@noy-db/hub 0.4.0-pre.1 → 0.4.0-pre.11

package/dist/{with-party/team/sync-period-scope.d.ts → with-sync/period-scope.d.ts}

@@ -35,8 +35,8 @@
  * Push is NEVER period-filtered — `PushOptions` has no `periods` member at
  * all; a thin client's writes always flow up in full.
  */
-import type { EncryptedEnvelope } from '../../kernel/types.js';
-import { PERIODS_COLLECTION } from '../../with-audit/periods/window.js';
+import type { EncryptedEnvelope } from '../kernel/types.js';
+import { PERIODS_COLLECTION } from '../with-audit/periods/window.js';
 export { PERIODS_COLLECTION };
 /**
  * The reserved period-metadata collections a period-scoped pull always

package/dist/{with-party/team → with-sync}/presence.d.ts

@@ -14,8 +14,8 @@
  *     reserved `_presence_<collection>` collection on the sync adapter
  *     (if available) or local adapter, and polled periodically.
  */
-import type { NoydbStore, PresencePeer } from '../../kernel/types.js';
-import { type EnclaveKey } from '../../kernel/enclave/index.js';
+import type { NoydbStore, PresencePeer } from '../kernel/types.js';
+import { type EnclaveKey } from '../kernel/enclave/index.js';
 /** Options for constructing a PresenceHandle. @internal */
 export interface PresenceHandleOpts {
     /** Local adapter for storage-poll fallback. */

package/dist/{with-party/team/sync-strategy.d.ts → with-sync/strategy.d.ts}

@@ -24,13 +24,13 @@
  *
  * @internal
  */
-import type { NoydbStore, ConflictStrategy, SyncTargetRole } from '../../kernel/types.js';
-import type { NoydbEventEmitter } from '../../kernel/events.js';
-import type { SyncPolicy } from '../../kernel/sync-policy.js';
-import type { SyncEngine } from './sync.js';
-import type { SyncTransaction } from './sync-transaction.js';
+import type { NoydbStore, ConflictStrategy, SyncTargetRole } from '../kernel/types.js';
+import type { NoydbEventEmitter } from '../kernel/events.js';
+import type { SyncPolicy } from '../kernel/sync-policy.js';
+import type { SyncEngine } from './engine.js';
+import type { SyncTransaction } from './transaction.js';
 import type { PresenceHandle, PresenceHandleOpts } from './presence.js';
-import type { Vault } from '../../kernel/vault.js';
+import type { Vault } from '../kernel/vault.js';
 /**
  * Options accepted by `SyncStrategy.buildSyncEngine`. Mirrors the
  * `SyncEngine` constructor verbatim — kept here so core code never

package/dist/{with-party/team/sync-transaction.d.ts → with-sync/transaction.d.ts}

@@ -1,6 +1,6 @@
-import type { SyncTransactionResult } from '../../kernel/types.js';
-import type { SyncEngine } from './sync.js';
-import type { Vault } from '../../kernel/vault.js';
+import type { SyncTransactionResult } from '../kernel/types.js';
+import type { SyncEngine } from './engine.js';
+import type { Vault } from '../kernel/vault.js';
 /**
  * Sync transaction.
  *

package/dist/withdraw-accessible-A2PWF5MZ.js

@@ -0,0 +1,28 @@
+import {
+  FROZEN_SNAPSHOTS_COLLECTION,
+  freezeAndDeleteClosure,
+  freezeSnapshotOnly,
+  randomId,
+  withdrawAccessibleData
+} from "./chunk-I5GEJX3R.js";
+import "./chunk-X45JYIAY.js";
+import "./chunk-LNPUSMZL.js";
+import "./chunk-TUXQSFHZ.js";
+import "./chunk-G2JUIDFA.js";
+import "./chunk-W3L64Y3J.js";
+import "./chunk-35NMVJ7I.js";
+import "./chunk-NFZGZ4AK.js";
+import "./chunk-QJNCB5SK.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AKKRXT23.js";
+import "./chunk-QBAC3GXA.js";
+import "./chunk-QZWTRENR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  FROZEN_SNAPSHOTS_COLLECTION,
+  freezeAndDeleteClosure,
+  freezeSnapshotOnly,
+  randomId,
+  withdrawAccessibleData
+};
+//# sourceMappingURL=withdraw-accessible-A2PWF5MZ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.4.0-pre.1",
+  "version": "0.4.0-pre.11",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -64,18 +64,10 @@
       "types": "./dist/with-store/lazy/index.d.ts",
       "default": "./dist/lazy/index.js"
     },
-    "./aggregate": {
-      "types": "./dist/with-lookup/aggregate/index.d.ts",
-      "default": "./dist/aggregate/index.js"
-    },
     "./crdt": {
       "types": "./dist/with-commit/crdt/index.d.ts",
       "default": "./dist/crdt/index.js"
     },
-    "./bundle": {
-      "types": "./dist/legacy/bundle.d.ts",
-      "default": "./dist/bundle/index.js"
-    },
     "./consent": {
       "types": "./dist/with-audit/consent/index.d.ts",
       "default": "./dist/consent/index.js"
@@ -96,9 +88,21 @@
       "types": "./dist/with-fork/snapshots/index.d.ts",
       "default": "./dist/snapshots/index.js"
     },
-    "./tx": {
+    "./transactions": {
       "types": "./dist/with-commit/tx/index.d.ts",
-      "default": "./dist/tx/index.js"
+      "default": "./dist/transactions/index.js"
+    },
+    "./search": {
+      "types": "./dist/with-lookup/search/index.d.ts",
+      "default": "./dist/search/index.js"
+    },
+    "./sequence": {
+      "types": "./dist/with-commit/sequence/index.d.ts",
+      "default": "./dist/sequence/index.js"
+    },
+    "./custody": {
+      "types": "./dist/with-party/custody/index.d.ts",
+      "default": "./dist/custody/index.js"
     },
     "./derivations": {
       "types": "./dist/with-formula/derivations/index.d.ts",
@@ -113,7 +117,7 @@
       "default": "./dist/overlay-views/index.js"
     },
     "./sync": {
-      "types": "./dist/with-party/sync/index.d.ts",
+      "types": "./dist/with-sync/index.d.ts",
       "default": "./dist/sync/index.js"
     },
     "./util": {
@@ -156,33 +160,37 @@
       "types": "./dist/port/to/index.d.ts",
       "default": "./dist/to/index.js"
     },
-    "./with": {
-      "types": "./dist/port/with/index.d.ts",
-      "default": "./dist/with/index.js"
+    "./store": {
+      "types": "./dist/with-store/index.d.ts",
+      "default": "./dist/store/index.js"
+    },
+    "./introspection": {
+      "types": "./dist/with-shape/introspection/index.d.ts",
+      "default": "./dist/introspection/index.js"
     },
-    "./ui": {
-      "types": "./dist/port/ui/index.d.ts",
-      "default": "./dist/ui/index.js"
+    "./money": {
+      "types": "./dist/via/money/index.d.ts",
+      "default": "./dist/money/index.js"
     },
-    "./by": {
-      "types": "./dist/port/by/index.d.ts",
-      "default": "./dist/by/index.js"
+    "./cover": {
+      "types": "./dist/with-party/directory/cover/index.d.ts",
+      "default": "./dist/cover/index.js"
     },
-    "./on": {
-      "types": "./dist/port/on/index.d.ts",
-      "default": "./dist/on/index.js"
+    "./schema-update": {
+      "types": "./dist/with-shape/schema-update/index.d.ts",
+      "default": "./dist/schema-update/index.js"
     },
-    "./at": {
-      "types": "./dist/port/at/index.d.ts",
-      "default": "./dist/at/index.js"
+    "./policy": {
+      "types": "./dist/with-party/policy/index.d.ts",
+      "default": "./dist/policy/index.js"
     },
-    "./in": {
-      "types": "./dist/port/in/index.d.ts",
-      "default": "./dist/in/index.js"
+    "./directory": {
+      "types": "./dist/with-party/directory/index.d.ts",
+      "default": "./dist/directory/index.js"
     },
-    "./as": {
-      "types": "./dist/port/as/index.d.ts",
-      "default": "./dist/as/index.js"
+    "./reduce": {
+      "types": "./dist/with-lookup/reduce/index.d.ts",
+      "default": "./dist/reduce/index.js"
     }
   },
   "module": "./dist/index.js",
@@ -196,14 +204,14 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.4.0-pre.1"
+    "@noy-db/attestation": "0.4.0-pre.11"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^4.0.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.4.0-pre.1"
+    "@noy-db/on-shamir": "0.4.0-pre.11"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"
@@ -241,6 +249,7 @@
     "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.typetest.json && tsc --noEmit -p tsconfig.tests.json",
     "typecheck:types": "tsc --noEmit -p tsconfig.typetest.json",
     "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",
-    "bundle-check": "node scripts/check-bundle.mjs"
+    "bundle-check": "node scripts/check-bundle.mjs",
+    "check:types": "node scripts/check-type-reachability.mjs"
   }
 }

package/dist/aggregate/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/with-lookup/aggregate/active.ts"],"sourcesContent":["/**\n * Active aggregate strategy factory. Calling `withAggregate()` returns\n * an `AggregateStrategy` whose methods construct real `Aggregation` /\n * `GroupedQuery` instances and run the streaming reducer protocol.\n *\n * This module is only reachable through the `@noy-db/hub/aggregate`\n * subpath — a consumer that never imports the subpath ships none of\n * this (ESM tree-shaking + hub's `\"sideEffects\": false`).\n */\n\nimport { Aggregation, reduceRecords } from './aggregation.js'\nimport type { AggregateSpec, AggregateResult } from './aggregation.js'\nimport { GroupedQuery, GroupedQueryN } from './groupby.js'\nimport type { AggregateStrategy } from './strategy.js'\n\n/**\n * Build the default aggregate strategy. Pass into\n * `createNoydb({ aggregateStrategy: withAggregate() })` to light up\n * `.aggregate()` and `.groupBy()` on `Query` and `ScanBuilder`.\n *\n * @example\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withAggregate, sum, count } from '@noy-db/hub/aggregate'\n *\n * const db = await createNoydb({\n *   store, user, secret,\n *   aggregateStrategy: withAggregate(),\n * })\n *\n * const totals = invoices.query()\n *   .where('status', '==', 'paid')\n *   .groupBy('clientId')\n *   .aggregate({ amount: sum('amount'), n: count() })\n *   .run()\n * ```\n */\nexport function withAggregate(): AggregateStrategy {\n  return {\n    aggregate(executeRecords, spec, upstreams) {\n      return new Aggregation(executeRecords, spec as unknown as AggregateSpec, upstreams) as unknown as Aggregation<AggregateResult<typeof spec>>\n    },\n    groupBy(executeRecords, field, upstreams, dictLabelResolver, via) {\n      return new GroupedQuery(executeRecords, field, upstreams, dictLabelResolver, via)\n    },\n    groupByN(executeRecords, fields, upstreams, via) {\n      return new GroupedQueryN(executeRecords, fields, upstreams, undefined, via)\n    },\n    async scanAggregate(iter, spec) {\n      const collected: unknown[] = []\n      for await (const record of iter) collected.push(record)\n      return reduceRecords(collected, spec as unknown as AggregateSpec) as unknown as AggregateResult<typeof spec>\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCO,SAAS,gBAAmC;AACjD,SAAO;AAAA,IACL,UAAU,gBAAgB,MAAM,WAAW;AACzC,aAAO,IAAI,YAAY,gBAAgB,MAAkC,SAAS;AAAA,IACpF;AAAA,IACA,QAAQ,gBAAgB,OAAO,WAAW,mBAAmB,KAAK;AAChE,aAAO,IAAI,aAAa,gBAAgB,OAAO,WAAW,mBAAmB,GAAG;AAAA,IAClF;AAAA,IACA,SAAS,gBAAgB,QAAQ,WAAW,KAAK;AAC/C,aAAO,IAAI,cAAc,gBAAgB,QAAQ,WAAW,QAAW,GAAG;AAAA,IAC5E;AAAA,IACA,MAAM,cAAc,MAAM,MAAM;AAC9B,YAAM,YAAuB,CAAC;AAC9B,uBAAiB,UAAU,KAAM,WAAU,KAAK,MAAM;AACtD,aAAO,cAAc,WAAW,IAAgC;AAAA,IAClE;AAAA,EACF;AACF;","names":[]}

package/dist/api-IQFZJSQO.js

@@ -1,20 +0,0 @@
-import {
-  UserApi,
-  createUserApi
-} from "./chunk-6B4DYGWO.js";
-import "./chunk-PK6QCH2C.js";
-import "./chunk-DVUZMT2W.js";
-import "./chunk-WEYZTLXN.js";
-import "./chunk-IY23KFNZ.js";
-import "./chunk-N6WF5PKC.js";
-import "./chunk-6HY2X62D.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-HOONYZY2.js";
-import "./chunk-LSASLXGC.js";
-import "./chunk-W2OG6JOL.js";
-import "./chunk-PZ5AY32C.js";
-export {
-  UserApi,
-  createUserApi
-};
-//# sourceMappingURL=api-IQFZJSQO.js.map

package/dist/as/index.js

@@ -1,30 +0,0 @@
-import "../chunk-CHFZDSE4.js";
-import {
-  diffVault
-} from "../chunk-LB7FD65R.js";
-import "../chunk-YTGDPCPW.js";
-import {
-  readPod,
-  readPodHeader,
-  writePod
-} from "../chunk-A7JJLVGH.js";
-import "../chunk-J6Q7UVQE.js";
-import "../chunk-ZJADGNYF.js";
-import "../chunk-SVLR4POP.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
-import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
-import "../chunk-W2OG6JOL.js";
-import "../chunk-PZ5AY32C.js";
-export {
-  diffVault,
-  readPod,
-  readPodHeader,
-  writePod
-};
-//# sourceMappingURL=index.js.map

package/dist/at/index.js

@@ -1 +0,0 @@
-//# sourceMappingURL=index.js.map

package/dist/bundle/index.js

@@ -1,105 +0,0 @@
-import "../chunk-CHFZDSE4.js";
-import {
-  adoptPartition,
-  createOwnerOnAdoptedPartition,
-  decryptExtractedPartition,
-  describeExtraction,
-  unsealDeks
-} from "../chunk-7O3AYBC7.js";
-import {
-  extractPartition,
-  walkClosure
-} from "../chunk-OF75ACKS.js";
-import "../chunk-LB6OH6K2.js";
-import "../chunk-F6T6L2UK.js";
-import "../chunk-5OI6BR4H.js";
-import "../chunk-YTGDPCPW.js";
-import {
-  COMPRESSION_BROTLI,
-  COMPRESSION_GZIP,
-  COMPRESSION_NONE,
-  FLAG_COMPRESSED,
-  FLAG_HAS_INTEGRITY_HASH,
-  NOYDB_BUNDLE_FORMAT_VERSION,
-  NOYDB_BUNDLE_MAGIC,
-  NOYDB_BUNDLE_PREFIX_BYTES,
-  encodeBundleHeader,
-  readNoydbBundle,
-  readNoydbBundleHeader,
-  readPod,
-  readPodHeader,
-  resetBrotliSupportCache,
-  validateBundleHeader,
-  writeNoydbBundle,
-  writePod
-} from "../chunk-A7JJLVGH.js";
-import "../chunk-J6Q7UVQE.js";
-import "../chunk-3SV2EPMN.js";
-import "../chunk-PK6QCH2C.js";
-import "../chunk-UC2ETWF3.js";
-import {
-  generateULID,
-  isULID
-} from "../chunk-ZJADGNYF.js";
-import "../chunk-UFEVO57O.js";
-import "../chunk-I7FD46FF.js";
-import "../chunk-DRWBEDYO.js";
-import "../chunk-RM2XV574.js";
-import "../chunk-DVUZMT2W.js";
-import "../chunk-WEYZTLXN.js";
-import "../chunk-IY23KFNZ.js";
-import "../chunk-N6WF5PKC.js";
-import "../chunk-6HY2X62D.js";
-import "../chunk-LP7BEXCT.js";
-import "../chunk-HOONYZY2.js";
-import "../chunk-LSASLXGC.js";
-import {
-  AdoptionStateError,
-  BackupCorruptedError,
-  BackupLedgerError,
-  BundleIntegrityError,
-  BundleSealMismatchError,
-  BundleVersionConflictError,
-  PartitionExtractionError,
-  PodVersionConflictError,
-  TransferSealError
-} from "../chunk-W2OG6JOL.js";
-import "../chunk-PZ5AY32C.js";
-export {
-  AdoptionStateError,
-  BackupCorruptedError,
-  BackupLedgerError,
-  BundleIntegrityError,
-  BundleSealMismatchError,
-  BundleVersionConflictError,
-  COMPRESSION_BROTLI,
-  COMPRESSION_GZIP,
-  COMPRESSION_NONE,
-  FLAG_COMPRESSED,
-  FLAG_HAS_INTEGRITY_HASH,
-  NOYDB_BUNDLE_FORMAT_VERSION,
-  NOYDB_BUNDLE_MAGIC,
-  NOYDB_BUNDLE_PREFIX_BYTES,
-  PartitionExtractionError,
-  PodVersionConflictError,
-  TransferSealError,
-  adoptPartition,
-  createOwnerOnAdoptedPartition,
-  decryptExtractedPartition,
-  describeExtraction,
-  encodeBundleHeader,
-  extractPartition,
-  generateULID,
-  isULID,
-  readNoydbBundle,
-  readNoydbBundleHeader,
-  readPod,
-  readPodHeader,
-  resetBrotliSupportCache,
-  unsealDeks,
-  validateBundleHeader,
-  walkClosure,
-  writeNoydbBundle,
-  writePod
-};
-//# sourceMappingURL=index.js.map

package/dist/by/index.js

@@ -1,11 +0,0 @@
-import {
-  isQuorum,
-  runDrainBarrier
-} from "../chunk-ISMV2QVG.js";
-import "../chunk-W2OG6JOL.js";
-import "../chunk-PZ5AY32C.js";
-export {
-  isQuorum,
-  runDrainBarrier
-};
-//# sourceMappingURL=index.js.map

package/dist/chunk-2IALOXZS.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/with-audit/periods/window.ts"],"sourcesContent":["/**\n * Pure period-window primitives — the reserved collection names and the\n * exclusive-upper-bound computation shared by freeze (#604), archive (#613),\n * target-purge (#615) and the period-scoped sync pull (#807).\n *\n * Deliberately dependency-light (kernel errors only): the sync engine\n * (`with-party/team/sync-period-scope.ts`) imports THIS module, not\n * `periods.ts`, so a period-scoped pull never drags the ledger hash-chain\n * machinery (`sha256Hex`/`canonicalJson`) into a bundle that opted out of\n * the periods service.\n */\nimport { ValidationError } from '../../kernel/errors.js'\n\n/** The reserved collection name holding closed-period metadata. */\nexport const PERIODS_COLLECTION = '_periods'\n\n/** Sibling of {@link PERIODS_COLLECTION} holding freeze companions (#604). */\nexport const PERIOD_FREEZES_COLLECTION = '_period_freezes'\n\n/** Sibling of {@link PERIODS_COLLECTION} holding archive companions (#613). */\nexport const PERIOD_ARCHIVES_COLLECTION = '_period_archives'\n\n/** Sibling of {@link PERIODS_COLLECTION} holding target-purge companions (#615). */\nexport const PERIOD_TARGET_PURGES_COLLECTION = '_period_target_purges'\n\n/**\n * Exclusive upper bound for a period's delete-marker purge window (#604).\n * Markers carry no business date (empty body), only write-time `_ts`, so freeze\n * purges markers with `_ts < bound`, `bound` being the instant just after the\n * period's inclusive `endDate`: a date-only `endDate` seals through end-of-day\n * → next midnight; a full-timestamp `endDate` seals through that instant → +1ms.\n */\nexport function periodExclusiveUpperBound(endDate: string): string {\n  const ms = Date.parse(endDate)\n  if (Number.isNaN(ms)) throw new ValidationError(`freezePeriod: unparseable period endDate \"${endDate}\".`)\n  const dateOnly = /^\\d{4}-\\d{2}-\\d{2}$/.test(endDate)\n  return new Date(ms + (dateOnly ? 86_400_000 : 1)).toISOString()\n}\n"],"mappings":";;;;;AAcO,IAAM,qBAAqB;AAG3B,IAAM,4BAA4B;AAGlC,IAAM,6BAA6B;AAGnC,IAAM,kCAAkC;AASxC,SAAS,0BAA0B,SAAyB;AACjE,QAAM,KAAK,KAAK,MAAM,OAAO;AAC7B,MAAI,OAAO,MAAM,EAAE,EAAG,OAAM,IAAI,gBAAgB,6CAA6C,OAAO,IAAI;AACxG,QAAM,WAAW,sBAAsB,KAAK,OAAO;AACnD,SAAO,IAAI,KAAK,MAAM,WAAW,QAAa,EAAE,EAAE,YAAY;AAChE;","names":[]}

package/dist/chunk-2MUZ3LY6.js

@@ -1,205 +0,0 @@
-import {
-  derivePassphraseKey
-} from "./chunk-HOONYZY2.js";
-import {
-  NOYDB_FORMAT_VERSION
-} from "./chunk-LSASLXGC.js";
-
-// src/with-party/team/wrapped-deks.ts
-var PBKDF2_ITERATIONS = 6e5;
-var SALT_BYTES = 32;
-var IV_BYTES = 12;
-var subtle = globalThis.crypto.subtle;
-async function mintWrappedDeksBlob(deks, credential) {
-  const salt = crypto.getRandomValues(new Uint8Array(SALT_BYTES));
-  const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
-  const wrappingKey = await deriveWrappingKey(credential, salt);
-  const exported = {};
-  for (const [coll, dek] of deks) {
-    const raw = await subtle.exportKey("raw", dek);
-    exported[coll] = bytesToBase64(new Uint8Array(raw));
-  }
-  const plaintext = new TextEncoder().encode(JSON.stringify({ deks: exported }));
-  const ciphertext = await subtle.encrypt(
-    { name: "AES-GCM", iv },
-    wrappingKey,
-    plaintext
-  );
-  return {
-    salt: bytesToBase64(salt),
-    iv: bytesToBase64(iv),
-    wrappedDeks: bytesToBase64(new Uint8Array(ciphertext))
-  };
-}
-async function unwrapDeksFromBlob(blob, credential) {
-  const wrappingKey = await deriveWrappingKey(credential, base64ToBytes(blob.salt));
-  const plaintext = await subtle.decrypt(
-    { name: "AES-GCM", iv: base64ToBytes(blob.iv) },
-    wrappingKey,
-    base64ToBytes(blob.wrappedDeks)
-  );
-  const parsed = JSON.parse(new TextDecoder().decode(plaintext));
-  const deks = /* @__PURE__ */ new Map();
-  for (const [coll, b64] of Object.entries(parsed.deks)) {
-    const raw = base64ToBytes(b64);
-    const key = await subtle.importKey(
-      "raw",
-      raw,
-      { name: "AES-GCM", length: 256 },
-      true,
-      ["encrypt", "decrypt"]
-    );
-    deks.set(coll, key);
-  }
-  return deks;
-}
-async function deriveWrappingKey(credential, salt) {
-  return derivePassphraseKey(credential, salt, { iterations: PBKDF2_ITERATIONS, keyUsage: "aes-gcm" });
-}
-function bytesToBase64(b) {
-  let s = "";
-  for (const x of b) s += String.fromCharCode(x);
-  return btoa(s);
-}
-function base64ToBytes(b64) {
-  const s = atob(b64);
-  const out = new Uint8Array(s.length);
-  for (let i = 0; i < s.length; i++) out[i] = s.charCodeAt(i);
-  return out;
-}
-
-// src/with-party/team/recovery.ts
-var PAPER_DOC_ID = "recovery-paper";
-async function loadPaperRecoveryEntries(store, vault) {
-  const env = await store.get(vault, "_meta", PAPER_DOC_ID);
-  if (!env) return [];
-  try {
-    const doc = JSON.parse(env._data);
-    if (doc.profile !== "paper" || !Array.isArray(doc.entries)) return [];
-    return doc.entries;
-  } catch {
-    return [];
-  }
-}
-async function savePaperRecoveryEntries(store, vault, entries) {
-  const doc = {
-    _noydb_recovery: 1,
-    profile: "paper",
-    entries
-  };
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify(doc)
-  };
-  await store.put(vault, "_meta", PAPER_DOC_ID, envelope);
-}
-async function burnPaperRecoveryEntry(store, vault, codeId) {
-  const entries = await loadPaperRecoveryEntries(store, vault);
-  const remaining = entries.filter((e) => e.codeId !== codeId);
-  await savePaperRecoveryEntries(store, vault, remaining);
-}
-async function hasRecoveryEnrolled(store, vault) {
-  const paper = await loadPaperRecoveryEntries(store, vault);
-  if (paper.length > 0) return true;
-  const shamir = await loadShamirRecoveryEntries(store, vault);
-  return shamir.length > 0;
-}
-async function hasStrongRecoveryEnrolled(store, vault) {
-  const shamir = await loadShamirRecoveryEntries(store, vault);
-  return shamir.length > 0;
-}
-var SHAMIR_DOC_ID = "recovery-shamir";
-async function loadShamirRecoveryEntries(store, vault) {
-  const env = await store.get(vault, "_meta", SHAMIR_DOC_ID);
-  if (!env) return [];
-  try {
-    const doc = JSON.parse(env._data);
-    if (doc.profile !== "shamir" || !Array.isArray(doc.entries)) return [];
-    return doc.entries;
-  } catch {
-    return [];
-  }
-}
-async function saveShamirRecoveryEntries(store, vault, entries) {
-  const doc = {
-    _noydb_recovery: 1,
-    profile: "shamir",
-    entries
-  };
-  const envelope = {
-    _noydb: NOYDB_FORMAT_VERSION,
-    _v: 1,
-    _ts: (/* @__PURE__ */ new Date()).toISOString(),
-    _iv: "",
-    _data: JSON.stringify(doc)
-  };
-  await store.put(vault, "_meta", SHAMIR_DOC_ID, envelope);
-}
-async function mintShamirRecoveryEntry(provider, deks, entryId, k, n, label) {
-  const recoverySecret = crypto.getRandomValues(new Uint8Array(32));
-  try {
-    const credential = bytesToBase642(recoverySecret);
-    const blob = await mintWrappedDeksBlob(deks, credential);
-    const shareStrings = provider.splitToShares(recoverySecret, k, n);
-    const entry = {
-      ...blob,
-      entryId,
-      k,
-      n,
-      enrolledAt: (/* @__PURE__ */ new Date()).toISOString(),
-      ...label !== void 0 && { label }
-    };
-    return { entry, shareStrings };
-  } finally {
-    recoverySecret.fill(0);
-  }
-}
-async function unwrapDeksFromShamirEntry(provider, entry, shareStrings) {
-  if (shareStrings.length < entry.k) {
-    throw new Error(
-      `Insufficient shares: this Shamir entry needs ${entry.k} of ${entry.n}, but ${shareStrings.length} were provided.`
-    );
-  }
-  const secret = provider.combineShares(shareStrings);
-  try {
-    return await unwrapDeksFromBlob(entry, bytesToBase642(secret));
-  } finally {
-    secret.fill(0);
-  }
-}
-function bytesToBase642(b) {
-  let s = "";
-  for (const x of b) s += String.fromCharCode(x);
-  return btoa(s);
-}
-async function mintPaperRecoveryEntry(deks, code, codeId) {
-  const blob = await mintWrappedDeksBlob(deks, code);
-  return {
-    ...blob,
-    codeId,
-    enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
-  };
-}
-async function unwrapDeksFromPaperEntry(entry, code) {
-  return unwrapDeksFromBlob(entry, code);
-}
-
-export {
-  mintWrappedDeksBlob,
-  unwrapDeksFromBlob,
-  loadPaperRecoveryEntries,
-  savePaperRecoveryEntries,
-  burnPaperRecoveryEntry,
-  hasRecoveryEnrolled,
-  hasStrongRecoveryEnrolled,
-  loadShamirRecoveryEntries,
-  saveShamirRecoveryEntries,
-  mintShamirRecoveryEntry,
-  unwrapDeksFromShamirEntry,
-  mintPaperRecoveryEntry,
-  unwrapDeksFromPaperEntry
-};
-//# sourceMappingURL=chunk-2MUZ3LY6.js.map