@noy-db/hub 0.6.0 → 0.7.0-pre.0

package/dist/port/on/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * `@noy-db/hub/on` — the unlock port (the `on-*` family port).
+ *
+ * ## What this seam is, and what it deliberately is NOT
+ *
+ * The `on-*` family is **not uniform**, and this subpath does not pretend
+ * otherwise. Measured across ten packages (see `check-architecture.mjs`'s
+ * `on-family-classification`):
+ *
+ *   - **one port instance** — `on-shamir` supplies a {@link NoydbShamir} that
+ *     hub calls for `profile: 'shamir'` recovery.
+ *   - **two slot ceremonies** — `on-password` and `on-webauthn` implement
+ *     {@link SlotRewrapCeremony}, which hub calls back during `rotateSecret`
+ *     to preserve a tier-2 slot.
+ *   - **seven libraries** — `on-totp`, `on-threat`, `on-email-otp` and the
+ *     rest. Three import hub zero times, which is the correct amount of
+ *     coupling for a TOTP code generator, not a gap to close.
+ *
+ * So the honest sentence, and the one the docs should carry: **`on-*`
+ * packages that hold or rotate a keyring slot implement contracts from here;
+ * the rest are freestanding utilities.** A seam is a namespace, not a claim
+ * that every package in the family binds it — `/to` already carries two
+ * instance types, and nobody reads that as one contract.
+ *
+ * ## Why it exists NOW and did not before
+ *
+ * `/on` shipped in 0.3.0 and was pruned in 0.4.0 for "zero importers",
+ * alongside `/as`, `/at`, `/in` and `/ui`. It was a second place to find types
+ * already on the root barrel.
+ *
+ * What changed is what stands behind it. `@noy-db/test-ceremony-conformance`
+ * publishes the ceremony contract as an executable suite, and the symbols it
+ * needs are scattered: three live on `/team`, and `KeyringAuthenticator`,
+ * `EnclaveKey` and `NoydbShamir` are reachable only from the whole root
+ * barrel. A third-party unlock method has to import the entire library to name
+ * the five types its ceremony signature uses — which is the coupling this
+ * family's seams exist to remove, and the same argument that brought `/at`
+ * back.
+ *
+ * ⚠️ Re-introducing a retired subpath is declared, not incidental: the
+ * `unretired` list in `codemods/0.7.0-pre.json` records it, and
+ * `codemod-map.test.ts` refuses the claim unless the subpath really resolves.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit.
+ */
+export type { NoydbShamir } from '../../with-party/team/noydb-shamir.js';
+export type { SlotRewrapCeremony, SlotRewrapContext, EnrollAuthenticatorOptions, } from '../../with-party/team/index.js';
+export type { KeyringAuthenticator } from '../../kernel/types.js';
+export type { UnlockedKeyring } from '../../with-party/team/keyring.js';
+export type { EnclaveKey } from '../../kernel/enclave/index.js';

package/dist/port/with/computed-strategy.d.ts

@@ -10,7 +10,7 @@
  * (money/i18n's `installViaBinder` call inside their own factory) would leave
  * `viaBinder('computed')` unresolved for that path. This port module is already
  * unconditionally imported by the kernel spine (`collection-config.ts`), so linking here
- * guarantees the binder is installed before `compileViaBindings` ever needs it, regardless
+ * guarantees the binder is installed before `compileVias` ever needs it, regardless
  * of which surface (sugar object-form or `via(computed(...))`) declared the virtual field.
  *
  * @internal

package/dist/port/with/device-seal-strategy.d.ts

@@ -3,11 +3,11 @@
  * #940). Lives on the `/with` port (the one seam the kernel spine may
  * import statically) so `NoydbOptions.deviceSeal` can reference this type
  * without a spine→service static import. The concrete implementation
- * (`MemoryDeviceSealProvider`) and the canonical re-export of this type
+ * (`MemoryDeviceSeal`) and the canonical re-export of this type
  * live in `with-party/team/device-seal.ts`.
  * @internal
  */
-export interface DeviceSealProvider {
+export interface NoydbDeviceSeal {
     /** Non-sensitive identifier persisted as `provider_hint`. */
     readonly id: string;
     seal(plain: Uint8Array): Promise<Uint8Array>;

package/dist/port/with/formats-strategy.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Formats strategy seam — the service half of the `as-*` port.
+ *
+ * `/as` publishes the {@link NoydbFormat} contract a format implements; this
+ * is what CONSUMES it. `vault.export(fmt)` gates, reads, redacts and calls
+ * `encode`; `vault.import(fmt, input)` gates, decodes and plans.
+ *
+ * Opt-in, not kernel. `vault.ts` had room under its ceiling, but "lean hub"
+ * is preserved by making a vault that never exports ship none of this — the
+ * same trade every other `with-*` service makes.
+ *
+ * Core imports `FormatsStrategy` type-only and `NO_FORMATS` as the default, so
+ * the spine never statically reaches the implementation.
+ *
+ * @internal
+ */
+import type { NoydbFormat, ImportPlan, ImportPolicy } from '../as/types.js';
+export type { NoydbFormat, ImportPlan, ImportPolicy };
+import type { ExportChunk } from '../../kernel/types.js';
+import type { Vault } from '../../kernel/vault.js';
+/** Options common to an export. */
+export interface FormatExportOptions {
+    /** Restrict to these collections. Omitted: everything the caller can read. */
+    readonly collections?: readonly string[];
+    /**
+     * Redact before `encode` sees a record. Hub applies the projection, so a
+     * format never needs the vault to know what is sensitive — which is what
+     * lets {@link NoydbFormat} be pure.
+     */
+    readonly redact?: true | {
+        readonly sensitivity?: string;
+    };
+}
+/** Options for an import. */
+export interface FormatImportOptions {
+    /** Target collection, for formats whose input carries no collection name. */
+    readonly collection?: string;
+    /** How to reconcile with what is already there. Default `'merge'`. */
+    readonly policy?: ImportPolicy;
+    /** Record identity field. Default `'id'`. A diff concern, so hub owns it. */
+    readonly idKey?: string;
+}
+/**
+ * The seam `withFormats()` fills.
+ *
+ * `chunksFor` is separate from `encode` on purpose: it is the gated, redacted
+ * read, and it is the half a format must never be able to perform itself.
+ */
+export interface FormatsStrategy {
+    readonly enabled: boolean;
+    exportWith<Out extends string | Uint8Array>(vault: Vault, format: NoydbFormat<Out>, options?: FormatExportOptions): Promise<Out>;
+    importWith<Out extends string | Uint8Array>(vault: Vault, format: NoydbFormat<Out>, input: Out, options?: FormatImportOptions): Promise<ImportPlan>;
+}
+/**
+ * The SERVICE receives the vault — it is doing the gated read, so that is
+ * unavoidable and fine. The invariant the port protects is narrower and is
+ * enforced one layer in: a {@link NoydbFormat} never receives it.
+ * `port/as/active.ts` derives this five-method context and the format sees
+ * only records.
+ */
+/** The narrow capability the format-facing half runs against. */
+export interface FormatsContext {
+    assertCanExport(tier: 'plaintext' | 'bundle', format?: string): void;
+    assertCanImport(tier: 'plaintext' | 'bundle', format?: string): void;
+    chunks(collections?: readonly string[]): AsyncIterable<ExportChunk>;
+    describe(collection: string): {
+        readonly fields: readonly unknown[];
+    } | undefined;
+    plan(records: Readonly<Record<string, readonly unknown[]>>, policy: ImportPolicy, formatId: string, idKey?: string): Promise<ImportPlan>;
+}
+/** Thrown by every method on {@link NO_FORMATS}. */
+export declare class FormatsNotEnabledError extends Error {
+    constructor(op: string);
+}
+/** The no-op default: a vault that never exports ships none of the service. */
+export declare const NO_FORMATS: FormatsStrategy;

package/dist/port/with/strategies.d.ts

@@ -41,15 +41,20 @@
  *    is a real strategy, which is why this table maps keys to defaults rather
  *    than assuming a `NO_*` naming convention.
  *
- * `coordinationStrategy` is deliberately NOT in the bag. It is a
- * `CoordinationProvider`, not a service strategy — it has no `with*()`
+ * The `mesh` option is deliberately NOT in the bag. It is a
+ * `NoydbMesh`, not a service strategy — it has no `with*()`
  * factory, no `NO_*` stub, and is resolved asynchronously from the store
- * (`createDefaultCoordinationProvider`) rather than passed through. The
- * completeness assertion at the bottom of this file excludes it by name so
- * that the exclusion is explicit and survives future edits.
+ * (`createDefaultMesh`) rather than passed through.
+ *
+ * It used to be spelled `coordinationStrategy`, and the completeness assertion
+ * below had to exclude it BY NAME because a `*Strategy`-shaped key that is not
+ * a strategy is exactly what that assertion hunts for. The 0.7 rename removed
+ * the collision rather than documenting it: `mesh` is not matched by
+ * `${string}Strategy`, so no exclusion is needed and none is written.
  *
  * @internal
  */
+import type { FormatsStrategy } from './formats-strategy.js';
 import { type VaultHeadStrategy } from '../../with-commit/vault-head/strategy.js';
 import type { NoydbOptions } from '../../kernel/types.js';
 import { type ReduceStrategy } from '../../with-lookup/reduce/strategy.js';
@@ -87,6 +92,7 @@ import type { ArchiveStrategy } from '../../with-fork/archive/index.js';
  * completeness assertion below pins that correspondence.
  */
 export interface StrategyBag {
+    readonly formats: FormatsStrategy;
     readonly reduce: ReduceStrategy;
     readonly archive: ArchiveStrategy;
     readonly attestation: AttestationStrategy;

package/dist/portability/index.js

@@ -1,36 +1,36 @@
 import {
   NO_PORTABILITY
-} from "../chunk-OCJ3JA4O.js";
+} from "../chunk-J4MN6XIU.js";
 import {
   PortabilityNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/portability/active.ts
 function withPortability() {
   return {
     async exportAccessibleData(vault, opts) {
-      const { exportAccessibleData } = await import("../export-accessible-S3KEB763.js");
+      const { exportAccessibleData } = await import("../export-accessible-BX2ILB4C.js");
       return exportAccessibleData(vault, opts);
     },
     async withdrawAccessibleData(vault, opts) {
-      const { withdrawAccessibleData } = await import("../withdraw-accessible-VCINIG6V.js");
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-ILTSXTIE.js");
       return withdrawAccessibleData(vault, opts);
     },
     async requestWithdrawal(vault, opts) {
-      const { requestWithdrawal } = await import("../request-withdrawal-KQ4W4UT5.js");
+      const { requestWithdrawal } = await import("../request-withdrawal-NM5VYR6F.js");
       return requestWithdrawal(vault, opts);
     },
     async listWithdrawalRequests(vault, opts) {
-      const { listWithdrawalRequests } = await import("../request-withdrawal-KQ4W4UT5.js");
+      const { listWithdrawalRequests } = await import("../request-withdrawal-NM5VYR6F.js");
       return listWithdrawalRequests(vault, opts);
     },
     async approveWithdrawal(vault, requestId, opts) {
-      const { approveWithdrawal } = await import("../request-withdrawal-KQ4W4UT5.js");
+      const { approveWithdrawal } = await import("../request-withdrawal-NM5VYR6F.js");
       return approveWithdrawal(vault, requestId, opts);
     },
     async rejectWithdrawal(vault, requestId, opts) {
-      const { rejectWithdrawal } = await import("../request-withdrawal-KQ4W4UT5.js");
+      const { rejectWithdrawal } = await import("../request-withdrawal-NM5VYR6F.js");
       return rejectWithdrawal(vault, requestId, opts);
     }
   };

package/dist/{post-register-QCJYRMIK.js → post-register-53O7AJRZ.js}

@@ -1,9 +1,9 @@
 import {
   hashFields
-} from "./chunk-QVXZFJBU.js";
+} from "./chunk-JVLSU7S2.js";
 import {
   SatelliteConfigError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/marker.ts
@@ -14,7 +14,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     joined: spec.joined,
     epoch: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const { loadPersistedSchema } = await import("./storage-WSF7ZKTL.js");
+  const { loadPersistedSchema } = await import("./storage-ZXUT476I.js");
   const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
   const prior = persisted?.satellite;
   if (prior) {
@@ -25,7 +25,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     }
     return;
   }
-  const { persistSatelliteMarker } = await import("./register-JBOEHTVX.js");
+  const { persistSatelliteMarker } = await import("./register-6TCBR6XD.js");
   await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
 }
 
@@ -39,7 +39,7 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
   }
   if (baseSchema !== void 0) {
     try {
-      const { derivePersistedSchema } = await import("./derive-MPOGZ4NR.js");
+      const { derivePersistedSchema } = await import("./derive-CXHCY46K.js");
       const envelope = await derivePersistedSchema(baseSchema);
       const properties = envelope.jsonSchema?.["properties"];
       const baseFields = Object.keys(properties ?? {});
@@ -57,4 +57,4 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
 export {
   postRegister
 };
-//# sourceMappingURL=post-register-QCJYRMIK.js.map
+//# sourceMappingURL=post-register-53O7AJRZ.js.map

package/dist/query/index.js

@@ -4,12 +4,12 @@ import {
   ScanBuilder,
   buildLiveQuery,
   executePlan
-} from "../chunk-EHW7NLGD.js";
+} from "../chunk-S2VG3ABP.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins,
   resetJoinWarnings
-} from "../chunk-EV2TDHQZ.js";
+} from "../chunk-XSN63FUS.js";
 import {
   CollectionIndexes
 } from "../chunk-I3ISCYT7.js";
@@ -29,7 +29,7 @@ import {
   IndexRequiredError,
   IndexWriteFailureError,
   JoinTooLargeError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   CollectionIndexes,

package/dist/reduce/index.js

@@ -9,7 +9,7 @@ import {
   groupAndReduce,
   reduceRecords,
   resetGroupByWarnings
-} from "../chunk-2CBFYXJX.js";
+} from "../chunk-4G25SDQL.js";
 import "../chunk-XZHEOSQ2.js";
 import {
   NO_REDUCE
@@ -26,9 +26,9 @@ import {
   sum
 } from "../chunk-ATL3ZVXT.js";
 import "../chunk-NSITFOCJ.js";
-import "../chunk-XPEPMK4Y.js";
-import "../chunk-C3XWJCG7.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-X67FCULK.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-lookup/reduce/active.ts

package/dist/register-6TCBR6XD.js

@@ -0,0 +1,32 @@
+import {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+} from "./chunk-QI5NWLVW.js";
+import "./chunk-ZVF37PKE.js";
+import "./chunk-QHJKK77B.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-Y6GZ2P4M.js";
+import "./chunk-P6ASQOZR.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-YXA2TCTZ.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-IESNYJXZ.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-RC4BROYR.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+};
+//# sourceMappingURL=register-6TCBR6XD.js.map

package/dist/registry-DH2L4O2V.js

@@ -0,0 +1,18 @@
+import {
+  DerivationRegistry
+} from "./chunk-RDHUZ674.js";
+import "./chunk-5263OEM3.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DerivationRegistry
+};
+//# sourceMappingURL=registry-DH2L4O2V.js.map

package/dist/registry-IWFMXCHX.js

@@ -0,0 +1,9 @@
+import {
+  GuardRegistry
+} from "./chunk-SHILAQH5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  GuardRegistry
+};
+//# sourceMappingURL=registry-IWFMXCHX.js.map

package/dist/registry-Q3FG3OAX.js

@@ -0,0 +1,9 @@
+import {
+  OverlayedViewRegistry
+} from "./chunk-5ACAVJUI.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  OverlayedViewRegistry
+};
+//# sourceMappingURL=registry-Q3FG3OAX.js.map

package/dist/registry-YC3IFG3A.js

@@ -0,0 +1,19 @@
+import {
+  MaterializedViewRegistry,
+  wrapDbWithPredicates
+} from "./chunk-4ZPE6SKS.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MaterializedViewRegistry,
+  wrapDbWithPredicates
+};
+//# sourceMappingURL=registry-YC3IFG3A.js.map

package/dist/request-withdrawal-NM5VYR6F.js

@@ -0,0 +1,31 @@
+import {
+  WITHDRAWAL_REQUESTS_COLLECTION,
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+} from "./chunk-4LPF226H.js";
+import "./chunk-H7HP56F6.js";
+import "./chunk-DKWPJOYH.js";
+import "./chunk-6FOGTKBY.js";
+import "./chunk-LF6DMX4C.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  WITHDRAWAL_REQUESTS_COLLECTION,
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+};
+//# sourceMappingURL=request-withdrawal-NM5VYR6F.js.map

package/dist/{reveal-W7BKZSUP.js → reveal-XBIMHAXR.js}

@@ -1,14 +1,14 @@
 import {
   isTombstone
-} from "./chunk-FX3UIDCS.js";
+} from "./chunk-N4CNVSUF.js";
 import {
   dualReadSealedSlot
-} from "./chunk-7Q3RHOA5.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
+} from "./chunk-KDJGJR7F.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
 import {
   ClassifiedRevealError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/reveal.ts
@@ -35,4 +35,4 @@ async function revealSealedField(ctx, id, field) {
 export {
   revealSealedField
 };
-//# sourceMappingURL=reveal-W7BKZSUP.js.map
+//# sourceMappingURL=reveal-XBIMHAXR.js.map

package/dist/revoke-MJNYWO72.js

@@ -0,0 +1,24 @@
+import {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+} from "./chunk-TVIFAHZR.js";
+import "./chunk-3L2MVE36.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+};
+//# sourceMappingURL=revoke-MJNYWO72.js.map

package/dist/satellites/index.js

@@ -1,6 +1,6 @@
 import {
   SatelliteConfigError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   SatelliteConfigError

package/dist/schema-update/index.js

@@ -3,7 +3,7 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "../chunk-ATY3ZASK.js";
+} from "../chunk-YCSM3GZU.js";
 import {
   computeSchemaDelta,
   evaluateStrategies
@@ -12,7 +12,7 @@ import {
   SchemaUpdateGate
 } from "../chunk-6LJY7X5A.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   SchemaUpdateGate,

package/dist/sealed-record/index.js

@@ -1,40 +1,40 @@
 import {
   NO_SEALED_RECORD
-} from "../chunk-323MN67Z.js";
+} from "../chunk-UCUALOSM.js";
 import {
   recordAadFor
-} from "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
   decrypt,
   importCek
-} from "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+} from "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   SealedRecordExpiredError,
   SealedRecordMismatchError,
   SealedRecordNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/sealed-record/active.ts
 function withSealedRecord() {
   return {
     async sealRecordToHost(ctx, collection, id, hostSealer, opts) {
-      const { sealRecordToHost } = await import("../enclave-Y2ALNDRD.js");
+      const { sealRecordToHost } = await import("../enclave-NYPT7WA7.js");
       return sealRecordToHost(ctx, collection, id, hostSealer, opts);
     },
     async revokeSealedRecord(ctx, collection, id, pid, opts) {
-      const { revokeSealedRecord } = await import("../enclave-Y2ALNDRD.js");
+      const { revokeSealedRecord } = await import("../enclave-NYPT7WA7.js");
       return revokeSealedRecord(ctx, collection, id, pid, opts);
     },
     async rotateRecordCek(ctx, collection, id) {
-      const { rotateRecordCek } = await import("../enclave-Y2ALNDRD.js");
+      const { rotateRecordCek } = await import("../enclave-NYPT7WA7.js");
       return rotateRecordCek(ctx, collection, id);
     }
   };

package/dist/search/index.js

@@ -9,15 +9,15 @@ import {
   segmentTokens,
   tokenize,
   withSearch
-} from "../chunk-7OBIBPCV.js";
+} from "../chunk-S35S77YU.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import "../chunk-XPEPMK4Y.js";
-import "../chunk-C3XWJCG7.js";
+import "../chunk-X67FCULK.js";
+import "../chunk-XDVVBETV.js";
 import {
   SearchNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   InvertedIndex,

package/dist/{seed-55FPOMYP.js → seed-NSNIGYXE.js}

@@ -1,27 +1,27 @@
 import {
   BROKER_COLLECTION,
   ensureCollectionDEK
-} from "./chunk-J6I5VR6P.js";
-import "./chunk-ZJUZOJVW.js";
-import "./chunk-D2YFQ7XG.js";
+} from "./chunk-5W7YXFV5.js";
+import "./chunk-DFAUMLD7.js";
+import "./chunk-POS53FG6.js";
 import {
   computeBrokerProof,
   deriveBrokerProofBits,
   openEnvelopeJson,
   writeEnvelopeBody
-} from "./chunk-CXPOG3ZY.js";
+} from "./chunk-2LPVI4PX.js";
 import {
   buildSealedRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import {
   base64ToBuffer,
   bufferToBase64
-} from "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
+} from "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
 import {
   BrokerEnrolmentError,
   BrokerProofError,
@@ -29,7 +29,7 @@ import {
   PermissionDeniedError,
   ValidationError,
   isConflictError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-party/broker/seed.ts
@@ -226,4 +226,4 @@ export {
   mintStoreCredentials,
   rotateSeed
 };
-//# sourceMappingURL=seed-55FPOMYP.js.map
+//# sourceMappingURL=seed-NSNIGYXE.js.map