@noy-db/hub 0.7.0 → 0.8.0-pre.0

package/dist/{chunk-QIZPZMUI.js → chunk-AOWGXU6D.js}

@@ -1,7 +1,7 @@
 import {
   NoydbError,
   ValidationError
-} from "./chunk-7O3Y4PPD.js";
+} from "./chunk-244VXYPG.js";
 
 // src/with-shape/links/names.ts
 var LINK_COLLECTION_PREFIX = "_links_";
@@ -60,4 +60,4 @@ export {
   linkRowKey,
   LinkIntegrityError
 };
-//# sourceMappingURL=chunk-QIZPZMUI.js.map
+//# sourceMappingURL=chunk-AOWGXU6D.js.map

package/dist/{chunk-CUZLNGD5.js → chunk-B2YY6WDD.js}

@@ -43,4 +43,4 @@ export {
   DEFAULT_COVER_SCHEMA,
   resolveSchema
 };
-//# sourceMappingURL=chunk-CUZLNGD5.js.map
+//# sourceMappingURL=chunk-B2YY6WDD.js.map

package/dist/chunk-B2YY6WDD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-party/directory/cover/types.ts"],"sourcesContent":["/**\n * Cover — owner-curated plaintext metadata, readable before vault\n * unlock or bundle decryption. Like a book's cover: title, cover\n * art, back-cover blurb — readable on the shelf without opening\n * the book, and never trusted as the book's contents.\n *\n * (Formerly \"public envelope\" — the wire keeps that name: the\n * record still lives at `_meta/public-envelope` and carries the\n * `_noydb_public: 1` discriminator.)\n *\n * @see https://github.com/noy-db/docs/blob/main/content/docs/services/public-envelope.md\n *\n * @module\n */\n\n/**\n * Either a single string (used when the developer's app is\n * single-locale) or a locale → string map for i18n. Mirrors the\n * shape `@noy-db/hub/i18n` already uses for record fields, so the\n * existing `resolveI18nText` resolver applies.\n */\nexport type CoverText = string | Record<string, string>\n\n/**\n * A JSON-serializable value — what a `custom` namespace payload may\n * hold. No functions, `undefined`, symbols, bigints, or cycles; the\n * validator additionally caps nesting depth at 8 levels.\n */\nexport type JsonValue =\n  | string\n  | number\n  | boolean\n  | null\n  | JsonValue[]\n  | { [key: string]: JsonValue }\n\n/**\n * Persisted shape — both `_meta/public-envelope` (the frozen wire\n * name) and the bundle header carry this. The version number is\n * monotonic per vault and helps cache invalidators detect change\n * without hashing the JSON.\n */\nexport interface Cover {\n  readonly _noydb_public: 1\n  readonly version: number\n  readonly name?: CoverText\n  readonly description?: CoverText\n  /** Inline `data:` URL (`data:image/png;base64,…` or `data:image/svg+xml;base64,…`). */\n  readonly icon?: string\n  /** ISO-8601 timestamp; auto-set on first cover write, immutable thereafter. */\n  readonly createdAt?: string\n  /** ISO-8601 timestamp; auto-updated on every `setCover` call. */\n  readonly updatedAt?: string\n  /** BCP-47 fallback locale for renderers when the user's locale isn't covered. */\n  readonly defaultLocale?: string\n  /**\n   * Namespaced integrator slot (#800) — e.g.\n   * `{ 'noydb.viewer': { defaultCollection: 'invoices' } }`. Keys must\n   * be reverse-DNS / package-style (`noydb.viewer`, `com.acme.registry`).\n   * Like everything on the cover it is plaintext, public, and\n   * unauthenticated — payloads are hints, never authority. Opt-in:\n   * excluded from `DEFAULT_COVER_SCHEMA.fields`, so `cover: true`\n   * does NOT enable it.\n   */\n  readonly custom?: Record<string, JsonValue>\n}\n\n/** Field names the developer can allow in `CoverSchema.fields`. */\nexport const COVER_FIELDS = [\n  'name',\n  'description',\n  'icon',\n  'createdAt',\n  'updatedAt',\n  'defaultLocale',\n  'custom',\n] as const\n\nexport type CoverField = (typeof COVER_FIELDS)[number]\n\n/**\n * Build-time schema. The developer enables the feature and bounds\n * what the owner can set. `true` is shorthand for \"all defaults\" —\n * gives the owner the full field set with the standard caps.\n */\nexport interface CoverSchema {\n  /**\n   * Allowed field names. Setting `name`/`description`/`icon`/`defaultLocale` is\n   * gated on the field being listed here. `createdAt` / `updatedAt` are managed\n   * by the hub; including them is a no-op (the owner cannot set them\n   * directly). Default: every field above.\n   */\n  readonly fields?: ReadonlyArray<CoverField>\n  /**\n   * Maximum icon size — measured as the length of the data-URL\n   * string. Default 256 KB.\n   */\n  readonly maxIconBytes?: number\n  /** Allowed icon MIME types. Default ['image/png', 'image/svg+xml']. */\n  readonly iconMimeTypes?: ReadonlyArray<string>\n  /** Maximum length of `name` / `description` per locale. Default 200. */\n  readonly maxStringChars?: number\n  /**\n   * Maximum serialized size (`JSON.stringify` length) of the whole\n   * would-be-persisted `custom` object, measured AFTER the namespace\n   * patch merge. Default 8 KB.\n   */\n  readonly maxCustomBytes?: number\n  /**\n   * Maximum serialized size of the ENTIRE would-be-persisted cover\n   * document. The consumer-protection cap — bounds what a pre-auth\n   * reader must fetch and parse, and closes the unbounded locale-map\n   * key-count hole for `name` / `description`. Default 300 KB\n   * (headroom over the 256 KB icon cap + text fields).\n   */\n  readonly maxCoverBytes?: number\n}\n\n/**\n * Default schema values; merged onto every developer-supplied schema.\n * NOTE: `fields` is the six display fields, deliberately NOT\n * {@link COVER_FIELDS} — the opt-in `'custom'` slot is excluded, so\n * the `cover: true` shorthand never exposes it by accident.\n */\nexport const DEFAULT_COVER_SCHEMA = {\n  fields: ['name', 'description', 'icon', 'createdAt', 'updatedAt', 'defaultLocale'],\n  maxIconBytes: 256 * 1024,\n  iconMimeTypes: ['image/png', 'image/svg+xml'] as const,\n  maxStringChars: 200,\n  maxCustomBytes: 8 * 1024,\n  maxCoverBytes: 300 * 1024,\n} as const satisfies Required<CoverSchema>\n\n/** Resolved schema after merging developer override onto defaults. */\nexport interface ResolvedCoverSchema {\n  readonly fields: ReadonlyArray<CoverField>\n  readonly maxIconBytes: number\n  readonly iconMimeTypes: ReadonlyArray<string>\n  readonly maxStringChars: number\n  readonly maxCustomBytes: number\n  readonly maxCoverBytes: number\n}\n\n/**\n * Merge developer schema onto the defaults. The shorthand `true`\n * resolves to the full default schema; an explicit object only\n * overrides the keys it provides.\n */\nexport function resolveSchema(\n  schema: true | CoverSchema | undefined,\n): ResolvedCoverSchema | undefined {\n  if (!schema) return undefined\n  if (schema === true) {\n    return {\n      fields: DEFAULT_COVER_SCHEMA.fields,\n      maxIconBytes: DEFAULT_COVER_SCHEMA.maxIconBytes,\n      iconMimeTypes: DEFAULT_COVER_SCHEMA.iconMimeTypes,\n      maxStringChars: DEFAULT_COVER_SCHEMA.maxStringChars,\n      maxCustomBytes: DEFAULT_COVER_SCHEMA.maxCustomBytes,\n      maxCoverBytes: DEFAULT_COVER_SCHEMA.maxCoverBytes,\n    }\n  }\n  return {\n    fields: schema.fields ?? DEFAULT_COVER_SCHEMA.fields,\n    maxIconBytes: schema.maxIconBytes ?? DEFAULT_COVER_SCHEMA.maxIconBytes,\n    iconMimeTypes: schema.iconMimeTypes ?? DEFAULT_COVER_SCHEMA.iconMimeTypes,\n    maxStringChars: schema.maxStringChars ?? DEFAULT_COVER_SCHEMA.maxStringChars,\n    maxCustomBytes: schema.maxCustomBytes ?? DEFAULT_COVER_SCHEMA.maxCustomBytes,\n    maxCoverBytes: schema.maxCoverBytes ?? DEFAULT_COVER_SCHEMA.maxCoverBytes,\n  }\n}\n"],"mappings":";AAoEO,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAgDO,IAAM,uBAAuB;AAAA,EAClC,QAAQ,CAAC,QAAQ,eAAe,QAAQ,aAAa,aAAa,eAAe;AAAA,EACjF,cAAc,MAAM;AAAA,EACpB,eAAe,CAAC,aAAa,eAAe;AAAA,EAC5C,gBAAgB;AAAA,EAChB,gBAAgB,IAAI;AAAA,EACpB,eAAe,MAAM;AACvB;AAiBO,SAAS,cACd,QACiC;AACjC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,WAAW,MAAM;AACnB,WAAO;AAAA,MACL,QAAQ,qBAAqB;AAAA,MAC7B,cAAc,qBAAqB;AAAA,MACnC,eAAe,qBAAqB;AAAA,MACpC,gBAAgB,qBAAqB;AAAA,MACrC,gBAAgB,qBAAqB;AAAA,MACrC,eAAe,qBAAqB;AAAA,IACtC;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ,OAAO,UAAU,qBAAqB;AAAA,IAC9C,cAAc,OAAO,gBAAgB,qBAAqB;AAAA,IAC1D,eAAe,OAAO,iBAAiB,qBAAqB;AAAA,IAC5D,gBAAgB,OAAO,kBAAkB,qBAAqB;AAAA,IAC9D,gBAAgB,OAAO,kBAAkB,qBAAqB;AAAA,IAC9D,eAAe,OAAO,iBAAiB,qBAAqB;AAAA,EAC9D;AACF;","names":[]}

package/dist/{chunk-SFAWCTEM.js → chunk-B57AFBY2.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-7O3Y4PPD.js";
+} from "./chunk-244VXYPG.js";
 
 // src/with-formula/overlay-views/with-overlayed-view.ts
 function withOverlayedView(spec) {
@@ -33,4 +33,4 @@ function withOverlayedView(spec) {
 export {
   withOverlayedView
 };
-//# sourceMappingURL=chunk-SFAWCTEM.js.map
+//# sourceMappingURL=chunk-B57AFBY2.js.map

package/dist/{chunk-GPEQUXHL.js → chunk-B6SJIBQK.js}

@@ -1,10 +1,10 @@
 import {
   grant,
   revoke
-} from "./chunk-G56KBWFY.js";
+} from "./chunk-M7NI3IWE.js";
 import {
   CustodyNotEnabledError
-} from "./chunk-7O3Y4PPD.js";
+} from "./chunk-244VXYPG.js";
 
 // src/with-party/custody/active.ts
 function withCustody() {
@@ -16,7 +16,7 @@ function withCustody() {
       return host._revokeCustodianImpl(revoke, vault, options, factors);
     },
     async liberate(vault, opts) {
-      const { liberateVault } = await import("./liberate-LCDPNAG2.js");
+      const { liberateVault } = await import("./liberate-GRLCZMW4.js");
       return liberateVault(vault, opts);
     }
   };
@@ -74,4 +74,4 @@ export {
   withCustody,
   CustodyApi
 };
-//# sourceMappingURL=chunk-GPEQUXHL.js.map
+//# sourceMappingURL=chunk-B6SJIBQK.js.map

package/dist/chunk-BJ2IXQ5Q.js

@@ -0,0 +1,100 @@
+import {
+  LiveMaintainer,
+  canMaintainIncrementally
+} from "./chunk-VHM7HCKB.js";
+import {
+  projectDateTruncKeys
+} from "./chunk-XBKH4FOC.js";
+import {
+  buildOrderKeyPlan,
+  compareOrderKeys,
+  filterRecords,
+  fnViewDecoder,
+  orderKeyOf
+} from "./chunk-7JE7BDYJ.js";
+
+// src/kernel/query/internal/maintenance.ts
+var MaintenanceMethods = class {
+  /**
+   * Build the #1341 delta maintainer for this plan, or `undefined` when the
+   * plan shape or the source cannot support one (the query then re-runs in
+   * full, exactly as it did before #1341).
+   *
+   * Everything the maintainer needs is taken from THIS query so the two paths
+   * cannot diverge: `matches` is the same `filterRecords` call the eager
+   * pipeline makes, `compare` is the same comparator `sortRecords` sorts with,
+   * and `decode` is the same Via result decode `toArray()` applies after
+   * slicing.
+   */
+  incrementalMaintainer(mode) {
+    const source = this.source;
+    const snapshotEntries = source.snapshotEntries?.bind(source);
+    const lookupById = source.lookupById?.bind(source);
+    if (!snapshotEntries || !lookupById) return void 0;
+    const orderBy = mode === "rows" ? this.plan.orderBy : [];
+    const limit = mode === "rows" ? this.plan.limit : void 0;
+    const indexes = source.getIndexes?.();
+    const probe = indexes ? { covers: (f) => indexes.has(f), sorted: (f) => indexes.hasSorted(f) } : null;
+    if (!canMaintainIncrementally({ ...this.plan, orderBy, limit }, probe)) return void 0;
+    const clauses = this.plan.clauses;
+    const decodeForFns = fnViewDecoder(source);
+    const via = source.via;
+    const keyPlan = orderBy.length > 0 ? buildOrderKeyPlan(orderBy, via) : void 0;
+    return new LiveMaintainer({
+      snapshotEntries,
+      lookupById,
+      matches: (record) => filterRecords([record], clauses, decodeForFns).length === 1,
+      ...keyPlan ? {
+        order: {
+          keyOf: (record) => orderKeyOf(keyPlan, record),
+          compare: (a, b) => compareOrderKeys(keyPlan, a, b)
+        }
+      } : {},
+      offset: mode === "rows" ? this.plan.offset : 0,
+      limit,
+      ...mode === "rows" && via?.hasResultDecode ? { decode: (rows) => this.decodeVia(rows) } : {}
+    });
+  }
+  /**
+   * Build the #1341 grouped-maintenance seam for this plan, or `undefined`
+   * when the plan shape or the source cannot support one (a grouped live
+   * reduction then re-runs in full, exactly as it did before).
+   *
+   * Same whitelist and the same three inputs `incrementalMaintainer('records')`
+   * uses, for the same reason: `.groupBy()`'s record pipeline IS
+   * `.aggregate()`'s — `candidateRecords` + `filterRecords`, with no sort, no
+   * window and no Via result decode — so `orderBy`/`limit` are stripped before
+   * the whitelist is asked. `matches` is the same `filterRecords` call the
+   * eager pipeline makes, which is what stops the two paths from drifting.
+   *
+   * The one addition is `project`: `.groupBy(dateTrunc(...))` (#1350) stamps a
+   * derived key onto each row AFTER filtering and before bucketing, and the
+   * maintainer has to stamp it too or it would bucket on a field that is not
+   * there. It is a pure per-record map, which is the only kind of projection
+   * this hook may carry.
+   */
+  groupMaintenance(derived) {
+    const source = this.source;
+    const snapshotEntries = source.snapshotEntries?.bind(source);
+    const lookupById = source.lookupById?.bind(source);
+    if (!snapshotEntries || !lookupById) return void 0;
+    const indexes = source.getIndexes?.();
+    const probe = indexes ? { covers: (f) => indexes.has(f), sorted: (f) => indexes.hasSorted(f) } : null;
+    if (!canMaintainIncrementally({ ...this.plan, orderBy: [], limit: void 0 }, probe)) {
+      return void 0;
+    }
+    const clauses = this.plan.clauses;
+    const decodeForFns = fnViewDecoder(source);
+    return {
+      snapshotEntries,
+      lookupById,
+      matches: (record) => filterRecords([record], clauses, decodeForFns).length === 1,
+      ...derived.length > 0 ? { project: (record) => projectDateTruncKeys([record], derived)[0] } : {}
+    };
+  }
+};
+
+export {
+  MaintenanceMethods
+};
+//# sourceMappingURL=chunk-BJ2IXQ5Q.js.map

package/dist/chunk-BJ2IXQ5Q.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/kernel/query/internal/maintenance.ts"],"sourcesContent":["/**\n * #1458 — the incremental-maintenance methods, shared by Live and Reduce.\n *\n * `incrementalMaintainer` and `groupMaintenance` are Live's machinery, but\n * they are not Live's alone: a live REDUCTION (`aggregate()` /\n * `groupBy()` handed to `withReduce`) maintains its state through exactly the\n * same maintainer, and always has — `Query.aggregate()` called\n * `this.incrementalMaintainer('records')` while both lived in `builder.ts`.\n *\n * ⭐ **So this is a genuine Reduce → Live edge, and it is recorded here rather\n * than hidden.** Both groups' `install()` copy this mixin, so importing\n * `@noy-db/hub/query/reduce` alone still gets a correctly-maintained live\n * reduction — at the cost of `live/incremental.ts` in that bundle. The\n * alternative (a hook that degrades to a full re-run when Live is absent)\n * would make the SAME call site behave differently depending on an unrelated\n * import, which is worse than the bytes.\n */\nimport type { DateTruncKey } from '../reduce/date-trunc.js'\nimport { projectDateTruncKeys } from '../reduce/date-trunc.js'\nimport type { GroupMaintenanceSource } from '../live/incremental.js'\nimport { LiveMaintainer, canMaintainIncrementally } from '../live/incremental.js'\nimport type { DeclaredPredicate, InternalSource, QueryPlan } from '../builder.js'\n// @internal Find helpers — the maintainer re-runs the same predicate and sort\n// the executor does, so it must use the same functions rather than a second\n// implementation that can drift from them.\nimport { buildOrderKeyPlan, compareOrderKeys, filterRecords, fnViewDecoder, orderKeyOf } from '../builder.js'\nimport type { JoinContext } from '../relate/join.js'\nimport type { ReduceStrategy } from '../../../with-lookup/reduce/strategy.js'\n\n/** @internal — copied onto `Query.prototype` by both Live and Reduce. */\nexport class MaintenanceMethods {\n  declare protected readonly source: InternalSource\n  declare protected readonly plan: QueryPlan\n  declare protected readonly joinContext: JoinContext | undefined\n  declare protected readonly reduceStrategy: ReduceStrategy\n  declare protected readonly predicates: ReadonlyMap<string, DeclaredPredicate> | undefined\n  declare protected decodeVia: (records: readonly unknown[], locale?: string) => unknown[]\n\n  /**\n   * Build the #1341 delta maintainer for this plan, or `undefined` when the\n   * plan shape or the source cannot support one (the query then re-runs in\n   * full, exactly as it did before #1341).\n   *\n   * Everything the maintainer needs is taken from THIS query so the two paths\n   * cannot diverge: `matches` is the same `filterRecords` call the eager\n   * pipeline makes, `compare` is the same comparator `sortRecords` sorts with,\n   * and `decode` is the same Via result decode `toArray()` applies after\n   * slicing.\n   */\n  private incrementalMaintainer(mode: 'rows' | 'records'): LiveMaintainer | undefined {\n    const source = this.source\n    const snapshotEntries = source.snapshotEntries?.bind(source)\n    const lookupById = source.lookupById?.bind(source)\n    if (!snapshotEntries || !lookupById) return undefined\n    // `.aggregate()` reduces the whole match set in candidate order — it never\n    // sorts, offsets, limits or decodes — so its maintainer is the same engine\n    // with the ordering/windowing half switched off.\n    const orderBy = mode === 'rows' ? this.plan.orderBy : []\n    const limit = mode === 'rows' ? this.plan.limit : undefined\n    const indexes = source.getIndexes?.()\n    const probe = indexes\n      ? { covers: (f: string) => indexes.has(f), sorted: (f: string) => indexes.hasSorted(f) }\n      : null\n    if (!canMaintainIncrementally({ ...this.plan, orderBy, limit }, probe)) return undefined\n\n    const clauses = this.plan.clauses\n    const decodeForFns = fnViewDecoder(source)\n    const via = source.via\n    // The ordering comes from the SAME key plan `sortRecords` builds and the\n    // keyset cursor compares against (#1346) — one definition of \"what order\n    // is this query in\", so the maintained order cannot drift from a re-run's.\n    // `by: 'label'` is refused above, so no label maps are needed here.\n    const keyPlan = orderBy.length > 0 ? buildOrderKeyPlan(orderBy, via) : undefined\n    return new LiveMaintainer({\n      snapshotEntries,\n      lookupById,\n      matches: record => filterRecords([record], clauses, decodeForFns).length === 1,\n      ...(keyPlan\n        ? {\n            order: {\n              keyOf: (record: unknown) => orderKeyOf(keyPlan, record),\n              compare: (a: readonly unknown[], b: readonly unknown[]) => compareOrderKeys(keyPlan, a, b),\n            },\n          }\n        : {}),\n      offset: mode === 'rows' ? this.plan.offset : 0,\n      limit,\n      ...(mode === 'rows' && via?.hasResultDecode\n        ? { decode: (rows: readonly unknown[]) => this.decodeVia(rows) }\n        : {}),\n    })\n  }\n\n  /**\n   * Build the #1341 grouped-maintenance seam for this plan, or `undefined`\n   * when the plan shape or the source cannot support one (a grouped live\n   * reduction then re-runs in full, exactly as it did before).\n   *\n   * Same whitelist and the same three inputs `incrementalMaintainer('records')`\n   * uses, for the same reason: `.groupBy()`'s record pipeline IS\n   * `.aggregate()`'s — `candidateRecords` + `filterRecords`, with no sort, no\n   * window and no Via result decode — so `orderBy`/`limit` are stripped before\n   * the whitelist is asked. `matches` is the same `filterRecords` call the\n   * eager pipeline makes, which is what stops the two paths from drifting.\n   *\n   * The one addition is `project`: `.groupBy(dateTrunc(...))` (#1350) stamps a\n   * derived key onto each row AFTER filtering and before bucketing, and the\n   * maintainer has to stamp it too or it would bucket on a field that is not\n   * there. It is a pure per-record map, which is the only kind of projection\n   * this hook may carry.\n   */\n  private groupMaintenance(derived: readonly DateTruncKey[]): GroupMaintenanceSource | undefined {\n    const source = this.source\n    const snapshotEntries = source.snapshotEntries?.bind(source)\n    const lookupById = source.lookupById?.bind(source)\n    if (!snapshotEntries || !lookupById) return undefined\n    const indexes = source.getIndexes?.()\n    const probe = indexes\n      ? { covers: (f: string) => indexes.has(f), sorted: (f: string) => indexes.hasSorted(f) }\n      : null\n    if (!canMaintainIncrementally({ ...this.plan, orderBy: [], limit: undefined }, probe)) {\n      return undefined\n    }\n    const clauses = this.plan.clauses\n    const decodeForFns = fnViewDecoder(source)\n    return {\n      snapshotEntries,\n      lookupById,\n      matches: (record: unknown) => filterRecords([record], clauses, decodeForFns).length === 1,\n      ...(derived.length > 0\n        ? { project: (record: unknown) => projectDateTruncKeys([record], derived)[0] }\n        : {}),\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA8BO,IAAM,qBAAN,MAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBtB,sBAAsB,MAAsD;AAClF,UAAM,SAAS,KAAK;AACpB,UAAM,kBAAkB,OAAO,iBAAiB,KAAK,MAAM;AAC3D,UAAM,aAAa,OAAO,YAAY,KAAK,MAAM;AACjD,QAAI,CAAC,mBAAmB,CAAC,WAAY,QAAO;AAI5C,UAAM,UAAU,SAAS,SAAS,KAAK,KAAK,UAAU,CAAC;AACvD,UAAM,QAAQ,SAAS,SAAS,KAAK,KAAK,QAAQ;AAClD,UAAM,UAAU,OAAO,aAAa;AACpC,UAAM,QAAQ,UACV,EAAE,QAAQ,CAAC,MAAc,QAAQ,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAc,QAAQ,UAAU,CAAC,EAAE,IACrF;AACJ,QAAI,CAAC,yBAAyB,EAAE,GAAG,KAAK,MAAM,SAAS,MAAM,GAAG,KAAK,EAAG,QAAO;AAE/E,UAAM,UAAU,KAAK,KAAK;AAC1B,UAAM,eAAe,cAAc,MAAM;AACzC,UAAM,MAAM,OAAO;AAKnB,UAAM,UAAU,QAAQ,SAAS,IAAI,kBAAkB,SAAS,GAAG,IAAI;AACvE,WAAO,IAAI,eAAe;AAAA,MACxB;AAAA,MACA;AAAA,MACA,SAAS,YAAU,cAAc,CAAC,MAAM,GAAG,SAAS,YAAY,EAAE,WAAW;AAAA,MAC7E,GAAI,UACA;AAAA,QACE,OAAO;AAAA,UACL,OAAO,CAAC,WAAoB,WAAW,SAAS,MAAM;AAAA,UACtD,SAAS,CAAC,GAAuB,MAA0B,iBAAiB,SAAS,GAAG,CAAC;AAAA,QAC3F;AAAA,MACF,IACA,CAAC;AAAA,MACL,QAAQ,SAAS,SAAS,KAAK,KAAK,SAAS;AAAA,MAC7C;AAAA,MACA,GAAI,SAAS,UAAU,KAAK,kBACxB,EAAE,QAAQ,CAAC,SAA6B,KAAK,UAAU,IAAI,EAAE,IAC7D,CAAC;AAAA,IACP,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBQ,iBAAiB,SAAsE;AAC7F,UAAM,SAAS,KAAK;AACpB,UAAM,kBAAkB,OAAO,iBAAiB,KAAK,MAAM;AAC3D,UAAM,aAAa,OAAO,YAAY,KAAK,MAAM;AACjD,QAAI,CAAC,mBAAmB,CAAC,WAAY,QAAO;AAC5C,UAAM,UAAU,OAAO,aAAa;AACpC,UAAM,QAAQ,UACV,EAAE,QAAQ,CAAC,MAAc,QAAQ,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAc,QAAQ,UAAU,CAAC,EAAE,IACrF;AACJ,QAAI,CAAC,yBAAyB,EAAE,GAAG,KAAK,MAAM,SAAS,CAAC,GAAG,OAAO,OAAU,GAAG,KAAK,GAAG;AACrF,aAAO;AAAA,IACT;AACA,UAAM,UAAU,KAAK,KAAK;AAC1B,UAAM,eAAe,cAAc,MAAM;AACzC,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,SAAS,CAAC,WAAoB,cAAc,CAAC,MAAM,GAAG,SAAS,YAAY,EAAE,WAAW;AAAA,MACxF,GAAI,QAAQ,SAAS,IACjB,EAAE,SAAS,CAAC,WAAoB,qBAAqB,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC,EAAE,IAC3E,CAAC;AAAA,IACP;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-Q2PU57HC.js → chunk-BK2HHQGN.js}

@@ -2,7 +2,7 @@ import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayNameCollisionError
-} from "./chunk-7O3Y4PPD.js";
+} from "./chunk-244VXYPG.js";
 
 // src/with-formula/overlay-views/registry.ts
 var OverlayedViewRegistry = class {
@@ -68,4 +68,4 @@ var OverlayedViewRegistry = class {
 export {
   OverlayedViewRegistry
 };
-//# sourceMappingURL=chunk-Q2PU57HC.js.map
+//# sourceMappingURL=chunk-BK2HHQGN.js.map

package/dist/chunk-BKT776R5.js

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-BKT776R5.js.map

package/dist/{chunk-KUX3OB6D.js → chunk-BP6DARYA.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-VYYM3MEN.js";
 import {
   derivePersistedSchema
-} from "./chunk-REDOOY2Q.js";
+} from "./chunk-PSIV7CJV.js";
 import {
   loadPersistedSchema
-} from "./chunk-2Y4IMKA6.js";
+} from "./chunk-3H5KLDZN.js";
 
 // src/with-shape/introspection/walk.ts
 var INTERNAL_PREFIX = "_";
@@ -39,7 +39,11 @@ async function dumpVaultSchema(vault, opts) {
     }
   }
   const snap = {
-    _noydb_snapshot: 1,
+    _noydb_snapshot: 2,
+    // #1447 — what this emitter CAN report, not what it found. `via` is listed
+    // unconditionally: a vault declaring no via fields still gets it, because
+    // the consumer's question is "can you answer?", not "did you find any".
+    reports: withStats ? ["via", "stats"] : ["via"],
     vault: state.name,
     emittedAt: (/* @__PURE__ */ new Date()).toISOString(),
     subsystems: state.subsystems,
@@ -95,6 +99,9 @@ async function describeCollection(state, collectionName, sampleSize, withStats)
   }
   if (Object.keys(fields).length === 0 && sampleSize > 0) {
   }
+  if (liveColl !== void 0 && Object.keys(fields).length > 0) {
+    fields = overlayBulk(fields, liveColl);
+  }
   const collMeta = liveColl?.getMeta();
   const collConfig = liveColl?.getConfig();
   const archivePresent = state.hasCollectionArchive?.(collectionName) === true;
@@ -108,13 +115,17 @@ async function describeCollection(state, collectionName, sampleSize, withStats)
       ...hasSchemaUpdate ? { schemaUpdate: schemaUpdateNames } : {}
     };
   }
+  const viaCoverage = liveColl?.getViaCoverage();
   const descriptor = {
     fields,
     indexes: liveColl?.getDeclaredIndexes() ?? [],
     refs,
     ...validator ? { validator } : {},
     ...collMeta !== void 0 ? { meta: collMeta } : {},
-    ...mergedConfig !== void 0 ? { config: mergedConfig } : {}
+    ...mergedConfig !== void 0 ? { config: mergedConfig } : {},
+    // #1447 — omitted entirely when the collection declares no via pipeline,
+    // so absence reads as "nothing declared" rather than "nothing reported".
+    ...viaCoverage !== void 0 ? { via: viaCoverage } : {}
   };
   if (withStats) {
     const stats = await statsForCollection(state.adapter, state.name, collectionName);
@@ -122,6 +133,23 @@ async function describeCollection(state, collectionName, sampleSize, withStats)
   }
   return descriptor;
 }
+function overlayBulk(fields, liveColl) {
+  let described;
+  try {
+    described = liveColl.describe();
+  } catch {
+    return fields;
+  }
+  let out;
+  for (const f of described.fields) {
+    if (f.bulk === void 0) continue;
+    const existing = fields[f.key];
+    if (existing === void 0) continue;
+    out ??= { ...fields };
+    out[f.key] = { ...existing, bulk: f.bulk };
+  }
+  return out ?? fields;
+}
 async function statsForCollection(adapter, vault, collection) {
   const ids = await adapter.list(vault, collection);
   if (ids.length === 0) {
@@ -240,4 +268,4 @@ function summariseAggregateOp(value) {
 export {
   dumpVaultSchema
 };
-//# sourceMappingURL=chunk-KUX3OB6D.js.map
+//# sourceMappingURL=chunk-BP6DARYA.js.map

package/dist/chunk-BP6DARYA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/introspection/walk.ts"],"sourcesContent":["/**\n * Orchestrate the structural walk of a Vault, producing a\n * {@link VaultSchemaSnapshot}. Called from `Vault.dumpSchema()`.\n *\n * @module\n */\n\nimport { derivePersistedSchema } from '../persisted-schemas/derive.js'\nimport { loadPersistedSchema } from '../persisted-schemas/storage.js'\nimport { fallbackDerivationName } from './derivation-key.js'\nimport { jsonSchemaToFields } from './fields.js'\nimport type {\n  CollectionConfig,\n  CollectionDescriptor,\n  CollectionStats,\n  DumpSchemaOptions,\n  FieldDescriptor,\n  InternalCollectionStats,\n  MaterializedViewDescriptor,\n  OverlayViewDescriptor,\n  DerivationDescriptor,\n  VaultSchemaSnapshot,\n} from './types.js'\nimport type { Collection } from '../../kernel/collection.js'\nimport type { NoydbStore } from '../../kernel/types.js'\nimport type { UnlockedKeyring } from '../../with-party/team/keyring.js'\nimport type { RefRegistry } from '../../kernel/refs.js'\nimport type { VaultMeta } from './meta.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\n\n/**\n * The minimal slice of Vault internal state the walker needs.\n * Exposed via `vault._introspectState()` to keep the public Vault\n * surface narrow.\n *\n * @internal\n */\nexport interface VaultIntrospectState {\n  readonly name: string\n  readonly adapter: NoydbStore\n  readonly collectionCache: Map<string, Collection<unknown>>\n  readonly refRegistry: RefRegistry\n  readonly getDEK: (collectionName: string) => Promise<EnclaveKey>\n  /** The active unlocked keyring — role/permissions/userId for access-scoped ops. */\n  readonly keyring: UnlockedKeyring\n  readonly subsystems: Record<string, boolean>\n  /** Vault-level descriptive metadata, when set via `openVault({meta})`. */\n  readonly vaultMeta?: VaultMeta\n  // Typed loosely on purpose — these are private service registries\n  // accessed only for \"is anything registered\" enumeration.\n  readonly mvRegistry: unknown\n  readonly overlayRegistry: unknown\n  readonly derivationRegistry: unknown\n  /**\n   * Returns the registered schema-update strategy names for a collection,\n   * or `undefined` when none are registered. Populated from\n   * `vault.#schemaUpdateNames` in `_introspectState()`.\n   */\n  readonly getCollectionSchemaUpdateNames?: (col: string) => readonly string[] | undefined\n  /**\n   * Returns `true` when the collection has an archive policy registered\n   * in `vault.archiveRegistry`, `false` otherwise. Populated from\n   * `vault.archiveRegistry` in `_introspectState()`.\n   */\n  readonly hasCollectionArchive?: (col: string) => boolean\n}\n\nconst INTERNAL_PREFIX = '_'\n\n/** Reserved internal collections always present in any real vault. */\nconst KNOWN_INTERNAL_NAMES = ['_keyring', '_ledger', '_meta', '_schemas', '_deltas']\n\nexport async function dumpVaultSchema(\n  vault: { _introspectState(): VaultIntrospectState },\n  opts: DumpSchemaOptions,\n): Promise<VaultSchemaSnapshot> {\n  const state = vault._introspectState()\n  const sampleSize = opts.sampleSize ?? 50\n  const withStats = opts.withStats === true\n\n  // 1. User-facing collections — alphabetical for diff stability\n  const cacheNames = [...state.collectionCache.keys()]\n  const storageNames = (await safeListAllCollections(state.adapter, state.name))\n    .filter((n) => !n.startsWith(INTERNAL_PREFIX))\n  const allNames = Array.from(new Set([...cacheNames, ...storageNames])).sort()\n\n  const collections: Record<string, CollectionDescriptor> = {}\n  for (const name of allNames) {\n    collections[name] = await describeCollection(state, name, sampleSize, withStats)\n  }\n\n  // 2. Materialized views (placeholder — real walk in MV slice 2 follow-up)\n  const materializedViews = describeMVs(state.mvRegistry)\n  // 3. Overlay views\n  const overlayViews = describeOverlays(state.overlayRegistry)\n  // 4. Derivations\n  const derivations = describeDerivations(state.derivationRegistry)\n\n  // 5. Internal collections — only with stats\n  let internal: Record<string, InternalCollectionStats> | undefined\n  if (withStats) {\n    internal = {}\n    for (const name of KNOWN_INTERNAL_NAMES) {\n      const stats = await statsForCollection(state.adapter, state.name, name)\n      if (stats.records > 0) {\n        internal[name] = { records: stats.records, bytes: stats.bytes }\n      }\n    }\n  }\n\n  const snap: VaultSchemaSnapshot = {\n    _noydb_snapshot: 2,\n    // #1447 — what this emitter CAN report, not what it found. `via` is listed\n    // unconditionally: a vault declaring no via fields still gets it, because\n    // the consumer's question is \"can you answer?\", not \"did you find any\".\n    reports: withStats ? ['via', 'stats'] : ['via'],\n    vault: state.name,\n    emittedAt: new Date().toISOString(),\n    subsystems: state.subsystems,\n    ...(state.vaultMeta !== undefined ? { meta: state.vaultMeta } : {}),\n    collections,\n    materializedViews,\n    overlayViews,\n    derivations,\n    ...(internal !== undefined ? { internal } : {}),\n  }\n  return snap\n}\n\nasync function safeListAllCollections(adapter: NoydbStore, vault: string): Promise<string[]> {\n  try {\n    const snap = await adapter.loadAll(vault)\n    return Object.keys(snap)\n  } catch {\n    return []\n  }\n}\n\nasync function describeCollection(\n  state: VaultIntrospectState,\n  collectionName: string,\n  sampleSize: number,\n  withStats: boolean,\n): Promise<CollectionDescriptor> {\n  let fields: Record<string, FieldDescriptor> = {}\n  let validator: CollectionDescriptor['validator']\n\n  const refsRaw = state.refRegistry.getOutbound(collectionName)\n  const refs: CollectionDescriptor['refs'] = {}\n  for (const [name, desc] of Object.entries(refsRaw)) {\n    refs[name] = { target: desc.target, mode: desc.mode, ...(desc.isArray ? { isArray: true } : {}) }\n  }\n\n  // 1. Try the persisted Route B envelope first.\n  try {\n    const dek = await state.getDEK(collectionName)\n    const persisted = await loadPersistedSchema(state.adapter, state.name, collectionName, dek)\n    if (persisted) {\n      validator = { kind: persisted.kind, source: 'persisted' }\n      if (persisted.jsonSchema) {\n        fields = jsonSchemaToFields(persisted.jsonSchema, 'persisted', refsRaw)\n      }\n    }\n  } catch {\n    // No DEK or decrypt failure — fall through to live-validator\n  }\n\n  const liveColl = state.collectionCache.get(collectionName)\n\n  // 2. Try the live in-process validator (when no persisted envelope).\n  if (!validator) {\n    const schema = liveColl?.getSchema()\n    if (schema) {\n      try {\n        const derived = await derivePersistedSchema(schema)\n        validator = { kind: derived.kind, source: 'live-validator' }\n        if (derived.jsonSchema) {\n          fields = jsonSchemaToFields(derived.jsonSchema, 'live-validator', refsRaw)\n        }\n      } catch {\n        // Derivation failed (e.g. missing peer-dep) — silently leave fields empty\n      }\n    }\n  }\n\n  // 3. Sampling fallback — deferred to a follow-up. For now: empty when no schema.\n  if (Object.keys(fields).length === 0 && sampleSize > 0) {\n    // Sampling path not implemented in baseline slice 2; reserved for follow-up.\n  }\n\n  // Read-shape sensitivity (#1363): `FieldMeta.bulk` lives in the `fieldMeta`\n  // channel, which is never persisted with the schema — so it can only be read\n  // off a collection that is live in this process. Merged onto whatever fields\n  // the persisted/derived route already produced; never invents a field.\n  if (liveColl !== undefined && Object.keys(fields).length > 0) {\n    fields = overlayBulk(fields, liveColl)\n  }\n\n  // Populate collection-level meta and config from the live collection when available.\n  const collMeta = liveColl?.getMeta()\n  const collConfig = liveColl?.getConfig()\n\n  // Thread vault-level config (archive + schemaUpdate) that the Collection cannot see.\n  const archivePresent = state.hasCollectionArchive?.(collectionName) === true\n  const schemaUpdateNames = state.getCollectionSchemaUpdateNames?.(collectionName)\n  const hasSchemaUpdate = schemaUpdateNames !== undefined && schemaUpdateNames.length > 0\n\n  // Merge Collection-level config with vault-level fields. Omit config entirely\n  // when all sources are empty.\n  let mergedConfig: CollectionConfig | undefined\n  if (collConfig !== undefined || archivePresent || hasSchemaUpdate) {\n    mergedConfig = {\n      ...(collConfig ?? {}),\n      ...(archivePresent ? { archive: true as const } : {}),\n      ...(hasSchemaUpdate ? { schemaUpdate: schemaUpdateNames } : {}),\n    }\n  }\n\n  const viaCoverage = liveColl?.getViaCoverage()\n\n  const descriptor: CollectionDescriptor = {\n    fields,\n    indexes: liveColl?.getDeclaredIndexes() ?? [],\n    refs,\n    ...(validator ? { validator } : {}),\n    ...(collMeta !== undefined ? { meta: collMeta } : {}),\n    ...(mergedConfig !== undefined ? { config: mergedConfig } : {}),\n    // #1447 — omitted entirely when the collection declares no via pipeline,\n    // so absence reads as \"nothing declared\" rather than \"nothing reported\".\n    ...(viaCoverage !== undefined ? { via: viaCoverage } : {}),\n  }\n  if (withStats) {\n    const stats = await statsForCollection(state.adapter, state.name, collectionName)\n    ;(descriptor as { stats?: CollectionStats }).stats = stats\n  }\n  return descriptor\n}\n\n/**\n * Overlay the `bulk` axis from a live collection's `describe()` onto the\n * snapshot's field map. Sync and store-free by construction (`describe()` with\n * no options does no I/O); silent if a collection cannot describe itself,\n * because a snapshot that throws is worse than one missing a telemetry hint.\n */\nfunction overlayBulk(\n  fields: Record<string, FieldDescriptor>,\n  liveColl: Collection<unknown>,\n): Record<string, FieldDescriptor> {\n  let described\n  try {\n    described = liveColl.describe()\n  } catch {\n    return fields\n  }\n  let out: Record<string, FieldDescriptor> | undefined\n  for (const f of described.fields) {\n    if (f.bulk === undefined) continue\n    const existing = fields[f.key]\n    if (existing === undefined) continue\n    out ??= { ...fields }\n    out[f.key] = { ...existing, bulk: f.bulk }\n  }\n  return out ?? fields\n}\n\nasync function statsForCollection(\n  adapter: NoydbStore,\n  vault: string,\n  collection: string,\n): Promise<CollectionStats> {\n  const ids = await adapter.list(vault, collection)\n  if (ids.length === 0) {\n    return { records: 0, bytes: 0, bytesAvg: 0, bytesMin: 0, bytesMax: 0, oldest: '', newest: '' }\n  }\n  let total = 0\n  let min = Number.POSITIVE_INFINITY\n  let max = 0\n  let oldest = '￿'\n  let newest = ''\n  for (const id of ids) {\n    const env = await adapter.get(vault, collection, id)\n    if (!env) continue\n    const size = env._data.length\n    total += size\n    if (size < min) min = size\n    if (size > max) max = size\n    if (env._ts < oldest) oldest = env._ts\n    if (env._ts > newest) newest = env._ts\n  }\n  return {\n    records: ids.length,\n    bytes: total,\n    bytesAvg: Math.round(total / ids.length),\n    bytesMin: min === Number.POSITIVE_INFINITY ? 0 : min,\n    bytesMax: max,\n    oldest: oldest === '￿' ? '' : oldest,\n    newest,\n  }\n}\n\nfunction describeMVs(registry: unknown): Record<string, MaterializedViewDescriptor> {\n  if (!registry || typeof registry !== 'object') return {}\n  const items = listFromRegistry(registry as Record<string, unknown>)\n  const out: Record<string, MaterializedViewDescriptor> = {}\n  // Each item is RegisteredMV { spec, dependencies, outputCollection, ... }\n  for (const item of items) {\n    const reg = item as {\n      spec?: {\n        name?: string\n        unionSources?: ReadonlyArray<{ collection: string }>\n        groupBy?: string | ReadonlyArray<string>\n        aggregate?: Record<string, unknown>\n        refresh?: string\n      }\n      dependencies?: ReadonlySet<string>\n    }\n    const spec = reg.spec\n    if (!spec?.name) continue\n    const sources = spec.unionSources\n      ? spec.unionSources.map((u) => u.collection)\n      : (reg.dependencies ? [...reg.dependencies].sort() : [])\n    const groupBy = spec.groupBy\n      ? Array.isArray(spec.groupBy) ? [...spec.groupBy] : [spec.groupBy]\n      : undefined\n    const aggregate = spec.aggregate ? Object.fromEntries(\n      Object.entries(spec.aggregate).map(([k, v]) => [k, summariseAggregateOp(v)]),\n    ) : undefined\n    out[spec.name] = {\n      sources,\n      ...(groupBy ? { groupBy } : {}),\n      ...(aggregate ? { aggregate } : {}),\n      refresh: spec.refresh ?? 'eager',\n    }\n  }\n  return out\n}\n\nfunction describeOverlays(registry: unknown): Record<string, OverlayViewDescriptor> {\n  if (!registry || typeof registry !== 'object') return {}\n  const specs = listFromRegistry(registry as Record<string, unknown>)\n  const out: Record<string, OverlayViewDescriptor> = {}\n  for (const spec of specs) {\n    const s = spec as { name?: string; base?: string; overlay?: string }\n    if (!s.name || !s.base || !s.overlay) continue\n    out[s.name] = { base: s.base, overlay: s.overlay }\n  }\n  return out\n}\n\nfunction describeDerivations(registry: unknown): Record<string, DerivationDescriptor> {\n  if (!registry || typeof registry !== 'object') return {}\n  const items = listFromRegistry(registry as Record<string, unknown>)\n  const out: Record<string, DerivationDescriptor> = {}\n  const used = new Set<string>()\n  // Pre-seed with every explicit name BEFORE keying any derivation, so an\n  // unnamed derivation's fallback key never collides with (and clobbers) a\n  // named one, regardless of registration order (#973).\n  for (const item of items) {\n    const reg = item as { spec?: { name?: string }; name?: string }\n    const explicitName = (reg.spec ?? reg).name\n    if (explicitName !== undefined) used.add(explicitName)\n  }\n  for (const item of items) {\n    // `all()` on DerivationRegistry returns RegisteredStrategy objects:\n    // { spec: DerivationSpec, strategyHash }. Read `spec` and fall\n    // back to the item itself for forward-compat with other registries.\n    const reg = item as { spec?: { name?: string; source?: string; outputs?: Record<string, { collection: string }> }; name?: string; source?: string; outputs?: Record<string, { collection: string }> }\n    const s = reg.spec ?? reg\n    if (!s.source) continue\n    const outputCollections = s.outputs\n      ? Object.values(s.outputs).map((o) => (o as { collection: string }).collection)\n      : []\n    // Named derivations key by their (vault-unique) `name`. Unnamed ones key\n    // by the shared collision-safe fallback (sorted output collections, else\n    // source, with a `#occurrence` suffix on collision) — the SAME algorithm\n    // `listBehaviors` uses (`./derivation-key.ts`) so both surfaces key an\n    // unnamed derivation identically.\n    const key = s.name ?? fallbackDerivationName(outputCollections, s.source, used)\n    if (s.name === undefined) used.add(key)\n    out[key] = {\n      source: s.source,\n      outputs: outputCollections,\n      ...(s.name !== undefined ? { name: s.name } : {}),\n    }\n  }\n  return out\n}\n\nfunction listFromRegistry(reg: Record<string, unknown>): readonly unknown[] {\n  // Registries expose different accessor methods; try the common ones.\n  for (const method of ['all', 'list', 'specs', 'values']) {\n    const fn = reg[method]\n    if (typeof fn === 'function') {\n      try {\n        const out = (fn as () => unknown).call(reg)\n        if (Array.isArray(out)) return out\n        if (out && typeof (out as { values?: () => unknown }).values === 'function') {\n          return [...(out as { values: () => Iterable<unknown> }).values()]\n        }\n      } catch {\n        continue\n      }\n    }\n  }\n  return []\n}\n\nfunction summariseAggregateOp(value: unknown): string {\n  if (value && typeof value === 'object') {\n    const op = (value as { op?: string; kind?: string; field?: string }).op\n      ?? (value as { kind?: string }).kind\n    const field = (value as { field?: string }).field\n    if (op && field) return `${op}(${field})`\n    if (op) return op\n  }\n  return String(value)\n}\n"],"mappings":";;;;;;;;;;;;;;AAmEA,IAAM,kBAAkB;AAGxB,IAAM,uBAAuB,CAAC,YAAY,WAAW,SAAS,YAAY,SAAS;AAEnF,eAAsB,gBACpB,OACA,MAC8B;AAC9B,QAAM,QAAQ,MAAM,iBAAiB;AACrC,QAAM,aAAa,KAAK,cAAc;AACtC,QAAM,YAAY,KAAK,cAAc;AAGrC,QAAM,aAAa,CAAC,GAAG,MAAM,gBAAgB,KAAK,CAAC;AACnD,QAAM,gBAAgB,MAAM,uBAAuB,MAAM,SAAS,MAAM,IAAI,GACzE,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,eAAe,CAAC;AAC/C,QAAM,WAAW,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,YAAY,GAAG,YAAY,CAAC,CAAC,EAAE,KAAK;AAE5E,QAAM,cAAoD,CAAC;AAC3D,aAAW,QAAQ,UAAU;AAC3B,gBAAY,IAAI,IAAI,MAAM,mBAAmB,OAAO,MAAM,YAAY,SAAS;AAAA,EACjF;AAGA,QAAM,oBAAoB,YAAY,MAAM,UAAU;AAEtD,QAAM,eAAe,iBAAiB,MAAM,eAAe;AAE3D,QAAM,cAAc,oBAAoB,MAAM,kBAAkB;AAGhE,MAAI;AACJ,MAAI,WAAW;AACb,eAAW,CAAC;AACZ,eAAW,QAAQ,sBAAsB;AACvC,YAAM,QAAQ,MAAM,mBAAmB,MAAM,SAAS,MAAM,MAAM,IAAI;AACtE,UAAI,MAAM,UAAU,GAAG;AACrB,iBAAS,IAAI,IAAI,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAA4B;AAAA,IAChC,iBAAiB;AAAA;AAAA;AAAA;AAAA,IAIjB,SAAS,YAAY,CAAC,OAAO,OAAO,IAAI,CAAC,KAAK;AAAA,IAC9C,OAAO,MAAM;AAAA,IACb,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,YAAY,MAAM;AAAA,IAClB,GAAI,MAAM,cAAc,SAAY,EAAE,MAAM,MAAM,UAAU,IAAI,CAAC;AAAA,IACjE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,eAAe,uBAAuB,SAAqB,OAAkC;AAC3F,MAAI;AACF,UAAM,OAAO,MAAM,QAAQ,QAAQ,KAAK;AACxC,WAAO,OAAO,KAAK,IAAI;AAAA,EACzB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,mBACb,OACA,gBACA,YACA,WAC+B;AAC/B,MAAI,SAA0C,CAAC;AAC/C,MAAI;AAEJ,QAAM,UAAU,MAAM,YAAY,YAAY,cAAc;AAC5D,QAAM,OAAqC,CAAC;AAC5C,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,SAAK,IAAI,IAAI,EAAE,QAAQ,KAAK,QAAQ,MAAM,KAAK,MAAM,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC,EAAG;AAAA,EAClG;AAGA,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,OAAO,cAAc;AAC7C,UAAM,YAAY,MAAM,oBAAoB,MAAM,SAAS,MAAM,MAAM,gBAAgB,GAAG;AAC1F,QAAI,WAAW;AACb,kBAAY,EAAE,MAAM,UAAU,MAAM,QAAQ,YAAY;AACxD,UAAI,UAAU,YAAY;AACxB,iBAAS,mBAAmB,UAAU,YAAY,aAAa,OAAO;AAAA,MACxE;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,QAAM,WAAW,MAAM,gBAAgB,IAAI,cAAc;AAGzD,MAAI,CAAC,WAAW;AACd,UAAM,SAAS,UAAU,UAAU;AACnC,QAAI,QAAQ;AACV,UAAI;AACF,cAAM,UAAU,MAAM,sBAAsB,MAAM;AAClD,oBAAY,EAAE,MAAM,QAAQ,MAAM,QAAQ,iBAAiB;AAC3D,YAAI,QAAQ,YAAY;AACtB,mBAAS,mBAAmB,QAAQ,YAAY,kBAAkB,OAAO;AAAA,QAC3E;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,MAAM,EAAE,WAAW,KAAK,aAAa,GAAG;AAAA,EAExD;AAMA,MAAI,aAAa,UAAa,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5D,aAAS,YAAY,QAAQ,QAAQ;AAAA,EACvC;AAGA,QAAM,WAAW,UAAU,QAAQ;AACnC,QAAM,aAAa,UAAU,UAAU;AAGvC,QAAM,iBAAiB,MAAM,uBAAuB,cAAc,MAAM;AACxE,QAAM,oBAAoB,MAAM,iCAAiC,cAAc;AAC/E,QAAM,kBAAkB,sBAAsB,UAAa,kBAAkB,SAAS;AAItF,MAAI;AACJ,MAAI,eAAe,UAAa,kBAAkB,iBAAiB;AACjE,mBAAe;AAAA,MACb,GAAI,cAAc,CAAC;AAAA,MACnB,GAAI,iBAAiB,EAAE,SAAS,KAAc,IAAI,CAAC;AAAA,MACnD,GAAI,kBAAkB,EAAE,cAAc,kBAAkB,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF;AAEA,QAAM,cAAc,UAAU,eAAe;AAE7C,QAAM,aAAmC;AAAA,IACvC;AAAA,IACA,SAAS,UAAU,mBAAmB,KAAK,CAAC;AAAA,IAC5C;AAAA,IACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACjC,GAAI,aAAa,SAAY,EAAE,MAAM,SAAS,IAAI,CAAC;AAAA,IACnD,GAAI,iBAAiB,SAAY,EAAE,QAAQ,aAAa,IAAI,CAAC;AAAA;AAAA;AAAA,IAG7D,GAAI,gBAAgB,SAAY,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,EAC1D;AACA,MAAI,WAAW;AACb,UAAM,QAAQ,MAAM,mBAAmB,MAAM,SAAS,MAAM,MAAM,cAAc;AAC/E,IAAC,WAA2C,QAAQ;AAAA,EACvD;AACA,SAAO;AACT;AAQA,SAAS,YACP,QACA,UACiC;AACjC,MAAI;AACJ,MAAI;AACF,gBAAY,SAAS,SAAS;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI;AACJ,aAAW,KAAK,UAAU,QAAQ;AAChC,QAAI,EAAE,SAAS,OAAW;AAC1B,UAAM,WAAW,OAAO,EAAE,GAAG;AAC7B,QAAI,aAAa,OAAW;AAC5B,YAAQ,EAAE,GAAG,OAAO;AACpB,QAAI,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,MAAM,EAAE,KAAK;AAAA,EAC3C;AACA,SAAO,OAAO;AAChB;AAEA,eAAe,mBACb,SACA,OACA,YAC0B;AAC1B,QAAM,MAAM,MAAM,QAAQ,KAAK,OAAO,UAAU;AAChD,MAAI,IAAI,WAAW,GAAG;AACpB,WAAO,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAAA,EAC/F;AACA,MAAI,QAAQ;AACZ,MAAI,MAAM,OAAO;AACjB,MAAI,MAAM;AACV,MAAI,SAAS;AACb,MAAI,SAAS;AACb,aAAW,MAAM,KAAK;AACpB,UAAM,MAAM,MAAM,QAAQ,IAAI,OAAO,YAAY,EAAE;AACnD,QAAI,CAAC,IAAK;AACV,UAAM,OAAO,IAAI,MAAM;AACvB,aAAS;AACT,QAAI,OAAO,IAAK,OAAM;AACtB,QAAI,OAAO,IAAK,OAAM;AACtB,QAAI,IAAI,MAAM,OAAQ,UAAS,IAAI;AACnC,QAAI,IAAI,MAAM,OAAQ,UAAS,IAAI;AAAA,EACrC;AACA,SAAO;AAAA,IACL,SAAS,IAAI;AAAA,IACb,OAAO;AAAA,IACP,UAAU,KAAK,MAAM,QAAQ,IAAI,MAAM;AAAA,IACvC,UAAU,QAAQ,OAAO,oBAAoB,IAAI;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,WAAW,WAAM,KAAK;AAAA,IAC9B;AAAA,EACF;AACF;AAEA,SAAS,YAAY,UAA+D;AAClF,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO,CAAC;AACvD,QAAM,QAAQ,iBAAiB,QAAmC;AAClE,QAAM,MAAkD,CAAC;AAEzD,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM;AAUZ,UAAM,OAAO,IAAI;AACjB,QAAI,CAAC,MAAM,KAAM;AACjB,UAAM,UAAU,KAAK,eACjB,KAAK,aAAa,IAAI,CAAC,MAAM,EAAE,UAAU,IACxC,IAAI,eAAe,CAAC,GAAG,IAAI,YAAY,EAAE,KAAK,IAAI,CAAC;AACxD,UAAM,UAAU,KAAK,UACjB,MAAM,QAAQ,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO,IAC/D;AACJ,UAAM,YAAY,KAAK,YAAY,OAAO;AAAA,MACxC,OAAO,QAAQ,KAAK,SAAS,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC;AAAA,IAC7E,IAAI;AACJ,QAAI,KAAK,IAAI,IAAI;AAAA,MACf;AAAA,MACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC7B,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,MACjC,SAAS,KAAK,WAAW;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,UAA0D;AAClF,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO,CAAC;AACvD,QAAM,QAAQ,iBAAiB,QAAmC;AAClE,QAAM,MAA6C,CAAC;AACpD,aAAW,QAAQ,OAAO;AACxB,UAAM,IAAI;AACV,QAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,EAAE,QAAS;AACtC,QAAI,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,SAAS,EAAE,QAAQ;AAAA,EACnD;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAyD;AACpF,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO,CAAC;AACvD,QAAM,QAAQ,iBAAiB,QAAmC;AAClE,QAAM,MAA4C,CAAC;AACnD,QAAM,OAAO,oBAAI,IAAY;AAI7B,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM;AACZ,UAAM,gBAAgB,IAAI,QAAQ,KAAK;AACvC,QAAI,iBAAiB,OAAW,MAAK,IAAI,YAAY;AAAA,EACvD;AACA,aAAW,QAAQ,OAAO;AAIxB,UAAM,MAAM;AACZ,UAAM,IAAI,IAAI,QAAQ;AACtB,QAAI,CAAC,EAAE,OAAQ;AACf,UAAM,oBAAoB,EAAE,UACxB,OAAO,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAO,EAA6B,UAAU,IAC5E,CAAC;AAML,UAAM,MAAM,EAAE,QAAQ,uBAAuB,mBAAmB,EAAE,QAAQ,IAAI;AAC9E,QAAI,EAAE,SAAS,OAAW,MAAK,IAAI,GAAG;AACtC,QAAI,GAAG,IAAI;AAAA,MACT,QAAQ,EAAE;AAAA,MACV,SAAS;AAAA,MACT,GAAI,EAAE,SAAS,SAAY,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,IACjD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAkD;AAE1E,aAAW,UAAU,CAAC,OAAO,QAAQ,SAAS,QAAQ,GAAG;AACvD,UAAM,KAAK,IAAI,MAAM;AACrB,QAAI,OAAO,OAAO,YAAY;AAC5B,UAAI;AACF,cAAM,MAAO,GAAqB,KAAK,GAAG;AAC1C,YAAI,MAAM,QAAQ,GAAG,EAAG,QAAO;AAC/B,YAAI,OAAO,OAAQ,IAAmC,WAAW,YAAY;AAC3E,iBAAO,CAAC,GAAI,IAA4C,OAAO,CAAC;AAAA,QAClE;AAAA,MACF,QAAQ;AACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEA,SAAS,qBAAqB,OAAwB;AACpD,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,KAAM,MAAyD,MAC/D,MAA4B;AAClC,UAAM,QAAS,MAA6B;AAC5C,QAAI,MAAM,MAAO,QAAO,GAAG,EAAE,IAAI,KAAK;AACtC,QAAI,GAAI,QAAO;AAAA,EACjB;AACA,SAAO,OAAO,KAAK;AACrB;","names":[]}

package/dist/{chunk-FXBIP2WD.js → chunk-BUDAGWL5.js}

@@ -201,7 +201,7 @@ var engineCtx = (ctx) => ({
 function withClassified() {
   return {
     async reveal(ctx, id, field) {
-      const { revealSealedField } = await import("./reveal-67RDQRIN.js");
+      const { revealSealedField } = await import("./reveal-4BCKPEC2.js");
       const value = await revealSealedField({
         collection: ctx.collection,
         encrypted: ctx.encrypted,
@@ -213,26 +213,26 @@ function withClassified() {
       return value;
     },
     async verify(ctx, id, field, candidate) {
-      const { verifyDigestField } = await import("./verify-KOV2G5D6.js");
+      const { verifyDigestField } = await import("./verify-RVT67IMH.js");
       const verdict = await verifyDigestField(engineCtx(ctx), id, field, candidate, policyOf(ctx.spec));
       await ctx.onAccess?.("verify", id);
       return verdict;
     },
     async verifyText(ctx, id, field, candidate) {
-      const { verifyTextField } = await import("./verify-KOV2G5D6.js");
+      const { verifyTextField } = await import("./verify-RVT67IMH.js");
       const verdict = await verifyTextField(engineCtx(ctx), id, field, candidate, ctx.spec.verifyNormalize ?? "password");
       await ctx.onAccess?.("verify", id);
       return verdict;
     },
     async matchGroup(ctx, id, answers, opts) {
-      const { matchGroupFields } = await import("./verify-KOV2G5D6.js");
+      const { matchGroupFields } = await import("./verify-RVT67IMH.js");
       const members = (ctx.groupMembers ?? []).map((m) => ({ field: m.field, policy: policyOf(m.spec) }));
       const result = await matchGroupFields(engineCtx(ctx), id, answers, members, opts);
       await ctx.onAccess?.("verify", id);
       return result;
     },
     async computeTarget(ctx, field, candidate, costByte) {
-      const { computeBidxTarget } = await import("./find-2ABFCZX4.js");
+      const { computeBidxTarget } = await import("./find-LZMP26KF.js");
       const dek = await ctx.getDEK();
       return computeBidxTarget(candidate, policyOf(ctx.spec).normalize, dek, ctx.collection, field, costByte);
     }
@@ -244,4 +244,4 @@ export {
   classified,
   withClassified
 };
-//# sourceMappingURL=chunk-FXBIP2WD.js.map
+//# sourceMappingURL=chunk-BUDAGWL5.js.map