@noy-db/hub 0.3.0-pre.10 → 0.3.0-pre.11

package/dist/on/index.d.ts

@@ -1,4 +0,0 @@
-export { fO as EnrollAuthenticatorOptions, hF as PaperRecoveryEntry, hM as Permissions, cY as Role, ja as SlotRewrapContext, c8 as UnlockedKeyring, l1 as mintPaperRecoveryEntry } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/overlay-views/index.d.ts

@@ -1,97 +0,0 @@
-export { w as withOverlayedView } from '../with-overlayed-view-m4FaXXTO.js';
-import { bM as OverlayedViewStrategy, bN as Collection } from '../index-DjWbxsjb.js';
-export { bO as OverlayBaseIsVirtualError, bP as OverlayCollectionUnavailableError, bQ as OverlayFieldMergeMode, bR as OverlayFieldMergeRule, bS as OverlayIdMismatchError, bT as OverlayNameCollisionError, bU as OverlayedViewRegistry, bV as OverlayedViewStrategyHandle } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Virtual-collection proxy returned by `vault.collection(overlayName)`
- * when `overlayName` is a registered `withOverlayedView`.
- *
- * Implements the core `Collection<T>`-shaped read/write surface with
- * merge-on-read semantics:
- *   - `get(id)`: overlay row wins iff `overlay[shadowField] === shadowValue`;
- *     when `spec.mergeMode` is set, an intermediate status may instead pull
- *     a declared subset of fields from the overlay over the base
- *   - `list()` / `.query()`: union of ids, per-id merge applied
- *   - `put(record)` / `put(id, record)`: routes to overlay; id derived
- *     via the base MV's `rowKey` (validated on the two-arg form)
- *   - `delete(id)`: removes the overlay row only; base stays
- *
- * Reactive APIs (`live`, `subscribe`, `query().live()`) are out of
- * scope for this release and surface as "not yet implemented" — wired in a
- * future sub-issue.
- */
-declare class OverlayedCollection<T extends Record<string, unknown> = any> {
-    private readonly spec;
-    private readonly baseCollection;
-    private readonly overlayCollection;
-    private readonly baseRowKey;
-    constructor(spec: OverlayedViewStrategy, baseCollection: Collection<T>, overlayCollection: Collection<T>, baseRowKey: ((row: Record<string, unknown>) => string) | undefined);
-    /**
-     * Convenience accessors for advanced callers that need to bypass the
-     * virtual layer (bulk imports, direct overlay queries). Mirrors the
-     * spec's "direct writes to the underlying overlay collection skip
-     * the validation" escape hatch.
-     */
-    readonly overlay: {
-        rowKey: (row: Record<string, unknown>) => string;
-    };
-    /** Get the merged row by id. */
-    get(id: string): Promise<T | null>;
-    /** List union of base + overlay ids, applying the merge per row. */
-    list(): Promise<T[]>;
-    /**
-     * Write to the overlay. Two forms:
-     * - `put(record)`: id is derived via the base MV's `rowKey(record)`.
-     *   Throws if the base isn't an MV.
-     * - `put(id, record)`: validates `id === rowKey(record)`; throws
-     *   `OverlayIdMismatchError` on mismatch.
-     */
-    put(idOrRecord: string | T, maybeRecord?: T): Promise<void>;
-    /**
-     * Remove the overlay row only. Idempotent (no-op on absent).
-     * The base row is untouched — if a base row exists for `id`,
-     * subsequent reads return it.
-     */
-    delete(id: string): Promise<void>;
-    /**
-     * Merge a single id's overlay + base rows into the visible row.
-     *
-     * Priority (first match wins):
-     *  1. Binary shadow win — overlay present AND
-     *     `overlay[shadowField] === shadowValue` → return the overlay row
-     *     entirely. This stays FIRST so the original binary behaviour is
-     *     unchanged whether or not `mergeMode` is configured.
-     *  2. Field-level merge — overlay present, `mergeMode` configured,
-     *     and a rule whose `whenStatus` equals `overlay[shadowField]`.
-     *     The matched rule pulls its `overlayFields` (those present on
-     *     the overlay row) on top of the base row. With no base row, the
-     *     overlay row is returned as-is.
-     *  3. Fallback — return the base row (possibly `null`). An
-     *     overlay-only row that qualifies under neither (1) nor (2) and
-     *     has no base is therefore NOT surfaced.
-     */
-    private mergeRows;
-    /** @throws — chainable Query<T> over a virtual collection is deferred. */
-    query(): never;
-    /** @throws — change-stream subscription over a virtual collection is deferred. */
-    subscribe(): never;
-    /** @throws — live query over a virtual collection is deferred. */
-    live(): never;
-    /** @throws — async iteration over a virtual collection is deferred. */
-    scan(): never;
-    /** @throws — lazy-mode query is not applicable to virtual collections. */
-    lazyQuery(): never;
-    /** @throws — bulk-atomic put is deferred to a future MV sub-issue. */
-    putManyAtomic(): never;
-    /** @throws — bulk delete is deferred to a future MV sub-issue. */
-    deleteMany(): never;
-    /** @throws — `.first()` over a virtual collection is deferred. */
-    first(): never;
-    /** @throws — `.count()` over a virtual collection is deferred. */
-    count(): never;
-}
-
-export { OverlayedCollection, OverlayedViewStrategy };

package/dist/periods/index.d.ts

@@ -1,19 +0,0 @@
-import { aU as PeriodsStrategy } from '../index-DjWbxsjb.js';
-export { aV as CarryForwardContext, aW as ClosePeriodOptions, aX as OpenPeriodOptions, aY as PERIODS_COLLECTION, aZ as PERIOD_ARCHIVES_COLLECTION, a_ as PERIOD_FREEZES_COLLECTION, a$ as PERIOD_TARGET_PURGES_COLLECTION, b0 as PeriodArchiveRecord, b1 as PeriodFreezeRecord, b2 as PeriodRecord, b3 as PeriodTargetPurgeRecord, b4 as ReadOnlyCollection, b5 as TargetPurgeCount, b6 as appendPeriodLedgerEntry, b7 as assertTsWritable, b8 as chainAnchor, b9 as loadPeriods, ba as periodExclusiveUpperBound, bb as validatePeriodName } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active periods strategy factory. Only reachable through the
- * `@noy-db/hub/periods` subpath.
- */
-
-/**
- * Build the default periods strategy. Pass into
- * `createNoydb({ periodsStrategy: withPeriods() })` to enable
- * `vault.closePeriod()` / `vault.openPeriod()` / write-guards.
- */
-declare function withPeriods(): PeriodsStrategy;
-
-export { PeriodsStrategy, withPeriods };

package/dist/pod/index.d.ts

@@ -1,62 +0,0 @@
-export { C as COMPRESSION_BROTLI, b as COMPRESSION_GZIP, c as COMPRESSION_NONE, d as CompressionAlgo, F as FLAG_COMPRESSED, e as FLAG_HAS_INTEGRITY_HASH, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, l as encodeBundleHeader, m as readNoydbBundle, n as readNoydbBundleHeader, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, v as validateBundleHeader, p as writeNoydbBundle, w as writePod } from '../bundle-D6GxiUfq.js';
-export { g as generateULID, i as isULID } from '../ulid-DRH25k3y.js';
-import { c_ as NoydbStore, bq as NoydbPodStore } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-interface WrapPodStoreOptions {
-    /**
-     * When `true` (default), every `put()` and `delete()` flushes the full
-     * vault snapshot to the bundle backend. Set to `false` for bulk operations
-     * and call `store.flush(vaultId)` manually.
-     */
-    autoFlush?: boolean;
-}
-interface WrappedPodNoydbStore extends NoydbStore {
-    /** Manually flush the in-memory snapshot to the bundle backend. */
-    flush(vaultId: string): Promise<void>;
-    /**
-     * Run a batch of mutations without flushing until the callback completes.
-     * A single flush is performed at the end.
-     */
-    batch(vaultId: string, fn: () => Promise<void>): Promise<void>;
-}
-/**
- * Convert a `NoydbPodStore` (blob-oriented read/write with OCC) into the
- * standard six-method `NoydbStore` interface expected by `createNoydb({ store })`.
- *
- * Bundle stores operate on the entire vault as a single serialised unit —
- * ideal for backends like Google Drive, WebDAV, or iCloud Drive that work
- * best with whole-file I/O rather than per-record KV operations.
- *
- * ## Optimistic concurrency
- *
- * The wrapper tracks the `version` token from the last `readBundle` and
- * passes it as `expectedVersion` on every flush. On
- * `PodVersionConflictError`, it re-reads, merges the remote snapshot
- * (last-write-wins per record key), and retries (max 3 attempts).
- *
- * ## Flush modes
- *
- * By default, flushes on every mutation (O(vault size) per write). Options:
- * - `autoFlush: false` + explicit `store.flush(vaultId)` calls
- * - `store.batch(vaultId, async () => { ... })` — defers flush until end
- * - Pair with `syncPolicy: { push: { mode: 'debounce' } }` from
- */
-declare function wrapPodStore(bundle: NoydbPodStore, options?: WrapPodStoreOptions): WrappedPodNoydbStore;
-/**
- * Type-safe factory helper for `NoydbPodStore` implementations,
- * analogous to `createStore` for KV stores.
- */
-declare function createPodStore<TOptions>(factory: (options: TOptions) => NoydbPodStore): (options: TOptions) => NoydbPodStore;
-/** @deprecated Use wrapPodStore. */
-declare const wrapBundleStore: typeof wrapPodStore;
-/** @deprecated Use createPodStore. */
-declare const createBundleStore: typeof createPodStore;
-/** @deprecated Use WrappedPodNoydbStore. */
-type WrappedBundleNoydbStore = WrappedPodNoydbStore;
-/** @deprecated Use WrapPodStoreOptions. */
-type WrapBundleStoreOptions = WrapPodStoreOptions;
-
-export { type WrapBundleStoreOptions, type WrapPodStoreOptions, type WrappedBundleNoydbStore, type WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore };

package/dist/policy-WGNAG5H6.js

@@ -1,41 +0,0 @@
-import {
-  DEFAULT_FRESHNESS_MS,
-  PERSONAL_POLICY,
-  STRICT_POLICY,
-  checkGate,
-  createNoydbPolicy,
-  describeGate,
-  mergePolicy
-} from "./chunk-2OZXVKVP.js";
-import {
-  META_COLLECTION,
-  POLICY_RECORD_ID,
-  loadVaultPolicy,
-  saveVaultPolicy
-} from "./chunk-G4JYND6L.js";
-import "./chunk-YN5IAHN6.js";
-import {
-  ManagedRecoveryNotEnrolledError,
-  PolicyDeniedError,
-  RecoveryNotEnrolledError,
-  RecoveryProfileNotImplementedError
-} from "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DEFAULT_FRESHNESS_MS,
-  META_COLLECTION,
-  ManagedRecoveryNotEnrolledError,
-  PERSONAL_POLICY,
-  POLICY_RECORD_ID,
-  PolicyDeniedError,
-  RecoveryNotEnrolledError,
-  RecoveryProfileNotImplementedError,
-  STRICT_POLICY,
-  checkGate,
-  createNoydbPolicy,
-  describeGate,
-  loadVaultPolicy,
-  mergePolicy,
-  saveVaultPolicy
-};
-//# sourceMappingURL=policy-WGNAG5H6.js.map

package/dist/portability/index.d.ts

@@ -1,19 +0,0 @@
-import { bX as PortabilityStrategy } from '../index-DjWbxsjb.js';
-export { bY as ApproveWithdrawalOptions, bZ as ExportAccessibleOptions, b_ as NO_PORTABILITY, b$ as PortabilityNotEnabledError, c0 as RejectWithdrawalOptions, c1 as RequestWithdrawalOptions, c2 as RequestWithdrawalResult, c3 as WithdrawAccessibleOptions, c4 as WithdrawResult, c5 as WithdrawalRequest, c6 as WithdrawalRequestStatus } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Enable the portability capability.
- * Pass to `createNoydb({ portabilityStrategy: withPortability() })` to make a
- * vault's `user.exportMyAccessibleData` / `user.unilateralWithdrawal` /
- * `user.requestWithdrawal` / `user.listWithdrawalRequests` /
- * `user.approveWithdrawal` / `user.rejectWithdrawal` methods live. The
- * export/withdraw/request engines are dynamically imported here, so they stay
- * reachable only via opt-in.
- */
-
-declare function withPortability(): PortabilityStrategy;
-
-export { PortabilityStrategy, withPortability };

package/dist/post-register-CWKBQRC7.js

@@ -1,55 +0,0 @@
-import {
-  hashFields
-} from "./chunk-VQRAIPYF.js";
-import {
-  SatelliteConfigError
-} from "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-
-// src/with-shape/satellites/marker.ts
-async function ensureSatelliteMarker(store, vaultName, spec, dek) {
-  const next = { base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined };
-  const { loadPersistedSchema } = await import("./storage-ADNP2UWI.js");
-  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
-  const prior = persisted?.satellite;
-  if (prior) {
-    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {
-      throw new SatelliteConfigError(
-        `R-S9: satellite "${spec.satellite}" re-declared divergently from its persisted pairing marker (persisted base="${prior.base}" fieldsHash=${prior.fieldsHash}; declared base="${next.base}" fieldsHash=${next.fieldsHash}). Evolve the marker deliberately, don't redeclare.`
-      );
-    }
-    return;
-  }
-  const { persistSatelliteMarker } = await import("./register-SBIX7TVV.js");
-  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
-}
-
-// src/with-shape/satellites/post-register.ts
-async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry) {
-  try {
-    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite));
-  } catch (err) {
-    registry.poison(spec.satellite, err.message);
-    return;
-  }
-  if (baseSchema !== void 0) {
-    try {
-      const { derivePersistedSchema } = await import("./derive-BME7HDWO.js");
-      const envelope = await derivePersistedSchema(baseSchema);
-      const properties = envelope.jsonSchema?.["properties"];
-      const baseFields = Object.keys(properties ?? {});
-      const overlap = spec.fields.filter((f) => baseFields.includes(f));
-      if (overlap.length > 0) {
-        registry.poison(
-          spec.satellite,
-          `R-S1: satellite "${spec.satellite}" fields overlap the base schema: ${overlap.join(", ")} \u2014 routing must be unambiguous.`
-        );
-      }
-    } catch {
-    }
-  }
-}
-export {
-  postRegister
-};
-//# sourceMappingURL=post-register-CWKBQRC7.js.map

package/dist/public-envelope-EJLVIFX7.js

@@ -1,32 +0,0 @@
-import {
-  DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
-  PUBLIC_ENVELOPE_FIELDS,
-  resolveSchema
-} from "./chunk-WXSYDNBT.js";
-import {
-  PUBLIC_ENVELOPE_RECORD_ID,
-  isPublicEnvelope,
-  loadPublicEnvelope,
-  pickLocale,
-  readPublicEnvelope,
-  resolveLocale,
-  savePublicEnvelope,
-  validatePublicEnvelopeInput
-} from "./chunk-OXCSVM3B.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
-  PUBLIC_ENVELOPE_FIELDS,
-  PUBLIC_ENVELOPE_RECORD_ID,
-  isPublicEnvelope,
-  loadPublicEnvelope,
-  pickLocale,
-  readPublicEnvelope,
-  resolveLocale,
-  resolveSchema,
-  savePublicEnvelope,
-  validatePublicEnvelopeInput
-};
-//# sourceMappingURL=public-envelope-EJLVIFX7.js.map

package/dist/query/index.d.ts

@@ -1,4 +0,0 @@
-export { aa as AggregateResult, ab as AggregateSpec, ac as Aggregation, ad as AggregationUpstream, f0 as Clause, U as CollectionIndexes, lR as CrossJoinClause, ff as CrossJoinSourceUnknownError, fg as CrossJoinTooLargeError, fl as DEFAULT_CROSS_JOIN_MAX_ROWS, fm as DEFAULT_JOIN_MAX_ROWS, fp as DanglingReferenceError, g1 as FieldClause, g4 as FieldNotQueryableError, g7 as FilterClause, ae as GROUPBY_MAX_CARDINALITY, af as GROUPBY_WARN_CARDINALITY, ge as GroupCardinalityError, gf as GroupClause, ag as GroupedAggregation, ah as GroupedQuery, ai as GroupedQueryN, aj as GroupedRow, ak as GroupedRowN, W as HashIndex, Y as IndexDef, gn as IndexRequiredError, go as IndexWriteFailureError, gu as JoinContext, gv as JoinLeg, gw as JoinStrategy, gx as JoinTooLargeError, gy as JoinableSource, al as LiveAggregation, gR as LiveQuery, gS as LiveUpstream, hz as Operator, hA as OrderBy, ef as Query, i9 as QueryPlan, ia as QuerySource, am as Reducer, an as ReducerBuilder, ao as ReducerOptions, iH as ScanBuilder, iI as ScanPageProvider, kb as applyJoins, ap as avg, aq as buildLiveAggregation, kh as buildLiveQuery, ar as count, ky as evaluateClause, kA as evaluateFieldClause, kC as executePlan, as as groupAndReduce, at as max, au as min, av as moneyMax, aw as moneyMin, ax as moneySum, l9 as readPath, ay as reduceRecords, az as reducerBuilder, aA as resetGroupByWarnings, lg as resetJoinWarnings, aB as sum } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/register-SBIX7TVV.js

@@ -1,23 +0,0 @@
-import {
-  persistClassifiedMarker,
-  persistSatelliteMarker,
-  persistSchemaIfNeeded
-} from "./chunk-WBJIQSLL.js";
-import "./chunk-5I35DOHK.js";
-import "./chunk-T7WSLRAU.js";
-import "./chunk-MCHVVJIA.js";
-import "./chunk-QA2KUPCP.js";
-import "./chunk-2OV5NVE7.js";
-import "./chunk-VEPTFUJY.js";
-import "./chunk-HYR4WZZ3.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  persistClassifiedMarker,
-  persistSatelliteMarker,
-  persistSchemaIfNeeded
-};
-//# sourceMappingURL=register-SBIX7TVV.js.map

package/dist/registry-3EQG6OOE.js

@@ -1,18 +0,0 @@
-import {
-  DerivationRegistry
-} from "./chunk-XUBPSPKD.js";
-import "./chunk-FUOE7UUV.js";
-import "./chunk-MCHVVJIA.js";
-import "./chunk-QA2KUPCP.js";
-import "./chunk-2OV5NVE7.js";
-import "./chunk-VEPTFUJY.js";
-import "./chunk-HYR4WZZ3.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DerivationRegistry
-};
-//# sourceMappingURL=registry-3EQG6OOE.js.map

package/dist/registry-CA327ACV.js

@@ -1,9 +0,0 @@
-import {
-  OverlayedViewRegistry
-} from "./chunk-6P5XCKSD.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  OverlayedViewRegistry
-};
-//# sourceMappingURL=registry-CA327ACV.js.map

package/dist/registry-E7OXOTSV.js

@@ -1,19 +0,0 @@
-import {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-} from "./chunk-3QSIU3UT.js";
-import "./chunk-MCHVVJIA.js";
-import "./chunk-QA2KUPCP.js";
-import "./chunk-2OV5NVE7.js";
-import "./chunk-VEPTFUJY.js";
-import "./chunk-HYR4WZZ3.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-};
-//# sourceMappingURL=registry-E7OXOTSV.js.map

package/dist/request-withdrawal-KAH2AAXC.js

@@ -1,31 +0,0 @@
-import {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-} from "./chunk-WIGQB62E.js";
-import "./chunk-OBKWYKYC.js";
-import "./chunk-OT76OZL6.js";
-import "./chunk-QSFOZUYL.js";
-import "./chunk-OXCSVM3B.js";
-import "./chunk-MCHVVJIA.js";
-import "./chunk-QA2KUPCP.js";
-import "./chunk-2OV5NVE7.js";
-import "./chunk-VEPTFUJY.js";
-import "./chunk-HYR4WZZ3.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-};
-//# sourceMappingURL=request-withdrawal-KAH2AAXC.js.map

package/dist/reveal-R3JLHMUF.js

@@ -1,38 +0,0 @@
-import {
-  isTombstone
-} from "./chunk-QA2KUPCP.js";
-import {
-  dualReadSealedSlot
-} from "./chunk-VEPTFUJY.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import {
-  ClassifiedRevealError
-} from "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-
-// src/kernel/enclave/classify/reveal.ts
-async function revealSealedField(ctx, id, field) {
-  const env = await ctx.getEnvelope(id);
-  if (env === null || isTombstone(env, ctx.encrypted)) {
-    throw new ClassifiedRevealError(ctx.collection, field, `record "${id}" not found in "${ctx.collection}"`);
-  }
-  if (!ctx.encrypted) {
-    const record = JSON.parse(env._data || "{}");
-    if (!(field in record)) {
-      throw new ClassifiedRevealError(ctx.collection, field, `no stored value for "${field}"`);
-    }
-    return record[field];
-  }
-  const blob = env._sealed?.[field];
-  if (blob === void 0) {
-    throw new ClassifiedRevealError(ctx.collection, field, `no sealed value stored for "${field}"`);
-  }
-  const cek = await ctx.resolveCek(env);
-  const dek = await ctx.getDEK();
-  return JSON.parse(await dualReadSealedSlot(blob, field, ctx.collection, cek, dek));
-}
-export {
-  revealSealedField
-};
-//# sourceMappingURL=reveal-R3JLHMUF.js.map

package/dist/revoke-IXLOJ3IH.js

@@ -1,24 +0,0 @@
-import {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-} from "./chunk-GNMXXTMN.js";
-import "./chunk-PLS64NCS.js";
-import "./chunk-MCHVVJIA.js";
-import "./chunk-QA2KUPCP.js";
-import "./chunk-2OV5NVE7.js";
-import "./chunk-VEPTFUJY.js";
-import "./chunk-HYR4WZZ3.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-3OPY6MK2.js";
-import "./chunk-YN5IAHN6.js";
-import "./chunk-S7VFUQM2.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-};
-//# sourceMappingURL=revoke-IXLOJ3IH.js.map

package/dist/satellites/index.d.ts

@@ -1,4 +0,0 @@
-export { m2 as JoinedHandle, m3 as PairingMarker, m4 as SatelliteConfigError, m5 as SatelliteSpec } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/sealed-record/index.d.ts

@@ -1,68 +0,0 @@
-import { df as SealedRecordStrategy, dg as SealedCekDeliveryEnvelope } from '../index-DjWbxsjb.js';
-export { dh as NO_SEALED_RECORD, di as SealedCekBinding, dj as SealedRecordExpiredError, dk as SealedRecordMismatchError, dl as SealedRecordNotEnabledError } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Enable the sealed-record (grantor-side) capability.
- * Pass to `createNoydb({ sealedRecordStrategy: withSealedRecord() })` to make a
- * vault's `sealRecordToHost` / `revokeSealedRecord` / `rotateRecordCek` methods
- * live. The `record-keys` grantor engine is dynamically imported here, so it is
- * reached only via opt-in.
- */
-
-declare function withSealedRecord(): SealedRecordStrategy;
-
-/**
- * `@noy-db/hub/sealed-record` — host-side opener for record-scoped CEK
- * sealing.
- *
- * The **grantor** side (sealing a record's CEK to a host, revoking, and hard
- * rotation) lives on `Vault` (`vault.sealRecordToHost` /
- * `vault.revokeSealedRecord` / `vault.rotateRecordCek`) because it needs the
- * collection DEK. This subpath exposes the **recipient host** side:
- * {@link openSealedRecord} reconstructs a single record's plaintext from
- * (a) the sealed-CEK delivery envelope, (b) the record's encrypted envelope
- * body, and (c) the host's own unsealer — and **nothing else**. The host never
- * touches a vault DEK and can decrypt exactly the one bound record.
- *
- * @module
- */
-
-/**
- * Host-side: decrypt a single record whose CEK was sealed to this host by a
- * vault grantor via `vault.sealRecordToHost()`.
- *
- * Verification order (security-critical — do NOT reorder past the unseal):
- *  1. **Fast-path expiry** — reject on the delivery envelope's clear-text
- *     `expiresAt` before doing any (potentially expensive) unseal work. This is
- *     a hint only.
- *  2. **Unseal** the `payload` with the host's `recipientSealer.unseal` →
- *     parse the {@link SealedCekBinding}.
- *  3. **Binding match** — the binding's `{collection, id}` MUST equal the
- *     expected pair, else {@link SealedRecordMismatchError}. This is the
- *     host-denial boundary (a CEK sealed for record A cannot open record B).
- *  4. **Authoritative expiry** — re-check `binding.expiresAt` (the copy that
- *     cannot be forged by editing the delivery envelope), else
- *     {@link SealedRecordExpiredError}.
- *  5. **Decrypt** the record body under the unsealed CEK. A CEK from a
- *     PRE-rotation seal applied to a POST-rotation live envelope passes (1)-(4)
- *     but fails the AES-GCM auth tag → `TamperedError` from `decrypt`.
- *
- * @param sealedCekEnvelope The `SealedCekDeliveryEnvelope` written by the grantor.
- * @param recordEnvelope    The record's `{ _iv, _data }` (the encrypted body).
- * @param recipientSealer   The host's unsealer (`{ unseal(bytes) }`) — e.g. a
- *                          KMS-backed sealer or `MemoryRecipientSealer`.
- * @param expectedCollection Collection the caller believes `recordEnvelope` is in.
- * @param expectedId         Record id the caller believes `recordEnvelope` is.
- * @returns The decrypted record body as a JSON string.
- */
-declare function openSealedRecord(sealedCekEnvelope: SealedCekDeliveryEnvelope, recordEnvelope: {
-    readonly _iv: string;
-    readonly _data: string;
-}, recipientSealer: {
-    unseal(bytes: Uint8Array): Promise<Uint8Array>;
-}, expectedCollection: string, expectedId: string): Promise<string>;
-
-export { SealedCekDeliveryEnvelope, SealedRecordStrategy, openSealedRecord, withSealedRecord };

package/dist/session/index.d.ts

@@ -1,43 +0,0 @@
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from '../dev-unlock-Bmm2pgJ0.js';
-import { S as SessionStrategy } from '../index-DjWbxsjb.js';
-export { P as PolicyEnforcer, a as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, d as createEnforcer, v as validateSessionPolicy } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active session strategy — `withSession()` returns the real
- * implementation that wires `SessionPolicy` validation, the
- * `PolicyEnforcer`, and the global session-token registry into the
- * Noydb lifecycle.
- *
- * Consumers opt in by:
- *
- * ```ts
- * import { createNoydb } from '@noy-db/hub'
- * import { withSession } from '@noy-db/hub/session'
- *
- * const db = await createNoydb({
- *   store: ...,
- *   user: ...,
- *   sessionPolicy: { idleTimeoutMs: 15 * 60_000 },
- *   sessionStrategy: withSession(),
- * })
- * ```
- *
- * The factory delegates to the existing `session-policy.ts` and
- * `session.ts` modules. Splitting the import chain through this file
- * is what lets tsup tree-shake the ~495 LOC of policy + token code
- * out of the default bundle when no `withSession()` import is
- * present.
- *
- * Note: dev-unlock (`devUnlock`, `cancelDevUnlock`) is a separate
- * named import from `@noy-db/hub` and tree-shakes independently —
- * apps that don't import it never include it.
- *
- * @public
- */
-
-declare function withSession(): SessionStrategy;
-
-export { SessionStrategy, withSession };

package/dist/shadow/index.d.ts

@@ -1,14 +0,0 @@
-import { bn as ShadowStrategy } from '../index-DjWbxsjb.js';
-export { bo as CollectionFrame, bp as VaultFrame } from '../index-DjWbxsjb.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active shadow strategy — the only place `VaultFrame` is constructed.
- * Only reachable through `@noy-db/hub/shadow`.
- */
-
-declare function withShadow(): ShadowStrategy;
-
-export { ShadowStrategy, withShadow };