graphddb 0.2.5 → 0.3.0

package/dist/{types--tdHK3vi.d.ts → types-xJRn5qkv.d.ts}

@@ -1003,7 +1003,7 @@ interface Executor {
 
 /**
  * Write middleware / hook public surface (issue #50 write path, #139). The merged
- * design is `docs/proposals/read-middleware.md`; this module implements the
+ * design is `docs/middleware.md`; this module implements the
  * **write** hook points W1–W5 and their context objects, layered on the SAME
  * registry / runtime machinery the read hooks (#138) introduced.
  *
@@ -1014,18 +1014,18 @@ interface Executor {
  * the TS↔Python bridge (#48) is unaffected. It is **unrestricted by intent**: a
  * hook may observe, mutate `ctx`, `throw` to cancel, or (on `onError`) recover by
  * returning a value. The library does NOT validate hook logic or impose semantics
- * (proposal appendix A). The internal CDC / capture mechanism (`src/capture/`,
+ * (see docs/middleware.md). The internal CDC / capture mechanism (`src/capture/`,
  * `src/cdc/`) is a SEPARATE surface — write hooks are not a substitute for it nor
- * it for them (proposal appendix C).
+ * it for them (see docs/middleware.md).
  *
- * @see docs/proposals/read-middleware.md (hook points W1–W5)
+ * @see docs/middleware.md (hook points W1–W5)
  */
 
 /**
  * The logical write kinds a {@link WriteCtx} may carry (W1 / W2 / W5). A W1 hook
  * may REWRITE this in place — the canonical case is a `delete` → `update`
  * (soft-delete-by-rewrite); derivation then runs on the rewritten op, so the
- * stored effect is the update, not the delete (proposal W1 + examples).
+ * stored effect is the update, not the delete (see docs/middleware.md).
  */
 type WriteKind = 'put' | 'update' | 'delete';
 /**
@@ -1122,9 +1122,9 @@ interface PersistCtx {
  * The write half of a registered {@link import('./types.js').Middleware}. Any
  * subset of the write hook points may be set; an unset hook is skipped. All hooks
  * are async-first — the runtime always `await`s, so sync and async hooks compose
- * uniformly (proposal "sync / async").
+ * uniformly (see docs/middleware.md).
  *
- * @see docs/proposals/read-middleware.md (hook points W1–W5)
+ * @see docs/middleware.md (hook points W1–W5)
  */
 interface WriteMiddleware {
     /** W1 — logical write, before effect derivation. May mutate `ctx.input` / `ctx.kind`; `throw` cancels (in a tx, aborts all). */
@@ -1157,7 +1157,7 @@ interface WriteMiddleware {
 
 /**
  * Read middleware / hook public surface (issue #50, implemented for the read
- * path in #138). The merged design is `docs/proposals/read-middleware.md`; this
+ * path in #138). The merged design is `docs/middleware.md`; this
  * module implements the **read** hook points R1–R5 and their context objects.
  *
  * A {@link Middleware} is a host-only, runtime-registered object (registered via
@@ -1167,9 +1167,9 @@ interface WriteMiddleware {
  * `operations.json`, so the TS↔Python bridge (#48) is unaffected. Hooks are
  * **unrestricted by intent**: a hook may observe, mutate `ctx`, `throw` to
  * cancel, or return a replacement value. The library does NOT validate hook
- * logic or impose semantics — see the proposal appendix A.
+ * logic or impose semantics — see docs/middleware.md.
  *
- * @see docs/proposals/read-middleware.md
+ * @see docs/middleware.md
  */
 
 /** A raw DynamoDB item (the shape R3 sees, per-op). */
@@ -1196,7 +1196,7 @@ interface CtxBase {
     /**
      * Scratch space shared across this op's phases (R2 → R3 → R5 for one op, or
      * R1 → R4 → R5 for the request). A fresh object per request context object;
-     * each fan-out op gets its own `state` (see proposal appendix D — siblings run
+     * each fan-out op gets its own `state` ((docs/middleware.md) — siblings run
      * concurrently, so a shared accumulator should live on a host object via
      * `context`, updated commutatively).
      */
@@ -1278,10 +1278,10 @@ interface ReadOpCtx extends CtxBase {
 /**
  * A registered read middleware object. Any subset of the read hook points may
  * be set; an unset hook is simply skipped. All hooks may be synchronous or
- * return a `Promise` — the runtime always `await`s (async-first, see proposal
+ * return a `Promise` — the runtime always `await`s (async-first, see docs/middleware.md
  * "sync / async").
  *
- * @see docs/proposals/read-middleware.md (the write hooks W1–W5 are a later phase)
+ * @see docs/middleware.md (the write hooks W1–W5 are a later phase)
  */
 interface Middleware {
     /** Optional name (for host-side debugging / ordering introspection). */
@@ -1301,7 +1301,7 @@ interface Middleware {
              * an `Item[]`: those become this op's items and the read pipeline continues
              * (the first hook that returns a value wins and short-circuits the chain).
              * Return `void` / `undefined` to decline — if no hook recovers, the original
-             * error rethrows. (See proposal R5 + appendix A — hooks are unrestricted.)
+             * error rethrows. (see docs/middleware.md — hooks are unrestricted.)
              */
             onError?(ctx: ReadOpCtx, err: unknown): void | Item[] | Promise<void | Item[]>;
         };
@@ -1969,6 +1969,259 @@ interface DeriveEffect {
     /** The amount to add (for an increment). */
     readonly amount: number;
 }
+/**
+ * A model lifecycle event that triggers a maintenance effect, expressed as an
+ * `Entity.event` string — the source entity's class name, a dot, then one of the
+ * lifecycle events. The three events mirror {@link WriteLifecyclePhase}
+ * (`create` / `update` / `remove`) in past-tense event form, so a maintenance
+ * effect is keyed by *what happened* to the source row.
+ *
+ * The string is **branded** ({@link MaintainTrigger}) so a raw `string` is not
+ * accepted where a validated trigger is required; construct one with
+ * {@link maintainTrigger}, which rejects a malformed value.
+ *
+ * @example `'Post.created'`, `'User.updated'`, `'Comment.removed'`
+ */
+type MaintainEvent = 'created' | 'updated' | 'removed';
+/** The brand carried by a validated {@link MaintainTrigger}. */
+declare const MAINTAIN_TRIGGER_BRAND: unique symbol;
+/**
+ * A validated `Entity.event` maintenance trigger string (e.g. `'Post.created'`).
+ * Branded so it is told apart from a raw `string`; build one with
+ * {@link maintainTrigger}. The shape is `${EntityName}.${MaintainEvent}` where
+ * `EntityName` is a non-empty identifier-ish token.
+ */
+type MaintainTrigger = `${string}.${MaintainEvent}` & {
+    readonly [MAINTAIN_TRIGGER_BRAND]: true;
+};
+/**
+ * Construct a validated {@link MaintainTrigger} from an `Entity.event` string.
+ * Rejects a value that is not a non-empty entity name followed by `.created` /
+ * `.updated` / `.removed`, so an invalid trigger is refused at construction time
+ * (the AC's "invalid trigger string is rejected"). The brand is a compile-time
+ * marker only; the returned value is the input string verbatim.
+ *
+ * @throws if `value` is not a well-formed `Entity.event` trigger string.
+ */
+declare function maintainTrigger(value: string): MaintainTrigger;
+/** Runtime guard: is `value` a well-formed {@link MaintainTrigger} string? */
+declare function isMaintainTrigger(value: unknown): value is MaintainTrigger;
+/**
+ * A projection transform op (issue #120, 論点3 = 関数形): the function-form
+ * `w.transform(path, op, ...args)` is the **primary** authoring surface (there is
+ * no string DSL). The initial op set is:
+ *
+ * - `identity` — copy the source path through unchanged (no args).
+ * - `preview` — keep a length-bounded preview of the source value; `n` is the
+ *   bound (`w.transform('$.body', 'preview', 200)`).
+ *
+ * New ops extend this union (and {@link ProjectionTransform}'s `args` shape) as
+ * the maintenance graph (#124) needs them.
+ */
+type ProjectionTransformOp = 'identity' | 'preview';
+/**
+ * One entry in a maintenance projection map: a `w.transform(path, op, ...args)`
+ * IR node binding a source {@link EffectPath} to a target attribute through a
+ * {@link ProjectionTransformOp}. `args` carries the op's positional arguments
+ * (e.g. `preview`'s length bound); `identity` carries none.
+ *
+ * The function form is the only authoring surface (no string DSL); the node is a
+ * plain branded record so the maintenance graph (#124) and compile injection
+ * (#125) can read it without retaining a closure.
+ */
+interface ProjectionTransform {
+    readonly kind: 'transform';
+    /** The path-rooted source value (`$.input.*` / `$.entity.*`). */
+    readonly path: EffectPath;
+    /** The transform op applied to the source value. */
+    readonly op: ProjectionTransformOp;
+    /** The op's positional arguments (e.g. `[200]` for `preview`); empty for `identity`. */
+    readonly args: readonly unknown[];
+}
+/**
+ * A maintenance **projection map**: target attribute name → its
+ * {@link ProjectionTransform}. Generalizes the way {@link DeriveEffect} names a
+ * single derived `attribute`, to a whole projected row / collection item.
+ */
+type ProjectionMap = Readonly<Record<string, ProjectionTransform>>;
+/**
+ * Standalone authoring helper for a `preview` {@link ProjectionTransform}: keep a
+ * length-bounded preview of the source `path` (the first `n` characters). This is
+ * the recorder-free counterpart to `w.transform(path, 'preview', n)` — used where
+ * there is no {@link WriteRecorder} `w`, the relation-options decorator arguments
+ * (epic #118 §5.2 / issue #121, e.g. `projection: { textPreview: preview('body',
+ * 120) }`). It produces the **same** IR node as `w.transform` (both route through
+ * {@link makeProjectionTransform}), so the two surfaces never diverge.
+ *
+ * @param path The source value the preview is taken of (a projection source path).
+ * @param n The preview length bound (a positive integer).
+ * @throws if `n` is not a positive integer.
+ */
+declare function preview(path: EffectPath, n: number): ProjectionTransform;
+/**
+ * Standalone authoring helper for an `identity` {@link ProjectionTransform}: copy
+ * the source `path` through unchanged. The recorder-free counterpart to
+ * `w.transform(path, 'identity')`. In relation-options `projection` maps a bare
+ * `string` path is the idiomatic identity shorthand; this helper is provided for
+ * symmetry / when an explicit IR node is wanted. Routes through
+ * {@link makeProjectionTransform} so it is structurally identical to the recorder
+ * form.
+ *
+ * @param path The source value copied through unchanged.
+ */
+declare function identity(path: EffectPath): ProjectionTransform;
+/**
+ * The **path** a maintenance write travels (shared vocabulary, epic #118 A/B
+ * reconciliation — RFC §5.1 / issue #121 are the authority). `mutation` lands the
+ * maintenance write **synchronously**, in the same `TransactWriteItems` as the
+ * source mutation; `stream` defers it to the **asynchronous** Streams path. This
+ * is the path axis, NOT a write-reconciliation axis.
+ *
+ * NOTE: A(#120) previously defined `updateMode` as an *invented* write-reconcile
+ * axis (`'overwrite' | 'ifNewer'`); that axis is **removed for Phase 1** (論点2=b
+ * fixes "1 mutation × 1 target row = 1 effect", so no reconcile is needed) and the
+ * name is reclaimed for the path vocabulary above. A reconcile axis may be
+ * reintroduced later under a *different* name if a future phase needs it.
+ */
+type MaintainUpdateMode = 'mutation' | 'stream';
+/**
+ * The read/write consistency a maintenance effect is realized under (shared
+ * vocabulary, epic #118 A/B reconciliation — RFC §5.1 / issue #121 are the
+ * authority). `transactional` requires the maintenance write to land in the same
+ * transaction as the source write; `eventual` (the default the consumers assume
+ * when omitted) lets it lag. A's earlier `'strong'` value is **retired** in favor
+ * of `'transactional'`.
+ */
+type MaintainConsistency = 'transactional' | 'eventual';
+/**
+ * A **snapshot** maintenance effect (issue #120): on a {@link MaintainTrigger}
+ * the source's {@link project} is mirrored into a single target row resolved by
+ * {@link targetFactory} + {@link keys}. Generalizes {@link DeriveEffect} from a
+ * single scalar `ADD`/`SET` to a projected row. Consumed by the maintenance graph
+ * (#124) and compile injection (#125); #120 defines the type only.
+ */
+interface SnapshotEffect {
+    readonly kind: 'snapshot';
+    /** The lifecycle event of the source entity that drives the snapshot. */
+    readonly trigger: MaintainTrigger;
+    /** Resolves the target entity whose row holds the snapshot. */
+    readonly targetFactory: () => new (...args: unknown[]) => unknown;
+    /** The key binding of the target row (path-rooted values). */
+    readonly keys: Readonly<Record<string, EffectPath>>;
+    /** The projection map: target attribute → `w.transform(...)` IR. */
+    readonly project: ProjectionMap;
+    /** The path the write travels — synchronous `mutation` tx or async `stream`. */
+    readonly updateMode?: MaintainUpdateMode;
+    /** The consistency the write lands under (default `eventual`). */
+    readonly consistency?: MaintainConsistency;
+}
+/**
+ * Options for the bounded collection a {@link CollectionEffect} maintains: the
+ * target {@link field} that holds the collection, an optional {@link maxItems}
+ * cap (oldest items are evicted past it), and an optional {@link orderBy} source
+ * path the items are ordered by.
+ */
+interface CollectionOptions {
+    /** The target attribute that holds the maintained collection. */
+    readonly field: string;
+    /** Cap on the collection size; items past it are evicted (unbounded if omitted). */
+    readonly maxItems?: number;
+    /** A path-rooted source value the collection is ordered by (e.g. `$.entity.createdAt`). */
+    readonly orderBy?: EffectPath;
+}
+/**
+ * A **collection** maintenance effect (issue #120): on a {@link MaintainTrigger}
+ * the source's {@link project} is appended as an item into the bounded collection
+ * named by {@link collection} on the target row resolved by {@link targetFactory}
+ * + {@link keys}. Generalizes {@link DeriveEffect} to a bounded list projection.
+ * Consumed by the maintenance graph (#124) and compile injection (#125); #120
+ * defines the type only.
+ */
+interface CollectionEffect {
+    readonly kind: 'collection';
+    /** The lifecycle event of the source entity that drives the collection write. */
+    readonly trigger: MaintainTrigger;
+    /** Resolves the target entity whose row holds the collection. */
+    readonly targetFactory: () => new (...args: unknown[]) => unknown;
+    /** The key binding of the target row (path-rooted values). */
+    readonly keys: Readonly<Record<string, EffectPath>>;
+    /** The projection map for each collection item: attribute → `w.transform(...)` IR. */
+    readonly project: ProjectionMap;
+    /** The bounded-collection options (`field` / `maxItems` / `orderBy`). */
+    readonly collection: CollectionOptions;
+    /** The path the write travels — synchronous `mutation` tx or async `stream`. */
+    readonly updateMode?: MaintainUpdateMode;
+    /** The consistency the write lands under (default `eventual`). */
+    readonly consistency?: MaintainConsistency;
+}
+/**
+ * The aggregation a {@link CounterEffect} maintains (Epic #118 §5.2 counter /
+ * latest preset; issue #141). The function-form IR `count()` / `max(field)` the
+ * `@aggregate` value helpers build, lifted into the maintenance IR:
+ *
+ * - `count` — the cardinality of the matched source rows: a `created` trigger
+ *   adds `+1`, a `removed` trigger adds `-1` (the {@link CounterEffect.delta}).
+ * - `max` — the running maximum of a named source `field`. A synchronous
+ *   transactional max cannot be expressed as a concurrency-safe single-item
+ *   `UpdateExpression` (a conditional `SET` whose guard fails would roll back the
+ *   *source* write that legitimately happened), so Phase 1 records the IR but the
+ *   compile injection (#141) rejects it for the synchronous `mutation` path —
+ *   `max` is the asynchronous stream path (#130, Phase 2). The op is kept here so
+ *   the IR is complete and the reject is precise.
+ */
+type CounterAggregate = {
+    readonly op: 'count';
+} | {
+    readonly op: 'max';
+    readonly field: string;
+};
+/**
+ * A **counter** maintenance effect (Epic #118 §5.2 counter preset; issue #141): on
+ * a {@link MaintainTrigger} a scalar aggregate on a single target row resolved by
+ * {@link targetFactory} + {@link keys} is kept in sync with the source entity's
+ * lifecycle. Where {@link SnapshotEffect} mirrors a projection and
+ * {@link CollectionEffect} appends an item, a counter applies an atomic scalar
+ * `ADD` — the maintenance-pipeline generalization of the self-lifecycle
+ * {@link DeriveEffect} (`w.increment`, #85), but driven by a CROSS-entity
+ * `maintainedOn` trigger rather than the written entity's own lifecycle.
+ *
+ * For `value.op === 'count'` the {@link delta} is the signed amount the trigger
+ * applies (`+1` on `created`, `-1` on `removed`); the maintenance graph (#124)
+ * derives it from the trigger event. Two counter effects targeting the SAME row in
+ * one mutation MERGE (the symmetric-ADD collapse #92), unlike snapshot/collection
+ * which reject a same-row collision — an `ADD` is commutative.
+ *
+ * Consumed by the maintenance graph (#124, `em.aggregates` walk) and the compile
+ * injection (#141, `DerivedMaintainWrite` of `kind: 'counter'`).
+ */
+interface CounterEffect {
+    readonly kind: 'counter';
+    /** The lifecycle event of the source entity that drives the counter. */
+    readonly trigger: MaintainTrigger;
+    /** Resolves the target entity whose row holds the counter scalar. */
+    readonly targetFactory: () => new (...args: unknown[]) => unknown;
+    /** The key binding of the target row (path-rooted values). */
+    readonly keys: Readonly<Record<string, EffectPath>>;
+    /** The target attribute the aggregate scalar is written to (e.g. `postCount`). */
+    readonly attribute: string;
+    /** The aggregation maintained (`count()` / `max(field)`). */
+    readonly value: CounterAggregate;
+    /**
+     * For `value.op === 'count'`, the signed `ADD` delta this trigger applies
+     * (`+1` created / `-1` removed). Absent for `max` (not realized synchronously).
+     */
+    readonly delta?: number;
+    /** The path the write travels — synchronous `mutation` tx or async `stream`. */
+    readonly updateMode?: MaintainUpdateMode;
+    /** The consistency the write lands under (default `eventual`). */
+    readonly consistency?: MaintainConsistency;
+}
+/**
+ * The union of maintenance effects a {@link SnapshotEffect}, {@link CollectionEffect},
+ * or {@link CounterEffect} can be. The shared IR the maintenance graph (#124) and
+ * compile injection (#125 snapshot/collection, #141 counter) consume.
+ */
+type MaintainEffect = SnapshotEffect | CollectionEffect | CounterEffect;
 /**
  * A domain event (proposal §2 `emits`): an outbox `Put` drained to Streams /
  * `src/cdc/`. Derived by #87 — stored opaquely here.
@@ -2077,6 +2330,21 @@ interface WriteRecorder {
     deleteEdge(target: () => new (...args: unknown[]) => unknown, relationProperty: string): EdgeEffect;
     /** Declare a derived / cascading update (§2 `derive`; derived #85). */
     increment(target: () => new (...args: unknown[]) => unknown, keys: Readonly<Record<string, EffectPath>>, attribute: string, amount: number): DeriveEffect;
+    /**
+     * Build a projection transform IR node (issue #120, 関数形): the primary
+     * function-form authoring surface for a maintenance projection map entry. The
+     * initial ops are `identity` (no args — copy the source path through) and
+     * `preview` (one numeric arg — keep a length-bounded preview). There is no
+     * string DSL. The returned {@link ProjectionTransform} is consumed by the
+     * maintenance graph (#124) / compile injection (#125).
+     *
+     * NOTE (issue #120 scope): the escape-hatch recorders that *attach* a
+     * {@link SnapshotEffect} / {@link CollectionEffect} to a lifecycle
+     * (`w.snapshotInto` / `w.captureInto`) and the `LifecycleEffects.maintain`
+     * wiring are **Phase 2** and are intentionally NOT part of this recorder.
+     */
+    transform(path: EffectPath, op: 'identity'): ProjectionTransform;
+    transform(path: EffectPath, op: 'preview', n: number): ProjectionTransform;
     /** Declare a domain event (§2 `emits`; derived #87). */
     event(name: string, payload: Readonly<Record<string, EffectPath>>): EmitEffect;
     /** Declare an idempotency guard (§2 `idempotency`; derived #87). */
@@ -2400,6 +2668,163 @@ declare function mutation(name: string, body: MutationBody): CommandPlan;
  */
 declare const definePlan: typeof mutation;
 
+/**
+ * Maintenance graph builder (Epic #118 issue #124 — the RFC B-案 core).
+ *
+ * ## What this module is
+ *
+ * A relation may declare a **maintenance** side via its relation options
+ * (issue #121, the B work): `write.maintainedOn` lists the cross-entity
+ * lifecycle triggers (`"<Entity>.<event>"`, e.g. `"Post.created"`) that should
+ * keep the relation's materialized shape in sync, and `projection` declares how
+ * the source entity is projected into that shape. This module walks every
+ * registered model (`MetadataRegistry.getAll()`), reads those relation-side
+ * declarations, and builds an **index**:
+ *
+ *     trigger source entity × lifecycle event (created/updated/removed)
+ *         → list of maintenance effects to apply
+ *
+ * That index is exactly the question the compile-injection step (#125) asks of
+ * a mutation: "this mutation `created` a `Post` — what must be maintained?". This
+ * module answers *which* effect fires for *which* trigger, and validates that
+ * every declared effect is realizable (round-trips with the read side); it does
+ * **not** inject anything into the compiler — see "Scope" below.
+ *
+ * ## Input is relation-side declarations only (論点1 = c)
+ *
+ * The only input is each relation's `options.write.maintainedOn` +
+ * `options.projection` (the #121 relation options). The `entityWrites` escape
+ * hatch (`w.snapshotInto` / `w.captureInto` attached to a lifecycle) is **Phase
+ * 2** and is deliberately not read here.
+ *
+ * ## Reuses the A (#120) maintenance IR — no second definition
+ *
+ * The maintenance effect each index entry carries is the **A-defined IR** —
+ * {@link SnapshotEffect} / {@link CollectionEffect} / {@link ProjectionTransform}
+ * from `src/define/entity-writes.ts` (also re-exported from the root barrel). This
+ * module *synthesizes* those nodes from the relation-side declaration (it is the
+ * relation-options → IR lowering); it never re-defines the IR shapes.
+ *
+ * ## Round-trip validation (流用 of `assertRelationRoundTrips`)
+ *
+ * Mirroring `src/relation/edge-write.ts`'s build-time round-trip guard, the graph
+ * is verified the moment it is built, and a mis-declaration is a **loud reject**:
+ *
+ * - **Snapshot/collection target key points at a real row.** The relation's
+ *   `keyBinding` target fields must resolve to a real access pattern on the
+ *   target entity (the row that holds the snapshot/collection), via the *same*
+ *   {@link resolveKey} the read planner uses. A binding that covers no partition
+ *   would write/read an unreachable row → reject.
+ * - **Projection source attributes exist on the source payload (論点4 = payload
+ *   同梱のみ).** Every projection source path (`$.entity.<field>` /
+ *   `$.input.<field>`) must name an attribute that the *source* entity (the
+ *   trigger origin) actually carries. There is no fetch / re-projection: an
+ *   attribute that is not in the source payload is rejected, not fetched.
+ * - **Unresolved trigger.** A trigger whose entity segment names no registered
+ *   model, or whose event is not `created`/`updated`/`removed`, is rejected.
+ * - **Cycle.** A maintenance dependency cycle (entity A's event maintains a
+ *   shape on B while B's event maintains a shape on A, transitively) is detected
+ *   and rejected — an unbounded maintenance cascade.
+ *
+ * ## Scope (#124 only — NOT #125)
+ *
+ * This module builds and validates the index, and exposes enough structure for
+ * the compile-injection step (#125/#126) to consume it — including the material
+ * to detect that *two* maintainers target the **same** target row (論点2 = b,
+ * "1 mutation × 1 target row = 1 effect"). It does **not** resolve maintainers
+ * into the mutation compiler, derive `DerivedMaintainWrite`s, or emit any
+ * transaction items; `resolveMaintainers` / `deriveMaintainItems` are #125's.
+ */
+
+type ModelClass = new (...args: unknown[]) => unknown;
+/**
+ * One maintenance effect, keyed in the graph by its {@link trigger}. Synthesized
+ * from a single relation's maintenance declaration (its `write.maintainedOn` +
+ * `projection`).
+ *
+ * The role mapping follows RFC §5.1 (`relation({ from, to, maintainedOn })`):
+ *
+ * - **source** = the relation's `to` (its `targetFactory()`): the entity whose
+ *   lifecycle event fires the maintenance and whose payload is projected. The
+ *   trigger's `Entity` segment names this source.
+ * - **owner** = the relation's `from` (the model declaring the relation): the row
+ *   that *holds* the maintained snapshot / collection — the **destination** of the
+ *   maintenance write.
+ *
+ * So a `Post.created` trigger on `ThreadSummary.latestPosts → Post` maintains the
+ * `ThreadSummary` (owner) row from the `Post` (source) payload. It carries the
+ * A-defined {@link MaintainEffect} IR ({@link SnapshotEffect} /
+ * {@link CollectionEffect}) the maintenance lowers to.
+ */
+interface MaintainItem {
+    /** The validated `Entity.event` trigger that fires this effect. */
+    readonly trigger: MaintainTrigger;
+    /**
+     * The source entity name (trigger origin — the row whose lifecycle fires this
+     * and whose payload is projected). Equals the relation's target (`to`).
+     */
+    readonly sourceEntity: string;
+    /** The source model class (the relation's `targetFactory()`). */
+    readonly sourceClass: ModelClass;
+    /**
+     * The entity that *declares* the maintaining relation (the relation owner /
+     * `from`) — the row that holds the maintained snapshot / collection (the
+     * maintenance write **destination**).
+     */
+    readonly ownerEntity: string;
+    /** The owner model class (the maintenance destination). */
+    readonly ownerClass: ModelClass;
+    /** The relation property on the owner that declares this maintenance. */
+    readonly relationProperty: string;
+    /**
+     * A stable key for the **destination row** a single trigger writes (the owner
+     * row), derived from the relation's bound owner-key fields. Two
+     * {@link MaintainItem}s firing on the same trigger with the same
+     * {@link destinationRowKey} write the same row — the material #125/#126 uses to
+     * enforce 論点2 = b ("1 mutation × 1 target row = 1 effect"; multiple is a
+     * reject). Built deterministically (sorted), so it is a directly comparable
+     * string.
+     */
+    readonly destinationRowKey: string;
+    /** The A-defined maintenance IR this relation lowers to. */
+    readonly effect: MaintainEffect;
+}
+/**
+ * The maintenance graph: the trigger → effects index plus the validation surface.
+ *
+ * `byTrigger` is the core index: a `MaintainTrigger` (`"Post.created"`) maps to
+ * every {@link MaintainItem} that fires on it, in a stable order (owner entity,
+ * then relation property). Empty (no entry) for a trigger nothing maintains on.
+ */
+interface MaintenanceGraph {
+    /** Every maintenance item, flattened, in deterministic order. */
+    readonly items: readonly MaintainItem[];
+    /** The core index: trigger → the effects it fires. */
+    readonly byTrigger: ReadonlyMap<MaintainTrigger, readonly MaintainItem[]>;
+    /** Look up the effects fired by a trigger (empty array if none). */
+    effectsFor(trigger: MaintainTrigger): readonly MaintainItem[];
+    /**
+     * Items that, under the SAME trigger, write the SAME target row — grouped by
+     * `"<trigger><targetRowKey>"`. Only groups with **more than one** item are
+     * present, so an empty map means no trigger has a multi-maintainer collision.
+     * This is the detection material for 論点2 = b; #124 surfaces it, #125/#126
+     * decide the reject. (Build-time we do NOT reject here — a model may legitimately
+     * declare overlapping shapes that a later phase reconciles; #124's contract is
+     * to make the collision *detectable*.)
+     */
+    readonly multiMaintainerTargets: ReadonlyMap<string, readonly MaintainItem[]>;
+}
+/**
+ * Build the {@link MaintenanceGraph} from every registered model's relation-side
+ * maintenance declarations (`MetadataRegistry.getAll()`), validating each as it is
+ * collected (round-trip, unresolved trigger) and the whole graph (cycle) before
+ * returning. Throws a loud, actionable error on any invalid declaration.
+ *
+ * @param registry The models to scan. Defaults to `MetadataRegistry.getAll()`;
+ *   an explicit map is accepted for tests / scoped builds.
+ */
+declare function buildMaintenanceGraph(registry?: ReadonlyMap<Function, EntityMetadata>): MaintenanceGraph;
+
 /**
  * Serializable static operation specs and manifest (issue #42, Python-bridge
  * Phase 0b).
@@ -2764,6 +3189,99 @@ interface TransactionItemSpec {
      * entity / edge / counter / ConditionCheck item), so those paths are unchanged.
      */
     readonly literalKey?: boolean;
+    /**
+     * A **relation-side maintenance write** (Epic #118, issue #129 — the JSON-SSoT /
+     * Python mirror of the TS in-process `renderMaintainWriteItem`). Present ONLY on an
+     * `Update` item that materializes a maintained access path: a projected
+     * {@link DerivedMaintainWrite} of a just-written source row into a SEPARATE owner
+     * (destination) row, in the SAME atomic transaction as the source write.
+     *
+     * The item's {@link keyCondition} carries the owner row's key templates (bound from
+     * the source payload — `{sourceInputField}`), so the same key derivation / collapse
+     * signature the other `Update` items use applies unchanged. This `maintain` payload
+     * carries the projection transform IR (`identity` / `preview`) the runtimes apply
+     * IDENTICALLY when rendering the `SET … = :v` (snapshot) / `list_append(…)`
+     * (collection) `UpdateExpression`, so the maintained row is byte-consistent across
+     * TS and Python. The `changes` / `add` fields are NOT used when this is present.
+     */
+    readonly maintain?: MaintainItemSpec;
+}
+/**
+ * The transform op applied to one projected maintenance attribute (Epic #118).
+ * Mirrors `ProjectionTransformOp` from `src/define/entity-writes.ts`: `identity`
+ * copies the source value through unchanged; `preview` keeps the first `n`
+ * characters of (the string form of) the source value. The runtimes apply this
+ * IDENTICALLY so the maintained row is byte-consistent.
+ */
+type MaintainProjectionOp = 'identity' | 'preview';
+/**
+ * One projected maintenance attribute: the source value is read from the mutation
+ * input field {@link inputField} (payload 同梱 — the just-written source row image),
+ * then run through {@link op} with {@link args} (e.g. `preview`'s length bound).
+ */
+interface MaintainProjectionEntry {
+    /** The transform op applied to the source value (`identity` / `preview`). */
+    readonly op: MaintainProjectionOp;
+    /** The op's positional arguments (`[n]` for `preview`; empty for `identity`). */
+    readonly args: readonly unknown[];
+    /** The mutation-input field the source value is read from (`{inputField}`). */
+    readonly inputField: string;
+}
+/**
+ * The bounded-collection options a `collection` maintenance write carries. Phase 1
+ * is **append-only**: `maxItems` / `orderBy` are recorded for the future async trim
+ * (#130) but NOT applied synchronously — a single `UpdateExpression` cannot
+ * read-modify-write a bounded/ordered list.
+ */
+interface MaintainCollectionSpec {
+    /** The target attribute that holds the maintained collection. */
+    readonly field: string;
+    /** Cap on the collection size (recorded for #130; not trimmed in Phase 1). */
+    readonly maxItems?: number;
+    /** The mutation-input field the items are ordered by (recorded for #130). */
+    readonly orderBy?: string;
+}
+/**
+ * The maintenance payload an `Update` {@link TransactionItemSpec} carries when it
+ * materializes a maintained access path (Epic #118 / #129). A `snapshot` mirrors
+ * the projection onto the owner row via `SET`; a `collection` appends the projection
+ * as an item into the bounded list named by {@link collection} via `list_append`.
+ */
+interface MaintainItemSpec {
+    /**
+     * Whether the write mirrors a single row (`snapshot`), appends a collection item
+     * (`collection`), or applies a scalar `ADD` counter (`counter`, Epic #118 / #141).
+     */
+    readonly kind: 'snapshot' | 'collection' | 'counter';
+    /** The relation property / `@aggregate` field that declared this maintenance (documentary). */
+    readonly relationProperty: string;
+    /** The trigger (`<sourceLogicalName>.<event>`) that fired this maintenance. */
+    readonly trigger: string;
+    /** target attribute → its projection transform (source field + op + args). Empty for `counter`. */
+    readonly projection: Readonly<Record<string, MaintainProjectionEntry>>;
+    /** The bounded-collection options; present only for `kind: 'collection'`. */
+    readonly collection?: MaintainCollectionSpec;
+    /**
+     * The scalar counter `ADD`; present only for `kind: 'counter'` (#141). The runtimes
+     * render `ADD #attr :delta` — an atomic, concurrency-safe increment that MERGES with
+     * a same-row counter ADD (#92), the maintenance-pipeline analogue of the
+     * self-lifecycle derived counter's `add` slot. `delta` is a numeric template string
+     * (the compile-time constant `+1` created / `-1` removed).
+     */
+    readonly counter?: MaintainCounterSpec;
+}
+/**
+ * The scalar counter a `counter` maintenance write applies (Epic #118 / #141): an
+ * atomic `ADD #attribute :delta`. `delta` is a literal numeric template string (the
+ * compile-time constant the trigger fixed — `"1"` created / `"-1"` removed); the
+ * runtimes serialize it as a number. Only `count()` is realized synchronously
+ * (`max(field)` is rejected for the synchronous path — #130 / Phase 2).
+ */
+interface MaintainCounterSpec {
+    /** The target attribute the counter increments (e.g. `postCount`). */
+    readonly attribute: string;
+    /** The signed `ADD` delta as a numeric template string (`"1"` / `"-1"`). */
+    readonly delta: string;
 }
 /** A declarative transaction definition's full execution spec. */
 interface TransactionSpec {
@@ -3193,6 +3711,75 @@ interface DerivedUpdate {
     /** The signed delta to add (e.g. `+1` create, `-1` remove). */
     readonly amount: number;
 }
+/**
+ * One **derived maintenance write** — the projection of a just-written source row
+ * into a *separate* target (owner) row, derived from one maintenance-graph
+ * {@link MaintainItem} (issue #125; the D/#124 → compile lowering). It generalizes
+ * {@link DerivedUpdate}: where a `derive` is one scalar `ADD`, a maintenance write
+ * mirrors a whole projection — a single-row {@link SnapshotEffect} (`kind:
+ * 'snapshot'`) or an item appended into a bounded collection ({@link
+ * CollectionEffect}, `kind: 'collection'`).
+ *
+ * The target row's key is bound from the source payload (the relation's owner-key
+ * fields, filled from `$.entity.<sourceField>` → the fragment's `<sourceField>`
+ * input param), and each projected attribute is a {@link ProjectionTransform} IR
+ * node (A/#120 関数形 — `identity` / `preview`) resolved to the input param it reads.
+ * #125 produces this structure; the runtime realization (the actual `Put` / `Update`
+ * item and its placement in the atomic `TransactWriteItems`) is #127.
+ */
+interface DerivedMaintainWrite {
+    /** The maintained (destination / owner) entity whose row holds the snapshot / collection. */
+    readonly entity: EntityRef;
+    /** The relation property on the owner that declared this maintenance (documentary). */
+    readonly relationProperty: string;
+    /** The trigger (`<sourceLogicalName>.<event>`) that fired this maintenance. */
+    readonly trigger: MaintainTrigger;
+    /**
+     * Whether the write mirrors a single row (`snapshot`), appends a collection item
+     * (`collection`), or applies a scalar `ADD` counter (`counter`, #141).
+     */
+    readonly kind: 'snapshot' | 'collection' | 'counter';
+    /**
+     * The destination row's key binding: target key field → the mutation-input param
+     * that supplies it (resolved from the effect's `$.entity.<sourceField>` paths —
+     * the source row image, payload 同梱). Every owner-key field is bound.
+     */
+    readonly keyBinding: Readonly<Record<string, string>>;
+    /**
+     * The projection: target attribute → `{ op, args, inputField }`, where `inputField`
+     * is the mutation-input param the source value is read from and `op` / `args` are
+     * the A/#120 {@link ProjectionTransform} realization (`identity` copies through,
+     * `preview` keeps the first `n` chars). Empty for a `counter` (a scalar `ADD`
+     * projects no row attributes).
+     */
+    readonly projection: Readonly<Record<string, {
+        readonly op: ProjectionTransform['op'];
+        readonly args: readonly unknown[];
+        readonly inputField: string;
+    }>>;
+    /**
+     * For a `collection` write, the bounded-collection options (the target `field`,
+     * the optional `maxItems` cap, and the optional `orderBy` input param); absent for
+     * a `snapshot` / `counter`.
+     */
+    readonly collection?: {
+        readonly field: string;
+        readonly maxItems?: number;
+        readonly orderBy?: string;
+    };
+    /**
+     * For a `counter` write (#141 — `@aggregate(..., { pattern: 'counter', value:
+     * count() })`), the scalar `ADD`: the target {@link counter.attribute} and the
+     * signed {@link counter.delta} the trigger applies (`+1` created / `-1` removed).
+     * A counter `ADD` is commutative, so two counter writes on the SAME row MERGE (the
+     * #92 symmetric-counter collapse) rather than reject — unlike snapshot/collection.
+     * Absent for a `snapshot` / `collection`.
+     */
+    readonly counter?: {
+        readonly attribute: string;
+        readonly delta: number;
+    };
+}
 /**
  * A **derived uniqueness guard** — the marker-row `Put` (and, on a unique-field
  * change, the old-guard `Delete` + new-guard `Put` swap) that enforces an
@@ -3385,6 +3972,20 @@ interface CompiledFragment {
      * guard and rolls the WHOLE transaction back — so no effect is double-applied.
      */
     readonly idempotencyGuard?: DerivedIdempotencyGuard;
+    /**
+     * The maintenance writes derived from the maintenance graph (issue #125; the
+     * D/#124 → compile lowering): one {@link DerivedMaintainWrite} per relation that
+     * declared `write.maintainedOn` for this fragment's lifecycle event (a projected
+     * snapshot / collection on a SEPARATE target row). Present (non-empty) only when
+     * the fragment's trigger fires at least one maintainer; absent otherwise (no
+     * regression — a fragment that maintains nothing compiles exactly as before).
+     *
+     * SCOPE (#125): each entry is the runtime-neutral structure the runtime (#127)
+     * realizes into the atomic `TransactWriteItems`; #125 derives it and rejects a
+     * same-target collision (論点2 = b). The cross-fragment AGGREGATION and the
+     * one-atomic-tx execution wiring are #127 — not done here.
+     */
+    readonly maintainWrites?: readonly DerivedMaintainWrite[];
 }
 /**
  * Resolve the {@link LifecycleContract} a fragment adopts for its intent:
@@ -3425,8 +4026,12 @@ type EntityRefResolver = (ref: MutationEntityRef, consumerIndex: number, consume
  * @param resolveEntityRef Resolver for a `$.entity[i].field` cross-fragment
  *   reference (multi-fragment compile), or `null` for a single-fragment compile
  *   (where such a reference is a hard error).
+ * @param maintenanceGraph The {@link MaintenanceGraph} the #125 maintain injection
+ *   queries for this fragment's trigger ({@link resolveMaintainers}). Defaults to a
+ *   lazily-built, cached graph over the global registry; an explicit graph is
+ *   accepted for scoped tests.
  */
-declare function compileFragment(fragment: MutationFragment, index?: number, resolveEntityRef?: EntityRefResolver | null): CompiledFragment;
+declare function compileFragment(fragment: MutationFragment, index?: number, resolveEntityRef?: EntityRefResolver | null, maintenanceGraph?: MaintenanceGraph): CompiledFragment;
 /**
  * Compile a single-fragment {@link CommandPlan} into its {@link CompiledFragment}.
  * The N-fragment atomic merge is **#90** ({@link compileMutationPlan}); this entry
@@ -4098,6 +4703,23 @@ interface CommandMethodSpec<TKey, TParams, TResult> {
      * the guard and rolls the WHOLE write back — no effect is double-applied.
      */
     readonly idempotencyGuard?: DerivedIdempotencyGuard;
+    /**
+     * The maintenance writes derived from the relation-side `write.maintainedOn`
+     * declarations (issue #125; D/#124 → compile lowering), flattened across every
+     * fragment in declaration order. Present (non-empty) only when a fragment's
+     * lifecycle event (`Post.created` etc.) fires at least one maintainer; absent
+     * otherwise (no regression — a maintainer-free mutation is byte-identical to its
+     * pre-#127 form). Each {@link DerivedMaintainWrite} projects the just-written
+     * source row into a SEPARATE owner (destination) row — a single-row snapshot
+     * (`kind: 'snapshot'`) or an item appended into a bounded collection (`kind:
+     * 'collection'`). Their presence (like {@link conditionChecks}) **promotes** an
+     * otherwise single-op method to a transaction: the runtime (#127) realizes each
+     * into the method's atomic `TransactWriteItems`, so the maintained row moves
+     * atomically with the source write (a failure rolls the WHOLE set back). #127 is
+     * the synchronous (`updateMode: 'mutation'`) path only; the async stream path is
+     * #130 (loud-rejected at compile time, never silently dropped).
+     */
+    readonly maintainWrites?: readonly DerivedMaintainWrite[];
     /** @internal Phantom carrier retaining the formal `CommandMethod` type. */
     readonly __signature?: CommandMethod<TKey, TParams, TResult>;
 }
@@ -4698,6 +5320,22 @@ interface ExecutableCommandContract {
          * Absent on a mutation with no `idempotency` / a #64 hand-written method.
          */
         readonly idempotencyGuard?: DerivedIdempotencyGuard;
+        /**
+         * The maintenance writes derived from the relation-side `write.maintainedOn`
+         * declarations (issue #125 → #127; the D/#124 → compile lowering). When
+         * present (non-empty), a **single-key** call composes each maintenance write
+         * — a projected snapshot (`SET`) or a bounded-collection append
+         * (`SET … = list_append(…)`) on a SEPARATE owner row — into the same atomic
+         * `TransactWriteItems` as the source entity write (and every other effect),
+         * so the maintained row moves ATOMICALLY with the source: a failure on any
+         * item rolls the WHOLE transaction back (the snapshot / collection never
+         * partially persists). The owner row is upserted (a bare `UpdateItem`
+         * creates it if absent — the additive maintenance semantics). This is the
+         * synchronous (`updateMode: 'mutation'`) path only; the async stream path is
+         * #130 (loud-rejected at compile time). Absent on a mutation that fires no
+         * maintainer / a #64 hand-written method.
+         */
+        readonly maintainWrites?: readonly DerivedMaintainWrite[];
         /**
          * The return projection of a `mutation`-derived method (issue #83). When
          * present, a **single-key** call performs the write then issues a
@@ -5169,6 +5807,236 @@ declare function key<T extends Record<string, unknown>>(builder: (c: {
     readonly [K in keyof T]-?: Column<T[K], T>;
 }) => KeyStructure): KeyDefinitionMarker<T>;
 
+type DynamoType = 'S' | 'N' | 'BOOL' | 'B' | 'SS' | 'NS' | 'L' | 'M';
+interface FieldOptions {
+    format?: 'datetime' | 'date';
+    readonly?: boolean;
+    serialize?: (value: unknown) => unknown;
+    deserialize?: (value: unknown) => unknown;
+}
+interface FieldMetadata {
+    propertyName: string;
+    dynamoType: DynamoType;
+    options?: FieldOptions;
+    /**
+     * For a `@literal(...)` field — a `string`-stored field whose value is one of a
+     * known, finite set — the allowed literal values, in declaration order (issue
+     * #75). Recorded purely as model metadata so a Contract param bound into the
+     * field can recover the precise `literal` param-kind from its bind position
+     * (`src/spec/contracts.ts`), serializing as `{ type: 'literal', literals: [...] }`
+     * instead of the imprecise `'string'`. JSON-safe by construction (a non-empty
+     * array of strings). `undefined` for every other field decorator (`@string`,
+     * `@number`, …), so plain fields are byte-for-byte unchanged (backward compat).
+     */
+    literals?: readonly string[];
+}
+
+interface KeyDefinition {
+    /** The canonical structured key (PK/SK segment lists). */
+    segmented: SegmentedKey;
+    inputFieldNames: string[];
+}
+interface GsiDefinition {
+    indexName: string;
+    /** The canonical structured key (PK/SK segment lists). */
+    segmented: SegmentedKey;
+    inputFieldNames: string[];
+    unique: boolean;
+}
+interface RelationLimitOptions {
+    default: number;
+    max: number;
+}
+/**
+ * The named maintenance pattern a relation participates in (Epic #118 §5.1).
+ *
+ * `pattern` is the *preset* selector: omitting it leaves the relation a plain
+ * read-only navigation (the historical `hasMany`/`belongsTo`/`hasOne`
+ * behaviour), exactly backward compatible. When present it names the AWS
+ * design pattern the relation lowers to — the lowering itself (maintenance
+ * graph / compile injection) is out of scope for issue #121 and lands in
+ * #124/#125; here the value is recorded purely as declaration metadata.
+ *
+ * Typed as a `string` union of the known presets but kept open-ended via the
+ * `(string & {})` tail so a future preset can be authored before this union is
+ * widened, without a breaking change to callers.
+ */
+type RelationPattern = 'samePartition' | 'edge' | 'counter' | 'embeddedSnapshot' | 'materializedView' | 'sparseView' | 'externalProjection' | (string & {});
+/**
+ * Consistency boundary a maintained write is declared against (Epic #118 §4.A.7):
+ * `transactional` = same `TransactWriteItems`; `eventual` = asynchronous catch-up.
+ */
+type RelationConsistency = 'transactional' | 'eventual';
+/**
+ * How a maintained write is applied (Epic #118 §4.A.7):
+ * `mutation` = composed into the same mutation; `stream` = driven asynchronously
+ * off a stream / outbox.
+ */
+type RelationUpdateMode = 'mutation' | 'stream';
+/**
+ * Read-strategy hints for a maintained relation (Epic #118 §5.1 `read`).
+ *
+ * All fields optional — present only when a `pattern` declares a read shape
+ * (e.g. an `embeddedSnapshot` keeping the latest N items). A bare relation
+ * carries no `read` block.
+ */
+interface RelationReadOptions {
+    /** Cap on materialised items kept inline (e.g. "latest 3 posts"). */
+    maxItems?: number;
+    /** Ordering of the maintained collection. */
+    order?: 'ASC' | 'DESC';
+}
+/**
+ * Write-maintenance declaration for a relation (Epic #118 §5.1 `write`).
+ *
+ * `maintainedOn` is the cross-entity trigger list (`"<Entity>.<event>"`, e.g.
+ * `"Post.created"`) that the maintenance graph (#124/#125) will key off. Recorded
+ * here as declaration metadata only.
+ */
+interface RelationWriteOptions {
+    /**
+     * Cross-entity triggers, e.g. `['Post.created', 'Post.removed']`. The event
+     * segment is the confirmed shared lifecycle vocabulary (epic #118 A/B
+     * reconciliation): `created` / `updated` / `removed`.
+     */
+    maintainedOn?: string[];
+    consistency?: RelationConsistency;
+    updateMode?: RelationUpdateMode;
+}
+/**
+ * Snapshot / projection capture map for a maintained relation
+ * (Epic #118 §5.1 / §5.2 `projection`).
+ *
+ * Maps each captured field name on the maintaining side to **how** the source
+ * value is projected. The confirmed shared vocabulary (epic #118 A/B
+ * reconciliation) is the **function-form IR** — the same {@link
+ * ProjectionTransform} node A (#120) defines on `src/define/entity-writes.ts`,
+ * re-used here (NOT re-defined) so the two surfaces never re-diverge. Each value
+ * is either:
+ *
+ * - a {@link ProjectionTransform} (built with the standalone authoring helpers,
+ *   e.g. `preview('body', 120)` — RFC §5.2 `textPreview: preview('body', 120)`),
+ *   or
+ * - a bare `string` — the **identity shorthand**: project that source path
+ *   through unchanged (e.g. `{ postId: 'postId' }`).
+ *
+ * `Readonly` so the recorded declaration metadata is not mutated downstream.
+ * Issue #121 scopes this to the declaration shape; the maintenance graph /
+ * compile injection that consumes the IR is #124/#125.
+ *
+ * @example `{ postId: 'postId', textPreview: preview('body', 120) }`
+ */
+type RelationProjection = Readonly<Record<string, ProjectionTransform | string>>;
+interface RelationOptions {
+    limit?: RelationLimitOptions;
+    order?: 'ASC' | 'DESC';
+    /**
+     * Named maintenance preset (Epic #118). Omitted = plain read-only navigation,
+     * fully backward compatible with the historical relation decorators.
+     */
+    pattern?: RelationPattern;
+    read?: RelationReadOptions;
+    write?: RelationWriteOptions;
+    projection?: RelationProjection;
+}
+interface RelationMetadata {
+    type: 'hasMany' | 'hasOne' | 'belongsTo';
+    propertyName: string;
+    targetFactory: () => new (...args: unknown[]) => unknown;
+    keyBinding: Record<string, string>;
+    options?: RelationOptions;
+}
+/**
+ * The scalar-aggregate value an `@aggregate` field derives from its source entity
+ * (Epic #118 §5.2 counter / latest preset; issue #122). It is the function-form
+ * IR built by the {@link count} / {@link max} value helpers — the aggregation an
+ * `@aggregate(() => Source, keyBinding, { pattern, value })` field maintains:
+ *
+ * - `count` — the cardinality of source rows matched by the key binding (no
+ *   source field; e.g. `postCount!: number` ← `count()`).
+ * - `max` — the maximum value of a named source `field` (e.g. `lastPostAt!:
+ *   string` ← `max('createdAt')`).
+ *
+ * Recorded purely as declaration metadata (issue #122 scope = declaration
+ * surface): the maintenance graph (#124) / compile injection (#125) consume it;
+ * the effect itself is out of scope here. Kept open-ended via the discriminated
+ * `op` so a future aggregation (`min`, `sum`, …) extends the union without a
+ * breaking change.
+ *
+ * @example `count()` → `{ op: 'count' }`
+ * @example `max('createdAt')` → `{ op: 'max', field: 'createdAt' }`
+ */
+type AggregateValue = {
+    readonly op: 'count';
+} | {
+    readonly op: 'max';
+    readonly field: string;
+};
+/**
+ * Options for an `@aggregate` field (Epic #118 §5.2 counter / latest preset;
+ * issue #122). Mirrors the maintenance vocabulary a relation declares so the two
+ * authoring surfaces stay in lockstep:
+ *
+ * - `pattern` reuses {@link RelationPattern} (e.g. `'counter'`) — the named
+ *   maintenance preset, NOT re-defined here.
+ * - `value` is the {@link AggregateValue} the field maintains (`count()` /
+ *   `max('createdAt')`).
+ * - `write` reuses {@link RelationWriteOptions} verbatim — `maintainedOn`
+ *   triggers (`Post.created` / `Post.removed`, the confirmed shared
+ *   `created|updated|removed` event vocabulary) plus `consistency`
+ *   (`transactional|eventual`) / `updateMode` (`mutation|stream`). These are NOT
+ *   re-defined; they are the same shared types B (#121) added.
+ */
+interface AggregateOptions {
+    /** Named maintenance preset (typically `'counter'`); reuses {@link RelationPattern}. */
+    pattern?: RelationPattern;
+    /** The scalar aggregation this field maintains (`count()` / `max('createdAt')`). */
+    value: AggregateValue;
+    /** Cross-entity maintenance triggers / consistency / update-mode (reused from B). */
+    write?: RelationWriteOptions;
+}
+/**
+ * Declaration metadata recorded by an `@aggregate` field decorator (issue #122).
+ *
+ * An `@aggregate` is a **scalar** field (`postCount!: number`,
+ * `lastPostAt!: string`) whose value is derived — by aggregating rows of a source
+ * entity resolved by {@link targetFactory} + {@link keyBinding} — rather than
+ * stored directly. It is therefore recorded in its **own** metadata array
+ * (`EntityMetadata.aggregates`), distinct from both {@link FieldMetadata} (a
+ * plain stored attribute) and {@link RelationMetadata} (a navigation yielding
+ * model instances): an aggregate carries a source binding like a relation, but
+ * surfaces a scalar value like a field. The collector path mirrors relations
+ * (decorator pushes, `@model` drains).
+ *
+ * Issue #122 scope is the declaration surface + metadata pass-through only; the
+ * aggregation effect's compile / runtime (#124/#125/#127) is out of scope.
+ */
+interface AggregateMetadata {
+    /** The scalar field the aggregate value is written to. */
+    propertyName: string;
+    /** Resolves the source entity whose rows are aggregated. */
+    targetFactory: () => new (...args: unknown[]) => unknown;
+    /** The key binding selecting the source rows (target key field → source field). */
+    keyBinding: Record<string, string>;
+    /** The aggregate preset / value / maintenance-write declaration. */
+    options: AggregateOptions;
+}
+interface EmbeddedMetadata {
+    propertyName: string;
+    modelFactory: () => new (...args: unknown[]) => unknown;
+}
+interface EntityMetadata {
+    tableName: string;
+    prefix: string;
+    fields: FieldMetadata[];
+    primaryKey: KeyDefinition | null;
+    gsiDefinitions: GsiDefinition[];
+    relations: RelationMetadata[];
+    /** Scalar `@aggregate` fields (Epic #118 §5.2 counter / latest; issue #122). */
+    aggregates: AggregateMetadata[];
+    embeddedFields: EmbeddedMetadata[];
+}
+
 /**
  * CDC emulator types (issue #72). These types are **cdc-module-owned**; core
  * never references them. The {@link ChangeEvent} shape mirrors DynamoDB Streams
@@ -5282,4 +6150,4 @@ interface CdcEmulatorOptions {
 }
 type ShardId = string;
 
-export { type EntityRef as $, type ConcurrentRecomputeRef as A, type BatchGetExecInput as B, type ChangeEvent as C, type DynamoDBOperation as D, type Executor as E, type FaultSpec as F, type EventLog as G, type ReplayOptions as H, type Item as I, type ShardId as J, type TransactionItemSpec as K, type Param as L, type ModelStatic as M, type ParamDescriptor as N, type DefinitionMap as O, type PutInput as P, type OperationDefinition as Q, type ReadExecOptions as R, type SelectableOf as S, type TransactWriteExecItem as T, type UpdateInput as U, type WriteDefinitionOptions as V, type WriteExecOptions as W, type PartialQueryKeyOf as X, type StrictSelectSpec as Y, type EntityInput as Z, type UniqueQueryKeyOf as _, type ExecutorResult as a, type DerivedUpdate as a$, type ConditionInput as a0, type QueryModelContract as a1, type QueryMethodSpec as a2, type CommandModelContract as a3, type CommandMethodSpec as a4, type ContractSpec as a5, type QuerySpec as a6, type CommandSpec as a7, type ContextSpec as a8, type OperationsDocument as a9, type ComposeSpec as aA, type CondSlot as aB, type ConditionCheckInput as aC, type Connection as aD, type ContractCallSignature as aE, type ContractCardinality as aF, type ContractCommandParams as aG, type ContractCommandResult as aH, type ContractComposeNode as aI, type ContractFromRef as aJ, type ContractInputArity as aK, type ContractItem as aL, type ContractKeyFieldRef as aM, type ContractKeyInput as aN, type ContractKeyRef as aO, type ContractKeySpec as aP, type ContractKind as aQ, type ContractMethodOp as aR, type ContractParamRef as aS, type ContractQueryParams as aT, type ContractResolution as aU, type CtxBase as aV, DEFAULT_MAX_ATTEMPTS as aW, DEFAULT_RETRY_POLICY as aX, type DeleteOptions as aY, type DeriveEffect as aZ, type DerivedEdgeWrite as a_, type AnyOperationDefinition as aa, type BridgeBundle as ab, type ConditionSpec as ac, type BatchDeleteRequest as ad, type BatchGetOptions as ae, type BatchGetRequest as af, BatchGetResult as ag, type BatchPutRequest as ah, type BatchResult as ai, type BatchWriteRequest as aj, CONTRACT_RANGE_FANOUT_CONCURRENCY as ak, type CdcMode as al, type Change as am, type ChangeBatch as an, type ChangeEventName as ao, type ClockMode as ap, type Column as aq, type ColumnMap as ar, type CommandContractMethodSpec as as, type CommandInputShape as at, type CommandMethod as au, type CommandPlan as av, type CommandResolutionTarget as aw, type CommandResultKind as ax, type CommandSelectShape as ay, type CompiledFragment as az, type WriteResult as b, type ReadOpKind as b$, type DescriptorBinding as b0, ENTITY_WRITES_MARKER as b1, type EdgeEffect as b2, type EffectPath as b3, type EmitEffect as b4, type EntityWritesDefinition as b5, type EntityWritesShape as b6, type ExecutableCommandContract as b7, type ExecutableQueryContract as b8, type FilterInput as b9, type MutateParallelResult as bA, type MutateTransactionResult as bB, type MutationBody as bC, type MutationDescriptorMap as bD, type MutationFragment as bE, type MutationInputProxy as bF, type MutationInputRef as bG, type MutationIntent as bH, type NumberParam as bI, type OperationKind as bJ, type OperationSpec as bK, type ParallelOpResult as bL, type ParamKind as bM, type ParamSpec as bN, type ParamStructure as bO, type PersistCtx as bP, type PersistOrigin as bQ, type PlannedCommandMethod as bR, type PutOptions as bS, type QueryContractMethodSpec as bT, type QueryEnvelopeResult as bU, type QueryKeyOf as bV, type QueryMethod as bW, type QueryResult as bX, type RangeConditionSpec as bY, type ReadEnvelope as bZ, type ReadOpCtx as b_, type FilterSpec as ba, type FragmentInput as bb, type GsiDefinitionMarker as bc, type GsiOptions as bd, type IdempotencyEffect as be, type InProcessWriteDescriptor as bf, type InputArity as bg, type KeyDefinitionMarker as bh, type KeySegment as bi, type KeySlot as bj, type KeyStructure as bk, type KeyedResult as bl, LIFECYCLE_CONTRACT_MARKER as bm, type LifecycleContract as bn, type LifecycleEffects as bo, type LiteralParam as bp, type ManifestEntity as bq, type ManifestField as br, type ManifestFieldType as bs, type ManifestGsi as bt, type ManifestKey as bu, type ManifestRelation as bv, type ManifestTable as bw, type ModelRef as bx, type MutateMode as by, type MutateOptions as bz, type DeleteInput as c, isContractFromRef as c$, type ReadOperationType as c0, type ReadRouteDescriptor as c1, type ReadRouteOptions as c2, type ReadRouteResult as c3, type RecordedCompose as c4, type RelationBuilder as c5, type RelationSelect as c6, type RelationSpec as c7, type RequiresEffect as c8, type Resolution as c9, buildDeleteInput as cA, buildPutInput as cB, buildUpdateInput as cC, compileFragment as cD, compileMutationPlan as cE, compileSingleFragmentPlan as cF, cond as cG, contractOfMethodSpec as cH, definePlan as cI, entityWrites as cJ, executeBatchGet as cK, executeBatchWrite as cL, executeCommandMethod as cM, executeDelete as cN, executeKeyedBatchGet as cO, executePut as cP, executeQueryMethod as cQ, executeRangeFanout as cR, executeTransaction as cS, executeUpdate as cT, from as cU, getEntityWrites as cV, gsi as cW, isColumn as cX, isCommandModelContract as cY, isCommandPlan as cZ, isContractComposeNode as c_, type RetryInfo as ca, type RetryOperationKind as cb, SPEC_VERSION as cc, type SegmentSpec as cd, type SelectBuilder as ce, type SelectOf as cf, type StartingPosition as cg, type StreamViewType as ch, type StringParam as ci, TransactionContext as cj, type TransactionItemType as ck, type UniqueEffect as cl, type Updatable as cm, type UpdateOptions as cn, type WhenSpec as co, type WriteCtx as cp, type WriteDescriptor as cq, type WriteEnvelope as cr, type WriteInput as cs, type WriteKind as ct, type WriteLifecyclePhase as cu, type WriteMiddleware as cv, type WriteOperationType as cw, type WriteRecorder as cx, type WriteResultProjection as cy, attachModelClass as cz, type BatchWriteExecItem as d, isContractKeyFieldRef as d0, isContractKeyRef as d1, isContractParamRef as d2, isEntityWritesDefinition as d3, isKeySegment as d4, isLifecycleContract as d5, isMutationFragment as d6, isMutationInputRef as d7, isParam as d8, isPlannedCommandMethod as d9, isQueryModelContract as da, isRetryableError as db, isRetryableTransactionCancellation as dc, k as dd, key as de, lifecyclePhaseForIntent as df, mintContractKeyFieldRef as dg, mintContractParamRef as dh, mutation as di, param as dj, publicCommandModel as dk, publicQueryModel as dl, query as dm, resolveLifecycle as dn, wholeKeysSentinel as dp, type BatchExecOptions as e, DDBModel as f, type PrimaryKeyOf as g, type RequestContext as h, type Middleware as i, type ReadRequestKind as j, type CtxModel as k, type ReadParams as l, type ReadRequestCtx as m, type RetryPolicy as n, type ExecutionPlanSpec as o, type SegmentedKey as p, type SelectBuilderSpec as q, type RawCondition as r, type TransactionSpec as s, type Manifest as t, type RetryOverride as u, type ExecutionPlan as v, type ResolvedKey as w, type CdcEmulatorOptions as x, type ChangeHandler as y, type Unsubscribe as z };
+export { type Param as $, type AggregateOptions as A, type BatchGetExecInput as B, type ChangeEvent as C, type DynamoDBOperation as D, type Executor as E, type FieldOptions as F, type GsiDefinition as G, type ResolvedKey as H, type Item as I, type CdcEmulatorOptions as J, type KeyDefinition as K, type ChangeHandler as L, type ModelStatic as M, type Unsubscribe as N, type FaultSpec as O, type PutInput as P, type ConcurrentRecomputeRef as Q, type ReadExecOptions as R, type SelectableOf as S, type TransactWriteExecItem as T, type UpdateInput as U, type EventLog as V, type WriteExecOptions as W, type ReplayOptions as X, type ShardId as Y, type RelationMetadata as Z, type TransactionItemSpec as _, type ExecutorResult as a, type ContractKeySpec as a$, type ParamDescriptor as a0, type DefinitionMap as a1, type OperationDefinition as a2, type WriteDefinitionOptions as a3, type PartialQueryKeyOf as a4, type StrictSelectSpec as a5, type EntityInput as a6, type UniqueQueryKeyOf as a7, type EntityRef as a8, type ConditionInput as a9, type CollectionEffect as aA, type CollectionOptions as aB, type Column as aC, type ColumnMap as aD, type CommandContractMethodSpec as aE, type CommandInputShape as aF, type CommandMethod as aG, type CommandPlan as aH, type CommandResolutionTarget as aI, type CommandResultKind as aJ, type CommandSelectShape as aK, type CompiledFragment as aL, type ComposeSpec as aM, type CondSlot as aN, type ConditionCheckInput as aO, type Connection as aP, type ContractCallSignature as aQ, type ContractCardinality as aR, type ContractCommandParams as aS, type ContractCommandResult as aT, type ContractComposeNode as aU, type ContractFromRef as aV, type ContractInputArity as aW, type ContractItem as aX, type ContractKeyFieldRef as aY, type ContractKeyInput as aZ, type ContractKeyRef as a_, type QueryModelContract as aa, type QueryMethodSpec as ab, type CommandModelContract as ac, type CommandMethodSpec as ad, type ContractSpec as ae, type QuerySpec as af, type CommandSpec as ag, type ContextSpec as ah, type OperationsDocument as ai, type AnyOperationDefinition as aj, type BridgeBundle as ak, type ConditionSpec as al, type AggregateMetadata as am, type BatchDeleteRequest as an, type BatchGetOptions as ao, type BatchGetRequest as ap, BatchGetResult as aq, type BatchPutRequest as ar, type BatchResult as as, type BatchWriteRequest as at, CONTRACT_RANGE_FANOUT_CONCURRENCY as au, type CdcMode as av, type Change as aw, type ChangeBatch as ax, type ChangeEventName as ay, type ClockMode as az, type WriteResult as b, type MutationInputProxy as b$, type ContractKind as b0, type ContractMethodOp as b1, type ContractParamRef as b2, type ContractQueryParams as b3, type ContractResolution as b4, type CounterAggregate as b5, type CounterEffect as b6, type CtxBase as b7, DEFAULT_MAX_ATTEMPTS as b8, DEFAULT_RETRY_POLICY as b9, type KeyedResult as bA, LIFECYCLE_CONTRACT_MARKER as bB, type LifecycleContract as bC, type LifecycleEffects as bD, type LiteralParam as bE, type MaintainConsistency as bF, type MaintainEffect as bG, type MaintainEvent as bH, type MaintainItem as bI, type MaintainTrigger as bJ, type MaintainUpdateMode as bK, type MaintenanceGraph as bL, type ManifestEntity as bM, type ManifestField as bN, type ManifestFieldType as bO, type ManifestGsi as bP, type ManifestKey as bQ, type ManifestRelation as bR, type ManifestTable as bS, type ModelRef as bT, type MutateMode as bU, type MutateOptions as bV, type MutateParallelResult as bW, type MutateTransactionResult as bX, type MutationBody as bY, type MutationDescriptorMap as bZ, type MutationFragment as b_, type DeleteOptions as ba, type DeriveEffect as bb, type DerivedEdgeWrite as bc, type DerivedUpdate as bd, type DescriptorBinding as be, ENTITY_WRITES_MARKER as bf, type EdgeEffect as bg, type EffectPath as bh, type EmbeddedMetadata as bi, type EmitEffect as bj, type EntityWritesDefinition as bk, type EntityWritesShape as bl, type ExecutableCommandContract as bm, type ExecutableQueryContract as bn, type FilterInput as bo, type FilterSpec as bp, type FragmentInput as bq, type GsiDefinitionMarker as br, type GsiOptions as bs, type IdempotencyEffect as bt, type InProcessWriteDescriptor as bu, type InputArity as bv, type KeyDefinitionMarker as bw, type KeySegment as bx, type KeySlot as by, type KeyStructure as bz, type DeleteInput as c, type WriteKind as c$, type MutationInputRef as c0, type MutationIntent as c1, type NumberParam as c2, type OperationKind as c3, type OperationSpec as c4, type ParallelOpResult as c5, type ParamKind as c6, type ParamSpec as c7, type ParamStructure as c8, type PersistCtx as c9, type RelationSelect as cA, type RelationSpec as cB, type RelationUpdateMode as cC, type RelationWriteOptions as cD, type RequiresEffect as cE, type Resolution as cF, type RetryInfo as cG, type RetryOperationKind as cH, SPEC_VERSION as cI, type SegmentSpec as cJ, type SegmentedKey as cK, type SelectBuilder as cL, type SelectOf as cM, type SnapshotEffect as cN, type StartingPosition as cO, type StreamViewType as cP, type StringParam as cQ, TransactionContext as cR, type TransactionItemType as cS, type UniqueEffect as cT, type Updatable as cU, type UpdateOptions as cV, type WhenSpec as cW, type WriteCtx as cX, type WriteDescriptor as cY, type WriteEnvelope as cZ, type WriteInput as c_, type PersistOrigin as ca, type PlannedCommandMethod as cb, type ProjectionMap as cc, type ProjectionTransform as cd, type ProjectionTransformOp as ce, type PutOptions as cf, type QueryContractMethodSpec as cg, type QueryEnvelopeResult as ch, type QueryKeyOf as ci, type QueryMethod as cj, type QueryResult as ck, type RangeConditionSpec as cl, type ReadEnvelope as cm, type ReadOpCtx as cn, type ReadOpKind as co, type ReadOperationType as cp, type ReadRouteDescriptor as cq, type ReadRouteOptions as cr, type ReadRouteResult as cs, type RecordedCompose as ct, type RelationBuilder as cu, type RelationConsistency as cv, type RelationLimitOptions as cw, type RelationPattern as cx, type RelationProjection as cy, type RelationReadOptions as cz, type BatchWriteExecItem as d, resolveLifecycle as d$, type WriteLifecyclePhase as d0, type WriteMiddleware as d1, type WriteOperationType as d2, type WriteRecorder as d3, type WriteResultProjection as d4, attachModelClass as d5, buildDeleteInput as d6, buildMaintenanceGraph as d7, buildPutInput as d8, buildUpdateInput as d9, isContractFromRef as dA, isContractKeyFieldRef as dB, isContractKeyRef as dC, isContractParamRef as dD, isEntityWritesDefinition as dE, isKeySegment as dF, isLifecycleContract as dG, isMaintainTrigger as dH, isMutationFragment as dI, isMutationInputRef as dJ, isParam as dK, isPlannedCommandMethod as dL, isQueryModelContract as dM, isRetryableError as dN, isRetryableTransactionCancellation as dO, k as dP, key as dQ, lifecyclePhaseForIntent as dR, maintainTrigger as dS, mintContractKeyFieldRef as dT, mintContractParamRef as dU, mutation as dV, param as dW, preview as dX, publicCommandModel as dY, publicQueryModel as dZ, query as d_, compileFragment as da, compileMutationPlan as db, compileSingleFragmentPlan as dc, cond as dd, contractOfMethodSpec as de, definePlan as df, entityWrites as dg, executeBatchGet as dh, executeBatchWrite as di, executeCommandMethod as dj, executeDelete as dk, executeKeyedBatchGet as dl, executePut as dm, executeQueryMethod as dn, executeRangeFanout as dp, executeTransaction as dq, executeUpdate as dr, from as ds, getEntityWrites as dt, gsi as du, identity as dv, isColumn as dw, isCommandModelContract as dx, isCommandPlan as dy, isContractComposeNode as dz, type BatchExecOptions as e, wholeKeysSentinel as e0, DDBModel as f, type PrimaryKeyOf as g, type RequestContext as h, type Middleware as i, type ReadRequestKind as j, type CtxModel as k, type ReadParams as l, type ReadRequestCtx as m, type RetryPolicy as n, type ExecutionPlanSpec as o, type EntityMetadata as p, type DynamoType as q, type RelationOptions as r, type AggregateValue as s, type SelectBuilderSpec as t, type RawCondition as u, type TransactionSpec as v, type Manifest as w, type RetryOverride as x, type ExecutionPlan as y, type FieldMetadata as z };