@noy-db/hub 0.8.0 → 0.9.0-pre.1

package/dist/signer-NYR4I3FO.js

@@ -0,0 +1,23 @@
+import {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+} from "./chunk-ZUTUNVFD.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+};
+//# sourceMappingURL=signer-NYR4I3FO.js.map

package/dist/snapshots/index.js

@@ -4,19 +4,19 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-KZXDLBY6.js";
-import "../chunk-5A4345TG.js";
+} from "../chunk-XPW7T2GN.js";
+import "../chunk-DMIEKD24.js";
 import "../chunk-GMKGGY7V.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 
 // src/with-fork/snapshots/engine.ts
 var SnapshotEngine = class {

package/dist/{stale-6GCFMOOR.js → stale-PIJPAL5T.js}

@@ -6,16 +6,16 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-VKI2EB3N.js";
+} from "./chunk-OOPSMQX5.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-EZGV6F47.js";
-import "./chunk-OIEO4WDL.js";
-import "./chunk-Q2XRFWOI.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-42ALPZ2B.js";
-import "./chunk-QMWY2FDS.js";
-import "./chunk-SV2PM2OY.js";
-import "./chunk-37EPTBBR.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
 export {
   MV_STALE_COLLECTION,
   clearMVStale,
@@ -25,4 +25,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-6GCFMOOR.js.map
+//# sourceMappingURL=stale-PIJPAL5T.js.map

package/dist/storage-VH6SPXHC.js

@@ -0,0 +1,21 @@
+import {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+} from "./chunk-IF2M43G4.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+};
+//# sourceMappingURL=storage-VH6SPXHC.js.map

package/dist/{store-coordination-provider-C4BPT5XF.js → store-coordination-provider-2KSHCOPU.js}

@@ -1,17 +1,17 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-VAORSCSU.js";
+} from "./chunk-TLIFNRU5.js";
 import {
   buildRecordEnvelope
-} from "./chunk-EZGV6F47.js";
-import "./chunk-OIEO4WDL.js";
-import "./chunk-Q2XRFWOI.js";
+} from "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-42ALPZ2B.js";
-import "./chunk-QMWY2FDS.js";
-import "./chunk-SV2PM2OY.js";
-import "./chunk-37EPTBBR.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
 
 // src/with-shape/schema-update/client-registry.ts
 var META_COLLECTION = "_meta";
@@ -144,4 +144,4 @@ function unref(timer) {
 export {
   StoreMesh
 };
-//# sourceMappingURL=store-coordination-provider-C4BPT5XF.js.map
+//# sourceMappingURL=store-coordination-provider-2KSHCOPU.js.map

package/dist/sync/index.js

@@ -1,26 +1,32 @@
 import {
   PresenceHandle,
   SyncEngine,
-  SyncTransaction
-} from "../chunk-H23XHRTT.js";
+  SyncTransaction,
+  bootstrapKeyrings
+} from "../chunk-RUE6TCES.js";
 import {
   NO_SYNC
-} from "../chunk-T7IR4N2S.js";
-import "../chunk-QBLT6POL.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-7UHLO4ZN.js";
+import "../chunk-FPF5HRBE.js";
+import "../chunk-V7AKGAXY.js";
+import "../chunk-QT5ITL25.js";
+import "../chunk-NXQEOC3X.js";
+import "../chunk-2LBS62AC.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
-import "../chunk-37EPTBBR.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
+import "../chunk-IKPQ2GGB.js";
 
 // src/with-sync/active.ts
-function withSync() {
+function withSync(options) {
   return {
+    bootstrapKeyrings,
     buildSyncEngine(opts) {
-      return new SyncEngine(opts);
+      return new SyncEngine({ ...opts, ...options?.arbiter === true && { arbiter: true } });
     },
     buildSyncTransaction(vault, engine) {
       return new SyncTransaction(vault, engine);

package/dist/sync/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/with-sync/active.ts"],"sourcesContent":["/**\n * Active sync strategy — `withSync()` returns the real implementation\n * that wires the `SyncEngine`, `SyncTransaction`, and `PresenceHandle`\n * constructors into the Noydb / Vault / Collection hot paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withSync } from '@noy-db/hub/sync'\n *\n * const db = await createNoydb({\n *   store: localStore,\n *   sync: remoteStore,\n *   user: ...,\n *   syncStrategy: withSync(),\n * })\n * ```\n *\n * The factory delegates to the existing `sync.ts`,\n * `sync-transaction.ts`, and `presence.ts` modules. Splitting the\n * import chain through this file is what lets tsup tree-shake the\n * ~856 LOC of replication + presence machinery out of the default\n * bundle when no `withSync()` import is present.\n *\n * Keyring + grant/revoke/magic-link/delegation stay in the always-on\n * core (or tree-shake via direct named imports) — those are required\n * for any multi-user vault, even purely local ones.\n *\n * @public\n */\n\nimport type { SyncStrategy, BuildSyncEngineOptions } from './strategy.js'\nimport type { PresenceHandleOpts } from './presence.js'\nimport type { Vault } from '../kernel/vault.js'\nimport { SyncEngine } from './engine.js'\nimport { SyncTransaction } from './transaction.js'\nimport { PresenceHandle } from './presence.js'\n\nexport function withSync(): SyncStrategy {\n  return {\n    buildSyncEngine(opts: BuildSyncEngineOptions): SyncEngine {\n      return new SyncEngine(opts)\n    },\n    buildSyncTransaction(vault: Vault, engine: SyncEngine): SyncTransaction {\n      return new SyncTransaction(vault, engine)\n    },\n    buildPresence<P>(opts: PresenceHandleOpts): PresenceHandle<P> {\n      return new PresenceHandle<P>(opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAuCO,SAAS,WAAyB;AACvC,SAAO;AAAA,IACL,gBAAgB,MAA0C;AACxD,aAAO,IAAI,WAAW,IAAI;AAAA,IAC5B;AAAA,IACA,qBAAqB,OAAc,QAAqC;AACtE,aAAO,IAAI,gBAAgB,OAAO,MAAM;AAAA,IAC1C;AAAA,IACA,cAAiB,MAA6C;AAC5D,aAAO,IAAI,eAAkB,IAAI;AAAA,IACnC;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/with-sync/active.ts"],"sourcesContent":["/**\n * Active sync strategy — `withSync()` returns the real implementation\n * that wires the `SyncEngine`, `SyncTransaction`, and `PresenceHandle`\n * constructors into the Noydb / Vault / Collection hot paths.\n *\n * Consumers opt in by:\n *\n * ```ts\n * import { createNoydb } from '@noy-db/hub'\n * import { withSync } from '@noy-db/hub/sync'\n *\n * const db = await createNoydb({\n *   store: localStore,\n *   sync: remoteStore,\n *   user: ...,\n *   syncStrategy: withSync(),\n * })\n * ```\n *\n * The factory delegates to the existing `sync.ts`,\n * `sync-transaction.ts`, and `presence.ts` modules. Splitting the\n * import chain through this file is what lets tsup tree-shake the\n * ~856 LOC of replication + presence machinery out of the default\n * bundle when no `withSync()` import is present.\n *\n * Keyring + grant/revoke/magic-link/delegation stay in the always-on\n * core (or tree-shake via direct named imports) — those are required\n * for any multi-user vault, even purely local ones.\n *\n * @public\n */\n\nimport type { SyncStrategy, BuildSyncEngineOptions } from './strategy.js'\nimport type { PresenceHandleOpts } from './presence.js'\nimport type { Vault } from '../kernel/vault.js'\nimport { SyncEngine } from './engine.js'\nimport { SyncTransaction } from './transaction.js'\nimport { PresenceHandle } from './presence.js'\nimport { bootstrapKeyrings } from './reserved-mirror.js'\n\n/**\n * core#107 — `arbiter: true` makes this device the vault's ARBITER: its\n * admission refusals are replicated so the writer finds out, instead of\n * staying local to the device that judged them.\n *\n * ⚠️ One arbiter, named by configuration on the device that is to be it\n * (the admin host, or the daemon) — ruled over a quorum because the failure\n * mode is legible: no arbiter configured means no replication, which is\n * exactly the pre-core#107 behaviour. It is NOT an authority proof: nothing\n * stops a member hand-writing `_sync_rejections`, and the reason that is\n * tolerable is the report-only ruling — a replicated refusal never deletes,\n * tombstones or retracts anything, so the worst a forged one does is show\n * somebody a notice about their own record.\n *\n * ⚠️ THE CONDITION THAT WOULD MAKE THAT NON-BOUNDARY A REAL ONE, named by\n * pilot-1 when they accepted it: every member is currently staff of the same\n * firm, and a forged refusal is sealed under the refused record's own\n * collection DEK — so a forger can only show a notice about a record they\n * could already read. ⛔ If EXTERNAL `client`-role users ever hold\n * collections of their own, \"who may write `_sync_rejections`\" stops being\n * cosmetic and this needs an authority design, not a flag. Do not read the\n * paragraph above as a general safety argument; it is an argument about one\n * topology, and this is the trigger to re-open it.\n */\nexport interface WithSyncOptions {\n  readonly arbiter?: boolean\n}\n\nexport function withSync(options?: WithSyncOptions): SyncStrategy {\n  return {\n    bootstrapKeyrings,\n    buildSyncEngine(opts: BuildSyncEngineOptions): SyncEngine {\n      return new SyncEngine({ ...opts, ...(options?.arbiter === true && { arbiter: true }) })\n    },\n    buildSyncTransaction(vault: Vault, engine: SyncEngine): SyncTransaction {\n      return new SyncTransaction(vault, engine)\n    },\n    buildPresence<P>(opts: PresenceHandleOpts): PresenceHandle<P> {\n      return new PresenceHandle<P>(opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoEO,SAAS,SAAS,SAAyC;AAChE,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,MAA0C;AACxD,aAAO,IAAI,WAAW,EAAE,GAAG,MAAM,GAAI,SAAS,YAAY,QAAQ,EAAE,SAAS,KAAK,EAAG,CAAC;AAAA,IACxF;AAAA,IACA,qBAAqB,OAAc,QAAqC;AACtE,aAAO,IAAI,gBAAgB,OAAO,MAAM;AAAA,IAC1C;AAAA,IACA,cAAiB,MAA6C;AAC5D,aAAO,IAAI,eAAkB,IAAI;AAAA,IACnC;AAAA,EACF;AACF;","names":[]}

package/dist/team/index.js

@@ -1,8 +1,10 @@
 import {
   MemoryDeviceSeal,
-  beginEchoUnlock,
   withTeam
-} from "../chunk-2RH777HH.js";
+} from "../chunk-HKB4HZDU.js";
+import {
+  beginEchoUnlock
+} from "../chunk-EZOFTI4K.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -32,8 +34,8 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-DQESF6RP.js";
-import "../chunk-VHBKYN2J.js";
+} from "../chunk-3G3GOGZZ.js";
+import "../chunk-B3B6HV5S.js";
 import {
   buildEchoBlock,
   buildRecipientKeyringFile,
@@ -54,20 +56,20 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-XSPFDUDG.js";
-import "../chunk-LIOVX5TJ.js";
-import "../chunk-7XMHMVTS.js";
-import "../chunk-FLPCETP6.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-V7AKGAXY.js";
+import "../chunk-QT5ITL25.js";
+import "../chunk-NXQEOC3X.js";
+import "../chunk-2LBS62AC.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
 import {
   TeamNotEnabledError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 export {
   MemoryDeviceSeal,
   NO_TEAM,

package/dist/tiers/index.js

@@ -12,19 +12,19 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-DHHGL42E.js";
-import "../chunk-7XMHMVTS.js";
-import "../chunk-FLPCETP6.js";
-import "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-IKS2CPAG.js";
+import "../chunk-NXQEOC3X.js";
+import "../chunk-2LBS62AC.js";
+import "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
 import {
   TiersNotEnabledError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 export {
   NO_TIERS,
   TiersNotEnabledError,

package/dist/to/index.js

@@ -1,6 +1,6 @@
 import {
   NOYDB_ENVELOPE_GENERATION
-} from "../chunk-SV2PM2OY.js";
+} from "../chunk-XX4R7TUB.js";
 import {
   ConflictError,
   DuplicateStoreKindError,
@@ -9,7 +9,7 @@ import {
   StoreCapabilityError,
   UnknownStoreKindError,
   isConflictError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 
 // src/port/to/locator.ts
 function isPodStore(store) {

package/dist/transactions/index.js

@@ -3,15 +3,15 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-UA372JHH.js";
+} from "../chunk-FZVCZEVI.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-37EPTBBR.js";
+import "../chunk-IKPQ2GGB.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-LBBBRTN5.js"));
+var loadGuardExecutor = lazy(() => import("../executor-OXRA64TY.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-37EPTBBR.js";
+} from "../chunk-IKPQ2GGB.js";
 
 // src/kernel/util/sanitize-filename.ts
 var REPLACEMENT = "_";

package/dist/vault-head/index.js

@@ -2,20 +2,20 @@ import {
   DEFAULT_HEAD_BUCKETS,
   NO_VAULT_HEAD,
   VAULT_HEAD_COLLECTION
-} from "../chunk-HW7CMKUG.js";
+} from "../chunk-OFD2HD6F.js";
 import {
   buildRecordAad,
   buildRecordEnvelope,
   encrypt,
   openEnvelopeJson
-} from "../chunk-EZGV6F47.js";
-import "../chunk-OIEO4WDL.js";
-import "../chunk-Q2XRFWOI.js";
+} from "../chunk-WRLWEYHY.js";
+import "../chunk-ZD7WFMV2.js";
+import "../chunk-RRTQAQ3N.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-42ALPZ2B.js";
-import "../chunk-QMWY2FDS.js";
-import "../chunk-SV2PM2OY.js";
-import "../chunk-37EPTBBR.js";
+import "../chunk-ZF6JECDT.js";
+import "../chunk-THQ3BHLM.js";
+import "../chunk-XX4R7TUB.js";
+import "../chunk-IKPQ2GGB.js";
 
 // src/with-commit/vault-head/head.ts
 function bucketIndex(collection, id, buckets) {

package/dist/{verify-UKALW7C2.js → verify-PCFS4PNS.js}

@@ -2,25 +2,25 @@ import {
   blindedEqual,
   dualReadSealedSlot,
   openVdigPayload
-} from "./chunk-5KC7QYEC.js";
+} from "./chunk-YH4OUOSI.js";
 import {
   VDIG_ITERATIONS,
   pbkdf2VerifyDigest
-} from "./chunk-EZOAKKTB.js";
+} from "./chunk-MBPZMZVB.js";
 import {
   evaluateKofN
 } from "./chunk-NH2UOV3B.js";
-import "./chunk-42ALPZ2B.js";
+import "./chunk-ZF6JECDT.js";
 import {
   base64ToBuffer,
   generateSalt,
   normalizeForVerify
-} from "./chunk-QMWY2FDS.js";
-import "./chunk-SV2PM2OY.js";
+} from "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-37EPTBBR.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/capsule/enclave-aes/classify/verify.ts
 async function padOnce(iter = VDIG_ITERATIONS) {
@@ -138,4 +138,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-UKALW7C2.js.map
+//# sourceMappingURL=verify-PCFS4PNS.js.map

package/dist/via/classified/presets.d.ts

@@ -8,6 +8,35 @@ export declare const classified: {
         expiry?: string;
         cvc?: string;
     }): ClassifiedGroup;
+    /**
+     * A checksummed government or institutional identifier — a national ID, a
+     * tax number, an employer registration.
+     *
+     * ⭐ The preset exists for the FOUR SECURITY-RELEVANT DEFAULTS, not to save
+     * typing (#26). Hand-rolling a `ClassifiedFieldSpec` means choosing
+     * `storage`, `list`, `sensitivity` and `verifyNormalize` yourself, and
+     * getting `sensitivity` or `list` wrong on a national ID is not cosmetic.
+     * Supply the checksum; the posture is decided here.
+     *
+     * Defaults to `recoverable` + a masked list, which is the shape that lets an
+     * advisor open a list screen without reading every identifier in full while
+     * still allowing an authorised `reveal()`.
+     *
+     * ⛔ IT CANNOT BE UNIQUELY INDEXED, and that is by design rather than a gap
+     * (core#20). A recoverable classified field is sealed, sealed fields are
+     * excluded from the deterministic index, and unique constraints read the
+     * DECRYPTED record — where the value is a `Sealed` handle, not a string. If
+     * you need exact-equality dedup on this identifier, it must stay a plain
+     * field with `unique: true`; the two properties are mutually exclusive.
+     *
+     * @param validate returns `null` when the value passes, or a message. Use
+     *   {@link luhnCheck} for Luhn; supply your own for mod-11 and friends.
+     */
+    checksummed(options: {
+        validate: (value: unknown) => string | null;
+        sensitivity?: ClassifiedFieldSpec["sensitivity"];
+        list?: ClassifiedFieldSpec["list"];
+    }): ClassifiedFieldSpec;
     birthDate(): ClassifiedFieldSpec;
     email(): ClassifiedFieldSpec;
     phone(): ClassifiedFieldSpec;

package/dist/via/classified/resolve.d.ts

@@ -1,5 +1,12 @@
 /** Flatten a classifiedFields config into a per-field map + rider computed entries. @module */
 import { type ClassifiedEntry, type ClassifiedFieldSpec } from './descriptor.js';
+/**
+ * `ClassifiedList` — PUBLISHED API, reachable from @noy-db/hub, @noy-db/hub/classified. Flagged as unused because
+ * nothing inside hub imports it from this module; a consumer does. Do not narrow
+ * or delete without a seam change (#55).
+ *
+ * @public
+ */
 export type { ClassifiedEntry, ClassifiedFieldSpec, ClassifiedGroup, ClassifiedList } from './descriptor.js';
 export { ClassifiedConfigError } from './errors.js';
 export interface ResolvedClassified {

package/dist/via/geo/binding.d.ts

@@ -23,9 +23,5 @@
  */
 import type { NoydbVia } from '../../kernel/via/index.js';
 import type { GeoDescriptor } from './descriptor.js';
-/** The geo binder's config bag: field name → its descriptor. */
-export interface GeoBindingConfig {
-    readonly geoFields: Record<string, GeoDescriptor>;
-}
 export declare function geoVia(geoFields: Record<string, GeoDescriptor>): NoydbVia;
 export declare function linkGeoVia(): void;

package/dist/via/lookup/index.d.ts

@@ -9,9 +9,41 @@
  * `port/with/lookup-strategy.ts`, and, for the existing `vault.dictionary()`
  * surface, through `via/i18n/active.ts`.
  */
+/**
+ * The engine's own surface, presented at its barrel. Consumers inside hub import these from `port/with/lookup-strategy.ts` (the kernel spine may not reach into `via/lookup/*` at all — Check 14), so the barrel has no importer for them by design.
+ *
+ * @seam
+ */
 export { LookupHandle, DictionaryHandle, DICT_COLLECTION_PREFIX, dictCollectionName, type DictEntry, type DictionaryOptions } from './handle.js';
+/**
+ * Registry surface at the barrel — reached through the port, same reason as above.
+ *
+ * @seam
+ */
 export { enforceStaticDictOnPut, resolveDictSource, updateReferencingRecords, type DictReferencingCollection } from './registry.js';
+/**
+ * The strategy factory. Deliberately NOT on the root barrel or any subpath — check-architecture.mjs:693-707 records the measurement and the reason (one way to configure lookup in front of consumers).
+ *
+ * @seam
+ */
 export { withLookup } from './active.js';
+/**
+ * `LookupBacking` — PUBLISHED API, reachable from @noy-db/hub. Flagged as unused because
+ * nothing inside hub imports it from this module; a consumer does. Do not narrow
+ * or delete without a seam change (#55).
+ *
+ * @public
+ */
 export { lookup, enumOf, enumOf as enum, dict, type LookupDescriptor, type Vocabulary, type LookupBacking, type OnDelete } from './descriptor.js';
+/**
+ * Binding surface at the barrel — `lookupVia` is taken from here; its siblings are reached through the port.
+ *
+ * @seam
+ */
 export { lookupVia, linkLookupVia, type LookupViaConfig } from './binding.js';
+/**
+ * The describeFragment payload shape (#650 Task 7) — its consumer imports it from `binding.js` directly.
+ *
+ * @seam
+ */
 export type { LookupDescribeFragment, LookupDescribeFragmentEntry } from './binding.js';

package/dist/via/money/binding.d.ts

@@ -8,14 +8,5 @@
  */
 import type { NoydbVia } from '../../kernel/via/index.js';
 import type { MoneyDescriptor } from './descriptor.js';
-/** #669 — the money binder's config bag. `virtualMoneyFields` is the money∩virtual-mode-
- *  computed field-name intersection (`kernel/collection-config.ts#resolveVirtualMoneyFields`);
- *  absent/empty means no field on this collection composes money with a virtual computed
- *  field on itself — the pre-#669 behavior (no `presentLate`, ordinary `present()` for
- *  every declared money field). */
-export interface MoneyBindingConfig {
-    readonly moneyFields: Record<string, MoneyDescriptor>;
-    readonly virtualMoneyFields?: ReadonlySet<string>;
-}
 export declare function moneyVia(moneyFields: Record<string, MoneyDescriptor>, virtualMoneyFields?: ReadonlySet<string>): NoydbVia;
 export declare function linkMoneyVia(): void;

package/dist/walk-OZCN6LJS.js

@@ -0,0 +1,20 @@
+import {
+  dumpVaultSchema
+} from "./chunk-654RE5YC.js";
+import "./chunk-RXLYKVTF.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-UORWAG7K.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-IF2M43G4.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-ZD7WFMV2.js";
+import "./chunk-RRTQAQ3N.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-ZF6JECDT.js";
+import "./chunk-THQ3BHLM.js";
+import "./chunk-XX4R7TUB.js";
+import "./chunk-IKPQ2GGB.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-OZCN6LJS.js.map

package/dist/with-audit/attestation/strategy.d.ts

@@ -8,7 +8,7 @@ import type { RevokeContext } from './revoke.js';
  * per-call context object for it, so the vault facade assembles this at call
  * time (reading `role` fresh).
  */
-export interface SignerLookupDeps {
+interface SignerLookupDeps {
     readonly adapter: NoydbStore;
     readonly vault: string;
     /** The invoking keyring's role, read fresh by the caller per call. */
@@ -42,3 +42,4 @@ export interface AttestationStrategy {
  * `attestationStrategy: withAttestation()` in createNoydb. @internal
  */
 export declare const NO_ATTESTATION: AttestationStrategy;
+export {};

package/dist/with-audit/attestation/vault-facade.d.ts

@@ -2,6 +2,13 @@ import type { NoydbStore } from '../../kernel/types.js';
 import type { EnclaveKey } from '../../capsule/index.js';
 import type { AttestationFieldSchema, RevocationList } from './types.js';
 import type { AttestationStrategy } from './strategy.js';
+/**
+ * `NO_ATTESTATION` — PUBLISHED API, reachable from @noy-db/hub/attestation. Flagged as unused because
+ * nothing inside hub imports it from this module; a consumer does. Do not narrow
+ * or delete without a seam change (#55).
+ *
+ * @public
+ */
 export { NO_ATTESTATION, type AttestationStrategy } from './strategy.js';
 /** Everything the moving attestation methods touched on the vault's `this.*`. */
 export interface VaultAttestationDeps {

package/dist/with-audit/forget/completeness.d.ts

@@ -0,0 +1,66 @@
+/**
+ * #34 — "was the erasure complete?", which is the only question a caller of
+ * {@link vault.forget} actually has, and the one `ForgetResult` could not
+ * answer.
+ *
+ * ⛔ THE PROBLEM THIS SOLVES. `ForgetResult` carries ELEVEN independent residue
+ * channels. None of them throws. Only two say in their own doc that non-empty
+ * means erasure is INCOMPLETE. So "erasure succeeded" is not
+ * `recordsShredded > 0` — it is all eleven empty — while the result's SHAPE
+ * suggests the opposite: the counts read like a success report and the residues
+ * read like diagnostics you consult when something looks wrong. A consumer
+ * building a subject-facing "your data has been deleted" on the obvious field
+ * is making a false statement in writing, and nothing in the surface tells them.
+ *
+ * ⭐ WHY THIS IS DEFAULT-DENY AND NOT A LIST OF ELEVEN NAMES. Enumerating the
+ * channels would reproduce the defect one level up: every new channel would
+ * silently weaken every existing caller's check, so a correct caller today
+ * becomes an incorrect one tomorrow with no diagnostic anywhere — a correctness
+ * regression delivered by an additive change, which is the kind that passes
+ * review. Instead EVERY array-valued field counts as residue unless it appears
+ * in {@link NON_RESIDUE_FIELDS}. A twelfth channel is therefore included by
+ * construction, and exempting a field is a deliberate edit with a visible diff.
+ * `__tests__/34-erasure-completeness.test.ts` fails if any array field is
+ * neither a known channel nor exempt, so the exemption list cannot rot quietly.
+ *
+ * ⚠️ `derivedResidueFrozen` counts as incomplete, and that is CORRECT rather
+ * than a bug to fix. An append-only closed period or a frozen receipt keeps the
+ * subject's contribution permanently, by design. The erasure genuinely is not
+ * total, and a caller who must answer a subject needs to know that — which is
+ * precisely why it must not be quietly excluded here. What a consumer does with
+ * it (a lawful-retention position) belongs in their layer, not this one.
+ *
+ * ⛔ SCOPE, deliberately: this reports what the MECHANISM did. It does not know
+ * whether a retention is lawful, and must never grow vocabulary implying it
+ * does — `blobsRetainedShared` means "still referenced", never "retained
+ * lawfully". The legal decomposition sits above this, in the consumer.
+ */
+import type { ForgetResult } from './strategy.js';
+/** The verdict {@link erasureCompleteness} returns. */
+export interface ErasureCompleteness {
+    /**
+     * `true` only when every residue channel is empty. ⛔ This — not
+     * `recordsShredded > 0` — is what "the subject's data was erased" means.
+     */
+    readonly complete: boolean;
+    /** Names of the channels that are non-empty, sorted. Empty iff `complete`. */
+    readonly channels: readonly string[];
+    /** The non-empty channels and their entries, for a caller that must report which. */
+    readonly residue: Readonly<Record<string, readonly unknown[]>>;
+}
+/**
+ * Decide whether a {@link ForgetResult} represents a COMPLETE erasure.
+ *
+ * ```ts
+ * const result = await vault.forget(subjectId)
+ * const { complete, channels, residue } = erasureCompleteness(result)
+ * if (!complete) {
+ *   // Do NOT tell the subject their data is gone. `channels` says what remains;
+ *   // some of it (a frozen period aggregate) is permanent by design.
+ * }
+ * ```
+ *
+ * Every array field of the result is treated as a residue channel except those
+ * in {@link NON_RESIDUE_FIELDS} — see this module's doc for why that direction.
+ */
+export declare function erasureCompleteness(result: ForgetResult): ErasureCompleteness;