@noy-db/hub 0.9.0-pre.0 → 0.9.0-pre.1

package/dist/{chunk-XXQ5XIYY.js → chunk-VLQ6KT7F.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-VSUQI5Q6.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/with-formula/overlay-views/with-overlayed-view.ts
 function withOverlayedView(spec) {
@@ -33,4 +33,4 @@ function withOverlayedView(spec) {
 export {
   withOverlayedView
 };
-//# sourceMappingURL=chunk-XXQ5XIYY.js.map
+//# sourceMappingURL=chunk-VLQ6KT7F.js.map

package/dist/{chunk-PT2YCQVK.js → chunk-VP37VUKQ.js}

@@ -1,13 +1,13 @@
 import {
   matchDeclaredJoin
-} from "./chunk-5UUJE4FP.js";
+} from "./chunk-ICF3TIGY.js";
 import {
   readPath
-} from "./chunk-BUE7R3B5.js";
+} from "./chunk-GIQJGXV7.js";
 import {
   DanglingReferenceError,
   JoinTooLargeError
-} from "./chunk-VSUQI5Q6.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/kernel/query/relate/join.ts
 var DEFAULT_JOIN_MAX_ROWS = 5e4;
@@ -270,4 +270,4 @@ export {
   bucketByRefKey,
   resetJoinWarnings
 };
-//# sourceMappingURL=chunk-PT2YCQVK.js.map
+//# sourceMappingURL=chunk-VP37VUKQ.js.map

package/dist/{chunk-QGSNJD3B.js → chunk-WBUHHMLN.js}

@@ -1,6 +1,6 @@
 import {
   CargoNotEnabledError
-} from "./chunk-VSUQI5Q6.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/with-cargo/strategy.ts
 var NO_CARGO = {
@@ -12,4 +12,4 @@ var NO_CARGO = {
 export {
   NO_CARGO
 };
-//# sourceMappingURL=chunk-QGSNJD3B.js.map
+//# sourceMappingURL=chunk-WBUHHMLN.js.map

package/dist/{chunk-4J3MNVVX.js → chunk-WRLWEYHY.js}

@@ -49,6 +49,8 @@ import {
   generateEphemeralKey,
   generateIV,
   generateRecipientKeyPair,
+  exportRecipientPrivateKeyPkcs8,
+  importRecipientKeyPair,
   generateRecoverySecret,
   generateSalt,
   generateSigningKeyPair,
@@ -63,6 +65,7 @@ import {
   importDekSet,
   importRecipientPublicKeySpki,
   importTransferKey,
+  importWrappingKey,
   isDeleteMarker,
   isRewrappedUnder,
   isTombstone,
@@ -149,6 +152,8 @@ export {
   generateEphemeralKey,
   generateIV,
   generateRecipientKeyPair,
+  exportRecipientPrivateKeyPkcs8,
+  importRecipientKeyPair,
   generateRecoverySecret,
   generateSalt,
   generateSigningKeyPair,
@@ -163,6 +168,7 @@ export {
   importDekSet,
   importRecipientPublicKeySpki,
   importTransferKey,
+  importWrappingKey,
   isDeleteMarker,
   isRewrappedUnder,
   isTombstone,
@@ -198,4 +204,4 @@ export {
   wrapKey,
   writeEnvelopeBody
 };
-//# sourceMappingURL=chunk-4J3MNVVX.js.map
+//# sourceMappingURL=chunk-WRLWEYHY.js.map

package/dist/{chunk-4J3MNVVX.js.map → chunk-WRLWEYHY.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/capsule/index.ts"],"sourcesContent":["/**\n * THE DOOR. This is the ONLY hub file that may import the bound capsule.\n * Everything else in hub imports THIS file.\n *\n * Enforced by `capsule-door-only` in `scripts/check-architecture.mjs`, which\n * fails any other file naming `#capsule`. A door nothing enforces is not a\n * door — the enclave barrel it replaces was reached around 38 times before a\n * check existed.\n *\n * `#capsule` resolves through hub's `imports` map: `capsule/enclave-aes/` by\n * default, or an alternative package when a consumer sets a build condition.\n *\n * ⛔ THE RE-EXPORTS BELOW ARE EXPLICIT, AND MUST STAY THAT WAY.\n * `export * from '#capsule'` is the obvious spelling and it does not build:\n * `#capsule` is EXTERNAL (it has to be, or the capsule choice bakes in at hub's\n * build time), and esbuild cannot enumerate an external module's exports. Every\n * named import through the door then fails with \"No matching export\". Measured\n * 2026-09-12.\n *\n * Generated from `__tests__/enclave-surface.golden.json` — the same artefact\n * the surface test freezes, so the door and the golden cannot drift. Adding a\n * capsule primitive means adding it to the golden and regenerating.\n */\nexport {\n  RecordCodec,\n  SEALED_CEK_NS,\n  applyRewrappedBody,\n  base64ToBuffer,\n  bufferToBase64,\n  buildDeleteMarker,\n  buildRecordAad,\n  buildRecordEnvelope,\n  buildSealedRecordEnvelope,\n  buildTombstone,\n  capabilities,\n  checkCanary,\n  computeBidxTarget,\n  computeBrokerProof,\n  ctEqualTags,\n  decrypt,\n  decryptBytes,\n  decryptBytesWithAAD,\n  decryptDeterministic,\n  deriveBlobAddressKey,\n  deriveBrokerProofBits,\n  deriveBrokerProofKey,\n  deriveClassifyIndexKey,\n  deriveClassifyIndexSalt,\n  deriveDeterministicKey,\n  deriveEchoKey,\n  deriveKey,\n  derivePresenceKey,\n  derivePresenceTagKey,\n  deriveSealedFieldKey,\n  deriveSealedFieldKeyFromCek,\n  deriveSecretKey,\n  deriveVdigSlotKey,\n  encodeEchoParts,\n  encrypt,\n  encryptBytes,\n  encryptBytesWithAAD,\n  encryptDeterministic,\n  envelopeBodyForHash,\n  envelopeBodySize,\n  envelopeOpensUnderAny,\n  evaluateKofN,\n  exportDekSet,\n  exportRecipientPublicKeySpki,\n  findByDet,\n  generateDEK,\n  generateEphemeralKey,\n  generateIV,\n  generateRecipientKeyPair,\n  generateRecoverySecret,\n  generateSalt,\n  generateSigningKeyPair,\n  hasPerRecordKey,\n  hasSealedBody,\n  requireSealedBody,\n  sealedBodyArgs,\n  hkdfAesGcmKey,\n  hmacSha256Hex,\n  hmacSignHex,\n  importCek,\n  importDekSet,\n  importRecipientPublicKeySpki,\n  importTransferKey,\n  isDeleteMarker,\n  isRewrappedUnder,\n  isTombstone,\n  isTombstoneShape,\n  issueChallenge,\n  makeReservedEnvelopes,\n  mintBidxTag,\n  mintCanary,\n  openEnvelopeJson,\n  pbkdf2VerifyDigest,\n  queryByDet,\n  recipientUnwrap,\n  recipientWrap,\n  recordAadFor,\n  rekeyBlobSet,\n  rekeyEnvelopeIfNeeded,\n  rekeyEnvelopeToDek,\n  resolveStableCek,\n  revokeSealedRecord,\n  rewrapBodyToDek,\n  rewrapEnvelope,\n  rotateRecordCek,\n  sealRecordToHost,\n  sha256Bytes,\n  sha256Hex,\n  signBytes,\n  unwrapCek,\n  unwrapKey,\n  verifyBrokerProof,\n  verifyBytes,\n  verifyRecordIdentity,\n  wrapCek,\n  wrapKey,\n  writeEnvelopeBody,\n} from '#capsule'\n\nexport type {\n  BrokerMemberIdentity,\n  BrokerProofCanonicalParts,\n  DeterministicContext,\n  EchoSecretParts,\n  EnclaveKey,\n  EnclaveKeyPair,\n  EncryptResult,\n  IssuedChallenge,\n  RecordEnvelopeBody,\n  RecordIdentity,\n  RecordRef,\n  RewrappedBody,\n  SealedShredSlot,\n  SealingContext,\n  SecretKeyUsage,\n  VerifyBrokerProofArgs,\n} from '#capsule'\n\nexport type { CapsuleKey, CapsuleKeyPair, CapsuleGroup } from './contract.js'\nexport { CapsuleNotSupportedError } from './contract.js'\n"],"mappings":";AAu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names":[]}
+{"version":3,"sources":["../src/capsule/index.ts"],"sourcesContent":["/**\n * THE DOOR. This is the ONLY hub file that may import the bound capsule.\n * Everything else in hub imports THIS file.\n *\n * Enforced by `capsule-door-only` in `scripts/check-architecture.mjs`, which\n * fails any other file naming `#capsule`. A door nothing enforces is not a\n * door — the enclave barrel it replaces was reached around 38 times before a\n * check existed.\n *\n * `#capsule` resolves through hub's `imports` map: `capsule/enclave-aes/` by\n * default, or an alternative package when a consumer sets a build condition.\n *\n * ⛔ THE RE-EXPORTS BELOW ARE EXPLICIT, AND MUST STAY THAT WAY.\n * `export * from '#capsule'` is the obvious spelling and it does not build:\n * `#capsule` is EXTERNAL (it has to be, or the capsule choice bakes in at hub's\n * build time), and esbuild cannot enumerate an external module's exports. Every\n * named import through the door then fails with \"No matching export\". Measured\n * 2026-09-12.\n *\n * Generated from `__tests__/enclave-surface.golden.json` — the same artefact\n * the surface test freezes, so the door and the golden cannot drift. Adding a\n * capsule primitive means adding it to the golden and regenerating.\n */\nexport {\n  RecordCodec,\n  SEALED_CEK_NS,\n  applyRewrappedBody,\n  base64ToBuffer,\n  bufferToBase64,\n  buildDeleteMarker,\n  buildRecordAad,\n  buildRecordEnvelope,\n  buildSealedRecordEnvelope,\n  buildTombstone,\n  capabilities,\n  checkCanary,\n  computeBidxTarget,\n  computeBrokerProof,\n  ctEqualTags,\n  decrypt,\n  decryptBytes,\n  decryptBytesWithAAD,\n  decryptDeterministic,\n  deriveBlobAddressKey,\n  deriveBrokerProofBits,\n  deriveBrokerProofKey,\n  deriveClassifyIndexKey,\n  deriveClassifyIndexSalt,\n  deriveDeterministicKey,\n  deriveEchoKey,\n  deriveKey,\n  derivePresenceKey,\n  derivePresenceTagKey,\n  deriveSealedFieldKey,\n  deriveSealedFieldKeyFromCek,\n  deriveSecretKey,\n  deriveVdigSlotKey,\n  encodeEchoParts,\n  encrypt,\n  encryptBytes,\n  encryptBytesWithAAD,\n  encryptDeterministic,\n  envelopeBodyForHash,\n  envelopeBodySize,\n  envelopeOpensUnderAny,\n  evaluateKofN,\n  exportDekSet,\n  exportRecipientPublicKeySpki,\n  findByDet,\n  generateDEK,\n  generateEphemeralKey,\n  generateIV,\n  generateRecipientKeyPair,\n  exportRecipientPrivateKeyPkcs8,\n  importRecipientKeyPair,\n  generateRecoverySecret,\n  generateSalt,\n  generateSigningKeyPair,\n  hasPerRecordKey,\n  hasSealedBody,\n  requireSealedBody,\n  sealedBodyArgs,\n  hkdfAesGcmKey,\n  hmacSha256Hex,\n  hmacSignHex,\n  importCek,\n  importDekSet,\n  importRecipientPublicKeySpki,\n  importTransferKey,\n  importWrappingKey,\n  isDeleteMarker,\n  isRewrappedUnder,\n  isTombstone,\n  isTombstoneShape,\n  issueChallenge,\n  makeReservedEnvelopes,\n  mintBidxTag,\n  mintCanary,\n  openEnvelopeJson,\n  pbkdf2VerifyDigest,\n  queryByDet,\n  recipientUnwrap,\n  recipientWrap,\n  recordAadFor,\n  rekeyBlobSet,\n  rekeyEnvelopeIfNeeded,\n  rekeyEnvelopeToDek,\n  resolveStableCek,\n  revokeSealedRecord,\n  rewrapBodyToDek,\n  rewrapEnvelope,\n  rotateRecordCek,\n  sealRecordToHost,\n  sha256Bytes,\n  sha256Hex,\n  signBytes,\n  unwrapCek,\n  unwrapKey,\n  verifyBrokerProof,\n  verifyBytes,\n  verifyRecordIdentity,\n  wrapCek,\n  wrapKey,\n  writeEnvelopeBody,\n} from '#capsule'\n\nexport type {\n  BrokerMemberIdentity,\n  BrokerProofCanonicalParts,\n  DeterministicContext,\n  EchoSecretParts,\n  EnclaveKey,\n  EnclaveKeyPair,\n  EncryptResult,\n  IssuedChallenge,\n  RecordEnvelopeBody,\n  RecordIdentity,\n  RecordRef,\n  RewrappedBody,\n  SealedShredSlot,\n  SealingContext,\n  SecretKeyUsage,\n  VerifyBrokerProofArgs,\n} from '#capsule'\n\nexport type { CapsuleKey, CapsuleKeyPair, CapsuleGroup } from './contract.js'\nexport { CapsuleNotSupportedError } from './contract.js'\n"],"mappings":";AAuBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;","names":[]}

package/dist/{chunk-PFCTSXHU.js → chunk-X6Z2SIRF.js}

@@ -1,6 +1,6 @@
 import {
   hasSealedBody
-} from "./chunk-4J3MNVVX.js";
+} from "./chunk-WRLWEYHY.js";
 
 // src/with-shape/satellites/existence.ts
 function isEnvelopeLive(env) {
@@ -20,4 +20,4 @@ export {
   isBaseLive,
   liveBaseIdSet
 };
-//# sourceMappingURL=chunk-PFCTSXHU.js.map
+//# sourceMappingURL=chunk-X6Z2SIRF.js.map

package/dist/{chunk-XA34THLF.js → chunk-XLKWF3L4.js}

@@ -5,18 +5,18 @@ import {
 import {
   ViaGraph,
   matchTargetFieldNames
-} from "./chunk-ZMVSKYTJ.js";
+} from "./chunk-IUD7WU67.js";
 import {
   schemaFieldKeys
 } from "./chunk-QJNAHPVT.js";
 import {
   sha256Hex
-} from "./chunk-4J3MNVVX.js";
+} from "./chunk-WRLWEYHY.js";
 import {
   DerivationCycleError,
   DuplicateBehaviorNameError,
   ValidationError
-} from "./chunk-VSUQI5Q6.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/with-formula/derivations/strategy-hash.ts
 async function computeStrategyHash(source, outputKeys, derive, sources) {
@@ -246,4 +246,4 @@ var DerivationRegistry = class {
 export {
   DerivationRegistry
 };
-//# sourceMappingURL=chunk-XA34THLF.js.map
+//# sourceMappingURL=chunk-XLKWF3L4.js.map

package/dist/{chunk-K7RW7FI4.js → chunk-XPNJH7GN.js}

@@ -1,11 +1,11 @@
 import {
   ENCLAVE_SCHEME
-} from "./chunk-5XONHAFD.js";
+} from "./chunk-B6EWMGFX.js";
 import {
   ATTESTATIONS_COLLECTION,
   REVOKED_RECORD_ID,
   loadOrCreateSigner
-} from "./chunk-D5A3GCZ4.js";
+} from "./chunk-ZUTUNVFD.js";
 import {
   signRevocationList
 } from "./chunk-GMKGGY7V.js";
@@ -14,11 +14,11 @@ import {
   buildRecordEnvelope,
   encrypt,
   openEnvelopeJson
-} from "./chunk-4J3MNVVX.js";
+} from "./chunk-WRLWEYHY.js";
 import {
   AttestationError,
   ConflictError
-} from "./chunk-VSUQI5Q6.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/with-audit/attestation/revoke.ts
 function requireOwner(ctx, op) {
@@ -82,4 +82,4 @@ export {
   getRevokedDocIdsCore,
   publishRevocationListCore
 };
-//# sourceMappingURL=chunk-K7RW7FI4.js.map
+//# sourceMappingURL=chunk-XPNJH7GN.js.map

package/dist/{chunk-RDOEOPOI.js → chunk-XPW7T2GN.js}

@@ -1,6 +1,6 @@
 import {
   pickLocale
-} from "./chunk-YQFBH5ZJ.js";
+} from "./chunk-DMIEKD24.js";
 import {
   canonicalJson,
   utf8
@@ -9,12 +9,12 @@ import {
   sha256Hex,
   signBytes,
   verifyBytes
-} from "./chunk-4J3MNVVX.js";
+} from "./chunk-WRLWEYHY.js";
 import {
   PodIntegrityError,
   PodSealMismatchError,
   ValidationError
-} from "./chunk-VSUQI5Q6.js";
+} from "./chunk-IKPQ2GGB.js";
 
 // src/with-pod/format.ts
 var NOYDB_POD_MAGIC = new Uint8Array([78, 68, 66, 49]);
@@ -817,7 +817,7 @@ async function applySatelliteLivenessFilter(vault, dumpJson) {
   if (!backup.collections || typeof backup.collections !== "object") return dumpJson;
   if (typeof vault._introspectState !== "function") return dumpJson;
   const { adapter, name, getDEK } = vault._introspectState();
-  const { liveBaseIdSetsForBundle } = await import("./dead-filter-CXV5NS67.js");
+  const { liveBaseIdSetsForBundle } = await import("./dead-filter-43WL3Y5H.js");
   const satLive = await liveBaseIdSetsForBundle(adapter, name, Object.keys(backup.collections), getDEK);
   if (satLive.size === 0) return dumpJson;
   const next = {};
@@ -1064,4 +1064,4 @@ export {
   readPodRedirect,
   readPod
 };
-//# sourceMappingURL=chunk-RDOEOPOI.js.map
+//# sourceMappingURL=chunk-XPW7T2GN.js.map

package/dist/{chunk-2ELOCEXE.js → chunk-XX4R7TUB.js}

@@ -31,4 +31,4 @@ export {
   SealedHandle,
   createStore
 };
-//# sourceMappingURL=chunk-2ELOCEXE.js.map
+//# sourceMappingURL=chunk-XX4R7TUB.js.map