@noy-db/hub 0.4.0-pre.8 → 0.4.0

package/dist/{api-3NKVNZPM.js → api-SI2IVBQO.js}

@@ -1,20 +1,20 @@
 import {
   UserApi,
   createUserApi
-} from "./chunk-3XKESW5E.js";
-import "./chunk-WZ3NCMK6.js";
-import "./chunk-RZPOZPZU.js";
-import "./chunk-VH6SOCXH.js";
+} from "./chunk-SF2ZIRD6.js";
+import "./chunk-2BET5QTS.js";
+import "./chunk-SU6SGWXM.js";
+import "./chunk-EFJAAFBW.js";
 import "./chunk-35NMVJ7I.js";
 import "./chunk-NFZGZ4AK.js";
 import "./chunk-QJNCB5SK.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-AKKRXT23.js";
-import "./chunk-GZACYEOB.js";
+import "./chunk-77AEMXFA.js";
 import "./chunk-QZWTRENR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   UserApi,
   createUserApi
 };
-//# sourceMappingURL=api-3NKVNZPM.js.map
+//# sourceMappingURL=api-SI2IVBQO.js.map

package/dist/attestation/index.js

@@ -1,27 +1,27 @@
 import {
   issueAttestationCore
-} from "../chunk-DGBIHDVK.js";
+} from "../chunk-RBTVFPHF.js";
 import {
   getRevokedDocIdsCore,
   publishRevocationListCore,
   revokeDocCore,
   unrevokeDocCore
-} from "../chunk-KW42W6SV.js";
+} from "../chunk-HLKXPJ4V.js";
 import {
   ATTESTATIONS_COLLECTION
-} from "../chunk-DZAF24PG.js";
+} from "../chunk-IFOH7RBI.js";
 import {
   NO_ATTESTATION
 } from "../chunk-5GQEU4DN.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+import "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import {
   AttestationError,
   AttestationNotEnabledError
@@ -32,11 +32,11 @@ import "../chunk-PZ5AY32C.js";
 function withAttestation() {
   return {
     async issueAttestation(ctx, args) {
-      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-55HJE7JF.js");
+      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-LIA7FXBJ.js");
       return issueAttestationCore2(ctx, args);
     },
     async getDocumentSigningPublicKey(deps) {
-      const { loadSigner, loadOrCreateSigner } = await import("../signer-WMZKCNKC.js");
+      const { loadSigner, loadOrCreateSigner } = await import("../signer-CTWOH6KT.js");
       const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK);
       if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
       if (deps.role !== "owner") {
@@ -46,19 +46,19 @@ function withAttestation() {
       return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 };
     },
     async revokeAttestation(ctx, docId) {
-      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-TINYPHYY.js");
+      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-HC7WG3HE.js");
       return revokeDocCore2(ctx, docId);
     },
     async unrevokeAttestation(ctx, docId) {
-      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-TINYPHYY.js");
+      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-HC7WG3HE.js");
       return unrevokeDocCore2(ctx, docId);
     },
     async getRevokedDocIds(ctx) {
-      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-TINYPHYY.js");
+      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-HC7WG3HE.js");
       return getRevokedDocIdsCore2(ctx);
     },
     async publishRevocationList(ctx) {
-      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-TINYPHYY.js");
+      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-HC7WG3HE.js");
       return publishRevocationListCore2(ctx);
     }
   };

package/dist/{backup-PTSVXDDW.js → backup-X7F3TCFV.js}

@@ -1,15 +1,15 @@
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-OBPVWOSQ.js";
+} from "./chunk-KD4HGBJV.js";
 import {
   SEQUENCE_COLLECTION
-} from "./chunk-EBKCYQ2D.js";
+} from "./chunk-NBXFCQX4.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-RZPOZPZU.js";
-import "./chunk-VH6SOCXH.js";
+import "./chunk-SU6SGWXM.js";
+import "./chunk-EFJAAFBW.js";
 import "./chunk-35NMVJ7I.js";
 import "./chunk-NFZGZ4AK.js";
 import "./chunk-QJNCB5SK.js";
@@ -17,7 +17,7 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-AKKRXT23.js";
 import {
   NOYDB_BACKUP_VERSION
-} from "./chunk-GZACYEOB.js";
+} from "./chunk-77AEMXFA.js";
 import {
   BackupCorruptedError,
   BackupLedgerError
@@ -239,4 +239,4 @@ export {
   loadVault,
   verifyBackupIntegrity
 };
-//# sourceMappingURL=backup-PTSVXDDW.js.map
+//# sourceMappingURL=backup-X7F3TCFV.js.map

package/dist/blobs/index.js

@@ -9,7 +9,7 @@ import {
   NO_BLOBS,
   createExportBlobsHandle,
   runCompaction
-} from "../chunk-IF6WNGAK.js";
+} from "../chunk-WUHEP3HH.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -24,18 +24,18 @@ import {
   detectMimeType,
   isPreCompressed,
   memoryBlobPinStore
-} from "../chunk-NQSO4UAH.js";
+} from "../chunk-WYUAEZSC.js";
 import "../chunk-6UBZ6I5Z.js";
 import "../chunk-PTHKZWEH.js";
 import "../chunk-JYJFGD2H.js";
-import "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+import "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import {
   BlobOfflineError
 } from "../chunk-QZWTRENR.js";

package/dist/broker/index.js

@@ -4,14 +4,14 @@ import {
 import {
   issueChallenge,
   verifyBrokerProof
-} from "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+} from "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import {
   BrokerEnrolmentError,
   BrokerNotEnabledError,
@@ -30,7 +30,7 @@ function withBroker(config) {
   const cache = /* @__PURE__ */ new Map();
   return {
     async enroll(ctx) {
-      const { enrollSeed } = await import("../seed-F7YYQTRC.js");
+      const { enrollSeed } = await import("../seed-JOV54PB3.js");
       return enrollSeed({ ...ctx, config });
     },
     async rotate(ctx) {
@@ -39,7 +39,7 @@ function withBroker(config) {
       const inFlight = scoped.map(([, e]) => e.inFlight).filter((p) => p !== void 0);
       await Promise.allSettled(inFlight);
       for (const [key] of scoped) cache.delete(key);
-      const { rotateSeed } = await import("../seed-F7YYQTRC.js");
+      const { rotateSeed } = await import("../seed-JOV54PB3.js");
       return rotateSeed({ ...ctx, config });
     },
     credentialSource(ctx, profile) {
@@ -56,7 +56,7 @@ function withBroker(config) {
         const skewMs = config.skewMs ?? DEFAULT_SKEW_MS;
         const capturedEntry = entry;
         const inFlight = (async () => {
-          const { mintStoreCredentials } = await import("../seed-F7YYQTRC.js");
+          const { mintStoreCredentials } = await import("../seed-JOV54PB3.js");
           const creds = await mintStoreCredentials({ ...ctx, config }, profile);
           capturedEntry.cached = { creds, validUntil: cacheFloor(creds, skewMs) };
           return creds;

package/dist/cargo/index.js

@@ -6,7 +6,7 @@ import {
   diffVault,
   unsealDeks,
   withCargo
-} from "../chunk-JTR75MKH.js";
+} from "../chunk-LLYIMSQQ.js";
 import {
   NO_CARGO,
   isQuorum,
@@ -15,24 +15,24 @@ import {
 import {
   extractPartition,
   walkClosure
-} from "../chunk-BYFXLDVV.js";
+} from "../chunk-3ECU57YH.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-TIVK6PRK.js";
-import "../chunk-OLIWCCFM.js";
-import "../chunk-TE6LH6J2.js";
-import "../chunk-WO4T4OD5.js";
-import "../chunk-OBPVWOSQ.js";
+} from "../chunk-ERGECZEI.js";
+import "../chunk-CLE3TMIS.js";
+import "../chunk-SFBYQMZM.js";
+import "../chunk-P4JO3H6R.js";
+import "../chunk-KD4HGBJV.js";
+import {
+  CustodyApi
+} from "../chunk-TS5XLBZR.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import {
-  CustodyApi
-} from "../chunk-SKM35Y4Q.js";
-import "../chunk-NQSO4UAH.js";
+import "../chunk-WYUAEZSC.js";
 import {
   groupAndReduce,
   reduceRecords
@@ -42,23 +42,23 @@ import "../chunk-CADUYBQD.js";
 import {
   readPath
 } from "../chunk-IGJCYUT5.js";
-import "../chunk-SGQ4N5FS.js";
-import "../chunk-JIDLU57U.js";
+import "../chunk-JEI6JJNI.js";
+import "../chunk-Q36YXK77.js";
 import "../chunk-UADPR6F4.js";
 import "../chunk-6UBZ6I5Z.js";
-import "../chunk-KPXM4WO6.js";
-import "../chunk-WZ3NCMK6.js";
+import "../chunk-Q5YJCVJY.js";
+import "../chunk-2BET5QTS.js";
 import "../chunk-PTHKZWEH.js";
 import {
   generateULID
 } from "../chunk-ZJADGNYF.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-Y6VZQGGH.js";
+import "../chunk-YGK2HMLR.js";
 import "../chunk-I7FD46FF.js";
 import "../chunk-JYJFGD2H.js";
-import "../chunk-ISRKW4YN.js";
-import "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+import "../chunk-DQZXPGGZ.js";
+import "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
@@ -66,7 +66,7 @@ import "../chunk-LP7BEXCT.js";
 import {
   sha256Hex
 } from "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import {
   AdoptionStateError,
   CargoNotEnabledError,

package/dist/{chunk-WZ3NCMK6.js → chunk-2BET5QTS.js}

@@ -1,12 +1,12 @@
 import {
   openEnvelopeJson
-} from "./chunk-RZPOZPZU.js";
+} from "./chunk-SU6SGWXM.js";
 import {
   encrypt
 } from "./chunk-AKKRXT23.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-GZACYEOB.js";
+} from "./chunk-77AEMXFA.js";
 import {
   ConflictError,
   USER_ENVELOPE_COLLECTION,
@@ -148,4 +148,4 @@ export {
   deleteUserEnvelope,
   listUserEnvelopeIds
 };
-//# sourceMappingURL=chunk-WZ3NCMK6.js.map
+//# sourceMappingURL=chunk-2BET5QTS.js.map

package/dist/{chunk-Y6B6HVKC.js → chunk-2J6UEN2V.js}

@@ -12,20 +12,31 @@ function wrapPodStore(bundle, options) {
   const versions = /* @__PURE__ */ new Map();
   const loaded = /* @__PURE__ */ new Set();
   let batchDepth = 0;
+  const loading = /* @__PURE__ */ new Map();
   async function load(vault) {
     if (loaded.has(vault)) return snapshots.get(vault);
-    const result = await bundle.readBundle(vault);
-    if (result) {
-      const text = new TextDecoder().decode(result.bytes);
-      const format = JSON.parse(text);
-      snapshots.set(vault, format.data);
-      versions.set(vault, result.version);
-    } else {
-      snapshots.set(vault, {});
-      versions.set(vault, null);
+    const inFlight = loading.get(vault);
+    if (inFlight) return inFlight;
+    const pending = (async () => {
+      const result = await bundle.readBundle(vault);
+      if (result) {
+        const text = new TextDecoder().decode(result.bytes);
+        const format = JSON.parse(text);
+        snapshots.set(vault, format.data);
+        versions.set(vault, result.version);
+      } else {
+        snapshots.set(vault, {});
+        versions.set(vault, null);
+      }
+      loaded.add(vault);
+      return snapshots.get(vault);
+    })();
+    loading.set(vault, pending);
+    try {
+      return await pending;
+    } finally {
+      loading.delete(vault);
     }
-    loaded.add(vault);
-    return snapshots.get(vault);
   }
   async function flush(vault) {
     const snapshot = snapshots.get(vault) ?? {};
@@ -59,15 +70,22 @@ function wrapPodStore(bundle, options) {
       }
     }
   }
+  const flushChain = /* @__PURE__ */ new Map();
+  function serialFlush(vault) {
+    const prev = flushChain.get(vault) ?? Promise.resolve();
+    const next = prev.then(() => flush(vault), () => flush(vault));
+    flushChain.set(vault, next);
+    return next;
+  }
   async function maybeFlush(vault) {
     if (autoFlush && batchDepth === 0) {
-      await flush(vault);
+      await serialFlush(vault);
     }
   }
   const store = {
     name: bundle.name ?? "bundle",
     async flush(vaultId) {
-      await flush(vaultId);
+      await serialFlush(vaultId);
     },
     async batch(vaultId, fn) {
       await load(vaultId);
@@ -77,7 +95,7 @@ function wrapPodStore(bundle, options) {
       } finally {
         batchDepth--;
       }
-      await flush(vaultId);
+      await serialFlush(vaultId);
     },
     async get(vault, collection, id) {
       const snap = await load(vault);
@@ -111,12 +129,18 @@ function wrapPodStore(bundle, options) {
       return Object.keys(snap[collection] ?? {});
     },
     async loadAll(vault) {
-      return await load(vault);
+      const snap = await load(vault);
+      const out = {};
+      for (const [collection, records] of Object.entries(snap)) {
+        if (collection.startsWith("_")) continue;
+        out[collection] = { ...records };
+      }
+      return out;
     },
     async saveAll(vault, data) {
       snapshots.set(vault, data);
       loaded.add(vault);
-      await flush(vault);
+      await serialFlush(vault);
     }
   };
   return store;
@@ -152,4 +176,4 @@ export {
   wrapBundleStore,
   createBundleStore
 };
-//# sourceMappingURL=chunk-Y6B6HVKC.js.map
+//# sourceMappingURL=chunk-2J6UEN2V.js.map

package/dist/chunk-2J6UEN2V.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-pod/pod-store.ts"],"sourcesContent":["import type { NoydbStore, NoydbPodStore, VaultSnapshot, EncryptedEnvelope } from '../kernel/types.js'\nimport { ConflictError, PodVersionConflictError } from '../kernel/errors.js'\n\n// ─── Bundle format ─────────────────────────────────────────────────────\n\nconst BUNDLE_STORE_VERSION = 1 as const\n\n/**\n * Wire format written by `wrapPodStore`. A JSON-serialised object that\n * contains the entire `VaultSnapshot` (all encrypted envelopes) plus a small\n * header for integrity checking. The envelopes inside are already AES-GCM\n * encrypted by core — the bundle bytes themselves are not additionally\n * encrypted, but they are safe to store on untrusted blob hosts because\n * every record inside is already ciphertext.\n *\n * @internal\n */\ninterface BundleStoreData {\n  readonly _noydb_bundle_store: typeof BUNDLE_STORE_VERSION\n  readonly vault: string\n  readonly ts: string\n  readonly data: VaultSnapshot\n}\n\n// ─── Options ───────────────────────────────────────────────────────────\n\nexport interface WrapPodStoreOptions {\n  /**\n   * When `true` (default), every `put()` and `delete()` flushes the full\n   * vault snapshot to the bundle backend. Set to `false` for bulk operations\n   * and call `store.flush(vaultId)` manually.\n   */\n  autoFlush?: boolean\n}\n\n// ─── Extended NoydbStore with flush/batch ───────────────────────────────\n\nexport interface WrappedPodNoydbStore extends NoydbStore {\n  /** Manually flush the in-memory snapshot to the bundle backend. */\n  flush(vaultId: string): Promise<void>\n  /**\n   * Run a batch of mutations without flushing until the callback completes.\n   * A single flush is performed at the end.\n   */\n  batch(vaultId: string, fn: () => Promise<void>): Promise<void>\n}\n\n// ─── wrapPodStore ───────────────────────────────────────────────────\n\nconst MAX_CONFLICT_RETRIES = 3\n\n/**\n * Convert a `NoydbPodStore` (blob-oriented read/write with OCC) into the\n * standard six-method `NoydbStore` interface expected by `createNoydb({ store })`.\n *\n * Bundle stores operate on the entire vault as a single serialised unit —\n * ideal for backends like Google Drive, WebDAV, or iCloud Drive that work\n * best with whole-file I/O rather than per-record KV operations.\n *\n * ## Optimistic concurrency\n *\n * The wrapper tracks the `version` token from the last `readBundle` and\n * passes it as `expectedVersion` on every flush. On\n * `PodVersionConflictError`, it re-reads, merges the remote snapshot\n * (last-write-wins per record key), and retries (max 3 attempts).\n *\n * ## Flush modes\n *\n * By default, flushes on every mutation (O(vault size) per write). Options:\n * - `autoFlush: false` + explicit `store.flush(vaultId)` calls\n * - `store.batch(vaultId, async () => { ... })` — defers flush until end\n * - Pair with `syncPolicy: { push: { mode: 'debounce' } }` from \n */\nexport function wrapPodStore(\n  bundle: NoydbPodStore,\n  options?: WrapPodStoreOptions,\n): WrappedPodNoydbStore {\n  const autoFlush = options?.autoFlush !== false\n\n  // Per-vault state\n  const snapshots = new Map<string, VaultSnapshot>()\n  const versions = new Map<string, string | null>()\n  const loaded = new Set<string>()\n\n  // Batch mode: when > 0, suppress auto-flush\n  let batchDepth = 0\n\n  // #908 — in-flight loads, keyed by vault. Without this, every concurrent\n  // caller issued its own `readBundle` and then REPLACED `snapshots` with a\n  // freshly parsed object — orphaning the mutations earlier callers had\n  // already made to the object they were handed. 100 racing puts kept 1.\n  const loading = new Map<string, Promise<VaultSnapshot>>()\n\n  async function load(vault: string): Promise<VaultSnapshot> {\n    if (loaded.has(vault)) return snapshots.get(vault)!\n\n    const inFlight = loading.get(vault)\n    if (inFlight) return inFlight\n\n    const pending = (async () => {\n      const result = await bundle.readBundle(vault)\n      if (result) {\n        const text = new TextDecoder().decode(result.bytes)\n        const format = JSON.parse(text) as BundleStoreData\n        snapshots.set(vault, format.data)\n        versions.set(vault, result.version)\n      } else {\n        snapshots.set(vault, {})\n        versions.set(vault, null)\n      }\n\n      loaded.add(vault)\n      return snapshots.get(vault)!\n    })()\n\n    loading.set(vault, pending)\n    try {\n      return await pending\n    } finally {\n      // Clear on failure too, so a transient read error does not poison\n      // every later load of this vault with a rejected promise.\n      loading.delete(vault)\n    }\n  }\n\n  async function flush(vault: string): Promise<void> {\n    const snapshot = snapshots.get(vault) ?? {}\n    const format: BundleStoreData = {\n      _noydb_bundle_store: BUNDLE_STORE_VERSION,\n      vault,\n      ts: new Date().toISOString(),\n      data: snapshot,\n    }\n    const bytes = new TextEncoder().encode(JSON.stringify(format))\n    const expectedVersion = versions.get(vault) ?? null\n\n    for (let attempt = 0; attempt < MAX_CONFLICT_RETRIES; attempt++) {\n      try {\n        const { version: newVersion } = await bundle.writeBundle(vault, bytes, expectedVersion)\n        versions.set(vault, newVersion)\n        return\n      } catch (err) {\n        if (err instanceof PodVersionConflictError && attempt < MAX_CONFLICT_RETRIES - 1) {\n          // Pull remote, merge (last-write-wins by record key), retry\n          const remote = await bundle.readBundle(vault)\n          if (remote) {\n            const remoteText = new TextDecoder().decode(remote.bytes)\n            const remoteFormat = JSON.parse(remoteText) as BundleStoreData\n            const localSnap = snapshots.get(vault) ?? {}\n            const mergedSnap = mergeSnapshots(remoteFormat.data, localSnap)\n            snapshots.set(vault, mergedSnap)\n            versions.set(vault, remote.version)\n          }\n          // Re-encode with merged data for the retry\n          continue\n        }\n        throw err\n      }\n    }\n  }\n\n  // #908 — one flush at a time per vault. `flush` reads and writes the vault's\n  // version token, so concurrent flushes race: each sends the same\n  // `expectedVersion`, the losers take the conflict/merge path, and with enough\n  // of them the retry budget is exhausted and the error surfaces to a caller\n  // whose write was perfectly valid. Serialising makes every flush see the\n  // token its predecessor produced.\n  const flushChain = new Map<string, Promise<void>>()\n\n  function serialFlush(vault: string): Promise<void> {\n    const prev = flushChain.get(vault) ?? Promise.resolve()\n    // Chain past a rejection as well — one failed flush must not wedge every\n    // subsequent write to this vault.\n    const next = prev.then(() => flush(vault), () => flush(vault))\n    flushChain.set(vault, next)\n    return next\n  }\n\n  async function maybeFlush(vault: string): Promise<void> {\n    if (autoFlush && batchDepth === 0) {\n      await serialFlush(vault)\n    }\n  }\n\n  const store: WrappedPodNoydbStore = {\n    name: bundle.name ?? 'bundle',\n\n    async flush(vaultId: string): Promise<void> {\n      await serialFlush(vaultId)\n    },\n\n    async batch(vaultId: string, fn: () => Promise<void>): Promise<void> {\n      await load(vaultId) // ensure loaded before batch\n      batchDepth++\n      try {\n        await fn()\n      } finally {\n        batchDepth--\n      }\n      await serialFlush(vaultId)\n    },\n\n    async get(vault: string, collection: string, id: string): Promise<EncryptedEnvelope | null> {\n      const snap = await load(vault)\n      return snap[collection]?.[id] ?? null\n    },\n\n    async put(\n      vault: string,\n      collection: string,\n      id: string,\n      envelope: EncryptedEnvelope,\n      expectedVersion?: number,\n    ): Promise<void> {\n      const snap = await load(vault)\n\n      if (expectedVersion !== undefined) {\n        const current = snap[collection]?.[id]\n        const currentVersion = current?._v ?? 0\n        if (currentVersion !== expectedVersion) {\n          throw new ConflictError(\n            currentVersion,\n            `Expected version ${expectedVersion} but found ${currentVersion} on ${collection}/${id}`,\n          )\n        }\n      }\n\n      snap[collection] ??= {}\n      snap[collection][id] = envelope\n      await maybeFlush(vault)\n    },\n\n    async delete(vault: string, collection: string, id: string): Promise<void> {\n      const snap = await load(vault)\n      if (snap[collection]) {\n        delete snap[collection][id]\n        await maybeFlush(vault)\n      }\n    },\n\n    async list(vault: string, collection: string): Promise<string[]> {\n      const snap = await load(vault)\n      return Object.keys(snap[collection] ?? {})\n    },\n\n    async loadAll(vault: string): Promise<VaultSnapshot> {\n      const snap = await load(vault)\n      // #908 — two contract fixes in one place:\n      //  1. internal collections (`_keyring`, `_sync`) are the vault's own\n      //     bookkeeping and must not appear in a snapshot — `@noy-db/to-file`\n      //     sets the reference behaviour with this same `_`-prefix rule;\n      //  2. copy rather than hand out the live cache, which let a caller\n      //     mutating the result silently rewrite the wrapper's own state.\n      // `get()`/`list()` still serve internal collections; this is about what\n      // a *snapshot* claims, not about hiding data.\n      const out: VaultSnapshot = {}\n      for (const [collection, records] of Object.entries(snap)) {\n        if (collection.startsWith('_')) continue\n        out[collection] = { ...records }\n      }\n      return out\n    },\n\n    async saveAll(vault: string, data: VaultSnapshot): Promise<void> {\n      snapshots.set(vault, data)\n      loaded.add(vault)\n      await serialFlush(vault)\n    },\n  }\n\n  return store\n}\n\n// ─── Snapshot merge (last-write-wins per record) ────────────────────────\n\nfunction mergeSnapshots(remote: VaultSnapshot, local: VaultSnapshot): VaultSnapshot {\n  const merged: VaultSnapshot = {}\n\n  // Start with all remote collections\n  for (const [coll, records] of Object.entries(remote)) {\n    merged[coll] = { ...records }\n  }\n\n  // Overlay local collections — LWW by _ts per record\n  for (const [coll, records] of Object.entries(local)) {\n    if (!merged[coll]) {\n      merged[coll] = { ...records }\n      continue\n    }\n    for (const [id, envelope] of Object.entries(records)) {\n      const existing = merged[coll][id]\n      if (!existing || envelope._ts >= existing._ts) {\n        merged[coll][id] = envelope\n      }\n    }\n  }\n\n  return merged\n}\n\n// ─── Factory helper ─────────────────────────────────────────────────────\n\n/**\n * Type-safe factory helper for `NoydbPodStore` implementations,\n * analogous to `createStore` for KV stores.\n */\nexport function createPodStore<TOptions>(\n  factory: (options: TOptions) => NoydbPodStore,\n): (options: TOptions) => NoydbPodStore {\n  return factory\n}\n\n// ─── Deprecated aliases (pre-rename compatibility) ──────────────────────\n\n/** @deprecated Use wrapPodStore. */\nexport const wrapBundleStore = wrapPodStore\n/** @deprecated Use createPodStore. */\nexport const createBundleStore = createPodStore\n/** @deprecated Use WrappedPodNoydbStore. */\nexport type WrappedBundleNoydbStore = WrappedPodNoydbStore\n/** @deprecated Use WrapPodStoreOptions. */\nexport type WrapBundleStoreOptions = WrapPodStoreOptions\n"],"mappings":";;;;;;AAKA,IAAM,uBAAuB;AA4C7B,IAAM,uBAAuB;AAwBtB,SAAS,aACd,QACA,SACsB;AACtB,QAAM,YAAY,SAAS,cAAc;AAGzC,QAAM,YAAY,oBAAI,IAA2B;AACjD,QAAM,WAAW,oBAAI,IAA2B;AAChD,QAAM,SAAS,oBAAI,IAAY;AAG/B,MAAI,aAAa;AAMjB,QAAM,UAAU,oBAAI,IAAoC;AAExD,iBAAe,KAAK,OAAuC;AACzD,QAAI,OAAO,IAAI,KAAK,EAAG,QAAO,UAAU,IAAI,KAAK;AAEjD,UAAM,WAAW,QAAQ,IAAI,KAAK;AAClC,QAAI,SAAU,QAAO;AAErB,UAAM,WAAW,YAAY;AAC3B,YAAM,SAAS,MAAM,OAAO,WAAW,KAAK;AAC5C,UAAI,QAAQ;AACV,cAAM,OAAO,IAAI,YAAY,EAAE,OAAO,OAAO,KAAK;AAClD,cAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,kBAAU,IAAI,OAAO,OAAO,IAAI;AAChC,iBAAS,IAAI,OAAO,OAAO,OAAO;AAAA,MACpC,OAAO;AACL,kBAAU,IAAI,OAAO,CAAC,CAAC;AACvB,iBAAS,IAAI,OAAO,IAAI;AAAA,MAC1B;AAEA,aAAO,IAAI,KAAK;AAChB,aAAO,UAAU,IAAI,KAAK;AAAA,IAC5B,GAAG;AAEH,YAAQ,IAAI,OAAO,OAAO;AAC1B,QAAI;AACF,aAAO,MAAM;AAAA,IACf,UAAE;AAGA,cAAQ,OAAO,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,iBAAe,MAAM,OAA8B;AACjD,UAAM,WAAW,UAAU,IAAI,KAAK,KAAK,CAAC;AAC1C,UAAM,SAA0B;AAAA,MAC9B,qBAAqB;AAAA,MACrB;AAAA,MACA,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,MAC3B,MAAM;AAAA,IACR;AACA,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,MAAM,CAAC;AAC7D,UAAM,kBAAkB,SAAS,IAAI,KAAK,KAAK;AAE/C,aAAS,UAAU,GAAG,UAAU,sBAAsB,WAAW;AAC/D,UAAI;AACF,cAAM,EAAE,SAAS,WAAW,IAAI,MAAM,OAAO,YAAY,OAAO,OAAO,eAAe;AACtF,iBAAS,IAAI,OAAO,UAAU;AAC9B;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,eAAe,2BAA2B,UAAU,uBAAuB,GAAG;AAEhF,gBAAM,SAAS,MAAM,OAAO,WAAW,KAAK;AAC5C,cAAI,QAAQ;AACV,kBAAM,aAAa,IAAI,YAAY,EAAE,OAAO,OAAO,KAAK;AACxD,kBAAM,eAAe,KAAK,MAAM,UAAU;AAC1C,kBAAM,YAAY,UAAU,IAAI,KAAK,KAAK,CAAC;AAC3C,kBAAM,aAAa,eAAe,aAAa,MAAM,SAAS;AAC9D,sBAAU,IAAI,OAAO,UAAU;AAC/B,qBAAS,IAAI,OAAO,OAAO,OAAO;AAAA,UACpC;AAEA;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAQA,QAAM,aAAa,oBAAI,IAA2B;AAElD,WAAS,YAAY,OAA8B;AACjD,UAAM,OAAO,WAAW,IAAI,KAAK,KAAK,QAAQ,QAAQ;AAGtD,UAAM,OAAO,KAAK,KAAK,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM,KAAK,CAAC;AAC7D,eAAW,IAAI,OAAO,IAAI;AAC1B,WAAO;AAAA,EACT;AAEA,iBAAe,WAAW,OAA8B;AACtD,QAAI,aAAa,eAAe,GAAG;AACjC,YAAM,YAAY,KAAK;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,QAA8B;AAAA,IAClC,MAAM,OAAO,QAAQ;AAAA,IAErB,MAAM,MAAM,SAAgC;AAC1C,YAAM,YAAY,OAAO;AAAA,IAC3B;AAAA,IAEA,MAAM,MAAM,SAAiB,IAAwC;AACnE,YAAM,KAAK,OAAO;AAClB;AACA,UAAI;AACF,cAAM,GAAG;AAAA,MACX,UAAE;AACA;AAAA,MACF;AACA,YAAM,YAAY,OAAO;AAAA,IAC3B;AAAA,IAEA,MAAM,IAAI,OAAe,YAAoB,IAA+C;AAC1F,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,aAAO,KAAK,UAAU,IAAI,EAAE,KAAK;AAAA,IACnC;AAAA,IAEA,MAAM,IACJ,OACA,YACA,IACA,UACA,iBACe;AACf,YAAM,OAAO,MAAM,KAAK,KAAK;AAE7B,UAAI,oBAAoB,QAAW;AACjC,cAAM,UAAU,KAAK,UAAU,IAAI,EAAE;AACrC,cAAM,iBAAiB,SAAS,MAAM;AACtC,YAAI,mBAAmB,iBAAiB;AACtC,gBAAM,IAAI;AAAA,YACR;AAAA,YACA,oBAAoB,eAAe,cAAc,cAAc,OAAO,UAAU,IAAI,EAAE;AAAA,UACxF;AAAA,QACF;AAAA,MACF;AAEA,WAAK,UAAU,MAAM,CAAC;AACtB,WAAK,UAAU,EAAE,EAAE,IAAI;AACvB,YAAM,WAAW,KAAK;AAAA,IACxB;AAAA,IAEA,MAAM,OAAO,OAAe,YAAoB,IAA2B;AACzE,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,UAAI,KAAK,UAAU,GAAG;AACpB,eAAO,KAAK,UAAU,EAAE,EAAE;AAC1B,cAAM,WAAW,KAAK;AAAA,MACxB;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,OAAe,YAAuC;AAC/D,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,aAAO,OAAO,KAAK,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,IAC3C;AAAA,IAEA,MAAM,QAAQ,OAAuC;AACnD,YAAM,OAAO,MAAM,KAAK,KAAK;AAS7B,YAAM,MAAqB,CAAC;AAC5B,iBAAW,CAAC,YAAY,OAAO,KAAK,OAAO,QAAQ,IAAI,GAAG;AACxD,YAAI,WAAW,WAAW,GAAG,EAAG;AAChC,YAAI,UAAU,IAAI,EAAE,GAAG,QAAQ;AAAA,MACjC;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,OAAe,MAAoC;AAC/D,gBAAU,IAAI,OAAO,IAAI;AACzB,aAAO,IAAI,KAAK;AAChB,YAAM,YAAY,KAAK;AAAA,IACzB;AAAA,EACF;AAEA,SAAO;AACT;AAIA,SAAS,eAAe,QAAuB,OAAqC;AAClF,QAAM,SAAwB,CAAC;AAG/B,aAAW,CAAC,MAAM,OAAO,KAAK,OAAO,QAAQ,MAAM,GAAG;AACpD,WAAO,IAAI,IAAI,EAAE,GAAG,QAAQ;AAAA,EAC9B;AAGA,aAAW,CAAC,MAAM,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AACnD,QAAI,CAAC,OAAO,IAAI,GAAG;AACjB,aAAO,IAAI,IAAI,EAAE,GAAG,QAAQ;AAC5B;AAAA,IACF;AACA,eAAW,CAAC,IAAI,QAAQ,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,YAAM,WAAW,OAAO,IAAI,EAAE,EAAE;AAChC,UAAI,CAAC,YAAY,SAAS,OAAO,SAAS,KAAK;AAC7C,eAAO,IAAI,EAAE,EAAE,IAAI;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAQO,SAAS,eACd,SACsC;AACtC,SAAO;AACT;AAKO,IAAM,kBAAkB;AAExB,IAAM,oBAAoB;","names":[]}

package/dist/{chunk-BYFXLDVV.js → chunk-3ECU57YH.js}

@@ -1,6 +1,6 @@
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-OBPVWOSQ.js";
+} from "./chunk-KD4HGBJV.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -8,11 +8,11 @@ import {
   BLOB_INTENT_COLLECTION,
   BLOB_SLOTS_PREFIX,
   BLOB_VERSIONS_PREFIX
-} from "./chunk-NQSO4UAH.js";
+} from "./chunk-WYUAEZSC.js";
 import {
   assembleBundleContainer,
   buildExtractedPartitionWrapper
-} from "./chunk-SGQ4N5FS.js";
+} from "./chunk-JEI6JJNI.js";
 import {
   generateULID
 } from "./chunk-ZJADGNYF.js";
@@ -23,11 +23,11 @@ import {
   canonicalJson,
   envelopePayloadHash,
   hashEntry
-} from "./chunk-ISRKW4YN.js";
+} from "./chunk-DQZXPGGZ.js";
 import {
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-RZPOZPZU.js";
+} from "./chunk-SU6SGWXM.js";
 import {
   bufferToBase64,
   decrypt,
@@ -41,7 +41,7 @@ import {
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-GZACYEOB.js";
+} from "./chunk-77AEMXFA.js";
 import {
   PartitionExtractionError
 } from "./chunk-QZWTRENR.js";
@@ -492,4 +492,4 @@ export {
   extractPartition,
   extractPartitionCore
 };
-//# sourceMappingURL=chunk-BYFXLDVV.js.map
+//# sourceMappingURL=chunk-3ECU57YH.js.map

package/dist/{chunk-ZWBKDKXC.js → chunk-467SWYT5.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-6ZNSB3H6.js";
 import {
   loadPersistedSchema
-} from "./chunk-OBPVWOSQ.js";
+} from "./chunk-KD4HGBJV.js";
 
 // src/with-shape/introspection/walk.ts
 var INTERNAL_PREFIX = "_";
@@ -229,4 +229,4 @@ function summariseAggregateOp(value) {
 export {
   dumpVaultSchema
 };
-//# sourceMappingURL=chunk-ZWBKDKXC.js.map
+//# sourceMappingURL=chunk-467SWYT5.js.map