@noy-db/hub 0.2.0-pre.2 → 0.2.0-pre.3

package/dist/bundle/index.d.cts

@@ -1,7 +1,7 @@
-import { T as TransferSealPayload } from '../ulid-C7ms9oli.cjs';
-export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-C7ms9oli.cjs';
-import { bf as Vault, aO as NoydbStore, bb as SealingKeyProvider, bg as RecoveryEnrollmentInput, bh as ShamirRecoveryProvider } from '../types-DJG8HG6F.cjs';
-export { n as AdoptionStateError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, P as PartitionExtractionError, s as TransferSealError } from '../index-BMjrzNZr.cjs';
+import { T as TransferSealPayload } from '../ulid-CG2YvAbg.cjs';
+export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-CG2YvAbg.cjs';
+import { bf as Vault, aO as NoydbStore, bb as SealingKeyProvider, bg as RecoveryEnrollmentInput, bh as ShamirRecoveryProvider } from '../types-CSLcfytP.cjs';
+export { n as AdoptionStateError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, P as PartitionExtractionError, s as TransferSealError } from '../index-DVkvrgpm.cjs';
 import '../lazy-builder-C-rPfWG0.cjs';
 import '../predicate-Dnu81tsS.cjs';
 import '../strategy-DSTrsZ8t.cjs';

package/dist/bundle/index.d.ts

@@ -1,7 +1,7 @@
-import { T as TransferSealPayload } from '../ulid-BmBgooGm.js';
-export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-BmBgooGm.js';
-import { bf as Vault, aO as NoydbStore, bb as SealingKeyProvider, bg as RecoveryEnrollmentInput, bh as ShamirRecoveryProvider } from '../types-BoFFiskX.js';
-export { n as AdoptionStateError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, P as PartitionExtractionError, s as TransferSealError } from '../index-BCKdioeh.js';
+import { T as TransferSealPayload } from '../ulid-CiM2OAeM.js';
+export { C as COMPRESSION_BROTLI, a as COMPRESSION_GZIP, b as COMPRESSION_NONE, c as CompressionAlgo, F as FLAG_COMPRESSED, d as FLAG_HAS_INTEGRITY_HASH, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, i as encodeBundleHeader, j as generateULID, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, m as resetBrotliSupportCache, v as validateBundleHeader, w as writeNoydbBundle } from '../ulid-CiM2OAeM.js';
+import { bf as Vault, aO as NoydbStore, bb as SealingKeyProvider, bg as RecoveryEnrollmentInput, bh as ShamirRecoveryProvider } from '../types-D9eB0Rvh.js';
+export { n as AdoptionStateError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, P as PartitionExtractionError, s as TransferSealError } from '../index-BF1B2HB9.js';
 import '../lazy-builder-Rpd-V3jP.js';
 import '../predicate-Dnu81tsS.js';
 import '../strategy-DSTrsZ8t.js';

package/dist/bundle/index.js

@@ -16,15 +16,15 @@ import {
   resetBrotliSupportCache,
   validateBundleHeader,
   writeNoydbBundle
-} from "../chunk-VCGTOS2A.js";
+} from "../chunk-P6256WTJ.js";
 import {
   SCHEMAS_COLLECTION,
   resolveManagedSecret
-} from "../chunk-UND4XIB6.js";
-import "../chunk-243PNUA6.js";
+} from "../chunk-4X2S7PBF.js";
+import "../chunk-FS7A4XNF.js";
 import {
   createOwnerKeyring
-} from "../chunk-Q6W2CMEJ.js";
+} from "../chunk-TLFUDXVV.js";
 import {
   generateULID,
   isULID
@@ -32,16 +32,16 @@ import {
 import {
   LEDGER_COLLECTION,
   LedgerStore
-} from "../chunk-7Z23ZFLV.js";
+} from "../chunk-74JEQFMT.js";
 import {
   canonicalJson,
   envelopePayloadHash,
   hashEntry
-} from "../chunk-XG3PTSCD.js";
+} from "../chunk-NCO2JGKK.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "../chunk-YS3POABP.js";
+} from "../chunk-FXQYZNOW.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -49,7 +49,7 @@ import {
   encrypt,
   generateDEK,
   wrapKey
-} from "../chunk-2PAQNPE3.js";
+} from "../chunk-UOF74WQY.js";
 import {
   AdoptionStateError,
   BackupCorruptedError,
@@ -60,7 +60,7 @@ import {
   PartitionExtractionError,
   TransferSealError,
   ValidationError
-} from "../chunk-W3XXT26A.js";
+} from "../chunk-YDLAFP36.js";
 
 // src/bundle/walk-closure.ts
 async function walkClosure(vault, opts) {
@@ -532,7 +532,7 @@ async function createOwnerOnAdoptedPartition(store, vaultName, opts) {
     }
   }
   if (isManaged(opts)) {
-    const { createNoydb } = await import("../noydb-5H3C24GG.js");
+    const { createNoydb } = await import("../noydb-XNQSKXGO.js");
     const db = await createNoydb({
       store,
       user: userId,

package/dist/{chunk-EUYOGYGV.js → chunk-2EYC3WDT.js}

@@ -1,15 +1,15 @@
 import {
   dekKey
-} from "./chunk-7BUTTVMR.js";
+} from "./chunk-6S3LLAQ5.js";
 import {
   assertStrongPassphrase,
   mintKeyringCanary,
   persistKeyring
-} from "./chunk-Q6W2CMEJ.js";
+} from "./chunk-TLFUDXVV.js";
 import {
   NOYDB_FORMAT_VERSION,
   NOYDB_KEYRING_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -19,7 +19,7 @@ import {
   generateSalt,
   unwrapKey,
   wrapKey
-} from "./chunk-2PAQNPE3.js";
+} from "./chunk-UOF74WQY.js";
 import {
   DelegationTargetMissingError,
   InvalidKeyError,
@@ -28,7 +28,7 @@ import {
   PermissionDeniedError,
   PrivilegeEscalationError,
   ValidationError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/team/authenticators.ts
 async function enrollAuthenticator(store, vault, keyring, options) {
@@ -827,4 +827,4 @@ export {
   magicLinkGrantRecordId,
   isMagicLinkGrantExpired
 };
-//# sourceMappingURL=chunk-EUYOGYGV.js.map
+//# sourceMappingURL=chunk-2EYC3WDT.js.map

package/dist/{chunk-MUWOSVEP.js → chunk-2XLVPKXG.js}

@@ -1,7 +1,7 @@
 import {
   BundleVersionConflictError,
   ConflictError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/store/bundle-store.ts
 var BUNDLE_STORE_VERSION = 1;
@@ -790,4 +790,4 @@ export {
   withCache,
   withHealthCheck
 };
-//# sourceMappingURL=chunk-MUWOSVEP.js.map
+//# sourceMappingURL=chunk-2XLVPKXG.js.map

package/dist/{chunk-NWZ3I6R6.js → chunk-4OQWR46B.js}

@@ -1,16 +1,16 @@
 import {
   ensureCollectionDEK
-} from "./chunk-Q6W2CMEJ.js";
+} from "./chunk-TLFUDXVV.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   decrypt,
   encrypt
-} from "./chunk-2PAQNPE3.js";
+} from "./chunk-UOF74WQY.js";
 import {
   PermissionDeniedError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/team/sync-credentials.ts
 var SYNC_CREDENTIALS_COLLECTION = "_sync_credentials";
@@ -76,4 +76,4 @@ export {
   listCredentials,
   credentialStatus
 };
-//# sourceMappingURL=chunk-NWZ3I6R6.js.map
+//# sourceMappingURL=chunk-4OQWR46B.js.map

package/dist/{chunk-J4KLMEUL.js → chunk-4UBOTYP5.js}

@@ -5,7 +5,7 @@ import {
 import {
   DanglingReferenceError,
   JoinTooLargeError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/query/join.ts
 var DEFAULT_JOIN_MAX_ROWS = 5e4;
@@ -1364,4 +1364,4 @@ export {
   executePlan,
   ScanBuilder
 };
-//# sourceMappingURL=chunk-J4KLMEUL.js.map
+//# sourceMappingURL=chunk-4UBOTYP5.js.map

package/dist/{chunk-UND4XIB6.js → chunk-4X2S7PBF.js}

@@ -1,10 +1,10 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   decrypt,
   encrypt
-} from "./chunk-2PAQNPE3.js";
+} from "./chunk-UOF74WQY.js";
 
 // src/persisted-schemas/storage.ts
 var SCHEMAS_COLLECTION = "_schemas";
@@ -248,4 +248,4 @@ export {
   loadSealedPassphrase,
   resolveManagedSecret
 };
-//# sourceMappingURL=chunk-UND4XIB6.js.map
+//# sourceMappingURL=chunk-4X2S7PBF.js.map

package/dist/{chunk-VE6YVP32.js → chunk-5YHWBPOT.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/guards/with-guard.ts
 function withGuard(strategy) {
@@ -16,4 +16,4 @@ function withGuard(strategy) {
 export {
   withGuard
 };
-//# sourceMappingURL=chunk-VE6YVP32.js.map
+//# sourceMappingURL=chunk-5YHWBPOT.js.map

package/dist/{chunk-7BUTTVMR.js → chunk-6S3LLAQ5.js}

@@ -1,6 +1,6 @@
 import {
   TierNotGrantedError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/team/tiers.ts
 function dekKey(collection, tier) {
@@ -31,4 +31,4 @@ export {
   effectiveClearance,
   assertTierAccess
 };
-//# sourceMappingURL=chunk-7BUTTVMR.js.map
+//# sourceMappingURL=chunk-6S3LLAQ5.js.map

package/dist/{chunk-7Z23ZFLV.js → chunk-74JEQFMT.js}

@@ -3,18 +3,18 @@ import {
   hashEntry,
   paddedIndex,
   sha256Hex
-} from "./chunk-XG3PTSCD.js";
+} from "./chunk-NCO2JGKK.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   decrypt,
   encrypt
-} from "./chunk-2PAQNPE3.js";
+} from "./chunk-UOF74WQY.js";
 import {
   ConflictError,
   LedgerContentionError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/history/ledger/patch.ts
 function computePatch(prev, next) {
@@ -683,4 +683,4 @@ export {
   LEDGER_DELTAS_COLLECTION,
   LedgerStore
 };
-//# sourceMappingURL=chunk-7Z23ZFLV.js.map
+//# sourceMappingURL=chunk-74JEQFMT.js.map

package/dist/{chunk-AHPFONIL.js → chunk-75QDHSE4.js}

@@ -1,19 +1,19 @@
 import {
   ATTESTATIONS_COLLECTION,
   loadOrCreateSigner
-} from "./chunk-4HIL6AHQ.js";
+} from "./chunk-ZUMGGHRB.js";
 import {
   generateULID
 } from "./chunk-FZU343FL.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   encrypt
-} from "./chunk-2PAQNPE3.js";
+} from "./chunk-UOF74WQY.js";
 import {
   AttestationError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/attestation/issue.ts
 import {
@@ -56,4 +56,4 @@ async function issueAttestationCore(ctx, args) {
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=chunk-AHPFONIL.js.map
+//# sourceMappingURL=chunk-75QDHSE4.js.map

package/dist/{chunk-3XHOCQK4.js → chunk-A6SWRXUQ.js}

@@ -1,7 +1,7 @@
 import {
   LocaleNotSpecifiedError,
   MissingTranslationError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/i18n/core.ts
 function i18nText(options) {
@@ -115,4 +115,4 @@ export {
   resolveI18nText,
   applyI18nLocale
 };
-//# sourceMappingURL=chunk-3XHOCQK4.js.map
+//# sourceMappingURL=chunk-A6SWRXUQ.js.map

package/dist/{chunk-PLI5TV7N.js → chunk-BFI3RS42.js}

@@ -30,7 +30,7 @@ async function resolveStaleMVOnRead(accessor, outputCollection) {
       continue;
     }
     if (executor === null) {
-      ({ MaterializedViewExecutor: executor } = await import("./executor-AS2IDHKZ.js"));
+      ({ MaterializedViewExecutor: executor } = await import("./executor-KT2IOZVP.js"));
     }
     await executor.refresh(reg, {
       getCollection: (n) => accessor.getCollection(n),
@@ -50,4 +50,4 @@ export {
   resolveStaleMVOnRead,
   clearMVStale
 };
-//# sourceMappingURL=chunk-PLI5TV7N.js.map
+//# sourceMappingURL=chunk-BFI3RS42.js.map

package/dist/{chunk-CXSCDO5T.js → chunk-EMEX37ZN.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/derivations/with-derivation.ts
 function withDerivation(spec) {
@@ -48,4 +48,4 @@ function withDerivation(spec) {
 export {
   withDerivation
 };
-//# sourceMappingURL=chunk-CXSCDO5T.js.map
+//# sourceMappingURL=chunk-EMEX37ZN.js.map

package/dist/{chunk-PEULZC6M.js → chunk-EPK6A3WJ.js}

@@ -13,6 +13,13 @@ var GuardRegistry = class {
   guardsFor(collection) {
     return this._byCollection.get(collection) ?? [];
   }
+  /** Per-collection guard counts, for introspection (#229). */
+  summary() {
+    return [...this._byCollection.entries()].map(([collection, guards]) => ({
+      collection,
+      count: guards.length
+    }));
+  }
   /**
    * Run every guard's `check` for this collection. First throw wins —
    * remaining guards are not invoked. Guards without a `check` skip.
@@ -115,4 +122,4 @@ var GuardRegistry = class {
 export {
   GuardRegistry
 };
-//# sourceMappingURL=chunk-PEULZC6M.js.map
+//# sourceMappingURL=chunk-EPK6A3WJ.js.map

package/dist/chunk-EPK6A3WJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guards/registry.ts"],"sourcesContent":["import type { GuardStrategy, GuardContext, GuardChange } from './types.js'\n\n/**\n * Per-record metadata attached to every entry in an amendment's\n * change-set. Carried in a parallel map alongside `_amendmentChanges`\n * so the public {@link GuardChange} shape (`{ before, after }`) stays\n * clean for invariant authors — the audit ledger reads this side\n * structure to produce the `{ collection, id, vBefore, vAfter }`\n * tuples for the amendment entry.\n *\n * @internal\n */\nexport interface AmendmentChangeMeta {\n  readonly id: string\n  readonly vBefore: number\n  readonly vAfter: number\n}\n\n/**\n * Vault-internal singleton that holds the guard graph and dispatches\n * per-collection guard execution. Owned by `Vault`; not exported.\n *\n * @internal\n */\n// Internal storage alias — guards are heterogeneous in their record type T,\n// so the registry stores them at the upper bound of GuardStrategy's T constraint.\ntype AnyGuard = GuardStrategy<Record<string, unknown>>\ntype AnyChange = GuardChange<Record<string, unknown>>\n\nexport class GuardRegistry {\n  private readonly _byCollection = new Map<string, AnyGuard[]>()\n  private _amendmentChanges: Map<string, AnyChange[]> | null = null\n  private _amendmentMeta: Map<string, AmendmentChangeMeta[]> | null = null\n\n  /** Register a guard. Multiple guards per collection are allowed. */\n  register<T extends Record<string, unknown>>(spec: GuardStrategy<T>): void {\n    const existing = this._byCollection.get(spec.collection)\n    if (existing) existing.push(spec as unknown as AnyGuard)\n    else this._byCollection.set(spec.collection, [spec as unknown as AnyGuard])\n  }\n\n  /** All guards registered against `collection` in registration order. */\n  guardsFor(collection: string): ReadonlyArray<AnyGuard> {\n    return this._byCollection.get(collection) ?? []\n  }\n\n  /** Per-collection guard counts, for introspection (#229). */\n  summary(): { collection: string; count: number }[] {\n    return [...this._byCollection.entries()].map(([collection, guards]) => ({\n      collection,\n      count: guards.length,\n    }))\n  }\n\n  /**\n   * Run every guard's `check` for this collection. First throw wins —\n   * remaining guards are not invoked. Guards without a `check` skip.\n   */\n  async runChecks<T>(\n    collection: string,\n    incoming: T,\n    ctx: GuardContext<T>,\n  ): Promise<void> {\n    const guards = this._byCollection.get(collection)\n    if (!guards) return\n    for (const g of guards) {\n      if (g.check) {\n        await g.check(\n          incoming as unknown as Record<string, unknown>,\n          ctx as unknown as GuardContext<Record<string, unknown>>,\n        )\n      }\n    }\n  }\n\n  /**\n   * Run every guard's `onDelete` for this collection. First throw wins —\n   * remaining guards are not invoked. Guards without an `onDelete` skip.\n   * Mirrors {@link runChecks} but for the delete path.\n   */\n  async runOnDelete<T>(\n    collection: string,\n    existing: T,\n    ctx: GuardContext<T>,\n  ): Promise<void> {\n    const guards = this._byCollection.get(collection)\n    if (!guards) return\n    for (const g of guards) {\n      if (g.onDelete) {\n        await g.onDelete(\n          existing as unknown as Record<string, unknown>,\n          ctx as unknown as GuardContext<Record<string, unknown>>,\n        )\n      }\n    }\n  }\n\n  /** True if any guard for `collection` declares an `amendment` block. */\n  hasAmendment(collection: string): boolean {\n    const guards = this._byCollection.get(collection)\n    if (!guards) return false\n    return guards.some(g => g.amendment !== undefined)\n  }\n\n  /** Open a new amendment change-collection window. */\n  beginAmendment(): void {\n    this._amendmentChanges = new Map()\n    this._amendmentMeta = new Map()\n  }\n\n  /** True iff we're currently inside an amendment transaction. */\n  isAmendmentActive(): boolean {\n    return this._amendmentChanges !== null\n  }\n\n  /**\n   * Record a {before, after} pair for the active amendment. `vBefore`\n   * and `vAfter` are stored in a parallel meta structure so the public\n   * {@link GuardChange} shape handed to invariant callbacks stays\n   * `{ before, after }` only — the audit ledger reads version metadata\n   * via {@link consumeMeta}.\n   */\n  collectChange<T>(\n    collection: string,\n    id: string,\n    before: T | null,\n    after: T,\n    vBefore = 0,\n    vAfter = 0,\n  ): void {\n    if (this._amendmentChanges === null || this._amendmentMeta === null) {\n      throw new Error('GuardRegistry.collectChange called outside an amendment')\n    }\n    const list = this._amendmentChanges.get(collection)\n    const entry = { before, after } as unknown as AnyChange\n    if (list) list.push(entry)\n    else this._amendmentChanges.set(collection, [entry])\n\n    const metaList = this._amendmentMeta.get(collection)\n    const metaEntry: AmendmentChangeMeta = { id, vBefore, vAfter }\n    if (metaList) metaList.push(metaEntry)\n    else this._amendmentMeta.set(collection, [metaEntry])\n  }\n\n  /**\n   * Drain the change-set and close the amendment window. The caller\n   * (transaction commit) feeds these to each affected guard's invariant.\n   */\n  consumeChanges(): ReadonlyMap<string, ReadonlyArray<AnyChange>> {\n    const out = this._amendmentChanges ?? new Map()\n    this._amendmentChanges = null\n    return out\n  }\n\n  /**\n   * Drain the parallel id/version metadata captured during the\n   * amendment. Returned as a flat list with `collection` denormalised\n   * so the audit ledger can emit one `{ collection, id, vBefore,\n   * vAfter }` tuple per record. Must be called AFTER\n   * {@link consumeChanges} (or independently) — calling it closes the\n   * meta window in the same way.\n   */\n  consumeMeta(): ReadonlyArray<{ collection: string; id: string; vBefore: number; vAfter: number }> {\n    const out: { collection: string; id: string; vBefore: number; vAfter: number }[] = []\n    if (this._amendmentMeta) {\n      for (const [collection, list] of this._amendmentMeta) {\n        for (const m of list) {\n          out.push({ collection, id: m.id, vBefore: m.vBefore, vAfter: m.vAfter })\n        }\n      }\n    }\n    this._amendmentMeta = null\n    return out\n  }\n}\n"],"mappings":";AA6BO,IAAM,gBAAN,MAAoB;AAAA,EACR,gBAAgB,oBAAI,IAAwB;AAAA,EACrD,oBAAqD;AAAA,EACrD,iBAA4D;AAAA;AAAA,EAGpE,SAA4C,MAA8B;AACxE,UAAM,WAAW,KAAK,cAAc,IAAI,KAAK,UAAU;AACvD,QAAI,SAAU,UAAS,KAAK,IAA2B;AAAA,QAClD,MAAK,cAAc,IAAI,KAAK,YAAY,CAAC,IAA2B,CAAC;AAAA,EAC5E;AAAA;AAAA,EAGA,UAAU,YAA6C;AACrD,WAAO,KAAK,cAAc,IAAI,UAAU,KAAK,CAAC;AAAA,EAChD;AAAA;AAAA,EAGA,UAAmD;AACjD,WAAO,CAAC,GAAG,KAAK,cAAc,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,YAAY,MAAM,OAAO;AAAA,MACtE;AAAA,MACA,OAAO,OAAO;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UACJ,YACA,UACA,KACe;AACf,UAAM,SAAS,KAAK,cAAc,IAAI,UAAU;AAChD,QAAI,CAAC,OAAQ;AACb,eAAW,KAAK,QAAQ;AACtB,UAAI,EAAE,OAAO;AACX,cAAM,EAAE;AAAA,UACN;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YACJ,YACA,UACA,KACe;AACf,UAAM,SAAS,KAAK,cAAc,IAAI,UAAU;AAChD,QAAI,CAAC,OAAQ;AACb,eAAW,KAAK,QAAQ;AACtB,UAAI,EAAE,UAAU;AACd,cAAM,EAAE;AAAA,UACN;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,aAAa,YAA6B;AACxC,UAAM,SAAS,KAAK,cAAc,IAAI,UAAU;AAChD,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO,OAAO,KAAK,OAAK,EAAE,cAAc,MAAS;AAAA,EACnD;AAAA;AAAA,EAGA,iBAAuB;AACrB,SAAK,oBAAoB,oBAAI,IAAI;AACjC,SAAK,iBAAiB,oBAAI,IAAI;AAAA,EAChC;AAAA;AAAA,EAGA,oBAA6B;AAC3B,WAAO,KAAK,sBAAsB;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cACE,YACA,IACA,QACA,OACA,UAAU,GACV,SAAS,GACH;AACN,QAAI,KAAK,sBAAsB,QAAQ,KAAK,mBAAmB,MAAM;AACnE,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AACA,UAAM,OAAO,KAAK,kBAAkB,IAAI,UAAU;AAClD,UAAM,QAAQ,EAAE,QAAQ,MAAM;AAC9B,QAAI,KAAM,MAAK,KAAK,KAAK;AAAA,QACpB,MAAK,kBAAkB,IAAI,YAAY,CAAC,KAAK,CAAC;AAEnD,UAAM,WAAW,KAAK,eAAe,IAAI,UAAU;AACnD,UAAM,YAAiC,EAAE,IAAI,SAAS,OAAO;AAC7D,QAAI,SAAU,UAAS,KAAK,SAAS;AAAA,QAChC,MAAK,eAAe,IAAI,YAAY,CAAC,SAAS,CAAC;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAgE;AAC9D,UAAM,MAAM,KAAK,qBAAqB,oBAAI,IAAI;AAC9C,SAAK,oBAAoB;AACzB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,cAAkG;AAChG,UAAM,MAA6E,CAAC;AACpF,QAAI,KAAK,gBAAgB;AACvB,iBAAW,CAAC,YAAY,IAAI,KAAK,KAAK,gBAAgB;AACpD,mBAAW,KAAK,MAAM;AACpB,cAAI,KAAK,EAAE,YAAY,IAAI,EAAE,IAAI,SAAS,EAAE,SAAS,QAAQ,EAAE,OAAO,CAAC;AAAA,QACzE;AAAA,MACF;AAAA,IACF;AACA,SAAK,iBAAiB;AACtB,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-JYQTXEIO.js → chunk-FBMXWVGP.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -10,11 +10,11 @@ import {
   encryptBytesWithAAD,
   hmacSha256Hex,
   sha256Hex
-} from "./chunk-2PAQNPE3.js";
+} from "./chunk-UOF74WQY.js";
 import {
   ConflictError,
   NotFoundError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/blobs/mime-magic.ts
 function hex(s) {
@@ -820,7 +820,7 @@ var BlobSet = class {
       return this.buildResponse(slot, result.blob, { inline: true });
     }
     const aad = chunkAAD(slot.eTag, 0, result.blob.chunkCount);
-    const { decryptBytesWithAAD: decryptAAD } = await import("./crypto-5ZDIY3NG.js");
+    const { decryptBytesWithAAD: decryptAAD } = await import("./crypto-H2Y3DDFW.js");
     const decrypted = await decryptAAD(envelope._iv, envelope._data, blobDEK, aad);
     const plaintext = result.blob.compression === "gzip" ? await decompressBytes(decrypted) : decrypted;
     const body = new ReadableStream({
@@ -883,4 +883,4 @@ export {
   DEFAULT_CHUNK_SIZE,
   BlobSet
 };
-//# sourceMappingURL=chunk-JYQTXEIO.js.map
+//# sourceMappingURL=chunk-FBMXWVGP.js.map

package/dist/{chunk-QXQRKXCU.js → chunk-FCDO7UAO.js}

@@ -1,6 +1,6 @@
 import {
   ReadOnlyFrameError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/shadow/vault-frame.ts
 var VaultFrame = class {
@@ -76,4 +76,4 @@ export {
   VaultFrame,
   CollectionFrame
 };
-//# sourceMappingURL=chunk-QXQRKXCU.js.map
+//# sourceMappingURL=chunk-FCDO7UAO.js.map

package/dist/{chunk-243PNUA6.js → chunk-FS7A4XNF.js}

@@ -1,9 +1,9 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-YS3POABP.js";
+} from "./chunk-FXQYZNOW.js";
 import {
   ValidationError
-} from "./chunk-W3XXT26A.js";
+} from "./chunk-YDLAFP36.js";
 
 // src/meta/public-envelope/schema.ts
 var DATA_URL_PREFIX = /^data:([a-zA-Z0-9.+-]+\/[a-zA-Z0-9.+-]+);base64,/;
@@ -152,4 +152,4 @@ export {
   resolveLocale,
   pickLocale
 };
-//# sourceMappingURL=chunk-243PNUA6.js.map
+//# sourceMappingURL=chunk-FS7A4XNF.js.map

package/dist/{chunk-YS3POABP.js → chunk-FXQYZNOW.js}

@@ -14,4 +14,4 @@ export {
   NOYDB_SYNC_VERSION,
   createStore
 };
-//# sourceMappingURL=chunk-YS3POABP.js.map
+//# sourceMappingURL=chunk-FXQYZNOW.js.map