@noy-db/hub 0.1.0-pre.4 → 0.1.0-pre.7

package/dist/i18n/index.d.cts

@@ -1,10 +1,10 @@
-import { I as I18nStrategy } from '../types-BVSfkYg6.cjs';
-export { D as DICT_COLLECTION_PREFIX, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, e as I18nTextDescriptor, f as I18nTextOptions, g as applyI18nLocale, h as dictCollectionName, i as dictKey, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, r as resolveI18nText, v as validateI18nTextValue } from '../types-BVSfkYg6.cjs';
+import { I as I18nStrategy } from '../types-D3QLmhlk.cjs';
+export { D as DICT_COLLECTION_PREFIX, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, e as I18nTextDescriptor, f as I18nTextOptions, g as applyI18nLocale, h as dictCollectionName, i as dictKey, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, r as resolveI18nText, v as validateI18nTextValue } from '../types-D3QLmhlk.cjs';
 import '../lazy-builder-CZVLKh0Z.cjs';
 import '../predicate-SBHmi6D0.cjs';
 import '../strategy-D-SrOLCl.cjs';
 import '../strategy-BSxFXGzb.cjs';
-import '../index-DN-J-5wT.cjs';
+import '../index-6xNpPsxR.cjs';
 
 /**
  * Active i18n strategy — `withI18n()` returns the real implementation

package/dist/i18n/index.d.ts

@@ -1,10 +1,10 @@
-import { I as I18nStrategy } from '../types-Dmi7nrC9.js';
-export { D as DICT_COLLECTION_PREFIX, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, e as I18nTextDescriptor, f as I18nTextOptions, g as applyI18nLocale, h as dictCollectionName, i as dictKey, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, r as resolveI18nText, v as validateI18nTextValue } from '../types-Dmi7nrC9.js';
+import { I as I18nStrategy } from '../types-D-6bmD2c.js';
+export { D as DICT_COLLECTION_PREFIX, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, e as I18nTextDescriptor, f as I18nTextOptions, g as applyI18nLocale, h as dictCollectionName, i as dictKey, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, r as resolveI18nText, v as validateI18nTextValue } from '../types-D-6bmD2c.js';
 import '../lazy-builder-BwEoBQZ9.js';
 import '../predicate-SBHmi6D0.js';
 import '../strategy-D-SrOLCl.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-BRHBCmLt.js';
+import '../index-DJTf9yxn.js';
 
 /**
  * Active i18n strategy — `withI18n()` returns the real implementation

package/dist/i18n/index.js

@@ -10,10 +10,10 @@ import {
   isI18nTextDescriptor,
   resolveI18nText,
   validateI18nTextValue
-} from "../chunk-EARQCIL7.js";
-import "../chunk-PSHTHSIX.js";
+} from "../chunk-NZ4XCIKS.js";
+import "../chunk-6IJQ27XN.js";
 import "../chunk-CIMZBAZB.js";
-import "../chunk-O5GK62FJ.js";
+import "../chunk-B6HF6NTZ.js";
 import "../chunk-MR4424N3.js";
 import "../chunk-ACLDOTNQ.js";
 

package/dist/{index-DN-J-5wT.d.cts → index-6xNpPsxR.d.cts}

@@ -1937,4 +1937,4 @@ declare class ScanBuilder<T> implements AsyncIterable<T> {
     private recordMatches;
 }
 
-export { ScanBuilder as $, AlreadyElevatedError as A, BackupCorruptedError as B, ConflictError as C, DEFAULT_JOIN_MAX_ROWS as D, ElevationExpiredError as E, FilenameSanitizationError as F, GroupCardinalityError as G, type QuerySource as H, ImportCapabilityError as I, type JoinContext as J, KeyringExpiredError as K, LedgerContentionError as L, MissingTranslationError as M, NetworkError as N, type OrderBy as O, PathEscapeError as P, Query as Q, ReadOnlyAtInstantError as R, ReadOnlyError as S, ReadOnlyFrameError as T, type RefDescriptor as U, RefIntegrityError as V, type RefMode as W, RefRegistry as X, RefScopeError as Y, type RefViolation as Z, ReservedCollectionNameError as _, BackupLedgerError as a, type ScanPageProvider as a0, SchemaValidationError as a1, SessionExpiredError as a2, SessionNotFoundError as a3, SessionPolicyError as a4, StoreCapabilityError as a5, TamperedError as a6, TierDemoteDeniedError as a7, TierNotGrantedError as a8, TranslatorNotConfiguredError as a9, ValidationError as aa, applyJoins as ab, buildLiveQuery as ac, executePlan as ad, ref as ae, resetJoinWarnings as af, BundleIntegrityError as b, BundleVersionConflictError as c, DanglingReferenceError as d, DecryptionError as e, DelegationTargetMissingError as f, DictKeyInUseError as g, DictKeyMissingError as h, ExportCapabilityError as i, IndexRequiredError as j, IndexWriteFailureError as k, InvalidKeyError as l, type JoinLeg as m, type JoinStrategy as n, JoinTooLargeError as o, type JoinableSource as p, type LiveQuery as q, type LiveUpstream as r, LocaleNotSpecifiedError as s, NoAccessError as t, NotFoundError as u, NoydbError as v, PeriodClosedError as w, PermissionDeniedError as x, PrivilegeEscalationError as y, type QueryPlan as z };
+export { ScanBuilder as $, AlreadyElevatedError as A, BackupCorruptedError as B, ConflictError as C, DEFAULT_JOIN_MAX_ROWS as D, ElevationExpiredError as E, FilenameSanitizationError as F, GroupCardinalityError as G, type QuerySource as H, ImportCapabilityError as I, type JoinContext as J, KeyringExpiredError as K, LedgerContentionError as L, MissingTranslationError as M, NoydbError as N, type OrderBy as O, PathEscapeError as P, Query as Q, ReadOnlyAtInstantError as R, ReadOnlyError as S, ReadOnlyFrameError as T, type RefDescriptor as U, RefIntegrityError as V, type RefMode as W, RefRegistry as X, RefScopeError as Y, type RefViolation as Z, ReservedCollectionNameError as _, BackupLedgerError as a, type ScanPageProvider as a0, SchemaValidationError as a1, SessionExpiredError as a2, SessionNotFoundError as a3, SessionPolicyError as a4, StoreCapabilityError as a5, TamperedError as a6, TierDemoteDeniedError as a7, TierNotGrantedError as a8, TranslatorNotConfiguredError as a9, ValidationError as aa, applyJoins as ab, buildLiveQuery as ac, executePlan as ad, ref as ae, resetJoinWarnings as af, BundleIntegrityError as b, BundleVersionConflictError as c, DanglingReferenceError as d, DecryptionError as e, DelegationTargetMissingError as f, DictKeyInUseError as g, DictKeyMissingError as h, ExportCapabilityError as i, IndexRequiredError as j, IndexWriteFailureError as k, InvalidKeyError as l, type JoinLeg as m, type JoinStrategy as n, JoinTooLargeError as o, type JoinableSource as p, type LiveQuery as q, type LiveUpstream as r, LocaleNotSpecifiedError as s, NetworkError as t, NoAccessError as u, NotFoundError as v, PeriodClosedError as w, PermissionDeniedError as x, PrivilegeEscalationError as y, type QueryPlan as z };

package/dist/{index-Cy-MKrdK.d.ts → index-Cvb0efA_.d.cts}

@@ -1,4 +1,4 @@
-import { aU as BundleRecipient, aR as Vault } from './types-Dmi7nrC9.js';
+import { aS as PublicEnvelope, b0 as BundleRecipient, aY as Vault } from './types-D3QLmhlk.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.
@@ -47,6 +47,7 @@ import { aU as BundleRecipient, aR as Vault } from './types-Dmi7nrC9.js';
  * carries only what's needed to identify the file as a NOYDB
  * bundle and verify its integrity — nothing about the contents.
  */
+
 /** Magic bytes 'NDB1' (ASCII), identifying a NOYDB bundle. */
 declare const NOYDB_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
 /** Total fixed prefix before the header JSON: 4+1+1+4 bytes. */
@@ -110,6 +111,18 @@ interface NoydbBundleHeader {
     readonly bodyBytes: number;
     /** SHA-256 of the compressed body bytes (lowercase hex). Lets readers verify integrity without decompressing. */
     readonly bodySha256: string;
+    /**
+     * Owner-curated public envelope (`docs/subsystems/public-envelope.md`).
+     * Optional — present only when the source vault has a
+     * `_meta/public-envelope` document AND the writer's hub is opted
+     * into the feature. Treat as **untrusted hint**; the body's
+     * encrypted contents remain the source of truth.
+     *
+     * The envelope deliberately widens the minimum-disclosure rule
+     * for explicit, owner-curated label fields (name, icon, …). Every
+     * other unknown header key still rejects at parse time.
+     */
+    readonly publicEnvelope?: PublicEnvelope;
 }
 /**
  * Validate a parsed bundle header. Throws on any deviation from
@@ -284,14 +297,35 @@ declare function resetBrotliSupportCache(): void;
 declare function writeNoydbBundle(vault: Vault, opts?: WriteNoydbBundleOptions): Promise<Uint8Array>;
 /**
  * Read just the bundle header — no body decompression, no
- * integrity verification. Fast (O(prefix + header bytes)) and
- * intended for cloud-listing UIs that want to show the handle and
- * size before downloading the full body.
+ * integrity verification. Intended for cloud-listing UIs that want
+ * to show the handle and size before downloading the full body.
  *
  * Returns the same `NoydbBundleHeader` shape as the writer, with
  * minimum-disclosure validation already applied.
+ *
+ * **Cost** — O(prefix + header bytes). The header is normally well
+ * under 1 KB, but may grow to roughly 256 KB when a `publicEnvelope`
+ * with an inline icon is present. Cloud-listing UIs that previously
+ * assumed sub-KB header reads should account for this when sizing
+ * range requests against bundles that may carry icons.
  */
 declare function readNoydbBundleHeader(bytes: Uint8Array): NoydbBundleHeader;
+/**
+ * Read just the bundle's public envelope (`docs/subsystems/public-envelope.md`)
+ * — without verifying the body or even parsing the dump JSON. Pass
+ * the raw bundle bytes; receive the owner-curated metadata or
+ * `undefined` if the bundle was written without one.
+ *
+ * Locale-resolves any `name` / `description` map fields when `locale`
+ * is supplied. Omitting `locale` returns the raw envelope.
+ *
+ * Same security caveat as the on-vault read path — the public
+ * envelope is **untrusted hint** in v1; the encrypted body remains
+ * the source of truth for vault contents.
+ */
+declare function readNoydbBundlePublicEnvelope(bytes: Uint8Array, opts?: {
+    readonly locale?: string;
+}): PublicEnvelope | undefined;
 /**
  * Read a full `.noydb` bundle: validate magic + header, verify
  * integrity hash over the body bytes, decompress, and return the
@@ -377,4 +411,4 @@ declare function generateULID(): string;
  */
 declare function isULID(value: string): boolean;
 
-export { type CompressionAlgo as C, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type WriteNoydbBundleOptions as W, NOYDB_BUNDLE_MAGIC as a, NOYDB_BUNDLE_PREFIX_BYTES as b, type NoydbBundleHeader as c, type NoydbBundleReadResult as d, readNoydbBundleHeader as e, resetBrotliSupportCache as f, generateULID as g, hasNoydbBundleMagic as h, isULID as i, COMPRESSION_BROTLI as j, COMPRESSION_GZIP as k, COMPRESSION_NONE as l, FLAG_HAS_INTEGRITY_HASH as m, encodeBundleHeader as n, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };
+export { type CompressionAlgo as C, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type WriteNoydbBundleOptions as W, NOYDB_BUNDLE_MAGIC as a, NOYDB_BUNDLE_PREFIX_BYTES as b, type NoydbBundleHeader as c, type NoydbBundleReadResult as d, readNoydbBundleHeader as e, readNoydbBundlePublicEnvelope as f, generateULID as g, hasNoydbBundleMagic as h, isULID as i, resetBrotliSupportCache as j, COMPRESSION_BROTLI as k, COMPRESSION_GZIP as l, COMPRESSION_NONE as m, FLAG_HAS_INTEGRITY_HASH as n, encodeBundleHeader as o, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };

package/dist/{index-BRHBCmLt.d.ts → index-DJTf9yxn.d.ts}

@@ -1937,4 +1937,4 @@ declare class ScanBuilder<T> implements AsyncIterable<T> {
     private recordMatches;
 }
 
-export { ScanBuilder as $, AlreadyElevatedError as A, BackupCorruptedError as B, ConflictError as C, DEFAULT_JOIN_MAX_ROWS as D, ElevationExpiredError as E, FilenameSanitizationError as F, GroupCardinalityError as G, type QuerySource as H, ImportCapabilityError as I, type JoinContext as J, KeyringExpiredError as K, LedgerContentionError as L, MissingTranslationError as M, NetworkError as N, type OrderBy as O, PathEscapeError as P, Query as Q, ReadOnlyAtInstantError as R, ReadOnlyError as S, ReadOnlyFrameError as T, type RefDescriptor as U, RefIntegrityError as V, type RefMode as W, RefRegistry as X, RefScopeError as Y, type RefViolation as Z, ReservedCollectionNameError as _, BackupLedgerError as a, type ScanPageProvider as a0, SchemaValidationError as a1, SessionExpiredError as a2, SessionNotFoundError as a3, SessionPolicyError as a4, StoreCapabilityError as a5, TamperedError as a6, TierDemoteDeniedError as a7, TierNotGrantedError as a8, TranslatorNotConfiguredError as a9, ValidationError as aa, applyJoins as ab, buildLiveQuery as ac, executePlan as ad, ref as ae, resetJoinWarnings as af, BundleIntegrityError as b, BundleVersionConflictError as c, DanglingReferenceError as d, DecryptionError as e, DelegationTargetMissingError as f, DictKeyInUseError as g, DictKeyMissingError as h, ExportCapabilityError as i, IndexRequiredError as j, IndexWriteFailureError as k, InvalidKeyError as l, type JoinLeg as m, type JoinStrategy as n, JoinTooLargeError as o, type JoinableSource as p, type LiveQuery as q, type LiveUpstream as r, LocaleNotSpecifiedError as s, NoAccessError as t, NotFoundError as u, NoydbError as v, PeriodClosedError as w, PermissionDeniedError as x, PrivilegeEscalationError as y, type QueryPlan as z };
+export { ScanBuilder as $, AlreadyElevatedError as A, BackupCorruptedError as B, ConflictError as C, DEFAULT_JOIN_MAX_ROWS as D, ElevationExpiredError as E, FilenameSanitizationError as F, GroupCardinalityError as G, type QuerySource as H, ImportCapabilityError as I, type JoinContext as J, KeyringExpiredError as K, LedgerContentionError as L, MissingTranslationError as M, NoydbError as N, type OrderBy as O, PathEscapeError as P, Query as Q, ReadOnlyAtInstantError as R, ReadOnlyError as S, ReadOnlyFrameError as T, type RefDescriptor as U, RefIntegrityError as V, type RefMode as W, RefRegistry as X, RefScopeError as Y, type RefViolation as Z, ReservedCollectionNameError as _, BackupLedgerError as a, type ScanPageProvider as a0, SchemaValidationError as a1, SessionExpiredError as a2, SessionNotFoundError as a3, SessionPolicyError as a4, StoreCapabilityError as a5, TamperedError as a6, TierDemoteDeniedError as a7, TierNotGrantedError as a8, TranslatorNotConfiguredError as a9, ValidationError as aa, applyJoins as ab, buildLiveQuery as ac, executePlan as ad, ref as ae, resetJoinWarnings as af, BundleIntegrityError as b, BundleVersionConflictError as c, DanglingReferenceError as d, DecryptionError as e, DelegationTargetMissingError as f, DictKeyInUseError as g, DictKeyMissingError as h, ExportCapabilityError as i, IndexRequiredError as j, IndexWriteFailureError as k, InvalidKeyError as l, type JoinLeg as m, type JoinStrategy as n, JoinTooLargeError as o, type JoinableSource as p, type LiveQuery as q, type LiveUpstream as r, LocaleNotSpecifiedError as s, NetworkError as t, NoAccessError as u, NotFoundError as v, PeriodClosedError as w, PermissionDeniedError as x, PrivilegeEscalationError as y, type QueryPlan as z };

package/dist/{index-BvUiM47h.d.cts → index-DZn6Yick.d.ts}

@@ -1,4 +1,4 @@
-import { aU as BundleRecipient, aR as Vault } from './types-BVSfkYg6.cjs';
+import { aS as PublicEnvelope, b0 as BundleRecipient, aY as Vault } from './types-D-6bmD2c.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.
@@ -47,6 +47,7 @@ import { aU as BundleRecipient, aR as Vault } from './types-BVSfkYg6.cjs';
  * carries only what's needed to identify the file as a NOYDB
  * bundle and verify its integrity — nothing about the contents.
  */
+
 /** Magic bytes 'NDB1' (ASCII), identifying a NOYDB bundle. */
 declare const NOYDB_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
 /** Total fixed prefix before the header JSON: 4+1+1+4 bytes. */
@@ -110,6 +111,18 @@ interface NoydbBundleHeader {
     readonly bodyBytes: number;
     /** SHA-256 of the compressed body bytes (lowercase hex). Lets readers verify integrity without decompressing. */
     readonly bodySha256: string;
+    /**
+     * Owner-curated public envelope (`docs/subsystems/public-envelope.md`).
+     * Optional — present only when the source vault has a
+     * `_meta/public-envelope` document AND the writer's hub is opted
+     * into the feature. Treat as **untrusted hint**; the body's
+     * encrypted contents remain the source of truth.
+     *
+     * The envelope deliberately widens the minimum-disclosure rule
+     * for explicit, owner-curated label fields (name, icon, …). Every
+     * other unknown header key still rejects at parse time.
+     */
+    readonly publicEnvelope?: PublicEnvelope;
 }
 /**
  * Validate a parsed bundle header. Throws on any deviation from
@@ -284,14 +297,35 @@ declare function resetBrotliSupportCache(): void;
 declare function writeNoydbBundle(vault: Vault, opts?: WriteNoydbBundleOptions): Promise<Uint8Array>;
 /**
  * Read just the bundle header — no body decompression, no
- * integrity verification. Fast (O(prefix + header bytes)) and
- * intended for cloud-listing UIs that want to show the handle and
- * size before downloading the full body.
+ * integrity verification. Intended for cloud-listing UIs that want
+ * to show the handle and size before downloading the full body.
  *
  * Returns the same `NoydbBundleHeader` shape as the writer, with
  * minimum-disclosure validation already applied.
+ *
+ * **Cost** — O(prefix + header bytes). The header is normally well
+ * under 1 KB, but may grow to roughly 256 KB when a `publicEnvelope`
+ * with an inline icon is present. Cloud-listing UIs that previously
+ * assumed sub-KB header reads should account for this when sizing
+ * range requests against bundles that may carry icons.
  */
 declare function readNoydbBundleHeader(bytes: Uint8Array): NoydbBundleHeader;
+/**
+ * Read just the bundle's public envelope (`docs/subsystems/public-envelope.md`)
+ * — without verifying the body or even parsing the dump JSON. Pass
+ * the raw bundle bytes; receive the owner-curated metadata or
+ * `undefined` if the bundle was written without one.
+ *
+ * Locale-resolves any `name` / `description` map fields when `locale`
+ * is supplied. Omitting `locale` returns the raw envelope.
+ *
+ * Same security caveat as the on-vault read path — the public
+ * envelope is **untrusted hint** in v1; the encrypted body remains
+ * the source of truth for vault contents.
+ */
+declare function readNoydbBundlePublicEnvelope(bytes: Uint8Array, opts?: {
+    readonly locale?: string;
+}): PublicEnvelope | undefined;
 /**
  * Read a full `.noydb` bundle: validate magic + header, verify
  * integrity hash over the body bytes, decompress, and return the
@@ -377,4 +411,4 @@ declare function generateULID(): string;
  */
 declare function isULID(value: string): boolean;
 
-export { type CompressionAlgo as C, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type WriteNoydbBundleOptions as W, NOYDB_BUNDLE_MAGIC as a, NOYDB_BUNDLE_PREFIX_BYTES as b, type NoydbBundleHeader as c, type NoydbBundleReadResult as d, readNoydbBundleHeader as e, resetBrotliSupportCache as f, generateULID as g, hasNoydbBundleMagic as h, isULID as i, COMPRESSION_BROTLI as j, COMPRESSION_GZIP as k, COMPRESSION_NONE as l, FLAG_HAS_INTEGRITY_HASH as m, encodeBundleHeader as n, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };
+export { type CompressionAlgo as C, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type WriteNoydbBundleOptions as W, NOYDB_BUNDLE_MAGIC as a, NOYDB_BUNDLE_PREFIX_BYTES as b, type NoydbBundleHeader as c, type NoydbBundleReadResult as d, readNoydbBundleHeader as e, readNoydbBundlePublicEnvelope as f, generateULID as g, hasNoydbBundleMagic as h, isULID as i, resetBrotliSupportCache as j, COMPRESSION_BROTLI as k, COMPRESSION_GZIP as l, COMPRESSION_NONE as m, FLAG_HAS_INTEGRITY_HASH as n, encodeBundleHeader as o, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };