@noy-db/hub 0.4.0-pre.0 → 0.4.0-pre.1

package/dist/{api-3A3S4SHH.js → api-IQFZJSQO.js}

@@ -1,20 +1,20 @@
 import {
   UserApi,
   createUserApi
-} from "./chunk-EO43ANYJ.js";
-import "./chunk-NCCBLYEB.js";
-import "./chunk-W4TCUGQR.js";
-import "./chunk-A4FXFAKF.js";
+} from "./chunk-6B4DYGWO.js";
+import "./chunk-PK6QCH2C.js";
+import "./chunk-DVUZMT2W.js";
+import "./chunk-WEYZTLXN.js";
 import "./chunk-IY23KFNZ.js";
 import "./chunk-N6WF5PKC.js";
 import "./chunk-6HY2X62D.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-HOONYZY2.js";
-import "./chunk-VCTXU4AT.js";
+import "./chunk-LSASLXGC.js";
 import "./chunk-W2OG6JOL.js";
 import "./chunk-PZ5AY32C.js";
 export {
   UserApi,
   createUserApi
 };
-//# sourceMappingURL=api-3A3S4SHH.js.map
+//# sourceMappingURL=api-IQFZJSQO.js.map

package/dist/as/index.js

@@ -7,18 +7,18 @@ import {
   readPod,
   readPodHeader,
   writePod
-} from "../chunk-FXZDAV62.js";
-import "../chunk-XUW3PXHU.js";
+} from "../chunk-A7JJLVGH.js";
+import "../chunk-J6Q7UVQE.js";
 import "../chunk-ZJADGNYF.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-W4TCUGQR.js";
-import "../chunk-A4FXFAKF.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
 import "../chunk-IY23KFNZ.js";
 import "../chunk-N6WF5PKC.js";
 import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-HOONYZY2.js";
-import "../chunk-VCTXU4AT.js";
+import "../chunk-LSASLXGC.js";
 import "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 export {

package/dist/attestation/index.js

@@ -1,27 +1,27 @@
 import {
   issueAttestationCore
-} from "../chunk-WZSHL6DQ.js";
+} from "../chunk-MQ6WOPSY.js";
 import {
   getRevokedDocIdsCore,
   publishRevocationListCore,
   revokeDocCore,
   unrevokeDocCore
-} from "../chunk-ZXEZCY6F.js";
+} from "../chunk-TOPYT5U5.js";
 import {
   ATTESTATIONS_COLLECTION
-} from "../chunk-WOM2HTML.js";
+} from "../chunk-G6EQYAL6.js";
 import {
   NO_ATTESTATION
 } from "../chunk-S6Q37VGE.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-W4TCUGQR.js";
-import "../chunk-A4FXFAKF.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
 import "../chunk-IY23KFNZ.js";
 import "../chunk-N6WF5PKC.js";
 import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-HOONYZY2.js";
-import "../chunk-VCTXU4AT.js";
+import "../chunk-LSASLXGC.js";
 import {
   AttestationError,
   AttestationNotEnabledError
@@ -32,11 +32,11 @@ import "../chunk-PZ5AY32C.js";
 function withAttestation() {
   return {
     async issueAttestation(ctx, args) {
-      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-3ACYX7LO.js");
+      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-LSR5PS6H.js");
       return issueAttestationCore2(ctx, args);
     },
     async getDocumentSigningPublicKey(deps) {
-      const { loadSigner, loadOrCreateSigner } = await import("../signer-MBVHW4WE.js");
+      const { loadSigner, loadOrCreateSigner } = await import("../signer-3YFBLZRN.js");
       const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK);
       if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
       if (deps.role !== "owner") {
@@ -46,19 +46,19 @@ function withAttestation() {
       return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 };
     },
     async revokeAttestation(ctx, docId) {
-      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-R5CZSVUT.js");
+      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-OCWDSWRQ.js");
       return revokeDocCore2(ctx, docId);
     },
     async unrevokeAttestation(ctx, docId) {
-      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-R5CZSVUT.js");
+      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-OCWDSWRQ.js");
       return unrevokeDocCore2(ctx, docId);
     },
     async getRevokedDocIds(ctx) {
-      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-R5CZSVUT.js");
+      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-OCWDSWRQ.js");
       return getRevokedDocIdsCore2(ctx);
     },
     async publishRevocationList(ctx) {
-      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-R5CZSVUT.js");
+      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-OCWDSWRQ.js");
       return publishRevocationListCore2(ctx);
     }
   };

package/dist/{backup-YPUEKIJC.js → backup-LU2DTZTI.js}

@@ -1,15 +1,15 @@
 import {
   SEQUENCE_COLLECTION
-} from "./chunk-DSBQODMZ.js";
+} from "./chunk-HPUWOVR7.js";
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-CJ5KKU6X.js";
+} from "./chunk-F6T6L2UK.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-W4TCUGQR.js";
-import "./chunk-A4FXFAKF.js";
+import "./chunk-DVUZMT2W.js";
+import "./chunk-WEYZTLXN.js";
 import "./chunk-IY23KFNZ.js";
 import "./chunk-N6WF5PKC.js";
 import "./chunk-6HY2X62D.js";
@@ -17,7 +17,7 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-HOONYZY2.js";
 import {
   NOYDB_BACKUP_VERSION
-} from "./chunk-VCTXU4AT.js";
+} from "./chunk-LSASLXGC.js";
 import {
   BackupCorruptedError,
   BackupLedgerError
@@ -239,4 +239,4 @@ export {
   loadVault,
   verifyBackupIntegrity
 };
-//# sourceMappingURL=backup-YPUEKIJC.js.map
+//# sourceMappingURL=backup-LU2DTZTI.js.map

package/dist/blobs/index.js

@@ -8,7 +8,7 @@ import {
   ExportBlobsAbortedError,
   createExportBlobsHandle,
   runCompaction
-} from "../chunk-U6JMEH2P.js";
+} from "../chunk-2P7EGNKF.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -20,17 +20,17 @@ import {
   detectMagic,
   detectMimeType,
   isPreCompressed
-} from "../chunk-UHNGNKLV.js";
+} from "../chunk-5OI6BR4H.js";
 import "../chunk-UC2ETWF3.js";
 import "../chunk-DRWBEDYO.js";
-import "../chunk-W4TCUGQR.js";
-import "../chunk-A4FXFAKF.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
 import "../chunk-IY23KFNZ.js";
 import "../chunk-N6WF5PKC.js";
 import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-HOONYZY2.js";
-import "../chunk-VCTXU4AT.js";
+import "../chunk-LSASLXGC.js";
 import "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
 

package/dist/broker/index.js

@@ -4,14 +4,14 @@ import {
 import {
   issueChallenge,
   verifyBrokerProof
-} from "../chunk-W4TCUGQR.js";
-import "../chunk-A4FXFAKF.js";
+} from "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
 import "../chunk-IY23KFNZ.js";
 import "../chunk-N6WF5PKC.js";
 import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-HOONYZY2.js";
-import "../chunk-VCTXU4AT.js";
+import "../chunk-LSASLXGC.js";
 import {
   BrokerEnrolmentError,
   BrokerNotEnabledError,
@@ -30,7 +30,7 @@ function withBroker(config) {
   const cache = /* @__PURE__ */ new Map();
   return {
     async enroll(ctx) {
-      const { enrollSeed } = await import("../seed-3ZMF5EQA.js");
+      const { enrollSeed } = await import("../seed-PWK45HDF.js");
       return enrollSeed({ ...ctx, config });
     },
     async rotate(ctx) {
@@ -39,7 +39,7 @@ function withBroker(config) {
       const inFlight = scoped.map(([, e]) => e.inFlight).filter((p) => p !== void 0);
       await Promise.allSettled(inFlight);
       for (const [key] of scoped) cache.delete(key);
-      const { rotateSeed } = await import("../seed-3ZMF5EQA.js");
+      const { rotateSeed } = await import("../seed-PWK45HDF.js");
       return rotateSeed({ ...ctx, config });
     },
     credentialSource(ctx, profile) {
@@ -56,7 +56,7 @@ function withBroker(config) {
         const skewMs = config.skewMs ?? DEFAULT_SKEW_MS;
         const capturedEntry = entry;
         const inFlight = (async () => {
-          const { mintStoreCredentials } = await import("../seed-3ZMF5EQA.js");
+          const { mintStoreCredentials } = await import("../seed-PWK45HDF.js");
           const creds = await mintStoreCredentials({ ...ctx, config }, profile);
           capturedEntry.cached = { creds, validUntil: cacheFloor(creds, skewMs) };
           return creds;

package/dist/bundle/index.js

@@ -1,17 +1,18 @@
-import {
-  extractPartition,
-  walkClosure
-} from "../chunk-THVIPWRF.js";
 import "../chunk-CHFZDSE4.js";
 import {
   adoptPartition,
   createOwnerOnAdoptedPartition,
   decryptExtractedPartition,
+  describeExtraction,
   unsealDeks
-} from "../chunk-UDSR4X4L.js";
-import "../chunk-CJ5KKU6X.js";
-import "../chunk-RFI7GGFO.js";
-import "../chunk-UHNGNKLV.js";
+} from "../chunk-7O3AYBC7.js";
+import {
+  extractPartition,
+  walkClosure
+} from "../chunk-OF75ACKS.js";
+import "../chunk-LB6OH6K2.js";
+import "../chunk-F6T6L2UK.js";
+import "../chunk-5OI6BR4H.js";
 import "../chunk-YTGDPCPW.js";
 import {
   COMPRESSION_BROTLI,
@@ -31,27 +32,27 @@ import {
   validateBundleHeader,
   writeNoydbBundle,
   writePod
-} from "../chunk-FXZDAV62.js";
-import "../chunk-XUW3PXHU.js";
-import "../chunk-554KLAAN.js";
-import "../chunk-NCCBLYEB.js";
+} from "../chunk-A7JJLVGH.js";
+import "../chunk-J6Q7UVQE.js";
+import "../chunk-3SV2EPMN.js";
+import "../chunk-PK6QCH2C.js";
 import "../chunk-UC2ETWF3.js";
 import {
   generateULID,
   isULID
 } from "../chunk-ZJADGNYF.js";
-import "../chunk-VRBTNCM4.js";
+import "../chunk-UFEVO57O.js";
 import "../chunk-I7FD46FF.js";
 import "../chunk-DRWBEDYO.js";
-import "../chunk-WQIYTNJV.js";
-import "../chunk-W4TCUGQR.js";
-import "../chunk-A4FXFAKF.js";
+import "../chunk-RM2XV574.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
 import "../chunk-IY23KFNZ.js";
 import "../chunk-N6WF5PKC.js";
 import "../chunk-6HY2X62D.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-HOONYZY2.js";
-import "../chunk-VCTXU4AT.js";
+import "../chunk-LSASLXGC.js";
 import {
   AdoptionStateError,
   BackupCorruptedError,
@@ -64,55 +65,6 @@ import {
   TransferSealError
 } from "../chunk-W2OG6JOL.js";
 import "../chunk-PZ5AY32C.js";
-
-// src/with-cargo/describe-extraction.ts
-async function describeExtraction(vault, opts) {
-  const { closure, graph, danglingRefs } = await walkClosure(vault, opts);
-  const { name: vaultName, adapter } = vault._introspectState();
-  const encoder = new TextEncoder();
-  const byCollection = [];
-  const inaccessible = [];
-  let totalBytes = 0;
-  let totalRecords = 0;
-  for (const [collectionName, ids] of closure) {
-    let bytes = 0;
-    let oldestTs;
-    let newestTs;
-    let recordCount = 0;
-    for (const id of ids) {
-      const env = await adapter.get(vaultName, collectionName, id);
-      if (!env) {
-        inaccessible.push({ collection: collectionName, id });
-        continue;
-      }
-      recordCount++;
-      bytes += encoder.encode(JSON.stringify(env)).length;
-      const ts = env._ts;
-      if (oldestTs === void 0 || ts < oldestTs) oldestTs = ts;
-      if (newestTs === void 0 || ts > newestTs) newestTs = ts;
-    }
-    byCollection.push({
-      name: collectionName,
-      recordCount,
-      bytes,
-      // Spread conditionally — exactOptionalPropertyTypes forbids an
-      // explicit `undefined` on an optional property.
-      ...oldestTs !== void 0 ? { oldestTs } : {},
-      ...newestTs !== void 0 ? { newestTs } : {}
-    });
-    totalBytes += bytes;
-    totalRecords += recordCount;
-  }
-  byCollection.sort((a, b) => a.name.localeCompare(b.name));
-  return Object.freeze({
-    totalRecords,
-    totalBytes,
-    byCollection,
-    graph,
-    inaccessible,
-    danglingRefs
-  });
-}
 export {
   AdoptionStateError,
   BackupCorruptedError,

package/dist/bundle/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-cargo/describe-extraction.ts"],"sourcesContent":["/**\n * Partition-extraction dry-run. Read-only preview of what an\n * `extractPartition` would move: record counts, byte totals, and the\n * timestamp span per collection — computed from raw encrypted\n * envelopes WITHOUT decrypting them. Writes nothing, mutates nothing.\n *\n * @module\n */\nimport type { Vault } from '../kernel/vault.js'\nimport { walkClosure, type WalkClosureOptions, type DanglingRefNotice } from './walk-closure.js'\n\nexport interface ExtractionPreview {\n  readonly totalRecords: number\n  /** Sum of serialized encrypted-envelope sizes (bytes). */\n  readonly totalBytes: number\n  readonly byCollection: ReadonlyArray<{\n    readonly name: string\n    readonly recordCount: number\n    readonly bytes: number\n    /** Earliest envelope `_ts` in this collection (lexicographic). */\n    readonly oldestTs?: string\n    readonly newestTs?: string\n  }>\n  readonly graph: { readonly depth: number; readonly cyclesDetected: boolean }\n  /** Records the walk reached but whose envelope couldn't be read. */\n  readonly inaccessible: ReadonlyArray<{ readonly collection: string; readonly id: string }>\n  /**\n   * #772: outbound FK edges whose referenced parent was excluded from the\n   * closure (missing, or tier-elevated and therefore invisible) — mirrors\n   * `ExtractPartitionResult.danglingRefs` (#759) so a preview/extract pair\n   * gives the SAME signal. A parent excluded this way never appears in\n   * `byCollection` at all; this is the only preview-time indicator.\n   */\n  readonly danglingRefs: ReadonlyArray<DanglingRefNotice>\n}\n\nexport async function describeExtraction(\n  vault: Vault,\n  opts: WalkClosureOptions,\n): Promise<ExtractionPreview> {\n  const { closure, graph, danglingRefs } = await walkClosure(vault, opts)\n\n  const { name: vaultName, adapter } = vault._introspectState()\n  const encoder = new TextEncoder()\n\n  const byCollection: Array<{\n    name: string; recordCount: number; bytes: number; oldestTs?: string; newestTs?: string\n  }> = []\n  const inaccessible: Array<{ collection: string; id: string }> = []\n  let totalBytes = 0\n  let totalRecords = 0\n\n  for (const [collectionName, ids] of closure) {\n    let bytes = 0\n    let oldestTs: string | undefined\n    let newestTs: string | undefined\n    let recordCount = 0\n\n    for (const id of ids) {\n      const env = await adapter.get(vaultName, collectionName, id)\n      if (!env) {\n        // Walk reached it (via decrypted list) but the raw store read\n        // returned nothing — surface rather than miscount.\n        inaccessible.push({ collection: collectionName, id })\n        continue\n      }\n      recordCount++\n      bytes += encoder.encode(JSON.stringify(env)).length\n      const ts = env._ts\n      if (oldestTs === undefined || ts < oldestTs) oldestTs = ts\n      if (newestTs === undefined || ts > newestTs) newestTs = ts\n    }\n\n    byCollection.push({\n      name: collectionName,\n      recordCount,\n      bytes,\n      // Spread conditionally — exactOptionalPropertyTypes forbids an\n      // explicit `undefined` on an optional property.\n      ...(oldestTs !== undefined ? { oldestTs } : {}),\n      ...(newestTs !== undefined ? { newestTs } : {}),\n    })\n    totalBytes += bytes\n    totalRecords += recordCount\n  }\n\n  byCollection.sort((a, b) => a.name.localeCompare(b.name))\n\n  return Object.freeze({\n    totalRecords,\n    totalBytes,\n    byCollection,\n    graph,\n    inaccessible,\n    danglingRefs,\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,eAAsB,mBACpB,OACA,MAC4B;AAC5B,QAAM,EAAE,SAAS,OAAO,aAAa,IAAI,MAAM,YAAY,OAAO,IAAI;AAEtE,QAAM,EAAE,MAAM,WAAW,QAAQ,IAAI,MAAM,iBAAiB;AAC5D,QAAM,UAAU,IAAI,YAAY;AAEhC,QAAM,eAED,CAAC;AACN,QAAM,eAA0D,CAAC;AACjE,MAAI,aAAa;AACjB,MAAI,eAAe;AAEnB,aAAW,CAAC,gBAAgB,GAAG,KAAK,SAAS;AAC3C,QAAI,QAAQ;AACZ,QAAI;AACJ,QAAI;AACJ,QAAI,cAAc;AAElB,eAAW,MAAM,KAAK;AACpB,YAAM,MAAM,MAAM,QAAQ,IAAI,WAAW,gBAAgB,EAAE;AAC3D,UAAI,CAAC,KAAK;AAGR,qBAAa,KAAK,EAAE,YAAY,gBAAgB,GAAG,CAAC;AACpD;AAAA,MACF;AACA;AACA,eAAS,QAAQ,OAAO,KAAK,UAAU,GAAG,CAAC,EAAE;AAC7C,YAAM,KAAK,IAAI;AACf,UAAI,aAAa,UAAa,KAAK,SAAU,YAAW;AACxD,UAAI,aAAa,UAAa,KAAK,SAAU,YAAW;AAAA,IAC1D;AAEA,iBAAa,KAAK;AAAA,MAChB,MAAM;AAAA,MACN;AAAA,MACA;AAAA;AAAA;AAAA,MAGA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,IAC/C,CAAC;AACD,kBAAc;AACd,oBAAgB;AAAA,EAClB;AAEA,eAAa,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAExD,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/cargo/index.js

@@ -1,24 +1,24 @@
 import {
   withCargo
-} from "../chunk-TIGPQDYP.js";
+} from "../chunk-GVZQ4NAM.js";
 import {
   CustodyApi,
   NO_CARGO
-} from "../chunk-SV6EAJEP.js";
+} from "../chunk-O7WJ47EF.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-5PFOMHTB.js";
+} from "../chunk-UNCOC7QH.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
 import {
   diffVault
 } from "../chunk-LB7FD65R.js";
-import "../chunk-JFCV5QIK.js";
-import "../chunk-WKGF2TJR.js";
+import "../chunk-YJV2UZ7H.js";
+import "../chunk-GQNGCEP5.js";
 import {
   isQuorum,
   runDrainBarrier
@@ -30,19 +30,34 @@ import {
 import {
   readPath
 } from "../chunk-IGJCYUT5.js";
-import "../chunk-RFI7GGFO.js";
-import "../chunk-FXZDAV62.js";
-import "../chunk-XUW3PXHU.js";
+import {
+  decryptExtractedPartition,
+  describeExtraction
+} from "../chunk-7O3AYBC7.js";
+import {
+  extractPartition,
+  walkClosure
+} from "../chunk-OF75ACKS.js";
+import "../chunk-LB6OH6K2.js";
+import "../chunk-F6T6L2UK.js";
+import "../chunk-5OI6BR4H.js";
+import "../chunk-A7JJLVGH.js";
+import "../chunk-J6Q7UVQE.js";
 import "../chunk-GULTLPFB.js";
 import "../chunk-JVBO4SZL.js";
-import "../chunk-554KLAAN.js";
-import "../chunk-NCCBLYEB.js";
+import "../chunk-3SV2EPMN.js";
+import "../chunk-PK6QCH2C.js";
+import "../chunk-UC2ETWF3.js";
 import {
   generateULID
 } from "../chunk-ZJADGNYF.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-W4TCUGQR.js";
-import "../chunk-A4FXFAKF.js";
+import "../chunk-UFEVO57O.js";
+import "../chunk-I7FD46FF.js";
+import "../chunk-DRWBEDYO.js";
+import "../chunk-RM2XV574.js";
+import "../chunk-DVUZMT2W.js";
+import "../chunk-WEYZTLXN.js";
 import "../chunk-IY23KFNZ.js";
 import "../chunk-N6WF5PKC.js";
 import "../chunk-6HY2X62D.js";
@@ -50,7 +65,7 @@ import "../chunk-LP7BEXCT.js";
 import {
   sha256Hex
 } from "../chunk-HOONYZY2.js";
-import "../chunk-VCTXU4AT.js";
+import "../chunk-LSASLXGC.js";
 import {
   CargoNotEnabledError,
   CrossShardJoinError,
@@ -78,7 +93,10 @@ export {
   ValidationError,
   VaultTemplateNotFoundError,
   createDeedOwner,
+  decryptExtractedPartition,
+  describeExtraction,
   diffVault,
+  extractPartition,
   fuseRetrieval,
   generateULID,
   groupAndReduce,
@@ -90,6 +108,7 @@ export {
   reduceRecords,
   runDrainBarrier,
   sha256Hex,
+  walkClosure,
   withCargo
 };
 //# sourceMappingURL=index.js.map

package/dist/chunk-2IALOXZS.js

@@ -0,0 +1,24 @@
+import {
+  ValidationError
+} from "./chunk-W2OG6JOL.js";
+
+// src/with-audit/periods/window.ts
+var PERIODS_COLLECTION = "_periods";
+var PERIOD_FREEZES_COLLECTION = "_period_freezes";
+var PERIOD_ARCHIVES_COLLECTION = "_period_archives";
+var PERIOD_TARGET_PURGES_COLLECTION = "_period_target_purges";
+function periodExclusiveUpperBound(endDate) {
+  const ms = Date.parse(endDate);
+  if (Number.isNaN(ms)) throw new ValidationError(`freezePeriod: unparseable period endDate "${endDate}".`);
+  const dateOnly = /^\d{4}-\d{2}-\d{2}$/.test(endDate);
+  return new Date(ms + (dateOnly ? 864e5 : 1)).toISOString();
+}
+
+export {
+  PERIODS_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
+  periodExclusiveUpperBound
+};
+//# sourceMappingURL=chunk-2IALOXZS.js.map

package/dist/chunk-2IALOXZS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-audit/periods/window.ts"],"sourcesContent":["/**\n * Pure period-window primitives — the reserved collection names and the\n * exclusive-upper-bound computation shared by freeze (#604), archive (#613),\n * target-purge (#615) and the period-scoped sync pull (#807).\n *\n * Deliberately dependency-light (kernel errors only): the sync engine\n * (`with-party/team/sync-period-scope.ts`) imports THIS module, not\n * `periods.ts`, so a period-scoped pull never drags the ledger hash-chain\n * machinery (`sha256Hex`/`canonicalJson`) into a bundle that opted out of\n * the periods service.\n */\nimport { ValidationError } from '../../kernel/errors.js'\n\n/** The reserved collection name holding closed-period metadata. */\nexport const PERIODS_COLLECTION = '_periods'\n\n/** Sibling of {@link PERIODS_COLLECTION} holding freeze companions (#604). */\nexport const PERIOD_FREEZES_COLLECTION = '_period_freezes'\n\n/** Sibling of {@link PERIODS_COLLECTION} holding archive companions (#613). */\nexport const PERIOD_ARCHIVES_COLLECTION = '_period_archives'\n\n/** Sibling of {@link PERIODS_COLLECTION} holding target-purge companions (#615). */\nexport const PERIOD_TARGET_PURGES_COLLECTION = '_period_target_purges'\n\n/**\n * Exclusive upper bound for a period's delete-marker purge window (#604).\n * Markers carry no business date (empty body), only write-time `_ts`, so freeze\n * purges markers with `_ts < bound`, `bound` being the instant just after the\n * period's inclusive `endDate`: a date-only `endDate` seals through end-of-day\n * → next midnight; a full-timestamp `endDate` seals through that instant → +1ms.\n */\nexport function periodExclusiveUpperBound(endDate: string): string {\n  const ms = Date.parse(endDate)\n  if (Number.isNaN(ms)) throw new ValidationError(`freezePeriod: unparseable period endDate \"${endDate}\".`)\n  const dateOnly = /^\\d{4}-\\d{2}-\\d{2}$/.test(endDate)\n  return new Date(ms + (dateOnly ? 86_400_000 : 1)).toISOString()\n}\n"],"mappings":";;;;;AAcO,IAAM,qBAAqB;AAG3B,IAAM,4BAA4B;AAGlC,IAAM,6BAA6B;AAGnC,IAAM,kCAAkC;AASxC,SAAS,0BAA0B,SAAyB;AACjE,QAAM,KAAK,KAAK,MAAM,OAAO;AAC7B,MAAI,OAAO,MAAM,EAAE,EAAG,OAAM,IAAI,gBAAgB,6CAA6C,OAAO,IAAI;AACxG,QAAM,WAAW,sBAAsB,KAAK,OAAO;AACnD,SAAO,IAAI,KAAK,MAAM,WAAW,QAAa,EAAE,EAAE,YAAY;AAChE;","names":[]}

package/dist/{chunk-ANATMTOA.js → chunk-2MUZ3LY6.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HOONYZY2.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-VCTXU4AT.js";
+} from "./chunk-LSASLXGC.js";
 
 // src/with-party/team/wrapped-deks.ts
 var PBKDF2_ITERATIONS = 6e5;
@@ -202,4 +202,4 @@ export {
   mintPaperRecoveryEntry,
   unwrapDeksFromPaperEntry
 };
-//# sourceMappingURL=chunk-ANATMTOA.js.map
+//# sourceMappingURL=chunk-2MUZ3LY6.js.map

package/dist/{chunk-U6JMEH2P.js → chunk-2P7EGNKF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HOONYZY2.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-VCTXU4AT.js";
+} from "./chunk-LSASLXGC.js";
 
 // src/with-shape/blobs/export-blobs.ts
 var ExportBlobsAbortedError = class extends Error {
@@ -258,4 +258,4 @@ export {
   BLOB_EVICTION_AUDIT_COLLECTION,
   runCompaction
 };
-//# sourceMappingURL=chunk-U6JMEH2P.js.map
+//# sourceMappingURL=chunk-2P7EGNKF.js.map