@noy-db/hub 0.7.0-pre.15 → 0.7.0-pre.17

package/dist/sealed-record/index.js

@@ -3,8 +3,8 @@ import {
 } from "../chunk-6YXCPL4T.js";
 import {
   recordAadFor
-} from "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+} from "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
@@ -14,7 +14,7 @@ import {
   decrypt,
   importCek
 } from "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import {
   SealedRecordExpiredError,
   SealedRecordMismatchError,
@@ -25,15 +25,15 @@ import {
 function withSealedRecord() {
   return {
     async sealRecordToHost(ctx, collection, id, hostSealer, opts) {
-      const { sealRecordToHost } = await import("../enclave-VM2YQONI.js");
+      const { sealRecordToHost } = await import("../enclave-KJOTOH7X.js");
       return sealRecordToHost(ctx, collection, id, hostSealer, opts);
     },
     async revokeSealedRecord(ctx, collection, id, pid, opts) {
-      const { revokeSealedRecord } = await import("../enclave-VM2YQONI.js");
+      const { revokeSealedRecord } = await import("../enclave-KJOTOH7X.js");
       return revokeSealedRecord(ctx, collection, id, pid, opts);
     },
     async rotateRecordCek(ctx, collection, id) {
-      const { rotateRecordCek } = await import("../enclave-VM2YQONI.js");
+      const { rotateRecordCek } = await import("../enclave-KJOTOH7X.js");
       return rotateRecordCek(ctx, collection, id);
     }
   };

package/dist/search/index.js

@@ -9,7 +9,7 @@ import {
   segmentTokens,
   tokenize,
   withSearch
-} from "../chunk-OMB2ZKIT.js";
+} from "../chunk-UXWB3FPF.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";

package/dist/{seed-UYR6YG3V.js → seed-G42JYN56.js}

@@ -1,18 +1,18 @@
 import {
   BROKER_COLLECTION,
   ensureCollectionDEK
-} from "./chunk-VNR2SNVJ.js";
-import "./chunk-YQWBEJCS.js";
+} from "./chunk-G56KBWFY.js";
+import "./chunk-KG7TZKZG.js";
 import "./chunk-JMGDHKQF.js";
 import {
   computeBrokerProof,
   deriveBrokerProofBits,
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-CIGAQBJR.js";
+} from "./chunk-77K4PG6P.js";
 import {
   buildSealedRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
@@ -21,7 +21,7 @@ import {
   base64ToBuffer,
   bufferToBase64
 } from "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import {
   BrokerEnrolmentError,
   BrokerProofError,
@@ -225,4 +225,4 @@ export {
   mintStoreCredentials,
   rotateSeed
 };
-//# sourceMappingURL=seed-UYR6YG3V.js.map
+//# sourceMappingURL=seed-G42JYN56.js.map

package/dist/sequence/index.js

@@ -5,15 +5,15 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "../chunk-MMOZQTXV.js";
-import "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+} from "../chunk-ZVO4QVPD.js";
+import "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import {
   SequenceNotEnabledError
 } from "../chunk-7O3Y4PPD.js";

package/dist/session/index.js

@@ -17,14 +17,14 @@ import {
   NO_SESSION
 } from "../chunk-VKQCVU2Z.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+import "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,

package/dist/{signer-5K3WDHOC.js → signer-WAMDZHEN.js}

@@ -4,15 +4,15 @@ import {
   SIGNER_RECORD_ID,
   loadOrCreateSigner,
   loadSigner
-} from "./chunk-WSJG5L5C.js";
-import "./chunk-CIGAQBJR.js";
-import "./chunk-4RUFYGWG.js";
+} from "./chunk-ANATMFIO.js";
+import "./chunk-77K4PG6P.js";
+import "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import "./chunk-7O3Y4PPD.js";
 export {
   ATTESTATIONS_COLLECTION,
@@ -21,4 +21,4 @@ export {
   loadOrCreateSigner,
   loadSigner
 };
-//# sourceMappingURL=signer-5K3WDHOC.js.map
+//# sourceMappingURL=signer-WAMDZHEN.js.map

package/dist/snapshots/index.js

@@ -4,16 +4,16 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-NLOLF6LD.js";
-import "../chunk-MLO75SFJ.js";
-import "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+} from "../chunk-5WDXHNSW.js";
+import "../chunk-EQEYOJBM.js";
+import "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import {
   SnapshotNotFoundError
 } from "../chunk-7O3Y4PPD.js";

package/dist/{stale-AU74OPUW.js → stale-DDL7WQEZ.js}

@@ -6,16 +6,16 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-AMODH7AU.js";
+} from "./chunk-FMZY5Q6L.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-CIGAQBJR.js";
-import "./chunk-4RUFYGWG.js";
+import "./chunk-77K4PG6P.js";
+import "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import "./chunk-7O3Y4PPD.js";
 export {
   MV_STALE_COLLECTION,
@@ -26,4 +26,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-AU74OPUW.js.map
+//# sourceMappingURL=stale-DDL7WQEZ.js.map

package/dist/{storage-AVJA5BTW.js → storage-FLR73HHF.js}

@@ -3,15 +3,15 @@ import {
   loadPersistedSchema,
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-WWNYSV7S.js";
-import "./chunk-CIGAQBJR.js";
-import "./chunk-4RUFYGWG.js";
+} from "./chunk-2Y4IMKA6.js";
+import "./chunk-77K4PG6P.js";
+import "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import "./chunk-7O3Y4PPD.js";
 export {
   SCHEMAS_COLLECTION,
@@ -19,4 +19,4 @@ export {
   loadPersistedSchemaEntry,
   savePersistedSchema
 };
-//# sourceMappingURL=storage-AVJA5BTW.js.map
+//# sourceMappingURL=storage-FLR73HHF.js.map

package/dist/{store-coordination-provider-RX2CGWXV.js → store-coordination-provider-MEQ2MJQG.js}

@@ -1,17 +1,17 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-GM4IM7TC.js";
-import "./chunk-CIGAQBJR.js";
+} from "./chunk-453F654R.js";
+import "./chunk-77K4PG6P.js";
 import {
   buildRecordEnvelope
-} from "./chunk-4RUFYGWG.js";
+} from "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import "./chunk-7O3Y4PPD.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -145,4 +145,4 @@ function unref(timer) {
 export {
   StoreMesh
 };
-//# sourceMappingURL=store-coordination-provider-RX2CGWXV.js.map
+//# sourceMappingURL=store-coordination-provider-MEQ2MJQG.js.map

package/dist/sync/index.js

@@ -2,19 +2,19 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-GHHUF2KL.js";
+} from "../chunk-CPWQB3N5.js";
 import {
   NO_SYNC
 } from "../chunk-T7IR4N2S.js";
 import "../chunk-FAHMLERK.js";
-import "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+import "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import "../chunk-7O3Y4PPD.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -2,7 +2,7 @@ import {
   MemoryDeviceSeal,
   beginEchoUnlock,
   withTeam
-} from "../chunk-PFBL4M7E.js";
+} from "../chunk-EYBQEIUY.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,8 +31,8 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-LHH6H43C.js";
-import "../chunk-5UKIZIO3.js";
+} from "../chunk-RRNRNANG.js";
+import "../chunk-2577DKXB.js";
 import {
   buildEchoBlock,
   buildRecipientKeyringFile,
@@ -53,18 +53,18 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-VNR2SNVJ.js";
-import "../chunk-YQWBEJCS.js";
+} from "../chunk-G56KBWFY.js";
+import "../chunk-KG7TZKZG.js";
 import "../chunk-UGTBXF5U.js";
 import "../chunk-JMGDHKQF.js";
-import "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+import "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import {
   TeamNotEnabledError
 } from "../chunk-7O3Y4PPD.js";

package/dist/tiers/index.js

@@ -11,17 +11,17 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-EWPRPP3M.js";
+} from "../chunk-KJIMGIWO.js";
 import "../chunk-UGTBXF5U.js";
 import "../chunk-JMGDHKQF.js";
-import "../chunk-CIGAQBJR.js";
-import "../chunk-4RUFYGWG.js";
+import "../chunk-77K4PG6P.js";
+import "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import {
   TiersNotEnabledError
 } from "../chunk-7O3Y4PPD.js";

package/dist/to/index.js

@@ -1,6 +1,6 @@
 import {
   NOYDB_ENVELOPE_GENERATION
-} from "../chunk-N4CHCXDL.js";
+} from "../chunk-7MG7SJT7.js";
 import {
   ConflictError,
   DuplicateStoreKindError,

package/dist/vault-head/index.js

@@ -6,10 +6,10 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "../chunk-CIGAQBJR.js";
+} from "../chunk-77K4PG6P.js";
 import {
   buildRecordEnvelope
-} from "../chunk-4RUFYGWG.js";
+} from "../chunk-SZJ3DLZA.js";
 import "../chunk-BOWNCWZT.js";
 import "../chunk-YSRUYAVU.js";
 import "../chunk-RMF67KCG.js";
@@ -17,7 +17,7 @@ import "../chunk-LP7BEXCT.js";
 import {
   encrypt
 } from "../chunk-SL3JAAKN.js";
-import "../chunk-N4CHCXDL.js";
+import "../chunk-7MG7SJT7.js";
 import "../chunk-7O3Y4PPD.js";
 
 // src/with-commit/vault-head/head.ts

package/dist/{walk-ERAJ5RHO.js → walk-3UQBRMDV.js}

@@ -1,21 +1,21 @@
 import {
   dumpVaultSchema
-} from "./chunk-FUJSIP4K.js";
+} from "./chunk-KUX3OB6D.js";
 import "./chunk-RXLYKVTF.js";
 import "./chunk-VYYM3MEN.js";
 import "./chunk-REDOOY2Q.js";
 import "./chunk-Y2NBBT6K.js";
-import "./chunk-WWNYSV7S.js";
-import "./chunk-CIGAQBJR.js";
-import "./chunk-4RUFYGWG.js";
+import "./chunk-2Y4IMKA6.js";
+import "./chunk-77K4PG6P.js";
+import "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import "./chunk-7O3Y4PPD.js";
 export {
   dumpVaultSchema
 };
-//# sourceMappingURL=walk-ERAJ5RHO.js.map
+//# sourceMappingURL=walk-3UQBRMDV.js.map

package/dist/with-formula/derivations/trigger-match.d.ts

@@ -13,10 +13,24 @@
  * Spec: docs/superpowers/specs/2026-08-29-composite-triggerby-design.md §4-§5.
  * @module
  */
+/** One declared hop through an intermediate collection (#1277). */
+export interface MatchVia {
+    /** The intermediate collection to resolve through. */
+    readonly collection: string;
+    /** Field on the intermediate whose value equals `written[from]`. */
+    readonly take: string;
+    /** Field on the intermediate whose value is compared against `source[to]`. */
+    readonly on: string;
+}
 export interface MatchPair {
     readonly from: string;
     readonly to: string;
+    readonly via?: MatchVia;
 }
+/** True when any pair in this trigger resolves through an intermediate. */
+export declare function hasHop(match: ReadonlyArray<MatchPair>): boolean;
+/** Every intermediate collection named by a trigger's pairs, deduplicated. */
+export declare function hopCollections(match: ReadonlyArray<MatchPair>): string[];
 export interface NormalizedTrigger {
     readonly collection: string;
     readonly match: ReadonlyArray<MatchPair>;
@@ -30,11 +44,49 @@ interface RawTrigger {
 }
 export declare function normalizeTriggerBy(triggerBy: ReadonlyArray<RawTrigger> | undefined): NormalizedTrigger[];
 /**
- * The value tuple a written record presents to one trigger entry.
- * `null` means "this record cannot address any source" (a from-field is
- * absent or non-scalar) — a legitimate no-match, not an error.
+ * Resolve one trigger's pairs into the value tuple a written record presents,
+ * following any declared hop (#1277).
+ *
+ * Non-hop pairs behave exactly as {@link tupleFromWritten}. A hop pair reads
+ * `written[from]`, finds the intermediate record whose `via.take` equals it,
+ * and substitutes that record's `via.on` value — so everything downstream
+ * still compares a flat `{ field, value }` tuple against source records and
+ * the existing index-backed matcher is unchanged.
+ *
+ * Returns `null` when ANY pair cannot produce a value — a missing field, a
+ * non-scalar, or an intermediate that does not resolve. That is a legitimate
+ * no-match, not an error: a dangling reference addresses nothing, and refusing
+ * here would turn a data condition into a thrown exception on every write.
+ *
+ * Supersedes the sync `tupleFromWritten`, which was DELETED rather than kept
+ * (#1294): having two tuple builders that had to agree is precisely how the
+ * delete path drifted — it called the unhopped one, so a mapped pair compared
+ * the wrong side of the relationship and matched nothing, silently. One path
+ * cannot disagree with itself.
+ *
+ * ONE lookup per hop per written record. `take: 'id'` is a direct `get`; any
+ * other `take` is a field match on the intermediate, which uses its index when
+ * one is declared.
+ */
+export declare function resolveTuple(match: ReadonlyArray<MatchPair>, writtenId: string, record: Record<string, unknown> | null, lookup: (collection: string, field: string, value: string) => Promise<Record<string, unknown> | null>): Promise<Array<{
+    field: string;
+    value: string;
+}> | null>;
+/**
+ * The tuple a written INTERMEDIATE record presents (#1277 option 2).
+ *
+ * When a record of `via.collection` is written, the sources it addresses are
+ * those whose `to` equals the intermediate's own `via.on` value — no lookup is
+ * needed, because the intermediate IS the written record. Pairs that do not
+ * hop through this collection cannot be constrained by such a write and are
+ * skipped, which makes the fan-out deliberately WIDER than a trigger write:
+ * refreshing too much is recoverable, refreshing too little is the silent
+ * staleness this feature exists to remove.
+ *
+ * Returns `null` when no pair hops through `collection`, or when the
+ * intermediate carries no scalar at `via.on`.
  */
-export declare function tupleFromWritten(match: ReadonlyArray<MatchPair>, writtenId: string, record: Record<string, unknown> | null): Array<{
+export declare function tupleFromIntermediate(match: ReadonlyArray<MatchPair>, collection: string, record: Record<string, unknown> | null): Array<{
     field: string;
     value: string;
 }> | null;

package/dist/with-formula/derivations/types.d.ts

@@ -194,7 +194,11 @@ export interface DerivationSpec<TSource extends Record<string, unknown>, TOutput
          * component changing counts) — the prior record is threaded only
          * from the local write path, so a sync-applied wave write or a
          * tiers restore fans out on the new tuple only. Parent DELETES fan
-         * out using the tombstoned record's values — for BOTH forms. A
+         * out using the tombstoned record's values — for the `on` form, the
+         * plain `match` form, AND a `via` hop, including a delete of the
+         * INTERMEDIATE record itself (#1294; before that fix "both forms"
+         * meant `on` | `match` and silently excluded hops, which is a
+         * sentence a consumer reasonably read the other way). A
          * missing/non-scalar `from` value matches nothing. Match fields
          * are validated against the collections' enumerable field sets
          * where possible (silent for TS-generic collections — see the
@@ -204,6 +208,40 @@ export interface DerivationSpec<TSource extends Record<string, unknown>, TOutput
         match: ReadonlyArray<{
             from: string;
             to: string;
+            /**
+             * ONE declared hop (#1277). Without it, `to` names a field on the
+             * source record compared directly against `written[from]`. With it,
+             * the comparison goes through an intermediate record:
+             *
+             * ```
+             * intermediate = the record in `via.collection` where
+             *                intermediate[via.take] === written[from]
+             * match when   String(source[to]) === String(intermediate[via.on])
+             * ```
+             *
+             * This exists for a topology where the two collections share no
+             * field: bills carry `entityId`, disbursements carry `clientId`, and
+             * the client record is what relates them. A denormalised key would
+             * work and is the wrong answer — it is a second copy of something
+             * the vault can already resolve, and a partial backfill goes quiet on
+             * exactly the oldest, least-audited rows.
+             *
+             * Resolution costs ONE lookup per written record (a `get` when
+             * `take` is `'id'`), not one per candidate row — the same bound that
+             * made #1266 refuse virtual computed fields as match targets.
+             *
+             * ⚠️ A write OR DELETE of a `via.collection` record ALSO fires this
+             * trigger (#1277 option 2, deletes added in #1294), fanning out on
+             * the intermediate's old ∪ new value. That
+             * is what keeps a re-pointed intermediate from silently stranding
+             * every source it used to address; the alternative failed silently on
+             * exactly the rare edit nobody repeats.
+             */
+            via?: {
+                collection: string;
+                take: string;
+                on: string;
+            };
         }>;
         maxFanout?: number;
     }>;

package/dist/{withdraw-accessible-42D32Z7G.js → withdraw-accessible-EL5GXZBS.js}

@@ -4,18 +4,18 @@ import {
   freezeSnapshotOnly,
   randomId,
   withdrawAccessibleData
-} from "./chunk-TGPST6FK.js";
-import "./chunk-EKZ6VZYF.js";
-import "./chunk-NLOLF6LD.js";
-import "./chunk-MLO75SFJ.js";
-import "./chunk-CIGAQBJR.js";
-import "./chunk-4RUFYGWG.js";
+} from "./chunk-BSFNRLK2.js";
+import "./chunk-L7CIOOBW.js";
+import "./chunk-5WDXHNSW.js";
+import "./chunk-EQEYOJBM.js";
+import "./chunk-77K4PG6P.js";
+import "./chunk-SZJ3DLZA.js";
 import "./chunk-BOWNCWZT.js";
 import "./chunk-YSRUYAVU.js";
 import "./chunk-RMF67KCG.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
-import "./chunk-N4CHCXDL.js";
+import "./chunk-7MG7SJT7.js";
 import "./chunk-7O3Y4PPD.js";
 export {
   FROZEN_SNAPSHOTS_COLLECTION,
@@ -24,4 +24,4 @@ export {
   randomId,
   withdrawAccessibleData
 };
-//# sourceMappingURL=withdraw-accessible-42D32Z7G.js.map
+//# sourceMappingURL=withdraw-accessible-EL5GXZBS.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.7.0-pre.15",
+  "version": "0.7.0-pre.17",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -233,14 +233,14 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.7.0-pre.15"
+    "@noy-db/attestation": "0.7.0-pre.17"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^4.0.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.7.0-pre.15"
+    "@noy-db/on-shamir": "0.7.0-pre.17"
   },
   "peerDependencies": {
     "zod": "^3.0.0 || ^4.0.0",

package/dist/chunk-TPHAGLUH.js

@@ -1,30 +0,0 @@
-// src/with-formula/derivations/trigger-match.ts
-function normalizeTriggerBy(triggerBy) {
-  if (triggerBy === void 0) return [];
-  return triggerBy.map((t) => ({
-    collection: t.collection,
-    match: t.match ?? [{ from: "id", to: t.on }],
-    ...t.maxFanout !== void 0 ? { maxFanout: t.maxFanout } : {}
-  }));
-}
-var scalar = (v) => typeof v === "string" || typeof v === "number" ? String(v) : null;
-function tupleFromWritten(match, writtenId, record) {
-  const out = [];
-  for (const pair of match) {
-    const v = pair.from === "id" ? writtenId : scalar(record?.[pair.from]);
-    if (v === null) return null;
-    out.push({ field: pair.to, value: v });
-  }
-  return out;
-}
-function sameTuple(a, b) {
-  if (a === null || b === null) return a === b;
-  return a.length === b.length && a.every((p, i) => p.field === b[i].field && p.value === b[i].value);
-}
-
-export {
-  normalizeTriggerBy,
-  tupleFromWritten,
-  sameTuple
-};
-//# sourceMappingURL=chunk-TPHAGLUH.js.map

package/dist/chunk-TPHAGLUH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-formula/derivations/trigger-match.ts"],"sourcesContent":["/**\n * Pure helpers behind composite `triggerBy` (#1249).\n *\n * A trigger entry is a CONJUNCTION of equality pairs: a source record\n * matches when EVERY pair satisfies String(source[to]) === String(written[from]).\n * `from: 'id'` reads the written record's id (winning over any stored field\n * named `id`, matching dispatch's `{ ...incoming, id }` convention). The\n * legacy `on` form normalizes to `[{ from: 'id', to: on }]` so everything\n * downstream has ONE shape.\n *\n * Scalar coercion is verbatim from `_findMatchingIds`: both sides must be\n * string | number; anything else fails the pair (never throws).\n * Spec: docs/superpowers/specs/2026-08-29-composite-triggerby-design.md §4-§5.\n * @module\n */\n\nexport interface MatchPair { readonly from: string; readonly to: string }\n\nexport interface NormalizedTrigger {\n  readonly collection: string\n  readonly match: ReadonlyArray<MatchPair>\n  readonly maxFanout?: number\n}\n\ninterface RawTrigger {\n  readonly collection: string\n  readonly on?: string\n  readonly match?: ReadonlyArray<MatchPair>\n  readonly maxFanout?: number\n}\n\nexport function normalizeTriggerBy(triggerBy: ReadonlyArray<RawTrigger> | undefined): NormalizedTrigger[] {\n  if (triggerBy === undefined) return []\n  return triggerBy.map((t) => ({\n    collection: t.collection,\n    match: t.match ?? [{ from: 'id', to: t.on! }],\n    ...(t.maxFanout !== undefined ? { maxFanout: t.maxFanout } : {}),\n  }))\n}\n\nconst scalar = (v: unknown): string | null =>\n  (typeof v === 'string' || typeof v === 'number') ? String(v) : null\n\n/**\n * The value tuple a written record presents to one trigger entry.\n * `null` means \"this record cannot address any source\" (a from-field is\n * absent or non-scalar) — a legitimate no-match, not an error.\n */\nexport function tupleFromWritten(\n  match: ReadonlyArray<MatchPair>,\n  writtenId: string,\n  record: Record<string, unknown> | null,\n): Array<{ field: string; value: string }> | null {\n  const out: Array<{ field: string; value: string }> = []\n  for (const pair of match) {\n    const v = pair.from === 'id' ? writtenId : scalar(record?.[pair.from])\n    if (v === null) return null\n    out.push({ field: pair.to, value: v })\n  }\n  return out\n}\n\n/** Any single component differing means NOT the same tuple (spec §7). */\nexport function sameTuple(\n  a: Array<{ field: string; value: string }> | null,\n  b: Array<{ field: string; value: string }> | null,\n): boolean {\n  if (a === null || b === null) return a === b\n  return a.length === b.length && a.every((p, i) => p.field === b[i]!.field && p.value === b[i]!.value)\n}\n\n/** Moved to the kernel (#1249) so `collection.ts` can import statically without\n *  dragging derivations code into the floor bundle; re-exported here for\n *  compatibility with existing consumers of this module. */\nexport { recordMatchesPairs, findMatchingIdsByPairs } from '../../kernel/match-pairs.js'\n"],"mappings":";AA+BO,SAAS,mBAAmB,WAAuE;AACxG,MAAI,cAAc,OAAW,QAAO,CAAC;AACrC,SAAO,UAAU,IAAI,CAAC,OAAO;AAAA,IAC3B,YAAY,EAAE;AAAA,IACd,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAM,IAAI,EAAE,GAAI,CAAC;AAAA,IAC5C,GAAI,EAAE,cAAc,SAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,EAChE,EAAE;AACJ;AAEA,IAAM,SAAS,CAAC,MACb,OAAO,MAAM,YAAY,OAAO,MAAM,WAAY,OAAO,CAAC,IAAI;AAO1D,SAAS,iBACd,OACA,WACA,QACgD;AAChD,QAAM,MAA+C,CAAC;AACtD,aAAW,QAAQ,OAAO;AACxB,UAAM,IAAI,KAAK,SAAS,OAAO,YAAY,OAAO,SAAS,KAAK,IAAI,CAAC;AACrE,QAAI,MAAM,KAAM,QAAO;AACvB,QAAI,KAAK,EAAE,OAAO,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EACvC;AACA,SAAO;AACT;AAGO,SAAS,UACd,GACA,GACS;AACT,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,SAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,EAAG,SAAS,EAAE,UAAU,EAAE,CAAC,EAAG,KAAK;AACtG;","names":[]}