@noy-db/hub 0.4.0-pre.8 → 0.4.0

package/dist/forget/index.js

@@ -1,15 +1,15 @@
 import {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION
-} from "../chunk-KFRPNHWR.js";
-import "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+} from "../chunk-ZHDSUZQU.js";
+import "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 

package/dist/history/index.js

@@ -8,7 +8,7 @@ import {
   rewrapHistory,
   saveHistory,
   tombstoneHistory
-} from "../chunk-MANUDU7I.js";
+} from "../chunk-HZZP2ZIG.js";
 import {
   NO_HISTORY
 } from "../chunk-AFHQATY4.js";
@@ -20,7 +20,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-Y6VZQGGH.js";
+} from "../chunk-YGK2HMLR.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -33,15 +33,15 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-ISRKW4YN.js";
-import "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+} from "../chunk-DQZXPGGZ.js";
+import "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import "../chunk-QZWTRENR.js";
 import "../chunk-PZ5AY32C.js";
 

package/dist/i18n/index.js

@@ -1,6 +1,6 @@
 import {
   withLookup
-} from "../chunk-OLSARBZU.js";
+} from "../chunk-LXRTP3AQ.js";
 import {
   dictKey,
   staticDict
@@ -9,7 +9,7 @@ import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "../chunk-NEX7JCMO.js";
+} from "../chunk-OWHP3H5C.js";
 import {
   NO_I18N,
   applyI18nLocale,
@@ -28,15 +28,15 @@ import {
   validateI18nTextValue
 } from "../chunk-UADPR6F4.js";
 import "../chunk-6UBZ6I5Z.js";
-import "../chunk-ISRKW4YN.js";
-import "../chunk-RZPOZPZU.js";
-import "../chunk-VH6SOCXH.js";
+import "../chunk-DQZXPGGZ.js";
+import "../chunk-SU6SGWXM.js";
+import "../chunk-EFJAAFBW.js";
 import "../chunk-35NMVJ7I.js";
 import "../chunk-NFZGZ4AK.js";
 import "../chunk-QJNCB5SK.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-AKKRXT23.js";
-import "../chunk-GZACYEOB.js";
+import "../chunk-77AEMXFA.js";
 import {
   DictKeyInUseError,
   DictKeyMissingError,

package/dist/index.d.ts

@@ -99,12 +99,12 @@ export type { CollectionMeta, VaultMeta } from './with-shape/introspection/meta.
 export type { CollectionDescription, DescribedField, DescribeOptions } from './with-shape/introspection/describe.js';
 export { applyListProjection, type ListProjectionOptions } from './with-shape/introspection/projection.js';
 export type { DryRunResult, AffectedDocument, GuardViolation } from './with-commit/tx/dry-run.js';
-export type { TabRole, TabPresence, TabCoordinationOptions, TabLockManager, TabChannel } from './with-party/tab-coordination.js';
+export type { TabRole, TabPresence, TabCoordinationOptions, TabLockManager, TabChannel } from './with-sync/tab-coordination.js';
 export type { WriteConflict } from './kernel/types.js';
 export type { SchemaDelta, FieldChange, UpdateContext, UpdateDecision, SchemaUpdateStrategy, } from './with-shape/schema-update/index.js';
 export { blindUpdate, additiveOnly, lockSchema, coordinatedCutover } from './with-shape/schema-update/index.js';
 export type { FenceState, FenceDoc } from './with-shape/schema-update/fence.js';
-export type { SyncPolicy, PushPolicy, PullPolicy, PushMode, PullMode, SyncSchedulerStatus } from './kernel/sync-policy.js';
+export type { SyncPolicy, PushPolicy, PullPolicy, PushMode, PullMode, SyncSchedulerStatus, ReadinessState } from './kernel/sync-policy.js';
 export { SyncScheduler, INDEXED_STORE_POLICY, POD_STORE_POLICY, BUNDLE_STORE_POLICY } from './kernel/sync-policy.js';
 export type { SyncTarget, SyncTargetRole } from './kernel/types.js';
 export { memoryStore } from './kernel/memory-store.js';
@@ -215,11 +215,11 @@ export { Collection } from './kernel/collection.js';
 export type { CacheOptions, CacheStats, CollectionChangeEvent } from './kernel/collection.js';
 export type { CrdtMode, CrdtState, LwwMapState, RgaState, YjsState } from './with-commit/crdt/crdt.js';
 export { resolveCrdtSnapshot, mergeCrdtStates } from './with-commit/crdt/crdt.js';
-export { PresenceHandle } from './with-party/team/presence.js';
+export { PresenceHandle } from './with-sync/presence.js';
 export type { PresencePeer } from './kernel/types.js';
 export { derivePresenceKey } from './kernel/enclave/index.js';
-export { SyncEngine } from './with-party/team/sync.js';
-export { SyncTransaction } from './with-party/team/sync-transaction.js';
+export { SyncEngine } from './with-sync/engine.js';
+export { SyncTransaction } from './with-sync/transaction.js';
 export { TxContext, TxVault, TxCollection, runTransaction } from './with-commit/tx/transaction.js';
 export type { TxOp } from './kernel/types.js';
 export type { TransactionInvariant } from './with-commit/tx/invariants.js';
@@ -271,8 +271,8 @@ export { lookup, dict, enumOf, enum } from './via/lookup/index.js';
 export { UnknownLookupKeyError, RestrictRefUnresolvableError } from './kernel/errors.js';
 export type { LookupDescriptor, Vocabulary, OnDelete } from './via/lookup/index.js';
 export type { LocaleReadOptions } from './kernel/types.js';
-export { putCredential, getCredential, deleteCredential, listCredentials, credentialStatus, SYNC_CREDENTIALS_COLLECTION, } from './with-party/team/sync-credentials.js';
-export type { SyncCredential } from './with-party/team/sync-credentials.js';
+export { putCredential, getCredential, deleteCredential, listCredentials, credentialStatus, SYNC_CREDENTIALS_COLLECTION, } from './with-sync/credentials.js';
+export type { SyncCredential } from './with-sync/credentials.js';
 export { PolicyEnforcer, createEnforcer, validateSessionPolicy } from './with-party/session/session-policy.js';
 export { createSession, resolveSession, revokeSession, revokeAllSessions, isSessionAlive, activeSessionCount, } from './with-party/session/session.js';
 export type { SessionToken, CreateSessionResult, CreateSessionOptions, } from './with-party/session/session.js';

package/dist/index.js

@@ -16,32 +16,46 @@ import {
   refArray,
   via,
   withArchive
-} from "./chunk-TWS3S62A.js";
+} from "./chunk-ZBYFMI6D.js";
+import "./chunk-SHEEBRZ4.js";
 import "./chunk-NJ4DYYO5.js";
 import {
   persistSchemaIfNeeded
-} from "./chunk-FO6RNKKW.js";
+} from "./chunk-S7GIXBXV.js";
 import {
   LinkEndpointError
-} from "./chunk-HFUAFR6B.js";
+} from "./chunk-TWPK7KUJ.js";
 import {
   LinkIntegrityError,
   isLinkCollectionName
 } from "./chunk-4JQK3L4V.js";
-import "./chunk-SHEEBRZ4.js";
 import {
   ComputedFieldError,
   evalComputedFields
 } from "./chunk-5DRROK5W.js";
+import "./chunk-GYGLAVCX.js";
 import {
   WithdrawalRequestError,
   approveWithdrawal,
   listWithdrawalRequests,
   rejectWithdrawal,
   requestWithdrawal
-} from "./chunk-JYV4JJV2.js";
-import "./chunk-6M2I3DKF.js";
-import "./chunk-CCDP6EPB.js";
+} from "./chunk-QGIBI6GL.js";
+import "./chunk-WK7ULBTP.js";
+import "./chunk-PWPYO73B.js";
+import {
+  MoneyCurrencyError,
+  MoneyPrecisionError,
+  MoneyUnsupportedError,
+  allocate,
+  asMoney,
+  isMoneyDescriptor,
+  isMoneyString,
+  money,
+  moneyNumber,
+  mulRate,
+  scaleForCurrency
+} from "./chunk-SGDPRCC4.js";
 import {
   COVER_FIELDS,
   DEFAULT_COVER_SCHEMA,
@@ -62,42 +76,52 @@ import {
   checkGate,
   describeGate,
   mergePolicy
-} from "./chunk-FMNU7IUG.js";
+} from "./chunk-DTFA5DO4.js";
 import "./chunk-GJW4HX2O.js";
 import {
   UserApi
-} from "./chunk-3XKESW5E.js";
-import "./chunk-GYGLAVCX.js";
-import "./chunk-6R6Q3MRN.js";
+} from "./chunk-SF2ZIRD6.js";
+import {
+  classified,
+  luhnCheck
+} from "./chunk-T2MOJF76.js";
+import {
+  ClassifiedNeverStoredError,
+  ClassifiedValidationError,
+  isClassifiedFieldSpec,
+  isClassifiedGroup,
+  resolveClassifiedFields
+} from "./chunk-DAFBJS4Y.js";
+import "./chunk-RQ4ZI4ZI.js";
 import "./chunk-BLBAQRBM.js";
 import {
   decryptExtractedPartition,
   diffVault,
   withCargo
-} from "./chunk-JTR75MKH.js";
+} from "./chunk-LLYIMSQQ.js";
 import {
   NO_CARGO
 } from "./chunk-TG634KCO.js";
-import "./chunk-BYFXLDVV.js";
+import "./chunk-3ECU57YH.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "./chunk-TIVK6PRK.js";
+} from "./chunk-ERGECZEI.js";
 import {
   MemoryRecipientSealer,
   MemorySealingKeyProvider,
   aesGcmOpen,
   parseRsaOaepTlv,
   sealRsaOaepTlv
-} from "./chunk-OLIWCCFM.js";
+} from "./chunk-CLE3TMIS.js";
 import {
   withdrawAccessibleData
-} from "./chunk-TE6LH6J2.js";
+} from "./chunk-SFBYQMZM.js";
 import {
   exportAccessibleData
-} from "./chunk-WO4T4OD5.js";
+} from "./chunk-P4JO3H6R.js";
 import {
   routeStore,
   withCache,
@@ -121,20 +145,12 @@ import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   savePersistedSchema
-} from "./chunk-OBPVWOSQ.js";
+} from "./chunk-KD4HGBJV.js";
 import {
-  MoneyCurrencyError,
-  MoneyPrecisionError,
-  MoneyUnsupportedError,
-  allocate,
-  asMoney,
-  isMoneyDescriptor,
-  isMoneyString,
-  money,
-  moneyNumber,
-  mulRate,
-  scaleForCurrency
-} from "./chunk-SGDPRCC4.js";
+  CustodyApi,
+  NO_CUSTODY,
+  withCustody
+} from "./chunk-TS5XLBZR.js";
 import {
   withDerivation,
   withRollup
@@ -145,36 +161,42 @@ import "./chunk-MHMLXJ3I.js";
 import {
   withMaterializedView
 } from "./chunk-MXUT7FTE.js";
-import "./chunk-FRMW23UK.js";
+import "./chunk-7H3WWH6J.js";
+import "./chunk-IVYQAVWO.js";
 import {
   buildLookupSnapshot
-} from "./chunk-GP3UWP22.js";
+} from "./chunk-LRRX57UA.js";
 import "./chunk-3HUYRN24.js";
-import "./chunk-IMRB2C4O.js";
 import {
   withOverlayedView
 } from "./chunk-MSMJJB4J.js";
 import "./chunk-ZTLOXFPB.js";
 import "./chunk-IG6KUWBX.js";
-import "./chunk-EP5L47XV.js";
+import {
+  PresenceHandle,
+  SyncEngine,
+  SyncTransaction
+} from "./chunk-NLYALJMY.js";
+import {
+  BUNDLE_STORE_POLICY,
+  INDEXED_STORE_POLICY,
+  POD_STORE_POLICY,
+  SyncScheduler
+} from "./chunk-55LKVALY.js";
 import {
   isDiscriminant
 } from "./chunk-PY4KJPYU.js";
 import "./chunk-5GQEU4DN.js";
 import {
-  classified,
-  luhnCheck
-} from "./chunk-6L3DKWRY.js";
-import {
-  ClassifiedNeverStoredError,
-  ClassifiedValidationError,
-  isClassifiedFieldSpec,
-  isClassifiedGroup,
-  resolveClassifiedFields
-} from "./chunk-ZFUFAHZ3.js";
-import "./chunk-BN4HRYAZ.js";
-import "./chunk-N5PLUFH2.js";
+  CONSENT_AUDIT_COLLECTION
+} from "./chunk-5UQ7Y6SQ.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-JQ2AX4T5.js";
+import "./chunk-ZFG5EBI3.js";
 import "./chunk-GHVIKOHT.js";
+import {
+  PERIODS_COLLECTION
+} from "./chunk-NM5UYF6Q.js";
 import {
   immutableGuard,
   transitionGuard,
@@ -194,13 +216,13 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-BQ6DHN4I.js";
+} from "./chunk-GTYFIVIZ.js";
 import "./chunk-5D2ALSM5.js";
 import {
   NO_SEARCH,
   tokenize,
   withSearch
-} from "./chunk-QADFHRQM.js";
+} from "./chunk-KYRDJI5O.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
@@ -210,12 +232,7 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "./chunk-EBKCYQ2D.js";
-import {
-  CustodyApi,
-  NO_CUSTODY,
-  withCustody
-} from "./chunk-SKM35Y4Q.js";
+} from "./chunk-NBXFCQX4.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   Query,
@@ -231,7 +248,7 @@ import {
   importExternalObjects,
   memoryObjectProjection
 } from "./chunk-4Q6HSHHL.js";
-import "./chunk-IF6WNGAK.js";
+import "./chunk-WUHEP3HH.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -248,7 +265,7 @@ import {
   getIntent,
   isPreCompressed,
   sweepBlobIntents
-} from "./chunk-NQSO4UAH.js";
+} from "./chunk-WYUAEZSC.js";
 import "./chunk-L3YYLT4E.js";
 import {
   CollectionIndexes
@@ -280,7 +297,7 @@ import {
   createPodStore,
   wrapBundleStore,
   wrapPodStore
-} from "./chunk-Y6B6HVKC.js";
+} from "./chunk-2J6UEN2V.js";
 import {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
@@ -293,7 +310,7 @@ import {
   readPodHeader,
   writeNoydbBundle,
   writePod
-} from "./chunk-SGQ4N5FS.js";
+} from "./chunk-JEI6JJNI.js";
 import {
   COVER_RECORD_ID,
   isCover,
@@ -301,12 +318,8 @@ import {
   readCover,
   saveCover,
   validateCoverInput
-} from "./chunk-JIDLU57U.js";
-import {
-  CONSENT_AUDIT_COLLECTION
-} from "./chunk-XIDQKFZF.js";
-import "./chunk-PEOZ34EM.js";
-import "./chunk-OLSARBZU.js";
+} from "./chunk-Q36YXK77.js";
+import "./chunk-LXRTP3AQ.js";
 import {
   dictKey,
   staticDict
@@ -315,7 +328,7 @@ import {
   DICT_COLLECTION_PREFIX,
   LookupHandle,
   dictCollectionName
-} from "./chunk-NEX7JCMO.js";
+} from "./chunk-OWHP3H5C.js";
 import {
   applyI18nLocale,
   enforceScript,
@@ -335,13 +348,8 @@ import {
   installViaBinder
 } from "./chunk-6UBZ6I5Z.js";
 import {
-  credentialStatus,
-  deleteCredential,
-  getCredential,
-  listCredentials,
-  putCredential,
   withTeam
-} from "./chunk-SHYIA73K.js";
+} from "./chunk-SBHN6QUT.js";
 import {
   MAGIC_LINK_GRANTS_COLLECTION,
   NO_TEAM,
@@ -369,32 +377,19 @@ import {
   unwrapDeksFromPaperEntry,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-C25JXSOR.js";
+} from "./chunk-ZNWSG7XC.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "./chunk-56IIVAEO.js";
-import {
-  PresenceHandle,
-  SyncEngine,
-  SyncTransaction
-} from "./chunk-BXHMZ2XW.js";
-import {
-  BUNDLE_STORE_POLICY,
-  INDEXED_STORE_POLICY,
-  POD_STORE_POLICY,
-  SyncScheduler
-} from "./chunk-MTJLOC3Y.js";
-import {
-  PERIODS_COLLECTION
-} from "./chunk-EZNTORXE.js";
+} from "./chunk-Q2SEJMP2.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   WeakSecretError,
   assertStrongSecret,
   buildRecipientKeyringFile,
+  ensureCollectionDEK,
   estimateEntropy,
   evaluateExportCapability,
   evaluateImportCapability,
@@ -403,7 +398,7 @@ import {
   listUsers,
   listUsersWithEnvelopes,
   validateSecret
-} from "./chunk-KPXM4WO6.js";
+} from "./chunk-Q5YJCVJY.js";
 import {
   DIRECTORY_RECORD_ID,
   VISIBILITY_RECORD_PREFIX,
@@ -417,7 +412,7 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "./chunk-WZ3NCMK6.js";
+} from "./chunk-2BET5QTS.js";
 import "./chunk-PTHKZWEH.js";
 import "./chunk-IXNCZTWA.js";
 import {
@@ -443,7 +438,7 @@ import {
 import {
   CollectionInstant,
   VaultInstant
-} from "./chunk-MANUDU7I.js";
+} from "./chunk-HZZP2ZIG.js";
 import "./chunk-AFHQATY4.js";
 import {
   diff,
@@ -453,7 +448,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-Y6VZQGGH.js";
+} from "./chunk-YGK2HMLR.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -466,14 +461,15 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-ISRKW4YN.js";
-import "./chunk-KFRPNHWR.js";
+} from "./chunk-DQZXPGGZ.js";
+import "./chunk-ZHDSUZQU.js";
 import "./chunk-QD46HPZG.js";
 import {
+  openEnvelopeJson,
   validateSchemaInput,
   validateSchemaOutput
-} from "./chunk-RZPOZPZU.js";
-import "./chunk-VH6SOCXH.js";
+} from "./chunk-SU6SGWXM.js";
+import "./chunk-EFJAAFBW.js";
 import "./chunk-35NMVJ7I.js";
 import "./chunk-NFZGZ4AK.js";
 import "./chunk-QJNCB5SK.js";
@@ -484,6 +480,7 @@ import {
   decryptBytes,
   decryptDeterministic,
   derivePresenceKey,
+  encrypt,
   encryptBytes,
   encryptDeterministic
 } from "./chunk-AKKRXT23.js";
@@ -494,7 +491,7 @@ import {
   NOYDB_SYNC_VERSION,
   SealedHandle,
   createStore
-} from "./chunk-GZACYEOB.js";
+} from "./chunk-77AEMXFA.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -949,6 +946,61 @@ function dict(dimension, opts) {
     ...opts?.substitute !== void 0 ? { substitute: opts.substitute } : {}
   };
 }
+
+// src/with-sync/credentials.ts
+function requireAdminAccess(keyring) {
+  if (keyring.role !== "owner" && keyring.role !== "admin") {
+    throw new PermissionDeniedError(
+      `Sync credentials require owner or admin role. Current role: "${keyring.role}"`
+    );
+  }
+}
+async function putCredential(adapter, vault, keyring, credential) {
+  requireAdminAccess(keyring);
+  const getDek = await ensureCollectionDEK(adapter, vault, keyring);
+  const dek = await getDek(SYNC_CREDENTIALS_COLLECTION);
+  const { iv, data } = await encrypt(JSON.stringify(credential), dek);
+  const existing = await adapter.get(vault, SYNC_CREDENTIALS_COLLECTION, credential.adapterId);
+  const version = existing ? existing._v + 1 : 1;
+  const envelope = {
+    _noydb: NOYDB_FORMAT_VERSION,
+    _v: version,
+    _ts: (/* @__PURE__ */ new Date()).toISOString(),
+    _iv: iv,
+    _data: data,
+    _by: keyring.userId
+  };
+  await adapter.put(
+    vault,
+    SYNC_CREDENTIALS_COLLECTION,
+    credential.adapterId,
+    envelope,
+    existing ? existing._v : void 0
+  );
+}
+async function getCredential(adapter, vault, keyring, adapterId) {
+  requireAdminAccess(keyring);
+  const getDek = await ensureCollectionDEK(adapter, vault, keyring);
+  const dek = await getDek(SYNC_CREDENTIALS_COLLECTION);
+  const envelope = await adapter.get(vault, SYNC_CREDENTIALS_COLLECTION, adapterId);
+  if (!envelope) return null;
+  const plaintext = await openEnvelopeJson(envelope, dek);
+  return JSON.parse(plaintext);
+}
+async function deleteCredential(adapter, vault, keyring, adapterId) {
+  requireAdminAccess(keyring);
+  await adapter.delete(vault, SYNC_CREDENTIALS_COLLECTION, adapterId);
+}
+async function listCredentials(adapter, vault, keyring) {
+  requireAdminAccess(keyring);
+  return adapter.list(vault, SYNC_CREDENTIALS_COLLECTION);
+}
+async function credentialStatus(adapter, vault, keyring, adapterId) {
+  const credential = await getCredential(adapter, vault, keyring, adapterId);
+  if (!credential) return { exists: false };
+  const expired = credential.expiresAt ? Date.now() > new Date(credential.expiresAt).getTime() : false;
+  return { exists: true, expired };
+}
 export {
   AlreadyElevatedError,
   AmendmentForbiddenError,