@noy-db/hub 0.2.0-pre.3 → 0.2.0-pre.31

package/dist/session/index.js

@@ -12,14 +12,15 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "../chunk-QAU5HM6Q.js";
+} from "../chunk-6EKRQ7QF.js";
 import "../chunk-FZU343FL.js";
-import "../chunk-UOF74WQY.js";
+import "../chunk-E2MDPPOC.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,
   SessionPolicyError
-} from "../chunk-YDLAFP36.js";
+} from "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
 
 // src/session/active.ts
 function withSession() {

package/dist/session/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/session/active.ts"],"sourcesContent":["/**\n * Active session strategy — `withSession()` returns the real\n * implementation that wires `SessionPolicy` validation, the\n * `PolicyEnforcer`, and the global session-token registry into the\n * Noydb lifecycle.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withSession } from '@noy-db/hub/session'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   sessionPolicy: { idleTimeoutMs: 15 * 60_000 },\n *   sessionStrategy: withSession(),\n * })\n * ```\n *\n * The factory delegates to the existing `session-policy.ts` and\n * `session.ts` modules. Splitting the import chain through this file\n * is what lets tsup tree-shake the ~495 LOC of policy + token code\n * out of the default bundle when no `withSession()` import is\n * present.\n *\n * Note: dev-unlock (`devUnlock`, `cancelDevUnlock`) is a separate\n * named import from `@noy-db/hub` and tree-shakes independently —\n * apps that don't import it never include it.\n *\n * @public\n */\n\nimport type { SessionStrategy } from './strategy.js'\nimport { createEnforcer, validateSessionPolicy } from './session-policy.js'\nimport { revokeAllSessions } from './session.js'\n\nexport function withSession(): SessionStrategy {\n  return {\n    validateSessionPolicy,\n    createEnforcer,\n    revokeAllSessions,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAqCO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/session/active.ts"],"sourcesContent":["/**\n * Active session strategy — `withSession()` returns the real\n * implementation that wires `SessionPolicy` validation, the\n * `PolicyEnforcer`, and the global session-token registry into the\n * Noydb lifecycle.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withSession } from '@noy-db/hub/session'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   sessionPolicy: { idleTimeoutMs: 15 * 60_000 },\n *   sessionStrategy: withSession(),\n * })\n * ```\n *\n * The factory delegates to the existing `session-policy.ts` and\n * `session.ts` modules. Splitting the import chain through this file\n * is what lets tsup tree-shake the ~495 LOC of policy + token code\n * out of the default bundle when no `withSession()` import is\n * present.\n *\n * Note: dev-unlock (`devUnlock`, `cancelDevUnlock`) is a separate\n * named import from `@noy-db/hub` and tree-shakes independently —\n * apps that don't import it never include it.\n *\n * @public\n */\n\nimport type { SessionStrategy } from './strategy.js'\nimport { createEnforcer, validateSessionPolicy } from './session-policy.js'\nimport { revokeAllSessions } from './session.js'\n\nexport function withSession(): SessionStrategy {\n  return {\n    validateSessionPolicy,\n    createEnforcer,\n    revokeAllSessions,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAqCO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/shadow/index.d.ts

@@ -1,10 +1,12 @@
-import { an as ShadowStrategy } from '../types-D9eB0Rvh.js';
-export { ao as CollectionFrame, ap as VaultFrame } from '../types-D9eB0Rvh.js';
-import '../lazy-builder-Rpd-V3jP.js';
-import '../predicate-Dnu81tsS.js';
-import '../strategy-DSTrsZ8t.js';
+import { at as ShadowStrategy } from '../index-DHn9lEP0.js';
+export { au as CollectionFrame, av as VaultFrame } from '../index-DHn9lEP0.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
+import '../strategy-8QGs5KQE.js';
+import '../errors-BAWO5Z5a.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-BF1B2HB9.js';
+import '../index-BMmajblo.js';
+import '../index-Ddm8D3Oo.js';
 import '@noy-db/attestation';
 
 /**

package/dist/shadow/index.js

@@ -1,8 +1,9 @@
 import {
   CollectionFrame,
   VaultFrame
-} from "../chunk-FCDO7UAO.js";
-import "../chunk-YDLAFP36.js";
+} from "../chunk-2ZYIN3BL.js";
+import "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
 
 // src/shadow/active.ts
 function withShadow() {

package/dist/shadow/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/shadow/active.ts"],"sourcesContent":["/**\n * Active shadow strategy — the only place `VaultFrame` is constructed.\n * Only reachable through `@noy-db/hub/shadow`.\n */\n\nimport { VaultFrame } from './vault-frame.js'\nimport type { ShadowStrategy } from './strategy.js'\nimport type { Vault } from '../vault.js'\n\nexport function withShadow(): ShadowStrategy {\n  return {\n    buildFrame(vault) { return new VaultFrame(vault as Vault) },\n  }\n}\n"],"mappings":";;;;;;;AASO,SAAS,aAA6B;AAC3C,SAAO;AAAA,IACL,WAAW,OAAO;AAAE,aAAO,IAAI,WAAW,KAAc;AAAA,IAAE;AAAA,EAC5D;AACF;","names":[]}
+{"version":3,"sources":["../../src/shadow/active.ts"],"sourcesContent":["/**\n * Active shadow strategy — the only place `VaultFrame` is constructed.\n * Only reachable through `@noy-db/hub/shadow`.\n */\n\nimport { VaultFrame } from './vault-frame.js'\nimport type { ShadowStrategy } from './strategy.js'\nimport type { Vault } from '../vault.js'\n\nexport function withShadow(): ShadowStrategy {\n  return {\n    buildFrame(vault) { return new VaultFrame(vault as Vault) },\n  }\n}\n"],"mappings":";;;;;;;;AASO,SAAS,aAA6B;AAC3C,SAAO;AAAA,IACL,WAAW,OAAO;AAAE,aAAO,IAAI,WAAW,KAAc;AAAA,IAAE;AAAA,EAC5D;AACF;","names":[]}

package/dist/{signer-M4K5HBLD.js → signer-UB5TQOZ6.js}

@@ -4,10 +4,11 @@ import {
   SIGNER_RECORD_ID,
   loadOrCreateSigner,
   loadSigner
-} from "./chunk-ZUMGGHRB.js";
-import "./chunk-FXQYZNOW.js";
-import "./chunk-UOF74WQY.js";
-import "./chunk-YDLAFP36.js";
+} from "./chunk-5PTX7PKD.js";
+import "./chunk-A7DNZVAV.js";
+import "./chunk-E2MDPPOC.js";
+import "./chunk-JZ5DS4DP.js";
+import "./chunk-PZ5AY32C.js";
 export {
   ATTESTATIONS_COLLECTION,
   REVOKED_RECORD_ID,
@@ -15,4 +16,4 @@ export {
   loadOrCreateSigner,
   loadSigner
 };
-//# sourceMappingURL=signer-M4K5HBLD.js.map
+//# sourceMappingURL=signer-UB5TQOZ6.js.map

package/dist/signer-UB5TQOZ6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/snapshots/index.d.ts

@@ -0,0 +1,30 @@
+import { aw as NoydbBundleStore, ax as RetentionPolicy, ay as SnapshotPolicy, az as SnapshotStrategy } from '../index-DHn9lEP0.js';
+export { aA as SnapshotMeta, aB as SnapshotMode } from '../index-DHn9lEP0.js';
+export { h as SnapshotNotFoundError } from '../errors-BAWO5Z5a.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
+import '../strategy-8QGs5KQE.js';
+import '../strategy-BSxFXGzb.js';
+import '../index-BMmajblo.js';
+import '../index-Ddm8D3Oo.js';
+import '@noy-db/attestation';
+
+interface WithSnapshotsOptions {
+    /** Bundle store where snapshot blobs and the sidecar index are written. */
+    store: NoydbBundleStore;
+    /**
+     * Declarative retention policy. Enforced eagerly after each on-demand `snapshot()`.
+     * Defaults to no retention (all on-demand snapshots kept forever). Never affects
+     * the rolling auto-snapshot.
+     */
+    retention?: RetentionPolicy;
+    /**
+     * Automatic-snapshot cadence. Default `mode:'manual'` ⇒ no timers; snapshots
+     * stay on-demand. Set `mode:'debounce'`/`'interval'` to enable auto-snapshots
+     * to the rolling `<vault>__auto` key.
+     */
+    snapshotPolicy?: SnapshotPolicy;
+}
+declare function withSnapshots(opts: WithSnapshotsOptions): SnapshotStrategy;
+
+export { RetentionPolicy, SnapshotPolicy, SnapshotStrategy, type WithSnapshotsOptions, withSnapshots };

package/dist/snapshots/index.js

@@ -0,0 +1,153 @@
+import {
+  readNoydbBundle,
+  writeNoydbBundle
+} from "../chunk-QBLPY44S.js";
+import "../chunk-QWJCNXH2.js";
+import "../chunk-A7DNZVAV.js";
+import {
+  SnapshotNotFoundError
+} from "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
+
+// src/snapshots/engine.ts
+var SnapshotEngine = class {
+  constructor(store, retention) {
+    this.store = store;
+    this.retention = retention;
+  }
+  store;
+  retention;
+  indexKey(vaultName) {
+    return `${vaultName}__index`;
+  }
+  snapKey(vaultName, n) {
+    return `${vaultName}__snap_${n.toString().padStart(6, "0")}`;
+  }
+  autoKey(vaultName) {
+    return `${vaultName}__auto`;
+  }
+  async readIndex(vaultName) {
+    const result = await this.store.readBundle(this.indexKey(vaultName));
+    if (!result) return { index: { snapshots: [], nextCounter: 1 }, indexVersion: null };
+    const text = new TextDecoder().decode(result.bytes);
+    return { index: JSON.parse(text), indexVersion: result.version };
+  }
+  async writeIndex(vaultName, index, expectedVersion) {
+    const bytes = new TextEncoder().encode(JSON.stringify(index));
+    await this.store.writeBundle(this.indexKey(vaultName), bytes, expectedVersion);
+  }
+  async snapshot(vault, by, opts) {
+    const bytes = await writeNoydbBundle(vault, {});
+    const { index, indexVersion } = await this.readIndex(vault.name);
+    const key = this.snapKey(vault.name, index.nextCounter);
+    await this.store.writeBundle(key, bytes, null);
+    const meta = {
+      version: key,
+      ...opts?.label !== void 0 ? { label: opts.label } : {},
+      ...opts?.note !== void 0 ? { note: opts.note } : {},
+      exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      exportedBy: by,
+      size: bytes.length,
+      integrity: "verified"
+    };
+    const newIndex = {
+      snapshots: [...index.snapshots, meta],
+      nextCounter: index.nextCounter + 1,
+      // Preserve the rolling auto slot — on-demand snapshots never touch it.
+      ...index.auto ? { auto: index.auto } : {}
+    };
+    const toDelete = this.applyRetention(newIndex);
+    await this.writeIndex(vault.name, newIndex, indexVersion);
+    for (const k of toDelete) {
+      await this.store.deleteBundle(k);
+    }
+    return meta;
+  }
+  /**
+   * Rolling auto-snapshot. Overwrites the single fixed `<vault>__auto` key and
+   * stores its meta in `index.auto`, separate from the immutable `snapshots`
+   * pool — retention never prunes it. Used by the cadence scheduler.
+   */
+  async autoSnapshot(vault, by, opts) {
+    const bytes = await writeNoydbBundle(vault, {});
+    const { index, indexVersion } = await this.readIndex(vault.name);
+    const key = this.autoKey(vault.name);
+    await this.store.writeBundle(key, bytes, null);
+    const meta = {
+      version: key,
+      label: opts?.label ?? "auto",
+      ...opts?.note !== void 0 ? { note: opts.note } : {},
+      exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      exportedBy: by,
+      size: bytes.length,
+      integrity: "verified",
+      auto: true
+    };
+    index.auto = meta;
+    await this.writeIndex(vault.name, index, indexVersion);
+    return meta;
+  }
+  async listSnapshots(vaultId) {
+    const { index } = await this.readIndex(vaultId);
+    const immutable = [...index.snapshots].reverse();
+    return index.auto ? [index.auto, ...immutable] : immutable;
+  }
+  async restoreSnapshot(vault, version) {
+    if (!version.startsWith(`${vault.name}__`)) throw new SnapshotNotFoundError(version);
+    const result = await this.store.readBundle(version);
+    if (!result) throw new SnapshotNotFoundError(version);
+    const { dumpJson } = await readNoydbBundle(result.bytes);
+    await vault.load(dumpJson);
+  }
+  /**
+   * Applies the configured retention policy to `index`, mutating `index.snapshots`
+   * in place and returning the blob keys that should be deleted from the store.
+   * Called by `snapshot()` before the index is written.
+   *
+   * @internal — public for direct testing only
+   */
+  applyRetention(index) {
+    const prune = this.retention.prune ?? true;
+    if (!prune) return [];
+    const toDelete = [];
+    let remaining = index.snapshots.slice();
+    if (this.retention.keepLast !== void 0 && remaining.length > this.retention.keepLast) {
+      const excess = remaining.splice(0, remaining.length - this.retention.keepLast);
+      toDelete.push(...excess.map((m) => m.version));
+    }
+    if (this.retention.maxAgeDays !== void 0) {
+      const cutoffMs = this.retention.maxAgeDays * 864e5;
+      const now = Date.now();
+      const fresh = remaining.filter((m) => now - new Date(m.exportedAt).getTime() <= cutoffMs);
+      toDelete.push(...remaining.filter((m) => !fresh.includes(m)).map((m) => m.version));
+      remaining = fresh;
+    }
+    index.snapshots = remaining;
+    return toDelete;
+  }
+};
+
+// src/snapshots/active.ts
+function withSnapshots(opts) {
+  const engine = new SnapshotEngine(opts.store, opts.retention ?? {});
+  return {
+    snapshot(vault, by, snapOpts) {
+      return engine.snapshot(vault, by, snapOpts);
+    },
+    listSnapshots(vaultId) {
+      return engine.listSnapshots(vaultId);
+    },
+    restoreSnapshot(vault, version) {
+      return engine.restoreSnapshot(vault, version);
+    },
+    autoSnapshot(vault, by, snapOpts) {
+      return engine.autoSnapshot(vault, by, snapOpts);
+    },
+    ...opts.snapshotPolicy ? { policy: opts.snapshotPolicy } : {}
+  };
+}
+export {
+  SnapshotNotFoundError,
+  withSnapshots
+};
+//# sourceMappingURL=index.js.map

package/dist/snapshots/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/snapshots/engine.ts","../../src/snapshots/active.ts"],"sourcesContent":["import { writeNoydbBundle, readNoydbBundle } from '../bundle/bundle.js'\nimport { SnapshotNotFoundError } from '../errors.js'\nimport type { NoydbBundleStore } from '../types.js'\nimport type { Vault } from '../vault.js'\nimport type { SnapshotMeta, RetentionPolicy, SnapshotIndex } from './strategy.js'\n\nexport class SnapshotEngine {\n  constructor(\n    private readonly store: NoydbBundleStore,\n    private readonly retention: RetentionPolicy,\n  ) {}\n\n  private indexKey(vaultName: string): string {\n    return `${vaultName}__index`\n  }\n\n  private snapKey(vaultName: string, n: number): string {\n    return `${vaultName}__snap_${n.toString().padStart(6, '0')}`\n  }\n\n  private autoKey(vaultName: string): string {\n    return `${vaultName}__auto`\n  }\n\n  private async readIndex(\n    vaultName: string,\n  ): Promise<{ index: SnapshotIndex; indexVersion: string | null }> {\n    const result = await this.store.readBundle(this.indexKey(vaultName))\n    if (!result) return { index: { snapshots: [], nextCounter: 1 }, indexVersion: null }\n    const text = new TextDecoder().decode(result.bytes)\n    return { index: JSON.parse(text) as SnapshotIndex, indexVersion: result.version }\n  }\n\n  private async writeIndex(\n    vaultName: string,\n    index: SnapshotIndex,\n    expectedVersion: string | null,\n  ): Promise<void> {\n    const bytes = new TextEncoder().encode(JSON.stringify(index))\n    await this.store.writeBundle(this.indexKey(vaultName), bytes, expectedVersion)\n  }\n\n  async snapshot(\n    vault: Vault,\n    by: string,\n    opts?: { label?: string; note?: string },\n  ): Promise<SnapshotMeta> {\n    const bytes = await writeNoydbBundle(vault, {})\n    const { index, indexVersion } = await this.readIndex(vault.name)\n    const key = this.snapKey(vault.name, index.nextCounter)\n\n    // Write blob first. If the subsequent index write fails, the next snapshot()\n    // call will re-derive the same key (counter not persisted) and overwrite this blob.\n    // This is an accepted v1 trade-off: failure window is narrow and requires a store\n    // error between the two writes. A retry produces a fresh snapshot at the same key.\n    await this.store.writeBundle(key, bytes, null)\n\n    const meta: SnapshotMeta = {\n      version: key,\n      ...(opts?.label !== undefined ? { label: opts.label } : {}),\n      ...(opts?.note !== undefined ? { note: opts.note } : {}),\n      exportedAt: new Date().toISOString(),\n      exportedBy: by,\n      size: bytes.length,\n      integrity: 'verified',\n    }\n\n    const newIndex: SnapshotIndex = {\n      snapshots: [...index.snapshots, meta],\n      nextCounter: index.nextCounter + 1,\n      // Preserve the rolling auto slot — on-demand snapshots never touch it.\n      ...(index.auto ? { auto: index.auto } : {}),\n    }\n    const toDelete = this.applyRetention(newIndex)\n    await this.writeIndex(vault.name, newIndex, indexVersion)\n\n    for (const k of toDelete) {\n      await this.store.deleteBundle(k)\n    }\n\n    return meta\n  }\n\n  /**\n   * Rolling auto-snapshot. Overwrites the single fixed `<vault>__auto` key and\n   * stores its meta in `index.auto`, separate from the immutable `snapshots`\n   * pool — retention never prunes it. Used by the cadence scheduler.\n   */\n  async autoSnapshot(\n    vault: Vault,\n    by: string,\n    opts?: { label?: string; note?: string },\n  ): Promise<SnapshotMeta> {\n    const bytes = await writeNoydbBundle(vault, {})\n    const { index, indexVersion } = await this.readIndex(vault.name)\n    const key = this.autoKey(vault.name)\n\n    // Unconditional overwrite of the rolling slot.\n    await this.store.writeBundle(key, bytes, null)\n\n    const meta: SnapshotMeta = {\n      version: key,\n      label: opts?.label ?? 'auto',\n      ...(opts?.note !== undefined ? { note: opts.note } : {}),\n      exportedAt: new Date().toISOString(),\n      exportedBy: by,\n      size: bytes.length,\n      integrity: 'verified',\n      auto: true,\n    }\n\n    index.auto = meta\n    await this.writeIndex(vault.name, index, indexVersion)\n    return meta\n  }\n\n  async listSnapshots(vaultId: string): Promise<SnapshotMeta[]> {\n    const { index } = await this.readIndex(vaultId)\n    const immutable = [...index.snapshots].reverse()\n    return index.auto ? [index.auto, ...immutable] : immutable\n  }\n\n  async restoreSnapshot(vault: Vault, version: string): Promise<void> {\n    if (!version.startsWith(`${vault.name}__`)) throw new SnapshotNotFoundError(version)\n    const result = await this.store.readBundle(version)\n    if (!result) throw new SnapshotNotFoundError(version)\n    const { dumpJson } = await readNoydbBundle(result.bytes)\n    await vault.load(dumpJson)\n  }\n\n  /**\n   * Applies the configured retention policy to `index`, mutating `index.snapshots`\n   * in place and returning the blob keys that should be deleted from the store.\n   * Called by `snapshot()` before the index is written.\n   *\n   * @internal — public for direct testing only\n   */\n  applyRetention(index: SnapshotIndex): string[] {\n    const prune = this.retention.prune ?? true\n    if (!prune) return []\n\n    const toDelete: string[] = []\n    let remaining = index.snapshots.slice()\n\n    if (this.retention.keepLast !== undefined && remaining.length > this.retention.keepLast) {\n      const excess = remaining.splice(0, remaining.length - this.retention.keepLast)\n      toDelete.push(...excess.map(m => m.version))\n    }\n\n    if (this.retention.maxAgeDays !== undefined) {\n      const cutoffMs = this.retention.maxAgeDays * 86_400_000\n      const now = Date.now()\n      const fresh = remaining.filter(m => now - new Date(m.exportedAt).getTime() <= cutoffMs)\n      toDelete.push(...remaining.filter(m => !fresh.includes(m)).map(m => m.version))\n      remaining = fresh\n    }\n\n    index.snapshots = remaining\n    return toDelete\n  }\n}\n","import { SnapshotEngine } from './engine.js'\nimport type { SnapshotStrategy, RetentionPolicy } from './strategy.js'\nimport type { SnapshotPolicy } from './policy.js'\nimport type { NoydbBundleStore } from '../types.js'\nimport type { Vault } from '../vault.js'\n\nexport interface WithSnapshotsOptions {\n  /** Bundle store where snapshot blobs and the sidecar index are written. */\n  store: NoydbBundleStore\n  /**\n   * Declarative retention policy. Enforced eagerly after each on-demand `snapshot()`.\n   * Defaults to no retention (all on-demand snapshots kept forever). Never affects\n   * the rolling auto-snapshot.\n   */\n  retention?: RetentionPolicy\n  /**\n   * Automatic-snapshot cadence. Default `mode:'manual'` ⇒ no timers; snapshots\n   * stay on-demand. Set `mode:'debounce'`/`'interval'` to enable auto-snapshots\n   * to the rolling `<vault>__auto` key.\n   */\n  snapshotPolicy?: SnapshotPolicy\n}\n\nexport function withSnapshots(opts: WithSnapshotsOptions): SnapshotStrategy {\n  const engine = new SnapshotEngine(opts.store, opts.retention ?? {})\n  return {\n    snapshot(vault, by, snapOpts) {\n      return engine.snapshot(vault as Vault, by, snapOpts)\n    },\n    listSnapshots(vaultId) {\n      return engine.listSnapshots(vaultId)\n    },\n    restoreSnapshot(vault, version) {\n      return engine.restoreSnapshot(vault as Vault, version)\n    },\n    autoSnapshot(vault, by, snapOpts) {\n      return engine.autoSnapshot(vault as Vault, by, snapOpts)\n    },\n    ...(opts.snapshotPolicy ? { policy: opts.snapshotPolicy } : {}),\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAMO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YACmB,OACA,WACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAGX,SAAS,WAA2B;AAC1C,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEQ,QAAQ,WAAmB,GAAmB;AACpD,WAAO,GAAG,SAAS,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,EAC5D;AAAA,EAEQ,QAAQ,WAA2B;AACzC,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEA,MAAc,UACZ,WACgE;AAChE,UAAM,SAAS,MAAM,KAAK,MAAM,WAAW,KAAK,SAAS,SAAS,CAAC;AACnE,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,KAAK;AACnF,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,OAAO,KAAK;AAClD,WAAO,EAAE,OAAO,KAAK,MAAM,IAAI,GAAoB,cAAc,OAAO,QAAQ;AAAA,EAClF;AAAA,EAEA,MAAc,WACZ,WACA,OACA,iBACe;AACf,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC;AAC5D,UAAM,KAAK,MAAM,YAAY,KAAK,SAAS,SAAS,GAAG,OAAO,eAAe;AAAA,EAC/E;AAAA,EAEA,MAAM,SACJ,OACA,IACA,MACuB;AACvB,UAAM,QAAQ,MAAM,iBAAiB,OAAO,CAAC,CAAC;AAC9C,UAAM,EAAE,OAAO,aAAa,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI;AAC/D,UAAM,MAAM,KAAK,QAAQ,MAAM,MAAM,MAAM,WAAW;AAMtD,UAAM,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI;AAE7C,UAAM,OAAqB;AAAA,MACzB,SAAS;AAAA,MACT,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MACzD,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACtD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,YAAY;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb;AAEA,UAAM,WAA0B;AAAA,MAC9B,WAAW,CAAC,GAAG,MAAM,WAAW,IAAI;AAAA,MACpC,aAAa,MAAM,cAAc;AAAA;AAAA,MAEjC,GAAI,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,IAC3C;AACA,UAAM,WAAW,KAAK,eAAe,QAAQ;AAC7C,UAAM,KAAK,WAAW,MAAM,MAAM,UAAU,YAAY;AAExD,eAAW,KAAK,UAAU;AACxB,YAAM,KAAK,MAAM,aAAa,CAAC;AAAA,IACjC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aACJ,OACA,IACA,MACuB;AACvB,UAAM,QAAQ,MAAM,iBAAiB,OAAO,CAAC,CAAC;AAC9C,UAAM,EAAE,OAAO,aAAa,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI;AAC/D,UAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;AAGnC,UAAM,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI;AAE7C,UAAM,OAAqB;AAAA,MACzB,SAAS;AAAA,MACT,OAAO,MAAM,SAAS;AAAA,MACtB,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACtD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,YAAY;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX,MAAM;AAAA,IACR;AAEA,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,MAAM,MAAM,OAAO,YAAY;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,SAA0C;AAC5D,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,UAAU,OAAO;AAC9C,UAAM,YAAY,CAAC,GAAG,MAAM,SAAS,EAAE,QAAQ;AAC/C,WAAO,MAAM,OAAO,CAAC,MAAM,MAAM,GAAG,SAAS,IAAI;AAAA,EACnD;AAAA,EAEA,MAAM,gBAAgB,OAAc,SAAgC;AAClE,QAAI,CAAC,QAAQ,WAAW,GAAG,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,sBAAsB,OAAO;AACnF,UAAM,SAAS,MAAM,KAAK,MAAM,WAAW,OAAO;AAClD,QAAI,CAAC,OAAQ,OAAM,IAAI,sBAAsB,OAAO;AACpD,UAAM,EAAE,SAAS,IAAI,MAAM,gBAAgB,OAAO,KAAK;AACvD,UAAM,MAAM,KAAK,QAAQ;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,eAAe,OAAgC;AAC7C,UAAM,QAAQ,KAAK,UAAU,SAAS;AACtC,QAAI,CAAC,MAAO,QAAO,CAAC;AAEpB,UAAM,WAAqB,CAAC;AAC5B,QAAI,YAAY,MAAM,UAAU,MAAM;AAEtC,QAAI,KAAK,UAAU,aAAa,UAAa,UAAU,SAAS,KAAK,UAAU,UAAU;AACvF,YAAM,SAAS,UAAU,OAAO,GAAG,UAAU,SAAS,KAAK,UAAU,QAAQ;AAC7E,eAAS,KAAK,GAAG,OAAO,IAAI,OAAK,EAAE,OAAO,CAAC;AAAA,IAC7C;AAEA,QAAI,KAAK,UAAU,eAAe,QAAW;AAC3C,YAAM,WAAW,KAAK,UAAU,aAAa;AAC7C,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,QAAQ,UAAU,OAAO,OAAK,MAAM,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ,KAAK,QAAQ;AACtF,eAAS,KAAK,GAAG,UAAU,OAAO,OAAK,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,OAAK,EAAE,OAAO,CAAC;AAC9E,kBAAY;AAAA,IACd;AAEA,UAAM,YAAY;AAClB,WAAO;AAAA,EACT;AACF;;;ACzIO,SAAS,cAAc,MAA8C;AAC1E,QAAM,SAAS,IAAI,eAAe,KAAK,OAAO,KAAK,aAAa,CAAC,CAAC;AAClE,SAAO;AAAA,IACL,SAAS,OAAO,IAAI,UAAU;AAC5B,aAAO,OAAO,SAAS,OAAgB,IAAI,QAAQ;AAAA,IACrD;AAAA,IACA,cAAc,SAAS;AACrB,aAAO,OAAO,cAAc,OAAO;AAAA,IACrC;AAAA,IACA,gBAAgB,OAAO,SAAS;AAC9B,aAAO,OAAO,gBAAgB,OAAgB,OAAO;AAAA,IACvD;AAAA,IACA,aAAa,OAAO,IAAI,UAAU;AAChC,aAAO,OAAO,aAAa,OAAgB,IAAI,QAAQ;AAAA,IACzD;AAAA,IACA,GAAI,KAAK,iBAAiB,EAAE,QAAQ,KAAK,eAAe,IAAI,CAAC;AAAA,EAC/D;AACF;","names":[]}

package/dist/{stale-PAGCS4K5.js → stale-J3TUF5C5.js}

@@ -3,11 +3,12 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-BFI3RS42.js";
+} from "./chunk-33EQCZXE.js";
+import "./chunk-PZ5AY32C.js";
 export {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-PAGCS4K5.js.map
+//# sourceMappingURL=stale-J3TUF5C5.js.map

package/dist/stale-J3TUF5C5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/store/index.d.ts

@@ -1,10 +1,12 @@
-import { aO as NoydbStore, cP as NoydbBundleStore } from '../types-D9eB0Rvh.js';
-export { bC as BUNDLE_STORE_POLICY, ck as INDEXED_STORE_POLICY, d6 as PullMode, d8 as PullPolicy, da as PushMode, dc as PushPolicy, dP as SyncPolicy, dQ as SyncScheduler, dR as SyncSchedulerStatus } from '../types-D9eB0Rvh.js';
-export { aA as StoreCapabilityError } from '../index-BF1B2HB9.js';
-import '../lazy-builder-Rpd-V3jP.js';
-import '../predicate-Dnu81tsS.js';
-import '../strategy-DSTrsZ8t.js';
+import { aW as NoydbStore, aw as NoydbBundleStore } from '../index-DHn9lEP0.js';
+export { bL as BUNDLE_STORE_POLICY, cJ as INDEXED_STORE_POLICY, dF as PullMode, dH as PullPolicy, dJ as PushMode, dL as PushPolicy, ey as SyncPolicy, ez as SyncScheduler, eA as SyncSchedulerStatus } from '../index-DHn9lEP0.js';
+export { aC as StoreCapabilityError } from '../errors-BAWO5Z5a.js';
+import '../lazy-builder-ChSqcF5t.js';
+import '../predicate-BmhBSPCH.js';
+import '../strategy-8QGs5KQE.js';
 import '../strategy-BSxFXGzb.js';
+import '../index-BMmajblo.js';
+import '../index-Ddm8D3Oo.js';
 import '@noy-db/attestation';
 
 interface WrapBundleStoreOptions {
@@ -278,6 +280,13 @@ interface RoutedNoydbStore extends NoydbStore {
     resume(route: OverrideTarget): Promise<number>;
     /** Snapshot the current override/suspend state for diagnostics. */
     routeStatus(): RouteStatus;
+    /**
+     * Resolve the physical backend a vault id maps to via the geographic
+     * `vaultRoutes` prefix routing (collection-independent), falling back to
+     * the `default` store. Used by the federation data-residency guard (#271)
+     * to read the placement backend's `capabilities.region`.
+     */
+    resolveBackend(vaultId: string): NoydbStore;
 }
 /**
  * Create a store multiplexer that dispatches operations to different backends

package/dist/store/index.js

@@ -9,7 +9,7 @@ import {
   withRetry,
   wrapBundleStore,
   wrapStore
-} from "../chunk-2XLVPKXG.js";
+} from "../chunk-G7ALNCQH.js";
 import {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
@@ -17,7 +17,8 @@ import {
 } from "../chunk-2QR2PQTT.js";
 import {
   StoreCapabilityError
-} from "../chunk-YDLAFP36.js";
+} from "../chunk-JZ5DS4DP.js";
+import "../chunk-PZ5AY32C.js";
 export {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,