@noy-db/hub 0.10.0-pre.0 → 0.10.0-pre.2

package/dist/port/with/collection-registries.d.ts

@@ -24,6 +24,43 @@ import type { ArchivePolicy } from '../../with-fork/archive/index.js';
 import type { OpenCollectionOptions } from './collection-options.js';
 import { type StaticDictDescriptor } from './i18n-strategy.js';
 import { type LookupDescriptor } from './lookup-strategy.js';
+/**
+ * family#194 — reconcile (cache-hit) handling for the declaration-only options
+ * the late-attach ladder never threaded.
+ *
+ * ⛔ WHAT WAS WRONG. The cache-hit branch threads the via-family options
+ * (`refs`, `computed`, `fieldMeta`, `meta`, `classifiedFields`, `blobFields`)
+ * through their `_apply*` doors, but `schema`, `archive`, `schemaUpdate` and
+ * `persistJsonSchema` had no door at all and were dropped in silence, so a
+ * second acquisition acted as if the collection had never been declared.
+ *
+ * ⭐ THE TREATMENT IS TIERED, following core#33: "a virtual entry is refused, a
+ * materialized one ATTACHES" — make the paths agree, and refuse only what
+ * genuinely cannot attach. A blanket refusal was the first attempt and it is
+ * WRONG, for a reason core#33's own test states: "MV registration opens its
+ * source collection first, which makes the consumer's own declaration the
+ * reconcile call." A consumer declaring on a collection that backs a
+ * materialized view is FORCED to be second — refusing them breaks correct code,
+ * and three in-tree tests (core#33's among them) proved it.
+ *
+ * So, measured per option:
+ *  - `archive` ATTACHES. It is a vault-level registry entry and nothing on the
+ *    Collection changes, so being second costs nothing.
+ *  - `schemaUpdate` is REFUSED. Its gate, drain and fence coordination are
+ *    built once at construction; there is nothing a late call can do.
+ *  - `schema` / `persistJsonSchema` are left ALONE here, deliberately. `schema`
+ *    is `private readonly` on Collection while `computed` and `moneyFields` are
+ *    mutable for exactly this MV-pre-creation reconcile — giving `schema` the
+ *    same door is its own change, tracked separately. Refusing it meanwhile
+ *    would break the MV consumers above.
+ *
+ * ⚠️ CACHE-STATE DEPENDENT, and not a defect in this check: anything that
+ * clears the collection cache — `_enableSync`, `_reloadKeyringAfterSync`
+ * (family#192) — sends the next acquisition down the FRESH branch, where every
+ * option is honoured and nothing refuses. The same call can therefore succeed
+ * or refuse depending on whether a sync happened in between.
+ */
+export declare function reconcileDeclarationOnlyOptions<T>(r: CollectionRegistries, collectionName: string, options: OpenCollectionOptions<T> | undefined): void;
 /** The via-derived field maps a declaration resolves to before registration. */
 export interface EffectiveViaFields {
     readonly i18nFields?: Record<string, unknown> | undefined;

package/dist/portability/index.js

@@ -1,35 +1,35 @@
 import {
   NO_PORTABILITY
-} from "../chunk-R4GLRJ55.js";
+} from "../chunk-HRNQYGLQ.js";
 import {
   PortabilityNotEnabledError
-} from "../chunk-2RH5SEY7.js";
+} from "../chunk-ISIXU45J.js";
 
 // src/with-audit/portability/active.ts
 function withPortability() {
   return {
     async exportAccessibleData(vault, opts) {
-      const { exportAccessibleData } = await import("../export-accessible-O7DIVFUO.js");
+      const { exportAccessibleData } = await import("../export-accessible-TVO2KQPG.js");
       return exportAccessibleData(vault, opts);
     },
     async withdrawAccessibleData(vault, opts) {
-      const { withdrawAccessibleData } = await import("../withdraw-accessible-OZU525ND.js");
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-CRCIQSTL.js");
       return withdrawAccessibleData(vault, opts);
     },
     async requestWithdrawal(vault, opts) {
-      const { requestWithdrawal } = await import("../request-withdrawal-K3SXXODI.js");
+      const { requestWithdrawal } = await import("../request-withdrawal-4SKAH46W.js");
       return requestWithdrawal(vault, opts);
     },
     async listWithdrawalRequests(vault, opts) {
-      const { listWithdrawalRequests } = await import("../request-withdrawal-K3SXXODI.js");
+      const { listWithdrawalRequests } = await import("../request-withdrawal-4SKAH46W.js");
       return listWithdrawalRequests(vault, opts);
     },
     async approveWithdrawal(vault, requestId, opts) {
-      const { approveWithdrawal } = await import("../request-withdrawal-K3SXXODI.js");
+      const { approveWithdrawal } = await import("../request-withdrawal-4SKAH46W.js");
       return approveWithdrawal(vault, requestId, opts);
     },
     async rejectWithdrawal(vault, requestId, opts) {
-      const { rejectWithdrawal } = await import("../request-withdrawal-K3SXXODI.js");
+      const { rejectWithdrawal } = await import("../request-withdrawal-4SKAH46W.js");
       return rejectWithdrawal(vault, requestId, opts);
     }
   };

package/dist/{post-register-2AC2STHC.js → post-register-RITSNASO.js}

@@ -1,9 +1,9 @@
 import {
   hashFields
-} from "./chunk-NHEKQWFI.js";
+} from "./chunk-J4L4AS2W.js";
 import {
   SatelliteConfigError
-} from "./chunk-2RH5SEY7.js";
+} from "./chunk-ISIXU45J.js";
 
 // src/with-shape/satellites/marker.ts
 async function ensureSatelliteMarker(store, vaultName, spec, dek) {
@@ -13,7 +13,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     joined: spec.joined,
     epoch: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const { loadPersistedSchema } = await import("./storage-SO2L2Z5J.js");
+  const { loadPersistedSchema } = await import("./storage-5EGY5OYE.js");
   const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
   const prior = persisted?.satellite;
   if (prior) {
@@ -24,7 +24,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     }
     return;
   }
-  const { persistSatelliteMarker } = await import("./register-PIORIMMR.js");
+  const { persistSatelliteMarker } = await import("./register-BB34SK7E.js");
   await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
 }
 
@@ -38,7 +38,7 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
   }
   if (baseSchema !== void 0) {
     try {
-      const { derivePersistedSchema } = await import("./derive-IMI3BMDS.js");
+      const { derivePersistedSchema } = await import("./derive-4GNU4E4I.js");
       const envelope = await derivePersistedSchema(baseSchema);
       const properties = envelope.jsonSchema?.["properties"];
       const baseFields = Object.keys(properties ?? {});
@@ -56,4 +56,4 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
 export {
   postRegister
 };
-//# sourceMappingURL=post-register-2AC2STHC.js.map
+//# sourceMappingURL=post-register-RITSNASO.js.map

package/dist/query/all/index.js

@@ -2,27 +2,27 @@ import {
   Query,
   ScanBuilder,
   executePlan
-} from "../../chunk-PBEHTFUG.js";
-import "../../chunk-DYIR6RC3.js";
-import "../../chunk-SVXFCCSX.js";
-import "../../chunk-4KYKRYRT.js";
-import "../../chunk-6WIFF46H.js";
+} from "../../chunk-4CGWLHPQ.js";
+import "../../chunk-5Y4MO7UQ.js";
+import "../../chunk-WHK4JVKF.js";
+import "../../chunk-TOTCZFRF.js";
+import "../../chunk-CQLMRCKX.js";
 import "../../chunk-SUZKW6UR.js";
-import "../../chunk-F7X7MPK4.js";
+import "../../chunk-5BGHAVBN.js";
 import "../../chunk-VHM7HCKB.js";
 import "../../chunk-XBKH4FOC.js";
-import "../../chunk-NIUHKKMM.js";
-import "../../chunk-TBVDI3LY.js";
-import "../../chunk-OK44MD3C.js";
+import "../../chunk-UNKTZDA2.js";
+import "../../chunk-FPK2LPLR.js";
+import "../../chunk-ET3U2C3A.js";
 import "../../chunk-4CFHL5RY.js";
-import "../../chunk-GZISWBCJ.js";
+import "../../chunk-74W56QPY.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7C7OF26T.js";
+import "../../chunk-C2NXAR3D.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-O3NGOHXQ.js";
-import "../../chunk-SXPLIRQH.js";
-import "../../chunk-PIO6NW7O.js";
-import "../../chunk-2RH5SEY7.js";
+import "../../chunk-KA4AAUST.js";
+import "../../chunk-NLDBQHDV.js";
+import "../../chunk-ZG7DBIVX.js";
+import "../../chunk-ISIXU45J.js";
 export {
   Query,
   ScanBuilder,

package/dist/query/index.js

@@ -1,31 +1,31 @@
 import "../chunk-BKT776R5.js";
 import {
   CollectionIndexes
-} from "../chunk-AYOQZJDB.js";
+} from "../chunk-LIX4QPMM.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-4CFHL5RY.js";
 import {
   ScanBuilder
-} from "../chunk-GZISWBCJ.js";
+} from "../chunk-74W56QPY.js";
 import {
   Query,
   executePlan
-} from "../chunk-7C7OF26T.js";
+} from "../chunk-C2NXAR3D.js";
 import "../chunk-3TDUWVWB.js";
-import "../chunk-O3NGOHXQ.js";
+import "../chunk-KA4AAUST.js";
 import {
   evaluateClause,
   evaluateFieldClause,
   readPath
-} from "../chunk-SXPLIRQH.js";
-import "../chunk-PIO6NW7O.js";
+} from "../chunk-NLDBQHDV.js";
+import "../chunk-ZG7DBIVX.js";
 import {
   FieldNotQueryableError,
   IndexRequiredError,
   IndexWriteFailureError,
   QueryExtensionMissingError,
   UnsafePatternError
-} from "../chunk-2RH5SEY7.js";
+} from "../chunk-ISIXU45J.js";
 export {
   CollectionIndexes,
   FieldNotQueryableError,

package/dist/query/live/index.js

@@ -1,17 +1,17 @@
 import {
   buildLiveQuery,
   installLive
-} from "../../chunk-DYIR6RC3.js";
-import "../../chunk-F7X7MPK4.js";
+} from "../../chunk-5Y4MO7UQ.js";
+import "../../chunk-5BGHAVBN.js";
 import "../../chunk-VHM7HCKB.js";
 import "../../chunk-XBKH4FOC.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7C7OF26T.js";
+import "../../chunk-C2NXAR3D.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-O3NGOHXQ.js";
-import "../../chunk-SXPLIRQH.js";
-import "../../chunk-PIO6NW7O.js";
-import "../../chunk-2RH5SEY7.js";
+import "../../chunk-KA4AAUST.js";
+import "../../chunk-NLDBQHDV.js";
+import "../../chunk-ZG7DBIVX.js";
+import "../../chunk-ISIXU45J.js";
 
 // src/kernel/query/live/index.ts
 installLive();

package/dist/query/reduce/index.js

@@ -1,26 +1,26 @@
 import {
   installReduce
-} from "../../chunk-SVXFCCSX.js";
-import "../../chunk-4KYKRYRT.js";
-import "../../chunk-6WIFF46H.js";
+} from "../../chunk-WHK4JVKF.js";
+import "../../chunk-TOTCZFRF.js";
+import "../../chunk-CQLMRCKX.js";
 import "../../chunk-SUZKW6UR.js";
-import "../../chunk-F7X7MPK4.js";
+import "../../chunk-5BGHAVBN.js";
 import "../../chunk-VHM7HCKB.js";
 import {
   dateTrunc,
   isDateTruncKey,
   truncateDate
 } from "../../chunk-XBKH4FOC.js";
-import "../../chunk-GZISWBCJ.js";
+import "../../chunk-74W56QPY.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7C7OF26T.js";
+import "../../chunk-C2NXAR3D.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-O3NGOHXQ.js";
-import "../../chunk-SXPLIRQH.js";
-import "../../chunk-PIO6NW7O.js";
+import "../../chunk-KA4AAUST.js";
+import "../../chunk-NLDBQHDV.js";
+import "../../chunk-ZG7DBIVX.js";
 import {
   GroupCardinalityError
-} from "../../chunk-2RH5SEY7.js";
+} from "../../chunk-ISIXU45J.js";
 
 // src/kernel/query/reduce/index.ts
 installReduce();

package/dist/query/relate/index.js

@@ -9,29 +9,29 @@ import {
   installRelate,
   renderExplainText,
   runTraversal
-} from "../../chunk-NIUHKKMM.js";
+} from "../../chunk-UNKTZDA2.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins,
   resetJoinWarnings
-} from "../../chunk-TBVDI3LY.js";
-import "../../chunk-OK44MD3C.js";
+} from "../../chunk-FPK2LPLR.js";
+import "../../chunk-ET3U2C3A.js";
 import "../../chunk-4CFHL5RY.js";
-import "../../chunk-GZISWBCJ.js";
+import "../../chunk-74W56QPY.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7C7OF26T.js";
+import "../../chunk-C2NXAR3D.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-O3NGOHXQ.js";
-import "../../chunk-SXPLIRQH.js";
-import "../../chunk-PIO6NW7O.js";
+import "../../chunk-KA4AAUST.js";
+import "../../chunk-NLDBQHDV.js";
+import "../../chunk-ZG7DBIVX.js";
 import {
   CrossJoinSourceUnknownError,
   CrossJoinTooLargeError,
   DanglingReferenceError,
   JoinTooLargeError,
   TraversalCycleError
-} from "../../chunk-2RH5SEY7.js";
+} from "../../chunk-ISIXU45J.js";
 
 // src/kernel/query/relate/index.ts
 installRelate();

package/dist/reduce/index.js

@@ -9,7 +9,7 @@ import {
   runningMoneySum,
   runningSum,
   withWindow
-} from "../chunk-BNYDOF2Q.js";
+} from "../chunk-JZMPSQBH.js";
 import {
   GROUPBY_MAX_CARDINALITY,
   GROUPBY_WARN_CARDINALITY,
@@ -22,7 +22,7 @@ import {
   groupAndReduce,
   reduceRecords,
   resetGroupByWarnings
-} from "../chunk-4WLI37WK.js";
+} from "../chunk-SJ2P7UXD.js";
 import "../chunk-XZHEOSQ2.js";
 import {
   avg,
@@ -43,18 +43,18 @@ import {
   stddev,
   sum,
   variance
-} from "../chunk-4KYKRYRT.js";
+} from "../chunk-TOTCZFRF.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-VHM7HCKB.js";
 import "../chunk-XBKH4FOC.js";
 import {
   NO_REDUCE
 } from "../chunk-3TDUWVWB.js";
-import "../chunk-O3NGOHXQ.js";
-import "../chunk-SXPLIRQH.js";
-import "../chunk-UQRKAM2R.js";
-import "../chunk-PIO6NW7O.js";
-import "../chunk-2RH5SEY7.js";
+import "../chunk-KA4AAUST.js";
+import "../chunk-NLDBQHDV.js";
+import "../chunk-3M2KK7O7.js";
+import "../chunk-ZG7DBIVX.js";
+import "../chunk-ISIXU45J.js";
 
 // src/with-lookup/reduce/active.ts
 var WINDOW_NOT_ENABLED = new Error(

package/dist/register-BB34SK7E.js

@@ -0,0 +1,27 @@
+import {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+} from "./chunk-PDCBL23X.js";
+import "./chunk-ZVF37PKE.js";
+import "./chunk-N25Z6PR4.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-63LZLRWG.js";
+import "./chunk-FY4FFNKK.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-PBRD75JF.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-BEKMLYQ4.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-5JNEDW7I.js";
+import "./chunk-EFINFZIF.js";
+import "./chunk-I4S7IZSS.js";
+import "./chunk-XWWDZKLS.js";
+import "./chunk-CR5UPYIJ.js";
+import "./chunk-ISIXU45J.js";
+export {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+};
+//# sourceMappingURL=register-BB34SK7E.js.map

package/dist/registry-65L6V5TO.js

@@ -0,0 +1,20 @@
+import {
+  MaterializedViewRegistry,
+  ungatedMvContext,
+  wrapDbWithPredicates
+} from "./chunk-5OWJSDTO.js";
+import "./chunk-XBKH4FOC.js";
+import "./chunk-ET3U2C3A.js";
+import "./chunk-4CFHL5RY.js";
+import "./chunk-NLDBQHDV.js";
+import "./chunk-EFINFZIF.js";
+import "./chunk-I4S7IZSS.js";
+import "./chunk-XWWDZKLS.js";
+import "./chunk-CR5UPYIJ.js";
+import "./chunk-ISIXU45J.js";
+export {
+  MaterializedViewRegistry,
+  ungatedMvContext,
+  wrapDbWithPredicates
+};
+//# sourceMappingURL=registry-65L6V5TO.js.map

package/dist/registry-HU62GPWA.js

@@ -0,0 +1,32 @@
+import {
+  DerivationRegistry
+} from "./chunk-EQXOJH6O.js";
+import "./chunk-GAGT3YZN.js";
+import "./chunk-U7CMJY5P.js";
+import "./chunk-TFMM5DBB.js";
+import "./chunk-PZNK4HTV.js";
+import "./chunk-NYEXUZDW.js";
+import "./chunk-QJNAHPVT.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-FY4FFNKK.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-PBRD75JF.js";
+import "./chunk-RIACRFWA.js";
+import "./chunk-NYMLINRP.js";
+import "./chunk-V4PXLYWM.js";
+import "./chunk-CQLMRCKX.js";
+import "./chunk-XBKH4FOC.js";
+import "./chunk-ZGJ775X7.js";
+import "./chunk-AHA7UALU.js";
+import "./chunk-3M2KK7O7.js";
+import "./chunk-ZG7DBIVX.js";
+import "./chunk-5JNEDW7I.js";
+import "./chunk-EFINFZIF.js";
+import "./chunk-I4S7IZSS.js";
+import "./chunk-XWWDZKLS.js";
+import "./chunk-CR5UPYIJ.js";
+import "./chunk-ISIXU45J.js";
+export {
+  DerivationRegistry
+};
+//# sourceMappingURL=registry-HU62GPWA.js.map

package/dist/registry-SMNK6UM4.js

@@ -0,0 +1,8 @@
+import {
+  GuardRegistry
+} from "./chunk-K75SL74I.js";
+import "./chunk-ISIXU45J.js";
+export {
+  GuardRegistry
+};
+//# sourceMappingURL=registry-SMNK6UM4.js.map

package/dist/registry-X5VPBKCO.js

@@ -0,0 +1,8 @@
+import {
+  OverlayedViewRegistry
+} from "./chunk-H6Q7GKLI.js";
+import "./chunk-ISIXU45J.js";
+export {
+  OverlayedViewRegistry
+};
+//# sourceMappingURL=registry-X5VPBKCO.js.map

package/dist/request-withdrawal-4SKAH46W.js

@@ -0,0 +1,26 @@
+import {
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+} from "./chunk-RBXYO7MD.js";
+import "./chunk-XROQP6IQ.js";
+import "./chunk-23A4SBRR.js";
+import "./chunk-2NVQ5SEA.js";
+import "./chunk-OQA7UF2Q.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-KHSBMLQE.js";
+import "./chunk-EFINFZIF.js";
+import "./chunk-I4S7IZSS.js";
+import "./chunk-XWWDZKLS.js";
+import "./chunk-CR5UPYIJ.js";
+import "./chunk-ISIXU45J.js";
+export {
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+};
+//# sourceMappingURL=request-withdrawal-4SKAH46W.js.map

package/dist/{restore-to-OOPKLAPU.js → restore-to-VQHT67OH.js}

@@ -1,14 +1,11 @@
 import {
   parseHistoryId
-} from "./chunk-EQ6C2ZPT.js";
-import "./chunk-WRLWEYHY.js";
-import "./chunk-O6VOR4NH.js";
-import "./chunk-VZFTON37.js";
-import "./chunk-NH2UOV3B.js";
-import "./chunk-HTRLQ4ZZ.js";
-import "./chunk-EPPAEGH5.js";
-import "./chunk-URGHKZPL.js";
-import "./chunk-2RH5SEY7.js";
+} from "./chunk-E7Y4J4GL.js";
+import "./chunk-EFINFZIF.js";
+import "./chunk-I4S7IZSS.js";
+import "./chunk-XWWDZKLS.js";
+import "./chunk-CR5UPYIJ.js";
+import "./chunk-ISIXU45J.js";
 
 // src/with-commit/history/restore-to.ts
 var HISTORY_COLLECTION = "_history";
@@ -63,4 +60,4 @@ async function restoreTo(host, timestamp, options) {
 export {
   restoreTo
 };
-//# sourceMappingURL=restore-to-OOPKLAPU.js.map
+//# sourceMappingURL=restore-to-VQHT67OH.js.map

package/dist/{restore-to-OOPKLAPU.js.map → restore-to-VQHT67OH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-commit/history/restore-to.ts"],"sourcesContent":["/**\n * core#76 — point-in-time RESTORE, as forward writes.\n *\n * `vault.at(T)` reconstructs any record at T and is read-only by contract.\n * `restoreTo(T)` takes that reconstruction and WRITES it: for every record\n * whose state at T differs from its state now, put the T-state as a new\n * version; for every record that exists now and did not exist at T, delete it.\n *\n * ## Why forward writes, and not a rewrite of history\n *\n * Every write goes through `Collection.put` / `.delete`, so guards, periods,\n * history and the ledger all see it. The restore is therefore itself an\n * audited, reversible event — `restoreTo(T)` can be undone by another\n * `restoreTo`, the ledger's tamper-evidence is untouched, and the result\n * replicates through ordinary sync because it IS ordinary versioned writes.\n * ⭐ That is the whole argument for this over a pod: a pod restore is state\n * REPLACEMENT and needs core#71/#72 to be safe under sync; this needs nothing,\n * because the stack already knows how to gate, audit and replicate a write.\n *\n * ## What bounds it\n *\n * ⚠️ Accuracy is bounded by history retention. If `historyConfig.maxVersions`\n * pruned the versions around T, the reconstruction at T is incomplete and so\n * is the restore — `at(T)` returns null for a record whose earliest retained\n * snapshot is after T, and this treats that as \"did not exist at T\". A vault\n * that prunes history cannot honestly point-in-time restore past the prune\n * horizon, and a pod is the answer there (core#77).\n *\n * ⛔ BLOBS ARE NOT RESTORED AND ARE NOT REPORTED. `_history` holds record\n * envelopes, not chunks; a record's blob fields at T reference chunks that may\n * since have been compacted away. The record comes back with its handles\n * intact and the chunks may or may not still be there. Detecting that\n * reliably means resolving every handle against `_blob_chunks`, which is a\n * blob-subsystem concern this module deliberately does not reach into — a\n * `blobsUnrecoverable: []` that is empty because nothing looked would be worse\n * than the silence, because it would read as a guarantee.\n */\nimport type { RestoreToOptions, RestoreToResult } from '../../kernel/types.js'\nimport type { RestoreToHost } from '../../port/with/restore-host.js'\nimport { parseHistoryId } from './history.js'\n\n/** Local to avoid a new export from `history.ts` for one string. */\nconst HISTORY_COLLECTION = '_history'\n\n/**\n * Collections to consider: what is live now, PLUS what history knows about.\n *\n * ⭐ The union is the point. A collection dropped since T is absent from the\n * live store, and a restore that only walked live collections would silently\n * decline to bring it back — the exact case (\"the store drifted\") this\n * feature exists for.\n */\nasync function candidateCollections(host: RestoreToHost): Promise<string[]> {\n  const names = new Set(await host.liveCollectionNames())\n  for (const id of await host.adapter.list(host.vault, HISTORY_COLLECTION)) {\n    const parsed = parseHistoryId(id)\n    if (parsed && !parsed.collection.startsWith('_')) names.add(parsed.collection)\n  }\n  return [...names].sort()\n}\n\nconst same = (a: unknown, b: unknown): boolean => JSON.stringify(a) === JSON.stringify(b)\n\nexport async function restoreTo(\n  host: RestoreToHost,\n  timestamp: string,\n  options?: RestoreToOptions,\n): Promise<RestoreToResult> {\n  const dryRun = options?.dryRun === true\n  const names = options?.collections ?? await candidateCollections(host)\n  const per: Record<string, { written: string[]; deleted: string[]; unchanged: number }> = {}\n  let written = 0, deleted = 0, unchanged = 0\n\n  for (const name of names) {\n    const past = host.instantCollection(name)\n    const live = host.liveCollection(name)\n    const atT = new Set(await past.list())\n    const now = new Set((await host.adapter.list(host.vault, name)))\n    const w: string[] = [], d: string[] = []\n    let u = 0\n\n    for (const id of atT) {\n      const target = await past.get(id)\n      if (target === null || target === undefined) continue\n      const current = now.has(id) ? await live.get(id).catch(() => null) : null\n      if (current !== null && same(current, target)) { u++; continue }\n      if (!dryRun) await live.put(id, target)\n      w.push(id)\n    }\n    for (const id of now) {\n      if (atT.has(id)) continue\n      const current = await live.get(id).catch(() => null)\n      if (current === null) continue // already gone (tombstone / delete marker)\n      if (!dryRun) await live.delete(id)\n      d.push(id)\n    }\n\n    if (w.length || d.length || u) {\n      per[name] = { written: w, deleted: d, unchanged: u }\n      written += w.length; deleted += d.length; unchanged += u\n    }\n  }\n\n  return { restoredTo: timestamp, dryRun, written, deleted, unchanged, collections: per }\n}\n"],"mappings":";;;;;;;;;;;;;AA0CA,IAAM,qBAAqB;AAU3B,eAAe,qBAAqB,MAAwC;AAC1E,QAAM,QAAQ,IAAI,IAAI,MAAM,KAAK,oBAAoB,CAAC;AACtD,aAAW,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,kBAAkB,GAAG;AACxE,UAAM,SAAS,eAAe,EAAE;AAChC,QAAI,UAAU,CAAC,OAAO,WAAW,WAAW,GAAG,EAAG,OAAM,IAAI,OAAO,UAAU;AAAA,EAC/E;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK;AACzB;AAEA,IAAM,OAAO,CAAC,GAAY,MAAwB,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC;AAExF,eAAsB,UACpB,MACA,WACA,SAC0B;AAC1B,QAAM,SAAS,SAAS,WAAW;AACnC,QAAM,QAAQ,SAAS,eAAe,MAAM,qBAAqB,IAAI;AACrE,QAAM,MAAmF,CAAC;AAC1F,MAAI,UAAU,GAAG,UAAU,GAAG,YAAY;AAE1C,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,KAAK,kBAAkB,IAAI;AACxC,UAAM,OAAO,KAAK,eAAe,IAAI;AACrC,UAAM,MAAM,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC;AACrC,UAAM,MAAM,IAAI,IAAK,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,IAAI,CAAE;AAC/D,UAAM,IAAc,CAAC,GAAG,IAAc,CAAC;AACvC,QAAI,IAAI;AAER,eAAW,MAAM,KAAK;AACpB,YAAM,SAAS,MAAM,KAAK,IAAI,EAAE;AAChC,UAAI,WAAW,QAAQ,WAAW,OAAW;AAC7C,YAAM,UAAU,IAAI,IAAI,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE,EAAE,MAAM,MAAM,IAAI,IAAI;AACrE,UAAI,YAAY,QAAQ,KAAK,SAAS,MAAM,GAAG;AAAE;AAAK;AAAA,MAAS;AAC/D,UAAI,CAAC,OAAQ,OAAM,KAAK,IAAI,IAAI,MAAM;AACtC,QAAE,KAAK,EAAE;AAAA,IACX;AACA,eAAW,MAAM,KAAK;AACpB,UAAI,IAAI,IAAI,EAAE,EAAG;AACjB,YAAM,UAAU,MAAM,KAAK,IAAI,EAAE,EAAE,MAAM,MAAM,IAAI;AACnD,UAAI,YAAY,KAAM;AACtB,UAAI,CAAC,OAAQ,OAAM,KAAK,OAAO,EAAE;AACjC,QAAE,KAAK,EAAE;AAAA,IACX;AAEA,QAAI,EAAE,UAAU,EAAE,UAAU,GAAG;AAC7B,UAAI,IAAI,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,EAAE;AACnD,iBAAW,EAAE;AAAQ,iBAAW,EAAE;AAAQ,mBAAa;AAAA,IACzD;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,WAAW,QAAQ,SAAS,SAAS,WAAW,aAAa,IAAI;AACxF;","names":[]}
+{"version":3,"sources":["../src/with-commit/history/restore-to.ts"],"sourcesContent":["/**\n * core#76 — point-in-time RESTORE, as forward writes.\n *\n * `vault.at(T)` reconstructs any record at T and is read-only by contract.\n * `restoreTo(T)` takes that reconstruction and WRITES it: for every record\n * whose state at T differs from its state now, put the T-state as a new\n * version; for every record that exists now and did not exist at T, delete it.\n *\n * ## Why forward writes, and not a rewrite of history\n *\n * Every write goes through `Collection.put` / `.delete`, so guards, periods,\n * history and the ledger all see it. The restore is therefore itself an\n * audited, reversible event — `restoreTo(T)` can be undone by another\n * `restoreTo`, the ledger's tamper-evidence is untouched, and the result\n * replicates through ordinary sync because it IS ordinary versioned writes.\n * ⭐ That is the whole argument for this over a pod: a pod restore is state\n * REPLACEMENT and needs core#71/#72 to be safe under sync; this needs nothing,\n * because the stack already knows how to gate, audit and replicate a write.\n *\n * ## What bounds it\n *\n * ⚠️ Accuracy is bounded by history retention. If `historyConfig.maxVersions`\n * pruned the versions around T, the reconstruction at T is incomplete and so\n * is the restore — `at(T)` returns null for a record whose earliest retained\n * snapshot is after T, and this treats that as \"did not exist at T\". A vault\n * that prunes history cannot honestly point-in-time restore past the prune\n * horizon, and a pod is the answer there (core#77).\n *\n * ⛔ BLOBS ARE NOT RESTORED AND ARE NOT REPORTED. `_history` holds record\n * envelopes, not chunks; a record's blob fields at T reference chunks that may\n * since have been compacted away. The record comes back with its handles\n * intact and the chunks may or may not still be there. Detecting that\n * reliably means resolving every handle against `_blob_chunks`, which is a\n * blob-subsystem concern this module deliberately does not reach into — a\n * `blobsUnrecoverable: []` that is empty because nothing looked would be worse\n * than the silence, because it would read as a guarantee.\n */\nimport type { RestoreToOptions, RestoreToResult } from '../../kernel/types.js'\nimport type { RestoreToHost } from '../../port/with/restore-host.js'\nimport { parseHistoryId } from './history.js'\n\n/** Local to avoid a new export from `history.ts` for one string. */\nconst HISTORY_COLLECTION = '_history'\n\n/**\n * Collections to consider: what is live now, PLUS what history knows about.\n *\n * ⭐ The union is the point. A collection dropped since T is absent from the\n * live store, and a restore that only walked live collections would silently\n * decline to bring it back — the exact case (\"the store drifted\") this\n * feature exists for.\n */\nasync function candidateCollections(host: RestoreToHost): Promise<string[]> {\n  const names = new Set(await host.liveCollectionNames())\n  for (const id of await host.adapter.list(host.vault, HISTORY_COLLECTION)) {\n    const parsed = parseHistoryId(id)\n    if (parsed && !parsed.collection.startsWith('_')) names.add(parsed.collection)\n  }\n  return [...names].sort()\n}\n\nconst same = (a: unknown, b: unknown): boolean => JSON.stringify(a) === JSON.stringify(b)\n\nexport async function restoreTo(\n  host: RestoreToHost,\n  timestamp: string,\n  options?: RestoreToOptions,\n): Promise<RestoreToResult> {\n  const dryRun = options?.dryRun === true\n  const names = options?.collections ?? await candidateCollections(host)\n  const per: Record<string, { written: string[]; deleted: string[]; unchanged: number }> = {}\n  let written = 0, deleted = 0, unchanged = 0\n\n  for (const name of names) {\n    const past = host.instantCollection(name)\n    const live = host.liveCollection(name)\n    const atT = new Set(await past.list())\n    const now = new Set((await host.adapter.list(host.vault, name)))\n    const w: string[] = [], d: string[] = []\n    let u = 0\n\n    for (const id of atT) {\n      const target = await past.get(id)\n      if (target === null || target === undefined) continue\n      const current = now.has(id) ? await live.get(id).catch(() => null) : null\n      if (current !== null && same(current, target)) { u++; continue }\n      if (!dryRun) await live.put(id, target)\n      w.push(id)\n    }\n    for (const id of now) {\n      if (atT.has(id)) continue\n      const current = await live.get(id).catch(() => null)\n      if (current === null) continue // already gone (tombstone / delete marker)\n      if (!dryRun) await live.delete(id)\n      d.push(id)\n    }\n\n    if (w.length || d.length || u) {\n      per[name] = { written: w, deleted: d, unchanged: u }\n      written += w.length; deleted += d.length; unchanged += u\n    }\n  }\n\n  return { restoredTo: timestamp, dryRun, written, deleted, unchanged, collections: per }\n}\n"],"mappings":";;;;;;;;;;AA0CA,IAAM,qBAAqB;AAU3B,eAAe,qBAAqB,MAAwC;AAC1E,QAAM,QAAQ,IAAI,IAAI,MAAM,KAAK,oBAAoB,CAAC;AACtD,aAAW,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,kBAAkB,GAAG;AACxE,UAAM,SAAS,eAAe,EAAE;AAChC,QAAI,UAAU,CAAC,OAAO,WAAW,WAAW,GAAG,EAAG,OAAM,IAAI,OAAO,UAAU;AAAA,EAC/E;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK;AACzB;AAEA,IAAM,OAAO,CAAC,GAAY,MAAwB,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC;AAExF,eAAsB,UACpB,MACA,WACA,SAC0B;AAC1B,QAAM,SAAS,SAAS,WAAW;AACnC,QAAM,QAAQ,SAAS,eAAe,MAAM,qBAAqB,IAAI;AACrE,QAAM,MAAmF,CAAC;AAC1F,MAAI,UAAU,GAAG,UAAU,GAAG,YAAY;AAE1C,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,KAAK,kBAAkB,IAAI;AACxC,UAAM,OAAO,KAAK,eAAe,IAAI;AACrC,UAAM,MAAM,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC;AACrC,UAAM,MAAM,IAAI,IAAK,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,IAAI,CAAE;AAC/D,UAAM,IAAc,CAAC,GAAG,IAAc,CAAC;AACvC,QAAI,IAAI;AAER,eAAW,MAAM,KAAK;AACpB,YAAM,SAAS,MAAM,KAAK,IAAI,EAAE;AAChC,UAAI,WAAW,QAAQ,WAAW,OAAW;AAC7C,YAAM,UAAU,IAAI,IAAI,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE,EAAE,MAAM,MAAM,IAAI,IAAI;AACrE,UAAI,YAAY,QAAQ,KAAK,SAAS,MAAM,GAAG;AAAE;AAAK;AAAA,MAAS;AAC/D,UAAI,CAAC,OAAQ,OAAM,KAAK,IAAI,IAAI,MAAM;AACtC,QAAE,KAAK,EAAE;AAAA,IACX;AACA,eAAW,MAAM,KAAK;AACpB,UAAI,IAAI,IAAI,EAAE,EAAG;AACjB,YAAM,UAAU,MAAM,KAAK,IAAI,EAAE,EAAE,MAAM,MAAM,IAAI;AACnD,UAAI,YAAY,KAAM;AACtB,UAAI,CAAC,OAAQ,OAAM,KAAK,OAAO,EAAE;AACjC,QAAE,KAAK,EAAE;AAAA,IACX;AAEA,QAAI,EAAE,UAAU,EAAE,UAAU,GAAG;AAC7B,UAAI,IAAI,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,EAAE;AACnD,iBAAW,EAAE;AAAQ,iBAAW,EAAE;AAAQ,mBAAa;AAAA,IACzD;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,WAAW,QAAQ,SAAS,SAAS,WAAW,aAAa,IAAI;AACxF;","names":[]}

package/dist/revoke-IF5PX2JY.js

@@ -0,0 +1,21 @@
+import {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+} from "./chunk-QZXUISRF.js";
+import "./chunk-NUBI6PYH.js";
+import "./chunk-XMARKBUC.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-EFINFZIF.js";
+import "./chunk-I4S7IZSS.js";
+import "./chunk-XWWDZKLS.js";
+import "./chunk-CR5UPYIJ.js";
+import "./chunk-ISIXU45J.js";
+export {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+};
+//# sourceMappingURL=revoke-IF5PX2JY.js.map

package/dist/satellites/index.js

@@ -1,6 +1,6 @@
 import {
   SatelliteConfigError
-} from "../chunk-2RH5SEY7.js";
+} from "../chunk-ISIXU45J.js";
 export {
   SatelliteConfigError
 };

package/dist/schema-update/index.js

@@ -3,7 +3,7 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "../chunk-X5RGG3ZW.js";
+} from "../chunk-NIZH2TYZ.js";
 import {
   computeSchemaDelta,
   evaluateStrategies
@@ -12,7 +12,7 @@ import {
   SchemaUpdateGate
 } from "../chunk-6LJY7X5A.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-2RH5SEY7.js";
+import "../chunk-ISIXU45J.js";
 export {
   SchemaUpdateGate,
   additiveOnly,

package/dist/sealed-record/index.js

@@ -1,38 +1,35 @@
 import {
   NO_SEALED_RECORD
-} from "../chunk-UMV5GBTJ.js";
+} from "../chunk-JPSOFWJR.js";
 import {
   base64ToBuffer,
   decrypt,
   importCek,
   recordAadFor,
   sealedBodyArgs
-} from "../chunk-WRLWEYHY.js";
-import "../chunk-O6VOR4NH.js";
-import "../chunk-VZFTON37.js";
-import "../chunk-NH2UOV3B.js";
-import "../chunk-HTRLQ4ZZ.js";
-import "../chunk-EPPAEGH5.js";
-import "../chunk-URGHKZPL.js";
+} from "../chunk-EFINFZIF.js";
+import "../chunk-I4S7IZSS.js";
+import "../chunk-XWWDZKLS.js";
+import "../chunk-CR5UPYIJ.js";
 import {
   SealedRecordExpiredError,
   SealedRecordMismatchError,
   SealedRecordNotEnabledError
-} from "../chunk-2RH5SEY7.js";
+} from "../chunk-ISIXU45J.js";
 
 // src/with-audit/sealed-record/active.ts
 function withSealedRecord() {
   return {
     async sealRecordToHost(ctx, collection, id, hostSealer, opts) {
-      const { sealRecordToHost } = await import("../capsule-YQKQZPH7.js");
+      const { sealRecordToHost } = await import("../capsule-YAITMH77.js");
       return sealRecordToHost(ctx, collection, id, hostSealer, opts);
     },
     async revokeSealedRecord(ctx, collection, id, pid, opts) {
-      const { revokeSealedRecord } = await import("../capsule-YQKQZPH7.js");
+      const { revokeSealedRecord } = await import("../capsule-YAITMH77.js");
       return revokeSealedRecord(ctx, collection, id, pid, opts);
     },
     async rotateRecordCek(ctx, collection, id) {
-      const { rotateRecordCek } = await import("../capsule-YQKQZPH7.js");
+      const { rotateRecordCek } = await import("../capsule-YAITMH77.js");
       return rotateRecordCek(ctx, collection, id);
     }
   };