@noy-db/hub 0.6.0-pre.1 → 0.6.0-pre.3

package/dist/attestation/index.js

@@ -1,27 +1,27 @@
 import {
   issueAttestationCore
-} from "../chunk-DCMQR46R.js";
+} from "../chunk-PNKHAKQ7.js";
 import {
   getRevokedDocIdsCore,
   publishRevocationListCore,
   revokeDocCore,
   unrevokeDocCore
-} from "../chunk-3EO7RZLJ.js";
+} from "../chunk-W77KZHCW.js";
 import {
   ATTESTATIONS_COLLECTION
-} from "../chunk-ZWMO5GL5.js";
+} from "../chunk-JJNOLSG5.js";
 import {
   NO_ATTESTATION
 } from "../chunk-VJFMXYKP.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-FY343IZR.js";
-import "../chunk-NQRJ5AJO.js";
+import "../chunk-3URQC7EH.js";
+import "../chunk-7H73RIE3.js";
 import "../chunk-HXGUIPQB.js";
 import "../chunk-AR2JDFAE.js";
 import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-VCETL77O.js";
-import "../chunk-24ZLWWEO.js";
+import "../chunk-YPYHVOXP.js";
 import {
   AttestationError,
   AttestationNotEnabledError
@@ -32,11 +32,11 @@ import "../chunk-PZ5AY32C.js";
 function withAttestation() {
   return {
     async issueAttestation(ctx, args) {
-      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-N74C55X6.js");
+      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-RIVHSY2S.js");
       return issueAttestationCore2(ctx, args);
     },
     async getDocumentSigningPublicKey(deps) {
-      const { loadSigner, loadOrCreateSigner } = await import("../signer-7KHD4OL2.js");
+      const { loadSigner, loadOrCreateSigner } = await import("../signer-TA55QB6R.js");
       const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK);
       if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
       if (deps.role !== "owner") {
@@ -46,19 +46,19 @@ function withAttestation() {
       return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 };
     },
     async revokeAttestation(ctx, docId) {
-      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-ZX4NM2CJ.js");
+      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-JFN773KF.js");
       return revokeDocCore2(ctx, docId);
     },
     async unrevokeAttestation(ctx, docId) {
-      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-ZX4NM2CJ.js");
+      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-JFN773KF.js");
       return unrevokeDocCore2(ctx, docId);
     },
     async getRevokedDocIds(ctx) {
-      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-ZX4NM2CJ.js");
+      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-JFN773KF.js");
       return getRevokedDocIdsCore2(ctx);
     },
     async publishRevocationList(ctx) {
-      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-ZX4NM2CJ.js");
+      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-JFN773KF.js");
       return publishRevocationListCore2(ctx);
     }
   };

package/dist/attestation/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/attestation/active.ts","../../src/with-audit/attestation/index.ts"],"sourcesContent":["import { AttestationError } from '../../kernel/errors.js'\nimport type { AttestationStrategy } from './strategy.js'\n\n/**\n * Enable the attestation capability.\n * Pass to `createNoydb({ attestationStrategy: withAttestation() })` to make the\n * vault's `issueAttestation` / `getDocumentSigningPublicKey` / `revokeAttestation`\n * / `unrevokeAttestation` / `getRevokedDocIds` / `publishRevocationList` methods\n * live. The issue/revoke/signer engines are dynamically imported here, so they\n * stay out of the floor bundle until opted in.\n */\nexport function withAttestation(): AttestationStrategy {\n  return {\n    async issueAttestation(ctx, args) {\n      const { issueAttestationCore } = await import('./issue.js')\n      return issueAttestationCore(ctx, args)\n    },\n    async getDocumentSigningPublicKey(deps) {\n      const { loadSigner, loadOrCreateSigner } = await import('./signer.js')\n      // Reading an existing public key is open to any role that holds the\n      // _attestations DEK — the public key is not secret. But MINTING the\n      // signer is the firm's identity operation (same rule as issueAttestation):\n      // a non-owner read must not silently create it.\n      const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK)\n      if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 }\n      if (deps.role !== 'owner') {\n        throw new AttestationError(`getDocumentSigningPublicKey: no document-signing key exists yet; only the 'owner' may mint it. Caller is '${deps.role}'. Have the owner issue an attestation (or call this) first.`)\n      }\n      const signer = await loadOrCreateSigner(deps.adapter, deps.vault, deps.getDEK)\n      return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 }\n    },\n    async revokeAttestation(ctx, docId) {\n      const { revokeDocCore } = await import('./revoke.js')\n      return revokeDocCore(ctx, docId)\n    },\n    async unrevokeAttestation(ctx, docId) {\n      const { unrevokeDocCore } = await import('./revoke.js')\n      return unrevokeDocCore(ctx, docId)\n    },\n    async getRevokedDocIds(ctx) {\n      const { getRevokedDocIdsCore } = await import('./revoke.js')\n      return getRevokedDocIdsCore(ctx)\n    },\n    async publishRevocationList(ctx) {\n      const { publishRevocationListCore } = await import('./revoke.js')\n      return publishRevocationListCore(ctx)\n    },\n  }\n}\n","/**\n * @category capability\n * Document attestation — issue side. Mint a signed, per-field commitment\n * for a record and emit a QR credential verifiable offline via\n * `@noy-db/attestation`. See docs/superpowers/specs/2026-05-29-attestation-core-and-issue-design.md.\n */\nexport { withAttestation } from './active.js'\nexport { NO_ATTESTATION, type AttestationStrategy } from './strategy.js'\nexport { AttestationNotEnabledError } from '../../kernel/errors.js'\nexport { issueAttestationCore } from './issue.js'\nexport type { IssueContext, IssueArgs, IssueResult } from './issue.js'\nexport { ATTESTATIONS_COLLECTION } from './signer.js'\nexport { revokeDocCore, unrevokeDocCore, getRevokedDocIdsCore, publishRevocationListCore } from './revoke.js'\nexport type { RevokeContext } from './revoke.js'\nexport { AttestationError } from '../../kernel/errors.js'\n// Re-export the pure verifier surface so consumers can verify from one import:\nexport { verifyAttestation, decodeQr, verifyRevocationList, isRevoked, signRevocationList, type QrPayload, type AttestationFieldSchema, type VerifyResult, type VerifyInput, type RevocationList } from '@noy-db/attestation'\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWO,SAAS,kBAAuC;AACrD,SAAO;AAAA,IACL,MAAM,iBAAiB,KAAK,MAAM;AAChC,YAAM,EAAE,sBAAAA,sBAAqB,IAAI,MAAM,OAAO,sBAAY;AAC1D,aAAOA,sBAAqB,KAAK,IAAI;AAAA,IACvC;AAAA,IACA,MAAM,4BAA4B,MAAM;AACtC,YAAM,EAAE,YAAY,mBAAmB,IAAI,MAAM,OAAO,uBAAa;AAKrE,YAAM,WAAW,MAAM,WAAW,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM;AACvE,UAAI,SAAU,QAAO,EAAE,OAAO,SAAS,OAAO,cAAc,SAAS,aAAa;AAClF,UAAI,KAAK,SAAS,SAAS;AACzB,cAAM,IAAI,iBAAiB,6GAA6G,KAAK,IAAI,8DAA8D;AAAA,MACjN;AACA,YAAM,SAAS,MAAM,mBAAmB,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM;AAC7E,aAAO,EAAE,OAAO,OAAO,OAAO,cAAc,OAAO,aAAa;AAAA,IAClE;AAAA,IACA,MAAM,kBAAkB,KAAK,OAAO;AAClC,YAAM,EAAE,eAAAC,eAAc,IAAI,MAAM,OAAO,uBAAa;AACpD,aAAOA,eAAc,KAAK,KAAK;AAAA,IACjC;AAAA,IACA,MAAM,oBAAoB,KAAK,OAAO;AACpC,YAAM,EAAE,iBAAAC,iBAAgB,IAAI,MAAM,OAAO,uBAAa;AACtD,aAAOA,iBAAgB,KAAK,KAAK;AAAA,IACnC;AAAA,IACA,MAAM,iBAAiB,KAAK;AAC1B,YAAM,EAAE,sBAAAC,sBAAqB,IAAI,MAAM,OAAO,uBAAa;AAC3D,aAAOA,sBAAqB,GAAG;AAAA,IACjC;AAAA,IACA,MAAM,sBAAsB,KAAK;AAC/B,YAAM,EAAE,2BAAAC,2BAA0B,IAAI,MAAM,OAAO,uBAAa;AAChE,aAAOA,2BAA0B,GAAG;AAAA,IACtC;AAAA,EACF;AACF;;;AChCA,SAAS,mBAAmB,UAAU,sBAAsB,WAAW,0BAAiI;","names":["issueAttestationCore","revokeDocCore","unrevokeDocCore","getRevokedDocIdsCore","publishRevocationListCore"]}
+{"version":3,"sources":["../../src/with-audit/attestation/active.ts","../../src/with-audit/attestation/index.ts"],"sourcesContent":["import { AttestationError } from '../../kernel/errors.js'\nimport type { AttestationStrategy } from './strategy.js'\n\n/**\n * Enable the attestation capability.\n * Pass to `createNoydb({ attestationStrategy: withAttestation() })` to make the\n * vault's `issueAttestation` / `getDocumentSigningPublicKey` / `revokeAttestation`\n * / `unrevokeAttestation` / `getRevokedDocIds` / `publishRevocationList` methods\n * live. The issue/revoke/signer engines are dynamically imported here, so they\n * stay out of the floor bundle until opted in.\n */\nexport function withAttestation(): AttestationStrategy {\n  return {\n    async issueAttestation(ctx, args) {\n      const { issueAttestationCore } = await import('./issue.js')\n      return issueAttestationCore(ctx, args)\n    },\n    async getDocumentSigningPublicKey(deps) {\n      const { loadSigner, loadOrCreateSigner } = await import('./signer.js')\n      // Reading an existing public key is open to any role that holds the\n      // _attestations DEK — the public key is not secret. But MINTING the\n      // signer is the firm's identity operation (same rule as issueAttestation):\n      // a non-owner read must not silently create it.\n      const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK)\n      if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 }\n      if (deps.role !== 'owner') {\n        throw new AttestationError(`getDocumentSigningPublicKey: no document-signing key exists yet; only the 'owner' may mint it. Caller is '${deps.role}'. Have the owner issue an attestation (or call this) first.`)\n      }\n      const signer = await loadOrCreateSigner(deps.adapter, deps.vault, deps.getDEK)\n      return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 }\n    },\n    async revokeAttestation(ctx, docId) {\n      const { revokeDocCore } = await import('./revoke.js')\n      return revokeDocCore(ctx, docId)\n    },\n    async unrevokeAttestation(ctx, docId) {\n      const { unrevokeDocCore } = await import('./revoke.js')\n      return unrevokeDocCore(ctx, docId)\n    },\n    async getRevokedDocIds(ctx) {\n      const { getRevokedDocIdsCore } = await import('./revoke.js')\n      return getRevokedDocIdsCore(ctx)\n    },\n    async publishRevocationList(ctx) {\n      const { publishRevocationListCore } = await import('./revoke.js')\n      return publishRevocationListCore(ctx)\n    },\n  }\n}\n","/**\n * @category capability\n * Document attestation — issue side. Mint a signed, per-field commitment\n * for a record and emit a QR credential verifiable offline via\n * `@noy-db/attestation`. See design-history/2026-05-29-attestation-core-and-issue-design.md.\n */\nexport { withAttestation } from './active.js'\nexport { NO_ATTESTATION, type AttestationStrategy } from './strategy.js'\nexport { AttestationNotEnabledError } from '../../kernel/errors.js'\nexport { issueAttestationCore } from './issue.js'\nexport type { IssueContext, IssueArgs, IssueResult } from './issue.js'\nexport { ATTESTATIONS_COLLECTION } from './signer.js'\nexport { revokeDocCore, unrevokeDocCore, getRevokedDocIdsCore, publishRevocationListCore } from './revoke.js'\nexport type { RevokeContext } from './revoke.js'\nexport { AttestationError } from '../../kernel/errors.js'\n// Re-export the pure verifier surface so consumers can verify from one import:\nexport { verifyAttestation, decodeQr, verifyRevocationList, isRevoked, signRevocationList, type QrPayload, type AttestationFieldSchema, type VerifyResult, type VerifyInput, type RevocationList } from '@noy-db/attestation'\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWO,SAAS,kBAAuC;AACrD,SAAO;AAAA,IACL,MAAM,iBAAiB,KAAK,MAAM;AAChC,YAAM,EAAE,sBAAAA,sBAAqB,IAAI,MAAM,OAAO,sBAAY;AAC1D,aAAOA,sBAAqB,KAAK,IAAI;AAAA,IACvC;AAAA,IACA,MAAM,4BAA4B,MAAM;AACtC,YAAM,EAAE,YAAY,mBAAmB,IAAI,MAAM,OAAO,uBAAa;AAKrE,YAAM,WAAW,MAAM,WAAW,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM;AACvE,UAAI,SAAU,QAAO,EAAE,OAAO,SAAS,OAAO,cAAc,SAAS,aAAa;AAClF,UAAI,KAAK,SAAS,SAAS;AACzB,cAAM,IAAI,iBAAiB,6GAA6G,KAAK,IAAI,8DAA8D;AAAA,MACjN;AACA,YAAM,SAAS,MAAM,mBAAmB,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM;AAC7E,aAAO,EAAE,OAAO,OAAO,OAAO,cAAc,OAAO,aAAa;AAAA,IAClE;AAAA,IACA,MAAM,kBAAkB,KAAK,OAAO;AAClC,YAAM,EAAE,eAAAC,eAAc,IAAI,MAAM,OAAO,uBAAa;AACpD,aAAOA,eAAc,KAAK,KAAK;AAAA,IACjC;AAAA,IACA,MAAM,oBAAoB,KAAK,OAAO;AACpC,YAAM,EAAE,iBAAAC,iBAAgB,IAAI,MAAM,OAAO,uBAAa;AACtD,aAAOA,iBAAgB,KAAK,KAAK;AAAA,IACnC;AAAA,IACA,MAAM,iBAAiB,KAAK;AAC1B,YAAM,EAAE,sBAAAC,sBAAqB,IAAI,MAAM,OAAO,uBAAa;AAC3D,aAAOA,sBAAqB,GAAG;AAAA,IACjC;AAAA,IACA,MAAM,sBAAsB,KAAK;AAC/B,YAAM,EAAE,2BAAAC,2BAA0B,IAAI,MAAM,OAAO,uBAAa;AAChE,aAAOA,2BAA0B,GAAG;AAAA,IACtC;AAAA,EACF;AACF;;;AChCA,SAAS,mBAAmB,UAAU,sBAAsB,WAAW,0BAAiI;","names":["issueAttestationCore","revokeDocCore","unrevokeDocCore","getRevokedDocIdsCore","publishRevocationListCore"]}

package/dist/{backup-GAYWQAFN.js → backup-KULFZ2T4.js}

@@ -3,16 +3,16 @@ import {
 } from "./chunk-EPFF7LOX.js";
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-V5C5NNBR.js";
+} from "./chunk-CDB2HVQW.js";
 import {
   SEQUENCE_COLLECTION
-} from "./chunk-NQCNSVGI.js";
+} from "./chunk-7MNBICB5.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-FY343IZR.js";
-import "./chunk-NQRJ5AJO.js";
+import "./chunk-3URQC7EH.js";
+import "./chunk-7H73RIE3.js";
 import "./chunk-HXGUIPQB.js";
 import "./chunk-AR2JDFAE.js";
 import "./chunk-747LRSOO.js";
@@ -20,7 +20,7 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-VCETL77O.js";
 import {
   NOYDB_BACKUP_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 import {
   BackupCorruptedError,
   BackupLedgerError
@@ -244,4 +244,4 @@ export {
   loadVault,
   verifyBackupIntegrity
 };
-//# sourceMappingURL=backup-GAYWQAFN.js.map
+//# sourceMappingURL=backup-KULFZ2T4.js.map

package/dist/blobs/index.js

@@ -16,7 +16,7 @@ import {
   detectMimeType,
   isPreCompressed,
   memoryBlobPinStore
-} from "../chunk-VBY6ZLJT.js";
+} from "../chunk-PL2GHSCM.js";
 import {
   BLOB_EVICTION_AUDIT_COLLECTION,
   EXPORT_AUDIT_COLLECTION,
@@ -24,18 +24,18 @@ import {
   NO_BLOBS,
   createExportBlobsHandle,
   runCompaction
-} from "../chunk-P7NGLLUF.js";
+} from "../chunk-WASHZV34.js";
 import "../chunk-UHXCLPGC.js";
 import "../chunk-AHLJSVRL.js";
 import "../chunk-3FSX6LDG.js";
-import "../chunk-FY343IZR.js";
-import "../chunk-NQRJ5AJO.js";
+import "../chunk-3URQC7EH.js";
+import "../chunk-7H73RIE3.js";
 import "../chunk-HXGUIPQB.js";
 import "../chunk-AR2JDFAE.js";
 import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-VCETL77O.js";
-import "../chunk-24ZLWWEO.js";
+import "../chunk-YPYHVOXP.js";
 import {
   BlobOfflineError
 } from "../chunk-HNGSV2YC.js";

package/dist/broker/index.js

@@ -4,14 +4,14 @@ import {
 import {
   issueChallenge,
   verifyBrokerProof
-} from "../chunk-FY343IZR.js";
-import "../chunk-NQRJ5AJO.js";
+} from "../chunk-3URQC7EH.js";
+import "../chunk-7H73RIE3.js";
 import "../chunk-HXGUIPQB.js";
 import "../chunk-AR2JDFAE.js";
 import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-VCETL77O.js";
-import "../chunk-24ZLWWEO.js";
+import "../chunk-YPYHVOXP.js";
 import {
   BrokerEnrolmentError,
   BrokerNotEnabledError,
@@ -30,7 +30,7 @@ function withBroker(config) {
   const cache = /* @__PURE__ */ new Map();
   return {
     async enroll(ctx) {
-      const { enrollSeed } = await import("../seed-IRCDGIRK.js");
+      const { enrollSeed } = await import("../seed-NPF3BZGQ.js");
       return enrollSeed({ ...ctx, config });
     },
     async rotate(ctx) {
@@ -39,7 +39,7 @@ function withBroker(config) {
       const inFlight = scoped.map(([, e]) => e.inFlight).filter((p) => p !== void 0);
       await Promise.allSettled(inFlight);
       for (const [key] of scoped) cache.delete(key);
-      const { rotateSeed } = await import("../seed-IRCDGIRK.js");
+      const { rotateSeed } = await import("../seed-NPF3BZGQ.js");
       return rotateSeed({ ...ctx, config });
     },
     credentialSource(ctx, profile) {
@@ -56,7 +56,7 @@ function withBroker(config) {
         const skewMs = config.skewMs ?? DEFAULT_SKEW_MS;
         const capturedEntry = entry;
         const inFlight = (async () => {
-          const { mintStoreCredentials } = await import("../seed-IRCDGIRK.js");
+          const { mintStoreCredentials } = await import("../seed-NPF3BZGQ.js");
           const creds = await mintStoreCredentials({ ...ctx, config }, profile);
           capturedEntry.cached = { creds, validUntil: cacheFloor(creds, skewMs) };
           return creds;

package/dist/{bundle-handle-5OUAI7CV.js → bundle-handle-GFNHT52M.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/bundle-handle.ts
@@ -33,4 +33,4 @@ async function buildBundleHandle(adapter, name) {
 export {
   buildBundleHandle
 };
-//# sourceMappingURL=bundle-handle-5OUAI7CV.js.map
+//# sourceMappingURL=bundle-handle-GFNHT52M.js.map

package/dist/cargo/index.js

@@ -6,20 +6,20 @@ import {
   diffVault,
   unsealDeks,
   withCargo
-} from "../chunk-OMSAULZM.js";
+} from "../chunk-HY6Y2P4Y.js";
 import {
   extractPartition,
   walkClosure
-} from "../chunk-BPTZ4K5L.js";
+} from "../chunk-4GZ6XOVW.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-JEM2IGS3.js";
-import "../chunk-JSRU5W2M.js";
-import "../chunk-4MQDV3HZ.js";
-import "../chunk-VBY6ZLJT.js";
+} from "../chunk-WDDHMAAO.js";
+import "../chunk-FZ6NYJ7L.js";
+import "../chunk-FFDNKRCY.js";
+import "../chunk-PL2GHSCM.js";
 import {
   groupAndReduce,
   reduceRecords
@@ -29,13 +29,13 @@ import {
   isQuorum,
   runDrainBarrier
 } from "../chunk-DG27IUVI.js";
-import "../chunk-MC2LFTQM.js";
-import "../chunk-V5C5NNBR.js";
+import "../chunk-XWX7GL56.js";
+import "../chunk-CDB2HVQW.js";
 import {
   CustodyApi
-} from "../chunk-TLNNHG3A.js";
-import "../chunk-EK7DT5BT.js";
-import "../chunk-CYQOUTMY.js";
+} from "../chunk-XMC2ZTRD.js";
+import "../chunk-4VUPLMZ6.js";
+import "../chunk-2BMRJ6LQ.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
@@ -46,19 +46,19 @@ import {
 } from "../chunk-IGJCYUT5.js";
 import "../chunk-7G6VDWXB.js";
 import "../chunk-UHXCLPGC.js";
-import "../chunk-RLWY6Z44.js";
-import "../chunk-27TCYH6G.js";
+import "../chunk-RW3XKAF3.js";
+import "../chunk-5JY5TSVY.js";
 import "../chunk-AHLJSVRL.js";
 import {
   generateULID
 } from "../chunk-ZJADGNYF.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-ZK4CO2KZ.js";
+import "../chunk-Q6TEJXBX.js";
 import "../chunk-I7FD46FF.js";
 import "../chunk-3FSX6LDG.js";
-import "../chunk-24UICKTB.js";
-import "../chunk-FY343IZR.js";
-import "../chunk-NQRJ5AJO.js";
+import "../chunk-6SAFL5YE.js";
+import "../chunk-3URQC7EH.js";
+import "../chunk-7H73RIE3.js";
 import "../chunk-HXGUIPQB.js";
 import "../chunk-AR2JDFAE.js";
 import "../chunk-747LRSOO.js";
@@ -66,7 +66,7 @@ import "../chunk-LP7BEXCT.js";
 import {
   sha256Hex
 } from "../chunk-VCETL77O.js";
-import "../chunk-24ZLWWEO.js";
+import "../chunk-YPYHVOXP.js";
 import {
   AdoptionStateError,
   CargoNotEnabledError,

package/dist/{chunk-CYQOUTMY.js → chunk-2BMRJ6LQ.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 import {
   ValidationError
 } from "./chunk-HNGSV2YC.js";
@@ -233,4 +233,4 @@ export {
   resolveLocale,
   pickLocale
 };
-//# sourceMappingURL=chunk-CYQOUTMY.js.map
+//# sourceMappingURL=chunk-2BMRJ6LQ.js.map

package/dist/{chunk-HS7HNYBD.js → chunk-2DHSSLOD.js}

@@ -3,22 +3,22 @@ import {
 } from "./chunk-EPFF7LOX.js";
 import {
   loadFence
-} from "./chunk-MVOWXQHN.js";
+} from "./chunk-6BU3L4UE.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema
-} from "./chunk-V5C5NNBR.js";
+} from "./chunk-CDB2HVQW.js";
 import {
   canonicalJson,
   sha256Hex
-} from "./chunk-24UICKTB.js";
+} from "./chunk-6SAFL5YE.js";
 import {
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-FY343IZR.js";
+} from "./chunk-3URQC7EH.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 
 // src/with-shape/manifest/types.ts
 var MANIFEST_SCHEMA_RECORD_ID = "schema";
@@ -88,4 +88,4 @@ export {
   saveSchemaManifest,
   deriveSchemaManifest
 };
-//# sourceMappingURL=chunk-HS7HNYBD.js.map
+//# sourceMappingURL=chunk-2DHSSLOD.js.map

package/dist/{chunk-JH3OHQM4.js → chunk-2Z3NCLNX.js}

@@ -7,24 +7,24 @@ import {
   deriveSchemaManifest,
   loadSchemaManifestEntry,
   saveSchemaManifest
-} from "./chunk-HS7HNYBD.js";
+} from "./chunk-2DHSSLOD.js";
 import {
   MANIFEST_COLLECTION
 } from "./chunk-EPFF7LOX.js";
 import {
   loadFence,
   saveFence
-} from "./chunk-MVOWXQHN.js";
+} from "./chunk-6BU3L4UE.js";
 import {
   derivePersistedSchema
-} from "./chunk-2LGDCNFJ.js";
+} from "./chunk-Z45YRGFO.js";
 import {
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-V5C5NNBR.js";
+} from "./chunk-CDB2HVQW.js";
 import {
   envelopePayloadHash
-} from "./chunk-24UICKTB.js";
+} from "./chunk-6SAFL5YE.js";
 import {
   ManifestConflictError,
   isConflictError
@@ -257,4 +257,4 @@ export {
   persistClassifiedMarker,
   persistSatelliteMarker
 };
-//# sourceMappingURL=chunk-JH3OHQM4.js.map
+//# sourceMappingURL=chunk-2Z3NCLNX.js.map

package/dist/{chunk-NVU7ZMPN.js → chunk-3IXIU6FP.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 
 // src/with-party/policy/storage.ts
 var META_COLLECTION = "_meta";
@@ -39,4 +39,4 @@ export {
   loadVaultPolicy,
   saveVaultPolicy
 };
-//# sourceMappingURL=chunk-NVU7ZMPN.js.map
+//# sourceMappingURL=chunk-3IXIU6FP.js.map

package/dist/{chunk-XBLKM73C.js → chunk-3JVXVJ7L.js}

@@ -294,31 +294,31 @@ function buildBlobFieldEntries(filenamesByField) {
 function withSearch() {
   return {
     async search(ctx, field, query, opts) {
-      const { search } = await import("./collection-facade-AHT7FATG.js");
+      const { search } = await import("./collection-facade-QEJIM6BC.js");
       return search(ctx, field, query, opts);
     },
     async retrieve(ctx, query, opts) {
-      const { retrieve } = await import("./collection-facade-AHT7FATG.js");
+      const { retrieve } = await import("./collection-facade-QEJIM6BC.js");
       return retrieve(ctx, query, opts);
     },
     async similarTo(ctx, vector, opts) {
-      const { similarTo } = await import("./collection-facade-AHT7FATG.js");
+      const { similarTo } = await import("./collection-facade-QEJIM6BC.js");
       return similarTo(ctx, vector, opts);
     },
     async warmIndex(ctx) {
-      const { warmIndex } = await import("./collection-facade-AHT7FATG.js");
+      const { warmIndex } = await import("./collection-facade-QEJIM6BC.js");
       return warmIndex(ctx);
     },
     async flushIndex(ctx) {
-      const { flushIndex } = await import("./collection-facade-AHT7FATG.js");
+      const { flushIndex } = await import("./collection-facade-QEJIM6BC.js");
       return flushIndex(ctx);
     },
     async embedOnWrite(ctx, id, record, version) {
-      const { embedOnWrite } = await import("./collection-facade-AHT7FATG.js");
+      const { embedOnWrite } = await import("./collection-facade-QEJIM6BC.js");
       return embedOnWrite(ctx, id, record, version);
     },
     async rebuildEmbeddings(ctx) {
-      const { rebuildEmbeddings } = await import("./collection-facade-AHT7FATG.js");
+      const { rebuildEmbeddings } = await import("./collection-facade-QEJIM6BC.js");
       return rebuildEmbeddings(ctx);
     }
   };
@@ -364,4 +364,4 @@ export {
   buildBlobFieldEntries,
   withSearch
 };
-//# sourceMappingURL=chunk-XBLKM73C.js.map
+//# sourceMappingURL=chunk-3JVXVJ7L.js.map

package/dist/{chunk-FY343IZR.js → chunk-3URQC7EH.js}

@@ -1,7 +1,7 @@
 import {
   isDeleteMarker,
   isTombstone
-} from "./chunk-NQRJ5AJO.js";
+} from "./chunk-7H73RIE3.js";
 import {
   blindedEqual,
   openVdigPayload,
@@ -36,7 +36,7 @@ import {
 import {
   NOYDB_FORMAT_VERSION,
   SealedHandle
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 import {
   ClassifiedConfigError,
   ClassifiedRotationError,
@@ -1129,4 +1129,4 @@ export {
   issueChallenge,
   verifyBrokerProof
 };
-//# sourceMappingURL=chunk-FY343IZR.js.map
+//# sourceMappingURL=chunk-3URQC7EH.js.map

package/dist/{chunk-BPTZ4K5L.js → chunk-4GZ6XOVW.js}

@@ -5,14 +5,14 @@ import {
   BLOB_INTENT_COLLECTION,
   BLOB_SLOTS_PREFIX,
   BLOB_VERSIONS_PREFIX
-} from "./chunk-VBY6ZLJT.js";
+} from "./chunk-PL2GHSCM.js";
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-V5C5NNBR.js";
+} from "./chunk-CDB2HVQW.js";
 import {
   assembleBundleContainer,
   buildExtractedPartitionWrapper
-} from "./chunk-EK7DT5BT.js";
+} from "./chunk-4VUPLMZ6.js";
 import {
   generateULID
 } from "./chunk-ZJADGNYF.js";
@@ -23,11 +23,11 @@ import {
   canonicalJson,
   envelopePayloadHash,
   hashEntry
-} from "./chunk-24UICKTB.js";
+} from "./chunk-6SAFL5YE.js";
 import {
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-FY343IZR.js";
+} from "./chunk-3URQC7EH.js";
 import {
   bufferToBase64,
   decrypt,
@@ -41,7 +41,7 @@ import {
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 import {
   PartitionExtractionError
 } from "./chunk-HNGSV2YC.js";
@@ -492,4 +492,4 @@ export {
   extractPartition,
   extractPartitionCore
 };
-//# sourceMappingURL=chunk-BPTZ4K5L.js.map
+//# sourceMappingURL=chunk-4GZ6XOVW.js.map

package/dist/{chunk-ROWL352P.js → chunk-4I72F5DF.js}

@@ -1,14 +1,14 @@
 import {
   freezeAndDeleteClosure,
   randomId
-} from "./chunk-JSRU5W2M.js";
+} from "./chunk-FZ6NYJ7L.js";
 import {
   buildAccessibleBundle,
   resolveAccessibleCollections
-} from "./chunk-4MQDV3HZ.js";
+} from "./chunk-FFDNKRCY.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-24ZLWWEO.js";
+} from "./chunk-YPYHVOXP.js";
 import {
   NoydbError
 } from "./chunk-HNGSV2YC.js";
@@ -161,4 +161,4 @@ export {
   approveWithdrawal,
   rejectWithdrawal
 };
-//# sourceMappingURL=chunk-ROWL352P.js.map
+//# sourceMappingURL=chunk-4I72F5DF.js.map

package/dist/{chunk-EK7DT5BT.js → chunk-4VUPLMZ6.js}

@@ -1,6 +1,6 @@
 import {
   pickLocale
-} from "./chunk-CYQOUTMY.js";
+} from "./chunk-2BMRJ6LQ.js";
 import {
   sha256Hex
 } from "./chunk-VCETL77O.js";
@@ -341,6 +341,41 @@ async function verifyRecord(publicKeyB64, sig, payload) {
 }
 
 // src/with-pod/bundle.ts
+var WRITE_POD_OPTION_KEYS = [
+  "compression",
+  "collections",
+  "since",
+  "where",
+  "tierAtMost",
+  "exportSecret",
+  "recipients",
+  "autoCredentials",
+  "sealedCredentials",
+  "autoSecrets",
+  "sealedSecrets",
+  "sign",
+  "engineRange",
+  "unlockMethods",
+  "hasApp",
+  "species",
+  "pointerMode",
+  "redirect"
+];
+var RETIRED_WRITE_POD_OPTIONS = {
+  autoPassphrases: "autoCredentials",
+  sealedPassphrases: "sealedCredentials",
+  exportPassphrase: "exportSecret"
+};
+function assertKnownWritePodOptions(opts) {
+  const known = new Set(WRITE_POD_OPTION_KEYS);
+  for (const [key, value] of Object.entries(opts)) {
+    if (value === void 0 || known.has(key)) continue;
+    const replacement = RETIRED_WRITE_POD_OPTIONS[key];
+    throw new Error(
+      replacement !== void 0 ? `writePod: \`${key}\` was renamed to \`${replacement}\`. Passing the old key would have written a pod without that slot \u2014 see the 0.4.0-pre migration note.` : `writePod: unknown option \`${key}\`. Options are not ignored \u2014 a dropped write option produces a pod that is silently missing something. Known keys: ${WRITE_POD_OPTION_KEYS.join(", ")}.`
+    );
+  }
+}
 function toAutoCredentials(m) {
   return Object.fromEntries(
     Object.entries(m).map(([u, value]) => [u, { kind: "secret", value }])
@@ -777,7 +812,7 @@ async function applySatelliteLivenessFilter(vault, dumpJson) {
   if (!backup.collections || typeof backup.collections !== "object") return dumpJson;
   if (typeof vault._introspectState !== "function") return dumpJson;
   const { adapter, name, getDEK } = vault._introspectState();
-  const { liveBaseIdSetsForBundle } = await import("./dead-filter-U575NGSH.js");
+  const { liveBaseIdSetsForBundle } = await import("./dead-filter-DCB62VWW.js");
   const satLive = await liveBaseIdSetsForBundle(adapter, name, Object.keys(backup.collections), getDEK);
   if (satLive.size === 0) return dumpJson;
   const next = {};
@@ -864,6 +899,7 @@ async function assembleBundleContainer(opts) {
   return concatBytes([prefix, headerBytes, body]);
 }
 async function writePod(vault, opts = {}) {
+  assertKnownWritePodOptions(opts);
   if (opts.exportSecret !== void 0 && opts.recipients !== void 0) {
     throw new Error(
       "writePod: pass either exportSecret or recipients, not both"
@@ -1028,4 +1064,4 @@ export {
   readPod,
   readNoydbBundle
 };
-//# sourceMappingURL=chunk-EK7DT5BT.js.map
+//# sourceMappingURL=chunk-4VUPLMZ6.js.map