@noy-db/hub 0.3.0-pre.3 → 0.3.0-pre.5

package/dist/chunk-ZFME46HJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-audit/consent/consent.ts"],"sourcesContent":["/**\n * Consent boundaries — per-access audit log.\n *\n * ```ts\n * const audit = await vault.withConsent(\n *   { purpose: 'quarterly-review', consentHash: '7f3a...' },\n *   async () => {\n *     const invoices = await vault.collection<Invoice>('invoices').list()\n *     return invoices\n *   },\n * )\n *\n * const log = await vault.consentAudit({ since: '2026-01-01T00:00:00Z' })\n * // → entries: { actor, purpose, consentHash, ts, op, collection, id }\n * ```\n *\n * ## Contract\n *\n * Every `get` / `put` / `delete` that happens inside a `withConsent`\n * callback writes one entry to the reserved `_consent_audit`\n * collection. Entries are encrypted with the vault's consent-audit\n * DEK (separate from per-user-collection DEKs so access-log queries\n * don't require unwrapping individual collection keys). Outside a\n * `withConsent` scope, no entries are written — consent is\n * opt-in by design (GDPR Art. 7: *demonstrable*, *specific*\n * consent).\n *\n * ## Why store the hash, not the consent text?\n *\n * The `consentHash` is the sha256 of whatever consent receipt the\n * actor presented (a signed GDPR banner click, a HIPAA authorisation\n * PDF, an API-level `X-Consent-Hash` header). Storing only the hash:\n *\n *   1. Keeps the audit log small and indexable.\n *   2. Preserves zero-knowledge at the adapter — adapters see\n *      ciphertext envelopes of `{ actor, purpose, consentHash, ts,\n *      op, collection, id }`, never the consent record itself.\n *   3. Lets the regulator verify a presented consent doc matches\n *      the logged hash at audit time without the system ever\n *      possessing the doc.\n *\n * ## Concurrency\n *\n * The consent context lives on the {@link Vault} instance. Two\n * concurrent `withConsent` calls on the same Vault would stomp each\n * other — documented limitation; adopters needing per-flight scope\n * should use separate Vault instances or an AsyncLocalStorage shim.\n *\n * @module\n */\nimport type { EncryptedEnvelope, NoydbStore } from '../../kernel/types.js'\nimport { encrypt, openEnvelopeJson, type EnclaveKey } from '../../kernel/enclave/index.js'\nimport { generateULID } from '../../with-pod/ulid.js'\n\n/** Reserved collection for consent-audit entries. */\nexport const CONSENT_AUDIT_COLLECTION = '_consent_audit'\n\n/**\n * The consent scope active for a block of work. Set via\n * `vault.withConsent()`; observed by the collection's access hooks.\n */\nexport interface ConsentContext {\n  /**\n   * What this access is for. Used by the audit query (`consentAudit\n   * ({ purpose })`) and carried in the stored entry. Free-form; the\n   * regulator or compliance tooling decides the vocabulary.\n   */\n  readonly purpose: string\n  /**\n   * Hex-encoded sha256 of whatever consent artefact the actor\n   * presented. Stored as-is in each entry.\n   */\n  readonly consentHash: string\n}\n\n/** Access operation recorded in an audit entry. */\nexport type ConsentOp = 'get' | 'put' | 'delete' | 'reveal' | 'verify'\n\n/** One consent-audit record, as decrypted for the caller. */\nexport interface ConsentAuditEntry {\n  /** ULID — stable insertion-order key. */\n  readonly id: string\n  readonly timestamp: string\n  readonly actor: string\n  readonly purpose: string\n  readonly consentHash: string\n  readonly op: ConsentOp\n  readonly collection: string\n  readonly recordId: string\n}\n\n/** Filter passed to `vault.consentAudit()`. */\nexport interface ConsentAuditFilter {\n  /** Only entries at or after this ISO timestamp. */\n  readonly since?: string\n  /** Only entries at or before this ISO timestamp. */\n  readonly until?: string\n  /** Match entries targeting this collection. */\n  readonly collection?: string\n  /** Match entries written by this actor. */\n  readonly actor?: string\n  /** Match entries with this purpose. */\n  readonly purpose?: string\n}\n\n/**\n * Write one audit entry. Called by Vault's onAccess hook when a\n * consent context is active.\n */\nexport async function writeConsentEntry(\n  adapter: NoydbStore,\n  vault: string,\n  encrypted: boolean,\n  entry: Omit<ConsentAuditEntry, 'id' | 'timestamp'>,\n  getDEK: (collection: string) => Promise<EnclaveKey>,\n): Promise<void> {\n  const id = generateULID()\n  const full: ConsentAuditEntry = {\n    id,\n    timestamp: new Date().toISOString(),\n    ...entry,\n  }\n  const envelope = await buildEnvelope(full, encrypted, getDEK)\n  await adapter.put(vault, CONSENT_AUDIT_COLLECTION, id, envelope)\n}\n\n/** Load + decrypt + filter all entries. */\nexport async function loadConsentEntries(\n  adapter: NoydbStore,\n  vault: string,\n  encrypted: boolean,\n  getDEK: (collection: string) => Promise<EnclaveKey>,\n  filter: ConsentAuditFilter = {},\n): Promise<ConsentAuditEntry[]> {\n  const ids = await adapter.list(vault, CONSENT_AUDIT_COLLECTION)\n  const entries: ConsentAuditEntry[] = []\n\n  for (const id of ids.sort()) {\n    const envelope = await adapter.get(vault, CONSENT_AUDIT_COLLECTION, id)\n    if (!envelope) continue\n    const entry = await decryptEntry(envelope, encrypted, getDEK)\n    if (!matchesFilter(entry, filter)) continue\n    entries.push(entry)\n  }\n  return entries\n}\n\n// ── internals ──────────────────────────────────────────────────────\n\nasync function buildEnvelope(\n  entry: ConsentAuditEntry,\n  encrypted: boolean,\n  getDEK: (collection: string) => Promise<EnclaveKey>,\n): Promise<EncryptedEnvelope> {\n  const json = JSON.stringify(entry)\n  if (!encrypted) {\n    return {\n      _noydb: 1,\n      _v: 1,\n      _ts: entry.timestamp,\n      _iv: '',\n      _data: json,\n    }\n  }\n  const dek = await getDEK(CONSENT_AUDIT_COLLECTION)\n  const { iv, data } = await encrypt(json, dek)\n  return {\n    _noydb: 1,\n    _v: 1,\n    _ts: entry.timestamp,\n    _iv: iv,\n    _data: data,\n  }\n}\n\nasync function decryptEntry(\n  envelope: EncryptedEnvelope,\n  encrypted: boolean,\n  getDEK: (collection: string) => Promise<EnclaveKey>,\n): Promise<ConsentAuditEntry> {\n  if (!encrypted) return JSON.parse(envelope._data) as ConsentAuditEntry\n  const json = await openEnvelopeJson(envelope, await getDEK(CONSENT_AUDIT_COLLECTION))\n  return JSON.parse(json) as ConsentAuditEntry\n}\n\nfunction matchesFilter(entry: ConsentAuditEntry, f: ConsentAuditFilter): boolean {\n  if (f.since && entry.timestamp < f.since) return false\n  if (f.until && entry.timestamp > f.until) return false\n  if (f.collection && entry.collection !== f.collection) return false\n  if (f.actor && entry.actor !== f.actor) return false\n  if (f.purpose && entry.purpose !== f.purpose) return false\n  return true\n}\n"],"mappings":";;;;;;;;;;;AAuDO,IAAM,2BAA2B;AAsDxC,eAAsB,kBACpB,SACA,OACA,WACA,OACA,QACe;AACf,QAAM,KAAK,aAAa;AACxB,QAAM,OAA0B;AAAA,IAC9B;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,GAAG;AAAA,EACL;AACA,QAAM,WAAW,MAAM,cAAc,MAAM,WAAW,MAAM;AAC5D,QAAM,QAAQ,IAAI,OAAO,0BAA0B,IAAI,QAAQ;AACjE;AAGA,eAAsB,mBACpB,SACA,OACA,WACA,QACA,SAA6B,CAAC,GACA;AAC9B,QAAM,MAAM,MAAM,QAAQ,KAAK,OAAO,wBAAwB;AAC9D,QAAM,UAA+B,CAAC;AAEtC,aAAW,MAAM,IAAI,KAAK,GAAG;AAC3B,UAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,0BAA0B,EAAE;AACtE,QAAI,CAAC,SAAU;AACf,UAAM,QAAQ,MAAM,aAAa,UAAU,WAAW,MAAM;AAC5D,QAAI,CAAC,cAAc,OAAO,MAAM,EAAG;AACnC,YAAQ,KAAK,KAAK;AAAA,EACpB;AACA,SAAO;AACT;AAIA,eAAe,cACb,OACA,WACA,QAC4B;AAC5B,QAAM,OAAO,KAAK,UAAU,KAAK;AACjC,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,IAAI;AAAA,MACJ,KAAK,MAAM;AAAA,MACX,KAAK;AAAA,MACL,OAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,MAAM,MAAM,OAAO,wBAAwB;AACjD,QAAM,EAAE,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,GAAG;AAC5C,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,IAAI;AAAA,IACJ,KAAK,MAAM;AAAA,IACX,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AACF;AAEA,eAAe,aACb,UACA,WACA,QAC4B;AAC5B,MAAI,CAAC,UAAW,QAAO,KAAK,MAAM,SAAS,KAAK;AAChD,QAAM,OAAO,MAAM,iBAAiB,UAAU,MAAM,OAAO,wBAAwB,CAAC;AACpF,SAAO,KAAK,MAAM,IAAI;AACxB;AAEA,SAAS,cAAc,OAA0B,GAAgC;AAC/E,MAAI,EAAE,SAAS,MAAM,YAAY,EAAE,MAAO,QAAO;AACjD,MAAI,EAAE,SAAS,MAAM,YAAY,EAAE,MAAO,QAAO;AACjD,MAAI,EAAE,cAAc,MAAM,eAAe,EAAE,WAAY,QAAO;AAC9D,MAAI,EAAE,SAAS,MAAM,UAAU,EAAE,MAAO,QAAO;AAC/C,MAAI,EAAE,WAAW,MAAM,YAAY,EAAE,QAAS,QAAO;AACrD,SAAO;AACT;","names":[]}

package/dist/collection-facade-XPVRHBGU.js

@@ -1,36 +0,0 @@
-import {
-  buildPersistedIndexCallbacks,
-  buildRetrievalDocs,
-  embedOnWrite,
-  flushIndex,
-  hasIndexedBlobFields,
-  retrieve,
-  search,
-  similarTo,
-  warmIndex
-} from "./chunk-UP6EMMDI.js";
-import "./chunk-AURFOK3D.js";
-import "./chunk-PYWW4KLO.js";
-import "./chunk-5A6TC3RQ.js";
-import "./chunk-2N4MUSF3.js";
-import "./chunk-6EVZXETK.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-7IP75FP2.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  buildPersistedIndexCallbacks,
-  buildRetrievalDocs,
-  embedOnWrite,
-  flushIndex,
-  hasIndexedBlobFields,
-  retrieve,
-  search,
-  similarTo,
-  warmIndex
-};
-//# sourceMappingURL=collection-facade-XPVRHBGU.js.map

package/dist/delegation-4HUHUE6T.js

@@ -1,22 +0,0 @@
-import {
-  DELEGATIONS_COLLECTION,
-  issueDelegation,
-  loadActiveDelegations,
-  revokeDelegation
-} from "./chunk-YDP2SA5K.js";
-import "./chunk-O5DNEXQC.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DELEGATIONS_COLLECTION,
-  issueDelegation,
-  loadActiveDelegations,
-  revokeDelegation
-};
-//# sourceMappingURL=delegation-4HUHUE6T.js.map

package/dist/executor-ANFBCOYA.js

@@ -1,9 +0,0 @@
-import {
-  DerivationExecutor
-} from "./chunk-ZD4D7UM6.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DerivationExecutor
-};
-//# sourceMappingURL=executor-ANFBCOYA.js.map

package/dist/executor-IKT47SH2.js

@@ -1,9 +0,0 @@
-import {
-  GuardExecutor
-} from "./chunk-DGUR3CC4.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  GuardExecutor
-};
-//# sourceMappingURL=executor-IKT47SH2.js.map

package/dist/executor-OIECZXTV.js

@@ -1,18 +0,0 @@
-import {
-  MaterializedViewExecutor
-} from "./chunk-CVXLJIAV.js";
-import "./chunk-5Z3RNFJC.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-NPVICKZE.js";
-import "./chunk-QLQS5A7X.js";
-import "./chunk-7IP75FP2.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  MaterializedViewExecutor
-};
-//# sourceMappingURL=executor-OIECZXTV.js.map

package/dist/export-accessible-NZWCFZHL.js

@@ -1,20 +0,0 @@
-import {
-  buildAccessibleBundle,
-  exportAccessibleData,
-  resolveAccessibleCollections
-} from "./chunk-7MHVHGQZ.js";
-import "./chunk-3UDPDRUC.js";
-import "./chunk-VBYVKOMJ.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  buildAccessibleBundle,
-  exportAccessibleData,
-  resolveAccessibleCollections
-};
-//# sourceMappingURL=export-accessible-NZWCFZHL.js.map

package/dist/extract-partition-52LX6RQH.js

@@ -1,33 +0,0 @@
-import {
-  extractPartition,
-  extractPartitionCore,
-  reKeyBlobs,
-  reKeyClosure,
-  reKeyLedger,
-  reKeySchemas,
-  sealDeks
-} from "./chunk-IWVWB7BZ.js";
-import "./chunk-U6OM4E67.js";
-import "./chunk-55HDKLI3.js";
-import "./chunk-3UDPDRUC.js";
-import "./chunk-VBYVKOMJ.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-I7FD46FF.js";
-import "./chunk-6EVZXETK.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  extractPartition,
-  extractPartitionCore,
-  reKeyBlobs,
-  reKeyClosure,
-  reKeyLedger,
-  reKeySchemas,
-  sealDeks
-};
-//# sourceMappingURL=extract-partition-52LX6RQH.js.map

package/dist/issue-F4SYPJGJ.js

@@ -1,16 +0,0 @@
-import {
-  issueAttestationCore
-} from "./chunk-PUNJAEY6.js";
-import "./chunk-E4YJUNPU.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  issueAttestationCore
-};
-//# sourceMappingURL=issue-F4SYPJGJ.js.map

package/dist/liberate-6LDETRIW.js

@@ -1,21 +0,0 @@
-import {
-  liberateVault
-} from "./chunk-BV7KNFJY.js";
-import "./chunk-6CNLU4TO.js";
-import "./chunk-7MHVHGQZ.js";
-import "./chunk-AY4P6PHN.js";
-import "./chunk-3UDPDRUC.js";
-import "./chunk-VBYVKOMJ.js";
-import "./chunk-5A6TC3RQ.js";
-import "./chunk-2N4MUSF3.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  liberateVault
-};
-//# sourceMappingURL=liberate-6LDETRIW.js.map

package/dist/noydb-WQNBVJIG.js

@@ -1,54 +0,0 @@
-import {
-  Noydb,
-  createNoydb
-} from "./chunk-ADBMJDBW.js";
-import "./chunk-LES2Z7B4.js";
-import "./chunk-6I2YPLAG.js";
-import "./chunk-4NZCZUGL.js";
-import "./chunk-UP6EMMDI.js";
-import "./chunk-YN66UOXT.js";
-import "./chunk-ZRDYQZYH.js";
-import "./chunk-MIOLJG2R.js";
-import "./chunk-4DZGZ7II.js";
-import "./chunk-HGQG3VIP.js";
-import "./chunk-Z44OY24N.js";
-import "./chunk-AURFOK3D.js";
-import "./chunk-JFYIHLU3.js";
-import "./chunk-4NMFWOS2.js";
-import "./chunk-NMRKAGHE.js";
-import "./chunk-2KSPDSWI.js";
-import "./chunk-LKBLAUOB.js";
-import "./chunk-U6OM4E67.js";
-import "./chunk-AY4P6PHN.js";
-import "./chunk-YTIAXSUE.js";
-import "./chunk-GHVIKOHT.js";
-import "./chunk-PYWW4KLO.js";
-import "./chunk-OVIVYAQL.js";
-import "./chunk-IJW6K6UX.js";
-import "./chunk-O5DNEXQC.js";
-import "./chunk-VQNJ7UZL.js";
-import "./chunk-5A6TC3RQ.js";
-import "./chunk-2N4MUSF3.js";
-import "./chunk-ZJADGNYF.js";
-import "./chunk-DHIN36UC.js";
-import "./chunk-I7FD46FF.js";
-import "./chunk-6EVZXETK.js";
-import "./chunk-6OQ7NKMZ.js";
-import "./chunk-FELHYKIO.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-N2FP26NH.js";
-import "./chunk-TICO2I2O.js";
-import "./chunk-NPVICKZE.js";
-import "./chunk-QLQS5A7X.js";
-import "./chunk-7IP75FP2.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  Noydb,
-  createNoydb
-};
-//# sourceMappingURL=noydb-WQNBVJIG.js.map

package/dist/registry-6HZ2JSQ7.js

@@ -1,14 +0,0 @@
-import {
-  DerivationRegistry
-} from "./chunk-P6UXDALK.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DerivationRegistry
-};
-//# sourceMappingURL=registry-6HZ2JSQ7.js.map

package/dist/registry-GPXZQ7DT.js

@@ -1,9 +0,0 @@
-import {
-  OverlayedViewRegistry
-} from "./chunk-ZAWD6O46.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  OverlayedViewRegistry
-};
-//# sourceMappingURL=registry-GPXZQ7DT.js.map

package/dist/registry-USYD2ECC.js

@@ -1,16 +0,0 @@
-import {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-} from "./chunk-5Z3RNFJC.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-};
-//# sourceMappingURL=registry-USYD2ECC.js.map

package/dist/request-withdrawal-54V4L6CR.js

@@ -1,28 +0,0 @@
-import {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-} from "./chunk-IIK7W3AN.js";
-import "./chunk-6CNLU4TO.js";
-import "./chunk-7MHVHGQZ.js";
-import "./chunk-3UDPDRUC.js";
-import "./chunk-VBYVKOMJ.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-};
-//# sourceMappingURL=request-withdrawal-54V4L6CR.js.map

package/dist/revoke-JV26NTQD.js

@@ -1,21 +0,0 @@
-import {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-} from "./chunk-P6DN5QU7.js";
-import "./chunk-E4YJUNPU.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-};
-//# sourceMappingURL=revoke-JV26NTQD.js.map

package/dist/signer-AE56T5HE.js

@@ -1,22 +0,0 @@
-import {
-  ATTESTATIONS_COLLECTION,
-  REVOKED_RECORD_ID,
-  SIGNER_RECORD_ID,
-  loadOrCreateSigner,
-  loadSigner
-} from "./chunk-E4YJUNPU.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  ATTESTATIONS_COLLECTION,
-  REVOKED_RECORD_ID,
-  SIGNER_RECORD_ID,
-  loadOrCreateSigner,
-  loadSigner
-};
-//# sourceMappingURL=signer-AE56T5HE.js.map

package/dist/validators-Dzn7T-3x.d.ts

@@ -1,62 +0,0 @@
-import { dO as ClassifiedEntry, dL as ClassifiedFieldSpec, dP as ClassifiedGroup } from './index-D05bV0_g.js';
-
-/**
- * Configuration/write errors for classified fields. @module
- *
- * `ClassifiedConfigError` / `ClassifiedRevealError` moved to `kernel/errors.ts`
- * (stage 2) so `kernel/enclave/classify/*` can throw them without importing
- * with-*. Re-exported here under the same names so existing import paths
- * keep working.
- */
-
-declare class ClassifiedNeverStoredError extends Error {
-    readonly collection: string;
-    readonly field: string;
-    constructor(collection: string, field: string);
-}
-declare class ClassifiedValidationError extends Error {
-    readonly collection: string;
-    readonly field: string;
-    constructor(collection: string, field: string, detail: string);
-}
-
-/** Flatten a classifiedFields config into a per-field map + rider computed entries. @module */
-
-interface ResolvedClassified {
-    readonly byField: Record<string, ClassifiedFieldSpec>;
-    readonly riderComputed: Record<string, (record: Record<string, unknown>) => unknown>;
-}
-declare function resolveClassifiedFields(collection: string, config: Record<string, ClassifiedEntry>): ResolvedClassified;
-
-/** The preset catalog (stage 1). Presets are hub-owned; devs get declarative
- *  knobs, not read-side callbacks (design law D2/D3). @module */
-
-declare const classified: {
-    /** Composite card type. PAN sealed + last4/bin riders; CVC is storage:'never' (PCI-aware). */
-    creditCard(fields: {
-        pan: string;
-        expiry?: string;
-        cvc?: string;
-    }): ClassifiedGroup;
-    birthDate(): ClassifiedFieldSpec;
-    email(): ClassifiedFieldSpec;
-    phone(): ClassifiedFieldSpec;
-    /** Digest-only password: verify-without-reveal; never listed, never revealed.
-     *  Enumeration math is on the caller for low-entropy values — see the
-     *  per-preset docs; the hub ships no rate limiter in this slice (spec §5). */
-    password(opts?: {
-        minLength?: number;
-        rotateDays?: number;
-        notLastN?: number;
-    }): ClassifiedFieldSpec;
-    /** Digest-only secret answer: normalized (casefold/trim/collapse), groupable
-     *  into k-of-n matchGroup challenges. Low-entropy by nature — document the
-     *  enumeration math to your users; add app-side rate limiting. */
-    secretAnswer(): ClassifiedFieldSpec;
-};
-
-/** Pure write-time validators. Exported so userland can validate storage:'never'
- *  fields (e.g. CVC) at capture, before dropping them. @module */
-declare function luhnCheck(pan: string): boolean;
-
-export { ClassifiedNeverStoredError as C, type ResolvedClassified as R, ClassifiedValidationError as a, classified as c, luhnCheck as l, resolveClassifiedFields as r };

package/dist/withdraw-accessible-DGA4V2TP.js

@@ -1,25 +0,0 @@
-import {
-  FROZEN_SNAPSHOTS_COLLECTION,
-  freezeAndDeleteClosure,
-  freezeSnapshotOnly,
-  randomId,
-  withdrawAccessibleData
-} from "./chunk-6CNLU4TO.js";
-import "./chunk-7MHVHGQZ.js";
-import "./chunk-3UDPDRUC.js";
-import "./chunk-VBYVKOMJ.js";
-import "./chunk-5EZAJEES.js";
-import "./chunk-6RASM2J4.js";
-import "./chunk-CPAROOKP.js";
-import "./chunk-L4IRFTIF.js";
-import "./chunk-OCDUQUAP.js";
-import "./chunk-BLZRNHMG.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  FROZEN_SNAPSHOTS_COLLECTION,
-  freezeAndDeleteClosure,
-  freezeSnapshotOnly,
-  randomId,
-  withdrawAccessibleData
-};
-//# sourceMappingURL=withdraw-accessible-DGA4V2TP.js.map