@noy-db/hub 0.7.0-pre.14 → 0.7.0-pre.16

package/dist/{chunk-EVKR67PQ.js → chunk-2N4GY74U.js}

@@ -1,16 +1,16 @@
 import {
   ATTESTATIONS_COLLECTION,
   loadOrCreateSigner
-} from "./chunk-WSJG5L5C.js";
+} from "./chunk-ANATMFIO.js";
 import {
   generateULID
 } from "./chunk-4AOERLTV.js";
 import {
   buildRecordAad
-} from "./chunk-CIGAQBJR.js";
+} from "./chunk-77K4PG6P.js";
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import {
   encrypt
 } from "./chunk-SL3JAAKN.js";
@@ -63,4 +63,4 @@ async function issueAttestationCore(ctx, args) {
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=chunk-EVKR67PQ.js.map
+//# sourceMappingURL=chunk-2N4GY74U.js.map

package/dist/{chunk-WWNYSV7S.js → chunk-2Y4IMKA6.js}

@@ -1,10 +1,10 @@
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-CIGAQBJR.js";
+} from "./chunk-77K4PG6P.js";
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import {
   encrypt
 } from "./chunk-SL3JAAKN.js";
@@ -45,4 +45,4 @@ export {
   loadPersistedSchema,
   savePersistedSchema
 };
-//# sourceMappingURL=chunk-WWNYSV7S.js.map
+//# sourceMappingURL=chunk-2Y4IMKA6.js.map

package/dist/{chunk-3LK2XZCW.js → chunk-3RCJJBNR.js}

@@ -1,10 +1,10 @@
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-WWNYSV7S.js";
+} from "./chunk-2Y4IMKA6.js";
 import {
   assemblePodContainer,
   buildExtractedPartitionWrapper
-} from "./chunk-NLOLF6LD.js";
+} from "./chunk-5WDXHNSW.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -12,7 +12,7 @@ import {
   BLOB_INTENT_COLLECTION,
   BLOB_SLOTS_PREFIX,
   BLOB_VERSIONS_PREFIX
-} from "./chunk-ZG4XLOKB.js";
+} from "./chunk-BM5TWITZ.js";
 import {
   generateULID
 } from "./chunk-4AOERLTV.js";
@@ -23,16 +23,16 @@ import {
   canonicalJson,
   envelopePayloadHash,
   hashEntry
-} from "./chunk-IPFE6MVM.js";
+} from "./chunk-BOET4NA4.js";
 import {
   buildRecordAad,
   openEnvelopeJson,
   recordAadFor,
   writeEnvelopeBody
-} from "./chunk-CIGAQBJR.js";
+} from "./chunk-77K4PG6P.js";
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import {
   bufferToBase64,
   decrypt,
@@ -45,7 +45,7 @@ import {
 } from "./chunk-SL3JAAKN.js";
 import {
   NOYDB_BACKUP_VERSION
-} from "./chunk-N4CHCXDL.js";
+} from "./chunk-7MG7SJT7.js";
 import {
   PartitionExtractionError
 } from "./chunk-7O3Y4PPD.js";
@@ -494,4 +494,4 @@ export {
   extractPartition,
   extractPartitionCore
 };
-//# sourceMappingURL=chunk-3LK2XZCW.js.map
+//# sourceMappingURL=chunk-3RCJJBNR.js.map

package/dist/{chunk-GM4IM7TC.js → chunk-453F654R.js}

@@ -1,6 +1,6 @@
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 
 // src/with-shape/schema-update/fence.ts
 var FENCE_RECORD_ID = "schema-fence";
@@ -36,4 +36,4 @@ export {
   loadFence,
   saveFence
 };
-//# sourceMappingURL=chunk-GM4IM7TC.js.map
+//# sourceMappingURL=chunk-453F654R.js.map

package/dist/{chunk-JUBWUJY5.js → chunk-4GVM6QZA.js}

@@ -1,6 +1,6 @@
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 
 // src/with-party/team/managed-secret.ts
 var MemorySealer = class {
@@ -251,4 +251,4 @@ export {
   loadSealedSecret,
   resolveManagedSecret
 };
-//# sourceMappingURL=chunk-JUBWUJY5.js.map
+//# sourceMappingURL=chunk-4GVM6QZA.js.map

package/dist/{chunk-KCUIMITG.js → chunk-5VCRVKOZ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-UXVWEX5L.js";
 import {
   SealedHandle
-} from "./chunk-N4CHCXDL.js";
+} from "./chunk-7MG7SJT7.js";
 import {
   ClassifiedConfigError,
   ClassifiedNotEnabledError
@@ -262,4 +262,4 @@ export {
   enforceClassifiedWrite,
   NO_CLASSIFIED
 };
-//# sourceMappingURL=chunk-KCUIMITG.js.map
+//# sourceMappingURL=chunk-5VCRVKOZ.js.map

package/dist/{chunk-NLOLF6LD.js → chunk-5WDXHNSW.js}

@@ -1,6 +1,6 @@
 import {
   pickLocale
-} from "./chunk-MLO75SFJ.js";
+} from "./chunk-EQEYOJBM.js";
 import {
   sha256Hex
 } from "./chunk-SL3JAAKN.js";
@@ -812,7 +812,7 @@ async function applySatelliteLivenessFilter(vault, dumpJson) {
   if (!backup.collections || typeof backup.collections !== "object") return dumpJson;
   if (typeof vault._introspectState !== "function") return dumpJson;
   const { adapter, name, getDEK } = vault._introspectState();
-  const { liveBaseIdSetsForBundle } = await import("./dead-filter-OMMVBAKZ.js");
+  const { liveBaseIdSetsForBundle } = await import("./dead-filter-TSWZQRR5.js");
   const satLive = await liveBaseIdSetsForBundle(adapter, name, Object.keys(backup.collections), getDEK);
   if (satLive.size === 0) return dumpJson;
   const next = {};
@@ -1059,4 +1059,4 @@ export {
   readPodRedirect,
   readPod
 };
-//# sourceMappingURL=chunk-NLOLF6LD.js.map
+//# sourceMappingURL=chunk-5WDXHNSW.js.map

package/dist/{chunk-BMSOTHIA.js → chunk-6GMZ7HEE.js}

@@ -5,10 +5,10 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-CIGAQBJR.js";
+} from "./chunk-77K4PG6P.js";
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import {
   encrypt
 } from "./chunk-SL3JAAKN.js";
@@ -130,4 +130,4 @@ export {
   LinkSet,
   LinkEndpointError
 };
-//# sourceMappingURL=chunk-BMSOTHIA.js.map
+//# sourceMappingURL=chunk-6GMZ7HEE.js.map

package/dist/{chunk-RDZZHYMV.js → chunk-6I2RQCET.js}

@@ -1,9 +1,9 @@
 import {
   envelopePayloadHash
-} from "./chunk-IPFE6MVM.js";
+} from "./chunk-BOET4NA4.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-N4CHCXDL.js";
+} from "./chunk-7MG7SJT7.js";
 import {
   DictKeyMissingError,
   PermissionDeniedError
@@ -392,4 +392,4 @@ export {
   dictCollectionName,
   LookupHandle
 };
-//# sourceMappingURL=chunk-RDZZHYMV.js.map
+//# sourceMappingURL=chunk-6I2RQCET.js.map

package/dist/chunk-6LMAVYOY.js

@@ -0,0 +1,63 @@
+// src/with-formula/derivations/trigger-match.ts
+function hopCollections(match) {
+  return [...new Set(match.flatMap((p) => p.via ? [p.via.collection] : []))];
+}
+function normalizeTriggerBy(triggerBy) {
+  if (triggerBy === void 0) return [];
+  return triggerBy.map((t) => ({
+    collection: t.collection,
+    match: t.match ?? [{ from: "id", to: t.on }],
+    ...t.maxFanout !== void 0 ? { maxFanout: t.maxFanout } : {}
+  }));
+}
+var scalar = (v) => typeof v === "string" || typeof v === "number" ? String(v) : null;
+function tupleFromWritten(match, writtenId, record) {
+  const out = [];
+  for (const pair of match) {
+    const v = pair.from === "id" ? writtenId : scalar(record?.[pair.from]);
+    if (v === null) return null;
+    out.push({ field: pair.to, value: v });
+  }
+  return out;
+}
+async function resolveTuple(match, writtenId, record, lookup) {
+  const out = [];
+  for (const pair of match) {
+    const raw = pair.from === "id" ? writtenId : scalar(record?.[pair.from]);
+    if (raw === null) return null;
+    if (pair.via === void 0) {
+      out.push({ field: pair.to, value: raw });
+      continue;
+    }
+    const intermediate = await lookup(pair.via.collection, pair.via.take, raw);
+    if (intermediate === null) return null;
+    const hopped = scalar(intermediate[pair.via.on]);
+    if (hopped === null) return null;
+    out.push({ field: pair.to, value: hopped });
+  }
+  return out;
+}
+function tupleFromIntermediate(match, collection, record) {
+  const out = [];
+  for (const pair of match) {
+    if (pair.via?.collection !== collection) continue;
+    const v = scalar(record?.[pair.via.on]);
+    if (v === null) return null;
+    out.push({ field: pair.to, value: v });
+  }
+  return out.length > 0 ? out : null;
+}
+function sameTuple(a, b) {
+  if (a === null || b === null) return a === b;
+  return a.length === b.length && a.every((p, i) => p.field === b[i].field && p.value === b[i].value);
+}
+
+export {
+  hopCollections,
+  normalizeTriggerBy,
+  tupleFromWritten,
+  resolveTuple,
+  tupleFromIntermediate,
+  sameTuple
+};
+//# sourceMappingURL=chunk-6LMAVYOY.js.map

package/dist/chunk-6LMAVYOY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-formula/derivations/trigger-match.ts"],"sourcesContent":["/**\n * Pure helpers behind composite `triggerBy` (#1249).\n *\n * A trigger entry is a CONJUNCTION of equality pairs: a source record\n * matches when EVERY pair satisfies String(source[to]) === String(written[from]).\n * `from: 'id'` reads the written record's id (winning over any stored field\n * named `id`, matching dispatch's `{ ...incoming, id }` convention). The\n * legacy `on` form normalizes to `[{ from: 'id', to: on }]` so everything\n * downstream has ONE shape.\n *\n * Scalar coercion is verbatim from `_findMatchingIds`: both sides must be\n * string | number; anything else fails the pair (never throws).\n * Spec: docs/superpowers/specs/2026-08-29-composite-triggerby-design.md §4-§5.\n * @module\n */\n\n/** One declared hop through an intermediate collection (#1277). */\nexport interface MatchVia {\n  /** The intermediate collection to resolve through. */\n  readonly collection: string\n  /** Field on the intermediate whose value equals `written[from]`. */\n  readonly take: string\n  /** Field on the intermediate whose value is compared against `source[to]`. */\n  readonly on: string\n}\n\nexport interface MatchPair {\n  readonly from: string\n  readonly to: string\n  readonly via?: MatchVia\n}\n\n/** True when any pair in this trigger resolves through an intermediate. */\nexport function hasHop(match: ReadonlyArray<MatchPair>): boolean {\n  return match.some((p) => p.via !== undefined)\n}\n\n/** Every intermediate collection named by a trigger's pairs, deduplicated. */\nexport function hopCollections(match: ReadonlyArray<MatchPair>): string[] {\n  return [...new Set(match.flatMap((p) => (p.via ? [p.via.collection] : [])))]\n}\n\nexport interface NormalizedTrigger {\n  readonly collection: string\n  readonly match: ReadonlyArray<MatchPair>\n  readonly maxFanout?: number\n}\n\ninterface RawTrigger {\n  readonly collection: string\n  readonly on?: string\n  readonly match?: ReadonlyArray<MatchPair>\n  readonly maxFanout?: number\n}\n\nexport function normalizeTriggerBy(triggerBy: ReadonlyArray<RawTrigger> | undefined): NormalizedTrigger[] {\n  if (triggerBy === undefined) return []\n  return triggerBy.map((t) => ({\n    collection: t.collection,\n    match: t.match ?? [{ from: 'id', to: t.on! }],\n    ...(t.maxFanout !== undefined ? { maxFanout: t.maxFanout } : {}),\n  }))\n}\n\nconst scalar = (v: unknown): string | null =>\n  (typeof v === 'string' || typeof v === 'number') ? String(v) : null\n\n/**\n * The value tuple a written record presents to one trigger entry.\n * `null` means \"this record cannot address any source\" (a from-field is\n * absent or non-scalar) — a legitimate no-match, not an error.\n */\nexport function tupleFromWritten(\n  match: ReadonlyArray<MatchPair>,\n  writtenId: string,\n  record: Record<string, unknown> | null,\n): Array<{ field: string; value: string }> | null {\n  const out: Array<{ field: string; value: string }> = []\n  for (const pair of match) {\n    const v = pair.from === 'id' ? writtenId : scalar(record?.[pair.from])\n    if (v === null) return null\n    out.push({ field: pair.to, value: v })\n  }\n  return out\n}\n\n/**\n * Resolve one trigger's pairs into the value tuple a written record presents,\n * following any declared hop (#1277).\n *\n * Non-hop pairs behave exactly as {@link tupleFromWritten}. A hop pair reads\n * `written[from]`, finds the intermediate record whose `via.take` equals it,\n * and substitutes that record's `via.on` value — so everything downstream\n * still compares a flat `{ field, value }` tuple against source records and\n * the existing index-backed matcher is unchanged.\n *\n * Returns `null` when ANY pair cannot produce a value — a missing field, a\n * non-scalar, or an intermediate that does not resolve. That is a legitimate\n * no-match, not an error: a dangling reference addresses nothing, and refusing\n * here would turn a data condition into a thrown exception on every write.\n *\n * ONE lookup per hop per written record. `take: 'id'` is a direct `get`; any\n * other `take` is a field match on the intermediate, which uses its index when\n * one is declared.\n */\nexport async function resolveTuple(\n  match: ReadonlyArray<MatchPair>,\n  writtenId: string,\n  record: Record<string, unknown> | null,\n  lookup: (collection: string, field: string, value: string) => Promise<Record<string, unknown> | null>,\n): Promise<Array<{ field: string; value: string }> | null> {\n  const out: Array<{ field: string; value: string }> = []\n  for (const pair of match) {\n    const raw = pair.from === 'id' ? writtenId : scalar(record?.[pair.from])\n    if (raw === null) return null\n    if (pair.via === undefined) {\n      out.push({ field: pair.to, value: raw })\n      continue\n    }\n    const intermediate = await lookup(pair.via.collection, pair.via.take, raw)\n    if (intermediate === null) return null\n    const hopped = scalar(intermediate[pair.via.on])\n    if (hopped === null) return null\n    out.push({ field: pair.to, value: hopped })\n  }\n  return out\n}\n\n/**\n * The tuple a written INTERMEDIATE record presents (#1277 option 2).\n *\n * When a record of `via.collection` is written, the sources it addresses are\n * those whose `to` equals the intermediate's own `via.on` value — no lookup is\n * needed, because the intermediate IS the written record. Pairs that do not\n * hop through this collection cannot be constrained by such a write and are\n * skipped, which makes the fan-out deliberately WIDER than a trigger write:\n * refreshing too much is recoverable, refreshing too little is the silent\n * staleness this feature exists to remove.\n *\n * Returns `null` when no pair hops through `collection`, or when the\n * intermediate carries no scalar at `via.on`.\n */\nexport function tupleFromIntermediate(\n  match: ReadonlyArray<MatchPair>,\n  collection: string,\n  record: Record<string, unknown> | null,\n): Array<{ field: string; value: string }> | null {\n  const out: Array<{ field: string; value: string }> = []\n  for (const pair of match) {\n    if (pair.via?.collection !== collection) continue\n    const v = scalar(record?.[pair.via.on])\n    if (v === null) return null\n    out.push({ field: pair.to, value: v })\n  }\n  return out.length > 0 ? out : null\n}\n\n/** Any single component differing means NOT the same tuple (spec §7). */\nexport function sameTuple(\n  a: Array<{ field: string; value: string }> | null,\n  b: Array<{ field: string; value: string }> | null,\n): boolean {\n  if (a === null || b === null) return a === b\n  return a.length === b.length && a.every((p, i) => p.field === b[i]!.field && p.value === b[i]!.value)\n}\n\n/** Moved to the kernel (#1249) so `collection.ts` can import statically without\n *  dragging derivations code into the floor bundle; re-exported here for\n *  compatibility with existing consumers of this module. */\nexport { recordMatchesPairs, findMatchingIdsByPairs } from '../../kernel/match-pairs.js'\n"],"mappings":";AAsCO,SAAS,eAAe,OAA2C;AACxE,SAAO,CAAC,GAAG,IAAI,IAAI,MAAM,QAAQ,CAAC,MAAO,EAAE,MAAM,CAAC,EAAE,IAAI,UAAU,IAAI,CAAC,CAAE,CAAC,CAAC;AAC7E;AAeO,SAAS,mBAAmB,WAAuE;AACxG,MAAI,cAAc,OAAW,QAAO,CAAC;AACrC,SAAO,UAAU,IAAI,CAAC,OAAO;AAAA,IAC3B,YAAY,EAAE;AAAA,IACd,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAM,IAAI,EAAE,GAAI,CAAC;AAAA,IAC5C,GAAI,EAAE,cAAc,SAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,EAChE,EAAE;AACJ;AAEA,IAAM,SAAS,CAAC,MACb,OAAO,MAAM,YAAY,OAAO,MAAM,WAAY,OAAO,CAAC,IAAI;AAO1D,SAAS,iBACd,OACA,WACA,QACgD;AAChD,QAAM,MAA+C,CAAC;AACtD,aAAW,QAAQ,OAAO;AACxB,UAAM,IAAI,KAAK,SAAS,OAAO,YAAY,OAAO,SAAS,KAAK,IAAI,CAAC;AACrE,QAAI,MAAM,KAAM,QAAO;AACvB,QAAI,KAAK,EAAE,OAAO,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EACvC;AACA,SAAO;AACT;AAqBA,eAAsB,aACpB,OACA,WACA,QACA,QACyD;AACzD,QAAM,MAA+C,CAAC;AACtD,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,KAAK,SAAS,OAAO,YAAY,OAAO,SAAS,KAAK,IAAI,CAAC;AACvE,QAAI,QAAQ,KAAM,QAAO;AACzB,QAAI,KAAK,QAAQ,QAAW;AAC1B,UAAI,KAAK,EAAE,OAAO,KAAK,IAAI,OAAO,IAAI,CAAC;AACvC;AAAA,IACF;AACA,UAAM,eAAe,MAAM,OAAO,KAAK,IAAI,YAAY,KAAK,IAAI,MAAM,GAAG;AACzE,QAAI,iBAAiB,KAAM,QAAO;AAClC,UAAM,SAAS,OAAO,aAAa,KAAK,IAAI,EAAE,CAAC;AAC/C,QAAI,WAAW,KAAM,QAAO;AAC5B,QAAI,KAAK,EAAE,OAAO,KAAK,IAAI,OAAO,OAAO,CAAC;AAAA,EAC5C;AACA,SAAO;AACT;AAgBO,SAAS,sBACd,OACA,YACA,QACgD;AAChD,QAAM,MAA+C,CAAC;AACtD,aAAW,QAAQ,OAAO;AACxB,QAAI,KAAK,KAAK,eAAe,WAAY;AACzC,UAAM,IAAI,OAAO,SAAS,KAAK,IAAI,EAAE,CAAC;AACtC,QAAI,MAAM,KAAM,QAAO;AACvB,QAAI,KAAK,EAAE,OAAO,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EACvC;AACA,SAAO,IAAI,SAAS,IAAI,MAAM;AAChC;AAGO,SAAS,UACd,GACA,GACS;AACT,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,SAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,EAAG,SAAS,EAAE,UAAU,EAAE,CAAC,EAAG,KAAK;AACtG;","names":[]}

package/dist/{chunk-CIGAQBJR.js → chunk-77K4PG6P.js}

@@ -2,7 +2,7 @@ import {
   buildRecordEnvelope,
   isDeleteMarker,
   isTombstone
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import {
   blindedEqual,
   openVdigPayload,
@@ -39,7 +39,7 @@ import {
 import {
   NOYDB_FORMAT_VERSION,
   SealedHandle
-} from "./chunk-N4CHCXDL.js";
+} from "./chunk-7MG7SJT7.js";
 import {
   ClassifiedConfigError,
   ClassifiedRotationError,
@@ -1364,4 +1364,4 @@ export {
   issueChallenge,
   verifyBrokerProof
 };
-//# sourceMappingURL=chunk-CIGAQBJR.js.map
+//# sourceMappingURL=chunk-77K4PG6P.js.map

package/dist/{chunk-N4CHCXDL.js → chunk-7MG7SJT7.js}

@@ -31,4 +31,4 @@ export {
   SealedHandle,
   createStore
 };
-//# sourceMappingURL=chunk-N4CHCXDL.js.map
+//# sourceMappingURL=chunk-7MG7SJT7.js.map