@noy-db/hub 0.6.0-pre.21 → 0.6.0-pre.22

package/CHANGELOG.md

@@ -1,5 +1,208 @@
 # Changelog — hub
 
+## 0.6.0-pre.22
+
+### Minor Changes
+
+- `.crossJoin()` gains a typed `outer` option (#1130).
+
+  `.crossJoin()` emits the left row once per matching right row, so an empty `on:`
+  subset dropped it entirely — no error, no warning, no count mismatch. It bites
+  hardest on a **reverse FK**, because `.join()` is forward-only on a declared
+  `ref()` and cannot express that direction, so `.crossJoin()` is the only tool
+  available. The reported case measured three rows in and one row out, with the
+  missing two vanishing silently from a list view.
+
+  ```ts
+  .crossJoin('clients', { as: 'client', outer: true, on: (b) => byEntity.get(b.entityId) ?? [] })
+  // every left row survives; `client` is `Client | null`
+  ```
+
+  `outer` applies to both call shapes: with `on:` the empty thing is that left
+  row's subset, and without it an empty TARGET collection is what would otherwise
+  drop every row — two separate branches in `applyCrossJoin`, both covered.
+
+  **The alias widens to `TTarget | null` only under `outer: true`**, via a third
+  type parameter rather than a plain boolean, so existing inner-mode callers are
+  untouched and are not made to null-check something that cannot occur. Both
+  directions are asserted at compile time in `cross-join-outer.test-d.ts`, because
+  neither mistake would show up in a runtime test.
+
+  The previously documented `?? [null]` idiom still works and is exactly what
+  `outer` does internally — a test asserts the two produce identical rows. Prefer
+  the flag: the idiom types the alias as non-null while the row can hold null, and
+  a later "simplification" that removes the `[null]` silently reintroduces the row
+  loss.
+
+  `outer` is folded into the query-plan summary, so a materialized view built on
+  the inner form is not served for an outer query, and a substituted null row
+  counts toward `maxRows` like any other row.
+
+### Patch Changes
+
+- `@noy-db/in-vue` ships `useLiveQuery()`, and `in-pinia` now delegates to it (#1131).
+
+  `kernel/query/live.ts` described a Vue wrapper for `LiveQuery` as though it were
+  provided, plus React/Solid/Svelte adapters that have never existed. #1132
+  corrected the prose. This ships the thing.
+
+  **There was exactly one implementation in the family and it was unreachable.**
+  `@noy-db/in-pinia`'s `store.liveQuery()` already did this correctly — subscribe
+  once, mirror into a `ShallowRef`, re-read `error` on every notification, dispose
+  via `onScopeDispose` — but it is a **store method, not an export**, so an export
+  enumeration cannot find it, and a Vue consumer not using Pinia had no route at
+  all. A pilot consumer hand-rolled the glue instead.
+
+  So `useLiveQuery` lands in `@noy-db/in-vue` (the base binding, no Pinia
+  required) and `in-pinia` calls it, keeping the readiness check and the query
+  build and nothing else. One implementation rather than two that drift — and
+  only one of two copies ever gets an error-semantics fix. `NoydbLiveQuery<R>` is
+  now an alias of `UseLiveQueryReturn<R>`, so the type has one definition too.
+
+  ```ts
+  const { items, error } = useLiveQuery(
+    vault.collection("bills").query().join("entityId", { as: "entity" }).live()
+  );
+  ```
+
+  **A hub doc-comment correction came out of building it, and it was backwards in
+  both halves.** `LiveQuery.value` was documented as _"updated in place… the
+  reference returned is the same array"_, advising callers to copy for change
+  detection. `refresh()` assigns `this._value = this.recompute()`, so the array is
+  **replaced**: the reference changes on every re-run, reference identity IS a
+  valid change signal (which is what makes a `shallowRef` correct and a copy
+  unnecessary), and a consumer who caches `value` holds a snapshot that never
+  updates. Verified by running it, not by reading it — two reads across a
+  notification are not `===`, and the first array still holds the old contents.
+
+  ⚠️ **Consumer-visible:** `@noy-db/in-pinia` now declares `@noy-db/in-vue` as a
+  (non-optional) peer, matching how the family already wires satellite-to-satellite
+  deps — `in-nextjs` → `in-react`, `in-nuxt` → `in-pinia`/`in-vue`,
+  `in-devtools-tui` → `in-devtools`. A Nuxt consumer already has it, since
+  `in-nuxt` peers on both. A **plain Pinia** consumer must add one line to their
+  install; the two ship on the same lockstep version line. It is deliberately not
+  optional — `store.liveQuery()` does not work without it, and an optional peer
+  would turn that into a runtime resolution failure instead of an install-time one.
+
+  The test suite asserts through a `watch` inside an `effectScope` rather than by
+  reading `items.value`. Reading the ref passes even if Vue reactivity is entirely
+  broken, since the value is correct either way; only a watcher proves a component
+  would re-render.
+
+- `KeyringTamperedError` stops accusing the store when the cause is an upgrade (#1129).
+
+  `roster_tag` and the reserved `_roster` key ship for the first time in
+  `0.6.0-pre.21`, so **no keyring written by any earlier release carries either**.
+  Every existing vault therefore fails at unlock on upgrade — and was told _"The
+  store serving this vault may have altered the roster."_ Measured, not assumed: a
+  vault written by published `0.6.0-pre.20` and opened by `pre.21` reports
+  `roster-key-missing` (the roster-key check precedes the tag check).
+
+  The refusal is correct and unchanged — the format is replaced, not migrated
+  (#1100, ADR 0003 Decision 5), and the vault must be re-seeded. What changes is
+  what the user reads. The absence labels now lead with the format transition,
+  because that is the overwhelming base rate on upgrade day, while still naming the
+  attack reading and still refusing. `roster-tag-mismatch` keeps its unqualified
+  alert: no released version ever wrote a mismatched tag, so it is not reachable by
+  a format transition.
+
+  **No benign/attack discriminant was added, and none is possible.** #1103 could
+  build one for records because the benign case must produce a body that _decrypts
+  under the DEK_, which an untrusted store cannot fabricate — a successful retry is
+  positive evidence. A keyring's benign case is a _deleted field_, which a store
+  produces with no key at all. Verified by probe: stripping `_roster` and
+  `roster_tag` from a genuine `pre.21` file gives output byte-identical to opening a
+  real `pre.20` vault. "Absent means old and fine" would be a downgrade path.
+
+  A code comment claiming an absent canary "is not an old file" is corrected: the
+  policy it justified is right, the factual claim was wrong (`canary` was optional
+  through `pre.19`, and its own doc said older keyrings have none). `SECURITY.md`
+  gains a _Reading a `KeyringTamperedError`_ section stating that, unlike
+  `TamperedError.reason`, these five values are mechanism labels and **not** a
+  benign-vs-attack verdict.
+
+- A crash mid-shred no longer strands blob chunks under a retired DEK (#1127).
+
+  `releaseRef` deleted a blob's index row BEFORE its chunks. A crash in between
+  left chunk bodies nothing can ever reach: `loadBlobObject` returns null so no
+  reader addresses them, and `rekeyBlobSet` derives chunk ids from each index
+  entry's `chunkCount`, so a rotation walks straight past. For a **legacy** blob —
+  bytes under the `_blob` DEK itself rather than a per-blob content CEK — those
+  bodies stayed openable under the retired `_blob` DEK, which is exactly the key a
+  revoked member walked away with. Crash during `forget()`, revoke later, and real
+  blob content sat readable indefinitely.
+
+  It was silent on every side: no error at crash time (the marked shred path
+  catches per-hold and files the eTag under `residue`), no error at rotation time,
+  and the rotation reported success.
+
+  **The fix is the deletion ORDER, not a cleanup pass.** Chunks are now deleted
+  before the index row, so every chunk that survives has an index row, is
+  therefore reachable by `rekeyBlobSet`, and is therefore re-keyed. There is no
+  orphan to sweep because none is produced. The residue this leaves instead — an
+  index row whose chunks are partly gone — is strictly better: it is reachable, so
+  re-running `releaseRef` completes idempotently; `rekeyBlobSet` already tolerates
+  it; and it cannot leak, because the bytes that survive are the ones rotation
+  still covers.
+
+  This also makes one ordering rule true across the blob subsystem instead of two
+  opposite ones — `rekey-blob.ts` already re-encrypts chunks before re-sealing
+  their index entry and documents that order as its resume property.
+
+  **Deliberately not bundled: a sweep that deletes pre-existing orphans.** Such a
+  sweep must decide "orphaned" from `store.list(_blob_index)`, and the store is
+  untrusted. A store withholding one index row could make a live blob's chunks
+  look orphaned and have us destroy them — converting withholding, which is
+  reversible, into permanent loss. That is #1133.
+
+  One reader path needed a matching correction, found by the full suite rather
+  than by reasoning: `resolveRehomedVersionETag` read the OLD blob's bytes while
+  resuming a rehome. Under the previous order a crashed delete had already removed
+  the index row, so that read happened to see "absent"; with chunks going first
+  the row can outlive its own bytes, and the read raised `BlobOfflineError` on
+  content that was deliberately destroyed. It now keys off the LOGICAL state —
+  `refCount <= 0` means the last hold is released and the row is an un-reaped
+  tombstone — and still completes the interrupted deletion, which is what a resume
+  owes there. That is more correct under either order than relying on the row's
+  physical absence.
+
+  Two regression rows reproduce the crash window by throwing on the first chunk
+  delete, which is the injection point that separates the two orderings (an index
+  delete would pass under both). Verified to fail before the fix, with three real
+  chunk bodies still opening under `_blob` after revocation.
+
+- Document two silent traps in the query DSL that no gate could see (#1130, #1131).
+
+  Both were found by a pilot consumer, and both cost real time because the
+  published prose described a world that did not exist. Neither is a behaviour
+  change — the code is unchanged.
+
+  **`.crossJoin()` is an INNER join and says so nowhere.** Each left row is
+  emitted once per matching right row (`builder.ts:1487`), so an empty `on:`
+  subset drops the row with no error, no warning and no count mismatch. This
+  bites hardest on a reverse FK, where `.join()` — forward-only, and already a
+  genuine LEFT outer join — does not apply, so `.crossJoin()` is the only tool
+  and the natural fixture always has both sides present. The method doc now
+  carries the warning and the `[null]` idiom that restores the row, with a note
+  that `[null]` is load-bearing rather than a redundant fallback. A typed
+  `outer:` option is #1130.
+
+  **`live()`'s doc comment described four framework adapters, none of which
+  existed.** It named "the Vue layer" plus React/Solid/Svelte. The only binding
+  in the repo that wraps a `LiveQuery` is `@noy-db/in-pinia`'s
+  `store.liveQuery()` — which does subscribe-once, mirror into a `ShallowRef`,
+  re-read `error` on every notification, and dispose via `onScopeDispose`. A
+  consumer followed the comment to `@noy-db/in-vue`, found nothing, and
+  hand-rolled the glue; the error semantics are the half a hand-rolled wrapper
+  usually gets wrong. The comment now names the package and states outright that
+  the other bindings have no wrapper.
+
+  That claim is now enforced by `scripts/__tests__/live-query-bindings.test.ts`,
+  which asserts on **which packages actually call `.live()`** rather than on the
+  comment's wording — so it fails both when a documented wrapper disappears and
+  when an undocumented one appears. Verified capable of failing, not merely
+  passing. Same defect class as #1063/#1072: prose no gate reads.
+
 ## 0.6.0-pre.21
 
 ### Patch Changes

package/dist/api-D6DBNTOS.js

@@ -0,0 +1,20 @@
+import {
+  UserApi,
+  createUserApi
+} from "./chunk-PGHSH4TY.js";
+import "./chunk-KMGAFLCK.js";
+import "./chunk-DIVPOJPV.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-O5QXH7U7.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-PKUJ3JLQ.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  UserApi,
+  createUserApi
+};
+//# sourceMappingURL=api-D6DBNTOS.js.map

package/dist/attestation/index.js

@@ -1,42 +1,42 @@
 import {
   issueAttestationCore
-} from "../chunk-7LNE2N2V.js";
+} from "../chunk-OZ5QBLEL.js";
 import {
   getRevokedDocIdsCore,
   publishRevocationListCore,
   revokeDocCore,
   unrevokeDocCore
-} from "../chunk-DIZ6HM7Q.js";
+} from "../chunk-D5EXZVQC.js";
 import {
   ATTESTATIONS_COLLECTION
-} from "../chunk-ESKIAXO2.js";
+} from "../chunk-GWJJ5CK3.js";
 import {
   NO_ATTESTATION
-} from "../chunk-HR5R5JOM.js";
+} from "../chunk-NB2CKJ27.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-OHOKBMTM.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   AttestationError,
   AttestationNotEnabledError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/attestation/active.ts
 function withAttestation() {
   return {
     async issueAttestation(ctx, args) {
-      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-3JNJNPT3.js");
+      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-QTQYQJCB.js");
       return issueAttestationCore2(ctx, args);
     },
     async getDocumentSigningPublicKey(deps) {
-      const { loadSigner, loadOrCreateSigner } = await import("../signer-Q7XQBMPA.js");
+      const { loadSigner, loadOrCreateSigner } = await import("../signer-AFV6AXSN.js");
       const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK);
       if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
       if (deps.role !== "owner") {
@@ -46,19 +46,19 @@ function withAttestation() {
       return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 };
     },
     async revokeAttestation(ctx, docId) {
-      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-YXY6SHUH.js");
+      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-JH4VQTJ3.js");
       return revokeDocCore2(ctx, docId);
     },
     async unrevokeAttestation(ctx, docId) {
-      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-YXY6SHUH.js");
+      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-JH4VQTJ3.js");
       return unrevokeDocCore2(ctx, docId);
     },
     async getRevokedDocIds(ctx) {
-      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-YXY6SHUH.js");
+      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-JH4VQTJ3.js");
       return getRevokedDocIdsCore2(ctx);
     },
     async publishRevocationList(ctx) {
-      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-YXY6SHUH.js");
+      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-JH4VQTJ3.js");
       return publishRevocationListCore2(ctx);
     }
   };

package/dist/{backup-FSC36VWC.js → backup-4PZAH67W.js}

@@ -3,37 +3,37 @@ import {
 } from "./chunk-EPFF7LOX.js";
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-6WO62AJW.js";
+} from "./chunk-JPVJTTHU.js";
 import {
   SEQUENCE_COLLECTION
-} from "./chunk-YALD3SST.js";
+} from "./chunk-DIYI32MG.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
   PERIOD_FREEZES_COLLECTION,
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION
-} from "./chunk-A4TOGAUW.js";
+} from "./chunk-NCAMIRFB.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
 } from "./chunk-I7FD46FF.js";
-import "./chunk-OHOKBMTM.js";
+import "./chunk-DIVPOJPV.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AU3AUJIZ.js";
+import "./chunk-O5QXH7U7.js";
 import {
   NOYDB_BACKUP_VERSION
 } from "./chunk-IGNJOJEP.js";
 import {
   BackupCorruptedError,
   BackupLedgerError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/backup.ts
@@ -262,4 +262,4 @@ export {
   loadVault,
   verifyBackupIntegrity
 };
-//# sourceMappingURL=backup-FSC36VWC.js.map
+//# sourceMappingURL=backup-4PZAH67W.js.map

package/dist/blobs/index.js

@@ -16,7 +16,7 @@ import {
   detectMimeType,
   isPreCompressed,
   memoryBlobPinStore
-} from "../chunk-JLYQQNY4.js";
+} from "../chunk-PNXJV4OS.js";
 import {
   BLOB_EVICTION_AUDIT_COLLECTION,
   EXPORT_AUDIT_COLLECTION,
@@ -24,21 +24,21 @@ import {
   NO_BLOBS,
   createExportBlobsHandle,
   runCompaction
-} from "../chunk-4OQZNXQG.js";
-import "../chunk-JNMTN5D5.js";
-import "../chunk-NW4TY6VC.js";
-import "../chunk-PPCOKVFA.js";
-import "../chunk-OHOKBMTM.js";
+} from "../chunk-OBPL43F3.js";
+import "../chunk-7JOXCSDU.js";
+import "../chunk-OCW3IM2F.js";
+import "../chunk-WUNRUSBJ.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   BlobOfflineError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/via/blob/active.ts

package/dist/broker/index.js

@@ -1,22 +1,22 @@
 import {
   NO_BROKER
-} from "../chunk-OIBEJN5H.js";
+} from "../chunk-LLLSK7UQ.js";
 import {
   issueChallenge,
   verifyBrokerProof
-} from "../chunk-OHOKBMTM.js";
+} from "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   BrokerEnrolmentError,
   BrokerNotEnabledError,
   BrokerProofError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-party/broker/active.ts
@@ -30,7 +30,7 @@ function withBroker(config) {
   const cache = /* @__PURE__ */ new Map();
   return {
     async enroll(ctx) {
-      const { enrollSeed } = await import("../seed-DZ4ORU5N.js");
+      const { enrollSeed } = await import("../seed-R2JK2YQK.js");
       return enrollSeed({ ...ctx, config });
     },
     async rotate(ctx) {
@@ -39,7 +39,7 @@ function withBroker(config) {
       const inFlight = scoped.map(([, e]) => e.inFlight).filter((p) => p !== void 0);
       await Promise.allSettled(inFlight);
       for (const [key] of scoped) cache.delete(key);
-      const { rotateSeed } = await import("../seed-DZ4ORU5N.js");
+      const { rotateSeed } = await import("../seed-R2JK2YQK.js");
       return rotateSeed({ ...ctx, config });
     },
     credentialSource(ctx, profile) {
@@ -56,7 +56,7 @@ function withBroker(config) {
         const skewMs = config.skewMs ?? DEFAULT_SKEW_MS;
         const capturedEntry = entry;
         const inFlight = (async () => {
-          const { mintStoreCredentials } = await import("../seed-DZ4ORU5N.js");
+          const { mintStoreCredentials } = await import("../seed-R2JK2YQK.js");
           const creds = await mintStoreCredentials({ ...ctx, config }, profile);
           capturedEntry.cached = { creds, validUntil: cacheFloor(creds, skewMs) };
           return creds;

package/dist/cargo/index.js

@@ -6,66 +6,66 @@ import {
   diffVault,
   unsealDeks,
   withCargo
-} from "../chunk-E5SC6ENM.js";
+} from "../chunk-QTWWZ25B.js";
 import {
   extractPartition,
   walkClosure
-} from "../chunk-BAHOV5I5.js";
+} from "../chunk-M7VSXBUL.js";
 import {
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-HQSPF5IY.js";
-import "../chunk-5Q7AJ7DN.js";
-import "../chunk-GBBDFE6C.js";
+} from "../chunk-L3AM6EGU.js";
+import "../chunk-RJYPFCID.js";
+import "../chunk-BXHG26KN.js";
 import {
   NO_CARGO,
   isQuorum,
   runDrainBarrier
-} from "../chunk-FS7NTGCJ.js";
+} from "../chunk-ZAZW5LLF.js";
 import "../chunk-OTHHO3KI.js";
-import "../chunk-6WO62AJW.js";
+import "../chunk-JPVJTTHU.js";
 import {
   CustodyApi
-} from "../chunk-AUPSEJ7O.js";
-import "../chunk-QSIEL6TL.js";
-import "../chunk-S56VYR4Q.js";
+} from "../chunk-HZIIDYJV.js";
+import "../chunk-2VMCJUK6.js";
+import "../chunk-HRSEAGLI.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import "../chunk-JLYQQNY4.js";
+import "../chunk-PNXJV4OS.js";
 import {
   groupAndReduce,
   reduceRecords
-} from "../chunk-B6IYATME.js";
+} from "../chunk-PWK3SSNB.js";
 import "../chunk-XZHEOSQ2.js";
-import "../chunk-CADUYBQD.js";
+import "../chunk-ATL3ZVXT.js";
 import {
   readPath
-} from "../chunk-IGJCYUT5.js";
-import "../chunk-WVE6YKMX.js";
-import "../chunk-JNMTN5D5.js";
-import "../chunk-CAGI4LLJ.js";
-import "../chunk-LX46B56Q.js";
-import "../chunk-NW4TY6VC.js";
+} from "../chunk-NSITFOCJ.js";
+import "../chunk-CW3VJARJ.js";
+import "../chunk-7JOXCSDU.js";
+import "../chunk-FFESJQ5A.js";
+import "../chunk-KMGAFLCK.js";
+import "../chunk-OCW3IM2F.js";
 import {
   generateULID
 } from "../chunk-4AOERLTV.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-4A34KWOU.js";
+import "../chunk-H27DIXOV.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-ZLHHE5XZ.js";
-import "../chunk-PPCOKVFA.js";
-import "../chunk-OHOKBMTM.js";
+import "../chunk-47F6AI2K.js";
+import "../chunk-WUNRUSBJ.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
 import {
   sha256Hex
-} from "../chunk-AU3AUJIZ.js";
+} from "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   AdoptionStateError,
@@ -81,7 +81,7 @@ import {
   UnknownShardError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 export {
   AdoptionStateError,

package/dist/{chunk-ICDHUUMQ.js → chunk-23XKHFNT.js}

@@ -1,13 +1,13 @@
 import {
   readPath
-} from "./chunk-IGJCYUT5.js";
+} from "./chunk-NSITFOCJ.js";
 import {
   installViaBinder
-} from "./chunk-JNMTN5D5.js";
+} from "./chunk-7JOXCSDU.js";
 import {
   NoydbError,
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/via/money/iso4217.ts
 var MINOR_UNITS = {
@@ -1044,4 +1044,4 @@ export {
   decodeMoneyFields,
   exactMath
 };
-//# sourceMappingURL=chunk-ICDHUUMQ.js.map
+//# sourceMappingURL=chunk-23XKHFNT.js.map

package/dist/{chunk-6KTVJ5ZZ.js → chunk-2DFE4TUE.js}

@@ -1,13 +1,13 @@
 import {
   envelopePayloadHash
-} from "./chunk-ZLHHE5XZ.js";
+} from "./chunk-47F6AI2K.js";
 import {
   NOYDB_FORMAT_VERSION
 } from "./chunk-IGNJOJEP.js";
 import {
   DictKeyMissingError,
   PermissionDeniedError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/via/lookup/handle.ts
 function isDeleteMarker(envelope) {
@@ -392,4 +392,4 @@ export {
   dictCollectionName,
   LookupHandle
 };
-//# sourceMappingURL=chunk-6KTVJ5ZZ.js.map
+//# sourceMappingURL=chunk-2DFE4TUE.js.map

package/dist/{chunk-QSIEL6TL.js → chunk-2VMCJUK6.js}

@@ -1,14 +1,14 @@
 import {
   pickLocale
-} from "./chunk-S56VYR4Q.js";
+} from "./chunk-HRSEAGLI.js";
 import {
   sha256Hex
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-O5QXH7U7.js";
 import {
   PodIntegrityError,
   PodSealMismatchError,
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-pod/format.ts
 var NOYDB_POD_MAGIC = new Uint8Array([78, 68, 66, 49]);
@@ -812,7 +812,7 @@ async function applySatelliteLivenessFilter(vault, dumpJson) {
   if (!backup.collections || typeof backup.collections !== "object") return dumpJson;
   if (typeof vault._introspectState !== "function") return dumpJson;
   const { adapter, name, getDEK } = vault._introspectState();
-  const { liveBaseIdSetsForBundle } = await import("./dead-filter-UALP5DJX.js");
+  const { liveBaseIdSetsForBundle } = await import("./dead-filter-56AYTNAO.js");
   const satLive = await liveBaseIdSetsForBundle(adapter, name, Object.keys(backup.collections), getDEK);
   if (satLive.size === 0) return dumpJson;
   const next = {};
@@ -1059,4 +1059,4 @@ export {
   readPodRedirect,
   readPod
 };
-//# sourceMappingURL=chunk-QSIEL6TL.js.map
+//# sourceMappingURL=chunk-2VMCJUK6.js.map

package/dist/{chunk-EKEIEJL6.js → chunk-3TWEXEKX.js}

@@ -1,11 +1,11 @@
 import {
   evaluateClause,
   readPath
-} from "./chunk-IGJCYUT5.js";
+} from "./chunk-NSITFOCJ.js";
 import {
   FieldNotQueryableError,
   IndexRequiredError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-lookup/indexing/strategy.ts
 var NO_INDEXING = {
@@ -534,4 +534,4 @@ export {
   PersistedCollectionIndex,
   LazyQuery
 };
-//# sourceMappingURL=chunk-EKEIEJL6.js.map
+//# sourceMappingURL=chunk-3TWEXEKX.js.map