@noy-db/hub 0.4.0-pre.6 → 0.4.0-pre.8

package/dist/forget/index.js

@@ -1,25 +1,25 @@
 import {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION
-} from "../chunk-AZXEOEQK.js";
-import "../chunk-MMVQ3SUO.js";
-import "../chunk-KCZAFDP5.js";
-import "../chunk-5WLDZZ6S.js";
-import "../chunk-5HSSTOOG.js";
-import "../chunk-G4MFQXYX.js";
+} from "../chunk-KFRPNHWR.js";
+import "../chunk-RZPOZPZU.js";
+import "../chunk-VH6SOCXH.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-7U6AB7DZ.js";
-import "../chunk-DOZFU7OZ.js";
-import "../chunk-6SYOHUHM.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-GZACYEOB.js";
+import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/forget/active.ts
-function withForgetCascade(opts) {
+function withForget(opts) {
   return { subjects: { ...opts.subjects }, ...opts.scopedPurge !== void 0 ? { scopedPurge: opts.scopedPurge } : {} };
 }
 export {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION,
-  withForgetCascade
+  withForget
 };
 //# sourceMappingURL=index.js.map

package/dist/forget/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForgetCascade` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForgetCascade({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForgetCascade(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BO,SAAS,kBAAkB,MAA0C;AAC1E,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;","names":[]}
+{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForget` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForget(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BO,SAAS,WAAW,MAA0C;AACnE,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;","names":[]}

package/dist/guards/index.js

@@ -2,23 +2,23 @@ import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "../chunk-TSNRZSRC.js";
+} from "../chunk-RO5NM6UI.js";
 import {
   GuardRegistry
-} from "../chunk-YMUGBZN2.js";
+} from "../chunk-FQ5CHJR7.js";
 import {
   ReadOnlyVaultFacade
 } from "../chunk-JK733I5V.js";
 import {
   GuardExecutor
-} from "../chunk-EGU4PWQW.js";
+} from "../chunk-W66AM5IB.js";
 import {
   AmendmentForbiddenError,
   FieldFrozenError,
   IllegalTransitionError,
   InvariantError,
   RecordLockedError
-} from "../chunk-6SYOHUHM.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   AmendmentForbiddenError,

package/dist/history/index.js

@@ -8,7 +8,7 @@ import {
   rewrapHistory,
   saveHistory,
   tombstoneHistory
-} from "../chunk-3GXDB3NQ.js";
+} from "../chunk-MANUDU7I.js";
 import {
   NO_HISTORY
 } from "../chunk-AFHQATY4.js";
@@ -20,12 +20,12 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-ICYC5YNI.js";
+} from "../chunk-Y6VZQGGH.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "../chunk-I7FD46FF.js";
-import "../chunk-PTT2NB46.js";
+import "../chunk-JYJFGD2H.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -33,16 +33,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-2BVW754E.js";
-import "../chunk-MMVQ3SUO.js";
-import "../chunk-KCZAFDP5.js";
-import "../chunk-5WLDZZ6S.js";
-import "../chunk-5HSSTOOG.js";
-import "../chunk-G4MFQXYX.js";
+} from "../chunk-ISRKW4YN.js";
+import "../chunk-RZPOZPZU.js";
+import "../chunk-VH6SOCXH.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-7U6AB7DZ.js";
-import "../chunk-DOZFU7OZ.js";
-import "../chunk-6SYOHUHM.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-GZACYEOB.js";
+import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/history/active.ts

package/dist/i18n/index.js

@@ -1,15 +1,15 @@
 import {
   withLookup
-} from "../chunk-UNREYBZO.js";
+} from "../chunk-OLSARBZU.js";
 import {
   dictKey,
   staticDict
-} from "../chunk-4B3DL75F.js";
+} from "../chunk-W3G5REIU.js";
 import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "../chunk-C2V7AJO2.js";
+} from "../chunk-NEX7JCMO.js";
 import {
   NO_I18N,
   applyI18nLocale,
@@ -26,17 +26,17 @@ import {
   resolvePolicy,
   stripI18nFilled,
   validateI18nTextValue
-} from "../chunk-JOCMXSR2.js";
-import "../chunk-ZUDAK436.js";
-import "../chunk-2BVW754E.js";
-import "../chunk-MMVQ3SUO.js";
-import "../chunk-KCZAFDP5.js";
-import "../chunk-5WLDZZ6S.js";
-import "../chunk-5HSSTOOG.js";
-import "../chunk-G4MFQXYX.js";
+} from "../chunk-UADPR6F4.js";
+import "../chunk-6UBZ6I5Z.js";
+import "../chunk-ISRKW4YN.js";
+import "../chunk-RZPOZPZU.js";
+import "../chunk-VH6SOCXH.js";
+import "../chunk-35NMVJ7I.js";
+import "../chunk-NFZGZ4AK.js";
+import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-7U6AB7DZ.js";
-import "../chunk-DOZFU7OZ.js";
+import "../chunk-AKKRXT23.js";
+import "../chunk-GZACYEOB.js";
 import {
   DictKeyInUseError,
   DictKeyMissingError,
@@ -47,7 +47,7 @@ import {
   StaticDictReadonlyError,
   TranslatorNotConfiguredError,
   UnknownDictCodeError
-} from "../chunk-6SYOHUHM.js";
+} from "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/via/i18n/densify.ts

package/dist/index.d.ts

@@ -22,9 +22,9 @@
  *
  * ```ts
  * import { createNoydb } from '@noy-db/hub'
- * import { jsonFile } from '@noy-db/to-file'
+ * import { toFile } from '@noy-db/to-file'
  *
- * const db = await createNoydb({ store: jsonFile({ dir: './data' }) })
+ * const db = await createNoydb({ store: toFile({ dir: './data' }) })
  * const acme = await db.openVault('acme', { secret: 'hunter2' })
  * const invoices = acme.collection<Invoice>('invoices')
  *
@@ -122,7 +122,7 @@ export type { SequenceHandle, FormattedSequenceHandle, NextOptions, SequenceOpti
 export { withSequence, NO_SEQUENCE } from './with-commit/sequence/index.js';
 export type { SequenceStrategy } from './with-commit/sequence/index.js';
 export { withDeferredNumbering } from './with-commit/numbering/descriptor.js';
-export type { DeferredNumberingConfig } from './with-commit/numbering/descriptor.js';
+export type { DeferredNumberingConfig, WithDeferredNumberingOptions, } from './with-commit/numbering/descriptor.js';
 export type { Assignment as NumberingAssignment } from './with-commit/numbering/index.js';
 export { NumberingUncertaintyError } from './kernel/errors.js';
 export type { StoreTime } from './kernel/types.js';
@@ -164,7 +164,7 @@ export { enrollAuthenticator, removeAuthenticator, findAuthenticator, } from './
 export type { EnrollAuthenticatorOptions, EnrollAuthenticatorWrappingKEKOptions, EnrollAuthenticatorWrappingDEKsOptions, UpdateAuthenticatorOptions, } from './with-party/team/authenticators.js';
 export { QuickUnlockStore } from './with-party/session/unlock-state.js';
 export type { QuickUnlockState } from './with-party/session/unlock-state.js';
-export { rotateSecret as keyringRotateSecret, recoverSecret as keyringRecoverSecret, } from './with-party/team/rotate-recover.js';
+export { rotateSecret as keyringRotateSecret } from './with-party/team/rotate-recover.js';
 export type { RotateSecretInput, RecoverSecretInput, RecoverSecretResult, RecoveryProof, SlotRewrapContext, SlotRewrapCeremony, } from './with-party/team/rotate-recover.js';
 export { loadCover, saveCover, readCover, resolveSchema as resolveCoverSchema, validateCoverInput, isCover, COVER_FIELDS, DEFAULT_COVER_SCHEMA, COVER_RECORD_ID, } from './with-party/directory/cover/index.js';
 export type { Cover, CoverText, CoverSchema, CoverField, JsonValue, ResolvedCoverSchema, SetCoverInput, } from './with-party/directory/cover/index.js';
@@ -181,7 +181,7 @@ export type { LiberateOptions, LiberateResult } from './with-party/custody/liber
 export { withCustody, NO_CUSTODY } from './with-party/custody/index.js';
 export type { CustodyStrategy, CustodyHost } from './with-party/custody/index.js';
 export { CustodyNotEnabledError } from './kernel/errors.js';
-export { createDeedOwner, loadDeedMarker, isDeedVault, DEED_RECORD_ID } from './with-party/team/deed.js';
+export { createDeedOwner, loadDeedMarker, isDeedVault } from './with-party/team/deed.js';
 export type { DeedMarker } from './with-party/team/deed.js';
 export { withTeam } from './with-party/team/active.js';
 export { NO_TEAM } from './with-party/team/strategy.js';
@@ -190,14 +190,13 @@ export { TeamNotEnabledError } from './kernel/errors.js';
 export { withLazy } from './with-store/lazy/active.js';
 export type { LazyStrategy } from './with-store/lazy/strategy.js';
 export { describeAuthConfig, diagramAuthConfig, describeUserAuth, describeAllUsersAuth, } from './with-party/auth-introspection/index.js';
-export { loadPaperRecoveryEntries, savePaperRecoveryEntries, burnPaperRecoveryEntry, hasRecoveryEnrolled, mintPaperRecoveryEntry, unwrapDeksFromPaperEntry, loadShamirRecoveryEntries, saveShamirRecoveryEntries, mintShamirRecoveryEntry, unwrapDeksFromShamirEntry, } from './with-party/team/recovery.js';
-export type { PaperRecoveryEntry, PaperRecoveryDoc, ShamirRecoveryEntry, ShamirRecoveryDoc, } from './with-party/team/recovery.js';
-export type { EnrollRecoveryResult, RotateRecoveryOptions, RotateRecoveryResult, } from './with-party/team/rotate-recover.js';
+export { loadPaperRecoveryEntries, savePaperRecoveryEntries, burnPaperRecoveryEntry, mintPaperRecoveryEntry, unwrapDeksFromPaperEntry, } from './with-party/team/recovery.js';
+export type { PaperRecoveryEntry } from './with-party/team/recovery.js';
 export { mintWrappedDeksBlob, unwrapDeksFromBlob } from './with-party/team/wrapped-deks.js';
 export type { WrappedDeksBlob } from './with-party/team/wrapped-deks.js';
-export type { SealingKeyProvider, SealedSecret, SealedEnvelope, RecipientHint, RecipientSealer } from './with-party/team/managed-secret.js';
+export type { SealingKeyProvider, RecipientHint, RecipientSealer } from './with-party/team/managed-secret.js';
 export type { ShamirRecoveryProvider } from './with-party/team/shamir-recovery-provider.js';
-export { MemorySealingKeyProvider, MemoryRecipientSealer, sealRsaOaepTlv, parseRsaOaepTlv, aesGcmOpen, loadSealedSecret, saveSealedSecret, parseSealedEnvelope, SEALED_SECRET_RECORD_ID, } from './with-party/team/managed-secret.js';
+export { MemorySealingKeyProvider, MemoryRecipientSealer, sealRsaOaepTlv, parseRsaOaepTlv, aesGcmOpen, } from './with-party/team/managed-secret.js';
 export { recoverUser } from './with-party/team/peer-recover.js';
 export type { RecoverUserOptions } from './with-party/team/peer-recover.js';
 export { hasExportCapability, evaluateExportCapability } from './with-party/team/keyring.js';
@@ -224,22 +223,23 @@ export { SyncTransaction } from './with-party/team/sync-transaction.js';
 export { TxContext, TxVault, TxCollection, runTransaction } from './with-commit/tx/transaction.js';
 export type { TxOp } from './kernel/types.js';
 export type { TransactionInvariant } from './with-commit/tx/invariants.js';
-export type { TransactionStrategyOptions } from './with-commit/tx/active.js';
+export type { WithTransactionsOptions } from './with-commit/tx/active.js';
 export { withGuard } from './with-audit/guards/index.js';
 export { immutableGuard } from './with-audit/guards/index.js';
 export type { ImmutableGuardConfig } from './with-audit/guards/index.js';
 export { transitionGuard } from './with-audit/guards/index.js';
 export type { TransitionGuardConfig } from './with-audit/guards/index.js';
-export type { GuardStrategy, GuardStrategyHandle, GuardContext, GuardChange, } from './with-audit/guards/index.js';
+export type { GuardSpec, GuardStrategy, GuardContext, GuardChange, } from './with-audit/guards/index.js';
 export { withDerivation } from './with-formula/derivations/index.js';
 export { withRollup } from './with-formula/derivations/index.js';
-export type { DerivationStrategy, DerivationStrategyHandle, DerivedFromMeta, OutputSpec, RecordOutputSpec, ArrayOutputSpec, } from './with-formula/derivations/index.js';
+export type { WithRollupOptions } from './with-formula/derivations/index.js';
+export type { DerivationSpec, DerivationStrategy, DerivedFromMeta, OutputSpec, RecordOutputSpec, ArrayOutputSpec, } from './with-formula/derivations/index.js';
 export { DerivationCycleError, DerivationDepthError, DerivationOutputUnknownError, DerivationOutputShapeError, DerivationCapExceededError, } from './kernel/errors.js';
 export { withMaterializedView } from './with-formula/materialized-views/index.js';
-export type { MaterializedViewStrategy, MaterializedViewStrategyHandle, MaterializedViewOutput, MaterializedFromMeta, UnionSource, UnionArmJoin, ProjectionSpec, ProjectionJoinLeg, } from './with-formula/materialized-views/index.js';
+export type { MaterializedViewSpec, MaterializedViewStrategy, MaterializedViewOutput, MaterializedFromMeta, UnionSource, UnionArmJoin, ProjectionSpec, ProjectionJoinLeg, } from './with-formula/materialized-views/index.js';
 export { MaterializedViewCycleError, MaterializedViewConfigError, MaterializedViewSourceUnknownError, MaterializedViewTooLargeError, } from './kernel/errors.js';
 export { withOverlayedView } from './with-formula/overlay-views/index.js';
-export type { OverlayedViewStrategy, OverlayedViewStrategyHandle, OverlayFieldMergeRule, OverlayFieldMergeMode, } from './with-formula/overlay-views/index.js';
+export type { OverlayedViewSpec, OverlayedViewStrategy, OverlayFieldMergeRule, OverlayFieldMergeMode, } from './with-formula/overlay-views/index.js';
 export { OverlayBaseIsVirtualError, OverlayCollectionUnavailableError, OverlayNameCollisionError, OverlayIdMismatchError, } from './kernel/errors.js';
 export { PERIODS_COLLECTION } from './with-audit/periods/index.js';
 export type { PeriodRecord, ClosePeriodOptions, OpenPeriodOptions, } from './with-audit/periods/index.js';
@@ -290,11 +290,8 @@ export { fuseRetrieval, type FuseOptions } from './with-lookup/search/fuse.js';
 export { UniqueConstraintError, UnsupportedIndexOptionError } from './kernel/errors.js';
 export { EmbeddingDimMismatchError, EmbeddingModelMismatchError } from './kernel/errors.js';
 export type { EmbeddingDescriptor } from './with-lookup/embeddings/index.js';
-export { dekKey, effectiveClearance, assertTierAccess } from './with-party/team/tiers.js';
-export type { DelegationToken, IssueDelegationOptions } from './with-party/team/delegation.js';
-export { DELEGATIONS_COLLECTION, issueDelegation, loadActiveDelegations, revokeDelegation } from './with-party/team/delegation.js';
 export type { MagicLinkGrantPayload, MagicLinkGrantRecord, IssueMagicLinkGrantOptions, } from './with-party/team/magic-link-grant.js';
-export { MAGIC_LINK_GRANTS_COLLECTION, MAGIC_LINK_CONTENT_INFO_PREFIX, MAGIC_LINK_KEK_INFO_PREFIX, deriveMagicLinkContentKey, writeMagicLinkGrant, readMagicLinkGrantRecord, listMagicLinkGrants, unwrapMagicLinkGrant, revokeMagicLinkGrant, magicLinkGrantRecordId, isMagicLinkGrantExpired, } from './with-party/team/magic-link-grant.js';
+export { MAGIC_LINK_GRANTS_COLLECTION, deriveMagicLinkContentKey, writeMagicLinkGrant, readMagicLinkGrantRecord, listMagicLinkGrants, unwrapMagicLinkGrant, revokeMagicLinkGrant, magicLinkGrantRecordId, isMagicLinkGrantExpired, } from './with-party/team/magic-link-grant.js';
 export { diff, formatDiff } from './with-commit/history/diff.js';
 export type { DiffEntry, ChangeType } from './with-commit/history/diff.js';
 export { diffVault } from './with-cargo/vault-diff.js';