@noy-db/hub 0.3.0-pre.9 → 0.4.0-pre.0

package/dist/dead-filter-66VGI6JV.js

@@ -0,0 +1,28 @@
+import {
+  liveBaseIdSet
+} from "./chunk-GYGLAVCX.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-shape/satellites/dead-filter.ts
+async function liveBaseIdSetsForBundle(store, vaultName, collectionNames, getDEK) {
+  const { loadPersistedSchema } = await import("./storage-3MEJUENZ.js");
+  const out = /* @__PURE__ */ new Map();
+  for (const name of collectionNames) {
+    if (name.startsWith("_")) continue;
+    let dek;
+    try {
+      dek = await getDEK(name);
+    } catch {
+      continue;
+    }
+    const persisted = await loadPersistedSchema(store, vaultName, name, dek);
+    const marker = persisted?.satellite;
+    if (!marker) continue;
+    out.set(name, await liveBaseIdSet(store, vaultName, marker.base));
+  }
+  return out;
+}
+export {
+  liveBaseIdSetsForBundle
+};
+//# sourceMappingURL=dead-filter-66VGI6JV.js.map

package/dist/delegation-SU6CV3W7.js

@@ -0,0 +1,25 @@
+import {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+} from "./chunk-OCVM6KDH.js";
+import "./chunk-UC2ETWF3.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-W4TCUGQR.js";
+import "./chunk-A4FXFAKF.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+};
+//# sourceMappingURL=delegation-SU6CV3W7.js.map

package/dist/derivations/index.js

@@ -1,29 +1,29 @@
 import {
   withDerivation,
   withRollup
-} from "../chunk-IWTYFS3D.js";
+} from "../chunk-JBBSYJHP.js";
 import {
   DerivationRegistry
-} from "../chunk-PF3FQCCF.js";
-import "../chunk-7ZANJ6JZ.js";
+} from "../chunk-DDHM2TLX.js";
+import "../chunk-3ELCWU56.js";
 import {
   DerivationExecutor
-} from "../chunk-WVCQ75OK.js";
-import "../chunk-XHD3L3JO.js";
-import "../chunk-Z5YFRMG5.js";
-import "../chunk-XQ7UYPVN.js";
-import "../chunk-6MWUANRF.js";
-import "../chunk-2KOSJTMU.js";
+} from "../chunk-VCBHAE4R.js";
+import "../chunk-W4TCUGQR.js";
+import "../chunk-A4FXFAKF.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AUR7MRHA.js";
-import "../chunk-UNJU345Q.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-VCTXU4AT.js";
 import {
   DerivationCapExceededError,
   DerivationCycleError,
   DerivationDepthError,
   DerivationOutputShapeError,
   DerivationOutputUnknownError
-} from "../chunk-CU62BBRB.js";
+} from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DerivationCapExceededError,

package/dist/derive-6RWU4EOA.js

@@ -0,0 +1,21 @@
+import {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+} from "./chunk-BOKIKJJB.js";
+import "./chunk-W4TCUGQR.js";
+import "./chunk-A4FXFAKF.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+};
+//# sourceMappingURL=derive-6RWU4EOA.js.map

package/dist/enclave-TKPN2G2U.js

@@ -0,0 +1,141 @@
+import {
+  RecordCodec,
+  SEALED_CEK_NS,
+  applyRewrappedBody,
+  computeBrokerProof,
+  deriveBrokerProofBits,
+  deriveBrokerProofKey,
+  envelopeBodyForHash,
+  findByDet,
+  hasPerRecordKey,
+  isRewrappedUnder,
+  issueChallenge,
+  makeReservedEnvelopes,
+  openEnvelopeJson,
+  queryByDet,
+  resolveStableCek,
+  revokeSealedRecord,
+  rewrapBodyToDek,
+  rewrapEnvelope,
+  rotateRecordCek,
+  sealRecordToHost,
+  verifyBrokerProof,
+  writeEnvelopeBody
+} from "./chunk-W4TCUGQR.js";
+import {
+  buildDeleteMarker,
+  buildTombstone,
+  isDeleteMarker,
+  isTombstone,
+  isTombstoneShape
+} from "./chunk-A4FXFAKF.js";
+import {
+  ctEqualTags,
+  deriveVdigSlotKey,
+  evaluateKofN
+} from "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import {
+  computeBidxTarget,
+  deriveClassifyIndexKey,
+  deriveClassifyIndexSalt,
+  mintBidxTag
+} from "./chunk-6HY2X62D.js";
+import {
+  pbkdf2VerifyDigest
+} from "./chunk-LP7BEXCT.js";
+import {
+  base64ToBuffer,
+  bufferToBase64,
+  decrypt,
+  decryptBytes,
+  decryptBytesWithAAD,
+  decryptDeterministic,
+  deriveDeterministicKey,
+  deriveKey,
+  derivePassphraseKey,
+  derivePresenceKey,
+  deriveSealedFieldKey,
+  deriveSealedFieldKeyFromCek,
+  encrypt,
+  encryptBytes,
+  encryptBytesWithAAD,
+  encryptDeterministic,
+  generateDEK,
+  generateIV,
+  generateSalt,
+  hmacSha256Hex,
+  importCek,
+  sha256Hex,
+  unwrapCek,
+  unwrapKey,
+  wrapCek,
+  wrapKey
+} from "./chunk-HOONYZY2.js";
+import "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  RecordCodec,
+  SEALED_CEK_NS,
+  applyRewrappedBody,
+  base64ToBuffer,
+  bufferToBase64,
+  buildDeleteMarker,
+  buildTombstone,
+  computeBidxTarget,
+  computeBrokerProof,
+  ctEqualTags,
+  decrypt,
+  decryptBytes,
+  decryptBytesWithAAD,
+  decryptDeterministic,
+  deriveBrokerProofBits,
+  deriveBrokerProofKey,
+  deriveClassifyIndexKey,
+  deriveClassifyIndexSalt,
+  deriveDeterministicKey,
+  deriveKey,
+  derivePassphraseKey,
+  derivePresenceKey,
+  deriveSealedFieldKey,
+  deriveSealedFieldKeyFromCek,
+  deriveVdigSlotKey,
+  encrypt,
+  encryptBytes,
+  encryptBytesWithAAD,
+  encryptDeterministic,
+  envelopeBodyForHash,
+  evaluateKofN,
+  findByDet,
+  generateDEK,
+  generateIV,
+  generateSalt,
+  hasPerRecordKey,
+  hmacSha256Hex,
+  importCek,
+  isDeleteMarker,
+  isRewrappedUnder,
+  isTombstone,
+  isTombstoneShape,
+  issueChallenge,
+  makeReservedEnvelopes,
+  mintBidxTag,
+  openEnvelopeJson,
+  pbkdf2VerifyDigest,
+  queryByDet,
+  resolveStableCek,
+  revokeSealedRecord,
+  rewrapBodyToDek,
+  rewrapEnvelope,
+  rotateRecordCek,
+  sealRecordToHost,
+  sha256Hex,
+  unwrapCek,
+  unwrapKey,
+  verifyBrokerProof,
+  wrapCek,
+  wrapKey,
+  writeEnvelopeBody
+};
+//# sourceMappingURL=enclave-TKPN2G2U.js.map

package/dist/executor-KGNLJD6M.js

@@ -0,0 +1,9 @@
+import {
+  GuardExecutor
+} from "./chunk-ONTBCHCP.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-KGNLJD6M.js.map

package/dist/executor-UX4FASYZ.js

@@ -0,0 +1,26 @@
+import {
+  MaterializedViewExecutor
+} from "./chunk-WG4QBZDN.js";
+import "./chunk-LVGTA624.js";
+import "./chunk-S3BFKGET.js";
+import "./chunk-RA5VTXXG.js";
+import "./chunk-TAGR72IR.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-MT62YSPZ.js";
+import "./chunk-GULTLPFB.js";
+import "./chunk-JVBO4SZL.js";
+import "./chunk-WQIYTNJV.js";
+import "./chunk-W4TCUGQR.js";
+import "./chunk-A4FXFAKF.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MaterializedViewExecutor
+};
+//# sourceMappingURL=executor-UX4FASYZ.js.map

package/dist/executor-XGIS6CR7.js

@@ -0,0 +1,9 @@
+import {
+  DerivationExecutor
+} from "./chunk-VCBHAE4R.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-XGIS6CR7.js.map

package/dist/export-accessible-LKW3QV22.js

@@ -0,0 +1,23 @@
+import {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+} from "./chunk-WKGF2TJR.js";
+import "./chunk-FXZDAV62.js";
+import "./chunk-XUW3PXHU.js";
+import "./chunk-W4TCUGQR.js";
+import "./chunk-A4FXFAKF.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+};
+//# sourceMappingURL=export-accessible-LKW3QV22.js.map

package/dist/extract-partition-UP2ARO75.js

@@ -0,0 +1,38 @@
+import {
+  extractPartition,
+  extractPartitionCore,
+  reKeyBlobs,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+} from "./chunk-THVIPWRF.js";
+import "./chunk-CJ5KKU6X.js";
+import "./chunk-UHNGNKLV.js";
+import "./chunk-FXZDAV62.js";
+import "./chunk-XUW3PXHU.js";
+import "./chunk-UC2ETWF3.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-DRWBEDYO.js";
+import "./chunk-WQIYTNJV.js";
+import "./chunk-W4TCUGQR.js";
+import "./chunk-A4FXFAKF.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  extractPartition,
+  extractPartitionCore,
+  reKeyBlobs,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+};
+//# sourceMappingURL=extract-partition-UP2ARO75.js.map

package/dist/fanout-sidecar-B5LVUMQX.js

@@ -0,0 +1,74 @@
+import {
+  openEnvelopeJson
+} from "./chunk-W4TCUGQR.js";
+import "./chunk-A4FXFAKF.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import {
+  encrypt
+} from "./chunk-HOONYZY2.js";
+import {
+  NOYDB_FORMAT_VERSION
+} from "./chunk-VCTXU4AT.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-formula/derivations/fanout-sidecar.ts
+var FANOUT_DEK_COLLECTION = "_meta";
+function recordId(source, sourceId, outputKey) {
+  return `derivations-fanout/${source}/${sourceId}/${outputKey}`;
+}
+async function loadFanoutSidecar(store, vault, source, sourceId, outputKey, getDEK, encrypted) {
+  const envelope = await store.get(vault, "_meta", recordId(source, sourceId, outputKey));
+  if (!envelope) return void 0;
+  const json = !encrypted || envelope._iv === "" ? envelope._data : await openEnvelopeJson(envelope, await getDEK(FANOUT_DEK_COLLECTION));
+  const parsed = JSON.parse(json);
+  if (parsed._noydb_fanout !== 1) return void 0;
+  if (!Array.isArray(parsed.keys)) return void 0;
+  return parsed;
+}
+async function saveFanoutSidecar(store, vault, payload, getDEK, encrypted) {
+  const doc = {
+    _noydb_fanout: 1,
+    source: payload.source,
+    sourceId: payload.sourceId,
+    outputKey: payload.outputKey,
+    outputCollection: payload.outputCollection,
+    keys: payload.keys,
+    emittedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const id = recordId(payload.source, payload.sourceId, payload.outputKey);
+  const prior = await store.get(vault, "_meta", id);
+  const json = JSON.stringify(doc);
+  let envelope;
+  if (!encrypted) {
+    envelope = {
+      _noydb: NOYDB_FORMAT_VERSION,
+      _v: (prior?._v ?? 0) + 1,
+      _ts: (/* @__PURE__ */ new Date()).toISOString(),
+      _iv: "",
+      _data: json
+    };
+  } else {
+    const { iv, data } = await encrypt(json, await getDEK(FANOUT_DEK_COLLECTION));
+    envelope = {
+      _noydb: NOYDB_FORMAT_VERSION,
+      _v: (prior?._v ?? 0) + 1,
+      _ts: (/* @__PURE__ */ new Date()).toISOString(),
+      _iv: iv,
+      _data: data
+    };
+  }
+  await store.put(vault, "_meta", id, envelope);
+}
+async function deleteFanoutSidecar(store, vault, source, sourceId, outputKey) {
+  await store.delete(vault, "_meta", recordId(source, sourceId, outputKey));
+}
+export {
+  deleteFanoutSidecar,
+  loadFanoutSidecar,
+  saveFanoutSidecar
+};
+//# sourceMappingURL=fanout-sidecar-B5LVUMQX.js.map

package/dist/find-YS6XWB46.js

@@ -0,0 +1,11 @@
+import {
+  computeBidxTarget
+} from "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  computeBidxTarget
+};
+//# sourceMappingURL=find-YS6XWB46.js.map

package/dist/forget/index.js

@@ -1,21 +1,21 @@
 import {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION
-} from "../chunk-A2APWS32.js";
-import "../chunk-XHD3L3JO.js";
-import "../chunk-Z5YFRMG5.js";
-import "../chunk-XQ7UYPVN.js";
-import "../chunk-6MWUANRF.js";
-import "../chunk-2KOSJTMU.js";
+} from "../chunk-IFJTPAQQ.js";
+import "../chunk-W4TCUGQR.js";
+import "../chunk-A4FXFAKF.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AUR7MRHA.js";
-import "../chunk-UNJU345Q.js";
-import "../chunk-CU62BBRB.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-VCTXU4AT.js";
+import "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/forget/active.ts
 function withForgetCascade(opts) {
-  return { subjects: { ...opts.subjects } };
+  return { subjects: { ...opts.subjects }, ...opts.scopedPurge !== void 0 ? { scopedPurge: opts.scopedPurge } : {} };
 }
 export {
   NO_FORGET,

package/dist/forget/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForgetCascade` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForgetCascade(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects } }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BO,SAAS,kBAAkB,MAA0C;AAC1E,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,EAAE;AAC1C;","names":[]}
+{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForgetCascade` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForgetCascade(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BO,SAAS,kBAAkB,MAA0C;AAC1E,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;","names":[]}

package/dist/guards/index.js

@@ -2,23 +2,23 @@ import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "../chunk-KYC4LIEU.js";
-import {
-  ReadOnlyVaultFacade
-} from "../chunk-QJR3W3MF.js";
+} from "../chunk-6NQMXTYC.js";
 import {
   GuardRegistry
 } from "../chunk-YMUGBZN2.js";
+import {
+  ReadOnlyVaultFacade
+} from "../chunk-JK733I5V.js";
 import {
   GuardExecutor
-} from "../chunk-Y2OCKFZ3.js";
+} from "../chunk-ONTBCHCP.js";
 import {
   AmendmentForbiddenError,
   FieldFrozenError,
   IllegalTransitionError,
   InvariantError,
   RecordLockedError
-} from "../chunk-CU62BBRB.js";
+} from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   AmendmentForbiddenError,

package/dist/history/index.js

@@ -5,9 +5,10 @@ import {
   getHistory,
   getVersionEnvelope,
   pruneHistory,
+  rewrapHistory,
   saveHistory,
   tombstoneHistory
-} from "../chunk-4G3IT7J7.js";
+} from "../chunk-IAO54J4R.js";
 import {
   diff,
   formatDiff
@@ -16,11 +17,12 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-WNA6T3MA.js";
+} from "../chunk-VRBTNCM4.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "../chunk-I7FD46FF.js";
+import "../chunk-DRWBEDYO.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -28,16 +30,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-MSVY7ULZ.js";
-import "../chunk-XHD3L3JO.js";
-import "../chunk-Z5YFRMG5.js";
-import "../chunk-XQ7UYPVN.js";
-import "../chunk-6MWUANRF.js";
-import "../chunk-2KOSJTMU.js";
+} from "../chunk-WQIYTNJV.js";
+import "../chunk-W4TCUGQR.js";
+import "../chunk-A4FXFAKF.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AUR7MRHA.js";
-import "../chunk-UNJU345Q.js";
-import "../chunk-CU62BBRB.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-VCTXU4AT.js";
+import "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/history/active.ts
@@ -49,6 +51,7 @@ function withHistory() {
     pruneHistory,
     clearHistory,
     tombstoneHistory,
+    rewrapHistory,
     envelopePayloadHash,
     computePatch,
     diff,

package/dist/history/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-commit/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-commit/history/active.ts"],"sourcesContent":["/**\n * Active history strategy — `withHistory()` returns the real\n * implementation that wires per-record snapshots, the hash-chained\n * audit ledger, JSON-patch deltas, and time-machine reads into the\n * core write/read paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withHistory } from '@noy-db/hub/history'\n *\n * const db = await createNoydb({\n *   store: ...,\n *   user: ...,\n *   historyStrategy: withHistory(),\n * })\n * ```\n *\n * The factory is a thin wrapper that delegates to the existing\n * `history.ts`, `diff.ts`, `ledger/store.ts`, `ledger/patch.ts`, and\n * `time-machine.ts` modules. Splitting the import chain through this\n * file is what lets `tsup` tree-shake the heavy modules out of the\n * default `@noy-db/hub` bundle when no `withHistory()` import is\n * present in the consumer.\n *\n * @public\n */\n\nimport type { HistoryStrategy, BuildLedgerOptions } from './strategy.js'\nimport {\n  saveHistory,\n  getHistory,\n  getVersionEnvelope,\n  pruneHistory,\n  clearHistory,\n  tombstoneHistory,\n  rewrapHistory,\n} from './history.js'\nimport { diff as computeDiff } from './diff.js'\nimport { LedgerStore, envelopePayloadHash } from './ledger/store.js'\nimport { computePatch } from './ledger/patch.js'\nimport { VaultInstant } from './time-machine.js'\n\n/**\n * Build the active history strategy. Today the factory takes no\n * options; per-collection retention tuning still flows through\n * `HistoryConfig` on `Vault.collection()` / `vault.openVault()`.\n *\n * Future option slots (kept off the LTS surface for now):\n *   - global maxVersions cap\n *   - global beforeDate prune cadence\n *   - ledger encryption toggle (today inferred from vault.encrypted)\n */\nexport function withHistory(): HistoryStrategy {\n  return {\n    saveHistory,\n    getHistoryEntries: getHistory,\n    getVersionEnvelope,\n    pruneHistory,\n    clearHistory,\n    tombstoneHistory,\n    rewrapHistory,\n    envelopePayloadHash,\n    computePatch,\n    diff: computeDiff,\n    buildLedger(opts: BuildLedgerOptions): LedgerStore {\n      return new LedgerStore({\n        adapter: opts.adapter,\n        vault: opts.vault,\n        encrypted: opts.encrypted,\n        getDEK: opts.getDEK,\n        actor: opts.actor,\n      })\n    },\n    buildVaultInstant(engine, timestamp): VaultInstant {\n      return new VaultInstant(engine, timestamp)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDO,SAAS,cAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAuC;AACjD,aAAO,IAAI,YAAY;AAAA,QACrB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,IACA,kBAAkB,QAAQ,WAAyB;AACjD,aAAO,IAAI,aAAa,QAAQ,SAAS;AAAA,IAC3C;AAAA,EACF;AACF;","names":[]}