@noy-db/hub 0.1.0-pre.7 → 0.1.0-pre.9

package/dist/history/index.d.cts

@@ -1,6 +1,6 @@
-import { as as HistoryStrategy, at as NoydbStore, au as HistoryOptions, av as EncryptedEnvelope, aw as PruneOptions } from '../types-D3QLmhlk.cjs';
-export { ax as AppendInput, ay as ChangeType, az as CollectionInstant, aA as DiffEntry, aB as JsonPatch, aC as JsonPatchOp, aD as LedgerEntry, aE as LedgerStore, aF as VaultEngine, aG as VaultInstant, aH as VerifyResult, aI as applyPatch, aJ as canonicalJson, aK as computePatch, aL as diff, aM as formatDiff, aN as hashEntry, aO as paddedIndex, aP as parseIndex, aQ as sha256Hex } from '../types-D3QLmhlk.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from '../hash-h_2U3TFb.cjs';
+import { as as HistoryStrategy, at as NoydbStore, au as HistoryOptions, av as EncryptedEnvelope, aw as PruneOptions } from '../types-Bnb82f5R.cjs';
+export { ax as AppendInput, ay as ChangeType, az as CollectionInstant, aA as DiffEntry, aB as JsonPatch, aC as JsonPatchOp, aD as LedgerEntry, aE as LedgerStore, aF as VaultEngine, aG as VaultInstant, aH as VerifyResult, aI as applyPatch, aJ as canonicalJson, aK as computePatch, aL as diff, aM as formatDiff, aN as hashEntry, aO as paddedIndex, aP as parseIndex, aQ as sha256Hex } from '../types-Bnb82f5R.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from '../hash-BEfzPKwo.cjs';
 import '../lazy-builder-CZVLKh0Z.cjs';
 import '../predicate-SBHmi6D0.cjs';
 import '../strategy-D-SrOLCl.cjs';

package/dist/history/index.d.ts

@@ -1,6 +1,6 @@
-import { as as HistoryStrategy, at as NoydbStore, au as HistoryOptions, av as EncryptedEnvelope, aw as PruneOptions } from '../types-D-6bmD2c.js';
-export { ax as AppendInput, ay as ChangeType, az as CollectionInstant, aA as DiffEntry, aB as JsonPatch, aC as JsonPatchOp, aD as LedgerEntry, aE as LedgerStore, aF as VaultEngine, aG as VaultInstant, aH as VerifyResult, aI as applyPatch, aJ as canonicalJson, aK as computePatch, aL as diff, aM as formatDiff, aN as hashEntry, aO as paddedIndex, aP as parseIndex, aQ as sha256Hex } from '../types-D-6bmD2c.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from '../hash-1Xsqx1jl.js';
+import { as as HistoryStrategy, at as NoydbStore, au as HistoryOptions, av as EncryptedEnvelope, aw as PruneOptions } from '../types-Bo7NSXJr.js';
+export { ax as AppendInput, ay as ChangeType, az as CollectionInstant, aA as DiffEntry, aB as JsonPatch, aC as JsonPatchOp, aD as LedgerEntry, aE as LedgerStore, aF as VaultEngine, aG as VaultInstant, aH as VerifyResult, aI as applyPatch, aJ as canonicalJson, aK as computePatch, aL as diff, aM as formatDiff, aN as hashEntry, aO as paddedIndex, aP as parseIndex, aQ as sha256Hex } from '../types-Bo7NSXJr.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from '../hash-lsoL3eEW.js';
 import '../lazy-builder-BwEoBQZ9.js';
 import '../predicate-SBHmi6D0.js';
 import '../strategy-D-SrOLCl.js';

package/dist/history/index.js

@@ -15,7 +15,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-N2LMZKLR.js";
+} from "../chunk-QAVUREFT.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -24,7 +24,7 @@ import {
   parseIndex,
   sha256Hex
 } from "../chunk-CIMZBAZB.js";
-import "../chunk-B6HF6NTZ.js";
+import "../chunk-RKJ6OL7K.js";
 import "../chunk-MR4424N3.js";
 import "../chunk-ACLDOTNQ.js";
 

package/dist/i18n/index.cjs

@@ -63,6 +63,12 @@ var PermissionDeniedError = class extends NoydbError {
     this.name = "PermissionDeniedError";
   }
 };
+var ValidationError = class extends NoydbError {
+  constructor(message = "Validation error") {
+    super("VALIDATION_ERROR", message);
+    this.name = "ValidationError";
+  }
+};
 var DictKeyMissingError = class extends NoydbError {
   /** The dictionary name. */
   dictionaryName;
@@ -306,6 +312,11 @@ async function ensureCollectionDEK(adapter, vault, keyring) {
   };
 }
 async function persistKeyring(adapter, vault, keyring) {
+  if (!keyring.kek) {
+    throw new ValidationError(
+      "persistKeyring: keyring.kek is null \u2014 cannot wrap DEKs without the KEK. This typically means the keyring was opened via tier-3 PIN resume, session restore, or a wrap-DEKs tier-2 unlock. Re-authenticate at tier 1 (passphrase) before persisting."
+    );
+  }
   const wrappedDeks = {};
   for (const [collName, dek] of keyring.deks) {
     wrappedDeks[collName] = await wrapKey(dek, keyring.kek);