@noy-db/hub 0.7.0-pre.12 → 0.7.0-pre.14

package/dist/{chunk-XMF3GKUR.js → chunk-DRB6IHPS.js}

@@ -1,6 +1,3 @@
-import {
-  resolveStaleOnRead
-} from "./chunk-KL7AS3HV.js";
 import {
   isManifestReservedCollection
 } from "./chunk-EPFF7LOX.js";
@@ -15,15 +12,16 @@ import {
   hashFields,
   validateSatelliteDeclaration
 } from "./chunk-TUFM4UZP.js";
+import {
+  resolveStaleOnRead
+} from "./chunk-SMH6SRX7.js";
 import {
   loadFence
 } from "./chunk-GM4IM7TC.js";
 import {
-  VectorSet,
   buildPersistedIndexCallbacks,
-  encodeVecId,
   syncTierSearch
-} from "./chunk-WQF3QABE.js";
+} from "./chunk-BOBFL5TW.js";
 import {
   isBaseLive,
   liveBaseIdSet
@@ -34,16 +32,11 @@ import {
 import {
   NO_ATTESTATION
 } from "./chunk-Q7HZX3IF.js";
-import {
-  NO_CLASSIFIED,
-  guardClassifiedCompat,
-  resolveClassifiedFields
-} from "./chunk-KCUIMITG.js";
 import {
   NO_TIERS,
   classifySealedShred,
   syncDerivedOutputs
-} from "./chunk-RTYJRFQO.js";
+} from "./chunk-EWPRPP3M.js";
 import {
   NO_PORTABILITY
 } from "./chunk-BZ3534YM.js";
@@ -68,20 +61,48 @@ import {
 import {
   CustodyApi,
   NO_CUSTODY
-} from "./chunk-Y4MJQ2UG.js";
+} from "./chunk-QQ2YMQZU.js";
 import {
   DEFAULT_POSTURE,
+  EXPORT_REDACTION_MARKER,
   ViaGraph,
+  ViaPipeline,
   buildDescription,
+  collectKnownFieldNames,
+  computedEntryParts,
   deriveZodFields,
-  resolveDescribeFieldIds
-} from "./chunk-7BE7ZDVQ.js";
+  exportRedact,
+  guardReconcileCollisions,
+  mergeViaFields,
+  resolveCollectionConfig,
+  resolveComputedEdges,
+  resolveDescribeFieldIds,
+  resolveVirtualMoneyFields
+} from "./chunk-4SZMZAYN.js";
 import {
   findMatchingIdsByPairs
 } from "./chunk-TFMM5DBB.js";
+import {
+  encodeVecId
+} from "./chunk-RTBJ5IOO.js";
+import {
+  NO_CLASSIFIED,
+  guardClassifiedCompat,
+  resolveClassifiedFields
+} from "./chunk-KCUIMITG.js";
 import {
   derivePersistedSchema
-} from "./chunk-URHRIAV6.js";
+} from "./chunk-REDOOY2Q.js";
+import {
+  findRollupSpecForIntent,
+  forgetDerivedFanout,
+  ledgerAuditHook,
+  putDerivedOutput,
+  resolveRollupDeleteIntents,
+  runGraphDispatchWave,
+  selfWriteFieldEqual,
+  touchFor
+} from "./chunk-MGOXJIBV.js";
 import {
   buildLookupAltIndex,
   buildLookupSnapshotRows,
@@ -90,22 +111,13 @@ import {
   coerceLookupKey,
   collectLookupDictCompat,
   enforceStaticDictOnPut,
-  findRollupSpecForIntent,
-  forgetDerivedFanout,
-  isLookupDescriptor,
-  ledgerAuditHook,
   matchesReferencingValue,
-  putDerivedOutput,
   registerLookupRefEdges,
   reservedDictDepsOf,
   resolveDictSource,
   resolveLabelFromMap,
-  resolveRollupDeleteIntents,
-  runGraphDispatchWave,
-  selfWriteFieldEqual,
-  touchFor,
   updateReferencingRecords
-} from "./chunk-SWVNZQVR.js";
+} from "./chunk-YPXNAP72.js";
 import {
   OverlayedCollection
 } from "./chunk-SKGMN35F.js";
@@ -123,7 +135,7 @@ import {
   resolvePeriodKey,
   resolveReopenState,
   samePartition
-} from "./chunk-BERJ4AWW.js";
+} from "./chunk-VGXZT72I.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
@@ -141,7 +153,7 @@ import {
 import {
   TxContext,
   bestEffortRevert
-} from "./chunk-TO3EQ7HF.js";
+} from "./chunk-BLN54W3L.js";
 import {
   lazy
 } from "./chunk-5D2ALSM5.js";
@@ -149,7 +161,7 @@ import {
   InvertedIndex,
   MemoryIndexStore,
   NO_SEARCH
-} from "./chunk-HN4FNA4X.js";
+} from "./chunk-OMB2ZKIT.js";
 import {
   NO_SEALED_RECORD
 } from "./chunk-6YXCPL4T.js";
@@ -173,10 +185,11 @@ import {
   normalizeIndexDefs
 } from "./chunk-I3ISCYT7.js";
 import {
-  IMPLICIT_LAZY,
-  Lru,
+  IMPLICIT_LAZY
+} from "./chunk-66TQOPFM.js";
+import {
   estimateRecordBytes
-} from "./chunk-NO272T7Q.js";
+} from "./chunk-V4PXLYWM.js";
 import {
   canonicalGroupKey
 } from "./chunk-XZHEOSQ2.js";
@@ -196,8 +209,6 @@ import {
   NO_I18N,
   getAtPath,
   isDictCollectionName,
-  isDictKeyDescriptor,
-  isI18nTextDescriptor,
   isStaticDictDescriptor
 } from "./chunk-TRGTKX5E.js";
 import {
@@ -321,7 +332,6 @@ import {
   EchoCeremonyRequiredError,
   ElevationExpiredError,
   ExportCapabilityError,
-  FieldNotQueryableError,
   ForgetStrategyNotConfiguredError,
   ImportCapabilityError,
   IndexWriteFailureError,
@@ -348,7 +358,6 @@ import {
   USER_ENVELOPE_COLLECTION,
   UniqueConstraintError,
   UnsupportedIndexOptionError,
-  UnsupportedTierCompositionError,
   ValidationError,
   isConflictError
 } from "./chunk-7O3Y4PPD.js";
@@ -531,7 +540,7 @@ function validateSecretModeOptions(options) {
 }
 async function resolveEffectiveSecret(options, store, vault) {
   if (options.secretMode === "managed") {
-    const { resolveManagedSecret } = await import("./managed-secret-P3JQ7ZG4.js");
+    const { resolveManagedSecret } = await import("./managed-secret-NHRYG7CD.js");
     return resolveManagedSecret(store, vault, options.sealingKey);
   }
   return options.secret;
@@ -549,7 +558,7 @@ function ownerKeyringOptions(options, secret) {
 
 // src/port/by/default-provider.ts
 async function createDefaultMesh(store) {
-  const { StoreMesh } = await import("./store-coordination-provider-O2VUEMJH.js");
+  const { StoreMesh } = await import("./store-coordination-provider-RX2CGWXV.js");
   return new StoreMesh(store);
 }
 
@@ -604,370 +613,6 @@ function populateCollectionRegistries(r, collectionName, options, effectiveViaFi
   }
 }
 
-// src/kernel/via/pipeline.ts
-var ViaPipeline = class _ViaPipeline {
-  constructor(bindings, taint) {
-    this.bindings = bindings;
-    this.taint = taint;
-    const moneyVias = bindings.filter((b) => b.brand === "money");
-    const computedVias = bindings.filter((b) => b.brand === "computed");
-    const restBindings = bindings.filter((b) => b.brand !== "money" && b.brand !== "computed");
-    this._presentOrder = [...moneyVias, ...computedVias, ...restBindings];
-    this._presentLateBoundary = moneyVias.length + computedVias.length;
-  }
-  bindings;
-  taint;
-  /**
-   * Present-phase-ONLY order (#665, corrected under #665 review) — a stable
-   * THREE-WAY partition of `bindings` computed once here at construction:
-   * every `'money'`-brand binding first (existing relative order), then
-   * every `'computed'`-brand binding (existing relative order), then
-   * everything else (existing relative order). `present()` folds over this
-   * instead of `bindings` so a `mode: 'virtual'` computed field's value
-   * exists before i18n/lookup's dressing `present()` hooks run on it
-   * (today's `compileVias` order is money→i18n→lookup→classified→
-   * blob→computed, `collection-config.ts:554`, so dressing unconditionally
-   * ran BEFORE the value it dresses existed). This reorder is binding-level,
-   * not conditioned on any particular field composition — it applies to
-   * EVERY collection that compiles a `'computed'` binding at all, not only
-   * ones stacking a dresser on the SAME field as a computed one. EVERY other
-   * phase (`ingest`/`encodeWrite`/`encodeAtRest`/`enforceWrite`/etc.) keeps
-   * folding over `bindings` unchanged — those write/query phases need
-   * money-first (`_applyMoneyFields` PREPENDS money, `_applyClassifiedFields`
-   * APPENDS classified to preserve it, `kernel/collection.ts:1275-1284,1364-
-   * 1368`).
-   *
-   * Money is deliberately carved OUT of the generic "everything else" slice
-   * and kept FIRST — the original two-way `[computed..., rest...]` partition
-   * regressed money's composed-field behavior from a benign missing-dressing
-   * gap into VALUE CORRUPTION: money's `present()` DECODES its input as a
-   * STORED SCALED-INT (and derives `<field>Formatted` from it) — it is not a
-   * pure dressing CONSUMER like i18n/lookup, which only ADD a `<field>Label`
-   * key and never rewrite the field's own value. Running money AFTER
-   * computed on a field composing `computed(virtual)` + `money(...)` on
-   * ITSELF means money's decode sees the virtual field's raw MAJOR-unit
-   * output (e.g. `21`) and misreads it as a scaled-int, producing a
-   * corrupted value (`'0.21'`) instead of the pre-#665 result (the raw `21`
-   * surviving untouched, with no `Formatted` key added — a benign
-   * missing-dressing gap, not a wrong value). Money-first restores money's
-   * exact pre-#665 present position — byte-identical money behavior; the
-   * materialized composition pins from the #631 work and the money suites
-   * all ran under money-first. i18n/lookup are genuine dressing consumers
-   * (they only ADD, never rewrite), so they stay after computed, which is
-   * the fix #665 intended. A `'taint'` binding (appended LAST by
-   * `via/graph-wiring.ts#applyTaintOverlay`) stays last here too (it's
-   * neither money nor computed, so it lands at the tail of the "everything
-   * else" slice), preserving its "runs after computed, redacts tainted
-   * virtual output" contract (`via/taint-binding.ts`'s `taintBinding` doc
-   * comment).
-   *
-   * Money-dressing a virtual computed field's OWN output (the composed
-   * `computed(virtual) + money` case) is NOT resolved by this partition
-   * alone — #669 resolves it with a separate mid-fold hook instead:
-   * `NoydbVia.presentLate` runs after every binding's `present()` in this
-   * money+computed segment, before the "everything else" segment below, so
-   * money can quantize/reinterpret a virtual field's fresh MAJOR-UNITS
-   * output as if it were a stored value, without perturbing this ordering
-   * or the #665 invariant above it (`_presentLateBoundary` below marks
-   * exactly where that mid-fold point sits within `_presentOrder`).
-   */
-  _presentOrder;
-  /** #669 — index into `_presentOrder` where the money+computed segment ends and the
-   *  "everything else" segment begins (`moneyVias.length + computedVias.length`);
-   *  `present()` runs every binding's `presentLate` at exactly this boundary. */
-  _presentLateBoundary;
-  /** undefined when there is nothing to enforce — the zero-via fast path is
-   *  `this.via === undefined` (#553: keeps an all-plain collection sync). A
-   *  `'*'`-defaulted output collection (#642) counts as "something to enforce"
-   *  even with zero field-specific postures and zero bindings. */
-  static build(bindings, taint) {
-    if (bindings.length === 0 && (!taint || taint.postures.size === 0 && taint.defaultPosture === void 0)) return void 0;
-    return new _ViaPipeline(bindings, taint);
-  }
-  /** Refuse a write before crypto runs: awaits each binding's `enforceWrite` in order — first throw wins. */
-  async enforceWrite(record, ctx) {
-    for (const b of this.bindings) if (b.enforceWrite) await b.enforceWrite(record, ctx);
-  }
-  ingest(record) {
-    let r = record;
-    for (const b of this.bindings) if (b.ingest) r = b.ingest(r);
-    return r;
-  }
-  canonicalizeStored(record) {
-    let r = record;
-    for (const b of this.bindings) if (b.canonicalizeStored) r = b.canonicalizeStored(r);
-    return r;
-  }
-  async encodeWrite(record, ctx) {
-    let r = record;
-    for (const b of this.bindings) if (b.encodeWrite) r = await b.encodeWrite(r, ctx);
-    return r;
-  }
-  /**
-   * Final write-pipeline stage: folds each binding's `encodeAtRest` in
-   * order, threading the record and accumulating the sealed-slot map. A
-   * field belongs to exactly one via feature — two bindings sealing the
-   * same field is a brand-keyed collision and throws.
-   */
-  async encodeAtRest(record, crypto) {
-    let r = record;
-    let sealed;
-    const sealedBy = /* @__PURE__ */ new Map();
-    for (const b of this.bindings) {
-      if (!b.encodeAtRest) continue;
-      const result = await b.encodeAtRest(r, crypto);
-      r = result.record;
-      if (!result.sealed) continue;
-      for (const [field, ref2] of Object.entries(result.sealed)) {
-        const priorBrand = sealedBy.get(field);
-        if (priorBrand !== void 0) {
-          throw new ValidationError(
-            `via encodeAtRest: field "${field}" sealed by binding "${priorBrand}" is also sealed by binding "${b.brand}"`
-          );
-        }
-        sealedBy.set(field, b.brand);
-        sealed ??= {};
-        sealed[field] = ref2;
-      }
-    }
-    return sealed ? { record: r, sealed } : { record: r };
-  }
-  /** First read-pipeline stage: folds each binding's `decodeAtRest` in order. */
-  async decodeAtRest(record, sealed, crypto, opts) {
-    let r = record;
-    for (const b of this.bindings) if (b.decodeAtRest) r = await b.decodeAtRest(r, sealed, crypto, opts);
-    return r;
-  }
-  async present(record, ctx) {
-    let r = record;
-    for (let i = 0; i < this._presentLateBoundary; i++) {
-      const b = this._presentOrder[i];
-      if (b.present) r = await b.present(r, ctx);
-    }
-    for (const b of this.bindings) if (b.presentLate) r = await b.presentLate(r, ctx);
-    for (let i = this._presentLateBoundary; i < this._presentOrder.length; i++) {
-      const b = this._presentOrder[i];
-      if (b.present) r = await b.present(r, ctx);
-    }
-    return r;
-  }
-  buildClause(field, op, value) {
-    for (const b of this.bindings) {
-      const payload = b.buildClause?.(field, op, value);
-      if (payload !== void 0) return { brand: b.brand, payload };
-    }
-    return void 0;
-  }
-  evaluateClause(clause, actual, op) {
-    const b = this.bindings.find((x) => x.brand === clause.brand);
-    return b?.evaluateClause ? b.evaluateClause(actual, op, clause.payload) : false;
-  }
-  /**
-   * Resolve a `buildClause` payload to an index-probe operand (#625) —
-   * mirrors `evaluateClause`'s brand dispatch. `undefined` (a binding
-   * with no `indexProbe`, or one that declines to probe this op/payload)
-   * means the caller (`candidateRecords()`) must fall back to a scan.
-   */
-  // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents
-  indexProbe(clause, op) {
-    const b = this.bindings.find((x) => x.brand === clause.brand);
-    return b?.indexProbe ? b.indexProbe(op, clause.payload) : void 0;
-  }
-  /**
-   * Resolve a raw STORED field value to its canonical eager-index bucket
-   * key (#672) — folds every binding's `canonicalizeIndexKey`, first
-   * non-undefined wins (same fold discipline as `buildClause`). `undefined`
-   * means no binding claims `field` (or the value can't be canonicalized)
-   * — the caller buckets the raw stringified value, unchanged from before
-   * this hook existed.
-   */
-  canonicalizeIndexKey(field, rawValue) {
-    for (const b of this.bindings) {
-      const key = b.canonicalizeIndexKey?.(field, rawValue);
-      if (key !== void 0) return key;
-    }
-    return void 0;
-  }
-  decodeResults(record) {
-    let r = record;
-    for (const b of this.bindings) if (b.decodeResults) r = b.decodeResults(r);
-    return r;
-  }
-  /** undefined = no binding covers the field → caller falls back to generic compare. */
-  compareForOrder(field, a, b) {
-    for (const bind of this.bindings) {
-      const c = bind.compareForOrder?.(field, a, b);
-      if (c !== void 0) return c;
-    }
-    return void 0;
-  }
-  /** undefined = no binding resolves an order-sort label for `key` at `field`/`locale` (#650 Task 7 —
-   *  the `orderBy(..., {by:'label'})` per-call-locale channel `compareForOrder` above can't serve). */
-  resolveOrderLabel(field, key, locale) {
-    for (const bind of this.bindings) {
-      const label = bind.resolveOrderLabel?.(field, key, locale);
-      if (label !== void 0) return label;
-    }
-    return void 0;
-  }
-  /**
-   * Which posture governs `field`, if any binding covers it — `undefined`
-   * means no binding declares `field` (the generic, non-via query path
-   * applies). #629 Task 8's posture consumer: `.where()`/`.orderBy()`
-   * consult this before building/evaluating a clause, refusing fields whose
-   * posture is `queryable: 'none'` (e.g. blob); every other posture
-   * ('det-exact'/'ordered'/'full') is left to the existing per-binding
-   * buildClause/evaluateClause/compareForOrder machinery, unchanged.
-   *
-   * #638 Task 3: the graph-computed taint overlay is consulted FIRST — a
-   * derived field's assigned (most-restrictive-of-sources) posture wins over
-   * whatever a binding would otherwise report for that field name (no
-   * binding covers a computed/derived field today, so this never actually
-   * shadows one — see `via/taint-binding.ts`'s `taintBinding.covers`, which
-   * only claims the sealed subset for `encodeAtRest`/`decodeAtRest`, not for
-   * this lookup).
-   */
-  postureFor(field) {
-    const t = this.taint?.postures.get(field);
-    if (t) return t;
-    for (const b of this.bindings) {
-      if (b.covers?.(field)) return b.posture;
-    }
-    return this.taint?.defaultPosture;
-  }
-  /**
-   * Refuse any field-based reducer over a `queryable: 'none'` field (blob) —
-   * metadata-only: walks each reducer's `.field` and checks posture, no
-   * rewriting. Reducers with no `.field` (e.g. `count()`) are skipped.
-   *
-   * Shared by `wrapReducers` below (which ALSO applies each binding's
-   * rewrite, e.g. money's exact-BigInt reducer swap) and by
-   * `ScanBuilder.aggregate()` (#629 Task 8 review fix wave 1), which must
-   * call THIS, not `wrapReducers` — wiring full `wrapReducers` into
-   * `ScanBuilder.aggregate()` would newly activate money/i18n reducer
-   * wrapping on a path that has never run it, a parity-breaking behavior
-   * change for existing brands.
-   */
-  refuseUnqueryableReducers(spec) {
-    for (const reducer of Object.values(spec)) {
-      const field = reducer?.field;
-      if (field !== void 0 && this.postureFor(field)?.queryable === "none") {
-        throw new FieldNotQueryableError(field);
-      }
-    }
-  }
-  /**
-   * Rewrite an aggregate spec (money exact reducers), then refuse any
-   * field-based reducer over a `queryable: 'none'` field (blob) — the same
-   * posture gate `.where()`/`.orderBy()` apply, extended to `.aggregate()`
-   * (both the bare-spec and builder forms funnel through here).
-   */
-  wrapReducers(spec) {
-    this.refuseUnqueryableReducers(spec);
-    let s = spec;
-    for (const b of this.bindings) if (b.wrapReducers) s = b.wrapReducers(s);
-    return s;
-  }
-  /**
-   * Deliberate export-layer redaction (#629 Task 9's posture consumer):
-   * for every OWN field the decoded record carries, if the covering
-   * binding's posture declares `exportable: false` (classified today;
-   * money/i18n/blob are all `true`), replace the value with
-   * {@link EXPORT_REDACTION_MARKER} — the same `'[sealed]'` string
-   * `SealedHandle.toJSON()` (`kernel/types.ts`) already emits, so this is
-   * byte-parity with today's accidental redaction, now independent of the
-   * field's runtime shape. `SealedHandle.toJSON()` stays untouched as
-   * defense-in-depth: a record read via `collection.get()` and
-   * JSON.stringify'd outside `exportStream()` still gets the accident's
-   * redaction on its own. Never mutates the input; returns a new object
-   * only when a field was actually redacted.
-   */
-  redactForExport(record) {
-    let out;
-    for (const field of Object.keys(record)) {
-      if (this.postureFor(field)?.exportable === false) {
-        out ??= { ...record };
-        out[field] = EXPORT_REDACTION_MARKER;
-      }
-    }
-    return out ?? record;
-  }
-  /**
-   * Shared fold over a subset of `this.bindings`: runs each binding's
-   * `erase`, concatenating shredded/retainedShared counts and residue.
-   * Consults `posture.forgettable` (#629 Task 10) — a binding declaring
-   * `forgettable: false` is skipped even if it defines `erase` (none does
-   * today; a future non-forgettable binding is supported without a brand check).
-   */
-  async foldErase(ctx, bindings) {
-    let shredded = 0;
-    let retainedShared = 0;
-    const residue = [];
-    for (const b of bindings) {
-      if (!b.erase || b.posture.forgettable === false) continue;
-      const report = await b.erase(ctx);
-      shredded += report.shredded;
-      retainedShared += report.retainedShared ?? 0;
-      residue.push(...report.residue);
-    }
-    return retainedShared > 0 ? { shredded, residue, retainedShared } : { shredded, residue };
-  }
-  /** `forget()`'s per-ref erasure door: folds every binding's `erase`. */
-  async erase(ctx) {
-    return this.foldErase(ctx, this.bindings);
-  }
-  /**
-   * `forget()`'s SEALED-posture-only erase fold (#629 Task 10, `Collection._onViaErase`'s
-   * one caller) — classified today; metadata-filtered on
-   * `posture.encryptedAtRest`, not brand-checked. `undefined` when no
-   * sealed-posture binding is compiled in — `vault.ts` then falls back to
-   * its own bare-`sensitive` classification, which no via binding covers.
-   */
-  async eraseSealed(ctx) {
-    const sealed = this.bindings.filter((b) => b.posture.encryptedAtRest === "sealed");
-    return sealed.length === 0 ? void 0 : this.foldErase(ctx, sealed);
-  }
-  /** True iff any binding implements decodeResults (query fast-path gating). */
-  get hasResultDecode() {
-    return this.bindings.some((b) => b.decodeResults !== void 0);
-  }
-  /**
-   * True iff any binding declares an at-rest hook (`encodeAtRest`/
-   * `decodeAtRest`) — the codec boundary's async-stack gate (#629 Task 3
-   * consults this to choose between the hook path and today's inline
-   * sealed-slot path; a stack with only sync hooks, e.g. money-only, stays
-   * `false`).
-   */
-  get hasAtRestHooks() {
-    return this.bindings.some((b) => b.encodeAtRest !== void 0 || b.decodeAtRest !== void 0);
-  }
-  /**
-   * Fold every binding's `describeFragment()` into one `brand -> fragment`
-   * map (#650 Task 7 — the first-ever consumer; `describeFragment` was
-   * declared at `via/index.ts:136` since #623 with zero callers until this task).
-   * `undefined` when no compiled binding implements it. Consumed by
-   * `Collection.describe()`/`describeAsync()`, threaded to `buildDescription`
-   * as `BuildDescriptionInput.viaFragments`.
-   */
-  describeFragments() {
-    let out;
-    for (const b of this.bindings) {
-      const f = b.describeFragment?.();
-      if (f !== void 0) {
-        out ??= {};
-        out[b.brand] = f;
-      }
-    }
-    return out;
-  }
-};
-var EXPORT_REDACTION_MARKER = "[sealed]";
-function exportRedact(coll, record) {
-  if (record === null || typeof record !== "object") return record;
-  const via2 = coll._via;
-  return via2 ? via2.redactForExport(record) : record;
-}
-
 // src/kernel/lazy-count.ts
 var COUNT_PAGE_SIZE = 1e3;
 function isLive(env, storeCiphertext) {
@@ -1679,471 +1324,8 @@ async function commitSequentially(ctx, entries, priors) {
   }
 }
 
-// src/kernel/via/compose.ts
-function via(...descriptors) {
-  if (descriptors.length === 0) {
-    throw new ValidationError("via(): at least one descriptor is required, e.g. via(money({ currency: 'EUR' }))");
-  }
-  return { _noydbVia: true, descriptors };
-}
-function isViaFieldSpec(x) {
-  return typeof x === "object" && x !== null && x._noydbVia === true;
-}
-function mergeViaFields(sources) {
-  for (const field of Object.keys(sources.dictKeyFields ?? {})) {
-    if (sources.lookupFields && field in sources.lookupFields) {
-      throw new ValidationError(
-        `mergeViaFields(): field "${field}" is declared in both \`dictKeyFields\` and \`lookupFields\` \u2014 declare it in one place only.`
-      );
-    }
-  }
-  if (!sources.viaFields || Object.keys(sources.viaFields).length === 0) {
-    return {
-      moneyFields: sources.moneyFields,
-      i18nFields: sources.i18nFields,
-      dictKeyFields: sources.dictKeyFields,
-      computedFields: void 0,
-      lookupFields: sources.lookupFields
-    };
-  }
-  const sugarFieldNames = /* @__PURE__ */ new Set([
-    ...Object.keys(sources.moneyFields ?? {}),
-    ...Object.keys(sources.i18nFields ?? {}),
-    ...Object.keys(sources.dictKeyFields ?? {}),
-    ...Object.keys(sources.lookupFields ?? {})
-  ]);
-  const viaMoney = {};
-  const viaI18nText = {};
-  const viaDictKey = {};
-  const viaComputed = {};
-  const viaLookup = {};
-  for (const [field, spec] of Object.entries(sources.viaFields)) {
-    if (sugarFieldNames.has(field)) {
-      throw new ValidationError(
-        `via(): field "${field}" is declared via both a sugar key and \`viaFields\` \u2014 declare it in one place only.`
-      );
-    }
-    for (const descriptor of spec.descriptors) {
-      if (descriptor._viaBrand === "money") {
-        viaMoney[field] = descriptor;
-      } else if (descriptor._viaBrand === "i18n") {
-        if (isI18nTextDescriptor(descriptor)) viaI18nText[field] = descriptor;
-        else if (isDictKeyDescriptor(descriptor) || isStaticDictDescriptor(descriptor)) viaDictKey[field] = descriptor;
-      } else if (descriptor._viaBrand === "computed") {
-        viaComputed[field] = descriptor;
-      } else if (descriptor._viaBrand === "lookup" && isLookupDescriptor(descriptor)) {
-        viaLookup[field] = descriptor;
-      } else {
-        throw new ValidationError(`via(): field "${field}" has a descriptor with unrecognized _viaBrand "${descriptor._viaBrand}" \u2014 via() only supports money/i18n/computed/lookup descriptors today.`);
-      }
-    }
-  }
-  return {
-    moneyFields: Object.keys(viaMoney).length > 0 ? { ...sources.moneyFields ?? {}, ...viaMoney } : sources.moneyFields,
-    i18nFields: Object.keys(viaI18nText).length > 0 ? { ...sources.i18nFields ?? {}, ...viaI18nText } : sources.i18nFields,
-    dictKeyFields: Object.keys(viaDictKey).length > 0 ? { ...sources.dictKeyFields ?? {}, ...viaDictKey } : sources.dictKeyFields,
-    computedFields: Object.keys(viaComputed).length > 0 ? viaComputed : void 0,
-    lookupFields: Object.keys(viaLookup).length > 0 ? { ...sources.lookupFields ?? {}, ...viaLookup } : sources.lookupFields
-  };
-}
-var VIA_FIELD_MAP_FAMILY = {
-  moneyFields: "money",
-  i18nFields: "i18n",
-  dictKeyFields: "i18n",
-  lookupFields: "lookup",
-  classifiedFields: "classified",
-  blobFields: "blob",
-  computed: "computed"
-};
-function guardCrossBindingFieldCollisions(fieldMaps, callerPrefix = "compileVias()") {
-  const claimantsByField = /* @__PURE__ */ new Map();
-  for (const [sourceKey, map] of Object.entries(fieldMaps)) {
-    for (const field of Object.keys(map ?? {})) {
-      const claimants = claimantsByField.get(field) ?? /* @__PURE__ */ new Set();
-      claimants.add(sourceKey);
-      claimantsByField.set(field, claimants);
-    }
-  }
-  for (const [field, sourceKeys] of claimantsByField) {
-    const families = new Set([...sourceKeys].map((key) => VIA_FIELD_MAP_FAMILY[key]));
-    if (families.size < 2) continue;
-    if (sourceKeys.size === 2 && families.has("computed")) {
-      const other = [...families].find((f) => f !== "computed");
-      if (other === "money" || other === "i18n" || other === "lookup") continue;
-    }
-    const keys = [...sourceKeys].sort().map((k) => `\`${k}\``);
-    const joined = keys.length === 2 ? keys.join(" and ") : `${keys.slice(0, -1).join(", ")}, and ${keys[keys.length - 1]}`;
-    throw new ValidationError(
-      `${callerPrefix}: field "${field}" is declared in both ${joined} \u2014 a field cannot be claimed by two different via-binding families. Declare it in one place only.`
-    );
-  }
-}
-function guardReconcileCollisions(existingVia, incomingFieldMaps) {
-  guardCrossBindingFieldCollisions(incomingFieldMaps, "guardReconcileCollisions()");
-  if (!existingVia) return;
-  const existingBindings = existingVia.bindings.filter((b) => b.brand !== "taint");
-  for (const [sourceKey, map] of Object.entries(incomingFieldMaps)) {
-    const incomingFamily = VIA_FIELD_MAP_FAMILY[sourceKey];
-    if (incomingFamily === void 0) continue;
-    for (const field of Object.keys(map ?? {})) {
-      const existingFamilies = new Set(
-        existingBindings.filter((b) => b.covers?.(field)).map((b) => b.brand)
-      );
-      for (const existingFamily of existingFamilies) {
-        if (existingFamily === incomingFamily) continue;
-        const isExempt = existingFamily === "computed" && (incomingFamily === "money" || incomingFamily === "i18n" || incomingFamily === "lookup") || incomingFamily === "computed" && (existingFamily === "money" || existingFamily === "i18n" || existingFamily === "lookup");
-        if (isExempt) continue;
-        throw new ValidationError(
-          `vault.collection(): field "${field}" is already bound by the "${existingFamily}" via family on this collection \u2014 an incoming \`${sourceKey}\` declaration cannot claim it for a different family ("${incomingFamily}"). Declare it in one place only.`
-        );
-      }
-    }
-  }
-}
-
-// src/kernel/collection-config.ts
-function computedEntryParts(entry) {
-  if (typeof entry === "function") return { fn: entry, mode: "materialized" };
-  return { fn: entry.fn, ...entry.deps !== void 0 ? { deps: entry.deps } : {}, mode: entry.mode ?? "materialized" };
-}
-function unifyComputedFields(opts, viaComputedFields) {
-  return { ...opts.computed ?? {}, ...viaComputedFields ?? {} };
-}
-function compileVias(opts, classifiedGuardCtx, eraseCfgOut) {
-  const { moneyFields, i18nFields, dictKeyFields, computedFields, lookupFields } = mergeViaFields(opts);
-  const allComputedFields = unifyComputedFields(opts, computedFields);
-  guardCrossBindingFieldCollisions({
-    moneyFields,
-    i18nFields,
-    dictKeyFields,
-    lookupFields,
-    classifiedFields: opts.classifiedFields !== void 0 ? resolveClassifiedFields(opts.name, opts.classifiedFields).byField : void 0,
-    blobFields: opts.blobFields,
-    computed: allComputedFields
-  });
-  const bindings = [];
-  const virtualFields = /* @__PURE__ */ new Map();
-  for (const [field, entry] of Object.entries(allComputedFields)) {
-    const parts = computedEntryParts(entry);
-    if (parts.mode === "virtual") {
-      virtualFields.set(field, { _viaBrand: "computed", fn: parts.fn, mode: "virtual", ...parts.deps !== void 0 ? { deps: parts.deps } : {} });
-    }
-  }
-  if (moneyFields) {
-    const virtualMoney = resolveVirtualMoneyFields(Object.keys(moneyFields), (f) => virtualFields.has(f));
-    bindings.push(viaBinder("money")({ moneyFields, ...virtualMoney.size > 0 ? { virtualMoneyFields: virtualMoney } : {} }));
-  }
-  if (i18nFields || dictKeyFields) {
-    const densify = i18nFields ? Object.fromEntries(
-      Object.entries(i18nFields).filter(([, d]) => d.options.densifyOnWrite === true)
-    ) : {};
-    const i18nDensifyFields = Object.keys(densify).length > 0 ? densify : void 0;
-    bindings.push(viaBinder("i18n")({
-      ...i18nFields !== void 0 ? { i18nFields } : {},
-      ...dictKeyFields !== void 0 ? { dictKeyFields } : {},
-      ...i18nDensifyFields !== void 0 ? { i18nDensifyFields } : {},
-      strategy: opts.strategies.i18n,
-      ...opts.defaultLocale !== void 0 ? { defaultLocale: opts.defaultLocale } : {},
-      ...opts.autoTranslateHook !== void 0 ? { autoTranslateHook: opts.autoTranslateHook } : {},
-      ...opts.dictLabelResolver !== void 0 ? { dictLabelResolver: opts.dictLabelResolver } : {},
-      ...opts.i18nPutValidator !== void 0 ? { i18nPutValidator: opts.i18nPutValidator } : {},
-      collectionName: opts.name
-    }));
-  }
-  if (lookupFields !== void 0) {
-    bindings.push(viaBinder("lookup")({
-      lookupFields,
-      ...opts.lookupLabelResolver !== void 0 ? { lookupLabelResolver: opts.lookupLabelResolver } : {},
-      ...opts.getLookupBacking !== void 0 ? { getLookupBacking: opts.getLookupBacking } : {},
-      ...opts.membership !== void 0 ? { membership: opts.membership } : {},
-      ...opts.getAltIndex !== void 0 ? { getAltIndex: opts.getAltIndex } : {},
-      ...opts.snapshotFor !== void 0 ? { snapshotFor: opts.snapshotFor } : {},
-      collectionName: opts.name
-    }));
-  }
-  if (opts.classifiedFields !== void 0) {
-    const classifiedCfg = {
-      entries: opts.classifiedFields,
-      collectionName: opts.name,
-      guardCtx: classifiedGuardCtx
-    };
-    if (eraseCfgOut) eraseCfgOut.classified = classifiedCfg;
-    bindings.push(viaBinder("classified")(classifiedCfg));
-  }
-  if (opts.blobFields !== void 0) {
-    bindings.push(viaBinder("blob")({
-      fields: opts.blobFields,
-      collectionName: opts.name
-    }));
-  }
-  if (virtualFields.size > 0) {
-    bindings.push(viaBinder("computed")({ virtualFields }));
-  }
-  return bindings;
-}
-function resolveVirtualMoneyFields(moneyFieldNames, isVirtual) {
-  const out = /* @__PURE__ */ new Set();
-  for (const field of moneyFieldNames) if (isVirtual(field)) out.add(field);
-  return out;
-}
-function collectKnownFieldNames(parts) {
-  return /* @__PURE__ */ new Set([
-    ...Object.keys(parts.moneyFields ?? {}),
-    ...Object.keys(parts.i18nFields ?? {}),
-    ...Object.keys(parts.dictKeyFields ?? {}),
-    ...Object.keys(parts.classifiedFields ?? {}),
-    ...Object.keys(parts.computed ?? {}),
-    ...Object.keys(parts.lookupFields ?? {})
-  ]);
-}
-var EMPTY_KNOWN_FIELDS = /* @__PURE__ */ new Set();
-function resolveComputedEdges(collectionName, computed, hasClassifiedFields, knownFields = EMPTY_KNOWN_FIELDS) {
-  if (!computed) return [];
-  const edges = [];
-  for (const [field, entry] of Object.entries(computed)) {
-    const parts = computedEntryParts(entry);
-    const deps = parts.deps;
-    if (deps === void 0) {
-      if (hasClassifiedFields) {
-        throw new ValidationError(
-          `Collection "${collectionName}": computed field "${field}" has no declared \`deps\` and the collection declares classified fields \u2014 an opaque computed function could silently copy a classified field's plaintext into an ordinary, unredacted field. Declare \`deps\` naming the source fields it reads, e.g. computed: { ${field}: { fn, deps: [...] } } or via(computed(fn, { deps: [...] })).`
-        );
-      }
-      continue;
-    }
-    if (deps.length === 0) {
-      throw new ValidationError(`Collection "${collectionName}": computed field "${field}"'s \`deps\` must be non-empty.`);
-    }
-    for (const dep of deps) {
-      if (typeof dep !== "string" || dep.length === 0) {
-        throw new ValidationError(`Collection "${collectionName}": computed field "${field}"'s \`deps\` entries must be non-empty strings.`);
-      }
-      if (hasClassifiedFields && !knownFields.has(dep)) {
-        throw new ValidationError(
-          `Collection "${collectionName}": computed field "${field}"'s \`deps\` entry "${dep}" does not name a declared field, and the collection declares classified fields \u2014 an opaque computed function could silently copy a classified field's plaintext into an ordinary, unredacted field via a mistyped/unknown dep name. Declare \`deps\` naming only known fields (money/i18n/dictKey/classified/computed) \u2014 check "${dep}" for a typo.`
-        );
-      }
-    }
-    edges.push({
-      target: { collection: collectionName, field },
-      sources: deps.map((d) => ({ collection: collectionName, field: d })),
-      grain: parts.mode === "virtual" ? "virtual" : "record"
-    });
-  }
-  return edges;
-}
-function resolveViaDepsEdges(collectionName, bindings, knownFields) {
-  const edges = [];
-  for (const binding of bindings) {
-    if (!binding.deps || binding.deps.length === 0) continue;
-    for (const dep of binding.deps) {
-      if (!knownFields.has(dep)) {
-        throw new ValidationError(
-          `Collection "${collectionName}": via binding "${binding.brand}" deps references undeclared field "${dep}".`
-        );
-      }
-    }
-    const sources = binding.deps.map((d) => ({ collection: collectionName, field: d }));
-    for (const field of knownFields) {
-      if (binding.covers?.(field)) edges.push({ target: { collection: collectionName, field }, sources });
-    }
-  }
-  return edges;
-}
-function resolveCollectionConfig(opts) {
-  if (opts.embeddings && opts.crdt) {
-    throw new Error(
-      `Collection "${opts.name}": embeddings are not supported on CRDT collections (L2). Use a non-CRDT collection for semantic search.`
-    );
-  }
-  if (opts.sensitive && opts.sensitive.length > 0 && opts.crdt) {
-    throw new Error(
-      `Collection "${opts.name}": sensitive (structural group-encryption) is not supported on CRDT collections \u2014 the CRDT write path bypasses per-field sealing, so the fields would be stored in the ordinary encrypted body with no \`_sealed\` slot and no per-field key. Use a non-CRDT collection for sealed fields.`
-    );
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.blobFields !== void 0 && Object.keys(opts.blobFields).length > 0 && opts.perRecordKeys !== true) {
-    throw new UnsupportedTierCompositionError(
-      "blobs",
-      `Collection "${opts.name}": tiered collections that declare blobFields require \`perRecordKeys: true\` \u2014 legacy (non-perRecordKeys) blobs have no per-blob content CEK and cannot be tier-isolated on elevate/demote.`
-    );
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.blobFields !== void 0) {
-    for (const [field, policy] of Object.entries(opts.blobFields)) {
-      if (policy?.external && policy.public === true) {
-        throw new UnsupportedTierCompositionError(
-          "blobs",
-          `Collection "${opts.name}": blob field "${field}" cannot be both \`external: true, public: true\` and declared on a tiered collection \u2014 the object key is deterministic and its bytes are world-readable by design, so tier-invisibility can never be enforced for it once elevated. Use a private/presigned external field (\`public\` omitted or \`false\`) or move this field to a non-tiered collection.`
-        );
-      }
-    }
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.encrypted === false) {
-    throw new UnsupportedTierCompositionError(
-      "plaintext",
-      `Collection "${opts.name}": tiers are per-tier ENCRYPTION keys \u2014 a plaintext collection (\`encrypted: false\`) has nothing to re-key, so \`putAtTier\`/\`elevate\` would encrypt/decrypt incoherently. Use an encrypted collection.`
-    );
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.crdt !== void 0 && ((opts.derivationSource?.registry().strategiesForSource(opts.name).length ?? 0) > 0 || (opts.materializedViewSource?.registry().mvsForSource(opts.name).length ?? 0) > 0)) {
-    throw new UnsupportedTierCompositionError(
-      "crdt-derivation",
-      `Collection "${opts.name}": tiers + crdt cannot be combined with this collection acting as a derivation/rollup source (#739) \u2014 the tier-aware pre-move decode \`syncDerived\` uses on elevate()/demote() does not resolve CRDT state, so a registered derivation/rollup reads raw CrdtState instead of the record and silently no-ops. Use a non-CRDT collection for a tiered derivation/rollup source, or move the derivation off this collection.`
-    );
-  }
-  const effectiveViaFields = mergeViaFields(opts);
-  const resolvedClassified = opts.classifiedFields !== void 0 ? resolveClassifiedFields(opts.name, opts.classifiedFields) : void 0;
-  const allComputed = unifyComputedFields(opts, effectiveViaFields.computedFields);
-  const materializedComputed = {};
-  for (const [field, entry] of Object.entries(allComputed)) {
-    if (computedEntryParts(entry).mode !== "virtual") materializedComputed[field] = entry;
-  }
-  let mergedComputed = Object.keys(materializedComputed).length > 0 ? materializedComputed : void 0;
-  if (resolvedClassified !== void 0) {
-    for (const key of Object.keys(allComputed)) {
-      if (resolvedClassified.riderComputed[key] !== void 0) {
-        throw new ClassifiedConfigError(opts.name, `computed field "${key}" collides with a rider companion`);
-      }
-    }
-    mergedComputed = { ...resolvedClassified.riderComputed, ...materializedComputed };
-  }
-  let deterministicFields;
-  if (opts.deterministicFields && opts.deterministicFields.length > 0) {
-    if (opts.acknowledgeDeterministicRisk !== true) {
-      throw new Error(
-        `Collection "${opts.name}": deterministicFields requires \`acknowledgeDeterministicRisk: true\`. Deterministic encryption leaks equality between records \u2014 two records with the same field value produce identical ciphertexts visible to anyone with store access. If that trade-off is acceptable for your threat model, set \`acknowledgeDeterministicRisk: true\` to enable.`
-      );
-    }
-    deterministicFields = Object.freeze(new Set(opts.deterministicFields));
-  } else {
-    deterministicFields = null;
-  }
-  const guardIndexedFields = /* @__PURE__ */ new Set();
-  for (const ix of opts.indexes ?? []) {
-    if (typeof ix === "string") guardIndexedFields.add(ix);
-    else if (Array.isArray(ix)) for (const f of ix) guardIndexedFields.add(f);
-    else for (const f of ix.fields) guardIndexedFields.add(f);
-  }
-  const embeddingSources = opts.embeddings === void 0 ? [] : typeof opts.embeddings.source === "string" ? [opts.embeddings.source] : [...opts.embeddings.source];
-  const classifiedGuardCtx = {
-    perRecordKeys: opts.perRecordKeys === true,
-    crdt: opts.crdt !== void 0,
-    hasConflictPolicy: opts.conflictPolicy !== void 0,
-    storeCiphertext: opts.encrypted,
-    deterministicFields,
-    indexedFields: guardIndexedFields,
-    textIndexFields: new Set(opts.textIndexes ?? []),
-    vectorSourceFields: new Set(embeddingSources),
-    subjectKeyField: opts.subjectKeyField,
-    bareSensitiveFields: new Set(opts.sensitive ?? []),
-    acknowledgeEquatableRisk: opts.acknowledgeEquatableRisk === true
-  };
-  if (resolvedClassified !== void 0) {
-    guardClassifiedCompat(opts.name, resolvedClassified.byField, classifiedGuardCtx);
-  }
-  const classifiedSensitive = resolvedClassified === void 0 ? [] : Object.entries(resolvedClassified.byField).filter(([, s]) => s.storage === "recoverable").map(([f]) => f);
-  const sensitiveList = [...opts.sensitive ?? [], ...classifiedSensitive];
-  const sensitiveFields = sensitiveList.length > 0 ? Object.freeze(new Set(sensitiveList)) : Object.freeze(/* @__PURE__ */ new Set());
-  const vdigEntries = resolvedClassified === void 0 ? [] : Object.entries(resolvedClassified.byField).filter(([, s]) => s.storage === "digest-only").map(([f, s]) => [f, {
-    normalize: s.verifyNormalize ?? "password",
-    notLastN: s.notLastN ?? 0,
-    equatable: s.equatable === true,
-    ...s.rotateDays !== void 0 ? { rotateDays: s.rotateDays } : {}
-  }]);
-  const vdigFields = vdigEntries.length > 0 ? new Map(vdigEntries) : null;
-  const perRecordCek = opts.perRecordKeys === true;
-  const cekCache = perRecordCek ? new Lru({ maxRecords: 4096 }) : null;
-  const viaEraseCfgOut = {};
-  const via2 = ViaPipeline.build(compileVias(opts, classifiedGuardCtx, viaEraseCfgOut));
-  const knownFields = collectKnownFieldNames({
-    moneyFields: effectiveViaFields.moneyFields,
-    i18nFields: effectiveViaFields.i18nFields,
-    dictKeyFields: effectiveViaFields.dictKeyFields,
-    classifiedFields: resolvedClassified?.byField,
-    computed: allComputed,
-    lookupFields: effectiveViaFields.lookupFields
-  });
-  const computedEdges = resolveComputedEdges(opts.name, allComputed, resolvedClassified !== void 0, knownFields);
-  const viaDepsEdges = resolveViaDepsEdges(opts.name, via2?.bindings ?? [], knownFields);
-  return {
-    adapter: opts.adapter,
-    vault: opts.vault,
-    name: opts.name,
-    keyring: opts.keyring,
-    storeCiphertext: opts.encrypted,
-    ramCiphertext: opts.ramCiphertext ?? false,
-    emitter: opts.emitter,
-    writeQueue: opts.writeQueue,
-    schemaUpdateGate: opts.schemaUpdateGate,
-    schemaFence: opts.schemaFence,
-    writeHooks: opts.writeHooks,
-    subsystemBus: opts.subsystemBus,
-    activeTxId: opts.activeTxId,
-    strategies: opts.strategies,
-    objectStore: opts.objectStore,
-    blobFields: opts.blobFields,
-    reconcileOnOpen: opts.reconcileOnOpen ?? "off",
-    getDEK: opts.getDEK,
-    onDirty: opts.onDirty,
-    tabCoordinated: opts.tabCoordinated,
-    historyConfig: opts.historyConfig ?? { enabled: true },
-    historyConfigExplicit: opts.historyConfigExplicit ?? false,
-    schema: opts.schema,
-    ledger: opts.ledger,
-    refEnforcer: opts.refEnforcer,
-    joinResolver: opts.joinResolver,
-    i18nFields: effectiveViaFields.i18nFields,
-    textIndexes: opts.textIndexes,
-    embeddings: opts.embeddings,
-    vectorSet: opts.embeddings ? new VectorSet() : void 0,
-    dictKeyFields: effectiveViaFields.dictKeyFields,
-    lookupFields: effectiveViaFields.lookupFields,
-    // #650 Task 6 — the sync join-dressing hook (#626 retirement, spec §5);
-    // `undefined` when this collection declares neither i18nText nor lookup
-    // fields, matching today's `i18nFields`-absent JoinableSource shape.
-    presentForJoin: buildPresentForJoin(effectiveViaFields.i18nFields, effectiveViaFields.lookupFields, opts.snapshotFor),
-    fieldMeta: opts.fieldMeta,
-    meta: opts.meta,
-    _refs: opts.declaredRefs ?? {},
-    via: via2,
-    classifiedEraseCfg: viaEraseCfgOut.classified,
-    moneyFields: effectiveViaFields.moneyFields,
-    classified: resolvedClassified,
-    classifiedGuardCtx,
-    computed: mergedComputed,
-    computedEdges,
-    viaDepsEdges,
-    // #638 Task 7 — every declared computed field name (both modes, both surfaces); the
-    // reconcile path's cross-call depsless-computed leak-guard memory
-    // (`via/graph-wiring.ts#registerCollectionGraphSources`) reads this instead of
-    // `Object.keys(opts.computed ?? {})` alone, so a via(computed(...))-declared field
-    // participates in that guard identically to a sugar-declared one.
-    computedFieldNames: Object.keys(allComputed),
-    dictLabelResolver: opts.dictLabelResolver,
-    getDictionary: opts.getDictionary,
-    i18nPutValidator: opts.i18nPutValidator,
-    autoTranslateHook: opts.autoTranslateHook,
-    defaultLocale: opts.defaultLocale,
-    crdtMode: opts.crdt,
-    syncAdapter: opts.syncAdapter,
-    onAccess: opts.onAccess,
-    derivationSource: opts.derivationSource,
-    materializedViewSource: opts.materializedViewSource,
-    graphDispatch: opts.graphDispatch,
-    tiers: opts.tiers && opts.tiers.length > 0 ? new Set(opts.tiers) : null,
-    tierMode: opts.tierMode ?? "invisibility",
-    blobTierPolicy: opts.blobTierPolicy ?? "isolate",
-    onCrossTierAccess: opts.onCrossTierAccess,
-    addSubjectRef: opts.addSubjectRef,
-    deterministicFields,
-    sensitiveFields,
-    vdigFields,
-    perRecordCek,
-    cekCache,
-    provenance: opts.provenance === true
-  };
-}
-
 // src/with-formula/computed/lazy.ts
-var loadComputed = lazy(() => import("./computed-LSEZYRJS.js"));
+var loadComputed = lazy(() => import("./computed-VPOKQK4N.js"));
 async function loadEvalComputedFields() {
   return (await loadComputed()).evalComputedFields;
 }
@@ -2812,7 +1994,7 @@ var Collection = class {
   }
   /** JSON Schema for this collection with describe() metadata as x- extensions. */
   async toJSONSchema() {
-    const { buildJsonSchema } = await import("./json-schema-I22JCYCG.js");
+    const { buildJsonSchema } = await import("./json-schema-V3M5MUCM.js");
     const desc = await this.describe({});
     let base = null;
     if (this.schema !== void 0) {
@@ -2928,7 +2110,7 @@ var Collection = class {
     }
     await this.onAccess?.("find", "*");
     if (hits.length === 0) return [];
-    const { verifyDigestField } = await import("./verify-JBXCAGDL.js");
+    const { verifyDigestField } = await import("./verify-KOV2G5D6.js");
     const policy = {
       normalize: spec.verifyNormalize ?? "password",
       notLastN: spec.notLastN ?? 0,
@@ -3140,7 +2322,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-KSPG6LFX.js");
+      const { resolveStaleMVOnRead } = await import("./stale-AU74OPUW.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     let record;
@@ -3672,7 +2854,7 @@ var Collection = class {
    */
   async dispatchMaterializedViews(id, record, wave) {
     if (this.materializedViewSource === void 0) return;
-    const { dispatchMaterializedViews } = await import("./dispatch-44J4TL72.js");
+    const { dispatchMaterializedViews } = await import("./dispatch-GGFBWQU7.js");
     return dispatchMaterializedViews(this.#mvDispatchCtx(this.materializedViewSource), id, record, wave);
   }
   /**
@@ -3838,13 +3020,13 @@ var Collection = class {
    *  dispatch wave's per-target dedup; `undefined` on the local-write path (byte-identical). */
   async dispatchDerivations(id, record, version, wave, prior) {
     if (this.derivationSource === void 0) return;
-    const { dispatchDerivations } = await import("./dispatch-XEBHUGBV.js");
+    const { dispatchDerivations } = await import("./dispatch-DC3LQJ3S.js");
     return dispatchDerivations(this.#derivationDispatchCtx(), id, record, version, wave, prior);
   }
   /** @internal — trigger fan-out for a deleted parent (#1249); see dispatch.ts. */
   async dispatchTriggerDerivationsOnDelete(id, deleted) {
     if (this.derivationSource === void 0) return;
-    const { dispatchTriggerDerivationsOnDelete } = await import("./dispatch-XEBHUGBV.js");
+    const { dispatchTriggerDerivationsOnDelete } = await import("./dispatch-DC3LQJ3S.js");
     return dispatchTriggerDerivationsOnDelete(this.#derivationDispatchCtx(), id, deleted);
   }
   /**
@@ -4156,7 +3338,7 @@ var Collection = class {
    */
   async dispatchArrayDerivationsOnDelete(id, eraseRecordShapeToo = false) {
     if (this.derivationSource === void 0) return 0;
-    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-XEBHUGBV.js");
+    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-DC3LQJ3S.js");
     return dispatchArrayDerivationsOnDelete(this.#derivationDeleteCtx(this.derivationSource), id, eraseRecordShapeToo);
   }
   /**
@@ -4170,7 +3352,7 @@ var Collection = class {
    */
   async dispatchMaterializedViewsOnDelete(id) {
     if (this.materializedViewSource === void 0) return { deleted: 0, residueUndecodable: [], residueDeclined: [] };
-    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-44J4TL72.js");
+    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-GGFBWQU7.js");
     return dispatchMaterializedViewsOnDelete(this.#mvDispatchCtx(this.materializedViewSource), id);
   }
   /**
@@ -4190,7 +3372,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-KSPG6LFX.js");
+      const { resolveStaleMVOnRead } = await import("./stale-AU74OPUW.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     await this.ensureHydrated();
@@ -5300,14 +4482,14 @@ var Collection = class {
   /** C-A/R10: persist the classified marker once per classified handle (store I/O in config-drift.ts). */
   async _ensureClassifiedMarker() {
     if (this._markerPersisted || this.vdigFields === null) return;
-    const { persistClassifiedMarkerForFields } = await import("./classified-marker-67HBIJMZ.js");
+    const { persistClassifiedMarkerForFields } = await import("./classified-marker-OO65UYXN.js");
     await persistClassifiedMarkerForFields(this.adapter, this.vault, this.name, this.vdigFields, await this.getDEK(this.name));
     this._markerPersisted = true;
   }
   /** C-A/R10 drift signal — the marker's declared digest-only set, memoized to one store read per handle (see config-drift.ts). */
   async _classifiedMarkerDigestOnly() {
     if (this._markerDigestOnlyCache !== void 0) return this._markerDigestOnlyCache;
-    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-67HBIJMZ.js");
+    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-OO65UYXN.js");
     this._markerDigestOnlyCache = await readClassifiedMarkerDigestOnly(this.adapter, this.vault, this.name, await this.getDEK(this.name));
     return this._markerDigestOnlyCache;
   }
@@ -6933,7 +6115,7 @@ var VaultLinks = class {
 // src/with-shape/links/lazy-handle.ts
 function makeLazyLinkSetHandle(d) {
   let engine = null;
-  const load = () => engine ??= import("./link-set-6RAHEKZN.js").then(
+  const load = () => engine ??= import("./link-set-67CAMUAL.js").then(
     ({ LinkSet }) => new LinkSet(d.adapter, d.vault, d.name, d.spec, d.encrypted, d.getDEK, d.actor, d.emitter, d.endpointExists)
   );
   return {
@@ -7584,7 +6766,7 @@ function declareSatellite(ctx, collectionName, options, existingRegistry) {
   ctx.forEachSyncEngine((e) => e.remirrorPairResolvers([spec.base, spec.satellite]));
   const registry = reg;
   const baseSchema = ctx.getBaseSchema(spec.base);
-  void import("./post-register-BPJ36A6D.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
+  void import("./post-register-HIYY4Y5S.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
   });
   return reg;
 }
@@ -8559,7 +7741,7 @@ var Vault = class {
         const strategies = options.schemaUpdate ?? [];
         const work = (async () => {
           const dek = await this.getDEK(collectionName);
-          const { persistSchemaIfNeeded } = await import("./register-AEOOGKNO.js");
+          const { persistSchemaIfNeeded } = await import("./register-7OJWAWT5.js");
           const result = await persistSchemaIfNeeded({
             store: this.adapter,
             vault: this.name,
@@ -8621,7 +7803,7 @@ var Vault = class {
         // Vaults without derivations skip this so `Collection.put`'s
         // `if (this.derivationSource)` branch no-ops without touching the
         // derivation service code.
-        ...this.derivationRegistry !== null ? (this.derivationRegistry.validateFieldsFor(collectionName, options?.schema, Object.keys({ ...options?.fieldMeta, ...options?.moneyFields, ...options?.dictKeyFields, ...options?.refs, ...options?.computed, ...options?.i18nFields, ...options?.lookupFields, ...options?.blobFields, ...options?.classifiedFields })), {
+        ...this.derivationRegistry !== null ? (this.derivationRegistry.validateFieldsFor(collectionName, options?.schema, Object.keys({ ...options?.fieldMeta, ...options?.moneyFields, ...options?.dictKeyFields, ...options?.refs, ...options?.computed, ...options?.i18nFields, ...options?.lookupFields, ...options?.blobFields, ...options?.classifiedFields }), options), {
           derivationSource: {
             registry: () => this.derivationRegistry,
             getCollection: (name) => this.collection(name),
@@ -8709,7 +7891,7 @@ var Vault = class {
         const work = (async () => {
           try {
             const dek = await this.getDEK(collectionName);
-            await (await import("./register-AEOOGKNO.js")).persistSchemaIfNeeded({
+            await (await import("./register-7OJWAWT5.js")).persistSchemaIfNeeded({
               store: this.adapter,
               vault: this.name,
               collectionName,
@@ -8755,7 +7937,7 @@ var Vault = class {
    * writes (unfenced walk — see `with-shape/satellites/migrate-cek.ts`); resumable.
    */
   async migrateSatellitePerRecordKeys(satelliteName) {
-    const { migrateSatelliteCek } = await import("./migrate-cek-25KNTS5U.js");
+    const { migrateSatelliteCek } = await import("./migrate-cek-5ENH64AA.js");
     return migrateSatelliteCek(satelliteName, this.collection(satelliteName, { perRecordKeys: true }));
   }
   /**
@@ -8937,7 +8119,7 @@ var Vault = class {
   async _ensureFenceCoordination() {
     if (this.#fenceCoordinationStarted) return;
     this.#fenceCoordinationStarted = true;
-    const { FenceWatcher } = await import("./fence-watcher-ZVSMLKQD.js");
+    const { FenceWatcher } = await import("./fence-watcher-U2PW6JU5.js");
     if (!this.#fenceCoordinationStarted) return;
     this.#fenceWatcher = new FenceWatcher({
       coordination: this.noydb.mesh,
@@ -9386,7 +8568,7 @@ var Vault = class {
    */
   // eslint-disable-next-line @typescript-eslint/consistent-type-imports
   async _loadPodSigner() {
-    const { loadSigner } = await import("./signer-7NK7TMWU.js");
+    const { loadSigner } = await import("./signer-5K3WDHOC.js");
     return loadSigner(this.adapter, this.name, this.getDEK);
   }
   async writeExportAudit(entry) {
@@ -9615,7 +8797,7 @@ var Vault = class {
     const blobsEnabled = this.strategies.blobs !== NO_BLOBS;
     const actor = this.keyring.userId;
     const fanoutStats = { recordsErased: 0, aggregatesRecomputed: 0, residueFrozen: [], lookupReferencesCascaded: 0, lookupReferencesNullified: 0, lookupReferencesResidue: [], derivedResidueUndecodable: [], derivedResidueDeclined: [] };
-    const { partitionSealedCekKeys, shouldSkipBlobScan, bumpResidueCount, residueNoticesFromMap } = await import("./purge-scope-FGNNLWHD.js");
+    const { partitionSealedCekKeys, shouldSkipBlobScan, bumpResidueCount, residueNoticesFromMap } = await import("./purge-scope-4HEFPDOW.js");
     const scopedPurge = this.strategies.forget.scopedPurge === true;
     const sealedCekScopedSkipped = /* @__PURE__ */ new Map();
     const blobScopedSkipped = /* @__PURE__ */ new Map();
@@ -9876,8 +9058,8 @@ var Vault = class {
   async _initGuards(handles) {
     if (handles.length === 0) return;
     const [{ GuardRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-SHMGHEK4.js"),
-      import("./read-only-facade-CHCKSEPD.js")
+      import("./registry-4AYVUNXK.js"),
+      import("./read-only-facade-BIGO37U3.js")
     ]);
     const registry = new GuardRegistry();
     for (const h of handles) registry.register(h.spec);
@@ -9904,8 +9086,8 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-BZQIVNNO.js"),
-      import("./read-only-facade-CHCKSEPD.js")
+      import("./registry-HDINK5QW.js"),
+      import("./read-only-facade-BIGO37U3.js")
     ]);
     const registry = new DerivationRegistry();
     for (const h of handles) {
@@ -9936,7 +9118,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-I6FP4677.js");
+    const { MaterializedViewRegistry } = await import("./registry-5MVJGPXW.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -9961,7 +9143,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-SKSOUXNF.js");
+    const { OverlayedViewRegistry } = await import("./registry-23WF3TGH.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -10024,14 +9206,14 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-KSPGNVDO.js");
+    const { MaterializedViewExecutor } = await import("./executor-5XJNV5H5.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this,
       dispatchCtx: this._dispatchCtx({ collection: name, id: "refreshView" })
     });
-    const { clearMVStaleFully } = await import("./stale-KSPG6LFX.js");
+    const { clearMVStaleFully } = await import("./stale-AU74OPUW.js");
     await clearMVStaleFully(this.adapter, this.name, registry, name);
     return result;
   }
@@ -10044,10 +9226,10 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0, skippedFrozen: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0, skippedFrozen: 0 };
-    const { DerivationExecutor } = await import("./executor-TOLPBHOC.js");
+    const { DerivationExecutor } = await import("./executor-5NIMLSKZ.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
-    const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-CHCKSEPD.js")).ReadOnlyVaultFacade(this, "derivation") };
+    const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-BIGO37U3.js")).ReadOnlyVaultFacade(this, "derivation") };
     let derived = 0;
     let failed = 0;
     let skippedFrozen = 0;
@@ -10071,7 +9253,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-TSFPXY5C.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-HJIVUPTD.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key, this.getDEK, this.encrypted);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -10298,7 +9480,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-OLJUWTVA.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-VRYMQRCF.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (secret) first."
@@ -10320,7 +9502,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-OLJUWTVA.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-VRYMQRCF.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -10573,7 +9755,7 @@ var Vault = class {
    * @see design-history/2026-05-22-schema-dump-design.md
    */
   async dumpSchema(opts = {}) {
-    const { dumpVaultSchema } = await import("./walk-P3E6QSNC.js");
+    const { dumpVaultSchema } = await import("./walk-ERAJ5RHO.js");
     return dumpVaultSchema(this, opts);
   }
   /**
@@ -10669,7 +9851,7 @@ var Vault = class {
    * separate vault instances now.
    */
   async getPodHandle() {
-    const { buildPodHandle } = await import("./pod-handle-6II7KFBR.js");
+    const { buildPodHandle } = await import("./pod-handle-S7AMCJIF.js");
     return buildPodHandle(this.adapter, this.name);
   }
   /**
@@ -10701,7 +9883,7 @@ var Vault = class {
    * both modes round-trip cleanly.
    */
   async dump() {
-    const { dumpVault } = await import("./backup-R6A4VZRX.js");
+    const { dumpVault } = await import("./backup-AKWIMYWU.js");
     return dumpVault(this.backupContext());
   }
   /**
@@ -10753,7 +9935,7 @@ var Vault = class {
    * — there's no chain to verify against.
    */
   async load(backupJson) {
-    const { loadVault } = await import("./backup-R6A4VZRX.js");
+    const { loadVault } = await import("./backup-AKWIMYWU.js");
     return loadVault(this.backupContext(), backupJson);
   }
   /**
@@ -10785,7 +9967,7 @@ var Vault = class {
    * way to detect tampering of an in-place vault.
    */
   async verifyBackupIntegrity() {
-    const { verifyBackupIntegrity } = await import("./backup-R6A4VZRX.js");
+    const { verifyBackupIntegrity } = await import("./backup-AKWIMYWU.js");
     return verifyBackupIntegrity(this.backupContext());
   }
   /**
@@ -11015,7 +10197,7 @@ var Vault = class {
    * is the live validator object, not a serialization of it).
    */
   async exportJSON(opts = {}) {
-    const { exportVaultJSON } = await import("./backup-R6A4VZRX.js");
+    const { exportVaultJSON } = await import("./backup-AKWIMYWU.js");
     return exportVaultJSON(this.backupContext(), opts);
   }
 };
@@ -12943,7 +12125,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-MZJXBWNM.js");
+      const { GuardExecutor } = await import("./executor-AQVXV5GZ.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -14315,7 +13497,7 @@ async function createNoydb(options) {
   if (!options.store) options = { ...options, store: memoryStore() };
   validateSecretModeOptions(options);
   if (!options.mesh) options = { ...options, mesh: await createDefaultMesh(options.store) };
-  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-UE2XQKDN.js")).createUserApi };
+  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-JPZT6BDD.js")).createUserApi };
   if (!options.policyFactory) {
     const policyModule = await import("./policy/index.js");
     options = { ...options, policyFactory: policyModule.createNoydbPolicy, policyCheckGateFn: policyModule.checkGate };
@@ -14334,8 +13516,6 @@ function normalizeSyncTargets(sync) {
 export {
   memoryStore,
   withArchive,
-  via,
-  isViaFieldSpec,
   Collection,
   ELEVATION_AUDIT_COLLECTION,
   ElevatedHandle,
@@ -14350,4 +13530,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-XMF3GKUR.js.map
+//# sourceMappingURL=chunk-DRB6IHPS.js.map