@noy-db/hub 0.4.0-pre.4 → 0.4.0-pre.6

package/dist/consent/index.js

@@ -2,17 +2,20 @@ import {
   CONSENT_AUDIT_COLLECTION,
   loadConsentEntries,
   writeConsentEntry
-} from "../chunk-V3YB7RGR.js";
+} from "../chunk-HVPW6PCX.js";
+import {
+  NO_CONSENT
+} from "../chunk-PEOZ34EM.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-PEY6ZTCF.js";
-import "../chunk-QXPOEAKR.js";
-import "../chunk-LLVW4V7R.js";
-import "../chunk-M25ZIEB2.js";
-import "../chunk-5BB3N4KU.js";
+import "../chunk-MMVQ3SUO.js";
+import "../chunk-KCZAFDP5.js";
+import "../chunk-5WLDZZ6S.js";
+import "../chunk-5HSSTOOG.js";
+import "../chunk-G4MFQXYX.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-5P5AAXYA.js";
-import "../chunk-5BHNQNBI.js";
-import "../chunk-IGM563N5.js";
+import "../chunk-7U6AB7DZ.js";
+import "../chunk-DOZFU7OZ.js";
+import "../chunk-6SYOHUHM.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/consent/active.ts
@@ -24,6 +27,7 @@ function withConsent() {
 }
 export {
   CONSENT_AUDIT_COLLECTION,
+  NO_CONSENT,
   loadConsentEntries,
   withConsent,
   writeConsentEntry

package/dist/consent/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/consent/active.ts"],"sourcesContent":["/**\n * Active consent strategy. Calling `withConsent()` returns a\n * `ConsentStrategy` that delegates to the real\n * `writeConsentEntry` / `loadConsentEntries` functions. Only\n * reachable through the `@noy-db/hub/consent` subpath.\n */\n\nimport { writeConsentEntry, loadConsentEntries } from './consent.js'\nimport type { ConsentStrategy } from './strategy.js'\n\n/**\n * Build the default consent strategy. Pass into\n * `createNoydb({ consentStrategy: withConsent() })` to enable\n * per-operation audit writes into the reserved `_consent_audit`\n * collection.\n */\nexport function withConsent(): ConsentStrategy {\n  return {\n    write: writeConsentEntry,\n    read: loadConsentEntries,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-audit/consent/active.ts"],"sourcesContent":["/**\n * Active consent strategy. Calling `withConsent()` returns a\n * `ConsentStrategy` that delegates to the real\n * `writeConsentEntry` / `loadConsentEntries` functions. Only\n * reachable through the `@noy-db/hub/consent` subpath.\n */\n\nimport { writeConsentEntry, loadConsentEntries } from './consent.js'\nimport type { ConsentStrategy } from './strategy.js'\n\n/**\n * Build the default consent strategy. Pass into\n * `createNoydb({ consentStrategy: withConsent() })` to enable\n * per-operation audit writes into the reserved `_consent_audit`\n * collection.\n */\nexport function withConsent(): ConsentStrategy {\n  return {\n    write: writeConsentEntry,\n    read: loadConsentEntries,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgBO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AACF;","names":[]}

package/dist/{cover-B5MY43CK.js → cover-ADBCTIKN.js}

@@ -14,9 +14,9 @@ import {
   saveCover,
   validateCoverInput,
   validateCoverSize
-} from "./chunk-BVZGNMVM.js";
-import "./chunk-5BHNQNBI.js";
-import "./chunk-IGM563N5.js";
+} from "./chunk-ZHZ4PET5.js";
+import "./chunk-DOZFU7OZ.js";
+import "./chunk-6SYOHUHM.js";
 import "./chunk-PZ5AY32C.js";
 export {
   COVER_FIELDS,
@@ -33,4 +33,4 @@ export {
   validateCoverInput,
   validateCoverSize
 };
-//# sourceMappingURL=cover-B5MY43CK.js.map
+//# sourceMappingURL=cover-ADBCTIKN.js.map

package/dist/crdt/index.js

@@ -4,6 +4,9 @@ import {
   mergeCrdtStates,
   resolveCrdtSnapshot
 } from "../chunk-4GPE63GU.js";
+import {
+  NO_CRDT
+} from "../chunk-PVEWA2DU.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/crdt/active.ts
@@ -16,6 +19,7 @@ function withCrdt() {
   };
 }
 export {
+  NO_CRDT,
   buildLwwMapState,
   buildRgaState,
   mergeCrdtStates,

package/dist/crdt/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-commit/crdt/active.ts"],"sourcesContent":["/**\n * Active CRDT strategy factory. Calling `withCrdt()` returns a\n * `CrdtStrategy` whose methods delegate to the real LWW-Map / RGA /\n * merge / snapshot helpers in `./crdt.ts`. Only reachable through\n * the `@noy-db/hub/crdt` subpath.\n */\n\nimport {\n  buildLwwMapState,\n  buildRgaState,\n  mergeCrdtStates,\n  resolveCrdtSnapshot,\n} from './crdt.js'\nimport type { CrdtStrategy } from './strategy.js'\n\n/**\n * Build the default CRDT strategy. Pass into\n * `createNoydb({ crdtStrategy: withCrdt() })` to enable collections\n * declared with `crdt: 'lww-map' | 'rga' | 'yjs'`.\n *\n * @example\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withCrdt } from '@noy-db/hub/crdt'\n *\n * const db = await createNoydb({\n *   store, user, secret,\n *   crdtStrategy: withCrdt(),\n * })\n * const notes = vault.collection('notes', { crdt: 'lww-map' })\n * ```\n */\nexport function withCrdt(): CrdtStrategy {\n  return {\n    buildLwwMapState,\n    buildRgaState,\n    mergeCrdtStates,\n    resolveCrdtSnapshot,\n  }\n}\n"],"mappings":";;;;;;;;;AAgCO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-commit/crdt/active.ts"],"sourcesContent":["/**\n * Active CRDT strategy factory. Calling `withCrdt()` returns a\n * `CrdtStrategy` whose methods delegate to the real LWW-Map / RGA /\n * merge / snapshot helpers in `./crdt.ts`. Only reachable through\n * the `@noy-db/hub/crdt` subpath.\n */\n\nimport {\n  buildLwwMapState,\n  buildRgaState,\n  mergeCrdtStates,\n  resolveCrdtSnapshot,\n} from './crdt.js'\nimport type { CrdtStrategy } from './strategy.js'\n\n/**\n * Build the default CRDT strategy. Pass into\n * `createNoydb({ crdtStrategy: withCrdt() })` to enable collections\n * declared with `crdt: 'lww-map' | 'rga' | 'yjs'`.\n *\n * @example\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withCrdt } from '@noy-db/hub/crdt'\n *\n * const db = await createNoydb({\n *   store, user, secret,\n *   crdtStrategy: withCrdt(),\n * })\n * const notes = vault.collection('notes', { crdt: 'lww-map' })\n * ```\n */\nexport function withCrdt(): CrdtStrategy {\n  return {\n    buildLwwMapState,\n    buildRgaState,\n    mergeCrdtStates,\n    resolveCrdtSnapshot,\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAgCO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/{dead-filter-KRRD57MR.js → dead-filter-HKDMTMVY.js}

@@ -5,7 +5,7 @@ import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/dead-filter.ts
 async function liveBaseIdSetsForBundle(store, vaultName, collectionNames, getDEK) {
-  const { loadPersistedSchema } = await import("./storage-QOZKQMID.js");
+  const { loadPersistedSchema } = await import("./storage-FL7XXZTN.js");
   const out = /* @__PURE__ */ new Map();
   for (const name of collectionNames) {
     if (name.startsWith("_")) continue;
@@ -25,4 +25,4 @@ async function liveBaseIdSetsForBundle(store, vaultName, collectionNames, getDEK
 export {
   liveBaseIdSetsForBundle
 };
-//# sourceMappingURL=dead-filter-KRRD57MR.js.map
+//# sourceMappingURL=dead-filter-HKDMTMVY.js.map

package/dist/delegation-EV7LKJPH.js

@@ -0,0 +1,25 @@
+import {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+} from "./chunk-ZF572E2M.js";
+import "./chunk-LC7DSMHR.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-MMVQ3SUO.js";
+import "./chunk-KCZAFDP5.js";
+import "./chunk-5WLDZZ6S.js";
+import "./chunk-5HSSTOOG.js";
+import "./chunk-G4MFQXYX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-7U6AB7DZ.js";
+import "./chunk-DOZFU7OZ.js";
+import "./chunk-6SYOHUHM.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+};
+//# sourceMappingURL=delegation-EV7LKJPH.js.map

package/dist/derivations/index.js

@@ -1,29 +1,29 @@
 import {
   withDerivation,
   withRollup
-} from "../chunk-KVHWEPT2.js";
+} from "../chunk-GHEMAVTN.js";
 import {
   DerivationRegistry
-} from "../chunk-T7S4V52L.js";
-import "../chunk-E2R5NRZD.js";
+} from "../chunk-2PDBYF2O.js";
+import "../chunk-Z4D3YGAB.js";
 import {
   DerivationExecutor
-} from "../chunk-H4SMS4O2.js";
-import "../chunk-PEY6ZTCF.js";
-import "../chunk-QXPOEAKR.js";
-import "../chunk-LLVW4V7R.js";
-import "../chunk-M25ZIEB2.js";
-import "../chunk-5BB3N4KU.js";
+} from "../chunk-YJ3TREAC.js";
+import "../chunk-MMVQ3SUO.js";
+import "../chunk-KCZAFDP5.js";
+import "../chunk-5WLDZZ6S.js";
+import "../chunk-5HSSTOOG.js";
+import "../chunk-G4MFQXYX.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-5P5AAXYA.js";
-import "../chunk-5BHNQNBI.js";
+import "../chunk-7U6AB7DZ.js";
+import "../chunk-DOZFU7OZ.js";
 import {
   DerivationCapExceededError,
   DerivationCycleError,
   DerivationDepthError,
   DerivationOutputShapeError,
   DerivationOutputUnknownError
-} from "../chunk-IGM563N5.js";
+} from "../chunk-6SYOHUHM.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DerivationCapExceededError,

package/dist/derive-5LDJW76F.js

@@ -0,0 +1,21 @@
+import {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+} from "./chunk-SEU6QHH4.js";
+import "./chunk-MMVQ3SUO.js";
+import "./chunk-KCZAFDP5.js";
+import "./chunk-5WLDZZ6S.js";
+import "./chunk-5HSSTOOG.js";
+import "./chunk-G4MFQXYX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-7U6AB7DZ.js";
+import "./chunk-DOZFU7OZ.js";
+import "./chunk-6SYOHUHM.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+};
+//# sourceMappingURL=derive-5LDJW76F.js.map

package/dist/dispatch-SPMYNXNW.js

@@ -0,0 +1,194 @@
+import {
+  markStale
+} from "./chunk-5ABOFAHN.js";
+import {
+  putDerivedOutput,
+  selfWriteFieldEqual
+} from "./chunk-JTIPVW4J.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-C2V7AJO2.js";
+import "./chunk-JOCMXSR2.js";
+import "./chunk-ZUDAK436.js";
+import "./chunk-2BVW754E.js";
+import "./chunk-MMVQ3SUO.js";
+import "./chunk-KCZAFDP5.js";
+import "./chunk-5WLDZZ6S.js";
+import "./chunk-5HSSTOOG.js";
+import "./chunk-G4MFQXYX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-7U6AB7DZ.js";
+import "./chunk-DOZFU7OZ.js";
+import {
+  DerivationCapExceededError
+} from "./chunk-6SYOHUHM.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-formula/derivations/dispatch.ts
+async function dispatchArrayDerivationsOnDelete(ctx, id, eraseRecordShapeToo = false) {
+  const { derivationSource, collectionName, adapter, vault, getDEK, storeCiphertext } = ctx;
+  const strategies = derivationSource.registry().strategiesForSource(collectionName);
+  if (strategies.length === 0) return 0;
+  const { loadFanoutSidecar, deleteFanoutSidecar } = await import("./fanout-sidecar-HRMHC34B.js");
+  const txCtx = derivationSource.getActiveTxContext();
+  let erased = 0;
+  for (const { spec } of strategies) {
+    for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {
+      if (outSpec.shape === "record") {
+        if (eraseRecordShapeToo && spec.source === collectionName && outSpec.collection !== collectionName) {
+          if (await derivationSource.getCollection(outSpec.collection)._internalDelete(id, txCtx)) erased += 1;
+        }
+        continue;
+      }
+      const sidecar = await loadFanoutSidecar(adapter, vault, spec.source, id, outputKey, getDEK, storeCiphertext);
+      if (!sidecar) continue;
+      const outputCollection = derivationSource.getCollection(outSpec.collection);
+      for (const derivedId of sidecar.keys) {
+        if (await outputCollection._internalDelete(derivedId, txCtx)) erased += 1;
+      }
+      await deleteFanoutSidecar(adapter, vault, spec.source, id, outputKey);
+    }
+  }
+  return erased;
+}
+async function dispatchDerivations(ctx, id, record, version, wave) {
+  const {
+    derivationSource,
+    collectionName,
+    adapter,
+    vault,
+    getDEK,
+    storeCiphertext,
+    via,
+    recomputeRollup,
+    dispatchCtx,
+    trackPut
+  } = ctx;
+  const incoming = via ? via.canonicalizeStored(record) : record;
+  if (incoming && typeof incoming === "object" && "_derivedFrom" in incoming) return;
+  const registry = derivationSource.registry();
+  const strategies = registry.strategiesForSource(collectionName);
+  if (strategies.length === 0) return;
+  let executorClass = null;
+  for (const { spec, strategyHash } of strategies) {
+    const mode = typeof spec.lifecycle === "string" ? spec.lifecycle : spec.lifecycle.mode;
+    if (spec.rollup) {
+      if (mode !== "eager") continue;
+      let parentId;
+      if (collectionName === spec.rollup.from) {
+        const kv = incoming[spec.rollup.key];
+        parentId = typeof kv === "string" || typeof kv === "number" ? String(kv) : null;
+      } else {
+        parentId = id;
+      }
+      if (parentId !== null) await recomputeRollup(spec, parentId, { collection: collectionName, id }, wave);
+      continue;
+    }
+    const isSource = spec.source === collectionName;
+    const isSibling = !isSource && (spec.sources?.includes(collectionName) ?? false);
+    const trigger = !isSource && !isSibling ? spec.triggerBy?.find((t) => t.collection === collectionName) : void 0;
+    const runs = [];
+    if (isSource) {
+      runs.push({ input: { ...incoming, id }, base: incoming, runId: id, version });
+    } else if (isSibling) {
+      const p = await derivationSource.getCollection(spec.source).get(id);
+      if (p !== null && p !== void 0) {
+        const raw = await derivationSource.getCollection(spec.source)._getStoredRecord(id);
+        runs.push({ input: { ...p, id }, base: raw ?? p, runId: id, version: 0 });
+      }
+    } else if (trigger) {
+      const srcColl = derivationSource.getCollection(spec.source);
+      const ids = await srcColl._findMatchingIds(trigger.on, id);
+      if (trigger.maxFanout !== void 0 && ids.length > trigger.maxFanout) {
+        throw new DerivationCapExceededError(`triggerBy ${collectionName}\u2192${spec.source}`, ids.length, trigger.maxFanout);
+      }
+      for (const sid of ids) {
+        const raw = await srcColl._getStoredRecord(sid);
+        if (raw === null) continue;
+        runs.push({ input: { ...raw, id: sid }, base: raw, runId: sid, version: 0 });
+      }
+    }
+    if (runs.length === 0) continue;
+    if (mode !== "eager") {
+      for (const run of runs) await markStale(registry, spec, run.runId);
+      continue;
+    }
+    if (executorClass === null) {
+      ;
+      ({ DerivationExecutor: executorClass } = await import("./executor-FCJEH3FU.js"));
+    }
+    for (const run of runs) {
+      const ctx2 = { vault: derivationSource.getReadOnlyFacade() };
+      const outCtx = dispatchCtx({ collection: spec.source, id: run.runId });
+      const result = await executorClass.run(spec, run.input, run.version, strategyHash, ctx2);
+      for (const key of Object.keys(spec.outputs)) {
+        const out = result.outputs[key];
+        if (!out) continue;
+        if (out.kind === "failed") {
+          const err = out.error;
+          if (spec.strict) throw err;
+          console.warn(`[derivation] output "${key}" for source "${spec.source}" id="${run.runId}" failed:`, err);
+          continue;
+        }
+        const outSpec = spec.outputs[key];
+        if (!outSpec) continue;
+        const outputCollection = derivationSource.getCollection(outSpec.collection);
+        const txCtx = derivationSource.getActiveTxContext();
+        if (out.kind === "array") {
+          const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-HRMHC34B.js");
+          const prior = await loadFanoutSidecar(adapter, vault, spec.source, run.runId, key, getDEK, storeCiphertext);
+          const prevKeys = new Set(prior?.keys ?? []);
+          const newKeysList = out.entries.map((e) => e.key);
+          const newKeysSet = new Set(newKeysList);
+          for (const k of prevKeys) {
+            if (newKeysSet.has(k)) continue;
+            await outputCollection._internalDelete(k, txCtx);
+          }
+          for (const entry of out.entries) {
+            if (txCtx !== null) {
+              trackPut(txCtx, outSpec.collection, entry.key, await adapter.get(vault, outSpec.collection, entry.key));
+            }
+            await putDerivedOutput(outputCollection, entry.key, entry.value, outCtx, { source: "derived" });
+          }
+          await saveFanoutSidecar(adapter, vault, {
+            source: spec.source,
+            sourceId: run.runId,
+            outputKey: key,
+            outputCollection: outSpec.collection,
+            keys: newKeysList
+          }, getDEK, storeCiphertext);
+          continue;
+        }
+        if (out.skipped === true) {
+          await outputCollection._internalDelete(run.runId, txCtx);
+          continue;
+        }
+        if (outSpec.shape === "record" && outSpec.denorm !== void 0 && outSpec.collection === spec.source) {
+          const value = out.value;
+          const patched = { ...run.base };
+          let changed = false;
+          for (const f of outSpec.denorm) {
+            if (!selfWriteFieldEqual(run.base[f], value[f])) {
+              patched[f] = value[f];
+              changed = true;
+            }
+          }
+          if (!changed) continue;
+          if (txCtx !== null) {
+            trackPut(txCtx, outSpec.collection, run.runId, await adapter.get(vault, outSpec.collection, run.runId));
+          }
+          await putDerivedOutput(outputCollection, run.runId, patched, outCtx, { source: "derived" });
+          continue;
+        }
+        if (txCtx !== null) {
+          trackPut(txCtx, outSpec.collection, run.runId, await adapter.get(vault, outSpec.collection, run.runId));
+        }
+        await putDerivedOutput(outputCollection, run.runId, out.value, outCtx, { source: "derived" });
+      }
+    }
+  }
+}
+export {
+  dispatchArrayDerivationsOnDelete,
+  dispatchDerivations
+};
+//# sourceMappingURL=dispatch-SPMYNXNW.js.map

package/dist/dispatch-SPMYNXNW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-formula/derivations/dispatch.ts"],"sourcesContent":["/**\n * Derivation dispatch, lifted out of the kernel spine (#842 part b).\n *\n * `Collection` carried ~380 lines of dispatch logic that belongs to the\n * derivation service, not to the always-on kernel. These are free functions\n * taking an explicit context so the spine keeps only a thin delegator.\n *\n * ## How the spine reaches this module\n *\n * By dynamic `import()`, never a static one. `check-architecture.mjs`'s\n * `port-layering` check forbids the spine from statically importing a\n * `with-*` service; `collection.ts` is grandfathered for ten\n * `with-formula/*` specifiers, but that list is frozen per file and a new\n * one is a violation. A dynamic import is the sanctioned S4 gate recipe, and\n * it keeps this chunk out of the floor bundle for consumers who never fire a\n * derivation.\n *\n * The `Collection` type reference below points back at the spine. That is\n * inward (service → kernel) and so allowed, and it is TYPE-ONLY — erased at\n * build, so no runtime cycle exists.\n *\n * @internal\n */\n\nimport type { NoydbStore } from '../../kernel/types.js'\nimport type { TxContext } from '../../with-commit/tx/transaction.js'\nimport type { DerivationRegistry } from './registry.js'\nimport type { ReadOnlyVaultFacade } from '../../with-audit/guards/types.js'\nimport type { Collection } from '../../kernel/collection.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport type { EncryptedEnvelope } from '../../kernel/types.js'\nimport type { ledgerAuditHook, WaveContext } from '../../kernel/via/dispatch.js'\nimport { putDerivedOutput, selfWriteFieldEqual } from '../../kernel/via/dispatch.js'\nimport { DerivationCapExceededError } from '../../kernel/errors.js'\nimport { markStale } from './stale.js'\nimport type { DerivationExecutor } from './executor.js'\n\n/** The per-write dispatch context threaded into `putDerivedOutput`. */\ninterface DispatchCtx {\n  emit: (e: string, p: unknown) => void\n  source: { readonly collection: string; readonly id: string }\n  audit: ReturnType<typeof ledgerAuditHook>\n}\n\n/**\n * What the dispatchers need from the collection that owns them. Passing this\n * explicitly is what lets the logic live outside the class.\n */\nexport interface DerivationDeleteCtx {\n  readonly derivationSource: {\n    registry(): DerivationRegistry\n    getCollection(name: string): Collection<Record<string, unknown>>\n    getActiveTxContext(): TxContext | null\n    getReadOnlyFacade(): ReadOnlyVaultFacade\n  }\n  /** The collection the delete happened in. */\n  readonly collectionName: string\n  readonly adapter: NoydbStore\n  readonly vault: string\n  readonly getDEK: (collectionName: string) => Promise<EnclaveKey>\n  readonly storeCiphertext: boolean\n}\n\n/**\n * Erase the derived rows a deleted source record fanned out to, and drop the\n * fan-out sidecars that recorded them.\n *\n * @param eraseRecordShapeToo also erase same-id `shape: 'record'` outputs.\n *   Restricted to a source-triggered strategy writing into a DIFFERENT\n *   collection — the self-denorm case would re-delete the record just\n *   tombstoned, and triggerBy/sibling strategies derive under a different id.\n * @returns rows ACTUALLY deleted, not edges visited (#622).\n */\nexport async function dispatchArrayDerivationsOnDelete(\n  ctx: DerivationDeleteCtx,\n  id: string,\n  eraseRecordShapeToo = false,\n): Promise<number> {\n  const { derivationSource, collectionName, adapter, vault, getDEK, storeCiphertext } = ctx\n\n  const strategies = derivationSource.registry().strategiesForSource(collectionName)\n  if (strategies.length === 0) return 0\n\n  const { loadFanoutSidecar, deleteFanoutSidecar } = await import('./fanout-sidecar.js')\n  const txCtx = derivationSource.getActiveTxContext()\n  let erased = 0\n\n  for (const { spec } of strategies) {\n    for (const [outputKey, outSpec] of Object.entries(spec.outputs)) {\n      if (outSpec.shape === 'record') {\n        if (eraseRecordShapeToo && spec.source === collectionName && outSpec.collection !== collectionName) {\n          if (await derivationSource.getCollection(outSpec.collection)._internalDelete(id, txCtx)) erased += 1\n        }\n        continue\n      }\n\n      const sidecar = await loadFanoutSidecar(adapter, vault, spec.source, id, outputKey, getDEK, storeCiphertext)\n      if (!sidecar) continue\n\n      const outputCollection = derivationSource.getCollection(outSpec.collection)\n      for (const derivedId of sidecar.keys) {\n        if (await outputCollection._internalDelete(derivedId, txCtx)) erased += 1\n      }\n      await deleteFanoutSidecar(adapter, vault, spec.source, id, outputKey)\n    }\n  }\n\n  return erased\n}\n\n/** Adds what the on-write derivation dispatch needs beyond the delete path. */\nexport interface DerivationDispatchCtx extends DerivationDeleteCtx {\n  /** Via pipeline, for decoding the stored form back to canonical money shape. */\n  readonly via: { canonicalizeStored(r: Record<string, unknown>): Record<string, unknown> } | undefined\n  /** Recompute a rollup aggregate onto a parent. Stays on the spine — it walks collections. */\n  readonly recomputeRollup: (\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    spec: any,\n    parentId: string,\n    source: { readonly collection: string; readonly id: string },\n    wave?: WaveContext,\n  ) => Promise<unknown>\n  /** Builds the per-write dispatch context threaded into `putDerivedOutput`. */\n  readonly dispatchCtx: (source: { readonly collection: string; readonly id: string }) => DispatchCtx\n  /** Registers a write on the active transaction for rollback. */\n  readonly trackPut: (txCtx: TxContext, collectionName: string, id: string, priorEnvelope: EncryptedEnvelope | null) => void\n}\n\n/**\n * Fire registered derivation strategies for this source collection.\n *\n * Eager mode runs `derive` inline and writes each output; lazy mode records a\n * stale mark for cold-session recompute. Rollups are handled here rather than\n * by the executor — a write to the child recomputes the parent aggregate, and\n * a write to the parent recomputes its own.\n */\nexport async function dispatchDerivations(\n  ctx: DerivationDispatchCtx,\n  id: string,\n  record: Record<string, unknown>,\n  version: number,\n  wave?: WaveContext,\n): Promise<void> {\n  const {\n    derivationSource, collectionName, adapter, vault, getDEK, storeCiphertext,\n    via, recomputeRollup, dispatchCtx, trackPut,\n  } = ctx\n\n  // `record` is the stored form here (post-quantize) — decode so\n  // derive(source, ctx) sees the canonical money shape.\n  const incoming = (via ? via.canonicalizeStored(record) : record)\n  if (incoming && typeof incoming === 'object' && '_derivedFrom' in incoming) return\n  const registry = derivationSource.registry()\n  const strategies = registry.strategiesForSource(collectionName)\n  if (strategies.length === 0) return\n  // Dynamic-import the executor only on the first eager-mode\n  // dispatch. Lazy-mode dispatches use `markStale` (a pure helper)\n  // which doesn't reach into the executor at all. Keeps the\n  // derivation executor chunk out of the floor bundle for any\n  // consumer that doesn't fire an eager derivation.\n  let executorClass: typeof DerivationExecutor | null = null\n  for (const { spec, strategyHash } of strategies) {\n    const mode = typeof spec.lifecycle === 'string' ? spec.lifecycle : spec.lifecycle.mode\n\n    // Rollup: a write to the child `from` recomputes the\n    // parent at id child[key]; a write to the parent (source = into)\n    // recomputes its own aggregate. Handled here (the executor is not run).\n    if (spec.rollup) {\n      if (mode !== 'eager') continue\n      let parentId: string | null\n      if (collectionName === spec.rollup.from) {\n        const kv = incoming[spec.rollup.key]\n        parentId = (typeof kv === 'string' || typeof kv === 'number') ? String(kv) : null\n      } else {\n        parentId = id // a write to the parent recomputes its own aggregate\n      }\n      if (parentId !== null) await recomputeRollup(spec, parentId, { collection: collectionName, id }, wave)\n      continue\n    }\n\n    // Determine how `collectionName` triggers this strategy, and build the list\n    // of source records to (re-)derive:\n    //   • source     — re-derive the written record itself (same-id).\n    //   • sources[]  — re-derive the PRIMARY source at the same id.\n    //   • triggerBy  — FK fan-out: re-derive every source record\n    //                  whose `on` field equals the written parent's id.\n    // `input` is passed to derive(); `base` is the raw stored source record\n    // used as the patch base for a self-write reverse-denorm output.\n    const isSource = spec.source === collectionName\n    const isSibling = !isSource && (spec.sources?.includes(collectionName) ?? false)\n    const trigger = !isSource && !isSibling\n      ? spec.triggerBy?.find(t => t.collection === collectionName)\n      : undefined\n\n    const runs: Array<{\n      input: Record<string, unknown> & { id: string }\n      base: Record<string, unknown>\n      runId: string\n      version: number\n    }> = []\n\n    if (isSource) {\n      runs.push({ input: { ...incoming, id }, base: incoming, runId: id, version })\n    } else if (isSibling) {\n      const p = await derivationSource.getCollection(spec.source).get(id)\n      if (p !== null && p !== undefined) {\n        // Raw base for a (rare) sibling self-write; falls back to the\n        // resolved primary if the raw read misses.\n        const raw = await derivationSource.getCollection(spec.source)._getStoredRecord(id)\n        runs.push({ input: { ...p, id }, base: raw ?? p, runId: id, version: 0 })\n      }\n    } else if (trigger) {\n      const srcColl = derivationSource.getCollection(spec.source)\n      const ids = await srcColl._findMatchingIds(trigger.on, id)\n      if (trigger.maxFanout !== undefined && ids.length > trigger.maxFanout) {\n        throw new DerivationCapExceededError(`triggerBy ${collectionName}→${spec.source}`, ids.length, trigger.maxFanout)\n      }\n      for (const sid of ids) {\n        const raw = await srcColl._getStoredRecord(sid)\n        if (raw === null) continue\n        runs.push({ input: { ...raw, id: sid }, base: raw, runId: sid, version: 0 })\n      }\n    }\n\n    if (runs.length === 0) continue\n\n    if (mode !== 'eager') {\n      for (const run of runs) await markStale(registry, spec, run.runId)\n      continue\n    }\n\n    if (executorClass === null) {\n      ;({ DerivationExecutor: executorClass } = await import('./executor.js'))\n    }\n\n    for (const run of runs) {\n      const ctx = { vault: derivationSource.getReadOnlyFacade() }\n      const outCtx = dispatchCtx({ collection: spec.source, id: run.runId })\n      const result = await executorClass.run(spec, run.input, run.version, strategyHash, ctx)\n      for (const key of Object.keys(spec.outputs)) {\n        const out = result.outputs[key]\n        if (!out) continue\n        if (out.kind === 'failed') {\n          const err = out.error\n          if (spec.strict) throw err\n          console.warn(`[derivation] output \"${key}\" for source \"${spec.source}\" id=\"${run.runId}\" failed:`, err)\n          continue\n        }\n        const outSpec = spec.outputs[key]\n        if (!outSpec) continue\n        const outputCollection = derivationSource.getCollection(outSpec.collection)\n        // If we're inside a multi-record transaction, register\n        // derived writes as side-effect ops on the active ctx\n        // BEFORE they fire. `revertExecuted` walks `_executed` in\n        // reverse on rollback, so capturing the pre-write envelope\n        // here lets a later mid-batch failure restore this output's\n        // prior state alongside the source op. Outside a transaction\n        // the context is null and tracking is skipped.\n        const txCtx = derivationSource.getActiveTxContext()\n\n        // ── Array-shape branch ─────────────────────────────────\n        if (out.kind === 'array') {\n          // Load the prior key set from the fanout sidecar.\n          const { loadFanoutSidecar, saveFanoutSidecar } = await import('./fanout-sidecar.js')\n          const prior = await loadFanoutSidecar(adapter, vault, spec.source, run.runId, key, getDEK, storeCiphertext)\n          const prevKeys = new Set<string>(prior?.keys ?? [])\n          const newKeysList = out.entries.map(e => e.key)\n          const newKeysSet = new Set<string>(newKeysList)\n\n          // Diff — delete keys that were in prev but not in new.\n          for (const k of prevKeys) {\n            if (newKeysSet.has(k)) continue\n            await outputCollection._internalDelete(k, txCtx)\n          }\n\n          // Upsert every entry in the new set. (Slice 1: no\n          // identity-skip optimisation; write every row, idempotent\n          // at the (collection, id) level.)\n          for (const entry of out.entries) {\n            if (txCtx !== null) {\n              trackPut(txCtx, outSpec.collection, entry.key, await adapter.get(vault, outSpec.collection, entry.key))\n            }\n            await putDerivedOutput(outputCollection, entry.key, entry.value, outCtx, { source: 'derived' })\n          }\n\n          // Persist the new key set last, for failure-mode symmetry.\n          await saveFanoutSidecar(adapter, vault, {\n            source: spec.source,\n            sourceId: run.runId,\n            outputKey: key,\n            outputCollection: outSpec.collection,\n            keys: newKeysList,\n          }, getDEK, storeCiphertext)\n          continue\n        }\n\n        // ── Record-shape branch ────────────────────────────────\n        if (out.skipped === true) {\n          // Optional output returned null. Delete the\n          // previously-emitted output at this id, if any. Routed\n          // through `_internalDelete` so a user-registered\n          // `onDelete` on the output collection does NOT\n          // fire — this is a system-internal tombstone, not a\n          // user-initiated delete. The txCtx hookup captures the\n          // prior envelope inside `_internalDelete` for rollback\n          // symmetry; delete-of-absent is a silent no-op.\n          await outputCollection._internalDelete(run.runId, txCtx)\n          continue\n        }\n\n        // ── Self-write reverse-denorm ───────────────────────────\n        // An output back to its own source: patch ONLY the declared\n        // `denorm` fields onto the raw stored record, never the whole\n        // value (which would clobber user fields / i18n maps and carries\n        // the executor's `_derivedFrom` tag). If the patch changes\n        // nothing, skip the write — that value-equality is the cycle\n        // guard: the self-write re-fires the source-path derivation,\n        // which recomputes identical fields and terminates here.\n        if (outSpec.shape === 'record' && outSpec.denorm !== undefined && outSpec.collection === spec.source) {\n          const value = out.value\n          const patched: Record<string, unknown> = { ...run.base }\n          let changed = false\n          for (const f of outSpec.denorm) {\n            if (!selfWriteFieldEqual(run.base[f], value[f])) {\n              patched[f] = value[f]\n              changed = true\n            }\n          }\n          if (!changed) continue // cycle guard — nothing to write\n          if (txCtx !== null) {\n            trackPut(txCtx, outSpec.collection, run.runId, await adapter.get(vault, outSpec.collection, run.runId))\n          }\n          await putDerivedOutput(outputCollection, run.runId, patched, outCtx, { source: 'derived' })\n          continue\n        }\n\n        // ── Normal record output (separate output collection) ──\n        if (txCtx !== null) {\n          trackPut(txCtx, outSpec.collection, run.runId, await adapter.get(vault, outSpec.collection, run.runId))\n        }\n        await putDerivedOutput(outputCollection, run.runId, out.value, outCtx, { source: 'derived' })\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyEA,eAAsB,iCACpB,KACA,IACA,sBAAsB,OACL;AACjB,QAAM,EAAE,kBAAkB,gBAAgB,SAAS,OAAO,QAAQ,gBAAgB,IAAI;AAEtF,QAAM,aAAa,iBAAiB,SAAS,EAAE,oBAAoB,cAAc;AACjF,MAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,QAAM,EAAE,mBAAmB,oBAAoB,IAAI,MAAM,OAAO,8BAAqB;AACrF,QAAM,QAAQ,iBAAiB,mBAAmB;AAClD,MAAI,SAAS;AAEb,aAAW,EAAE,KAAK,KAAK,YAAY;AACjC,eAAW,CAAC,WAAW,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO,GAAG;AAC/D,UAAI,QAAQ,UAAU,UAAU;AAC9B,YAAI,uBAAuB,KAAK,WAAW,kBAAkB,QAAQ,eAAe,gBAAgB;AAClG,cAAI,MAAM,iBAAiB,cAAc,QAAQ,UAAU,EAAE,gBAAgB,IAAI,KAAK,EAAG,WAAU;AAAA,QACrG;AACA;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,kBAAkB,SAAS,OAAO,KAAK,QAAQ,IAAI,WAAW,QAAQ,eAAe;AAC3G,UAAI,CAAC,QAAS;AAEd,YAAM,mBAAmB,iBAAiB,cAAc,QAAQ,UAAU;AAC1E,iBAAW,aAAa,QAAQ,MAAM;AACpC,YAAI,MAAM,iBAAiB,gBAAgB,WAAW,KAAK,EAAG,WAAU;AAAA,MAC1E;AACA,YAAM,oBAAoB,SAAS,OAAO,KAAK,QAAQ,IAAI,SAAS;AAAA,IACtE;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,KACA,IACA,QACA,SACA,MACe;AACf,QAAM;AAAA,IACJ;AAAA,IAAkB;AAAA,IAAgB;AAAA,IAAS;AAAA,IAAO;AAAA,IAAQ;AAAA,IAC1D;AAAA,IAAK;AAAA,IAAiB;AAAA,IAAa;AAAA,EACrC,IAAI;AAIJ,QAAM,WAAY,MAAM,IAAI,mBAAmB,MAAM,IAAI;AACzD,MAAI,YAAY,OAAO,aAAa,YAAY,kBAAkB,SAAU;AAC5E,QAAM,WAAW,iBAAiB,SAAS;AAC3C,QAAM,aAAa,SAAS,oBAAoB,cAAc;AAC9D,MAAI,WAAW,WAAW,EAAG;AAM7B,MAAI,gBAAkD;AACtD,aAAW,EAAE,MAAM,aAAa,KAAK,YAAY;AAC/C,UAAM,OAAO,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAK,UAAU;AAKlF,QAAI,KAAK,QAAQ;AACf,UAAI,SAAS,QAAS;AACtB,UAAI;AACJ,UAAI,mBAAmB,KAAK,OAAO,MAAM;AACvC,cAAM,KAAK,SAAS,KAAK,OAAO,GAAG;AACnC,mBAAY,OAAO,OAAO,YAAY,OAAO,OAAO,WAAY,OAAO,EAAE,IAAI;AAAA,MAC/E,OAAO;AACL,mBAAW;AAAA,MACb;AACA,UAAI,aAAa,KAAM,OAAM,gBAAgB,MAAM,UAAU,EAAE,YAAY,gBAAgB,GAAG,GAAG,IAAI;AACrG;AAAA,IACF;AAUA,UAAM,WAAW,KAAK,WAAW;AACjC,UAAM,YAAY,CAAC,aAAa,KAAK,SAAS,SAAS,cAAc,KAAK;AAC1E,UAAM,UAAU,CAAC,YAAY,CAAC,YAC1B,KAAK,WAAW,KAAK,OAAK,EAAE,eAAe,cAAc,IACzD;AAEJ,UAAM,OAKD,CAAC;AAEN,QAAI,UAAU;AACZ,WAAK,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,GAAG,GAAG,MAAM,UAAU,OAAO,IAAI,QAAQ,CAAC;AAAA,IAC9E,WAAW,WAAW;AACpB,YAAM,IAAI,MAAM,iBAAiB,cAAc,KAAK,MAAM,EAAE,IAAI,EAAE;AAClE,UAAI,MAAM,QAAQ,MAAM,QAAW;AAGjC,cAAM,MAAM,MAAM,iBAAiB,cAAc,KAAK,MAAM,EAAE,iBAAiB,EAAE;AACjF,aAAK,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,GAAG,GAAG,MAAM,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;AAAA,MAC1E;AAAA,IACF,WAAW,SAAS;AAClB,YAAM,UAAU,iBAAiB,cAAc,KAAK,MAAM;AAC1D,YAAM,MAAM,MAAM,QAAQ,iBAAiB,QAAQ,IAAI,EAAE;AACzD,UAAI,QAAQ,cAAc,UAAa,IAAI,SAAS,QAAQ,WAAW;AACrE,cAAM,IAAI,2BAA2B,aAAa,cAAc,SAAI,KAAK,MAAM,IAAI,IAAI,QAAQ,QAAQ,SAAS;AAAA,MAClH;AACA,iBAAW,OAAO,KAAK;AACrB,cAAM,MAAM,MAAM,QAAQ,iBAAiB,GAAG;AAC9C,YAAI,QAAQ,KAAM;AAClB,aAAK,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,IAAI,GAAG,MAAM,KAAK,OAAO,KAAK,SAAS,EAAE,CAAC;AAAA,MAC7E;AAAA,IACF;AAEA,QAAI,KAAK,WAAW,EAAG;AAEvB,QAAI,SAAS,SAAS;AACpB,iBAAW,OAAO,KAAM,OAAM,UAAU,UAAU,MAAM,IAAI,KAAK;AACjE;AAAA,IACF;AAEA,QAAI,kBAAkB,MAAM;AAC1B;AAAC,OAAC,EAAE,oBAAoB,cAAc,IAAI,MAAM,OAAO,wBAAe;AAAA,IACxE;AAEA,eAAW,OAAO,MAAM;AACtB,YAAMA,OAAM,EAAE,OAAO,iBAAiB,kBAAkB,EAAE;AAC1D,YAAM,SAAS,YAAY,EAAE,YAAY,KAAK,QAAQ,IAAI,IAAI,MAAM,CAAC;AACrE,YAAM,SAAS,MAAM,cAAc,IAAI,MAAM,IAAI,OAAO,IAAI,SAAS,cAAcA,IAAG;AACtF,iBAAW,OAAO,OAAO,KAAK,KAAK,OAAO,GAAG;AAC3C,cAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,YAAI,CAAC,IAAK;AACV,YAAI,IAAI,SAAS,UAAU;AACzB,gBAAM,MAAM,IAAI;AAChB,cAAI,KAAK,OAAQ,OAAM;AACvB,kBAAQ,KAAK,wBAAwB,GAAG,iBAAiB,KAAK,MAAM,SAAS,IAAI,KAAK,aAAa,GAAG;AACtG;AAAA,QACF;AACA,cAAM,UAAU,KAAK,QAAQ,GAAG;AAChC,YAAI,CAAC,QAAS;AACd,cAAM,mBAAmB,iBAAiB,cAAc,QAAQ,UAAU;AAQ1E,cAAM,QAAQ,iBAAiB,mBAAmB;AAGlD,YAAI,IAAI,SAAS,SAAS;AAExB,gBAAM,EAAE,mBAAmB,kBAAkB,IAAI,MAAM,OAAO,8BAAqB;AACnF,gBAAM,QAAQ,MAAM,kBAAkB,SAAS,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,eAAe;AAC1G,gBAAM,WAAW,IAAI,IAAY,OAAO,QAAQ,CAAC,CAAC;AAClD,gBAAM,cAAc,IAAI,QAAQ,IAAI,OAAK,EAAE,GAAG;AAC9C,gBAAM,aAAa,IAAI,IAAY,WAAW;AAG9C,qBAAW,KAAK,UAAU;AACxB,gBAAI,WAAW,IAAI,CAAC,EAAG;AACvB,kBAAM,iBAAiB,gBAAgB,GAAG,KAAK;AAAA,UACjD;AAKA,qBAAW,SAAS,IAAI,SAAS;AAC/B,gBAAI,UAAU,MAAM;AAClB,uBAAS,OAAO,QAAQ,YAAY,MAAM,KAAK,MAAM,QAAQ,IAAI,OAAO,QAAQ,YAAY,MAAM,GAAG,CAAC;AAAA,YACxG;AACA,kBAAM,iBAAiB,kBAAkB,MAAM,KAAK,MAAM,OAAO,QAAQ,EAAE,QAAQ,UAAU,CAAC;AAAA,UAChG;AAGA,gBAAM,kBAAkB,SAAS,OAAO;AAAA,YACtC,QAAQ,KAAK;AAAA,YACb,UAAU,IAAI;AAAA,YACd,WAAW;AAAA,YACX,kBAAkB,QAAQ;AAAA,YAC1B,MAAM;AAAA,UACR,GAAG,QAAQ,eAAe;AAC1B;AAAA,QACF;AAGA,YAAI,IAAI,YAAY,MAAM;AASxB,gBAAM,iBAAiB,gBAAgB,IAAI,OAAO,KAAK;AACvD;AAAA,QACF;AAUA,YAAI,QAAQ,UAAU,YAAY,QAAQ,WAAW,UAAa,QAAQ,eAAe,KAAK,QAAQ;AACpG,gBAAM,QAAQ,IAAI;AAClB,gBAAM,UAAmC,EAAE,GAAG,IAAI,KAAK;AACvD,cAAI,UAAU;AACd,qBAAW,KAAK,QAAQ,QAAQ;AAC9B,gBAAI,CAAC,oBAAoB,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG;AAC/C,sBAAQ,CAAC,IAAI,MAAM,CAAC;AACpB,wBAAU;AAAA,YACZ;AAAA,UACF;AACA,cAAI,CAAC,QAAS;AACd,cAAI,UAAU,MAAM;AAClB,qBAAS,OAAO,QAAQ,YAAY,IAAI,OAAO,MAAM,QAAQ,IAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,CAAC;AAAA,UACxG;AACA,gBAAM,iBAAiB,kBAAkB,IAAI,OAAO,SAAS,QAAQ,EAAE,QAAQ,UAAU,CAAC;AAC1F;AAAA,QACF;AAGA,YAAI,UAAU,MAAM;AAClB,mBAAS,OAAO,QAAQ,YAAY,IAAI,OAAO,MAAM,QAAQ,IAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,CAAC;AAAA,QACxG;AACA,cAAM,iBAAiB,kBAAkB,IAAI,OAAO,IAAI,OAAO,QAAQ,EAAE,QAAQ,UAAU,CAAC;AAAA,MAC9F;AAAA,IACF;AAAA,EACF;AACF;","names":["ctx"]}

package/dist/dispatch-V5MSMQYX.js

@@ -0,0 +1,72 @@
+import "./chunk-PZ5AY32C.js";
+
+// src/with-formula/materialized-views/dispatch.ts
+async function dispatchMaterializedViews(ctx, id, record, wave) {
+  const { materializedViewSource: source, collectionName, dispatchCtx } = ctx;
+  if (record && typeof record === "object" && "_materializedFrom" in record) return;
+  const registry = source.registry();
+  const mvs = registry.mvsForSource(collectionName);
+  if (mvs.length === 0) return;
+  let executor = null;
+  let staleHelpers = null;
+  for (const reg of mvs) {
+    const mode = reg.spec.refresh;
+    if (mode === "eager") {
+      if (wave?.seen(`mv\0${reg.spec.name}`)) continue;
+      if (executor === null) {
+        ;
+        ({ MaterializedViewExecutor: executor } = await import("./executor-SVHAJZ4A.js"));
+      }
+      await executor.refresh(reg, {
+        getCollection: (name) => source.getCollection(name),
+        getActiveTxContext: () => source.getActiveTxContext(),
+        getQueryContext: () => source.getQueryContext(),
+        dispatchCtx: dispatchCtx({ collection: collectionName, id })
+      });
+    } else if (mode === "lazy") {
+      if (staleHelpers === null) staleHelpers = await import("./stale-BJO2WIN7.js");
+      staleHelpers.markMVStale(registry, reg.spec.name);
+    }
+  }
+}
+async function dispatchMaterializedViewsOnDelete(ctx, id) {
+  const { materializedViewSource: source, collectionName, dispatchCtx } = ctx;
+  const mvs = source.registry().mvsForSource(collectionName);
+  const empty = { deleted: 0, residueUndecodable: [], residueDeclined: [] };
+  if (mvs.length === 0) return empty;
+  let executor = null;
+  let staleHelpers = null;
+  let deleted = 0;
+  const residueUndecodable = [];
+  const residueDeclined = [];
+  for (const reg of mvs) {
+    const mode = reg.spec.refresh;
+    if (mode === "eager") {
+      if (executor === null) {
+        ;
+        ({ MaterializedViewExecutor: executor } = await import("./executor-SVHAJZ4A.js"));
+      }
+      const rr = await executor.refresh(reg, {
+        getCollection: (name) => source.getCollection(name),
+        getActiveTxContext: () => source.getActiveTxContext(),
+        getQueryContext: () => source.getQueryContext(),
+        dispatchCtx: dispatchCtx({ collection: collectionName, id })
+      });
+      deleted += rr.deleted;
+      residueUndecodable.push(...rr.residueUndecodable);
+      residueDeclined.push(...rr.residueDeclined);
+      continue;
+    }
+    if (staleHelpers === null) staleHelpers = await import("./stale-BJO2WIN7.js");
+    const inv = await staleHelpers.invalidateMVAtRest(source, reg, mode);
+    deleted += inv.deleted;
+    residueUndecodable.push(...inv.residueUndecodable.map((rid) => `${reg.outputCollection}:${rid}`));
+    residueDeclined.push(...inv.residueDeclined.map((rid) => `${reg.outputCollection}:${rid}`));
+  }
+  return { deleted, residueUndecodable, residueDeclined };
+}
+export {
+  dispatchMaterializedViews,
+  dispatchMaterializedViewsOnDelete
+};
+//# sourceMappingURL=dispatch-V5MSMQYX.js.map

package/dist/dispatch-V5MSMQYX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-formula/materialized-views/dispatch.ts"],"sourcesContent":["/**\n * Materialized-view dispatch, lifted out of the kernel spine (#842 part b).\n *\n * Reached from `Collection` by dynamic `import()` only — `port-layering`\n * forbids a static spine→`with-*` import, and rejects a type-only one too\n * (it scans import statements, not their erasure). See\n * `with-formula/derivations/dispatch.ts` for the same note.\n *\n * The `Collection` reference below is TYPE-ONLY and points inward\n * (service → kernel), so it is both allowed and erased at build.\n *\n * @internal\n */\n\nimport type { TxContext } from '../../with-commit/tx/transaction.js'\nimport type { Collection } from '../../kernel/collection.js'\nimport type { ledgerAuditHook, WaveContext } from '../../kernel/via/dispatch.js'\nimport type { MaterializedViewExecutor } from './executor.js'\nimport type * as MVStale from './stale.js'\nimport type { MaterializedViewRegistry } from './registry.js'\nimport type { MVQueryContext } from './types.js'\n\n/** The per-write dispatch context the MV executor threads through. */\ninterface DispatchCtx {\n  emit: (e: string, p: unknown) => void\n  source: { readonly collection: string; readonly id: string }\n  audit: ReturnType<typeof ledgerAuditHook>\n}\n\n/** What the MV dispatchers need from the collection that owns them. */\nexport interface MvDispatchCtx {\n  readonly materializedViewSource: {\n    registry(): MaterializedViewRegistry\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    getCollection(name: string): Collection<any>\n    getActiveTxContext(): TxContext | null\n    getQueryContext(): MVQueryContext\n  }\n  /** The collection the delete happened in. */\n  readonly collectionName: string\n  /** Builds the per-write dispatch context the executor threads through. */\n  readonly dispatchCtx: (source: { readonly collection: string; readonly id: string }) => DispatchCtx\n}\n\n/**\n * Fire every MV whose dependency set includes this collection, on write.\n *\n * Skips entirely when the record being written is itself an MV-emitted row\n * (it carries `_materializedFrom`) — a defensive guard against missed cycle\n * detection.\n *\n * @param wave #638 Task 4 — the sync/cutover/restore dispatch wave. An eager\n *   MV already refreshed in this wave is skipped, deduped per target on the\n *   spec name.\n */\nexport async function dispatchMaterializedViews(\n  ctx: MvDispatchCtx,\n  id: string,\n  record: Record<string, unknown>,\n  wave?: WaveContext,\n): Promise<void> {\n  const { materializedViewSource: source, collectionName, dispatchCtx } = ctx\n\n  if (record && typeof record === 'object' && '_materializedFrom' in record) return\n\n  const registry = source.registry()\n  const mvs = registry.mvsForSource(collectionName)\n  if (mvs.length === 0) return\n\n  let executor: typeof MaterializedViewExecutor | null = null\n  let staleHelpers: typeof MVStale | null = null\n\n  for (const reg of mvs) {\n    const mode = reg.spec.refresh\n\n    if (mode === 'eager') {\n      if (wave?.seen(`mv\\0${reg.spec.name}`)) continue\n      if (executor === null) {\n        ;({ MaterializedViewExecutor: executor } = await import('./executor.js'))\n      }\n      await executor.refresh(reg, {\n        getCollection: (name) => source.getCollection(name),\n        getActiveTxContext: () => source.getActiveTxContext(),\n        getQueryContext: () => source.getQueryContext(),\n        dispatchCtx: dispatchCtx({ collection: collectionName, id }),\n      })\n    } else if (mode === 'lazy') {\n      if (staleHelpers === null) staleHelpers = await import('./stale.js')\n      staleHelpers.markMVStale(registry, reg.spec.name)\n    }\n    // manual: no-op on source-write. `vault.refreshView(name)` is the only\n    // path that materializes a manual MV.\n  }\n}\n\n/**\n * Mirror of {@link dispatchMaterializedViews} for the delete/forget path. There is\n * no `_materializedFrom` skip — the record is gone — and the `internal` gate\n * at `_doDelete` is the recursion guard.\n *\n * @returns rows TOMBSTONED across every MV sourced here (#638 T6). Eager and\n *   lazy/manual `invalidateMVAtRest` purges both contribute (#761 item 1,\n *   previously eager-only): lazy persists a stale mark for cold-session\n *   recompute, manual serves empty until `refreshView()`.\n *   `residueUndecodable` / `residueDeclined` (#776/#785) carry\n *   `outputCollection:id` entries whose ownership stamp `invalidateMVAtRest`\n *   could not decode, respectively decoded and stamp-matched but declined to\n *   erase — surfaced, not erased.\n */\nexport async function dispatchMaterializedViewsOnDelete(\n  ctx: MvDispatchCtx,\n  id: string,\n): Promise<{ deleted: number; residueUndecodable: string[]; residueDeclined: string[] }> {\n  const { materializedViewSource: source, collectionName, dispatchCtx } = ctx\n\n  const mvs = source.registry().mvsForSource(collectionName)\n  const empty = { deleted: 0, residueUndecodable: [], residueDeclined: [] }\n  if (mvs.length === 0) return empty\n\n  let executor: typeof MaterializedViewExecutor | null = null\n  let staleHelpers: typeof MVStale | null = null\n\n  let deleted = 0\n  const residueUndecodable: string[] = []\n  const residueDeclined: string[] = []\n\n  for (const reg of mvs) {\n    const mode = reg.spec.refresh\n\n    if (mode === 'eager') {\n      if (executor === null) {\n        ;({ MaterializedViewExecutor: executor } = await import('./executor.js'))\n      }\n      const rr = await executor.refresh(reg, {\n        getCollection: (name) => source.getCollection(name),\n        getActiveTxContext: () => source.getActiveTxContext(),\n        getQueryContext: () => source.getQueryContext(),\n        dispatchCtx: dispatchCtx({ collection: collectionName, id }),\n      })\n      // #782/#785 — the eager leg reports both residue channels.\n      deleted += rr.deleted\n      residueUndecodable.push(...rr.residueUndecodable)\n      residueDeclined.push(...rr.residueDeclined)\n      continue\n    }\n\n    if (staleHelpers === null) staleHelpers = await import('./stale.js')\n    const inv = await staleHelpers.invalidateMVAtRest(source, reg, mode)\n    deleted += inv.deleted\n    residueUndecodable.push(...inv.residueUndecodable.map((rid) => `${reg.outputCollection}:${rid}`))\n    residueDeclined.push(...inv.residueDeclined.map((rid) => `${reg.outputCollection}:${rid}`))\n  }\n\n  return { deleted, residueUndecodable, residueDeclined }\n}\n"],"mappings":";;;AAuDA,eAAsB,0BACpB,KACA,IACA,QACA,MACe;AACf,QAAM,EAAE,wBAAwB,QAAQ,gBAAgB,YAAY,IAAI;AAExE,MAAI,UAAU,OAAO,WAAW,YAAY,uBAAuB,OAAQ;AAE3E,QAAM,WAAW,OAAO,SAAS;AACjC,QAAM,MAAM,SAAS,aAAa,cAAc;AAChD,MAAI,IAAI,WAAW,EAAG;AAEtB,MAAI,WAAmD;AACvD,MAAI,eAAsC;AAE1C,aAAW,OAAO,KAAK;AACrB,UAAM,OAAO,IAAI,KAAK;AAEtB,QAAI,SAAS,SAAS;AACpB,UAAI,MAAM,KAAK,OAAO,IAAI,KAAK,IAAI,EAAE,EAAG;AACxC,UAAI,aAAa,MAAM;AACrB;AAAC,SAAC,EAAE,0BAA0B,SAAS,IAAI,MAAM,OAAO,wBAAe;AAAA,MACzE;AACA,YAAM,SAAS,QAAQ,KAAK;AAAA,QAC1B,eAAe,CAAC,SAAS,OAAO,cAAc,IAAI;AAAA,QAClD,oBAAoB,MAAM,OAAO,mBAAmB;AAAA,QACpD,iBAAiB,MAAM,OAAO,gBAAgB;AAAA,QAC9C,aAAa,YAAY,EAAE,YAAY,gBAAgB,GAAG,CAAC;AAAA,MAC7D,CAAC;AAAA,IACH,WAAW,SAAS,QAAQ;AAC1B,UAAI,iBAAiB,KAAM,gBAAe,MAAM,OAAO,qBAAY;AACnE,mBAAa,YAAY,UAAU,IAAI,KAAK,IAAI;AAAA,IAClD;AAAA,EAGF;AACF;AAgBA,eAAsB,kCACpB,KACA,IACuF;AACvF,QAAM,EAAE,wBAAwB,QAAQ,gBAAgB,YAAY,IAAI;AAExE,QAAM,MAAM,OAAO,SAAS,EAAE,aAAa,cAAc;AACzD,QAAM,QAAQ,EAAE,SAAS,GAAG,oBAAoB,CAAC,GAAG,iBAAiB,CAAC,EAAE;AACxE,MAAI,IAAI,WAAW,EAAG,QAAO;AAE7B,MAAI,WAAmD;AACvD,MAAI,eAAsC;AAE1C,MAAI,UAAU;AACd,QAAM,qBAA+B,CAAC;AACtC,QAAM,kBAA4B,CAAC;AAEnC,aAAW,OAAO,KAAK;AACrB,UAAM,OAAO,IAAI,KAAK;AAEtB,QAAI,SAAS,SAAS;AACpB,UAAI,aAAa,MAAM;AACrB;AAAC,SAAC,EAAE,0BAA0B,SAAS,IAAI,MAAM,OAAO,wBAAe;AAAA,MACzE;AACA,YAAM,KAAK,MAAM,SAAS,QAAQ,KAAK;AAAA,QACrC,eAAe,CAAC,SAAS,OAAO,cAAc,IAAI;AAAA,QAClD,oBAAoB,MAAM,OAAO,mBAAmB;AAAA,QACpD,iBAAiB,MAAM,OAAO,gBAAgB;AAAA,QAC9C,aAAa,YAAY,EAAE,YAAY,gBAAgB,GAAG,CAAC;AAAA,MAC7D,CAAC;AAED,iBAAW,GAAG;AACd,yBAAmB,KAAK,GAAG,GAAG,kBAAkB;AAChD,sBAAgB,KAAK,GAAG,GAAG,eAAe;AAC1C;AAAA,IACF;AAEA,QAAI,iBAAiB,KAAM,gBAAe,MAAM,OAAO,qBAAY;AACnE,UAAM,MAAM,MAAM,aAAa,mBAAmB,QAAQ,KAAK,IAAI;AACnE,eAAW,IAAI;AACf,uBAAmB,KAAK,GAAG,IAAI,mBAAmB,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;AAChG,oBAAgB,KAAK,GAAG,IAAI,gBAAgB,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;AAAA,EAC5F;AAEA,SAAO,EAAE,SAAS,oBAAoB,gBAAgB;AACxD;","names":[]}

package/dist/{enclave-YFKA3GJT.js → enclave-ZA7C3H2L.js}

@@ -22,26 +22,26 @@ import {
   sealRecordToHost,
   verifyBrokerProof,
   writeEnvelopeBody
-} from "./chunk-PEY6ZTCF.js";
+} from "./chunk-MMVQ3SUO.js";
 import {
   buildDeleteMarker,
   buildTombstone,
   isDeleteMarker,
   isTombstone,
   isTombstoneShape
-} from "./chunk-QXPOEAKR.js";
+} from "./chunk-KCZAFDP5.js";
 import {
   ctEqualTags,
   deriveVdigSlotKey,
   evaluateKofN
-} from "./chunk-LLVW4V7R.js";
-import "./chunk-M25ZIEB2.js";
+} from "./chunk-5WLDZZ6S.js";
+import "./chunk-5HSSTOOG.js";
 import {
   computeBidxTarget,
   deriveClassifyIndexKey,
   deriveClassifyIndexSalt,
   mintBidxTag
-} from "./chunk-5BB3N4KU.js";
+} from "./chunk-G4MFQXYX.js";
 import {
   pbkdf2VerifyDigest
 } from "./chunk-LP7BEXCT.js";
@@ -54,10 +54,10 @@ import {
   decryptDeterministic,
   deriveDeterministicKey,
   deriveKey,
-  derivePassphraseKey,
   derivePresenceKey,
   deriveSealedFieldKey,
   deriveSealedFieldKeyFromCek,
+  deriveSecretKey,
   encrypt,
   encryptBytes,
   encryptBytesWithAAD,
@@ -72,9 +72,9 @@ import {
   unwrapKey,
   wrapCek,
   wrapKey
-} from "./chunk-5P5AAXYA.js";
-import "./chunk-5BHNQNBI.js";
-import "./chunk-IGM563N5.js";
+} from "./chunk-7U6AB7DZ.js";
+import "./chunk-DOZFU7OZ.js";
+import "./chunk-6SYOHUHM.js";
 import "./chunk-PZ5AY32C.js";
 export {
   RecordCodec,
@@ -97,10 +97,10 @@ export {
   deriveClassifyIndexSalt,
   deriveDeterministicKey,
   deriveKey,
-  derivePassphraseKey,
   derivePresenceKey,
   deriveSealedFieldKey,
   deriveSealedFieldKeyFromCek,
+  deriveSecretKey,
   deriveVdigSlotKey,
   encrypt,
   encryptBytes,
@@ -140,4 +140,4 @@ export {
   wrapKey,
   writeEnvelopeBody
 };
-//# sourceMappingURL=enclave-YFKA3GJT.js.map
+//# sourceMappingURL=enclave-ZA7C3H2L.js.map

package/dist/executor-FCJEH3FU.js

@@ -0,0 +1,9 @@
+import {
+  DerivationExecutor
+} from "./chunk-YJ3TREAC.js";
+import "./chunk-6SYOHUHM.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-FCJEH3FU.js.map

package/dist/executor-OHET7TF7.js

@@ -0,0 +1,9 @@
+import {
+  GuardExecutor
+} from "./chunk-EGU4PWQW.js";
+import "./chunk-6SYOHUHM.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-OHET7TF7.js.map