@noy-db/hub 0.7.0-pre.10 → 0.7.0-pre.12

package/dist/snapshots/index.js

@@ -4,19 +4,19 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-RCONOOVF.js";
-import "../chunk-NMDMSHBF.js";
-import "../chunk-DOPZWTMJ.js";
+} from "../chunk-PKJ43CMD.js";
+import "../chunk-MLO75SFJ.js";
+import "../chunk-CIGAQBJR.js";
 import "../chunk-4RUFYGWG.js";
-import "../chunk-XGXVPCYW.js";
-import "../chunk-CWFH36SI.js";
-import "../chunk-KZTPL7NL.js";
+import "../chunk-BOWNCWZT.js";
+import "../chunk-YSRUYAVU.js";
+import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-USKHHOIV.js";
+import "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-SW4TOSJL.js";
+} from "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/snapshots/engine.ts

package/dist/{stale-HZR7745Y.js → stale-KSPG6LFX.js}

@@ -6,17 +6,17 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-MENI33ZV.js";
+} from "./chunk-E3EBMC4G.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-DOPZWTMJ.js";
+import "./chunk-CIGAQBJR.js";
 import "./chunk-4RUFYGWG.js";
-import "./chunk-XGXVPCYW.js";
-import "./chunk-CWFH36SI.js";
-import "./chunk-KZTPL7NL.js";
+import "./chunk-BOWNCWZT.js";
+import "./chunk-YSRUYAVU.js";
+import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-USKHHOIV.js";
+import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
-import "./chunk-SW4TOSJL.js";
+import "./chunk-7O3Y4PPD.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-HZR7745Y.js.map
+//# sourceMappingURL=stale-KSPG6LFX.js.map

package/dist/{storage-J2QHNJCB.js → storage-WP4M7IFO.js}

@@ -3,16 +3,16 @@ import {
   loadPersistedSchema,
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-I5LSKXT6.js";
-import "./chunk-DOPZWTMJ.js";
+} from "./chunk-WWNYSV7S.js";
+import "./chunk-CIGAQBJR.js";
 import "./chunk-4RUFYGWG.js";
-import "./chunk-XGXVPCYW.js";
-import "./chunk-CWFH36SI.js";
-import "./chunk-KZTPL7NL.js";
+import "./chunk-BOWNCWZT.js";
+import "./chunk-YSRUYAVU.js";
+import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-USKHHOIV.js";
+import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
-import "./chunk-SW4TOSJL.js";
+import "./chunk-7O3Y4PPD.js";
 import "./chunk-PZ5AY32C.js";
 export {
   SCHEMAS_COLLECTION,
@@ -20,4 +20,4 @@ export {
   loadPersistedSchemaEntry,
   savePersistedSchema
 };
-//# sourceMappingURL=storage-J2QHNJCB.js.map
+//# sourceMappingURL=storage-WP4M7IFO.js.map

package/dist/{store-coordination-provider-MYIHSZXT.js → store-coordination-provider-O2VUEMJH.js}

@@ -2,17 +2,17 @@ import {
   loadFence,
   saveFence
 } from "./chunk-GM4IM7TC.js";
-import "./chunk-DOPZWTMJ.js";
+import "./chunk-CIGAQBJR.js";
 import {
   buildRecordEnvelope
 } from "./chunk-4RUFYGWG.js";
-import "./chunk-XGXVPCYW.js";
-import "./chunk-CWFH36SI.js";
-import "./chunk-KZTPL7NL.js";
+import "./chunk-BOWNCWZT.js";
+import "./chunk-YSRUYAVU.js";
+import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-USKHHOIV.js";
+import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
-import "./chunk-SW4TOSJL.js";
+import "./chunk-7O3Y4PPD.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -146,4 +146,4 @@ function unref(timer) {
 export {
   StoreMesh
 };
-//# sourceMappingURL=store-coordination-provider-MYIHSZXT.js.map
+//# sourceMappingURL=store-coordination-provider-O2VUEMJH.js.map

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-OLUTCM23.js";
+} from "../chunk-GHHUF2KL.js";
 import {
   NO_SYNC
 } from "../chunk-T7IR4N2S.js";
-import "../chunk-Q2ZN5DWZ.js";
-import "../chunk-DOPZWTMJ.js";
+import "../chunk-FAHMLERK.js";
+import "../chunk-CIGAQBJR.js";
 import "../chunk-4RUFYGWG.js";
-import "../chunk-XGXVPCYW.js";
-import "../chunk-CWFH36SI.js";
-import "../chunk-KZTPL7NL.js";
+import "../chunk-BOWNCWZT.js";
+import "../chunk-YSRUYAVU.js";
+import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-USKHHOIV.js";
+import "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
-import "../chunk-SW4TOSJL.js";
+import "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -2,7 +2,7 @@ import {
   MemoryDeviceSeal,
   beginEchoUnlock,
   withTeam
-} from "../chunk-IRHIA3AL.js";
+} from "../chunk-PFBL4M7E.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,7 +31,7 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-7PC3DRG7.js";
+} from "../chunk-LHH6H43C.js";
 import "../chunk-5UKIZIO3.js";
 import {
   buildEchoBlock,
@@ -53,21 +53,21 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-XJTGBHK6.js";
-import "../chunk-MV2OEK3K.js";
-import "../chunk-DZPMKY3J.js";
-import "../chunk-IZTU6RKH.js";
-import "../chunk-DOPZWTMJ.js";
+} from "../chunk-VNR2SNVJ.js";
+import "../chunk-YQWBEJCS.js";
+import "../chunk-UGTBXF5U.js";
+import "../chunk-JMGDHKQF.js";
+import "../chunk-CIGAQBJR.js";
 import "../chunk-4RUFYGWG.js";
-import "../chunk-XGXVPCYW.js";
-import "../chunk-CWFH36SI.js";
-import "../chunk-KZTPL7NL.js";
+import "../chunk-BOWNCWZT.js";
+import "../chunk-YSRUYAVU.js";
+import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-USKHHOIV.js";
+import "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
 import {
   TeamNotEnabledError
-} from "../chunk-SW4TOSJL.js";
+} from "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MemoryDeviceSeal,

package/dist/tiers/index.js

@@ -11,20 +11,20 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-5NKHCJU5.js";
-import "../chunk-DZPMKY3J.js";
-import "../chunk-IZTU6RKH.js";
-import "../chunk-DOPZWTMJ.js";
+} from "../chunk-RTYJRFQO.js";
+import "../chunk-UGTBXF5U.js";
+import "../chunk-JMGDHKQF.js";
+import "../chunk-CIGAQBJR.js";
 import "../chunk-4RUFYGWG.js";
-import "../chunk-XGXVPCYW.js";
-import "../chunk-CWFH36SI.js";
-import "../chunk-KZTPL7NL.js";
+import "../chunk-BOWNCWZT.js";
+import "../chunk-YSRUYAVU.js";
+import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-USKHHOIV.js";
+import "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
 import {
   TiersNotEnabledError
-} from "../chunk-SW4TOSJL.js";
+} from "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -9,7 +9,7 @@ import {
   StoreCapabilityError,
   UnknownStoreKindError,
   isConflictError
-} from "../chunk-SW4TOSJL.js";
+} from "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/port/to/locator.ts

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-RPX2H2OL.js";
+} from "../chunk-TO3EQ7HF.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-SW4TOSJL.js";
+import "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-CRH5OB4V.js"));
+var loadGuardExecutor = lazy(() => import("../executor-MZJXBWNM.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-SW4TOSJL.js";
+} from "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/vault-head/index.js

@@ -6,19 +6,19 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "../chunk-DOPZWTMJ.js";
+} from "../chunk-CIGAQBJR.js";
 import {
   buildRecordEnvelope
 } from "../chunk-4RUFYGWG.js";
-import "../chunk-XGXVPCYW.js";
-import "../chunk-CWFH36SI.js";
-import "../chunk-KZTPL7NL.js";
+import "../chunk-BOWNCWZT.js";
+import "../chunk-YSRUYAVU.js";
+import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import {
   encrypt
-} from "../chunk-USKHHOIV.js";
+} from "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
-import "../chunk-SW4TOSJL.js";
+import "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/vault-head/head.ts

package/dist/{verify-R6CCBUA3.js → verify-JBXCAGDL.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-XGXVPCYW.js";
+} from "./chunk-BOWNCWZT.js";
 import {
   dualReadSealedSlot
-} from "./chunk-CWFH36SI.js";
+} from "./chunk-YSRUYAVU.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-USKHHOIV.js";
+} from "./chunk-SL3JAAKN.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-SW4TOSJL.js";
+} from "./chunk-7O3Y4PPD.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-R6CCBUA3.js.map
+//# sourceMappingURL=verify-JBXCAGDL.js.map

package/dist/walk-P3E6QSNC.js

@@ -0,0 +1,22 @@
+import {
+  dumpVaultSchema
+} from "./chunk-VGICZPVE.js";
+import "./chunk-RXLYKVTF.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-URHRIAV6.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-WWNYSV7S.js";
+import "./chunk-CIGAQBJR.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-BOWNCWZT.js";
+import "./chunk-YSRUYAVU.js";
+import "./chunk-RMF67KCG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-SL3JAAKN.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-7O3Y4PPD.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-P3E6QSNC.js.map

package/dist/with-formula/derivations/dispatch.d.ts

@@ -94,5 +94,20 @@ export interface DerivationDispatchCtx extends DerivationDeleteCtx {
  * by the executor — a write to the child recomputes the parent aggregate, and
  * a write to the parent recomputes its own.
  */
-export declare function dispatchDerivations(ctx: DerivationDispatchCtx, id: string, record: Record<string, unknown>, version: number, wave?: WaveContext): Promise<void>;
+export declare function dispatchDerivations(ctx: DerivationDispatchCtx, id: string, record: Record<string, unknown>, version: number, wave?: WaveContext, 
+/** The pre-write record at `id` in THIS collection (undefined = not
+ *  captured — no field-match trigger, or a sync-applied wave; null =
+ *  captured and absent, i.e. a create). Only a `Record` re-fires the OLD
+ *  matched set alongside the new one (spec §7). */
+prior?: Record<string, unknown> | null): Promise<void>;
+/**
+ * Trigger fan-out for a DELETED parent record (#1249, spec §8). Distinct from
+ * the "record-shape derivations not dispatched on delete" rule — that is
+ * about deleting a SOURCE record; this fires when a TRIGGER collection's
+ * record is deleted, re-deriving source records that still exist. Pairs
+ * evaluate against the tombstoned record's values; matched sources re-derive
+ * through the normal executor (their derive() reads the now-absent parent
+ * and decides what that means — the engine never cascades deletes).
+ */
+export declare function dispatchTriggerDerivationsOnDelete(ctx: DerivationDispatchCtx, id: string, deleted: Record<string, unknown>): Promise<void>;
 export {};

package/dist/with-formula/derivations/registry.d.ts

@@ -1,8 +1,10 @@
 import { ViaGraph, type FieldRef, type EdgeKind, type Grain } from '../../kernel/via/graph.js';
+import { type NormalizedTrigger } from './trigger-match.js';
 import type { DerivationSpec } from './types.js';
 interface RegisteredStrategy {
     spec: DerivationSpec<any, any>;
     strategyHash: string;
+    readonly triggers: ReadonlyArray<NormalizedTrigger>;
 }
 /**
  * Vault-internal registry of derivation strategies. Owned by `Vault`;
@@ -22,6 +24,19 @@ export declare class DerivationRegistry {
     register(spec: DerivationSpec<any, any>): Promise<void>;
     strategiesForSource(source: string): ReadonlyArray<RegisteredStrategy>;
     strategiesProducingOutput(collection: string): ReadonlyArray<RegisteredStrategy>;
+    /**
+     * The #1253-pattern typo guard for match fields (#1249): a misspelt
+     * `to`/`from` silently matches nothing forever, so validate against the
+     * collection's enumerable field set at the earliest point it exists.
+     * `schemaFieldKeys(schema) === undefined` (TS-generic collection,
+     * unreadable validator) is DELIBERATELY silent — those fields are real
+     * and unenumerable. `configKeys` folds in the collection's other
+     * non-schema field declarations (fieldMeta/moneyFields/dictKeyFields/
+     * refs/computed); `denormExempt` is derived here from this registry's
+     * own strategies rather than taken as a parameter — a field this
+     * collection's own derivations write via `denorm` is never a typo.
+     */
+    validateFieldsFor(collectionName: string, schema: unknown, configKeys: ReadonlyArray<string>): void;
     /**
      * All registered strategies as a flat, deduplicated array.
      * Each strategy is indexed once per source (not once per output key),

package/dist/with-formula/derivations/trigger-match.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Pure helpers behind composite `triggerBy` (#1249).
+ *
+ * A trigger entry is a CONJUNCTION of equality pairs: a source record
+ * matches when EVERY pair satisfies String(source[to]) === String(written[from]).
+ * `from: 'id'` reads the written record's id (winning over any stored field
+ * named `id`, matching dispatch's `{ ...incoming, id }` convention). The
+ * legacy `on` form normalizes to `[{ from: 'id', to: on }]` so everything
+ * downstream has ONE shape.
+ *
+ * Scalar coercion is verbatim from `_findMatchingIds`: both sides must be
+ * string | number; anything else fails the pair (never throws).
+ * Spec: docs/superpowers/specs/2026-08-29-composite-triggerby-design.md §4-§5.
+ * @module
+ */
+export interface MatchPair {
+    readonly from: string;
+    readonly to: string;
+}
+export interface NormalizedTrigger {
+    readonly collection: string;
+    readonly match: ReadonlyArray<MatchPair>;
+    readonly maxFanout?: number;
+}
+interface RawTrigger {
+    readonly collection: string;
+    readonly on?: string;
+    readonly match?: ReadonlyArray<MatchPair>;
+    readonly maxFanout?: number;
+}
+export declare function normalizeTriggerBy(triggerBy: ReadonlyArray<RawTrigger> | undefined): NormalizedTrigger[];
+/**
+ * The value tuple a written record presents to one trigger entry.
+ * `null` means "this record cannot address any source" (a from-field is
+ * absent or non-scalar) — a legitimate no-match, not an error.
+ */
+export declare function tupleFromWritten(match: ReadonlyArray<MatchPair>, writtenId: string, record: Record<string, unknown> | null): Array<{
+    field: string;
+    value: string;
+}> | null;
+/** Any single component differing means NOT the same tuple (spec §7). */
+export declare function sameTuple(a: Array<{
+    field: string;
+    value: string;
+}> | null, b: Array<{
+    field: string;
+    value: string;
+}> | null): boolean;
+/** Moved to the kernel (#1249) so `collection.ts` can import statically without
+ *  dragging derivations code into the floor bundle; re-exported here for
+ *  compatibility with existing consumers of this module. */
+export { recordMatchesPairs, findMatchingIdsByPairs } from '../../kernel/match-pairs.js';

package/dist/with-formula/derivations/types.d.ts

@@ -183,6 +183,29 @@ export interface DerivationSpec<TSource extends Record<string, unknown>, TOutput
         collection: string;
         on: string;
         maxFanout?: number;
+    } | {
+        /**
+         * Multi-field trigger (#1249): a source record matches when EVERY
+         * pair satisfies `String(source[to]) === String(written[from])`.
+         * `from: 'id'` reads the written record's id; any other `from`
+         * reads the written record's field. Exactly one of `on` | `match`
+         * per entry. On a LOCAL UPDATE that changes any matched `from`
+         * field, fan-out runs on old-match ∪ new-match (any single
+         * component changing counts) — the prior record is threaded only
+         * from the local write path, so a sync-applied wave write or a
+         * tiers restore fans out on the new tuple only. Parent DELETES fan
+         * out using the tombstoned record's values — for BOTH forms. A
+         * missing/non-scalar `from` value matches nothing. Match fields
+         * are validated against the collections' enumerable field sets
+         * where possible (silent for TS-generic collections — see the
+         * registration guard).
+         */
+        collection: string;
+        match: ReadonlyArray<{
+            from: string;
+            to: string;
+        }>;
+        maxFanout?: number;
     }>;
     /**
      * @internal — set by `withRollup()`. Marks this strategy as

package/dist/with-shape/introspection/behaviors.d.ts

@@ -46,6 +46,13 @@ export interface DerivationBehaviorEntry {
         readonly collection: string;
         readonly on: string;
         readonly maxFanout?: number;
+    } | {
+        readonly collection: string;
+        readonly match: ReadonlyArray<{
+            readonly from: string;
+            readonly to: string;
+        }>;
+        readonly maxFanout?: number;
     }>;
     readonly rollup?: {
         readonly from: string;

package/dist/with-shape/introspection/describe.d.ts

@@ -186,6 +186,38 @@ export interface ZodFieldSlot {
  *
  * No static zod import — all zod access is lazy via derivePersistedSchema.
  */
+/**
+ * Field KEYS from a configured validator, synchronously — the complement to
+ * {@link deriveZodFields}, which derives field TYPES and must be async.
+ *
+ * The distinction is the whole point (#1253). `describe()`'s sync path passed
+ * `zodFields: undefined`, so `fieldMeta` key-validation could never run there
+ * and a typo'd key became a PHANTOM FIELD carrying its declared `sensitivity`
+ * while the real field went undescribed — an inventory wrong in both
+ * directions, silently, on the surface `sensitivity` exists to serve.
+ *
+ * That was read as unavoidable ("the sync path cannot know the schema's
+ * fields"), which is true of types and false of keys: a Zod object exposes
+ * `.shape` directly, on both v3 and v4, with no JSON-Schema derivation and no
+ * `zod-to-json-schema` peer. The latter matters — on Zod 3 that peer is
+ * required for the async path, so the sync path is the only one some
+ * consumers can reach.
+ *
+ * A duck-typed probe, not a Zod dependency: an unrecognised validator returns
+ * `undefined` and the caller stays silent rather than guessing, so a validator
+ * hub cannot read never produces a false "unknown field" error.
+ *
+ * ZodEffects (reported by the pilot on #1249's guard, and it equally affected
+ * #1253's): on Zod 3 an OBJECT-LEVEL `.refine()` wraps the object in a
+ * ZodEffects whose `.shape` is undefined — the object sits at `_def.schema` —
+ * so "has a schema" and "hub can enumerate its fields" silently diverged for
+ * exactly the schemas most worth guarding (validated ones). Unwrapped here,
+ * but ONLY through refinement effects: a `.transform()`/`.preprocess()`
+ * changes the OUTPUT shape, so its inner keys would be a lie — those stay
+ * `undefined` (silent), deliberately. Zod 4 keeps `.shape` through `.refine()`
+ * and never enters the loop. Bounded depth, so a cyclic duck cannot hang us.
+ */
+export declare function schemaFieldKeys(schema: unknown): readonly string[] | undefined;
 export declare function deriveZodFields(schema: unknown): Promise<Record<string, ZodFieldSlot>>;
 /**
  * Resolve the persisted-schema `fieldIds` map for `describeAsync()`'s
@@ -223,6 +255,14 @@ export interface BuildDescriptionInput {
     readonly refs: Record<string, RefDescriptor>;
     /** Async path fills this; sync path passes `undefined`. */
     readonly zodFields: Record<string, ZodFieldSlot> | undefined;
+    /**
+     * The collection's configured validator, if any. The sync path passes it so
+     * `fieldMeta` keys can still be validated (#1253): field KEYS are readable
+     * synchronously via {@link schemaFieldKeys} even though field TYPES are not.
+     * `undefined` means no validator is configured, which is itself informative
+     * — the config keys are then the complete field set.
+     */
+    readonly schema?: unknown;
     /**
      * Async path: when `resolveDictLabels` was true, this map holds
      * `{ dictName -> { value -> label } }` for dynamic dictKey fields.

package/dist/{withdraw-accessible-62VI4W7D.js → withdraw-accessible-6Q7NE4EY.js}

@@ -4,19 +4,19 @@ import {
   freezeSnapshotOnly,
   randomId,
   withdrawAccessibleData
-} from "./chunk-5EC7X5QA.js";
-import "./chunk-P22XPNFW.js";
-import "./chunk-RCONOOVF.js";
-import "./chunk-NMDMSHBF.js";
-import "./chunk-DOPZWTMJ.js";
+} from "./chunk-QHW35ZON.js";
+import "./chunk-ZR2YMODS.js";
+import "./chunk-PKJ43CMD.js";
+import "./chunk-MLO75SFJ.js";
+import "./chunk-CIGAQBJR.js";
 import "./chunk-4RUFYGWG.js";
-import "./chunk-XGXVPCYW.js";
-import "./chunk-CWFH36SI.js";
-import "./chunk-KZTPL7NL.js";
+import "./chunk-BOWNCWZT.js";
+import "./chunk-YSRUYAVU.js";
+import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-USKHHOIV.js";
+import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
-import "./chunk-SW4TOSJL.js";
+import "./chunk-7O3Y4PPD.js";
 import "./chunk-PZ5AY32C.js";
 export {
   FROZEN_SNAPSHOTS_COLLECTION,
@@ -25,4 +25,4 @@ export {
   randomId,
   withdrawAccessibleData
 };
-//# sourceMappingURL=withdraw-accessible-62VI4W7D.js.map
+//# sourceMappingURL=withdraw-accessible-6Q7NE4EY.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.7.0-pre.10",
+  "version": "0.7.0-pre.12",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -233,14 +233,14 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.7.0-pre.10"
+    "@noy-db/attestation": "0.7.0-pre.12"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^4.0.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.7.0-pre.10"
+    "@noy-db/on-shamir": "0.7.0-pre.12"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"

package/dist/api-GJQF7OAJ.js

@@ -1,20 +0,0 @@
-import {
-  UserApi,
-  createUserApi
-} from "./chunk-357ECVLE.js";
-import "./chunk-MV2OEK3K.js";
-import "./chunk-DOPZWTMJ.js";
-import "./chunk-4RUFYGWG.js";
-import "./chunk-XGXVPCYW.js";
-import "./chunk-CWFH36SI.js";
-import "./chunk-KZTPL7NL.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-USKHHOIV.js";
-import "./chunk-N4CHCXDL.js";
-import "./chunk-SW4TOSJL.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  UserApi,
-  createUserApi
-};
-//# sourceMappingURL=api-GJQF7OAJ.js.map