@noy-db/hub 0.6.0-pre.21 → 0.6.0-pre.22

package/dist/search/index.js

@@ -9,15 +9,15 @@ import {
   segmentTokens,
   tokenize,
   withSearch
-} from "../chunk-GTHVPVAR.js";
+} from "../chunk-QK2QAMF7.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import "../chunk-WVE6YKMX.js";
-import "../chunk-JNMTN5D5.js";
+import "../chunk-CW3VJARJ.js";
+import "../chunk-7JOXCSDU.js";
 import {
   SearchNotEnabledError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 export {
   InvertedIndex,

package/dist/{seed-DZ4ORU5N.js → seed-R2JK2YQK.js}

@@ -1,25 +1,25 @@
 import {
   BROKER_COLLECTION,
   ensureCollectionDEK
-} from "./chunk-CAGI4LLJ.js";
-import "./chunk-LX46B56Q.js";
+} from "./chunk-FFESJQ5A.js";
+import "./chunk-KMGAFLCK.js";
 import {
   computeBrokerProof,
   deriveBrokerProofBits,
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-DIVPOJPV.js";
 import {
   buildSealedRecordEnvelope
 } from "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
   bufferToBase64
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-O5QXH7U7.js";
 import "./chunk-IGNJOJEP.js";
 import {
   BrokerEnrolmentError,
@@ -28,7 +28,7 @@ import {
   PermissionDeniedError,
   ValidationError,
   isConflictError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-party/broker/seed.ts
@@ -225,4 +225,4 @@ export {
   mintStoreCredentials,
   rotateSeed
 };
-//# sourceMappingURL=seed-DZ4ORU5N.js.map
+//# sourceMappingURL=seed-R2JK2YQK.js.map

package/dist/sequence/index.js

@@ -5,18 +5,18 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "../chunk-YALD3SST.js";
-import "../chunk-OHOKBMTM.js";
+} from "../chunk-DIYI32MG.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   SequenceNotEnabledError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_SEQUENCE,

package/dist/session/index.js

@@ -12,24 +12,24 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "../chunk-CLAHBPOI.js";
+} from "../chunk-6ZGDIN2D.js";
 import {
   NO_SESSION
 } from "../chunk-VKQCVU2Z.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-OHOKBMTM.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,
   SessionPolicyError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-party/session/active.ts

package/dist/shadow/index.js

@@ -1,11 +1,11 @@
 import {
   CollectionFrame,
   VaultFrame
-} from "../chunk-I6QKB7MT.js";
+} from "../chunk-L2YYIQYR.js";
 import {
   NO_SHADOW
 } from "../chunk-SMY5X46Z.js";
-import "../chunk-CWM4GQD2.js";
+import "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/shadow/active.ts

package/dist/{signer-Q7XQBMPA.js → signer-AFV6AXSN.js}

@@ -4,16 +4,16 @@ import {
   SIGNER_RECORD_ID,
   loadOrCreateSigner,
   loadSigner
-} from "./chunk-ESKIAXO2.js";
-import "./chunk-OHOKBMTM.js";
+} from "./chunk-GWJJ5CK3.js";
+import "./chunk-DIVPOJPV.js";
 import "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AU3AUJIZ.js";
+import "./chunk-O5QXH7U7.js";
 import "./chunk-IGNJOJEP.js";
-import "./chunk-CWM4GQD2.js";
+import "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ATTESTATIONS_COLLECTION,
@@ -22,4 +22,4 @@ export {
   loadOrCreateSigner,
   loadSigner
 };
-//# sourceMappingURL=signer-Q7XQBMPA.js.map
+//# sourceMappingURL=signer-AFV6AXSN.js.map

package/dist/snapshots/index.js

@@ -4,19 +4,19 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-QSIEL6TL.js";
-import "../chunk-S56VYR4Q.js";
-import "../chunk-OHOKBMTM.js";
+} from "../chunk-2VMCJUK6.js";
+import "../chunk-HRSEAGLI.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/snapshots/engine.ts

package/dist/{stale-NI7SAXAZ.js → stale-FVK3WRMM.js}

@@ -6,17 +6,17 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-EES37S2V.js";
+} from "./chunk-WFC2GHJG.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-OHOKBMTM.js";
+import "./chunk-DIVPOJPV.js";
 import "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AU3AUJIZ.js";
+import "./chunk-O5QXH7U7.js";
 import "./chunk-IGNJOJEP.js";
-import "./chunk-CWM4GQD2.js";
+import "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-NI7SAXAZ.js.map
+//# sourceMappingURL=stale-FVK3WRMM.js.map

package/dist/{storage-3VNGSHXS.js → storage-EIM5HO2O.js}

@@ -3,16 +3,16 @@ import {
   loadPersistedSchema,
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-6WO62AJW.js";
-import "./chunk-OHOKBMTM.js";
+} from "./chunk-JPVJTTHU.js";
+import "./chunk-DIVPOJPV.js";
 import "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AU3AUJIZ.js";
+import "./chunk-O5QXH7U7.js";
 import "./chunk-IGNJOJEP.js";
-import "./chunk-CWM4GQD2.js";
+import "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   SCHEMAS_COLLECTION,
@@ -20,4 +20,4 @@ export {
   loadPersistedSchemaEntry,
   savePersistedSchema
 };
-//# sourceMappingURL=storage-3VNGSHXS.js.map
+//# sourceMappingURL=storage-EIM5HO2O.js.map

package/dist/{store-coordination-provider-TYKNR3OU.js → store-coordination-provider-HIPOZMC2.js}

@@ -2,17 +2,17 @@ import {
   loadFence,
   saveFence
 } from "./chunk-FFSQFH6D.js";
-import "./chunk-OHOKBMTM.js";
+import "./chunk-DIVPOJPV.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AU3AUJIZ.js";
+import "./chunk-O5QXH7U7.js";
 import "./chunk-IGNJOJEP.js";
-import "./chunk-CWM4GQD2.js";
+import "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -145,4 +145,4 @@ function unref(timer) {
 export {
   StoreCoordinationProvider
 };
-//# sourceMappingURL=store-coordination-provider-TYKNR3OU.js.map
+//# sourceMappingURL=store-coordination-provider-HIPOZMC2.js.map

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-4N5Q23KV.js";
+} from "../chunk-ZUDIY7YP.js";
 import {
   NO_SYNC
 } from "../chunk-T7IR4N2S.js";
-import "../chunk-A4TOGAUW.js";
-import "../chunk-OHOKBMTM.js";
+import "../chunk-NCAMIRFB.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
-import "../chunk-CWM4GQD2.js";
+import "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -2,7 +2,7 @@ import {
   MemoryDeviceSealProvider,
   beginEchoUnlock,
   withTeam
-} from "../chunk-45YHJ3GV.js";
+} from "../chunk-7LJA7T4W.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,7 +31,7 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-NCCEDL2K.js";
+} from "../chunk-F5IFR56V.js";
 import "../chunk-3ENNPCIW.js";
 import {
   buildEchoBlock,
@@ -53,21 +53,21 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-CAGI4LLJ.js";
-import "../chunk-LX46B56Q.js";
-import "../chunk-NW4TY6VC.js";
-import "../chunk-PPCOKVFA.js";
-import "../chunk-OHOKBMTM.js";
+} from "../chunk-FFESJQ5A.js";
+import "../chunk-KMGAFLCK.js";
+import "../chunk-OCW3IM2F.js";
+import "../chunk-WUNRUSBJ.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   TeamNotEnabledError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MemoryDeviceSealProvider,

package/dist/tiers/index.js

@@ -11,20 +11,20 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-4YL2LMXK.js";
-import "../chunk-NW4TY6VC.js";
-import "../chunk-PPCOKVFA.js";
-import "../chunk-OHOKBMTM.js";
+} from "../chunk-SRR22EW2.js";
+import "../chunk-OCW3IM2F.js";
+import "../chunk-WUNRUSBJ.js";
+import "../chunk-DIVPOJPV.js";
 import "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AU3AUJIZ.js";
+import "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
 import {
   TiersNotEnabledError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -5,7 +5,7 @@ import {
   PodVersionConflictError,
   StoreCapabilityError,
   UnknownStoreKindError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/port/to/locator.ts

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-2LFOMUEA.js";
+} from "../chunk-FGZ7GJXO.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-CWM4GQD2.js";
+import "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-DVJAWN3B.js"));
+var loadGuardExecutor = lazy(() => import("../executor-6YQYFGHK.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-CWM4GQD2.js";
+} from "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/vault-head/index.js

@@ -6,19 +6,19 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "../chunk-OHOKBMTM.js";
+} from "../chunk-DIVPOJPV.js";
 import {
   buildRecordEnvelope
 } from "../chunk-PENPHA45.js";
-import "../chunk-GQXFOAYZ.js";
-import "../chunk-KV6JM2IA.js";
-import "../chunk-TMBSPLUG.js";
+import "../chunk-IUQPNAGR.js";
+import "../chunk-AELW6OJZ.js";
+import "../chunk-DUUARUZI.js";
 import "../chunk-LP7BEXCT.js";
 import {
   encrypt
-} from "../chunk-AU3AUJIZ.js";
+} from "../chunk-O5QXH7U7.js";
 import "../chunk-IGNJOJEP.js";
-import "../chunk-CWM4GQD2.js";
+import "../chunk-PKUJ3JLQ.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/vault-head/head.ts

package/dist/{verify-6J2YLKSO.js → verify-KYICK5IW.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-GQXFOAYZ.js";
+} from "./chunk-IUQPNAGR.js";
 import {
   dualReadSealedSlot
-} from "./chunk-KV6JM2IA.js";
+} from "./chunk-AELW6OJZ.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-O5QXH7U7.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-6J2YLKSO.js.map
+//# sourceMappingURL=verify-KYICK5IW.js.map

package/dist/walk-FV6JFWXV.js

@@ -0,0 +1,21 @@
+import {
+  dumpVaultSchema
+} from "./chunk-MQFKH3ZJ.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-BPLSGN4X.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-JPVJTTHU.js";
+import "./chunk-DIVPOJPV.js";
+import "./chunk-PENPHA45.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-O5QXH7U7.js";
+import "./chunk-IGNJOJEP.js";
+import "./chunk-PKUJ3JLQ.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-FV6JFWXV.js.map

package/dist/with-shape/blobs/blob-set.d.ts

@@ -424,16 +424,68 @@ export declare class BlobSet {
      *  - not yet stamped → apply via `casUpdateRefCountStamped`, then proceed
      *    exactly like the unstamped path below.
      *
-     * A crash can also land AFTER the index row is deleted but BEFORE every
-     * chunk is — `loadBlobObject` then returns null (indistinguishable from
-     * "never existed") and the object's `chunkCount` is gone with it. A
-     * stamped caller who knows the true count (the journal marker's captured
-     * `holds`, once that plumbing lands) supplies it via `chunkCountHint` so
-     * this call can still finish the chunk deletion; without it, an
-     * already-index-gone eTag is reported `'shredded'` same as today (best
+     * A crash can also land part-way through the deletion itself. Since #1127
+     * that deletion runs CHUNKS FIRST (see `deleteChunksThenIndex`), so what
+     * survives is an index row with some chunks already gone — a reachable,
+     * re-runnable state rather than chunks nothing can ever address again.
+     *
+     * An eTag whose index row is ALREADY absent on entry is therefore either
+     * pre-#1127 residue or a completed deletion. `loadBlobObject` returns null
+     * (indistinguishable from "never existed") and the object's `chunkCount` is
+     * gone with it. A stamped caller who knows the true count (the journal
+     * marker's captured `holds`, once that plumbing lands) supplies it via
+     * `chunkCountHint` so this call can still finish the chunk deletion; without
+     * it, an already-index-gone eTag is reported `'shredded'` same as today (best
      * effort — nothing left to key the cleanup off of).
      */
     private releaseRef;
+    /**
+     * Delete a blob's chunks, THEN its index row. The order is the whole point
+     * (#1127).
+     *
+     * Both deletions used to run index-first, which meant a crash in between
+     * stranded chunks with no index row. Nothing can ever reach those again:
+     * `loadBlobObject` returns null, so no reader addresses them — and
+     * `rekeyBlobSet` derives its chunk ids from each index entry's `chunkCount`,
+     * so a rotation never visits them either. For a LEGACY blob (bytes under the
+     * `_blob` DEK itself rather than a per-blob content CEK) the bodies then stay
+     * openable under the retired `_blob` DEK — precisely the key a revoked member
+     * walked away with. Crash during `forget()`, revoke later, and real blob
+     * content sits readable indefinitely, with no error on either side.
+     *
+     * Reversing it removes the class rather than cleaning up after it: every
+     * chunk that still exists has an index row, so every chunk is reachable by
+     * `rekeyBlobSet` and gets re-keyed. There is no orphan to sweep because none
+     * is produced.
+     *
+     * The residue this ordering leaves instead is an index row whose chunks are
+     * partly gone. That state is better, but it is NOT free — it cost one reader
+     * correction (`resolveRehomedVersionETag`, which read an old blob's bytes
+     * while resuming a rehome and now checks `refCount <= 0` instead of relying
+     * on the row having vanished). An earlier draft of this comment called the
+     * new state "strictly better"; the full suite disproved that, and any future
+     * path that reads a blob by index needs the same care. What is true of it:
+     *   - it is REACHABLE, so a re-run of `releaseRef` completes the deletion
+     *     idempotently (both `store.delete` calls are void on an absent key);
+     *   - `rekeyBlobSet` already tolerates it — a missing chunk hits its
+     *     `if (!chunkEnv || !chunkEnv._iv) continue`, so a rotation still
+     *     succeeds and still re-keys every chunk that remains;
+     *   - it cannot leak, because the bytes that survive are the ones still
+     *     covered by rotation.
+     *
+     * This also makes one ordering rule true across the blob subsystem rather
+     * than two opposite ones: `kernel/enclave/record-keys/rekey-blob.ts` already
+     * re-encrypts chunks before re-sealing their index entry, and documents that
+     * order as its resume property.
+     *
+     * Deliberately NOT paired with a sweep that deletes pre-existing orphans:
+     * such a sweep must decide "orphaned" from `store.list(_blob_index)`, and the
+     * store is untrusted. A store that withholds one index row could make a LIVE
+     * blob's chunks look orphaned and have us destroy them — turning withholding,
+     * which is reversible, into permanent loss. Reporting them is safe; deleting
+     * them on the store's word is not. See #1133 for the report-then-reclaim follow-up.
+     */
+    private deleteChunksThenIndex;
     /**
      * Crypto-shred this record's blob attachments — called by
      * `vault.forget()`.

package/dist/{withdraw-accessible-4JTDFRFZ.js → withdraw-accessible-JYX3SPVY.js}

@@ -4,19 +4,19 @@ import {
   freezeSnapshotOnly,
   randomId,
   withdrawAccessibleData
-} from "./chunk-5Q7AJ7DN.js";
-import "./chunk-GBBDFE6C.js";
-import "./chunk-QSIEL6TL.js";
-import "./chunk-S56VYR4Q.js";
-import "./chunk-OHOKBMTM.js";
+} from "./chunk-RJYPFCID.js";
+import "./chunk-BXHG26KN.js";
+import "./chunk-2VMCJUK6.js";
+import "./chunk-HRSEAGLI.js";
+import "./chunk-DIVPOJPV.js";
 import "./chunk-PENPHA45.js";
-import "./chunk-GQXFOAYZ.js";
-import "./chunk-KV6JM2IA.js";
-import "./chunk-TMBSPLUG.js";
+import "./chunk-IUQPNAGR.js";
+import "./chunk-AELW6OJZ.js";
+import "./chunk-DUUARUZI.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AU3AUJIZ.js";
+import "./chunk-O5QXH7U7.js";
 import "./chunk-IGNJOJEP.js";
-import "./chunk-CWM4GQD2.js";
+import "./chunk-PKUJ3JLQ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   FROZEN_SNAPSHOTS_COLLECTION,
@@ -25,4 +25,4 @@ export {
   randomId,
   withdrawAccessibleData
 };
-//# sourceMappingURL=withdraw-accessible-4JTDFRFZ.js.map
+//# sourceMappingURL=withdraw-accessible-JYX3SPVY.js.map