@noy-db/hub 0.7.0-pre.13 → 0.7.0-pre.14

package/dist/introspection/index.js

@@ -1,7 +1,7 @@
 import "../chunk-UBSFPGVJ.js";
 import {
   dumpVaultSchema
-} from "../chunk-VGICZPVE.js";
+} from "../chunk-FUJSIP4K.js";
 import {
   applyListProjection
 } from "../chunk-VG2ZSFYD.js";
@@ -9,7 +9,7 @@ import "../chunk-RXLYKVTF.js";
 import {
   jsonSchemaToFields
 } from "../chunk-VYYM3MEN.js";
-import "../chunk-URHRIAV6.js";
+import "../chunk-REDOOY2Q.js";
 import "../chunk-Y2NBBT6K.js";
 import "../chunk-WWNYSV7S.js";
 import "../chunk-CIGAQBJR.js";
@@ -21,7 +21,6 @@ import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
 import "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   applyListProjection,
   dumpVaultSchema,

package/dist/{issue-IOXM3RSJ.js → issue-RH4H733Z.js}

@@ -12,8 +12,7 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 export {
   issueAttestationCore
 };
-//# sourceMappingURL=issue-IOXM3RSJ.js.map
+//# sourceMappingURL=issue-RH4H733Z.js.map

package/dist/{json-schema-I22JCYCG.js → json-schema-V3M5MUCM.js}

@@ -1,5 +1,3 @@
-import "./chunk-PZ5AY32C.js";
-
 // src/with-shape/introspection/json-schema.ts
 function jsonType(t) {
   switch (t) {
@@ -41,4 +39,4 @@ function buildJsonSchema(desc, base) {
 export {
   buildJsonSchema
 };
-//# sourceMappingURL=json-schema-I22JCYCG.js.map
+//# sourceMappingURL=json-schema-V3M5MUCM.js.map

package/dist/{json-schema-I22JCYCG.js.map → json-schema-V3M5MUCM.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-shape/introspection/json-schema.ts"],"sourcesContent":["/**\n * `buildJsonSchema` — pure overlay that merges describe() metadata onto a\n * base JSON Schema (from derivePersistedSchema) as `x-` extension keys.\n *\n * When no base JSON Schema is available (non-zod / unknown validator),\n * builds a minimal `{ type:'object', properties }` from describe()'s field\n * type tags. No static `import 'zod'` — validator derivation stays lazy.\n *\n * @module\n */\n\nimport type { CollectionDescription } from './describe.js'\n\n/** Map a DescribedField's type tag to a JSON-Schema `type`. */\nfunction jsonType(t: string): string {\n  switch (t) {\n    case 'number': return 'number'\n    case 'boolean': return 'boolean'\n    case 'array': return 'array'\n    case 'object': return 'object'\n    default: return 'string'\n  }\n}\n\n/** Overlay describe() metadata onto a base JSON Schema (or build a minimal one). */\nexport function buildJsonSchema(desc: CollectionDescription, base?: Record<string, unknown> | null): object {\n  const baseProps = (base?.['properties'] as Record<string, Record<string, unknown>> | undefined) ?? {}\n  const properties: Record<string, Record<string, unknown>> = {}\n  for (const f of desc.fields) {\n    const prop: Record<string, unknown> = { ...(baseProps[f.key] ?? { type: jsonType(f.type) }) }\n    prop['x-label'] = f.label\n    if (f.unit !== undefined) prop['x-unit'] = f.unit\n    if (f.semanticType !== undefined) prop['x-semanticType'] = f.semanticType\n    if (f.sensitivity !== undefined) prop['x-sensitivity'] = f.sensitivity\n    if (f.widget !== undefined) prop['x-widget'] = f.widget\n    if (f.editable === false) prop['x-readonly'] = true\n    if (f.money !== undefined) prop['x-money'] = f.money\n    if (f.ref !== undefined) prop['x-ref'] = f.ref.target\n    if (f.dict?.values) {\n      const labels: Record<string, string> = {}\n      for (const v of f.dict.values) if (v.label !== undefined) labels[v.value] = v.label\n      if (Object.keys(labels).length) prop['x-enumLabels'] = labels\n    }\n    // `x-classified` carries the whole classified block, incl. `equatable` when\n    // set — emitted ungated (boundary note on DescribedField.classified): a\n    // deployment wanting it gated can gate this behind its value-bearing door.\n    if (f.classified !== undefined) prop['x-classified'] = f.classified\n    properties[f.key] = prop\n  }\n  return base != null && typeof base === 'object'\n    ? { ...base, properties }\n    : { type: 'object', properties }\n}\n"],"mappings":";;;AAcA,SAAS,SAAS,GAAmB;AACnC,UAAQ,GAAG;AAAA,IACT,KAAK;AAAU,aAAO;AAAA,IACtB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAS,aAAO;AAAA,IACrB,KAAK;AAAU,aAAO;AAAA,IACtB;AAAS,aAAO;AAAA,EAClB;AACF;AAGO,SAAS,gBAAgB,MAA6B,MAA+C;AAC1G,QAAM,YAAa,OAAO,YAAY,KAA6D,CAAC;AACpG,QAAM,aAAsD,CAAC;AAC7D,aAAW,KAAK,KAAK,QAAQ;AAC3B,UAAM,OAAgC,EAAE,GAAI,UAAU,EAAE,GAAG,KAAK,EAAE,MAAM,SAAS,EAAE,IAAI,EAAE,EAAG;AAC5F,SAAK,SAAS,IAAI,EAAE;AACpB,QAAI,EAAE,SAAS,OAAW,MAAK,QAAQ,IAAI,EAAE;AAC7C,QAAI,EAAE,iBAAiB,OAAW,MAAK,gBAAgB,IAAI,EAAE;AAC7D,QAAI,EAAE,gBAAgB,OAAW,MAAK,eAAe,IAAI,EAAE;AAC3D,QAAI,EAAE,WAAW,OAAW,MAAK,UAAU,IAAI,EAAE;AACjD,QAAI,EAAE,aAAa,MAAO,MAAK,YAAY,IAAI;AAC/C,QAAI,EAAE,UAAU,OAAW,MAAK,SAAS,IAAI,EAAE;AAC/C,QAAI,EAAE,QAAQ,OAAW,MAAK,OAAO,IAAI,EAAE,IAAI;AAC/C,QAAI,EAAE,MAAM,QAAQ;AAClB,YAAM,SAAiC,CAAC;AACxC,iBAAW,KAAK,EAAE,KAAK,OAAQ,KAAI,EAAE,UAAU,OAAW,QAAO,EAAE,KAAK,IAAI,EAAE;AAC9E,UAAI,OAAO,KAAK,MAAM,EAAE,OAAQ,MAAK,cAAc,IAAI;AAAA,IACzD;AAIA,QAAI,EAAE,eAAe,OAAW,MAAK,cAAc,IAAI,EAAE;AACzD,eAAW,EAAE,GAAG,IAAI;AAAA,EACtB;AACA,SAAO,QAAQ,QAAQ,OAAO,SAAS,WACnC,EAAE,GAAG,MAAM,WAAW,IACtB,EAAE,MAAM,UAAU,WAAW;AACnC;","names":[]}
+{"version":3,"sources":["../src/with-shape/introspection/json-schema.ts"],"sourcesContent":["/**\n * `buildJsonSchema` — pure overlay that merges describe() metadata onto a\n * base JSON Schema (from derivePersistedSchema) as `x-` extension keys.\n *\n * When no base JSON Schema is available (non-zod / unknown validator),\n * builds a minimal `{ type:'object', properties }` from describe()'s field\n * type tags. No static `import 'zod'` — validator derivation stays lazy.\n *\n * @module\n */\n\nimport type { CollectionDescription } from './describe.js'\n\n/** Map a DescribedField's type tag to a JSON-Schema `type`. */\nfunction jsonType(t: string): string {\n  switch (t) {\n    case 'number': return 'number'\n    case 'boolean': return 'boolean'\n    case 'array': return 'array'\n    case 'object': return 'object'\n    default: return 'string'\n  }\n}\n\n/** Overlay describe() metadata onto a base JSON Schema (or build a minimal one). */\nexport function buildJsonSchema(desc: CollectionDescription, base?: Record<string, unknown> | null): object {\n  const baseProps = (base?.['properties'] as Record<string, Record<string, unknown>> | undefined) ?? {}\n  const properties: Record<string, Record<string, unknown>> = {}\n  for (const f of desc.fields) {\n    const prop: Record<string, unknown> = { ...(baseProps[f.key] ?? { type: jsonType(f.type) }) }\n    prop['x-label'] = f.label\n    if (f.unit !== undefined) prop['x-unit'] = f.unit\n    if (f.semanticType !== undefined) prop['x-semanticType'] = f.semanticType\n    if (f.sensitivity !== undefined) prop['x-sensitivity'] = f.sensitivity\n    if (f.widget !== undefined) prop['x-widget'] = f.widget\n    if (f.editable === false) prop['x-readonly'] = true\n    if (f.money !== undefined) prop['x-money'] = f.money\n    if (f.ref !== undefined) prop['x-ref'] = f.ref.target\n    if (f.dict?.values) {\n      const labels: Record<string, string> = {}\n      for (const v of f.dict.values) if (v.label !== undefined) labels[v.value] = v.label\n      if (Object.keys(labels).length) prop['x-enumLabels'] = labels\n    }\n    // `x-classified` carries the whole classified block, incl. `equatable` when\n    // set — emitted ungated (boundary note on DescribedField.classified): a\n    // deployment wanting it gated can gate this behind its value-bearing door.\n    if (f.classified !== undefined) prop['x-classified'] = f.classified\n    properties[f.key] = prop\n  }\n  return base != null && typeof base === 'object'\n    ? { ...base, properties }\n    : { type: 'object', properties }\n}\n"],"mappings":";AAcA,SAAS,SAAS,GAAmB;AACnC,UAAQ,GAAG;AAAA,IACT,KAAK;AAAU,aAAO;AAAA,IACtB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAS,aAAO;AAAA,IACrB,KAAK;AAAU,aAAO;AAAA,IACtB;AAAS,aAAO;AAAA,EAClB;AACF;AAGO,SAAS,gBAAgB,MAA6B,MAA+C;AAC1G,QAAM,YAAa,OAAO,YAAY,KAA6D,CAAC;AACpG,QAAM,aAAsD,CAAC;AAC7D,aAAW,KAAK,KAAK,QAAQ;AAC3B,UAAM,OAAgC,EAAE,GAAI,UAAU,EAAE,GAAG,KAAK,EAAE,MAAM,SAAS,EAAE,IAAI,EAAE,EAAG;AAC5F,SAAK,SAAS,IAAI,EAAE;AACpB,QAAI,EAAE,SAAS,OAAW,MAAK,QAAQ,IAAI,EAAE;AAC7C,QAAI,EAAE,iBAAiB,OAAW,MAAK,gBAAgB,IAAI,EAAE;AAC7D,QAAI,EAAE,gBAAgB,OAAW,MAAK,eAAe,IAAI,EAAE;AAC3D,QAAI,EAAE,WAAW,OAAW,MAAK,UAAU,IAAI,EAAE;AACjD,QAAI,EAAE,aAAa,MAAO,MAAK,YAAY,IAAI;AAC/C,QAAI,EAAE,UAAU,OAAW,MAAK,SAAS,IAAI,EAAE;AAC/C,QAAI,EAAE,QAAQ,OAAW,MAAK,OAAO,IAAI,EAAE,IAAI;AAC/C,QAAI,EAAE,MAAM,QAAQ;AAClB,YAAM,SAAiC,CAAC;AACxC,iBAAW,KAAK,EAAE,KAAK,OAAQ,KAAI,EAAE,UAAU,OAAW,QAAO,EAAE,KAAK,IAAI,EAAE;AAC9E,UAAI,OAAO,KAAK,MAAM,EAAE,OAAQ,MAAK,cAAc,IAAI;AAAA,IACzD;AAIA,QAAI,EAAE,eAAe,OAAW,MAAK,cAAc,IAAI,EAAE;AACzD,eAAW,EAAE,GAAG,IAAI;AAAA,EACtB;AACA,SAAO,QAAQ,QAAQ,OAAO,SAAS,WACnC,EAAE,GAAG,MAAM,WAAW,IACtB,EAAE,MAAM,UAAU,WAAW;AACnC;","names":[]}

package/dist/kernel/collection-config.d.ts

@@ -479,6 +479,40 @@ export interface ComputedEntryParts {
     readonly mode: 'materialized' | 'virtual';
 }
 export declare function computedEntryParts(entry: ComputedFn | ComputedFieldEntry): ComputedEntryParts;
+/**
+ * Field names a `triggerBy` match may NOT target, and the ones it may (#1266).
+ *
+ * Lives beside `computedEntryParts`, the other computed-mode reader. It was
+ * briefly moved into the derivation registry on the theory that twenty lines
+ * here cost the floor bundle 5.2% — measuring it showed the helper accounted
+ * for ONE byte and the growth was elsewhere (#1268). Moved back now that a
+ * second caller (the MV group-key guard) needs it and the layering forbids
+ * the kernel importing the registry.
+ *
+ * A derivation matcher reads the STORED record, so a match target must be a
+ * field that is stored. `mode: 'virtual'` computed fields are evaluated on the
+ * READ path and never persisted — but they appear in `computed:` (and in
+ * `via(computed(...))`) exactly like materialized ones, so the registration
+ * guard accepted them and the fan-out then matched nothing, forever: the guard's
+ * own stated failure mode, reached through the guard rather than around it.
+ *
+ * Rejected rather than supported. Matching a virtual field means running user
+ * code for every candidate row, which turns an indexed narrow into a full scan
+ * of the collection; `mode: 'materialized'` is stored, already works, and is
+ * what the error points the caller at.
+ *
+ * `declared` also folds in `viaFields`, which the guard's key set previously
+ * omitted entirely — a `via()`-declared MATERIALIZED field is a perfectly good
+ * match target and was being rejected as a typo. An over-firing guard teaches
+ * people to stop trusting it, so both directions are fixed together.
+ */
+export declare function matchTargetFieldNames(opts: {
+    readonly computed?: Readonly<Record<string, unknown>> | undefined;
+    readonly viaFields?: Readonly<Record<string, unknown>> | undefined;
+}): {
+    readonly declared: readonly string[];
+    readonly virtual: readonly string[];
+};
 /**
  * Compile a collection's declared config into the ordered list of `NoydbVia`s
  * for its `ViaPipeline`.

package/dist/lazy/index.js

@@ -5,7 +5,6 @@ import {
   IMPLICIT_LAZY
 } from "../chunk-66TQOPFM.js";
 import "../chunk-V4PXLYWM.js";
-import "../chunk-PZ5AY32C.js";
 export {
   IMPLICIT_LAZY,
   withLazy

package/dist/{ledger-HXHIOD36.js → ledger-454SU3VE.js}

@@ -25,7 +25,6 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 export {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION,
@@ -39,4 +38,4 @@ export {
   parseIndex,
   sha256Hex
 };
-//# sourceMappingURL=ledger-HXHIOD36.js.map
+//# sourceMappingURL=ledger-454SU3VE.js.map

package/dist/{liberate-4APIV7FR.js → liberate-AAZSP2BT.js}

@@ -1,10 +1,10 @@
 import {
   liberateVault
-} from "./chunk-YCXICMOY.js";
-import "./chunk-QHW35ZON.js";
-import "./chunk-ZR2YMODS.js";
+} from "./chunk-RJ7NN2UR.js";
+import "./chunk-TGPST6FK.js";
+import "./chunk-EKZ6VZYF.js";
 import "./chunk-JUBWUJY5.js";
-import "./chunk-PKJ43CMD.js";
+import "./chunk-NLOLF6LD.js";
 import "./chunk-MLO75SFJ.js";
 import "./chunk-VNR2SNVJ.js";
 import "./chunk-YQWBEJCS.js";
@@ -18,8 +18,7 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 export {
   liberateVault
 };
-//# sourceMappingURL=liberate-4APIV7FR.js.map
+//# sourceMappingURL=liberate-AAZSP2BT.js.map

package/dist/{link-set-6RAHEKZN.js → link-set-67CAMUAL.js}

@@ -18,7 +18,6 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 export {
   LINK_COLLECTION_PREFIX,
   LinkEndpointError,
@@ -28,4 +27,4 @@ export {
   linkCollectionName,
   linkRowKey
 };
-//# sourceMappingURL=link-set-6RAHEKZN.js.map
+//# sourceMappingURL=link-set-67CAMUAL.js.map

package/dist/{managed-secret-P3JQ7ZG4.js → managed-secret-NHRYG7CD.js}

@@ -19,7 +19,6 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 export {
   MemoryRecipientSealer,
   MemorySealer,
@@ -32,4 +31,4 @@ export {
   saveSealedSecret,
   sealRsaOaepTlv
 };
-//# sourceMappingURL=managed-secret-P3JQ7ZG4.js.map
+//# sourceMappingURL=managed-secret-NHRYG7CD.js.map

package/dist/materialized-views/index.js

@@ -1,6 +1,6 @@
 import {
   withMaterializedView
-} from "../chunk-PQKG5AHH.js";
+} from "../chunk-6X6SEMEE.js";
 import {
   MaterializedViewExecutor
 } from "../chunk-FFBYRWDJ.js";
@@ -16,7 +16,7 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-E2MYJGSG.js";
+} from "../chunk-AMODH7AU.js";
 import "../chunk-VXANTWBJ.js";
 import "../chunk-MGOXJIBV.js";
 import "../chunk-YPXNAP72.js";
@@ -44,7 +44,6 @@ import {
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
 } from "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,
   MaterializedViewCycleError,

package/dist/{migrate-cek-25KNTS5U.js → migrate-cek-5ENH64AA.js}

@@ -1,7 +1,6 @@
 import {
   SatelliteConfigError
 } from "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/migrate-cek.ts
 async function migrateSatelliteCek(name, coll) {
@@ -16,4 +15,4 @@ async function migrateSatelliteCek(name, coll) {
 export {
   migrateSatelliteCek
 };
-//# sourceMappingURL=migrate-cek-25KNTS5U.js.map
+//# sourceMappingURL=migrate-cek-5ENH64AA.js.map

package/dist/{migrate-cek-25KNTS5U.js.map → migrate-cek-5ENH64AA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-shape/satellites/migrate-cek.ts"],"sourcesContent":["/**\n * Satellite per-record-CEK migration (#599) — the R-S7 retro-coverage\n * unblock.\n *\n * R-S7 (`declare.ts:89-91`) correctly refuses declaring/redeclaring a\n * satellite of a forget-covered base without `perRecordKeys: true` — but\n * `perRecordKeys` is construction-only (`kernel/collection.ts:402`), so an\n * app that shipped a satellite BEFORE its base gained forget coverage has\n * no way past the refusal: the existing records must be re-encrypted under\n * fresh per-record CEKs before the satellite can reopen in\n * `perRecordKeys: true` mode, and the only re-encrypt primitive\n * (`Collection._applyCutoverTransform`) needs the collection already\n * constructed in that mode — chicken-and-egg.\n *\n * The break: `Vault.migrateSatellitePerRecordKeys` (`kernel/vault.ts`)\n * opens the satellite collection via `vault.collection(name, {\n * perRecordKeys: true })` WITHOUT `satelliteOf` — that never enters\n * `declareSatellite`, so R-S7's gate (which only fires on the `satelliteOf`\n * declaration path) never runs for the migration pass. R-S7 stays fully\n * enforced for every NORMAL `satelliteOf` declaration; this module and its\n * call-site never touch `declare.ts`.\n *\n * `migrateSatelliteCek` then reuses `_applyCutoverTransform` verbatim (an\n * identity transform — no field/shape change, only the encryption wrapper\n * changes) rather than duplicating its mint-or-reuse-CEK logic\n * (`resolveRecordCek`/`resolveStableCek`, `collection.ts:2537-2545`): a\n * record with no `_cek` yet gets a freshly minted per-record CEK; a record\n * that already carries `_cek` (already migrated, e.g. a prior interrupted\n * run) reuses its existing CEK unchanged. That mint-or-reuse discrimination\n * is what makes re-running this after a mid-migration failure safe for\n * free — no separate resumability marker needed, no double-mint, no\n * plaintext write, no shared-DEK write.\n *\n * **Mode-assertion guard (review Important 1):** `perRecordKeys` is\n * construction-only and the vault's collection cache is first-wins with no\n * mismatch guard. If `coll`'s name was already opened THIS SESSION without\n * `perRecordKeys` (e.g. an incidental bare `vault.collection(name)` call\n * before the migration ran), `vault.collection(name, { perRecordKeys: true\n * })` cache-HITS that instance instead of constructing a fresh one — the\n * returned handle is silently NOT in per-record-CEK mode. Without a check,\n * `_applyCutoverTransform` would then pass `cek: undefined` for every\n * record (`this.perRecordCek` false) and RE-ENCRYPT EVERY RECORD UNDER THE\n * SHARED COLLECTION DEK while still reporting `{ migrated: N }` as success\n * — a security migration that silently mints nothing. `migrateSatelliteCek`\n * reads the opened handle's own `getConfig()` (the same accessor\n * `dumpSchema()` uses) to confirm `perRecordKeys` is genuinely `true`\n * before walking, and throws `SatelliteConfigError` instead of proceeding\n * if not.\n *\n * **No-quiesce precondition (review Important 2):** `_applyCutoverTransform`\n * is documented as fence-phase-only (`collection.ts:2517-2522`) — the\n * generic schema-cutover caller (`Vault.runSchemaCutover` →\n * `SchemaFenceController`) always runs it under the vault-wide schema fence,\n * which blocks concurrent writes. This migration does NOT fence: it calls\n * `_applyCutoverTransform` directly, with no fence and CAS-less\n * (`adapter.put` with no `expectedVersion`) writes. A concurrent write to\n * the same satellite collection racing the walk's `await`s can be\n * clobbered by (or clobber) a migration write. Callers MUST run this before\n * the collection serves traffic — e.g. at v2 boot, before declaring the\n * pair, before any client can write — or otherwise ensure the vault is\n * quiescent for this collection for the duration of the call.\n */\nimport { SatelliteConfigError } from '../../kernel/errors.js'\n\n/** The narrow slice of `Collection` the migration pass needs (mirrors `fanout.ts`'s `CollectionHandle` narrowing). */\nexport interface SatelliteCekMigrationTarget {\n  /** Public config snapshot (`Collection.getConfig()`) — used to confirm the handle is genuinely in per-record-CEK mode before walking. */\n  getConfig(): { readonly perRecordKeys?: boolean } | undefined\n  _applyCutoverTransform(transform: (doc: Record<string, unknown>) => Record<string, unknown>): Promise<number>\n}\n\nexport interface SatelliteCekMigrationResult {\n  /** Records touched by this call (both freshly minted and already-migrated re-touches on a resumed run). */\n  readonly migrated: number\n}\n\n/**\n * Re-encrypt every record in `coll` under a per-record CEK. `coll` must be\n * a collection handle already opened with `perRecordKeys: true` — see the\n * file header for how the caller gets one past R-S7. Throws\n * `SatelliteConfigError` (does NOT proceed) if `coll` is not genuinely in\n * per-record-CEK mode — see the file header's mode-assertion note.\n * Idempotent/resumable: safe to call again after a partial failure. NOT\n * fenced against concurrent writers — see the file header's no-quiesce\n * precondition; run this before the collection serves traffic.\n *\n * @param name The satellite collection's name — used only for the error\n *   message below; identical to what the caller passed to `vault.collection()`.\n */\nexport async function migrateSatelliteCek(name: string, coll: SatelliteCekMigrationTarget): Promise<SatelliteCekMigrationResult> {\n  if (coll.getConfig()?.perRecordKeys !== true) {\n    throw new SatelliteConfigError(\n      `migrateSatellitePerRecordKeys: collection \"${name}\" was already opened this session without ` +\n      `perRecordKeys (construction-only); migrate before its first open, or restart the session.`,\n    )\n  }\n  // Ledger reason (review Minor): the walk below reuses _applyCutoverTransform's\n  // hardcoded 'schema:coordinated-cutover' ledger reason — it has no reason/label\n  // param, and this migration is not itself a schema cutover. Not threaded through\n  // (would touch collection.ts's own ceilinged surface for a cosmetic label);\n  // flagged here so the audit trail's shared reason string is documented, not silent.\n  const migrated = await coll._applyCutoverTransform((doc) => doc)\n  return { migrated }\n}\n"],"mappings":";;;;;;AAyFA,eAAsB,oBAAoB,MAAc,MAAyE;AAC/H,MAAI,KAAK,UAAU,GAAG,kBAAkB,MAAM;AAC5C,UAAM,IAAI;AAAA,MACR,8CAA8C,IAAI;AAAA,IAEpD;AAAA,EACF;AAMA,QAAM,WAAW,MAAM,KAAK,uBAAuB,CAAC,QAAQ,GAAG;AAC/D,SAAO,EAAE,SAAS;AACpB;","names":[]}
+{"version":3,"sources":["../src/with-shape/satellites/migrate-cek.ts"],"sourcesContent":["/**\n * Satellite per-record-CEK migration (#599) — the R-S7 retro-coverage\n * unblock.\n *\n * R-S7 (`declare.ts:89-91`) correctly refuses declaring/redeclaring a\n * satellite of a forget-covered base without `perRecordKeys: true` — but\n * `perRecordKeys` is construction-only (`kernel/collection.ts:402`), so an\n * app that shipped a satellite BEFORE its base gained forget coverage has\n * no way past the refusal: the existing records must be re-encrypted under\n * fresh per-record CEKs before the satellite can reopen in\n * `perRecordKeys: true` mode, and the only re-encrypt primitive\n * (`Collection._applyCutoverTransform`) needs the collection already\n * constructed in that mode — chicken-and-egg.\n *\n * The break: `Vault.migrateSatellitePerRecordKeys` (`kernel/vault.ts`)\n * opens the satellite collection via `vault.collection(name, {\n * perRecordKeys: true })` WITHOUT `satelliteOf` — that never enters\n * `declareSatellite`, so R-S7's gate (which only fires on the `satelliteOf`\n * declaration path) never runs for the migration pass. R-S7 stays fully\n * enforced for every NORMAL `satelliteOf` declaration; this module and its\n * call-site never touch `declare.ts`.\n *\n * `migrateSatelliteCek` then reuses `_applyCutoverTransform` verbatim (an\n * identity transform — no field/shape change, only the encryption wrapper\n * changes) rather than duplicating its mint-or-reuse-CEK logic\n * (`resolveRecordCek`/`resolveStableCek`, `collection.ts:2537-2545`): a\n * record with no `_cek` yet gets a freshly minted per-record CEK; a record\n * that already carries `_cek` (already migrated, e.g. a prior interrupted\n * run) reuses its existing CEK unchanged. That mint-or-reuse discrimination\n * is what makes re-running this after a mid-migration failure safe for\n * free — no separate resumability marker needed, no double-mint, no\n * plaintext write, no shared-DEK write.\n *\n * **Mode-assertion guard (review Important 1):** `perRecordKeys` is\n * construction-only and the vault's collection cache is first-wins with no\n * mismatch guard. If `coll`'s name was already opened THIS SESSION without\n * `perRecordKeys` (e.g. an incidental bare `vault.collection(name)` call\n * before the migration ran), `vault.collection(name, { perRecordKeys: true\n * })` cache-HITS that instance instead of constructing a fresh one — the\n * returned handle is silently NOT in per-record-CEK mode. Without a check,\n * `_applyCutoverTransform` would then pass `cek: undefined` for every\n * record (`this.perRecordCek` false) and RE-ENCRYPT EVERY RECORD UNDER THE\n * SHARED COLLECTION DEK while still reporting `{ migrated: N }` as success\n * — a security migration that silently mints nothing. `migrateSatelliteCek`\n * reads the opened handle's own `getConfig()` (the same accessor\n * `dumpSchema()` uses) to confirm `perRecordKeys` is genuinely `true`\n * before walking, and throws `SatelliteConfigError` instead of proceeding\n * if not.\n *\n * **No-quiesce precondition (review Important 2):** `_applyCutoverTransform`\n * is documented as fence-phase-only (`collection.ts:2517-2522`) — the\n * generic schema-cutover caller (`Vault.runSchemaCutover` →\n * `SchemaFenceController`) always runs it under the vault-wide schema fence,\n * which blocks concurrent writes. This migration does NOT fence: it calls\n * `_applyCutoverTransform` directly, with no fence and CAS-less\n * (`adapter.put` with no `expectedVersion`) writes. A concurrent write to\n * the same satellite collection racing the walk's `await`s can be\n * clobbered by (or clobber) a migration write. Callers MUST run this before\n * the collection serves traffic — e.g. at v2 boot, before declaring the\n * pair, before any client can write — or otherwise ensure the vault is\n * quiescent for this collection for the duration of the call.\n */\nimport { SatelliteConfigError } from '../../kernel/errors.js'\n\n/** The narrow slice of `Collection` the migration pass needs (mirrors `fanout.ts`'s `CollectionHandle` narrowing). */\nexport interface SatelliteCekMigrationTarget {\n  /** Public config snapshot (`Collection.getConfig()`) — used to confirm the handle is genuinely in per-record-CEK mode before walking. */\n  getConfig(): { readonly perRecordKeys?: boolean } | undefined\n  _applyCutoverTransform(transform: (doc: Record<string, unknown>) => Record<string, unknown>): Promise<number>\n}\n\nexport interface SatelliteCekMigrationResult {\n  /** Records touched by this call (both freshly minted and already-migrated re-touches on a resumed run). */\n  readonly migrated: number\n}\n\n/**\n * Re-encrypt every record in `coll` under a per-record CEK. `coll` must be\n * a collection handle already opened with `perRecordKeys: true` — see the\n * file header for how the caller gets one past R-S7. Throws\n * `SatelliteConfigError` (does NOT proceed) if `coll` is not genuinely in\n * per-record-CEK mode — see the file header's mode-assertion note.\n * Idempotent/resumable: safe to call again after a partial failure. NOT\n * fenced against concurrent writers — see the file header's no-quiesce\n * precondition; run this before the collection serves traffic.\n *\n * @param name The satellite collection's name — used only for the error\n *   message below; identical to what the caller passed to `vault.collection()`.\n */\nexport async function migrateSatelliteCek(name: string, coll: SatelliteCekMigrationTarget): Promise<SatelliteCekMigrationResult> {\n  if (coll.getConfig()?.perRecordKeys !== true) {\n    throw new SatelliteConfigError(\n      `migrateSatellitePerRecordKeys: collection \"${name}\" was already opened this session without ` +\n      `perRecordKeys (construction-only); migrate before its first open, or restart the session.`,\n    )\n  }\n  // Ledger reason (review Minor): the walk below reuses _applyCutoverTransform's\n  // hardcoded 'schema:coordinated-cutover' ledger reason — it has no reason/label\n  // param, and this migration is not itself a schema cutover. Not threaded through\n  // (would touch collection.ts's own ceilinged surface for a cosmetic label);\n  // flagged here so the audit trail's shared reason string is documented, not silent.\n  const migrated = await coll._applyCutoverTransform((doc) => doc)\n  return { migrated }\n}\n"],"mappings":";;;;;AAyFA,eAAsB,oBAAoB,MAAc,MAAyE;AAC/H,MAAI,KAAK,UAAU,GAAG,kBAAkB,MAAM;AAC5C,UAAM,IAAI;AAAA,MACR,8CAA8C,IAAI;AAAA,IAEpD;AAAA,EACF;AAMA,QAAM,WAAW,MAAM,KAAK,uBAAuB,CAAC,QAAQ,GAAG;AAC/D,SAAO,EAAE,SAAS;AACpB;","names":[]}

package/dist/money/index.js

@@ -17,7 +17,6 @@ import {
 import "../chunk-NSITFOCJ.js";
 import "../chunk-UXVWEX5L.js";
 import "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   MoneyCurrencyError,
   MoneyPrecisionError,

package/dist/{noydb-2C6QQJ5S.js → noydb-Y53CQHZK.js}

@@ -1,30 +1,30 @@
 import {
   Noydb,
   createNoydb
-} from "./chunk-ZVCC36XQ.js";
-import "./chunk-PDD75NUZ.js";
+} from "./chunk-DRB6IHPS.js";
 import "./chunk-EPFF7LOX.js";
 import "./chunk-QIZPZMUI.js";
 import "./chunk-TUFM4UZP.js";
+import "./chunk-SMH6SRX7.js";
 import "./chunk-GM4IM7TC.js";
-import "./chunk-IHFXR2VQ.js";
+import "./chunk-BOBFL5TW.js";
 import "./chunk-GYGLAVCX.js";
 import "./chunk-6LJY7X5A.js";
 import "./chunk-Q7HZX3IF.js";
-import "./chunk-RTYJRFQO.js";
+import "./chunk-EWPRPP3M.js";
 import "./chunk-BZ3534YM.js";
 import "./chunk-NQKIUNW5.js";
 import "./chunk-JUBWUJY5.js";
 import "./chunk-VTFVLCUH.js";
 import "./chunk-RXLYKVTF.js";
 import "./chunk-MMOZQTXV.js";
-import "./chunk-Y4MJQ2UG.js";
-import "./chunk-BWXGSSFX.js";
+import "./chunk-QQ2YMQZU.js";
+import "./chunk-4SZMZAYN.js";
 import "./chunk-TFMM5DBB.js";
 import "./chunk-RTBJ5IOO.js";
 import "./chunk-KCUIMITG.js";
 import "./chunk-VYYM3MEN.js";
-import "./chunk-URHRIAV6.js";
+import "./chunk-REDOOY2Q.js";
 import "./chunk-Y2NBBT6K.js";
 import "./chunk-WWNYSV7S.js";
 import "./chunk-MGOXJIBV.js";
@@ -32,14 +32,14 @@ import "./chunk-YPXNAP72.js";
 import "./chunk-SKGMN35F.js";
 import "./chunk-T7IR4N2S.js";
 import "./chunk-PEOZ34EM.js";
-import "./chunk-BERJ4AWW.js";
+import "./chunk-VGXZT72I.js";
 import "./chunk-GHVIKOHT.js";
 import "./chunk-FAHMLERK.js";
 import "./chunk-SMY5X46Z.js";
 import "./chunk-DZFQVICS.js";
-import "./chunk-TO3EQ7HF.js";
+import "./chunk-BLN54W3L.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-COTPDJR5.js";
+import "./chunk-OMB2ZKIT.js";
 import "./chunk-AURFOK3D.js";
 import "./chunk-6YXCPL4T.js";
 import "./chunk-7MG2LHO5.js";
@@ -83,9 +83,8 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=noydb-2C6QQJ5S.js.map
+//# sourceMappingURL=noydb-Y53CQHZK.js.map

package/dist/overlay-views/index.js

@@ -13,7 +13,6 @@ import {
   OverlayIdMismatchError,
   OverlayNameCollisionError
 } from "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,

package/dist/periods/index.js

@@ -11,7 +11,7 @@ import {
   samePartition,
   validatePeriodName,
   withPeriods
-} from "../chunk-BERJ4AWW.js";
+} from "../chunk-VGXZT72I.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -33,7 +33,6 @@ import "../chunk-LP7BEXCT.js";
 import "../chunk-SL3JAAKN.js";
 import "../chunk-N4CHCXDL.js";
 import "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   NO_PERIODS,
   PERIODS_COLLECTION,

package/dist/pod/index.js

@@ -5,9 +5,8 @@ import {
   signRedirect,
   verifyRedirect,
   wrapPodStore
-} from "../chunk-BMELYFHU.js";
-import "../chunk-ZVCC36XQ.js";
-import "../chunk-PDD75NUZ.js";
+} from "../chunk-V2PNPF6J.js";
+import "../chunk-DRB6IHPS.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
@@ -18,25 +17,26 @@ import {
 } from "../chunk-EPFF7LOX.js";
 import "../chunk-QIZPZMUI.js";
 import "../chunk-TUFM4UZP.js";
+import "../chunk-SMH6SRX7.js";
 import "../chunk-GM4IM7TC.js";
-import "../chunk-IHFXR2VQ.js";
+import "../chunk-BOBFL5TW.js";
 import "../chunk-GYGLAVCX.js";
 import "../chunk-6LJY7X5A.js";
 import "../chunk-Q7HZX3IF.js";
-import "../chunk-RTYJRFQO.js";
+import "../chunk-EWPRPP3M.js";
 import "../chunk-BZ3534YM.js";
 import "../chunk-NQKIUNW5.js";
 import "../chunk-JUBWUJY5.js";
 import "../chunk-VTFVLCUH.js";
 import "../chunk-RXLYKVTF.js";
 import "../chunk-MMOZQTXV.js";
-import "../chunk-Y4MJQ2UG.js";
-import "../chunk-BWXGSSFX.js";
+import "../chunk-QQ2YMQZU.js";
+import "../chunk-4SZMZAYN.js";
 import "../chunk-TFMM5DBB.js";
 import "../chunk-RTBJ5IOO.js";
 import "../chunk-KCUIMITG.js";
 import "../chunk-VYYM3MEN.js";
-import "../chunk-URHRIAV6.js";
+import "../chunk-REDOOY2Q.js";
 import "../chunk-Y2NBBT6K.js";
 import "../chunk-WWNYSV7S.js";
 import "../chunk-MGOXJIBV.js";
@@ -44,7 +44,7 @@ import "../chunk-YPXNAP72.js";
 import "../chunk-SKGMN35F.js";
 import "../chunk-T7IR4N2S.js";
 import "../chunk-PEOZ34EM.js";
-import "../chunk-BERJ4AWW.js";
+import "../chunk-VGXZT72I.js";
 import "../chunk-GHVIKOHT.js";
 import "../chunk-FAHMLERK.js";
 import "../chunk-SMY5X46Z.js";
@@ -72,11 +72,11 @@ import {
   verifyPodHeader,
   verifyRecord,
   writePod
-} from "../chunk-PKJ43CMD.js";
+} from "../chunk-NLOLF6LD.js";
 import "../chunk-MLO75SFJ.js";
-import "../chunk-TO3EQ7HF.js";
+import "../chunk-BLN54W3L.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-COTPDJR5.js";
+import "../chunk-OMB2ZKIT.js";
 import "../chunk-AURFOK3D.js";
 import "../chunk-6YXCPL4T.js";
 import "../chunk-7MG2LHO5.js";
@@ -136,7 +136,6 @@ import {
   RedirectLoopError,
   RedirectUnreachableError
 } from "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   BackupCorruptedError,
   BackupLedgerError,

package/dist/{pod-handle-6II7KFBR.js → pod-handle-S7AMCJIF.js}

@@ -9,7 +9,6 @@ import "./chunk-LP7BEXCT.js";
 import "./chunk-SL3JAAKN.js";
 import "./chunk-N4CHCXDL.js";
 import "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/pod-handle.ts
 async function buildPodHandle(adapter, name) {
@@ -26,7 +25,7 @@ async function buildPodHandle(adapter, name) {
     } catch {
     }
   }
-  const { generateULID } = await import("./ulid-VQW6ERQN.js");
+  const { generateULID } = await import("./ulid-4MKXG325.js");
   const handle = generateULID();
   const envelope = buildRecordEnvelope(
     { collection: "_meta", id: "handle", version: 1 },
@@ -38,4 +37,4 @@ async function buildPodHandle(adapter, name) {
 export {
   buildPodHandle
 };
-//# sourceMappingURL=pod-handle-6II7KFBR.js.map
+//# sourceMappingURL=pod-handle-S7AMCJIF.js.map

package/dist/{pod-handle-6II7KFBR.js.map → pod-handle-S7AMCJIF.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../kernel/enclave/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data) as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle', version: 1 },\n    { iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,EAAE;AAAA,IAChD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EAC7C;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}
+{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../kernel/enclave/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data) as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle', version: 1 },\n    { iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,EAAE;AAAA,IAChD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EAC7C;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}

package/dist/policy/index.js

@@ -27,7 +27,6 @@ import {
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
 } from "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,
   META_COLLECTION,

package/dist/portability/index.js

@@ -4,33 +4,32 @@ import {
 import {
   PortabilityNotEnabledError
 } from "../chunk-7O3Y4PPD.js";
-import "../chunk-PZ5AY32C.js";
 
 // src/with-audit/portability/active.ts
 function withPortability() {
   return {
     async exportAccessibleData(vault, opts) {
-      const { exportAccessibleData } = await import("../export-accessible-LGV6IAFX.js");
+      const { exportAccessibleData } = await import("../export-accessible-2LOBM67T.js");
       return exportAccessibleData(vault, opts);
     },
     async withdrawAccessibleData(vault, opts) {
-      const { withdrawAccessibleData } = await import("../withdraw-accessible-6Q7NE4EY.js");
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-42D32Z7G.js");
       return withdrawAccessibleData(vault, opts);
     },
     async requestWithdrawal(vault, opts) {
-      const { requestWithdrawal } = await import("../request-withdrawal-6HJT4ODF.js");
+      const { requestWithdrawal } = await import("../request-withdrawal-P5EQATZ7.js");
       return requestWithdrawal(vault, opts);
     },
     async listWithdrawalRequests(vault, opts) {
-      const { listWithdrawalRequests } = await import("../request-withdrawal-6HJT4ODF.js");
+      const { listWithdrawalRequests } = await import("../request-withdrawal-P5EQATZ7.js");
       return listWithdrawalRequests(vault, opts);
     },
     async approveWithdrawal(vault, requestId, opts) {
-      const { approveWithdrawal } = await import("../request-withdrawal-6HJT4ODF.js");
+      const { approveWithdrawal } = await import("../request-withdrawal-P5EQATZ7.js");
       return approveWithdrawal(vault, requestId, opts);
     },
     async rejectWithdrawal(vault, requestId, opts) {
-      const { rejectWithdrawal } = await import("../request-withdrawal-6HJT4ODF.js");
+      const { rejectWithdrawal } = await import("../request-withdrawal-P5EQATZ7.js");
       return rejectWithdrawal(vault, requestId, opts);
     }
   };

package/dist/portability/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/portability/active.ts"],"sourcesContent":["/**\n * Enable the portability capability.\n * Pass to `createNoydb({ portabilityStrategy: withPortability() })` to make a\n * vault's `user.exportMyAccessibleData` / `user.unilateralWithdrawal` /\n * `user.requestWithdrawal` / `user.listWithdrawalRequests` /\n * `user.approveWithdrawal` / `user.rejectWithdrawal` methods live. The\n * export/withdraw/request engines are dynamically imported here, so they stay\n * reachable only via opt-in.\n */\nimport type { PortabilityStrategy } from './strategy.js'\n\nexport function withPortability(): PortabilityStrategy {\n  return {\n    async exportAccessibleData(vault, opts) {\n      const { exportAccessibleData } = await import('./export-accessible.js')\n      return exportAccessibleData(vault, opts)\n    },\n    async withdrawAccessibleData(vault, opts) {\n      const { withdrawAccessibleData } = await import('./withdraw-accessible.js')\n      return withdrawAccessibleData(vault, opts)\n    },\n    async requestWithdrawal(vault, opts) {\n      const { requestWithdrawal } = await import('./request-withdrawal.js')\n      return requestWithdrawal(vault, opts)\n    },\n    async listWithdrawalRequests(vault, opts) {\n      const { listWithdrawalRequests } = await import('./request-withdrawal.js')\n      return listWithdrawalRequests(vault, opts)\n    },\n    async approveWithdrawal(vault, requestId, opts) {\n      const { approveWithdrawal } = await import('./request-withdrawal.js')\n      return approveWithdrawal(vault, requestId, opts)\n    },\n    async rejectWithdrawal(vault, requestId, opts) {\n      const { rejectWithdrawal } = await import('./request-withdrawal.js')\n      return rejectWithdrawal(vault, requestId, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;AAWO,SAAS,kBAAuC;AACrD,SAAO;AAAA,IACL,MAAM,qBAAqB,OAAO,MAAM;AACtC,YAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,kCAAwB;AACtE,aAAO,qBAAqB,OAAO,IAAI;AAAA,IACzC;AAAA,IACA,MAAM,uBAAuB,OAAO,MAAM;AACxC,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,oCAA0B;AAC1E,aAAO,uBAAuB,OAAO,IAAI;AAAA,IAC3C;AAAA,IACA,MAAM,kBAAkB,OAAO,MAAM;AACnC,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,mCAAyB;AACpE,aAAO,kBAAkB,OAAO,IAAI;AAAA,IACtC;AAAA,IACA,MAAM,uBAAuB,OAAO,MAAM;AACxC,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,mCAAyB;AACzE,aAAO,uBAAuB,OAAO,IAAI;AAAA,IAC3C;AAAA,IACA,MAAM,kBAAkB,OAAO,WAAW,MAAM;AAC9C,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,mCAAyB;AACpE,aAAO,kBAAkB,OAAO,WAAW,IAAI;AAAA,IACjD;AAAA,IACA,MAAM,iBAAiB,OAAO,WAAW,MAAM;AAC7C,YAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,mCAAyB;AACnE,aAAO,iBAAiB,OAAO,WAAW,IAAI;AAAA,IAChD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-audit/portability/active.ts"],"sourcesContent":["/**\n * Enable the portability capability.\n * Pass to `createNoydb({ portabilityStrategy: withPortability() })` to make a\n * vault's `user.exportMyAccessibleData` / `user.unilateralWithdrawal` /\n * `user.requestWithdrawal` / `user.listWithdrawalRequests` /\n * `user.approveWithdrawal` / `user.rejectWithdrawal` methods live. The\n * export/withdraw/request engines are dynamically imported here, so they stay\n * reachable only via opt-in.\n */\nimport type { PortabilityStrategy } from './strategy.js'\n\nexport function withPortability(): PortabilityStrategy {\n  return {\n    async exportAccessibleData(vault, opts) {\n      const { exportAccessibleData } = await import('./export-accessible.js')\n      return exportAccessibleData(vault, opts)\n    },\n    async withdrawAccessibleData(vault, opts) {\n      const { withdrawAccessibleData } = await import('./withdraw-accessible.js')\n      return withdrawAccessibleData(vault, opts)\n    },\n    async requestWithdrawal(vault, opts) {\n      const { requestWithdrawal } = await import('./request-withdrawal.js')\n      return requestWithdrawal(vault, opts)\n    },\n    async listWithdrawalRequests(vault, opts) {\n      const { listWithdrawalRequests } = await import('./request-withdrawal.js')\n      return listWithdrawalRequests(vault, opts)\n    },\n    async approveWithdrawal(vault, requestId, opts) {\n      const { approveWithdrawal } = await import('./request-withdrawal.js')\n      return approveWithdrawal(vault, requestId, opts)\n    },\n    async rejectWithdrawal(vault, requestId, opts) {\n      const { rejectWithdrawal } = await import('./request-withdrawal.js')\n      return rejectWithdrawal(vault, requestId, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;AAWO,SAAS,kBAAuC;AACrD,SAAO;AAAA,IACL,MAAM,qBAAqB,OAAO,MAAM;AACtC,YAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,kCAAwB;AACtE,aAAO,qBAAqB,OAAO,IAAI;AAAA,IACzC;AAAA,IACA,MAAM,uBAAuB,OAAO,MAAM;AACxC,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,oCAA0B;AAC1E,aAAO,uBAAuB,OAAO,IAAI;AAAA,IAC3C;AAAA,IACA,MAAM,kBAAkB,OAAO,MAAM;AACnC,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,mCAAyB;AACpE,aAAO,kBAAkB,OAAO,IAAI;AAAA,IACtC;AAAA,IACA,MAAM,uBAAuB,OAAO,MAAM;AACxC,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,mCAAyB;AACzE,aAAO,uBAAuB,OAAO,IAAI;AAAA,IAC3C;AAAA,IACA,MAAM,kBAAkB,OAAO,WAAW,MAAM;AAC9C,YAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,mCAAyB;AACpE,aAAO,kBAAkB,OAAO,WAAW,IAAI;AAAA,IACjD;AAAA,IACA,MAAM,iBAAiB,OAAO,WAAW,MAAM;AAC7C,YAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,mCAAyB;AACnE,aAAO,iBAAiB,OAAO,WAAW,IAAI;AAAA,IAChD;AAAA,EACF;AACF;","names":[]}

package/dist/{post-register-BPJ36A6D.js → post-register-HIYY4Y5S.js}

@@ -4,7 +4,6 @@ import {
 import {
   SatelliteConfigError
 } from "./chunk-7O3Y4PPD.js";
-import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/marker.ts
 async function ensureSatelliteMarker(store, vaultName, spec, dek) {
@@ -14,7 +13,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     joined: spec.joined,
     epoch: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const { loadPersistedSchema } = await import("./storage-WP4M7IFO.js");
+  const { loadPersistedSchema } = await import("./storage-AVJA5BTW.js");
   const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
   const prior = persisted?.satellite;
   if (prior) {
@@ -25,7 +24,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     }
     return;
   }
-  const { persistSatelliteMarker } = await import("./register-AEOOGKNO.js");
+  const { persistSatelliteMarker } = await import("./register-7OJWAWT5.js");
   await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
 }
 
@@ -39,7 +38,7 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
   }
   if (baseSchema !== void 0) {
     try {
-      const { derivePersistedSchema } = await import("./derive-LY47HG7Q.js");
+      const { derivePersistedSchema } = await import("./derive-HHBRFS2U.js");
       const envelope = await derivePersistedSchema(baseSchema);
       const properties = envelope.jsonSchema?.["properties"];
       const baseFields = Object.keys(properties ?? {});
@@ -57,4 +56,4 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
 export {
   postRegister
 };
-//# sourceMappingURL=post-register-BPJ36A6D.js.map
+//# sourceMappingURL=post-register-HIYY4Y5S.js.map

package/dist/{post-register-BPJ36A6D.js.map → post-register-HIYY4Y5S.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/with-shape/satellites/marker.ts","../src/with-shape/satellites/post-register.ts"],"sourcesContent":["import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport { SatelliteConfigError } from '../../kernel/errors.js'\nimport { hashFields } from './validate.js'\nimport type { PairingMarker, SatelliteSpec } from './types.js'\n\n/**\n * Persist-or-reconcile the pairing marker in `_schemas/<satellite>`.\n * First declaration writes { base, fieldsHash, joined }; later declarations\n * must match exactly or are refused (R-S9). Lazy imports keep the satellite\n * spine tree-shakeable (config-drift.ts pattern).\n */\nexport async function ensureSatelliteMarker(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec, dek: EnclaveKey,\n): Promise<void> {\n  // #597: `epoch` only matters the first time this marker is ever persisted —\n  // when a `prior` marker already exists below we return without ever using\n  // it, so re-declaring a LIVE collection never mints (or compares) a new\n  // epoch; the persisted one is carried forward untouched. Stamped here as a\n  // timestamp (mirrors `derivedAt` in persisted-schemas/register.ts) rather\n  // than a counter, since there's nothing to count from yet.\n  const next: PairingMarker = {\n    base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined,\n    epoch: new Date().toISOString(),\n  }\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek)\n  const prior = persisted?.satellite\n  if (prior) {\n    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {\n      throw new SatelliteConfigError(\n        `R-S9: satellite \"${spec.satellite}\" re-declared divergently from its persisted pairing marker ` +\n        `(persisted base=\"${prior.base}\" fieldsHash=${prior.fieldsHash}; declared base=\"${next.base}\" fieldsHash=${next.fieldsHash}). ` +\n        `Evolve the marker deliberately, don't redeclare.`,\n      )\n    }\n    return\n  }\n  const { persistSatelliteMarker } = await import('../persisted-schemas/register.js')\n  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next })\n}\n","import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport type { SatelliteSpec } from './types.js'\nimport type { SatelliteRegistry } from './registry.js'\nimport { ensureSatelliteMarker } from './marker.js'\n\n/** Async post-registration: R-S9 marker reconcile + R-S1/R-S5 derivable-schema cross-check. Failures poison, never throw. */\nexport async function postRegister(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec,\n  getDEK: (collectionName: string) => Promise<EnclaveKey>,\n  baseSchema: unknown, registry: SatelliteRegistry,\n): Promise<void> {\n  try {\n    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite))\n  } catch (err) {\n    registry.poison(spec.satellite, (err as Error).message); return\n  }\n  if (baseSchema !== undefined) {\n    try {\n      const { derivePersistedSchema } = await import('../persisted-schemas/derive.js')\n      const envelope = await derivePersistedSchema(baseSchema)\n      const properties = (envelope.jsonSchema as Record<string, unknown> | null)?.['properties'] as Record<string, unknown> | undefined\n      const baseFields: string[] = Object.keys(properties ?? {})\n      const overlap = spec.fields.filter(f => baseFields.includes(f))\n      if (overlap.length > 0) {\n        registry.poison(spec.satellite,\n          `R-S1: satellite \"${spec.satellite}\" fields overlap the base schema: ${overlap.join(', ')} — routing must be unambiguous.`)\n      }\n    } catch { /* non-derivable validator → cross-check unavailable, by design (spec R-S5) */ }\n  }\n}\n"],"mappings":";;;;;;;;;AAYA,eAAsB,sBACpB,OAAmB,WAAmB,MAAqB,KAC5C;AAOf,QAAM,OAAsB;AAAA,IAC1B,MAAM,KAAK;AAAA,IAAM,YAAY,WAAW,KAAK,MAAM;AAAA,IAAG,QAAQ,KAAK;AAAA,IACnE,QAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,EAChC;AACA,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,WAAW,KAAK,WAAW,GAAG;AACjF,QAAM,QAAQ,WAAW;AACzB,MAAI,OAAO;AACT,QAAI,MAAM,SAAS,KAAK,QAAQ,MAAM,eAAe,KAAK,eAAe,MAAM,UAAU,WAAW,KAAK,UAAU,OAAO;AACxH,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,SAAS,gFACd,MAAM,IAAI,gBAAgB,MAAM,UAAU,oBAAoB,KAAK,IAAI,gBAAgB,KAAK,UAAU;AAAA,MAE5H;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,wBAAkC;AAClF,QAAM,uBAAuB,EAAE,OAAO,OAAO,WAAW,gBAAgB,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC7G;;;ACjCA,eAAsB,aACpB,OAAmB,WAAmB,MACtC,QACA,YAAqB,UACN;AACf,MAAI;AACF,UAAM,sBAAsB,OAAO,WAAW,MAAM,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAClF,SAAS,KAAK;AACZ,aAAS,OAAO,KAAK,WAAY,IAAc,OAAO;AAAG;AAAA,EAC3D;AACA,MAAI,eAAe,QAAW;AAC5B,QAAI;AACF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAgC;AAC/E,YAAM,WAAW,MAAM,sBAAsB,UAAU;AACvD,YAAM,aAAc,SAAS,aAAgD,YAAY;AACzF,YAAM,aAAuB,OAAO,KAAK,cAAc,CAAC,CAAC;AACzD,YAAM,UAAU,KAAK,OAAO,OAAO,OAAK,WAAW,SAAS,CAAC,CAAC;AAC9D,UAAI,QAAQ,SAAS,GAAG;AACtB,iBAAS;AAAA,UAAO,KAAK;AAAA,UACnB,oBAAoB,KAAK,SAAS,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAAA,QAAiC;AAAA,MAC9H;AAAA,IACF,QAAQ;AAAA,IAAiF;AAAA,EAC3F;AACF;","names":[]}
+{"version":3,"sources":["../src/with-shape/satellites/marker.ts","../src/with-shape/satellites/post-register.ts"],"sourcesContent":["import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport { SatelliteConfigError } from '../../kernel/errors.js'\nimport { hashFields } from './validate.js'\nimport type { PairingMarker, SatelliteSpec } from './types.js'\n\n/**\n * Persist-or-reconcile the pairing marker in `_schemas/<satellite>`.\n * First declaration writes { base, fieldsHash, joined }; later declarations\n * must match exactly or are refused (R-S9). Lazy imports keep the satellite\n * spine tree-shakeable (config-drift.ts pattern).\n */\nexport async function ensureSatelliteMarker(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec, dek: EnclaveKey,\n): Promise<void> {\n  // #597: `epoch` only matters the first time this marker is ever persisted —\n  // when a `prior` marker already exists below we return without ever using\n  // it, so re-declaring a LIVE collection never mints (or compares) a new\n  // epoch; the persisted one is carried forward untouched. Stamped here as a\n  // timestamp (mirrors `derivedAt` in persisted-schemas/register.ts) rather\n  // than a counter, since there's nothing to count from yet.\n  const next: PairingMarker = {\n    base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined,\n    epoch: new Date().toISOString(),\n  }\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek)\n  const prior = persisted?.satellite\n  if (prior) {\n    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {\n      throw new SatelliteConfigError(\n        `R-S9: satellite \"${spec.satellite}\" re-declared divergently from its persisted pairing marker ` +\n        `(persisted base=\"${prior.base}\" fieldsHash=${prior.fieldsHash}; declared base=\"${next.base}\" fieldsHash=${next.fieldsHash}). ` +\n        `Evolve the marker deliberately, don't redeclare.`,\n      )\n    }\n    return\n  }\n  const { persistSatelliteMarker } = await import('../persisted-schemas/register.js')\n  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next })\n}\n","import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../kernel/enclave/index.js'\nimport type { SatelliteSpec } from './types.js'\nimport type { SatelliteRegistry } from './registry.js'\nimport { ensureSatelliteMarker } from './marker.js'\n\n/** Async post-registration: R-S9 marker reconcile + R-S1/R-S5 derivable-schema cross-check. Failures poison, never throw. */\nexport async function postRegister(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec,\n  getDEK: (collectionName: string) => Promise<EnclaveKey>,\n  baseSchema: unknown, registry: SatelliteRegistry,\n): Promise<void> {\n  try {\n    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite))\n  } catch (err) {\n    registry.poison(spec.satellite, (err as Error).message); return\n  }\n  if (baseSchema !== undefined) {\n    try {\n      const { derivePersistedSchema } = await import('../persisted-schemas/derive.js')\n      const envelope = await derivePersistedSchema(baseSchema)\n      const properties = (envelope.jsonSchema as Record<string, unknown> | null)?.['properties'] as Record<string, unknown> | undefined\n      const baseFields: string[] = Object.keys(properties ?? {})\n      const overlap = spec.fields.filter(f => baseFields.includes(f))\n      if (overlap.length > 0) {\n        registry.poison(spec.satellite,\n          `R-S1: satellite \"${spec.satellite}\" fields overlap the base schema: ${overlap.join(', ')} — routing must be unambiguous.`)\n      }\n    } catch { /* non-derivable validator → cross-check unavailable, by design (spec R-S5) */ }\n  }\n}\n"],"mappings":";;;;;;;;AAYA,eAAsB,sBACpB,OAAmB,WAAmB,MAAqB,KAC5C;AAOf,QAAM,OAAsB;AAAA,IAC1B,MAAM,KAAK;AAAA,IAAM,YAAY,WAAW,KAAK,MAAM;AAAA,IAAG,QAAQ,KAAK;AAAA,IACnE,QAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,EAChC;AACA,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,WAAW,KAAK,WAAW,GAAG;AACjF,QAAM,QAAQ,WAAW;AACzB,MAAI,OAAO;AACT,QAAI,MAAM,SAAS,KAAK,QAAQ,MAAM,eAAe,KAAK,eAAe,MAAM,UAAU,WAAW,KAAK,UAAU,OAAO;AACxH,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,SAAS,gFACd,MAAM,IAAI,gBAAgB,MAAM,UAAU,oBAAoB,KAAK,IAAI,gBAAgB,KAAK,UAAU;AAAA,MAE5H;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,wBAAkC;AAClF,QAAM,uBAAuB,EAAE,OAAO,OAAO,WAAW,gBAAgB,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC7G;;;ACjCA,eAAsB,aACpB,OAAmB,WAAmB,MACtC,QACA,YAAqB,UACN;AACf,MAAI;AACF,UAAM,sBAAsB,OAAO,WAAW,MAAM,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAClF,SAAS,KAAK;AACZ,aAAS,OAAO,KAAK,WAAY,IAAc,OAAO;AAAG;AAAA,EAC3D;AACA,MAAI,eAAe,QAAW;AAC5B,QAAI;AACF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAgC;AAC/E,YAAM,WAAW,MAAM,sBAAsB,UAAU;AACvD,YAAM,aAAc,SAAS,aAAgD,YAAY;AACzF,YAAM,aAAuB,OAAO,KAAK,cAAc,CAAC,CAAC;AACzD,YAAM,UAAU,KAAK,OAAO,OAAO,OAAK,WAAW,SAAS,CAAC,CAAC;AAC9D,UAAI,QAAQ,SAAS,GAAG;AACtB,iBAAS;AAAA,UAAO,KAAK;AAAA,UACnB,oBAAoB,KAAK,SAAS,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAAA,QAAiC;AAAA,MAC9H;AAAA,IACF,QAAQ;AAAA,IAAiF;AAAA,EAC3F;AACF;","names":[]}

package/dist/{purge-scope-FGNNLWHD.js → purge-scope-4HEFPDOW.js}

@@ -1,5 +1,3 @@
-import "./chunk-PZ5AY32C.js";
-
 // src/with-audit/forget/purge-scope.ts
 function partitionSealedCekKeys(keys, prefix, scopedPurge, declared) {
   const matches = keys.filter((key) => key.startsWith(prefix));
@@ -21,4 +19,4 @@ export {
   residueNoticesFromMap,
   shouldSkipBlobScan
 };
-//# sourceMappingURL=purge-scope-FGNNLWHD.js.map
+//# sourceMappingURL=purge-scope-4HEFPDOW.js.map