@noy-db/hub 0.3.0-pre.3 → 0.3.0-pre.4

package/dist/{chunk-NMRKAGHE.js → chunk-ZROMNP7Q.js}

@@ -1,6 +1,6 @@
 import {
   OverlayIdMismatchError
-} from "./chunk-BLZRNHMG.js";
+} from "./chunk-U23JUUPX.js";
 
 // src/with-formula/overlay-views/virtual-collection.ts
 var OverlayedCollection = class {
@@ -206,4 +206,4 @@ var OverlayedCollection = class {
 export {
   OverlayedCollection
 };
-//# sourceMappingURL=chunk-NMRKAGHE.js.map
+//# sourceMappingURL=chunk-ZROMNP7Q.js.map

package/dist/classified/index.d.ts

@@ -1,8 +1,8 @@
-import { dL as ClassifiedFieldSpec, dM as ClassifiedStrategy } from '../index-D05bV0_g.js';
-export { dN as ClassifiedConfigError, dO as ClassifiedEntry, dP as ClassifiedGroup, dQ as ClassifiedList, dR as ClassifiedRevealCtx, dS as ClassifiedRevealError, dT as ClassifiedRider, dU as ClassifiedRotationError, dV as ClassifiedStorage, dW as ClassifiedVerdict, dX as ClassifiedVerifyCtx, dY as ClassifiedVerifyError, dZ as NO_CLASSIFIED, d_ as isClassifiedFieldSpec, d$ as isClassifiedGroup } from '../index-D05bV0_g.js';
-export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, R as ResolvedClassified, c as classified, l as luhnCheck, r as resolveClassifiedFields } from '../validators-Dzn7T-3x.js';
+import { dL as ClassifiedFieldSpec, dM as ClassifiedStrategy } from '../index-D4GQe1Rx.js';
+export { dN as ClassifiedConfigError, dO as ClassifiedEntry, dP as ClassifiedGroup, dQ as ClassifiedList, dR as ClassifiedRevealCtx, dS as ClassifiedRevealError, dT as ClassifiedRider, dU as ClassifiedRotationError, dV as ClassifiedStorage, dW as ClassifiedVerdict, dX as ClassifiedVerifyCtx, dY as ClassifiedVerifyError, dZ as NO_CLASSIFIED, d_ as isClassifiedFieldSpec, d$ as isClassifiedGroup } from '../index-D4GQe1Rx.js';
+export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, R as ResolvedClassified, c as classified, l as luhnCheck, r as resolveClassifiedFields } from '../validators-Ctgkj5qd.js';
 import '../subject-index-O75wKshW.js';
-import '../describe-0tiXAjoO.js';
+import '../describe-C6iHNlqJ.js';
 import '../index-B9QdHytu.js';
 import '@noy-db/attestation';
 

package/dist/classified/index.js

@@ -2,7 +2,7 @@ import {
   classified,
   luhnCheck,
   withClassified
-} from "../chunk-NTHKOFVL.js";
+} from "../chunk-VFRNWE5P.js";
 import {
   ClassifiedNeverStoredError,
   ClassifiedValidationError,
@@ -11,13 +11,13 @@ import {
   isClassifiedFieldSpec,
   isClassifiedGroup,
   resolveClassifiedFields
-} from "../chunk-MIOLJG2R.js";
+} from "../chunk-AF5ZRTZ4.js";
 import {
   ClassifiedConfigError,
   ClassifiedRevealError,
   ClassifiedRotationError,
   ClassifiedVerifyError
-} from "../chunk-BLZRNHMG.js";
+} from "../chunk-U23JUUPX.js";
 import "../chunk-PZ5AY32C.js";
 export {
   ClassifiedConfigError,

package/dist/collection-facade-MKEBZDWW.js

@@ -0,0 +1,39 @@
+import {
+  buildPersistedIndexCallbacks,
+  buildRetrievalDocs,
+  embedOnWrite,
+  flushIndex,
+  hasIndexedBlobFields,
+  retrieve,
+  search,
+  similarTo,
+  warmIndex
+} from "./chunk-GOUNIHFA.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-SEQ2JI3Y.js";
+import "./chunk-VAWY44JW.js";
+import "./chunk-TB5RNNJ4.js";
+import "./chunk-M66NAZA4.js";
+import "./chunk-OVO2RZAE.js";
+import "./chunk-QKVILR7N.js";
+import "./chunk-LN22XH4B.js";
+import "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import "./chunk-UOEWDCUX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-TLJOJBZD.js";
+import "./chunk-4K3MQ5S3.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  buildPersistedIndexCallbacks,
+  buildRetrievalDocs,
+  embedOnWrite,
+  flushIndex,
+  hasIndexedBlobFields,
+  retrieve,
+  search,
+  similarTo,
+  warmIndex
+};
+//# sourceMappingURL=collection-facade-MKEBZDWW.js.map

package/dist/computed-BMMEFRFJ.js

@@ -0,0 +1,11 @@
+import {
+  ComputedFieldError,
+  evalComputedFields
+} from "./chunk-5EWYUR5P.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ComputedFieldError,
+  evalComputedFields
+};
+//# sourceMappingURL=computed-BMMEFRFJ.js.map

package/dist/config-drift-KGM7ZRW4.js

@@ -0,0 +1,24 @@
+import "./chunk-PZ5AY32C.js";
+
+// src/with-shape/classified/config-drift.ts
+function markerForFields(vdigFields) {
+  if (vdigFields === null || vdigFields.size === 0) return null;
+  const digestOnly = [...vdigFields.keys()];
+  return { digestOnly, equatable: digestOnly.filter((f) => vdigFields.get(f)?.equatable === true) };
+}
+async function persistClassifiedMarkerForFields(store, vault, collectionName, vdigFields, dek) {
+  const marker = markerForFields(vdigFields);
+  if (marker === null) return;
+  const { persistClassifiedMarker } = await import("./register-K6DDSIXN.js");
+  await persistClassifiedMarker({ store, vault, collectionName, dek, marker });
+}
+async function readClassifiedMarkerDigestOnly(store, vault, collectionName, dek) {
+  const { loadPersistedSchema } = await import("./storage-5E6YB2JY.js");
+  const persisted = await loadPersistedSchema(store, vault, collectionName, dek);
+  return persisted?.classified?.digestOnly ?? [];
+}
+export {
+  persistClassifiedMarkerForFields,
+  readClassifiedMarkerDigestOnly
+};
+//# sourceMappingURL=config-drift-KGM7ZRW4.js.map

package/dist/config-drift-KGM7ZRW4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/classified/config-drift.ts"],"sourcesContent":["/**\n * C-A / R10 config-drift marker I/O — the store side of the guard, kept OUT of\n * the kernel `Collection` so the always-on kernel surface stays lean. The\n * kernel holds only the per-handle memoization; these helpers do the actual\n * persisted-schema read/write (via the persisted-schemas storage seam, lazily\n * imported so the classified spine tree-shakes).\n *\n * Marker semantics: a collection declaring classified digest-only fields writes\n * an `x-classified` marker into its `_schemas/<collection>` record on the first\n * classified write. A handle later opened WITHOUT `classifiedFields` (a naive\n * handle) reads it back and refuses to write — see RecordCodec.encryptRecord's\n * R10 guard.\n *\n * @module\n */\nimport type { NoydbStore, VdigFieldPolicy, ClassifiedMarker } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\n\n/** Build the marker for a handle's digest-only field map, or null when it declares none. */\nfunction markerForFields(vdigFields: ReadonlyMap<string, VdigFieldPolicy> | null): ClassifiedMarker | null {\n  if (vdigFields === null || vdigFields.size === 0) return null\n  const digestOnly = [...vdigFields.keys()]\n  return { digestOnly, equatable: digestOnly.filter((f) => vdigFields.get(f)?.equatable === true) }\n}\n\n/**\n * Persist the classified marker for a handle's digest-only fields. No-op when\n * the handle declares none. Idempotent (delegates to `persistClassifiedMarker`).\n */\nexport async function persistClassifiedMarkerForFields(\n  store: NoydbStore,\n  vault: string,\n  collectionName: string,\n  vdigFields: ReadonlyMap<string, VdigFieldPolicy> | null,\n  dek: EnclaveKey,\n): Promise<void> {\n  const marker = markerForFields(vdigFields)\n  if (marker === null) return\n  const { persistClassifiedMarker } = await import('../persisted-schemas/register.js')\n  await persistClassifiedMarker({ store, vault, collectionName, dek, marker })\n}\n\n/**\n * Read a collection's persisted classified marker's declared digest-only field\n * set (empty when the collection carries no marker). Cross-session drift signal:\n * the R10 superset guard refuses a handle whose declared classified set does not\n * cover every field in this set.\n */\nexport async function readClassifiedMarkerDigestOnly(\n  store: NoydbStore,\n  vault: string,\n  collectionName: string,\n  dek: EnclaveKey,\n): Promise<readonly string[]> {\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vault, collectionName, dek)\n  return persisted?.classified?.digestOnly ?? []\n}\n"],"mappings":";;;AAmBA,SAAS,gBAAgB,YAAkF;AACzG,MAAI,eAAe,QAAQ,WAAW,SAAS,EAAG,QAAO;AACzD,QAAM,aAAa,CAAC,GAAG,WAAW,KAAK,CAAC;AACxC,SAAO,EAAE,YAAY,WAAW,WAAW,OAAO,CAAC,MAAM,WAAW,IAAI,CAAC,GAAG,cAAc,IAAI,EAAE;AAClG;AAMA,eAAsB,iCACpB,OACA,OACA,gBACA,YACA,KACe;AACf,QAAM,SAAS,gBAAgB,UAAU;AACzC,MAAI,WAAW,KAAM;AACrB,QAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,wBAAkC;AACnF,QAAM,wBAAwB,EAAE,OAAO,OAAO,gBAAgB,KAAK,OAAO,CAAC;AAC7E;AAQA,eAAsB,+BACpB,OACA,OACA,gBACA,KAC4B;AAC5B,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,OAAO,gBAAgB,GAAG;AAC7E,SAAO,WAAW,YAAY,cAAc,CAAC;AAC/C;","names":[]}

package/dist/consent/index.d.ts

@@ -1,7 +1,7 @@
-import { bp as ConsentStrategy } from '../index-D05bV0_g.js';
-export { bq as CONSENT_AUDIT_COLLECTION, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bv as loadConsentEntries, bw as writeConsentEntry } from '../index-D05bV0_g.js';
+import { bp as ConsentStrategy } from '../index-D4GQe1Rx.js';
+export { bq as CONSENT_AUDIT_COLLECTION, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bv as loadConsentEntries, bw as writeConsentEntry } from '../index-D4GQe1Rx.js';
 import '../subject-index-O75wKshW.js';
-import '../describe-0tiXAjoO.js';
+import '../describe-C6iHNlqJ.js';
 import '../index-B9QdHytu.js';
 import '@noy-db/attestation';
 

package/dist/consent/index.js

@@ -2,14 +2,17 @@ import {
   CONSENT_AUDIT_COLLECTION,
   loadConsentEntries,
   writeConsentEntry
-} from "../chunk-ZFME46HJ.js";
+} from "../chunk-OPTFANOX.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-5EZAJEES.js";
-import "../chunk-6RASM2J4.js";
-import "../chunk-CPAROOKP.js";
-import "../chunk-L4IRFTIF.js";
-import "../chunk-OCDUQUAP.js";
-import "../chunk-BLZRNHMG.js";
+import "../chunk-OVO2RZAE.js";
+import "../chunk-QKVILR7N.js";
+import "../chunk-LN22XH4B.js";
+import "../chunk-PGFY7IRW.js";
+import "../chunk-TCIUO62Z.js";
+import "../chunk-UOEWDCUX.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-TLJOJBZD.js";
+import "../chunk-U23JUUPX.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/consent/active.ts

package/dist/consent/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/consent/active.ts"],"sourcesContent":["/**\n * Active consent strategy. Calling `withConsent()` returns a\n * `ConsentStrategy` that delegates to the real\n * `writeConsentEntry` / `loadConsentEntries` functions. Only\n * reachable through the `@noy-db/hub/consent` subpath.\n */\n\nimport { writeConsentEntry, loadConsentEntries } from './consent.js'\nimport type { ConsentStrategy } from './strategy.js'\n\n/**\n * Build the default consent strategy. Pass into\n * `createNoydb({ consentStrategy: withConsent() })` to enable\n * per-operation audit writes into the reserved `_consent_audit`\n * collection.\n */\nexport function withConsent(): ConsentStrategy {\n  return {\n    write: writeConsentEntry,\n    read: loadConsentEntries,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgBO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-audit/consent/active.ts"],"sourcesContent":["/**\n * Active consent strategy. Calling `withConsent()` returns a\n * `ConsentStrategy` that delegates to the real\n * `writeConsentEntry` / `loadConsentEntries` functions. Only\n * reachable through the `@noy-db/hub/consent` subpath.\n */\n\nimport { writeConsentEntry, loadConsentEntries } from './consent.js'\nimport type { ConsentStrategy } from './strategy.js'\n\n/**\n * Build the default consent strategy. Pass into\n * `createNoydb({ consentStrategy: withConsent() })` to enable\n * per-operation audit writes into the reserved `_consent_audit`\n * collection.\n */\nexport function withConsent(): ConsentStrategy {\n  return {\n    write: writeConsentEntry,\n    read: loadConsentEntries,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AACF;","names":[]}

package/dist/crdt/index.d.ts

@@ -1,7 +1,7 @@
-import { bf as CrdtStrategy } from '../index-D05bV0_g.js';
-export { bg as CrdtMode, bh as CrdtState, bi as LwwMapState, bj as RgaState, bk as YjsState, bl as buildLwwMapState, bm as buildRgaState, bn as mergeCrdtStates, bo as resolveCrdtSnapshot } from '../index-D05bV0_g.js';
+import { bf as CrdtStrategy } from '../index-D4GQe1Rx.js';
+export { bg as CrdtMode, bh as CrdtState, bi as LwwMapState, bj as RgaState, bk as YjsState, bl as buildLwwMapState, bm as buildRgaState, bn as mergeCrdtStates, bo as resolveCrdtSnapshot } from '../index-D4GQe1Rx.js';
 import '../subject-index-O75wKshW.js';
-import '../describe-0tiXAjoO.js';
+import '../describe-C6iHNlqJ.js';
 import '../index-B9QdHytu.js';
 import '@noy-db/attestation';
 

package/dist/delegation-BQNIEHZE.js

@@ -0,0 +1,25 @@
+import {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+} from "./chunk-VPCMJ5Z4.js";
+import "./chunk-BMQOH7MM.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-OVO2RZAE.js";
+import "./chunk-QKVILR7N.js";
+import "./chunk-LN22XH4B.js";
+import "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import "./chunk-UOEWDCUX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-TLJOJBZD.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+};
+//# sourceMappingURL=delegation-BQNIEHZE.js.map

package/dist/derivations/index.d.ts

@@ -1,8 +1,8 @@
-export { w as withDerivation, a as withRollup } from '../with-rollup-Bl0sRFEt.js';
-import { c2 as DerivationStrategy, c3 as DerivationContext } from '../index-D05bV0_g.js';
-export { c4 as ArrayOutputSpec, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, ca as DerivationRegistry, cb as DerivationStrategyHandle, cc as DerivedFromMeta, cd as OutputSpec, ce as RecordOutputSpec } from '../index-D05bV0_g.js';
+export { w as withDerivation, a as withRollup } from '../with-rollup-bQRPc3y1.js';
+import { c2 as DerivationStrategy, c3 as DerivationContext } from '../index-D4GQe1Rx.js';
+export { c4 as ArrayOutputSpec, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, ca as DerivationRegistry, cb as DerivationStrategyHandle, cc as DerivedFromMeta, cd as OutputSpec, ce as RecordOutputSpec } from '../index-D4GQe1Rx.js';
 import '../subject-index-O75wKshW.js';
-import '../describe-0tiXAjoO.js';
+import '../describe-C6iHNlqJ.js';
 import '../index-B9QdHytu.js';
 import '@noy-db/attestation';
 

package/dist/derivations/index.js

@@ -1,25 +1,28 @@
 import {
   withDerivation,
   withRollup
-} from "../chunk-ZNI3RTFV.js";
+} from "../chunk-HMXLN43G.js";
 import {
   DerivationRegistry
-} from "../chunk-P6UXDALK.js";
+} from "../chunk-RDHAGBEB.js";
 import {
   DerivationExecutor
-} from "../chunk-ZD4D7UM6.js";
-import "../chunk-5EZAJEES.js";
-import "../chunk-6RASM2J4.js";
-import "../chunk-CPAROOKP.js";
-import "../chunk-L4IRFTIF.js";
-import "../chunk-OCDUQUAP.js";
+} from "../chunk-XYYW64LB.js";
+import "../chunk-OVO2RZAE.js";
+import "../chunk-QKVILR7N.js";
+import "../chunk-LN22XH4B.js";
+import "../chunk-PGFY7IRW.js";
+import "../chunk-TCIUO62Z.js";
+import "../chunk-UOEWDCUX.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-TLJOJBZD.js";
 import {
   DerivationCapExceededError,
   DerivationCycleError,
   DerivationDepthError,
   DerivationOutputShapeError,
   DerivationOutputUnknownError
-} from "../chunk-BLZRNHMG.js";
+} from "../chunk-U23JUUPX.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DerivationCapExceededError,

package/dist/describe/index.d.ts

@@ -1 +1 @@
-export { C as CollectionDescription, a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType } from '../describe-0tiXAjoO.js';
+export { C as CollectionDescription, a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType } from '../describe-C6iHNlqJ.js';

package/dist/{describe-0tiXAjoO.d.ts → describe-C6iHNlqJ.d.ts}

@@ -133,6 +133,15 @@ interface DescribedField {
         } | {
             readonly rider: string;
         };
+        /**
+         * Present (and `true`) only when the field opted into the equatable blind
+         * index. Additive metadata — emitted UNGATED (no `withClassified()` needed;
+         * `toJSONSchema()` carries it too), so it advertises *that* the field is
+         * equatable beyond the DEK-consent boundary. Intended: it's a structural
+         * property a schema consumer legitimately needs and discloses no value. A
+         * deployment wanting it gated can gate this behind its value-bearing door.
+         */
+        readonly equatable?: true;
     };
 }
 interface CollectionDescription {

package/dist/{dev-unlock-B_s9DUWa.d.ts → dev-unlock-Cqd5Xv5J.d.ts}

@@ -1,4 +1,4 @@
-import { cR as Role, cF as UnlockedKeyring } from './index-D05bV0_g.js';
+import { cR as Role, cF as UnlockedKeyring } from './index-D4GQe1Rx.js';
 
 /**
  * Session tokens —

package/dist/{enclave-IS7HZSQ7.js → enclave-YN6223OG.js}

@@ -12,17 +12,27 @@ import {
   rotateRecordCek,
   sealRecordToHost,
   writeEnvelopeBody
-} from "./chunk-5EZAJEES.js";
+} from "./chunk-OVO2RZAE.js";
 import {
   buildTombstone,
   isTombstone
-} from "./chunk-6RASM2J4.js";
+} from "./chunk-QKVILR7N.js";
+import "./chunk-LN22XH4B.js";
 import {
   ctEqualTags,
   deriveVdigSlotKey,
-  evaluateKofN,
+  evaluateKofN
+} from "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import {
+  computeBidxTarget,
+  deriveClassifyIndexKey,
+  deriveClassifyIndexSalt,
+  mintBidxTag
+} from "./chunk-UOEWDCUX.js";
+import {
   pbkdf2VerifyDigest
-} from "./chunk-CPAROOKP.js";
+} from "./chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -50,9 +60,8 @@ import {
   unwrapKey,
   wrapCek,
   wrapKey
-} from "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
+} from "./chunk-TLJOJBZD.js";
+import "./chunk-U23JUUPX.js";
 import "./chunk-PZ5AY32C.js";
 export {
   RecordCodec,
@@ -60,11 +69,14 @@ export {
   base64ToBuffer,
   bufferToBase64,
   buildTombstone,
+  computeBidxTarget,
   ctEqualTags,
   decrypt,
   decryptBytes,
   decryptBytesWithAAD,
   decryptDeterministic,
+  deriveClassifyIndexKey,
+  deriveClassifyIndexSalt,
   deriveDeterministicKey,
   deriveKey,
   derivePassphraseKey,
@@ -86,6 +98,7 @@ export {
   hmacSha256Hex,
   importCek,
   isTombstone,
+  mintBidxTag,
   openEnvelopeJson,
   pbkdf2VerifyDigest,
   queryByDet,
@@ -101,4 +114,4 @@ export {
   wrapKey,
   writeEnvelopeBody
 };
-//# sourceMappingURL=enclave-IS7HZSQ7.js.map
+//# sourceMappingURL=enclave-YN6223OG.js.map

package/dist/executor-CBTNU5VZ.js

@@ -0,0 +1,9 @@
+import {
+  DerivationExecutor
+} from "./chunk-XYYW64LB.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-CBTNU5VZ.js.map

package/dist/executor-DJHNSTIR.js

@@ -0,0 +1,9 @@
+import {
+  GuardExecutor
+} from "./chunk-GXGK22QU.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-DJHNSTIR.js.map

package/dist/executor-FGISLQIN.js

@@ -0,0 +1,21 @@
+import {
+  MaterializedViewExecutor
+} from "./chunk-FH52CDEW.js";
+import "./chunk-LIP6JWYK.js";
+import "./chunk-OVO2RZAE.js";
+import "./chunk-QKVILR7N.js";
+import "./chunk-LN22XH4B.js";
+import "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import "./chunk-UOEWDCUX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-TLJOJBZD.js";
+import "./chunk-P5WXDYMD.js";
+import "./chunk-ZKF6HH7V.js";
+import "./chunk-4K3MQ5S3.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MaterializedViewExecutor
+};
+//# sourceMappingURL=executor-FGISLQIN.js.map

package/dist/export-accessible-P7SLRLK3.js

@@ -0,0 +1,23 @@
+import {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+} from "./chunk-P2LDXRGP.js";
+import "./chunk-EWR7HL3K.js";
+import "./chunk-3QRQOBS7.js";
+import "./chunk-OVO2RZAE.js";
+import "./chunk-QKVILR7N.js";
+import "./chunk-LN22XH4B.js";
+import "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import "./chunk-UOEWDCUX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-TLJOJBZD.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+};
+//# sourceMappingURL=export-accessible-P7SLRLK3.js.map

package/dist/extract-partition-RNVSFHAB.js

@@ -0,0 +1,36 @@
+import {
+  extractPartition,
+  extractPartitionCore,
+  reKeyBlobs,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+} from "./chunk-NB47TXGP.js";
+import "./chunk-CPXPHQGX.js";
+import "./chunk-Z5PIUYNB.js";
+import "./chunk-EWR7HL3K.js";
+import "./chunk-3QRQOBS7.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-M66NAZA4.js";
+import "./chunk-OVO2RZAE.js";
+import "./chunk-QKVILR7N.js";
+import "./chunk-LN22XH4B.js";
+import "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import "./chunk-UOEWDCUX.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-TLJOJBZD.js";
+import "./chunk-U23JUUPX.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  extractPartition,
+  extractPartitionCore,
+  reKeyBlobs,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+};
+//# sourceMappingURL=extract-partition-RNVSFHAB.js.map

package/dist/{fanout-sidecar-DDKRG2MX.js → fanout-sidecar-WS22Q5WH.js}

@@ -1,15 +1,18 @@
 import {
   openEnvelopeJson
-} from "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import {
-  encrypt
-} from "./chunk-L4IRFTIF.js";
+} from "./chunk-OVO2RZAE.js";
+import "./chunk-QKVILR7N.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
+} from "./chunk-LN22XH4B.js";
+import "./chunk-PGFY7IRW.js";
+import "./chunk-TCIUO62Z.js";
+import "./chunk-UOEWDCUX.js";
+import "./chunk-LP7BEXCT.js";
+import {
+  encrypt
+} from "./chunk-TLJOJBZD.js";
+import "./chunk-U23JUUPX.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-formula/derivations/fanout-sidecar.ts
@@ -68,4 +71,4 @@ export {
   loadFanoutSidecar,
   saveFanoutSidecar
 };
-//# sourceMappingURL=fanout-sidecar-DDKRG2MX.js.map
+//# sourceMappingURL=fanout-sidecar-WS22Q5WH.js.map

package/dist/{fanout-sidecar-DDKRG2MX.js.map → fanout-sidecar-WS22Q5WH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-formula/derivations/fanout-sidecar.ts"],"sourcesContent":["/**\n * Per-source-row fanout sidecar for `shape: 'array'` derivations.\n *\n * Each `(sourceCollection, sourceId, outputKey)` triple gets its own\n * envelope at:\n *\n *     _meta/derivations-fanout/<sourceCollection>/<sourceId>/<outputKey>\n *\n * The envelope records the last-emitted derived row ids so the\n * dispatcher can compute the diff on every source-row update in O(1):\n * read prior keys, compute `toDelete = prev \\ new`, write new, persist\n * back.\n *\n * The body is encrypted (AES-GCM under the `_meta` collection DEK) when\n * the vault is encrypted — the `keys[]` are derived-row ids produced by a\n * user-supplied key extractor and can be content-bearing (SKU, tag, email),\n * so a ciphertext-only store must not read them, the derivation graph, or\n * `emittedAt`. Back-compat: sidecars written before this fix are plaintext\n * (`_iv === ''`); `loadFanoutSidecar` dual-reads them.\n *\n * @module\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../../kernel/types.js'\nimport { NOYDB_FORMAT_VERSION } from '../../kernel/types.js'\nimport { encrypt, openEnvelopeJson, type EnclaveKey } from '../../kernel/enclave/index.js'\n\ntype GetDEK = (collectionName: string) => Promise<EnclaveKey>\n\n/** The `_meta` collection name whose DEK encrypts the sidecar body. */\nconst FANOUT_DEK_COLLECTION = '_meta'\n\n/** Magic-prefixed JSON payload at `_meta/<recordId>`. */\nexport interface FanoutSidecar {\n  readonly _noydb_fanout: 1\n  /** Source collection name. */\n  readonly source: string\n  /** Source record id. */\n  readonly sourceId: string\n  /** Strategy output key (the key in `strategy.outputs`). */\n  readonly outputKey: string\n  /** Output collection name (audit / forensics). */\n  readonly outputCollection: string\n  /** Derived-row ids last emitted for this (source, output) pair. */\n  readonly keys: ReadonlyArray<string>\n  /** ISO timestamp of last dispatch. */\n  readonly emittedAt: string\n}\n\n/**\n * Build the canonical `_meta` record id for a fanout sidecar.\n *\n * The full path inside the store is `_meta/<this-string>`. We pack the\n * full triple into the id so a single `_meta` collection holds all\n * sidecars (collection-per-source would proliferate names; the\n * existing `_meta` flat namespace is cheaper).\n */\nfunction recordId(source: string, sourceId: string, outputKey: string): string {\n  // Use `/` as a separator. None of the components is supposed to\n  // contain it (collection names + output keys are bare identifiers;\n  // source ids are typically ULIDs / UUIDs / app-chosen strings\n  // without slashes). If a future source carries `/` in its id, we'd\n  // need an escape; deferred until that's a real case.\n  return `derivations-fanout/${source}/${sourceId}/${outputKey}`\n}\n\n/**\n * Read the sidecar; returns `undefined` only when it's legitimately absent\n * (no envelope at that id) — the correct signal for callers to skip\n * orphan-row reconciliation because there's nothing to reconcile against.\n *\n * A PRESENT envelope that fails to decrypt or parse is a data-integrity\n * problem, not an absence, and is deliberately NOT caught here: swallowing\n * it to `undefined` would look identical to \"no sidecar\" and make callers\n * (the array-derivation dispatch in `vault.ts`/`collection.ts`) silently\n * skip deleting stale derived rows on a shrink. Let `openEnvelopeJson`'s\n * `DecryptionError`/`TamperedError` and `JSON.parse` failures propagate,\n * matching the no-catch convention of sibling decrypt call-sites (e.g.\n * `with-audit/consent/consent.ts`'s `decryptEntry`).\n *\n * Dual-reads for back-compat: an envelope with `_iv === ''` is a legacy\n * plaintext sidecar (parse `_data` directly); otherwise the body was\n * encrypted under the `_meta` DEK and is decrypted first.\n */\nexport async function loadFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  source: string,\n  sourceId: string,\n  outputKey: string,\n  getDEK: GetDEK,\n  encrypted: boolean,\n): Promise<FanoutSidecar | undefined> {\n  const envelope = await store.get(vault, '_meta', recordId(source, sourceId, outputKey))\n  if (!envelope) return undefined\n  // Legacy plaintext (`_iv === ''`) reads directly; encrypted bodies decrypt.\n  const json = (!encrypted || envelope._iv === '')\n    ? envelope._data\n    : await openEnvelopeJson(envelope, await getDEK(FANOUT_DEK_COLLECTION))\n  const parsed = JSON.parse(json) as FanoutSidecar\n  if (parsed._noydb_fanout !== 1) return undefined\n  if (!Array.isArray(parsed.keys)) return undefined\n  return parsed\n}\n\n/**\n * Persist (insert/replace) the sidecar with a fresh key set. The body is\n * encrypted under the `_meta` DEK when the vault is encrypted (the `keys[]`\n * can be content-bearing); plaintext only in debug/unencrypted vaults.\n */\nexport async function saveFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  payload: {\n    readonly source: string\n    readonly sourceId: string\n    readonly outputKey: string\n    readonly outputCollection: string\n    readonly keys: ReadonlyArray<string>\n  },\n  getDEK: GetDEK,\n  encrypted: boolean,\n): Promise<void> {\n  const doc: FanoutSidecar = {\n    _noydb_fanout: 1,\n    source: payload.source,\n    sourceId: payload.sourceId,\n    outputKey: payload.outputKey,\n    outputCollection: payload.outputCollection,\n    keys: payload.keys,\n    emittedAt: new Date().toISOString(),\n  }\n  const id = recordId(payload.source, payload.sourceId, payload.outputKey)\n  const prior = await store.get(vault, '_meta', id)\n  const json = JSON.stringify(doc)\n  let envelope: EncryptedEnvelope\n  if (!encrypted) {\n    envelope = {\n      _noydb: NOYDB_FORMAT_VERSION,\n      _v: (prior?._v ?? 0) + 1,\n      _ts: new Date().toISOString(),\n      _iv: '',\n      _data: json,\n    }\n  } else {\n    const { iv, data } = await encrypt(json, await getDEK(FANOUT_DEK_COLLECTION))\n    envelope = {\n      _noydb: NOYDB_FORMAT_VERSION,\n      _v: (prior?._v ?? 0) + 1,\n      _ts: new Date().toISOString(),\n      _iv: iv,\n      _data: data,\n    }\n  }\n  await store.put(vault, '_meta', id, envelope)\n}\n\n/** Delete the sidecar (used on source-row delete cascade). */\nexport async function deleteFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  source: string,\n  sourceId: string,\n  outputKey: string,\n): Promise<void> {\n  await store.delete(vault, '_meta', recordId(source, sourceId, outputKey))\n}\n"],"mappings":";;;;;;;;;;;;;;;AA6BA,IAAM,wBAAwB;AA2B9B,SAAS,SAAS,QAAgB,UAAkB,WAA2B;AAM7E,SAAO,sBAAsB,MAAM,IAAI,QAAQ,IAAI,SAAS;AAC9D;AAoBA,eAAsB,kBACpB,OACA,OACA,QACA,UACA,WACA,QACA,WACoC;AACpC,QAAM,WAAW,MAAM,MAAM,IAAI,OAAO,SAAS,SAAS,QAAQ,UAAU,SAAS,CAAC;AACtF,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,OAAQ,CAAC,aAAa,SAAS,QAAQ,KACzC,SAAS,QACT,MAAM,iBAAiB,UAAU,MAAM,OAAO,qBAAqB,CAAC;AACxE,QAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,OAAO,kBAAkB,EAAG,QAAO;AACvC,MAAI,CAAC,MAAM,QAAQ,OAAO,IAAI,EAAG,QAAO;AACxC,SAAO;AACT;AAOA,eAAsB,kBACpB,OACA,OACA,SAOA,QACA,WACe;AACf,QAAM,MAAqB;AAAA,IACzB,eAAe;AAAA,IACf,QAAQ,QAAQ;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,kBAAkB,QAAQ;AAAA,IAC1B,MAAM,QAAQ;AAAA,IACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACA,QAAM,KAAK,SAAS,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;AACvE,QAAM,QAAQ,MAAM,MAAM,IAAI,OAAO,SAAS,EAAE;AAChD,QAAM,OAAO,KAAK,UAAU,GAAG;AAC/B,MAAI;AACJ,MAAI,CAAC,WAAW;AACd,eAAW;AAAA,MACT,QAAQ;AAAA,MACR,KAAK,OAAO,MAAM,KAAK;AAAA,MACvB,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC5B,KAAK;AAAA,MACL,OAAO;AAAA,IACT;AAAA,EACF,OAAO;AACL,UAAM,EAAE,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,MAAM,OAAO,qBAAqB,CAAC;AAC5E,eAAW;AAAA,MACT,QAAQ;AAAA,MACR,KAAK,OAAO,MAAM,KAAK;AAAA,MACvB,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC5B,KAAK;AAAA,MACL,OAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,MAAM,IAAI,OAAO,SAAS,IAAI,QAAQ;AAC9C;AAGA,eAAsB,oBACpB,OACA,OACA,QACA,UACA,WACe;AACf,QAAM,MAAM,OAAO,OAAO,SAAS,SAAS,QAAQ,UAAU,SAAS,CAAC;AAC1E;","names":[]}
+{"version":3,"sources":["../src/with-formula/derivations/fanout-sidecar.ts"],"sourcesContent":["/**\n * Per-source-row fanout sidecar for `shape: 'array'` derivations.\n *\n * Each `(sourceCollection, sourceId, outputKey)` triple gets its own\n * envelope at:\n *\n *     _meta/derivations-fanout/<sourceCollection>/<sourceId>/<outputKey>\n *\n * The envelope records the last-emitted derived row ids so the\n * dispatcher can compute the diff on every source-row update in O(1):\n * read prior keys, compute `toDelete = prev \\ new`, write new, persist\n * back.\n *\n * The body is encrypted (AES-GCM under the `_meta` collection DEK) when\n * the vault is encrypted — the `keys[]` are derived-row ids produced by a\n * user-supplied key extractor and can be content-bearing (SKU, tag, email),\n * so a ciphertext-only store must not read them, the derivation graph, or\n * `emittedAt`. Back-compat: sidecars written before this fix are plaintext\n * (`_iv === ''`); `loadFanoutSidecar` dual-reads them.\n *\n * @module\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../../kernel/types.js'\nimport { NOYDB_FORMAT_VERSION } from '../../kernel/types.js'\nimport { encrypt, openEnvelopeJson, type EnclaveKey } from '../../kernel/enclave/index.js'\n\ntype GetDEK = (collectionName: string) => Promise<EnclaveKey>\n\n/** The `_meta` collection name whose DEK encrypts the sidecar body. */\nconst FANOUT_DEK_COLLECTION = '_meta'\n\n/** Magic-prefixed JSON payload at `_meta/<recordId>`. */\nexport interface FanoutSidecar {\n  readonly _noydb_fanout: 1\n  /** Source collection name. */\n  readonly source: string\n  /** Source record id. */\n  readonly sourceId: string\n  /** Strategy output key (the key in `strategy.outputs`). */\n  readonly outputKey: string\n  /** Output collection name (audit / forensics). */\n  readonly outputCollection: string\n  /** Derived-row ids last emitted for this (source, output) pair. */\n  readonly keys: ReadonlyArray<string>\n  /** ISO timestamp of last dispatch. */\n  readonly emittedAt: string\n}\n\n/**\n * Build the canonical `_meta` record id for a fanout sidecar.\n *\n * The full path inside the store is `_meta/<this-string>`. We pack the\n * full triple into the id so a single `_meta` collection holds all\n * sidecars (collection-per-source would proliferate names; the\n * existing `_meta` flat namespace is cheaper).\n */\nfunction recordId(source: string, sourceId: string, outputKey: string): string {\n  // Use `/` as a separator. None of the components is supposed to\n  // contain it (collection names + output keys are bare identifiers;\n  // source ids are typically ULIDs / UUIDs / app-chosen strings\n  // without slashes). If a future source carries `/` in its id, we'd\n  // need an escape; deferred until that's a real case.\n  return `derivations-fanout/${source}/${sourceId}/${outputKey}`\n}\n\n/**\n * Read the sidecar; returns `undefined` only when it's legitimately absent\n * (no envelope at that id) — the correct signal for callers to skip\n * orphan-row reconciliation because there's nothing to reconcile against.\n *\n * A PRESENT envelope that fails to decrypt or parse is a data-integrity\n * problem, not an absence, and is deliberately NOT caught here: swallowing\n * it to `undefined` would look identical to \"no sidecar\" and make callers\n * (the array-derivation dispatch in `vault.ts`/`collection.ts`) silently\n * skip deleting stale derived rows on a shrink. Let `openEnvelopeJson`'s\n * `DecryptionError`/`TamperedError` and `JSON.parse` failures propagate,\n * matching the no-catch convention of sibling decrypt call-sites (e.g.\n * `with-audit/consent/consent.ts`'s `decryptEntry`).\n *\n * Dual-reads for back-compat: an envelope with `_iv === ''` is a legacy\n * plaintext sidecar (parse `_data` directly); otherwise the body was\n * encrypted under the `_meta` DEK and is decrypted first.\n */\nexport async function loadFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  source: string,\n  sourceId: string,\n  outputKey: string,\n  getDEK: GetDEK,\n  encrypted: boolean,\n): Promise<FanoutSidecar | undefined> {\n  const envelope = await store.get(vault, '_meta', recordId(source, sourceId, outputKey))\n  if (!envelope) return undefined\n  // Legacy plaintext (`_iv === ''`) reads directly; encrypted bodies decrypt.\n  const json = (!encrypted || envelope._iv === '')\n    ? envelope._data\n    : await openEnvelopeJson(envelope, await getDEK(FANOUT_DEK_COLLECTION))\n  const parsed = JSON.parse(json) as FanoutSidecar\n  if (parsed._noydb_fanout !== 1) return undefined\n  if (!Array.isArray(parsed.keys)) return undefined\n  return parsed\n}\n\n/**\n * Persist (insert/replace) the sidecar with a fresh key set. The body is\n * encrypted under the `_meta` DEK when the vault is encrypted (the `keys[]`\n * can be content-bearing); plaintext only in debug/unencrypted vaults.\n */\nexport async function saveFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  payload: {\n    readonly source: string\n    readonly sourceId: string\n    readonly outputKey: string\n    readonly outputCollection: string\n    readonly keys: ReadonlyArray<string>\n  },\n  getDEK: GetDEK,\n  encrypted: boolean,\n): Promise<void> {\n  const doc: FanoutSidecar = {\n    _noydb_fanout: 1,\n    source: payload.source,\n    sourceId: payload.sourceId,\n    outputKey: payload.outputKey,\n    outputCollection: payload.outputCollection,\n    keys: payload.keys,\n    emittedAt: new Date().toISOString(),\n  }\n  const id = recordId(payload.source, payload.sourceId, payload.outputKey)\n  const prior = await store.get(vault, '_meta', id)\n  const json = JSON.stringify(doc)\n  let envelope: EncryptedEnvelope\n  if (!encrypted) {\n    envelope = {\n      _noydb: NOYDB_FORMAT_VERSION,\n      _v: (prior?._v ?? 0) + 1,\n      _ts: new Date().toISOString(),\n      _iv: '',\n      _data: json,\n    }\n  } else {\n    const { iv, data } = await encrypt(json, await getDEK(FANOUT_DEK_COLLECTION))\n    envelope = {\n      _noydb: NOYDB_FORMAT_VERSION,\n      _v: (prior?._v ?? 0) + 1,\n      _ts: new Date().toISOString(),\n      _iv: iv,\n      _data: data,\n    }\n  }\n  await store.put(vault, '_meta', id, envelope)\n}\n\n/** Delete the sidecar (used on source-row delete cascade). */\nexport async function deleteFanoutSidecar(\n  store: NoydbStore,\n  vault: string,\n  source: string,\n  sourceId: string,\n  outputKey: string,\n): Promise<void> {\n  await store.delete(vault, '_meta', recordId(source, sourceId, outputKey))\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA6BA,IAAM,wBAAwB;AA2B9B,SAAS,SAAS,QAAgB,UAAkB,WAA2B;AAM7E,SAAO,sBAAsB,MAAM,IAAI,QAAQ,IAAI,SAAS;AAC9D;AAoBA,eAAsB,kBACpB,OACA,OACA,QACA,UACA,WACA,QACA,WACoC;AACpC,QAAM,WAAW,MAAM,MAAM,IAAI,OAAO,SAAS,SAAS,QAAQ,UAAU,SAAS,CAAC;AACtF,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,OAAQ,CAAC,aAAa,SAAS,QAAQ,KACzC,SAAS,QACT,MAAM,iBAAiB,UAAU,MAAM,OAAO,qBAAqB,CAAC;AACxE,QAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,OAAO,kBAAkB,EAAG,QAAO;AACvC,MAAI,CAAC,MAAM,QAAQ,OAAO,IAAI,EAAG,QAAO;AACxC,SAAO;AACT;AAOA,eAAsB,kBACpB,OACA,OACA,SAOA,QACA,WACe;AACf,QAAM,MAAqB;AAAA,IACzB,eAAe;AAAA,IACf,QAAQ,QAAQ;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,kBAAkB,QAAQ;AAAA,IAC1B,MAAM,QAAQ;AAAA,IACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACA,QAAM,KAAK,SAAS,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;AACvE,QAAM,QAAQ,MAAM,MAAM,IAAI,OAAO,SAAS,EAAE;AAChD,QAAM,OAAO,KAAK,UAAU,GAAG;AAC/B,MAAI;AACJ,MAAI,CAAC,WAAW;AACd,eAAW;AAAA,MACT,QAAQ;AAAA,MACR,KAAK,OAAO,MAAM,KAAK;AAAA,MACvB,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC5B,KAAK;AAAA,MACL,OAAO;AAAA,IACT;AAAA,EACF,OAAO;AACL,UAAM,EAAE,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,MAAM,OAAO,qBAAqB,CAAC;AAC5E,eAAW;AAAA,MACT,QAAQ;AAAA,MACR,KAAK,OAAO,MAAM,KAAK;AAAA,MACvB,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC5B,KAAK;AAAA,MACL,OAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,MAAM,IAAI,OAAO,SAAS,IAAI,QAAQ;AAC9C;AAGA,eAAsB,oBACpB,OACA,OACA,QACA,UACA,WACe;AACf,QAAM,MAAM,OAAO,OAAO,SAAS,SAAS,QAAQ,UAAU,SAAS,CAAC;AAC1E;","names":[]}

package/dist/fence-watcher-DHQ775JB.js

@@ -0,0 +1,69 @@
+import "./chunk-PZ5AY32C.js";
+
+// src/with-shape/schema-update/fence-watcher.ts
+var FenceWatcher = class {
+  #coordination;
+  #vault;
+  #writerId;
+  #sessionId;
+  #onFlush;
+  #now;
+  #emit;
+  #lastState = null;
+  #quiescedAtVersion = null;
+  #timer;
+  constructor(opts) {
+    this.#coordination = opts.coordination;
+    this.#vault = opts.vault;
+    this.#writerId = opts.clientId;
+    this.#sessionId = opts.sessionId ?? opts.clientId;
+    this.#onFlush = opts.onFlush;
+    this.#now = opts.now ?? (() => Date.now());
+    this.#emit = opts.emit ?? (() => {
+    });
+  }
+  /** Publish liveness (and the current ack) without changing quiesce state. */
+  async beat() {
+    await this.#coordination.reportPresence(this.#vault, {
+      writerId: this.#writerId,
+      sessionId: this.#sessionId,
+      lastSeen: this.#now(),
+      quiescedAtVersion: this.#quiescedAtVersion
+    });
+  }
+  /** Poll the fence; quiesce on draining; emit on transitions. */
+  async check() {
+    const fence = await this.#coordination.readFence(this.#vault);
+    if (fence.fenceState !== this.#lastState) {
+      this.#lastState = fence.fenceState;
+      this.#emit({ currentSchemaVersion: fence.currentSchemaVersion, fenceState: fence.fenceState });
+    }
+    if (fence.fenceState === "draining" && this.#quiescedAtVersion !== fence.currentSchemaVersion) {
+      await this.#onFlush();
+      this.#quiescedAtVersion = fence.currentSchemaVersion;
+      await this.beat();
+    }
+    if (fence.fenceState === "normal") {
+      this.#quiescedAtVersion = null;
+    }
+  }
+  start(intervalMs) {
+    if (this.#timer) return;
+    this.#timer = setInterval(() => {
+      void this.beat();
+      void this.check();
+    }, intervalMs);
+    const timer = this.#timer;
+    if (typeof timer.unref === "function") timer.unref();
+  }
+  stop() {
+    if (this.#timer) {
+      clearInterval(this.#timer);
+      this.#timer = void 0;
+    }
+  }
+};
+export {
+  FenceWatcher
+};
+//# sourceMappingURL=fence-watcher-DHQ775JB.js.map

package/dist/fence-watcher-DHQ775JB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/schema-update/fence-watcher.ts"],"sourcesContent":["/**\n * Per-client schema-fence watcher. Watches the fence via the injected\n * {@link CoordinationProvider}; on `draining` it drains in-flight writes\n * and reports presence (its ack); emits a same-instance signal on every\n * state transition (for UI). Driven by an interval in production and by\n * explicit `check()`/`beat()` in tests.\n *\n * The transport is the coordination port: the default\n * {@link StoreCoordinationProvider} maps `reportPresence` →\n * `_meta/schema-fence:client:<id>` and `readFence` → `_meta/schema-fence`,\n * so behavior is byte-for-byte the same; `by-tabs` / `by-peer` swap in\n * real-time push transports.\n */\nimport { type FenceState } from './fence.js'\nimport type { CoordinationProvider } from '../../port/by/index.js'\n\nexport interface FenceWatcherEvent {\n  readonly currentSchemaVersion: number\n  readonly fenceState: FenceState\n}\n\nexport class FenceWatcher {\n  readonly #coordination: CoordinationProvider\n  readonly #vault: string\n  readonly #writerId: string\n  readonly #sessionId: string\n  readonly #onFlush: () => Promise<void>\n  readonly #now: () => number\n  readonly #emit: (e: FenceWatcherEvent) => void\n  #lastState: FenceState | null = null\n  #quiescedAtVersion: number | null = null\n  #timer: ReturnType<typeof setInterval> | undefined\n\n  constructor(opts: {\n    coordination: CoordinationProvider\n    vault: string\n    clientId: string\n    sessionId?: string\n    onFlush: () => Promise<void>\n    now?: () => number\n    emit?: (e: FenceWatcherEvent) => void\n  }) {\n    this.#coordination = opts.coordination\n    this.#vault = opts.vault\n    this.#writerId = opts.clientId\n    this.#sessionId = opts.sessionId ?? opts.clientId\n    this.#onFlush = opts.onFlush\n    this.#now = opts.now ?? (() => Date.now())\n    this.#emit = opts.emit ?? (() => {})\n  }\n\n  /** Publish liveness (and the current ack) without changing quiesce state. */\n  async beat(): Promise<void> {\n    await this.#coordination.reportPresence(this.#vault, {\n      writerId: this.#writerId,\n      sessionId: this.#sessionId,\n      lastSeen: this.#now(),\n      quiescedAtVersion: this.#quiescedAtVersion,\n    })\n  }\n\n  /** Poll the fence; quiesce on draining; emit on transitions. */\n  async check(): Promise<void> {\n    const fence = await this.#coordination.readFence(this.#vault)\n    if (fence.fenceState !== this.#lastState) {\n      this.#lastState = fence.fenceState\n      this.#emit({ currentSchemaVersion: fence.currentSchemaVersion, fenceState: fence.fenceState })\n    }\n    if (fence.fenceState === 'draining' && this.#quiescedAtVersion !== fence.currentSchemaVersion) {\n      await this.#onFlush()\n      this.#quiescedAtVersion = fence.currentSchemaVersion\n      await this.beat()\n    }\n    if (fence.fenceState === 'normal') {\n      this.#quiescedAtVersion = null\n    }\n  }\n\n  start(intervalMs: number): void {\n    if (this.#timer) return\n    this.#timer = setInterval(() => { void this.beat(); void this.check() }, intervalMs)\n    const timer = this.#timer as unknown as { unref?: () => void }\n    if (typeof timer.unref === 'function') timer.unref() // don't keep the process alive\n  }\n\n  stop(): void {\n    if (this.#timer) { clearInterval(this.#timer); this.#timer = undefined }\n  }\n}\n"],"mappings":";;;AAqBO,IAAM,eAAN,MAAmB;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,aAAgC;AAAA,EAChC,qBAAoC;AAAA,EACpC;AAAA,EAEA,YAAY,MAQT;AACD,SAAK,gBAAgB,KAAK;AAC1B,SAAK,SAAS,KAAK;AACnB,SAAK,YAAY,KAAK;AACtB,SAAK,aAAa,KAAK,aAAa,KAAK;AACzC,SAAK,WAAW,KAAK;AACrB,SAAK,OAAO,KAAK,QAAQ,MAAM,KAAK,IAAI;AACxC,SAAK,QAAQ,KAAK,SAAS,MAAM;AAAA,IAAC;AAAA,EACpC;AAAA;AAAA,EAGA,MAAM,OAAsB;AAC1B,UAAM,KAAK,cAAc,eAAe,KAAK,QAAQ;AAAA,MACnD,UAAU,KAAK;AAAA,MACf,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK,KAAK;AAAA,MACpB,mBAAmB,KAAK;AAAA,IAC1B,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,QAAuB;AAC3B,UAAM,QAAQ,MAAM,KAAK,cAAc,UAAU,KAAK,MAAM;AAC5D,QAAI,MAAM,eAAe,KAAK,YAAY;AACxC,WAAK,aAAa,MAAM;AACxB,WAAK,MAAM,EAAE,sBAAsB,MAAM,sBAAsB,YAAY,MAAM,WAAW,CAAC;AAAA,IAC/F;AACA,QAAI,MAAM,eAAe,cAAc,KAAK,uBAAuB,MAAM,sBAAsB;AAC7F,YAAM,KAAK,SAAS;AACpB,WAAK,qBAAqB,MAAM;AAChC,YAAM,KAAK,KAAK;AAAA,IAClB;AACA,QAAI,MAAM,eAAe,UAAU;AACjC,WAAK,qBAAqB;AAAA,IAC5B;AAAA,EACF;AAAA,EAEA,MAAM,YAA0B;AAC9B,QAAI,KAAK,OAAQ;AACjB,SAAK,SAAS,YAAY,MAAM;AAAE,WAAK,KAAK,KAAK;AAAG,WAAK,KAAK,MAAM;AAAA,IAAE,GAAG,UAAU;AACnF,UAAM,QAAQ,KAAK;AACnB,QAAI,OAAO,MAAM,UAAU,WAAY,OAAM,MAAM;AAAA,EACrD;AAAA,EAEA,OAAa;AACX,QAAI,KAAK,QAAQ;AAAE,oBAAc,KAAK,MAAM;AAAG,WAAK,SAAS;AAAA,IAAU;AAAA,EACzE;AACF;","names":[]}