@noy-db/hub 0.2.0-pre.24 → 0.2.0-pre.26

package/dist/consent/index.d.cts

@@ -1,12 +1,12 @@
-import { a3 as ConsentStrategy } from '../types-COQ6qJZh.cjs';
-export { a4 as CONSENT_AUDIT_COLLECTION, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, a9 as loadConsentEntries, aa as writeConsentEntry } from '../types-COQ6qJZh.cjs';
+import { a3 as ConsentStrategy } from '../types-BCYvhKzr.cjs';
+export { a4 as CONSENT_AUDIT_COLLECTION, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, a9 as loadConsentEntries, aa as writeConsentEntry } from '../types-BCYvhKzr.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
-import '../strategy-BWmgRPA2.cjs';
-import '../errors-B2tUcRPg.cjs';
+import '../strategy-D1zjEV3n.cjs';
+import '../errors-Dwk2k1xY.cjs';
 import '../strategy-BSxFXGzb.cjs';
 import '../index-BMmajblo.cjs';
-import '../index-BthnP2MA.cjs';
+import '../index-DoxKSsMj.cjs';
 import '@noy-db/attestation';
 
 /**

package/dist/consent/index.d.ts

@@ -1,12 +1,12 @@
-import { a3 as ConsentStrategy } from '../types-BGRX6sPT.js';
-export { a4 as CONSENT_AUDIT_COLLECTION, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, a9 as loadConsentEntries, aa as writeConsentEntry } from '../types-BGRX6sPT.js';
+import { a3 as ConsentStrategy } from '../types-CCq0WHh9.js';
+export { a4 as CONSENT_AUDIT_COLLECTION, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, a9 as loadConsentEntries, aa as writeConsentEntry } from '../types-CCq0WHh9.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
-import '../strategy-D47TC5X6.js';
-import '../errors-B2tUcRPg.js';
+import '../strategy-YQ1qJWyq.js';
+import '../errors-Dwk2k1xY.js';
 import '../strategy-BSxFXGzb.js';
 import '../index-BMmajblo.js';
-import '../index-BLff_E35.js';
+import '../index-LaexBi3v.js';
 import '@noy-db/attestation';
 
 /**

package/dist/consent/index.js

@@ -2,10 +2,10 @@ import {
   CONSENT_AUDIT_COLLECTION,
   loadConsentEntries,
   writeConsentEntry
-} from "../chunk-7ZCTUI26.js";
+} from "../chunk-FUDVHE2U.js";
 import "../chunk-FZU343FL.js";
-import "../chunk-WQ3KAGOV.js";
-import "../chunk-4BB4T3O7.js";
+import "../chunk-7JSP3E67.js";
+import "../chunk-DDOYOMAD.js";
 
 // src/consent/active.ts
 function withConsent() {

package/dist/{crypto-2LU6XUFF.js → crypto-YBKBNPVM.js}

@@ -20,8 +20,8 @@ import {
   unwrapKey,
   wrapCek,
   wrapKey
-} from "./chunk-WQ3KAGOV.js";
-import "./chunk-4BB4T3O7.js";
+} from "./chunk-7JSP3E67.js";
+import "./chunk-DDOYOMAD.js";
 export {
   base64ToBuffer,
   bufferToBase64,
@@ -45,4 +45,4 @@ export {
   wrapCek,
   wrapKey
 };
-//# sourceMappingURL=crypto-2LU6XUFF.js.map
+//# sourceMappingURL=crypto-YBKBNPVM.js.map

package/dist/{multi-bundle-6s5nKAZX.d.ts → decrypt-partition-C71vhnND.d.cts}

@@ -1,4 +1,4 @@
-import { bg as PublicEnvelope, bh as BundleRecipient, bd as SealingKeyProvider, bi as RecipientSealer, bj as RecipientHint, bc as Vault } from './types-BGRX6sPT.js';
+import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-BCYvhKzr.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.
@@ -555,105 +555,4 @@ interface DecryptedRecord {
  */
 declare function decryptExtractedPartition(bundleBytes: Uint8Array, transferKey: Uint8Array): Promise<Record<string, DecryptedRecord[]>>;
 
-/**
- * Multi-compartment `.noydb` bundle (`NDBM`). A thin outer container
- * that embeds N standard single-vault `.noydb` bundles plus an
- * unencrypted, owner-curated **manifest**. The v1 single-vault format
- * is untouched; each compartment is a complete v1 bundle, produced by
- * `writeNoydbBundle` and read by `readNoydbBundle`.
- *
- * Layout: magic 'NDBM'(4) · version(1) · reserved(1) · manifestLen(4 BE)
- *         · manifest JSON · concat(inner v1 bundles, in manifest order).
- *
- * @packageDocumentation
- */
-
-/** Magic bytes 'NDBM' — NOYDB Multi-compartment bundle. */
-declare const NOYDB_MULTI_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
-/** Fixed prefix: magic(4) + version(1) + reserved(1) + manifestLen(4). */
-declare const NOYDB_MULTI_BUNDLE_PREFIX_BYTES = 10;
-/** Current multi-bundle layout version. */
-declare const NOYDB_MULTI_BUNDLE_VERSION = 1;
-/** One compartment's entry in the pre-decrypt manifest. */
-interface CompartmentManifest {
-    /** The inner v1 bundle's stable ULID handle. */
-    readonly handle: string;
-    /** Owner-curated classification (e.g. 'shard', 'pool'). Opt-in. */
-    readonly roleTag?: string;
-    /** ISO export timestamp. Always set by the writer; absent for a v1 bundle read as a 1-entry manifest. */
-    readonly exportedAt?: string;
-    /** Compartment (vault) name. Opt-in disclosure. */
-    readonly name?: string;
-    /** Collection names + record counts. Opt-in disclosure. */
-    readonly collections?: readonly {
-        readonly name: string;
-        readonly count: number;
-    }[];
-    /** Inner bundle's owner-curated public envelope, surfaced. Opt-in. */
-    readonly publicEnvelope?: PublicEnvelope;
-    /** Byte length of the inner v1 bundle (drives framing). */
-    readonly innerBytes: number;
-    /** SHA-256 (lowercase hex) of the inner v1 bundle bytes — pre-decrypt integrity. */
-    readonly innerSha256: string;
-    /** Source vault's schema fence version at extract time (FR-8). Opt-in; absent on older bundles. */
-    readonly schemaVersion?: number;
-}
-/** The unencrypted manifest of a multi-compartment bundle. */
-interface MultiBundleManifest {
-    readonly multiFormatVersion: number;
-    /** Opaque ULID for the outer container. */
-    readonly handle: string;
-    readonly compartments: readonly CompartmentManifest[];
-}
-/** Assemble the `NDBM` container from a manifest + inner bundle bytes (in manifest order). */
-declare function encodeMultiBundle(manifest: MultiBundleManifest, inner: readonly Uint8Array[]): Uint8Array;
-/** Parse the `NDBM` container into its manifest + raw inner bundle byte slices. */
-declare function decodeMultiBundle(bytes: Uint8Array): {
-    manifest: MultiBundleManifest;
-    inner: Uint8Array[];
-};
-/** Per-compartment input to {@link writeMultiVaultBundle}. */
-interface MultiVaultCompartmentInput {
-    readonly vault: Vault;
-    /** Owner-curated classification surfaced in the manifest (e.g. 'shard', 'pool'). */
-    readonly roleTag?: string;
-    /** ISO timestamp for the manifest; defaults to now. */
-    readonly exportedAt?: string;
-    /** Opt-in pre-decrypt disclosure for this compartment. */
-    readonly disclose?: {
-        /** `true` → use `vault.name`; a string → that explicit name. */
-        readonly name?: boolean | string;
-        /** `true` → include collection names + record counts. */
-        readonly collections?: boolean;
-        /** `true` → surface the inner bundle's public envelope into the manifest. */
-        readonly publicEnvelope?: boolean;
-    };
-    /** Options forwarded to `writeNoydbBundle` for this compartment's inner bundle. */
-    readonly bundleOptions?: WriteNoydbBundleOptions;
-}
-/** Write N vaults into one `NDBM` multi-compartment bundle. */
-declare function writeMultiVaultBundle(compartments: readonly MultiVaultCompartmentInput[], opts?: {
-    readonly handle?: string;
-}): Promise<Uint8Array>;
-/**
- * Read the pre-decrypt manifest of a bundle WITHOUT decrypting any
- * compartment. Accepts a multi-compartment `NDBM` bundle (returns its
- * N entries) OR a single v1 `NDB1` bundle (returns a 1-entry manifest,
- * for uniform handling). Throws on anything else.
- */
-declare function readNoydbBundleManifest(bytes: Uint8Array): Promise<CompartmentManifest[]>;
-/**
- * Extract one compartment's inner v1 `.noydb` bundle bytes, ready to
- * pass to `readNoydbBundle`. `selector` is a compartment `handle` or a
- * zero-based index. For a single v1 bundle, the bundle itself is the
- * only compartment.
- *
- * Does NOT verify the manifest `innerSha256` — it returns the raw
- * slice. Integrity is enforced downstream: `readNoydbBundle` verifies
- * the inner bundle's own `bodySha256`. Callers wanting an early,
- * pre-decrypt check can hash the returned bytes against the
- * compartment's `innerSha256`.
- */
-declare function readMultiVaultBundleCompartment(bytes: Uint8Array, selector: string | number): Uint8Array;
-
-export { type AutoCredential as A, hasNoydbBundleMagic as B, COMPRESSION_BROTLI as C, type DecryptedRecord as D, readNoydbBundlePublicEnvelope as E, FLAG_COMPRESSED as F, type MultiBundleManifest as M, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompartmentManifest as c, type CompressionAlgo as d, FLAG_HAS_INTEGRITY_HASH as e, type MultiVaultCompartmentInput as f, NOYDB_BUNDLE_MAGIC as g, NOYDB_BUNDLE_PREFIX_BYTES as h, NOYDB_MULTI_BUNDLE_MAGIC as i, NOYDB_MULTI_BUNDLE_PREFIX_BYTES as j, NOYDB_MULTI_BUNDLE_VERSION as k, type NoydbBundleHeader as l, type NoydbBundleReadResult as m, decodeMultiBundle as n, decryptExtractedPartition as o, encodeBundleHeader as p, encodeMultiBundle as q, readMultiVaultBundleCompartment as r, readNoydbBundle as s, readNoydbBundleHeader as t, readNoydbBundleManifest as u, resetBrotliSupportCache as v, validateBundleHeader as w, writeMultiVaultBundle as x, writeNoydbBundle as y, type AutoCredentialKind as z };
+export { type AutoCredential as A, COMPRESSION_BROTLI as C, type DecryptedRecord as D, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompressionAlgo as c, FLAG_HAS_INTEGRITY_HASH as d, NOYDB_BUNDLE_MAGIC as e, NOYDB_BUNDLE_PREFIX_BYTES as f, type NoydbBundleHeader as g, type NoydbBundleReadResult as h, decryptExtractedPartition as i, encodeBundleHeader as j, readNoydbBundleHeader as k, resetBrotliSupportCache as l, type AutoCredentialKind as m, hasNoydbBundleMagic as n, readNoydbBundlePublicEnvelope as o, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };

package/dist/{multi-bundle-WhYiJEgV.d.cts → decrypt-partition-CyyJUWLR.d.ts}

@@ -1,4 +1,4 @@
-import { bg as PublicEnvelope, bh as BundleRecipient, bd as SealingKeyProvider, bi as RecipientSealer, bj as RecipientHint, bc as Vault } from './types-COQ6qJZh.cjs';
+import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-CCq0WHh9.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.
@@ -555,105 +555,4 @@ interface DecryptedRecord {
  */
 declare function decryptExtractedPartition(bundleBytes: Uint8Array, transferKey: Uint8Array): Promise<Record<string, DecryptedRecord[]>>;
 
-/**
- * Multi-compartment `.noydb` bundle (`NDBM`). A thin outer container
- * that embeds N standard single-vault `.noydb` bundles plus an
- * unencrypted, owner-curated **manifest**. The v1 single-vault format
- * is untouched; each compartment is a complete v1 bundle, produced by
- * `writeNoydbBundle` and read by `readNoydbBundle`.
- *
- * Layout: magic 'NDBM'(4) · version(1) · reserved(1) · manifestLen(4 BE)
- *         · manifest JSON · concat(inner v1 bundles, in manifest order).
- *
- * @packageDocumentation
- */
-
-/** Magic bytes 'NDBM' — NOYDB Multi-compartment bundle. */
-declare const NOYDB_MULTI_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
-/** Fixed prefix: magic(4) + version(1) + reserved(1) + manifestLen(4). */
-declare const NOYDB_MULTI_BUNDLE_PREFIX_BYTES = 10;
-/** Current multi-bundle layout version. */
-declare const NOYDB_MULTI_BUNDLE_VERSION = 1;
-/** One compartment's entry in the pre-decrypt manifest. */
-interface CompartmentManifest {
-    /** The inner v1 bundle's stable ULID handle. */
-    readonly handle: string;
-    /** Owner-curated classification (e.g. 'shard', 'pool'). Opt-in. */
-    readonly roleTag?: string;
-    /** ISO export timestamp. Always set by the writer; absent for a v1 bundle read as a 1-entry manifest. */
-    readonly exportedAt?: string;
-    /** Compartment (vault) name. Opt-in disclosure. */
-    readonly name?: string;
-    /** Collection names + record counts. Opt-in disclosure. */
-    readonly collections?: readonly {
-        readonly name: string;
-        readonly count: number;
-    }[];
-    /** Inner bundle's owner-curated public envelope, surfaced. Opt-in. */
-    readonly publicEnvelope?: PublicEnvelope;
-    /** Byte length of the inner v1 bundle (drives framing). */
-    readonly innerBytes: number;
-    /** SHA-256 (lowercase hex) of the inner v1 bundle bytes — pre-decrypt integrity. */
-    readonly innerSha256: string;
-    /** Source vault's schema fence version at extract time (FR-8). Opt-in; absent on older bundles. */
-    readonly schemaVersion?: number;
-}
-/** The unencrypted manifest of a multi-compartment bundle. */
-interface MultiBundleManifest {
-    readonly multiFormatVersion: number;
-    /** Opaque ULID for the outer container. */
-    readonly handle: string;
-    readonly compartments: readonly CompartmentManifest[];
-}
-/** Assemble the `NDBM` container from a manifest + inner bundle bytes (in manifest order). */
-declare function encodeMultiBundle(manifest: MultiBundleManifest, inner: readonly Uint8Array[]): Uint8Array;
-/** Parse the `NDBM` container into its manifest + raw inner bundle byte slices. */
-declare function decodeMultiBundle(bytes: Uint8Array): {
-    manifest: MultiBundleManifest;
-    inner: Uint8Array[];
-};
-/** Per-compartment input to {@link writeMultiVaultBundle}. */
-interface MultiVaultCompartmentInput {
-    readonly vault: Vault;
-    /** Owner-curated classification surfaced in the manifest (e.g. 'shard', 'pool'). */
-    readonly roleTag?: string;
-    /** ISO timestamp for the manifest; defaults to now. */
-    readonly exportedAt?: string;
-    /** Opt-in pre-decrypt disclosure for this compartment. */
-    readonly disclose?: {
-        /** `true` → use `vault.name`; a string → that explicit name. */
-        readonly name?: boolean | string;
-        /** `true` → include collection names + record counts. */
-        readonly collections?: boolean;
-        /** `true` → surface the inner bundle's public envelope into the manifest. */
-        readonly publicEnvelope?: boolean;
-    };
-    /** Options forwarded to `writeNoydbBundle` for this compartment's inner bundle. */
-    readonly bundleOptions?: WriteNoydbBundleOptions;
-}
-/** Write N vaults into one `NDBM` multi-compartment bundle. */
-declare function writeMultiVaultBundle(compartments: readonly MultiVaultCompartmentInput[], opts?: {
-    readonly handle?: string;
-}): Promise<Uint8Array>;
-/**
- * Read the pre-decrypt manifest of a bundle WITHOUT decrypting any
- * compartment. Accepts a multi-compartment `NDBM` bundle (returns its
- * N entries) OR a single v1 `NDB1` bundle (returns a 1-entry manifest,
- * for uniform handling). Throws on anything else.
- */
-declare function readNoydbBundleManifest(bytes: Uint8Array): Promise<CompartmentManifest[]>;
-/**
- * Extract one compartment's inner v1 `.noydb` bundle bytes, ready to
- * pass to `readNoydbBundle`. `selector` is a compartment `handle` or a
- * zero-based index. For a single v1 bundle, the bundle itself is the
- * only compartment.
- *
- * Does NOT verify the manifest `innerSha256` — it returns the raw
- * slice. Integrity is enforced downstream: `readNoydbBundle` verifies
- * the inner bundle's own `bodySha256`. Callers wanting an early,
- * pre-decrypt check can hash the returned bytes against the
- * compartment's `innerSha256`.
- */
-declare function readMultiVaultBundleCompartment(bytes: Uint8Array, selector: string | number): Uint8Array;
-
-export { type AutoCredential as A, hasNoydbBundleMagic as B, COMPRESSION_BROTLI as C, type DecryptedRecord as D, readNoydbBundlePublicEnvelope as E, FLAG_COMPRESSED as F, type MultiBundleManifest as M, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompartmentManifest as c, type CompressionAlgo as d, FLAG_HAS_INTEGRITY_HASH as e, type MultiVaultCompartmentInput as f, NOYDB_BUNDLE_MAGIC as g, NOYDB_BUNDLE_PREFIX_BYTES as h, NOYDB_MULTI_BUNDLE_MAGIC as i, NOYDB_MULTI_BUNDLE_PREFIX_BYTES as j, NOYDB_MULTI_BUNDLE_VERSION as k, type NoydbBundleHeader as l, type NoydbBundleReadResult as m, decodeMultiBundle as n, decryptExtractedPartition as o, encodeBundleHeader as p, encodeMultiBundle as q, readMultiVaultBundleCompartment as r, readNoydbBundle as s, readNoydbBundleHeader as t, readNoydbBundleManifest as u, resetBrotliSupportCache as v, validateBundleHeader as w, writeMultiVaultBundle as x, writeNoydbBundle as y, type AutoCredentialKind as z };
+export { type AutoCredential as A, COMPRESSION_BROTLI as C, type DecryptedRecord as D, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompressionAlgo as c, FLAG_HAS_INTEGRITY_HASH as d, NOYDB_BUNDLE_MAGIC as e, NOYDB_BUNDLE_PREFIX_BYTES as f, type NoydbBundleHeader as g, type NoydbBundleReadResult as h, decryptExtractedPartition as i, encodeBundleHeader as j, readNoydbBundleHeader as k, resetBrotliSupportCache as l, type AutoCredentialKind as m, hasNoydbBundleMagic as n, readNoydbBundlePublicEnvelope as o, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };

package/dist/{delegation-6ABSJGXV.js → delegation-4JSMM6BB.js}

@@ -3,15 +3,15 @@ import {
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-XQO4TAJS.js";
-import "./chunk-TOMSCJRV.js";
+} from "./chunk-ZW2YSN6G.js";
+import "./chunk-J73KU4AE.js";
 import "./chunk-FZU343FL.js";
-import "./chunk-WQ3KAGOV.js";
-import "./chunk-4BB4T3O7.js";
+import "./chunk-7JSP3E67.js";
+import "./chunk-DDOYOMAD.js";
 export {
   DELEGATIONS_COLLECTION,
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
 };
-//# sourceMappingURL=delegation-6ABSJGXV.js.map
+//# sourceMappingURL=delegation-4JSMM6BB.js.map