dekMap = {};
-  for (const [collName, dek] of keyring.deks) {
-    const raw = await subtle.exportKey("raw", dek);
-    dekMap[collName] = bufferToBase64(raw);
-  }
-  const payload = JSON.stringify({
-    userId: keyring.userId,
-    displayName: keyring.displayName,
-    role: keyring.role,
-    permissions: keyring.permissions,
-    deks: dekMap,
-    salt: bufferToBase64(keyring.salt)
-  });
-  const iv = globalThis.crypto.getRandomValues(new Uint8Array(12));
-  const encrypted = await subtle.encrypt(
-    { name: "AES-GCM", iv },
-    sessionKey,
-    new TextEncoder().encode(payload)
-  );
-  const token = {
-    _noydb_session: 1,
-    sessionId,
-    userId: keyring.userId,
-    vault,
-    role: keyring.role,
-    expiresAt,
-    wrappedKek: bufferToBase64(encrypted),
-    kekIv: bufferToBase64(iv)
-  };
-  sessionKeyStore.set(sessionId, sessionKey);
-  return { token, sessionId };
-}
-async function resolveSession(token) {
-  if (Date.now() > new Date(token.expiresAt).getTime()) {
-    sessionKeyStore.delete(token.sessionId);
-    throw new SessionExpiredError(token.sessionId);
-  }
-  const sessionKey = sessionKeyStore.get(token.sessionId);
-  if (!sessionKey) {
-    throw new SessionNotFoundError(token.sessionId);
-  }
-  const iv = base64ToBuffer(token.kekIv);
-  const ciphertext = base64ToBuffer(token.wrappedKek);
-  let plaintext;
-  try {
-    plaintext = await subtle.decrypt(
-      { name: "AES-GCM", iv },
-      sessionKey,
-      ciphertext
-    );
-  } catch {
-    throw new SessionNotFoundError(token.sessionId);
-  }
-  const payload = JSON.parse(new TextDecoder().decode(plaintext));
-  const deks = /* @__PURE__ */ new Map();
-  for (const [collName, rawBase64] of Object.entries(payload.deks)) {
-    const dek = await subtle.importKey(
-      "raw",
-      base64ToBuffer(rawBase64),
-      { name: "AES-GCM", length: 256 },
-      true,
-      ["encrypt", "decrypt"]
-    );
-    deks.set(collName, dek);
-  }
-  return {
-    userId: payload.userId,
-    displayName: payload.displayName,
-    role: payload.role,
-    permissions: payload.permissions,
-    deks,
-    kek: null,
-    // KEK not available in session context
-    salt: base64ToBuffer(payload.salt),
-    authenticators: []
-  };
-}
-function revokeSession(sessionId) {
-  sessionKeyStore.delete(sessionId);
-}
-function isSessionAlive(token) {
-  if (Date.now() > new Date(token.expiresAt).getTime()) return false;
-  return sessionKeyStore.has(token.sessionId);
-}
-function revokeAllSessions() {
-  sessionKeyStore.clear();
-}
-function activeSessionCount() {
-  return sessionKeyStore.size;
-}
-
-// src/with-party/session/session-policy.ts
-var PolicyEnforcer = class {
-  policy;
-  sessionId;
-  onRevoke;
-  createdAt;
-  lastActivityAt;
-  idleTimer = null;
-  absoluteTimer = null;
-  visibilityHandler = null;
-  constructor(opts) {
-    this.policy = opts.policy;
-    this.sessionId = opts.sessionId;
-    this.onRevoke = opts.onRevoke;
-    this.createdAt = Date.now();
-    this.lastActivityAt = Date.now();
-    this.scheduleIdleTimer();
-    this.scheduleAbsoluteTimer();
-    this.registerBackgroundLock();
-  }
-  /**
-   * Record an activity timestamp and reset the idle timer.
-   * Call this at the top of every Noydb public method.
-   */
-  touch() {
-    this.lastActivityAt = Date.now();
-    this.scheduleIdleTimer();
-  }
-  /**
-   * Check whether the given operation is allowed under the active policy.
-   * Throws `SessionPolicyError` if the operation requires re-authentication.
-   * Throws `SessionExpiredError` if the absolute timeout has been exceeded
-   * (defensive check in case the timer fired before the call arrived).
-   *
-   * This is a synchronous check — callers don't await it.
-   */
-  checkOperation(op) {
-    const { absoluteTimeoutMs } = this.policy;
-    if (absoluteTimeoutMs !== void 0 && Date.now() - this.createdAt >= absoluteTimeoutMs) {
-      this.expire("absolute");
-      throw new SessionExpiredError(this.sessionId);
-    }
-    const required = this.policy.requireReAuthFor ?? [];
-    if (required.includes(op)) {
-      throw new SessionPolicyError(op);
-    }
-  }
-  /**
-   * Tear down timers and background-lock listener. Call from `Noydb.close()`
-   * and whenever the session is revoked externally.
-   */
-  destroy() {
-    if (this.idleTimer) {
-      clearTimeout(this.idleTimer);
-      this.idleTimer = null;
-    }
-    if (this.absoluteTimer) {
-      clearTimeout(this.absoluteTimer);
-      this.absoluteTimer = null;
-    }
-    if (this.visibilityHandler && typeof document !== "undefined") {
-      document.removeEventListener("visibilitychange", this.visibilityHandler);
-      this.visibilityHandler = null;
-    }
-  }
-  /** How long since the last activity, in ms. */
-  get idleMs() {
-    return Date.now() - this.lastActivityAt;
-  }
-  /** How long since session creation, in ms. */
-  get ageMs() {
-    return Date.now() - this.createdAt;
-  }
-  // ── Private ──────────────────────────────────────────────────────────
-  scheduleIdleTimer() {
-    const { idleTimeoutMs } = this.policy;
-    if (!idleTimeoutMs) return;
-    if (this.idleTimer) clearTimeout(this.idleTimer);
-    this.idleTimer = setTimeout(() => {
-      this.expire("idle");
-    }, idleTimeoutMs);
-  }
-  scheduleAbsoluteTimer() {
-    const { absoluteTimeoutMs } = this.policy;
-    if (!absoluteTimeoutMs) return;
-    if (this.absoluteTimer) clearTimeout(this.absoluteTimer);
-    this.absoluteTimer = setTimeout(() => {
-      this.expire("absolute");
-    }, absoluteTimeoutMs);
-  }
-  registerBackgroundLock() {
-    if (!this.policy.lockOnBackground) return;
-    if (typeof document === "undefined") return;
-    this.visibilityHandler = () => {
-      if (document.hidden) {
-        this.expire("background");
-      }
-    };
-    document.addEventListener("visibilitychange", this.visibilityHandler);
-  }
-  expire(reason) {
-    this.destroy();
-    revokeSession(this.sessionId);
-    this.onRevoke(reason);
-  }
-};
-function createEnforcer(opts) {
-  return new PolicyEnforcer(opts);
-}
-function validateSessionPolicy(policy) {
-  const { idleTimeoutMs, absoluteTimeoutMs } = policy;
-  if (idleTimeoutMs !== void 0 && (typeof idleTimeoutMs !== "number" || idleTimeoutMs <= 0)) {
-    throw new Error(`SessionPolicy.idleTimeoutMs must be a positive number, got ${idleTimeoutMs}`);
-  }
-  if (absoluteTimeoutMs !== void 0 && (typeof absoluteTimeoutMs !== "number" || absoluteTimeoutMs <= 0)) {
-    throw new Error(`SessionPolicy.absoluteTimeoutMs must be a positive number, got ${absoluteTimeoutMs}`);
-  }
-  if (idleTimeoutMs !== void 0 && absoluteTimeoutMs !== void 0 && idleTimeoutMs >= absoluteTimeoutMs) {
-    throw new Error(
-      `SessionPolicy.idleTimeoutMs (${idleTimeoutMs}ms) must be less than absoluteTimeoutMs (${absoluteTimeoutMs}ms)`
-    );
-  }
-}
-
-// src/with-party/session/dev-unlock.ts
-var REQUIRED_ACKNOWLEDGE = "I-UNDERSTAND-THIS-DISABLES-UNLOCK-SECURITY";
-var STORAGE_PREFIX = "noydb:dev-unlock:";
-function assertDevEnvironment() {
-  if (typeof process !== "undefined" && process.env.NODE_ENV === "production") {
-    throw new ValidationError(
-      'devUnlock is not available in production builds. process.env.NODE_ENV is "production".'
-    );
-  }
-  if (typeof globalThis !== "undefined" && globalThis.__vite_is_production__ === true) {
-    throw new ValidationError("devUnlock is not available in production builds.");
-  }
-  if (typeof window !== "undefined" && typeof window.location !== "undefined") {
-    const host = window.location.hostname;
-    if (host !== "localhost" && host !== "127.0.0.1" && host !== "::1" && !host.endsWith(".local")) {
-      throw new ValidationError(
-        `devUnlock is only available on localhost. Current hostname: "${host}". Set NODE_ENV=development and run on localhost to use dev unlock.`
-      );
-    }
-  }
-}
-function storageKey(vault, userId) {
-  return `${STORAGE_PREFIX}${vault}:${userId}`;
-}
-function resolveStorage(persistAcrossTabs) {
-  if (typeof window === "undefined") {
-    throw new ValidationError("devUnlock requires a browser environment (window.sessionStorage / window.localStorage).");
-  }
-  return persistAcrossTabs ? window.localStorage : window.sessionStorage;
-}
-async function enableDevUnlock(vault, userId, keyring, options) {
-  if (options.acknowledge !== REQUIRED_ACKNOWLEDGE) {
-    throw new ValidationError(
-      `devUnlock requires acknowledge: '${REQUIRED_ACKNOWLEDGE}'. Got: '${options.acknowledge}'. This is intentional \u2014 the full string must appear in your source.`
-    );
-  }
-  assertDevEnvironment();
-  const storage = resolveStorage(options.persistAcrossTabs);
-  const dekMap = {};
-  for (const [collName, dek] of keyring.deks) {
-    const raw = await globalThis.crypto.subtle.exportKey("raw", dek);
-    dekMap[collName] = bufferToBase64(raw);
-  }
-  const payload = JSON.stringify({
-    _noydb_dev_unlock: 1,
-    userId: keyring.userId,
-    displayName: keyring.displayName,
-    role: keyring.role,
-    permissions: keyring.permissions,
-    deks: dekMap,
-    salt: bufferToBase64(keyring.salt)
-  });
-  storage.setItem(storageKey(vault, userId), payload);
-  console.warn(
-    "%c\u26A0\uFE0F NOYDB DEV UNLOCK ACTIVE \u26A0\uFE0F",
-    "color: red; font-size: 16px; font-weight: bold",
-    `
-
-Vault "${vault}" user "${userId}" is stored in ${options.persistAcrossTabs ? "localStorage" : "sessionStorage"} in PLAINTEXT DEKs.
-This is ONLY safe for local development. Never use in production.
-Call clearDevUnlock() to remove.`
-  );
-}
-async function loadDevUnlock(vault, userId, options = {}) {
-  if (typeof window === "undefined") return null;
-  const storage = resolveStorage(options.persistAcrossTabs);
-  const raw = storage.getItem(storageKey(vault, userId));
-  if (!raw) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (parsed._noydb_dev_unlock !== 1) return null;
-  const deks = /* @__PURE__ */ new Map();
-  for (const [collName, rawBase64] of Object.entries(parsed.deks)) {
-    const dek = await globalThis.crypto.subtle.importKey(
-      "raw",
-      base64ToBuffer(rawBase64),
-      { name: "AES-GCM", length: 256 },
-      true,
-      ["encrypt", "decrypt"]
-    );
-    deks.set(collName, dek);
-  }
-  return {
-    userId: parsed.userId,
-    displayName: parsed.displayName,
-    role: parsed.role,
-    permissions: parsed.permissions,
-    deks,
-    kek: null,
-    salt: base64ToBuffer(parsed.salt),
-    authenticators: []
-  };
-}
-function clearDevUnlock(vault, userId, options = {}) {
-  if (typeof window === "undefined") return;
-  const storage = resolveStorage(options.persistAcrossTabs);
-  storage.removeItem(storageKey(vault, userId));
-}
-function isDevUnlockActive(vault, userId, options = {}) {
-  if (typeof window === "undefined") return false;
-  const storage = resolveStorage(options.persistAcrossTabs);
-  return storage.getItem(storageKey(vault, userId)) !== null;
-}
-
-export {
-  createSession,
-  resolveSession,
-  revokeSession,
-  isSessionAlive,
-  revokeAllSessions,
-  activeSessionCount,
-  PolicyEnforcer,
-  createEnforcer,
-  validateSessionPolicy,
-  enableDevUnlock,
-  loadDevUnlock,
-  clearDevUnlock,
-  isDevUnlockActive
-};
-//# sourceMappingURL=chunk-KBF5GSGX.js.map

package/dist/chunk-KCG3BHFG.js

@@ -1,99 +0,0 @@
-// src/kernel/query/predicate.ts
-function readPath(record, path) {
-  if (record === null || record === void 0) return void 0;
-  if (!path.includes(".")) {
-    return record[path];
-  }
-  const segments = path.split(".");
-  let cursor = record;
-  for (const segment of segments) {
-    if (cursor === null || cursor === void 0) return void 0;
-    cursor = cursor[segment];
-  }
-  return cursor;
-}
-function evaluateFieldClause(record, clause) {
-  const actual = readPath(record, clause.field);
-  const { op, value } = clause;
-  if (clause.via) return clause.via.evaluate(actual, op);
-  switch (op) {
-    case "==":
-      return actual === value;
-    case "!=":
-      return actual !== value;
-    case "<":
-      return isComparable(actual, value) && actual < value;
-    case "<=":
-      return isComparable(actual, value) && actual <= value;
-    case ">":
-      return isComparable(actual, value) && actual > value;
-    case ">=":
-      return isComparable(actual, value) && actual >= value;
-    case "in":
-      return Array.isArray(value) && value.includes(actual);
-    case "contains":
-      if (typeof actual === "string") return typeof value === "string" && actual.includes(value);
-      if (Array.isArray(actual)) return actual.includes(value);
-      return false;
-    case "startsWith":
-      return typeof actual === "string" && typeof value === "string" && actual.startsWith(value);
-    case "between": {
-      if (!Array.isArray(value) || value.length !== 2) return false;
-      const [lo, hi] = value;
-      if (!isComparable(actual, lo) || !isComparable(actual, hi)) return false;
-      return actual >= lo && actual <= hi;
-    }
-    default: {
-      const _exhaustive = op;
-      void _exhaustive;
-      return false;
-    }
-  }
-}
-function isComparable(a, b) {
-  if (typeof a === "number" && typeof b === "number") return true;
-  if (typeof a === "string" && typeof b === "string") return true;
-  if (a instanceof Date && b instanceof Date) return true;
-  return false;
-}
-function evaluateClause(record, clause, fnRecord) {
-  switch (clause.type) {
-    case "field":
-      return evaluateFieldClause(record, clause);
-    case "filter":
-      return clause.fn(fnRecord !== void 0 ? fnRecord : record);
-    case "wherePredicate":
-      return clause.fn(fnRecord !== void 0 ? fnRecord : record, clause.ctx);
-    case "crossJoin":
-      throw new Error(
-        `evaluateClause: 'crossJoin' clauses are expansion primitives and are not evaluated per-record. This is a query planner routing error \u2014 crossJoin clauses must be extracted from the clause list before calling evaluateClause or filterRecords.`
-      );
-    case "group":
-      if (clause.op === "and") {
-        for (const child of clause.clauses) {
-          if (!evaluateClause(record, child, fnRecord)) return false;
-        }
-        return true;
-      } else {
-        for (const child of clause.clauses) {
-          if (evaluateClause(record, child, fnRecord)) return true;
-        }
-        return false;
-      }
-  }
-}
-function hasFnClause(clauses) {
-  for (const c of clauses) {
-    if (c.type === "filter" || c.type === "wherePredicate") return true;
-    if (c.type === "group" && hasFnClause(c.clauses)) return true;
-  }
-  return false;
-}
-
-export {
-  readPath,
-  evaluateFieldClause,
-  evaluateClause,
-  hasFnClause
-};
-//# sourceMappingURL=chunk-KCG3BHFG.js.map

package/dist/chunk-KCG3BHFG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/kernel/query/predicate.ts"],"sourcesContent":["/**\n * Operator implementations for the query DSL.\n *\n * All predicates run client-side, AFTER decryption — they never see ciphertext.\n * Field clauses over a Via-covered field (e.g. money) carry their own\n * evaluator closure (see {@link FieldClause.via}), so this module has no\n * dependency on any Via feature's implementation — still tree-shakeable.\n */\n\n/** Comparison operators supported by the where() builder. */\nexport type Operator =\n  | '=='\n  | '!='\n  | '<'\n  | '<='\n  | '>'\n  | '>='\n  | 'in'\n  | 'contains'\n  | 'startsWith'\n  | 'between'\n\n/**\n * A single field comparison clause inside a query plan.\n * Plans are JSON-serializable, so this type uses primitives only.\n */\nexport interface FieldClause {\n  readonly type: 'field'\n  readonly field: string\n  readonly op: Operator\n  readonly value: unknown\n  /**\n   * Present when `field` is covered by a Via feature binding (e.g. a\n   * declared money field): the opaque payload built by the binding's\n   * `buildClause` at query BUILD time, plus a closure that evaluates it\n   * per record via the binding's `evaluateClause`. Attached by\n   * `Query.where()` / `ScanBuilder.where()` when `source.via` covers the\n   * field. The closure keeps this module free of any dependency on a\n   * Via feature's implementation — clauses are in-memory only, never\n   * serialized, so carrying a function here is safe.\n   */\n  readonly via?: {\n    readonly brand: string\n    readonly payload: unknown\n    readonly evaluate: (actual: unknown, op: string) => boolean\n  }\n}\n\n/**\n * A user-supplied predicate function escape hatch. Not serializable.\n *\n * The predicate accepts `unknown` at the type level so the surrounding\n * Clause type can stay non-parametric — this keeps Collection<T> covariant\n * in T at the public API surface. Builder methods cast user predicates\n * (typed `(record: T) => boolean`) into this shape on the way in.\n */\nexport interface FilterClause {\n  readonly type: 'filter'\n  readonly fn: (record: unknown) => boolean\n}\n\n/**\n * A declared deterministic predicate reference. The query\n * builder produces this via `.wherePredicate(name, ctx?)` when a\n * Query has been augmented with a predicates map (typically by the\n * materialized-view registry).\n *\n * `predicateHash` is the consumer-supplied stable hash for the\n * function body; `ctxHash` is the canonical-JSON SHA-256 of `ctx`.\n * Both fold into the MV's `queryHash` so a function or ctx change\n * forces refresh on next visit.\n *\n * `fn` is resolved at builder time from the predicates map and\n * embedded directly — so `evaluateClause` can fire it without a\n * runtime lookup.\n */\nexport interface WherePredicateClause {\n  readonly type: 'wherePredicate'\n  readonly name: string\n  readonly ctx: unknown\n  readonly predicateHash: string\n  readonly ctxHash: string\n  readonly fn: (record: unknown, ctx?: unknown) => boolean\n}\n\n/** A logical group of clauses combined by AND or OR. */\nexport interface GroupClause {\n  readonly type: 'group'\n  readonly op: 'and' | 'or'\n  readonly clauses: readonly Clause[]\n}\n\n/**\n * Cartesian-product expansion clause. Appended to `QueryPlan.clauses`\n * by `Query.crossJoin()`. Processed in declaration order by\n * `executeClausePipeline` — NOT by `evaluateClause` (which is a\n * per-record predicate and throws on this type).\n */\nexport interface CrossJoinClause {\n  readonly type: 'crossJoin'\n  /** Target collection name to cross-join against. */\n  readonly target: string\n  /** Alias under which the right-side record is exposed on each result row. */\n  readonly as: string\n  /**\n   * Lateral filter callback. `undefined` → full cartesian product.\n   * Two call shapes:\n   *   - Subset:    `(left) => TTarget[]`            — returns the right rows for this left row\n   *   - Predicate: `(left) => (right) => boolean`   — executor materializes then filters\n   */\n  readonly on?: (left: unknown) => unknown[] | ((right: unknown) => boolean)\n  /** When `on:` was supplied as `{ predicate: name }`, the name is stored here for queryHash. */\n  readonly onPredicateName?: string\n  /** Per-clause row ceiling override. `undefined` → `DEFAULT_CROSS_JOIN_MAX_ROWS`. */\n  readonly maxRows?: number\n}\n\nexport type Clause = FieldClause | FilterClause | WherePredicateClause | GroupClause | CrossJoinClause\n\n/**\n * Read a possibly nested field path like \"address.city\" from a record.\n * Returns undefined if any segment is missing.\n */\nexport function readPath(record: unknown, path: string): unknown {\n  if (record === null || record === undefined) return undefined\n  if (!path.includes('.')) {\n    return (record as Record<string, unknown>)[path]\n  }\n  const segments = path.split('.')\n  let cursor: unknown = record\n  for (const segment of segments) {\n    if (cursor === null || cursor === undefined) return undefined\n    cursor = (cursor as Record<string, unknown>)[segment]\n  }\n  return cursor\n}\n\n/**\n * Evaluate a single field clause against a record.\n * Returns false on type mismatches rather than throwing — query results\n * exclude non-matching records by definition.\n */\nexport function evaluateFieldClause(record: unknown, clause: FieldClause): boolean {\n  const actual = readPath(record, clause.field)\n  const { op, value } = clause\n\n  // A Via-covered field (e.g. money) may store a transformed\n  // representation (money: BigInt-exact in scaled-integer space) that the\n  // generic paths below can't compare correctly — the operand was\n  // pre-built at query BUILD time and the binding's own evaluator knows\n  // how to compare it against the raw stored value.\n  if (clause.via) return clause.via.evaluate(actual, op)\n\n  switch (op) {\n    case '==':\n      return actual === value\n    case '!=':\n      return actual !== value\n    case '<':\n      return isComparable(actual, value) && (actual as number) < (value as number)\n    case '<=':\n      return isComparable(actual, value) && (actual as number) <= (value as number)\n    case '>':\n      return isComparable(actual, value) && (actual as number) > (value as number)\n    case '>=':\n      return isComparable(actual, value) && (actual as number) >= (value as number)\n    case 'in':\n      return Array.isArray(value) && value.includes(actual)\n    case 'contains':\n      if (typeof actual === 'string') return typeof value === 'string' && actual.includes(value)\n      if (Array.isArray(actual)) return actual.includes(value)\n      return false\n    case 'startsWith':\n      return typeof actual === 'string' && typeof value === 'string' && actual.startsWith(value)\n    case 'between': {\n      if (!Array.isArray(value) || value.length !== 2) return false\n      const [lo, hi] = value\n      if (!isComparable(actual, lo) || !isComparable(actual, hi)) return false\n      return (actual as number) >= (lo as number) && (actual as number) <= (hi as number)\n    }\n    default: {\n      // Exhaustiveness — TS will error if a new operator is added without a case.\n      const _exhaustive: never = op\n      void _exhaustive\n      return false\n    }\n  }\n}\n\n/**\n * Two values are \"comparable\" if they share an order-defined runtime type.\n * Strings compare lexicographically; numbers and Dates numerically; otherwise false.\n */\nfunction isComparable(a: unknown, b: unknown): boolean {\n  if (typeof a === 'number' && typeof b === 'number') return true\n  if (typeof a === 'string' && typeof b === 'string') return true\n  if (a instanceof Date && b instanceof Date) return true\n  return false\n}\n\n/**\n * Evaluate any clause (field / filter / group) against a record.\n * The recursion depth is bounded by the user's query expression — no risk of\n * blowing the stack on a 50K-record collection.\n *\n * `fnRecord`, when provided, is the view handed to USER CALLBACK clauses\n * (`filter` / `wherePredicate`) instead of `record` — the executor passes\n * the money-decoded view there so user code never sees the stored\n * scaled-int form, while field clauses keep evaluating against the raw\n * record (their money operands are pre-quantized to that space).\n */\nexport function evaluateClause(record: unknown, clause: Clause, fnRecord?: unknown): boolean {\n  switch (clause.type) {\n    case 'field':\n      return evaluateFieldClause(record, clause)\n    case 'filter':\n      return clause.fn(fnRecord !== undefined ? fnRecord : record)\n    case 'wherePredicate':\n      return clause.fn(fnRecord !== undefined ? fnRecord : record, clause.ctx)\n    case 'crossJoin':\n      throw new Error(\n        `evaluateClause: 'crossJoin' clauses are expansion primitives and are not ` +\n          `evaluated per-record. This is a query planner routing error — ` +\n          `crossJoin clauses must be extracted from the clause list before calling ` +\n          `evaluateClause or filterRecords.`,\n      )\n    case 'group':\n      if (clause.op === 'and') {\n        for (const child of clause.clauses) {\n          if (!evaluateClause(record, child, fnRecord)) return false\n        }\n        return true\n      } else {\n        for (const child of clause.clauses) {\n          if (evaluateClause(record, child, fnRecord)) return true\n        }\n        return false\n      }\n  }\n}\n\n/**\n * Does the clause list contain any user-callback clause (filter /\n * wherePredicate), at any group nesting depth? Used by executors to\n * decide whether the per-record decoded view needs materializing.\n */\nexport function hasFnClause(clauses: readonly Clause[]): boolean {\n  for (const c of clauses) {\n    if (c.type === 'filter' || c.type === 'wherePredicate') return true\n    if (c.type === 'group' && hasFnClause(c.clauses)) return true\n  }\n  return false\n}\n"],"mappings":";AA2HO,SAAS,SAAS,QAAiB,MAAuB;AAC/D,MAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,MAAI,CAAC,KAAK,SAAS,GAAG,GAAG;AACvB,WAAQ,OAAmC,IAAI;AAAA,EACjD;AACA,QAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,MAAI,SAAkB;AACtB,aAAW,WAAW,UAAU;AAC9B,QAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,aAAU,OAAmC,OAAO;AAAA,EACtD;AACA,SAAO;AACT;AAOO,SAAS,oBAAoB,QAAiB,QAA8B;AACjF,QAAM,SAAS,SAAS,QAAQ,OAAO,KAAK;AAC5C,QAAM,EAAE,IAAI,MAAM,IAAI;AAOtB,MAAI,OAAO,IAAK,QAAO,OAAO,IAAI,SAAS,QAAQ,EAAE;AAErD,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO,WAAW;AAAA,IACpB,KAAK;AACH,aAAO,WAAW;AAAA,IACpB,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,SAAqB;AAAA,IAC9D,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,UAAsB;AAAA,IAC/D,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,SAAqB;AAAA,IAC9D,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,UAAsB;AAAA,IAC/D,KAAK;AACH,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,MAAM;AAAA,IACtD,KAAK;AACH,UAAI,OAAO,WAAW,SAAU,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AACzF,UAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,SAAS,KAAK;AACvD,aAAO;AAAA,IACT,KAAK;AACH,aAAO,OAAO,WAAW,YAAY,OAAO,UAAU,YAAY,OAAO,WAAW,KAAK;AAAA,IAC3F,KAAK,WAAW;AACd,UAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO;AACxD,YAAM,CAAC,IAAI,EAAE,IAAI;AACjB,UAAI,CAAC,aAAa,QAAQ,EAAE,KAAK,CAAC,aAAa,QAAQ,EAAE,EAAG,QAAO;AACnE,aAAQ,UAAsB,MAAkB,UAAsB;AAAA,IACxE;AAAA,IACA,SAAS;AAEP,YAAM,cAAqB;AAC3B,WAAK;AACL,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAMA,SAAS,aAAa,GAAY,GAAqB;AACrD,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,aAAa,QAAQ,aAAa,KAAM,QAAO;AACnD,SAAO;AACT;AAaO,SAAS,eAAe,QAAiB,QAAgB,UAA6B;AAC3F,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK;AACH,aAAO,oBAAoB,QAAQ,MAAM;AAAA,IAC3C,KAAK;AACH,aAAO,OAAO,GAAG,aAAa,SAAY,WAAW,MAAM;AAAA,IAC7D,KAAK;AACH,aAAO,OAAO,GAAG,aAAa,SAAY,WAAW,QAAQ,OAAO,GAAG;AAAA,IACzE,KAAK;AACH,YAAM,IAAI;AAAA,QACR;AAAA,MAIF;AAAA,IACF,KAAK;AACH,UAAI,OAAO,OAAO,OAAO;AACvB,mBAAW,SAAS,OAAO,SAAS;AAClC,cAAI,CAAC,eAAe,QAAQ,OAAO,QAAQ,EAAG,QAAO;AAAA,QACvD;AACA,eAAO;AAAA,MACT,OAAO;AACL,mBAAW,SAAS,OAAO,SAAS;AAClC,cAAI,eAAe,QAAQ,OAAO,QAAQ,EAAG,QAAO;AAAA,QACtD;AACA,eAAO;AAAA,MACT;AAAA,EACJ;AACF;AAOO,SAAS,YAAY,SAAqC;AAC/D,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,SAAS,YAAY,EAAE,SAAS,iBAAkB,QAAO;AAC/D,QAAI,EAAE,SAAS,WAAW,YAAY,EAAE,OAAO,EAAG,QAAO;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-KNXN47MO.js

@@ -1,155 +0,0 @@
-import {
-  NOYDB_FORMAT_VERSION
-} from "./chunk-UNJU345Q.js";
-import {
-  ValidationError
-} from "./chunk-CU62BBRB.js";
-
-// src/with-party/directory/public-envelope/schema.ts
-var DATA_URL_PREFIX = /^data:([a-zA-Z0-9.+-]+\/[a-zA-Z0-9.+-]+);base64,/;
-function validatePublicEnvelopeInput(input, schema) {
-  const allowed = new Set(schema.fields);
-  for (const key of Object.keys(input)) {
-    const known = key === "name" || key === "description" || key === "icon" || key === "defaultLocale" ? key : void 0;
-    if (!known) {
-      throw new ValidationError(
-        `setPublicEnvelope: unknown field "${key}". Allowed fields: ${[...allowed].join(", ")}.`
-      );
-    }
-    if (!allowed.has(known)) {
-      throw new ValidationError(
-        `setPublicEnvelope: field "${known}" is not enabled in this vault's schema. Allowed fields: ${[...allowed].join(", ")}.`
-      );
-    }
-  }
-  if (input.name !== void 0) {
-    validateText(input.name, "name", schema.maxStringChars);
-  }
-  if (input.description !== void 0) {
-    validateText(input.description, "description", schema.maxStringChars);
-  }
-  if (input.icon !== void 0) {
-    validateIcon(input.icon, schema);
-  }
-  if (input.defaultLocale !== void 0 && typeof input.defaultLocale !== "string") {
-    throw new ValidationError(
-      `setPublicEnvelope: defaultLocale must be a string (BCP-47), got ${typeof input.defaultLocale}.`
-    );
-  }
-}
-function validateText(value, field, maxChars) {
-  if (typeof value === "string") {
-    if (value.length > maxChars) {
-      throw new ValidationError(
-        `setPublicEnvelope: ${field} exceeds the ${maxChars}-character cap (got ${value.length}).`
-      );
-    }
-    return;
-  }
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new ValidationError(
-      `setPublicEnvelope: ${field} must be a string or { [locale]: string } map, got ${typeof value}.`
-    );
-  }
-  for (const [locale, str] of Object.entries(value)) {
-    if (typeof str !== "string") {
-      throw new ValidationError(
-        `setPublicEnvelope: ${field}[${locale}] must be a string, got ${typeof str}.`
-      );
-    }
-    if (str.length > maxChars) {
-      throw new ValidationError(
-        `setPublicEnvelope: ${field}[${locale}] exceeds the ${maxChars}-character cap (got ${str.length}).`
-      );
-    }
-  }
-}
-function validateIcon(icon, schema) {
-  if (typeof icon !== "string") {
-    throw new ValidationError(
-      `setPublicEnvelope: icon must be a data: URL string, got ${typeof icon}.`
-    );
-  }
-  if (icon.length > schema.maxIconBytes) {
-    throw new ValidationError(
-      `setPublicEnvelope: icon exceeds the ${schema.maxIconBytes}-byte cap (got ${icon.length}).`
-    );
-  }
-  const m = DATA_URL_PREFIX.exec(icon);
-  if (!m) {
-    throw new ValidationError(
-      "setPublicEnvelope: icon must be a base64 data URL (`data:image/png;base64,\u2026` or `data:image/svg+xml;base64,\u2026`). External URLs are not supported in v1."
-    );
-  }
-  const mime = m[1];
-  if (!schema.iconMimeTypes.includes(mime)) {
-    throw new ValidationError(
-      `setPublicEnvelope: icon MIME type "${mime}" is not allowed. Permitted types: ${schema.iconMimeTypes.join(", ")}.`
-    );
-  }
-}
-function isPublicEnvelope(x) {
-  if (x === null || typeof x !== "object" || Array.isArray(x)) return false;
-  const obj = x;
-  return obj["_noydb_public"] === 1 && typeof obj["version"] === "number";
-}
-
-// src/with-party/directory/public-envelope/storage.ts
-var PUBLIC_ENVELOPE_RECORD_ID = "public-envelope";
-async function loadPublicEnvelope(store, vault) {
-  const envelope = await store.get(vault, "_meta", PUBLIC_ENVELOPE_RECORD_ID);
-  if (!envelope) return void 0;
-  try {
-    const parsed = JSON.parse(envelope._data);
-    if (!isPublicEnvelope(parsed)) return void 0;
-    return parsed;
-  } catch {
-    return void 0;
-  }
-}
-async function savePublicEnvelope(store, vault, envelope) {
-  const wireEnvelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify(envelope)
-  };
-  await store.put(vault, "_meta", PUBLIC_ENVELOPE_RECORD_ID, wireEnvelope);
-}
-async function readPublicEnvelope(store, vault, opts = {}) {
-  const raw = await loadPublicEnvelope(store, vault);
-  if (!raw) return void 0;
-  if (opts.locale === void 0) return raw;
-  return resolveLocale(raw, opts.locale);
-}
-function resolveLocale(envelope, locale) {
-  return {
-    ...envelope,
-    ...envelope.name !== void 0 ? { name: pickLocale(envelope.name, locale, envelope.defaultLocale) } : {},
-    ...envelope.description !== void 0 ? { description: pickLocale(envelope.description, locale, envelope.defaultLocale) } : {}
-  };
-}
-function pickLocale(value, locale, defaultLocale) {
-  if (typeof value === "string") return value;
-  if (value[locale] !== void 0 && value[locale] !== "") return value[locale];
-  if (defaultLocale && value[defaultLocale] !== void 0 && value[defaultLocale] !== "") {
-    return value[defaultLocale];
-  }
-  for (const v of Object.values(value)) {
-    if (v !== "") return v;
-  }
-  return "";
-}
-
-export {
-  validatePublicEnvelopeInput,
-  isPublicEnvelope,
-  PUBLIC_ENVELOPE_RECORD_ID,
-  loadPublicEnvelope,
-  savePublicEnvelope,
-  readPublicEnvelope,
-  resolveLocale,
-  pickLocale
-};
-//# sourceMappingURL=chunk-KNXN47MO.js.map

package/dist/chunk-KWLD2D75.js

@@ -1,38 +0,0 @@
-import {
-  NoydbError
-} from "./chunk-CU62BBRB.js";
-
-// src/with-formula/computed/index.ts
-var ComputedFieldError = class extends NoydbError {
-  constructor(field, id, cause) {
-    super(
-      "COMPUTED_FIELD",
-      `computed field "${field}" threw for record "${id}": ` + (cause instanceof Error ? cause.message : String(cause))
-    );
-    this.field = field;
-    this.id = id;
-    this.cause = cause;
-    this.name = "ComputedFieldError";
-  }
-  field;
-  id;
-  cause;
-};
-function evalComputedFields(record, computed, id) {
-  const out = { ...record };
-  for (const [field, entry] of Object.entries(computed)) {
-    const fn = typeof entry === "function" ? entry : entry.fn;
-    try {
-      out[field] = fn(out);
-    } catch (cause) {
-      throw new ComputedFieldError(field, id, cause);
-    }
-  }
-  return out;
-}
-
-export {
-  ComputedFieldError,
-  evalComputedFields
-};
-//# sourceMappingURL=chunk-KWLD2D75.js.map