@noy-db/hub 0.6.0-pre.21 → 0.6.0-pre.22

package/dist/{chunk-BAHOV5I5.js → chunk-M7VSXBUL.js}

@@ -1,10 +1,10 @@
 import {
   SCHEMAS_COLLECTION
-} from "./chunk-6WO62AJW.js";
+} from "./chunk-JPVJTTHU.js";
 import {
   assemblePodContainer,
   buildExtractedPartitionWrapper
-} from "./chunk-QSIEL6TL.js";
+} from "./chunk-2VMCJUK6.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -12,7 +12,7 @@ import {
   BLOB_INTENT_COLLECTION,
   BLOB_SLOTS_PREFIX,
   BLOB_VERSIONS_PREFIX
-} from "./chunk-JLYQQNY4.js";
+} from "./chunk-PNXJV4OS.js";
 import {
   generateULID
 } from "./chunk-4AOERLTV.js";
@@ -23,13 +23,13 @@ import {
   canonicalJson,
   envelopePayloadHash,
   hashEntry
-} from "./chunk-ZLHHE5XZ.js";
+} from "./chunk-47F6AI2K.js";
 import {
   buildRecordAad,
   openEnvelopeJson,
   recordAadFor,
   writeEnvelopeBody
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-DIVPOJPV.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
@@ -42,13 +42,13 @@ import {
   generateDEK,
   unwrapCek,
   wrapCek
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-O5QXH7U7.js";
 import {
   NOYDB_BACKUP_VERSION
 } from "./chunk-IGNJOJEP.js";
 import {
   PartitionExtractionError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-cargo/walk-closure.ts
 async function walkClosure(vault, opts) {
@@ -494,4 +494,4 @@ export {
   extractPartition,
   extractPartitionCore
 };
-//# sourceMappingURL=chunk-BAHOV5I5.js.map
+//# sourceMappingURL=chunk-M7VSXBUL.js.map

package/dist/{chunk-LXECF2ZR.js → chunk-MBZFAJKM.js}

@@ -1,7 +1,7 @@
 import {
   MaterializedViewConfigError,
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-formula/materialized-views/with-materialized-view.ts
 function withMaterializedView(spec) {
@@ -177,4 +177,4 @@ function withMaterializedView(spec) {
 export {
   withMaterializedView
 };
-//# sourceMappingURL=chunk-LXECF2ZR.js.map
+//# sourceMappingURL=chunk-MBZFAJKM.js.map

package/dist/{chunk-DXKLLKME.js → chunk-MQFKH3ZJ.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-KHKKD62N.js";
 import {
   derivePersistedSchema
-} from "./chunk-ONVD6GBY.js";
+} from "./chunk-BPLSGN4X.js";
 import {
   loadPersistedSchema
-} from "./chunk-6WO62AJW.js";
+} from "./chunk-JPVJTTHU.js";
 
 // src/with-shape/introspection/walk.ts
 var INTERNAL_PREFIX = "_";
@@ -238,4 +238,4 @@ function summariseAggregateOp(value) {
 export {
   dumpVaultSchema
 };
-//# sourceMappingURL=chunk-DXKLLKME.js.map
+//# sourceMappingURL=chunk-MQFKH3ZJ.js.map

package/dist/{chunk-HR5R5JOM.js → chunk-NB2CKJ27.js}

@@ -1,6 +1,6 @@
 import {
   AttestationNotEnabledError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-audit/attestation/strategy.ts
 var NO_ATTESTATION = {
@@ -27,4 +27,4 @@ var NO_ATTESTATION = {
 export {
   NO_ATTESTATION
 };
-//# sourceMappingURL=chunk-HR5R5JOM.js.map
+//# sourceMappingURL=chunk-NB2CKJ27.js.map

package/dist/{chunk-A4TOGAUW.js → chunk-NCAMIRFB.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-audit/periods/window.ts
 var PERIODS_COLLECTION = "_periods";
@@ -23,4 +23,4 @@ export {
   PERIOD_REOPENS_COLLECTION,
   periodExclusiveUpperBound
 };
-//# sourceMappingURL=chunk-A4TOGAUW.js.map
+//# sourceMappingURL=chunk-NCAMIRFB.js.map

package/dist/{chunk-MSLPDFK2.js → chunk-NHXIFF4Y.js}

@@ -7,7 +7,7 @@ import {
   deriveSchemaManifest,
   loadSchemaManifestEntry,
   saveSchemaManifest
-} from "./chunk-BEZDLIDG.js";
+} from "./chunk-OIW75CLW.js";
 import {
   MANIFEST_COLLECTION
 } from "./chunk-EPFF7LOX.js";
@@ -17,18 +17,18 @@ import {
 } from "./chunk-FFSQFH6D.js";
 import {
   derivePersistedSchema
-} from "./chunk-ONVD6GBY.js";
+} from "./chunk-BPLSGN4X.js";
 import {
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-6WO62AJW.js";
+} from "./chunk-JPVJTTHU.js";
 import {
   envelopePayloadHash
-} from "./chunk-ZLHHE5XZ.js";
+} from "./chunk-47F6AI2K.js";
 import {
   ManifestConflictError,
   isConflictError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-shape/persisted-schemas/field-ids.ts
 var BASE32URL_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
@@ -257,4 +257,4 @@ export {
   persistClassifiedMarker,
   persistSatelliteMarker
 };
-//# sourceMappingURL=chunk-MSLPDFK2.js.map
+//# sourceMappingURL=chunk-NHXIFF4Y.js.map

package/dist/{chunk-IGJCYUT5.js → chunk-NSITFOCJ.js}

@@ -96,4 +96,4 @@ export {
   evaluateClause,
   hasFnClause
 };
-//# sourceMappingURL=chunk-IGJCYUT5.js.map
+//# sourceMappingURL=chunk-NSITFOCJ.js.map

package/dist/chunk-NSITFOCJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/kernel/query/predicate.ts"],"sourcesContent":["/**\n * Operator implementations for the query DSL.\n *\n * All predicates run client-side, AFTER decryption — they never see ciphertext.\n * Field clauses over a Via-covered field (e.g. money) carry their own\n * evaluator closure (see {@link FieldClause.via}), so this module has no\n * dependency on any Via feature's implementation — still tree-shakeable.\n */\n\n/** Comparison operators supported by the where() builder. */\nexport type Operator =\n  | '=='\n  | '!='\n  | '<'\n  | '<='\n  | '>'\n  | '>='\n  | 'in'\n  | 'contains'\n  | 'startsWith'\n  | 'between'\n\n/**\n * A single field comparison clause inside a query plan.\n * Plans are JSON-serializable, so this type uses primitives only.\n */\nexport interface FieldClause {\n  readonly type: 'field'\n  readonly field: string\n  readonly op: Operator\n  readonly value: unknown\n  /**\n   * Present when `field` is covered by a Via feature binding (e.g. a\n   * declared money field): the opaque payload built by the binding's\n   * `buildClause` at query BUILD time, plus a closure that evaluates it\n   * per record via the binding's `evaluateClause`. Attached by\n   * `Query.where()` / `ScanBuilder.where()` when `source.via` covers the\n   * field. The closure keeps this module free of any dependency on a\n   * Via feature's implementation — clauses are in-memory only, never\n   * serialized, so carrying a function here is safe.\n   */\n  readonly via?: {\n    readonly brand: string\n    readonly payload: unknown\n    readonly evaluate: (actual: unknown, op: string) => boolean\n    /**\n     * The binding's `indexProbe` result for this clause's op/payload\n     * (#625) — the STORED-form operand `candidateRecords()` (`kernel/\n     * query/builder.ts`) can hand to `CollectionIndexes.lookupEqual`/\n     * `lookupIn` for a fast path. `undefined` (no `indexProbe` hook, or\n     * the binding declined to probe this op) means the field must fall\n     * back to a linear scan via `evaluate` above.\n     */\n    readonly indexValue?: unknown\n  }\n}\n\n/**\n * A user-supplied predicate function escape hatch. Not serializable.\n *\n * The predicate accepts `unknown` at the type level so the surrounding\n * Clause type can stay non-parametric — this keeps Collection<T> covariant\n * in T at the public API surface. Builder methods cast user predicates\n * (typed `(record: T) => boolean`) into this shape on the way in.\n */\nexport interface FilterClause {\n  readonly type: 'filter'\n  readonly fn: (record: unknown) => boolean\n}\n\n/**\n * A declared deterministic predicate reference. The query\n * builder produces this via `.wherePredicate(name, ctx?)` when a\n * Query has been augmented with a predicates map (typically by the\n * materialized-view registry).\n *\n * `predicateHash` is the consumer-supplied stable hash for the\n * function body; `ctxHash` is the canonical-JSON SHA-256 of `ctx`.\n * Both fold into the MV's `queryHash` so a function or ctx change\n * forces refresh on next visit.\n *\n * `fn` is resolved at builder time from the predicates map and\n * embedded directly — so `evaluateClause` can fire it without a\n * runtime lookup.\n */\nexport interface WherePredicateClause {\n  readonly type: 'wherePredicate'\n  readonly name: string\n  readonly ctx: unknown\n  readonly predicateHash: string\n  readonly ctxHash: string\n  readonly fn: (record: unknown, ctx?: unknown) => boolean\n}\n\n/** A logical group of clauses combined by AND or OR. */\nexport interface GroupClause {\n  readonly type: 'group'\n  readonly op: 'and' | 'or'\n  readonly clauses: readonly Clause[]\n}\n\n/**\n * Cartesian-product expansion clause. Appended to `QueryPlan.clauses`\n * by `Query.crossJoin()`. Processed in declaration order by\n * `executeClausePipeline` — NOT by `evaluateClause` (which is a\n * per-record predicate and throws on this type).\n */\nexport interface CrossJoinClause {\n  readonly type: 'crossJoin'\n  /** Target collection name to cross-join against. */\n  readonly target: string\n  /** Alias under which the right-side record is exposed on each result row. */\n  readonly as: string\n  /**\n   * Lateral filter callback. `undefined` → full cartesian product.\n   * Two call shapes:\n   *   - Subset:    `(left) => TTarget[]`            — returns the right rows for this left row\n   *   - Predicate: `(left) => (right) => boolean`   — executor materializes then filters\n   */\n  readonly on?: (left: unknown) => unknown[] | ((right: unknown) => boolean)\n  /** When `on:` was supplied as `{ predicate: name }`, the name is stored here for queryHash. */\n  readonly onPredicateName?: string\n  /** Per-clause row ceiling override. `undefined` → `DEFAULT_CROSS_JOIN_MAX_ROWS`. */\n  readonly maxRows?: number\n  /**\n   * Left-outer mode (#1130). When the `on:` subset for a left row is empty,\n   * emit that row once with `null` under `as` instead of dropping it.\n   *\n   * Applies to both call shapes. With `on:` the empty thing is that left\n   * row's subset; without it, an empty TARGET collection is what would\n   * otherwise drop every left row.\n   */\n  readonly outer?: boolean\n}\n\nexport type Clause = FieldClause | FilterClause | WherePredicateClause | GroupClause | CrossJoinClause\n\n/**\n * Read a possibly nested field path like \"address.city\" from a record.\n * Returns undefined if any segment is missing.\n */\nexport function readPath(record: unknown, path: string): unknown {\n  if (record === null || record === undefined) return undefined\n  if (!path.includes('.')) {\n    return (record as Record<string, unknown>)[path]\n  }\n  const segments = path.split('.')\n  let cursor: unknown = record\n  for (const segment of segments) {\n    if (cursor === null || cursor === undefined) return undefined\n    cursor = (cursor as Record<string, unknown>)[segment]\n  }\n  return cursor\n}\n\n/**\n * Evaluate a single field clause against a record.\n * Returns false on type mismatches rather than throwing — query results\n * exclude non-matching records by definition.\n */\nexport function evaluateFieldClause(record: unknown, clause: FieldClause): boolean {\n  const actual = readPath(record, clause.field)\n  const { op, value } = clause\n\n  // A Via-covered field (e.g. money) may store a transformed\n  // representation (money: BigInt-exact in scaled-integer space) that the\n  // generic paths below can't compare correctly — the operand was\n  // pre-built at query BUILD time and the binding's own evaluator knows\n  // how to compare it against the raw stored value.\n  if (clause.via) return clause.via.evaluate(actual, op)\n\n  switch (op) {\n    case '==':\n      return actual === value\n    case '!=':\n      return actual !== value\n    case '<':\n      return isComparable(actual, value) && (actual as number) < (value as number)\n    case '<=':\n      return isComparable(actual, value) && (actual as number) <= (value as number)\n    case '>':\n      return isComparable(actual, value) && (actual as number) > (value as number)\n    case '>=':\n      return isComparable(actual, value) && (actual as number) >= (value as number)\n    case 'in':\n      return Array.isArray(value) && value.includes(actual)\n    case 'contains':\n      if (typeof actual === 'string') return typeof value === 'string' && actual.includes(value)\n      if (Array.isArray(actual)) return actual.includes(value)\n      return false\n    case 'startsWith':\n      return typeof actual === 'string' && typeof value === 'string' && actual.startsWith(value)\n    case 'between': {\n      if (!Array.isArray(value) || value.length !== 2) return false\n      const [lo, hi] = value\n      if (!isComparable(actual, lo) || !isComparable(actual, hi)) return false\n      return (actual as number) >= (lo as number) && (actual as number) <= (hi as number)\n    }\n    default: {\n      // Exhaustiveness — TS will error if a new operator is added without a case.\n      const _exhaustive: never = op\n      void _exhaustive\n      return false\n    }\n  }\n}\n\n/**\n * Two values are \"comparable\" if they share an order-defined runtime type.\n * Strings compare lexicographically; numbers and Dates numerically; otherwise false.\n */\nfunction isComparable(a: unknown, b: unknown): boolean {\n  if (typeof a === 'number' && typeof b === 'number') return true\n  if (typeof a === 'string' && typeof b === 'string') return true\n  if (a instanceof Date && b instanceof Date) return true\n  return false\n}\n\n/**\n * Evaluate any clause (field / filter / group) against a record.\n * The recursion depth is bounded by the user's query expression — no risk of\n * blowing the stack on a 50K-record collection.\n *\n * `fnRecord`, when provided, is the view handed to USER CALLBACK clauses\n * (`filter` / `wherePredicate`) instead of `record` — the executor passes\n * the money-decoded view there so user code never sees the stored\n * scaled-int form, while field clauses keep evaluating against the raw\n * record (their money operands are pre-quantized to that space).\n */\nexport function evaluateClause(record: unknown, clause: Clause, fnRecord?: unknown): boolean {\n  switch (clause.type) {\n    case 'field':\n      return evaluateFieldClause(record, clause)\n    case 'filter':\n      return clause.fn(fnRecord !== undefined ? fnRecord : record)\n    case 'wherePredicate':\n      return clause.fn(fnRecord !== undefined ? fnRecord : record, clause.ctx)\n    case 'crossJoin':\n      throw new Error(\n        `evaluateClause: 'crossJoin' clauses are expansion primitives and are not ` +\n          `evaluated per-record. This is a query planner routing error — ` +\n          `crossJoin clauses must be extracted from the clause list before calling ` +\n          `evaluateClause or filterRecords.`,\n      )\n    case 'group':\n      if (clause.op === 'and') {\n        for (const child of clause.clauses) {\n          if (!evaluateClause(record, child, fnRecord)) return false\n        }\n        return true\n      } else {\n        for (const child of clause.clauses) {\n          if (evaluateClause(record, child, fnRecord)) return true\n        }\n        return false\n      }\n  }\n}\n\n/**\n * Does the clause list contain any user-callback clause (filter /\n * wherePredicate), at any group nesting depth? Used by executors to\n * decide whether the per-record decoded view needs materializing.\n */\nexport function hasFnClause(clauses: readonly Clause[]): boolean {\n  for (const c of clauses) {\n    if (c.type === 'filter' || c.type === 'wherePredicate') return true\n    if (c.type === 'group' && hasFnClause(c.clauses)) return true\n  }\n  return false\n}\n"],"mappings":";AA6IO,SAAS,SAAS,QAAiB,MAAuB;AAC/D,MAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,MAAI,CAAC,KAAK,SAAS,GAAG,GAAG;AACvB,WAAQ,OAAmC,IAAI;AAAA,EACjD;AACA,QAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,MAAI,SAAkB;AACtB,aAAW,WAAW,UAAU;AAC9B,QAAI,WAAW,QAAQ,WAAW,OAAW,QAAO;AACpD,aAAU,OAAmC,OAAO;AAAA,EACtD;AACA,SAAO;AACT;AAOO,SAAS,oBAAoB,QAAiB,QAA8B;AACjF,QAAM,SAAS,SAAS,QAAQ,OAAO,KAAK;AAC5C,QAAM,EAAE,IAAI,MAAM,IAAI;AAOtB,MAAI,OAAO,IAAK,QAAO,OAAO,IAAI,SAAS,QAAQ,EAAE;AAErD,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO,WAAW;AAAA,IACpB,KAAK;AACH,aAAO,WAAW;AAAA,IACpB,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,SAAqB;AAAA,IAC9D,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,UAAsB;AAAA,IAC/D,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,SAAqB;AAAA,IAC9D,KAAK;AACH,aAAO,aAAa,QAAQ,KAAK,KAAM,UAAsB;AAAA,IAC/D,KAAK;AACH,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,MAAM;AAAA,IACtD,KAAK;AACH,UAAI,OAAO,WAAW,SAAU,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AACzF,UAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,SAAS,KAAK;AACvD,aAAO;AAAA,IACT,KAAK;AACH,aAAO,OAAO,WAAW,YAAY,OAAO,UAAU,YAAY,OAAO,WAAW,KAAK;AAAA,IAC3F,KAAK,WAAW;AACd,UAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO;AACxD,YAAM,CAAC,IAAI,EAAE,IAAI;AACjB,UAAI,CAAC,aAAa,QAAQ,EAAE,KAAK,CAAC,aAAa,QAAQ,EAAE,EAAG,QAAO;AACnE,aAAQ,UAAsB,MAAkB,UAAsB;AAAA,IACxE;AAAA,IACA,SAAS;AAEP,YAAM,cAAqB;AAC3B,WAAK;AACL,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAMA,SAAS,aAAa,GAAY,GAAqB;AACrD,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,aAAa,QAAQ,aAAa,KAAM,QAAO;AACnD,SAAO;AACT;AAaO,SAAS,eAAe,QAAiB,QAAgB,UAA6B;AAC3F,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK;AACH,aAAO,oBAAoB,QAAQ,MAAM;AAAA,IAC3C,KAAK;AACH,aAAO,OAAO,GAAG,aAAa,SAAY,WAAW,MAAM;AAAA,IAC7D,KAAK;AACH,aAAO,OAAO,GAAG,aAAa,SAAY,WAAW,QAAQ,OAAO,GAAG;AAAA,IACzE,KAAK;AACH,YAAM,IAAI;AAAA,QACR;AAAA,MAIF;AAAA,IACF,KAAK;AACH,UAAI,OAAO,OAAO,OAAO;AACvB,mBAAW,SAAS,OAAO,SAAS;AAClC,cAAI,CAAC,eAAe,QAAQ,OAAO,QAAQ,EAAG,QAAO;AAAA,QACvD;AACA,eAAO;AAAA,MACT,OAAO;AACL,mBAAW,SAAS,OAAO,SAAS;AAClC,cAAI,eAAe,QAAQ,OAAO,QAAQ,EAAG,QAAO;AAAA,QACtD;AACA,eAAO;AAAA,MACT;AAAA,EACJ;AACF;AAOO,SAAS,YAAY,SAAqC;AAC/D,aAAW,KAAK,SAAS;AACvB,QAAI,EAAE,SAAS,YAAY,EAAE,SAAS,iBAAkB,QAAO;AAC/D,QAAI,EAAE,SAAS,WAAW,YAAY,EAAE,OAAO,EAAG,QAAO;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-AU3AUJIZ.js → chunk-O5QXH7U7.js}

@@ -3,7 +3,7 @@ import {
   InvalidKeyError,
   TamperedError,
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/kernel/enclave/crypto.ts
 var PBKDF2_ITERATIONS = 6e5;
@@ -439,4 +439,4 @@ export {
   bufferToBase64,
   base64ToBuffer
 };
-//# sourceMappingURL=chunk-AU3AUJIZ.js.map
+//# sourceMappingURL=chunk-O5QXH7U7.js.map

package/dist/{chunk-4OQZNXQG.js → chunk-OBPL43F3.js}

@@ -1,18 +1,18 @@
 import {
   installViaBinder
-} from "./chunk-JNMTN5D5.js";
+} from "./chunk-7JOXCSDU.js";
 import {
   buildRecordAad
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-DIVPOJPV.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
 import {
   encrypt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-O5QXH7U7.js";
 import {
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/via/blob/binding.ts
 async function eraseBlobs(ctx, cfg) {
@@ -391,4 +391,4 @@ export {
   BLOB_EVICTION_AUDIT_COLLECTION,
   runCompaction
 };
-//# sourceMappingURL=chunk-4OQZNXQG.js.map
+//# sourceMappingURL=chunk-OBPL43F3.js.map

package/dist/{chunk-NW4TY6VC.js → chunk-OCW3IM2F.js}

@@ -1,9 +1,9 @@
 import {
   dekKey
-} from "./chunk-PPCOKVFA.js";
+} from "./chunk-WUNRUSBJ.js";
 import {
   TierNotGrantedError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-party/team/tiers.ts
 function assertTierAccess(keyring, collection, tier) {
@@ -17,4 +17,4 @@ function assertTierAccess(keyring, collection, tier) {
 export {
   assertTierAccess
 };
-//# sourceMappingURL=chunk-NW4TY6VC.js.map
+//# sourceMappingURL=chunk-OCW3IM2F.js.map

package/dist/{chunk-BEZDLIDG.js → chunk-OIW75CLW.js}

@@ -7,15 +7,15 @@ import {
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema
-} from "./chunk-6WO62AJW.js";
+} from "./chunk-JPVJTTHU.js";
 import {
   canonicalJson,
   sha256Hex
-} from "./chunk-ZLHHE5XZ.js";
+} from "./chunk-47F6AI2K.js";
 import {
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-DIVPOJPV.js";
 import {
   buildSealedRecordEnvelope
 } from "./chunk-PENPHA45.js";
@@ -86,4 +86,4 @@ export {
   saveSchemaManifest,
   deriveSchemaManifest
 };
-//# sourceMappingURL=chunk-BEZDLIDG.js.map
+//# sourceMappingURL=chunk-OIW75CLW.js.map

package/dist/{chunk-7LNE2N2V.js → chunk-OZ5QBLEL.js}

@@ -1,22 +1,22 @@
 import {
   ATTESTATIONS_COLLECTION,
   loadOrCreateSigner
-} from "./chunk-ESKIAXO2.js";
+} from "./chunk-GWJJ5CK3.js";
 import {
   generateULID
 } from "./chunk-4AOERLTV.js";
 import {
   buildRecordAad
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-DIVPOJPV.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
 import {
   encrypt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-O5QXH7U7.js";
 import {
   AttestationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-audit/attestation/issue.ts
 import {
@@ -63,4 +63,4 @@ async function issueAttestationCore(ctx, args) {
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=chunk-7LNE2N2V.js.map
+//# sourceMappingURL=chunk-OZ5QBLEL.js.map

package/dist/{chunk-RKCRPPNB.js → chunk-PGHSH4TY.js}

@@ -4,10 +4,10 @@ import {
   persistUserVisibility,
   readUserVisibility,
   saveUserEnvelope
-} from "./chunk-LX46B56Q.js";
+} from "./chunk-KMGAFLCK.js";
 import {
   PolicyDeniedError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-PKUJ3JLQ.js";
 
 // src/with-party/directory/user-envelope/api.ts
 var UserApi = class {
@@ -379,4 +379,4 @@ export {
   UserApi,
   createUserApi
 };
-//# sourceMappingURL=chunk-RKCRPPNB.js.map
+//# sourceMappingURL=chunk-PGHSH4TY.js.map

package/dist/{chunk-CWM4GQD2.js → chunk-PKUJ3JLQ.js}

@@ -77,13 +77,23 @@ var KeyringCorruptError = class extends NoydbError {
     this.intactCount = opts.intactCount;
   }
 };
+function keyringTamperedMessage(userId, reason) {
+  const head = `Keyring for "${userId}" failed roster authentication (${reason}). `;
+  switch (reason) {
+    case "canary-missing":
+    case "roster-key-missing":
+    case "roster-tag-missing":
+      return head + "This vault was most likely written before 0.6.0-pre.21, which is when the roster became authenticated \u2014 that format change ships without a migration, so an existing vault must be re-seeded. The same state is what an untrusted store would produce by deleting the field to escape verification, and the two are indistinguishable from here, so access is refused either way. If this vault has been opened by 0.6.0-pre.21 or later before, treat it as the second case.";
+    case "unparseable":
+      return head + "The file did not parse \u2014 truncation or corruption in transit or at rest is the likeliest cause, and a store serving deliberate garbage is indistinguishable from it. `verifyRoster()` reports which members are affected; `quarantineKeyring()` removes one.";
+    case "roster-tag-mismatch":
+      return head + "The roster tag is present but does not match the authority fields it protects, so those fields were altered after they were signed. Unlike a missing tag this is not a format-transition state \u2014 no released version wrote a mismatched tag \u2014 so the store serving this vault, or something between you and it, has changed a member's role, permissions or expiry.";
+  }
+}
 var KeyringTamperedError = class extends NoydbError {
   details;
   constructor(details) {
-    super(
-      "KEYRING_TAMPERED",
-      `Keyring for "${details.userId}" failed roster authentication (${details.reason}). The store serving this vault may have altered the roster.`
-    );
+    super("KEYRING_TAMPERED", keyringTamperedMessage(details.userId, details.reason));
     this.name = "KeyringTamperedError";
     this.details = details;
   }
@@ -1729,4 +1739,4 @@ export {
   ClassifiedRotationError,
   SatelliteConfigError
 };
-//# sourceMappingURL=chunk-CWM4GQD2.js.map
+//# sourceMappingURL=chunk-PKUJ3JLQ.js.map