@noy-db/hub 0.1.0-pre.7 → 0.1.0-pre.8

package/dist/sync/index.d.cts

@@ -1,4 +1,4 @@
-import { ap as SyncStrategy } from '../types-D3QLmhlk.cjs';
+import { ap as SyncStrategy } from '../types-arFMsCtn.cjs';
 import '../lazy-builder-CZVLKh0Z.cjs';
 import '../predicate-SBHmi6D0.cjs';
 import '../strategy-D-SrOLCl.cjs';

package/dist/sync/index.d.ts

@@ -1,4 +1,4 @@
-import { ap as SyncStrategy } from '../types-D-6bmD2c.js';
+import { ap as SyncStrategy } from '../types-DD9eKKNc.js';
 import '../lazy-builder-BwEoBQZ9.js';
 import '../predicate-SBHmi6D0.js';
 import '../strategy-D-SrOLCl.js';

package/dist/sync/index.js

@@ -2,9 +2,9 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-CL37QSND.js";
+} from "../chunk-HC7Z5EQZ.js";
 import "../chunk-2QR2PQTT.js";
-import "../chunk-B6HF6NTZ.js";
+import "../chunk-PJK6IOBC.js";
 import "../chunk-MR4424N3.js";
 import "../chunk-ACLDOTNQ.js";
 

package/dist/team/index.cjs

@@ -78,6 +78,12 @@ var ConflictError = class extends NoydbError {
     this.version = version;
   }
 };
+var ValidationError = class extends NoydbError {
+  constructor(message = "Validation error") {
+    super("VALIDATION_ERROR", message);
+    this.name = "ValidationError";
+  }
+};
 
 // src/crypto.ts
 var IV_BYTES = 12;
@@ -194,6 +200,11 @@ async function ensureCollectionDEK(adapter, vault, keyring) {
   };
 }
 async function persistKeyring(adapter, vault, keyring) {
+  if (!keyring.kek) {
+    throw new ValidationError(
+      "persistKeyring: keyring.kek is null \u2014 cannot wrap DEKs without the KEK. This typically means the keyring was opened via tier-3 PIN resume, session restore, or a wrap-DEKs tier-2 unlock. Re-authenticate at tier 1 (passphrase) before persisting."
+    );
+  }
   const wrappedDeks = {};
   for (const [collName, dek] of keyring.deks) {
     wrappedDeks[collName] = await wrapKey(dek, keyring.kek);