@noy-db/hub 0.6.0-pre.17 → 0.6.0-pre.19

package/dist/noydb-VZIVPDXG.js

@@ -0,0 +1,84 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-HGAR7H5M.js";
+import "./chunk-KBOPY6W2.js";
+import "./chunk-C7WJNVJG.js";
+import "./chunk-AQF7JSQR.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-OWGEHDT2.js";
+import "./chunk-GYGLAVCX.js";
+import "./chunk-HJRTFXAA.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-N7YAQKAO.js";
+import "./chunk-6LJY7X5A.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-ZWKF3CD3.js";
+import "./chunk-N2HKBESK.js";
+import "./chunk-6S466CMQ.js";
+import "./chunk-GILI76SU.js";
+import "./chunk-A3NTKHDB.js";
+import "./chunk-NRNTXBHT.js";
+import "./chunk-YVTADFTC.js";
+import "./chunk-PZSS7MUM.js";
+import "./chunk-HUYNPLTT.js";
+import "./chunk-RSFG7XHM.js";
+import "./chunk-ICCRAPWD.js";
+import "./chunk-W6NFONOV.js";
+import "./chunk-T7IR4N2S.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-VHVMJWM6.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-HTHRCGWP.js";
+import "./chunk-SMY5X46Z.js";
+import "./chunk-DZFQVICS.js";
+import "./chunk-GT72D4FO.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-5JT4Y5UE.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-S55DBWRC.js";
+import "./chunk-KUXTWVAR.js";
+import "./chunk-L6FSZFG7.js";
+import "./chunk-MQXYR65M.js";
+import "./chunk-REL4OLWW.js";
+import "./chunk-GQ3BX5EA.js";
+import "./chunk-NO272T7Q.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-YMUFFJCO.js";
+import "./chunk-CADUYBQD.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-PVEWA2DU.js";
+import "./chunk-PG6PFMDC.js";
+import "./chunk-GYUCRDAU.js";
+import "./chunk-437FDIHO.js";
+import "./chunk-KDX6VEYV.js";
+import "./chunk-LAFP5H5U.js";
+import "./chunk-DKYEVHZH.js";
+import "./chunk-E6WANBD6.js";
+import "./chunk-JHO6FGZX.js";
+import "./chunk-HTMQBBF3.js";
+import "./chunk-KM6YR5XF.js";
+import "./chunk-VKQCVU2Z.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-YOT7D63X.js";
+import "./chunk-MNUTPZRQ.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-RNSC2ARR.js";
+import "./chunk-47ZFULEZ.js";
+import "./chunk-HK67PX4J.js";
+import "./chunk-TENLCGYD.js";
+import "./chunk-D5UDZANO.js";
+import "./chunk-ZVAFJQZB.js";
+import "./chunk-OQLYMBJI.js";
+import "./chunk-DJ23QZIN.js";
+import "./chunk-SFD2LL7G.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VJ4B3ZXY.js";
+import "./chunk-3Y4OFWQJ.js";
+import "./chunk-P7L3OQLL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-VZIVPDXG.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-5SK5AFYH.js";
+} from "../chunk-2E2MKBMI.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-7EIPPOEL.js";
+} from "../chunk-WKD5ESK4.js";
 import {
   OverlayedCollection
-} from "../chunk-RDPZMUCX.js";
+} from "../chunk-W6NFONOV.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-I64WQSN3.js";
+} from "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -11,7 +11,7 @@ import {
   samePartition,
   validatePeriodName,
   withPeriods
-} from "../chunk-FHFMWYGM.js";
+} from "../chunk-VHVMJWM6.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -20,19 +20,19 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-V4M4BZNW.js";
-import "../chunk-IEA3TZJE.js";
+} from "../chunk-HTHRCGWP.js";
+import "../chunk-MNUTPZRQ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-N4GAJSRQ.js";
-import "../chunk-BKYQNNO3.js";
-import "../chunk-RGPB25DB.js";
-import "../chunk-FSZPQCDR.js";
-import "../chunk-HVR74IBG.js";
-import "../chunk-RBTZLXZJ.js";
+import "../chunk-RNSC2ARR.js";
+import "../chunk-D5UDZANO.js";
+import "../chunk-ZVAFJQZB.js";
+import "../chunk-OQLYMBJI.js";
+import "../chunk-DJ23QZIN.js";
+import "../chunk-SFD2LL7G.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-QTDAPDDV.js";
-import "../chunk-5UGEGEIJ.js";
-import "../chunk-I64WQSN3.js";
+import "../chunk-VJ4B3ZXY.js";
+import "../chunk-3Y4OFWQJ.js";
+import "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_PERIODS,

package/dist/pod/index.js

@@ -5,42 +5,43 @@ import {
   signRedirect,
   verifyRedirect,
   wrapPodStore
-} from "../chunk-APUP2J5M.js";
-import "../chunk-JV2CNEX2.js";
-import "../chunk-PCXAUC65.js";
-import "../chunk-MVG67SMN.js";
+} from "../chunk-I26TE27S.js";
+import "../chunk-HGAR7H5M.js";
+import "../chunk-KBOPY6W2.js";
+import "../chunk-C7WJNVJG.js";
+import "../chunk-AQF7JSQR.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
-} from "../chunk-OAWVM5L6.js";
+} from "../chunk-E6VDPBE3.js";
 import {
   MANIFEST_COLLECTION,
   isManifestReservedCollection
 } from "../chunk-EPFF7LOX.js";
-import "../chunk-S6CP5FWF.js";
+import "../chunk-OWGEHDT2.js";
 import "../chunk-GYGLAVCX.js";
-import "../chunk-C52CJDFO.js";
-import "../chunk-EMFFWSAD.js";
-import "../chunk-6LJY7X5A.js";
-import "../chunk-5VVBZ6E4.js";
-import "../chunk-VUQZYVYX.js";
-import "../chunk-TQ7IRULX.js";
-import "../chunk-42IDLU5V.js";
-import "../chunk-JAHIL6WO.js";
+import "../chunk-HJRTFXAA.js";
 import "../chunk-KHKKD62N.js";
-import "../chunk-HNOBRU24.js";
+import "../chunk-N7YAQKAO.js";
+import "../chunk-6LJY7X5A.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-6JRIYG2C.js";
-import "../chunk-QC2HGYFX.js";
-import "../chunk-YH65A6WM.js";
-import "../chunk-DEP24EE3.js";
-import "../chunk-RDPZMUCX.js";
-import "../chunk-JN64WH3U.js";
-import "../chunk-TQLYMYOK.js";
+import "../chunk-ZWKF3CD3.js";
+import "../chunk-N2HKBESK.js";
+import "../chunk-6S466CMQ.js";
+import "../chunk-GILI76SU.js";
+import "../chunk-A3NTKHDB.js";
+import "../chunk-NRNTXBHT.js";
+import "../chunk-YVTADFTC.js";
+import "../chunk-PZSS7MUM.js";
+import "../chunk-HUYNPLTT.js";
+import "../chunk-RSFG7XHM.js";
+import "../chunk-ICCRAPWD.js";
+import "../chunk-W6NFONOV.js";
+import "../chunk-T7IR4N2S.js";
 import "../chunk-PEOZ34EM.js";
-import "../chunk-FHFMWYGM.js";
+import "../chunk-VHVMJWM6.js";
 import "../chunk-GHVIKOHT.js";
-import "../chunk-V4M4BZNW.js";
+import "../chunk-HTHRCGWP.js";
 import "../chunk-SMY5X46Z.js";
 import "../chunk-DZFQVICS.js";
 import {
@@ -66,17 +67,17 @@ import {
   verifyPodHeader,
   verifyRecord,
   writePod
-} from "../chunk-SDEHNGWW.js";
-import "../chunk-N7HOHWKF.js";
-import "../chunk-4444HN72.js";
+} from "../chunk-2IK6AC6A.js";
+import "../chunk-DYASJSKI.js";
+import "../chunk-GT72D4FO.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-JHYISAID.js";
+import "../chunk-5JT4Y5UE.js";
 import "../chunk-AURFOK3D.js";
-import "../chunk-2RGQNFJB.js";
-import "../chunk-AFSMT3WI.js";
-import "../chunk-QI2KXQOM.js";
-import "../chunk-Z2OFE6IX.js";
-import "../chunk-RJTGXZT6.js";
+import "../chunk-S55DBWRC.js";
+import "../chunk-KUXTWVAR.js";
+import "../chunk-L6FSZFG7.js";
+import "../chunk-MQXYR65M.js";
+import "../chunk-REL4OLWW.js";
 import "../chunk-GQ3BX5EA.js";
 import "../chunk-NO272T7Q.js";
 import "../chunk-XZHEOSQ2.js";
@@ -84,36 +85,36 @@ import "../chunk-YMUFFJCO.js";
 import "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
 import "../chunk-PVEWA2DU.js";
-import "../chunk-FZ2SSI5R.js";
-import "../chunk-OXRPH6AR.js";
-import "../chunk-7LLKPODL.js";
-import "../chunk-RVTOCAHQ.js";
-import "../chunk-EEBMKMA7.js";
-import "../chunk-BMDF4TLU.js";
-import "../chunk-WBHQX6ME.js";
-import "../chunk-QJBXB4WU.js";
-import "../chunk-YVOW35HH.js";
-import "../chunk-H545OIWE.js";
+import "../chunk-PG6PFMDC.js";
+import "../chunk-GYUCRDAU.js";
+import "../chunk-437FDIHO.js";
+import "../chunk-KDX6VEYV.js";
+import "../chunk-LAFP5H5U.js";
+import "../chunk-DKYEVHZH.js";
+import "../chunk-E6WANBD6.js";
+import "../chunk-JHO6FGZX.js";
+import "../chunk-HTMQBBF3.js";
+import "../chunk-KM6YR5XF.js";
 import "../chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
 } from "../chunk-4AOERLTV.js";
-import "../chunk-AFHQATY4.js";
-import "../chunk-IEA3TZJE.js";
+import "../chunk-YOT7D63X.js";
+import "../chunk-MNUTPZRQ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-AMKCY454.js";
-import "../chunk-N4GAJSRQ.js";
-import "../chunk-D6E5N2O3.js";
-import "../chunk-QLMUW7OC.js";
-import "../chunk-BKYQNNO3.js";
-import "../chunk-RGPB25DB.js";
-import "../chunk-FSZPQCDR.js";
-import "../chunk-HVR74IBG.js";
-import "../chunk-RBTZLXZJ.js";
+import "../chunk-RNSC2ARR.js";
+import "../chunk-47ZFULEZ.js";
+import "../chunk-HK67PX4J.js";
+import "../chunk-TENLCGYD.js";
+import "../chunk-D5UDZANO.js";
+import "../chunk-ZVAFJQZB.js";
+import "../chunk-OQLYMBJI.js";
+import "../chunk-DJ23QZIN.js";
+import "../chunk-SFD2LL7G.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-QTDAPDDV.js";
-import "../chunk-5UGEGEIJ.js";
+import "../chunk-VJ4B3ZXY.js";
+import "../chunk-3Y4OFWQJ.js";
 import {
   BackupCorruptedError,
   BackupLedgerError,
@@ -127,7 +128,7 @@ import {
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError
-} from "../chunk-I64WQSN3.js";
+} from "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BackupCorruptedError,

package/dist/{pod-handle-7BVSWP5B.js → pod-handle-UPLXOGIK.js}

@@ -1,14 +1,14 @@
-import "./chunk-BKYQNNO3.js";
+import "./chunk-D5UDZANO.js";
 import {
   buildRecordEnvelope
-} from "./chunk-RGPB25DB.js";
-import "./chunk-FSZPQCDR.js";
-import "./chunk-HVR74IBG.js";
-import "./chunk-RBTZLXZJ.js";
+} from "./chunk-ZVAFJQZB.js";
+import "./chunk-OQLYMBJI.js";
+import "./chunk-DJ23QZIN.js";
+import "./chunk-SFD2LL7G.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-QTDAPDDV.js";
-import "./chunk-5UGEGEIJ.js";
-import "./chunk-I64WQSN3.js";
+import "./chunk-VJ4B3ZXY.js";
+import "./chunk-3Y4OFWQJ.js";
+import "./chunk-P7L3OQLL.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/pod-handle.ts
@@ -29,8 +29,8 @@ async function buildPodHandle(adapter, name) {
   const { generateULID } = await import("./ulid-VQW6ERQN.js");
   const handle = generateULID();
   const envelope = buildRecordEnvelope(
-    { collection: "_meta", id: "handle" },
-    { version: 1, iv: "", data: JSON.stringify({ handle }) }
+    { collection: "_meta", id: "handle", version: 1 },
+    { iv: "", data: JSON.stringify({ handle }) }
   );
   await adapter.put(name, "_meta", "handle", envelope);
   return handle;
@@ -38,4 +38,4 @@ async function buildPodHandle(adapter, name) {
 export {
   buildPodHandle
 };
-//# sourceMappingURL=pod-handle-7BVSWP5B.js.map
+//# sourceMappingURL=pod-handle-UPLXOGIK.js.map

package/dist/{pod-handle-7BVSWP5B.js.map → pod-handle-UPLXOGIK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../kernel/enclave/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data) as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle' },\n    { version: 1, iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,SAAS;AAAA,IACpC,EAAE,SAAS,GAAG,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EACzD;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}
+{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../kernel/enclave/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data) as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle', version: 1 },\n    { iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,EAAE;AAAA,IAChD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EAC7C;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}

package/dist/policy/index.js

@@ -6,20 +6,27 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "../chunk-UKKBKEUI.js";
+} from "../chunk-QPIUFRUC.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "../chunk-BMDF4TLU.js";
-import "../chunk-5UGEGEIJ.js";
+} from "../chunk-DKYEVHZH.js";
+import "../chunk-D5UDZANO.js";
+import "../chunk-ZVAFJQZB.js";
+import "../chunk-OQLYMBJI.js";
+import "../chunk-DJ23QZIN.js";
+import "../chunk-SFD2LL7G.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-VJ4B3ZXY.js";
+import "../chunk-3Y4OFWQJ.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "../chunk-I64WQSN3.js";
+} from "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,

package/dist/port/with/merge-authority.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The merge's capability to verify and re-stamp store-supplied ciphertext (#1042).
+ *
+ * ## The problem this seam exists to solve
+ *
+ * `with-sync` is DEK-free by design, and `check:architecture` enforces it: the
+ * engine's only enclave import is shape predicates. That is why AAD alone
+ * cannot make the merge fail closed — AAD is verified inside `subtle.decrypt`,
+ * and `applyRemote` never decrypts. It commits the remote envelope and the
+ * client discovers the problem at read time, *after* its own newer copy is
+ * gone.
+ *
+ * Two consequences follow from the same root, and one seam resolves both:
+ *
+ *  1. **The merge cannot reject a forged envelope**, because it holds no key.
+ *  2. **`advancePastRemote` re-stamps `_v` on existing ciphertext** without a
+ *     DEK, which is precisely why `_v` could not be bound into the AAD by
+ *     #1041. Version rollback stayed open as a result.
+ *
+ * ## Why a capability rather than an import
+ *
+ * The engine takes a `MergeAuthority` at construction. The closure holds the
+ * DEK; the engine's import graph is unchanged, so `check:architecture` passes
+ * **unweakened** — no allowlist entry, no guard edit. ADR 0003 states the test
+ * plainly: *if the guard needs relaxing, the design is wrong.*
+ *
+ * @packageDocumentation
+ */
+import type { EncryptedEnvelope } from '../../kernel/types.js';
+export interface MergeAuthority {
+    /**
+     * Does `envelope` authenticate at the identity and version it claims?
+     *
+     * Called **before** `local.put`, so a rejection costs the client nothing: its
+     * existing copy is untouched. Returns a boolean rather than throwing because
+     * a hostile store must not be able to halt an entire sync by poisoning one
+     * record — the caller records the rejection and moves to the next entry.
+     */
+    verify(collection: string, id: string, envelope: EncryptedEnvelope): Promise<boolean>;
+    /**
+     * Re-stamp `envelope` to `toVersion`, re-sealing it under the same DEK.
+     *
+     * Replaces the `{ ...winner, _v: remote._v + 1 }` spread. That spread is the
+     * single reason `_v` is not yet AEAD-bound: it rewrites a version onto
+     * ciphertext nobody re-sealed, so a reader recomputing AAD from the stamped
+     * `_v` would find a body sealed at a different one.
+     *
+     * With this, advancing becomes a re-seal, and binding `_v` becomes possible —
+     * which converts rollback detection into rollback *prevention*.
+     */
+    advance(collection: string, id: string, envelope: EncryptedEnvelope, toVersion: number): Promise<EncryptedEnvelope>;
+}

package/dist/port/with/strategies.d.ts

@@ -50,6 +50,7 @@
  *
  * @internal
  */
+import { type VaultHeadStrategy } from '../../with-commit/vault-head/strategy.js';
 import type { NoydbOptions } from '../../kernel/types.js';
 import { type ReduceStrategy } from '../../with-lookup/reduce/strategy.js';
 import { type AttestationStrategy } from '../../with-audit/attestation/strategy.js';
@@ -98,6 +99,7 @@ export interface StrategyBag {
     readonly custody: CustodyStrategy;
     readonly forget: ForgetStrategy;
     readonly history: HistoryStrategy;
+    readonly vaultHead: VaultHeadStrategy;
     readonly i18n: I18nStrategy;
     readonly indexing: IndexingStrategy;
     readonly lazy: LazyStrategy;

package/dist/portability/index.js

@@ -1,36 +1,36 @@
 import {
   NO_PORTABILITY
-} from "../chunk-TQ7IRULX.js";
+} from "../chunk-GILI76SU.js";
 import {
   PortabilityNotEnabledError
-} from "../chunk-I64WQSN3.js";
+} from "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/portability/active.ts
 function withPortability() {
   return {
     async exportAccessibleData(vault, opts) {
-      const { exportAccessibleData } = await import("../export-accessible-QWUYY2OY.js");
+      const { exportAccessibleData } = await import("../export-accessible-GNY6DC6U.js");
       return exportAccessibleData(vault, opts);
     },
     async withdrawAccessibleData(vault, opts) {
-      const { withdrawAccessibleData } = await import("../withdraw-accessible-PFCQQGNP.js");
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-K4CPMH4C.js");
       return withdrawAccessibleData(vault, opts);
     },
     async requestWithdrawal(vault, opts) {
-      const { requestWithdrawal } = await import("../request-withdrawal-CXTQLMJK.js");
+      const { requestWithdrawal } = await import("../request-withdrawal-XZSESWZV.js");
       return requestWithdrawal(vault, opts);
     },
     async listWithdrawalRequests(vault, opts) {
-      const { listWithdrawalRequests } = await import("../request-withdrawal-CXTQLMJK.js");
+      const { listWithdrawalRequests } = await import("../request-withdrawal-XZSESWZV.js");
       return listWithdrawalRequests(vault, opts);
     },
     async approveWithdrawal(vault, requestId, opts) {
-      const { approveWithdrawal } = await import("../request-withdrawal-CXTQLMJK.js");
+      const { approveWithdrawal } = await import("../request-withdrawal-XZSESWZV.js");
       return approveWithdrawal(vault, requestId, opts);
     },
     async rejectWithdrawal(vault, requestId, opts) {
-      const { rejectWithdrawal } = await import("../request-withdrawal-CXTQLMJK.js");
+      const { rejectWithdrawal } = await import("../request-withdrawal-XZSESWZV.js");
       return rejectWithdrawal(vault, requestId, opts);
     }
   };

package/dist/{post-register-W3T4U57K.js → post-register-J4DEVNXK.js}

@@ -1,9 +1,9 @@
 import {
   hashFields
-} from "./chunk-PCXAUC65.js";
+} from "./chunk-C7WJNVJG.js";
 import {
   SatelliteConfigError
-} from "./chunk-I64WQSN3.js";
+} from "./chunk-P7L3OQLL.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/marker.ts
@@ -14,7 +14,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     joined: spec.joined,
     epoch: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const { loadPersistedSchema } = await import("./storage-6QODT6K5.js");
+  const { loadPersistedSchema } = await import("./storage-MJHKNQRO.js");
   const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
   const prior = persisted?.satellite;
   if (prior) {
@@ -25,7 +25,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     }
     return;
   }
-  const { persistSatelliteMarker } = await import("./register-YUVC4G27.js");
+  const { persistSatelliteMarker } = await import("./register-UPD4GKBC.js");
   await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
 }
 
@@ -39,7 +39,7 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
   }
   if (baseSchema !== void 0) {
     try {
-      const { derivePersistedSchema } = await import("./derive-NL7X2EFT.js");
+      const { derivePersistedSchema } = await import("./derive-3WAS2G5T.js");
       const envelope = await derivePersistedSchema(baseSchema);
       const properties = envelope.jsonSchema?.["properties"];
       const baseFields = Object.keys(properties ?? {});
@@ -57,4 +57,4 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
 export {
   postRegister
 };
-//# sourceMappingURL=post-register-W3T4U57K.js.map
+//# sourceMappingURL=post-register-J4DEVNXK.js.map

package/dist/query/index.js

@@ -4,12 +4,12 @@ import {
   ScanBuilder,
   buildLiveQuery,
   executePlan
-} from "../chunk-AFSMT3WI.js";
+} from "../chunk-KUXTWVAR.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins,
   resetJoinWarnings
-} from "../chunk-QI2KXQOM.js";
+} from "../chunk-L6FSZFG7.js";
 import {
   CollectionIndexes
 } from "../chunk-GQ3BX5EA.js";
@@ -29,7 +29,7 @@ import {
   IndexRequiredError,
   IndexWriteFailureError,
   JoinTooLargeError
-} from "../chunk-I64WQSN3.js";
+} from "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   CollectionIndexes,

package/dist/reduce/index.js

@@ -9,7 +9,7 @@ import {
   groupAndReduce,
   reduceRecords,
   resetGroupByWarnings
-} from "../chunk-3JQVA527.js";
+} from "../chunk-A4K5GLE6.js";
 import "../chunk-XZHEOSQ2.js";
 import {
   NO_REDUCE
@@ -26,9 +26,9 @@ import {
   sum
 } from "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-7LLKPODL.js";
-import "../chunk-RVTOCAHQ.js";
-import "../chunk-I64WQSN3.js";
+import "../chunk-437FDIHO.js";
+import "../chunk-KDX6VEYV.js";
+import "../chunk-P7L3OQLL.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-lookup/reduce/active.ts

package/dist/register-UPD4GKBC.js

@@ -0,0 +1,32 @@
+import {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+} from "./chunk-VH2W6BOG.js";
+import "./chunk-ZVF37PKE.js";
+import "./chunk-E6VDPBE3.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-HJRTFXAA.js";
+import "./chunk-N7YAQKAO.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-YVTADFTC.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-MNUTPZRQ.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-RNSC2ARR.js";
+import "./chunk-D5UDZANO.js";
+import "./chunk-ZVAFJQZB.js";
+import "./chunk-OQLYMBJI.js";
+import "./chunk-DJ23QZIN.js";
+import "./chunk-SFD2LL7G.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VJ4B3ZXY.js";
+import "./chunk-3Y4OFWQJ.js";
+import "./chunk-P7L3OQLL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+};
+//# sourceMappingURL=register-UPD4GKBC.js.map

package/dist/registry-7KX2HWFS.js

@@ -0,0 +1,18 @@
+import {
+  DerivationRegistry
+} from "./chunk-WBNXZU42.js";
+import "./chunk-RSFG7XHM.js";
+import "./chunk-D5UDZANO.js";
+import "./chunk-ZVAFJQZB.js";
+import "./chunk-OQLYMBJI.js";
+import "./chunk-DJ23QZIN.js";
+import "./chunk-SFD2LL7G.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VJ4B3ZXY.js";
+import "./chunk-3Y4OFWQJ.js";
+import "./chunk-P7L3OQLL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationRegistry
+};
+//# sourceMappingURL=registry-7KX2HWFS.js.map