@noy-db/hub 0.8.0 → 0.9.0-pre.1

package/dist/{dead-filter-4F3LWYKH.js → dead-filter-43WL3Y5H.js}

@@ -1,18 +1,18 @@
 import {
   liveBaseIdSet
-} from "./chunk-2MG3SW7Q.js";
-import "./chunk-EZGV6F47.js";
-import "./chunk-OIEO4WDL.js";
-import "./chunk-Q2XRFWOI.js";
+} from "./chunk-X6Z2SIRF.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-42ALPZ2B.js";
-import "./chunk-QMWY2FDS.js";
-import "./chunk-SV2PM2OY.js";
-import "./chunk-37EPTBBR.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
 
 // src/with-shape/satellites/dead-filter.ts
 async function liveBaseIdSetsForBundle(store, vaultName, collectionNames, getDEK) {
-  const { loadPersistedSchema } = await import("./storage-BYN5LO6Z.js");
+  const { loadPersistedSchema } = await import("./storage-VH6SPXHC.js");
   const out = /* @__PURE__ */ new Map();
   for (const name of collectionNames) {
     if (name.startsWith("_")) continue;
@@ -32,4 +32,4 @@ async function liveBaseIdSetsForBundle(store, vaultName, collectionNames, getDEK
 export {
   liveBaseIdSetsForBundle
 };
-//# sourceMappingURL=dead-filter-4F3LWYKH.js.map
+//# sourceMappingURL=dead-filter-43WL3Y5H.js.map

package/dist/debug/index.js

@@ -1,16 +1,16 @@
 import {
   hasSealedBody
-} from "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
 import {
   DebugPlaintextError,
   DebugReservedFieldError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 
 // src/kernel/debug.ts
 function readPlaintextRecord(envelope) {

package/dist/delegation-5UWT4JGT.js

@@ -0,0 +1,26 @@
+import {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+} from "./chunk-UNL6YGL5.js";
+import "./chunk-V7AKGAXY.js";
+import "./chunk-QT5ITL25.js";
+import "./chunk-NXQEOC3X.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-2LBS62AC.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  DELEGATIONS_COLLECTION,
+  issueDelegation,
+  loadActiveDelegations,
+  revokeDelegation
+};
+//# sourceMappingURL=delegation-5UWT4JGT.js.map

package/dist/derivations/index.js

@@ -1,46 +1,47 @@
 import {
   DerivationRegistry
-} from "../chunk-U2FZNEWJ.js";
-import "../chunk-FFWI7UH7.js";
+} from "../chunk-XLKWF3L4.js";
+import "../chunk-GAGT3YZN.js";
 import {
   DerivationExecutor
-} from "../chunk-H427H63K.js";
+} from "../chunk-BPQ5CRJF.js";
 import {
   withDerivation,
   withRollup
-} from "../chunk-SMV2HRDU.js";
-import "../chunk-IUT3GWP3.js";
+} from "../chunk-DFC4WTJW.js";
+import "../chunk-IUD7WU67.js";
 import "../chunk-TFMM5DBB.js";
-import "../chunk-M5B2W6YY.js";
-import "../chunk-GUZET4SG.js";
+import "../chunk-TDJVQTXD.js";
+import "../chunk-JAQHWHUN.js";
+import "../chunk-QJNAHPVT.js";
 import "../chunk-VYYM3MEN.js";
-import "../chunk-747G6CT3.js";
+import "../chunk-UORWAG7K.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-3L2NBKDR.js";
-import "../chunk-244QBK7Z.js";
+import "../chunk-IF2M43G4.js";
+import "../chunk-C4XV3PSJ.js";
 import "../chunk-NYMLINRP.js";
 import "../chunk-V4PXLYWM.js";
-import "../chunk-3EWS67C7.js";
+import "../chunk-4TG2ITRW.js";
 import "../chunk-XBKH4FOC.js";
-import "../chunk-2GHDLTPE.js";
-import "../chunk-23D6M6VM.js";
-import "../chunk-OKSTSITU.js";
-import "../chunk-SYNY3VB5.js";
-import "../chunk-6QVKPHBF.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+import "../chunk-OGKMRIIJ.js";
+import "../chunk-KZA3DITX.js";
+import "../chunk-PR7ILCIH.js";
+import "../chunk-NCTN2FW4.js";
+import "../chunk-QHG7GQKM.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
 import {
   DerivationCapExceededError,
   DerivationCycleError,
   DerivationDepthError,
   DerivationOutputShapeError,
   DerivationOutputUnknownError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 export {
   DerivationCapExceededError,
   DerivationCycleError,

package/dist/derive-IL5JNLEE.js

@@ -0,0 +1,20 @@
+import {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+} from "./chunk-UORWAG7K.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  derivePersistedSchema,
+  isZod4Schema,
+  isZodSchema
+};
+//# sourceMappingURL=derive-IL5JNLEE.js.map

package/dist/directory/index.js

@@ -1,7 +1,7 @@
 import "../chunk-GJW4HX2O.js";
 import {
   UserApi
-} from "../chunk-AEQGFRU4.js";
+} from "../chunk-HE7EAHGS.js";
 import {
   DIRECTORY_RECORD_ID,
   META_COLLECTION,
@@ -16,15 +16,15 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "../chunk-LIOVX5TJ.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-QT5ITL25.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
-import "../chunk-37EPTBBR.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
+import "../chunk-IKPQ2GGB.js";
 export {
   DIRECTORY_RECORD_ID,
   META_COLLECTION,

package/dist/{dispatch-JDZNGEB3.js → dispatch-LOQQD5JK.js}

@@ -3,38 +3,38 @@ import {
   resolveTuple,
   sameTuple,
   tupleFromIntermediate
-} from "./chunk-FFWI7UH7.js";
+} from "./chunk-GAGT3YZN.js";
 import {
   markStale
-} from "./chunk-JOSPH3E5.js";
+} from "./chunk-SBAR5JQ6.js";
 import "./chunk-TFMM5DBB.js";
 import {
   putDerivedOutput,
   selfWriteFieldEqual
-} from "./chunk-MILI22XQ.js";
-import "./chunk-244QBK7Z.js";
+} from "./chunk-ZZZ4VCY2.js";
+import "./chunk-C4XV3PSJ.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-23D6M6VM.js";
-import "./chunk-OKSTSITU.js";
-import "./chunk-SYNY3VB5.js";
-import "./chunk-6QVKPHBF.js";
-import "./chunk-EZGV6F47.js";
-import "./chunk-OIEO4WDL.js";
-import "./chunk-Q2XRFWOI.js";
+import "./chunk-KZA3DITX.js";
+import "./chunk-PR7ILCIH.js";
+import "./chunk-NCTN2FW4.js";
+import "./chunk-QHG7GQKM.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-42ALPZ2B.js";
-import "./chunk-QMWY2FDS.js";
-import "./chunk-SV2PM2OY.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
 import {
   DerivationCapExceededError
-} from "./chunk-37EPTBBR.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/with-formula/derivations/dispatch.ts
 async function dispatchArrayDerivationsOnDelete(ctx, id, eraseRecordShapeToo = false) {
   const { derivationSource, collectionName, adapter, vault, getDEK, storeCiphertext } = ctx;
   const strategies = derivationSource.registry().strategiesForSource(collectionName);
   if (strategies.length === 0) return 0;
-  const { loadFanoutSidecar, deleteFanoutSidecar } = await import("./fanout-sidecar-L7NHPIOC.js");
+  const { loadFanoutSidecar, deleteFanoutSidecar } = await import("./fanout-sidecar-NEB6IYV7.js");
   const txCtx = derivationSource.getActiveTxContext();
   let erased = 0;
   for (const { spec } of strategies) {
@@ -159,7 +159,7 @@ async function dispatchDerivations(ctx, id, record, version, wave, prior) {
     }
     if (executorClass === null) {
       ;
-      ({ DerivationExecutor: executorClass } = await import("./executor-OSRZST2U.js"));
+      ({ DerivationExecutor: executorClass } = await import("./executor-6ZPQA6HS.js"));
     }
     for (const run of runs) await runOne(ctx, spec, strategyHash, executorClass, run);
   }
@@ -183,7 +183,7 @@ async function runOne(ctx, spec, strategyHash, executorClass, run) {
     const outputCollection = derivationSource.getCollection(outSpec.collection);
     const txCtx = derivationSource.getActiveTxContext();
     if (out.kind === "array") {
-      const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-L7NHPIOC.js");
+      const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-NEB6IYV7.js");
       const prior = await loadFanoutSidecar(adapter, vault, spec.source, run.runId, key, getDEK, storeCiphertext);
       const prevKeys = new Set(prior?.keys ?? []);
       const newKeysList = out.entries.map((e) => e.key);
@@ -285,7 +285,7 @@ async function dispatchTriggerDerivationsOnDelete(ctx, id, deleted) {
       for (const sid of matched) await markStale(registry, spec, sid);
       continue;
     }
-    if (executorClass === null) ({ DerivationExecutor: executorClass } = await import("./executor-OSRZST2U.js"));
+    if (executorClass === null) ({ DerivationExecutor: executorClass } = await import("./executor-6ZPQA6HS.js"));
     for (const sid of matched) {
       const raw = await srcColl._getStoredRecord(sid);
       if (raw === null) continue;
@@ -298,4 +298,4 @@ export {
   dispatchDerivations,
   dispatchTriggerDerivationsOnDelete
 };
-//# sourceMappingURL=dispatch-JDZNGEB3.js.map
+//# sourceMappingURL=dispatch-LOQQD5JK.js.map

package/dist/{dispatch-H4HV32AM.js → dispatch-SHKTG57L.js}

@@ -14,7 +14,7 @@ async function dispatchMaterializedViews(ctx, id, record, wave) {
       if (wave?.seen(`mv\0${reg.spec.name}`)) continue;
       if (executor === null) {
         ;
-        ({ MaterializedViewExecutor: executor } = await import("./executor-FMPVN6DT.js"));
+        ({ MaterializedViewExecutor: executor } = await import("./executor-6PQ7WAGV.js"));
       }
       await executor.refresh(reg, {
         getCollection: (name) => source.getCollection(name),
@@ -23,7 +23,7 @@ async function dispatchMaterializedViews(ctx, id, record, wave) {
         dispatchCtx: dispatchCtx({ collection: collectionName, id })
       });
     } else if (mode === "lazy") {
-      if (staleHelpers === null) staleHelpers = await import("./stale-6GCFMOOR.js");
+      if (staleHelpers === null) staleHelpers = await import("./stale-PIJPAL5T.js");
       staleHelpers.markMVStale(registry, reg.spec.name);
     }
   }
@@ -45,7 +45,7 @@ async function dispatchMaterializedViewsOnDelete(ctx, id) {
     if (mode === "eager") {
       if (executor === null) {
         ;
-        ({ MaterializedViewExecutor: executor } = await import("./executor-FMPVN6DT.js"));
+        ({ MaterializedViewExecutor: executor } = await import("./executor-6PQ7WAGV.js"));
       }
       const rr = await executor.refresh(reg, {
         getCollection: (name) => source.getCollection(name),
@@ -58,7 +58,7 @@ async function dispatchMaterializedViewsOnDelete(ctx, id) {
       residueDeclined.push(...rr.residueDeclined);
       continue;
     }
-    if (staleHelpers === null) staleHelpers = await import("./stale-6GCFMOOR.js");
+    if (staleHelpers === null) staleHelpers = await import("./stale-PIJPAL5T.js");
     const inv = await staleHelpers.invalidateMVAtRest(source, reg, mode);
     deleted += inv.deleted;
     residueUndecodable.push(...inv.residueUndecodable.map((rid) => `${reg.outputCollection}:${rid}`));
@@ -70,4 +70,4 @@ export {
   dispatchMaterializedViews,
   dispatchMaterializedViewsOnDelete
 };
-//# sourceMappingURL=dispatch-H4HV32AM.js.map
+//# sourceMappingURL=dispatch-SHKTG57L.js.map

package/dist/executor-6PQ7WAGV.js

@@ -0,0 +1,35 @@
+import {
+  MaterializedViewExecutor
+} from "./chunk-7JPA3LIH.js";
+import "./chunk-ZNEKQFGF.js";
+import "./chunk-7Q6IU3R7.js";
+import "./chunk-MAQBYBUX.js";
+import "./chunk-SCH2F7R2.js";
+import "./chunk-ZZZ4VCY2.js";
+import "./chunk-C4XV3PSJ.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-AGGPT4UE.js";
+import "./chunk-SUZKW6UR.js";
+import "./chunk-VHM7HCKB.js";
+import "./chunk-XBKH4FOC.js";
+import "./chunk-VP37VUKQ.js";
+import "./chunk-ICF3TIGY.js";
+import "./chunk-4CFHL5RY.js";
+import "./chunk-66GD7XXU.js";
+import "./chunk-GIQJGXV7.js";
+import "./chunk-KZA3DITX.js";
+import "./chunk-PR7ILCIH.js";
+import "./chunk-NCTN2FW4.js";
+import "./chunk-QHG7GQKM.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  MaterializedViewExecutor
+};
+//# sourceMappingURL=executor-6PQ7WAGV.js.map

package/dist/executor-6ZPQA6HS.js

@@ -0,0 +1,8 @@
+import {
+  DerivationExecutor
+} from "./chunk-BPQ5CRJF.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  DerivationExecutor
+};
+//# sourceMappingURL=executor-6ZPQA6HS.js.map

package/dist/executor-OXRA64TY.js

@@ -0,0 +1,8 @@
+import {
+  GuardExecutor
+} from "./chunk-MLVPMDOZ.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  GuardExecutor
+};
+//# sourceMappingURL=executor-OXRA64TY.js.map

package/dist/export-accessible-XG3FKJWW.js

@@ -0,0 +1,22 @@
+import {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+} from "./chunk-KN4LUMH6.js";
+import "./chunk-XPW7T2GN.js";
+import "./chunk-DMIEKD24.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  buildAccessibleBundle,
+  exportAccessibleData,
+  resolveAccessibleCollections
+};
+//# sourceMappingURL=export-accessible-XG3FKJWW.js.map

package/dist/extract-partition-33747NY5.js

@@ -0,0 +1,35 @@
+import {
+  extractPartition,
+  extractPartitionCore,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+} from "./chunk-UL6MTRMJ.js";
+import "./chunk-IF2M43G4.js";
+import "./chunk-XPW7T2GN.js";
+import "./chunk-DMIEKD24.js";
+import "./chunk-GMKGGY7V.js";
+import "./chunk-QFW4MYGN.js";
+import "./chunk-NXQEOC3X.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-QHG7GQKM.js";
+import "./chunk-2LBS62AC.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  extractPartition,
+  extractPartitionCore,
+  reKeyClosure,
+  reKeyLedger,
+  reKeySchemas,
+  sealDeks
+};
+//# sourceMappingURL=extract-partition-33747NY5.js.map

package/dist/{fanout-sidecar-L7NHPIOC.js → fanout-sidecar-NEB6IYV7.js}

@@ -4,14 +4,14 @@ import {
   encrypt,
   hasSealedBody,
   openEnvelopeJson
-} from "./chunk-EZGV6F47.js";
-import "./chunk-OIEO4WDL.js";
-import "./chunk-Q2XRFWOI.js";
+} from "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-42ALPZ2B.js";
-import "./chunk-QMWY2FDS.js";
-import "./chunk-SV2PM2OY.js";
-import "./chunk-37EPTBBR.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
 
 // src/with-formula/derivations/fanout-sidecar.ts
 var FANOUT_DEK_COLLECTION = "_meta";
@@ -59,4 +59,4 @@ export {
   loadFanoutSidecar,
   saveFanoutSidecar
 };
-//# sourceMappingURL=fanout-sidecar-L7NHPIOC.js.map
+//# sourceMappingURL=fanout-sidecar-NEB6IYV7.js.map

package/dist/find-VW543G3J.js

@@ -0,0 +1,10 @@
+import {
+  computeBidxTarget
+} from "./chunk-72FQ46VW.js";
+import "./chunk-MBPZMZVB.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  computeBidxTarget
+};
+//# sourceMappingURL=find-VW543G3J.js.map

package/dist/forget/index.js

@@ -1,23 +1,40 @@
 import {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION
-} from "../chunk-JDEYF3PJ.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-P6FATPXQ.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
-import "../chunk-37EPTBBR.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
+import "../chunk-IKPQ2GGB.js";
 
 // src/with-audit/forget/active.ts
 function withForget(opts) {
   return { subjects: { ...opts.subjects }, ...opts.scopedPurge !== void 0 ? { scopedPurge: opts.scopedPurge } : {} };
 }
+
+// src/with-audit/forget/completeness.ts
+var NON_RESIDUE_FIELDS = /* @__PURE__ */ new Set([
+  // The collections that had at least one record shredded: a WORK RECORD of
+  // what was touched, not a report of anything left behind.
+  "collections"
+]);
+function erasureCompleteness(result) {
+  const residue = {};
+  for (const [key, value] of Object.entries(result)) {
+    if (!Array.isArray(value) || NON_RESIDUE_FIELDS.has(key) || value.length === 0) continue;
+    residue[key] = value;
+  }
+  const channels = Object.keys(residue).sort();
+  return { complete: channels.length === 0, channels, residue };
+}
 export {
   NO_FORGET,
   SUBJECT_INDEX_COLLECTION,
+  erasureCompleteness,
   withForget
 };
 //# sourceMappingURL=index.js.map

package/dist/forget/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-audit/forget/active.ts"],"sourcesContent":["/**\n * `withForget` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForget(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n"],"mappings":";;;;;;;;;;;;;;AA+BO,SAAS,WAAW,MAA0C;AACnE,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;","names":[]}
+{"version":3,"sources":["../../src/with-audit/forget/active.ts","../../src/with-audit/forget/completeness.ts"],"sourcesContent":["/**\n * `withForget` — the active factory for GDPR right-to-erasure via\n * per-record CEK crypto-shred. Mirrors the canonical\n * `strategy.ts` (type + `NO_FORGET` sentinel) / `active.ts` (factory) split\n * used by the other services.\n *\n * @module\n */\nimport type { SubjectDeclaration, ForgetStrategy } from './strategy.js'\n\n/**\n * Declare GDPR crypto-shred for one or more collections.\n *\n * Each declared collection is forced to `perRecordKeys: true` (a shred can\n * only guarantee erasure of a record whose body is keyed off a per-record\n * CEK). On write, Noydb extracts `record[subjectField]` and maintains an\n * encrypted `_subject_index` mapping `subject → [{collection, id}]`, so\n * `vault.forget(subjectId)` can find every record for a subject and rewrite\n * each to a tombstone (body + history permanently undecryptable) while the\n * collection DEK and every other record stay intact.\n *\n * @example\n * ```ts\n * createNoydb({\n *   secret, user,\n *   forgetStrategy: withForget({ subjects: { invoices: 'buyerId' } }),\n * })\n * const result = await vault.forget('buyer-123')\n * // → { subject, recordsShredded, historyVersionsShredded, collections, … }\n * ```\n */\nexport function withForget(opts: SubjectDeclaration): ForgetStrategy {\n  return { subjects: { ...opts.subjects }, ...(opts.scopedPurge !== undefined ? { scopedPurge: opts.scopedPurge } : {}) }\n}\n","/**\n * #34 — \"was the erasure complete?\", which is the only question a caller of\n * {@link vault.forget} actually has, and the one `ForgetResult` could not\n * answer.\n *\n * ⛔ THE PROBLEM THIS SOLVES. `ForgetResult` carries ELEVEN independent residue\n * channels. None of them throws. Only two say in their own doc that non-empty\n * means erasure is INCOMPLETE. So \"erasure succeeded\" is not\n * `recordsShredded > 0` — it is all eleven empty — while the result's SHAPE\n * suggests the opposite: the counts read like a success report and the residues\n * read like diagnostics you consult when something looks wrong. A consumer\n * building a subject-facing \"your data has been deleted\" on the obvious field\n * is making a false statement in writing, and nothing in the surface tells them.\n *\n * ⭐ WHY THIS IS DEFAULT-DENY AND NOT A LIST OF ELEVEN NAMES. Enumerating the\n * channels would reproduce the defect one level up: every new channel would\n * silently weaken every existing caller's check, so a correct caller today\n * becomes an incorrect one tomorrow with no diagnostic anywhere — a correctness\n * regression delivered by an additive change, which is the kind that passes\n * review. Instead EVERY array-valued field counts as residue unless it appears\n * in {@link NON_RESIDUE_FIELDS}. A twelfth channel is therefore included by\n * construction, and exempting a field is a deliberate edit with a visible diff.\n * `__tests__/34-erasure-completeness.test.ts` fails if any array field is\n * neither a known channel nor exempt, so the exemption list cannot rot quietly.\n *\n * ⚠️ `derivedResidueFrozen` counts as incomplete, and that is CORRECT rather\n * than a bug to fix. An append-only closed period or a frozen receipt keeps the\n * subject's contribution permanently, by design. The erasure genuinely is not\n * total, and a caller who must answer a subject needs to know that — which is\n * precisely why it must not be quietly excluded here. What a consumer does with\n * it (a lawful-retention position) belongs in their layer, not this one.\n *\n * ⛔ SCOPE, deliberately: this reports what the MECHANISM did. It does not know\n * whether a retention is lawful, and must never grow vocabulary implying it\n * does — `blobsRetainedShared` means \"still referenced\", never \"retained\n * lawfully\". The legal decomposition sits above this, in the consumer.\n */\nimport type { ForgetResult } from './strategy.js'\n\n/**\n * Array-valued `ForgetResult` fields that are NOT failure channels.\n *\n * ⚠️ Adding a name here says \"a non-empty value in this field does not mean the\n * erasure was incomplete\". That is a substantive claim about erasure semantics\n * — make it deliberately, and say why on the line.\n */\nconst NON_RESIDUE_FIELDS: ReadonlySet<string> = new Set([\n  // The collections that had at least one record shredded: a WORK RECORD of\n  // what was touched, not a report of anything left behind.\n  'collections',\n])\n\n/** The verdict {@link erasureCompleteness} returns. */\nexport interface ErasureCompleteness {\n  /**\n   * `true` only when every residue channel is empty. ⛔ This — not\n   * `recordsShredded > 0` — is what \"the subject's data was erased\" means.\n   */\n  readonly complete: boolean\n  /** Names of the channels that are non-empty, sorted. Empty iff `complete`. */\n  readonly channels: readonly string[]\n  /** The non-empty channels and their entries, for a caller that must report which. */\n  readonly residue: Readonly<Record<string, readonly unknown[]>>\n}\n\n/**\n * Decide whether a {@link ForgetResult} represents a COMPLETE erasure.\n *\n * ```ts\n * const result = await vault.forget(subjectId)\n * const { complete, channels, residue } = erasureCompleteness(result)\n * if (!complete) {\n *   // Do NOT tell the subject their data is gone. `channels` says what remains;\n *   // some of it (a frozen period aggregate) is permanent by design.\n * }\n * ```\n *\n * Every array field of the result is treated as a residue channel except those\n * in {@link NON_RESIDUE_FIELDS} — see this module's doc for why that direction.\n */\nexport function erasureCompleteness(result: ForgetResult): ErasureCompleteness {\n  const residue: Record<string, readonly unknown[]> = {}\n  for (const [key, value] of Object.entries(result as unknown as Record<string, unknown>)) {\n    if (!Array.isArray(value) || NON_RESIDUE_FIELDS.has(key) || value.length === 0) continue\n    residue[key] = value as readonly unknown[]\n  }\n  const channels = Object.keys(residue).sort()\n  return { complete: channels.length === 0, channels, residue }\n}\n"],"mappings":";;;;;;;;;;;;;;AA+BO,SAAS,WAAW,MAA0C;AACnE,SAAO,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,GAAI,KAAK,gBAAgB,SAAY,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC,EAAG;AACxH;;;ACaA,IAAM,qBAA0C,oBAAI,IAAI;AAAA;AAAA;AAAA,EAGtD;AACF,CAAC;AA8BM,SAAS,oBAAoB,QAA2C;AAC7E,QAAM,UAA8C,CAAC;AACrD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAA4C,GAAG;AACvF,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,mBAAmB,IAAI,GAAG,KAAK,MAAM,WAAW,EAAG;AAChF,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,QAAM,WAAW,OAAO,KAAK,OAAO,EAAE,KAAK;AAC3C,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,UAAU,QAAQ;AAC9D;","names":[]}

package/dist/guards/index.js

@@ -2,13 +2,13 @@ import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "../chunk-O2IMQSNA.js";
+} from "../chunk-3YBIVLTC.js";
 import {
   GuardExecutor
-} from "../chunk-YRXFFWG4.js";
+} from "../chunk-MLVPMDOZ.js";
 import {
   GuardRegistry
-} from "../chunk-FVH5QYY2.js";
+} from "../chunk-TRHUNPXP.js";
 import {
   ReadOnlyVaultFacade
 } from "../chunk-JK733I5V.js";
@@ -18,7 +18,7 @@ import {
   IllegalTransitionError,
   InvariantError,
   RecordLockedError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 export {
   AmendmentForbiddenError,
   FieldFrozenError,

package/dist/history/index.js

@@ -1,13 +1,15 @@
 import {
   CollectionInstant,
   VaultInstant
-} from "../chunk-5FE75J4S.js";
+} from "../chunk-MMCN7TLK.js";
 import {
   diff,
   formatDiff
 } from "../chunk-SVLR4POP.js";
 import {
-  NO_HISTORY,
+  NO_HISTORY
+} from "../chunk-L4UL4IAR.js";
+import {
   clearHistory,
   getHistory,
   getVersionEnvelope,
@@ -16,12 +18,12 @@ import {
   rewrapHistory,
   saveHistory,
   tombstoneHistory
-} from "../chunk-LNSVGRHO.js";
+} from "../chunk-EQ6C2ZPT.js";
 import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "../chunk-N7EVQD5S.js";
+} from "../chunk-ONZ3B5EW.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -33,16 +35,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "../chunk-6QVKPHBF.js";
-import "../chunk-FLPCETP6.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-QHG7GQKM.js";
+import "../chunk-2LBS62AC.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
-import "../chunk-37EPTBBR.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
+import "../chunk-IKPQ2GGB.js";
 
 // src/with-commit/history/active.ts
 function withHistory() {