@noy-db/hub 0.3.0 → 0.4.0-pre.1

package/dist/share-link/index.js

@@ -0,0 +1,201 @@
+import {
+  isULID
+} from "../chunk-ZJADGNYF.js";
+import "../chunk-PZ5AY32C.js";
+
+// src/share-link/share-link.ts
+var ShareLinkParseError = class extends Error {
+  /** Machine-readable error code. Stable across library versions. */
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "ShareLinkParseError";
+    this.code = code;
+  }
+};
+var DUMMY_BASE = "https://share-link.invalid";
+function encodeQueryValue(value) {
+  return encodeURIComponent(value).replace(/'/g, "%27");
+}
+function decodeCanonical(raw, code, what, { redact = false, encode = encodeURIComponent } = {}) {
+  const shown = redact ? "(redacted)" : `"${raw}"`;
+  let decoded;
+  try {
+    decoded = decodeURIComponent(raw);
+  } catch {
+    throw new ShareLinkParseError(code, `${what}: malformed percent-encoding in ${shown}`);
+  }
+  if (decoded === "") {
+    throw new ShareLinkParseError(code, `${what}: empty`);
+  }
+  if (encode(decoded) !== raw) {
+    throw new ShareLinkParseError(
+      code,
+      `${what}: ${shown} is not canonical encodeURIComponent output`
+    );
+  }
+  return decoded;
+}
+function decodePathSegment(raw, what) {
+  const decoded = decodeCanonical(raw, "MALFORMED_SEGMENT", what);
+  if (decoded === "." || decoded === "..") {
+    throw new ShareLinkParseError("MALFORMED_SEGMENT", `${what}: "${decoded}" is a dot segment`);
+  }
+  return decoded;
+}
+function parseVersion(raw) {
+  if (!/^(?:0|[1-9][0-9]*)$/.test(raw)) {
+    throw new ShareLinkParseError(
+      "INVALID_VERSION",
+      `version "${raw}" is not a canonical base-10 integer`
+    );
+  }
+  const version = Number(raw);
+  if (!Number.isSafeInteger(version)) {
+    throw new ShareLinkParseError("INVALID_VERSION", `version "${raw}" exceeds 2^53 - 1`);
+  }
+  return version;
+}
+function toUrl(input) {
+  if (input instanceof URL) {
+    if (input.protocol !== "http:" && input.protocol !== "https:") {
+      throw new ShareLinkParseError(
+        "UNKNOWN_PREFIX",
+        `unsupported protocol "${input.protocol}" \u2014 share links are http(s) URLs or bare /r/ paths`
+      );
+    }
+    return input;
+  }
+  if (input.startsWith("/")) {
+    try {
+      return new URL(input, DUMMY_BASE);
+    } catch {
+      throw new ShareLinkParseError("MALFORMED_URL", "unparseable share path");
+    }
+  }
+  if (/^https?:\/\//i.test(input)) {
+    try {
+      return new URL(input);
+    } catch {
+      throw new ShareLinkParseError("MALFORMED_URL", "unparseable share URL");
+    }
+  }
+  throw new ShareLinkParseError(
+    "UNKNOWN_PREFIX",
+    'input is neither a "/"-rooted share path nor an http(s) URL'
+  );
+}
+function parseShareLink(input) {
+  const url = toUrl(input);
+  let pathname = url.pathname;
+  if (!pathname.startsWith("/r/")) {
+    const idx = pathname.indexOf("/r/");
+    if (idx === -1) {
+      throw new ShareLinkParseError(
+        "UNKNOWN_PREFIX",
+        `path "${pathname}" has no /r/ share prefix`
+      );
+    }
+    pathname = pathname.slice(idx);
+  }
+  const rawSegments = pathname.split("/");
+  if (rawSegments.length !== 5) {
+    throw new ShareLinkParseError(
+      "MALFORMED_PATH",
+      `expected /r/{vaultHandle}/{collection}/{recordId} \u2014 got ${rawSegments.length - 2} segment(s) after /r/`
+    );
+  }
+  const vaultHandle = decodePathSegment(rawSegments[2], "vault handle");
+  if (!isULID(vaultHandle)) {
+    throw new ShareLinkParseError(
+      "INVALID_VAULT_HANDLE",
+      `vault handle "${vaultHandle}" is not a ULID`
+    );
+  }
+  const collection = decodePathSegment(rawSegments[3], "collection");
+  const recordId = decodePathSegment(rawSegments[4], "record id");
+  let period;
+  let version;
+  if (url.search !== "") {
+    const seen = /* @__PURE__ */ new Set();
+    for (const pair of url.search.slice(1).split("&")) {
+      const eq = pair.indexOf("=");
+      if (eq <= 0) {
+        throw new ShareLinkParseError("MALFORMED_QUERY", `query pair "${pair}" is not key=value`);
+      }
+      const key = pair.slice(0, eq);
+      const rawValue = pair.slice(eq + 1);
+      if (key !== "period" && key !== "v") {
+        throw new ShareLinkParseError("UNKNOWN_QUERY_KEY", `unknown query key "${key}"`);
+      }
+      if (seen.has(key)) {
+        throw new ShareLinkParseError("DUPLICATE_QUERY_KEY", `duplicate query key "${key}"`);
+      }
+      seen.add(key);
+      if (key === "period") {
+        period = decodeCanonical(rawValue, "MALFORMED_QUERY", "period", {
+          encode: encodeQueryValue
+        });
+      } else {
+        version = parseVersion(rawValue);
+      }
+    }
+  }
+  let grantToken;
+  if (url.hash !== "" && url.hash !== "#") {
+    const fragment = url.hash.slice(1);
+    if (!fragment.startsWith("g=")) {
+      throw new ShareLinkParseError(
+        "MALFORMED_FRAGMENT",
+        "fragment is not a g={token} grant carrier"
+      );
+    }
+    grantToken = decodeCanonical(fragment.slice(2), "MALFORMED_FRAGMENT", "grant token", {
+      redact: true
+    });
+  }
+  return {
+    vaultHandle,
+    collection,
+    recordId,
+    ...period !== void 0 ? { period } : {},
+    ...version !== void 0 ? { version } : {},
+    ...grantToken !== void 0 ? { grantToken } : {}
+  };
+}
+function requirePart(value, what, dotSegmentRefused = false) {
+  if (typeof value !== "string" || value === "") {
+    throw new ShareLinkParseError("INVALID_PARTS", `${what} must be a non-empty string`);
+  }
+  if (dotSegmentRefused && (value === "." || value === "..")) {
+    throw new ShareLinkParseError("INVALID_PARTS", `${what}: "${value}" is a dot segment`);
+  }
+  return value;
+}
+function buildShareLink(parts, base) {
+  const { vaultHandle, collection, recordId, period, version, grantToken } = parts;
+  if (typeof vaultHandle !== "string" || !isULID(vaultHandle)) {
+    throw new ShareLinkParseError("INVALID_PARTS", "vaultHandle is not a ULID");
+  }
+  const path = `/r/${vaultHandle}/${encodeURIComponent(
+    requirePart(collection, "collection", true)
+  )}/${encodeURIComponent(requirePart(recordId, "recordId", true))}`;
+  const query = [];
+  if (period !== void 0) {
+    query.push(`period=${encodeQueryValue(requirePart(period, "period"))}`);
+  }
+  if (version !== void 0) {
+    if (typeof version !== "number" || !Number.isSafeInteger(version) || version < 0) {
+      throw new ShareLinkParseError("INVALID_PARTS", "version must be a non-negative safe integer");
+    }
+    query.push(`v=${version}`);
+  }
+  const fragment = grantToken !== void 0 ? `#g=${encodeURIComponent(requirePart(grantToken, "grantToken"))}` : "";
+  return (base ?? "") + path + (query.length > 0 ? `?${query.join("&")}` : "") + fragment;
+}
+export {
+  ShareLinkParseError,
+  buildShareLink,
+  parseShareLink
+};
+//# sourceMappingURL=index.js.map

package/dist/share-link/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/share-link/share-link.ts"],"sourcesContent":["/**\n * Portal share-link grammar + parse/build helper (#806).\n *\n * ONE canonical link grammar addresses `vault / period / collection /\n * record` across all three portal surfaces — the LIFF permalink path\n * (`https://liff.line.me/{liffId}/r/…`), the installed-PWA same-origin\n * path (`https://{portal-origin}/r/…`), and the vendor backend console.\n * The link SHAPE is identical everywhere; only the origin prefix\n * differs, and callers own the prefix.\n *\n * ## Grammar (frozen — see `__tests__/share-link-surface.golden.json`)\n *\n * ```\n * share-link = [ base ] \"/r/\" vault \"/\" collection \"/\" record\n *              [ \"?\" query ] [ \"#\" fragment ]\n * vault      = ULID                        ; 26 uppercase Crockford base32 chars\n * collection = segment                     ; opaque, non-empty after decode\n * record     = segment                     ; opaque, non-empty after decode\n * query      = pair *( \"&\" pair )          ; keys unique; ONLY these two keys\n * pair       = \"period=\" component         ; opaque period id\n *            / \"v=\" version                ; record version\n * version    = \"0\" / %x31-39 *DIGIT        ; base-10 integer, ≤ 2^53 − 1\n * fragment   = \"g=\" component              ; single-use grant token (opaque)\n * ```\n *\n * `segment` / `component` are strict-canonical `encodeURIComponent`\n * output: decoding then re-encoding MUST reproduce the raw text exactly\n * (uppercase-hex escapes, `+` is a literal plus never a space, `%2F`\n * inside a segment never creates an extra segment). Path segments\n * additionally may not decode to `.` or `..`. Links produced by\n * {@link buildShareLink} always satisfy this; hand-written links using\n * only unreserved characters (`inv-001`, ULIDs, …) do too.\n *\n * ## Transport rule for the grant token\n *\n * The optional single-use grant token travels ONLY in the URL fragment\n * (`#g={token}`) — never in the path or query — because fragments are\n * not sent to servers, so the token never reaches server logs, CDNs, or\n * LINE's infrastructure. Same rule `on-magic-link` follows. The token is\n * fully OPAQUE here: no validation beyond non-empty, no decoding of its\n * semantics — grant semantics live in `on-magic-link` (not imported).\n *\n * ## Fail closed\n *\n * {@link parseShareLink} throws a typed {@link ShareLinkParseError} for\n * ANYTHING that is not exactly the grammar above — unknown prefix,\n * missing/extra/empty/malformed segments, a non-ULID vault handle,\n * duplicate or unknown query keys, malformed fragments. There is never a\n * default-vault (or any other) fallback; the app maps the error to a 404.\n *\n * Zero dependencies on the hub floor: pure string/`URL` code, no crypto,\n * no store — LIFF shells, PWAs, and klum-db can import this subpath\n * without dragging anything else. (The one internal import is the pure,\n * leaf ULID shape check shared with the pod format.)\n */\n\nimport { isULID } from '../with-pod/ulid.js'\n\n/** Machine-readable {@link ShareLinkParseError} discriminant. */\nexport type ShareLinkErrorCode =\n  | 'MALFORMED_URL'\n  | 'UNKNOWN_PREFIX'\n  | 'MALFORMED_PATH'\n  | 'MALFORMED_SEGMENT'\n  | 'INVALID_VAULT_HANDLE'\n  | 'MALFORMED_QUERY'\n  | 'DUPLICATE_QUERY_KEY'\n  | 'UNKNOWN_QUERY_KEY'\n  | 'INVALID_VERSION'\n  | 'MALFORMED_FRAGMENT'\n  | 'INVALID_PARTS'\n\n/**\n * Typed failure for the share-link grammar. Thrown by\n * {@link parseShareLink} for any input outside the grammar (fail closed —\n * map to an app-level 404, never a default-vault fallback), and by\n * {@link buildShareLink} with code `'INVALID_PARTS'` when the caller\n * hands it parts that could not round-trip.\n *\n * Standalone (`extends Error`, not `NoydbError`) so this subpath stays\n * import-light; the `code` field follows the same machine-readable\n * convention as the kernel error classes.\n */\nexport class ShareLinkParseError extends Error {\n  /** Machine-readable error code. Stable across library versions. */\n  readonly code: ShareLinkErrorCode\n\n  constructor(code: ShareLinkErrorCode, message: string) {\n    super(message)\n    this.name = 'ShareLinkParseError'\n    this.code = code\n  }\n}\n\n/**\n * The logical address a share link carries. Input to\n * {@link buildShareLink}; {@link parseShareLink} returns the same shape\n * (as the readonly {@link ShareLink} alias) with optional fields OMITTED\n * (not `undefined`) when absent from the link.\n */\nexport interface ShareLinkParts {\n  /** Vault handle — a 26-character uppercase Crockford-base32 ULID. */\n  vaultHandle: string\n  /** Collection name — opaque, non-empty. */\n  collection: string\n  /** Record id — opaque, non-empty. */\n  recordId: string\n  /** Optional period id (`?period=`) — opaque, non-empty. */\n  period?: string\n  /** Optional record version (`?v=`) — non-negative safe integer. */\n  version?: number\n  /**\n   * Optional single-use grant token (`#g=`) — opaque, non-empty. Carried\n   * ONLY in the URL fragment; semantics belong to `on-magic-link`.\n   */\n  grantToken?: string\n}\n\n/** A successfully parsed share link. See {@link ShareLinkParts}. */\nexport type ShareLink = Readonly<ShareLinkParts>\n\n// Dummy base for parsing bare `/r/…` paths with the WHATWG URL parser.\n// `.invalid` is reserved (RFC 2606) — it can never collide with a real\n// origin, and the host is discarded anyway (only path/query/fragment\n// matter to the grammar).\nconst DUMMY_BASE = 'https://share-link.invalid'\n\n/**\n * Canonical encoding of a QUERY value. `encodeURIComponent`, plus `'`\n * → `%27`: the WHATWG URL parser percent-encodes the apostrophe inside\n * the query component of special (http/https) URLs — if we emitted a\n * raw `'`, any URL-object round-trip (browser address bar, `new URL`)\n * would rewrite the link into a form the strict parser then rejects.\n * Path and fragment components don't need this — every character the\n * URL parser escapes there is already escaped by `encodeURIComponent`.\n */\nfunction encodeQueryValue(value: string): string {\n  return encodeURIComponent(value).replace(/'/g, '%27')\n}\n\n/**\n * Strict-canonical decode: `raw` must be exactly what the given\n * canonical `encode` produces for the decoded text — no `+`-for-space,\n * no lowercase hex escapes, no unencoded reserved characters,\n * non-empty. `redact` keeps the raw text out of the error message\n * (grant tokens).\n */\nfunction decodeCanonical(\n  raw: string,\n  code: ShareLinkErrorCode,\n  what: string,\n  { redact = false, encode = encodeURIComponent }: {\n    redact?: boolean\n    encode?: (value: string) => string\n  } = {},\n): string {\n  const shown = redact ? '(redacted)' : `\"${raw}\"`\n  let decoded: string\n  try {\n    decoded = decodeURIComponent(raw)\n  } catch {\n    throw new ShareLinkParseError(code, `${what}: malformed percent-encoding in ${shown}`)\n  }\n  if (decoded === '') {\n    throw new ShareLinkParseError(code, `${what}: empty`)\n  }\n  if (encode(decoded) !== raw) {\n    throw new ShareLinkParseError(\n      code,\n      `${what}: ${shown} is not canonical encodeURIComponent output`,\n    )\n  }\n  return decoded\n}\n\n/** Path-segment decode — canonical, plus the dot-segment refusal. */\nfunction decodePathSegment(raw: string, what: string): string {\n  const decoded = decodeCanonical(raw, 'MALFORMED_SEGMENT', what)\n  if (decoded === '.' || decoded === '..') {\n    throw new ShareLinkParseError('MALFORMED_SEGMENT', `${what}: \"${decoded}\" is a dot segment`)\n  }\n  return decoded\n}\n\n/** `v=` value → non-negative safe integer. Canonical base-10 only. */\nfunction parseVersion(raw: string): number {\n  if (!/^(?:0|[1-9][0-9]*)$/.test(raw)) {\n    throw new ShareLinkParseError(\n      'INVALID_VERSION',\n      `version \"${raw}\" is not a canonical base-10 integer`,\n    )\n  }\n  const version = Number(raw)\n  if (!Number.isSafeInteger(version)) {\n    throw new ShareLinkParseError('INVALID_VERSION', `version \"${raw}\" exceeds 2^53 - 1`)\n  }\n  return version\n}\n\n/** Resolve string | URL input to a URL object, fail closed. */\nfunction toUrl(input: string | URL): URL {\n  if (input instanceof URL) {\n    if (input.protocol !== 'http:' && input.protocol !== 'https:') {\n      throw new ShareLinkParseError(\n        'UNKNOWN_PREFIX',\n        `unsupported protocol \"${input.protocol}\" — share links are http(s) URLs or bare /r/ paths`,\n      )\n    }\n    return input\n  }\n  if (input.startsWith('/')) {\n    try {\n      return new URL(input, DUMMY_BASE)\n    } catch {\n      throw new ShareLinkParseError('MALFORMED_URL', 'unparseable share path')\n    }\n  }\n  if (/^https?:\\/\\//i.test(input)) {\n    try {\n      return new URL(input)\n    } catch {\n      throw new ShareLinkParseError('MALFORMED_URL', 'unparseable share URL')\n    }\n  }\n  throw new ShareLinkParseError(\n    'UNKNOWN_PREFIX',\n    'input is neither a \"/\"-rooted share path nor an http(s) URL',\n  )\n}\n\n/**\n * Parse a share link — full URL, `URL` instance, or bare `/r/…` path.\n *\n * A LIFF permalink prefix is tolerated: when the path does not start\n * with `/r/` directly, the share path is taken from the FIRST `/r/`\n * segment boundary (`https://liff.line.me/{liffId}/r/…` → `/r/…`). No\n * fuzzy matching beyond that single rule.\n *\n * Fail closed: anything outside the grammar throws\n * {@link ShareLinkParseError}. Never a default-vault fallback.\n */\nexport function parseShareLink(input: string | URL): ShareLink {\n  const url = toUrl(input)\n\n  let pathname = url.pathname\n  if (!pathname.startsWith('/r/')) {\n    // LIFF permalink tolerance — only after the direct parse failed. An\n    // indexOf hit is always a whole `r` segment (the match is slash-\n    // delimited on both sides), so this cannot fire mid-segment.\n    const idx = pathname.indexOf('/r/')\n    if (idx === -1) {\n      throw new ShareLinkParseError(\n        'UNKNOWN_PREFIX',\n        `path \"${pathname}\" has no /r/ share prefix`,\n      )\n    }\n    pathname = pathname.slice(idx)\n  }\n\n  // \"/r/{vault}/{collection}/{record}\" splits into exactly 5 parts:\n  // ['', 'r', vault, collection, record].\n  const rawSegments = pathname.split('/')\n  if (rawSegments.length !== 5) {\n    throw new ShareLinkParseError(\n      'MALFORMED_PATH',\n      `expected /r/{vaultHandle}/{collection}/{recordId} — got ${rawSegments.length - 2} segment(s) after /r/`,\n    )\n  }\n\n  const vaultHandle = decodePathSegment(rawSegments[2]!, 'vault handle')\n  if (!isULID(vaultHandle)) {\n    throw new ShareLinkParseError(\n      'INVALID_VAULT_HANDLE',\n      `vault handle \"${vaultHandle}\" is not a ULID`,\n    )\n  }\n  const collection = decodePathSegment(rawSegments[3]!, 'collection')\n  const recordId = decodePathSegment(rawSegments[4]!, 'record id')\n\n  // Query — manual parse of url.search (NOT URLSearchParams, whose\n  // form-urlencoded rules decode \"+\" as a space and hide duplicates).\n  let period: string | undefined\n  let version: number | undefined\n  if (url.search !== '') {\n    const seen = new Set<string>()\n    for (const pair of url.search.slice(1).split('&')) {\n      const eq = pair.indexOf('=')\n      if (eq <= 0) {\n        throw new ShareLinkParseError('MALFORMED_QUERY', `query pair \"${pair}\" is not key=value`)\n      }\n      const key = pair.slice(0, eq)\n      const rawValue = pair.slice(eq + 1)\n      if (key !== 'period' && key !== 'v') {\n        throw new ShareLinkParseError('UNKNOWN_QUERY_KEY', `unknown query key \"${key}\"`)\n      }\n      if (seen.has(key)) {\n        throw new ShareLinkParseError('DUPLICATE_QUERY_KEY', `duplicate query key \"${key}\"`)\n      }\n      seen.add(key)\n      if (key === 'period') {\n        period = decodeCanonical(rawValue, 'MALFORMED_QUERY', 'period', {\n          encode: encodeQueryValue,\n        })\n      } else {\n        version = parseVersion(rawValue)\n      }\n    }\n  }\n\n  // Fragment — the ONLY place a grant token may appear.\n  let grantToken: string | undefined\n  if (url.hash !== '' && url.hash !== '#') {\n    const fragment = url.hash.slice(1)\n    if (!fragment.startsWith('g=')) {\n      throw new ShareLinkParseError(\n        'MALFORMED_FRAGMENT',\n        'fragment is not a g={token} grant carrier',\n      )\n    }\n    grantToken = decodeCanonical(fragment.slice(2), 'MALFORMED_FRAGMENT', 'grant token', {\n      redact: true,\n    })\n  }\n\n  return {\n    vaultHandle,\n    collection,\n    recordId,\n    ...(period !== undefined ? { period } : {}),\n    ...(version !== undefined ? { version } : {}),\n    ...(grantToken !== undefined ? { grantToken } : {}),\n  }\n}\n\n/** Build-side part validation. Returns the (narrowed) string value. */\nfunction requirePart(value: unknown, what: string, dotSegmentRefused = false): string {\n  if (typeof value !== 'string' || value === '') {\n    throw new ShareLinkParseError('INVALID_PARTS', `${what} must be a non-empty string`)\n  }\n  if (dotSegmentRefused && (value === '.' || value === '..')) {\n    throw new ShareLinkParseError('INVALID_PARTS', `${what}: \"${value}\" is a dot segment`)\n  }\n  return value\n}\n\n/**\n * Build a RELATIVE share link (`/r/…`) from typed parts. Callers prefix\n * their surface origin — the LIFF permalink base, the PWA origin, or the\n * vendor console — either themselves or via `base`, which is prepended\n * VERBATIM (no validation, no joining logic; pass it without a trailing\n * slash, e.g. `https://liff.line.me/{liffId}`).\n *\n * The grant token, when present, is emitted ONLY as the `#g=` fragment.\n * Invalid parts throw {@link ShareLinkParseError} with code\n * `'INVALID_PARTS'` — every built link is guaranteed to round-trip\n * through {@link parseShareLink}.\n */\nexport function buildShareLink(parts: ShareLinkParts, base?: string): string {\n  const { vaultHandle, collection, recordId, period, version, grantToken } = parts\n\n  if (typeof vaultHandle !== 'string' || !isULID(vaultHandle)) {\n    throw new ShareLinkParseError('INVALID_PARTS', 'vaultHandle is not a ULID')\n  }\n  const path = `/r/${vaultHandle}/${encodeURIComponent(\n    requirePart(collection, 'collection', true),\n  )}/${encodeURIComponent(requirePart(recordId, 'recordId', true))}`\n\n  const query: string[] = []\n  if (period !== undefined) {\n    query.push(`period=${encodeQueryValue(requirePart(period, 'period'))}`)\n  }\n  if (version !== undefined) {\n    if (typeof version !== 'number' || !Number.isSafeInteger(version) || version < 0) {\n      throw new ShareLinkParseError('INVALID_PARTS', 'version must be a non-negative safe integer')\n    }\n    query.push(`v=${version}`)\n  }\n\n  const fragment =\n    grantToken !== undefined\n      ? `#g=${encodeURIComponent(requirePart(grantToken, 'grantToken'))}`\n      : ''\n\n  return (base ?? '') + path + (query.length > 0 ? `?${query.join('&')}` : '') + fragment\n}\n"],"mappings":";;;;;;AAmFO,IAAM,sBAAN,cAAkC,MAAM;AAAA;AAAA,EAEpC;AAAA,EAET,YAAY,MAA0B,SAAiB;AACrD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAiCA,IAAM,aAAa;AAWnB,SAAS,iBAAiB,OAAuB;AAC/C,SAAO,mBAAmB,KAAK,EAAE,QAAQ,MAAM,KAAK;AACtD;AASA,SAAS,gBACP,KACA,MACA,MACA,EAAE,SAAS,OAAO,SAAS,mBAAmB,IAG1C,CAAC,GACG;AACR,QAAM,QAAQ,SAAS,eAAe,IAAI,GAAG;AAC7C,MAAI;AACJ,MAAI;AACF,cAAU,mBAAmB,GAAG;AAAA,EAClC,QAAQ;AACN,UAAM,IAAI,oBAAoB,MAAM,GAAG,IAAI,mCAAmC,KAAK,EAAE;AAAA,EACvF;AACA,MAAI,YAAY,IAAI;AAClB,UAAM,IAAI,oBAAoB,MAAM,GAAG,IAAI,SAAS;AAAA,EACtD;AACA,MAAI,OAAO,OAAO,MAAM,KAAK;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,GAAG,IAAI,KAAK,KAAK;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,KAAa,MAAsB;AAC5D,QAAM,UAAU,gBAAgB,KAAK,qBAAqB,IAAI;AAC9D,MAAI,YAAY,OAAO,YAAY,MAAM;AACvC,UAAM,IAAI,oBAAoB,qBAAqB,GAAG,IAAI,MAAM,OAAO,oBAAoB;AAAA,EAC7F;AACA,SAAO;AACT;AAGA,SAAS,aAAa,KAAqB;AACzC,MAAI,CAAC,sBAAsB,KAAK,GAAG,GAAG;AACpC,UAAM,IAAI;AAAA,MACR;AAAA,MACA,YAAY,GAAG;AAAA,IACjB;AAAA,EACF;AACA,QAAM,UAAU,OAAO,GAAG;AAC1B,MAAI,CAAC,OAAO,cAAc,OAAO,GAAG;AAClC,UAAM,IAAI,oBAAoB,mBAAmB,YAAY,GAAG,oBAAoB;AAAA,EACtF;AACA,SAAO;AACT;AAGA,SAAS,MAAM,OAA0B;AACvC,MAAI,iBAAiB,KAAK;AACxB,QAAI,MAAM,aAAa,WAAW,MAAM,aAAa,UAAU;AAC7D,YAAM,IAAI;AAAA,QACR;AAAA,QACA,yBAAyB,MAAM,QAAQ;AAAA,MACzC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,WAAW,GAAG,GAAG;AACzB,QAAI;AACF,aAAO,IAAI,IAAI,OAAO,UAAU;AAAA,IAClC,QAAQ;AACN,YAAM,IAAI,oBAAoB,iBAAiB,wBAAwB;AAAA,IACzE;AAAA,EACF;AACA,MAAI,gBAAgB,KAAK,KAAK,GAAG;AAC/B,QAAI;AACF,aAAO,IAAI,IAAI,KAAK;AAAA,IACtB,QAAQ;AACN,YAAM,IAAI,oBAAoB,iBAAiB,uBAAuB;AAAA,IACxE;AAAA,EACF;AACA,QAAM,IAAI;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACF;AAaO,SAAS,eAAe,OAAgC;AAC7D,QAAM,MAAM,MAAM,KAAK;AAEvB,MAAI,WAAW,IAAI;AACnB,MAAI,CAAC,SAAS,WAAW,KAAK,GAAG;AAI/B,UAAM,MAAM,SAAS,QAAQ,KAAK;AAClC,QAAI,QAAQ,IAAI;AACd,YAAM,IAAI;AAAA,QACR;AAAA,QACA,SAAS,QAAQ;AAAA,MACnB;AAAA,IACF;AACA,eAAW,SAAS,MAAM,GAAG;AAAA,EAC/B;AAIA,QAAM,cAAc,SAAS,MAAM,GAAG;AACtC,MAAI,YAAY,WAAW,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,gEAA2D,YAAY,SAAS,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,cAAc,kBAAkB,YAAY,CAAC,GAAI,cAAc;AACrE,MAAI,CAAC,OAAO,WAAW,GAAG;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,MACA,iBAAiB,WAAW;AAAA,IAC9B;AAAA,EACF;AACA,QAAM,aAAa,kBAAkB,YAAY,CAAC,GAAI,YAAY;AAClE,QAAM,WAAW,kBAAkB,YAAY,CAAC,GAAI,WAAW;AAI/D,MAAI;AACJ,MAAI;AACJ,MAAI,IAAI,WAAW,IAAI;AACrB,UAAM,OAAO,oBAAI,IAAY;AAC7B,eAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,EAAE,MAAM,GAAG,GAAG;AACjD,YAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,UAAI,MAAM,GAAG;AACX,cAAM,IAAI,oBAAoB,mBAAmB,eAAe,IAAI,oBAAoB;AAAA,MAC1F;AACA,YAAM,MAAM,KAAK,MAAM,GAAG,EAAE;AAC5B,YAAM,WAAW,KAAK,MAAM,KAAK,CAAC;AAClC,UAAI,QAAQ,YAAY,QAAQ,KAAK;AACnC,cAAM,IAAI,oBAAoB,qBAAqB,sBAAsB,GAAG,GAAG;AAAA,MACjF;AACA,UAAI,KAAK,IAAI,GAAG,GAAG;AACjB,cAAM,IAAI,oBAAoB,uBAAuB,wBAAwB,GAAG,GAAG;AAAA,MACrF;AACA,WAAK,IAAI,GAAG;AACZ,UAAI,QAAQ,UAAU;AACpB,iBAAS,gBAAgB,UAAU,mBAAmB,UAAU;AAAA,UAC9D,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,OAAO;AACL,kBAAU,aAAa,QAAQ;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAGA,MAAI;AACJ,MAAI,IAAI,SAAS,MAAM,IAAI,SAAS,KAAK;AACvC,UAAM,WAAW,IAAI,KAAK,MAAM,CAAC;AACjC,QAAI,CAAC,SAAS,WAAW,IAAI,GAAG;AAC9B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,iBAAa,gBAAgB,SAAS,MAAM,CAAC,GAAG,sBAAsB,eAAe;AAAA,MACnF,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,IACzC,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,EACnD;AACF;AAGA,SAAS,YAAY,OAAgB,MAAc,oBAAoB,OAAe;AACpF,MAAI,OAAO,UAAU,YAAY,UAAU,IAAI;AAC7C,UAAM,IAAI,oBAAoB,iBAAiB,GAAG,IAAI,6BAA6B;AAAA,EACrF;AACA,MAAI,sBAAsB,UAAU,OAAO,UAAU,OAAO;AAC1D,UAAM,IAAI,oBAAoB,iBAAiB,GAAG,IAAI,MAAM,KAAK,oBAAoB;AAAA,EACvF;AACA,SAAO;AACT;AAcO,SAAS,eAAe,OAAuB,MAAuB;AAC3E,QAAM,EAAE,aAAa,YAAY,UAAU,QAAQ,SAAS,WAAW,IAAI;AAE3E,MAAI,OAAO,gBAAgB,YAAY,CAAC,OAAO,WAAW,GAAG;AAC3D,UAAM,IAAI,oBAAoB,iBAAiB,2BAA2B;AAAA,EAC5E;AACA,QAAM,OAAO,MAAM,WAAW,IAAI;AAAA,IAChC,YAAY,YAAY,cAAc,IAAI;AAAA,EAC5C,CAAC,IAAI,mBAAmB,YAAY,UAAU,YAAY,IAAI,CAAC,CAAC;AAEhE,QAAM,QAAkB,CAAC;AACzB,MAAI,WAAW,QAAW;AACxB,UAAM,KAAK,UAAU,iBAAiB,YAAY,QAAQ,QAAQ,CAAC,CAAC,EAAE;AAAA,EACxE;AACA,MAAI,YAAY,QAAW;AACzB,QAAI,OAAO,YAAY,YAAY,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAAG;AAChF,YAAM,IAAI,oBAAoB,iBAAiB,6CAA6C;AAAA,IAC9F;AACA,UAAM,KAAK,KAAK,OAAO,EAAE;AAAA,EAC3B;AAEA,QAAM,WACJ,eAAe,SACX,MAAM,mBAAmB,YAAY,YAAY,YAAY,CAAC,CAAC,KAC/D;AAEN,UAAQ,QAAQ,MAAM,QAAQ,MAAM,SAAS,IAAI,IAAI,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM;AACjF;","names":[]}

package/dist/share-link/share-link.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Portal share-link grammar + parse/build helper (#806).
+ *
+ * ONE canonical link grammar addresses `vault / period / collection /
+ * record` across all three portal surfaces — the LIFF permalink path
+ * (`https://liff.line.me/{liffId}/r/…`), the installed-PWA same-origin
+ * path (`https://{portal-origin}/r/…`), and the vendor backend console.
+ * The link SHAPE is identical everywhere; only the origin prefix
+ * differs, and callers own the prefix.
+ *
+ * ## Grammar (frozen — see `__tests__/share-link-surface.golden.json`)
+ *
+ * ```
+ * share-link = [ base ] "/r/" vault "/" collection "/" record
+ *              [ "?" query ] [ "#" fragment ]
+ * vault      = ULID                        ; 26 uppercase Crockford base32 chars
+ * collection = segment                     ; opaque, non-empty after decode
+ * record     = segment                     ; opaque, non-empty after decode
+ * query      = pair *( "&" pair )          ; keys unique; ONLY these two keys
+ * pair       = "period=" component         ; opaque period id
+ *            / "v=" version                ; record version
+ * version    = "0" / %x31-39 *DIGIT        ; base-10 integer, ≤ 2^53 − 1
+ * fragment   = "g=" component              ; single-use grant token (opaque)
+ * ```
+ *
+ * `segment` / `component` are strict-canonical `encodeURIComponent`
+ * output: decoding then re-encoding MUST reproduce the raw text exactly
+ * (uppercase-hex escapes, `+` is a literal plus never a space, `%2F`
+ * inside a segment never creates an extra segment). Path segments
+ * additionally may not decode to `.` or `..`. Links produced by
+ * {@link buildShareLink} always satisfy this; hand-written links using
+ * only unreserved characters (`inv-001`, ULIDs, …) do too.
+ *
+ * ## Transport rule for the grant token
+ *
+ * The optional single-use grant token travels ONLY in the URL fragment
+ * (`#g={token}`) — never in the path or query — because fragments are
+ * not sent to servers, so the token never reaches server logs, CDNs, or
+ * LINE's infrastructure. Same rule `on-magic-link` follows. The token is
+ * fully OPAQUE here: no validation beyond non-empty, no decoding of its
+ * semantics — grant semantics live in `on-magic-link` (not imported).
+ *
+ * ## Fail closed
+ *
+ * {@link parseShareLink} throws a typed {@link ShareLinkParseError} for
+ * ANYTHING that is not exactly the grammar above — unknown prefix,
+ * missing/extra/empty/malformed segments, a non-ULID vault handle,
+ * duplicate or unknown query keys, malformed fragments. There is never a
+ * default-vault (or any other) fallback; the app maps the error to a 404.
+ *
+ * Zero dependencies on the hub floor: pure string/`URL` code, no crypto,
+ * no store — LIFF shells, PWAs, and klum-db can import this subpath
+ * without dragging anything else. (The one internal import is the pure,
+ * leaf ULID shape check shared with the pod format.)
+ */
+/** Machine-readable {@link ShareLinkParseError} discriminant. */
+export type ShareLinkErrorCode = 'MALFORMED_URL' | 'UNKNOWN_PREFIX' | 'MALFORMED_PATH' | 'MALFORMED_SEGMENT' | 'INVALID_VAULT_HANDLE' | 'MALFORMED_QUERY' | 'DUPLICATE_QUERY_KEY' | 'UNKNOWN_QUERY_KEY' | 'INVALID_VERSION' | 'MALFORMED_FRAGMENT' | 'INVALID_PARTS';
+/**
+ * Typed failure for the share-link grammar. Thrown by
+ * {@link parseShareLink} for any input outside the grammar (fail closed —
+ * map to an app-level 404, never a default-vault fallback), and by
+ * {@link buildShareLink} with code `'INVALID_PARTS'` when the caller
+ * hands it parts that could not round-trip.
+ *
+ * Standalone (`extends Error`, not `NoydbError`) so this subpath stays
+ * import-light; the `code` field follows the same machine-readable
+ * convention as the kernel error classes.
+ */
+export declare class ShareLinkParseError extends Error {
+    /** Machine-readable error code. Stable across library versions. */
+    readonly code: ShareLinkErrorCode;
+    constructor(code: ShareLinkErrorCode, message: string);
+}
+/**
+ * The logical address a share link carries. Input to
+ * {@link buildShareLink}; {@link parseShareLink} returns the same shape
+ * (as the readonly {@link ShareLink} alias) with optional fields OMITTED
+ * (not `undefined`) when absent from the link.
+ */
+export interface ShareLinkParts {
+    /** Vault handle — a 26-character uppercase Crockford-base32 ULID. */
+    vaultHandle: string;
+    /** Collection name — opaque, non-empty. */
+    collection: string;
+    /** Record id — opaque, non-empty. */
+    recordId: string;
+    /** Optional period id (`?period=`) — opaque, non-empty. */
+    period?: string;
+    /** Optional record version (`?v=`) — non-negative safe integer. */
+    version?: number;
+    /**
+     * Optional single-use grant token (`#g=`) — opaque, non-empty. Carried
+     * ONLY in the URL fragment; semantics belong to `on-magic-link`.
+     */
+    grantToken?: string;
+}
+/** A successfully parsed share link. See {@link ShareLinkParts}. */
+export type ShareLink = Readonly<ShareLinkParts>;
+/**
+ * Parse a share link — full URL, `URL` instance, or bare `/r/…` path.
+ *
+ * A LIFF permalink prefix is tolerated: when the path does not start
+ * with `/r/` directly, the share path is taken from the FIRST `/r/`
+ * segment boundary (`https://liff.line.me/{liffId}/r/…` → `/r/…`). No
+ * fuzzy matching beyond that single rule.
+ *
+ * Fail closed: anything outside the grammar throws
+ * {@link ShareLinkParseError}. Never a default-vault fallback.
+ */
+export declare function parseShareLink(input: string | URL): ShareLink;
+/**
+ * Build a RELATIVE share link (`/r/…`) from typed parts. Callers prefix
+ * their surface origin — the LIFF permalink base, the PWA origin, or the
+ * vendor console — either themselves or via `base`, which is prepended
+ * VERBATIM (no validation, no joining logic; pass it without a trailing
+ * slash, e.g. `https://liff.line.me/{liffId}`).
+ *
+ * The grant token, when present, is emitted ONLY as the `#g=` fragment.
+ * Invalid parts throw {@link ShareLinkParseError} with code
+ * `'INVALID_PARTS'` — every built link is guaranteed to round-trip
+ * through {@link parseShareLink}.
+ */
+export declare function buildShareLink(parts: ShareLinkParts, base?: string): string;

package/dist/signer-3YFBLZRN.js

@@ -0,0 +1,25 @@
+import {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+} from "./chunk-G6EQYAL6.js";
+import "./chunk-DVUZMT2W.js";
+import "./chunk-WEYZTLXN.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-LSASLXGC.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+};
+//# sourceMappingURL=signer-3YFBLZRN.js.map

package/dist/snapshots/index.js

@@ -1,19 +1,19 @@
 import {
   readPod,
   writePod
-} from "../chunk-FHS2HQSH.js";
-import "../chunk-X3YYQWOQ.js";
-import "../chunk-XDYREZWE.js";
-import "../chunk-7DSTRQIJ.js";
-import "../chunk-HB3RFQSC.js";
-import "../chunk-JKJOGPZN.js";
-import "../chunk-5M5DVGV7.js";
+} from "../chunk-A7JJLVGH.js";
+import "../chunk-J6Q7UVQE.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-CIE2BASH.js";
-import "../chunk-JNAI2HN2.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-LSASLXGC.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-BIOUI4HL.js";
+} from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/snapshots/engine.ts

package/dist/{stale-OSQ7J3AA.js → stale-FJED42DM.js}

@@ -6,16 +6,16 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-HDQIIUPH.js";
-import "./chunk-XDYREZWE.js";
-import "./chunk-7DSTRQIJ.js";
-import "./chunk-HB3RFQSC.js";
-import "./chunk-JKJOGPZN.js";
-import "./chunk-5M5DVGV7.js";
+} from "./chunk-KUPKLSX5.js";
+import "./chunk-DVUZMT2W.js";
+import "./chunk-WEYZTLXN.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-CIE2BASH.js";
-import "./chunk-JNAI2HN2.js";
-import "./chunk-BIOUI4HL.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-LSASLXGC.js";
+import "./chunk-W2OG6JOL.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -26,4 +26,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-OSQ7J3AA.js.map
+//# sourceMappingURL=stale-FJED42DM.js.map

package/dist/storage-W3GURVFU.js

@@ -0,0 +1,23 @@
+import {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+} from "./chunk-F6T6L2UK.js";
+import "./chunk-DVUZMT2W.js";
+import "./chunk-WEYZTLXN.js";
+import "./chunk-IY23KFNZ.js";
+import "./chunk-N6WF5PKC.js";
+import "./chunk-6HY2X62D.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HOONYZY2.js";
+import "./chunk-LSASLXGC.js";
+import "./chunk-W2OG6JOL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+};
+//# sourceMappingURL=storage-W3GURVFU.js.map

package/dist/{store-coordination-provider-64OEZFGS.js → store-coordination-provider-APODTV4W.js}

@@ -1,10 +1,10 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-RYCTDFUX.js";
+} from "./chunk-KUIB4B5Q.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-JNAI2HN2.js";
+} from "./chunk-LSASLXGC.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -139,4 +139,4 @@ function unref(timer) {
 export {
   StoreCoordinationProvider
 };
-//# sourceMappingURL=store-coordination-provider-64OEZFGS.js.map
+//# sourceMappingURL=store-coordination-provider-APODTV4W.js.map

package/dist/sync/index.js

@@ -2,17 +2,18 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-HDMEGAQE.js";
+} from "../chunk-SMGEYW6G.js";
 import "../chunk-VQNJ7UZL.js";
-import "../chunk-XDYREZWE.js";
-import "../chunk-7DSTRQIJ.js";
-import "../chunk-HB3RFQSC.js";
-import "../chunk-JKJOGPZN.js";
-import "../chunk-5M5DVGV7.js";
+import "../chunk-2IALOXZS.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-CIE2BASH.js";
-import "../chunk-JNAI2HN2.js";
-import "../chunk-BIOUI4HL.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-LSASLXGC.js";
+import "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-party/team/sync-active.ts

package/dist/sync/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-party/team/sync-active.ts"],"sourcesContent":["/**\n * Active sync strategy — `withSync()` returns the real implementation\n * that wires the `SyncEngine`, `SyncTransaction`, and `PresenceHandle`\n * constructors into the Noydb / Vault / Collection hot paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withSync } from '@noy-db/hub/sync'\n *\n * const db = await createNoydb({\n *   store: localStore,\n *   sync: remoteStore,\n *   user: ...,\n *   syncStrategy: withSync(),\n * })\n * ```\n *\n * The factory delegates to the existing `sync.ts`,\n * `sync-transaction.ts`, and `presence.ts` modules. Splitting the\n * import chain through this file is what lets tsup tree-shake the\n * ~856 LOC of replication + presence machinery out of the default\n * bundle when no `withSync()` import is present.\n *\n * Keyring + grant/revoke/magic-link/delegation stay in the always-on\n * core (or tree-shake via direct named imports) — those are required\n * for any multi-user vault, even purely local ones.\n *\n * @public\n */\n\nimport type { SyncStrategy, BuildSyncEngineOptions } from './sync-strategy.js'\nimport type { PresenceHandleOpts } from './presence.js'\nimport type { Vault } from '../../kernel/vault.js'\nimport { SyncEngine } from './sync.js'\nimport { SyncTransaction } from './sync-transaction.js'\nimport { PresenceHandle } from './presence.js'\n\nexport function withSync(): SyncStrategy {\n  return {\n    buildSyncEngine(opts: BuildSyncEngineOptions): SyncEngine {\n      return new SyncEngine(opts)\n    },\n    buildSyncTransaction(vault: Vault, engine: SyncEngine): SyncTransaction {\n      return new SyncTransaction(vault, engine)\n    },\n    buildPresence<P>(opts: PresenceHandleOpts): PresenceHandle<P> {\n      return new PresenceHandle<P>(opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAuCO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL,gBAAgB,MAA0C;AACxD,aAAO,IAAI,WAAW,IAAI;AAAA,IAC5B;AAAA,IACA,qBAAqB,OAAc,QAAqC;AACtE,aAAO,IAAI,gBAAgB,OAAO,MAAM;AAAA,IAC1C;AAAA,IACA,cAAiB,MAA6C;AAC5D,aAAO,IAAI,eAAkB,IAAI;AAAA,IACnC;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-party/team/sync-active.ts"],"sourcesContent":["/**\n * Active sync strategy — `withSync()` returns the real implementation\n * that wires the `SyncEngine`, `SyncTransaction`, and `PresenceHandle`\n * constructors into the Noydb / Vault / Collection hot paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withSync } from '@noy-db/hub/sync'\n *\n * const db = await createNoydb({\n *   store: localStore,\n *   sync: remoteStore,\n *   user: ...,\n *   syncStrategy: withSync(),\n * })\n * ```\n *\n * The factory delegates to the existing `sync.ts`,\n * `sync-transaction.ts`, and `presence.ts` modules. Splitting the\n * import chain through this file is what lets tsup tree-shake the\n * ~856 LOC of replication + presence machinery out of the default\n * bundle when no `withSync()` import is present.\n *\n * Keyring + grant/revoke/magic-link/delegation stay in the always-on\n * core (or tree-shake via direct named imports) — those are required\n * for any multi-user vault, even purely local ones.\n *\n * @public\n */\n\nimport type { SyncStrategy, BuildSyncEngineOptions } from './sync-strategy.js'\nimport type { PresenceHandleOpts } from './presence.js'\nimport type { Vault } from '../../kernel/vault.js'\nimport { SyncEngine } from './sync.js'\nimport { SyncTransaction } from './sync-transaction.js'\nimport { PresenceHandle } from './presence.js'\n\nexport function withSync(): SyncStrategy {\n  return {\n    buildSyncEngine(opts: BuildSyncEngineOptions): SyncEngine {\n      return new SyncEngine(opts)\n    },\n    buildSyncTransaction(vault: Vault, engine: SyncEngine): SyncTransaction {\n      return new SyncTransaction(vault, engine)\n    },\n    buildPresence<P>(opts: PresenceHandleOpts): PresenceHandle<P> {\n      return new PresenceHandle<P>(opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAuCO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL,gBAAgB,MAA0C;AACxD,aAAO,IAAI,WAAW,IAAI;AAAA,IAC5B;AAAA,IACA,qBAAqB,OAAc,QAAqC;AACtE,aAAO,IAAI,gBAAgB,OAAO,MAAM;AAAA,IAC1C;AAAA,IACA,cAAiB,MAA6C;AAC5D,aAAO,IAAI,eAAkB,IAAI;AAAA,IACnC;AAAA,EACF;AACF;","names":[]}

package/dist/team/index.js

@@ -5,7 +5,7 @@ import {
   listCredentials,
   putCredential,
   withTeam
-} from "../chunk-I6GALP6E.js";
+} from "../chunk-JZWWLLVY.js";
 import {
   NO_TEAM,
   deriveMagicLinkContentKey,
@@ -23,7 +23,7 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-AUSTCW2X.js";
+} from "../chunk-LOF2W3JU.js";
 import {
   burnPaperRecoveryEntry,
   loadPaperRecoveryEntries,
@@ -32,13 +32,14 @@ import {
   savePaperRecoveryEntries,
   unwrapDeksFromBlob,
   unwrapDeksFromPaperEntry
-} from "../chunk-EVVGJDRQ.js";
+} from "../chunk-2MUZ3LY6.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-HDMEGAQE.js";
+} from "../chunk-SMGEYW6G.js";
 import "../chunk-VQNJ7UZL.js";
+import "../chunk-2IALOXZS.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   buildRecipientKeyringFile,
@@ -56,20 +57,20 @@ import {
   persistKeyring,
   revoke,
   updateKeyringIdentity
-} from "../chunk-J2ZX2XUV.js";
-import "../chunk-4JBYV75E.js";
-import "../chunk-ZICD77GM.js";
-import "../chunk-XDYREZWE.js";
-import "../chunk-7DSTRQIJ.js";
-import "../chunk-HB3RFQSC.js";
-import "../chunk-JKJOGPZN.js";
-import "../chunk-5M5DVGV7.js";
+} from "../chunk-3SV2EPMN.js";
+import "../chunk-PK6QCH2C.js";
+import "../chunk-UC2ETWF3.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-CIE2BASH.js";
-import "../chunk-JNAI2HN2.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-LSASLXGC.js";
 import {
   TeamNotEnabledError
-} from "../chunk-BIOUI4HL.js";
+} from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TEAM,

package/dist/tiers/index.js

@@ -11,19 +11,19 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-CDUQTA3Z.js";
-import "../chunk-ZICD77GM.js";
-import "../chunk-XDYREZWE.js";
-import "../chunk-7DSTRQIJ.js";
-import "../chunk-HB3RFQSC.js";
-import "../chunk-JKJOGPZN.js";
-import "../chunk-5M5DVGV7.js";
+} from "../chunk-DDATL6PU.js";
+import "../chunk-UC2ETWF3.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
+import "../chunk-IY23KFNZ.js";
+import "../chunk-N6WF5PKC.js";
+import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-CIE2BASH.js";
-import "../chunk-JNAI2HN2.js";
+import "../chunk-HOONYZY2.js";
+import "../chunk-LSASLXGC.js";
 import {
   TiersNotEnabledError
-} from "../chunk-BIOUI4HL.js";
+} from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -4,7 +4,7 @@ import {
   NetworkError,
   PodVersionConflictError,
   StoreCapabilityError
-} from "../chunk-BIOUI4HL.js";
+} from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BundleVersionConflictError,