@noy-db/hub 0.3.0-pre.4 → 0.3.0-pre.6

package/dist/{chunk-P5WXDYMD.js → chunk-5GQE5IDB.js}

@@ -1,13 +1,13 @@
 import {
   moneyRuntime,
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 import {
   applyI18nLocale
-} from "./chunk-4K3MQ5S3.js";
+} from "./chunk-BASCPHNM.js";
 import {
   GroupCardinalityError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-lookup/aggregate/reducers.ts
 function count(opts) {
@@ -510,4 +510,4 @@ export {
   groupAndReduce,
   GroupedAggregation
 };
-//# sourceMappingURL=chunk-P5WXDYMD.js.map
+//# sourceMappingURL=chunk-5GQE5IDB.js.map

package/dist/{chunk-TLJOJBZD.js → chunk-5HZULLHE.js}

@@ -2,7 +2,7 @@ import {
   DecryptionError,
   InvalidKeyError,
   TamperedError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/enclave/crypto.ts
 var PBKDF2_ITERATIONS = 6e5;
@@ -401,4 +401,4 @@ export {
   bufferToBase64,
   base64ToBuffer
 };
-//# sourceMappingURL=chunk-TLJOJBZD.js.map
+//# sourceMappingURL=chunk-5HZULLHE.js.map

package/dist/chunk-5JQMX2EH.js

@@ -0,0 +1,50 @@
+import {
+  SatelliteConfigError
+} from "./chunk-OJ64XMPJ.js";
+
+// src/with-shape/satellites/validate.ts
+function validateSatelliteDeclaration(input) {
+  if (input.baseIsSatellite) {
+    throw new SatelliteConfigError(
+      `R-S3: "${input.satellite}" declares satelliteOf "${input.satelliteOf}", which is itself a satellite \u2014 no satellite-of-satellite chains.`
+    );
+  }
+  if (input.crdtMode) {
+    throw new SatelliteConfigError(
+      `R-S8: crdtMode is refused on either member of a satellite pair in v1 (revert cannot compensate a merge).`
+    );
+  }
+  if (!input.fields || input.fields.length === 0) {
+    throw new SatelliteConfigError(`R-S5: satellite "${input.satellite}" must declare a non-empty fields list.`);
+  }
+  if (input.fields.includes("id")) {
+    throw new SatelliteConfigError(`R-S5: fields must not contain the shared key "id".`);
+  }
+  if (input.joined !== void 0 && (input.joined === input.satellite || input.joined === input.satelliteOf)) {
+    throw new SatelliteConfigError(`R-S5: joined name "${input.joined}" collides with a pair member.`);
+  }
+  if (input.joinedCollidesWithCollection) {
+    throw new SatelliteConfigError(`R-S5: joined name "${input.joined}" collides with an already-declared collection.`);
+  }
+  return Object.freeze({
+    base: input.satelliteOf,
+    satellite: input.satellite,
+    fields: Object.freeze([...input.fields]),
+    joined: input.joined
+  });
+}
+function hashFields(fields) {
+  const s = [...fields].sort().join("");
+  let h = 2166136261;
+  for (let i = 0; i < s.length; i++) {
+    h ^= s.charCodeAt(i);
+    h = Math.imul(h, 16777619) >>> 0;
+  }
+  return h.toString(16);
+}
+
+export {
+  validateSatelliteDeclaration,
+  hashFields
+};
+//# sourceMappingURL=chunk-5JQMX2EH.js.map

package/dist/chunk-5JQMX2EH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/satellites/validate.ts"],"sourcesContent":["import { SatelliteConfigError } from '../../kernel/errors.js'\nimport type { SatelliteSpec } from './types.js'\n\nexport interface SatelliteDeclarationInput {\n  readonly satellite: string\n  readonly satelliteOf: string\n  readonly fields: readonly string[] | undefined\n  readonly joined?: string | undefined\n  /** True when the named base is itself registered as a satellite (R-S3). */\n  readonly baseIsSatellite: boolean\n  /** True when the declaring collection (or its base) sets crdtMode (R-S8). */\n  readonly crdtMode: boolean\n  /** True when `joined` names an already-declared plain (non-pair) collection (R-S5). */\n  readonly joinedCollidesWithCollection: boolean\n}\n\n/** Sync declaration refusals R-S3/R-S5/R-S8. Async cross-checks live in registry.ts. */\nexport function validateSatelliteDeclaration(input: SatelliteDeclarationInput): SatelliteSpec {\n  if (input.baseIsSatellite) {\n    throw new SatelliteConfigError(\n      `R-S3: \"${input.satellite}\" declares satelliteOf \"${input.satelliteOf}\", which is itself a satellite — no satellite-of-satellite chains.`,\n    )\n  }\n  if (input.crdtMode) {\n    throw new SatelliteConfigError(\n      `R-S8: crdtMode is refused on either member of a satellite pair in v1 (revert cannot compensate a merge).`,\n    )\n  }\n  if (!input.fields || input.fields.length === 0) {\n    throw new SatelliteConfigError(`R-S5: satellite \"${input.satellite}\" must declare a non-empty fields list.`)\n  }\n  if (input.fields.includes('id')) {\n    throw new SatelliteConfigError(`R-S5: fields must not contain the shared key \"id\".`)\n  }\n  if (input.joined !== undefined && (input.joined === input.satellite || input.joined === input.satelliteOf)) {\n    throw new SatelliteConfigError(`R-S5: joined name \"${input.joined}\" collides with a pair member.`)\n  }\n  if (input.joinedCollidesWithCollection) {\n    throw new SatelliteConfigError(`R-S5: joined name \"${input.joined}\" collides with an already-declared collection.`)\n  }\n  return Object.freeze({\n    base: input.satelliteOf,\n    satellite: input.satellite,\n    fields: Object.freeze([...input.fields]),\n    joined: input.joined,\n  })\n}\n\n/** Order-insensitive stable hash of the fields list (FNV-1a over the sorted, joined names). */\nexport function hashFields(fields: readonly string[]): string {\n  // '\\x1f' (unit separator) — NOT '' — joins the sorted names: an empty\n  // delimiter collapses ['ab'] and ['a', 'b'] onto the same hash.\n  const s = [...fields].sort().join('\\x1f')\n  let h = 0x811c9dc5\n  for (let i = 0; i < s.length; i++) {\n    h ^= s.charCodeAt(i)\n    h = Math.imul(h, 0x01000193) >>> 0\n  }\n  return h.toString(16)\n}\n"],"mappings":";;;;;AAiBO,SAAS,6BAA6B,OAAiD;AAC5F,MAAI,MAAM,iBAAiB;AACzB,UAAM,IAAI;AAAA,MACR,UAAU,MAAM,SAAS,2BAA2B,MAAM,WAAW;AAAA,IACvE;AAAA,EACF;AACA,MAAI,MAAM,UAAU;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,UAAM,IAAI,qBAAqB,oBAAoB,MAAM,SAAS,yCAAyC;AAAA,EAC7G;AACA,MAAI,MAAM,OAAO,SAAS,IAAI,GAAG;AAC/B,UAAM,IAAI,qBAAqB,oDAAoD;AAAA,EACrF;AACA,MAAI,MAAM,WAAW,WAAc,MAAM,WAAW,MAAM,aAAa,MAAM,WAAW,MAAM,cAAc;AAC1G,UAAM,IAAI,qBAAqB,sBAAsB,MAAM,MAAM,gCAAgC;AAAA,EACnG;AACA,MAAI,MAAM,8BAA8B;AACtC,UAAM,IAAI,qBAAqB,sBAAsB,MAAM,MAAM,iDAAiD;AAAA,EACpH;AACA,SAAO,OAAO,OAAO;AAAA,IACnB,MAAM,MAAM;AAAA,IACZ,WAAW,MAAM;AAAA,IACjB,QAAQ,OAAO,OAAO,CAAC,GAAG,MAAM,MAAM,CAAC;AAAA,IACvC,QAAQ,MAAM;AAAA,EAChB,CAAC;AACH;AAGO,SAAS,WAAW,QAAmC;AAG5D,QAAM,IAAI,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,GAAM;AACxC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,EAAE,WAAW,CAAC;AACnB,QAAI,KAAK,KAAK,GAAG,QAAU,MAAM;AAAA,EACnC;AACA,SAAO,EAAE,SAAS,EAAE;AACtB;","names":[]}

package/dist/{chunk-PGFY7IRW.js → chunk-5UOPIPZC.js}

@@ -2,10 +2,10 @@ import {
   base64ToBuffer,
   decryptBytesWithAAD,
   encryptBytesWithAAD
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   TamperedError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/enclave/classify/compare.ts
 var subtle = globalThis.crypto.subtle;
@@ -92,4 +92,4 @@ export {
   openVdigPayload,
   evaluateKofN
 };
-//# sourceMappingURL=chunk-PGFY7IRW.js.map
+//# sourceMappingURL=chunk-5UOPIPZC.js.map

package/dist/{chunk-6HNKCKFZ.js → chunk-65FW3ALF.js}

@@ -1,7 +1,7 @@
 import {
   ATTESTATIONS_COLLECTION,
   loadOrCreateSigner
-} from "./chunk-H5XRIJX3.js";
+} from "./chunk-WAW4VFS7.js";
 import {
   generateULID
 } from "./chunk-ZJADGNYF.js";
@@ -10,10 +10,10 @@ import {
 } from "./chunk-LN22XH4B.js";
 import {
   encrypt
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   AttestationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-audit/attestation/issue.ts
 import {
@@ -56,4 +56,4 @@ async function issueAttestationCore(ctx, args) {
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=chunk-6HNKCKFZ.js.map
+//# sourceMappingURL=chunk-65FW3ALF.js.map

package/dist/{chunk-ZKF6HH7V.js → chunk-6P5AJ2ZS.js}

@@ -1,6 +1,6 @@
 import {
   NoydbError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/money-runtime.ts
 var engine = null;
@@ -117,4 +117,4 @@ export {
   evaluateClause,
   hasFnClause
 };
-//# sourceMappingURL=chunk-ZKF6HH7V.js.map
+//# sourceMappingURL=chunk-6P5AJ2ZS.js.map

package/dist/{chunk-QNTEDPWP.js → chunk-6PALJTC2.js}

@@ -1,10 +1,10 @@
 import {
   evaluateClause,
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 import {
   IndexRequiredError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-lookup/indexing/persisted-indexes.ts
 var IDX_PREFIX = "_idx/";
@@ -427,4 +427,4 @@ export {
   PersistedCollectionIndex,
   LazyQuery
 };
-//# sourceMappingURL=chunk-QNTEDPWP.js.map
+//# sourceMappingURL=chunk-6PALJTC2.js.map

package/dist/{chunk-GBTUANXF.js → chunk-6Z435B6N.js}

@@ -1,21 +1,21 @@
 import {
   reducerBuilder
-} from "./chunk-P5WXDYMD.js";
+} from "./chunk-5GQE5IDB.js";
 import {
   evaluateClause,
   hasFnClause,
   moneyRuntime,
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 import {
   applyI18nLocale
-} from "./chunk-4K3MQ5S3.js";
+} from "./chunk-BASCPHNM.js";
 import {
   CrossJoinSourceUnknownError,
   CrossJoinTooLargeError,
   DanglingReferenceError,
   JoinTooLargeError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/query/join.ts
 var DEFAULT_JOIN_MAX_ROWS = 5e4;
@@ -1653,4 +1653,4 @@ export {
   executePlan,
   ScanBuilder
 };
-//# sourceMappingURL=chunk-GBTUANXF.js.map
+//# sourceMappingURL=chunk-6Z435B6N.js.map

package/dist/{chunk-Z3FZC5GV.js → chunk-73C4RPMX.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-LN22XH4B.js";
 import {
   decrypt
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   ReadOnlyAtInstantError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-commit/history/history.ts
 var HISTORY_COLLECTION = "_history";
@@ -277,4 +277,4 @@ export {
   VaultInstant,
   CollectionInstant
 };
-//# sourceMappingURL=chunk-Z3FZC5GV.js.map
+//# sourceMappingURL=chunk-73C4RPMX.js.map

package/dist/{chunk-VMJ5URU7.js → chunk-7A7LTSJR.js}

@@ -1,10 +1,10 @@
 import {
   assertTierAccess,
   dekKey
-} from "./chunk-BMQOH7MM.js";
+} from "./chunk-26FSVNBL.js";
 import {
   rewrapBodyToDek
-} from "./chunk-OVO2RZAE.js";
+} from "./chunk-7AGLCOYE.js";
 import {
   NOYDB_FORMAT_VERSION
 } from "./chunk-LN22XH4B.js";
@@ -12,11 +12,11 @@ import {
   decrypt,
   encrypt,
   unwrapCek
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   TierDemoteDeniedError,
   TiersNotEnabledError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-audit/tiers/active.ts
 function withTiers() {
@@ -272,4 +272,4 @@ export {
   demote,
   classifySealedShred
 };
-//# sourceMappingURL=chunk-VMJ5URU7.js.map
+//# sourceMappingURL=chunk-7A7LTSJR.js.map

package/dist/{chunk-OVO2RZAE.js → chunk-7AGLCOYE.js}

@@ -1,22 +1,22 @@
 import {
   isTombstone
 } from "./chunk-QKVILR7N.js";
-import {
-  NOYDB_FORMAT_VERSION,
-  SealedHandle
-} from "./chunk-LN22XH4B.js";
 import {
   blindedEqual,
   openVdigPayload,
   sealVdigPayload
-} from "./chunk-PGFY7IRW.js";
+} from "./chunk-5UOPIPZC.js";
 import {
   dualReadSealedSlot,
   parseSealedSlot
-} from "./chunk-TCIUO62Z.js";
+} from "./chunk-UWZ7O4NR.js";
+import {
+  NOYDB_FORMAT_VERSION,
+  SealedHandle
+} from "./chunk-LN22XH4B.js";
 import {
   mintBidxTag
-} from "./chunk-UOEWDCUX.js";
+} from "./chunk-VFQOE76I.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -35,7 +35,7 @@ import {
   generateSalt,
   unwrapCek,
   wrapCek
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   ClassifiedConfigError,
   ClassifiedRotationError,
@@ -44,7 +44,7 @@ import {
   SchemaValidationError,
   TamperedError,
   ValidationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/kernel/enclave/record-keys/lifecycle.ts
 async function resolveStableCek(deps, id) {
@@ -762,4 +762,4 @@ export {
   hasPerRecordKey,
   envelopeBodyForHash
 };
-//# sourceMappingURL=chunk-OVO2RZAE.js.map
+//# sourceMappingURL=chunk-7AGLCOYE.js.map

package/dist/{chunk-XYYW64LB.js → chunk-7CZ6YXMO.js}

@@ -1,7 +1,7 @@
 import {
   DerivationCapExceededError,
   DerivationOutputShapeError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-formula/derivations/executor.ts
 var DerivationExecutor = {
@@ -121,4 +121,4 @@ var DerivationExecutor = {
 export {
   DerivationExecutor
 };
-//# sourceMappingURL=chunk-XYYW64LB.js.map
+//# sourceMappingURL=chunk-7CZ6YXMO.js.map

package/dist/{chunk-RDHAGBEB.js → chunk-7KTL4RHZ.js}

@@ -1,9 +1,9 @@
 import {
   sha256Hex
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   DerivationCycleError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-formula/derivations/strategy-hash.ts
 async function computeStrategyHash(source, outputKeys, derive, sources) {
@@ -117,4 +117,4 @@ var DerivationRegistry = class {
 export {
   DerivationRegistry
 };
-//# sourceMappingURL=chunk-RDHAGBEB.js.map
+//# sourceMappingURL=chunk-7KTL4RHZ.js.map

package/dist/{chunk-4K3MQ5S3.js → chunk-BASCPHNM.js}

@@ -2,7 +2,7 @@ import {
   LocaleNotSpecifiedError,
   MissingTranslationError,
   ScriptViolationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-shape/i18n/policy.ts
 function resolvePolicy(onMissing, layer) {
@@ -377,4 +377,4 @@ export {
   applyI18nLocale,
   stripI18nFilled
 };
-//# sourceMappingURL=chunk-4K3MQ5S3.js.map
+//# sourceMappingURL=chunk-BASCPHNM.js.map

package/dist/{chunk-CPXPHQGX.js → chunk-BYS45GOJ.js}

@@ -1,44 +1,49 @@
 import {
   openEnvelopeJson
-} from "./chunk-OVO2RZAE.js";
+} from "./chunk-7AGLCOYE.js";
 import {
   NOYDB_FORMAT_VERSION
 } from "./chunk-LN22XH4B.js";
 import {
   encrypt
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 
 // src/with-shape/persisted-schemas/storage.ts
 var SCHEMAS_COLLECTION = "_schemas";
-async function loadPersistedSchema(store, vault, collection, dek) {
+async function loadPersistedSchemaEntry(store, vault, collection, dek) {
   const envelope = await store.get(vault, SCHEMAS_COLLECTION, collection);
-  if (!envelope) return void 0;
+  if (!envelope) return { version: 0, payload: void 0 };
+  const version = envelope._v;
   try {
     const plaintext = await openEnvelopeJson(envelope, dek);
     const parsed = JSON.parse(plaintext);
-    if (parsed._noydb_schema !== 1) return void 0;
-    return parsed;
+    if (parsed._noydb_schema !== 1) return { version, payload: void 0 };
+    return { version, payload: parsed };
   } catch {
-    return void 0;
+    return { version, payload: void 0 };
   }
 }
-async function savePersistedSchema(store, vault, collection, dek, payload) {
+async function loadPersistedSchema(store, vault, collection, dek) {
+  return (await loadPersistedSchemaEntry(store, vault, collection, dek)).payload;
+}
+async function savePersistedSchema(store, vault, collection, dek, payload, expectedVersion) {
   const json = JSON.stringify(payload);
   const { iv, data } = await encrypt(json, dek);
-  const prior = await store.get(vault, SCHEMAS_COLLECTION, collection);
+  const baseVersion = expectedVersion ?? (await store.get(vault, SCHEMAS_COLLECTION, collection))?._v ?? 0;
   const env = {
     _noydb: NOYDB_FORMAT_VERSION,
-    _v: (prior?._v ?? 0) + 1,
+    _v: baseVersion + 1,
     _ts: (/* @__PURE__ */ new Date()).toISOString(),
     _iv: iv,
     _data: data
   };
-  await store.put(vault, SCHEMAS_COLLECTION, collection, env);
+  await store.put(vault, SCHEMAS_COLLECTION, collection, env, expectedVersion);
 }
 
 export {
   SCHEMAS_COLLECTION,
+  loadPersistedSchemaEntry,
   loadPersistedSchema,
   savePersistedSchema
 };
-//# sourceMappingURL=chunk-CPXPHQGX.js.map
+//# sourceMappingURL=chunk-BYS45GOJ.js.map

package/dist/chunk-BYS45GOJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/persisted-schemas/storage.ts"],"sourcesContent":["/**\n * Read / write the per-collection persisted-schema envelope. Mirrors the\n * standard noy-db record envelope shape and is **AES-GCM encrypted with\n * the collection's DEK** — the schema body (field names, enum values,\n * constraints) is sensitive metadata, so it gets the same encryption\n * envelope as the records it describes.\n *\n * Storage layout:\n *\n *   <vault>/_schemas/<collection>   →   EncryptedEnvelope\n *\n * The DEK passed to {@link savePersistedSchema} / {@link loadPersistedSchema}\n * is the same key the collection uses for its records.\n *\n * @module\n */\n\nimport { encrypt, openEnvelopeJson, type EnclaveKey } from '../../kernel/enclave/index.js'\nimport { NOYDB_FORMAT_VERSION } from '../../kernel/types.js'\nimport type { NoydbStore, EncryptedEnvelope } from '../../kernel/types.js'\nimport type { PersistedSchemaEnvelope } from './types.js'\n\n/** Reserved collection name where persisted schemas live. */\nexport const SCHEMAS_COLLECTION = '_schemas' as const\n\n/**\n * A decrypted persisted-schema read paired with the wrapping envelope's\n * `_v`. The version is the optimistic-concurrency token: pass it back to\n * {@link savePersistedSchema} as `expectedVersion` to make the write a CAS\n * that rejects a stale put (see #583 — the `_schemas` record is shared by\n * the JSON-Schema writer and the classified-marker writer).\n */\nexport interface PersistedSchemaEntry {\n  /** Wrapping envelope `_v` (0 when no record exists yet). */\n  readonly version: number\n  /** Decrypted payload, or `undefined` when absent/corrupt/wrong-DEK. */\n  readonly payload: PersistedSchemaEnvelope | undefined\n}\n\n/**\n * Read the persisted-schema envelope for one collection together with its\n * wrapping `_v`. The version reflects the raw stored envelope even when the\n * payload cannot be decrypted/parsed (so a CAS still guards a corrupt record\n * rather than silently clobbering it).\n */\nexport async function loadPersistedSchemaEntry(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  dek: EnclaveKey,\n): Promise<PersistedSchemaEntry> {\n  const envelope = await store.get(vault, SCHEMAS_COLLECTION, collection)\n  if (!envelope) return { version: 0, payload: undefined }\n  const version = envelope._v\n  try {\n    const plaintext = await openEnvelopeJson(envelope, dek)\n    const parsed = JSON.parse(plaintext) as PersistedSchemaEnvelope\n    if (parsed._noydb_schema !== 1) return { version, payload: undefined }\n    return { version, payload: parsed }\n  } catch {\n    return { version, payload: undefined }\n  }\n}\n\n/**\n * Read and decrypt the persisted-schema envelope for one collection.\n * Returns `undefined` when no envelope has been written or when decryption\n * fails (e.g. wrong DEK passed). Tolerates corrupted records — JSON parse\n * failures surface as `undefined`, mirroring `_meta/handle`'s contract.\n */\nexport async function loadPersistedSchema(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  dek: EnclaveKey,\n): Promise<PersistedSchemaEnvelope | undefined> {\n  return (await loadPersistedSchemaEntry(store, vault, collection, dek)).payload\n}\n\n/**\n * Encrypt and persist a schema envelope for one collection. Always\n * overwrites any prior write (callers gate on hash equality before calling\n * to avoid no-op writes).\n *\n * Pass `expectedVersion` — the `version` from {@link loadPersistedSchemaEntry}\n * captured at load time — to make the write an optimistic CAS: on a store with\n * `casAtomic`, `store.put` throws {@link ConflictError} when the record was\n * bumped concurrently, so a lost update on the shared `_schemas` record is\n * rejected instead of silently clobbering the other writer's field (#583).\n * When omitted, keeps the legacy unconditional last-writer-wins behaviour.\n */\nexport async function savePersistedSchema(\n  store: NoydbStore,\n  vault: string,\n  collection: string,\n  dek: EnclaveKey,\n  payload: PersistedSchemaEnvelope,\n  expectedVersion?: number,\n): Promise<void> {\n  const json = JSON.stringify(payload)\n  const { iv, data } = await encrypt(json, dek)\n  const baseVersion = expectedVersion ?? (await store.get(vault, SCHEMAS_COLLECTION, collection))?._v ?? 0\n  const env: EncryptedEnvelope = {\n    _noydb: NOYDB_FORMAT_VERSION,\n    _v: baseVersion + 1,\n    _ts: new Date().toISOString(),\n    _iv: iv,\n    _data: data,\n  }\n  await store.put(vault, SCHEMAS_COLLECTION, collection, env, expectedVersion)\n}\n"],"mappings":";;;;;;;;;;;AAuBO,IAAM,qBAAqB;AAsBlC,eAAsB,yBACpB,OACA,OACA,YACA,KAC+B;AAC/B,QAAM,WAAW,MAAM,MAAM,IAAI,OAAO,oBAAoB,UAAU;AACtE,MAAI,CAAC,SAAU,QAAO,EAAE,SAAS,GAAG,SAAS,OAAU;AACvD,QAAM,UAAU,SAAS;AACzB,MAAI;AACF,UAAM,YAAY,MAAM,iBAAiB,UAAU,GAAG;AACtD,UAAM,SAAS,KAAK,MAAM,SAAS;AACnC,QAAI,OAAO,kBAAkB,EAAG,QAAO,EAAE,SAAS,SAAS,OAAU;AACrE,WAAO,EAAE,SAAS,SAAS,OAAO;AAAA,EACpC,QAAQ;AACN,WAAO,EAAE,SAAS,SAAS,OAAU;AAAA,EACvC;AACF;AAQA,eAAsB,oBACpB,OACA,OACA,YACA,KAC8C;AAC9C,UAAQ,MAAM,yBAAyB,OAAO,OAAO,YAAY,GAAG,GAAG;AACzE;AAcA,eAAsB,oBACpB,OACA,OACA,YACA,KACA,SACA,iBACe;AACf,QAAM,OAAO,KAAK,UAAU,OAAO;AACnC,QAAM,EAAE,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,GAAG;AAC5C,QAAM,cAAc,oBAAoB,MAAM,MAAM,IAAI,OAAO,oBAAoB,UAAU,IAAI,MAAM;AACvG,QAAM,MAAyB;AAAA,IAC7B,QAAQ;AAAA,IACR,IAAI,cAAc;AAAA,IAClB,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC5B,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AACA,QAAM,MAAM,IAAI,OAAO,oBAAoB,YAAY,KAAK,eAAe;AAC7E;","names":[]}

package/dist/{chunk-P2LDXRGP.js → chunk-C2ZKWL37.js}

@@ -1,6 +1,6 @@
 import {
   writePod
-} from "./chunk-EWR7HL3K.js";
+} from "./chunk-C57J6AWN.js";
 
 // src/with-audit/portability/export-accessible.ts
 function resolveAccessibleCollections(keyring, scope, writableOnly = false) {
@@ -42,4 +42,4 @@ export {
   buildAccessibleBundle,
   exportAccessibleData
 };
-//# sourceMappingURL=chunk-P2LDXRGP.js.map
+//# sourceMappingURL=chunk-C2ZKWL37.js.map

package/dist/{chunk-BKGIWGCX.js → chunk-C4NOLA5X.js}

@@ -1,6 +1,6 @@
 import {
   readPath
-} from "./chunk-ZKF6HH7V.js";
+} from "./chunk-6P5AJ2ZS.js";
 
 // src/with-lookup/indexing/eager-indexes.ts
 var CollectionIndexes = class {
@@ -129,4 +129,4 @@ function removeFromIndex(idx, id, record) {
 export {
   CollectionIndexes
 };
-//# sourceMappingURL=chunk-BKGIWGCX.js.map
+//# sourceMappingURL=chunk-C4NOLA5X.js.map

package/dist/{chunk-EWR7HL3K.js → chunk-C57J6AWN.js}

@@ -1,14 +1,14 @@
 import {
   pickLocale
-} from "./chunk-3QRQOBS7.js";
+} from "./chunk-I7GTYPWF.js";
 import {
   sha256Hex
-} from "./chunk-TLJOJBZD.js";
+} from "./chunk-5HZULLHE.js";
 import {
   BundleIntegrityError,
   BundleSealMismatchError,
   ValidationError
-} from "./chunk-U23JUUPX.js";
+} from "./chunk-OJ64XMPJ.js";
 
 // src/with-pod/format.ts
 var NOYDB_BUNDLE_MAGIC = new Uint8Array([78, 68, 66, 49]);
@@ -608,6 +608,30 @@ function applySliceFilters(dumpJson, opts) {
   }
   return JSON.stringify(backup);
 }
+async function applySatelliteLivenessFilter(vault, dumpJson) {
+  const backup = JSON.parse(dumpJson);
+  if (!backup.collections || typeof backup.collections !== "object") return dumpJson;
+  if (typeof vault._introspectState !== "function") return dumpJson;
+  const { adapter, name, getDEK } = vault._introspectState();
+  const { liveBaseIdSetsForBundle } = await import("./dead-filter-MGWMNRO2.js");
+  const satLive = await liveBaseIdSetsForBundle(adapter, name, Object.keys(backup.collections), getDEK);
+  if (satLive.size === 0) return dumpJson;
+  const next = {};
+  for (const [collName, records] of Object.entries(backup.collections)) {
+    const live = satLive.get(collName);
+    if (!live) {
+      next[collName] = records;
+      continue;
+    }
+    const kept = {};
+    for (const [id, env] of Object.entries(records)) {
+      if (live.has(id)) kept[id] = env;
+    }
+    next[collName] = kept;
+  }
+  backup.collections = next;
+  return JSON.stringify(backup);
+}
 async function applyPlaintextFilters(vault, dumpJson, opts) {
   if (opts.where === void 0 && opts.tierAtMost === void 0) {
     return dumpJson;
@@ -674,7 +698,8 @@ async function writePod(vault, opts = {}) {
   const autoUnlockMode = validateAutoUnlockOptions(opts, normalizedAutoUnlock);
   const handle = await vault.getBundleHandle();
   const dumpJson = await vault.dump();
-  const rekeyed = await applyRecipientRewrap(vault, dumpJson, opts);
+  const satelliteFiltered = await applySatelliteLivenessFilter(vault, dumpJson);
+  const rekeyed = await applyRecipientRewrap(vault, satelliteFiltered, opts);
   const plainFiltered = await applyPlaintextFilters(vault, rekeyed, opts);
   const filtered = applySliceFilters(plainFiltered, opts);
   const bodyJsonStr = normalizedAutoUnlock === null ? filtered : JSON.stringify(await buildAutoUnlockWrapper(filtered, normalizedAutoUnlock));
@@ -795,4 +820,4 @@ export {
   readPod,
   readNoydbBundle
 };
-//# sourceMappingURL=chunk-EWR7HL3K.js.map
+//# sourceMappingURL=chunk-C57J6AWN.js.map