@noy-db/hub 0.6.0-pre.13 → 0.6.0-pre.14

package/dist/snapshots/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-fork/snapshots/engine.ts","../../src/with-fork/snapshots/active.ts"],"sourcesContent":["import { writePod, readPod } from '../../with-pod/bundle.js'\nimport { SnapshotNotFoundError } from '../../kernel/errors.js'\nimport type { NoydbPodStore } from '../../kernel/types.js'\nimport type { Vault } from '../../kernel/vault.js'\nimport type { SnapshotMeta, RetentionPolicy, SnapshotIndex } from './strategy.js'\n\nexport class SnapshotEngine {\n  constructor(\n    private readonly store: NoydbPodStore,\n    private readonly retention: RetentionPolicy,\n  ) {}\n\n  private indexKey(vaultName: string): string {\n    return `${vaultName}__index`\n  }\n\n  private snapKey(vaultName: string, n: number): string {\n    return `${vaultName}__snap_${n.toString().padStart(6, '0')}`\n  }\n\n  private autoKey(vaultName: string): string {\n    return `${vaultName}__auto`\n  }\n\n  private async readIndex(\n    vaultName: string,\n  ): Promise<{ index: SnapshotIndex; indexVersion: string | null }> {\n    const result = await this.store.readBundle(this.indexKey(vaultName))\n    if (!result) return { index: { snapshots: [], nextCounter: 1 }, indexVersion: null }\n    const text = new TextDecoder().decode(result.bytes)\n    return { index: JSON.parse(text) as SnapshotIndex, indexVersion: result.version }\n  }\n\n  private async writeIndex(\n    vaultName: string,\n    index: SnapshotIndex,\n    expectedVersion: string | null,\n  ): Promise<void> {\n    const bytes = new TextEncoder().encode(JSON.stringify(index))\n    await this.store.writeBundle(this.indexKey(vaultName), bytes, expectedVersion)\n  }\n\n  async snapshot(\n    vault: Vault,\n    by: string,\n    opts?: { label?: string; note?: string },\n  ): Promise<SnapshotMeta> {\n    const bytes = await writePod(vault, {})\n    const { index, indexVersion } = await this.readIndex(vault.name)\n    const key = this.snapKey(vault.name, index.nextCounter)\n\n    // Write blob first. If the subsequent index write fails, the next snapshot()\n    // call will re-derive the same key (counter not persisted) and overwrite this blob.\n    // This is an accepted v1 trade-off: failure window is narrow and requires a store\n    // error between the two writes. A retry produces a fresh snapshot at the same key.\n    await this.store.writeBundle(key, bytes, null)\n\n    const meta: SnapshotMeta = {\n      version: key,\n      ...(opts?.label !== undefined ? { label: opts.label } : {}),\n      ...(opts?.note !== undefined ? { note: opts.note } : {}),\n      exportedAt: new Date().toISOString(),\n      exportedBy: by,\n      size: bytes.length,\n      integrity: 'verified',\n    }\n\n    const newIndex: SnapshotIndex = {\n      snapshots: [...index.snapshots, meta],\n      nextCounter: index.nextCounter + 1,\n      // Preserve the rolling auto slot — on-demand snapshots never touch it.\n      ...(index.auto ? { auto: index.auto } : {}),\n    }\n    const toDelete = this.applyRetention(newIndex)\n    await this.writeIndex(vault.name, newIndex, indexVersion)\n\n    for (const k of toDelete) {\n      await this.store.deleteBundle(k)\n    }\n\n    return meta\n  }\n\n  /**\n   * Rolling auto-snapshot. Overwrites the single fixed `<vault>__auto` key and\n   * stores its meta in `index.auto`, separate from the immutable `snapshots`\n   * pool — retention never prunes it. Used by the cadence scheduler.\n   */\n  async autoSnapshot(\n    vault: Vault,\n    by: string,\n    opts?: { label?: string; note?: string },\n  ): Promise<SnapshotMeta> {\n    const bytes = await writePod(vault, {})\n    const { index, indexVersion } = await this.readIndex(vault.name)\n    const key = this.autoKey(vault.name)\n\n    // Unconditional overwrite of the rolling slot.\n    await this.store.writeBundle(key, bytes, null)\n\n    const meta: SnapshotMeta = {\n      version: key,\n      label: opts?.label ?? 'auto',\n      ...(opts?.note !== undefined ? { note: opts.note } : {}),\n      exportedAt: new Date().toISOString(),\n      exportedBy: by,\n      size: bytes.length,\n      integrity: 'verified',\n      auto: true,\n    }\n\n    index.auto = meta\n    await this.writeIndex(vault.name, index, indexVersion)\n    return meta\n  }\n\n  async listSnapshots(vaultId: string): Promise<SnapshotMeta[]> {\n    const { index } = await this.readIndex(vaultId)\n    const immutable = [...index.snapshots].reverse()\n    return index.auto ? [index.auto, ...immutable] : immutable\n  }\n\n  async restoreSnapshot(vault: Vault, version: string): Promise<void> {\n    if (!version.startsWith(`${vault.name}__`)) throw new SnapshotNotFoundError(version)\n    const result = await this.store.readBundle(version)\n    if (!result) throw new SnapshotNotFoundError(version)\n    const { dumpJson } = await readPod(result.bytes)\n    await vault.load(dumpJson)\n  }\n\n  /**\n   * Applies the configured retention policy to `index`, mutating `index.snapshots`\n   * in place and returning the blob keys that should be deleted from the store.\n   * Called by `snapshot()` before the index is written.\n   *\n   * @internal — public for direct testing only\n   */\n  applyRetention(index: SnapshotIndex): string[] {\n    const prune = this.retention.prune ?? true\n    if (!prune) return []\n\n    const toDelete: string[] = []\n    let remaining = index.snapshots.slice()\n\n    if (this.retention.keepLast !== undefined && remaining.length > this.retention.keepLast) {\n      const excess = remaining.splice(0, remaining.length - this.retention.keepLast)\n      toDelete.push(...excess.map(m => m.version))\n    }\n\n    if (this.retention.maxAgeDays !== undefined) {\n      const cutoffMs = this.retention.maxAgeDays * 86_400_000\n      const now = Date.now()\n      const fresh = remaining.filter(m => now - new Date(m.exportedAt).getTime() <= cutoffMs)\n      toDelete.push(...remaining.filter(m => !fresh.includes(m)).map(m => m.version))\n      remaining = fresh\n    }\n\n    index.snapshots = remaining\n    return toDelete\n  }\n}\n","import { SnapshotEngine } from './engine.js'\nimport type { SnapshotsStrategy, RetentionPolicy } from './strategy.js'\nimport type { SnapshotPolicy } from './policy.js'\nimport type { NoydbPodStore } from '../../kernel/types.js'\nimport type { Vault } from '../../kernel/vault.js'\n\nexport interface WithSnapshotsOptions {\n  /** Bundle store where snapshot blobs and the sidecar index are written. */\n  store: NoydbPodStore\n  /**\n   * Declarative retention policy. Enforced eagerly after each on-demand `snapshot()`.\n   * Defaults to no retention (all on-demand snapshots kept forever). Never affects\n   * the rolling auto-snapshot.\n   */\n  retention?: RetentionPolicy\n  /**\n   * Automatic-snapshot cadence. Default `mode:'manual'` ⇒ no timers; snapshots\n   * stay on-demand. Set `mode:'debounce'`/`'interval'` to enable auto-snapshots\n   * to the rolling `<vault>__auto` key.\n   */\n  snapshotPolicy?: SnapshotPolicy\n}\n\nexport function withSnapshots(opts: WithSnapshotsOptions): SnapshotsStrategy {\n  const engine = new SnapshotEngine(opts.store, opts.retention ?? {})\n  return {\n    snapshot(vault, by, snapOpts) {\n      return engine.snapshot(vault as Vault, by, snapOpts)\n    },\n    listSnapshots(vaultId) {\n      return engine.listSnapshots(vaultId)\n    },\n    restoreSnapshot(vault, version) {\n      return engine.restoreSnapshot(vault as Vault, version)\n    },\n    autoSnapshot(vault, by, snapOpts) {\n      return engine.autoSnapshot(vault as Vault, by, snapOpts)\n    },\n    ...(opts.snapshotPolicy ? { policy: opts.snapshotPolicy } : {}),\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YACmB,OACA,WACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAGX,SAAS,WAA2B;AAC1C,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEQ,QAAQ,WAAmB,GAAmB;AACpD,WAAO,GAAG,SAAS,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,EAC5D;AAAA,EAEQ,QAAQ,WAA2B;AACzC,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEA,MAAc,UACZ,WACgE;AAChE,UAAM,SAAS,MAAM,KAAK,MAAM,WAAW,KAAK,SAAS,SAAS,CAAC;AACnE,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,KAAK;AACnF,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,OAAO,KAAK;AAClD,WAAO,EAAE,OAAO,KAAK,MAAM,IAAI,GAAoB,cAAc,OAAO,QAAQ;AAAA,EAClF;AAAA,EAEA,MAAc,WACZ,WACA,OACA,iBACe;AACf,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC;AAC5D,UAAM,KAAK,MAAM,YAAY,KAAK,SAAS,SAAS,GAAG,OAAO,eAAe;AAAA,EAC/E;AAAA,EAEA,MAAM,SACJ,OACA,IACA,MACuB;AACvB,UAAM,QAAQ,MAAM,SAAS,OAAO,CAAC,CAAC;AACtC,UAAM,EAAE,OAAO,aAAa,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI;AAC/D,UAAM,MAAM,KAAK,QAAQ,MAAM,MAAM,MAAM,WAAW;AAMtD,UAAM,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI;AAE7C,UAAM,OAAqB;AAAA,MACzB,SAAS;AAAA,MACT,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MACzD,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACtD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,YAAY;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb;AAEA,UAAM,WAA0B;AAAA,MAC9B,WAAW,CAAC,GAAG,MAAM,WAAW,IAAI;AAAA,MACpC,aAAa,MAAM,cAAc;AAAA;AAAA,MAEjC,GAAI,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,IAC3C;AACA,UAAM,WAAW,KAAK,eAAe,QAAQ;AAC7C,UAAM,KAAK,WAAW,MAAM,MAAM,UAAU,YAAY;AAExD,eAAW,KAAK,UAAU;AACxB,YAAM,KAAK,MAAM,aAAa,CAAC;AAAA,IACjC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aACJ,OACA,IACA,MACuB;AACvB,UAAM,QAAQ,MAAM,SAAS,OAAO,CAAC,CAAC;AACtC,UAAM,EAAE,OAAO,aAAa,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI;AAC/D,UAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;AAGnC,UAAM,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI;AAE7C,UAAM,OAAqB;AAAA,MACzB,SAAS;AAAA,MACT,OAAO,MAAM,SAAS;AAAA,MACtB,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACtD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,YAAY;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX,MAAM;AAAA,IACR;AAEA,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,MAAM,MAAM,OAAO,YAAY;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,SAA0C;AAC5D,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,UAAU,OAAO;AAC9C,UAAM,YAAY,CAAC,GAAG,MAAM,SAAS,EAAE,QAAQ;AAC/C,WAAO,MAAM,OAAO,CAAC,MAAM,MAAM,GAAG,SAAS,IAAI;AAAA,EACnD;AAAA,EAEA,MAAM,gBAAgB,OAAc,SAAgC;AAClE,QAAI,CAAC,QAAQ,WAAW,GAAG,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,sBAAsB,OAAO;AACnF,UAAM,SAAS,MAAM,KAAK,MAAM,WAAW,OAAO;AAClD,QAAI,CAAC,OAAQ,OAAM,IAAI,sBAAsB,OAAO;AACpD,UAAM,EAAE,SAAS,IAAI,MAAM,QAAQ,OAAO,KAAK;AAC/C,UAAM,MAAM,KAAK,QAAQ;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,eAAe,OAAgC;AAC7C,UAAM,QAAQ,KAAK,UAAU,SAAS;AACtC,QAAI,CAAC,MAAO,QAAO,CAAC;AAEpB,UAAM,WAAqB,CAAC;AAC5B,QAAI,YAAY,MAAM,UAAU,MAAM;AAEtC,QAAI,KAAK,UAAU,aAAa,UAAa,UAAU,SAAS,KAAK,UAAU,UAAU;AACvF,YAAM,SAAS,UAAU,OAAO,GAAG,UAAU,SAAS,KAAK,UAAU,QAAQ;AAC7E,eAAS,KAAK,GAAG,OAAO,IAAI,OAAK,EAAE,OAAO,CAAC;AAAA,IAC7C;AAEA,QAAI,KAAK,UAAU,eAAe,QAAW;AAC3C,YAAM,WAAW,KAAK,UAAU,aAAa;AAC7C,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,QAAQ,UAAU,OAAO,OAAK,MAAM,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ,KAAK,QAAQ;AACtF,eAAS,KAAK,GAAG,UAAU,OAAO,OAAK,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,OAAK,EAAE,OAAO,CAAC;AAC9E,kBAAY;AAAA,IACd;AAEA,UAAM,YAAY;AAClB,WAAO;AAAA,EACT;AACF;;;ACzIO,SAAS,cAAc,MAA+C;AAC3E,QAAM,SAAS,IAAI,eAAe,KAAK,OAAO,KAAK,aAAa,CAAC,CAAC;AAClE,SAAO;AAAA,IACL,SAAS,OAAO,IAAI,UAAU;AAC5B,aAAO,OAAO,SAAS,OAAgB,IAAI,QAAQ;AAAA,IACrD;AAAA,IACA,cAAc,SAAS;AACrB,aAAO,OAAO,cAAc,OAAO;AAAA,IACrC;AAAA,IACA,gBAAgB,OAAO,SAAS;AAC9B,aAAO,OAAO,gBAAgB,OAAgB,OAAO;AAAA,IACvD;AAAA,IACA,aAAa,OAAO,IAAI,UAAU;AAChC,aAAO,OAAO,aAAa,OAAgB,IAAI,QAAQ;AAAA,IACzD;AAAA,IACA,GAAI,KAAK,iBAAiB,EAAE,QAAQ,KAAK,eAAe,IAAI,CAAC;AAAA,EAC/D;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-fork/snapshots/engine.ts","../../src/with-fork/snapshots/active.ts"],"sourcesContent":["import { writePod, readPod } from '../../with-pod/pod.js'\nimport { SnapshotNotFoundError } from '../../kernel/errors.js'\nimport type { NoydbPodStore } from '../../kernel/types.js'\nimport type { Vault } from '../../kernel/vault.js'\nimport type { SnapshotMeta, RetentionPolicy, SnapshotIndex } from './strategy.js'\n\nexport class SnapshotEngine {\n  constructor(\n    private readonly store: NoydbPodStore,\n    private readonly retention: RetentionPolicy,\n  ) {}\n\n  private indexKey(vaultName: string): string {\n    return `${vaultName}__index`\n  }\n\n  private snapKey(vaultName: string, n: number): string {\n    return `${vaultName}__snap_${n.toString().padStart(6, '0')}`\n  }\n\n  private autoKey(vaultName: string): string {\n    return `${vaultName}__auto`\n  }\n\n  private async readIndex(\n    vaultName: string,\n  ): Promise<{ index: SnapshotIndex; indexVersion: string | null }> {\n    const result = await this.store.readBundle(this.indexKey(vaultName))\n    if (!result) return { index: { snapshots: [], nextCounter: 1 }, indexVersion: null }\n    const text = new TextDecoder().decode(result.bytes)\n    return { index: JSON.parse(text) as SnapshotIndex, indexVersion: result.version }\n  }\n\n  private async writeIndex(\n    vaultName: string,\n    index: SnapshotIndex,\n    expectedVersion: string | null,\n  ): Promise<void> {\n    const bytes = new TextEncoder().encode(JSON.stringify(index))\n    await this.store.writeBundle(this.indexKey(vaultName), bytes, expectedVersion)\n  }\n\n  async snapshot(\n    vault: Vault,\n    by: string,\n    opts?: { label?: string; note?: string },\n  ): Promise<SnapshotMeta> {\n    const bytes = await writePod(vault, {})\n    const { index, indexVersion } = await this.readIndex(vault.name)\n    const key = this.snapKey(vault.name, index.nextCounter)\n\n    // Write blob first. If the subsequent index write fails, the next snapshot()\n    // call will re-derive the same key (counter not persisted) and overwrite this blob.\n    // This is an accepted v1 trade-off: failure window is narrow and requires a store\n    // error between the two writes. A retry produces a fresh snapshot at the same key.\n    await this.store.writeBundle(key, bytes, null)\n\n    const meta: SnapshotMeta = {\n      version: key,\n      ...(opts?.label !== undefined ? { label: opts.label } : {}),\n      ...(opts?.note !== undefined ? { note: opts.note } : {}),\n      exportedAt: new Date().toISOString(),\n      exportedBy: by,\n      size: bytes.length,\n      integrity: 'verified',\n    }\n\n    const newIndex: SnapshotIndex = {\n      snapshots: [...index.snapshots, meta],\n      nextCounter: index.nextCounter + 1,\n      // Preserve the rolling auto slot — on-demand snapshots never touch it.\n      ...(index.auto ? { auto: index.auto } : {}),\n    }\n    const toDelete = this.applyRetention(newIndex)\n    await this.writeIndex(vault.name, newIndex, indexVersion)\n\n    for (const k of toDelete) {\n      await this.store.deleteBundle(k)\n    }\n\n    return meta\n  }\n\n  /**\n   * Rolling auto-snapshot. Overwrites the single fixed `<vault>__auto` key and\n   * stores its meta in `index.auto`, separate from the immutable `snapshots`\n   * pool — retention never prunes it. Used by the cadence scheduler.\n   */\n  async autoSnapshot(\n    vault: Vault,\n    by: string,\n    opts?: { label?: string; note?: string },\n  ): Promise<SnapshotMeta> {\n    const bytes = await writePod(vault, {})\n    const { index, indexVersion } = await this.readIndex(vault.name)\n    const key = this.autoKey(vault.name)\n\n    // Unconditional overwrite of the rolling slot.\n    await this.store.writeBundle(key, bytes, null)\n\n    const meta: SnapshotMeta = {\n      version: key,\n      label: opts?.label ?? 'auto',\n      ...(opts?.note !== undefined ? { note: opts.note } : {}),\n      exportedAt: new Date().toISOString(),\n      exportedBy: by,\n      size: bytes.length,\n      integrity: 'verified',\n      auto: true,\n    }\n\n    index.auto = meta\n    await this.writeIndex(vault.name, index, indexVersion)\n    return meta\n  }\n\n  async listSnapshots(vaultId: string): Promise<SnapshotMeta[]> {\n    const { index } = await this.readIndex(vaultId)\n    const immutable = [...index.snapshots].reverse()\n    return index.auto ? [index.auto, ...immutable] : immutable\n  }\n\n  async restoreSnapshot(vault: Vault, version: string): Promise<void> {\n    if (!version.startsWith(`${vault.name}__`)) throw new SnapshotNotFoundError(version)\n    const result = await this.store.readBundle(version)\n    if (!result) throw new SnapshotNotFoundError(version)\n    const { dumpJson } = await readPod(result.bytes)\n    await vault.load(dumpJson)\n  }\n\n  /**\n   * Applies the configured retention policy to `index`, mutating `index.snapshots`\n   * in place and returning the blob keys that should be deleted from the store.\n   * Called by `snapshot()` before the index is written.\n   *\n   * @internal — public for direct testing only\n   */\n  applyRetention(index: SnapshotIndex): string[] {\n    const prune = this.retention.prune ?? true\n    if (!prune) return []\n\n    const toDelete: string[] = []\n    let remaining = index.snapshots.slice()\n\n    if (this.retention.keepLast !== undefined && remaining.length > this.retention.keepLast) {\n      const excess = remaining.splice(0, remaining.length - this.retention.keepLast)\n      toDelete.push(...excess.map(m => m.version))\n    }\n\n    if (this.retention.maxAgeDays !== undefined) {\n      const cutoffMs = this.retention.maxAgeDays * 86_400_000\n      const now = Date.now()\n      const fresh = remaining.filter(m => now - new Date(m.exportedAt).getTime() <= cutoffMs)\n      toDelete.push(...remaining.filter(m => !fresh.includes(m)).map(m => m.version))\n      remaining = fresh\n    }\n\n    index.snapshots = remaining\n    return toDelete\n  }\n}\n","import { SnapshotEngine } from './engine.js'\nimport type { SnapshotsStrategy, RetentionPolicy } from './strategy.js'\nimport type { SnapshotPolicy } from './policy.js'\nimport type { NoydbPodStore } from '../../kernel/types.js'\nimport type { Vault } from '../../kernel/vault.js'\n\nexport interface WithSnapshotsOptions {\n  /** Bundle store where snapshot blobs and the sidecar index are written. */\n  store: NoydbPodStore\n  /**\n   * Declarative retention policy. Enforced eagerly after each on-demand `snapshot()`.\n   * Defaults to no retention (all on-demand snapshots kept forever). Never affects\n   * the rolling auto-snapshot.\n   */\n  retention?: RetentionPolicy\n  /**\n   * Automatic-snapshot cadence. Default `mode:'manual'` ⇒ no timers; snapshots\n   * stay on-demand. Set `mode:'debounce'`/`'interval'` to enable auto-snapshots\n   * to the rolling `<vault>__auto` key.\n   */\n  snapshotPolicy?: SnapshotPolicy\n}\n\nexport function withSnapshots(opts: WithSnapshotsOptions): SnapshotsStrategy {\n  const engine = new SnapshotEngine(opts.store, opts.retention ?? {})\n  return {\n    snapshot(vault, by, snapOpts) {\n      return engine.snapshot(vault as Vault, by, snapOpts)\n    },\n    listSnapshots(vaultId) {\n      return engine.listSnapshots(vaultId)\n    },\n    restoreSnapshot(vault, version) {\n      return engine.restoreSnapshot(vault as Vault, version)\n    },\n    autoSnapshot(vault, by, snapOpts) {\n      return engine.autoSnapshot(vault as Vault, by, snapOpts)\n    },\n    ...(opts.snapshotPolicy ? { policy: opts.snapshotPolicy } : {}),\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YACmB,OACA,WACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAGX,SAAS,WAA2B;AAC1C,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEQ,QAAQ,WAAmB,GAAmB;AACpD,WAAO,GAAG,SAAS,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,EAC5D;AAAA,EAEQ,QAAQ,WAA2B;AACzC,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEA,MAAc,UACZ,WACgE;AAChE,UAAM,SAAS,MAAM,KAAK,MAAM,WAAW,KAAK,SAAS,SAAS,CAAC;AACnE,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,KAAK;AACnF,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,OAAO,KAAK;AAClD,WAAO,EAAE,OAAO,KAAK,MAAM,IAAI,GAAoB,cAAc,OAAO,QAAQ;AAAA,EAClF;AAAA,EAEA,MAAc,WACZ,WACA,OACA,iBACe;AACf,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC;AAC5D,UAAM,KAAK,MAAM,YAAY,KAAK,SAAS,SAAS,GAAG,OAAO,eAAe;AAAA,EAC/E;AAAA,EAEA,MAAM,SACJ,OACA,IACA,MACuB;AACvB,UAAM,QAAQ,MAAM,SAAS,OAAO,CAAC,CAAC;AACtC,UAAM,EAAE,OAAO,aAAa,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI;AAC/D,UAAM,MAAM,KAAK,QAAQ,MAAM,MAAM,MAAM,WAAW;AAMtD,UAAM,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI;AAE7C,UAAM,OAAqB;AAAA,MACzB,SAAS;AAAA,MACT,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MACzD,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACtD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,YAAY;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,IACb;AAEA,UAAM,WAA0B;AAAA,MAC9B,WAAW,CAAC,GAAG,MAAM,WAAW,IAAI;AAAA,MACpC,aAAa,MAAM,cAAc;AAAA;AAAA,MAEjC,GAAI,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,IAC3C;AACA,UAAM,WAAW,KAAK,eAAe,QAAQ;AAC7C,UAAM,KAAK,WAAW,MAAM,MAAM,UAAU,YAAY;AAExD,eAAW,KAAK,UAAU;AACxB,YAAM,KAAK,MAAM,aAAa,CAAC;AAAA,IACjC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aACJ,OACA,IACA,MACuB;AACvB,UAAM,QAAQ,MAAM,SAAS,OAAO,CAAC,CAAC;AACtC,UAAM,EAAE,OAAO,aAAa,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI;AAC/D,UAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;AAGnC,UAAM,KAAK,MAAM,YAAY,KAAK,OAAO,IAAI;AAE7C,UAAM,OAAqB;AAAA,MACzB,SAAS;AAAA,MACT,OAAO,MAAM,SAAS;AAAA,MACtB,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,MACtD,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,YAAY;AAAA,MACZ,MAAM,MAAM;AAAA,MACZ,WAAW;AAAA,MACX,MAAM;AAAA,IACR;AAEA,UAAM,OAAO;AACb,UAAM,KAAK,WAAW,MAAM,MAAM,OAAO,YAAY;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,SAA0C;AAC5D,UAAM,EAAE,MAAM,IAAI,MAAM,KAAK,UAAU,OAAO;AAC9C,UAAM,YAAY,CAAC,GAAG,MAAM,SAAS,EAAE,QAAQ;AAC/C,WAAO,MAAM,OAAO,CAAC,MAAM,MAAM,GAAG,SAAS,IAAI;AAAA,EACnD;AAAA,EAEA,MAAM,gBAAgB,OAAc,SAAgC;AAClE,QAAI,CAAC,QAAQ,WAAW,GAAG,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,sBAAsB,OAAO;AACnF,UAAM,SAAS,MAAM,KAAK,MAAM,WAAW,OAAO;AAClD,QAAI,CAAC,OAAQ,OAAM,IAAI,sBAAsB,OAAO;AACpD,UAAM,EAAE,SAAS,IAAI,MAAM,QAAQ,OAAO,KAAK;AAC/C,UAAM,MAAM,KAAK,QAAQ;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,eAAe,OAAgC;AAC7C,UAAM,QAAQ,KAAK,UAAU,SAAS;AACtC,QAAI,CAAC,MAAO,QAAO,CAAC;AAEpB,UAAM,WAAqB,CAAC;AAC5B,QAAI,YAAY,MAAM,UAAU,MAAM;AAEtC,QAAI,KAAK,UAAU,aAAa,UAAa,UAAU,SAAS,KAAK,UAAU,UAAU;AACvF,YAAM,SAAS,UAAU,OAAO,GAAG,UAAU,SAAS,KAAK,UAAU,QAAQ;AAC7E,eAAS,KAAK,GAAG,OAAO,IAAI,OAAK,EAAE,OAAO,CAAC;AAAA,IAC7C;AAEA,QAAI,KAAK,UAAU,eAAe,QAAW;AAC3C,YAAM,WAAW,KAAK,UAAU,aAAa;AAC7C,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,QAAQ,UAAU,OAAO,OAAK,MAAM,IAAI,KAAK,EAAE,UAAU,EAAE,QAAQ,KAAK,QAAQ;AACtF,eAAS,KAAK,GAAG,UAAU,OAAO,OAAK,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,OAAK,EAAE,OAAO,CAAC;AAC9E,kBAAY;AAAA,IACd;AAEA,UAAM,YAAY;AAClB,WAAO;AAAA,EACT;AACF;;;ACzIO,SAAS,cAAc,MAA+C;AAC3E,QAAM,SAAS,IAAI,eAAe,KAAK,OAAO,KAAK,aAAa,CAAC,CAAC;AAClE,SAAO;AAAA,IACL,SAAS,OAAO,IAAI,UAAU;AAC5B,aAAO,OAAO,SAAS,OAAgB,IAAI,QAAQ;AAAA,IACrD;AAAA,IACA,cAAc,SAAS;AACrB,aAAO,OAAO,cAAc,OAAO;AAAA,IACrC;AAAA,IACA,gBAAgB,OAAO,SAAS;AAC9B,aAAO,OAAO,gBAAgB,OAAgB,OAAO;AAAA,IACvD;AAAA,IACA,aAAa,OAAO,IAAI,UAAU;AAChC,aAAO,OAAO,aAAa,OAAgB,IAAI,QAAQ;AAAA,IACzD;AAAA,IACA,GAAI,KAAK,iBAAiB,EAAE,QAAQ,KAAK,eAAe,IAAI,CAAC;AAAA,EAC/D;AACF;","names":[]}

package/dist/{stale-O3CZVYMO.js → stale-OT5NMBXU.js}

@@ -6,17 +6,17 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-H3BDH7DA.js";
+} from "./chunk-R7E7X4CQ.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-EZYLQKHP.js";
-import "./chunk-LVLXWIBF.js";
-import "./chunk-YRMA7CJH.js";
-import "./chunk-CUEWN4FX.js";
-import "./chunk-3IJK5FRG.js";
+import "./chunk-ZWPUYBNK.js";
+import "./chunk-IMYGJ5HU.js";
+import "./chunk-FSZPQCDR.js";
+import "./chunk-HVR74IBG.js";
+import "./chunk-RBTZLXZJ.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-WJD5VF2N.js";
-import "./chunk-7GWC6RI5.js";
-import "./chunk-CT35TQV7.js";
+import "./chunk-QTDAPDDV.js";
+import "./chunk-6ZFTVY3O.js";
+import "./chunk-I64WQSN3.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-O3CZVYMO.js.map
+//# sourceMappingURL=stale-OT5NMBXU.js.map

package/dist/storage-EWWIFB43.js

@@ -0,0 +1,23 @@
+import {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+} from "./chunk-CK6Z5DJQ.js";
+import "./chunk-ZWPUYBNK.js";
+import "./chunk-IMYGJ5HU.js";
+import "./chunk-FSZPQCDR.js";
+import "./chunk-HVR74IBG.js";
+import "./chunk-RBTZLXZJ.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-QTDAPDDV.js";
+import "./chunk-6ZFTVY3O.js";
+import "./chunk-I64WQSN3.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+};
+//# sourceMappingURL=storage-EWWIFB43.js.map

package/dist/{store-coordination-provider-RKBDHHN4.js → store-coordination-provider-PPLVM2I2.js}

@@ -1,10 +1,10 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-GGM3JCEG.js";
+} from "./chunk-LBQIKMBH.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-7GWC6RI5.js";
+} from "./chunk-6ZFTVY3O.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -139,4 +139,4 @@ function unref(timer) {
 export {
   StoreCoordinationProvider
 };
-//# sourceMappingURL=store-coordination-provider-RKBDHHN4.js.map
+//# sourceMappingURL=store-coordination-provider-PPLVM2I2.js.map

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-MUE2CQX2.js";
+} from "../chunk-QJYTGH5V.js";
 import {
   NO_SYNC
 } from "../chunk-JN64WH3U.js";
-import "../chunk-P7A2FX5Y.js";
-import "../chunk-EZYLQKHP.js";
-import "../chunk-LVLXWIBF.js";
-import "../chunk-YRMA7CJH.js";
-import "../chunk-CUEWN4FX.js";
-import "../chunk-3IJK5FRG.js";
+import "../chunk-V4M4BZNW.js";
+import "../chunk-ZWPUYBNK.js";
+import "../chunk-IMYGJ5HU.js";
+import "../chunk-FSZPQCDR.js";
+import "../chunk-HVR74IBG.js";
+import "../chunk-RBTZLXZJ.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-WJD5VF2N.js";
-import "../chunk-7GWC6RI5.js";
-import "../chunk-CT35TQV7.js";
+import "../chunk-QTDAPDDV.js";
+import "../chunk-6ZFTVY3O.js";
+import "../chunk-I64WQSN3.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -2,7 +2,7 @@ import {
   MemoryDeviceSealProvider,
   beginEchoUnlock,
   withTeam
-} from "../chunk-45UIDGPY.js";
+} from "../chunk-N6OJLR2M.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,8 +31,8 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-S7UTUFPU.js";
-import "../chunk-NW3PSKAN.js";
+} from "../chunk-LWOSNMHE.js";
+import "../chunk-YZ7BRD26.js";
 import {
   buildEchoBlock,
   buildRecipientKeyringFile,
@@ -53,20 +53,20 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-CFM6GBNF.js";
-import "../chunk-EPUDMBVL.js";
-import "../chunk-37M5QBAS.js";
-import "../chunk-EZYLQKHP.js";
-import "../chunk-LVLXWIBF.js";
-import "../chunk-YRMA7CJH.js";
-import "../chunk-CUEWN4FX.js";
-import "../chunk-3IJK5FRG.js";
+} from "../chunk-Y7MJSOZ7.js";
+import "../chunk-CK7IRIRY.js";
+import "../chunk-YVOW35HH.js";
+import "../chunk-ZWPUYBNK.js";
+import "../chunk-IMYGJ5HU.js";
+import "../chunk-FSZPQCDR.js";
+import "../chunk-HVR74IBG.js";
+import "../chunk-RBTZLXZJ.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-WJD5VF2N.js";
-import "../chunk-7GWC6RI5.js";
+import "../chunk-QTDAPDDV.js";
+import "../chunk-6ZFTVY3O.js";
 import {
   TeamNotEnabledError
-} from "../chunk-CT35TQV7.js";
+} from "../chunk-I64WQSN3.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MemoryDeviceSealProvider,

package/dist/tiers/index.js

@@ -11,19 +11,19 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-PV76W4KB.js";
-import "../chunk-37M5QBAS.js";
-import "../chunk-EZYLQKHP.js";
-import "../chunk-LVLXWIBF.js";
-import "../chunk-YRMA7CJH.js";
-import "../chunk-CUEWN4FX.js";
-import "../chunk-3IJK5FRG.js";
+} from "../chunk-GLS7OSZT.js";
+import "../chunk-YVOW35HH.js";
+import "../chunk-ZWPUYBNK.js";
+import "../chunk-IMYGJ5HU.js";
+import "../chunk-FSZPQCDR.js";
+import "../chunk-HVR74IBG.js";
+import "../chunk-RBTZLXZJ.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-WJD5VF2N.js";
-import "../chunk-7GWC6RI5.js";
+import "../chunk-QTDAPDDV.js";
+import "../chunk-6ZFTVY3O.js";
 import {
   TiersNotEnabledError
-} from "../chunk-CT35TQV7.js";
+} from "../chunk-I64WQSN3.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -5,7 +5,7 @@ import {
   PodVersionConflictError,
   StoreCapabilityError,
   UnknownStoreKindError
-} from "../chunk-CT35TQV7.js";
+} from "../chunk-I64WQSN3.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/port/to/locator.ts

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-FWZ7WYAH.js";
+} from "../chunk-4444HN72.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
-import "../chunk-ZJADGNYF.js";
-import "../chunk-CT35TQV7.js";
+import "../chunk-4AOERLTV.js";
+import "../chunk-I64WQSN3.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-VOD4C6ZA.js"));
+var loadGuardExecutor = lazy(() => import("../executor-WFTHIDT7.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/{ulid-PTAIMDG4.js → ulid-VQW6ERQN.js}

@@ -1,10 +1,10 @@
 import {
   generateULID,
   isULID
-} from "./chunk-ZJADGNYF.js";
+} from "./chunk-4AOERLTV.js";
 import "./chunk-PZ5AY32C.js";
 export {
   generateULID,
   isULID
 };
-//# sourceMappingURL=ulid-PTAIMDG4.js.map
+//# sourceMappingURL=ulid-VQW6ERQN.js.map

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-CT35TQV7.js";
+} from "../chunk-I64WQSN3.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/{verify-GB7SBYC3.js → verify-SHJXGZGM.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-YRMA7CJH.js";
+} from "./chunk-FSZPQCDR.js";
 import {
   dualReadSealedSlot
-} from "./chunk-CUEWN4FX.js";
+} from "./chunk-HVR74IBG.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-WJD5VF2N.js";
+} from "./chunk-QTDAPDDV.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-CT35TQV7.js";
+} from "./chunk-I64WQSN3.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-GB7SBYC3.js.map
+//# sourceMappingURL=verify-SHJXGZGM.js.map

package/dist/walk-4NIT2ZBH.js

@@ -0,0 +1,21 @@
+import {
+  dumpVaultSchema
+} from "./chunk-KTCQKXHW.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-HNOBRU24.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-CK6Z5DJQ.js";
+import "./chunk-ZWPUYBNK.js";
+import "./chunk-IMYGJ5HU.js";
+import "./chunk-FSZPQCDR.js";
+import "./chunk-HVR74IBG.js";
+import "./chunk-RBTZLXZJ.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-QTDAPDDV.js";
+import "./chunk-6ZFTVY3O.js";
+import "./chunk-I64WQSN3.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-4NIT2ZBH.js.map

package/dist/with-cargo/adopt-partition.d.ts

@@ -12,7 +12,7 @@ import type { NoydbStore } from '../kernel/types.js';
 import type { SealingKeyProvider } from '../with-party/team/managed-secret.js';
 import type { ShamirRecoveryProvider } from '../with-party/team/shamir-recovery-provider.js';
 import type { RecoveryEnrollmentInput } from '../with-party/team/rotate-recover.js';
-import type { TransferSealPayload } from '../with-pod/bundle.js';
+import type { TransferSealPayload } from '../with-pod/pod.js';
 /**
  * Reverse of `sealDeks`. Imports the transfer key, decrypts the
  * sealed `{ collection: base64(rawDEK) }` map (layout iv(12)‖ct‖tag), and

package/dist/with-cargo/extract-partition.d.ts

@@ -10,7 +10,7 @@ import type { Vault } from '../kernel/vault.js';
 import type { EncryptedEnvelope } from '../kernel/types.js';
 import { type EnclaveKey } from '../kernel/enclave/index.js';
 import { type WalkClosureOptions, type DanglingRefNotice } from './walk-closure.js';
-import { type TransferSealPayload } from '../with-pod/bundle.js';
+import { type TransferSealPayload } from '../with-pod/pod.js';
 /** Re-keyed collections snapshot + the fresh DEKs used. */
 export interface ReKeyResult {
     readonly collections: Record<string, Record<string, EncryptedEnvelope>>;

package/dist/with-cargo/index.d.ts

@@ -43,4 +43,4 @@ export type { WriteConflict } from '../kernel/types.js';
 export type { AccessibleVault } from '../kernel/types.js';
 export type { Unsubscribe } from '../kernel/types.js';
 export type { ExtractPartitionOptions } from './extract-partition.js';
-export type { TransferSealPayload } from '../with-pod/bundle.js';
+export type { TransferSealPayload } from '../with-pod/pod.js';

package/dist/with-party/team/index.d.ts

@@ -17,7 +17,7 @@ export { NO_TEAM, type TeamStrategy } from './strategy.js';
 export { TeamNotEnabledError } from '../../kernel/errors.js';
 export type { UnlockedKeyring } from './keyring.js';
 export { loadKeyring, createOwnerKeyring, grant, revoke, changeSecret, listUsers, listUsersWithEnvelopes, ensureCollectionDEK, persistKeyring, updateKeyringIdentity, buildRecipientKeyringFile, } from './keyring.js';
-export type { BundleRecipient, ListUsersOptions } from './keyring.js';
+export type { PodRecipient, ListUsersOptions } from './keyring.js';
 export type { LoadKeyringOptions, CreateOwnerKeyringOptions, RotateKeysOptions, ChangeSecretOptions, } from './keyring.js';
 export { enrollAuthenticator, removeAuthenticator, updateAuthenticator, findAuthenticator, } from './authenticators.js';
 export type { EnrollAuthenticatorOptions, EnrollAuthenticatorWrappingKEKOptions, EnrollAuthenticatorWrappingDEKsOptions, UpdateAuthenticatorOptions, } from './authenticators.js';

package/dist/with-party/team/keyring.d.ts

@@ -261,7 +261,7 @@ export interface EchoRecipientSecret extends EchoSecretParts {
  *
  * @public
  */
-export interface BundleRecipient {
+export interface PodRecipient {
     /** User id stamped onto the keyring file in the bundle. */
     readonly id: string;
     /** Optional display name. Defaults to `id`. */
@@ -312,7 +312,7 @@ export interface BundleRecipient {
  *
  * @internal
  */
-export declare function buildRecipientKeyringFile(callerKeyring: UnlockedKeyring, recipient: BundleRecipient): Promise<KeyringFile>;
+export declare function buildRecipientKeyringFile(callerKeyring: UnlockedKeyring, recipient: PodRecipient): Promise<KeyringFile>;
 /** List all users with access to a vault. */
 export declare function listUsers(store: NoydbStore, vault: string): Promise<UserInfo[]>;
 /**

package/dist/with-pod/format.d.ts

@@ -47,14 +47,14 @@
  */
 import type { Cover } from '../with-party/directory/cover/types.js';
 import type { Redirect } from './redirect.js';
-/** Magic bytes 'NDB1' (ASCII), identifying a NOYDB bundle. */
-export declare const NOYDB_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
+/** Magic bytes 'NDB1' (ASCII) — `NoyDB 1` — identifying a NOYDB pod (`.noydb` container). */
+export declare const NOYDB_POD_MAGIC: Uint8Array<ArrayBuffer>;
 /** Total fixed prefix before the header JSON: 4+1+1+4 bytes. */
-export declare const NOYDB_BUNDLE_PREFIX_BYTES = 10;
+export declare const NOYDB_POD_PREFIX_BYTES = 10;
 /** Current bundle format version. Bumped on layout changes. Default for unsigned pods. */
-export declare const NOYDB_BUNDLE_FORMAT_VERSION = 1;
+export declare const NOYDB_POD_FORMAT_VERSION = 1;
 /** Format version for pods carrying a header signature (`sig`/`keyId`/`sigAlg`). */
-export declare const NOYDB_BUNDLE_FORMAT_VERSION_SIGNED = 2;
+export declare const NOYDB_POD_FORMAT_VERSION_SIGNED = 2;
 /**
  * Bitfield interpretation of the flags byte.
  *
@@ -85,7 +85,7 @@ export type CompressionAlgo = 0 | 1 | 2;
  *
  * **Minimum-disclosure rules:** these are the ONLY allowed keys.
  * Any other key in a parsed header causes
- * `validateBundleHeader` to throw. The set is kept short to
+ * `validatePodHeaderFields` to throw. The set is kept short to
  * minimize attack surface from cloud-storage metadata indexing —
  * see the file-level doc comment for the rationale.
  *
@@ -264,18 +264,18 @@ export type UnlockMethod = 'password' | 'webauthn' | 'oidc' | 'totp' | 'email-ot
  * The error messages name the offending field so consumers can
  * fix the producer rather than the reader.
  */
-export declare function validateBundleHeader(parsed: unknown): asserts parsed is NoydbPodHeader;
+export declare function validatePodHeaderFields(parsed: unknown): asserts parsed is NoydbPodHeader;
 /**
  * Encode a header object to UTF-8 JSON bytes after validating
  * minimum disclosure. Used by the writer to serialize the header
  * region of the container.
  */
-export declare function encodeBundleHeader(header: NoydbPodHeader): Uint8Array;
+export declare function encodePodHeader(header: NoydbPodHeader): Uint8Array;
 /**
  * Parse a bundle header from its UTF-8 JSON bytes. Throws on
  * invalid JSON or any minimum-disclosure violation.
  */
-export declare function decodeBundleHeader(bytes: Uint8Array): NoydbPodHeader;
+export declare function decodePodHeader(bytes: Uint8Array): NoydbPodHeader;
 /**
  * Read a uint32 from `bytes` at `offset` in big-endian byte order.
  * No bounds check — callers must guarantee `offset + 4 <= bytes.length`.
@@ -293,4 +293,4 @@ export declare function writeUint32BE(bytes: Uint8Array, offset: number, value:
  * 4 bytes match `NDB1`. Used by readers as a fast file-type check
  * before any further parsing.
  */
-export declare function hasNoydbBundleMagic(bytes: Uint8Array): boolean;
+export declare function hasNoydbPodMagic(bytes: Uint8Array): boolean;

package/dist/with-pod/index.d.ts

@@ -11,19 +11,19 @@
  * omit this subpath and save ~805 LOC of format code + Brotli/gzip
  * wiring.
  */
-export { writePod, readPod, readPodHeader, readPodCover, resetBrotliSupportCache, } from './bundle.js';
+export { writePod, readPod, readPodHeader, readPodCover, resetBrotliSupportCache, } from './pod.js';
 export type { Cover } from '../with-party/directory/cover/types.js';
-export type { WritePodOptions, ReadPodOptions, PodReadResult, } from './bundle.js';
-export { verifyPodHeader } from './bundle.js';
-export type { PodVerifyResult } from './bundle.js';
+export type { WritePodOptions, ReadPodOptions, PodReadResult, } from './pod.js';
+export { verifyPodHeader } from './pod.js';
+export type { PodVerifyResult } from './pod.js';
 export { signRecord, verifyRecord, signedBytes, POD_SIG_ALG } from './signature.js';
-export { NOYDB_BUNDLE_MAGIC, NOYDB_BUNDLE_PREFIX_BYTES, NOYDB_BUNDLE_FORMAT_VERSION, FLAG_COMPRESSED, FLAG_HAS_INTEGRITY_HASH, COMPRESSION_NONE, COMPRESSION_GZIP, COMPRESSION_BROTLI, validateBundleHeader, encodeBundleHeader, hasNoydbBundleMagic, } from './format.js';
+export { NOYDB_POD_MAGIC, NOYDB_POD_PREFIX_BYTES, NOYDB_POD_FORMAT_VERSION, FLAG_COMPRESSED, FLAG_HAS_INTEGRITY_HASH, COMPRESSION_NONE, COMPRESSION_GZIP, COMPRESSION_BROTLI, validatePodHeaderFields, encodePodHeader, hasNoydbPodMagic, } from './format.js';
 export type { CompressionAlgo, NoydbPodHeader, UnlockMethod, } from './format.js';
 export { generateULID, isULID } from './ulid.js';
 export { wrapPodStore, createPodStore } from './pod-store.js';
 export type { WrappedPodNoydbStore, WrapPodStoreOptions, } from './pod-store.js';
-export { BundleIntegrityError, BundleSealMismatchError, PodVersionConflictError, BackupLedgerError, BackupCorruptedError, } from '../kernel/errors.js';
-export { readPodRedirect } from './bundle.js';
+export { PodIntegrityError, PodSealMismatchError, PodVersionConflictError, BackupLedgerError, BackupCorruptedError, } from '../kernel/errors.js';
+export { readPodRedirect } from './pod.js';
 export { signRedirect, verifyRedirect, followRedirects } from './redirect.js';
 export type { Redirect, RedirectHop, FollowRedirectsResult } from './redirect.js';
 export type { DocSigner } from '../with-audit/attestation/signer.js';

package/dist/with-pod/open.d.ts

@@ -6,7 +6,7 @@
  * reachable through published seams). Composes, in order:
  *
  *   1. `readPod` — parse + integrity-check the container (throws
- *      `BundleIntegrityError` on a corrupted/truncated pod).
+ *      `PodIntegrityError` on a corrupted/truncated pod).
  *   2. `verifyPodHeader` — only when `opts.trustedKeys` is supplied.
  *      `'unsigned'` is benign (legacy pod, or `writePod({ sign: false })`)
  *      and open() proceeds; `'untrusted'` / `'tampered'` are fail-closed —
@@ -63,7 +63,7 @@
  * @module
  */
 import type { NoydbPodHeader } from './format.js';
-import type { PodVerifyResult } from './bundle.js';
+import type { PodVerifyResult } from './pod.js';
 import type { Noydb } from '../kernel/noydb.js';
 import type { Vault } from '../kernel/vault.js';
 import type { NoydbOptions, NoydbStore, EchoSecretParts } from '../kernel/types.js';

package/dist/with-pod/{bundle-handle.d.ts → pod-handle.d.ts}

@@ -3,7 +3,7 @@ import type { NoydbStore } from '../kernel/types.js';
  * Return the stable opaque bundle handle for the given vault adapter,
  * generating and persisting a fresh ULID on first call.
  *
- * See {@link import('../kernel/vault.js').Vault.getBundleHandle} for
+ * See {@link import('../kernel/vault.js').Vault.getPodHandle} for
  * the full rationale and storage-path documentation.
  */
-export declare function buildBundleHandle(adapter: NoydbStore, name: string): Promise<string>;
+export declare function buildPodHandle(adapter: NoydbStore, name: string): Promise<string>;

package/dist/with-pod/{bundle.d.ts → pod.d.ts}

@@ -36,7 +36,7 @@ import { type NoydbPodHeader, type UnlockMethod } from './format.js';
 import type { Redirect } from './redirect.js';
 import type { DocSigner } from '../with-audit/attestation/signer.js';
 import type { Vault } from '../kernel/vault.js';
-import type { BundleRecipient } from '../with-party/team/keyring.js';
+import type { PodRecipient } from '../with-party/team/keyring.js';
 import type { Cover } from '../with-party/directory/cover/types.js';
 import type { SealingKeyProvider, RecipientSealer, RecipientHint } from '../with-party/team/managed-secret.js';
 /**
@@ -128,7 +128,7 @@ export interface WritePodOptions {
      * the bundle inherits the source keyring as-is (today's behaviour,
      * suited to personal backup-and-restore).
      */
-    readonly recipients?: readonly BundleRecipient[];
+    readonly recipients?: readonly PodRecipient[];
     /**
      * Auto-unlock — unsealed per-user credentials.
      *
@@ -371,7 +371,7 @@ export declare function resetBrotliSupportCache(): void;
  *
  * Pipeline:
  *   1. Resolve or create the compartment's stable bundle handle
- *      via `vault.getBundleHandle()` — same handle on
+ *      via `vault.getPodHandle()` — same handle on
  *      every export from the same vault instance, so cloud
  *      adapters can use it as a primary key.
  *   2. `vault.dump()` → JSON string with encrypted records
@@ -396,7 +396,7 @@ export declare function resetBrotliSupportCache(): void;
  *
  * @internal
  */
-export declare function assembleBundleContainer(opts: {
+export declare function assemblePodContainer(opts: {
     handle: string;
     bodyJsonStr: string;
     compression: WritePodOptions['compression'];
@@ -451,7 +451,7 @@ export interface PodVerifyResult {
  * (`keyId → publicKeyB64` the caller already trusts), it reports whether the
  * header was signed by a trusted document signer.
  *
- * Pairs with the signing half in `assembleBundleContainer`/`writePod`: the
+ * Pairs with the signing half in `assemblePodContainer`/`writePod`: the
  * signed payload is the final wire header with `sig` removed, so verification
  * reconstructs it by stripping EXACTLY the `sig` field — `keyId`, `sigAlg`,
  * and every other header field stay in the verified payload.
@@ -463,7 +463,7 @@ export interface PodVerifyResult {
  * header (which includes the *claimed* `bodySha256`) is signed by a trusted
  * key; it does NOT prove the body matches that hash. To trust the pod's
  * BODY you MUST also confirm the body hashes to `header.bodySha256` — call
- * `readPod`, which throws `BundleIntegrityError` on mismatch. A `verified`
+ * `readPod`, which throws `PodIntegrityError` on mismatch. A `verified`
  * header paired with a swapped body is caught only by that integrity check.
  * This function stays body-free by design so a static page can authenticate a
  * header without decompressing the body; composing the two checks is the
@@ -492,7 +492,7 @@ export declare function readPodCover(bytes: Uint8Array, opts?: {
  * the header's `redirect` field or `undefined` if the bundle was written
  * without one.
  *
- * The record is returned UNVERIFIED: `validateBundleHeader` only checks
+ * The record is returned UNVERIFIED: `validatePodHeaderFields` only checks
  * its shape at parse time (a parser has no `trustedKeys`). Callers that
  * intend to follow the redirect MUST separately call `verifyRedirect`
  * (`redirect.js`) before trusting `target`.
@@ -504,7 +504,7 @@ export declare function readPodRedirect(bytes: Uint8Array): Redirect | undefined
  * original `vault.dump()` JSON string ready to pass to
  * `vault.load()`.
  *
- * Throws `BundleIntegrityError` if the body's actual SHA-256 does
+ * Throws `PodIntegrityError` if the body's actual SHA-256 does
  * not match the value declared in the header. Distinct from a
  * format error so consumers can pattern-match in catch blocks
  * (corrupted-in-transit vs malformed-by-producer).

package/dist/with-pod/ulid.d.ts

@@ -39,7 +39,7 @@
  *
  * If a future use case needs timestamp-free handles, a v2 of the
  * format could specify "use the random portion only" without a
- * format break — `validateBundleHeader` only checks the regex
+ * format break — `validatePodHeaderFields` only checks the regex
  * shape, not the encoded timestamp.
  */
 /**