@freqhole/reliquary 0.3.12 → 0.3.13

package/README.md

@@ -8,10 +8,9 @@ utils. rust crate `reliquary` + npm package `@freqhole/reliquary`.
 
 ## architecture
 
-blake3 is the canonical content address everywhere (sha256 kept only as a legacy secondary
-index). iroh p2p is a transport, not the architecture - the store contracts and transfer
-flows are transport-injected. this library never owns an http server: range serving stays in
-the consuming app.
+blake3 is the sole canonical content address everywhere. iroh p2p is a transport, not the
+architecture - the store contracts and transfer flows are transport-injected. this library
+never owns an http server: range serving stays in the consuming app.
 
 ```mermaid
 graph LR

package/dist/blobs/bytes-backend.d.ts

@@ -16,8 +16,14 @@ export interface BytesBackend {
 export declare function isOPFSSupported(): boolean;
 export declare function createOpfsBackend(): BytesBackend;
 export declare function createCacheBackend(): BytesBackend;
-/** the default resolver chain: OPFS first, Cache API fallback. */
-export declare function defaultBytesChain(): BytesBackend[];
+/** the default resolver chain: OPFS first, Cache API fallback. pass
+ *  `skipOpfs` to drop OPFS entirely - for engines where
+ *  `navigator.storage.getDirectory` is feature-detectable but silently
+ *  non-functional (confirmed real 2026-10-07 on macOS Catalina's bundled
+ *  WebKit: OPFS writes/reads never throw, but every read comes back
+ *  empty - a blob URL registers with the right MIME type yet "has no
+ *  content" in the inspector). */
+export declare function defaultBytesChain(skipOpfs?: boolean): BytesBackend[];
 /**
  * write bytes through the chain, trying each backend in order until one
  * accepts the write. returns the name of the backend that succeeded, or

package/dist/blobs/bytes-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bytes-backend.d.ts","sourceRoot":"","sources":["../../src/blobs/bytes-backend.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAInD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC;;iBAEa;IACb,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,iEAAiE;AACjE,wBAAgB,eAAe,IAAI,OAAO,CAMzC;AAYD,wBAAgB,iBAAiB,IAAI,YAAY,CAmEhD;AAgBD,wBAAgB,kBAAkB,IAAI,YAAY,CA8DjD;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,IAAI,YAAY,EAAE,CAElD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,YAAY,EAAE,EACrB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAMlC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,YAAY,EAAE,EACrB,EAAE,EAAE,MAAM,EACV,YAAY,CAAC,EAAE,gBAAgB,GAC9B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAa7B;AAED,sEAAsE;AACtE,wBAAsB,eAAe,CACnC,KAAK,EAAE,YAAY,EAAE,EACrB,EAAE,EAAE,MAAM,EACV,YAAY,CAAC,EAAE,gBAAgB,GAC9B,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;kDAEkD;AAClD,wBAAsB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtF"}
+{"version":3,"file":"bytes-backend.d.ts","sourceRoot":"","sources":["../../src/blobs/bytes-backend.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAInD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC;;iBAEa;IACb,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,iEAAiE;AACjE,wBAAgB,eAAe,IAAI,OAAO,CAMzC;AAYD,wBAAgB,iBAAiB,IAAI,YAAY,CAmEhD;AAgBD,wBAAgB,kBAAkB,IAAI,YAAY,CA8DjD;AAED;;;;;;kCAMkC;AAClC,wBAAgB,iBAAiB,CAAC,QAAQ,UAAQ,GAAG,YAAY,EAAE,CAElE;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,YAAY,EAAE,EACrB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAMlC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,YAAY,EAAE,EACrB,EAAE,EAAE,MAAM,EACV,YAAY,CAAC,EAAE,gBAAgB,GAC9B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAa7B;AAED,sEAAsE;AACtE,wBAAsB,eAAe,CACnC,KAAK,EAAE,YAAY,EAAE,EACrB,EAAE,EAAE,MAAM,EACV,YAAY,CAAC,EAAE,gBAAgB,GAC9B,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;kDAEkD;AAClD,wBAAsB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtF"}

package/dist/blobs/bytes-backend.js

@@ -190,9 +190,15 @@ export function createCacheBackend() {
         },
     };
 }
-/** the default resolver chain: OPFS first, Cache API fallback. */
-export function defaultBytesChain() {
-    return [createOpfsBackend(), createCacheBackend()];
+/** the default resolver chain: OPFS first, Cache API fallback. pass
+ *  `skipOpfs` to drop OPFS entirely - for engines where
+ *  `navigator.storage.getDirectory` is feature-detectable but silently
+ *  non-functional (confirmed real 2026-10-07 on macOS Catalina's bundled
+ *  WebKit: OPFS writes/reads never throw, but every read comes back
+ *  empty - a blob URL registers with the right MIME type yet "has no
+ *  content" in the inspector). */
+export function defaultBytesChain(skipOpfs = false) {
+    return skipOpfs ? [createCacheBackend()] : [createOpfsBackend(), createCacheBackend()];
 }
 /**
  * write bytes through the chain, trying each backend in order until one

package/dist/blobs/db.d.ts

@@ -1,7 +1,6 @@
 import type { BlobRecord } from "./types.js";
 export declare function putRecord(dbName: string, record: BlobRecord): Promise<void>;
 export declare function getRecord(dbName: string, blobId: string): Promise<BlobRecord | null>;
-export declare function getRecordBySha256(dbName: string, sha256: string): Promise<BlobRecord | null>;
 export declare function getRecordByBlake3(dbName: string, blake3: string): Promise<BlobRecord | null>;
 export declare function deleteRecord(dbName: string, blobId: string): Promise<void>;
 export declare function clearRecords(dbName: string): Promise<void>;

package/dist/blobs/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/blobs/db.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA6I7C,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAcjF;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAS1F;AA4BD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAE5F;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAE5F;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAchF;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAchE;AAQD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcrG;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxG;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAYrF;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBrG;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcnE;AAaD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC1C,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B;mDAC+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8EtG"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/blobs/db.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA+I7C,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAcjF;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAS1F;AA4BD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAE5F;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAchF;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAchE;AAQD,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAYrF;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcnE;AAaD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC1C,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B;mDAC+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,aAAa,CAAC,CA+ExB"}

package/dist/blobs/db.js

@@ -1,8 +1,6 @@
 // the metadata side of the resolver chain: an IndexedDB-backed record
 // store keyed by blob_id (the blake3 hex digest), with secondary indexes
-// so a record can also be found by its legacy sha256, by blake3 alone
-// (covering a record whose primary key is a legacy sha256), by blob_type,
-// or by parent_blob_id.
+// so a record can also be found by blob_type or parent_blob_id.
 //
 // follows a "open fresh, close when done" pattern for every operation
 // rather than holding one long-lived connection open - simple, and avoids
@@ -14,7 +12,7 @@ const DB_VERSION = 3;
 // by openDb's version-fallback path to detect an already-existing database
 // that's missing an index added by a newer db.ts than whatever build last
 // touched it.
-const BLOB_INDEXES = ["sha256", "blake3", "blob_type", "parent_blob_id", "size", "created_at"];
+const BLOB_INDEXES = ["blake3", "blob_type", "parent_blob_id", "size", "created_at"];
 const REFS_INDEXES = ["blob_id", "canvas_doc_id"];
 function openVersioned(dbName, version) {
     return new Promise((resolve, reject) => {
@@ -51,7 +49,9 @@ function openVersioned(dbName, version) {
                 // this before purging local bytes, instead of scanning every
                 // canvas. composite key so re-adding an existing ref is a no-op
                 // (put with the same key overwrites, add() would throw).
-                const refs = db.createObjectStore(REFS_STORE_NAME, { keyPath: ["blob_id", "canvas_doc_id"] });
+                const refs = db.createObjectStore(REFS_STORE_NAME, {
+                    keyPath: ["blob_id", "canvas_doc_id"],
+                });
                 for (const name of REFS_INDEXES) {
                     refs.createIndex(name, name, { unique: false });
                 }
@@ -185,9 +185,6 @@ async function getByIndex(dbName, indexName, value) {
         tx.oncomplete = () => db.close();
     });
 }
-export function getRecordBySha256(dbName, sha256) {
-    return getByIndex(dbName, "sha256", sha256);
-}
 export function getRecordByBlake3(dbName, blake3) {
     return getByIndex(dbName, "blake3", blake3);
 }

package/dist/blobs/db.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.test.d.ts","sourceRoot":"","sources":["../../src/blobs/db.test.ts"],"names":[],"mappings":"AAGA,OAAO,qBAAqB,CAAC"}
+{"version":3,"file":"db.test.d.ts","sourceRoot":"","sources":["../../src/blobs/db.test.ts"],"names":[],"mappings":"AAIA,OAAO,qBAAqB,CAAC"}

package/dist/blobs/db.test.js

@@ -1,9 +1,10 @@
 // exercises the metadata layer directly: CRUD + secondary indexes
-// (sha256, blake3) that make the record resolver chain possible.
+// (blake3, blob_type, parent_blob_id) that make the record resolver chain
+// possible.
 import "fake-indexeddb/auto";
 import { IDBFactory } from "fake-indexeddb";
 import { beforeEach, describe, expect, it } from "vitest";
-import { addCanvasRef, clearCanvasRefs, clearRecords, deleteRecord, getCanvasRefs, getRecord, getRecordByBlake3, getRecordBySha256, listBlobs, putRecord, removeAllCanvasRefsForCanvas, removeCanvasRef, } from "./db.js";
+import { addCanvasRef, clearCanvasRefs, clearRecords, deleteRecord, getCanvasRefs, getRecord, getRecordByBlake3, listBlobs, putRecord, removeAllCanvasRefsForCanvas, removeCanvasRef, } from "./db.js";
 const DB_NAME = "blobs-db-test";
 beforeEach(() => {
     globalThis.indexedDB = new IDBFactory();
@@ -12,7 +13,6 @@ function makeRecord(overrides = {}) {
     return {
         blob_id: "blake3-aaa",
         blake3: "blake3-aaa",
-        sha256: "sha256-aaa",
         filename: "song.mp3",
         mime: "audio/mpeg",
         size: 1234,
@@ -39,32 +39,14 @@ describe("putRecord / getRecord", () => {
         expect(record?.filename).toBe("second.mp3");
     });
 });
-describe("getRecordBySha256 / getRecordByBlake3", () => {
-    it("finds a record by its sha256 index", async () => {
-        const record = makeRecord();
-        await putRecord(DB_NAME, record);
-        expect(await getRecordBySha256(DB_NAME, "sha256-aaa")).toEqual(record);
-    });
+describe("getRecordByBlake3", () => {
     it("finds a record by its blake3 index", async () => {
         const record = makeRecord();
         await putRecord(DB_NAME, record);
         expect(await getRecordByBlake3(DB_NAME, "blake3-aaa")).toEqual(record);
     });
-    it("finds a legacy record whose primary key is a sha256, not its blake3", async () => {
-        // simulates a record created before blake3 became canonical: blob_id
-        // is the legacy sha256, but blake3 is known and indexed separately.
-        const legacy = makeRecord({
-            blob_id: "sha256-legacy",
-            blake3: "blake3-discovered-later",
-            sha256: "sha256-legacy",
-        });
-        await putRecord(DB_NAME, legacy);
-        expect(await getRecordByBlake3(DB_NAME, "blake3-discovered-later")).toEqual(legacy);
-        expect(await getRecord(DB_NAME, "sha256-legacy")).toEqual(legacy);
-    });
     it("returns null for an empty hash rather than matching everything", async () => {
         await putRecord(DB_NAME, makeRecord());
-        expect(await getRecordBySha256(DB_NAME, "")).toBeNull();
         expect(await getRecordByBlake3(DB_NAME, "")).toBeNull();
     });
 });
@@ -134,7 +116,6 @@ describe("pre-existing database at a higher version", () => {
             const req = indexedDB.open(dbName, 3);
             req.onupgradeneeded = () => {
                 const store = req.result.createObjectStore("blobs", { keyPath: "blob_id" });
-                store.createIndex("sha256", "sha256", { unique: false });
                 store.createIndex("blake3", "blake3", { unique: false });
             };
             req.onsuccess = () => {
@@ -151,22 +132,22 @@ describe("pre-existing database at a higher version", () => {
     it("repairs a missing index even when both stores already exist at DB_VERSION", async () => {
         // reproduces a real-world case: a database that reached DB_VERSION
         // under an earlier build of this module - one that created both
-        // stores but not yet the "sha256" index added later. since both
-        // stores already exist and the version already matches, naively
+        // stores but not yet the "parent_blob_id" index added later. since
+        // both stores already exist and the version already matches, naively
         // reusing that version would never fire onupgradeneeded again,
-        // permanently leaving the missing index unrepaired - getRecordBySha256
-        // would then always report a miss instead of finding the record
-        // (getByIndex falls through gracefully rather than throwing, so a
-        // silent "never repaired" regression wouldn't otherwise be caught).
+        // permanently leaving the missing index unrepaired - resolveBlob's
+        // lookups would then always report a miss instead of finding the
+        // record (getByIndex falls through gracefully rather than throwing,
+        // so a silent "never repaired" regression wouldn't otherwise be
+        // caught).
         const dbName = "already-at-version-missing-index-db";
         await new Promise((resolve, reject) => {
             const req = indexedDB.open(dbName, 3);
             req.onupgradeneeded = () => {
                 const db = req.result;
                 const store = db.createObjectStore("blobs", { keyPath: "blob_id" });
-                // deliberately missing: "sha256" index.
                 store.createIndex("blake3", "blake3", { unique: false });
-                store.createIndex("blob_type", "blob_type", { unique: false });
+                // deliberately missing: "blob_type" index.
                 store.createIndex("parent_blob_id", "parent_blob_id", { unique: false });
                 store.createIndex("size", "size", { unique: false });
                 store.createIndex("created_at", "created_at", { unique: false });
@@ -184,7 +165,7 @@ describe("pre-existing database at a higher version", () => {
         });
         const record = makeRecord();
         await putRecord(dbName, record);
-        expect(await getRecordBySha256(dbName, record.sha256)).toEqual(record);
+        expect(await getRecordByBlake3(dbName, record.blake3)).toEqual(record);
     });
 });
 describe("listBlobs", () => {

package/dist/blobs/store.d.ts

@@ -1,7 +1,7 @@
 import { type ListBlobsOptions, type ListBlobsPage } from "./db.js";
 import type { BlobLocalityInfo, BlobRecord, NewBlobMeta } from "./types.js";
 export { isOPFSSupported } from "./bytes-backend.js";
-export type { BlobLocalityInfo, BlobLocalityMetadata, BlobRecord, BlobType, BytesBackendName, NewBlobMeta } from "./types.js";
+export type { BlobLocalityInfo, BlobLocalityMetadata, BlobRecord, BlobType, BytesBackendName, NewBlobMeta, } from "./types.js";
 export type { ListBlobsOptions, ListBlobsPage } from "./db.js";
 /** default IndexedDB database name for apps that don't need to preserve an
  *  existing one. */
@@ -19,6 +19,13 @@ export interface BlobStoreOptions {
      *  caller didn't expect is worse than a loud failure the caller can
      *  retry or surface. */
     allowCacheFallback?: boolean;
+    /** when true, skip OPFS entirely and always use the Cache API - for
+     *  engines where OPFS is feature-detectable (`navigator.storage.
+     *  getDirectory` exists) but silently non-functional: confirmed real
+     *  2026-10-07 on macOS Catalina's bundled WebKit, every OPFS read came
+     *  back empty (no exception anywhere) despite writes reporting
+     *  success. defaults to false. */
+    disableOpfs?: boolean;
 }
 export interface StoreBlobFromFileOptions {
     onProgress?: (fraction: number) => void;
@@ -29,7 +36,6 @@ export interface BlobStore {
     storeBlobFromFile(file: File, meta?: Partial<NewBlobMeta>, options?: StoreBlobFromFileOptions): Promise<BlobRecord>;
     getBlobRecord(blobId: string): Promise<BlobRecord | null>;
     getBlobRecordByBlake3(blake3: string): Promise<BlobRecord | null>;
-    getBlobRecordBySha256(sha256: string): Promise<BlobRecord | null>;
     resolveBlob(blobId: string, blake3?: string): Promise<BlobRecord | null>;
     getBlobMetadata(blobId: string, blake3?: string): Promise<BlobRecord | null>;
     getBlobData(blobId: string, blake3?: string): Promise<ArrayBuffer | null>;
@@ -55,6 +61,6 @@ export interface BlobStore {
 /** create a blob store instance. each instance owns its own object-url
  *  cache; construct one per app (not per component/request). */
 export declare function createBlobStore(options?: BlobStoreOptions): BlobStore;
-export { writeThroughChain, readThroughChain, hasBytesInChain, removeFromChain } from "./bytes-backend.js";
+export { writeThroughChain, readThroughChain, hasBytesInChain, removeFromChain, } from "./bytes-backend.js";
 export type { BytesBackend } from "./bytes-backend.js";
 //# sourceMappingURL=store.d.ts.map

package/dist/blobs/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/blobs/store.ts"],"names":[],"mappings":"AAuBA,OAAO,EAaL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AAUjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9H,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE/D;oBACoB;AACpB,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAOjD,MAAM,WAAW,gBAAgB;IAC/B;;gEAE4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;4BAMwB;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrE,iBAAiB,CACf,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,EAC3B,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1D,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClE,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACzE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC1E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC/D,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1E,iBAAiB,IAAI,IAAI,CAAC;IAC1B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9E,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,6EAA6E;IAC7E,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,4EAA4E;IAC5E,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,0DAA0D;IAC1D,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,6EAA6E;IAC7E,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE;iFAC6E;IAC7E,SAAS,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC/D;AAED;gEACgE;AAChE,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,SAAS,CAuPzE;AAKD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC3G,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/blobs/store.ts"],"names":[],"mappings":"AAoBA,OAAO,EAYL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AAWjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE/D;oBACoB;AACpB,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAOjD,MAAM,WAAW,gBAAgB;IAC/B;;gEAE4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;4BAMwB;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;sCAKkC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrE,iBAAiB,CACf,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,EAC3B,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1D,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACzE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC1E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC/D,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1E,iBAAiB,IAAI,IAAI,CAAC;IAC1B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9E,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,6EAA6E;IAC7E,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,4EAA4E;IAC5E,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,0DAA0D;IAC1D,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,6EAA6E;IAC7E,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE;iFAC6E;IAC7E,SAAS,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC/D;AAED;gEACgE;AAChE,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,SAAS,CAkPzE;AAKD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/blobs/store.js

@@ -1,13 +1,10 @@
 // the blake3-canonical blob record store: ties the metadata side (db.ts,
 // IndexedDB) to the bytes side (bytes-backend.ts, OPFS + Cache API) behind
-// one API, and implements the resolver chain that lets old sha256-era
-// references keep working alongside new blake3-keyed records.
+// one API.
 //
 // "resolver chain" here means two related lookup chains:
-//   - record resolution (`resolveBlob`): primary key -> blake3 index ->
-//     sha256 index -> blake3 index again with a separately-known hash.
-//     this is what lets a caller pass either a blake3 or a legacy sha256
-//     and get the same record back.
+//   - record resolution (`resolveBlob`): primary key -> blake3 index
+//     (separately-known hash).
 //   - bytes resolution (`bytes-backend.ts`'s `readThroughChain`): a
 //     record's `storage_backend` field says where its bytes were written;
 //     when that's unknown (a record predating the field) every backend is
@@ -19,9 +16,9 @@
 // storage (OPFS directory, Cache API cache) is content-addressed by
 // blake3 and shared at the origin regardless of which app wrote it, so it
 // is not parameterized per store instance - see `bytes-backend.ts`.
-import { hashBlake3, hashSha256, streamFileToOpfs } from "../worker/index.js";
-import { addCanvasRef, clearCanvasRefs, clearRecords, deleteRecord, getCanvasRefs, getRecord, getRecordByBlake3, getRecordBySha256, listBlobs, putRecord, removeAllCanvasRefsForCanvas, removeCanvasRef, } from "./db.js";
-import { createOpfsBackend, defaultBytesChain, hasBytesInChain, readThroughChain, removeFromChain, writeThroughChain, } from "./bytes-backend.js";
+import { hashBlake3, streamFileToOpfs } from "../worker/index.js";
+import { addCanvasRef, clearCanvasRefs, clearRecords, deleteRecord, getCanvasRefs, getRecord, getRecordByBlake3, listBlobs, putRecord, removeAllCanvasRefsForCanvas, removeCanvasRef, } from "./db.js";
+import { createCacheBackend, createOpfsBackend, defaultBytesChain, hasBytesInChain, readThroughChain, removeFromChain, writeThroughChain, } from "./bytes-backend.js";
 export { isOPFSSupported } from "./bytes-backend.js";
 /** default IndexedDB database name for apps that don't need to preserve an
  *  existing one. */
@@ -34,7 +31,11 @@ const STREAM_UPLOAD_THRESHOLD = 8 * 1024 * 1024;
  *  cache; construct one per app (not per component/request). */
 export function createBlobStore(options = {}) {
     const dbName = options.dbName ?? DEFAULT_DB_NAME;
-    const chain = options.allowCacheFallback ? defaultBytesChain() : [createOpfsBackend()];
+    const chain = options.disableOpfs
+        ? [createCacheBackend()]
+        : options.allowCacheFallback
+            ? defaultBytesChain()
+            : [createOpfsBackend()];
     const blobUrlCache = new Map();
     let beforeUnloadRegistered = false;
     function ensureBeforeUnloadListener() {
@@ -48,9 +49,9 @@ export function createBlobStore(options = {}) {
         beforeUnloadRegistered = true;
     }
     async function storeBlob(data, meta) {
-        // hash before writing anything - both hashers copy their input rather
+        // hash before writing anything - blake3 hashing copies its input rather
         // than transferring it, so `data` is still intact for the write below.
-        const [blake3, sha256] = await Promise.all([hashBlake3(new Uint8Array(data)), hashSha256(data)]);
+        const blake3 = await hashBlake3(new Uint8Array(data));
         const blobId = blake3;
         // dedup - content-addressed, so a pre-existing record for this blake3
         // means the bytes are already stored under it.
@@ -68,7 +69,6 @@ export function createBlobStore(options = {}) {
         const record = {
             blob_id: blobId,
             blake3,
-            sha256,
             filename: meta.filename,
             mime: meta.mime,
             size: data.byteLength,
@@ -90,9 +90,6 @@ export function createBlobStore(options = {}) {
                 const existing = await getRecord(dbName, blake3);
                 if (existing)
                     return existing;
-                // sha256 is legacy-only - it's never computed for a streamed
-                // upload, since brand-new content has no old sha256-keyed
-                // reference that would need it.
                 const record = {
                     blob_id: blake3,
                     blake3,
@@ -129,15 +126,10 @@ export function createBlobStore(options = {}) {
     function getBlobRecordByBlake3(blake3) {
         return getRecordByBlake3(dbName, blake3);
     }
-    function getBlobRecordBySha256(sha256) {
-        return getRecordBySha256(dbName, sha256);
-    }
     /**
      * resolve a blobId to a record using multiple lookup strategies: primary
-     * key -> blake3 index (blobId itself) -> sha256 index -> blake3 index
-     * (separately-known hash). handles both id generations - blake3 is
-     * canonical now, sha256-keyed records are legacy but must keep
-     * resolving.
+     * key -> blake3 index (blobId itself) -> blake3 index (separately-known
+     * hash).
      */
     async function resolveBlob(blobId, blake3) {
         if (!blobId)
@@ -148,9 +140,6 @@ export function createBlobStore(options = {}) {
         const byIdAsBlake3 = await getRecordByBlake3(dbName, blobId);
         if (byIdAsBlake3)
             return byIdAsBlake3;
-        const bySha = await getRecordBySha256(dbName, blobId);
-        if (bySha)
-            return bySha;
         if (blake3) {
             const byBlake3 = await getRecordByBlake3(dbName, blake3);
             if (byBlake3)
@@ -245,7 +234,6 @@ export function createBlobStore(options = {}) {
         storeBlobFromFile,
         getBlobRecord,
         getBlobRecordByBlake3,
-        getBlobRecordBySha256,
         resolveBlob,
         getBlobMetadata: resolveBlob,
         getBlobData,
@@ -266,4 +254,4 @@ export function createBlobStore(options = {}) {
 // low-level building blocks re-exported for callers that need to compose
 // their own resolver chain (e.g. a future transfer layer writing
 // already-hashed, already-verified bytes without re-hashing them here).
-export { writeThroughChain, readThroughChain, hasBytesInChain, removeFromChain } from "./bytes-backend.js";
+export { writeThroughChain, readThroughChain, hasBytesInChain, removeFromChain, } from "./bytes-backend.js";

package/dist/blobs/store.test.js

@@ -4,10 +4,11 @@
 // (db.ts) and the bytes layer (bytes-backend.ts) together behind
 // createBlobStore(). the worker (hashing + the OPFS write path) is mocked
 // since no environment here has a real Worker or a bundled midden module -
-// the mock computes a deterministic fake "blake3" from the sha256 digest
-// (real crypto.subtle is available in happy-dom) and writes bytes through
-// the exact same fake OPFS directory the direct-read path uses, so the
-// round trip is meaningful.
+// the mock computes a deterministic fake "blake3" from a sha256 digest
+// (real crypto.subtle is available in happy-dom, sha256 is just used here
+// as a convenient stand-in digest, not a feature under test) and writes
+// bytes through the exact same fake OPFS directory the direct-read path
+// uses, so the round trip is meaningful.
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { fakeIdbHarness } from "../testing/index.js";
 // ---- fake OPFS (same shape as blob-worker-logic.test.ts / bytes-backend.test.ts) ----
@@ -17,7 +18,10 @@ class FakeWritable {
         this.file = file;
     }
     async write(data) {
-        this.file.bytes = data instanceof ArrayBuffer ? new Uint8Array(data) : new Uint8Array(data.buffer);
+        this.file.bytes =
+            data instanceof ArrayBuffer
+                ? new Uint8Array(data)
+                : new Uint8Array(data.buffer);
     }
     async close() { }
 }
@@ -61,7 +65,7 @@ function installFakeOpfs() {
         },
     });
 }
-async function fakeSha256Hex(data) {
+async function fakeDigestHex(data) {
     const digest = await crypto.subtle.digest("SHA-256", data);
     return Array.from(new Uint8Array(digest))
         .map((b) => b.toString(16).padStart(2, "0"))
@@ -82,18 +86,17 @@ vi.mock("../worker/index.js", () => ({
     }),
     // a real blake3 digest is unavailable in this test environment (no
     // bundled midden module) - derive a distinct, deterministic stand-in
-    // from the sha256 digest so different content still gets different
-    // content addresses. neither hasher writes any bytes - matching the
+    // from a sha256 digest so different content still gets different
+    // content addresses. the hasher doesn't write any bytes - matching the
     // real worker client, which only hashes here.
     hashBlake3: vi.fn(async (data) => {
-        const sha256 = await fakeSha256Hex(data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
-        return `b3-${sha256}`;
+        const digest = await fakeDigestHex(data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
+        return `b3-${digest}`;
     }),
-    hashSha256: vi.fn(async (data) => fakeSha256Hex(data)),
     streamFileToOpfs: vi.fn(async (file) => {
         const buffer = await file.arrayBuffer();
-        const sha256 = await fakeSha256Hex(buffer);
-        const blake3 = `b3-${sha256}`;
+        const digest = await fakeDigestHex(buffer);
+        const blake3 = `b3-${digest}`;
         await writeToFakeOpfs(blake3, buffer);
         return { blake3, size: buffer.byteLength };
     }),
@@ -228,7 +231,10 @@ describe("storeBlob / getBlob / getBlobData", () => {
         // available but must NOT be used since allowCacheFallback defaults to
         // false (Q25: loam's crash-loud semantics are the default).
         const store = createBlobStore({ dbName: "store-test-no-fallback-default" });
-        await expect(store.storeBlob(textBuffer("opfs-less content"), { filename: "no-opfs.txt", mime: "text/plain" })).rejects.toThrow(/no bytes backend accepted/);
+        await expect(store.storeBlob(textBuffer("opfs-less content"), {
+            filename: "no-opfs.txt",
+            mime: "text/plain",
+        })).rejects.toThrow(/no bytes backend accepted/);
     });
 });
 describe("storeBlobFromFile", () => {
@@ -237,17 +243,15 @@ describe("storeBlobFromFile", () => {
         const file = new File([textBuffer("small file contents")], "small.txt", { type: "text/plain" });
         const record = await store.storeBlobFromFile(file);
         expect(record.filename).toBe("small.txt");
-        expect(record.sha256).toBeTruthy();
         const data = await store.getBlobData(record.blob_id);
         expect(new TextDecoder().decode(data)).toBe("small file contents");
     });
-    it("streams large files and omits sha256 (legacy-only, never computed for streamed uploads)", async () => {
+    it("streams large files", async () => {
         const store = createBlobStore({ dbName: "store-test-file-large" });
         const bigBytes = new Uint8Array(8 * 1024 * 1024 + 10).fill(7);
         const file = new File([bigBytes], "large.bin", { type: "application/octet-stream" });
         const record = await store.storeBlobFromFile(file);
         expect(record.size).toBe(bigBytes.byteLength);
-        expect(record.sha256).toBeUndefined();
         const data = await store.getBlobData(record.blob_id);
         expect(data?.byteLength).toBe(bigBytes.byteLength);
     });
@@ -261,11 +265,10 @@ describe("storeBlobFromFile", () => {
     });
 });
 describe("resolveBlob", () => {
-    it("resolves a legacy sha256-primary-keyed record by its blake3 index", async () => {
+    it("resolves a record whose primary key differs from its blake3", async () => {
         await putRecord("store-test-resolve", {
-            blob_id: "legacy-sha256-key",
+            blob_id: "legacy-key",
             blake3: "blake3-known-later",
-            sha256: "legacy-sha256-key",
             filename: "legacy.txt",
             mime: "text/plain",
             size: 4,
@@ -276,13 +279,16 @@ describe("resolveBlob", () => {
         });
         const store = createBlobStore({ dbName: "store-test-resolve" });
         expect(await store.resolveBlob("blake3-known-later")).not.toBeNull();
-        expect(await store.resolveBlob("legacy-sha256-key")).not.toBeNull();
+        expect(await store.resolveBlob("legacy-key")).not.toBeNull();
         expect(await store.resolveBlob("anything", "blake3-known-later")).not.toBeNull();
         expect(await store.resolveBlob("nothing-matches")).toBeNull();
     });
     it("getBlobMetadata is an alias for resolveBlob", async () => {
         const store = createBlobStore({ dbName: "store-test-metadata-alias" });
-        const record = await store.storeBlob(textBuffer("meta"), { filename: "m.txt", mime: "text/plain" });
+        const record = await store.storeBlob(textBuffer("meta"), {
+            filename: "m.txt",
+            mime: "text/plain",
+        });
         expect(await store.getBlobMetadata(record.blob_id)).toEqual(record);
     });
 });
@@ -367,8 +373,14 @@ describe("deleteBlob / clearAll", () => {
     });
     it("clearAll wipes every record and every backend's bytes", async () => {
         const store = createBlobStore({ dbName: "store-test-clear-all" });
-        const a = await store.storeBlob(textBuffer("clear-all-a"), { filename: "a.txt", mime: "text/plain" });
-        const b = await store.storeBlob(textBuffer("clear-all-b"), { filename: "b.txt", mime: "text/plain" });
+        const a = await store.storeBlob(textBuffer("clear-all-a"), {
+            filename: "a.txt",
+            mime: "text/plain",
+        });
+        const b = await store.storeBlob(textBuffer("clear-all-b"), {
+            filename: "b.txt",
+            mime: "text/plain",
+        });
         await store.clearAll();
         expect(await store.getBlobRecord(a.blob_id)).toBeNull();
         expect(await store.getBlobRecord(b.blob_id)).toBeNull();

package/dist/blobs/types.d.ts

@@ -8,12 +8,8 @@ export interface BlobRecord {
     /** canonical id - the blake3 hex digest. */
     blob_id: string;
     /** blake3 hex digest (same value as blob_id for every record created by
-     *  this store; kept as its own field, and its own index, so a record
-     *  legacy-keyed by sha256 can still be found by blake3 once known). */
+     *  this store; kept as its own field, and its own index). */
     blake3: string;
-    /** legacy sha256 hex digest, kept for records/references that predate
-     *  blake3 becoming canonical. never computed for new streamed uploads. */
-    sha256?: string;
     filename: string;
     mime: string;
     size: number;
@@ -26,8 +22,8 @@ export interface BlobRecord {
     storage_backend?: BytesBackendName;
 }
 /** everything needed to store a new blob, other than the bytes and the
- *  fields this store computes/fills in itself (blob_id, blake3, sha256,
- *  size, created_at, storage_backend). */
+ *  fields this store computes/fills in itself (blob_id, blake3, size,
+ *  created_at, storage_backend). */
 export interface NewBlobMeta {
     filename: string;
     mime: string;

package/dist/blobs/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/blobs/types.ts"],"names":[],"mappings":"AAQA,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzE;;2EAE2E;AAC3E,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB;;2EAEuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf;8EAC0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,CAAC;IACpB;qDACiD;IACjD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED;;0CAE0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/blobs/types.ts"],"names":[],"mappings":"AAQA,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzE;;2EAE2E;AAC3E,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB;iEAC6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,CAAC;IACpB;qDACiD;IACjD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED;;oCAEoC;AACpC,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC"}

package/dist/blobs/types.js

@@ -1,8 +1,8 @@
 // shared shapes for the blake3-canonical blob record store.
 //
-// core schema: blake3 primary key, sha256 legacy index, blob_type, parent
-// linkage. this browser version omits native-only fields (on-disk path,
-// external flag, soft-delete bookkeeping) and app-specific classification
-// fields (e.g. domain tags) - callers that want classification can use
-// the `metadata` field.
+// core schema: blake3 primary key, blob_type, parent linkage. this
+// browser version omits native-only fields (on-disk path, external flag,
+// soft-delete bookkeeping) and app-specific classification fields (e.g.
+// domain tags) - callers that want classification can use the
+// `metadata` field.
 export {};

package/dist/utils/index.d.ts

@@ -1,4 +1,3 @@
-export * from "./hash.js";
 export * from "./image-utils.js";
 export * from "./log.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC"}

package/dist/utils/index.js

@@ -1,3 +1,2 @@
-export * from "./hash.js";
 export * from "./image-utils.js";
 export * from "./log.js";

package/dist/worker/blob-worker-client.d.ts

@@ -31,10 +31,6 @@ export declare function shutdownBlobWorker(): void;
  * underlying buffer.
  */
 export declare function hashBlake3(data: Uint8Array): Promise<string>;
-/**
- * sha256 hash of an ArrayBuffer.
- */
-export declare function hashSha256(data: ArrayBuffer): Promise<string>;
 /**
  * base64-encode an ArrayBuffer.
  *
@@ -50,7 +46,6 @@ export declare function base64Encode(buffer: ArrayBuffer): Promise<string>;
  */
 export declare function processBlobBytes(buffer: ArrayBuffer, filename: string, mime: string): Promise<{
     blob_id: string;
-    sha256: string;
     blake3: string;
     size: number;
     mime: string;

package/dist/worker/blob-worker-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blob-worker-client.d.ts","sourceRoot":"","sources":["../../src/worker/blob-worker-client.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAsBtD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAuDnF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAOzC;AAoCD;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlE;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAInE;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAkBD;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAC1E,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAkC3C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAC1E,OAAO,CAAC,MAAM,CAAC,CAgCjB;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;iFAG6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,SAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOhG;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAQnE"}
+{"version":3,"file":"blob-worker-client.d.ts","sourceRoot":"","sources":["../../src/worker/blob-worker-client.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAqBtD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAuDnF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAOzC;AAoCD;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlE;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAcD;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAC1E,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAkC3C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAC1E,OAAO,CAAC,MAAM,CAAC,CAgCjB;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;iFAG6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,SAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOhG;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAQnE"}

package/dist/worker/blob-worker-client.js

@@ -8,7 +8,6 @@
 // the client falls back to a synchronous in-process implementation so
 // callers don't have to branch.
 import * as Comlink from "comlink";
-import { sha256Hex } from "../utils/hash.js";
 import { loadMiddenBlake3 } from "./midden-blake3.js";
 import { BLOB_WORKER_READY_MESSAGE } from "./blob-worker-logic.js";
 import { log } from "../utils/log.js";
@@ -149,15 +148,6 @@ export async function hashBlake3(data) {
         return worker.hashBlake3(data);
     return fallbackHashBlake3(data);
 }
-/**
- * sha256 hash of an ArrayBuffer.
- */
-export async function hashSha256(data) {
-    const worker = await getBlobWorker();
-    if (worker)
-        return worker.hashSha256(data);
-    return sha256Hex(data);
-}
 /**
  * base64-encode an ArrayBuffer.
  *
@@ -182,13 +172,9 @@ export async function processBlobBytes(buffer, filename, mime) {
         return worker.processBlobBytes(Comlink.transfer(buffer, [buffer]), filename, mime);
     }
     // main-thread fallback path - rare, mostly for tests.
-    const [sha256, blake3] = await Promise.all([
-        sha256Hex(buffer),
-        fallbackHashBlake3(new Uint8Array(buffer)),
-    ]);
+    const blake3 = await fallbackHashBlake3(new Uint8Array(buffer));
     return {
         blob_id: blake3,
-        sha256,
         blake3,
         size: buffer.byteLength,
         mime,

package/dist/worker/blob-worker-client.test.js

@@ -1,6 +1,6 @@
 // @vitest-environment happy-dom
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { base64Decode, base64Encode, generateThumbnailDataUrl, getBlobWorker, hashBlake3, hashBlake3Streaming, hashSha256, processBlobBytes, resizeImageToWebpDataUrl, shutdownBlobWorker, streamFileToOpfs, writeBlobToOpfs, } from "./blob-worker-client.js";
+import { base64Decode, base64Encode, generateThumbnailDataUrl, getBlobWorker, hashBlake3, hashBlake3Streaming, processBlobBytes, resizeImageToWebpDataUrl, shutdownBlobWorker, streamFileToOpfs, writeBlobToOpfs, } from "./blob-worker-client.js";
 import { resetMiddenBlake3Cache } from "./midden-blake3.js";
 import { log } from "../utils/log.js";
 // this test environment has no `Worker` global, so every helper below
@@ -84,13 +84,6 @@ describe("hashBlake3", () => {
         expect(await hashBlake3(new Uint8Array([1, 2, 3]))).toBe("");
     });
 });
-describe("hashSha256", () => {
-    it("falls back to a real sha-256 digest with no worker", async () => {
-        const bytes = new TextEncoder().encode("abc");
-        const hash = await hashSha256(bytes.buffer);
-        expect(hash).toBe("ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
-    });
-});
 describe("base64Encode / base64Decode", () => {
     it("round-trips bytes through the fallback path", async () => {
         const original = new Uint8Array([0, 1, 2, 253, 254, 255]);
@@ -100,12 +93,11 @@ describe("base64Encode / base64Decode", () => {
     });
 });
 describe("processBlobBytes", () => {
-    it("hashes without a worker (blake3 empty, sha256 real)", async () => {
+    it("hashes without a worker (blake3 empty)", async () => {
         const bytes = new TextEncoder().encode("hello world");
         const result = await processBlobBytes(bytes.buffer, "hello.txt", "text/plain");
         expect(result.blake3).toBe("");
         expect(result.blob_id).toBe("");
-        expect(result.sha256).toBe("b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9");
         expect(result.size).toBe(bytes.byteLength);
     });
 });

package/dist/worker/blob-worker-logic.d.ts

@@ -12,12 +12,6 @@ export declare const OPFS_DIR = "reliquary-blobs";
  * it does not export `hash_blake3`.
  */
 export declare function hashBlake3(data: Uint8Array): Promise<string>;
-/**
- * compute sha256 hash via SubtleCrypto. SubtleCrypto.digest is already
- * async/non-blocking on the main thread, but this is exposed here too so
- * callers can do sha256 + blake3 in a single round-trip.
- */
-export declare function hashSha256(data: ArrayBuffer): Promise<string>;
 /**
  * base64-encode an ArrayBuffer. uses chunked btoa to avoid stack overflow
  * on large buffers (`String.fromCharCode(...veryLargeArray)` blows up).
@@ -42,20 +36,15 @@ export declare function writeBlobToOpfs(blobId: string, data: ArrayBuffer): Prom
 export declare function readBlobFromOpfs(blobId: string): Promise<ArrayBuffer | null>;
 export interface ProcessedBlob {
     blob_id: string;
-    sha256: string;
     blake3: string;
     size: number;
     mime: string;
     filename: string;
 }
 /**
- * one-shot: hash bytes (sha256 + blake3), write to OPFS, return metadata.
- * lets callers avoid three round-trips across the worker boundary for an
- * upload. `data` should be transferred.
- *
- * blake3 is the canonical blob id (matches iroh-blobs / a native rust
- * store); sha256 is still computed so legacy sha256-keyed records and old
- * doc references keep resolving via the sha256 index.
+ * one-shot: hash bytes (blake3), write to OPFS, return metadata. lets
+ * callers avoid round-trips across the worker boundary for an upload.
+ * `data` should be transferred.
  */
 export declare function processBlobBytes(data: ArrayBuffer, filename: string, mime: string): Promise<ProcessedBlob>;
 export interface ResizeImageOptions {

package/dist/worker/blob-worker-logic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blob-worker-logic.d.ts","sourceRoot":"","sources":["../../src/worker/blob-worker-logic.ts"],"names":[],"mappings":"AAqBA;oEACoE;AACpE,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D;;;qCAGqC;AACrC,eAAO,MAAM,QAAQ,oBAAoB,CAAC;AAE1C;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAelE;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CASvE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAOnE;AAuBD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCtF;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAUlF;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,CAAC,CAcxB;AAID,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;iFAG6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6ExB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,SAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOhG;AAoBD;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAwBnD;AAED,+DAA+D;AAC/D,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAO/E;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CxF;AAED,uDAAuD;AACvD,wBAAsB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3D;AAaD;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CASjD;AAED,oEAAoE;AACpE,wBAAsB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7E;AAED,yDAAyD;AACzD,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5D;AAED,8DAA8D;AAC9D,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAOzD;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,MAAM,CAAC,CAOpE"}
+{"version":3,"file":"blob-worker-logic.d.ts","sourceRoot":"","sources":["../../src/worker/blob-worker-logic.ts"],"names":[],"mappings":"AAoBA;oEACoE;AACpE,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D;;;qCAGqC;AACrC,eAAO,MAAM,QAAQ,oBAAoB,CAAC;AAE1C;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAelE;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CASvE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAOnE;AAuBD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCtF;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAUlF;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,CAAC,CAUxB;AAID,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;iFAG6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6ExB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,SAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOhG;AAoBD;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAwBnD;AAED,+DAA+D;AAC/D,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAO/E;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CxF;AAED,uDAAuD;AACvD,wBAAsB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3D;AAaD;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CASjD;AAED,oEAAoE;AACpE,wBAAsB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7E;AAED,yDAAyD;AACzD,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5D;AAED,8DAA8D;AAC9D,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAOzD;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,MAAM,CAAC,CAOpE"}

package/dist/worker/blob-worker-logic.js

@@ -1,6 +1,6 @@
-// blob worker logic - the CPU-bound blob work (blake3 hashing, sha256
-// hashing, base64 encode/decode, OPFS writes, thumbnail generation, chunked
-// upload sessions) that `blob-worker.ts` exposes over comlink.
+// blob worker logic - the CPU-bound blob work (blake3 hashing, base64
+// encode/decode, OPFS writes, thumbnail generation, chunked upload
+// sessions) that `blob-worker.ts` exposes over comlink.
 //
 // kept free of comlink/postMessage side effects on purpose: this module is
 // what the test suite imports directly, and what `blob-worker.ts` (the
@@ -12,7 +12,6 @@
 // degrades to an empty string and the streaming upload/selftest functions
 // throw a clear error, matching the graceful-degradation contract of the
 // rest of this file.
-import { sha256Hex } from "../utils/hash.js";
 import { loadMiddenBlake3 } from "./midden-blake3.js";
 import { log } from "../utils/log.js";
 const TAG = "blob.worker.logic";
@@ -43,14 +42,6 @@ export async function hashBlake3(data) {
         return "";
     }
 }
-/**
- * compute sha256 hash via SubtleCrypto. SubtleCrypto.digest is already
- * async/non-blocking on the main thread, but this is exposed here too so
- * callers can do sha256 + blake3 in a single round-trip.
- */
-export async function hashSha256(data) {
-    return sha256Hex(data);
-}
 /**
  * base64-encode an ArrayBuffer. uses chunked btoa to avoid stack overflow
  * on large buffers (`String.fromCharCode(...veryLargeArray)` blows up).
@@ -140,23 +131,15 @@ export async function readBlobFromOpfs(blobId) {
     }
 }
 /**
- * one-shot: hash bytes (sha256 + blake3), write to OPFS, return metadata.
- * lets callers avoid three round-trips across the worker boundary for an
- * upload. `data` should be transferred.
- *
- * blake3 is the canonical blob id (matches iroh-blobs / a native rust
- * store); sha256 is still computed so legacy sha256-keyed records and old
- * doc references keep resolving via the sha256 index.
+ * one-shot: hash bytes (blake3), write to OPFS, return metadata. lets
+ * callers avoid round-trips across the worker boundary for an upload.
+ * `data` should be transferred.
  */
 export async function processBlobBytes(data, filename, mime) {
-    // run sha256 and blake3 concurrently. SubtleCrypto.digest does its own
-    // copy of the bytes, so we can't transfer-and-reuse - do them in parallel
-    // and let the runtime overlap them.
-    const [sha256, blake3] = await Promise.all([hashSha256(data), hashBlake3(new Uint8Array(data))]);
+    const blake3 = await hashBlake3(new Uint8Array(data));
     await writeBlobToOpfs(blake3, data);
     return {
         blob_id: blake3,
-        sha256,
         blake3,
         size: data.byteLength,
         mime,

package/dist/worker/blob-worker-logic.test.js

@@ -1,6 +1,6 @@
 // @vitest-environment happy-dom
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { base64Decode, base64Encode, generateThumbnailDataUrl, hashAbort, hashBegin, hashBlake3, hashFinish, hashPush, hashSha256, opfsStoreSelftest, opfsStoreSelftestPersistence, processBlobBytes, readBlobFromOpfs, resizeImageToWebpDataUrl, uploadBegin, writeBlobToOpfs, } from "./blob-worker-logic.js";
+import { base64Decode, base64Encode, generateThumbnailDataUrl, hashAbort, hashBegin, hashBlake3, hashFinish, hashPush, opfsStoreSelftest, opfsStoreSelftestPersistence, processBlobBytes, readBlobFromOpfs, resizeImageToWebpDataUrl, uploadBegin, writeBlobToOpfs, } from "./blob-worker-logic.js";
 import { resetMiddenBlake3Cache } from "./midden-blake3.js";
 // ---- fake OPFS (async writable-stream fallback path only - sync access
 // handles are worker/chromium-specific and not worth faking here; the
@@ -91,13 +91,6 @@ afterEach(() => {
     vi.unstubAllGlobals();
     resetMiddenBlake3Cache();
 });
-describe("hashSha256", () => {
-    it("hashes a known buffer to its well-known sha-256 digest", async () => {
-        const bytes = new TextEncoder().encode("abc");
-        const hash = await hashSha256(bytes.buffer);
-        expect(hash).toBe("ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad");
-    });
-});
 describe("hashBlake3", () => {
     it("degrades to an empty string when no midden module is bundled", async () => {
         const hash = await hashBlake3(new Uint8Array([1, 2, 3]));
@@ -154,7 +147,6 @@ describe("processBlobBytes", () => {
         // to an empty string, and blob_id mirrors it (documented behavior).
         expect(result.blake3).toBe("");
         expect(result.blob_id).toBe(result.blake3);
-        expect(result.sha256).toBe("b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9");
     });
 });
 describe("uploadBegin", () => {

package/dist/worker/blob-worker.d.ts

@@ -1,7 +1,6 @@
-import { base64Decode, base64Encode, generateThumbnailDataUrl, hashAbort, hashBegin, hashBlake3, hashFinish, hashPush, hashSha256, opfsStoreSelftest, opfsStoreSelftestPersistence, processBlobBytes, readBlobFromOpfs, resizeImageToWebpDataUrl, uploadAbort, uploadBegin, uploadFinish, uploadPush, writeBlobToOpfs } from "./blob-worker-logic.js";
+import { base64Decode, base64Encode, generateThumbnailDataUrl, hashAbort, hashBegin, hashBlake3, hashFinish, hashPush, opfsStoreSelftest, opfsStoreSelftestPersistence, processBlobBytes, readBlobFromOpfs, resizeImageToWebpDataUrl, uploadAbort, uploadBegin, uploadFinish, uploadPush, writeBlobToOpfs } from "./blob-worker-logic.js";
 declare const api: {
     hashBlake3: typeof hashBlake3;
-    hashSha256: typeof hashSha256;
     base64Encode: typeof base64Encode;
     base64Decode: typeof base64Decode;
     writeBlobToOpfs: typeof writeBlobToOpfs;

package/dist/worker/blob-worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blob-worker.d.ts","sourceRoot":"","sources":["../../src/worker/blob-worker.ts"],"names":[],"mappings":"AAeA,OAAO,EAEL,YAAY,EACZ,YAAY,EACZ,wBAAwB,EACxB,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,4BAA4B,EAC5B,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAEhC,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;CAoBR,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,CAAC"}
+{"version":3,"file":"blob-worker.d.ts","sourceRoot":"","sources":["../../src/worker/blob-worker.ts"],"names":[],"mappings":"AAeA,OAAO,EAEL,YAAY,EACZ,YAAY,EACZ,wBAAwB,EACxB,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,4BAA4B,EAC5B,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAEhC,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;;CAmBR,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,CAAC"}

package/dist/worker/blob-worker.js

@@ -1,5 +1,5 @@
-// blob worker entry - moves CPU-bound blob work (blake3 hashing, sha256
-// hashing, base64 encode/decode, OPFS writes) off the main thread.
+// blob worker entry - moves CPU-bound blob work (blake3 hashing, base64
+// encode/decode, OPFS writes) off the main thread.
 //
 // architecture: comlink-exposed module. spun up lazily by
 // `blob-worker-client.ts` on first use. shares no state with the main
@@ -12,10 +12,9 @@
 // worker-only glue - importing it anywhere other than as a worker script
 // runs `Comlink.expose()` and posts a ready message for no reason.
 import * as Comlink from "comlink";
-import { BLOB_WORKER_READY_MESSAGE, base64Decode, base64Encode, generateThumbnailDataUrl, hashAbort, hashBegin, hashBlake3, hashFinish, hashPush, hashSha256, opfsStoreSelftest, opfsStoreSelftestPersistence, processBlobBytes, readBlobFromOpfs, resizeImageToWebpDataUrl, uploadAbort, uploadBegin, uploadFinish, uploadPush, writeBlobToOpfs, } from "./blob-worker-logic.js";
+import { BLOB_WORKER_READY_MESSAGE, base64Decode, base64Encode, generateThumbnailDataUrl, hashAbort, hashBegin, hashBlake3, hashFinish, hashPush, opfsStoreSelftest, opfsStoreSelftestPersistence, processBlobBytes, readBlobFromOpfs, resizeImageToWebpDataUrl, uploadAbort, uploadBegin, uploadFinish, uploadPush, writeBlobToOpfs, } from "./blob-worker-logic.js";
 const api = {
     hashBlake3,
-    hashSha256,
     base64Encode,
     base64Decode,
     writeBlobToOpfs,

package/dist/worker/index.d.ts

@@ -1,7 +1,7 @@
 export type { ProcessedBlob, ResizeImageOptions } from "./blob-worker-logic.js";
 export { BLOB_WORKER_READY_MESSAGE, OPFS_DIR as BLOB_OPFS_DIR } from "./blob-worker-logic.js";
 export type { BlobWorkerApi } from "./blob-worker.js";
-export { getBlobWorker, shutdownBlobWorker, hashBlake3, hashBlake3Streaming, hashSha256, base64Encode, base64Decode, processBlobBytes, writeBlobToOpfs, streamFileToOpfs, resizeImageToWebpDataUrl, generateThumbnailDataUrl, } from "./blob-worker-client.js";
+export { getBlobWorker, shutdownBlobWorker, hashBlake3, hashBlake3Streaming, base64Encode, base64Decode, processBlobBytes, writeBlobToOpfs, streamFileToOpfs, resizeImageToWebpDataUrl, generateThumbnailDataUrl, } from "./blob-worker-client.js";
 export type { MiddenWorkerApi, MiddenWorkerIdentity, MiddenWorkerInitOptions, StreamInfo, } from "./midden-worker-contract.js";
 export { MIDDEN_WORKER_READY_MESSAGE, MIDDEN_WORKER_READY_TIMEOUT_MS, } from "./midden-worker-contract.js";
 export type { CreateMiddenWorker } from "./midden-worker-client.js";

package/dist/worker/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE9F,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,UAAU,GACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE9F,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,UAAU,GACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/worker/index.js

@@ -1,5 +1,5 @@
 export { BLOB_WORKER_READY_MESSAGE, OPFS_DIR as BLOB_OPFS_DIR } from "./blob-worker-logic.js";
-export { getBlobWorker, shutdownBlobWorker, hashBlake3, hashBlake3Streaming, hashSha256, base64Encode, base64Decode, processBlobBytes, writeBlobToOpfs, streamFileToOpfs, resizeImageToWebpDataUrl, generateThumbnailDataUrl, } from "./blob-worker-client.js";
+export { getBlobWorker, shutdownBlobWorker, hashBlake3, hashBlake3Streaming, base64Encode, base64Decode, processBlobBytes, writeBlobToOpfs, streamFileToOpfs, resizeImageToWebpDataUrl, generateThumbnailDataUrl, } from "./blob-worker-client.js";
 export { MIDDEN_WORKER_READY_MESSAGE, MIDDEN_WORKER_READY_TIMEOUT_MS, } from "./midden-worker-contract.js";
 export { WorkerBiStream, WorkerImportSession, WorkerMiddenNode, WorkerRadioHandle, } from "./midden-worker-client.js";
 export { MiddenNode } from "./midden-stub.js";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@freqhole/reliquary",
-    "version": "0.3.12",
+    "version": "0.3.13",
     "private": false,
     "type": "module",
     "description": "freqhole media blob storage domain: content-addressed blobs, transfer, worker, solid helpers",

package/dist/utils/hash.d.ts

@@ -1,13 +0,0 @@
-/**
- * hash of an ArrayBuffer (or a view over one) as a lowercase hex string.
- */
-export declare function sha256Hex(data: ArrayBuffer | ArrayBufferView): Promise<string>;
-/**
- * hash of a File/Blob's contents as a lowercase hex string.
- */
-export declare function sha256HexOfBlob(blob: Blob): Promise<string>;
-/**
- * true if `data` hashes to `expectedHex` (case-insensitive).
- */
-export declare function verifySha256Hex(data: ArrayBuffer | ArrayBufferView, expectedHex: string): Promise<boolean>;
-//# sourceMappingURL=hash.d.ts.map

package/dist/utils/hash.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/utils/hash.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAMpF;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjE;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,WAAW,GAAG,eAAe,EACnC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAGlB"}

package/dist/utils/hash.js

@@ -1,31 +0,0 @@
-// sha256 hashing helpers built on the web crypto subtle api. used wherever a
-// content hash is needed but the full blake3-canonical blob pipeline (./blobs,
-// ./worker) is overkill - legacy sha256 references, quick integrity checks, etc.
-/**
- * hash of an ArrayBuffer (or a view over one) as a lowercase hex string.
- */
-export async function sha256Hex(data) {
-    const buffer = ArrayBuffer.isView(data)
-        ? data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength)
-        : data;
-    const digest = await crypto.subtle.digest("SHA-256", buffer);
-    return bufferToHex(digest);
-}
-/**
- * hash of a File/Blob's contents as a lowercase hex string.
- */
-export async function sha256HexOfBlob(blob) {
-    return sha256Hex(await blob.arrayBuffer());
-}
-/**
- * true if `data` hashes to `expectedHex` (case-insensitive).
- */
-export async function verifySha256Hex(data, expectedHex) {
-    const actual = await sha256Hex(data);
-    return actual === expectedHex.toLowerCase();
-}
-function bufferToHex(buffer) {
-    return Array.from(new Uint8Array(buffer))
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-}

package/dist/utils/hash.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=hash.test.d.ts.map

package/dist/utils/hash.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hash.test.d.ts","sourceRoot":"","sources":["../../src/utils/hash.test.ts"],"names":[],"mappings":""}

package/dist/utils/hash.test.js

@@ -1,56 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { sha256Hex, sha256HexOfBlob, verifySha256Hex } from "./hash.js";
-// known-answer test vectors for sha-256
-const EMPTY_HASH = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
-const ABC_HASH = "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad";
-function textToBuffer(text) {
-    return new TextEncoder().encode(text).buffer;
-}
-describe("sha256Hex", () => {
-    it("hashes an empty buffer to the well-known sha-256 empty digest", async () => {
-        const hash = await sha256Hex(new ArrayBuffer(0));
-        expect(hash).toBe(EMPTY_HASH);
-    });
-    it("hashes 'abc' to its well-known sha-256 digest", async () => {
-        const hash = await sha256Hex(textToBuffer("abc"));
-        expect(hash).toBe(ABC_HASH);
-    });
-    it("accepts an ArrayBufferView (Uint8Array) as well as a raw ArrayBuffer", async () => {
-        const bytes = new TextEncoder().encode("abc");
-        const hash = await sha256Hex(bytes);
-        expect(hash).toBe(ABC_HASH);
-    });
-    it("only hashes the view's byte range, not the whole underlying buffer", async () => {
-        const backing = new Uint8Array(10);
-        backing.set(new TextEncoder().encode("abc"), 2);
-        const view = new Uint8Array(backing.buffer, 2, 3);
-        const hash = await sha256Hex(view);
-        expect(hash).toBe(ABC_HASH);
-    });
-    it("produces different hashes for different inputs", async () => {
-        const a = await sha256Hex(textToBuffer("hello"));
-        const b = await sha256Hex(textToBuffer("world"));
-        expect(a).not.toBe(b);
-    });
-});
-describe("sha256HexOfBlob", () => {
-    it("hashes a Blob's contents the same as its raw bytes", async () => {
-        const blob = new Blob(["abc"]);
-        const hash = await sha256HexOfBlob(blob);
-        expect(hash).toBe(ABC_HASH);
-    });
-});
-describe("verifySha256Hex", () => {
-    it("returns true when the expected hash matches", async () => {
-        const ok = await verifySha256Hex(textToBuffer("abc"), ABC_HASH);
-        expect(ok).toBe(true);
-    });
-    it("returns false when the expected hash does not match", async () => {
-        const ok = await verifySha256Hex(textToBuffer("abc"), EMPTY_HASH);
-        expect(ok).toBe(false);
-    });
-    it("is case-insensitive when comparing the expected hash", async () => {
-        const ok = await verifySha256Hex(textToBuffer("abc"), ABC_HASH.toUpperCase());
-        expect(ok).toBe(true);
-    });
-});