@noy-db/hub 0.6.0 → 0.7.0-pre.0

package/dist/attestation/index.js

@@ -1,42 +1,42 @@
 import {
   issueAttestationCore
-} from "../chunk-2ZCWHCLF.js";
+} from "../chunk-ZO252Q5S.js";
 import {
   getRevokedDocIdsCore,
   publishRevocationListCore,
   revokeDocCore,
   unrevokeDocCore
-} from "../chunk-6RH7PRTL.js";
+} from "../chunk-TVIFAHZR.js";
 import {
   ATTESTATIONS_COLLECTION
-} from "../chunk-2J5IT37K.js";
+} from "../chunk-3L2MVE36.js";
 import {
   NO_ATTESTATION
-} from "../chunk-MPKP6L5E.js";
+} from "../chunk-E6YA6UAP.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   AttestationError,
   AttestationNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/attestation/active.ts
 function withAttestation() {
   return {
     async issueAttestation(ctx, args) {
-      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-5CFBWBRX.js");
+      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-G53NB6EW.js");
       return issueAttestationCore2(ctx, args);
     },
     async getDocumentSigningPublicKey(deps) {
-      const { loadSigner, loadOrCreateSigner } = await import("../signer-53AQ3BU2.js");
+      const { loadSigner, loadOrCreateSigner } = await import("../signer-6XVS2AU3.js");
       const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK);
       if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
       if (deps.role !== "owner") {
@@ -46,19 +46,19 @@ function withAttestation() {
       return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 };
     },
     async revokeAttestation(ctx, docId) {
-      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-H3VSTAIE.js");
+      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-MJNYWO72.js");
       return revokeDocCore2(ctx, docId);
     },
     async unrevokeAttestation(ctx, docId) {
-      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-H3VSTAIE.js");
+      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-MJNYWO72.js");
       return unrevokeDocCore2(ctx, docId);
     },
     async getRevokedDocIds(ctx) {
-      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-H3VSTAIE.js");
+      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-MJNYWO72.js");
       return getRevokedDocIdsCore2(ctx);
     },
     async publishRevocationList(ctx) {
-      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-H3VSTAIE.js");
+      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-MJNYWO72.js");
       return publishRevocationListCore2(ctx);
     }
   };

package/dist/{backup-VL4GRIEW.js → backup-Z7ZBTAQ6.js}

@@ -3,37 +3,37 @@ import {
 } from "./chunk-EPFF7LOX.js";
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-KM6ZXG7U.js";
+} from "./chunk-YXA2TCTZ.js";
 import {
   SEQUENCE_COLLECTION
-} from "./chunk-W3HAIN6U.js";
+} from "./chunk-CN6B5PEN.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
   PERIOD_FREEZES_COLLECTION,
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION
-} from "./chunk-5O5ZSW7N.js";
+} from "./chunk-Z7ZXZL6Y.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-CXPOG3ZY.js";
+import "./chunk-2LPVI4PX.js";
 import {
   buildRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
+import "./chunk-W5LHQXZU.js";
 import {
   NOYDB_BACKUP_VERSION
-} from "./chunk-UJ4Z67UQ.js";
+} from "./chunk-RK7N4OQ5.js";
 import {
   BackupCorruptedError,
   BackupLedgerError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/backup.ts
@@ -262,4 +262,4 @@ export {
   loadVault,
   verifyBackupIntegrity
 };
-//# sourceMappingURL=backup-VL4GRIEW.js.map
+//# sourceMappingURL=backup-Z7ZBTAQ6.js.map

package/dist/blobs/index.js

@@ -10,7 +10,7 @@ import {
   createExportBlobsHandle,
   reportOrphanBlobChunks,
   runCompaction
-} from "../chunk-LIR2DJWP.js";
+} from "../chunk-F23WQK3G.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -25,21 +25,21 @@ import {
   detectMimeType,
   isPreCompressed,
   memoryBlobPinStore
-} from "../chunk-JMJSCI7U.js";
-import "../chunk-C3XWJCG7.js";
-import "../chunk-3YGUHUJA.js";
-import "../chunk-D2YFQ7XG.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-ALB64CZM.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-HTGRQZFB.js";
+import "../chunk-POS53FG6.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   BlobOfflineError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/via/blob/active.ts

package/dist/broker/index.js

@@ -1,22 +1,22 @@
 import {
   NO_BROKER
-} from "../chunk-YCGLAANM.js";
+} from "../chunk-4A4TYISP.js";
 import {
   issueChallenge,
   verifyBrokerProof
-} from "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   BrokerEnrolmentError,
   BrokerNotEnabledError,
   BrokerProofError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-party/broker/active.ts
@@ -30,7 +30,7 @@ function withBroker(config) {
   const cache = /* @__PURE__ */ new Map();
   return {
     async enroll(ctx) {
-      const { enrollSeed } = await import("../seed-55FPOMYP.js");
+      const { enrollSeed } = await import("../seed-NSNIGYXE.js");
       return enrollSeed({ ...ctx, config });
     },
     async rotate(ctx) {
@@ -39,7 +39,7 @@ function withBroker(config) {
       const inFlight = scoped.map(([, e]) => e.inFlight).filter((p) => p !== void 0);
       await Promise.allSettled(inFlight);
       for (const [key] of scoped) cache.delete(key);
-      const { rotateSeed } = await import("../seed-55FPOMYP.js");
+      const { rotateSeed } = await import("../seed-NSNIGYXE.js");
       return rotateSeed({ ...ctx, config });
     },
     credentialSource(ctx, profile) {
@@ -56,7 +56,7 @@ function withBroker(config) {
         const skewMs = config.skewMs ?? DEFAULT_SKEW_MS;
         const capturedEntry = entry;
         const inFlight = (async () => {
-          const { mintStoreCredentials } = await import("../seed-55FPOMYP.js");
+          const { mintStoreCredentials } = await import("../seed-NSNIGYXE.js");
           const creds = await mintStoreCredentials({ ...ctx, config }, profile);
           capturedEntry.cached = { creds, validUntil: cacheFloor(creds, skewMs) };
           return creds;

package/dist/by/index.js

@@ -0,0 +1,11 @@
+import {
+  isQuorum,
+  runDrainBarrier
+} from "../chunk-CBRS2NEK.js";
+import "../chunk-JBIV4FLR.js";
+import "../chunk-PZ5AY32C.js";
+export {
+  isQuorum,
+  runDrainBarrier
+};
+//# sourceMappingURL=index.js.map

package/dist/cargo/index.js

@@ -3,70 +3,74 @@ import {
   createOwnerOnAdoptedPartition,
   decryptExtractedPartition,
   describeExtraction,
-  diffVault,
   unsealDeks,
   withCargo
-} from "../chunk-BMU2DS3S.js";
+} from "../chunk-YKPGQJFU.js";
 import {
   extractPartition,
   walkClosure
-} from "../chunk-5F7BZAGV.js";
+} from "../chunk-OWLVBOWO.js";
+import {
+  diffVault
+} from "../chunk-LFUID7OW.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-PJX72ICF.js";
-import "../chunk-QQRRKO7W.js";
-import "../chunk-S6PJ6ZKE.js";
+} from "../chunk-KN4W2OQ4.js";
+import "../chunk-H7HP56F6.js";
+import "../chunk-DKWPJOYH.js";
+import {
+  NO_CARGO
+} from "../chunk-XJ3FEKEY.js";
+import "../chunk-Z2WK53N6.js";
 import {
-  NO_CARGO,
   isQuorum,
   runDrainBarrier
-} from "../chunk-LC6NE4IQ.js";
-import "../chunk-S2I5MYSA.js";
-import "../chunk-KM6ZXG7U.js";
+} from "../chunk-CBRS2NEK.js";
+import "../chunk-YXA2TCTZ.js";
 import {
   CustodyApi
-} from "../chunk-HWI7GHJZ.js";
-import "../chunk-GCU42IG7.js";
-import "../chunk-2ZT4INZ4.js";
+} from "../chunk-J4UJ5FRV.js";
+import "../chunk-6FOGTKBY.js";
+import "../chunk-LF6DMX4C.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import "../chunk-JMJSCI7U.js";
+import "../chunk-ALB64CZM.js";
 import {
   groupAndReduce,
   reduceRecords
-} from "../chunk-2CBFYXJX.js";
+} from "../chunk-4G25SDQL.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-ATL3ZVXT.js";
 import {
   readPath
 } from "../chunk-NSITFOCJ.js";
-import "../chunk-XPEPMK4Y.js";
-import "../chunk-C3XWJCG7.js";
-import "../chunk-J6I5VR6P.js";
-import "../chunk-ZJUZOJVW.js";
-import "../chunk-3YGUHUJA.js";
+import "../chunk-X67FCULK.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-5W7YXFV5.js";
+import "../chunk-DFAUMLD7.js";
+import "../chunk-HTGRQZFB.js";
 import {
   generateULID
 } from "../chunk-4AOERLTV.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-JXHNUYQO.js";
+import "../chunk-IESNYJXZ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-BZ3WMOYX.js";
-import "../chunk-D2YFQ7XG.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-RC4BROYR.js";
+import "../chunk-POS53FG6.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import {
   sha256Hex
-} from "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+} from "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   AdoptionStateError,
   CargoNotEnabledError,
@@ -81,7 +85,7 @@ import {
   UnknownShardError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   AdoptionStateError,

package/dist/{chunk-JKATP6OE.js → chunk-225O5CXQ.js}

@@ -1,7 +1,7 @@
 import {
   DerivationCapExceededError,
   DerivationOutputShapeError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/with-formula/derivations/executor.ts
 var DerivationExecutor = {
@@ -121,4 +121,4 @@ var DerivationExecutor = {
 export {
   DerivationExecutor
 };
-//# sourceMappingURL=chunk-JKATP6OE.js.map
+//# sourceMappingURL=chunk-225O5CXQ.js.map

package/dist/{chunk-XINT4VJA.js → chunk-2GXEQUEX.js}

@@ -1,6 +1,6 @@
 import {
   linkI18nVia
-} from "./chunk-XPEPMK4Y.js";
+} from "./chunk-X67FCULK.js";
 
 // src/via/i18n/dictionary.ts
 function dictKey(name, keysOrMap, opts) {
@@ -71,4 +71,4 @@ export {
   dictKey,
   staticDict
 };
-//# sourceMappingURL=chunk-XINT4VJA.js.map
+//# sourceMappingURL=chunk-2GXEQUEX.js.map

package/dist/chunk-2GXEQUEX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/via/i18n/dictionary.ts"],"sourcesContent":["/**\n * _dict_* reserved collections + dictKey schema descriptor —\n *\n * Stores bounded enum-like field dictionaries as reserved encrypted\n * collections (`_dict_<name>/`) within a vault. Each dictionary\n * entry maps a stable key (e.g. `'paid'`) to a locale → label record\n * (e.g. `{ en: 'Paid', th: 'ชำระแล้ว' }`).\n *\n * Design decisions\n * ────────────────\n *\n * **Why reserved collections, not a separate store?**\n * Same answer as `_sync_credentials`: the compartment's existing\n * encryption stack is exactly right. Dictionaries are encrypted under the\n * same vault DEK, inherit ACL, ledger, and backup/restore for free.\n *\n * **One collection per dictionary, not one collection with namespaces.**\n * Each `_dict_<name>/` collection holds entries `{ id: key, labels: {...} }`.\n * This composes with `ref()` naturally (a dictKey IS a ref to the dict\n * collection), and means the query DSL works over dictionary entries\n * without any special-casing.\n *\n * **dictKey() is a descriptor, not a Zod type.**\n * The descriptor pattern matches `ref()`: declare NOYDB-specific metadata\n * in the collection options alongside `refs`. TypeScript inference comes\n * from the descriptor's generic parameter, not from Zod internals.\n *\n * API:\n *   `dictKey(name, keys?)` — returns a DictKeyDescriptor\n *   `vault.dictionary(name)` — returns a DictionaryHandle\n *   `DictionaryHandle.put/putAll/get/delete/rename/list` — CRUD\n *\n * The storage engine (`DictionaryHandle`, `DictEntry`, `DictionaryOptions`,\n * `DICT_COLLECTION_PREFIX`, `dictCollectionName`) moved to\n * `via/lookup/handle.ts` (#650 Task 1 — via-lookup extraction, phase\n * D of the Via port) and is renamed `LookupHandle` there; re-exported here\n * under the original names for one release so existing importers of this\n * module compile unchanged. This file keeps only the descriptor factories\n * (`dictKey`/`staticDict`), which are locale/i18n-coupled and stay put.\n */\n\nimport type { OnMissingPolicy } from './policy.js'\nimport { linkI18nVia } from './binding.js'\n// #650 Task 2 — type-only: dictKey()/staticDict() construct the equivalent\n// LookupDescriptor shape internally (the reserved/static tiers via-lookup's\n// dict()/lookup(static) also produce) before adapting it to their own\n// legacy public return shape. No runtime dependency on via/lookup.\nimport type { LookupDescriptor } from '../lookup/descriptor.js'\n\n// `isDictCollectionName` now lives on the kernel port (#623 Task 7,\n// port/with/i18n-strategy.ts) — re-exported here for compat. Its `'_dict_'`\n// check is a duplicate of DICT_COLLECTION_PREFIX (now on\n// via/lookup/handle.ts, not an import, to avoid a port→feature value\n// dependency); keep the two in sync.\nexport { isDictCollectionName } from '../../port/with/i18n-strategy.js'\n\n// Storage-engine re-exports (#650 Task 1 — moved to via/lookup/handle.ts).\nexport {\n  DictionaryHandle,\n  DICT_COLLECTION_PREFIX,\n  dictCollectionName,\n  type DictEntry,\n  type DictionaryOptions,\n} from '../lookup/handle.js'\n\n// ─── DictKey descriptor ────────────────────────────────────────────────\n\n/**\n * Descriptor returned by `dictKey()`. Attach to the collection's\n * `dictKeyFields` option to declare which fields are dictionary-backed:\n *\n * ```ts\n * const invoices = company.collection<Invoice>('invoices', {\n *   dictKeyFields: {\n *     status: dictKey('status', ['draft', 'open', 'paid'] as const),\n *   },\n * })\n * ```\n *\n * The generic parameter `Keys` narrows the TypeScript type of the field\n * to a literal union; the runtime value of `keys` is used by `put()`\n * validation to reject unknown keys when a key set is declared.\n */\nexport interface DictKeyDescriptor<Keys extends string = string> {\n  readonly _noydbDictKey: true\n  /** Via port brand marker (#623 Task 9) — dictKey shares the i18n binding brand. */\n  readonly _viaBrand: 'i18n'\n  /** Which dictionary this field references. */\n  readonly name: string\n  /** Declared valid keys. When set, `put()` rejects keys not in this set. */\n  readonly keys: readonly Keys[] | undefined\n  /**\n   * What to do when a label is missing for the resolved locale. Mirrors\n   * `i18nText`'s `onMissing`. Default behavior (when unset) preserves the\n   * legacy contract: a missing label is omitted (scalar) or `null`\n   * (array element) — i.e. `'null'`. Set `'substitute'` to walk the\n   * declared `substitute` chain, or `'throw'` to raise.\n   */\n  readonly onMissing?: OnMissingPolicy\n  /** Ordered preferred-substitute locales for label resolution. */\n  readonly substitute?: readonly string[]\n  /**\n   * Optional inline display labels (value → label map). A SYNC display\n   * fallback for `describe()` when async `dictLabels` (from `_dict_`) are\n   * not resolved. The async path still wins when available.\n   */\n  readonly labels?: Record<string, string>\n}\n\n/**\n * Create a `DictKeyDescriptor` for a dictionary-backed enum field.\n *\n * @param name        The dictionary name (corresponds to `_dict_<name>` collection).\n * @param keysOrMap   Either:\n *   - An `as const` array of valid key literals — narrows the TypeScript type\n *     to a literal union and enables put-time validation.\n *   - A **value→label map** (`{ draft: 'Draft', paid: 'Paid' }`) — keys are\n *     inferred from the map, and the labels are stored as inline display\n *     defaults surfaced by `describe()` without a store read.\n * @param opts        `{ labels?, onMissing?, substitute? }` when the array form\n *                    is used; `opts.labels` provides inline display defaults for\n *                    specific keys (same semantics as the map form, but\n *                    explicit key order from the array is preserved).\n *\n * @example\n * ```ts\n * // array form (original):\n * dictKey('status', ['draft', 'open', 'paid'] as const)\n *\n * // value→label map form (keys inferred, inline labels for describe()):\n * dictKey('status', { draft: 'Draft', open: 'Open', paid: 'Paid' })\n *\n * // array + opts.labels (preserves explicit order, partial labels OK):\n * dictKey('status', ['draft', 'open', 'paid'] as const, { labels: { paid: 'Paid' } })\n * ```\n */\nexport function dictKey<Keys extends string>(\n  name: string,\n  keysOrMap?: readonly Keys[] | Record<Keys, string>,\n  opts?: { onMissing?: OnMissingPolicy; substitute?: readonly string[]; labels?: Record<string, string> },\n): DictKeyDescriptor<Keys> {\n  // The declaration is the Via binding's opt-in unit (#553) — same pattern\n  // as i18nText()/money().\n  linkI18nVia()\n  let keys: readonly Keys[] | undefined\n  let labels: Record<string, string> | undefined\n  if (Array.isArray(keysOrMap)) {\n    keys = keysOrMap as readonly Keys[]\n    labels = opts?.labels\n  } else if (keysOrMap && typeof keysOrMap === 'object') {\n    keys = Object.keys(keysOrMap) as Keys[]\n    labels = keysOrMap as Record<string, string>\n  } else {\n    keys = undefined\n    labels = opts?.labels\n  }\n  // #650 Task 2 — dictKey is the reserved-backing tier of via-lookup\n  // (dict()'s alias); construct the equivalent LookupDescriptor shape so\n  // the two tiers' field semantics stay in lockstep, then adapt it to\n  // dictKey's legacy public return shape. `_viaBrand` stays `'i18n'` for\n  // one release (see task-2-report.md's alias-brand decision) —\n  // mergeViaFields/compileVias's existing i18nFields+dictKeyFields\n  // path is untouched.\n  const equiv: LookupDescriptor<Keys> = {\n    _viaBrand: 'lookup',\n    dimension: name,\n    key: 'id',\n    vocabulary: 'open',\n    backing: 'reserved',\n    onDelete: 'restrict',\n    ...(keys !== undefined ? { keys } : {}),\n    ...(opts?.onMissing !== undefined ? { onMissing: opts.onMissing } : {}),\n    ...(opts?.substitute !== undefined ? { substitute: opts.substitute } : {}),\n    ...(labels !== undefined ? { labels } : {}),\n  }\n  return {\n    _noydbDictKey: true,\n    _viaBrand: 'i18n',\n    name: equiv.dimension,\n    keys: equiv.keys,\n    ...(equiv.onMissing !== undefined ? { onMissing: equiv.onMissing } : {}),\n    ...(equiv.substitute !== undefined ? { substitute: equiv.substitute } : {}),\n    ...(equiv.labels !== undefined ? { labels: equiv.labels } : {}),\n  }\n}\n\n// `isDictKeyDescriptor` now lives on the kernel port (#623 Task 11,\n// port/with/i18n-strategy.ts, alongside `isStaticDictDescriptor`) —\n// re-exported here for compat with existing importers of this module.\nexport { isDictKeyDescriptor } from '../../port/with/i18n-strategy.js'\n\n// ─── StaticDict descriptor (code-provided dictionary) ──────────────────\n\n/**\n * Descriptor returned by `staticDict()`. A sibling to {@link DictKeyDescriptor}\n * for **closed, defined-in-code, identical-across-vaults** enums (honorific,\n * civil-status, gender, religion, ContactTitle, status…).\n *\n * Unlike `dictKey`, the labels are supplied **at registration in code** and\n * resolved through the *same* label machinery, but with **no `_dict_*`\n * per-vault encrypted copy** and **no `rename()`**. The record stores only\n * the **code**; a static dict has no mutation surface.\n *\n * **Hybrid resolution.** Because a static dict is pure code with no\n * vault-locale dependency, it can — via a configured `displayLocale` — emit a\n * `<field>Label` even under a **locale-less read** (the property a locale-less\n * consumer needs and `dictKey` cannot provide). When a locale *is* active it\n * behaves exactly like `dictKey` (honoring `onMissing`/`substitute`).\n *\n * ```ts\n * const workers = vault.collection<Worker>('workers', {\n *   dictKeyFields: {\n *     civilStatus: staticDict('civilStatus', {\n *       adultMale:   { th: 'นาย',    en: 'Mr'  },\n *       adultFemale: { th: 'นาง',    en: 'Mrs' },\n *     }, { displayLocale: 'th' }),\n *   },\n * })\n * ```\n */\nexport interface StaticDictDescriptor<Keys extends string = string> {\n  readonly _noydbStaticDict: true\n  /** Via port brand marker (#623 Task 9) — staticDict shares the i18n binding brand. */\n  readonly _viaBrand: 'i18n'\n  /** Which dictionary this field references (the registry name). */\n  readonly name: string\n  /** The in-code label table: key → { locale → label }. */\n  readonly table: Readonly<Record<Keys, Readonly<Record<string, string>>>>\n  /** Declared valid keys — derived from `Object.keys(table)`. */\n  readonly keys: readonly Keys[]\n  /**\n   * Locale used to emit `<field>Label` under a **locale-less** read — the\n   * hybrid hinge. When unset, a static dict behaves like `dictKey` under a\n   * locale-less read (no label); a locale-less consumer almost always wants\n   * it set.\n   */\n  readonly displayLocale?: string\n  /** Same `onMissing` policy engine as `dictKey`. Default `'null'`. */\n  readonly onMissing?: OnMissingPolicy\n  /** Ordered preferred-substitute locales for label resolution. */\n  readonly substitute?: readonly string[]\n  /**\n   * Validate the stored code against `keys` on every `put()`. Default `true`\n   * — codes are closed by construction, so an unknown code is a bug. Set\n   * `false` to allow open codes (skips the `UnknownDictCodeError` guard).\n   */\n  readonly validateCodes?: boolean\n}\n\n/**\n * Create a `StaticDictDescriptor` for a code-provided enum field — a sibling\n * to {@link dictKey} for closed, code-defined, identical-across-vaults enums.\n *\n * The labels live in `table` (no `_dict_*` collection, no `rename()`); the\n * record stores only the stable code. Pass `displayLocale` so `<field>Label`\n * resolves even under a locale-less read.\n *\n * @param name   The dictionary name (used for the readonly-guard registry and\n *               the query label seam — never creates a `_dict_<name>` key).\n * @param table  `{ key: { locale: label } }` map.\n * @param opts   `displayLocale` (locale-less label), `onMissing`, `substitute`.\n *\n * @example\n * ```ts\n * staticDict('civilStatus', {\n *   adultMale:   { th: 'นาย',    en: 'Mr'  },\n *   adultFemale: { th: 'นาง',    en: 'Mrs' },\n * }, { displayLocale: 'th' })\n * ```\n */\nexport function staticDict<const T extends Record<string, Record<string, string>>>(\n  name: string,\n  table: T,\n  opts?: {\n    displayLocale?: string\n    onMissing?: OnMissingPolicy\n    substitute?: readonly string[]\n    validateCodes?: boolean\n  },\n): StaticDictDescriptor<Extract<keyof T, string>> {\n  // The declaration is the Via binding's opt-in unit (#553) — same pattern\n  // as i18nText()/dictKey()/money().\n  linkI18nVia()\n  type K = Extract<keyof T, string>\n  // #650 Task 2 — staticDict is the static-backing tier of via-lookup\n  // (lookup(dimension, {backing:'static', table, ...})'s alias); construct\n  // the equivalent LookupDescriptor shape, then adapt it to staticDict's\n  // legacy public return shape. `validateCodes` has no LookupDescriptor\n  // equivalent (a dictKey-family-only put-time knob) — applied directly\n  // below. `_viaBrand` stays `'i18n'` for one release — see\n  // task-2-report.md's alias-brand decision.\n  const equiv: LookupDescriptor<K> = {\n    _viaBrand: 'lookup',\n    dimension: name,\n    key: 'id',\n    vocabulary: 'closed',\n    backing: 'static',\n    onDelete: 'restrict',\n    table: table as Readonly<Record<string, Readonly<Record<string, string>>>>,\n    keys: Object.keys(table) as K[],\n    ...(opts?.displayLocale !== undefined ? { displayLocale: opts.displayLocale } : {}),\n    ...(opts?.onMissing !== undefined ? { onMissing: opts.onMissing } : {}),\n    ...(opts?.substitute !== undefined ? { substitute: opts.substitute } : {}),\n  }\n  return {\n    _noydbStaticDict: true,\n    _viaBrand: 'i18n',\n    name: equiv.dimension,\n    table: equiv.table as Readonly<Record<K, Readonly<Record<string, string>>>>,\n    keys: equiv.keys as readonly K[],\n    ...(equiv.displayLocale !== undefined ? { displayLocale: equiv.displayLocale } : {}),\n    ...(equiv.onMissing !== undefined ? { onMissing: equiv.onMissing } : {}),\n    ...(equiv.substitute !== undefined ? { substitute: equiv.substitute } : {}),\n    ...(opts?.validateCodes !== undefined ? { validateCodes: opts.validateCodes } : {}),\n  }\n}\n\n// `isStaticDictDescriptor` now lives on the kernel port (#623 Task 7,\n// port/with/i18n-strategy.ts) — re-exported here for compat.\nexport { isStaticDictDescriptor } from '../../port/with/i18n-strategy.js'\n\n"],"mappings":";;;;;AAwIO,SAAS,QACd,MACA,WACA,MACyB;AAGzB,cAAY;AACZ,MAAI;AACJ,MAAI;AACJ,MAAI,MAAM,QAAQ,SAAS,GAAG;AAC5B,WAAO;AACP,aAAS,MAAM;AAAA,EACjB,WAAW,aAAa,OAAO,cAAc,UAAU;AACrD,WAAO,OAAO,KAAK,SAAS;AAC5B,aAAS;AAAA,EACX,OAAO;AACL,WAAO;AACP,aAAS,MAAM;AAAA,EACjB;AAQA,QAAM,QAAgC;AAAA,IACpC,WAAW;AAAA,IACX,WAAW;AAAA,IACX,KAAK;AAAA,IACL,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,UAAU;AAAA,IACV,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACrE,GAAI,MAAM,eAAe,SAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;AAAA,IACxE,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,EAC3C;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,WAAW;AAAA,IACX,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,IACZ,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IACtE,GAAI,MAAM,eAAe,SAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IACzE,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,EAC/D;AACF;AAsFO,SAAS,WACd,MACA,OACA,MAMgD;AAGhD,cAAY;AASZ,QAAM,QAA6B;AAAA,IACjC,WAAW;AAAA,IACX,WAAW;AAAA,IACX,KAAK;AAAA,IACL,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,UAAU;AAAA,IACV;AAAA,IACA,MAAM,OAAO,KAAK,KAAK;AAAA,IACvB,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,IACjF,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACrE,GAAI,MAAM,eAAe,SAAY,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;AAAA,EAC1E;AACA,SAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,WAAW;AAAA,IACX,MAAM,MAAM;AAAA,IACZ,OAAO,MAAM;AAAA,IACb,MAAM,MAAM;AAAA,IACZ,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,IAClF,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IACtE,GAAI,MAAM,eAAe,SAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IACzE,GAAI,MAAM,kBAAkB,SAAY,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,EACnF;AACF;","names":[]}

package/dist/{chunk-CXPOG3ZY.js → chunk-2LPVI4PX.js}

@@ -2,19 +2,19 @@ import {
   buildRecordEnvelope,
   isDeleteMarker,
   isTombstone
-} from "./chunk-FX3UIDCS.js";
+} from "./chunk-N4CNVSUF.js";
 import {
   blindedEqual,
   openVdigPayload,
   sealVdigPayload
-} from "./chunk-CKKN25P2.js";
+} from "./chunk-FOG7YEJP.js";
 import {
   dualReadSealedSlot,
   parseSealedSlot
-} from "./chunk-7Q3RHOA5.js";
+} from "./chunk-KDJGJR7F.js";
 import {
   mintBidxTag
-} from "./chunk-4K6BIMLF.js";
+} from "./chunk-LKFKXS5K.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -35,11 +35,11 @@ import {
   generateSalt,
   unwrapCek,
   wrapCek
-} from "./chunk-ONPVHX2Y.js";
+} from "./chunk-W5LHQXZU.js";
 import {
   NOYDB_FORMAT_VERSION,
   SealedHandle
-} from "./chunk-UJ4Z67UQ.js";
+} from "./chunk-RK7N4OQ5.js";
 import {
   ClassifiedConfigError,
   ClassifiedRotationError,
@@ -48,7 +48,7 @@ import {
   SchemaValidationError,
   TamperedError,
   ValidationError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/kernel/enclave/record-aad.ts
 var SCHEME = "noydb-aad/2";
@@ -1352,4 +1352,4 @@ export {
   issueChallenge,
   verifyBrokerProof
 };
-//# sourceMappingURL=chunk-CXPOG3ZY.js.map
+//# sourceMappingURL=chunk-2LPVI4PX.js.map

package/dist/{chunk-2J5IT37K.js → chunk-3L2MVE36.js}

@@ -1,16 +1,16 @@
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-CXPOG3ZY.js";
+} from "./chunk-2LPVI4PX.js";
 import {
   buildRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
+} from "./chunk-N4CNVSUF.js";
 import {
   encrypt
-} from "./chunk-ONPVHX2Y.js";
+} from "./chunk-W5LHQXZU.js";
 import {
   ConflictError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/with-audit/attestation/signer.ts
 import { generateDocSigningKeyPair } from "@noy-db/attestation";
@@ -55,4 +55,4 @@ export {
   loadSigner,
   loadOrCreateSigner
 };
-//# sourceMappingURL=chunk-2J5IT37K.js.map
+//# sourceMappingURL=chunk-3L2MVE36.js.map

package/dist/{chunk-HOPNIR5R.js → chunk-3QARDAYW.js}

@@ -1,6 +1,6 @@
 import {
   OverlayIdMismatchError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/with-formula/overlay-views/virtual-collection.ts
 var OverlayedCollection = class {
@@ -206,4 +206,4 @@ var OverlayedCollection = class {
 export {
   OverlayedCollection
 };
-//# sourceMappingURL=chunk-HOPNIR5R.js.map
+//# sourceMappingURL=chunk-3QARDAYW.js.map

package/dist/{chunk-HSJBJIB2.js → chunk-467SKJ65.js}

@@ -1,15 +1,15 @@
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-CXPOG3ZY.js";
+} from "./chunk-2LPVI4PX.js";
 import {
   buildRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
+} from "./chunk-N4CNVSUF.js";
 import {
   encrypt,
   hmacSha256Hex,
   sha256Hex
-} from "./chunk-ONPVHX2Y.js";
+} from "./chunk-W5LHQXZU.js";
 
 // src/with-audit/forget/strategy.ts
 var NO_FORGET = { subjects: {} };
@@ -149,4 +149,4 @@ export {
   coerceSubjectId,
   readDottedPath
 };
-//# sourceMappingURL=chunk-HSJBJIB2.js.map
+//# sourceMappingURL=chunk-467SKJ65.js.map

package/dist/{chunk-YCGLAANM.js → chunk-4A4TYISP.js}

@@ -1,6 +1,6 @@
 import {
   BrokerNotEnabledError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/port/with/broker-strategy.ts
 var NO_BROKER = {
@@ -27,4 +27,4 @@ export {
   NO_BROKER,
   buildCredentialBrokerHandle
 };
-//# sourceMappingURL=chunk-YCGLAANM.js.map
+//# sourceMappingURL=chunk-4A4TYISP.js.map

package/dist/{chunk-2CBFYXJX.js → chunk-4G25SDQL.js}

@@ -9,13 +9,13 @@ import {
 } from "./chunk-NSITFOCJ.js";
 import {
   applyI18nLocale
-} from "./chunk-XPEPMK4Y.js";
+} from "./chunk-X67FCULK.js";
 import {
   viaBinder
-} from "./chunk-C3XWJCG7.js";
+} from "./chunk-XDVVBETV.js";
 import {
   GroupCardinalityError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/with-lookup/reduce/reduction.ts
 function reduceRecords(records, spec) {
@@ -361,4 +361,4 @@ export {
   groupAndReduce,
   GroupedReduction
 };
-//# sourceMappingURL=chunk-2CBFYXJX.js.map
+//# sourceMappingURL=chunk-4G25SDQL.js.map

package/dist/{chunk-5LZZQMIC.js → chunk-4LPF226H.js}

@@ -1,17 +1,17 @@
 import {
   freezeAndDeleteClosure,
   randomId
-} from "./chunk-QQRRKO7W.js";
+} from "./chunk-H7HP56F6.js";
 import {
   buildAccessibleBundle,
   resolveAccessibleCollections
-} from "./chunk-S6PJ6ZKE.js";
+} from "./chunk-DKWPJOYH.js";
 import {
   buildRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
+} from "./chunk-N4CNVSUF.js";
 import {
   NoydbError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/with-audit/portability/request-withdrawal.ts
 var WITHDRAWAL_REQUESTS_COLLECTION = "_user_withdrawal_requests";
@@ -158,4 +158,4 @@ export {
   approveWithdrawal,
   rejectWithdrawal
 };
-//# sourceMappingURL=chunk-5LZZQMIC.js.map
+//# sourceMappingURL=chunk-4LPF226H.js.map

package/dist/{chunk-GANFIM2M.js → chunk-4ZPE6SKS.js}

@@ -1,11 +1,11 @@
 import {
   sha256Hex
-} from "./chunk-ONPVHX2Y.js";
+} from "./chunk-W5LHQXZU.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewSourceUnknownError,
   RefNotDeclaredError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/with-formula/materialized-views/dependency-analyzer.ts
 function analyzeDependencies(query) {
@@ -483,4 +483,4 @@ export {
   MaterializedViewRegistry,
   wrapDbWithPredicates
 };
-//# sourceMappingURL=chunk-GANFIM2M.js.map
+//# sourceMappingURL=chunk-4ZPE6SKS.js.map

package/dist/{chunk-65JXA63J.js → chunk-5263OEM3.js}

@@ -1,7 +1,7 @@
 import {
   DerivationCycleError,
   MaterializedViewCycleError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/kernel/via/graph.ts
 var DEFAULT_POSTURE = { encryptedAtRest: "envelope", queryable: "full", exportable: true, forgettable: false };
@@ -341,4 +341,4 @@ export {
   DEFAULT_POSTURE,
   ViaGraph
 };
-//# sourceMappingURL=chunk-65JXA63J.js.map
+//# sourceMappingURL=chunk-5263OEM3.js.map