@noy-db/hub 0.7.0-pre.8 → 0.7.0

package/dist/{chunk-PRHCMEUK.js → chunk-6GOE5PGN.js}

@@ -1,6 +1,3 @@
-import {
-  resolveStaleOnRead
-} from "./chunk-VAG47QHV.js";
 import {
   isManifestReservedCollection
 } from "./chunk-EPFF7LOX.js";
@@ -10,20 +7,21 @@ import {
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-WLLUM35R.js";
+} from "./chunk-QIZPZMUI.js";
 import {
   hashFields,
   validateSatelliteDeclaration
-} from "./chunk-JVLSU7S2.js";
+} from "./chunk-TUFM4UZP.js";
+import {
+  resolveStaleOnRead
+} from "./chunk-SMH6SRX7.js";
 import {
   loadFence
-} from "./chunk-M7UC2QPT.js";
+} from "./chunk-453F654R.js";
 import {
-  VectorSet,
   buildPersistedIndexCallbacks,
-  encodeVecId,
   syncTierSearch
-} from "./chunk-JJZIIJSA.js";
+} from "./chunk-SPXXX5E4.js";
 import {
   isBaseLive,
   liveBaseIdSet
@@ -33,54 +31,78 @@ import {
 } from "./chunk-6LJY7X5A.js";
 import {
   NO_ATTESTATION
-} from "./chunk-E6YA6UAP.js";
-import {
-  NO_CLASSIFIED,
-  guardClassifiedCompat,
-  resolveClassifiedFields
-} from "./chunk-L3HDEHGM.js";
+} from "./chunk-Q7HZX3IF.js";
 import {
   NO_TIERS,
   classifySealedShred,
   syncDerivedOutputs
-} from "./chunk-RJ7RIIX6.js";
+} from "./chunk-KJIMGIWO.js";
 import {
   NO_PORTABILITY
-} from "./chunk-J4MN6XIU.js";
+} from "./chunk-BZ3534YM.js";
 import {
   NO_CARGO
-} from "./chunk-XJ3FEKEY.js";
+} from "./chunk-NQKIUNW5.js";
 import {
   saveSealedSecret
-} from "./chunk-2QNKXGUS.js";
+} from "./chunk-4GVM6QZA.js";
 import {
   runDrainBarrier
-} from "./chunk-CBRS2NEK.js";
+} from "./chunk-VTFVLCUH.js";
 import {
-  fallbackDerivationName,
-  jsonSchemaToFields
-} from "./chunk-KHKKD62N.js";
-import {
-  derivePersistedSchema,
-  isZod4Schema
-} from "./chunk-P6ASQOZR.js";
-import {
-  loadPersistedSchema
-} from "./chunk-626TSARM.js";
+  fallbackDerivationName
+} from "./chunk-RXLYKVTF.js";
 import {
   NO_SEQUENCE,
   SEQUENCE_COLLECTION,
   compileSequenceFormat,
   resolveSequenceKey
-} from "./chunk-S3I7VKID.js";
+} from "./chunk-ZVO4QVPD.js";
 import {
   CustodyApi,
   NO_CUSTODY
-} from "./chunk-672U6STZ.js";
+} from "./chunk-GPEQUXHL.js";
 import {
   DEFAULT_POSTURE,
-  ViaGraph
-} from "./chunk-5263OEM3.js";
+  EXPORT_REDACTION_MARKER,
+  ViaGraph,
+  ViaPipeline,
+  buildDescription,
+  collectKnownFieldNames,
+  computedEntryParts,
+  deriveZodFields,
+  exportRedact,
+  guardReconcileCollisions,
+  mergeViaFields,
+  resolveCollectionConfig,
+  resolveComputedEdges,
+  resolveDescribeFieldIds,
+  resolveVirtualMoneyFields
+} from "./chunk-2C3AQB46.js";
+import {
+  findMatchingIdsByPairs
+} from "./chunk-TFMM5DBB.js";
+import {
+  encodeVecId
+} from "./chunk-RTBJ5IOO.js";
+import {
+  NO_CLASSIFIED,
+  guardClassifiedCompat,
+  resolveClassifiedFields
+} from "./chunk-5VCRVKOZ.js";
+import {
+  derivePersistedSchema
+} from "./chunk-REDOOY2Q.js";
+import {
+  findRollupSpecForIntent,
+  forgetDerivedFanout,
+  ledgerAuditHook,
+  putDerivedOutput,
+  resolveRollupDeleteIntents,
+  runGraphDispatchWave,
+  selfWriteFieldEqual,
+  touchFor
+} from "./chunk-CARABLSQ.js";
 import {
   buildLookupAltIndex,
   buildLookupSnapshotRows,
@@ -89,25 +111,16 @@ import {
   coerceLookupKey,
   collectLookupDictCompat,
   enforceStaticDictOnPut,
-  findRollupSpecForIntent,
-  forgetDerivedFanout,
-  isLookupDescriptor,
-  ledgerAuditHook,
   matchesReferencingValue,
-  putDerivedOutput,
   registerLookupRefEdges,
   reservedDictDepsOf,
   resolveDictSource,
   resolveLabelFromMap,
-  resolveRollupDeleteIntents,
-  runGraphDispatchWave,
-  selfWriteFieldEqual,
-  touchFor,
   updateReferencingRecords
-} from "./chunk-VVAVTSTR.js";
+} from "./chunk-U4FOQDY4.js";
 import {
   OverlayedCollection
-} from "./chunk-3QARDAYW.js";
+} from "./chunk-SKGMN35F.js";
 import {
   INDEXED_STORE_POLICY,
   NO_SYNC
@@ -122,7 +135,7 @@ import {
   resolvePeriodKey,
   resolveReopenState,
   samePartition
-} from "./chunk-6NRVFD55.js";
+} from "./chunk-PT43Y56J.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
@@ -130,7 +143,7 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "./chunk-Z7ZXZL6Y.js";
+} from "./chunk-FAHMLERK.js";
 import {
   NO_SHADOW
 } from "./chunk-SMY5X46Z.js";
@@ -140,7 +153,7 @@ import {
 import {
   TxContext,
   bestEffortRevert
-} from "./chunk-VFIWDPXZ.js";
+} from "./chunk-BLN54W3L.js";
 import {
   lazy
 } from "./chunk-5D2ALSM5.js";
@@ -148,34 +161,35 @@ import {
   InvertedIndex,
   MemoryIndexStore,
   NO_SEARCH
-} from "./chunk-FKFIEEY6.js";
+} from "./chunk-UXWB3FPF.js";
 import {
   NO_SEALED_RECORD
-} from "./chunk-UCUALOSM.js";
+} from "./chunk-6YXCPL4T.js";
 import {
   Query,
   ScanBuilder
-} from "./chunk-S2VG3ABP.js";
+} from "./chunk-7MG2LHO5.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   NO_BLOBS,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-ZKRRBRSZ.js";
+} from "./chunk-AO42KJO6.js";
 import {
   LazyQuery,
   NO_INDEXING,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-F7ZFRPGQ.js";
+} from "./chunk-KTFRCC5C.js";
 import {
   normalizeIndexDefs
 } from "./chunk-I3ISCYT7.js";
 import {
-  IMPLICIT_LAZY,
-  Lru,
+  IMPLICIT_LAZY
+} from "./chunk-66TQOPFM.js";
+import {
   estimateRecordBytes
-} from "./chunk-NO272T7Q.js";
+} from "./chunk-V4PXLYWM.js";
 import {
   canonicalGroupKey
 } from "./chunk-XZHEOSQ2.js";
@@ -190,19 +204,17 @@ import {
 } from "./chunk-PVEWA2DU.js";
 import {
   dictCollectionName
-} from "./chunk-XBFEKTIY.js";
+} from "./chunk-6I2RQCET.js";
 import {
   NO_I18N,
   getAtPath,
   isDictCollectionName,
-  isDictKeyDescriptor,
-  isI18nTextDescriptor,
   isStaticDictDescriptor
-} from "./chunk-X67FCULK.js";
+} from "./chunk-TRGTKX5E.js";
 import {
   isViaInstalled,
   viaBinder
-} from "./chunk-XDVVBETV.js";
+} from "./chunk-UXVWEX5L.js";
 import {
   NO_TEAM,
   describeAllUsersAuth,
@@ -225,7 +237,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-4FPEWQKF.js";
+} from "./chunk-RRNRNANG.js";
 import {
   assertKeyringOpenAllowed,
   buildRecipientKeyringFile,
@@ -240,15 +252,15 @@ import {
   listUsers,
   loadKeyring,
   updateKeyringIdentity
-} from "./chunk-ZTYG36DH.js";
+} from "./chunk-G56KBWFY.js";
 import {
   persistDirectoryConfig,
   readDirectoryConfig
-} from "./chunk-26W5VETY.js";
+} from "./chunk-KG7TZKZG.js";
 import {
   NO_BROKER,
   buildCredentialBrokerHandle
-} from "./chunk-4A4TYISP.js";
+} from "./chunk-JBDFMYKQ.js";
 import {
   NO_SESSION
 } from "./chunk-VKQCVU2Z.js";
@@ -257,16 +269,16 @@ import {
 } from "./chunk-4AOERLTV.js";
 import {
   NO_HISTORY
-} from "./chunk-U6GCYG2T.js";
+} from "./chunk-X2DLENDQ.js";
 import {
   sha256Hex
-} from "./chunk-WLFABTZ6.js";
+} from "./chunk-BOET4NA4.js";
 import {
   assertCutoverTierSafe,
   assertTierWritable,
   dekKey,
   liveRecordIsElevated
-} from "./chunk-POS53FG6.js";
+} from "./chunk-JMGDHKQF.js";
 import {
   NO_VAULT_HEAD
 } from "./chunk-HK67PX4J.js";
@@ -278,7 +290,7 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-EO2KGKEJ.js";
+} from "./chunk-7V4TP3AF.js";
 import {
   RecordCodec,
   SEALED_CEK_NS,
@@ -294,20 +306,20 @@ import {
   rewrapBodyToDek,
   validateSchemaInput,
   verifyRecordIdentity
-} from "./chunk-BYBB4ABD.js";
+} from "./chunk-77K4PG6P.js";
 import {
   buildDeleteMarker,
   buildRecordEnvelope,
   buildTombstone,
   isDeleteMarker,
   isTombstone
-} from "./chunk-QU3YUP2X.js";
+} from "./chunk-SZJ3DLZA.js";
 import {
   encrypt
-} from "./chunk-W5LHQXZU.js";
+} from "./chunk-SL3JAAKN.js";
 import {
   SealedHandle
-} from "./chunk-GU3LQYW2.js";
+} from "./chunk-7MG7SJT7.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -320,7 +332,6 @@ import {
   EchoCeremonyRequiredError,
   ElevationExpiredError,
   ExportCapabilityError,
-  FieldNotQueryableError,
   ForgetStrategyNotConfiguredError,
   ImportCapabilityError,
   IndexWriteFailureError,
@@ -347,10 +358,9 @@ import {
   USER_ENVELOPE_COLLECTION,
   UniqueConstraintError,
   UnsupportedIndexOptionError,
-  UnsupportedTierCompositionError,
   ValidationError,
   isConflictError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-7O3Y4PPD.js";
 
 // src/kernel/merge-authority.ts
 function buildMergeAuthority(keyring) {
@@ -530,7 +540,7 @@ function validateSecretModeOptions(options) {
 }
 async function resolveEffectiveSecret(options, store, vault) {
   if (options.secretMode === "managed") {
-    const { resolveManagedSecret } = await import("./managed-secret-CXALLEUB.js");
+    const { resolveManagedSecret } = await import("./managed-secret-PQYKSR6T.js");
     return resolveManagedSecret(store, vault, options.sealingKey);
   }
   return options.secret;
@@ -548,7 +558,7 @@ function ownerKeyringOptions(options, secret) {
 
 // src/port/by/default-provider.ts
 async function createDefaultMesh(store) {
-  const { StoreMesh } = await import("./store-coordination-provider-OLPNRMFO.js");
+  const { StoreMesh } = await import("./store-coordination-provider-MEQ2MJQG.js");
   return new StoreMesh(store);
 }
 
@@ -603,370 +613,6 @@ function populateCollectionRegistries(r, collectionName, options, effectiveViaFi
   }
 }
 
-// src/kernel/via/pipeline.ts
-var ViaPipeline = class _ViaPipeline {
-  constructor(bindings, taint) {
-    this.bindings = bindings;
-    this.taint = taint;
-    const moneyVias = bindings.filter((b) => b.brand === "money");
-    const computedVias = bindings.filter((b) => b.brand === "computed");
-    const restBindings = bindings.filter((b) => b.brand !== "money" && b.brand !== "computed");
-    this._presentOrder = [...moneyVias, ...computedVias, ...restBindings];
-    this._presentLateBoundary = moneyVias.length + computedVias.length;
-  }
-  bindings;
-  taint;
-  /**
-   * Present-phase-ONLY order (#665, corrected under #665 review) — a stable
-   * THREE-WAY partition of `bindings` computed once here at construction:
-   * every `'money'`-brand binding first (existing relative order), then
-   * every `'computed'`-brand binding (existing relative order), then
-   * everything else (existing relative order). `present()` folds over this
-   * instead of `bindings` so a `mode: 'virtual'` computed field's value
-   * exists before i18n/lookup's dressing `present()` hooks run on it
-   * (today's `compileVias` order is money→i18n→lookup→classified→
-   * blob→computed, `collection-config.ts:554`, so dressing unconditionally
-   * ran BEFORE the value it dresses existed). This reorder is binding-level,
-   * not conditioned on any particular field composition — it applies to
-   * EVERY collection that compiles a `'computed'` binding at all, not only
-   * ones stacking a dresser on the SAME field as a computed one. EVERY other
-   * phase (`ingest`/`encodeWrite`/`encodeAtRest`/`enforceWrite`/etc.) keeps
-   * folding over `bindings` unchanged — those write/query phases need
-   * money-first (`_applyMoneyFields` PREPENDS money, `_applyClassifiedFields`
-   * APPENDS classified to preserve it, `kernel/collection.ts:1275-1284,1364-
-   * 1368`).
-   *
-   * Money is deliberately carved OUT of the generic "everything else" slice
-   * and kept FIRST — the original two-way `[computed..., rest...]` partition
-   * regressed money's composed-field behavior from a benign missing-dressing
-   * gap into VALUE CORRUPTION: money's `present()` DECODES its input as a
-   * STORED SCALED-INT (and derives `<field>Formatted` from it) — it is not a
-   * pure dressing CONSUMER like i18n/lookup, which only ADD a `<field>Label`
-   * key and never rewrite the field's own value. Running money AFTER
-   * computed on a field composing `computed(virtual)` + `money(...)` on
-   * ITSELF means money's decode sees the virtual field's raw MAJOR-unit
-   * output (e.g. `21`) and misreads it as a scaled-int, producing a
-   * corrupted value (`'0.21'`) instead of the pre-#665 result (the raw `21`
-   * surviving untouched, with no `Formatted` key added — a benign
-   * missing-dressing gap, not a wrong value). Money-first restores money's
-   * exact pre-#665 present position — byte-identical money behavior; the
-   * materialized composition pins from the #631 work and the money suites
-   * all ran under money-first. i18n/lookup are genuine dressing consumers
-   * (they only ADD, never rewrite), so they stay after computed, which is
-   * the fix #665 intended. A `'taint'` binding (appended LAST by
-   * `via/graph-wiring.ts#applyTaintOverlay`) stays last here too (it's
-   * neither money nor computed, so it lands at the tail of the "everything
-   * else" slice), preserving its "runs after computed, redacts tainted
-   * virtual output" contract (`via/taint-binding.ts`'s `taintBinding` doc
-   * comment).
-   *
-   * Money-dressing a virtual computed field's OWN output (the composed
-   * `computed(virtual) + money` case) is NOT resolved by this partition
-   * alone — #669 resolves it with a separate mid-fold hook instead:
-   * `NoydbVia.presentLate` runs after every binding's `present()` in this
-   * money+computed segment, before the "everything else" segment below, so
-   * money can quantize/reinterpret a virtual field's fresh MAJOR-UNITS
-   * output as if it were a stored value, without perturbing this ordering
-   * or the #665 invariant above it (`_presentLateBoundary` below marks
-   * exactly where that mid-fold point sits within `_presentOrder`).
-   */
-  _presentOrder;
-  /** #669 — index into `_presentOrder` where the money+computed segment ends and the
-   *  "everything else" segment begins (`moneyVias.length + computedVias.length`);
-   *  `present()` runs every binding's `presentLate` at exactly this boundary. */
-  _presentLateBoundary;
-  /** undefined when there is nothing to enforce — the zero-via fast path is
-   *  `this.via === undefined` (#553: keeps an all-plain collection sync). A
-   *  `'*'`-defaulted output collection (#642) counts as "something to enforce"
-   *  even with zero field-specific postures and zero bindings. */
-  static build(bindings, taint) {
-    if (bindings.length === 0 && (!taint || taint.postures.size === 0 && taint.defaultPosture === void 0)) return void 0;
-    return new _ViaPipeline(bindings, taint);
-  }
-  /** Refuse a write before crypto runs: awaits each binding's `enforceWrite` in order — first throw wins. */
-  async enforceWrite(record, ctx) {
-    for (const b of this.bindings) if (b.enforceWrite) await b.enforceWrite(record, ctx);
-  }
-  ingest(record) {
-    let r = record;
-    for (const b of this.bindings) if (b.ingest) r = b.ingest(r);
-    return r;
-  }
-  canonicalizeStored(record) {
-    let r = record;
-    for (const b of this.bindings) if (b.canonicalizeStored) r = b.canonicalizeStored(r);
-    return r;
-  }
-  async encodeWrite(record, ctx) {
-    let r = record;
-    for (const b of this.bindings) if (b.encodeWrite) r = await b.encodeWrite(r, ctx);
-    return r;
-  }
-  /**
-   * Final write-pipeline stage: folds each binding's `encodeAtRest` in
-   * order, threading the record and accumulating the sealed-slot map. A
-   * field belongs to exactly one via feature — two bindings sealing the
-   * same field is a brand-keyed collision and throws.
-   */
-  async encodeAtRest(record, crypto) {
-    let r = record;
-    let sealed;
-    const sealedBy = /* @__PURE__ */ new Map();
-    for (const b of this.bindings) {
-      if (!b.encodeAtRest) continue;
-      const result = await b.encodeAtRest(r, crypto);
-      r = result.record;
-      if (!result.sealed) continue;
-      for (const [field, ref2] of Object.entries(result.sealed)) {
-        const priorBrand = sealedBy.get(field);
-        if (priorBrand !== void 0) {
-          throw new ValidationError(
-            `via encodeAtRest: field "${field}" sealed by binding "${priorBrand}" is also sealed by binding "${b.brand}"`
-          );
-        }
-        sealedBy.set(field, b.brand);
-        sealed ??= {};
-        sealed[field] = ref2;
-      }
-    }
-    return sealed ? { record: r, sealed } : { record: r };
-  }
-  /** First read-pipeline stage: folds each binding's `decodeAtRest` in order. */
-  async decodeAtRest(record, sealed, crypto, opts) {
-    let r = record;
-    for (const b of this.bindings) if (b.decodeAtRest) r = await b.decodeAtRest(r, sealed, crypto, opts);
-    return r;
-  }
-  async present(record, ctx) {
-    let r = record;
-    for (let i = 0; i < this._presentLateBoundary; i++) {
-      const b = this._presentOrder[i];
-      if (b.present) r = await b.present(r, ctx);
-    }
-    for (const b of this.bindings) if (b.presentLate) r = await b.presentLate(r, ctx);
-    for (let i = this._presentLateBoundary; i < this._presentOrder.length; i++) {
-      const b = this._presentOrder[i];
-      if (b.present) r = await b.present(r, ctx);
-    }
-    return r;
-  }
-  buildClause(field, op, value) {
-    for (const b of this.bindings) {
-      const payload = b.buildClause?.(field, op, value);
-      if (payload !== void 0) return { brand: b.brand, payload };
-    }
-    return void 0;
-  }
-  evaluateClause(clause, actual, op) {
-    const b = this.bindings.find((x) => x.brand === clause.brand);
-    return b?.evaluateClause ? b.evaluateClause(actual, op, clause.payload) : false;
-  }
-  /**
-   * Resolve a `buildClause` payload to an index-probe operand (#625) —
-   * mirrors `evaluateClause`'s brand dispatch. `undefined` (a binding
-   * with no `indexProbe`, or one that declines to probe this op/payload)
-   * means the caller (`candidateRecords()`) must fall back to a scan.
-   */
-  // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents
-  indexProbe(clause, op) {
-    const b = this.bindings.find((x) => x.brand === clause.brand);
-    return b?.indexProbe ? b.indexProbe(op, clause.payload) : void 0;
-  }
-  /**
-   * Resolve a raw STORED field value to its canonical eager-index bucket
-   * key (#672) — folds every binding's `canonicalizeIndexKey`, first
-   * non-undefined wins (same fold discipline as `buildClause`). `undefined`
-   * means no binding claims `field` (or the value can't be canonicalized)
-   * — the caller buckets the raw stringified value, unchanged from before
-   * this hook existed.
-   */
-  canonicalizeIndexKey(field, rawValue) {
-    for (const b of this.bindings) {
-      const key = b.canonicalizeIndexKey?.(field, rawValue);
-      if (key !== void 0) return key;
-    }
-    return void 0;
-  }
-  decodeResults(record) {
-    let r = record;
-    for (const b of this.bindings) if (b.decodeResults) r = b.decodeResults(r);
-    return r;
-  }
-  /** undefined = no binding covers the field → caller falls back to generic compare. */
-  compareForOrder(field, a, b) {
-    for (const bind of this.bindings) {
-      const c = bind.compareForOrder?.(field, a, b);
-      if (c !== void 0) return c;
-    }
-    return void 0;
-  }
-  /** undefined = no binding resolves an order-sort label for `key` at `field`/`locale` (#650 Task 7 —
-   *  the `orderBy(..., {by:'label'})` per-call-locale channel `compareForOrder` above can't serve). */
-  resolveOrderLabel(field, key, locale) {
-    for (const bind of this.bindings) {
-      const label = bind.resolveOrderLabel?.(field, key, locale);
-      if (label !== void 0) return label;
-    }
-    return void 0;
-  }
-  /**
-   * Which posture governs `field`, if any binding covers it — `undefined`
-   * means no binding declares `field` (the generic, non-via query path
-   * applies). #629 Task 8's posture consumer: `.where()`/`.orderBy()`
-   * consult this before building/evaluating a clause, refusing fields whose
-   * posture is `queryable: 'none'` (e.g. blob); every other posture
-   * ('det-exact'/'ordered'/'full') is left to the existing per-binding
-   * buildClause/evaluateClause/compareForOrder machinery, unchanged.
-   *
-   * #638 Task 3: the graph-computed taint overlay is consulted FIRST — a
-   * derived field's assigned (most-restrictive-of-sources) posture wins over
-   * whatever a binding would otherwise report for that field name (no
-   * binding covers a computed/derived field today, so this never actually
-   * shadows one — see `via/taint-binding.ts`'s `taintBinding.covers`, which
-   * only claims the sealed subset for `encodeAtRest`/`decodeAtRest`, not for
-   * this lookup).
-   */
-  postureFor(field) {
-    const t = this.taint?.postures.get(field);
-    if (t) return t;
-    for (const b of this.bindings) {
-      if (b.covers?.(field)) return b.posture;
-    }
-    return this.taint?.defaultPosture;
-  }
-  /**
-   * Refuse any field-based reducer over a `queryable: 'none'` field (blob) —
-   * metadata-only: walks each reducer's `.field` and checks posture, no
-   * rewriting. Reducers with no `.field` (e.g. `count()`) are skipped.
-   *
-   * Shared by `wrapReducers` below (which ALSO applies each binding's
-   * rewrite, e.g. money's exact-BigInt reducer swap) and by
-   * `ScanBuilder.aggregate()` (#629 Task 8 review fix wave 1), which must
-   * call THIS, not `wrapReducers` — wiring full `wrapReducers` into
-   * `ScanBuilder.aggregate()` would newly activate money/i18n reducer
-   * wrapping on a path that has never run it, a parity-breaking behavior
-   * change for existing brands.
-   */
-  refuseUnqueryableReducers(spec) {
-    for (const reducer of Object.values(spec)) {
-      const field = reducer?.field;
-      if (field !== void 0 && this.postureFor(field)?.queryable === "none") {
-        throw new FieldNotQueryableError(field);
-      }
-    }
-  }
-  /**
-   * Rewrite an aggregate spec (money exact reducers), then refuse any
-   * field-based reducer over a `queryable: 'none'` field (blob) — the same
-   * posture gate `.where()`/`.orderBy()` apply, extended to `.aggregate()`
-   * (both the bare-spec and builder forms funnel through here).
-   */
-  wrapReducers(spec) {
-    this.refuseUnqueryableReducers(spec);
-    let s = spec;
-    for (const b of this.bindings) if (b.wrapReducers) s = b.wrapReducers(s);
-    return s;
-  }
-  /**
-   * Deliberate export-layer redaction (#629 Task 9's posture consumer):
-   * for every OWN field the decoded record carries, if the covering
-   * binding's posture declares `exportable: false` (classified today;
-   * money/i18n/blob are all `true`), replace the value with
-   * {@link EXPORT_REDACTION_MARKER} — the same `'[sealed]'` string
-   * `SealedHandle.toJSON()` (`kernel/types.ts`) already emits, so this is
-   * byte-parity with today's accidental redaction, now independent of the
-   * field's runtime shape. `SealedHandle.toJSON()` stays untouched as
-   * defense-in-depth: a record read via `collection.get()` and
-   * JSON.stringify'd outside `exportStream()` still gets the accident's
-   * redaction on its own. Never mutates the input; returns a new object
-   * only when a field was actually redacted.
-   */
-  redactForExport(record) {
-    let out;
-    for (const field of Object.keys(record)) {
-      if (this.postureFor(field)?.exportable === false) {
-        out ??= { ...record };
-        out[field] = EXPORT_REDACTION_MARKER;
-      }
-    }
-    return out ?? record;
-  }
-  /**
-   * Shared fold over a subset of `this.bindings`: runs each binding's
-   * `erase`, concatenating shredded/retainedShared counts and residue.
-   * Consults `posture.forgettable` (#629 Task 10) — a binding declaring
-   * `forgettable: false` is skipped even if it defines `erase` (none does
-   * today; a future non-forgettable binding is supported without a brand check).
-   */
-  async foldErase(ctx, bindings) {
-    let shredded = 0;
-    let retainedShared = 0;
-    const residue = [];
-    for (const b of bindings) {
-      if (!b.erase || b.posture.forgettable === false) continue;
-      const report = await b.erase(ctx);
-      shredded += report.shredded;
-      retainedShared += report.retainedShared ?? 0;
-      residue.push(...report.residue);
-    }
-    return retainedShared > 0 ? { shredded, residue, retainedShared } : { shredded, residue };
-  }
-  /** `forget()`'s per-ref erasure door: folds every binding's `erase`. */
-  async erase(ctx) {
-    return this.foldErase(ctx, this.bindings);
-  }
-  /**
-   * `forget()`'s SEALED-posture-only erase fold (#629 Task 10, `Collection._onViaErase`'s
-   * one caller) — classified today; metadata-filtered on
-   * `posture.encryptedAtRest`, not brand-checked. `undefined` when no
-   * sealed-posture binding is compiled in — `vault.ts` then falls back to
-   * its own bare-`sensitive` classification, which no via binding covers.
-   */
-  async eraseSealed(ctx) {
-    const sealed = this.bindings.filter((b) => b.posture.encryptedAtRest === "sealed");
-    return sealed.length === 0 ? void 0 : this.foldErase(ctx, sealed);
-  }
-  /** True iff any binding implements decodeResults (query fast-path gating). */
-  get hasResultDecode() {
-    return this.bindings.some((b) => b.decodeResults !== void 0);
-  }
-  /**
-   * True iff any binding declares an at-rest hook (`encodeAtRest`/
-   * `decodeAtRest`) — the codec boundary's async-stack gate (#629 Task 3
-   * consults this to choose between the hook path and today's inline
-   * sealed-slot path; a stack with only sync hooks, e.g. money-only, stays
-   * `false`).
-   */
-  get hasAtRestHooks() {
-    return this.bindings.some((b) => b.encodeAtRest !== void 0 || b.decodeAtRest !== void 0);
-  }
-  /**
-   * Fold every binding's `describeFragment()` into one `brand -> fragment`
-   * map (#650 Task 7 — the first-ever consumer; `describeFragment` was
-   * declared at `via/index.ts:136` since #623 with zero callers until this task).
-   * `undefined` when no compiled binding implements it. Consumed by
-   * `Collection.describe()`/`describeAsync()`, threaded to `buildDescription`
-   * as `BuildDescriptionInput.viaFragments`.
-   */
-  describeFragments() {
-    let out;
-    for (const b of this.bindings) {
-      const f = b.describeFragment?.();
-      if (f !== void 0) {
-        out ??= {};
-        out[b.brand] = f;
-      }
-    }
-    return out;
-  }
-};
-var EXPORT_REDACTION_MARKER = "[sealed]";
-function exportRedact(coll, record) {
-  if (record === null || typeof record !== "object") return record;
-  const via2 = coll._via;
-  return via2 ? via2.redactForExport(record) : record;
-}
-
 // src/kernel/lazy-count.ts
 var COUNT_PAGE_SIZE = 1e3;
 function isLive(env, storeCiphertext) {
@@ -1575,346 +1221,6 @@ function buildUniqueConstraintSet(collectionName, indexes, mode) {
   return new UniqueConstraintSet(collectionName, uniqueDefs);
 }
 
-// src/with-shape/introspection/field-meta.ts
-var FieldMetaUnknownFieldError = class extends Error {
-  constructor(collection, key) {
-    super(`fieldMeta for collection "${collection}" references unknown field "${key}". Declare it in the schema/config or remove the fieldMeta entry.`);
-    this.collection = collection;
-    this.key = key;
-    this.name = "FieldMetaUnknownFieldError";
-  }
-  collection;
-  key;
-};
-function validateFieldMetaKeys(collection, fieldMeta, knownFields) {
-  for (const key of Object.keys(fieldMeta)) {
-    if (!knownFields.has(key)) throw new FieldMetaUnknownFieldError(collection, key);
-  }
-}
-function humanizeFieldKey(key) {
-  return key.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").trim().split(/\s+/).map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
-}
-function resolveFieldMeta(key, inputs) {
-  const { channel, zodMeta, inferred } = inputs;
-  const pick = (k) => channel?.[k] ?? zodMeta?.[k] ?? inferred?.[k];
-  const description = pick("description");
-  const semanticType = pick("semanticType");
-  const unit = pick("unit");
-  const sensitivity = pick("sensitivity");
-  const aggregate = pick("aggregate");
-  const aliases = pick("aliases");
-  const displayFor = pick("displayFor");
-  const widget = pick("widget");
-  const group = pick("group");
-  const order = pick("order");
-  return {
-    label: pick("label") ?? humanizeFieldKey(key),
-    ...description !== void 0 ? { description } : {},
-    ...semanticType !== void 0 ? { semanticType } : {},
-    ...unit !== void 0 ? { unit } : {},
-    ...sensitivity !== void 0 ? { sensitivity } : {},
-    ...aggregate !== void 0 ? { aggregate } : {},
-    ...aliases !== void 0 ? { aliases } : {},
-    ...displayFor !== void 0 ? { displayFor } : {},
-    ...widget !== void 0 ? { widget } : {},
-    ...group !== void 0 ? { group } : {},
-    ...order !== void 0 ? { order } : {}
-  };
-}
-
-// src/with-shape/introspection/describe.ts
-var ZOD_META_KEYS = /* @__PURE__ */ new Set([
-  "label",
-  "description",
-  "unit",
-  "semanticType",
-  "sensitivity",
-  "aggregate",
-  "aliases",
-  "displayFor",
-  "group",
-  "order"
-]);
-async function deriveZodFields(schema) {
-  const envelope = await derivePersistedSchema(schema);
-  if (!envelope.jsonSchema) return {};
-  const isZod4 = isZod4Schema(schema);
-  const jsonSchema = envelope.jsonSchema;
-  const fieldDescriptors = jsonSchemaToFields(jsonSchema, "live-validator");
-  const propertiesRaw = jsonSchema["properties"];
-  const result = {};
-  for (const [key, descriptor] of Object.entries(fieldDescriptors)) {
-    let meta;
-    if (isZod4 && propertiesRaw) {
-      const prop = propertiesRaw[key];
-      if (prop) {
-        const extracted = {};
-        let hasAny = false;
-        for (const mk of ZOD_META_KEYS) {
-          if (mk in prop) {
-            extracted[mk] = prop[mk];
-            hasAny = true;
-          }
-        }
-        if (hasAny) meta = extracted;
-      }
-    }
-    result[key] = {
-      type: descriptor.type,
-      optional: descriptor.optional === true,
-      ...descriptor.constraints !== void 0 ? { constraints: descriptor.constraints } : {},
-      ...meta !== void 0 ? { meta } : {}
-    };
-  }
-  return result;
-}
-async function resolveDescribeFieldIds(store, vaultName, collectionName, getDEK) {
-  let dek;
-  try {
-    dek = await getDEK(collectionName);
-  } catch {
-    return {};
-  }
-  const persisted = await loadPersistedSchema(store, vaultName, collectionName, dek);
-  return persisted?.fieldIds !== void 0 ? { fieldIds: persisted.fieldIds } : {};
-}
-function deriveWidget(opts) {
-  if (opts.resolvedWidget !== void 0) return opts.resolvedWidget;
-  switch (opts.semanticType) {
-    case "date":
-    case "datetime":
-      return "date";
-    case "currency":
-      return "money";
-    case "entity":
-      return "ref-select";
-    case "url":
-      return "url";
-    case "email":
-      return "email";
-    case "percent":
-      return "number";
-  }
-  if (opts.dict !== void 0 || opts.lookup !== void 0) return "select";
-  if (opts.blob !== void 0) return "file";
-  if (opts.type === "boolean") return "checkbox";
-  if (opts.type === "number") return "number";
-  return "text";
-}
-function buildDescription(input) {
-  const { collection, fieldMeta, moneyFields, dictKeyFields, lookupFields, computed, refs, zodFields, dictLabels, meta, i18nFields, classified, taint, fieldIds } = input;
-  const lookupFragments = input.viaFragments?.["lookup"]?.lookupFields;
-  const blobFragments = input.viaFragments?.["blob"]?.blobFields;
-  if (zodFields !== void 0 && Object.keys(zodFields).length > 0 && fieldMeta !== void 0) {
-    const knownFields = /* @__PURE__ */ new Set([
-      ...Object.keys(moneyFields ?? {}),
-      ...Object.keys(dictKeyFields ?? {}),
-      ...Object.keys(refs),
-      ...Object.keys(computed ?? {}),
-      ...Object.keys(zodFields),
-      ...Object.keys(i18nFields ?? {}),
-      ...Object.keys(lookupFields ?? {}),
-      ...Object.keys(blobFragments ?? {})
-    ]);
-    validateFieldMetaKeys(collection, fieldMeta, knownFields);
-  }
-  const allKeys = /* @__PURE__ */ new Set([
-    ...Object.keys(moneyFields ?? {}),
-    ...Object.keys(dictKeyFields ?? {}),
-    ...Object.keys(lookupFields ?? {}),
-    ...Object.keys(refs),
-    ...Object.keys(computed ?? {}),
-    ...Object.keys(fieldMeta ?? {}),
-    ...Object.keys(zodFields ?? {}),
-    ...Object.keys(i18nFields ?? {}),
-    ...Object.keys(classified ?? {}),
-    ...Object.keys(blobFragments ?? {})
-  ]);
-  const fields = [];
-  for (const key of [...allKeys].sort()) {
-    const zod = zodFields?.[key];
-    const money = moneyFields?.[key];
-    const dict = dictKeyFields?.[key];
-    const lookupDesc = lookupFields?.[key];
-    const refDesc = refs[key];
-    const isComputed = computed !== void 0 && key in computed;
-    const i18nDesc = i18nFields?.[key];
-    const cls = classified?.[key];
-    const blobFragmentEntry = blobFragments?.[key];
-    const taintPosture = taint?.postures.get(key);
-    let type = zod?.type ?? "unknown";
-    const inferred = {};
-    let moneyBlock;
-    let dictBlock;
-    let refBlock;
-    let lookupBlock;
-    let blobBlock;
-    if (money) {
-      type = "number";
-      inferred.semanticType = "currency";
-      inferred.aggregate = "sum";
-      const currency = money.soleCurrency();
-      const scale = currency !== void 0 ? money.scaleFor(currency) : void 0;
-      moneyBlock = {
-        mode: money.mode,
-        ...currency !== void 0 ? { currency } : {},
-        ...scale !== void 0 ? { scale } : {},
-        ...money.rounding !== void 0 ? { rounding: money.rounding } : {}
-      };
-    } else if (refDesc) {
-      type = refDesc.isArray ? "array" : "string";
-      inferred.semanticType = "entity";
-      refBlock = {
-        target: refDesc.target,
-        mode: refDesc.mode,
-        ...refDesc.isArray ? { isArray: true } : {}
-      };
-    } else if (dict) {
-      type = "enum";
-      if (isStaticDictDescriptor(dict)) {
-        const displayLocale = dict.displayLocale;
-        const values = dict.keys.map((k) => {
-          const localeMap = dict.table[k];
-          const label = displayLocale !== void 0 ? localeMap?.[displayLocale] ?? void 0 : void 0;
-          return label !== void 0 ? { value: k, label } : { value: k };
-        });
-        dictBlock = { name: dict.name, static: true, values };
-      } else {
-        const labelMap = dictLabels?.[dict.name];
-        const labelMapHasEntries = labelMap !== void 0 && Object.keys(labelMap).length > 0;
-        if (labelMapHasEntries) {
-          const values = Object.entries(labelMap).map(([value, label]) => ({ value, label }));
-          dictBlock = { name: dict.name, static: false, values };
-        } else if (dict.keys !== void 0) {
-          const values = dict.keys.map((k) => {
-            const label = dict.labels?.[k];
-            return label !== void 0 ? { value: k, label } : { value: k };
-          });
-          dictBlock = { name: dict.name, static: false, values };
-        } else {
-          dictBlock = { name: dict.name, static: false };
-        }
-      }
-    } else if (lookupDesc) {
-      type = "enum";
-      const lookupLabelMap = dictLabels?.[lookupDesc.dimension];
-      const lookupLabelMapHasEntries = lookupLabelMap !== void 0 && Object.keys(lookupLabelMap).length > 0;
-      if (lookupDesc.table !== void 0) {
-        const displayLocale = lookupDesc.displayLocale;
-        const table = lookupDesc.table;
-        const values = (lookupDesc.keys ?? Object.keys(table)).map((k) => {
-          const localeMap = table[k];
-          const label = displayLocale !== void 0 ? localeMap?.[displayLocale] ?? void 0 : void 0;
-          return label !== void 0 ? { value: k, label } : { value: k };
-        });
-        dictBlock = { name: lookupDesc.dimension, static: true, values };
-      } else if (lookupLabelMapHasEntries) {
-        const values = Object.entries(lookupLabelMap).map(([value, label]) => ({ value, label }));
-        dictBlock = { name: lookupDesc.dimension, static: false, values };
-      } else if (lookupDesc.keys !== void 0) {
-        const values = lookupDesc.keys.map((k) => {
-          const label = lookupDesc.labels?.[k];
-          return label !== void 0 ? { value: k, label } : { value: k };
-        });
-        dictBlock = { name: lookupDesc.dimension, static: false, values };
-      } else {
-        dictBlock = { name: lookupDesc.dimension, static: false };
-      }
-    } else if (i18nDesc) {
-      type = "string";
-    } else if (isComputed) {
-    } else if (blobFragmentEntry !== void 0) {
-      type = "blob";
-      blobBlock = { ...blobFragmentEntry, queryable: "none" };
-    }
-    const lookupFragmentEntry = lookupFragments?.[key];
-    if (lookupFragmentEntry !== void 0) {
-      lookupBlock = {
-        ...lookupFragmentEntry.dimension !== void 0 ? { dimension: lookupFragmentEntry.dimension } : {},
-        backing: lookupFragmentEntry.backing,
-        vocabulary: lookupFragmentEntry.vocabulary,
-        key: lookupFragmentEntry.key,
-        onDelete: lookupFragmentEntry.onDelete,
-        ...lookupFragmentEntry.altKeys !== void 0 ? { altKeys: lookupFragmentEntry.altKeys } : {},
-        ...lookupFragmentEntry.present !== void 0 ? { present: lookupFragmentEntry.present } : {},
-        ...lookupFragmentEntry.sortBy !== void 0 ? { sortBy: lookupFragmentEntry.sortBy } : {},
-        ...lookupFragmentEntry.keys !== void 0 ? { keys: lookupFragmentEntry.keys } : {}
-      };
-    }
-    if (cls !== void 0) inferred.sensitivity = cls.sensitivity;
-    const channelEntry = fieldMeta?.[key];
-    const zodMeta = zod?.meta;
-    const resolved = resolveFieldMeta(key, {
-      ...channelEntry !== void 0 ? { channel: channelEntry } : {},
-      ...zodMeta !== void 0 ? { zodMeta } : {},
-      inferred
-    });
-    let i18nBlock;
-    if (i18nDesc !== void 0) {
-      const locales = i18nDesc.options.languages;
-      const densify = i18nDesc.options.densifyOnWrite;
-      i18nBlock = {
-        ...locales !== void 0 ? { locales } : {},
-        ...densify !== void 0 ? { densify } : {}
-      };
-    }
-    const widget = deriveWidget({
-      type,
-      ...resolved.semanticType !== void 0 ? { semanticType: resolved.semanticType } : {},
-      ...dictBlock !== void 0 ? { dict: dictBlock } : {},
-      ...lookupBlock !== void 0 ? { lookup: lookupBlock } : {},
-      ...blobBlock !== void 0 ? { blob: blobBlock } : {},
-      ...resolved.widget !== void 0 ? { resolvedWidget: resolved.widget } : {}
-    });
-    const editable = !isComputed && key !== "id" && blobBlock === void 0;
-    const field = {
-      key,
-      ...fieldIds?.[key] !== void 0 ? { id: fieldIds[key] } : {},
-      type,
-      optional: zod?.optional ?? false,
-      ...zod?.constraints !== void 0 ? { constraints: zod.constraints } : {},
-      label: resolved.label,
-      ...resolved.description !== void 0 ? { description: resolved.description } : {},
-      ...resolved.group !== void 0 ? { group: resolved.group } : {},
-      ...resolved.order !== void 0 ? { order: resolved.order } : {},
-      ...resolved.semanticType !== void 0 ? { semanticType: resolved.semanticType } : {},
-      ...resolved.unit !== void 0 ? { unit: resolved.unit } : {},
-      ...resolved.sensitivity !== void 0 ? { sensitivity: resolved.sensitivity } : {},
-      ...resolved.aggregate !== void 0 ? { aggregate: resolved.aggregate } : {},
-      ...resolved.aliases !== void 0 ? { aliases: resolved.aliases } : {},
-      ...resolved.displayFor !== void 0 ? { displayFor: resolved.displayFor } : {},
-      ...refBlock !== void 0 ? { ref: refBlock } : {},
-      ...moneyBlock !== void 0 ? { money: moneyBlock } : {},
-      ...dictBlock !== void 0 ? { dict: dictBlock } : {},
-      ...lookupBlock !== void 0 ? { lookup: lookupBlock } : {},
-      ...blobBlock !== void 0 ? { blob: blobBlock } : {},
-      ...isComputed ? { computed: true } : {},
-      ...i18nBlock !== void 0 ? { i18n: i18nBlock } : {},
-      widget,
-      editable,
-      ...cls !== void 0 ? {
-        classified: {
-          preset: cls.preset,
-          storage: cls.storage,
-          list: cls.list.kind === "omit" ? "omit" : cls.list.kind === "mask" ? { mask: cls.list.pattern } : { rider: cls.list.rider },
-          ...cls.equatable === true ? { equatable: true } : {}
-        }
-      } : {},
-      ...taintPosture !== void 0 ? { taint: { posture: taintPosture, forcedBy: taint?.provenance?.get(key) ?? [] } } : {}
-    };
-    fields.push(field);
-  }
-  const collectionMeta = {
-    ...meta,
-    label: meta?.label ?? humanizeFieldKey(collection)
-  };
-  return {
-    collection,
-    fields,
-    meta: collectionMeta
-  };
-}
-
 // src/kernel/put-many-atomic.ts
 var toRevertLeg = ({ op, priorEnvelope }) => ({
   vaultName: op.vaultName,
@@ -2018,471 +1324,8 @@ async function commitSequentially(ctx, entries, priors) {
   }
 }
 
-// src/kernel/via/compose.ts
-function via(...descriptors) {
-  if (descriptors.length === 0) {
-    throw new ValidationError("via(): at least one descriptor is required, e.g. via(money({ currency: 'EUR' }))");
-  }
-  return { _noydbVia: true, descriptors };
-}
-function isViaFieldSpec(x) {
-  return typeof x === "object" && x !== null && x._noydbVia === true;
-}
-function mergeViaFields(sources) {
-  for (const field of Object.keys(sources.dictKeyFields ?? {})) {
-    if (sources.lookupFields && field in sources.lookupFields) {
-      throw new ValidationError(
-        `mergeViaFields(): field "${field}" is declared in both \`dictKeyFields\` and \`lookupFields\` \u2014 declare it in one place only.`
-      );
-    }
-  }
-  if (!sources.viaFields || Object.keys(sources.viaFields).length === 0) {
-    return {
-      moneyFields: sources.moneyFields,
-      i18nFields: sources.i18nFields,
-      dictKeyFields: sources.dictKeyFields,
-      computedFields: void 0,
-      lookupFields: sources.lookupFields
-    };
-  }
-  const sugarFieldNames = /* @__PURE__ */ new Set([
-    ...Object.keys(sources.moneyFields ?? {}),
-    ...Object.keys(sources.i18nFields ?? {}),
-    ...Object.keys(sources.dictKeyFields ?? {}),
-    ...Object.keys(sources.lookupFields ?? {})
-  ]);
-  const viaMoney = {};
-  const viaI18nText = {};
-  const viaDictKey = {};
-  const viaComputed = {};
-  const viaLookup = {};
-  for (const [field, spec] of Object.entries(sources.viaFields)) {
-    if (sugarFieldNames.has(field)) {
-      throw new ValidationError(
-        `via(): field "${field}" is declared via both a sugar key and \`viaFields\` \u2014 declare it in one place only.`
-      );
-    }
-    for (const descriptor of spec.descriptors) {
-      if (descriptor._viaBrand === "money") {
-        viaMoney[field] = descriptor;
-      } else if (descriptor._viaBrand === "i18n") {
-        if (isI18nTextDescriptor(descriptor)) viaI18nText[field] = descriptor;
-        else if (isDictKeyDescriptor(descriptor) || isStaticDictDescriptor(descriptor)) viaDictKey[field] = descriptor;
-      } else if (descriptor._viaBrand === "computed") {
-        viaComputed[field] = descriptor;
-      } else if (descriptor._viaBrand === "lookup" && isLookupDescriptor(descriptor)) {
-        viaLookup[field] = descriptor;
-      } else {
-        throw new ValidationError(`via(): field "${field}" has a descriptor with unrecognized _viaBrand "${descriptor._viaBrand}" \u2014 via() only supports money/i18n/computed/lookup descriptors today.`);
-      }
-    }
-  }
-  return {
-    moneyFields: Object.keys(viaMoney).length > 0 ? { ...sources.moneyFields ?? {}, ...viaMoney } : sources.moneyFields,
-    i18nFields: Object.keys(viaI18nText).length > 0 ? { ...sources.i18nFields ?? {}, ...viaI18nText } : sources.i18nFields,
-    dictKeyFields: Object.keys(viaDictKey).length > 0 ? { ...sources.dictKeyFields ?? {}, ...viaDictKey } : sources.dictKeyFields,
-    computedFields: Object.keys(viaComputed).length > 0 ? viaComputed : void 0,
-    lookupFields: Object.keys(viaLookup).length > 0 ? { ...sources.lookupFields ?? {}, ...viaLookup } : sources.lookupFields
-  };
-}
-var VIA_FIELD_MAP_FAMILY = {
-  moneyFields: "money",
-  i18nFields: "i18n",
-  dictKeyFields: "i18n",
-  lookupFields: "lookup",
-  classifiedFields: "classified",
-  blobFields: "blob",
-  computed: "computed"
-};
-function guardCrossBindingFieldCollisions(fieldMaps, callerPrefix = "compileVias()") {
-  const claimantsByField = /* @__PURE__ */ new Map();
-  for (const [sourceKey, map] of Object.entries(fieldMaps)) {
-    for (const field of Object.keys(map ?? {})) {
-      const claimants = claimantsByField.get(field) ?? /* @__PURE__ */ new Set();
-      claimants.add(sourceKey);
-      claimantsByField.set(field, claimants);
-    }
-  }
-  for (const [field, sourceKeys] of claimantsByField) {
-    const families = new Set([...sourceKeys].map((key) => VIA_FIELD_MAP_FAMILY[key]));
-    if (families.size < 2) continue;
-    if (sourceKeys.size === 2 && families.has("computed")) {
-      const other = [...families].find((f) => f !== "computed");
-      if (other === "money" || other === "i18n" || other === "lookup") continue;
-    }
-    const keys = [...sourceKeys].sort().map((k) => `\`${k}\``);
-    const joined = keys.length === 2 ? keys.join(" and ") : `${keys.slice(0, -1).join(", ")}, and ${keys[keys.length - 1]}`;
-    throw new ValidationError(
-      `${callerPrefix}: field "${field}" is declared in both ${joined} \u2014 a field cannot be claimed by two different via-binding families. Declare it in one place only.`
-    );
-  }
-}
-function guardReconcileCollisions(existingVia, incomingFieldMaps) {
-  guardCrossBindingFieldCollisions(incomingFieldMaps, "guardReconcileCollisions()");
-  if (!existingVia) return;
-  const existingBindings = existingVia.bindings.filter((b) => b.brand !== "taint");
-  for (const [sourceKey, map] of Object.entries(incomingFieldMaps)) {
-    const incomingFamily = VIA_FIELD_MAP_FAMILY[sourceKey];
-    if (incomingFamily === void 0) continue;
-    for (const field of Object.keys(map ?? {})) {
-      const existingFamilies = new Set(
-        existingBindings.filter((b) => b.covers?.(field)).map((b) => b.brand)
-      );
-      for (const existingFamily of existingFamilies) {
-        if (existingFamily === incomingFamily) continue;
-        const isExempt = existingFamily === "computed" && (incomingFamily === "money" || incomingFamily === "i18n" || incomingFamily === "lookup") || incomingFamily === "computed" && (existingFamily === "money" || existingFamily === "i18n" || existingFamily === "lookup");
-        if (isExempt) continue;
-        throw new ValidationError(
-          `vault.collection(): field "${field}" is already bound by the "${existingFamily}" via family on this collection \u2014 an incoming \`${sourceKey}\` declaration cannot claim it for a different family ("${incomingFamily}"). Declare it in one place only.`
-        );
-      }
-    }
-  }
-}
-
-// src/kernel/collection-config.ts
-function computedEntryParts(entry) {
-  if (typeof entry === "function") return { fn: entry, mode: "materialized" };
-  return { fn: entry.fn, ...entry.deps !== void 0 ? { deps: entry.deps } : {}, mode: entry.mode ?? "materialized" };
-}
-function unifyComputedFields(opts, viaComputedFields) {
-  return { ...opts.computed ?? {}, ...viaComputedFields ?? {} };
-}
-function compileVias(opts, classifiedGuardCtx, eraseCfgOut) {
-  const { moneyFields, i18nFields, dictKeyFields, computedFields, lookupFields } = mergeViaFields(opts);
-  const allComputedFields = unifyComputedFields(opts, computedFields);
-  guardCrossBindingFieldCollisions({
-    moneyFields,
-    i18nFields,
-    dictKeyFields,
-    lookupFields,
-    classifiedFields: opts.classifiedFields !== void 0 ? resolveClassifiedFields(opts.name, opts.classifiedFields).byField : void 0,
-    blobFields: opts.blobFields,
-    computed: allComputedFields
-  });
-  const bindings = [];
-  const virtualFields = /* @__PURE__ */ new Map();
-  for (const [field, entry] of Object.entries(allComputedFields)) {
-    const parts = computedEntryParts(entry);
-    if (parts.mode === "virtual") {
-      virtualFields.set(field, { _viaBrand: "computed", fn: parts.fn, mode: "virtual", ...parts.deps !== void 0 ? { deps: parts.deps } : {} });
-    }
-  }
-  if (moneyFields) {
-    const virtualMoney = resolveVirtualMoneyFields(Object.keys(moneyFields), (f) => virtualFields.has(f));
-    bindings.push(viaBinder("money")({ moneyFields, ...virtualMoney.size > 0 ? { virtualMoneyFields: virtualMoney } : {} }));
-  }
-  if (i18nFields || dictKeyFields) {
-    const densify = i18nFields ? Object.fromEntries(
-      Object.entries(i18nFields).filter(([, d]) => d.options.densifyOnWrite === true)
-    ) : {};
-    const i18nDensifyFields = Object.keys(densify).length > 0 ? densify : void 0;
-    bindings.push(viaBinder("i18n")({
-      ...i18nFields !== void 0 ? { i18nFields } : {},
-      ...dictKeyFields !== void 0 ? { dictKeyFields } : {},
-      ...i18nDensifyFields !== void 0 ? { i18nDensifyFields } : {},
-      strategy: opts.strategies.i18n,
-      ...opts.defaultLocale !== void 0 ? { defaultLocale: opts.defaultLocale } : {},
-      ...opts.autoTranslateHook !== void 0 ? { autoTranslateHook: opts.autoTranslateHook } : {},
-      ...opts.dictLabelResolver !== void 0 ? { dictLabelResolver: opts.dictLabelResolver } : {},
-      ...opts.i18nPutValidator !== void 0 ? { i18nPutValidator: opts.i18nPutValidator } : {},
-      collectionName: opts.name
-    }));
-  }
-  if (lookupFields !== void 0) {
-    bindings.push(viaBinder("lookup")({
-      lookupFields,
-      ...opts.lookupLabelResolver !== void 0 ? { lookupLabelResolver: opts.lookupLabelResolver } : {},
-      ...opts.getLookupBacking !== void 0 ? { getLookupBacking: opts.getLookupBacking } : {},
-      ...opts.membership !== void 0 ? { membership: opts.membership } : {},
-      ...opts.getAltIndex !== void 0 ? { getAltIndex: opts.getAltIndex } : {},
-      ...opts.snapshotFor !== void 0 ? { snapshotFor: opts.snapshotFor } : {},
-      collectionName: opts.name
-    }));
-  }
-  if (opts.classifiedFields !== void 0) {
-    const classifiedCfg = {
-      entries: opts.classifiedFields,
-      collectionName: opts.name,
-      guardCtx: classifiedGuardCtx
-    };
-    if (eraseCfgOut) eraseCfgOut.classified = classifiedCfg;
-    bindings.push(viaBinder("classified")(classifiedCfg));
-  }
-  if (opts.blobFields !== void 0) {
-    bindings.push(viaBinder("blob")({
-      fields: opts.blobFields,
-      collectionName: opts.name
-    }));
-  }
-  if (virtualFields.size > 0) {
-    bindings.push(viaBinder("computed")({ virtualFields }));
-  }
-  return bindings;
-}
-function resolveVirtualMoneyFields(moneyFieldNames, isVirtual) {
-  const out = /* @__PURE__ */ new Set();
-  for (const field of moneyFieldNames) if (isVirtual(field)) out.add(field);
-  return out;
-}
-function collectKnownFieldNames(parts) {
-  return /* @__PURE__ */ new Set([
-    ...Object.keys(parts.moneyFields ?? {}),
-    ...Object.keys(parts.i18nFields ?? {}),
-    ...Object.keys(parts.dictKeyFields ?? {}),
-    ...Object.keys(parts.classifiedFields ?? {}),
-    ...Object.keys(parts.computed ?? {}),
-    ...Object.keys(parts.lookupFields ?? {})
-  ]);
-}
-var EMPTY_KNOWN_FIELDS = /* @__PURE__ */ new Set();
-function resolveComputedEdges(collectionName, computed, hasClassifiedFields, knownFields = EMPTY_KNOWN_FIELDS) {
-  if (!computed) return [];
-  const edges = [];
-  for (const [field, entry] of Object.entries(computed)) {
-    const parts = computedEntryParts(entry);
-    const deps = parts.deps;
-    if (deps === void 0) {
-      if (hasClassifiedFields) {
-        throw new ValidationError(
-          `Collection "${collectionName}": computed field "${field}" has no declared \`deps\` and the collection declares classified fields \u2014 an opaque computed function could silently copy a classified field's plaintext into an ordinary, unredacted field. Declare \`deps\` naming the source fields it reads, e.g. computed: { ${field}: { fn, deps: [...] } } or via(computed(fn, { deps: [...] })).`
-        );
-      }
-      continue;
-    }
-    if (deps.length === 0) {
-      throw new ValidationError(`Collection "${collectionName}": computed field "${field}"'s \`deps\` must be non-empty.`);
-    }
-    for (const dep of deps) {
-      if (typeof dep !== "string" || dep.length === 0) {
-        throw new ValidationError(`Collection "${collectionName}": computed field "${field}"'s \`deps\` entries must be non-empty strings.`);
-      }
-      if (hasClassifiedFields && !knownFields.has(dep)) {
-        throw new ValidationError(
-          `Collection "${collectionName}": computed field "${field}"'s \`deps\` entry "${dep}" does not name a declared field, and the collection declares classified fields \u2014 an opaque computed function could silently copy a classified field's plaintext into an ordinary, unredacted field via a mistyped/unknown dep name. Declare \`deps\` naming only known fields (money/i18n/dictKey/classified/computed) \u2014 check "${dep}" for a typo.`
-        );
-      }
-    }
-    edges.push({
-      target: { collection: collectionName, field },
-      sources: deps.map((d) => ({ collection: collectionName, field: d })),
-      grain: parts.mode === "virtual" ? "virtual" : "record"
-    });
-  }
-  return edges;
-}
-function resolveViaDepsEdges(collectionName, bindings, knownFields) {
-  const edges = [];
-  for (const binding of bindings) {
-    if (!binding.deps || binding.deps.length === 0) continue;
-    for (const dep of binding.deps) {
-      if (!knownFields.has(dep)) {
-        throw new ValidationError(
-          `Collection "${collectionName}": via binding "${binding.brand}" deps references undeclared field "${dep}".`
-        );
-      }
-    }
-    const sources = binding.deps.map((d) => ({ collection: collectionName, field: d }));
-    for (const field of knownFields) {
-      if (binding.covers?.(field)) edges.push({ target: { collection: collectionName, field }, sources });
-    }
-  }
-  return edges;
-}
-function resolveCollectionConfig(opts) {
-  if (opts.embeddings && opts.crdt) {
-    throw new Error(
-      `Collection "${opts.name}": embeddings are not supported on CRDT collections (L2). Use a non-CRDT collection for semantic search.`
-    );
-  }
-  if (opts.sensitive && opts.sensitive.length > 0 && opts.crdt) {
-    throw new Error(
-      `Collection "${opts.name}": sensitive (structural group-encryption) is not supported on CRDT collections \u2014 the CRDT write path bypasses per-field sealing, so the fields would be stored in the ordinary encrypted body with no \`_sealed\` slot and no per-field key. Use a non-CRDT collection for sealed fields.`
-    );
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.blobFields !== void 0 && Object.keys(opts.blobFields).length > 0 && opts.perRecordKeys !== true) {
-    throw new UnsupportedTierCompositionError(
-      "blobs",
-      `Collection "${opts.name}": tiered collections that declare blobFields require \`perRecordKeys: true\` \u2014 legacy (non-perRecordKeys) blobs have no per-blob content CEK and cannot be tier-isolated on elevate/demote.`
-    );
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.blobFields !== void 0) {
-    for (const [field, policy] of Object.entries(opts.blobFields)) {
-      if (policy?.external && policy.public === true) {
-        throw new UnsupportedTierCompositionError(
-          "blobs",
-          `Collection "${opts.name}": blob field "${field}" cannot be both \`external: true, public: true\` and declared on a tiered collection \u2014 the object key is deterministic and its bytes are world-readable by design, so tier-invisibility can never be enforced for it once elevated. Use a private/presigned external field (\`public\` omitted or \`false\`) or move this field to a non-tiered collection.`
-        );
-      }
-    }
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.encrypted === false) {
-    throw new UnsupportedTierCompositionError(
-      "plaintext",
-      `Collection "${opts.name}": tiers are per-tier ENCRYPTION keys \u2014 a plaintext collection (\`encrypted: false\`) has nothing to re-key, so \`putAtTier\`/\`elevate\` would encrypt/decrypt incoherently. Use an encrypted collection.`
-    );
-  }
-  if (opts.tiers && opts.tiers.length > 0 && opts.crdt !== void 0 && ((opts.derivationSource?.registry().strategiesForSource(opts.name).length ?? 0) > 0 || (opts.materializedViewSource?.registry().mvsForSource(opts.name).length ?? 0) > 0)) {
-    throw new UnsupportedTierCompositionError(
-      "crdt-derivation",
-      `Collection "${opts.name}": tiers + crdt cannot be combined with this collection acting as a derivation/rollup source (#739) \u2014 the tier-aware pre-move decode \`syncDerived\` uses on elevate()/demote() does not resolve CRDT state, so a registered derivation/rollup reads raw CrdtState instead of the record and silently no-ops. Use a non-CRDT collection for a tiered derivation/rollup source, or move the derivation off this collection.`
-    );
-  }
-  const effectiveViaFields = mergeViaFields(opts);
-  const resolvedClassified = opts.classifiedFields !== void 0 ? resolveClassifiedFields(opts.name, opts.classifiedFields) : void 0;
-  const allComputed = unifyComputedFields(opts, effectiveViaFields.computedFields);
-  const materializedComputed = {};
-  for (const [field, entry] of Object.entries(allComputed)) {
-    if (computedEntryParts(entry).mode !== "virtual") materializedComputed[field] = entry;
-  }
-  let mergedComputed = Object.keys(materializedComputed).length > 0 ? materializedComputed : void 0;
-  if (resolvedClassified !== void 0) {
-    for (const key of Object.keys(allComputed)) {
-      if (resolvedClassified.riderComputed[key] !== void 0) {
-        throw new ClassifiedConfigError(opts.name, `computed field "${key}" collides with a rider companion`);
-      }
-    }
-    mergedComputed = { ...resolvedClassified.riderComputed, ...materializedComputed };
-  }
-  let deterministicFields;
-  if (opts.deterministicFields && opts.deterministicFields.length > 0) {
-    if (opts.acknowledgeDeterministicRisk !== true) {
-      throw new Error(
-        `Collection "${opts.name}": deterministicFields requires \`acknowledgeDeterministicRisk: true\`. Deterministic encryption leaks equality between records \u2014 two records with the same field value produce identical ciphertexts visible to anyone with store access. If that trade-off is acceptable for your threat model, set \`acknowledgeDeterministicRisk: true\` to enable.`
-      );
-    }
-    deterministicFields = Object.freeze(new Set(opts.deterministicFields));
-  } else {
-    deterministicFields = null;
-  }
-  const guardIndexedFields = /* @__PURE__ */ new Set();
-  for (const ix of opts.indexes ?? []) {
-    if (typeof ix === "string") guardIndexedFields.add(ix);
-    else if (Array.isArray(ix)) for (const f of ix) guardIndexedFields.add(f);
-    else for (const f of ix.fields) guardIndexedFields.add(f);
-  }
-  const embeddingSources = opts.embeddings === void 0 ? [] : typeof opts.embeddings.source === "string" ? [opts.embeddings.source] : [...opts.embeddings.source];
-  const classifiedGuardCtx = {
-    perRecordKeys: opts.perRecordKeys === true,
-    crdt: opts.crdt !== void 0,
-    hasConflictPolicy: opts.conflictPolicy !== void 0,
-    storeCiphertext: opts.encrypted,
-    deterministicFields,
-    indexedFields: guardIndexedFields,
-    textIndexFields: new Set(opts.textIndexes ?? []),
-    vectorSourceFields: new Set(embeddingSources),
-    subjectKeyField: opts.subjectKeyField,
-    bareSensitiveFields: new Set(opts.sensitive ?? []),
-    acknowledgeEquatableRisk: opts.acknowledgeEquatableRisk === true
-  };
-  if (resolvedClassified !== void 0) {
-    guardClassifiedCompat(opts.name, resolvedClassified.byField, classifiedGuardCtx);
-  }
-  const classifiedSensitive = resolvedClassified === void 0 ? [] : Object.entries(resolvedClassified.byField).filter(([, s]) => s.storage === "recoverable").map(([f]) => f);
-  const sensitiveList = [...opts.sensitive ?? [], ...classifiedSensitive];
-  const sensitiveFields = sensitiveList.length > 0 ? Object.freeze(new Set(sensitiveList)) : Object.freeze(/* @__PURE__ */ new Set());
-  const vdigEntries = resolvedClassified === void 0 ? [] : Object.entries(resolvedClassified.byField).filter(([, s]) => s.storage === "digest-only").map(([f, s]) => [f, {
-    normalize: s.verifyNormalize ?? "password",
-    notLastN: s.notLastN ?? 0,
-    equatable: s.equatable === true,
-    ...s.rotateDays !== void 0 ? { rotateDays: s.rotateDays } : {}
-  }]);
-  const vdigFields = vdigEntries.length > 0 ? new Map(vdigEntries) : null;
-  const perRecordCek = opts.perRecordKeys === true;
-  const cekCache = perRecordCek ? new Lru({ maxRecords: 4096 }) : null;
-  const viaEraseCfgOut = {};
-  const via2 = ViaPipeline.build(compileVias(opts, classifiedGuardCtx, viaEraseCfgOut));
-  const knownFields = collectKnownFieldNames({
-    moneyFields: effectiveViaFields.moneyFields,
-    i18nFields: effectiveViaFields.i18nFields,
-    dictKeyFields: effectiveViaFields.dictKeyFields,
-    classifiedFields: resolvedClassified?.byField,
-    computed: allComputed,
-    lookupFields: effectiveViaFields.lookupFields
-  });
-  const computedEdges = resolveComputedEdges(opts.name, allComputed, resolvedClassified !== void 0, knownFields);
-  const viaDepsEdges = resolveViaDepsEdges(opts.name, via2?.bindings ?? [], knownFields);
-  return {
-    adapter: opts.adapter,
-    vault: opts.vault,
-    name: opts.name,
-    keyring: opts.keyring,
-    storeCiphertext: opts.encrypted,
-    ramCiphertext: opts.ramCiphertext ?? false,
-    emitter: opts.emitter,
-    writeQueue: opts.writeQueue,
-    schemaUpdateGate: opts.schemaUpdateGate,
-    schemaFence: opts.schemaFence,
-    writeHooks: opts.writeHooks,
-    subsystemBus: opts.subsystemBus,
-    activeTxId: opts.activeTxId,
-    strategies: opts.strategies,
-    objectStore: opts.objectStore,
-    blobFields: opts.blobFields,
-    reconcileOnOpen: opts.reconcileOnOpen ?? "off",
-    getDEK: opts.getDEK,
-    onDirty: opts.onDirty,
-    tabCoordinated: opts.tabCoordinated,
-    historyConfig: opts.historyConfig ?? { enabled: true },
-    historyConfigExplicit: opts.historyConfigExplicit ?? false,
-    schema: opts.schema,
-    ledger: opts.ledger,
-    refEnforcer: opts.refEnforcer,
-    joinResolver: opts.joinResolver,
-    i18nFields: effectiveViaFields.i18nFields,
-    textIndexes: opts.textIndexes,
-    embeddings: opts.embeddings,
-    vectorSet: opts.embeddings ? new VectorSet() : void 0,
-    dictKeyFields: effectiveViaFields.dictKeyFields,
-    lookupFields: effectiveViaFields.lookupFields,
-    // #650 Task 6 — the sync join-dressing hook (#626 retirement, spec §5);
-    // `undefined` when this collection declares neither i18nText nor lookup
-    // fields, matching today's `i18nFields`-absent JoinableSource shape.
-    presentForJoin: buildPresentForJoin(effectiveViaFields.i18nFields, effectiveViaFields.lookupFields, opts.snapshotFor),
-    fieldMeta: opts.fieldMeta,
-    meta: opts.meta,
-    _refs: opts.declaredRefs ?? {},
-    via: via2,
-    classifiedEraseCfg: viaEraseCfgOut.classified,
-    moneyFields: effectiveViaFields.moneyFields,
-    classified: resolvedClassified,
-    classifiedGuardCtx,
-    computed: mergedComputed,
-    computedEdges,
-    viaDepsEdges,
-    // #638 Task 7 — every declared computed field name (both modes, both surfaces); the
-    // reconcile path's cross-call depsless-computed leak-guard memory
-    // (`via/graph-wiring.ts#registerCollectionGraphSources`) reads this instead of
-    // `Object.keys(opts.computed ?? {})` alone, so a via(computed(...))-declared field
-    // participates in that guard identically to a sugar-declared one.
-    computedFieldNames: Object.keys(allComputed),
-    dictLabelResolver: opts.dictLabelResolver,
-    getDictionary: opts.getDictionary,
-    i18nPutValidator: opts.i18nPutValidator,
-    autoTranslateHook: opts.autoTranslateHook,
-    defaultLocale: opts.defaultLocale,
-    crdtMode: opts.crdt,
-    syncAdapter: opts.syncAdapter,
-    onAccess: opts.onAccess,
-    derivationSource: opts.derivationSource,
-    materializedViewSource: opts.materializedViewSource,
-    graphDispatch: opts.graphDispatch,
-    tiers: opts.tiers && opts.tiers.length > 0 ? new Set(opts.tiers) : null,
-    tierMode: opts.tierMode ?? "invisibility",
-    blobTierPolicy: opts.blobTierPolicy ?? "isolate",
-    onCrossTierAccess: opts.onCrossTierAccess,
-    addSubjectRef: opts.addSubjectRef,
-    deterministicFields,
-    sensitiveFields,
-    vdigFields,
-    perRecordCek,
-    cekCache,
-    provenance: opts.provenance === true
-  };
-}
-
 // src/with-formula/computed/lazy.ts
-var loadComputed = lazy(() => import("./computed-ASBNTLOK.js"));
+var loadComputed = lazy(() => import("./computed-VPOKQK4N.js"));
 async function loadEvalComputedFields() {
   return (await loadComputed()).evalComputedFields;
 }
@@ -3093,6 +1936,8 @@ var Collection = class {
       computed: this.computed,
       refs: this._refs,
       zodFields: void 0,
+      schema: this.schema,
+      // #1253 — sync fieldMeta key-validation
       ...this.meta !== void 0 ? { meta: this.meta } : {},
       ...this.i18nFields !== void 0 ? { i18nFields: this.i18nFields } : {},
       ...this.classified !== void 0 ? { classified: this.classified.byField } : {},
@@ -3149,7 +1994,7 @@ var Collection = class {
   }
   /** JSON Schema for this collection with describe() metadata as x- extensions. */
   async toJSONSchema() {
-    const { buildJsonSchema } = await import("./json-schema-I22JCYCG.js");
+    const { buildJsonSchema } = await import("./json-schema-V3M5MUCM.js");
     const desc = await this.describe({});
     let base = null;
     if (this.schema !== void 0) {
@@ -3265,7 +2110,7 @@ var Collection = class {
     }
     await this.onAccess?.("find", "*");
     if (hits.length === 0) return [];
-    const { verifyDigestField } = await import("./verify-WYOFLSNA.js");
+    const { verifyDigestField } = await import("./verify-KOV2G5D6.js");
     const policy = {
       normalize: spec.verifyNormalize ?? "password",
       notLastN: spec.notLastN ?? 0,
@@ -3477,7 +2322,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-5I36LPVK.js");
+      const { resolveStaleMVOnRead } = await import("./stale-DDL7WQEZ.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     let record;
@@ -3829,7 +2674,8 @@ var Collection = class {
       this.indexes?.upsert(id, indexed, prior ? prior.record : null);
       this.uniqueConstraints?.upsert(id, indexed, prior?.record);
     }
-    await this._onRecordMutated(id, "put", "local-write", { record: event, version });
+    const priorForTrigger = prior ? prior.record : null;
+    await this._onRecordMutated(id, "put", "local-write", { record: event, version, prior: priorForTrigger });
   }
   /**
    * The pre-envelope stages both write paths share (#904): permission + tier
@@ -4008,7 +2854,7 @@ var Collection = class {
    */
   async dispatchMaterializedViews(id, record, wave) {
     if (this.materializedViewSource === void 0) return;
-    const { dispatchMaterializedViews } = await import("./dispatch-M62IAL2S.js");
+    const { dispatchMaterializedViews } = await import("./dispatch-WC6X2M6C.js");
     return dispatchMaterializedViews(this.#mvDispatchCtx(this.materializedViewSource), id, record, wave);
   }
   /**
@@ -4067,34 +2913,23 @@ var Collection = class {
     const record = await this.codec.decryptRecord({ collection: this.name, id }, env, {});
     return record === null ? null : { record, version: env._v };
   }
-  /**
-   * @internal Ids of records whose top-level `field` equals `value`.
-   * Uses the FK index when the field is indexed (O(matches)); otherwise a
-   * linear scan (O(N) — fine for small child sets; index the FK to scale).
-   */
+  /** @internal Ids of records whose top-level `field` equals `value` — delegates to the composite scan. */
   async _findMatchingIds(field, value) {
-    const hit = this.getIndexes()?.lookupEqual(field, value);
-    if (hit) return [...hit];
-    const target = String(value);
-    const matches = (rec) => {
-      const fv = rec[field];
-      return (typeof fv === "string" || typeof fv === "number") && String(fv) === target;
-    };
-    if (!this.lazy) {
-      await this.ensureHydrated();
-      const out2 = [];
-      for (const [rid, e] of this.cache) {
-        if (matches(e.record)) out2.push(rid);
-      }
-      return out2;
-    }
-    const ids = await this.adapter.list(this.vault, this.name);
-    const out = [];
-    for (const rid of ids) {
-      const raw = await this._getStoredRecord(rid);
-      if (raw !== null && matches(raw)) out.push(rid);
-    }
-    return out;
+    if (typeof value !== "string" && typeof value !== "number") return [];
+    return this._findMatchingCompositeIds([{ field, value: String(value) }]);
+  }
+  /** @internal — conjunction fan-out for composite triggerBy (#1249). First indexed pair narrows,
+   *  filtered by the OTHER pairs only; zero reads when the index alone decides membership. */
+  async _findMatchingCompositeIds(pairs) {
+    if (!this.lazy) await this.ensureHydrated();
+    const i = pairs.findIndex((p) => this.getIndexes()?.lookupEqual(p.field, p.value));
+    const hit = i < 0 ? null : this.getIndexes().lookupEqual(pairs[i].field, pairs[i].value);
+    const residual = i < 0 ? pairs : pairs.filter((_, j) => j !== i);
+    return findMatchingIdsByPairs(residual, {
+      indexCandidates: hit ? [...hit] : null,
+      listIds: async () => this.lazy ? this.adapter.list(this.vault, this.name) : [...this.cache.keys()],
+      getRecord: async (id) => this.lazy ? await this._getStoredRecord(id) : this.cache.get(id)?.record ?? null
+    });
   }
   /** @internal — ctx for `putDerivedOutput`'s frozen-period skip+audit (#638 Task 5). */
   /** What `with-formula/materialized-views/dispatch.ts` needs from this collection (#842). */
@@ -4177,18 +3012,22 @@ var Collection = class {
       if (spec) await this.recomputeRollup(spec, intent.parentId, { collection: this.name, id: "<sync-delete>" }, wave);
     }
   }
+  /** Extras added onto {@link #derivationDeleteCtx} — shared by `dispatchDerivations` and `dispatchTriggerDerivationsOnDelete` (#1249). */
+  #derivationDispatchCtx() {
+    return { ...this.#derivationDeleteCtx(this.derivationSource), via: this.via, recomputeRollup: this.recomputeRollup.bind(this), dispatchCtx: this.#dispatchCtx.bind(this), trackPut: this.#trackPut.bind(this) };
+  }
   /** @internal `wave` (#638 Task 4) — threaded to `recomputeRollup` for the sync/cutover/restore
    *  dispatch wave's per-target dedup; `undefined` on the local-write path (byte-identical). */
-  async dispatchDerivations(id, record, version, wave) {
+  async dispatchDerivations(id, record, version, wave, prior) {
     if (this.derivationSource === void 0) return;
-    const { dispatchDerivations } = await import("./dispatch-FNCCONFK.js");
-    return dispatchDerivations({
-      ...this.#derivationDeleteCtx(this.derivationSource),
-      via: this.via,
-      recomputeRollup: (spec, parentId, source, w) => this.recomputeRollup(spec, parentId, source, w),
-      dispatchCtx: (source) => this.#dispatchCtx(source),
-      trackPut: (txCtx, collectionName, rid, prior) => this.#trackPut(txCtx, collectionName, rid, prior)
-    }, id, record, version, wave);
+    const { dispatchDerivations } = await import("./dispatch-S73TK3IY.js");
+    return dispatchDerivations(this.#derivationDispatchCtx(), id, record, version, wave, prior);
+  }
+  /** @internal — trigger fan-out for a deleted parent (#1249); see dispatch.ts. */
+  async dispatchTriggerDerivationsOnDelete(id, deleted) {
+    if (this.derivationSource === void 0) return;
+    const { dispatchTriggerDerivationsOnDelete } = await import("./dispatch-S73TK3IY.js");
+    return dispatchTriggerDerivationsOnDelete(this.#derivationDispatchCtx(), id, deleted);
   }
   /**
    * Delete a record by ID. Runs inside the hub's write-queue tracker
@@ -4426,7 +3265,10 @@ var Collection = class {
     if (!internal) {
       await this.dispatchMaterializedViewsOnDelete(id);
       await this.dispatchArrayDerivationsOnDelete(id);
-      if (existing) await this.dispatchRollupsOnDelete(id, existing.record);
+      if (existing) {
+        await this.dispatchRollupsOnDelete(id, existing.record);
+        await this.dispatchTriggerDerivationsOnDelete(id, existing.record);
+      }
     }
     return true;
   }
@@ -4496,7 +3338,7 @@ var Collection = class {
    */
   async dispatchArrayDerivationsOnDelete(id, eraseRecordShapeToo = false) {
     if (this.derivationSource === void 0) return 0;
-    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-FNCCONFK.js");
+    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-S73TK3IY.js");
     return dispatchArrayDerivationsOnDelete(this.#derivationDeleteCtx(this.derivationSource), id, eraseRecordShapeToo);
   }
   /**
@@ -4510,7 +3352,7 @@ var Collection = class {
    */
   async dispatchMaterializedViewsOnDelete(id) {
     if (this.materializedViewSource === void 0) return { deleted: 0, residueUndecodable: [], residueDeclined: [] };
-    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-M62IAL2S.js");
+    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-WC6X2M6C.js");
     return dispatchMaterializedViewsOnDelete(this.#mvDispatchCtx(this.materializedViewSource), id);
   }
   /**
@@ -4530,7 +3372,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-5I36LPVK.js");
+      const { resolveStaleMVOnRead } = await import("./stale-DDL7WQEZ.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     await this.ensureHydrated();
@@ -5194,7 +4036,7 @@ var Collection = class {
         this.emitter.emit("change", { vault: this.vault, collection: this.name, id, action: "put" });
         this.searchIndexStore?.markDirty();
         await this.onAccess?.("put", id);
-        await this.dispatchDerivations(id, record, version);
+        await this.dispatchDerivations(id, record, version, void 0, ctx.prior);
         await this.dispatchMaterializedViews(id, record);
         return;
       }
@@ -5640,14 +4482,14 @@ var Collection = class {
   /** C-A/R10: persist the classified marker once per classified handle (store I/O in config-drift.ts). */
   async _ensureClassifiedMarker() {
     if (this._markerPersisted || this.vdigFields === null) return;
-    const { persistClassifiedMarkerForFields } = await import("./classified-marker-KL4YXUXD.js");
+    const { persistClassifiedMarkerForFields } = await import("./classified-marker-LI2SF2E4.js");
     await persistClassifiedMarkerForFields(this.adapter, this.vault, this.name, this.vdigFields, await this.getDEK(this.name));
     this._markerPersisted = true;
   }
   /** C-A/R10 drift signal — the marker's declared digest-only set, memoized to one store read per handle (see config-drift.ts). */
   async _classifiedMarkerDigestOnly() {
     if (this._markerDigestOnlyCache !== void 0) return this._markerDigestOnlyCache;
-    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-KL4YXUXD.js");
+    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-LI2SF2E4.js");
     this._markerDigestOnlyCache = await readClassifiedMarkerDigestOnly(this.adapter, this.vault, this.name, await this.getDEK(this.name));
     return this._markerDigestOnlyCache;
   }
@@ -7273,7 +6115,7 @@ var VaultLinks = class {
 // src/with-shape/links/lazy-handle.ts
 function makeLazyLinkSetHandle(d) {
   let engine = null;
-  const load = () => engine ??= import("./link-set-WHTYVTOV.js").then(
+  const load = () => engine ??= import("./link-set-FKNWAYKS.js").then(
     ({ LinkSet }) => new LinkSet(d.adapter, d.vault, d.name, d.spec, d.encrypted, d.getDEK, d.actor, d.emitter, d.endpointExists)
   );
   return {
@@ -7924,7 +6766,7 @@ function declareSatellite(ctx, collectionName, options, existingRegistry) {
   ctx.forEachSyncEngine((e) => e.remirrorPairResolvers([spec.base, spec.satellite]));
   const registry = reg;
   const baseSchema = ctx.getBaseSchema(spec.base);
-  void import("./post-register-4DXRYGTU.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
+  void import("./post-register-LNE2FE2A.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
   });
   return reg;
 }
@@ -8899,7 +7741,7 @@ var Vault = class {
         const strategies = options.schemaUpdate ?? [];
         const work = (async () => {
           const dek = await this.getDEK(collectionName);
-          const { persistSchemaIfNeeded } = await import("./register-GLCOH73C.js");
+          const { persistSchemaIfNeeded } = await import("./register-I2DZXGAR.js");
           const result = await persistSchemaIfNeeded({
             store: this.adapter,
             vault: this.name,
@@ -8961,7 +7803,7 @@ var Vault = class {
         // Vaults without derivations skip this so `Collection.put`'s
         // `if (this.derivationSource)` branch no-ops without touching the
         // derivation service code.
-        ...this.derivationRegistry !== null ? {
+        ...this.derivationRegistry !== null ? (this.derivationRegistry.validateFieldsFor(collectionName, options?.schema, Object.keys({ ...options?.fieldMeta, ...options?.moneyFields, ...options?.dictKeyFields, ...options?.refs, ...options?.computed, ...options?.i18nFields, ...options?.lookupFields, ...options?.blobFields, ...options?.classifiedFields }), options), {
           derivationSource: {
             registry: () => this.derivationRegistry,
             getCollection: (name) => this.collection(name),
@@ -8971,7 +7813,7 @@ var Vault = class {
             setActiveTxContext: (ctx) => this.noydb._setActiveTxContext(ctx),
             clearActiveTxContext: (ctx) => this.noydb._clearActiveTxContext(ctx)
           }
-        } : {},
+        }) : {},
         ...this.materializedViewRegistry !== null ? {
           materializedViewSource: {
             registry: () => this.materializedViewRegistry,
@@ -9049,7 +7891,7 @@ var Vault = class {
         const work = (async () => {
           try {
             const dek = await this.getDEK(collectionName);
-            await (await import("./register-GLCOH73C.js")).persistSchemaIfNeeded({
+            await (await import("./register-I2DZXGAR.js")).persistSchemaIfNeeded({
               store: this.adapter,
               vault: this.name,
               collectionName,
@@ -9095,7 +7937,7 @@ var Vault = class {
    * writes (unfenced walk — see `with-shape/satellites/migrate-cek.ts`); resumable.
    */
   async migrateSatellitePerRecordKeys(satelliteName) {
-    const { migrateSatelliteCek } = await import("./migrate-cek-LBRKYUZZ.js");
+    const { migrateSatelliteCek } = await import("./migrate-cek-5ENH64AA.js");
     return migrateSatelliteCek(satelliteName, this.collection(satelliteName, { perRecordKeys: true }));
   }
   /**
@@ -9277,7 +8119,7 @@ var Vault = class {
   async _ensureFenceCoordination() {
     if (this.#fenceCoordinationStarted) return;
     this.#fenceCoordinationStarted = true;
-    const { FenceWatcher } = await import("./fence-watcher-ZVSMLKQD.js");
+    const { FenceWatcher } = await import("./fence-watcher-U2PW6JU5.js");
     if (!this.#fenceCoordinationStarted) return;
     this.#fenceWatcher = new FenceWatcher({
       coordination: this.noydb.mesh,
@@ -9726,7 +8568,7 @@ var Vault = class {
    */
   // eslint-disable-next-line @typescript-eslint/consistent-type-imports
   async _loadPodSigner() {
-    const { loadSigner } = await import("./signer-HJHTGX7X.js");
+    const { loadSigner } = await import("./signer-WAMDZHEN.js");
     return loadSigner(this.adapter, this.name, this.getDEK);
   }
   async writeExportAudit(entry) {
@@ -9955,7 +8797,7 @@ var Vault = class {
     const blobsEnabled = this.strategies.blobs !== NO_BLOBS;
     const actor = this.keyring.userId;
     const fanoutStats = { recordsErased: 0, aggregatesRecomputed: 0, residueFrozen: [], lookupReferencesCascaded: 0, lookupReferencesNullified: 0, lookupReferencesResidue: [], derivedResidueUndecodable: [], derivedResidueDeclined: [] };
-    const { partitionSealedCekKeys, shouldSkipBlobScan, bumpResidueCount, residueNoticesFromMap } = await import("./purge-scope-FGNNLWHD.js");
+    const { partitionSealedCekKeys, shouldSkipBlobScan, bumpResidueCount, residueNoticesFromMap } = await import("./purge-scope-4HEFPDOW.js");
     const scopedPurge = this.strategies.forget.scopedPurge === true;
     const sealedCekScopedSkipped = /* @__PURE__ */ new Map();
     const blobScopedSkipped = /* @__PURE__ */ new Map();
@@ -10216,8 +9058,8 @@ var Vault = class {
   async _initGuards(handles) {
     if (handles.length === 0) return;
     const [{ GuardRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-IWFMXCHX.js"),
-      import("./read-only-facade-CHCKSEPD.js")
+      import("./registry-4AYVUNXK.js"),
+      import("./read-only-facade-BIGO37U3.js")
     ]);
     const registry = new GuardRegistry();
     for (const h of handles) registry.register(h.spec);
@@ -10244,8 +9086,8 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-T346IZCF.js"),
-      import("./read-only-facade-CHCKSEPD.js")
+      import("./registry-YLEWMGAC.js"),
+      import("./read-only-facade-BIGO37U3.js")
     ]);
     const registry = new DerivationRegistry();
     for (const h of handles) {
@@ -10276,7 +9118,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-GWGHZWGP.js");
+    const { MaterializedViewRegistry } = await import("./registry-VSSQPIGF.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -10301,7 +9143,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-Q3FG3OAX.js");
+    const { OverlayedViewRegistry } = await import("./registry-23WF3TGH.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -10364,14 +9206,14 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-CDIMJVE2.js");
+    const { MaterializedViewExecutor } = await import("./executor-PUAO6AKJ.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this,
       dispatchCtx: this._dispatchCtx({ collection: name, id: "refreshView" })
     });
-    const { clearMVStaleFully } = await import("./stale-5I36LPVK.js");
+    const { clearMVStaleFully } = await import("./stale-DDL7WQEZ.js");
     await clearMVStaleFully(this.adapter, this.name, registry, name);
     return result;
   }
@@ -10384,10 +9226,10 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0, skippedFrozen: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0, skippedFrozen: 0 };
-    const { DerivationExecutor } = await import("./executor-YYDW6XQI.js");
+    const { DerivationExecutor } = await import("./executor-5NIMLSKZ.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
-    const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-CHCKSEPD.js")).ReadOnlyVaultFacade(this, "derivation") };
+    const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-BIGO37U3.js")).ReadOnlyVaultFacade(this, "derivation") };
     let derived = 0;
     let failed = 0;
     let skippedFrozen = 0;
@@ -10411,7 +9253,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-BRQHWTZQ.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-WUFXNYP4.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key, this.getDEK, this.encrypted);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -10638,7 +9480,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-2DO3VI5E.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-OVIFFPG4.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (secret) first."
@@ -10660,7 +9502,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-2DO3VI5E.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-OVIFFPG4.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -10913,7 +9755,7 @@ var Vault = class {
    * @see design-history/2026-05-22-schema-dump-design.md
    */
   async dumpSchema(opts = {}) {
-    const { dumpVaultSchema } = await import("./walk-LTV7LOCN.js");
+    const { dumpVaultSchema } = await import("./walk-3UQBRMDV.js");
     return dumpVaultSchema(this, opts);
   }
   /**
@@ -11009,7 +9851,7 @@ var Vault = class {
    * separate vault instances now.
    */
   async getPodHandle() {
-    const { buildPodHandle } = await import("./pod-handle-DHEYBTJ2.js");
+    const { buildPodHandle } = await import("./pod-handle-Q736KYON.js");
     return buildPodHandle(this.adapter, this.name);
   }
   /**
@@ -11041,7 +9883,7 @@ var Vault = class {
    * both modes round-trip cleanly.
    */
   async dump() {
-    const { dumpVault } = await import("./backup-SZBDQQSL.js");
+    const { dumpVault } = await import("./backup-IJTB4S4M.js");
     return dumpVault(this.backupContext());
   }
   /**
@@ -11093,7 +9935,7 @@ var Vault = class {
    * — there's no chain to verify against.
    */
   async load(backupJson) {
-    const { loadVault } = await import("./backup-SZBDQQSL.js");
+    const { loadVault } = await import("./backup-IJTB4S4M.js");
     return loadVault(this.backupContext(), backupJson);
   }
   /**
@@ -11125,7 +9967,7 @@ var Vault = class {
    * way to detect tampering of an in-place vault.
    */
   async verifyBackupIntegrity() {
-    const { verifyBackupIntegrity } = await import("./backup-SZBDQQSL.js");
+    const { verifyBackupIntegrity } = await import("./backup-IJTB4S4M.js");
     return verifyBackupIntegrity(this.backupContext());
   }
   /**
@@ -11355,7 +10197,7 @@ var Vault = class {
    * is the live validator object, not a serialization of it).
    */
   async exportJSON(opts = {}) {
-    const { exportVaultJSON } = await import("./backup-SZBDQQSL.js");
+    const { exportVaultJSON } = await import("./backup-IJTB4S4M.js");
     return exportVaultJSON(this.backupContext(), opts);
   }
 };
@@ -13283,7 +12125,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-AFHQYRAU.js");
+      const { GuardExecutor } = await import("./executor-AQVXV5GZ.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -14655,7 +13497,7 @@ async function createNoydb(options) {
   if (!options.store) options = { ...options, store: memoryStore() };
   validateSecretModeOptions(options);
   if (!options.mesh) options = { ...options, mesh: await createDefaultMesh(options.store) };
-  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-OAZLPNVV.js")).createUserApi };
+  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-TXFOVOXX.js")).createUserApi };
   if (!options.policyFactory) {
     const policyModule = await import("./policy/index.js");
     options = { ...options, policyFactory: policyModule.createNoydbPolicy, policyCheckGateFn: policyModule.checkGate };
@@ -14674,8 +13516,6 @@ function normalizeSyncTargets(sync) {
 export {
   memoryStore,
   withArchive,
-  via,
-  isViaFieldSpec,
   Collection,
   ELEVATION_AUDIT_COLLECTION,
   ElevatedHandle,
@@ -14690,4 +13530,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-PRHCMEUK.js.map
+//# sourceMappingURL=chunk-6GOE5PGN.js.map