@noy-db/hub 0.3.0-pre.9 → 0.3.0

package/dist/overlay-views/index.d.ts

@@ -1,97 +0,0 @@
-export { w as withOverlayedView } from '../with-overlayed-view-DntFpOKN.js';
-import { bM as OverlayedViewStrategy, bN as Collection } from '../index-DzhNI2vE.js';
-export { bO as OverlayBaseIsVirtualError, bP as OverlayCollectionUnavailableError, bQ as OverlayFieldMergeMode, bR as OverlayFieldMergeRule, bS as OverlayIdMismatchError, bT as OverlayNameCollisionError, bU as OverlayedViewRegistry, bV as OverlayedViewStrategyHandle } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Virtual-collection proxy returned by `vault.collection(overlayName)`
- * when `overlayName` is a registered `withOverlayedView`.
- *
- * Implements the core `Collection<T>`-shaped read/write surface with
- * merge-on-read semantics:
- *   - `get(id)`: overlay row wins iff `overlay[shadowField] === shadowValue`;
- *     when `spec.mergeMode` is set, an intermediate status may instead pull
- *     a declared subset of fields from the overlay over the base
- *   - `list()` / `.query()`: union of ids, per-id merge applied
- *   - `put(record)` / `put(id, record)`: routes to overlay; id derived
- *     via the base MV's `rowKey` (validated on the two-arg form)
- *   - `delete(id)`: removes the overlay row only; base stays
- *
- * Reactive APIs (`live`, `subscribe`, `query().live()`) are out of
- * scope for this release and surface as "not yet implemented" — wired in a
- * future sub-issue.
- */
-declare class OverlayedCollection<T extends Record<string, unknown> = any> {
-    private readonly spec;
-    private readonly baseCollection;
-    private readonly overlayCollection;
-    private readonly baseRowKey;
-    constructor(spec: OverlayedViewStrategy, baseCollection: Collection<T>, overlayCollection: Collection<T>, baseRowKey: ((row: Record<string, unknown>) => string) | undefined);
-    /**
-     * Convenience accessors for advanced callers that need to bypass the
-     * virtual layer (bulk imports, direct overlay queries). Mirrors the
-     * spec's "direct writes to the underlying overlay collection skip
-     * the validation" escape hatch.
-     */
-    readonly overlay: {
-        rowKey: (row: Record<string, unknown>) => string;
-    };
-    /** Get the merged row by id. */
-    get(id: string): Promise<T | null>;
-    /** List union of base + overlay ids, applying the merge per row. */
-    list(): Promise<T[]>;
-    /**
-     * Write to the overlay. Two forms:
-     * - `put(record)`: id is derived via the base MV's `rowKey(record)`.
-     *   Throws if the base isn't an MV.
-     * - `put(id, record)`: validates `id === rowKey(record)`; throws
-     *   `OverlayIdMismatchError` on mismatch.
-     */
-    put(idOrRecord: string | T, maybeRecord?: T): Promise<void>;
-    /**
-     * Remove the overlay row only. Idempotent (no-op on absent).
-     * The base row is untouched — if a base row exists for `id`,
-     * subsequent reads return it.
-     */
-    delete(id: string): Promise<void>;
-    /**
-     * Merge a single id's overlay + base rows into the visible row.
-     *
-     * Priority (first match wins):
-     *  1. Binary shadow win — overlay present AND
-     *     `overlay[shadowField] === shadowValue` → return the overlay row
-     *     entirely. This stays FIRST so the original binary behaviour is
-     *     unchanged whether or not `mergeMode` is configured.
-     *  2. Field-level merge — overlay present, `mergeMode` configured,
-     *     and a rule whose `whenStatus` equals `overlay[shadowField]`.
-     *     The matched rule pulls its `overlayFields` (those present on
-     *     the overlay row) on top of the base row. With no base row, the
-     *     overlay row is returned as-is.
-     *  3. Fallback — return the base row (possibly `null`). An
-     *     overlay-only row that qualifies under neither (1) nor (2) and
-     *     has no base is therefore NOT surfaced.
-     */
-    private mergeRows;
-    /** @throws — chainable Query<T> over a virtual collection is deferred. */
-    query(): never;
-    /** @throws — change-stream subscription over a virtual collection is deferred. */
-    subscribe(): never;
-    /** @throws — live query over a virtual collection is deferred. */
-    live(): never;
-    /** @throws — async iteration over a virtual collection is deferred. */
-    scan(): never;
-    /** @throws — lazy-mode query is not applicable to virtual collections. */
-    lazyQuery(): never;
-    /** @throws — bulk-atomic put is deferred to a future MV sub-issue. */
-    putManyAtomic(): never;
-    /** @throws — bulk delete is deferred to a future MV sub-issue. */
-    deleteMany(): never;
-    /** @throws — `.first()` over a virtual collection is deferred. */
-    first(): never;
-    /** @throws — `.count()` over a virtual collection is deferred. */
-    count(): never;
-}
-
-export { OverlayedCollection, OverlayedViewStrategy };

package/dist/periods/index.d.ts

@@ -1,19 +0,0 @@
-import { aU as PeriodsStrategy } from '../index-DzhNI2vE.js';
-export { aV as CarryForwardContext, aW as ClosePeriodOptions, aX as OpenPeriodOptions, aY as PERIODS_COLLECTION, aZ as PERIOD_ARCHIVES_COLLECTION, a_ as PERIOD_FREEZES_COLLECTION, a$ as PERIOD_TARGET_PURGES_COLLECTION, b0 as PeriodArchiveRecord, b1 as PeriodFreezeRecord, b2 as PeriodRecord, b3 as PeriodTargetPurgeRecord, b4 as ReadOnlyCollection, b5 as TargetPurgeCount, b6 as appendPeriodLedgerEntry, b7 as assertTsWritable, b8 as chainAnchor, b9 as loadPeriods, ba as periodExclusiveUpperBound, bb as validatePeriodName } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Active periods strategy factory. Only reachable through the
- * `@noy-db/hub/periods` subpath.
- */
-
-/**
- * Build the default periods strategy. Pass into
- * `createNoydb({ periodsStrategy: withPeriods() })` to enable
- * `vault.closePeriod()` / `vault.openPeriod()` / write-guards.
- */
-declare function withPeriods(): PeriodsStrategy;
-
-export { PeriodsStrategy, withPeriods };

package/dist/pod/index.d.ts

@@ -1,62 +0,0 @@
-export { C as COMPRESSION_BROTLI, b as COMPRESSION_GZIP, c as COMPRESSION_NONE, d as CompressionAlgo, F as FLAG_COMPRESSED, e as FLAG_HAS_INTEGRITY_HASH, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, l as encodeBundleHeader, m as readNoydbBundle, n as readNoydbBundleHeader, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, v as validateBundleHeader, p as writeNoydbBundle, w as writePod } from '../bundle-DlSxo31R.js';
-export { g as generateULID, i as isULID } from '../ulid-DRH25k3y.js';
-import { c_ as NoydbStore, bq as NoydbPodStore } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-interface WrapPodStoreOptions {
-    /**
-     * When `true` (default), every `put()` and `delete()` flushes the full
-     * vault snapshot to the bundle backend. Set to `false` for bulk operations
-     * and call `store.flush(vaultId)` manually.
-     */
-    autoFlush?: boolean;
-}
-interface WrappedPodNoydbStore extends NoydbStore {
-    /** Manually flush the in-memory snapshot to the bundle backend. */
-    flush(vaultId: string): Promise<void>;
-    /**
-     * Run a batch of mutations without flushing until the callback completes.
-     * A single flush is performed at the end.
-     */
-    batch(vaultId: string, fn: () => Promise<void>): Promise<void>;
-}
-/**
- * Convert a `NoydbPodStore` (blob-oriented read/write with OCC) into the
- * standard six-method `NoydbStore` interface expected by `createNoydb({ store })`.
- *
- * Bundle stores operate on the entire vault as a single serialised unit —
- * ideal for backends like Google Drive, WebDAV, or iCloud Drive that work
- * best with whole-file I/O rather than per-record KV operations.
- *
- * ## Optimistic concurrency
- *
- * The wrapper tracks the `version` token from the last `readBundle` and
- * passes it as `expectedVersion` on every flush. On
- * `PodVersionConflictError`, it re-reads, merges the remote snapshot
- * (last-write-wins per record key), and retries (max 3 attempts).
- *
- * ## Flush modes
- *
- * By default, flushes on every mutation (O(vault size) per write). Options:
- * - `autoFlush: false` + explicit `store.flush(vaultId)` calls
- * - `store.batch(vaultId, async () => { ... })` — defers flush until end
- * - Pair with `syncPolicy: { push: { mode: 'debounce' } }` from
- */
-declare function wrapPodStore(bundle: NoydbPodStore, options?: WrapPodStoreOptions): WrappedPodNoydbStore;
-/**
- * Type-safe factory helper for `NoydbPodStore` implementations,
- * analogous to `createStore` for KV stores.
- */
-declare function createPodStore<TOptions>(factory: (options: TOptions) => NoydbPodStore): (options: TOptions) => NoydbPodStore;
-/** @deprecated Use wrapPodStore. */
-declare const wrapBundleStore: typeof wrapPodStore;
-/** @deprecated Use createPodStore. */
-declare const createBundleStore: typeof createPodStore;
-/** @deprecated Use WrappedPodNoydbStore. */
-type WrappedBundleNoydbStore = WrappedPodNoydbStore;
-/** @deprecated Use WrapPodStoreOptions. */
-type WrapBundleStoreOptions = WrapPodStoreOptions;
-
-export { type WrapBundleStoreOptions, type WrapPodStoreOptions, type WrappedBundleNoydbStore, type WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore };

package/dist/policy-SDGRWVIL.js

@@ -1,41 +0,0 @@
-import {
-  DEFAULT_FRESHNESS_MS,
-  PERSONAL_POLICY,
-  STRICT_POLICY,
-  checkGate,
-  createNoydbPolicy,
-  describeGate,
-  mergePolicy
-} from "./chunk-YBFOBRTO.js";
-import {
-  META_COLLECTION,
-  POLICY_RECORD_ID,
-  loadVaultPolicy,
-  saveVaultPolicy
-} from "./chunk-X66MXMR5.js";
-import "./chunk-UNJU345Q.js";
-import {
-  ManagedRecoveryNotEnrolledError,
-  PolicyDeniedError,
-  RecoveryNotEnrolledError,
-  RecoveryProfileNotImplementedError
-} from "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DEFAULT_FRESHNESS_MS,
-  META_COLLECTION,
-  ManagedRecoveryNotEnrolledError,
-  PERSONAL_POLICY,
-  POLICY_RECORD_ID,
-  PolicyDeniedError,
-  RecoveryNotEnrolledError,
-  RecoveryProfileNotImplementedError,
-  STRICT_POLICY,
-  checkGate,
-  createNoydbPolicy,
-  describeGate,
-  loadVaultPolicy,
-  mergePolicy,
-  saveVaultPolicy
-};
-//# sourceMappingURL=policy-SDGRWVIL.js.map

package/dist/portability/index.d.ts

@@ -1,19 +0,0 @@
-import { bX as PortabilityStrategy } from '../index-DzhNI2vE.js';
-export { bY as ApproveWithdrawalOptions, bZ as ExportAccessibleOptions, b_ as NO_PORTABILITY, b$ as PortabilityNotEnabledError, c0 as RejectWithdrawalOptions, c1 as RequestWithdrawalOptions, c2 as RequestWithdrawalResult, c3 as WithdrawAccessibleOptions, c4 as WithdrawResult, c5 as WithdrawalRequest, c6 as WithdrawalRequestStatus } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Enable the portability capability.
- * Pass to `createNoydb({ portabilityStrategy: withPortability() })` to make a
- * vault's `user.exportMyAccessibleData` / `user.unilateralWithdrawal` /
- * `user.requestWithdrawal` / `user.listWithdrawalRequests` /
- * `user.approveWithdrawal` / `user.rejectWithdrawal` methods live. The
- * export/withdraw/request engines are dynamically imported here, so they stay
- * reachable only via opt-in.
- */
-
-declare function withPortability(): PortabilityStrategy;
-
-export { PortabilityStrategy, withPortability };

package/dist/post-register-MROIUA5O.js

@@ -1,55 +0,0 @@
-import {
-  hashFields
-} from "./chunk-ICV32FPK.js";
-import {
-  SatelliteConfigError
-} from "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-
-// src/with-shape/satellites/marker.ts
-async function ensureSatelliteMarker(store, vaultName, spec, dek) {
-  const next = { base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined };
-  const { loadPersistedSchema } = await import("./storage-Y44CAPE6.js");
-  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
-  const prior = persisted?.satellite;
-  if (prior) {
-    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {
-      throw new SatelliteConfigError(
-        `R-S9: satellite "${spec.satellite}" re-declared divergently from its persisted pairing marker (persisted base="${prior.base}" fieldsHash=${prior.fieldsHash}; declared base="${next.base}" fieldsHash=${next.fieldsHash}). Evolve the marker deliberately, don't redeclare.`
-      );
-    }
-    return;
-  }
-  const { persistSatelliteMarker } = await import("./register-OVJKW7BS.js");
-  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
-}
-
-// src/with-shape/satellites/post-register.ts
-async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry) {
-  try {
-    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite));
-  } catch (err) {
-    registry.poison(spec.satellite, err.message);
-    return;
-  }
-  if (baseSchema !== void 0) {
-    try {
-      const { derivePersistedSchema } = await import("./derive-5D2C3WG4.js");
-      const envelope = await derivePersistedSchema(baseSchema);
-      const properties = envelope.jsonSchema?.["properties"];
-      const baseFields = Object.keys(properties ?? {});
-      const overlap = spec.fields.filter((f) => baseFields.includes(f));
-      if (overlap.length > 0) {
-        registry.poison(
-          spec.satellite,
-          `R-S1: satellite "${spec.satellite}" fields overlap the base schema: ${overlap.join(", ")} \u2014 routing must be unambiguous.`
-        );
-      }
-    } catch {
-    }
-  }
-}
-export {
-  postRegister
-};
-//# sourceMappingURL=post-register-MROIUA5O.js.map

package/dist/post-register-MROIUA5O.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-shape/satellites/marker.ts","../src/with-shape/satellites/post-register.ts"],"sourcesContent":["import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport { SatelliteConfigError } from '../../kernel/errors.js'\nimport { hashFields } from './validate.js'\nimport type { PairingMarker, SatelliteSpec } from './types.js'\n\n/**\n * Persist-or-reconcile the pairing marker in `_schemas/<satellite>`.\n * First declaration writes { base, fieldsHash, joined }; later declarations\n * must match exactly or are refused (R-S9). Lazy imports keep the satellite\n * spine tree-shakeable (config-drift.ts pattern).\n */\nexport async function ensureSatelliteMarker(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec, dek: EnclaveKey,\n): Promise<void> {\n  const next: PairingMarker = { base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined }\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek)\n  const prior = persisted?.satellite\n  if (prior) {\n    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {\n      throw new SatelliteConfigError(\n        `R-S9: satellite \"${spec.satellite}\" re-declared divergently from its persisted pairing marker ` +\n        `(persisted base=\"${prior.base}\" fieldsHash=${prior.fieldsHash}; declared base=\"${next.base}\" fieldsHash=${next.fieldsHash}). ` +\n        `Evolve the marker deliberately, don't redeclare.`,\n      )\n    }\n    return\n  }\n  const { persistSatelliteMarker } = await import('../persisted-schemas/register.js')\n  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next })\n}\n","import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport type { SatelliteSpec } from './types.js'\nimport type { SatelliteRegistry } from './registry.js'\nimport { ensureSatelliteMarker } from './marker.js'\n\n/** Async post-registration: R-S9 marker reconcile + R-S1/R-S5 derivable-schema cross-check. Failures poison, never throw. */\nexport async function postRegister(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec,\n  getDEK: (collectionName: string) => Promise<EnclaveKey>,\n  baseSchema: unknown, registry: SatelliteRegistry,\n): Promise<void> {\n  try {\n    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite))\n  } catch (err) {\n    registry.poison(spec.satellite, (err as Error).message); return\n  }\n  if (baseSchema !== undefined) {\n    try {\n      const { derivePersistedSchema } = await import('../persisted-schemas/derive.js')\n      const envelope = await derivePersistedSchema(baseSchema)\n      const properties = (envelope.jsonSchema as Record<string, unknown> | null)?.['properties'] as Record<string, unknown> | undefined\n      const baseFields: string[] = Object.keys(properties ?? {})\n      const overlap = spec.fields.filter(f => baseFields.includes(f))\n      if (overlap.length > 0) {\n        registry.poison(spec.satellite,\n          `R-S1: satellite \"${spec.satellite}\" fields overlap the base schema: ${overlap.join(', ')} — routing must be unambiguous.`)\n      }\n    } catch { /* non-derivable validator → cross-check unavailable, by design (spec R-S5) */ }\n  }\n}\n"],"mappings":";;;;;;;;;AAYA,eAAsB,sBACpB,OAAmB,WAAmB,MAAqB,KAC5C;AACf,QAAM,OAAsB,EAAE,MAAM,KAAK,MAAM,YAAY,WAAW,KAAK,MAAM,GAAG,QAAQ,KAAK,OAAO;AACxG,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,WAAW,KAAK,WAAW,GAAG;AACjF,QAAM,QAAQ,WAAW;AACzB,MAAI,OAAO;AACT,QAAI,MAAM,SAAS,KAAK,QAAQ,MAAM,eAAe,KAAK,eAAe,MAAM,UAAU,WAAW,KAAK,UAAU,OAAO;AACxH,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,SAAS,gFACd,MAAM,IAAI,gBAAgB,MAAM,UAAU,oBAAoB,KAAK,IAAI,gBAAgB,KAAK,UAAU;AAAA,MAE5H;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,wBAAkC;AAClF,QAAM,uBAAuB,EAAE,OAAO,OAAO,WAAW,gBAAgB,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC7G;;;ACxBA,eAAsB,aACpB,OAAmB,WAAmB,MACtC,QACA,YAAqB,UACN;AACf,MAAI;AACF,UAAM,sBAAsB,OAAO,WAAW,MAAM,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAClF,SAAS,KAAK;AACZ,aAAS,OAAO,KAAK,WAAY,IAAc,OAAO;AAAG;AAAA,EAC3D;AACA,MAAI,eAAe,QAAW;AAC5B,QAAI;AACF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAgC;AAC/E,YAAM,WAAW,MAAM,sBAAsB,UAAU;AACvD,YAAM,aAAc,SAAS,aAAgD,YAAY;AACzF,YAAM,aAAuB,OAAO,KAAK,cAAc,CAAC,CAAC;AACzD,YAAM,UAAU,KAAK,OAAO,OAAO,OAAK,WAAW,SAAS,CAAC,CAAC;AAC9D,UAAI,QAAQ,SAAS,GAAG;AACtB,iBAAS;AAAA,UAAO,KAAK;AAAA,UACnB,oBAAoB,KAAK,SAAS,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAAA,QAAiC;AAAA,MAC9H;AAAA,IACF,QAAQ;AAAA,IAAiF;AAAA,EAC3F;AACF;","names":[]}

package/dist/public-envelope-J5PLQOW2.js

@@ -1,32 +0,0 @@
-import {
-  DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
-  PUBLIC_ENVELOPE_FIELDS,
-  resolveSchema
-} from "./chunk-WXSYDNBT.js";
-import {
-  PUBLIC_ENVELOPE_RECORD_ID,
-  isPublicEnvelope,
-  loadPublicEnvelope,
-  pickLocale,
-  readPublicEnvelope,
-  resolveLocale,
-  savePublicEnvelope,
-  validatePublicEnvelopeInput
-} from "./chunk-KNXN47MO.js";
-import "./chunk-UNJU345Q.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
-  PUBLIC_ENVELOPE_FIELDS,
-  PUBLIC_ENVELOPE_RECORD_ID,
-  isPublicEnvelope,
-  loadPublicEnvelope,
-  pickLocale,
-  readPublicEnvelope,
-  resolveLocale,
-  resolveSchema,
-  savePublicEnvelope,
-  validatePublicEnvelopeInput
-};
-//# sourceMappingURL=public-envelope-J5PLQOW2.js.map

package/dist/query/index.d.ts

@@ -1,4 +0,0 @@
-export { aa as AggregateResult, ab as AggregateSpec, ac as Aggregation, ad as AggregationUpstream, f0 as Clause, U as CollectionIndexes, lQ as CrossJoinClause, ff as CrossJoinSourceUnknownError, fg as CrossJoinTooLargeError, fl as DEFAULT_CROSS_JOIN_MAX_ROWS, fm as DEFAULT_JOIN_MAX_ROWS, fp as DanglingReferenceError, g1 as FieldClause, g4 as FieldNotQueryableError, g7 as FilterClause, ae as GROUPBY_MAX_CARDINALITY, af as GROUPBY_WARN_CARDINALITY, ge as GroupCardinalityError, gf as GroupClause, ag as GroupedAggregation, ah as GroupedQuery, ai as GroupedQueryN, aj as GroupedRow, ak as GroupedRowN, W as HashIndex, Y as IndexDef, gn as IndexRequiredError, go as IndexWriteFailureError, gu as JoinContext, gv as JoinLeg, gw as JoinStrategy, gx as JoinTooLargeError, gy as JoinableSource, al as LiveAggregation, gR as LiveQuery, gS as LiveUpstream, hz as Operator, hA as OrderBy, ef as Query, i9 as QueryPlan, ia as QuerySource, am as Reducer, an as ReducerBuilder, ao as ReducerOptions, iG as ScanBuilder, iH as ScanPageProvider, ka as applyJoins, ap as avg, aq as buildLiveAggregation, kg as buildLiveQuery, ar as count, kx as evaluateClause, kz as evaluateFieldClause, kB as executePlan, as as groupAndReduce, at as max, au as min, av as moneyMax, aw as moneyMin, ax as moneySum, l8 as readPath, ay as reduceRecords, az as reducerBuilder, aA as resetGroupByWarnings, lf as resetJoinWarnings, aB as sum } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/read-only-facade-UCYNRE56.js

@@ -1,8 +0,0 @@
-import {
-  ReadOnlyVaultFacade
-} from "./chunk-QJR3W3MF.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  ReadOnlyVaultFacade
-};
-//# sourceMappingURL=read-only-facade-UCYNRE56.js.map

package/dist/register-OVJKW7BS.js

@@ -1,23 +0,0 @@
-import {
-  persistClassifiedMarker,
-  persistSatelliteMarker,
-  persistSchemaIfNeeded
-} from "./chunk-2UQ4RMHV.js";
-import "./chunk-HBTT7YQX.js";
-import "./chunk-KXKLKJW4.js";
-import "./chunk-XHD3L3JO.js";
-import "./chunk-Z5YFRMG5.js";
-import "./chunk-XQ7UYPVN.js";
-import "./chunk-6MWUANRF.js";
-import "./chunk-2KOSJTMU.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-AUR7MRHA.js";
-import "./chunk-UNJU345Q.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  persistClassifiedMarker,
-  persistSatelliteMarker,
-  persistSchemaIfNeeded
-};
-//# sourceMappingURL=register-OVJKW7BS.js.map

package/dist/registry-5RJSK5AJ.js

@@ -1,9 +0,0 @@
-import {
-  OverlayedViewRegistry
-} from "./chunk-34RRRIC3.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  OverlayedViewRegistry
-};
-//# sourceMappingURL=registry-5RJSK5AJ.js.map

package/dist/registry-DQRNTWRL.js

@@ -1,18 +0,0 @@
-import {
-  DerivationRegistry
-} from "./chunk-PF3FQCCF.js";
-import "./chunk-7ZANJ6JZ.js";
-import "./chunk-XHD3L3JO.js";
-import "./chunk-Z5YFRMG5.js";
-import "./chunk-XQ7UYPVN.js";
-import "./chunk-6MWUANRF.js";
-import "./chunk-2KOSJTMU.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-AUR7MRHA.js";
-import "./chunk-UNJU345Q.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  DerivationRegistry
-};
-//# sourceMappingURL=registry-DQRNTWRL.js.map

package/dist/registry-LTGLERS7.js

@@ -1,19 +0,0 @@
-import {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-} from "./chunk-GZ2MOPVX.js";
-import "./chunk-XHD3L3JO.js";
-import "./chunk-Z5YFRMG5.js";
-import "./chunk-XQ7UYPVN.js";
-import "./chunk-6MWUANRF.js";
-import "./chunk-2KOSJTMU.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-AUR7MRHA.js";
-import "./chunk-UNJU345Q.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  MaterializedViewRegistry,
-  wrapDbWithPredicates
-};
-//# sourceMappingURL=registry-LTGLERS7.js.map

package/dist/request-withdrawal-27O77D2V.js

@@ -1,31 +0,0 @@
-import {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-} from "./chunk-OV4CMJGR.js";
-import "./chunk-GX2BYNCT.js";
-import "./chunk-OQAODTYR.js";
-import "./chunk-Q2KVKTC2.js";
-import "./chunk-KNXN47MO.js";
-import "./chunk-XHD3L3JO.js";
-import "./chunk-Z5YFRMG5.js";
-import "./chunk-XQ7UYPVN.js";
-import "./chunk-6MWUANRF.js";
-import "./chunk-2KOSJTMU.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-AUR7MRHA.js";
-import "./chunk-UNJU345Q.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  WITHDRAWAL_REQUESTS_COLLECTION,
-  WithdrawalRequestError,
-  approveWithdrawal,
-  listWithdrawalRequests,
-  rejectWithdrawal,
-  requestWithdrawal
-};
-//# sourceMappingURL=request-withdrawal-27O77D2V.js.map

package/dist/reveal-LT3I2K4P.js

@@ -1,38 +0,0 @@
-import {
-  isTombstone
-} from "./chunk-Z5YFRMG5.js";
-import {
-  dualReadSealedSlot
-} from "./chunk-6MWUANRF.js";
-import "./chunk-AUR7MRHA.js";
-import "./chunk-UNJU345Q.js";
-import {
-  ClassifiedRevealError
-} from "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-
-// src/kernel/enclave/classify/reveal.ts
-async function revealSealedField(ctx, id, field) {
-  const env = await ctx.getEnvelope(id);
-  if (env === null || isTombstone(env, ctx.encrypted)) {
-    throw new ClassifiedRevealError(ctx.collection, field, `record "${id}" not found in "${ctx.collection}"`);
-  }
-  if (!ctx.encrypted) {
-    const record = JSON.parse(env._data || "{}");
-    if (!(field in record)) {
-      throw new ClassifiedRevealError(ctx.collection, field, `no stored value for "${field}"`);
-    }
-    return record[field];
-  }
-  const blob = env._sealed?.[field];
-  if (blob === void 0) {
-    throw new ClassifiedRevealError(ctx.collection, field, `no sealed value stored for "${field}"`);
-  }
-  const cek = await ctx.resolveCek(env);
-  const dek = await ctx.getDEK();
-  return JSON.parse(await dualReadSealedSlot(blob, field, ctx.collection, cek, dek));
-}
-export {
-  revealSealedField
-};
-//# sourceMappingURL=reveal-LT3I2K4P.js.map

package/dist/reveal-LT3I2K4P.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/kernel/enclave/classify/reveal.ts"],"sourcesContent":["/**\n * Single-point audited reveal, stage-2 rework (I6): decrypt ONE sealed slot\n * from the raw envelope — no full record view, no collection.get(), so no\n * spurious 'get' consent entry. Fail-closed gates (b)/(c) live here; gate\n * (a) (storage:'never') fires in collection.reveal before any strategy call.\n * @module\n */\nimport { dualReadSealedSlot } from '../record-keys/sealed-slot.js'\nimport { isTombstone } from '../record-keys/tombstone.js'\nimport { ClassifiedRevealError } from '../../errors.js'\nimport type { EncryptedEnvelope } from '../../types.js'\nimport type { EnclaveKey } from '../crypto.js'\n\nexport interface RevealEngineCtx {\n  readonly collection: string\n  readonly encrypted: boolean\n  getEnvelope(id: string): Promise<EncryptedEnvelope | null>\n  resolveCek(env: EncryptedEnvelope): Promise<EnclaveKey | undefined>\n  getDEK(): Promise<EnclaveKey>\n}\n\nexport async function revealSealedField(ctx: RevealEngineCtx, id: string, field: string): Promise<unknown> {\n  const env = await ctx.getEnvelope(id)\n  if (env === null || isTombstone(env, ctx.encrypted)) {\n    throw new ClassifiedRevealError(ctx.collection, field, `record \"${id}\" not found in \"${ctx.collection}\"`)\n  }\n  if (!ctx.encrypted) {\n    // Plaintext collection: nothing is sealed; the value sits in the open body.\n    const record = JSON.parse(env._data || '{}') as Record<string, unknown>\n    if (!(field in record)) {\n      throw new ClassifiedRevealError(ctx.collection, field, `no stored value for \"${field}\"`)\n    }\n    return record[field]\n  }\n  const blob = env._sealed?.[field]\n  if (blob === undefined) {\n    // Gate (c): fail-closed error, never parseSealedSlot(undefined)'s TypeError.\n    throw new ClassifiedRevealError(ctx.collection, field, `no sealed value stored for \"${field}\"`)\n  }\n  const cek = await ctx.resolveCek(env)\n  const dek = await ctx.getDEK()\n  return JSON.parse(await dualReadSealedSlot(blob, field, ctx.collection, cek, dek))\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,eAAsB,kBAAkB,KAAsB,IAAY,OAAiC;AACzG,QAAM,MAAM,MAAM,IAAI,YAAY,EAAE;AACpC,MAAI,QAAQ,QAAQ,YAAY,KAAK,IAAI,SAAS,GAAG;AACnD,UAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,WAAW,EAAE,mBAAmB,IAAI,UAAU,GAAG;AAAA,EAC1G;AACA,MAAI,CAAC,IAAI,WAAW;AAElB,UAAM,SAAS,KAAK,MAAM,IAAI,SAAS,IAAI;AAC3C,QAAI,EAAE,SAAS,SAAS;AACtB,YAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,wBAAwB,KAAK,GAAG;AAAA,IACzF;AACA,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,OAAO,IAAI,UAAU,KAAK;AAChC,MAAI,SAAS,QAAW;AAEtB,UAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,+BAA+B,KAAK,GAAG;AAAA,EAChG;AACA,QAAM,MAAM,MAAM,IAAI,WAAW,GAAG;AACpC,QAAM,MAAM,MAAM,IAAI,OAAO;AAC7B,SAAO,KAAK,MAAM,MAAM,mBAAmB,MAAM,OAAO,IAAI,YAAY,KAAK,GAAG,CAAC;AACnF;","names":[]}

package/dist/revoke-4N45G7D2.js

@@ -1,24 +0,0 @@
-import {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-} from "./chunk-DFIBOSOQ.js";
-import "./chunk-NSZ6J5DF.js";
-import "./chunk-XHD3L3JO.js";
-import "./chunk-Z5YFRMG5.js";
-import "./chunk-XQ7UYPVN.js";
-import "./chunk-6MWUANRF.js";
-import "./chunk-2KOSJTMU.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-AUR7MRHA.js";
-import "./chunk-UNJU345Q.js";
-import "./chunk-CU62BBRB.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  getRevokedDocIdsCore,
-  publishRevocationListCore,
-  revokeDocCore,
-  unrevokeDocCore
-};
-//# sourceMappingURL=revoke-4N45G7D2.js.map

package/dist/revoke-4N45G7D2.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/satellites/index.d.ts

@@ -1,4 +0,0 @@
-export { m1 as JoinedHandle, m2 as PairingMarker, m3 as SatelliteConfigError, m4 as SatelliteSpec } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';

package/dist/sealed-record/index.d.ts

@@ -1,68 +0,0 @@
-import { df as SealedRecordStrategy, dg as SealedCekDeliveryEnvelope } from '../index-DzhNI2vE.js';
-export { dh as NO_SEALED_RECORD, di as SealedCekBinding, dj as SealedRecordExpiredError, dk as SealedRecordMismatchError, dl as SealedRecordNotEnabledError } from '../index-DzhNI2vE.js';
-import '../subject-index-CyOgGMJL.js';
-import '../index-B9QdHytu.js';
-import '@noy-db/attestation';
-
-/**
- * Enable the sealed-record (grantor-side) capability.
- * Pass to `createNoydb({ sealedRecordStrategy: withSealedRecord() })` to make a
- * vault's `sealRecordToHost` / `revokeSealedRecord` / `rotateRecordCek` methods
- * live. The `record-keys` grantor engine is dynamically imported here, so it is
- * reached only via opt-in.
- */
-
-declare function withSealedRecord(): SealedRecordStrategy;
-
-/**
- * `@noy-db/hub/sealed-record` — host-side opener for record-scoped CEK
- * sealing.
- *
- * The **grantor** side (sealing a record's CEK to a host, revoking, and hard
- * rotation) lives on `Vault` (`vault.sealRecordToHost` /
- * `vault.revokeSealedRecord` / `vault.rotateRecordCek`) because it needs the
- * collection DEK. This subpath exposes the **recipient host** side:
- * {@link openSealedRecord} reconstructs a single record's plaintext from
- * (a) the sealed-CEK delivery envelope, (b) the record's encrypted envelope
- * body, and (c) the host's own unsealer — and **nothing else**. The host never
- * touches a vault DEK and can decrypt exactly the one bound record.
- *
- * @module
- */
-
-/**
- * Host-side: decrypt a single record whose CEK was sealed to this host by a
- * vault grantor via `vault.sealRecordToHost()`.
- *
- * Verification order (security-critical — do NOT reorder past the unseal):
- *  1. **Fast-path expiry** — reject on the delivery envelope's clear-text
- *     `expiresAt` before doing any (potentially expensive) unseal work. This is
- *     a hint only.
- *  2. **Unseal** the `payload` with the host's `recipientSealer.unseal` →
- *     parse the {@link SealedCekBinding}.
- *  3. **Binding match** — the binding's `{collection, id}` MUST equal the
- *     expected pair, else {@link SealedRecordMismatchError}. This is the
- *     host-denial boundary (a CEK sealed for record A cannot open record B).
- *  4. **Authoritative expiry** — re-check `binding.expiresAt` (the copy that
- *     cannot be forged by editing the delivery envelope), else
- *     {@link SealedRecordExpiredError}.
- *  5. **Decrypt** the record body under the unsealed CEK. A CEK from a
- *     PRE-rotation seal applied to a POST-rotation live envelope passes (1)-(4)
- *     but fails the AES-GCM auth tag → `TamperedError` from `decrypt`.
- *
- * @param sealedCekEnvelope The `SealedCekDeliveryEnvelope` written by the grantor.
- * @param recordEnvelope    The record's `{ _iv, _data }` (the encrypted body).
- * @param recipientSealer   The host's unsealer (`{ unseal(bytes) }`) — e.g. a
- *                          KMS-backed sealer or `MemoryRecipientSealer`.
- * @param expectedCollection Collection the caller believes `recordEnvelope` is in.
- * @param expectedId         Record id the caller believes `recordEnvelope` is.
- * @returns The decrypted record body as a JSON string.
- */
-declare function openSealedRecord(sealedCekEnvelope: SealedCekDeliveryEnvelope, recordEnvelope: {
-    readonly _iv: string;
-    readonly _data: string;
-}, recipientSealer: {
-    unseal(bytes: Uint8Array): Promise<Uint8Array>;
-}, expectedCollection: string, expectedId: string): Promise<string>;
-
-export { SealedCekDeliveryEnvelope, SealedRecordStrategy, openSealedRecord, withSealedRecord };