@noy-db/hub 0.6.0-pre.20 → 0.6.0-pre.21

package/dist/kernel/types.d.ts

@@ -931,17 +931,31 @@ export interface KeyringFile {
      * Secret canary — base64 AES-KW-wrapped form of a known constant
      * 256-bit value, wrapped under the keyring's KEK.
      *
-     * Optional: older keyrings load with no canary and fall back to
-     * the multi-DEK corruption heuristic. Newer keyrings
-     * carry one and let `loadKeyring` distinguish wrong-secret
-     * from corruption even when ALL DEKs (including a single-DEK keyring's
-     * sole DEK) are corrupted.
+     * Lets `loadKeyring` distinguish wrong-secret from corruption even when
+     * ALL DEKs (including a single-DEK keyring's sole DEK) are corrupted: the
+     * canary unwrapping proves the KEK correct independent of any DEK byte.
      *
      * AES-KW is deterministic — every write site mints fresh on each
      * persist; same KEK + same constant input always produces the same
      * ciphertext, so this round-trips without state.
+     *
+     * REQUIRED as of #1096 (no-legacy policy): the pre-canary fallback
+     * heuristic is deleted, so an absent canary is not an old file, it is a
+     * store that stripped the field — `KeyringTamperedError('canary-missing')`.
+     */
+    readonly canary: string;
+    /**
+     * #1096 — AES-GCM({iv,data}) of the canonical authority fields
+     * (user_id, role, permissions, granted_by, expires_at, capabilities)
+     * under the vault roster key (carried as `deks[ROSTER_KEY_ID]`).
+     * Required: a valid canary with a missing or mismatching tag is refused
+     * as KeyringTamperedError — absence must itself be an error, or a store
+     * opts out of verification by deleting a plaintext field.
      */
-    readonly canary?: string;
+    readonly roster_tag: {
+        readonly iv: string;
+        readonly data: string;
+    };
     /**
      * Tier-2 authenticator slots (multi-slot keyring extension).
      * Optional / append-only: keyring files written before the

package/dist/kernel/vault.d.ts

@@ -336,7 +336,7 @@ export declare class Vault {
      * unblocks R-S7 when a base gains forget coverage after its satellite was
      * already declared without `perRecordKeys`. Call BEFORE re-declaring with
      * `{ satelliteOf, perRecordKeys: true }` AND before this collection serves
-     * writes (unfenced walk — see {@link migrateSatelliteCek}); resumable.
+     * writes (unfenced walk — see `with-shape/satellites/migrate-cek.ts`); resumable.
      */
     migrateSatellitePerRecordKeys(satelliteName: string): Promise<{
         migrated: number;

package/dist/{ledger-62CEPRPX.js → ledger-MVPNG5OS.js}

@@ -3,7 +3,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-MNUTPZRQ.js";
+} from "./chunk-4A34KWOU.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -15,16 +15,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-RNSC2ARR.js";
-import "./chunk-D5UDZANO.js";
-import "./chunk-ZVAFJQZB.js";
-import "./chunk-OQLYMBJI.js";
-import "./chunk-DJ23QZIN.js";
-import "./chunk-SFD2LL7G.js";
+} from "./chunk-ZLHHE5XZ.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-VJ4B3ZXY.js";
-import "./chunk-3Y4OFWQJ.js";
-import "./chunk-P7L3OQLL.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LEDGER_COLLECTION,
@@ -39,4 +39,4 @@ export {
   parseIndex,
   sha256Hex
 };
-//# sourceMappingURL=ledger-62CEPRPX.js.map
+//# sourceMappingURL=ledger-MVPNG5OS.js.map

package/dist/liberate-4LOJOLDT.js

@@ -0,0 +1,24 @@
+import {
+  liberateVault
+} from "./chunk-HQSPF5IY.js";
+import "./chunk-5Q7AJ7DN.js";
+import "./chunk-GBBDFE6C.js";
+import "./chunk-OTHHO3KI.js";
+import "./chunk-QSIEL6TL.js";
+import "./chunk-S56VYR4Q.js";
+import "./chunk-CAGI4LLJ.js";
+import "./chunk-LX46B56Q.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  liberateVault
+};
+//# sourceMappingURL=liberate-4LOJOLDT.js.map

package/dist/{link-set-ZRYNUHN3.js → link-set-3POMQR3I.js}

@@ -1,23 +1,23 @@
 import {
   LinkEndpointError,
   LinkSet
-} from "./chunk-M4IKEOJS.js";
+} from "./chunk-7PJ3BKHS.js";
 import {
   LINK_COLLECTION_PREFIX,
   LinkIntegrityError,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-KBOPY6W2.js";
-import "./chunk-D5UDZANO.js";
-import "./chunk-ZVAFJQZB.js";
-import "./chunk-OQLYMBJI.js";
-import "./chunk-DJ23QZIN.js";
-import "./chunk-SFD2LL7G.js";
+} from "./chunk-NR2SUJ3H.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-VJ4B3ZXY.js";
-import "./chunk-3Y4OFWQJ.js";
-import "./chunk-P7L3OQLL.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LINK_COLLECTION_PREFIX,
@@ -28,4 +28,4 @@ export {
   linkCollectionName,
   linkRowKey
 };
-//# sourceMappingURL=link-set-ZRYNUHN3.js.map
+//# sourceMappingURL=link-set-3POMQR3I.js.map

package/dist/{managed-secret-T2WB4O47.js → managed-secret-IARIJJ7Q.js}

@@ -9,16 +9,16 @@ import {
   resolveManagedSecret,
   saveSealedSecret,
   sealRsaOaepTlv
-} from "./chunk-NRNTXBHT.js";
-import "./chunk-D5UDZANO.js";
-import "./chunk-ZVAFJQZB.js";
-import "./chunk-OQLYMBJI.js";
-import "./chunk-DJ23QZIN.js";
-import "./chunk-SFD2LL7G.js";
+} from "./chunk-OTHHO3KI.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-VJ4B3ZXY.js";
-import "./chunk-3Y4OFWQJ.js";
-import "./chunk-P7L3OQLL.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MemoryRecipientSealer,
@@ -32,4 +32,4 @@ export {
   saveSealedSecret,
   sealRsaOaepTlv
 };
-//# sourceMappingURL=managed-secret-T2WB4O47.js.map
+//# sourceMappingURL=managed-secret-IARIJJ7Q.js.map

package/dist/materialized-views/index.js

@@ -1,48 +1,48 @@
 import {
   withMaterializedView
-} from "../chunk-APV42WPR.js";
+} from "../chunk-LXECF2ZR.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-EG6AQBYW.js";
+} from "../chunk-T7JGWTES.js";
 import {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-OIIAXFKM.js";
+} from "../chunk-EES37S2V.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-5J5TTSGW.js";
-import "../chunk-IPDS2TYW.js";
-import "../chunk-ICCRAPWD.js";
+} from "../chunk-3O72ZD2E.js";
+import "../chunk-ICDHUUMQ.js";
+import "../chunk-DVRZYAGT.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-L6FSZFG7.js";
-import "../chunk-A4K5GLE6.js";
+import "../chunk-VVSOPRUE.js";
+import "../chunk-B6IYATME.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-GYUCRDAU.js";
-import "../chunk-437FDIHO.js";
-import "../chunk-KDX6VEYV.js";
-import "../chunk-RNSC2ARR.js";
-import "../chunk-D5UDZANO.js";
-import "../chunk-ZVAFJQZB.js";
-import "../chunk-OQLYMBJI.js";
-import "../chunk-DJ23QZIN.js";
-import "../chunk-SFD2LL7G.js";
+import "../chunk-6KTVJ5ZZ.js";
+import "../chunk-WVE6YKMX.js";
+import "../chunk-JNMTN5D5.js";
+import "../chunk-ZLHHE5XZ.js";
+import "../chunk-OHOKBMTM.js";
+import "../chunk-PENPHA45.js";
+import "../chunk-GQXFOAYZ.js";
+import "../chunk-KV6JM2IA.js";
+import "../chunk-TMBSPLUG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-VJ4B3ZXY.js";
-import "../chunk-3Y4OFWQJ.js";
+import "../chunk-AU3AUJIZ.js";
+import "../chunk-IGNJOJEP.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-P7L3OQLL.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,

package/dist/migrate-cek-XM2ETTZW.js

@@ -0,0 +1,19 @@
+import {
+  SatelliteConfigError
+} from "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-shape/satellites/migrate-cek.ts
+async function migrateSatelliteCek(name, coll) {
+  if (coll.getConfig()?.perRecordKeys !== true) {
+    throw new SatelliteConfigError(
+      `migrateSatellitePerRecordKeys: collection "${name}" was already opened this session without perRecordKeys (construction-only); migrate before its first open, or restart the session.`
+    );
+  }
+  const migrated = await coll._applyCutoverTransform((doc) => doc);
+  return { migrated };
+}
+export {
+  migrateSatelliteCek
+};
+//# sourceMappingURL=migrate-cek-XM2ETTZW.js.map

package/dist/migrate-cek-XM2ETTZW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/satellites/migrate-cek.ts"],"sourcesContent":["/**\n * Satellite per-record-CEK migration (#599) — the R-S7 retro-coverage\n * unblock.\n *\n * R-S7 (`declare.ts:89-91`) correctly refuses declaring/redeclaring a\n * satellite of a forget-covered base without `perRecordKeys: true` — but\n * `perRecordKeys` is construction-only (`kernel/collection.ts:402`), so an\n * app that shipped a satellite BEFORE its base gained forget coverage has\n * no way past the refusal: the existing records must be re-encrypted under\n * fresh per-record CEKs before the satellite can reopen in\n * `perRecordKeys: true` mode, and the only re-encrypt primitive\n * (`Collection._applyCutoverTransform`) needs the collection already\n * constructed in that mode — chicken-and-egg.\n *\n * The break: `Vault.migrateSatellitePerRecordKeys` (`kernel/vault.ts`)\n * opens the satellite collection via `vault.collection(name, {\n * perRecordKeys: true })` WITHOUT `satelliteOf` — that never enters\n * `declareSatellite`, so R-S7's gate (which only fires on the `satelliteOf`\n * declaration path) never runs for the migration pass. R-S7 stays fully\n * enforced for every NORMAL `satelliteOf` declaration; this module and its\n * call-site never touch `declare.ts`.\n *\n * `migrateSatelliteCek` then reuses `_applyCutoverTransform` verbatim (an\n * identity transform — no field/shape change, only the encryption wrapper\n * changes) rather than duplicating its mint-or-reuse-CEK logic\n * (`resolveRecordCek`/`resolveStableCek`, `collection.ts:2537-2545`): a\n * record with no `_cek` yet gets a freshly minted per-record CEK; a record\n * that already carries `_cek` (already migrated, e.g. a prior interrupted\n * run) reuses its existing CEK unchanged. That mint-or-reuse discrimination\n * is what makes re-running this after a mid-migration failure safe for\n * free — no separate resumability marker needed, no double-mint, no\n * plaintext write, no shared-DEK write.\n *\n * **Mode-assertion guard (review Important 1):** `perRecordKeys` is\n * construction-only and the vault's collection cache is first-wins with no\n * mismatch guard. If `coll`'s name was already opened THIS SESSION without\n * `perRecordKeys` (e.g. an incidental bare `vault.collection(name)` call\n * before the migration ran), `vault.collection(name, { perRecordKeys: true\n * })` cache-HITS that instance instead of constructing a fresh one — the\n * returned handle is silently NOT in per-record-CEK mode. Without a check,\n * `_applyCutoverTransform` would then pass `cek: undefined` for every\n * record (`this.perRecordCek` false) and RE-ENCRYPT EVERY RECORD UNDER THE\n * SHARED COLLECTION DEK while still reporting `{ migrated: N }` as success\n * — a security migration that silently mints nothing. `migrateSatelliteCek`\n * reads the opened handle's own `getConfig()` (the same accessor\n * `dumpSchema()` uses) to confirm `perRecordKeys` is genuinely `true`\n * before walking, and throws `SatelliteConfigError` instead of proceeding\n * if not.\n *\n * **No-quiesce precondition (review Important 2):** `_applyCutoverTransform`\n * is documented as fence-phase-only (`collection.ts:2517-2522`) — the\n * generic schema-cutover caller (`Vault.runSchemaCutover` →\n * `SchemaFenceController`) always runs it under the vault-wide schema fence,\n * which blocks concurrent writes. This migration does NOT fence: it calls\n * `_applyCutoverTransform` directly, with no fence and CAS-less\n * (`adapter.put` with no `expectedVersion`) writes. A concurrent write to\n * the same satellite collection racing the walk's `await`s can be\n * clobbered by (or clobber) a migration write. Callers MUST run this before\n * the collection serves traffic — e.g. at v2 boot, before declaring the\n * pair, before any client can write — or otherwise ensure the vault is\n * quiescent for this collection for the duration of the call.\n */\nimport { SatelliteConfigError } from '../../kernel/errors.js'\n\n/** The narrow slice of `Collection` the migration pass needs (mirrors `fanout.ts`'s `CollectionHandle` narrowing). */\nexport interface SatelliteCekMigrationTarget {\n  /** Public config snapshot (`Collection.getConfig()`) — used to confirm the handle is genuinely in per-record-CEK mode before walking. */\n  getConfig(): { readonly perRecordKeys?: boolean } | undefined\n  _applyCutoverTransform(transform: (doc: Record<string, unknown>) => Record<string, unknown>): Promise<number>\n}\n\nexport interface SatelliteCekMigrationResult {\n  /** Records touched by this call (both freshly minted and already-migrated re-touches on a resumed run). */\n  readonly migrated: number\n}\n\n/**\n * Re-encrypt every record in `coll` under a per-record CEK. `coll` must be\n * a collection handle already opened with `perRecordKeys: true` — see the\n * file header for how the caller gets one past R-S7. Throws\n * `SatelliteConfigError` (does NOT proceed) if `coll` is not genuinely in\n * per-record-CEK mode — see the file header's mode-assertion note.\n * Idempotent/resumable: safe to call again after a partial failure. NOT\n * fenced against concurrent writers — see the file header's no-quiesce\n * precondition; run this before the collection serves traffic.\n *\n * @param name The satellite collection's name — used only for the error\n *   message below; identical to what the caller passed to `vault.collection()`.\n */\nexport async function migrateSatelliteCek(name: string, coll: SatelliteCekMigrationTarget): Promise<SatelliteCekMigrationResult> {\n  if (coll.getConfig()?.perRecordKeys !== true) {\n    throw new SatelliteConfigError(\n      `migrateSatellitePerRecordKeys: collection \"${name}\" was already opened this session without ` +\n      `perRecordKeys (construction-only); migrate before its first open, or restart the session.`,\n    )\n  }\n  // Ledger reason (review Minor): the walk below reuses _applyCutoverTransform's\n  // hardcoded 'schema:coordinated-cutover' ledger reason — it has no reason/label\n  // param, and this migration is not itself a schema cutover. Not threaded through\n  // (would touch collection.ts's own ceilinged surface for a cosmetic label);\n  // flagged here so the audit trail's shared reason string is documented, not silent.\n  const migrated = await coll._applyCutoverTransform((doc) => doc)\n  return { migrated }\n}\n"],"mappings":";;;;;;AAyFA,eAAsB,oBAAoB,MAAc,MAAyE;AAC/H,MAAI,KAAK,UAAU,GAAG,kBAAkB,MAAM;AAC5C,UAAM,IAAI;AAAA,MACR,8CAA8C,IAAI;AAAA,IAEpD;AAAA,EACF;AAMA,QAAM,WAAW,MAAM,KAAK,uBAAuB,CAAC,QAAQ,GAAG;AAC/D,SAAO,EAAE,SAAS;AACpB;","names":[]}

package/dist/money/index.js

@@ -4,7 +4,7 @@ import {
   isMoneyString,
   moneyNumber,
   mulRate
-} from "../chunk-L2XQ776M.js";
+} from "../chunk-KRVS7YWY.js";
 import {
   MoneyCurrencyError,
   MoneyPrecisionError,
@@ -13,10 +13,10 @@ import {
   isMoneyDescriptor,
   money,
   scaleForCurrency
-} from "../chunk-IPDS2TYW.js";
+} from "../chunk-ICDHUUMQ.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-KDX6VEYV.js";
-import "../chunk-P7L3OQLL.js";
+import "../chunk-JNMTN5D5.js";
+import "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MoneyCurrencyError,

package/dist/noydb-IRILUDED.js

@@ -0,0 +1,84 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-LGFTOU27.js";
+import "./chunk-NR2SUJ3H.js";
+import "./chunk-D3R7Q4QK.js";
+import "./chunk-INMHEMXX.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-O742QBZZ.js";
+import "./chunk-GYGLAVCX.js";
+import "./chunk-FFSQFH6D.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-ONVD6GBY.js";
+import "./chunk-6LJY7X5A.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-HR5R5JOM.js";
+import "./chunk-OMYCSTXL.js";
+import "./chunk-4YL2LMXK.js";
+import "./chunk-ZZXLB6AS.js";
+import "./chunk-FS7NTGCJ.js";
+import "./chunk-OTHHO3KI.js";
+import "./chunk-6WO62AJW.js";
+import "./chunk-YALD3SST.js";
+import "./chunk-AUPSEJ7O.js";
+import "./chunk-RSXQNFGO.js";
+import "./chunk-DVRZYAGT.js";
+import "./chunk-32B7VCKU.js";
+import "./chunk-T7IR4N2S.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-RFO4UXKQ.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-A4TOGAUW.js";
+import "./chunk-SMY5X46Z.js";
+import "./chunk-DZFQVICS.js";
+import "./chunk-2LFOMUEA.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-GTHVPVAR.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-4RAS6HN6.js";
+import "./chunk-P2MR5UNE.js";
+import "./chunk-VVSOPRUE.js";
+import "./chunk-4OQZNXQG.js";
+import "./chunk-EKEIEJL6.js";
+import "./chunk-GQ3BX5EA.js";
+import "./chunk-NO272T7Q.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-YMUFFJCO.js";
+import "./chunk-CADUYBQD.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-PVEWA2DU.js";
+import "./chunk-3B6S6RSI.js";
+import "./chunk-6KTVJ5ZZ.js";
+import "./chunk-WVE6YKMX.js";
+import "./chunk-JNMTN5D5.js";
+import "./chunk-NCCEDL2K.js";
+import "./chunk-3ENNPCIW.js";
+import "./chunk-CAGI4LLJ.js";
+import "./chunk-LX46B56Q.js";
+import "./chunk-NW4TY6VC.js";
+import "./chunk-OIBEJN5H.js";
+import "./chunk-VKQCVU2Z.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-LN7P6MZB.js";
+import "./chunk-4A34KWOU.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-ZLHHE5XZ.js";
+import "./chunk-PPCOKVFA.js";
+import "./chunk-HK67PX4J.js";
+import "./chunk-U27Y4DJZ.js";
+import "./chunk-OHOKBMTM.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-IRILUDED.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-2E2MKBMI.js";
+} from "../chunk-HYYVT2KZ.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-WKD5ESK4.js";
+} from "../chunk-3PMFMUFX.js";
 import {
   OverlayedCollection
-} from "../chunk-W6NFONOV.js";
+} from "../chunk-32B7VCKU.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-P7L3OQLL.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -11,7 +11,7 @@ import {
   samePartition,
   validatePeriodName,
   withPeriods
-} from "../chunk-VHVMJWM6.js";
+} from "../chunk-RFO4UXKQ.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -20,19 +20,19 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-HTHRCGWP.js";
-import "../chunk-MNUTPZRQ.js";
+} from "../chunk-A4TOGAUW.js";
+import "../chunk-4A34KWOU.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-RNSC2ARR.js";
-import "../chunk-D5UDZANO.js";
-import "../chunk-ZVAFJQZB.js";
-import "../chunk-OQLYMBJI.js";
-import "../chunk-DJ23QZIN.js";
-import "../chunk-SFD2LL7G.js";
+import "../chunk-ZLHHE5XZ.js";
+import "../chunk-OHOKBMTM.js";
+import "../chunk-PENPHA45.js";
+import "../chunk-GQXFOAYZ.js";
+import "../chunk-KV6JM2IA.js";
+import "../chunk-TMBSPLUG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-VJ4B3ZXY.js";
-import "../chunk-3Y4OFWQJ.js";
-import "../chunk-P7L3OQLL.js";
+import "../chunk-AU3AUJIZ.js";
+import "../chunk-IGNJOJEP.js";
+import "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_PERIODS,

package/dist/pod/index.js

@@ -5,43 +5,43 @@ import {
   signRedirect,
   verifyRedirect,
   wrapPodStore
-} from "../chunk-ZXW3X3DQ.js";
-import "../chunk-6TXUVKPG.js";
-import "../chunk-KBOPY6W2.js";
-import "../chunk-C7WJNVJG.js";
-import "../chunk-AQF7JSQR.js";
+} from "../chunk-JWMBG5S3.js";
+import "../chunk-LGFTOU27.js";
+import "../chunk-NR2SUJ3H.js";
+import "../chunk-D3R7Q4QK.js";
+import "../chunk-INMHEMXX.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
-} from "../chunk-E6VDPBE3.js";
+} from "../chunk-BEZDLIDG.js";
 import {
   MANIFEST_COLLECTION,
   isManifestReservedCollection
 } from "../chunk-EPFF7LOX.js";
-import "../chunk-OWGEHDT2.js";
+import "../chunk-O742QBZZ.js";
 import "../chunk-GYGLAVCX.js";
-import "../chunk-HJRTFXAA.js";
+import "../chunk-FFSQFH6D.js";
 import "../chunk-KHKKD62N.js";
-import "../chunk-N7YAQKAO.js";
+import "../chunk-ONVD6GBY.js";
 import "../chunk-6LJY7X5A.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-ZWKF3CD3.js";
-import "../chunk-N2HKBESK.js";
-import "../chunk-6S466CMQ.js";
-import "../chunk-GILI76SU.js";
-import "../chunk-A3NTKHDB.js";
-import "../chunk-NRNTXBHT.js";
-import "../chunk-YVTADFTC.js";
-import "../chunk-PZSS7MUM.js";
-import "../chunk-XGQGWZ6D.js";
-import "../chunk-RSFG7XHM.js";
-import "../chunk-ICCRAPWD.js";
-import "../chunk-W6NFONOV.js";
+import "../chunk-HR5R5JOM.js";
+import "../chunk-OMYCSTXL.js";
+import "../chunk-4YL2LMXK.js";
+import "../chunk-ZZXLB6AS.js";
+import "../chunk-FS7NTGCJ.js";
+import "../chunk-OTHHO3KI.js";
+import "../chunk-6WO62AJW.js";
+import "../chunk-YALD3SST.js";
+import "../chunk-AUPSEJ7O.js";
+import "../chunk-RSXQNFGO.js";
+import "../chunk-DVRZYAGT.js";
+import "../chunk-32B7VCKU.js";
 import "../chunk-T7IR4N2S.js";
 import "../chunk-PEOZ34EM.js";
-import "../chunk-VHVMJWM6.js";
+import "../chunk-RFO4UXKQ.js";
 import "../chunk-GHVIKOHT.js";
-import "../chunk-HTHRCGWP.js";
+import "../chunk-A4TOGAUW.js";
 import "../chunk-SMY5X46Z.js";
 import "../chunk-DZFQVICS.js";
 import {
@@ -67,17 +67,17 @@ import {
   verifyPodHeader,
   verifyRecord,
   writePod
-} from "../chunk-2IK6AC6A.js";
-import "../chunk-DYASJSKI.js";
-import "../chunk-GT72D4FO.js";
+} from "../chunk-QSIEL6TL.js";
+import "../chunk-S56VYR4Q.js";
+import "../chunk-2LFOMUEA.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-5JT4Y5UE.js";
+import "../chunk-GTHVPVAR.js";
 import "../chunk-AURFOK3D.js";
-import "../chunk-S55DBWRC.js";
-import "../chunk-KUXTWVAR.js";
-import "../chunk-L6FSZFG7.js";
-import "../chunk-MQXYR65M.js";
-import "../chunk-REL4OLWW.js";
+import "../chunk-4RAS6HN6.js";
+import "../chunk-P2MR5UNE.js";
+import "../chunk-VVSOPRUE.js";
+import "../chunk-4OQZNXQG.js";
+import "../chunk-EKEIEJL6.js";
 import "../chunk-GQ3BX5EA.js";
 import "../chunk-NO272T7Q.js";
 import "../chunk-XZHEOSQ2.js";
@@ -85,36 +85,36 @@ import "../chunk-YMUFFJCO.js";
 import "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
 import "../chunk-PVEWA2DU.js";
-import "../chunk-PG6PFMDC.js";
-import "../chunk-GYUCRDAU.js";
-import "../chunk-437FDIHO.js";
-import "../chunk-KDX6VEYV.js";
-import "../chunk-F5AJZC3U.js";
-import "../chunk-DKYEVHZH.js";
-import "../chunk-RKDH6L53.js";
-import "../chunk-JHO6FGZX.js";
-import "../chunk-HTMQBBF3.js";
-import "../chunk-KM6YR5XF.js";
+import "../chunk-3B6S6RSI.js";
+import "../chunk-6KTVJ5ZZ.js";
+import "../chunk-WVE6YKMX.js";
+import "../chunk-JNMTN5D5.js";
+import "../chunk-NCCEDL2K.js";
+import "../chunk-3ENNPCIW.js";
+import "../chunk-CAGI4LLJ.js";
+import "../chunk-LX46B56Q.js";
+import "../chunk-NW4TY6VC.js";
+import "../chunk-OIBEJN5H.js";
 import "../chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
 } from "../chunk-4AOERLTV.js";
-import "../chunk-YOT7D63X.js";
-import "../chunk-MNUTPZRQ.js";
+import "../chunk-LN7P6MZB.js";
+import "../chunk-4A34KWOU.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-RNSC2ARR.js";
-import "../chunk-47ZFULEZ.js";
+import "../chunk-ZLHHE5XZ.js";
+import "../chunk-PPCOKVFA.js";
 import "../chunk-HK67PX4J.js";
-import "../chunk-TENLCGYD.js";
-import "../chunk-D5UDZANO.js";
-import "../chunk-ZVAFJQZB.js";
-import "../chunk-OQLYMBJI.js";
-import "../chunk-DJ23QZIN.js";
-import "../chunk-SFD2LL7G.js";
+import "../chunk-U27Y4DJZ.js";
+import "../chunk-OHOKBMTM.js";
+import "../chunk-PENPHA45.js";
+import "../chunk-GQXFOAYZ.js";
+import "../chunk-KV6JM2IA.js";
+import "../chunk-TMBSPLUG.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-VJ4B3ZXY.js";
-import "../chunk-3Y4OFWQJ.js";
+import "../chunk-AU3AUJIZ.js";
+import "../chunk-IGNJOJEP.js";
 import {
   BackupCorruptedError,
   BackupLedgerError,
@@ -128,7 +128,7 @@ import {
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError
-} from "../chunk-P7L3OQLL.js";
+} from "../chunk-CWM4GQD2.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BackupCorruptedError,

package/dist/{pod-handle-UPLXOGIK.js → pod-handle-MELERCKU.js}

@@ -1,14 +1,14 @@
-import "./chunk-D5UDZANO.js";
+import "./chunk-OHOKBMTM.js";
 import {
   buildRecordEnvelope
-} from "./chunk-ZVAFJQZB.js";
-import "./chunk-OQLYMBJI.js";
-import "./chunk-DJ23QZIN.js";
-import "./chunk-SFD2LL7G.js";
+} from "./chunk-PENPHA45.js";
+import "./chunk-GQXFOAYZ.js";
+import "./chunk-KV6JM2IA.js";
+import "./chunk-TMBSPLUG.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-VJ4B3ZXY.js";
-import "./chunk-3Y4OFWQJ.js";
-import "./chunk-P7L3OQLL.js";
+import "./chunk-AU3AUJIZ.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-CWM4GQD2.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/pod-handle.ts
@@ -38,4 +38,4 @@ async function buildPodHandle(adapter, name) {
 export {
   buildPodHandle
 };
-//# sourceMappingURL=pod-handle-UPLXOGIK.js.map
+//# sourceMappingURL=pod-handle-MELERCKU.js.map