@noy-db/hub 0.6.0-pre.13 → 0.6.0-pre.15

package/dist/{chunk-MSCXCF4T.js → chunk-FBG62BUQ.js}

@@ -1,21 +1,21 @@
 import {
   liveRecordIsElevated
-} from "./chunk-C5N3ZWGJ.js";
+} from "./chunk-AMKCY454.js";
 import {
   isRewrappedUnder,
   openEnvelopeJson,
   rewrapEnvelope
-} from "./chunk-EZYLQKHP.js";
+} from "./chunk-PWJSO7HH.js";
 import {
   isTombstone,
   isTombstoneShape
-} from "./chunk-LVLXWIBF.js";
+} from "./chunk-P3AFV6EA.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-7GWC6RI5.js";
+} from "./chunk-SFY6NT7D.js";
 import {
   ReadOnlyAtInstantError
-} from "./chunk-CT35TQV7.js";
+} from "./chunk-I64WQSN3.js";
 
 // src/with-commit/history/history.ts
 var HISTORY_COLLECTION = "_history";
@@ -330,4 +330,4 @@ export {
   VaultInstant,
   CollectionInstant
 };
-//# sourceMappingURL=chunk-MSCXCF4T.js.map
+//# sourceMappingURL=chunk-FBG62BUQ.js.map

package/dist/{chunk-DMRDPZQ7.js → chunk-FINIMZ55.js}

@@ -1,12 +1,12 @@
 import {
   openEnvelopeJson
-} from "./chunk-EZYLQKHP.js";
+} from "./chunk-PWJSO7HH.js";
 import {
   encrypt
-} from "./chunk-WJD5VF2N.js";
+} from "./chunk-QTDAPDDV.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-7GWC6RI5.js";
+} from "./chunk-SFY6NT7D.js";
 
 // src/with-shape/persisted-schemas/storage.ts
 var SCHEMAS_COLLECTION = "_schemas";
@@ -46,4 +46,4 @@ export {
   loadPersistedSchema,
   savePersistedSchema
 };
-//# sourceMappingURL=chunk-DMRDPZQ7.js.map
+//# sourceMappingURL=chunk-FINIMZ55.js.map

package/dist/{chunk-YRMA7CJH.js → chunk-FSZPQCDR.js}

@@ -2,10 +2,10 @@ import {
   base64ToBuffer,
   decryptBytesWithAAD,
   encryptBytesWithAAD
-} from "./chunk-WJD5VF2N.js";
+} from "./chunk-QTDAPDDV.js";
 import {
   TamperedError
-} from "./chunk-CT35TQV7.js";
+} from "./chunk-I64WQSN3.js";
 
 // src/kernel/enclave/classify/compare.ts
 var subtle = globalThis.crypto.subtle;
@@ -92,4 +92,4 @@ export {
   openVdigPayload,
   evaluateKofN
 };
-//# sourceMappingURL=chunk-YRMA7CJH.js.map
+//# sourceMappingURL=chunk-FSZPQCDR.js.map

package/dist/{chunk-2KHT6EP3.js → chunk-GWJNBTZA.js}

@@ -4,10 +4,10 @@ import {
   persistUserVisibility,
   readUserVisibility,
   saveUserEnvelope
-} from "./chunk-EPUDMBVL.js";
+} from "./chunk-PNEV2TBR.js";
 import {
   PolicyDeniedError
-} from "./chunk-CT35TQV7.js";
+} from "./chunk-I64WQSN3.js";
 
 // src/with-party/directory/user-envelope/api.ts
 var UserApi = class {
@@ -379,4 +379,4 @@ export {
   UserApi,
   createUserApi
 };
-//# sourceMappingURL=chunk-2KHT6EP3.js.map
+//# sourceMappingURL=chunk-GWJNBTZA.js.map

package/dist/{chunk-IQVVUZ6Z.js → chunk-H545OIWE.js}

@@ -1,6 +1,6 @@
 import {
   BrokerNotEnabledError
-} from "./chunk-CT35TQV7.js";
+} from "./chunk-I64WQSN3.js";
 
 // src/port/with/broker-strategy.ts
 var NO_BROKER = {
@@ -27,4 +27,4 @@ export {
   NO_BROKER,
   buildCredentialBrokerHandle
 };
-//# sourceMappingURL=chunk-IQVVUZ6Z.js.map
+//# sourceMappingURL=chunk-H545OIWE.js.map

package/dist/{chunk-C6RYZ4ZD.js → chunk-HAN2PHLM.js}

@@ -1,6 +1,6 @@
 import {
   writePod
-} from "./chunk-GAELDPIH.js";
+} from "./chunk-T7XUDZ7N.js";
 
 // src/with-audit/portability/export-accessible.ts
 function resolveAccessibleCollections(keyring, scope, writableOnly = false) {
@@ -42,4 +42,4 @@ export {
   buildAccessibleBundle,
   exportAccessibleData
 };
-//# sourceMappingURL=chunk-C6RYZ4ZD.js.map
+//# sourceMappingURL=chunk-HAN2PHLM.js.map

package/dist/chunk-HAN2PHLM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-audit/portability/export-accessible.ts"],"sourcesContent":["/**\n * `exportMyAccessibleData`: a non-owner user exports the scope they\n * can decrypt as a portable, re-keyed `.noydb` bundle. Non-destructive and\n * **always allowed** (the \"data sovereignty by construction\" property of\n * sealing-at-dimension — the firm cannot deny it) but **audited**.\n *\n * Reuses the existing bundle machinery: the access boundary is the caller's DEK\n * set (operator/client → `keyring.permissions`; owner/admin/viewer → all), so a\n * record outside the caller's keys can never enter the bundle. Re-keying to a\n * new owner reuses `writePod`'s `exportSecret` shorthand.\n */\nimport type { Vault } from '../../kernel/vault.js'\nimport type { UnlockedKeyring } from '../../with-party/team/keyring.js'\nimport { writePod } from '../../with-pod/pod.js'\n\n/**\n * Resolve the collections a caller may export/withdraw: operator/client are\n * scoped to their granted collections; owner/admin/viewer see everything\n * (`undefined` = no allowlist). A `scope.collections` sub-scope intersects the\n * granted set. `writableOnly` keeps only `rw` grants (for destructive ops).\n */\nexport function resolveAccessibleCollections(\n  keyring: UnlockedKeyring,\n  scope: { collections?: readonly string[] } | undefined,\n  writableOnly = false,\n): string[] | undefined {\n  let collections: string[] | undefined\n  if (keyring.role === 'operator' || keyring.role === 'client') {\n    collections = Object.entries(keyring.permissions)\n      .filter(([, mode]) => !writableOnly || mode === 'rw')\n      .map(([c]) => c)\n  }\n  if (scope?.collections) {\n    const allow = new Set(scope.collections)\n    collections = (collections ?? [...scope.collections]).filter((c) => allow.has(c))\n  }\n  return collections\n}\n\n/** Produce a (optionally re-keyed, scoped) `.noydb` bundle — no audit. */\nexport async function buildAccessibleBundle(\n  vault: Vault,\n  collections: string[] | undefined,\n  reKey: { secret: string } | undefined,\n  compression: 'auto' | 'brotli' | 'gzip' | 'none' = 'auto',\n): Promise<Uint8Array> {\n  return writePod(vault, {\n    compression,\n    ...(collections !== undefined ? { collections } : {}),\n    ...(reKey ? { exportSecret: reKey.secret } : {}),\n  })\n}\n\nexport interface ExportAccessibleOptions {\n  /**\n   * Re-key the bundle so it is independently openable by a new owner with this\n   * secret (the receiving firm / the client themselves). Omit to inherit\n   * the source keyring (personal backup).\n   */\n  readonly reKey?: { readonly secret: string }\n  /** Narrow the export to a subset of the caller's accessible collections. */\n  readonly scope?: { readonly collections?: readonly string[] }\n  readonly compression?: 'auto' | 'brotli' | 'gzip' | 'none'\n}\n\n/**\n * Produce a re-keyed, access-scoped `.noydb` bundle of the caller's accessible\n * data. Appends a tamper-evident audit entry (`reason: 'user-export:<userId>'`).\n */\nexport async function exportAccessibleData(\n  vault: Vault,\n  opts: ExportAccessibleOptions = {},\n): Promise<Uint8Array> {\n  const { keyring } = vault._introspectState()\n  const collections = resolveAccessibleCollections(keyring, opts.scope)\n  const bytes = await buildAccessibleBundle(vault, collections, opts.reKey, opts.compression ?? 'auto')\n\n  // §11.11 audit — non-destructive, always-allowed export. No-op when the vault\n  // has no history/ledger strategy (avoids minting a phantom _ledger DEK).\n  await vault._getLedgerOrNull()?.append({\n    op: 'lifecycle',\n    collection: '',\n    id: '',\n    version: 0,\n    actor: keyring.userId,\n    payloadHash: '',\n    reason: `user-export:${keyring.userId}`,\n  })\n\n  return bytes\n}\n"],"mappings":";;;;;AAqBO,SAAS,6BACd,SACA,OACA,eAAe,OACO;AACtB,MAAI;AACJ,MAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,UAAU;AAC5D,kBAAc,OAAO,QAAQ,QAAQ,WAAW,EAC7C,OAAO,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,gBAAgB,SAAS,IAAI,EACnD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAAA,EACnB;AACA,MAAI,OAAO,aAAa;AACtB,UAAM,QAAQ,IAAI,IAAI,MAAM,WAAW;AACvC,mBAAe,eAAe,CAAC,GAAG,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC;AAAA,EAClF;AACA,SAAO;AACT;AAGA,eAAsB,sBACpB,OACA,aACA,OACA,cAAmD,QAC9B;AACrB,SAAO,SAAS,OAAO;AAAA,IACrB;AAAA,IACA,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,GAAI,QAAQ,EAAE,cAAc,MAAM,OAAO,IAAI,CAAC;AAAA,EAChD,CAAC;AACH;AAkBA,eAAsB,qBACpB,OACA,OAAgC,CAAC,GACZ;AACrB,QAAM,EAAE,QAAQ,IAAI,MAAM,iBAAiB;AAC3C,QAAM,cAAc,6BAA6B,SAAS,KAAK,KAAK;AACpE,QAAM,QAAQ,MAAM,sBAAsB,OAAO,aAAa,KAAK,OAAO,KAAK,eAAe,MAAM;AAIpG,QAAM,MAAM,iBAAiB,GAAG,OAAO;AAAA,IACrC,IAAI;AAAA,IACJ,YAAY;AAAA,IACZ,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,OAAO,QAAQ;AAAA,IACf,aAAa;AAAA,IACb,QAAQ,eAAe,QAAQ,MAAM;AAAA,EACvC,CAAC;AAED,SAAO;AACT;","names":[]}

package/dist/{chunk-HRQF23XS.js → chunk-HNOBRU24.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-Y2NBBT6K.js";
 import {
   sha256Hex
-} from "./chunk-WJD5VF2N.js";
+} from "./chunk-QTDAPDDV.js";
 
 // src/with-shape/persisted-schemas/derive.ts
 function isZodSchema(value) {
@@ -79,4 +79,4 @@ export {
   isZod4Schema,
   derivePersistedSchema
 };
-//# sourceMappingURL=chunk-HRQF23XS.js.map
+//# sourceMappingURL=chunk-HNOBRU24.js.map

package/dist/{chunk-CUEWN4FX.js → chunk-HVR74IBG.js}

@@ -2,7 +2,7 @@ import {
   decrypt,
   deriveSealedFieldKey,
   deriveSealedFieldKeyFromCek
-} from "./chunk-WJD5VF2N.js";
+} from "./chunk-QTDAPDDV.js";
 
 // src/kernel/enclave/record-keys/sealed-slot.ts
 function parseSealedSlot(blob) {
@@ -26,4 +26,4 @@ export {
   parseSealedSlot,
   dualReadSealedSlot
 };
-//# sourceMappingURL=chunk-CUEWN4FX.js.map
+//# sourceMappingURL=chunk-HVR74IBG.js.map

package/dist/{chunk-4TLFWYZG.js → chunk-I5OLA3H6.js}

@@ -1,9 +1,9 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-7GWC6RI5.js";
+} from "./chunk-SFY6NT7D.js";
 import {
   ValidationError
-} from "./chunk-CT35TQV7.js";
+} from "./chunk-I64WQSN3.js";
 
 // src/with-party/directory/cover/custom.ts
 var CUSTOM_KEY_PATTERN = /^[a-z0-9]+([.-][a-z0-9]+)+$/i;
@@ -233,4 +233,4 @@ export {
   resolveLocale,
   pickLocale
 };
-//# sourceMappingURL=chunk-4TLFWYZG.js.map
+//# sourceMappingURL=chunk-I5OLA3H6.js.map

package/dist/{chunk-CT35TQV7.js → chunk-I64WQSN3.js}

@@ -663,10 +663,10 @@ var FieldNotQueryableError = class extends NoydbError {
     this.field = field;
   }
 };
-var BundleIntegrityError = class extends NoydbError {
+var PodIntegrityError = class extends NoydbError {
   constructor(message) {
     super("BUNDLE_INTEGRITY", `.noydb bundle integrity check failed: ${message}`);
-    this.name = "BundleIntegrityError";
+    this.name = "PodIntegrityError";
   }
 };
 var PodHeaderVerificationError = class extends NoydbError {
@@ -678,7 +678,7 @@ var PodHeaderVerificationError = class extends NoydbError {
     this.name = "PodHeaderVerificationError";
   }
 };
-var BundleSealMismatchError = class extends NoydbError {
+var PodSealMismatchError = class extends NoydbError {
   userId;
   pid;
   constructor(userId, pid) {
@@ -693,7 +693,7 @@ Resolutions:
   3. Inspect the bundle without unsealing \u2014 pass no \`sealingProviders\`
      to receive the sealed entries unmodified for offline analysis.`
     );
-    this.name = "BundleSealMismatchError";
+    this.name = "PodSealMismatchError";
     this.userId = userId;
     this.pid = pid;
   }
@@ -1615,9 +1615,9 @@ export {
   IndexWriteFailureError,
   PersistedIndexCompensationError,
   FieldNotQueryableError,
-  BundleIntegrityError,
+  PodIntegrityError,
   PodHeaderVerificationError,
-  BundleSealMismatchError,
+  PodSealMismatchError,
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectBadSignatureError,
@@ -1698,4 +1698,4 @@ export {
   ClassifiedRotationError,
   SatelliteConfigError
 };
-//# sourceMappingURL=chunk-CT35TQV7.js.map
+//# sourceMappingURL=chunk-I64WQSN3.js.map