@noy-db/hub 0.10.0-pre.1 → 0.10.0-pre.2

package/dist/forget/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/forget/active.ts","../../src/with-audit/forget/completeness.ts"],"sourcesContent":["/**\n * `withForget` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForget(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n","/**\n * #34 — \"was the erasure complete?\", which is the only question a caller of\n * {@link vault.forget} actually has, and the one `ForgetResult` could not\n * answer.\n *\n * ⛔ THE PROBLEM THIS SOLVES. `ForgetResult` carries ELEVEN independent residue\n * channels. None of them throws. Only two say in their own doc that non-empty\n * means erasure is INCOMPLETE. So \"erasure succeeded\" is not\n * `recordsShredded > 0` — it is all eleven empty — while the result's SHAPE\n * suggests the opposite: the counts read like a success report and the residues\n * read like diagnostics you consult when something looks wrong. A consumer\n * building a subject-facing \"your data has been deleted\" on the obvious field\n * is making a false statement in writing, and nothing in the surface tells them.\n *\n * ⭐ WHY THIS IS DEFAULT-DENY AND NOT A LIST OF ELEVEN NAMES. Enumerating the\n * channels would reproduce the defect one level up: every new channel would\n * silently weaken every existing caller's check, so a correct caller today\n * becomes an incorrect one tomorrow with no diagnostic anywhere — a correctness\n * regression delivered by an additive change, which is the kind that passes\n * review. Instead EVERY array-valued field counts as residue unless it appears\n * in {@link NON_RESIDUE_FIELDS}. A twelfth channel is therefore included by\n * construction, and exempting a field is a deliberate edit with a visible diff.\n * `__tests__/34-erasure-completeness.test.ts` fails if any array field is\n * neither a known channel nor exempt, so the exemption list cannot rot quietly.\n *\n * ⚠️ `derivedResidueFrozen` counts as incomplete, and that is CORRECT rather\n * than a bug to fix. An append-only closed period or a frozen receipt keeps the\n * subject's contribution permanently, by design. The erasure genuinely is not\n * total, and a caller who must answer a subject needs to know that — which is\n * precisely why it must not be quietly excluded here. What a consumer does with\n * it (a lawful-retention position) belongs in their layer, not this one.\n *\n * ⛔ SCOPE, deliberately: this reports what the MECHANISM did. It does not know\n * whether a retention is lawful, and must never grow vocabulary implying it\n * does — `blobsRetainedShared` means \"still referenced\", never \"retained\n * lawfully\". The legal decomposition sits above this, in the consumer.\n */\nimport type { ForgetResult } from './strategy.js'\n\n/**\n * Array-valued `ForgetResult` fields that are NOT failure channels.\n *\n * ⚠️ Adding a name here says \"a non-empty value in this field does not mean the\n * erasure was incomplete\". That is a substantive claim about erasure semantics\n * — make it deliberately, and say why on the line.\n */\nconst NON_RESIDUE_FIELDS: ReadonlySet<string> = new Set([\n  // The collections that had at least one record shredded: a WORK RECORD of\n  // what was touched, not a report of anything left behind.\n  'collections',\n])\n\n/** The verdict {@link erasureCompleteness} returns. */\nexport interface ErasureCompleteness {\n  /**\n   * `true` only when every residue channel is empty. ⛔ This — not\n   * `recordsShredded > 0` — is what \"the subject's data was erased\" means.\n   */\n  readonly complete: boolean\n  /** Names of the channels that are non-empty, sorted. Empty iff `complete`. */\n  readonly channels: readonly string[]\n  /** The non-empty channels and their entries, for a caller that must report which. */\n  readonly residue: Readonly<Record<string, readonly unknown[]>>\n}\n\n/**\n * Decide whether a {@link ForgetResult} represents a COMPLETE erasure.\n *\n * ```ts\n * const result = await vault.forget(subjectId)\n * const { complete, channels, residue } = erasureCompleteness(result)\n * if (!complete) {\n *   // Do NOT tell the subject their data is gone. `channels` says what remains;\n *   // some of it (a frozen period aggregate) is permanent by design.\n * }\n * ```\n *\n * Every array field of the result is treated as a residue channel except those\n * in {@link NON_RESIDUE_FIELDS} — see this module's doc for why that direction.\n */\nexport function erasureCompleteness(result: ForgetResult): ErasureCompleteness {\n  const residue: Record<string, readonly unknown[]> = {}\n  for (const [key, value] of Object.entries(result as unknown as Record<string, unknown>)) {\n    if (!Array.isArray(value) || NON_RESIDUE_FIELDS.has(key) || value.length === 0) continue\n    residue[key] = value as readonly unknown[]\n  }\n  const channels = Object.keys(residue).sort()\n  return { complete: channels.length === 0, channels, residue }\n}\n"],"mappings":";;;;;;;;;;;;;;AA+BO,SAAS,WAAW,MAA0C;AACnE,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;;;ACaA,IAAM,qBAA0C,oBAAI,IAAI;AAAA;AAAA;AAAA,EAGtD;AACF,CAAC;AA8BM,SAAS,oBAAoB,QAA2C;AAC7E,QAAM,UAA8C,CAAC;AACrD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAA4C,GAAG;AACvF,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,mBAAmB,IAAI,GAAG,KAAK,MAAM,WAAW,EAAG;AAChF,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,QAAM,WAAW,OAAO,KAAK,OAAO,EAAE,KAAK;AAC3C,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,UAAU,QAAQ;AAC9D;","names":[]}
+{"version":3,"sources":["../../src/with-audit/forget/active.ts","../../src/with-audit/forget/completeness.ts"],"sourcesContent":["/**\n * `withForget` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForget(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n","/**\n * #34 — \"was the erasure complete?\", which is the only question a caller of\n * {@link vault.forget} actually has, and the one `ForgetResult` could not\n * answer.\n *\n * ⛔ THE PROBLEM THIS SOLVES. `ForgetResult` carries ELEVEN independent residue\n * channels. None of them throws. Only two say in their own doc that non-empty\n * means erasure is INCOMPLETE. So \"erasure succeeded\" is not\n * `recordsShredded > 0` — it is all eleven empty — while the result's SHAPE\n * suggests the opposite: the counts read like a success report and the residues\n * read like diagnostics you consult when something looks wrong. A consumer\n * building a subject-facing \"your data has been deleted\" on the obvious field\n * is making a false statement in writing, and nothing in the surface tells them.\n *\n * ⭐ WHY THIS IS DEFAULT-DENY AND NOT A LIST OF ELEVEN NAMES. Enumerating the\n * channels would reproduce the defect one level up: every new channel would\n * silently weaken every existing caller's check, so a correct caller today\n * becomes an incorrect one tomorrow with no diagnostic anywhere — a correctness\n * regression delivered by an additive change, which is the kind that passes\n * review. Instead EVERY array-valued field counts as residue unless it appears\n * in {@link NON_RESIDUE_FIELDS}. A twelfth channel is therefore included by\n * construction, and exempting a field is a deliberate edit with a visible diff.\n * `__tests__/34-erasure-completeness.test.ts` fails if any array field is\n * neither a known channel nor exempt, so the exemption list cannot rot quietly.\n *\n * ⚠️ `derivedResidueFrozen` counts as incomplete, and that is CORRECT rather\n * than a bug to fix. An append-only closed period or a frozen receipt keeps the\n * subject's contribution permanently, by design. The erasure genuinely is not\n * total, and a caller who must answer a subject needs to know that — which is\n * precisely why it must not be quietly excluded here. What a consumer does with\n * it (a lawful-retention position) belongs in their layer, not this one.\n *\n * ⛔ SCOPE, deliberately: this reports what the MECHANISM did. It does not know\n * whether a retention is lawful, and must never grow vocabulary implying it\n * does — `blobsRetainedShared` means \"still referenced\", never \"retained\n * lawfully\". The legal decomposition sits above this, in the consumer.\n */\nimport type { ForgetResult } from './strategy.js'\n\n/**\n * Array-valued `ForgetResult` fields that are NOT failure channels.\n *\n * ⚠️ Adding a name here says \"a non-empty value in this field does not mean the\n * erasure was incomplete\". That is a substantive claim about erasure semantics\n * — make it deliberately, and say why on the line.\n */\nconst NON_RESIDUE_FIELDS: ReadonlySet<string> = new Set([\n  // The collections that had at least one record shredded: a WORK RECORD of\n  // what was touched, not a report of anything left behind.\n  'collections',\n])\n\n/** The verdict {@link erasureCompleteness} returns. */\nexport interface ErasureCompleteness {\n  /**\n   * `true` only when every residue channel is empty. ⛔ This — not\n   * `recordsShredded > 0` — is what \"the subject's data was erased\" means.\n   */\n  readonly complete: boolean\n  /** Names of the channels that are non-empty, sorted. Empty iff `complete`. */\n  readonly channels: readonly string[]\n  /** The non-empty channels and their entries, for a caller that must report which. */\n  readonly residue: Readonly<Record<string, readonly unknown[]>>\n}\n\n/**\n * Decide whether a {@link ForgetResult} represents a COMPLETE erasure.\n *\n * ```ts\n * const result = await vault.forget(subjectId)\n * const { complete, channels, residue } = erasureCompleteness(result)\n * if (!complete) {\n *   // Do NOT tell the subject their data is gone. `channels` says what remains;\n *   // some of it (a frozen period aggregate) is permanent by design.\n * }\n * ```\n *\n * Every array field of the result is treated as a residue channel except those\n * in {@link NON_RESIDUE_FIELDS} — see this module's doc for why that direction.\n */\nexport function erasureCompleteness(result: ForgetResult): ErasureCompleteness {\n  const residue: Record<string, readonly unknown[]> = {}\n  for (const [key, value] of Object.entries(result as unknown as Record<string, unknown>)) {\n    if (!Array.isArray(value) || NON_RESIDUE_FIELDS.has(key) || value.length === 0) continue\n    residue[key] = value as readonly unknown[]\n  }\n  const channels = Object.keys(residue).sort()\n  return { complete: channels.length === 0, channels, residue }\n}\n"],"mappings":";;;;;;;;;;;AA+BO,SAAS,WAAW,MAA0C;AACnE,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;;;ACaA,IAAM,qBAA0C,oBAAI,IAAI;AAAA;AAAA;AAAA,EAGtD;AACF,CAAC;AA8BM,SAAS,oBAAoB,QAA2C;AAC7E,QAAM,UAA8C,CAAC;AACrD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAA4C,GAAG;AACvF,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,mBAAmB,IAAI,GAAG,KAAK,MAAM,WAAW,EAAG;AAChF,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,QAAM,WAAW,OAAO,KAAK,OAAO,EAAE,KAAK;AAC3C,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,UAAU,QAAQ;AAC9D;","names":[]}

package/dist/guards/index.js

@@ -2,13 +2,13 @@ import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "../chunk-7DWAYY45.js";
+} from "../chunk-IN4XZJYD.js";
 import {
   GuardExecutor
-} from "../chunk-WA4ZPMKP.js";
+} from "../chunk-GDCYZGPB.js";
 import {
   GuardRegistry
-} from "../chunk-ZPXCQNXJ.js";
+} from "../chunk-K75SL74I.js";
 import {
   ReadOnlyVaultFacade
 } from "../chunk-JK733I5V.js";
@@ -18,7 +18,7 @@ import {
   IllegalTransitionError,
   InvariantError,
   RecordLockedError
-} from "../chunk-JGYCKX56.js";
+} from "../chunk-ISIXU45J.js";
 export {
   AmendmentForbiddenError,
   FieldFrozenError,

package/dist/history/index.js

@@ -1,14 +1,14 @@
 import {
   CollectionInstant,
   VaultInstant
-} from "../chunk-5OG7YQX5.js";
+} from "../chunk-FIIVYQOW.js";
 import {
   diff,
   formatDiff
 } from "../chunk-SVLR4POP.js";
 import {
   NO_HISTORY
-} from "../chunk-L4UL4IAR.js";
+} from "../chunk-F7ENMZYJ.js";
 import {
   clearHistory,
   getHistory,
@@ -18,12 +18,12 @@ import {
   rewrapHistory,
   saveHistory,
   tombstoneHistory
-} from "../chunk-EQ6C2ZPT.js";
+} from "../chunk-E7Y4J4GL.js";
 import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-RKOXA5GZ.js";
+} from "../chunk-BEKMLYQ4.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -35,16 +35,13 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-QHG7GQKM.js";
-import "../chunk-KFYUQMF5.js";
-import "../chunk-WRLWEYHY.js";
-import "../chunk-OJAFKGI7.js";
-import "../chunk-6B4X447I.js";
-import "../chunk-NH2UOV3B.js";
-import "../chunk-YIVAKBCW.js";
-import "../chunk-6Y3UJT5H.js";
-import "../chunk-VUBRHJ4H.js";
-import "../chunk-JGYCKX56.js";
+} from "../chunk-5JNEDW7I.js";
+import "../chunk-F2FD4LSB.js";
+import "../chunk-EFINFZIF.js";
+import "../chunk-I4S7IZSS.js";
+import "../chunk-XWWDZKLS.js";
+import "../chunk-CR5UPYIJ.js";
+import "../chunk-ISIXU45J.js";
 
 // src/with-commit/history/active.ts
 function withHistory() {

package/dist/history/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-commit/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  historyIdentity,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n  rewrapHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    historyIdentity,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    rewrapHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-commit/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  historyIdentity,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n  rewrapHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    historyIdentity,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    rewrapHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}

package/dist/i18n/index.js

@@ -1,15 +1,15 @@
 import {
   withLookup
-} from "../chunk-CZEWEOOV.js";
+} from "../chunk-X4LDBALX.js";
 import {
   dictKey,
   staticDict
-} from "../chunk-Y6WJJRVV.js";
+} from "../chunk-ZGJ775X7.js";
 import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "../chunk-U2N7DH4S.js";
+} from "../chunk-AHA7UALU.js";
 import {
   NO_I18N,
   applyI18nLocale,
@@ -26,16 +26,13 @@ import {
   resolvePolicy,
   stripI18nFilled,
   validateI18nTextValue
-} from "../chunk-ZZZVNHN2.js";
-import "../chunk-ZZLIFVZG.js";
-import "../chunk-QHG7GQKM.js";
-import "../chunk-WRLWEYHY.js";
-import "../chunk-OJAFKGI7.js";
-import "../chunk-6B4X447I.js";
-import "../chunk-NH2UOV3B.js";
-import "../chunk-YIVAKBCW.js";
-import "../chunk-6Y3UJT5H.js";
-import "../chunk-VUBRHJ4H.js";
+} from "../chunk-3M2KK7O7.js";
+import "../chunk-ZG7DBIVX.js";
+import "../chunk-5JNEDW7I.js";
+import "../chunk-EFINFZIF.js";
+import "../chunk-I4S7IZSS.js";
+import "../chunk-XWWDZKLS.js";
+import "../chunk-CR5UPYIJ.js";
 import {
   DictKeyInUseError,
   DictKeyMissingError,
@@ -46,7 +43,7 @@ import {
   StaticDictReadonlyError,
   TranslatorNotConfiguredError,
   UnknownDictCodeError
-} from "../chunk-JGYCKX56.js";
+} from "../chunk-ISIXU45J.js";
 
 // src/via/i18n/densify.ts
 var MARKER = "_i18nFilled";

package/dist/i18n/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/via/i18n/densify.ts","../../src/via/i18n/active.ts"],"sourcesContent":["/**\n * `densifyOnWrite` — eager-fill empty i18n slots from each field's\n * substitute chain at write time, recording provenance in the internal\n * `_i18nFilled` marker (decision A: dense map + prior-read).\n *\n * Pure functions over plain records; all DB wiring lives in collection.ts.\n * Only single-leaf i18n fields are supported (array-wildcard paths are\n * skipped, mirroring auto-translate).\n */\nimport { getAtPath, resolveI18nText } from './core.js'\nimport type { I18nTextDescriptor } from './core.js'\n\nconst MARKER = '_i18nFilled'\n\ntype Leaf = Record<string, string>\n\n/** Locales recorded as densify-filled on the prior record for `field`. */\nfunction priorFilled(prior: Record<string, unknown> | undefined, field: string): Set<string> {\n  if (!prior) return new Set()\n  const marker = prior[MARKER] as Record<string, string[]> | undefined\n  return new Set(marker?.[field] ?? [])\n}\n\n/** The single leaf map for `field`, or undefined for absent / array-wildcard / non-object. */\nfunction singleLeaf(record: Record<string, unknown>, field: string): Leaf | undefined {\n  const leaves = getAtPath(record, field)\n  if (leaves.length !== 1) return undefined\n  const leaf = leaves[0]\n  if (!leaf || typeof leaf !== 'object' || Array.isArray(leaf)) return undefined\n  return leaf as Leaf\n}\n\n/**\n * Per field, the locales that are UNCHANGED round-tripped densify fills — i.e.\n * marked filled on the prior record AND identical in the incoming record.\n * These are exempt from write-time script enforcement (they are derived copies,\n * not authored text). Slots the user changed are NOT exempt (validated as authored).\n */\nexport function computeExemptFills(\n  prior: Record<string, unknown> | undefined,\n  incoming: Record<string, unknown>,\n  fields: Record<string, I18nTextDescriptor>,\n): Map<string, Set<string>> {\n  const out = new Map<string, Set<string>>()\n  if (!prior) return out\n  for (const field of Object.keys(fields)) {\n    const filled = priorFilled(prior, field)\n    if (filled.size === 0) continue\n    const priorLeaf = singleLeaf(prior, field)\n    const incLeaf = singleLeaf(incoming, field)\n    if (!priorLeaf || !incLeaf) continue\n    const exempt = new Set<string>()\n    for (const loc of filled) {\n      if (incLeaf[loc] !== undefined && incLeaf[loc] !== '' && incLeaf[loc] === priorLeaf[loc]) {\n        exempt.add(loc)\n      }\n    }\n    if (exempt.size > 0) out.set(field, exempt)\n  }\n  return out\n}\n\n/**\n * Mutate `record` in place: fill empty declared-language slots for each\n * densify-enabled field from the field's substitute chain, recompute unchanged\n * prior fills, clear marks for slots that became authored, and write the\n * resulting `_i18nFilled` marker (removed when empty).\n *\n * `prior` is read-only — it is never mutated.\n *\n * Provenance uses value-equality (decision A): a slot counts as an unchanged\n * fill when it was prior-marked AND its value still equals the prior value. A\n * consequence is that re-authoring a value byte-identical to the existing fill\n * keeps it classified as a fill (the visible value is unchanged either way; the\n * slot stays script-exempt and will auto-refresh if its source later changes).\n * This is inherent to value-equality provenance, not a bug.\n */\nexport function densify(\n  record: Record<string, unknown>,\n  prior: Record<string, unknown> | undefined,\n  fields: Record<string, I18nTextDescriptor>,\n): void {\n  let marker = record[MARKER] as Record<string, string[]> | undefined\n\n  for (const [field, descriptor] of Object.entries(fields)) {\n    const leaf = singleLeaf(record, field)\n    if (!leaf) continue\n    const { languages, substitute, smartSubstitute } = descriptor.options\n    const filledSet = priorFilled(prior, field)\n    const priorLeaf = singleLeaf(prior ?? {}, field)\n    const isUnchangedFill = (loc: string): boolean =>\n      filledSet.has(loc) && priorLeaf?.[loc] !== undefined && leaf[loc] === priorLeaf[loc]\n\n    // Authored source = present, non-empty, NOT an unchanged prior fill.\n    const authored: Leaf = {}\n    for (const [loc, val] of Object.entries(leaf)) {\n      if (typeof val === 'string' && val !== '' && !isUnchangedFill(loc)) authored[loc] = val\n    }\n\n    const filled: string[] = []\n    for (const loc of languages) {\n      if (authored[loc] !== undefined) continue // real value present → not a fill\n      const sub = resolveI18nText(authored, loc, undefined, field, {\n        policy: 'substitute',\n        substitute: substitute ?? ['any'],\n        ...(smartSubstitute ? { smartSubstitute } : {}),\n      })\n      if (typeof sub === 'string' && sub !== '') {\n        leaf[loc] = sub\n        filled.push(loc)\n      } else if (isUnchangedFill(loc)) {\n        delete leaf[loc] // stale fill with no source left → drop it\n      }\n    }\n\n    if (filled.length > 0) {\n      marker ??= {}\n      marker[field] = filled\n    } else if (marker) {\n      delete marker[field]\n    }\n  }\n\n  if (marker && Object.keys(marker).length > 0) {\n    record[MARKER] = marker\n  } else {\n    delete record[MARKER]\n  }\n}\n","/**\n * Active i18n strategy — `withI18n()` returns the real implementation\n * that wires multi-locale resolution, i18nText validation, and the\n * `DictionaryHandle` for `dictKey` fields into the core read/write\n * paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withI18n } from '@noy-db/hub/i18n'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   i18nStrategy: withI18n(),\n * })\n * ```\n *\n * The factory delegates to the existing `core.ts` and `dictionary.ts`\n * modules. Splitting the import chain through this file is what lets\n * tsup tree-shake the `~854 LOC` of dictionary + locale resolution\n * out of the default bundle when no `withI18n()` import is present.\n *\n * @public\n */\n\nimport type { I18nStrategy, BuildDictionaryHandleOptions } from './strategy.js'\nimport { applyI18nLocale, validateI18nTextValue } from './core.js'\nimport { enforceScript } from './script.js'\nimport { computeExemptFills, densify } from './densify.js'\nimport type { DictionaryHandle } from './dictionary.js'\nimport { withLookup } from '../lookup/active.js'\n\nexport function withI18n(): I18nStrategy {\n  // #650 Task 1: the handle-construction logic moved to\n  // via/lookup/active.ts (LookupHandle, renamed from\n  // DictionaryHandle, new home). buildDictionaryHandle below is now a\n  // thin field-name translator over buildLookupHandle — same handle.\n  const lookup = withLookup()\n  return {\n    applyI18nLocale,\n    validateI18nTextValue,\n    enforceScript,\n    computeExemptFills,\n    densify,\n    buildDictionaryHandle<Keys extends string = string>(\n      opts: BuildDictionaryHandleOptions<Keys>,\n    ): DictionaryHandle<Keys> {\n      return lookup.buildLookupHandle<Keys>({\n        adapter: opts.adapter,\n        compartmentName: opts.compartmentName,\n        dimensionName: opts.dictionaryName,\n        keyring: opts.keyring,\n        reservedEnvelopes: opts.reservedEnvelopes,\n        encrypted: opts.encrypted,\n        ledger: opts.ledger,\n        options: opts.options,\n        findAndUpdateReferences: opts.findAndUpdateReferences,\n        emitter: opts.emitter,\n        buildDeleteMarker: opts.buildDeleteMarker, // #647 fix wave 1\n        onDirty: opts.onDirty, // #650 Task 4\n        onRecordMutated: opts.onRecordMutated, // #650 Task 4\n        checkReferencesOnDelete: opts.checkReferencesOnDelete, // #650 Task 5\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAM,SAAS;AAKf,SAAS,YAAY,OAA4C,OAA4B;AAC3F,MAAI,CAAC,MAAO,QAAO,oBAAI,IAAI;AAC3B,QAAM,SAAS,MAAM,MAAM;AAC3B,SAAO,IAAI,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC;AACtC;AAGA,SAAS,WAAW,QAAiC,OAAiC;AACpF,QAAM,SAAS,UAAU,QAAQ,KAAK;AACtC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,QAAM,OAAO,OAAO,CAAC;AACrB,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,SAAO;AACT;AAQO,SAAS,mBACd,OACA,UACA,QAC0B;AAC1B,QAAM,MAAM,oBAAI,IAAyB;AACzC,MAAI,CAAC,MAAO,QAAO;AACnB,aAAW,SAAS,OAAO,KAAK,MAAM,GAAG;AACvC,UAAM,SAAS,YAAY,OAAO,KAAK;AACvC,QAAI,OAAO,SAAS,EAAG;AACvB,UAAM,YAAY,WAAW,OAAO,KAAK;AACzC,UAAM,UAAU,WAAW,UAAU,KAAK;AAC1C,QAAI,CAAC,aAAa,CAAC,QAAS;AAC5B,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,OAAO,QAAQ;AACxB,UAAI,QAAQ,GAAG,MAAM,UAAa,QAAQ,GAAG,MAAM,MAAM,QAAQ,GAAG,MAAM,UAAU,GAAG,GAAG;AACxF,eAAO,IAAI,GAAG;AAAA,MAChB;AAAA,IACF;AACA,QAAI,OAAO,OAAO,EAAG,KAAI,IAAI,OAAO,MAAM;AAAA,EAC5C;AACA,SAAO;AACT;AAiBO,SAAS,QACd,QACA,OACA,QACM;AACN,MAAI,SAAS,OAAO,MAAM;AAE1B,aAAW,CAAC,OAAO,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACxD,UAAM,OAAO,WAAW,QAAQ,KAAK;AACrC,QAAI,CAAC,KAAM;AACX,UAAM,EAAE,WAAW,YAAY,gBAAgB,IAAI,WAAW;AAC9D,UAAM,YAAY,YAAY,OAAO,KAAK;AAC1C,UAAM,YAAY,WAAW,SAAS,CAAC,GAAG,KAAK;AAC/C,UAAM,kBAAkB,CAAC,QACvB,UAAU,IAAI,GAAG,KAAK,YAAY,GAAG,MAAM,UAAa,KAAK,GAAG,MAAM,UAAU,GAAG;AAGrF,UAAM,WAAiB,CAAC;AACxB,eAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC7C,UAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM,CAAC,gBAAgB,GAAG,EAAG,UAAS,GAAG,IAAI;AAAA,IACtF;AAEA,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,WAAW;AAC3B,UAAI,SAAS,GAAG,MAAM,OAAW;AACjC,YAAM,MAAM,gBAAgB,UAAU,KAAK,QAAW,OAAO;AAAA,QAC3D,QAAQ;AAAA,QACR,YAAY,cAAc,CAAC,KAAK;AAAA,QAChC,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC/C,CAAC;AACD,UAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;AACzC,aAAK,GAAG,IAAI;AACZ,eAAO,KAAK,GAAG;AAAA,MACjB,WAAW,gBAAgB,GAAG,GAAG;AAC/B,eAAO,KAAK,GAAG;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,GAAG;AACrB,iBAAW,CAAC;AACZ,aAAO,KAAK,IAAI;AAAA,IAClB,WAAW,QAAQ;AACjB,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,WAAO,MAAM,IAAI;AAAA,EACnB,OAAO;AACL,WAAO,OAAO,MAAM;AAAA,EACtB;AACF;;;AC9FO,SAAS,WAAyB;AAKvC,QAAM,SAAS,WAAW;AAC1B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,sBACE,MACwB;AACxB,aAAO,OAAO,kBAAwB;AAAA,QACpC,SAAS,KAAK;AAAA,QACd,iBAAiB,KAAK;AAAA,QACtB,eAAe,KAAK;AAAA,QACpB,SAAS,KAAK;AAAA,QACd,mBAAmB,KAAK;AAAA,QACxB,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,SAAS,KAAK;AAAA,QACd,yBAAyB,KAAK;AAAA,QAC9B,SAAS,KAAK;AAAA,QACd,mBAAmB,KAAK;AAAA;AAAA,QACxB,SAAS,KAAK;AAAA;AAAA,QACd,iBAAiB,KAAK;AAAA;AAAA,QACtB,yBAAyB,KAAK;AAAA;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/via/i18n/densify.ts","../../src/via/i18n/active.ts"],"sourcesContent":["/**\n * `densifyOnWrite` — eager-fill empty i18n slots from each field's\n * substitute chain at write time, recording provenance in the internal\n * `_i18nFilled` marker (decision A: dense map + prior-read).\n *\n * Pure functions over plain records; all DB wiring lives in collection.ts.\n * Only single-leaf i18n fields are supported (array-wildcard paths are\n * skipped, mirroring auto-translate).\n */\nimport { getAtPath, resolveI18nText } from './core.js'\nimport type { I18nTextDescriptor } from './core.js'\n\nconst MARKER = '_i18nFilled'\n\ntype Leaf = Record<string, string>\n\n/** Locales recorded as densify-filled on the prior record for `field`. */\nfunction priorFilled(prior: Record<string, unknown> | undefined, field: string): Set<string> {\n  if (!prior) return new Set()\n  const marker = prior[MARKER] as Record<string, string[]> | undefined\n  return new Set(marker?.[field] ?? [])\n}\n\n/** The single leaf map for `field`, or undefined for absent / array-wildcard / non-object. */\nfunction singleLeaf(record: Record<string, unknown>, field: string): Leaf | undefined {\n  const leaves = getAtPath(record, field)\n  if (leaves.length !== 1) return undefined\n  const leaf = leaves[0]\n  if (!leaf || typeof leaf !== 'object' || Array.isArray(leaf)) return undefined\n  return leaf as Leaf\n}\n\n/**\n * Per field, the locales that are UNCHANGED round-tripped densify fills — i.e.\n * marked filled on the prior record AND identical in the incoming record.\n * These are exempt from write-time script enforcement (they are derived copies,\n * not authored text). Slots the user changed are NOT exempt (validated as authored).\n */\nexport function computeExemptFills(\n  prior: Record<string, unknown> | undefined,\n  incoming: Record<string, unknown>,\n  fields: Record<string, I18nTextDescriptor>,\n): Map<string, Set<string>> {\n  const out = new Map<string, Set<string>>()\n  if (!prior) return out\n  for (const field of Object.keys(fields)) {\n    const filled = priorFilled(prior, field)\n    if (filled.size === 0) continue\n    const priorLeaf = singleLeaf(prior, field)\n    const incLeaf = singleLeaf(incoming, field)\n    if (!priorLeaf || !incLeaf) continue\n    const exempt = new Set<string>()\n    for (const loc of filled) {\n      if (incLeaf[loc] !== undefined && incLeaf[loc] !== '' && incLeaf[loc] === priorLeaf[loc]) {\n        exempt.add(loc)\n      }\n    }\n    if (exempt.size > 0) out.set(field, exempt)\n  }\n  return out\n}\n\n/**\n * Mutate `record` in place: fill empty declared-language slots for each\n * densify-enabled field from the field's substitute chain, recompute unchanged\n * prior fills, clear marks for slots that became authored, and write the\n * resulting `_i18nFilled` marker (removed when empty).\n *\n * `prior` is read-only — it is never mutated.\n *\n * Provenance uses value-equality (decision A): a slot counts as an unchanged\n * fill when it was prior-marked AND its value still equals the prior value. A\n * consequence is that re-authoring a value byte-identical to the existing fill\n * keeps it classified as a fill (the visible value is unchanged either way; the\n * slot stays script-exempt and will auto-refresh if its source later changes).\n * This is inherent to value-equality provenance, not a bug.\n */\nexport function densify(\n  record: Record<string, unknown>,\n  prior: Record<string, unknown> | undefined,\n  fields: Record<string, I18nTextDescriptor>,\n): void {\n  let marker = record[MARKER] as Record<string, string[]> | undefined\n\n  for (const [field, descriptor] of Object.entries(fields)) {\n    const leaf = singleLeaf(record, field)\n    if (!leaf) continue\n    const { languages, substitute, smartSubstitute } = descriptor.options\n    const filledSet = priorFilled(prior, field)\n    const priorLeaf = singleLeaf(prior ?? {}, field)\n    const isUnchangedFill = (loc: string): boolean =>\n      filledSet.has(loc) && priorLeaf?.[loc] !== undefined && leaf[loc] === priorLeaf[loc]\n\n    // Authored source = present, non-empty, NOT an unchanged prior fill.\n    const authored: Leaf = {}\n    for (const [loc, val] of Object.entries(leaf)) {\n      if (typeof val === 'string' && val !== '' && !isUnchangedFill(loc)) authored[loc] = val\n    }\n\n    const filled: string[] = []\n    for (const loc of languages) {\n      if (authored[loc] !== undefined) continue // real value present → not a fill\n      const sub = resolveI18nText(authored, loc, undefined, field, {\n        policy: 'substitute',\n        substitute: substitute ?? ['any'],\n        ...(smartSubstitute ? { smartSubstitute } : {}),\n      })\n      if (typeof sub === 'string' && sub !== '') {\n        leaf[loc] = sub\n        filled.push(loc)\n      } else if (isUnchangedFill(loc)) {\n        delete leaf[loc] // stale fill with no source left → drop it\n      }\n    }\n\n    if (filled.length > 0) {\n      marker ??= {}\n      marker[field] = filled\n    } else if (marker) {\n      delete marker[field]\n    }\n  }\n\n  if (marker && Object.keys(marker).length > 0) {\n    record[MARKER] = marker\n  } else {\n    delete record[MARKER]\n  }\n}\n","/**\n * Active i18n strategy — `withI18n()` returns the real implementation\n * that wires multi-locale resolution, i18nText validation, and the\n * `DictionaryHandle` for `dictKey` fields into the core read/write\n * paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withI18n } from '@noy-db/hub/i18n'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   i18nStrategy: withI18n(),\n * })\n * ```\n *\n * The factory delegates to the existing `core.ts` and `dictionary.ts`\n * modules. Splitting the import chain through this file is what lets\n * tsup tree-shake the `~854 LOC` of dictionary + locale resolution\n * out of the default bundle when no `withI18n()` import is present.\n *\n * @public\n */\n\nimport type { I18nStrategy, BuildDictionaryHandleOptions } from './strategy.js'\nimport { applyI18nLocale, validateI18nTextValue } from './core.js'\nimport { enforceScript } from './script.js'\nimport { computeExemptFills, densify } from './densify.js'\nimport type { DictionaryHandle } from './dictionary.js'\nimport { withLookup } from '../lookup/active.js'\n\nexport function withI18n(): I18nStrategy {\n  // #650 Task 1: the handle-construction logic moved to\n  // via/lookup/active.ts (LookupHandle, renamed from\n  // DictionaryHandle, new home). buildDictionaryHandle below is now a\n  // thin field-name translator over buildLookupHandle — same handle.\n  const lookup = withLookup()\n  return {\n    applyI18nLocale,\n    validateI18nTextValue,\n    enforceScript,\n    computeExemptFills,\n    densify,\n    buildDictionaryHandle<Keys extends string = string>(\n      opts: BuildDictionaryHandleOptions<Keys>,\n    ): DictionaryHandle<Keys> {\n      return lookup.buildLookupHandle<Keys>({\n        adapter: opts.adapter,\n        compartmentName: opts.compartmentName,\n        dimensionName: opts.dictionaryName,\n        keyring: opts.keyring,\n        reservedEnvelopes: opts.reservedEnvelopes,\n        encrypted: opts.encrypted,\n        ledger: opts.ledger,\n        options: opts.options,\n        findAndUpdateReferences: opts.findAndUpdateReferences,\n        emitter: opts.emitter,\n        buildDeleteMarker: opts.buildDeleteMarker, // #647 fix wave 1\n        onDirty: opts.onDirty, // #650 Task 4\n        onRecordMutated: opts.onRecordMutated, // #650 Task 4\n        checkReferencesOnDelete: opts.checkReferencesOnDelete, // #650 Task 5\n      })\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,IAAM,SAAS;AAKf,SAAS,YAAY,OAA4C,OAA4B;AAC3F,MAAI,CAAC,MAAO,QAAO,oBAAI,IAAI;AAC3B,QAAM,SAAS,MAAM,MAAM;AAC3B,SAAO,IAAI,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC;AACtC;AAGA,SAAS,WAAW,QAAiC,OAAiC;AACpF,QAAM,SAAS,UAAU,QAAQ,KAAK;AACtC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,QAAM,OAAO,OAAO,CAAC;AACrB,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,SAAO;AACT;AAQO,SAAS,mBACd,OACA,UACA,QAC0B;AAC1B,QAAM,MAAM,oBAAI,IAAyB;AACzC,MAAI,CAAC,MAAO,QAAO;AACnB,aAAW,SAAS,OAAO,KAAK,MAAM,GAAG;AACvC,UAAM,SAAS,YAAY,OAAO,KAAK;AACvC,QAAI,OAAO,SAAS,EAAG;AACvB,UAAM,YAAY,WAAW,OAAO,KAAK;AACzC,UAAM,UAAU,WAAW,UAAU,KAAK;AAC1C,QAAI,CAAC,aAAa,CAAC,QAAS;AAC5B,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,OAAO,QAAQ;AACxB,UAAI,QAAQ,GAAG,MAAM,UAAa,QAAQ,GAAG,MAAM,MAAM,QAAQ,GAAG,MAAM,UAAU,GAAG,GAAG;AACxF,eAAO,IAAI,GAAG;AAAA,MAChB;AAAA,IACF;AACA,QAAI,OAAO,OAAO,EAAG,KAAI,IAAI,OAAO,MAAM;AAAA,EAC5C;AACA,SAAO;AACT;AAiBO,SAAS,QACd,QACA,OACA,QACM;AACN,MAAI,SAAS,OAAO,MAAM;AAE1B,aAAW,CAAC,OAAO,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACxD,UAAM,OAAO,WAAW,QAAQ,KAAK;AACrC,QAAI,CAAC,KAAM;AACX,UAAM,EAAE,WAAW,YAAY,gBAAgB,IAAI,WAAW;AAC9D,UAAM,YAAY,YAAY,OAAO,KAAK;AAC1C,UAAM,YAAY,WAAW,SAAS,CAAC,GAAG,KAAK;AAC/C,UAAM,kBAAkB,CAAC,QACvB,UAAU,IAAI,GAAG,KAAK,YAAY,GAAG,MAAM,UAAa,KAAK,GAAG,MAAM,UAAU,GAAG;AAGrF,UAAM,WAAiB,CAAC;AACxB,eAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC7C,UAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM,CAAC,gBAAgB,GAAG,EAAG,UAAS,GAAG,IAAI;AAAA,IACtF;AAEA,UAAM,SAAmB,CAAC;AAC1B,eAAW,OAAO,WAAW;AAC3B,UAAI,SAAS,GAAG,MAAM,OAAW;AACjC,YAAM,MAAM,gBAAgB,UAAU,KAAK,QAAW,OAAO;AAAA,QAC3D,QAAQ;AAAA,QACR,YAAY,cAAc,CAAC,KAAK;AAAA,QAChC,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC/C,CAAC;AACD,UAAI,OAAO,QAAQ,YAAY,QAAQ,IAAI;AACzC,aAAK,GAAG,IAAI;AACZ,eAAO,KAAK,GAAG;AAAA,MACjB,WAAW,gBAAgB,GAAG,GAAG;AAC/B,eAAO,KAAK,GAAG;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,GAAG;AACrB,iBAAW,CAAC;AACZ,aAAO,KAAK,IAAI;AAAA,IAClB,WAAW,QAAQ;AACjB,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC5C,WAAO,MAAM,IAAI;AAAA,EACnB,OAAO;AACL,WAAO,OAAO,MAAM;AAAA,EACtB;AACF;;;AC9FO,SAAS,WAAyB;AAKvC,QAAM,SAAS,WAAW;AAC1B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,sBACE,MACwB;AACxB,aAAO,OAAO,kBAAwB;AAAA,QACpC,SAAS,KAAK;AAAA,QACd,iBAAiB,KAAK;AAAA,QACtB,eAAe,KAAK;AAAA,QACpB,SAAS,KAAK;AAAA,QACd,mBAAmB,KAAK;AAAA,QACxB,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,SAAS,KAAK;AAAA,QACd,yBAAyB,KAAK;AAAA,QAC9B,SAAS,KAAK;AAAA,QACd,mBAAmB,KAAK;AAAA;AAAA,QACxB,SAAS,KAAK;AAAA;AAAA,QACd,iBAAiB,KAAK;AAAA;AAAA,QACtB,yBAAyB,KAAK;AAAA;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.ts

@@ -244,7 +244,7 @@ export { assertRosterAuthenticated } from './with-party/team/roster-tag.js';
  */
 export { assertRosterEpochCurrent, nextRosterEpoch } from './with-party/team/roster-epoch.js';
 export type { WrappedDeksBlob } from './with-party/team/wrapped-deks.js';
-export type { NoydbSealer, RecipientHint, RecipientSealer } from './with-party/team/managed-secret.js';
+export type { NoydbSealer, SealContext, RecipientHint, RecipientSealer } from './with-party/team/managed-secret.js';
 export type { NoydbShamir } from './with-party/team/noydb-shamir.js';
 export { MemorySealer, MemoryRecipientSealer, sealRsaOaepTlv, parseRsaOaepTlv, aesGcmOpen, } from './with-party/team/managed-secret.js';
 export { recoverUser } from './with-party/team/peer-recover.js';
@@ -371,7 +371,7 @@ export { MAGIC_LINK_GRANTS_COLLECTION, deriveMagicLinkContentKey, writeMagicLink
 export { diff, formatDiff } from './with-commit/history/diff.js';
 export type { DiffEntry, ChangeType } from './with-commit/history/diff.js';
 export { diffVault } from './with-cargo/vault-diff.js';
-export type { VaultDiff, VaultDiffEntry, VaultDiffModifiedEntry, DiffOptions, DiffCandidate, } from './with-cargo/vault-diff.js';
+export type { VaultDiff, VaultDiffEntry, VaultDiffModifiedEntry, VaultDiffSkipped, DiffOptions, DiffCandidate, } from './with-cargo/vault-diff.js';
 export { withCargo, NO_CARGO } from './with-cargo/index.js';
 export type { CargoStrategy } from './with-cargo/index.js';
 export { CargoNotEnabledError } from './kernel/errors.js';