@noy-db/hub 0.6.0-pre.2 → 0.6.0-pre.21

package/dist/pod-handle-MELERCKU.js

@@ -0,0 +1,41 @@
+import "./chunk-OHOKBMTM.js";
+import {
+  buildRecordEnvelope
+} from "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-pod/pod-handle.ts
+async function buildPodHandle(adapter, name) {
+  const existing = await adapter.get(name, "_meta", "handle");
+  if (existing) {
+    try {
+      const parsed = JSON.parse(existing._data);
+      if (parsed !== null && typeof parsed === "object" && "handle" in parsed) {
+        const handle2 = parsed.handle;
+        if (typeof handle2 === "string" && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle2)) {
+          return handle2;
+        }
+      }
+    } catch {
+    }
+  }
+  const { generateULID } = await import("./ulid-VQW6ERQN.js");
+  const handle = generateULID();
+  const envelope = buildRecordEnvelope(
+    { collection: "_meta", id: "handle", version: 1 },
+    { iv: "", data: JSON.stringify({ handle }) }
+  );
+  await adapter.put(name, "_meta", "handle", envelope);
+  return handle;
+}
+export {
+  buildPodHandle
+};
+//# sourceMappingURL=pod-handle-MELERCKU.js.map

package/dist/pod-handle-MELERCKU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../kernel/enclave/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data) as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle', version: 1 },\n    { iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,EAAE;AAAA,IAChD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EAC7C;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}

package/dist/policy/index.js

@@ -6,20 +6,27 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "../chunk-WKPJXWKR.js";
+} from "../chunk-TX5MKAHA.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "../chunk-PJNTR2NV.js";
-import "../chunk-W5W6KHN2.js";
+} from "../chunk-3ENNPCIW.js";
+import "../chunk-OHOKBMTM.js";
+import "../chunk-PENPHA45.js";
+import "../chunk-GQXFOAYZ.js";
+import "../chunk-KV6JM2IA.js";
+import "../chunk-TMBSPLUG.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-AU3AUJIZ.js";
+import "../chunk-IGNJOJEP.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "../chunk-HNGSV2YC.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,

package/dist/port/to/index.d.ts

@@ -15,7 +15,7 @@
  * Named re-exports only (no `export *`) so the published surface is explicit and
  * tsup's per-entry bundling keeps class identity stable across subpaths.
  */
-export type { NoydbStore, NoydbBundleStore, NoydbPodStore, EncryptedEnvelope, VaultSnapshot, TxOp, StoreCapabilities, StoreCredentials, StoreCredentialSource, StoreTime, ListPageResult, } from '../../kernel/types.js';
-export { ConflictError, NetworkError, StoreCapabilityError, BundleVersionConflictError, PodVersionConflictError, UnknownStoreKindError, DuplicateStoreKindError, } from '../../kernel/errors.js';
-export type { StoreClass, StoreDescriptor, StoreBinding, StoreFactory, StoreLocator } from './locator.js';
-export { createStoreLocator } from './locator.js';
+export type { NoydbStore, NoydbPodStore, EncryptedEnvelope, VaultSnapshot, TxOp, StoreCapabilities, StoreCredentials, StoreCredentialSource, StoreTime, ListPageResult, } from '../../kernel/types.js';
+export { ConflictError, NetworkError, StoreCapabilityError, PodVersionConflictError, UnknownStoreKindError, DuplicateStoreKindError, } from '../../kernel/errors.js';
+export type { StoreClass, StoreDescriptor, StoreBinding, StoreFactory, StoreLocator, AnyNoydbStore, } from './locator.js';
+export { createStoreLocator, isPodStore } from './locator.js';

package/dist/port/to/locator.d.ts

@@ -17,7 +17,7 @@
  * and errors, no Node built-ins, no crypto. It adds zero runtime
  * dependencies to `@noy-db/hub/to`.
  */
-import type { NoydbStore, StoreCredentialSource } from '../../kernel/types.js';
+import type { NoydbStore, NoydbPodStore, StoreCredentialSource } from '../../kernel/types.js';
 /**
  * The broad topology bucket a store descriptor's kind falls into —
  * used by callers/UI to group or filter descriptors without knowing every
@@ -51,22 +51,68 @@ export interface StoreDescriptor {
  */
 export type StoreBinding = unknown;
 /**
- * Reconstructs a live `NoydbStore` from a `StoreDescriptor`. Registered
- * against a `StoreLocator` under the descriptor's `kind`.
+ * Either store shape a factory may produce: the 6-method KV `NoydbStore`, or
+ * the whole-vault `NoydbPodStore` implemented by `to-drive` / `to-icloud`.
+ *
+ * The two are DISJOINT, not sub/supertypes — a pod store has none of the six
+ * KV methods — which is why moving between them needs a double cast and why
+ * `isPodStore()` exists to narrow instead.
  */
-export type StoreFactory = (descriptor: StoreDescriptor, opts: {
+export type AnyNoydbStore = NoydbStore | NoydbPodStore;
+/**
+ * Narrow an `AnyNoydbStore` to the pod shape. Discriminates on the
+ * `kind: 'bundle'` tag `NoydbPodStore` carries for exactly this purpose; a
+ * `NoydbStore` has no `kind` field at all.
+ *
+ * Use this at a `resolve()` boundary instead of casting — a store resolved
+ * from a descriptor read out of a pod is only known to be one of the two
+ * shapes at runtime.
+ */
+export declare function isPodStore(store: AnyNoydbStore): store is NoydbPodStore;
+/**
+ * Reconstructs a live store from a `StoreDescriptor`. Registered against a
+ * `StoreLocator` under the descriptor's `kind`.
+ *
+ * The type parameter says WHICH shape this factory builds. It defaults to
+ * `NoydbStore`, so a bare `StoreFactory` means exactly what it always has;
+ * a pod-store factory declares `StoreFactory<NoydbPodStore>` and registers
+ * without a cast (#988).
+ */
+export type StoreFactory<S extends AnyNoydbStore = NoydbStore> = (descriptor: StoreDescriptor, opts: {
     binding?: StoreBinding;
     credentials?: StoreCredentialSource;
-}) => NoydbStore | Promise<NoydbStore>;
+}) => S | Promise<S>;
 /** A registry of `StoreFactory`s, keyed by `StoreDescriptor.kind`. */
 export interface StoreLocator {
-    /** Register a factory for `kind`. Throws if `kind` is already registered. */
-    register(kind: string, factory: StoreFactory): void;
-    /** Resolve `descriptor` to a live store via its kind's registered factory. */
+    /**
+     * Register a factory for `kind`. Throws if `kind` is already registered.
+     *
+     * Accepts a factory building EITHER store shape — `S` is inferred from the
+     * factory's own return type, so a `NoydbPodStore` factory needs no cast.
+     */
+    register<S extends AnyNoydbStore>(kind: string, factory: StoreFactory<S>): void;
+    /**
+     * Resolve `descriptor` to a live store via its kind's registered factory.
+     *
+     * Returns `NoydbStore`. If the `kind` was registered with a pod-store
+     * factory, the resolved value is really a `NoydbPodStore`: this signature
+     * is the seam's remaining unsoundness, kept because widening it to
+     * `AnyNoydbStore` would break every existing caller. Where the descriptor's
+     * kind is not statically known, prefer `resolveAny()` and `isPodStore()`.
+     */
     resolve(descriptor: StoreDescriptor, opts?: {
         binding?: StoreBinding;
         credentials?: StoreCredentialSource;
     }): NoydbStore | Promise<NoydbStore>;
+    /**
+     * As `resolve()`, but typed honestly: the registry is keyed by a runtime
+     * `kind` string, so which of the two shapes comes back is not knowable
+     * statically. Narrow the result with `isPodStore()`.
+     */
+    resolveAny(descriptor: StoreDescriptor, opts?: {
+        binding?: StoreBinding;
+        credentials?: StoreCredentialSource;
+    }): AnyNoydbStore | Promise<AnyNoydbStore>;
 }
 /**
  * Creates a fresh, empty `StoreLocator`.

package/dist/port/with/i18n-strategy.d.ts

@@ -82,7 +82,10 @@ export interface BuildDictionaryHandleOptions<Keys extends string = string> {
      * `buildLookupHandle`. See `port/with/lookup-strategy.ts`'s `BuildLookupHandleOptions` doc
      * comment for why this is injected rather than imported by the handle itself.
      */
-    buildDeleteMarker: (version: number, actor: string) => EncryptedEnvelope;
+    buildDeleteMarker: (identity: {
+        collection: string;
+        id: string;
+    }, version: number, actor: string) => EncryptedEnvelope;
     /** #650 Task 5 (#648) — the real reference check, passed through to `buildLookupHandle`. */
     checkReferencesOnDelete?: ((key: string) => Promise<unknown>) | undefined;
 }

package/dist/port/with/lookup-strategy.d.ts

@@ -62,7 +62,10 @@ export interface BuildLookupHandleOptions<Keys extends string = string> {
      * may not import `kernel/enclave/` itself (Check 11/15), so this capability is injected the
      * same way `reservedEnvelopes` above is.
      */
-    readonly buildDeleteMarker: (version: number, actor: string) => EncryptedEnvelope;
+    readonly buildDeleteMarker: (identity: {
+        collection: string;
+        id: string;
+    }, version: number, actor: string) => EncryptedEnvelope;
     /** #650 Task 4 (#647) — choke-point participation hooks. */
     readonly onDirty?: ((collection: string, id: string, action: 'put' | 'delete', version: number) => Promise<void>) | undefined;
     readonly onRecordMutated?: ((collection: string, id: string, action: 'put' | 'delete', version: number) => Promise<void>) | undefined;

package/dist/port/with/merge-authority.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The merge's capability to verify and re-stamp store-supplied ciphertext (#1042).
+ *
+ * ## The problem this seam exists to solve
+ *
+ * `with-sync` is DEK-free by design, and `check:architecture` enforces it: the
+ * engine's only enclave import is shape predicates. That is why AAD alone
+ * cannot make the merge fail closed — AAD is verified inside `subtle.decrypt`,
+ * and `applyRemote` never decrypts. It commits the remote envelope and the
+ * client discovers the problem at read time, *after* its own newer copy is
+ * gone.
+ *
+ * Two consequences follow from the same root, and one seam resolves both:
+ *
+ *  1. **The merge cannot reject a forged envelope**, because it holds no key.
+ *  2. **`advancePastRemote` re-stamps `_v` on existing ciphertext** without a
+ *     DEK, which is precisely why `_v` could not be bound into the AAD by
+ *     #1041. Version rollback stayed open as a result.
+ *
+ * ## Why a capability rather than an import
+ *
+ * The engine takes a `MergeAuthority` at construction. The closure holds the
+ * DEK; the engine's import graph is unchanged, so `check:architecture` passes
+ * **unweakened** — no allowlist entry, no guard edit. ADR 0003 states the test
+ * plainly: *if the guard needs relaxing, the design is wrong.*
+ *
+ * @packageDocumentation
+ */
+import type { EncryptedEnvelope } from '../../kernel/types.js';
+export interface MergeAuthority {
+    /**
+     * Does `envelope` authenticate at the identity and version it claims?
+     *
+     * Called **before** `local.put`, so a rejection costs the client nothing: its
+     * existing copy is untouched. Returns a boolean rather than throwing because
+     * a hostile store must not be able to halt an entire sync by poisoning one
+     * record — the caller records the rejection and moves to the next entry.
+     */
+    verify(collection: string, id: string, envelope: EncryptedEnvelope): Promise<boolean>;
+    /**
+     * Re-stamp `envelope` to `toVersion`, re-sealing it under the same DEK.
+     *
+     * Replaces the `{ ...winner, _v: remote._v + 1 }` spread. That spread is the
+     * single reason `_v` is not yet AEAD-bound: it rewrites a version onto
+     * ciphertext nobody re-sealed, so a reader recomputing AAD from the stamped
+     * `_v` would find a body sealed at a different one.
+     *
+     * With this, advancing becomes a re-seal, and binding `_v` becomes possible —
+     * which converts rollback detection into rollback *prevention*.
+     */
+    advance(collection: string, id: string, envelope: EncryptedEnvelope, toVersion: number): Promise<EncryptedEnvelope>;
+}

package/dist/port/with/service-bus.d.ts

@@ -150,7 +150,3 @@ export declare class ServiceBus {
      */
     dispatchGate<P extends GatePoint>(point: P, event: GateEventMap[P]): Promise<void>;
 }
-/** @deprecated Use ServiceBus. */
-export declare const SubsystemBus: typeof ServiceBus;
-/** @deprecated Use ServiceBus. */
-export type SubsystemBus = ServiceBus;

package/dist/port/with/strategies.d.ts

@@ -50,6 +50,7 @@
  *
  * @internal
  */
+import { type VaultHeadStrategy } from '../../with-commit/vault-head/strategy.js';
 import type { NoydbOptions } from '../../kernel/types.js';
 import { type ReduceStrategy } from '../../with-lookup/reduce/strategy.js';
 import { type AttestationStrategy } from '../../with-audit/attestation/strategy.js';
@@ -98,6 +99,7 @@ export interface StrategyBag {
     readonly custody: CustodyStrategy;
     readonly forget: ForgetStrategy;
     readonly history: HistoryStrategy;
+    readonly vaultHead: VaultHeadStrategy;
     readonly i18n: I18nStrategy;
     readonly indexing: IndexingStrategy;
     readonly lazy: LazyStrategy;

package/dist/port/with/team-strategy.d.ts

@@ -22,12 +22,16 @@
  * @internal
  */
 import type { GrantOptions, RevokeOptions, FactorProofBundle } from '../../kernel/types.js';
-import type { RotateResult } from '../../with-party/team/keyring.js';
+import type { RotateResult, RosterVerifyResult, QuarantineResult } from '../../with-party/team/keyring.js';
 import type { TeamFacade } from '../../with-party/team/noydb-facade.js';
 export interface TeamStrategy {
     grant(team: TeamFacade, vault: string, options: GrantOptions, factors?: FactorProofBundle): Promise<void>;
     revoke(team: TeamFacade, vault: string, options: RevokeOptions, factors?: FactorProofBundle): Promise<void>;
     rotate(team: TeamFacade, vault: string, collections: string[]): Promise<RotateResult>;
+    /** #1121 — read-only sweep naming every `_keyring` file that fails authentication. */
+    verifyRoster(team: TeamFacade, vault: string): Promise<RosterVerifyResult>;
+    /** #1121 — remove an unauthenticatable `_keyring` file and re-key behind it. */
+    quarantineKeyring(team: TeamFacade, vault: string, userId: string, factors?: FactorProofBundle): Promise<QuarantineResult>;
 }
 /**
  * No-op stub — the floor default. Every multi-user team operation throws

package/dist/portability/index.js

@@ -1,36 +1,36 @@
 import {
   NO_PORTABILITY
-} from "../chunk-FUHKW252.js";
+} from "../chunk-ZZXLB6AS.js";
 import {
   PortabilityNotEnabledError
-} from "../chunk-HNGSV2YC.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/portability/active.ts
 function withPortability() {
   return {
     async exportAccessibleData(vault, opts) {
-      const { exportAccessibleData } = await import("../export-accessible-PE5AYKZR.js");
+      const { exportAccessibleData } = await import("../export-accessible-UXSMG7AB.js");
       return exportAccessibleData(vault, opts);
     },
     async withdrawAccessibleData(vault, opts) {
-      const { withdrawAccessibleData } = await import("../withdraw-accessible-QQNWM5BO.js");
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-4JTDFRFZ.js");
       return withdrawAccessibleData(vault, opts);
     },
     async requestWithdrawal(vault, opts) {
-      const { requestWithdrawal } = await import("../request-withdrawal-RH55LNZL.js");
+      const { requestWithdrawal } = await import("../request-withdrawal-PVFEYX57.js");
       return requestWithdrawal(vault, opts);
     },
     async listWithdrawalRequests(vault, opts) {
-      const { listWithdrawalRequests } = await import("../request-withdrawal-RH55LNZL.js");
+      const { listWithdrawalRequests } = await import("../request-withdrawal-PVFEYX57.js");
       return listWithdrawalRequests(vault, opts);
     },
     async approveWithdrawal(vault, requestId, opts) {
-      const { approveWithdrawal } = await import("../request-withdrawal-RH55LNZL.js");
+      const { approveWithdrawal } = await import("../request-withdrawal-PVFEYX57.js");
       return approveWithdrawal(vault, requestId, opts);
     },
     async rejectWithdrawal(vault, requestId, opts) {
-      const { rejectWithdrawal } = await import("../request-withdrawal-RH55LNZL.js");
+      const { rejectWithdrawal } = await import("../request-withdrawal-PVFEYX57.js");
       return rejectWithdrawal(vault, requestId, opts);
     }
   };

package/dist/{post-register-ZAG2CAIY.js → post-register-Z5T7FY45.js}

@@ -1,9 +1,9 @@
 import {
   hashFields
-} from "./chunk-HVQGCKY4.js";
+} from "./chunk-D3R7Q4QK.js";
 import {
   SatelliteConfigError
-} from "./chunk-HNGSV2YC.js";
+} from "./chunk-CWM4GQD2.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/marker.ts
@@ -14,7 +14,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     joined: spec.joined,
     epoch: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const { loadPersistedSchema } = await import("./storage-N7LB275C.js");
+  const { loadPersistedSchema } = await import("./storage-3VNGSHXS.js");
   const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
   const prior = persisted?.satellite;
   if (prior) {
@@ -25,7 +25,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     }
     return;
   }
-  const { persistSatelliteMarker } = await import("./register-TMD6YRCX.js");
+  const { persistSatelliteMarker } = await import("./register-UZ37QPDB.js");
   await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
 }
 
@@ -39,7 +39,7 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
   }
   if (baseSchema !== void 0) {
     try {
-      const { derivePersistedSchema } = await import("./derive-6V3PIZF7.js");
+      const { derivePersistedSchema } = await import("./derive-YUO3TQYN.js");
       const envelope = await derivePersistedSchema(baseSchema);
       const properties = envelope.jsonSchema?.["properties"];
       const baseFields = Object.keys(properties ?? {});
@@ -57,4 +57,4 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
 export {
   postRegister
 };
-//# sourceMappingURL=post-register-ZAG2CAIY.js.map
+//# sourceMappingURL=post-register-Z5T7FY45.js.map

package/dist/query/index.js

@@ -4,12 +4,12 @@ import {
   ScanBuilder,
   buildLiveQuery,
   executePlan
-} from "../chunk-3737A6EA.js";
+} from "../chunk-P2MR5UNE.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins,
   resetJoinWarnings
-} from "../chunk-E6427JU2.js";
+} from "../chunk-VVSOPRUE.js";
 import {
   CollectionIndexes
 } from "../chunk-GQ3BX5EA.js";
@@ -29,7 +29,7 @@ import {
   IndexRequiredError,
   IndexWriteFailureError,
   JoinTooLargeError
-} from "../chunk-HNGSV2YC.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   CollectionIndexes,

package/dist/reduce/index.js

@@ -9,7 +9,7 @@ import {
   groupAndReduce,
   reduceRecords,
   resetGroupByWarnings
-} from "../chunk-CCZJJ4I2.js";
+} from "../chunk-B6IYATME.js";
 import "../chunk-XZHEOSQ2.js";
 import {
   NO_REDUCE
@@ -26,9 +26,9 @@ import {
   sum
 } from "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-7G6VDWXB.js";
-import "../chunk-UHXCLPGC.js";
-import "../chunk-HNGSV2YC.js";
+import "../chunk-WVE6YKMX.js";
+import "../chunk-JNMTN5D5.js";
+import "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-lookup/reduce/active.ts

package/dist/register-UZ37QPDB.js

@@ -0,0 +1,32 @@
+import {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+} from "./chunk-MSLPDFK2.js";
+import "./chunk-ZVF37PKE.js";
+import "./chunk-BEZDLIDG.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-FFSQFH6D.js";
+import "./chunk-ONVD6GBY.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-6WO62AJW.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-4A34KWOU.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-ZLHHE5XZ.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+};
+//# sourceMappingURL=register-UZ37QPDB.js.map

package/dist/registry-ETJNA7PO.js

@@ -0,0 +1,9 @@
+import {
+  OverlayedViewRegistry
+} from "./chunk-3PMFMUFX.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  OverlayedViewRegistry
+};
+//# sourceMappingURL=registry-ETJNA7PO.js.map

package/dist/registry-F7U6KSLX.js

@@ -0,0 +1,9 @@
+import {
+  GuardRegistry
+} from "./chunk-IJ46VCWD.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardRegistry
+};
+//# sourceMappingURL=registry-F7U6KSLX.js.map

package/dist/registry-L4ELKX6C.js

@@ -0,0 +1,18 @@
+import {
+  DerivationRegistry
+} from "./chunk-YKXZHUOW.js";
+import "./chunk-RSXQNFGO.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationRegistry
+};
+//# sourceMappingURL=registry-L4ELKX6C.js.map

package/dist/registry-SDT5LIGO.js

@@ -0,0 +1,19 @@
+import {
+  MaterializedViewRegistry,
+  wrapDbWithPredicates
+} from "./chunk-3O72ZD2E.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MaterializedViewRegistry,
+  wrapDbWithPredicates
+};
+//# sourceMappingURL=registry-SDT5LIGO.js.map

package/dist/request-withdrawal-PVFEYX57.js

@@ -0,0 +1,31 @@
+import {
+  WITHDRAWAL_REQUESTS_COLLECTION,
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+} from "./chunk-FW7NGYLT.js";
+import "./chunk-5Q7AJ7DN.js";
+import "./chunk-GBBDFE6C.js";
+import "./chunk-QSIEL6TL.js";
+import "./chunk-S56VYR4Q.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  WITHDRAWAL_REQUESTS_COLLECTION,
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+};
+//# sourceMappingURL=request-withdrawal-PVFEYX57.js.map

package/dist/{reveal-CMOJY4VO.js → reveal-DQ2E3QAZ.js}

@@ -1,14 +1,14 @@
 import {
   isTombstone
-} from "./chunk-NWCGDAV6.js";
+} from "./chunk-PENPHA45.js";
 import {
   dualReadSealedSlot
-} from "./chunk-AR2JDFAE.js";
-import "./chunk-VCETL77O.js";
-import "./chunk-W5W6KHN2.js";
+} from "./chunk-KV6JM2IA.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
 import {
   ClassifiedRevealError
-} from "./chunk-HNGSV2YC.js";
+} from "./chunk-CWM4GQD2.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/reveal.ts
@@ -35,4 +35,4 @@ async function revealSealedField(ctx, id, field) {
 export {
   revealSealedField
 };
-//# sourceMappingURL=reveal-CMOJY4VO.js.map
+//# sourceMappingURL=reveal-DQ2E3QAZ.js.map

package/dist/revoke-YXY6SHUH.js

@@ -0,0 +1,24 @@
+import {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+} from "./chunk-DIZ6HM7Q.js";
+import "./chunk-ESKIAXO2.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+};
+//# sourceMappingURL=revoke-YXY6SHUH.js.map

package/dist/satellites/index.js

@@ -1,6 +1,6 @@
 import {
   SatelliteConfigError
-} from "../chunk-HNGSV2YC.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   SatelliteConfigError

package/dist/schema-update/index.js

@@ -3,7 +3,7 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "../chunk-DMQCLZ4Z.js";
+} from "../chunk-GWO2IDAB.js";
 import {
   computeSchemaDelta,
   evaluateStrategies
@@ -12,7 +12,7 @@ import {
   SchemaUpdateGate
 } from "../chunk-6LJY7X5A.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-HNGSV2YC.js";
+import "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   SchemaUpdateGate,