@noy-db/hub 0.3.0-pre.11 → 0.3.0-pre.13

package/dist/collection-facade-YE2O4J4O.js

@@ -1,39 +0,0 @@
-import {
-  buildPersistedIndexCallbacks,
-  buildRetrievalDocs,
-  embedOnWrite,
-  flushIndex,
-  hasIndexedBlobFields,
-  retrieve,
-  search,
-  similarTo,
-  warmIndex
-} from "./chunk-P5RY4ZWD.js";
-import "./chunk-AURFOK3D.js";
-import "./chunk-7VSGW5KJ.js";
-import "./chunk-ELNBMFOS.js";
-import "./chunk-BE7N3AXA.js";
-import "./chunk-ARSAMO24.js";
-import "./chunk-25NDNMQ7.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  buildPersistedIndexCallbacks,
-  buildRetrievalDocs,
-  embedOnWrite,
-  flushIndex,
-  hasIndexedBlobFields,
-  retrieve,
-  search,
-  similarTo,
-  warmIndex
-};
-//# sourceMappingURL=collection-facade-YE2O4J4O.js.map

package/dist/delegation-OPUU3R2E.js

@@ -1,25 +0,0 @@
-import {
-  DELEGATIONS_COLLECTION,
-  issueDelegation,
-  loadActiveDelegations,
-  revokeDelegation
-} from "./chunk-IDIV5NVH.js";
-import "./chunk-4R4Q64W5.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DELEGATIONS_COLLECTION,
-  issueDelegation,
-  loadActiveDelegations,
-  revokeDelegation
-};
-//# sourceMappingURL=delegation-OPUU3R2E.js.map

package/dist/derive-BGUHU663.js

@@ -1,21 +0,0 @@
-import {
-  derivePersistedSchema,
-  isZod4Schema,
-  isZodSchema
-} from "./chunk-QLLKLFE2.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  derivePersistedSchema,
-  isZod4Schema,
-  isZodSchema
-};
-//# sourceMappingURL=derive-BGUHU663.js.map

package/dist/executor-GTVSUUBX.js

@@ -1,25 +0,0 @@
-import {
-  MaterializedViewExecutor
-} from "./chunk-2JMMY7HZ.js";
-import "./chunk-DGH65E7Q.js";
-import "./chunk-3G4KMVUN.js";
-import "./chunk-IGJHJYM6.js";
-import "./chunk-IGJCYUT5.js";
-import "./chunk-ELNBMFOS.js";
-import "./chunk-BE7N3AXA.js";
-import "./chunk-ARSAMO24.js";
-import "./chunk-25NDNMQ7.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  MaterializedViewExecutor
-};
-//# sourceMappingURL=executor-GTVSUUBX.js.map

package/dist/executor-GZWMTOXB.js

@@ -1,9 +0,0 @@
-import {
-  GuardExecutor
-} from "./chunk-ZP5PL65C.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  GuardExecutor
-};
-//# sourceMappingURL=executor-GZWMTOXB.js.map

package/dist/executor-XXGS4S3K.js

@@ -1,9 +0,0 @@
-import {
-  DerivationExecutor
-} from "./chunk-YSXEFGND.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DerivationExecutor
-};
-//# sourceMappingURL=executor-XXGS4S3K.js.map

package/dist/export-accessible-BMULIOYB.js

@@ -1,23 +0,0 @@
-import {
-  buildAccessibleBundle,
-  exportAccessibleData,
-  resolveAccessibleCollections
-} from "./chunk-BCYQA5BK.js";
-import "./chunk-K62IUKOD.js";
-import "./chunk-5XIPOCQC.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  buildAccessibleBundle,
-  exportAccessibleData,
-  resolveAccessibleCollections
-};
-//# sourceMappingURL=export-accessible-BMULIOYB.js.map

package/dist/extract-partition-JUQTWDXR.js

@@ -1,36 +0,0 @@
-import {
-  extractPartition,
-  extractPartitionCore,
-  reKeyBlobs,
-  reKeyClosure,
-  reKeyLedger,
-  reKeySchemas,
-  sealDeks
-} from "./chunk-L2SNBIV7.js";
-import "./chunk-C7NTK5I3.js";
-import "./chunk-AOVDSIL3.js";
-import "./chunk-K62IUKOD.js";
-import "./chunk-5XIPOCQC.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-I7FD46FF.js";
-import "./chunk-25NDNMQ7.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  extractPartition,
-  extractPartitionCore,
-  reKeyBlobs,
-  reKeyClosure,
-  reKeyLedger,
-  reKeySchemas,
-  sealDeks
-};
-//# sourceMappingURL=extract-partition-JUQTWDXR.js.map

package/dist/find-XRGCNGNN.js

@@ -1,11 +0,0 @@
-import {
-  computeBidxTarget
-} from "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  computeBidxTarget
-};
-//# sourceMappingURL=find-XRGCNGNN.js.map

package/dist/issue-UB6AA5M6.js

@@ -1,19 +0,0 @@
-import {
-  issueAttestationCore
-} from "./chunk-RKRGDAS7.js";
-import "./chunk-D3EFFFOL.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  issueAttestationCore
-};
-//# sourceMappingURL=issue-UB6AA5M6.js.map

package/dist/liberate-YUN7W5QG.js

@@ -1,24 +0,0 @@
-import {
-  liberateVault
-} from "./chunk-PXWVF7MC.js";
-import "./chunk-7NS43EXZ.js";
-import "./chunk-BCYQA5BK.js";
-import "./chunk-KPGX66PM.js";
-import "./chunk-K62IUKOD.js";
-import "./chunk-5XIPOCQC.js";
-import "./chunk-5ZOSG3RJ.js";
-import "./chunk-4N5QFSNQ.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  liberateVault
-};
-//# sourceMappingURL=liberate-YUN7W5QG.js.map

package/dist/noydb-6JLBZU4U.js

@@ -1,67 +0,0 @@
-import {
-  Noydb,
-  createNoydb
-} from "./chunk-A2QF4JUE.js";
-import "./chunk-VYYM3MEN.js";
-import "./chunk-5JB73NMC.js";
-import "./chunk-DIRRS7WP.js";
-import "./chunk-AWB5JZW6.js";
-import "./chunk-7ITPJFGC.js";
-import "./chunk-Q3XSMOZM.js";
-import "./chunk-P5RY4ZWD.js";
-import "./chunk-QLLKLFE2.js";
-import "./chunk-GYGLAVCX.js";
-import "./chunk-BZO4WCJI.js";
-import "./chunk-AURFOK3D.js";
-import "./chunk-JOQ53DMI.js";
-import "./chunk-D26JB3LZ.js";
-import "./chunk-A2Y6YFVN.js";
-import "./chunk-XHV25KBM.js";
-import "./chunk-PR5LC5YX.js";
-import "./chunk-H6HM6CVR.js";
-import "./chunk-ODJWBC5I.js";
-import "./chunk-FXK4X4BL.js";
-import "./chunk-GHVIKOHT.js";
-import "./chunk-H44ZE4IE.js";
-import "./chunk-7QIXUSDQ.js";
-import "./chunk-DGH65E7Q.js";
-import "./chunk-H6CZSDWK.js";
-import "./chunk-QYPKGVT4.js";
-import "./chunk-3CNQ7FQ3.js";
-import "./chunk-KPZS5QAQ.js";
-import "./chunk-NO272T7Q.js";
-import "./chunk-IGJHJYM6.js";
-import "./chunk-IGJCYUT5.js";
-import "./chunk-KPGX66PM.js";
-import "./chunk-7VSGW5KJ.js";
-import "./chunk-ELNBMFOS.js";
-import "./chunk-BE7N3AXA.js";
-import "./chunk-ARSAMO24.js";
-import "./chunk-IP2QBAGS.js";
-import "./chunk-6QILBDZU.js";
-import "./chunk-VQNJ7UZL.js";
-import "./chunk-4R4Q64W5.js";
-import "./chunk-5ZOSG3RJ.js";
-import "./chunk-4N5QFSNQ.js";
-import "./chunk-WTUNZACT.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-OEAATWH5.js";
-import "./chunk-I7FD46FF.js";
-import "./chunk-25NDNMQ7.js";
-import "./chunk-DJ3VKYFA.js";
-import "./chunk-CIKY6I4W.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  Noydb,
-  createNoydb
-};
-//# sourceMappingURL=noydb-6JLBZU4U.js.map

package/dist/post-register-HAWO3O7O.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-shape/satellites/marker.ts","../src/with-shape/satellites/post-register.ts"],"sourcesContent":["import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport { SatelliteConfigError } from '../../kernel/errors.js'\nimport { hashFields } from './validate.js'\nimport type { PairingMarker, SatelliteSpec } from './types.js'\n\n/**\n * Persist-or-reconcile the pairing marker in `_schemas/<satellite>`.\n * First declaration writes { base, fieldsHash, joined }; later declarations\n * must match exactly or are refused (R-S9). Lazy imports keep the satellite\n * spine tree-shakeable (config-drift.ts pattern).\n */\nexport async function ensureSatelliteMarker(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec, dek: EnclaveKey,\n): Promise<void> {\n  const next: PairingMarker = { base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined }\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek)\n  const prior = persisted?.satellite\n  if (prior) {\n    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {\n      throw new SatelliteConfigError(\n        `R-S9: satellite \"${spec.satellite}\" re-declared divergently from its persisted pairing marker ` +\n        `(persisted base=\"${prior.base}\" fieldsHash=${prior.fieldsHash}; declared base=\"${next.base}\" fieldsHash=${next.fieldsHash}). ` +\n        `Evolve the marker deliberately, don't redeclare.`,\n      )\n    }\n    return\n  }\n  const { persistSatelliteMarker } = await import('../persisted-schemas/register.js')\n  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next })\n}\n","import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport type { SatelliteSpec } from './types.js'\nimport type { SatelliteRegistry } from './registry.js'\nimport { ensureSatelliteMarker } from './marker.js'\n\n/** Async post-registration: R-S9 marker reconcile + R-S1/R-S5 derivable-schema cross-check. Failures poison, never throw. */\nexport async function postRegister(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec,\n  getDEK: (collectionName: string) => Promise<EnclaveKey>,\n  baseSchema: unknown, registry: SatelliteRegistry,\n): Promise<void> {\n  try {\n    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite))\n  } catch (err) {\n    registry.poison(spec.satellite, (err as Error).message); return\n  }\n  if (baseSchema !== undefined) {\n    try {\n      const { derivePersistedSchema } = await import('../persisted-schemas/derive.js')\n      const envelope = await derivePersistedSchema(baseSchema)\n      const properties = (envelope.jsonSchema as Record<string, unknown> | null)?.['properties'] as Record<string, unknown> | undefined\n      const baseFields: string[] = Object.keys(properties ?? {})\n      const overlap = spec.fields.filter(f => baseFields.includes(f))\n      if (overlap.length > 0) {\n        registry.poison(spec.satellite,\n          `R-S1: satellite \"${spec.satellite}\" fields overlap the base schema: ${overlap.join(', ')} — routing must be unambiguous.`)\n      }\n    } catch { /* non-derivable validator → cross-check unavailable, by design (spec R-S5) */ }\n  }\n}\n"],"mappings":";;;;;;;;;AAYA,eAAsB,sBACpB,OAAmB,WAAmB,MAAqB,KAC5C;AACf,QAAM,OAAsB,EAAE,MAAM,KAAK,MAAM,YAAY,WAAW,KAAK,MAAM,GAAG,QAAQ,KAAK,OAAO;AACxG,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,WAAW,KAAK,WAAW,GAAG;AACjF,QAAM,QAAQ,WAAW;AACzB,MAAI,OAAO;AACT,QAAI,MAAM,SAAS,KAAK,QAAQ,MAAM,eAAe,KAAK,eAAe,MAAM,UAAU,WAAW,KAAK,UAAU,OAAO;AACxH,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,SAAS,gFACd,MAAM,IAAI,gBAAgB,MAAM,UAAU,oBAAoB,KAAK,IAAI,gBAAgB,KAAK,UAAU;AAAA,MAE5H;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,wBAAkC;AAClF,QAAM,uBAAuB,EAAE,OAAO,OAAO,WAAW,gBAAgB,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC7G;;;ACxBA,eAAsB,aACpB,OAAmB,WAAmB,MACtC,QACA,YAAqB,UACN;AACf,MAAI;AACF,UAAM,sBAAsB,OAAO,WAAW,MAAM,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAClF,SAAS,KAAK;AACZ,aAAS,OAAO,KAAK,WAAY,IAAc,OAAO;AAAG;AAAA,EAC3D;AACA,MAAI,eAAe,QAAW;AAC5B,QAAI;AACF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAgC;AAC/E,YAAM,WAAW,MAAM,sBAAsB,UAAU;AACvD,YAAM,aAAc,SAAS,aAAgD,YAAY;AACzF,YAAM,aAAuB,OAAO,KAAK,cAAc,CAAC,CAAC;AACzD,YAAM,UAAU,KAAK,OAAO,OAAO,OAAK,WAAW,SAAS,CAAC,CAAC;AAC9D,UAAI,QAAQ,SAAS,GAAG;AACtB,iBAAS;AAAA,UAAO,KAAK;AAAA,UACnB,oBAAoB,KAAK,SAAS,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAAA,QAAiC;AAAA,MAC9H;AAAA,IACF,QAAQ;AAAA,IAAiF;AAAA,EAC3F;AACF;","names":[]}

package/dist/register-VCKOBWKT.js

@@ -1,23 +0,0 @@
-import {
-  persistClassifiedMarker,
-  persistSatelliteMarker,
-  persistSchemaIfNeeded
-} from "./chunk-WGV4CUZT.js";
-import "./chunk-QLLKLFE2.js";
-import "./chunk-C7NTK5I3.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  persistClassifiedMarker,
-  persistSatelliteMarker,
-  persistSchemaIfNeeded
-};
-//# sourceMappingURL=register-VCKOBWKT.js.map

package/dist/registry-72UKJ2L4.js

@@ -1,9 +0,0 @@
-import {
-  OverlayedViewRegistry
-} from "./chunk-OFJ5GPNA.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  OverlayedViewRegistry
-};
-//# sourceMappingURL=registry-72UKJ2L4.js.map

package/dist/registry-BZFLJNEH.js

@@ -1,18 +0,0 @@
-import {
-  DerivationRegistry
-} from "./chunk-BEIRE5K4.js";
-import "./chunk-7QIXUSDQ.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DerivationRegistry
-};
-//# sourceMappingURL=registry-BZFLJNEH.js.map

package/dist/registry-YJEYSYI5.js

@@ -1,19 +0,0 @@
-import {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-} from "./chunk-3G4KMVUN.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-};
-//# sourceMappingURL=registry-YJEYSYI5.js.map

package/dist/request-withdrawal-6MJRMFHF.js

@@ -1,31 +0,0 @@
-import {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-} from "./chunk-SRVQHVNX.js";
-import "./chunk-7NS43EXZ.js";
-import "./chunk-BCYQA5BK.js";
-import "./chunk-K62IUKOD.js";
-import "./chunk-5XIPOCQC.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-};
-//# sourceMappingURL=request-withdrawal-6MJRMFHF.js.map

package/dist/reveal-BOY7XYFH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/kernel/enclave/classify/reveal.ts"],"sourcesContent":["/**\n * Single-point audited reveal, stage-2 rework (I6): decrypt ONE sealed slot\n * from the raw envelope — no full record view, no collection.get(), so no\n * spurious 'get' consent entry. Fail-closed gates (b)/(c) live here; gate\n * (a) (storage:'never') fires in collection.reveal before any strategy call.\n * @module\n */\nimport { dualReadSealedSlot } from '../record-keys/sealed-slot.js'\nimport { isTombstone } from '../record-keys/tombstone.js'\nimport { ClassifiedRevealError } from '../../errors.js'\nimport type { EncryptedEnvelope } from '../../types.js'\nimport type { EnclaveKey } from '../crypto.js'\n\nexport interface RevealEngineCtx {\n  readonly collection: string\n  readonly encrypted: boolean\n  getEnvelope(id: string): Promise<EncryptedEnvelope | null>\n  resolveCek(env: EncryptedEnvelope): Promise<EnclaveKey | undefined>\n  getDEK(): Promise<EnclaveKey>\n}\n\nexport async function revealSealedField(ctx: RevealEngineCtx, id: string, field: string): Promise<unknown> {\n  const env = await ctx.getEnvelope(id)\n  if (env === null || isTombstone(env, ctx.encrypted)) {\n    throw new ClassifiedRevealError(ctx.collection, field, `record \"${id}\" not found in \"${ctx.collection}\"`)\n  }\n  if (!ctx.encrypted) {\n    // Plaintext collection: nothing is sealed; the value sits in the open body.\n    const record = JSON.parse(env._data || '{}') as Record<string, unknown>\n    if (!(field in record)) {\n      throw new ClassifiedRevealError(ctx.collection, field, `no stored value for \"${field}\"`)\n    }\n    return record[field]\n  }\n  const blob = env._sealed?.[field]\n  if (blob === undefined) {\n    // Gate (c): fail-closed error, never parseSealedSlot(undefined)'s TypeError.\n    throw new ClassifiedRevealError(ctx.collection, field, `no sealed value stored for \"${field}\"`)\n  }\n  const cek = await ctx.resolveCek(env)\n  const dek = await ctx.getDEK()\n  return JSON.parse(await dualReadSealedSlot(blob, field, ctx.collection, cek, dek))\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,eAAsB,kBAAkB,KAAsB,IAAY,OAAiC;AACzG,QAAM,MAAM,MAAM,IAAI,YAAY,EAAE;AACpC,MAAI,QAAQ,QAAQ,YAAY,KAAK,IAAI,SAAS,GAAG;AACnD,UAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,WAAW,EAAE,mBAAmB,IAAI,UAAU,GAAG;AAAA,EAC1G;AACA,MAAI,CAAC,IAAI,WAAW;AAElB,UAAM,SAAS,KAAK,MAAM,IAAI,SAAS,IAAI;AAC3C,QAAI,EAAE,SAAS,SAAS;AACtB,YAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,wBAAwB,KAAK,GAAG;AAAA,IACzF;AACA,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,OAAO,IAAI,UAAU,KAAK;AAChC,MAAI,SAAS,QAAW;AAEtB,UAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,+BAA+B,KAAK,GAAG;AAAA,EAChG;AACA,QAAM,MAAM,MAAM,IAAI,WAAW,GAAG;AACpC,QAAM,MAAM,MAAM,IAAI,OAAO;AAC7B,SAAO,KAAK,MAAM,MAAM,mBAAmB,MAAM,OAAO,IAAI,YAAY,KAAK,GAAG,CAAC;AACnF;","names":[]}

package/dist/revoke-4KUNSVJC.js

@@ -1,24 +0,0 @@
-import {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-} from "./chunk-XFXUTFWQ.js";
-import "./chunk-D3EFFFOL.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-};
-//# sourceMappingURL=revoke-4KUNSVJC.js.map

package/dist/signer-DDDXP5JD.js

@@ -1,25 +0,0 @@
-import {
-  ATTESTATIONS_COLLECTION,
-  REVOKED_RECORD_ID,
-  SIGNER_RECORD_ID,
-  loadOrCreateSigner,
-  loadSigner
-} from "./chunk-D3EFFFOL.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  ATTESTATIONS_COLLECTION,
-  REVOKED_RECORD_ID,
-  SIGNER_RECORD_ID,
-  loadOrCreateSigner,
-  loadSigner
-};
-//# sourceMappingURL=signer-DDDXP5JD.js.map

package/dist/stale-NXPT56JA.js

@@ -1,14 +0,0 @@
-import {
-  clearMVStale,
-  isMVStale,
-  markMVStale,
-  resolveStaleMVOnRead
-} from "./chunk-TPH5EO6L.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  clearMVStale,
-  isMVStale,
-  markMVStale,
-  resolveStaleMVOnRead
-};
-//# sourceMappingURL=stale-NXPT56JA.js.map

package/dist/storage-IR6EEAV2.js

@@ -1,23 +0,0 @@
-import {
-  SCHEMAS_COLLECTION,
-  loadPersistedSchema,
-  loadPersistedSchemaEntry,
-  savePersistedSchema
-} from "./chunk-C7NTK5I3.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  SCHEMAS_COLLECTION,
-  loadPersistedSchema,
-  loadPersistedSchemaEntry,
-  savePersistedSchema
-};
-//# sourceMappingURL=storage-IR6EEAV2.js.map

package/dist/verify-66RHOW7N.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/kernel/enclave/classify/verify.ts"],"sourcesContent":["/**\n * The enclave verify oracle (spec §3). Verdict-only egress: no path\n * distinguishes \"record missing\" / \"no digest\" / \"AAD-tamper\" / \"mismatch\"\n * beyond { ok: false } — existence oracles are oracles too. Every path that\n * cannot run a real comparison runs ONE dummy PBKDF2 + ONE dummy tag-compare\n * first (C4), so wall-clock cannot enumerate records/fields/answers. The\n * text door (verifyTextField) has no real PBKDF2 of its own, so it pays the\n * pad UNCONDITIONALLY — every outcome, including a real compare, costs the\n * same one PBKDF2 unit (no inverted exists-vs-absent oracle).\n * Throws are reserved for caller/config bugs (ClassifiedVerifyError /\n * ClassifiedConfigError) and are exempt from the pad by design (R6 note).\n * @module\n */\nimport { generateSalt, base64ToBuffer, type EnclaveKey } from '../crypto.js'\nimport { pbkdf2VerifyDigest, VDIG_ITERATIONS } from './digest.js'\nimport { normalizeForVerify, type VerifyNormalizeMode } from './normalize.js'\nimport { blindedEqual } from './compare.js'\nimport { evaluateKofN } from './kofn.js'\nimport { openVdigPayload, type VdigPayload } from './vdig.js'\nimport { dualReadSealedSlot } from '../record-keys/sealed-slot.js'\nimport { ClassifiedConfigError, ClassifiedVerifyError } from '../../errors.js'\nimport type { EncryptedEnvelope, VdigFieldPolicy, ClassifiedVerdict } from '../../types.js'\n\nexport interface VerifyEngineCtx {\n  readonly collection: string\n  getEnvelope(id: string): Promise<EncryptedEnvelope | null>\n  resolveCek(env: EncryptedEnvelope): Promise<EnclaveKey | undefined>\n  getDEK(): Promise<EnclaveKey>\n  readonly now: () => number\n}\n\n/**\n * C4 pad: one full-cost dummy digest + one dummy compare; result discarded.\n * Pad at `iter` when the caller holds an AUTHENTICATED payload.iter, so pad\n * cost tracks the real compare cost across future iteration bumps; the\n * fully-absent paths (no payload to read an iter from) use VDIG_ITERATIONS.\n */\nasync function padOnce(iter: number = VDIG_ITERATIONS): Promise<void> {\n  const dummy = await pbkdf2VerifyDigest('noydb-classify-c4-pad', generateSalt(), iter)\n  await blindedEqual(dummy, dummy)\n}\n\nasync function padFalse(): Promise<ClassifiedVerdict> {\n  await padOnce()\n  return { ok: false }\n}\n\n/** R6 verify-side transition evidence — config bug, fail-loud, pad-exempt. */\nfunction refuseSealedResidue(collection: string, field: string): never {\n  throw new ClassifiedConfigError(collection,\n    `field \"${field}\" carries a recoverable _sealed slot but no _vdig — storage-form ` +\n    `transition detected (R6); refused fail-loud, never an ok:false masquerading as wrong-password`)\n}\n\nexport async function verifyDigestField(\n  ctx: VerifyEngineCtx,\n  id: string,\n  field: string,\n  candidate: string,\n  policy: VdigFieldPolicy,\n): Promise<ClassifiedVerdict> {\n  const env = await ctx.getEnvelope(id)\n  if (env === null) return padFalse()\n  const blob = env._vdig?.[field]\n  if (blob === undefined) {\n    if (env._sealed?.[field] !== undefined) refuseSealedResidue(ctx.collection, field)\n    return padFalse()\n  }\n  const cek = await ctx.resolveCek(env)\n  if (cek === undefined) return padFalse()\n\n  let payload: VdigPayload\n  try {\n    payload = await openVdigPayload(blob, cek, ctx.collection, id, field)\n  } catch {\n    return padFalse() // AAD/tamper (C1) → padded false; no tamper oracle to the caller\n  }\n\n  const normalized = normalizeForVerify(policy.normalize, candidate)\n  const digest = await pbkdf2VerifyDigest(normalized, base64ToBuffer(payload.cur.salt), payload.iter)\n  const ok = await blindedEqual(digest, base64ToBuffer(payload.cur.hash))\n  if (!ok) return { ok: false } // I1: bare false — mustRotate never computed here\n\n  if (policy.rotateDays !== undefined\n    && ctx.now() > Date.parse(payload.cur.at) + policy.rotateDays * 86_400_000) {\n    // Disclosing write-age-vs-policy to a SUCCESSFUL verifier is intended (audit F6).\n    return { ok: true, mustRotate: true }\n  }\n  return { ok: true }\n}\n\nexport async function verifyTextField(\n  ctx: VerifyEngineCtx,\n  id: string,\n  field: string,\n  candidate: string,\n  normalize: VerifyNormalizeMode,\n): Promise<ClassifiedVerdict> {\n  // C4, single code path: (a) attempt the unseal where a slot exists, then\n  // for EVERY outcome — present-correct, present-wrong, missing record,\n  // missing slot, tampered — (b) run the one constant-cost pad, (c) run one\n  // blindedEqual, (d) return the boolean. Unlike the digest door there is no\n  // real PBKDF2 here (unseal is sub-ms AES-GCM), so skipping the pad on the\n  // real compare would make exists-but-wrong ~100x FASTER than absent — an\n  // inverted existence oracle. No branch below skips the dominant cost.\n  const env = await ctx.getEnvelope(id)\n  const blob = env?._sealed?.[field]\n  let stored: string | undefined\n  if (env !== null && blob !== undefined) {\n    const cek = await ctx.resolveCek(env)\n    const dek = await ctx.getDEK()\n    try {\n      // Plaintext exists microseconds inside this function; only the boolean leaves.\n      stored = String(JSON.parse(await dualReadSealedSlot(blob, field, ctx.collection, cek, dek)))\n    } catch {\n      stored = undefined // AAD/tamper (C1) → same padded compare tail as absent\n    }\n  }\n  await padOnce()\n  const a = new TextEncoder().encode(normalizeForVerify(normalize, candidate))\n  const b = stored !== undefined\n    ? new TextEncoder().encode(normalizeForVerify(normalize, stored))\n    : a // no-compare dummy comparand — the verdict is forced false below\n  const eq = await blindedEqual(a, b)\n  return { ok: stored !== undefined && eq }\n}\n\nexport async function matchGroupFields(\n  ctx: VerifyEngineCtx,\n  id: string,\n  answers: Record<string, string>,\n  members: ReadonlyArray<{ readonly field: string; readonly policy: VdigFieldPolicy }>,\n  opts: { readonly min: number },\n): Promise<{ readonly passed: boolean }> {\n  // I2 step 1 — validate EVERYTHING up front, before any PBKDF2, throwing\n  // uniformly at ~0 elapsed (no member-position leak via timing/throw type).\n  if (!Number.isInteger(opts.min) || opts.min < 1 || opts.min > members.length) {\n    throw new ClassifiedVerifyError(ctx.collection, '*',\n      `matchGroup min ${opts.min} out of range 1..${members.length}`)\n  }\n  const normalized = new Map<string, string>()\n  for (const m of members) {\n    const answer = answers[m.field] // non-member answer keys: silently ignored\n    if (answer === undefined) continue\n    if (typeof answer !== 'string') {\n      throw new ClassifiedVerifyError(ctx.collection, m.field, 'candidate must be a string')\n    }\n    normalized.set(m.field, normalizeForVerify(m.policy.normalize, answer))\n  }\n\n  const env = await ctx.getEnvelope(id)\n  if (env !== null) {\n    for (const m of members) { // R6 evidence — uniform, before any PBKDF2\n      if (env._sealed?.[m.field] !== undefined && env._vdig?.[m.field] === undefined) {\n        refuseSealedResidue(ctx.collection, m.field)\n      }\n    }\n  }\n  const cek = env !== null ? await ctx.resolveCek(env) : undefined\n\n  // I2 step 2+3 — iterate RESOLVED GROUP MEMBERS (denominator = |members|),\n  // evaluate EVERY member (collect, never break), pad every no-compare slot.\n  const results: boolean[] = []\n  for (const m of members) {\n    const candidate = normalized.get(m.field)\n    const blob = env?._vdig?.[m.field]\n    if (env === null || cek === undefined || blob === undefined) {\n      await padOnce()\n      results.push(false)\n      continue\n    }\n    try {\n      const payload = await openVdigPayload(blob, cek, ctx.collection, id, m.field)\n      if (candidate === undefined) {\n        // Slot present, answer absent: the payload's authenticated iter is in\n        // hand — pad at IT (not the constant) so a future iteration bump\n        // cannot desync this pad's cost from the real compare's cost.\n        await padOnce(payload.iter)\n        results.push(false)\n        continue\n      }\n      const digest = await pbkdf2VerifyDigest(candidate, base64ToBuffer(payload.cur.salt), payload.iter)\n      results.push(await blindedEqual(digest, base64ToBuffer(payload.cur.hash)))\n    } catch {\n      await padOnce()\n      results.push(false)\n    }\n  }\n  // Per-member results never appear in any return, error, or audit payload.\n  return { passed: evaluateKofN(results, opts.min) }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAqCA,eAAe,QAAQ,OAAe,iBAAgC;AACpE,QAAM,QAAQ,MAAM,mBAAmB,yBAAyB,aAAa,GAAG,IAAI;AACpF,QAAM,aAAa,OAAO,KAAK;AACjC;AAEA,eAAe,WAAuC;AACpD,QAAM,QAAQ;AACd,SAAO,EAAE,IAAI,MAAM;AACrB;AAGA,SAAS,oBAAoB,YAAoB,OAAsB;AACrE,QAAM,IAAI;AAAA,IAAsB;AAAA,IAC9B,UAAU,KAAK;AAAA,EACgF;AACnG;AAEA,eAAsB,kBACpB,KACA,IACA,OACA,WACA,QAC4B;AAC5B,QAAM,MAAM,MAAM,IAAI,YAAY,EAAE;AACpC,MAAI,QAAQ,KAAM,QAAO,SAAS;AAClC,QAAM,OAAO,IAAI,QAAQ,KAAK;AAC9B,MAAI,SAAS,QAAW;AACtB,QAAI,IAAI,UAAU,KAAK,MAAM,OAAW,qBAAoB,IAAI,YAAY,KAAK;AACjF,WAAO,SAAS;AAAA,EAClB;AACA,QAAM,MAAM,MAAM,IAAI,WAAW,GAAG;AACpC,MAAI,QAAQ,OAAW,QAAO,SAAS;AAEvC,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,gBAAgB,MAAM,KAAK,IAAI,YAAY,IAAI,KAAK;AAAA,EACtE,QAAQ;AACN,WAAO,SAAS;AAAA,EAClB;AAEA,QAAM,aAAa,mBAAmB,OAAO,WAAW,SAAS;AACjE,QAAM,SAAS,MAAM,mBAAmB,YAAY,eAAe,QAAQ,IAAI,IAAI,GAAG,QAAQ,IAAI;AAClG,QAAM,KAAK,MAAM,aAAa,QAAQ,eAAe,QAAQ,IAAI,IAAI,CAAC;AACtE,MAAI,CAAC,GAAI,QAAO,EAAE,IAAI,MAAM;AAE5B,MAAI,OAAO,eAAe,UACrB,IAAI,IAAI,IAAI,KAAK,MAAM,QAAQ,IAAI,EAAE,IAAI,OAAO,aAAa,OAAY;AAE5E,WAAO,EAAE,IAAI,MAAM,YAAY,KAAK;AAAA,EACtC;AACA,SAAO,EAAE,IAAI,KAAK;AACpB;AAEA,eAAsB,gBACpB,KACA,IACA,OACA,WACA,WAC4B;AAQ5B,QAAM,MAAM,MAAM,IAAI,YAAY,EAAE;AACpC,QAAM,OAAO,KAAK,UAAU,KAAK;AACjC,MAAI;AACJ,MAAI,QAAQ,QAAQ,SAAS,QAAW;AACtC,UAAM,MAAM,MAAM,IAAI,WAAW,GAAG;AACpC,UAAM,MAAM,MAAM,IAAI,OAAO;AAC7B,QAAI;AAEF,eAAS,OAAO,KAAK,MAAM,MAAM,mBAAmB,MAAM,OAAO,IAAI,YAAY,KAAK,GAAG,CAAC,CAAC;AAAA,IAC7F,QAAQ;AACN,eAAS;AAAA,IACX;AAAA,EACF;AACA,QAAM,QAAQ;AACd,QAAM,IAAI,IAAI,YAAY,EAAE,OAAO,mBAAmB,WAAW,SAAS,CAAC;AAC3E,QAAM,IAAI,WAAW,SACjB,IAAI,YAAY,EAAE,OAAO,mBAAmB,WAAW,MAAM,CAAC,IAC9D;AACJ,QAAM,KAAK,MAAM,aAAa,GAAG,CAAC;AAClC,SAAO,EAAE,IAAI,WAAW,UAAa,GAAG;AAC1C;AAEA,eAAsB,iBACpB,KACA,IACA,SACA,SACA,MACuC;AAGvC,MAAI,CAAC,OAAO,UAAU,KAAK,GAAG,KAAK,KAAK,MAAM,KAAK,KAAK,MAAM,QAAQ,QAAQ;AAC5E,UAAM,IAAI;AAAA,MAAsB,IAAI;AAAA,MAAY;AAAA,MAC9C,kBAAkB,KAAK,GAAG,oBAAoB,QAAQ,MAAM;AAAA,IAAE;AAAA,EAClE;AACA,QAAM,aAAa,oBAAI,IAAoB;AAC3C,aAAW,KAAK,SAAS;AACvB,UAAM,SAAS,QAAQ,EAAE,KAAK;AAC9B,QAAI,WAAW,OAAW;AAC1B,QAAI,OAAO,WAAW,UAAU;AAC9B,YAAM,IAAI,sBAAsB,IAAI,YAAY,EAAE,OAAO,4BAA4B;AAAA,IACvF;AACA,eAAW,IAAI,EAAE,OAAO,mBAAmB,EAAE,OAAO,WAAW,MAAM,CAAC;AAAA,EACxE;AAEA,QAAM,MAAM,MAAM,IAAI,YAAY,EAAE;AACpC,MAAI,QAAQ,MAAM;AAChB,eAAW,KAAK,SAAS;AACvB,UAAI,IAAI,UAAU,EAAE,KAAK,MAAM,UAAa,IAAI,QAAQ,EAAE,KAAK,MAAM,QAAW;AAC9E,4BAAoB,IAAI,YAAY,EAAE,KAAK;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,QAAQ,OAAO,MAAM,IAAI,WAAW,GAAG,IAAI;AAIvD,QAAM,UAAqB,CAAC;AAC5B,aAAW,KAAK,SAAS;AACvB,UAAM,YAAY,WAAW,IAAI,EAAE,KAAK;AACxC,UAAM,OAAO,KAAK,QAAQ,EAAE,KAAK;AACjC,QAAI,QAAQ,QAAQ,QAAQ,UAAa,SAAS,QAAW;AAC3D,YAAM,QAAQ;AACd,cAAQ,KAAK,KAAK;AAClB;AAAA,IACF;AACA,QAAI;AACF,YAAM,UAAU,MAAM,gBAAgB,MAAM,KAAK,IAAI,YAAY,IAAI,EAAE,KAAK;AAC5E,UAAI,cAAc,QAAW;AAI3B,cAAM,QAAQ,QAAQ,IAAI;AAC1B,gBAAQ,KAAK,KAAK;AAClB;AAAA,MACF;AACA,YAAM,SAAS,MAAM,mBAAmB,WAAW,eAAe,QAAQ,IAAI,IAAI,GAAG,QAAQ,IAAI;AACjG,cAAQ,KAAK,MAAM,aAAa,QAAQ,eAAe,QAAQ,IAAI,IAAI,CAAC,CAAC;AAAA,IAC3E,QAAQ;AACN,YAAM,QAAQ;AACd,cAAQ,KAAK,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,aAAa,SAAS,KAAK,GAAG,EAAE;AACnD;","names":[]}

package/dist/withdraw-accessible-CLMZEHQT.js

@@ -1,28 +0,0 @@
-import {
-  FROZEN_SNAPSHOTS_COLLECTION,
-  freezeAndDeleteClosure,
-  freezeSnapshotOnly,
-  randomId,
-  withdrawAccessibleData
-} from "./chunk-7NS43EXZ.js";
-import "./chunk-BCYQA5BK.js";
-import "./chunk-K62IUKOD.js";
-import "./chunk-5XIPOCQC.js";
-import "./chunk-QQJXBZCO.js";
-import "./chunk-FQQF23MC.js";
-import "./chunk-MSPNM2OM.js";
-import "./chunk-SYMS4546.js";
-import "./chunk-X6CMGUAG.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HUS3J5WM.js";
-import "./chunk-CKZW6P5V.js";
-import "./chunk-FH542DDY.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  FROZEN_SNAPSHOTS_COLLECTION,
-  freezeAndDeleteClosure,
-  freezeSnapshotOnly,
-  randomId,
-  withdrawAccessibleData
-};
-//# sourceMappingURL=withdraw-accessible-CLMZEHQT.js.map