@noy-db/hub 0.8.0-pre.0 → 0.8.0

package/dist/portability/index.js

@@ -1,35 +1,35 @@
 import {
   NO_PORTABILITY
-} from "../chunk-ZUVBC32X.js";
+} from "../chunk-AUKKUPVB.js";
 import {
   PortabilityNotEnabledError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-37EPTBBR.js";
 
 // src/with-audit/portability/active.ts
 function withPortability() {
   return {
     async exportAccessibleData(vault, opts) {
-      const { exportAccessibleData } = await import("../export-accessible-VMA3YM5V.js");
+      const { exportAccessibleData } = await import("../export-accessible-RAOJAAU5.js");
       return exportAccessibleData(vault, opts);
     },
     async withdrawAccessibleData(vault, opts) {
-      const { withdrawAccessibleData } = await import("../withdraw-accessible-5NZUPAVA.js");
+      const { withdrawAccessibleData } = await import("../withdraw-accessible-HL7GACUE.js");
       return withdrawAccessibleData(vault, opts);
     },
     async requestWithdrawal(vault, opts) {
-      const { requestWithdrawal } = await import("../request-withdrawal-Z5NC6TXT.js");
+      const { requestWithdrawal } = await import("../request-withdrawal-AV2MJJKY.js");
       return requestWithdrawal(vault, opts);
     },
     async listWithdrawalRequests(vault, opts) {
-      const { listWithdrawalRequests } = await import("../request-withdrawal-Z5NC6TXT.js");
+      const { listWithdrawalRequests } = await import("../request-withdrawal-AV2MJJKY.js");
       return listWithdrawalRequests(vault, opts);
     },
     async approveWithdrawal(vault, requestId, opts) {
-      const { approveWithdrawal } = await import("../request-withdrawal-Z5NC6TXT.js");
+      const { approveWithdrawal } = await import("../request-withdrawal-AV2MJJKY.js");
       return approveWithdrawal(vault, requestId, opts);
     },
     async rejectWithdrawal(vault, requestId, opts) {
-      const { rejectWithdrawal } = await import("../request-withdrawal-Z5NC6TXT.js");
+      const { rejectWithdrawal } = await import("../request-withdrawal-AV2MJJKY.js");
       return rejectWithdrawal(vault, requestId, opts);
     }
   };

package/dist/{post-register-SLSXIPBV.js → post-register-7ND27CF2.js}

@@ -1,9 +1,9 @@
 import {
   hashFields
-} from "./chunk-6K7DPM7D.js";
+} from "./chunk-XQRFSKYM.js";
 import {
   SatelliteConfigError
-} from "./chunk-244VXYPG.js";
+} from "./chunk-37EPTBBR.js";
 
 // src/with-shape/satellites/marker.ts
 async function ensureSatelliteMarker(store, vaultName, spec, dek) {
@@ -13,7 +13,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     joined: spec.joined,
     epoch: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const { loadPersistedSchema } = await import("./storage-SVMKRGCW.js");
+  const { loadPersistedSchema } = await import("./storage-BYN5LO6Z.js");
   const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek);
   const prior = persisted?.satellite;
   if (prior) {
@@ -24,7 +24,7 @@ async function ensureSatelliteMarker(store, vaultName, spec, dek) {
     }
     return;
   }
-  const { persistSatelliteMarker } = await import("./register-F3OYE7MJ.js");
+  const { persistSatelliteMarker } = await import("./register-DT5HZ2LZ.js");
   await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next });
 }
 
@@ -38,7 +38,7 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
   }
   if (baseSchema !== void 0) {
     try {
-      const { derivePersistedSchema } = await import("./derive-OX7F6TGG.js");
+      const { derivePersistedSchema } = await import("./derive-XLOJVXPU.js");
       const envelope = await derivePersistedSchema(baseSchema);
       const properties = envelope.jsonSchema?.["properties"];
       const baseFields = Object.keys(properties ?? {});
@@ -56,4 +56,4 @@ async function postRegister(store, vaultName, spec, getDEK, baseSchema, registry
 export {
   postRegister
 };
-//# sourceMappingURL=post-register-SLSXIPBV.js.map
+//# sourceMappingURL=post-register-7ND27CF2.js.map

package/dist/post-register-7ND27CF2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/satellites/marker.ts","../src/with-shape/satellites/post-register.ts"],"sourcesContent":["import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../capsule/index.js'\nimport { SatelliteConfigError } from '../../kernel/errors.js'\nimport { hashFields } from './validate.js'\nimport type { PairingMarker, SatelliteSpec } from './types.js'\n\n/**\n * Persist-or-reconcile the pairing marker in `_schemas/<satellite>`.\n * First declaration writes { base, fieldsHash, joined }; later declarations\n * must match exactly or are refused (R-S9). Lazy imports keep the satellite\n * spine tree-shakeable (config-drift.ts pattern).\n */\nexport async function ensureSatelliteMarker(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec, dek: EnclaveKey,\n): Promise<void> {\n  // #597: `epoch` only matters the first time this marker is ever persisted —\n  // when a `prior` marker already exists below we return without ever using\n  // it, so re-declaring a LIVE collection never mints (or compares) a new\n  // epoch; the persisted one is carried forward untouched. Stamped here as a\n  // timestamp (mirrors `derivedAt` in persisted-schemas/register.ts) rather\n  // than a counter, since there's nothing to count from yet.\n  const next: PairingMarker = {\n    base: spec.base, fieldsHash: hashFields(spec.fields), joined: spec.joined,\n    epoch: new Date().toISOString(),\n  }\n  const { loadPersistedSchema } = await import('../persisted-schemas/storage.js')\n  const persisted = await loadPersistedSchema(store, vaultName, spec.satellite, dek)\n  const prior = persisted?.satellite\n  if (prior) {\n    if (prior.base !== next.base || prior.fieldsHash !== next.fieldsHash || (prior.joined ?? null) !== (next.joined ?? null)) {\n      throw new SatelliteConfigError(\n        `R-S9: satellite \"${spec.satellite}\" re-declared divergently from its persisted pairing marker ` +\n        `(persisted base=\"${prior.base}\" fieldsHash=${prior.fieldsHash}; declared base=\"${next.base}\" fieldsHash=${next.fieldsHash}). ` +\n        `Evolve the marker deliberately, don't redeclare.`,\n      )\n    }\n    return\n  }\n  const { persistSatelliteMarker } = await import('../persisted-schemas/register.js')\n  await persistSatelliteMarker({ store, vault: vaultName, collectionName: spec.satellite, dek, marker: next })\n}\n","import type { NoydbStore } from '../../kernel/types.js'\nimport type { EnclaveKey } from '../../capsule/index.js'\nimport type { SatelliteSpec } from './types.js'\nimport type { SatelliteRegistry } from './registry.js'\nimport { ensureSatelliteMarker } from './marker.js'\n\n/** Async post-registration: R-S9 marker reconcile + R-S1/R-S5 derivable-schema cross-check. Failures poison, never throw. */\nexport async function postRegister(\n  store: NoydbStore, vaultName: string, spec: SatelliteSpec,\n  getDEK: (collectionName: string) => Promise<EnclaveKey>,\n  baseSchema: unknown, registry: SatelliteRegistry,\n): Promise<void> {\n  try {\n    await ensureSatelliteMarker(store, vaultName, spec, await getDEK(spec.satellite))\n  } catch (err) {\n    registry.poison(spec.satellite, (err as Error).message); return\n  }\n  if (baseSchema !== undefined) {\n    try {\n      const { derivePersistedSchema } = await import('../persisted-schemas/derive.js')\n      const envelope = await derivePersistedSchema(baseSchema)\n      const properties = (envelope.jsonSchema as Record<string, unknown> | null)?.['properties'] as Record<string, unknown> | undefined\n      const baseFields: string[] = Object.keys(properties ?? {})\n      const overlap = spec.fields.filter(f => baseFields.includes(f))\n      if (overlap.length > 0) {\n        registry.poison(spec.satellite,\n          `R-S1: satellite \"${spec.satellite}\" fields overlap the base schema: ${overlap.join(', ')} — routing must be unambiguous.`)\n      }\n    } catch { /* non-derivable validator → cross-check unavailable, by design (spec R-S5) */ }\n  }\n}\n"],"mappings":";;;;;;;;AAYA,eAAsB,sBACpB,OAAmB,WAAmB,MAAqB,KAC5C;AAOf,QAAM,OAAsB;AAAA,IAC1B,MAAM,KAAK;AAAA,IAAM,YAAY,WAAW,KAAK,MAAM;AAAA,IAAG,QAAQ,KAAK;AAAA,IACnE,QAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,EAChC;AACA,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,uBAAiC;AAC9E,QAAM,YAAY,MAAM,oBAAoB,OAAO,WAAW,KAAK,WAAW,GAAG;AACjF,QAAM,QAAQ,WAAW;AACzB,MAAI,OAAO;AACT,QAAI,MAAM,SAAS,KAAK,QAAQ,MAAM,eAAe,KAAK,eAAe,MAAM,UAAU,WAAW,KAAK,UAAU,OAAO;AACxH,YAAM,IAAI;AAAA,QACR,oBAAoB,KAAK,SAAS,gFACd,MAAM,IAAI,gBAAgB,MAAM,UAAU,oBAAoB,KAAK,IAAI,gBAAgB,KAAK,UAAU;AAAA,MAE5H;AAAA,IACF;AACA;AAAA,EACF;AACA,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,wBAAkC;AAClF,QAAM,uBAAuB,EAAE,OAAO,OAAO,WAAW,gBAAgB,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAC;AAC7G;;;ACjCA,eAAsB,aACpB,OAAmB,WAAmB,MACtC,QACA,YAAqB,UACN;AACf,MAAI;AACF,UAAM,sBAAsB,OAAO,WAAW,MAAM,MAAM,OAAO,KAAK,SAAS,CAAC;AAAA,EAClF,SAAS,KAAK;AACZ,aAAS,OAAO,KAAK,WAAY,IAAc,OAAO;AAAG;AAAA,EAC3D;AACA,MAAI,eAAe,QAAW;AAC5B,QAAI;AACF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAgC;AAC/E,YAAM,WAAW,MAAM,sBAAsB,UAAU;AACvD,YAAM,aAAc,SAAS,aAAgD,YAAY;AACzF,YAAM,aAAuB,OAAO,KAAK,cAAc,CAAC,CAAC;AACzD,YAAM,UAAU,KAAK,OAAO,OAAO,OAAK,WAAW,SAAS,CAAC,CAAC;AAC9D,UAAI,QAAQ,SAAS,GAAG;AACtB,iBAAS;AAAA,UAAO,KAAK;AAAA,UACnB,oBAAoB,KAAK,SAAS,qCAAqC,QAAQ,KAAK,IAAI,CAAC;AAAA,QAAiC;AAAA,MAC9H;AAAA,IACF,QAAQ;AAAA,IAAiF;AAAA,EAC3F;AACF;","names":[]}

package/dist/query/all/index.js

@@ -2,27 +2,27 @@ import {
   Query,
   ScanBuilder,
   executePlan
-} from "../../chunk-TOPYQ6GA.js";
-import "../../chunk-FQ54DWUQ.js";
-import "../../chunk-FXQBGFOX.js";
-import "../../chunk-F2TDU7MQ.js";
-import "../../chunk-ORDURZBU.js";
+} from "../../chunk-OYW3I5M4.js";
+import "../../chunk-NBQ3KK6X.js";
+import "../../chunk-4CIQDWRB.js";
+import "../../chunk-MBMTND6D.js";
+import "../../chunk-3EWS67C7.js";
 import "../../chunk-SUZKW6UR.js";
-import "../../chunk-BJ2IXQ5Q.js";
+import "../../chunk-FFJFE4T7.js";
 import "../../chunk-VHM7HCKB.js";
 import "../../chunk-XBKH4FOC.js";
-import "../../chunk-ZSX4S5XB.js";
-import "../../chunk-4I522ERM.js";
-import "../../chunk-MKXXMNJH.js";
+import "../../chunk-TKVUE4JF.js";
+import "../../chunk-NCO25JZO.js";
+import "../../chunk-4V3Q35WG.js";
 import "../../chunk-LGNDFRYC.js";
-import "../../chunk-F24ZZTHQ.js";
+import "../../chunk-JQYKPKG6.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7JE7BDYJ.js";
+import "../../chunk-AL6ML4LA.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-5O7D6ZTW.js";
-import "../../chunk-HLEK5VAN.js";
-import "../../chunk-Z5HTYMMQ.js";
-import "../../chunk-244VXYPG.js";
+import "../../chunk-FOEDQATO.js";
+import "../../chunk-5WWDGFOS.js";
+import "../../chunk-SYNY3VB5.js";
+import "../../chunk-37EPTBBR.js";
 export {
   Query,
   ScanBuilder,

package/dist/query/index.js

@@ -1,31 +1,31 @@
 import "../chunk-BKT776R5.js";
 import {
   CollectionIndexes
-} from "../chunk-YSK2CU2Q.js";
+} from "../chunk-2AFX33YA.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-LGNDFRYC.js";
 import {
   ScanBuilder
-} from "../chunk-F24ZZTHQ.js";
+} from "../chunk-JQYKPKG6.js";
 import {
   Query,
   executePlan
-} from "../chunk-7JE7BDYJ.js";
+} from "../chunk-AL6ML4LA.js";
 import "../chunk-3TDUWVWB.js";
-import "../chunk-5O7D6ZTW.js";
+import "../chunk-FOEDQATO.js";
 import {
   evaluateClause,
   evaluateFieldClause,
   readPath
-} from "../chunk-HLEK5VAN.js";
-import "../chunk-Z5HTYMMQ.js";
+} from "../chunk-5WWDGFOS.js";
+import "../chunk-SYNY3VB5.js";
 import {
   FieldNotQueryableError,
   IndexRequiredError,
   IndexWriteFailureError,
   QueryExtensionMissingError,
   UnsafePatternError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-37EPTBBR.js";
 export {
   CollectionIndexes,
   FieldNotQueryableError,

package/dist/query/live/index.js

@@ -1,17 +1,17 @@
 import {
   buildLiveQuery,
   installLive
-} from "../../chunk-FQ54DWUQ.js";
-import "../../chunk-BJ2IXQ5Q.js";
+} from "../../chunk-NBQ3KK6X.js";
+import "../../chunk-FFJFE4T7.js";
 import "../../chunk-VHM7HCKB.js";
 import "../../chunk-XBKH4FOC.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7JE7BDYJ.js";
+import "../../chunk-AL6ML4LA.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-5O7D6ZTW.js";
-import "../../chunk-HLEK5VAN.js";
-import "../../chunk-Z5HTYMMQ.js";
-import "../../chunk-244VXYPG.js";
+import "../../chunk-FOEDQATO.js";
+import "../../chunk-5WWDGFOS.js";
+import "../../chunk-SYNY3VB5.js";
+import "../../chunk-37EPTBBR.js";
 
 // src/kernel/query/live/index.ts
 installLive();

package/dist/query/reduce/index.js

@@ -1,26 +1,26 @@
 import {
   installReduce
-} from "../../chunk-FXQBGFOX.js";
-import "../../chunk-F2TDU7MQ.js";
-import "../../chunk-ORDURZBU.js";
+} from "../../chunk-4CIQDWRB.js";
+import "../../chunk-MBMTND6D.js";
+import "../../chunk-3EWS67C7.js";
 import "../../chunk-SUZKW6UR.js";
-import "../../chunk-BJ2IXQ5Q.js";
+import "../../chunk-FFJFE4T7.js";
 import "../../chunk-VHM7HCKB.js";
 import {
   dateTrunc,
   isDateTruncKey,
   truncateDate
 } from "../../chunk-XBKH4FOC.js";
-import "../../chunk-F24ZZTHQ.js";
+import "../../chunk-JQYKPKG6.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7JE7BDYJ.js";
+import "../../chunk-AL6ML4LA.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-5O7D6ZTW.js";
-import "../../chunk-HLEK5VAN.js";
-import "../../chunk-Z5HTYMMQ.js";
+import "../../chunk-FOEDQATO.js";
+import "../../chunk-5WWDGFOS.js";
+import "../../chunk-SYNY3VB5.js";
 import {
   GroupCardinalityError
-} from "../../chunk-244VXYPG.js";
+} from "../../chunk-37EPTBBR.js";
 
 // src/kernel/query/reduce/index.ts
 installReduce();

package/dist/query/relate/index.js

@@ -9,29 +9,29 @@ import {
   installRelate,
   renderExplainText,
   runTraversal
-} from "../../chunk-ZSX4S5XB.js";
+} from "../../chunk-TKVUE4JF.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   DEFAULT_JOIN_MAX_ROWS,
   applyJoins,
   resetJoinWarnings
-} from "../../chunk-4I522ERM.js";
-import "../../chunk-MKXXMNJH.js";
+} from "../../chunk-NCO25JZO.js";
+import "../../chunk-4V3Q35WG.js";
 import "../../chunk-LGNDFRYC.js";
-import "../../chunk-F24ZZTHQ.js";
+import "../../chunk-JQYKPKG6.js";
 import "../../chunk-F6NCB7KT.js";
-import "../../chunk-7JE7BDYJ.js";
+import "../../chunk-AL6ML4LA.js";
 import "../../chunk-3TDUWVWB.js";
-import "../../chunk-5O7D6ZTW.js";
-import "../../chunk-HLEK5VAN.js";
-import "../../chunk-Z5HTYMMQ.js";
+import "../../chunk-FOEDQATO.js";
+import "../../chunk-5WWDGFOS.js";
+import "../../chunk-SYNY3VB5.js";
 import {
   CrossJoinSourceUnknownError,
   CrossJoinTooLargeError,
   DanglingReferenceError,
   JoinTooLargeError,
   TraversalCycleError
-} from "../../chunk-244VXYPG.js";
+} from "../../chunk-37EPTBBR.js";
 
 // src/kernel/query/relate/index.ts
 installRelate();

package/dist/reduce/index.js

@@ -9,7 +9,7 @@ import {
   runningMoneySum,
   runningSum,
   withWindow
-} from "../chunk-T52GX4SA.js";
+} from "../chunk-O46CHQT7.js";
 import {
   GROUPBY_MAX_CARDINALITY,
   GROUPBY_WARN_CARDINALITY,
@@ -22,7 +22,7 @@ import {
   groupAndReduce,
   reduceRecords,
   resetGroupByWarnings
-} from "../chunk-CF5UU4S7.js";
+} from "../chunk-N7UDP5VU.js";
 import "../chunk-XZHEOSQ2.js";
 import {
   avg,
@@ -43,18 +43,18 @@ import {
   stddev,
   sum,
   variance
-} from "../chunk-F2TDU7MQ.js";
+} from "../chunk-MBMTND6D.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-VHM7HCKB.js";
 import "../chunk-XBKH4FOC.js";
 import {
   NO_REDUCE
 } from "../chunk-3TDUWVWB.js";
-import "../chunk-5O7D6ZTW.js";
-import "../chunk-HLEK5VAN.js";
-import "../chunk-GHLTDZRS.js";
-import "../chunk-Z5HTYMMQ.js";
-import "../chunk-244VXYPG.js";
+import "../chunk-FOEDQATO.js";
+import "../chunk-5WWDGFOS.js";
+import "../chunk-OKSTSITU.js";
+import "../chunk-SYNY3VB5.js";
+import "../chunk-37EPTBBR.js";
 
 // src/with-lookup/reduce/active.ts
 var WINDOW_NOT_ENABLED = new Error(

package/dist/register-DT5HZ2LZ.js

@@ -0,0 +1,30 @@
+import {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+} from "./chunk-WPOYWFSE.js";
+import "./chunk-ZVF37PKE.js";
+import "./chunk-TEHHROZL.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-VAORSCSU.js";
+import "./chunk-747G6CT3.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-3L2NBKDR.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-N7EVQD5S.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-6QVKPHBF.js";
+import "./chunk-EZGV6F47.js";
+import "./chunk-OIEO4WDL.js";
+import "./chunk-Q2XRFWOI.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-42ALPZ2B.js";
+import "./chunk-QMWY2FDS.js";
+import "./chunk-SV2PM2OY.js";
+import "./chunk-37EPTBBR.js";
+export {
+  persistClassifiedMarker,
+  persistSatelliteMarker,
+  persistSchemaIfNeeded
+};
+//# sourceMappingURL=register-DT5HZ2LZ.js.map

package/dist/registry-BHRZGZHF.js

@@ -0,0 +1,8 @@
+import {
+  GuardRegistry
+} from "./chunk-FVH5QYY2.js";
+import "./chunk-37EPTBBR.js";
+export {
+  GuardRegistry
+};
+//# sourceMappingURL=registry-BHRZGZHF.js.map

package/dist/registry-ET6ZFFWA.js

@@ -0,0 +1,34 @@
+import {
+  DerivationRegistry
+} from "./chunk-U2FZNEWJ.js";
+import "./chunk-FFWI7UH7.js";
+import "./chunk-IUT3GWP3.js";
+import "./chunk-TFMM5DBB.js";
+import "./chunk-M5B2W6YY.js";
+import "./chunk-GUZET4SG.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-747G6CT3.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-3L2NBKDR.js";
+import "./chunk-244QBK7Z.js";
+import "./chunk-NYMLINRP.js";
+import "./chunk-V4PXLYWM.js";
+import "./chunk-3EWS67C7.js";
+import "./chunk-XBKH4FOC.js";
+import "./chunk-2GHDLTPE.js";
+import "./chunk-23D6M6VM.js";
+import "./chunk-OKSTSITU.js";
+import "./chunk-SYNY3VB5.js";
+import "./chunk-6QVKPHBF.js";
+import "./chunk-EZGV6F47.js";
+import "./chunk-OIEO4WDL.js";
+import "./chunk-Q2XRFWOI.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-42ALPZ2B.js";
+import "./chunk-QMWY2FDS.js";
+import "./chunk-SV2PM2OY.js";
+import "./chunk-37EPTBBR.js";
+export {
+  DerivationRegistry
+};
+//# sourceMappingURL=registry-ET6ZFFWA.js.map

package/dist/registry-HXFGLGTG.js

@@ -0,0 +1,8 @@
+import {
+  OverlayedViewRegistry
+} from "./chunk-VVOLDVIR.js";
+import "./chunk-37EPTBBR.js";
+export {
+  OverlayedViewRegistry
+};
+//# sourceMappingURL=registry-HXFGLGTG.js.map

package/dist/registry-THCPDEOD.js

@@ -0,0 +1,23 @@
+import {
+  MaterializedViewRegistry,
+  ungatedMvContext,
+  wrapDbWithPredicates
+} from "./chunk-JIBUPZHA.js";
+import "./chunk-XBKH4FOC.js";
+import "./chunk-4V3Q35WG.js";
+import "./chunk-LGNDFRYC.js";
+import "./chunk-5WWDGFOS.js";
+import "./chunk-EZGV6F47.js";
+import "./chunk-OIEO4WDL.js";
+import "./chunk-Q2XRFWOI.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-42ALPZ2B.js";
+import "./chunk-QMWY2FDS.js";
+import "./chunk-SV2PM2OY.js";
+import "./chunk-37EPTBBR.js";
+export {
+  MaterializedViewRegistry,
+  ungatedMvContext,
+  wrapDbWithPredicates
+};
+//# sourceMappingURL=registry-THCPDEOD.js.map

package/dist/request-withdrawal-AV2MJJKY.js

@@ -0,0 +1,30 @@
+import {
+  WITHDRAWAL_REQUESTS_COLLECTION,
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+} from "./chunk-IUBMZPHM.js";
+import "./chunk-IMQKWR46.js";
+import "./chunk-EJLV62NI.js";
+import "./chunk-KZXDLBY6.js";
+import "./chunk-5A4345TG.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-EZGV6F47.js";
+import "./chunk-OIEO4WDL.js";
+import "./chunk-Q2XRFWOI.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-42ALPZ2B.js";
+import "./chunk-QMWY2FDS.js";
+import "./chunk-SV2PM2OY.js";
+import "./chunk-37EPTBBR.js";
+export {
+  WITHDRAWAL_REQUESTS_COLLECTION,
+  WithdrawalRequestError,
+  approveWithdrawal,
+  listWithdrawalRequests,
+  rejectWithdrawal,
+  requestWithdrawal
+};
+//# sourceMappingURL=request-withdrawal-AV2MJJKY.js.map

package/dist/{reveal-4BCKPEC2.js → reveal-B2TLP4JQ.js}

@@ -1,16 +1,17 @@
-import {
-  isTombstone
-} from "./chunk-SEE332EV.js";
 import {
   dualReadSealedSlot
-} from "./chunk-DE4DH2RZ.js";
-import "./chunk-UYB234ZR.js";
-import "./chunk-ODVPTDPK.js";
+} from "./chunk-5KC7QYEC.js";
+import "./chunk-EZOAKKTB.js";
+import {
+  isTombstone
+} from "./chunk-42ALPZ2B.js";
+import "./chunk-QMWY2FDS.js";
+import "./chunk-SV2PM2OY.js";
 import {
   ClassifiedRevealError
-} from "./chunk-244VXYPG.js";
+} from "./chunk-37EPTBBR.js";
 
-// src/kernel/enclave/classify/reveal.ts
+// src/capsule/enclave-aes/classify/reveal.ts
 async function revealSealedField(ctx, id, field) {
   const env = await ctx.getEnvelope(id);
   if (env === null || isTombstone(env, ctx.encrypted) || (env._tier ?? 0) > 0) {
@@ -34,4 +35,4 @@ async function revealSealedField(ctx, id, field) {
 export {
   revealSealedField
 };
-//# sourceMappingURL=reveal-4BCKPEC2.js.map
+//# sourceMappingURL=reveal-B2TLP4JQ.js.map

package/dist/reveal-B2TLP4JQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/capsule/enclave-aes/classify/reveal.ts"],"sourcesContent":["/**\n * Single-point audited reveal, stage-2 rework (I6): decrypt ONE sealed slot\n * from the raw envelope — no full record view, no collection.get(), so no\n * spurious 'get' consent entry. Fail-closed gates (b)/(c) live here; gate\n * (a) (storage:'never') fires in collection.reveal before any strategy call.\n * @module\n */\nimport { dualReadSealedSlot } from '../bound.js'\nimport { isTombstone } from '../../plumbing/tombstone.js'\nimport { ClassifiedRevealError } from '../../../kernel/errors.js'\nimport type { EncryptedEnvelope } from '../../../kernel/types.js'\nimport type { EnclaveKey } from '../crypto.js'\n\nexport interface RevealEngineCtx {\n  readonly collection: string\n  readonly encrypted: boolean\n  getEnvelope(id: string): Promise<EncryptedEnvelope | null>\n  resolveCek(env: EncryptedEnvelope): Promise<EnclaveKey | undefined>\n  getDEK(): Promise<EnclaveKey>\n}\n\nexport async function revealSealedField(ctx: RevealEngineCtx, id: string, field: string): Promise<unknown> {\n  const env = await ctx.getEnvelope(id)\n  if (env === null || isTombstone(env, ctx.encrypted) || (env._tier ?? 0) > 0) {\n    throw new ClassifiedRevealError(ctx.collection, field, `record \"${id}\" not found in \"${ctx.collection}\"`)\n  }\n  if (!ctx.encrypted) {\n    // Plaintext collection: nothing is sealed; the value sits in the open body.\n    const record = JSON.parse(env._data || '{}') as Record<string, unknown>\n    if (!(field in record)) {\n      throw new ClassifiedRevealError(ctx.collection, field, `no stored value for \"${field}\"`)\n    }\n    return record[field]\n  }\n  const blob = env._sealed?.[field]\n  if (blob === undefined) {\n    // Gate (c): fail-closed error, never parseSealedSlot(undefined)'s TypeError.\n    throw new ClassifiedRevealError(ctx.collection, field, `no sealed value stored for \"${field}\"`)\n  }\n  const cek = await ctx.resolveCek(env)\n  const dek = await ctx.getDEK()\n  return JSON.parse(await dualReadSealedSlot(blob, field, ctx.collection, cek, dek))\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,eAAsB,kBAAkB,KAAsB,IAAY,OAAiC;AACzG,QAAM,MAAM,MAAM,IAAI,YAAY,EAAE;AACpC,MAAI,QAAQ,QAAQ,YAAY,KAAK,IAAI,SAAS,MAAM,IAAI,SAAS,KAAK,GAAG;AAC3E,UAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,WAAW,EAAE,mBAAmB,IAAI,UAAU,GAAG;AAAA,EAC1G;AACA,MAAI,CAAC,IAAI,WAAW;AAElB,UAAM,SAAS,KAAK,MAAM,IAAI,SAAS,IAAI;AAC3C,QAAI,EAAE,SAAS,SAAS;AACtB,YAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,wBAAwB,KAAK,GAAG;AAAA,IACzF;AACA,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,OAAO,IAAI,UAAU,KAAK;AAChC,MAAI,SAAS,QAAW;AAEtB,UAAM,IAAI,sBAAsB,IAAI,YAAY,OAAO,+BAA+B,KAAK,GAAG;AAAA,EAChG;AACA,QAAM,MAAM,MAAM,IAAI,WAAW,GAAG;AACpC,QAAM,MAAM,MAAM,IAAI,OAAO;AAC7B,SAAO,KAAK,MAAM,MAAM,mBAAmB,MAAM,OAAO,IAAI,YAAY,KAAK,GAAG,CAAC;AACnF;","names":[]}

package/dist/revoke-6DWIEOCV.js

@@ -0,0 +1,24 @@
+import {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+} from "./chunk-5UMK7GRI.js";
+import "./chunk-JWWYRR4Q.js";
+import "./chunk-DLD5LGDS.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-EZGV6F47.js";
+import "./chunk-OIEO4WDL.js";
+import "./chunk-Q2XRFWOI.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-42ALPZ2B.js";
+import "./chunk-QMWY2FDS.js";
+import "./chunk-SV2PM2OY.js";
+import "./chunk-37EPTBBR.js";
+export {
+  getRevokedDocIdsCore,
+  publishRevocationListCore,
+  revokeDocCore,
+  unrevokeDocCore
+};
+//# sourceMappingURL=revoke-6DWIEOCV.js.map

package/dist/satellites/index.js

@@ -1,6 +1,6 @@
 import {
   SatelliteConfigError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-37EPTBBR.js";
 export {
   SatelliteConfigError
 };

package/dist/schema-update/index.js

@@ -3,7 +3,7 @@ import {
   blindUpdate,
   coordinatedCutover,
   lockSchema
-} from "../chunk-HT2AHGQI.js";
+} from "../chunk-4JPMZTJY.js";
 import {
   computeSchemaDelta,
   evaluateStrategies
@@ -12,7 +12,7 @@ import {
   SchemaUpdateGate
 } from "../chunk-6LJY7X5A.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-244VXYPG.js";
+import "../chunk-37EPTBBR.js";
 export {
   SchemaUpdateGate,
   additiveOnly,

package/dist/sealed-record/index.js

@@ -1,39 +1,38 @@
 import {
   NO_SEALED_RECORD
-} from "../chunk-PDCG6PR5.js";
-import {
-  recordAadFor
-} from "../chunk-KJFW62P4.js";
-import "../chunk-SEE332EV.js";
-import "../chunk-6QSQQLSE.js";
-import "../chunk-DE4DH2RZ.js";
-import "../chunk-LQ4ZHOKP.js";
-import "../chunk-LP7BEXCT.js";
+} from "../chunk-UEFOQH74.js";
 import {
   base64ToBuffer,
   decrypt,
-  importCek
-} from "../chunk-UYB234ZR.js";
-import "../chunk-ODVPTDPK.js";
+  importCek,
+  recordAadFor,
+  sealedBodyArgs
+} from "../chunk-EZGV6F47.js";
+import "../chunk-OIEO4WDL.js";
+import "../chunk-Q2XRFWOI.js";
+import "../chunk-NH2UOV3B.js";
+import "../chunk-42ALPZ2B.js";
+import "../chunk-QMWY2FDS.js";
+import "../chunk-SV2PM2OY.js";
 import {
   SealedRecordExpiredError,
   SealedRecordMismatchError,
   SealedRecordNotEnabledError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-37EPTBBR.js";
 
 // src/with-audit/sealed-record/active.ts
 function withSealedRecord() {
   return {
     async sealRecordToHost(ctx, collection, id, hostSealer, opts) {
-      const { sealRecordToHost } = await import("../enclave-27SMF6GF.js");
+      const { sealRecordToHost } = await import("../capsule-VOLX3QRQ.js");
       return sealRecordToHost(ctx, collection, id, hostSealer, opts);
     },
     async revokeSealedRecord(ctx, collection, id, pid, opts) {
-      const { revokeSealedRecord } = await import("../enclave-27SMF6GF.js");
+      const { revokeSealedRecord } = await import("../capsule-VOLX3QRQ.js");
       return revokeSealedRecord(ctx, collection, id, pid, opts);
     },
     async rotateRecordCek(ctx, collection, id) {
-      const { rotateRecordCek } = await import("../enclave-27SMF6GF.js");
+      const { rotateRecordCek } = await import("../capsule-VOLX3QRQ.js");
       return rotateRecordCek(ctx, collection, id);
     }
   };
@@ -60,8 +59,7 @@ async function openSealedRecord(sealedCekEnvelope, recordEnvelope, recipientSeal
   }
   const cek = await importCek(base64ToBuffer(binding.cek));
   return decrypt(
-    recordEnvelope._iv,
-    recordEnvelope._data,
+    ...sealedBodyArgs(recordEnvelope, "openSealedRecord"),
     cek,
     recordAadFor({ collection: expectedCollection, id: expectedId }, recordEnvelope)
   );