@noy-db/hub 0.3.0-pre.12 → 0.3.0-pre.13

package/dist/chunk-PN2XMATY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/kernel/tier-visibility.ts"],"sourcesContent":["/**\n * Tier visibility helper (#712/#707): a tier-0 code path treats an elevated\n * (_tier > 0) record as invisible. History reads gate on the LIVE record's\n * tier — history snapshots keep their tier-0-wrapped CEKs and carry no _tier\n * of their own, so an elevated record's prior versions would otherwise stay\n * tier-0-decryptable (the read-gate closes the API surface; #712's at-rest\n * arc rewraps the snapshot keys). Envelope inspection only — no decryption.\n *\n * #715/#716: the write ring. Invisibility on the read side is exactly what\n * makes a tier-0 write path treat an elevated record as absent — a put()\n * believes it's a create (demotion) and a delete() writes a marker with no\n * _tier (erasing the elevation signal). `assertTierWritable` closes that by\n * refusing the write outright. Both helpers share a single envelope peek\n * (`peekLiveTier`) — no duplicated `adapter.get` per write.\n */\nimport type { NoydbStore } from './types.js'\nimport { TierWriteRefusedError } from './errors.js'\n\nasync function peekLiveTier(\n  adapter: NoydbStore, vault: string, name: string, id: string,\n): Promise<number> {\n  const env = await adapter.get(vault, name, id)\n  return env?._tier ?? 0\n}\n\nexport async function liveRecordIsElevated(\n  adapter: NoydbStore, vault: string, name: string, id: string,\n): Promise<boolean> {\n  return (await peekLiveTier(adapter, vault, name, id)) > 0\n}\n\n/**\n * The tier a record's LIVE envelope currently carries (0 if untiered or\n * never moved). #724 Task 4: `BlobSet.loadSlots`/`saveSlots` use this to\n * resolve the per-record slot map's collection DEK at the record's current\n * tier by default, so the slot map's physical location follows the record\n * after `rehomeForTier` re-keys it.\n */\nexport async function liveRecordTier(\n  adapter: NoydbStore, vault: string, name: string, id: string,\n): Promise<number> {\n  return peekLiveTier(adapter, vault, name, id)\n}\n\n/**\n * Refuses a tier-0 `put()`/`delete()` targeting an elevated record.\n * No-op when `tiersEnabled` is false (the cost gate — collections that\n * never declare tiers pay nothing). Throws `TierWriteRefusedError` with\n * the record's ACTUAL live tier when elevated — holders included, since\n * `put()`/`delete()` are the tier-0 APIs and `putAtTier`/`elevate`/`demote`\n * are the sanctioned tier-aware paths.\n */\nexport async function assertTierWritable(\n  adapter: NoydbStore, vault: string, name: string, id: string, tiersEnabled: boolean,\n): Promise<void> {\n  if (!tiersEnabled) return\n  const tier = await peekLiveTier(adapter, vault, name, id)\n  if (tier > 0) throw new TierWriteRefusedError(name, tier)\n}\n\n/**\n * #708: ALL-OR-NOTHING pre-check for a coordinated-cutover bulk-rewrite —\n * scans every id's live tier BEFORE any record is transformed and refuses\n * on the first elevated one found. `_applyCutoverTransform` re-encrypts at\n * tier 0 with no gate of its own; without this, it would silently demote\n * an elevated record. Same cost gate as `assertTierWritable` (no-op, no\n * adapter call, when `tiersEnabled` is false).\n *\n * This pre-check guards against an ordinary `put()`/`delete()` racing the\n * cutover, because those go through the schema fence (`SchemaFenceController`\n * blocks concurrent writes during a coordinated cutover). It does NOT guard\n * against `elevate()`/`demote()`/`putAtTier()` — those tier-move paths bypass\n * the fence, so a tier move landing between this scan and the rewrite it\n * gates is not excluded. Cutover callers are expected to hold the vault\n * quiescent for tier moves on this collection for the duration of the call,\n * the same tier-quiescence assumption the documented CAS-less caller\n * (`with-shape/satellites/migrate-cek.ts`'s \"No-quiesce precondition\") makes\n * explicit for concurrent writes generally.\n */\nexport async function assertCutoverTierSafe(\n  adapter: NoydbStore, vault: string, name: string, tiersEnabled: boolean,\n): Promise<void> {\n  if (!tiersEnabled) return\n  for (const id of await adapter.list(vault, name)) {\n    const tier = await peekLiveTier(adapter, vault, name, id)\n    if (tier > 0) {\n      throw new TierWriteRefusedError(name, tier, `Coordinated cutover on collection \"${name}\" refused — record \"${id}\" is elevated to tier ${tier}. Demote it before a coordinated cutover.`)\n    }\n  }\n}\n"],"mappings":";;;;;AAkBA,eAAe,aACb,SAAqB,OAAe,MAAc,IACjC;AACjB,QAAM,MAAM,MAAM,QAAQ,IAAI,OAAO,MAAM,EAAE;AAC7C,SAAO,KAAK,SAAS;AACvB;AAEA,eAAsB,qBACpB,SAAqB,OAAe,MAAc,IAChC;AAClB,SAAQ,MAAM,aAAa,SAAS,OAAO,MAAM,EAAE,IAAK;AAC1D;AASA,eAAsB,eACpB,SAAqB,OAAe,MAAc,IACjC;AACjB,SAAO,aAAa,SAAS,OAAO,MAAM,EAAE;AAC9C;AAUA,eAAsB,mBACpB,SAAqB,OAAe,MAAc,IAAY,cAC/C;AACf,MAAI,CAAC,aAAc;AACnB,QAAM,OAAO,MAAM,aAAa,SAAS,OAAO,MAAM,EAAE;AACxD,MAAI,OAAO,EAAG,OAAM,IAAI,sBAAsB,MAAM,IAAI;AAC1D;AAqBA,eAAsB,sBACpB,SAAqB,OAAe,MAAc,cACnC;AACf,MAAI,CAAC,aAAc;AACnB,aAAW,MAAM,MAAM,QAAQ,KAAK,OAAO,IAAI,GAAG;AAChD,UAAM,OAAO,MAAM,aAAa,SAAS,OAAO,MAAM,EAAE;AACxD,QAAI,OAAO,GAAG;AACZ,YAAM,IAAI,sBAAsB,MAAM,MAAM,sCAAsC,IAAI,4BAAuB,EAAE,yBAAyB,IAAI,2CAA2C;AAAA,IACzL;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-EIZ4YOG2.js → chunk-Q5VNKNE5.js}

@@ -1,9 +1,9 @@
 import {
   envelopeBodyForHash
-} from "./chunk-HA6ZQWA2.js";
+} from "./chunk-XDYREZWE.js";
 import {
   sha256Hex
-} from "./chunk-37WOJQWY.js";
+} from "./chunk-CIE2BASH.js";
 
 // src/with-commit/history/ledger/entry.ts
 function canonicalJson(value) {
@@ -67,4 +67,4 @@ export {
   parseIndex,
   envelopePayloadHash
 };
-//# sourceMappingURL=chunk-EIZ4YOG2.js.map
+//# sourceMappingURL=chunk-Q5VNKNE5.js.map

package/dist/{chunk-TVOHSPVK.js → chunk-QLWMEXCT.js}

@@ -1,6 +1,6 @@
 import {
   SealedRecordNotEnabledError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-audit/sealed-record/strategy.ts
 var NO_SEALED_RECORD = {
@@ -18,4 +18,4 @@ var NO_SEALED_RECORD = {
 export {
   NO_SEALED_RECORD
 };
-//# sourceMappingURL=chunk-TVOHSPVK.js.map
+//# sourceMappingURL=chunk-QLWMEXCT.js.map

package/dist/{chunk-7GAXFU2O.js → chunk-QRB7NAOJ.js}

@@ -2,7 +2,7 @@ import {
   IllegalTransitionError,
   RecordLockedError,
   ValidationError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-audit/guards/with-guard.ts
 function withGuard(strategy) {
@@ -120,4 +120,4 @@ export {
   immutableGuard,
   transitionGuard
 };
-//# sourceMappingURL=chunk-7GAXFU2O.js.map
+//# sourceMappingURL=chunk-QRB7NAOJ.js.map

package/dist/{chunk-X6Y5MXTH.js → chunk-R4ROFEYC.js}

@@ -1,6 +1,6 @@
 import {
   ReadOnlyFrameError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-fork/shadow/vault-frame.ts
 var VaultFrame = class {
@@ -71,4 +71,4 @@ export {
   VaultFrame,
   CollectionFrame
 };
-//# sourceMappingURL=chunk-X6Y5MXTH.js.map
+//# sourceMappingURL=chunk-R4ROFEYC.js.map

package/dist/{chunk-4BQXMCE5.js → chunk-RCVJZMFE.js}

@@ -1,12 +1,12 @@
 import {
   ViaGraph
-} from "./chunk-DJ7MRXNA.js";
+} from "./chunk-HTJQYHZP.js";
 import {
   sha256Hex
-} from "./chunk-37WOJQWY.js";
+} from "./chunk-CIE2BASH.js";
 import {
   DerivationCycleError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-formula/derivations/strategy-hash.ts
 async function computeStrategyHash(source, outputKeys, derive, sources) {
@@ -161,4 +161,4 @@ var DerivationRegistry = class {
 export {
   DerivationRegistry
 };
-//# sourceMappingURL=chunk-4BQXMCE5.js.map
+//# sourceMappingURL=chunk-RCVJZMFE.js.map

package/dist/{chunk-QG5RQQBO.js → chunk-RIX4V2TB.js}

@@ -4,13 +4,13 @@ import {
 import {
   base64ToBuffer,
   bufferToBase64
-} from "./chunk-37WOJQWY.js";
+} from "./chunk-CIE2BASH.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,
   SessionPolicyError,
   ValidationError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-party/session/session.ts
 var subtle = globalThis.crypto.subtle;
@@ -364,4 +364,4 @@ export {
   clearDevUnlock,
   isDevUnlockActive
 };
-//# sourceMappingURL=chunk-QG5RQQBO.js.map
+//# sourceMappingURL=chunk-RIX4V2TB.js.map

package/dist/{chunk-SAL5X5OK.js → chunk-RYCTDFUX.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-JC75UBMT.js";
+} from "./chunk-JNAI2HN2.js";
 
 // src/with-shape/schema-update/fence.ts
 var FENCE_RECORD_ID = "schema-fence";
@@ -37,4 +37,4 @@ export {
   loadFence,
   saveFence
 };
-//# sourceMappingURL=chunk-SAL5X5OK.js.map
+//# sourceMappingURL=chunk-RYCTDFUX.js.map

package/dist/{chunk-CXC3JLAQ.js → chunk-RZ5SVOYR.js}

@@ -1,7 +1,7 @@
 import {
   ConflictError,
   PodVersionConflictError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-pod/pod-store.ts
 var BUNDLE_STORE_VERSION = 1;
@@ -152,4 +152,4 @@ export {
   wrapBundleStore,
   createBundleStore
 };
-//# sourceMappingURL=chunk-CXC3JLAQ.js.map
+//# sourceMappingURL=chunk-RZ5SVOYR.js.map

package/dist/{chunk-44IL5G3W.js → chunk-SLFHQTTW.js}

@@ -1,20 +1,20 @@
 import {
   dekKey
-} from "./chunk-KKYEZCQG.js";
+} from "./chunk-ZICD77GM.js";
 import {
   generateULID
 } from "./chunk-ZJADGNYF.js";
 import {
   openEnvelopeJson
-} from "./chunk-HA6ZQWA2.js";
+} from "./chunk-XDYREZWE.js";
 import {
   encrypt,
   unwrapKey,
   wrapKey
-} from "./chunk-37WOJQWY.js";
+} from "./chunk-CIE2BASH.js";
 import {
   DelegationTargetMissingError
-} from "./chunk-FZCGIJEJ.js";
+} from "./chunk-BIOUI4HL.js";
 
 // src/with-party/team/delegation.ts
 var DELEGATIONS_COLLECTION = "_delegations";
@@ -96,4 +96,4 @@ export {
   loadActiveDelegations,
   revokeDelegation
 };
-//# sourceMappingURL=chunk-44IL5G3W.js.map
+//# sourceMappingURL=chunk-SLFHQTTW.js.map