@noy-db/in-pinia 0.1.0-pre.3

package/dist/index.js

@@ -0,0 +1,423 @@
+// src/defineNoydbStore.ts
+import { defineStore } from "pinia";
+import {
+  computed,
+  getCurrentScope,
+  onScopeDispose,
+  ref,
+  shallowRef
+} from "vue";
+
+// src/context.ts
+var activeInstance = null;
+function setActiveNoydb(instance) {
+  activeInstance = instance;
+}
+function getActiveNoydb() {
+  return activeInstance;
+}
+function resolveNoydb(explicit) {
+  if (explicit) return explicit;
+  if (activeInstance) return activeInstance;
+  throw new Error(
+    "@noy-db/pinia: no Noydb instance bound.\n  Option A \u2014 pass `noydb:` directly to defineNoydbStore({...})\n  Option B \u2014 call setActiveNoydb(instance) once at app startup\n  Option C \u2014 install the @noy-db/nuxt module (Nuxt 4+)"
+  );
+}
+
+// src/defineNoydbStore.ts
+function defineNoydbStore(id, options) {
+  const collectionName = options.collection ?? id;
+  const prefetch = options.prefetch ?? true;
+  return defineStore(id, () => {
+    const items = shallowRef([]);
+    const count = computed(() => items.value.length);
+    let cachedCompartment = null;
+    let cachedCollection = null;
+    async function getCollection() {
+      if (cachedCollection) return cachedCollection;
+      const noydb = resolveNoydb(options.noydb ?? null);
+      cachedCompartment = await noydb.openVault(options.vault);
+      const collOpts = {};
+      if (options.schema !== void 0) collOpts.schema = options.schema;
+      cachedCollection = cachedCompartment.collection(collectionName, collOpts);
+      return cachedCollection;
+    }
+    async function refresh() {
+      const c = await getCollection();
+      const list = await c.list();
+      items.value = list;
+    }
+    function byId(id2) {
+      for (const item of items.value) {
+        if (item.id === id2) return item;
+      }
+      return void 0;
+    }
+    async function add(id2, record) {
+      const c = await getCollection();
+      await c.put(id2, record);
+      items.value = await c.list();
+    }
+    async function update(id2, record) {
+      await add(id2, record);
+    }
+    async function remove(id2) {
+      const c = await getCollection();
+      await c.delete(id2);
+      items.value = await c.list();
+    }
+    function query() {
+      if (!cachedCollection) {
+        throw new Error(
+          "@noy-db/pinia: query() called before the store was ready. Await store.$ready first, or set prefetch: true (default)."
+        );
+      }
+      return cachedCollection.query();
+    }
+    function liveQuery(build) {
+      if (!cachedCollection) {
+        throw new Error(
+          "@noy-db/pinia: liveQuery() called before the store was ready. Await store.$ready first, or set prefetch: true (default)."
+        );
+      }
+      const built = build(cachedCollection.query());
+      const live = built.live();
+      const items2 = shallowRef(live.value);
+      const error = ref(live.error);
+      const unsubscribe = live.subscribe(() => {
+        items2.value = live.value;
+        error.value = live.error;
+      });
+      let stopped = false;
+      const stop = () => {
+        if (stopped) return;
+        stopped = true;
+        unsubscribe();
+        live.stop();
+      };
+      if (getCurrentScope()) onScopeDispose(stop);
+      return { items: items2, error, stop };
+    }
+    const $ready = prefetch ? refresh() : Promise.resolve();
+    return {
+      items,
+      count,
+      $ready,
+      byId,
+      add,
+      update,
+      remove,
+      refresh,
+      query,
+      liveQuery
+    };
+  });
+}
+
+// src/plugin.ts
+import { createNoydb } from "@noy-db/hub";
+var STATE_DOC_ID = "__state__";
+function createNoydbPiniaPlugin(opts) {
+  let dbPromise = null;
+  function getDb() {
+    if (!dbPromise) {
+      dbPromise = (async () => {
+        const secret = await opts.secret();
+        return createNoydb({
+          store: opts.adapter,
+          user: opts.user,
+          secret,
+          ...opts.noydbOptions
+        });
+      })();
+    }
+    return dbPromise;
+  }
+  const vaultCache = /* @__PURE__ */ new Map();
+  function getCompartment(name) {
+    let p = vaultCache.get(name);
+    if (!p) {
+      p = getDb().then((db) => db.openVault(name));
+      vaultCache.set(name, p);
+    }
+    return p;
+  }
+  return (context) => {
+    const noydbOption = context.options.noydb;
+    if (!noydbOption) {
+      context.store.$noydbAugmented = false;
+      return;
+    }
+    context.store.$noydbAugmented = true;
+    context.store.$noydbError = null;
+    const pending = /* @__PURE__ */ new Set();
+    const ready = (async () => {
+      try {
+        const vault = await getCompartment(noydbOption.vault);
+        const collection = vault.collection(
+          noydbOption.collection
+        );
+        const persisted = await collection.get(STATE_DOC_ID);
+        if (persisted) {
+          const validated = noydbOption.schema ? noydbOption.schema.parse(persisted) : persisted;
+          const picked = pickKeys(validated, noydbOption.persist);
+          context.store.$patch(picked);
+        }
+        context.store.$subscribe(
+          (_mutation, state) => {
+            const subset = pickKeys(state, noydbOption.persist);
+            const p = collection.put(STATE_DOC_ID, subset).catch((err) => {
+              context.store.$noydbError = err instanceof Error ? err : new Error(String(err));
+            }).finally(() => {
+              pending.delete(p);
+            });
+            pending.add(p);
+          },
+          { detached: true }
+          // outlive the component that triggered the mutation
+        );
+      } catch (err) {
+        context.store.$noydbError = err instanceof Error ? err : new Error(String(err));
+      }
+    })();
+    context.store.$noydbReady = ready;
+    context.store.$noydbFlush = async () => {
+      await ready;
+      while (pending.size > 0) {
+        await Promise.all([...pending]);
+      }
+    };
+  };
+}
+function pickKeys(state, persist) {
+  if (persist === void 0 || persist === "*") {
+    return { ...state };
+  }
+  if (typeof persist === "string") {
+    return { [persist]: state[persist] };
+  }
+  if (Array.isArray(persist)) {
+    const out = {};
+    for (const key of persist) {
+      out[key] = state[key];
+    }
+    return out;
+  }
+  return { ...state };
+}
+
+// src/useCapabilityGrant.ts
+import {
+  computed as computed2,
+  getCurrentScope as getCurrentScope2,
+  onScopeDispose as onScopeDispose2,
+  ref as ref2,
+  shallowRef as shallowRef2,
+  watch
+} from "vue";
+var CAPABILITY_REQUESTS_COLLECTION = "_capability_requests";
+function useCapabilityGrant(capability, options) {
+  const state = ref2("idle");
+  const error = ref2(null);
+  const recordRef = shallowRef2(null);
+  const inBrowser = typeof window !== "undefined";
+  let expiryTimer = null;
+  let unsubscribeChangeStream = null;
+  let resolvedVault = null;
+  let stopped = false;
+  async function resolveVault() {
+    if (resolvedVault) return resolvedVault;
+    if (typeof options.vault === "string") {
+      const noydb = resolveNoydb(null);
+      resolvedVault = await noydb.openVault(options.vault);
+    } else {
+      resolvedVault = options.vault;
+    }
+    resolvedVault.collection(
+      CAPABILITY_REQUESTS_COLLECTION
+    );
+    return resolvedVault;
+  }
+  function clearExpiryTimer() {
+    if (expiryTimer) {
+      clearTimeout(expiryTimer);
+      expiryTimer = null;
+    }
+  }
+  function scheduleExpiry(record) {
+    if (!record.expiresAt) return;
+    const remaining = new Date(record.expiresAt).getTime() - Date.now();
+    if (remaining <= 0) {
+      void handleExpiry(record);
+      return;
+    }
+    clearExpiryTimer();
+    expiryTimer = setTimeout(() => {
+      void handleExpiry(record);
+    }, remaining);
+  }
+  async function handleExpiry(record) {
+    if (stopped) return;
+    if (state.value !== "granted") return;
+    state.value = "expired";
+    try {
+      await options.onRelease?.({
+        record,
+        vault: resolvedVault,
+        cause: "expired"
+      });
+    } catch (err) {
+      error.value = err instanceof Error ? err : new Error(String(err));
+    }
+    state.value = "idle";
+    recordRef.value = null;
+  }
+  const now = ref2(Date.now());
+  const tickTimer = inBrowser ? setInterval(() => {
+    now.value = Date.now();
+  }, 1e3) : null;
+  const timeRemaining = computed2(() => {
+    if (state.value !== "granted" || !recordRef.value?.expiresAt) return 0;
+    void now.value;
+    const ms = new Date(recordRef.value.expiresAt).getTime() - Date.now();
+    return ms > 0 ? ms : 0;
+  });
+  watch(
+    () => recordRef.value?.id,
+    async (id) => {
+      if (!inBrowser || !id || unsubscribeChangeStream) return;
+      const vault = await resolveVault();
+      const coll = vault.collection(
+        CAPABILITY_REQUESTS_COLLECTION
+      );
+      unsubscribeChangeStream = coll.subscribe(
+        (evt) => {
+          if (evt.type !== "put" || evt.id !== id) return;
+          const updated = evt.record;
+          if (!updated || stopped) return;
+          recordRef.value = updated;
+          if (updated.status === "granted") {
+            state.value = "granted";
+            scheduleExpiry(updated);
+          } else if (updated.status === "released" || updated.status === "expired") {
+            state.value = "idle";
+            clearExpiryTimer();
+          }
+        }
+      );
+    },
+    { immediate: false }
+  );
+  async function request() {
+    if (state.value !== "idle") {
+      error.value = new Error(
+        `useCapabilityGrant: cannot request from state "${state.value}"`
+      );
+      throw error.value;
+    }
+    error.value = null;
+    if (!inBrowser) return;
+    try {
+      const vault = await resolveVault();
+      const coll = vault.collection(
+        CAPABILITY_REQUESTS_COLLECTION
+      );
+      const id = `cap-${Date.now().toString(36)}-${Math.random().toString(16).slice(2, 10)}`;
+      const record = {
+        id,
+        capability,
+        requestedBy: vault.userId,
+        approverRole: options.approver,
+        reason: options.reason,
+        ttlMs: options.ttlMs,
+        status: "requested",
+        requestedAt: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      await coll.put(id, record);
+      recordRef.value = record;
+      state.value = "requested";
+    } catch (err) {
+      error.value = err instanceof Error ? err : new Error(String(err));
+      throw error.value;
+    }
+  }
+  async function approve() {
+    const record = recordRef.value;
+    if (state.value !== "requested" || !record) {
+      error.value = new Error(
+        `useCapabilityGrant: cannot approve from state "${state.value}"`
+      );
+      throw error.value;
+    }
+    error.value = null;
+    try {
+      const vault = await resolveVault();
+      if (vault.role !== options.approver && vault.role !== "owner") {
+        throw new Error(
+          `useCapabilityGrant: caller role "${vault.role}" cannot approve a "${options.approver}"-tier grant`
+        );
+      }
+      const approvedAt = /* @__PURE__ */ new Date();
+      const expiresAt = new Date(approvedAt.getTime() + options.ttlMs);
+      const granted = {
+        ...record,
+        status: "granted",
+        approvedBy: vault.userId,
+        approvedAt: approvedAt.toISOString(),
+        expiresAt: expiresAt.toISOString()
+      };
+      const coll = vault.collection(
+        CAPABILITY_REQUESTS_COLLECTION
+      );
+      await coll.put(record.id, granted);
+      recordRef.value = granted;
+      state.value = "granted";
+      scheduleExpiry(granted);
+      await options.onGrant?.({ record: granted, vault });
+    } catch (err) {
+      error.value = err instanceof Error ? err : new Error(String(err));
+      throw error.value;
+    }
+  }
+  async function release() {
+    const record = recordRef.value;
+    if (state.value !== "granted" || !record) {
+      return;
+    }
+    error.value = null;
+    try {
+      clearExpiryTimer();
+      const vault = await resolveVault();
+      const released = { ...record, status: "released" };
+      const coll = vault.collection(
+        CAPABILITY_REQUESTS_COLLECTION
+      );
+      await coll.put(record.id, released);
+      recordRef.value = null;
+      state.value = "idle";
+      await options.onRelease?.({ record, vault, cause: "released" });
+    } catch (err) {
+      error.value = err instanceof Error ? err : new Error(String(err));
+      throw error.value;
+    }
+  }
+  if (getCurrentScope2()) {
+    onScopeDispose2(() => {
+      stopped = true;
+      clearExpiryTimer();
+      if (tickTimer) clearInterval(tickTimer);
+      unsubscribeChangeStream?.();
+    });
+  }
+  return { state, timeRemaining, error, request, approve, release };
+}
+export {
+  CAPABILITY_REQUESTS_COLLECTION,
+  createNoydbPiniaPlugin,
+  defineNoydbStore,
+  getActiveNoydb,
+  resolveNoydb,
+  setActiveNoydb,
+  useCapabilityGrant
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/defineNoydbStore.ts","../src/context.ts","../src/plugin.ts","../src/useCapabilityGrant.ts"],"sourcesContent":["/**\n * `defineNoydbStore` — drop-in `defineStore` that wires a Pinia store to a\n * NOYDB vault + collection.\n *\n * Returned store exposes:\n *   - `items`        — reactive array of all records\n *   - `byId(id)`     — O(1) lookup\n *   - `count`        — reactive count getter\n *   - `add(id, rec)` — encrypt + persist + update reactive state\n *   - `update(id, rec)` — same as add (Collection.put is upsert)\n *   - `remove(id)`   — delete + update reactive state\n *   - `refresh()`    — re-hydrate from the adapter\n *   - `query()`      — chainable query DSL bound to the store\n *   - `$ready`       — Promise<void> resolved on first hydration\n *\n * Compatible with `storeToRefs`, Vue Devtools, SSR, and pinia plugins.\n */\n\nimport { defineStore } from 'pinia'\nimport {\n  computed,\n  getCurrentScope,\n  onScopeDispose,\n  ref,\n  shallowRef,\n  type Ref,\n  type ShallowRef,\n  type ComputedRef,\n} from 'vue'\nimport type {\n  Noydb,\n  Vault,\n  Collection,\n  Query,\n  StandardSchemaV1,\n} from '@noy-db/hub'\nimport { resolveNoydb } from './context.js'\n\n/**\n * Reactive handle returned by `store.liveQuery(fn)`. Mirrors a hub\n * `LiveQuery<R>` into Vue refs; `items` updates on every left- or\n * joined-right-side mutation, `error` carries re-run errors as state\n * (a `DanglingReferenceError` in strict join mode is the common case),\n * `stop()` tears down upstream subscriptions. Auto-disposed on scope\n * teardown when called inside a Vue setup / Pinia store body.\n */\nexport interface NoydbLiveQuery<R> {\n  items: ShallowRef<readonly R[]>\n  error: Ref<Error | null>\n  stop(): void\n}\n\n/**\n * Options accepted by `defineNoydbStore`.\n *\n * Generic `T` is the record shape — defaults to `unknown` if the caller\n * doesn't supply a type. Use `defineNoydbStore<Invoice>('invoices', {...})`\n * for full type safety.\n */\nexport interface NoydbStoreOptions<T> {\n  /** Vault (tenant) name. */\n  vault: string\n  /** Collection name within the vault. Defaults to the store id. */\n  collection?: string\n  /**\n   * Optional explicit Noydb instance. If omitted, the store resolves the\n   * globally bound instance via `getActiveNoydb()`.\n   */\n  noydb?: Noydb | null\n  /**\n   * If true (default), hydration kicks off immediately when the store is\n   * first instantiated. If false, hydration is deferred until the first\n   * call to `refresh()` or any read accessor.\n   */\n  prefetch?: boolean\n  /**\n   * Optional schema validator.\n   *\n   * Accepts any [Standard Schema v1](https://standardschema.dev) validator\n   * — Zod, Valibot, ArkType, Effect Schema, etc. The same validator is\n   * installed on the underlying `Collection`, so every `put()` is\n   * validated **before encryption** and every read is validated **after\n   * decryption**. The store's `add`/`update` methods inherit this\n   * validation automatically; no duplicate `.parse()` call is needed.\n   *\n   * Schema-less stores behave exactly as before (no validation, no\n   * perf cost, backwards compatible with usage).\n   */\n  schema?: StandardSchemaV1<unknown, T>\n}\n\n/**\n * The runtime shape of the store returned by `defineNoydbStore`.\n * Exposed as a public type so consumers can write `useStore: ReturnType<typeof useInvoices>`.\n */\nexport interface NoydbStore<T> {\n  items: Ref<T[]>\n  count: ComputedRef<number>\n  $ready: Promise<void>\n  byId(id: string): T | undefined\n  add(id: string, record: T): Promise<void>\n  update(id: string, record: T): Promise<void>\n  remove(id: string): Promise<void>\n  refresh(): Promise<void>\n  query(): Query<T>\n  liveQuery<R = T>(build: (q: Query<T>) => Query<R>): NoydbLiveQuery<R>\n}\n\n/**\n * Define a Pinia store that's wired to a NOYDB collection.\n *\n * Generic T defaults to `unknown` — pass `<MyType>` for full type inference.\n *\n * @example\n * ```ts\n * import { defineNoydbStore } from '@noy-db/in-pinia';\n *\n * export const useInvoices = defineNoydbStore<Invoice>('invoices', {\n *   vault: 'C101',\n *   schema: InvoiceSchema, // optional\n * });\n * ```\n */\nexport function defineNoydbStore<T>(\n  id: string,\n  options: NoydbStoreOptions<T>,\n) {\n  const collectionName = options.collection ?? id\n  const prefetch = options.prefetch ?? true\n\n  return defineStore(id, () => {\n    // Reactive state. shallowRef on items because the array reference is what\n    // changes — replacing it triggers reactivity without per-record proxying.\n    const items: Ref<T[]> = shallowRef<T[]>([])\n    const count = computed(() => items.value.length)\n\n    // Lazy collection handle — created on first hydrate.\n    let cachedCompartment: Vault | null = null\n    let cachedCollection: Collection<T> | null = null\n\n    async function getCollection(): Promise<Collection<T>> {\n      if (cachedCollection) return cachedCollection\n      const noydb = resolveNoydb(options.noydb ?? null)\n      cachedCompartment = await noydb.openVault(options.vault)\n      // Pass the schema down to the Collection so validation runs at\n      // the encrypt/decrypt boundary instead of only at the store\n      // layer. This catches drifted stored data on read (which the\n      // old `options.schema.parse(record)` call in add() could not do).\n      const collOpts: Parameters<typeof cachedCompartment.collection<T>>[1] = {}\n      if (options.schema !== undefined) collOpts.schema = options.schema\n      cachedCollection = cachedCompartment.collection<T>(collectionName, collOpts)\n      return cachedCollection\n    }\n\n    async function refresh(): Promise<void> {\n      const c = await getCollection()\n      const list = await c.list()\n      items.value = list\n    }\n\n    function byId(id: string): T | undefined {\n      // Linear scan against the reactive cache. Index-aware lookups planned.\n      // Optimization opportunity: maintain a Map<string, T> alongside items.\n      for (const item of items.value) {\n        if ((item as { id?: string }).id === id) return item\n      }\n      return undefined\n    }\n\n    async function add(id: string, record: T): Promise<void> {\n      // No explicit validation here — the Collection's own schema hook\n      // runs before encryption, which means we get validation AND\n      // transforms applied consistently across every code path that\n      // writes to the collection (add/update/remove, future batch\n      // operations, raw Collection.put calls). Users who want to\n      // pre-validate in the UI layer can still do so with their own\n      // schema handle.\n      const c = await getCollection()\n      await c.put(id, record)\n      // Re-list to pick up the new record. Cheaper alternative would be to\n      // splice into items.value directly, but list() ensures consistency\n      // with the underlying cache.\n      items.value = await c.list()\n    }\n\n    async function update(id: string, record: T): Promise<void> {\n      // Collection.put is upsert; this is just a more readable alias.\n      await add(id, record)\n    }\n\n    async function remove(id: string): Promise<void> {\n      const c = await getCollection()\n      await c.delete(id)\n      items.value = await c.list()\n    }\n\n    function query(): Query<T> {\n      // Synchronous query() requires the collection to be hydrated.\n      // The lazy refresh() in $ready handles that — but if the user calls\n      // query() before $ready resolves, the collection still works because\n      // Collection.query() reads from its own internal cache (which Noydb\n      // hydrates lazily as well).\n      if (!cachedCollection) {\n        throw new Error(\n          '@noy-db/pinia: query() called before the store was ready. ' +\n          'Await store.$ready first, or set prefetch: true (default).',\n        )\n      }\n      return cachedCollection.query()\n    }\n\n    function liveQuery<R = T>(\n      build: (q: Query<T>) => Query<R>,\n    ): NoydbLiveQuery<R> {\n      if (!cachedCollection) {\n        throw new Error(\n          '@noy-db/pinia: liveQuery() called before the store was ready. ' +\n          'Await store.$ready first, or set prefetch: true (default).',\n        )\n      }\n      const built = build(cachedCollection.query())\n      const live = built.live()\n\n      const items = shallowRef<readonly R[]>(live.value)\n      const error = ref<Error | null>(live.error)\n\n      const unsubscribe = live.subscribe(() => {\n        items.value = live.value\n        error.value = live.error\n      })\n\n      let stopped = false\n      const stop = (): void => {\n        if (stopped) return\n        stopped = true\n        unsubscribe()\n        live.stop()\n      }\n\n      // Auto-teardown when the calling scope (a Vue component's setup,\n      // a Pinia store body, or any user-created effectScope) disposes.\n      // Outside an active scope (raw test harness, SSR top-level), skip\n      // registration silently — caller is responsible for stop().\n      if (getCurrentScope()) onScopeDispose(stop)\n\n      return { items, error, stop }\n    }\n\n    // Kick off hydration. The promise is exposed as $ready so components\n    // can `await store.$ready` before rendering data-dependent UI.\n    const $ready: Promise<void> = prefetch\n      ? refresh()\n      : Promise.resolve()\n\n    return {\n      items,\n      count,\n      $ready,\n      byId,\n      add,\n      update,\n      remove,\n      refresh,\n      query,\n      liveQuery,\n    }\n  })\n}\n","/**\n * Active NOYDB instance binding.\n *\n * `defineNoydbStore` resolves the `Noydb` instance from one of three places,\n * in priority order:\n *\n *   1. The store options' explicit `noydb:` field (highest precedence — useful\n *      for tests and multi-database apps).\n *   2. A globally bound instance set via `setActiveNoydb()` — this is what the\n *      Nuxt module's runtime plugin and playground apps use.\n *   3. Throws a clear error if neither is set.\n *\n * Keeping the binding pluggable means tests can pass an instance directly\n * without polluting global state.\n */\n\nimport type { Noydb } from '@noy-db/hub'\n\nlet activeInstance: Noydb | null = null\n\n/** Bind a Noydb instance globally. Called by the Nuxt module / app plugin. */\nexport function setActiveNoydb(instance: Noydb | null): void {\n  activeInstance = instance\n}\n\n/** Returns the globally bound Noydb instance, or null if none. */\nexport function getActiveNoydb(): Noydb | null {\n  return activeInstance\n}\n\n/**\n * Resolve the Noydb instance to use for a store. Throws if no instance is\n * bound — the error message points the developer at the three options.\n */\nexport function resolveNoydb(explicit?: Noydb | null): Noydb {\n  if (explicit) return explicit\n  if (activeInstance) return activeInstance\n  throw new Error(\n    '@noy-db/pinia: no Noydb instance bound.\\n' +\n    '  Option A — pass `noydb:` directly to defineNoydbStore({...})\\n' +\n    '  Option B — call setActiveNoydb(instance) once at app startup\\n' +\n    '  Option C — install the @noy-db/nuxt module (Nuxt 4+)',\n  )\n}\n","/**\n * `createNoydbPiniaPlugin` — augmentation path for existing Pinia stores.\n *\n * Lets a developer take any existing `defineStore()` call and opt into NOYDB\n * persistence by adding a single `noydb:` option, without touching component\n * code. The plugin watches the chosen state key(s), encrypts on change, syncs\n * to a NOYDB collection, and rehydrates on store init.\n *\n * @example\n * ```ts\n * import { createPinia } from 'pinia';\n * import { createNoydbPiniaPlugin } from '@noy-db/in-pinia';\n * import { jsonFile } from '@noy-db/to-file';\n *\n * const pinia = createPinia();\n * pinia.use(createNoydbPiniaPlugin({\n *   adapter: jsonFile({ dir: './data' }),\n *   user: 'owner-01',\n *   secret: () => promptPassphrase(),\n * }));\n *\n * // existing store — add one option, no component changes:\n * export const useClients = defineStore('clients', {\n *   state: () => ({ list: [] as Client[] }),\n *   noydb: { vault: 'C101', collection: 'clients', persist: 'list' },\n * });\n * ```\n *\n * Design notes\n * ------------\n * - Each augmented store persists a SINGLE document at id `__state__`\n *   containing the picked keys. We don't try to map state arrays onto\n *   per-element records — that's `defineNoydbStore`'s territory.\n * - The Noydb instance is constructed lazily on first store-with-noydb\n *   instantiation, then memoized for the lifetime of the Pinia app.\n *   This means apps that don't actually use any noydb-augmented stores\n *   pay zero crypto cost.\n * - `secret` is a function so the passphrase can come from a prompt,\n *   biometric unlock, or session token — never stored in config.\n * - The plugin sets `store.$noydbReady` (a `Promise<void>`) and\n *   `store.$noydbError` (an `Error | null`) on every augmented store\n *   so components can await hydration and surface failures.\n */\n\nimport type { PiniaPluginContext, PiniaPlugin, StateTree } from 'pinia'\nimport { createNoydb, type Noydb, type NoydbOptions, type NoydbStore, type Vault, type Collection } from '@noy-db/hub'\n\n/**\n * Per-store NOYDB configuration. Attached to a Pinia store via the `noydb`\n * option inside `defineStore({ ..., noydb: {...} })`.\n *\n * `persist` selects which top-level state keys to mirror into NOYDB.\n * Pass a single key, an array of keys, or `'*'` to mirror the entire state.\n */\nexport interface StoreNoydbOptions<S extends StateTree = StateTree> {\n  /** Vault (tenant) name. */\n  vault: string\n  /** Collection name within the vault. */\n  collection: string\n  /**\n   * Which state keys to persist. Defaults to `'*'` (the entire state object).\n   * Pass a string or string[] to scope to specific keys.\n   */\n  persist?: keyof S | (keyof S)[] | '*'\n  /**\n   * Optional schema validator applied at the document level (the persisted\n   * subset of state, not individual records). Throws if validation fails on\n   * hydration — the store stays at its initial state and `$noydbError` is set.\n   */\n  schema?: { parse: (input: unknown) => unknown }\n}\n\n/**\n * Configuration for `createNoydbPiniaPlugin`. Mirrors `NoydbOptions` but\n * makes `secret` a function so the passphrase can come from a prompt\n * rather than being stored in config.\n */\nexport interface NoydbPiniaPluginOptions {\n  /** The NOYDB store to use for persistence. */\n  adapter: NoydbStore\n  /** User identifier (matches the keyring file). */\n  user: string\n  /**\n   * Passphrase provider. Called once on first noydb-augmented store\n   * instantiation. Return a string or a Promise that resolves to one.\n   */\n  secret: () => string | Promise<string>\n  /** Optional Noydb open-options forwarded to `createNoydb`. */\n  noydbOptions?: Partial<Omit<NoydbOptions, 'store' | 'user' | 'secret'>>\n}\n\n// The fixed document id under which a store's persisted state lives. Using a\n// reserved prefix so it can't collide with any user-chosen record id.\nconst STATE_DOC_ID = '__state__'\n\n/**\n * Create a Pinia plugin that wires NOYDB persistence into any store\n * declaring a `noydb:` option.\n *\n * Returns a `PiniaPlugin` directly usable with `pinia.use(...)`.\n */\nexport function createNoydbPiniaPlugin(opts: NoydbPiniaPluginOptions): PiniaPlugin {\n  // Single Noydb instance shared across all augmented stores in this Pinia\n  // app. Created lazily on first use so apps that never instantiate a\n  // noydb-augmented store pay zero crypto cost.\n  let dbPromise: Promise<Noydb> | null = null\n  function getDb(): Promise<Noydb> {\n    if (!dbPromise) {\n      dbPromise = (async (): Promise<Noydb> => {\n        const secret = await opts.secret()\n        return createNoydb({\n          store: opts.adapter,\n          user: opts.user,\n          secret,\n          ...opts.noydbOptions,\n        })\n      })()\n    }\n    return dbPromise\n  }\n\n  // Vault cache so opening a vault is a one-time cost per app.\n  const vaultCache = new Map<string, Promise<Vault>>()\n  function getCompartment(name: string): Promise<Vault> {\n    let p = vaultCache.get(name)\n    if (!p) {\n      p = getDb().then((db) => db.openVault(name))\n      vaultCache.set(name, p)\n    }\n    return p\n  }\n\n  return (context: PiniaPluginContext) => {\n    // Pinia stores can declare arbitrary options on `defineStore`, but the\n    // plugin context only exposes them via `context.options`. Pull our\n    // `noydb` option out and bail early if it's not present — that's\n    // the \"store is untouched\" path for non-augmented stores.\n    const noydbOption = (context.options as { noydb?: StoreNoydbOptions }).noydb\n    if (!noydbOption) {\n      // Mark the store as opted-out so devtools / consumers can detect it.\n      context.store.$noydbAugmented = false\n      return\n    }\n\n    context.store.$noydbAugmented = true\n    context.store.$noydbError = null as Error | null\n\n    // Track in-flight persistence promises so tests (and consumers) can\n    // await deterministic flushes via `$noydbFlush()`. Plain Set-of-Promises\n    // — entries auto-remove on settle.\n    const pending = new Set<Promise<void>>()\n\n    // Hydrate-then-subscribe. Both happen inside an async closure so the\n    // store can be awaited via `$noydbReady`.\n    const ready = (async (): Promise<void> => {\n      try {\n        const vault = await getCompartment(noydbOption.vault)\n        const collection: Collection<StateTree> = vault.collection<StateTree>(\n          noydbOption.collection,\n        )\n\n        // 1. Hydration: read the persisted document (if any) and apply\n        //    the picked keys onto the store's current state. We use\n        //    `$patch` so reactivity fires correctly.\n        const persisted = await collection.get(STATE_DOC_ID)\n        if (persisted) {\n          const validated = noydbOption.schema\n            ? (noydbOption.schema.parse(persisted) as StateTree)\n            : persisted\n          const picked = pickKeys(validated, noydbOption.persist)\n          context.store.$patch(picked)\n        }\n\n        // 2. Subscribe: every state mutation triggers an encrypted write\n        //    of the picked subset back to NOYDB. The subscription captures\n        //    `collection` so it doesn't re-resolve on every event.\n        context.store.$subscribe(\n          (_mutation, state) => {\n            const subset = pickKeys(state, noydbOption.persist)\n            const p = collection.put(STATE_DOC_ID, subset)\n              .catch((err: unknown) => {\n                context.store.$noydbError = err instanceof Error ? err : new Error(String(err))\n              })\n              .finally(() => {\n                pending.delete(p)\n              })\n            pending.add(p)\n          },\n          { detached: true }, // outlive the component that triggered the mutation\n        )\n      } catch (err) {\n        context.store.$noydbError = err instanceof Error ? err : new Error(String(err))\n      }\n    })()\n\n    context.store.$noydbReady = ready\n    /**\n     * Wait for all in-flight persistence puts to settle. Use this in tests\n     * to deterministically observe the encrypted state on the adapter, and\n     * in app code before unmounting components that mutated the store.\n     */\n    context.store.$noydbFlush = async (): Promise<void> => {\n      await ready\n      // Snapshot the current pending set; new puts added during await\n      // are picked up by the next $noydbFlush() call.\n      while (pending.size > 0) {\n        await Promise.all([...pending])\n      }\n    }\n  }\n}\n\n/**\n * Pick the configured subset of keys from a state object.\n *\n * Behaviors:\n *   - `undefined` or `'*'` → returns the entire state shallow-copied\n *   - single key string → returns `{ [key]: state[key] }`\n *   - key array → returns `{ [k1]: state[k1], [k2]: state[k2], ... }`\n *\n * The result is always a fresh object so callers can mutate it without\n * touching the store's reactive state.\n */\nfunction pickKeys(state: StateTree, persist: StoreNoydbOptions['persist']): StateTree {\n  if (persist === undefined || persist === '*') {\n    return { ...state }\n  }\n  if (typeof persist === 'string') {\n    return { [persist]: state[persist] } as StateTree\n  }\n  if (Array.isArray(persist)) {\n    const out: StateTree = {}\n    for (const key of persist) {\n      out[key as string] = state[key as string]\n    }\n    return out\n  }\n  // Should be unreachable thanks to the type, but defensive default.\n  return { ...state }\n}\n\n// ─── Pinia module augmentation ─────────────────────────────────────\n//\n// Pinia exposes `DefineStoreOptionsBase` as the place where third-party\n// plugins are expected to attach their custom option types. Augmenting it\n// here means `defineStore('x', { ..., noydb: {...} })` autocompletes inside\n// the IDE and type-checks correctly without forcing users to import\n// anything from `@noy-db/pinia`.\n//\n// We also augment `PiniaCustomProperties` so the runtime fields we add to\n// every store (`$noydbReady`, `$noydbError`, `$noydbAugmented`) are typed.\n\ndeclare module 'pinia' {\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  export interface DefineStoreOptionsBase<S extends StateTree, Store> {\n    /**\n     * Opt this store into NOYDB persistence via the\n     * `createNoydbPiniaPlugin` augmentation plugin.\n     *\n     * The chosen state keys are encrypted and persisted to the configured\n     * vault + collection on every mutation, and rehydrated on first\n     * store access.\n     */\n    noydb?: StoreNoydbOptions<S>\n  }\n\n  export interface PiniaCustomProperties {\n    /**\n     * Resolves once this store has finished its initial hydration from\n     * NOYDB. `undefined` for stores that don't declare a `noydb:` option.\n     */\n    $noydbReady?: Promise<void>\n    /**\n     * Set when hydration or persistence fails. `null` while healthy.\n     * Plugins (and devtools) can poll this to surface storage errors.\n     */\n    $noydbError?: Error | null\n    /**\n     * `true` if this store opted into NOYDB persistence via the `noydb:`\n     * option, `false` otherwise. Useful for debugging and devtools.\n     */\n    $noydbAugmented?: boolean\n    /**\n     * Wait for all in-flight encrypted persistence puts to complete.\n     * Useful in tests for deterministic flushing, and in app code before\n     * unmounting components that just mutated the store.\n     */\n    $noydbFlush?: () => Promise<void>\n  }\n}\n","/**\n * `useCapabilityGrant` — Vue/Pinia composable for time-boxed\n * capability approval flows.\n *\n * The composable orchestrates a request → approve → expire / release\n * lifecycle for a session-scoped capability. It manages UI state,\n * persists the request to a reserved `_capability_requests` collection\n * so a separate approver session can see it, and tracks TTL with\n * auto-revert.\n *\n * **It does NOT itself flip capability bits.** Capability mechanisms\n * vary across adopters: tier-based deployments wire `onGrant` to\n * `vault.elevate(tier, opts)`; keyring-based deployments wire it to\n * `db.grant(...)`; custom deployments do their own thing. Keeping the\n * actual flip behind a callback avoids introducing a parallel\n * \"capability elevation\" primitive in hub when the existing\n * `vault.elevate()` already covers the time-boxed-grant pattern.\n *\n * ## State machine\n *\n *   idle  ─── .request() ───────►  requested\n *   requested  ─── .approve() ──►  granted\n *   granted    ─── TTL expires ─►  idle\n *   granted    ─── .release() ──►  idle\n *\n * @module\n */\n\nimport {\n  computed,\n  getCurrentScope,\n  onScopeDispose,\n  ref,\n  shallowRef,\n  watch,\n  type ComputedRef,\n  type Ref,\n} from 'vue'\nimport type { Vault, Role, CollectionChangeEvent } from '@noy-db/hub'\nimport { resolveNoydb } from './context.js'\n\n/** Reserved internal collection that holds capability-grant lifecycle records. */\nexport const CAPABILITY_REQUESTS_COLLECTION = '_capability_requests'\n\nexport type CapabilityGrantState = 'idle' | 'requested' | 'granted' | 'expired'\n\n/**\n * On-disk shape of a capability-grant lifecycle record. Persisted in\n * the reserved {@link CAPABILITY_REQUESTS_COLLECTION}. Encrypted with\n * that collection's DEK at the storage layer; the in-memory shape\n * here is plaintext.\n *\n * The audit trail invariant: this record carries metadata only —\n * capability name, roles, ttl, reason. Never plaintext payload.\n */\nexport interface CapabilityGrantRecord {\n  readonly id: string\n  readonly capability: string\n  readonly requestedBy: string\n  readonly approverRole: Role\n  readonly reason: string\n  readonly ttlMs: number\n  readonly status: 'requested' | 'granted' | 'released' | 'expired'\n  readonly requestedAt: string\n  readonly approvedBy?: string\n  readonly approvedAt?: string\n  readonly expiresAt?: string\n}\n\nexport interface UseCapabilityGrantOptions {\n  /** TTL in milliseconds for the granted window. */\n  readonly ttlMs: number\n  /** Role required to call `.approve()`. Mismatch throws on `.approve()`. */\n  readonly approver: Role\n  /** Audit-ledger string. Stamped on the request record; no plaintext payload. */\n  readonly reason: string\n  /**\n   * Optional explicit vault. Either a `Vault` instance or its name.\n   * When omitted, resolves the active Noydb instance via\n   * `setActiveNoydb()` and opens the first vault the caller has\n   * already loaded.\n   */\n  readonly vault: Vault | string\n  /**\n   * Called on the approver's session when `.approve()` succeeds. Wire\n   * this to whatever capability flip your codebase uses —\n   * `vault.elevate(tier, opts)` for tier-based deployments,\n   * `db.grant(...)` for keyring-based, custom for custom.\n   *\n   * The composable does NOT enforce that the capability was actually\n   * granted — it just tracks the lifecycle. The post-expiry \"gated\n   * call throws\" contract comes from the underlying mechanism the\n   * callback wires up (e.g., `ElevationExpiredError` from\n   * `vault.elevate`'s lazy TTL check).\n   */\n  readonly onGrant?: (ctx: {\n    record: CapabilityGrantRecord\n    vault: Vault\n  }) => void | Promise<void>\n  /**\n   * Called when the grant ends (TTL expiry OR voluntary release).\n   * Mirror of `onGrant`. Idempotent — may be called twice if release\n   * and expiry race; callers should no-op on the second invocation.\n   */\n  readonly onRelease?: (ctx: {\n    record: CapabilityGrantRecord\n    vault: Vault\n    cause: 'released' | 'expired'\n  }) => void | Promise<void>\n}\n\nexport interface UseCapabilityGrantReturn {\n  readonly state: Ref<CapabilityGrantState>\n  /** Milliseconds remaining on the granted window; 0 outside `granted`. */\n  readonly timeRemaining: ComputedRef<number>\n  /** Most recent error from request/approve/release (resets on next op). */\n  readonly error: Ref<Error | null>\n  /** Issue a request. State must be `idle`. */\n  request(): Promise<void>\n  /** Approve a pending request. State must be `requested`. */\n  approve(): Promise<void>\n  /** Voluntarily revoke an active grant. State must be `granted`. */\n  release(): Promise<void>\n}\n\n/**\n * Build a reactive capability-grant lifecycle handle.\n *\n * @example Tier-based capability flip\n * ```ts\n * let elevated: ElevatedHandle | null = null\n * const grant = useCapabilityGrant('canExportPlaintext', {\n *   vault: 'V1',\n *   ttlMs: 15 * 60_000,\n *   approver: 'admin',\n *   reason: 'bulk export',\n *   onGrant: async ({ vault, record }) => {\n *     elevated = await vault.elevate(2, {\n *       ttlMs: record.ttlMs,\n *       reason: record.reason,\n *     })\n *   },\n *   onRelease: async () => { await elevated?.release(); elevated = null },\n * })\n * ```\n */\nexport function useCapabilityGrant(\n  capability: string,\n  options: UseCapabilityGrantOptions,\n): UseCapabilityGrantReturn {\n  const state = ref<CapabilityGrantState>('idle')\n  const error = ref<Error | null>(null)\n  const recordRef = shallowRef<CapabilityGrantRecord | null>(null)\n\n  // SSR / non-browser host: composable is a no-op. Methods reject; the\n  // refs stay at their initial values so server-rendered output shows\n  // the idle state.\n  const inBrowser = typeof window !== 'undefined'\n\n  let expiryTimer: ReturnType<typeof setTimeout> | null = null\n  let unsubscribeChangeStream: (() => void) | null = null\n  let resolvedVault: Vault | null = null\n  let stopped = false\n\n  async function resolveVault(): Promise<Vault> {\n    if (resolvedVault) return resolvedVault\n    if (typeof options.vault === 'string') {\n      const noydb = resolveNoydb(null)\n      resolvedVault = await noydb.openVault(options.vault)\n    } else {\n      resolvedVault = options.vault\n    }\n    // Open the requests collection eagerly so the change stream\n    // subscription below has a target. We don't typed-cast here —\n    // the collection holds CapabilityGrantRecord shapes only.\n    resolvedVault.collection<CapabilityGrantRecord>(\n      CAPABILITY_REQUESTS_COLLECTION,\n    )\n    return resolvedVault\n  }\n\n  function clearExpiryTimer(): void {\n    if (expiryTimer) {\n      clearTimeout(expiryTimer)\n      expiryTimer = null\n    }\n  }\n\n  function scheduleExpiry(record: CapabilityGrantRecord): void {\n    if (!record.expiresAt) return\n    const remaining = new Date(record.expiresAt).getTime() - Date.now()\n    if (remaining <= 0) {\n      void handleExpiry(record)\n      return\n    }\n    clearExpiryTimer()\n    expiryTimer = setTimeout(() => { void handleExpiry(record) }, remaining)\n  }\n\n  async function handleExpiry(record: CapabilityGrantRecord): Promise<void> {\n    if (stopped) return\n    if (state.value !== 'granted') return\n    state.value = 'expired'\n    try {\n      await options.onRelease?.({\n        record,\n        vault: resolvedVault!,\n        cause: 'expired',\n      })\n    } catch (err) {\n      error.value = err instanceof Error ? err : new Error(String(err))\n    }\n    // Auto-return to idle after the expiry handler — matches the spec's\n    // \"state auto-returns to idle\" contract.\n    state.value = 'idle'\n    recordRef.value = null\n  }\n\n  // `now` ticks every second so timeRemaining stays reactive without\n  // wiring a per-frame loop.\n  const now = ref(Date.now())\n  const tickTimer = inBrowser\n    ? setInterval(() => { now.value = Date.now() }, 1000)\n    : null\n\n  const timeRemaining = computed(() => {\n    if (state.value !== 'granted' || !recordRef.value?.expiresAt) return 0\n    // Subscribe to `now` for reactivity, but read the live clock for\n    // accuracy — `now` ticks every second so the computed stays\n    // honest between ticks too.\n    void now.value\n    const ms = new Date(recordRef.value.expiresAt).getTime() - Date.now()\n    return ms > 0 ? ms : 0\n  })\n\n  // Subscribe to the requests collection so an approver session sees\n  // pending records appear in real time within the same Noydb session.\n  // Cross-session visibility additionally requires the sync engine.\n  watch(\n    () => recordRef.value?.id,\n    async (id) => {\n      if (!inBrowser || !id || unsubscribeChangeStream) return\n      const vault = await resolveVault()\n      const coll = vault.collection<CapabilityGrantRecord>(\n        CAPABILITY_REQUESTS_COLLECTION,\n      )\n      unsubscribeChangeStream = coll.subscribe(\n        (evt: CollectionChangeEvent<CapabilityGrantRecord>) => {\n          if (evt.type !== 'put' || evt.id !== id) return\n          const updated = evt.record\n          if (!updated || stopped) return\n          recordRef.value = updated\n          if (updated.status === 'granted') {\n            state.value = 'granted'\n            scheduleExpiry(updated)\n          } else if (updated.status === 'released' || updated.status === 'expired') {\n            state.value = 'idle'\n            clearExpiryTimer()\n          }\n        },\n      )\n    },\n    { immediate: false },\n  )\n\n  async function request(): Promise<void> {\n    if (state.value !== 'idle') {\n      error.value = new Error(\n        `useCapabilityGrant: cannot request from state \"${state.value}\"`,\n      )\n      throw error.value\n    }\n    error.value = null\n    if (!inBrowser) return\n    try {\n      const vault = await resolveVault()\n      const coll = vault.collection<CapabilityGrantRecord>(\n        CAPABILITY_REQUESTS_COLLECTION,\n      )\n      const id = `cap-${Date.now().toString(36)}-${Math.random().toString(16).slice(2, 10)}`\n      const record: CapabilityGrantRecord = {\n        id,\n        capability,\n        requestedBy: vault.userId,\n        approverRole: options.approver,\n        reason: options.reason,\n        ttlMs: options.ttlMs,\n        status: 'requested',\n        requestedAt: new Date().toISOString(),\n      }\n      await coll.put(id, record)\n      recordRef.value = record\n      state.value = 'requested'\n    } catch (err) {\n      error.value = err instanceof Error ? err : new Error(String(err))\n      throw error.value\n    }\n  }\n\n  async function approve(): Promise<void> {\n    const record = recordRef.value\n    if (state.value !== 'requested' || !record) {\n      error.value = new Error(\n        `useCapabilityGrant: cannot approve from state \"${state.value}\"`,\n      )\n      throw error.value\n    }\n    error.value = null\n    try {\n      const vault = await resolveVault()\n      if (vault.role !== options.approver && vault.role !== 'owner') {\n        throw new Error(\n          `useCapabilityGrant: caller role \"${vault.role}\" cannot approve a \"${options.approver}\"-tier grant`,\n        )\n      }\n      const approvedAt = new Date()\n      const expiresAt = new Date(approvedAt.getTime() + options.ttlMs)\n      const granted: CapabilityGrantRecord = {\n        ...record,\n        status: 'granted',\n        approvedBy: vault.userId,\n        approvedAt: approvedAt.toISOString(),\n        expiresAt: expiresAt.toISOString(),\n      }\n      const coll = vault.collection<CapabilityGrantRecord>(\n        CAPABILITY_REQUESTS_COLLECTION,\n      )\n      await coll.put(record.id, granted)\n      recordRef.value = granted\n      state.value = 'granted'\n      scheduleExpiry(granted)\n      await options.onGrant?.({ record: granted, vault })\n    } catch (err) {\n      error.value = err instanceof Error ? err : new Error(String(err))\n      throw error.value\n    }\n  }\n\n  async function release(): Promise<void> {\n    const record = recordRef.value\n    if (state.value !== 'granted' || !record) {\n      // Releasing from non-granted state is a no-op.\n      return\n    }\n    error.value = null\n    try {\n      clearExpiryTimer()\n      const vault = await resolveVault()\n      const released: CapabilityGrantRecord = { ...record, status: 'released' }\n      const coll = vault.collection<CapabilityGrantRecord>(\n        CAPABILITY_REQUESTS_COLLECTION,\n      )\n      await coll.put(record.id, released)\n      recordRef.value = null\n      state.value = 'idle'\n      await options.onRelease?.({ record, vault, cause: 'released' })\n    } catch (err) {\n      error.value = err instanceof Error ? err : new Error(String(err))\n      throw error.value\n    }\n  }\n\n  if (getCurrentScope()) {\n    onScopeDispose(() => {\n      stopped = true\n      clearExpiryTimer()\n      if (tickTimer) clearInterval(tickTimer)\n      unsubscribeChangeStream?.()\n    })\n  }\n\n  return { state, timeRemaining, error, request, approve, release }\n}\n"],"mappings":";AAkBA,SAAS,mBAAmB;AAC5B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;;;ACVP,IAAI,iBAA+B;AAG5B,SAAS,eAAe,UAA8B;AAC3D,mBAAiB;AACnB;AAGO,SAAS,iBAA+B;AAC7C,SAAO;AACT;AAMO,SAAS,aAAa,UAAgC;AAC3D,MAAI,SAAU,QAAO;AACrB,MAAI,eAAgB,QAAO;AAC3B,QAAM,IAAI;AAAA,IACR;AAAA,EAIF;AACF;;;ADgFO,SAAS,iBACd,IACA,SACA;AACA,QAAM,iBAAiB,QAAQ,cAAc;AAC7C,QAAM,WAAW,QAAQ,YAAY;AAErC,SAAO,YAAY,IAAI,MAAM;AAG3B,UAAM,QAAkB,WAAgB,CAAC,CAAC;AAC1C,UAAM,QAAQ,SAAS,MAAM,MAAM,MAAM,MAAM;AAG/C,QAAI,oBAAkC;AACtC,QAAI,mBAAyC;AAE7C,mBAAe,gBAAwC;AACrD,UAAI,iBAAkB,QAAO;AAC7B,YAAM,QAAQ,aAAa,QAAQ,SAAS,IAAI;AAChD,0BAAoB,MAAM,MAAM,UAAU,QAAQ,KAAK;AAKvD,YAAM,WAAkE,CAAC;AACzE,UAAI,QAAQ,WAAW,OAAW,UAAS,SAAS,QAAQ;AAC5D,yBAAmB,kBAAkB,WAAc,gBAAgB,QAAQ;AAC3E,aAAO;AAAA,IACT;AAEA,mBAAe,UAAyB;AACtC,YAAM,IAAI,MAAM,cAAc;AAC9B,YAAM,OAAO,MAAM,EAAE,KAAK;AAC1B,YAAM,QAAQ;AAAA,IAChB;AAEA,aAAS,KAAKA,KAA2B;AAGvC,iBAAW,QAAQ,MAAM,OAAO;AAC9B,YAAK,KAAyB,OAAOA,IAAI,QAAO;AAAA,MAClD;AACA,aAAO;AAAA,IACT;AAEA,mBAAe,IAAIA,KAAY,QAA0B;AAQvD,YAAM,IAAI,MAAM,cAAc;AAC9B,YAAM,EAAE,IAAIA,KAAI,MAAM;AAItB,YAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,IAC7B;AAEA,mBAAe,OAAOA,KAAY,QAA0B;AAE1D,YAAM,IAAIA,KAAI,MAAM;AAAA,IACtB;AAEA,mBAAe,OAAOA,KAA2B;AAC/C,YAAM,IAAI,MAAM,cAAc;AAC9B,YAAM,EAAE,OAAOA,GAAE;AACjB,YAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,IAC7B;AAEA,aAAS,QAAkB;AAMzB,UAAI,CAAC,kBAAkB;AACrB,cAAM,IAAI;AAAA,UACR;AAAA,QAEF;AAAA,MACF;AACA,aAAO,iBAAiB,MAAM;AAAA,IAChC;AAEA,aAAS,UACP,OACmB;AACnB,UAAI,CAAC,kBAAkB;AACrB,cAAM,IAAI;AAAA,UACR;AAAA,QAEF;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,iBAAiB,MAAM,CAAC;AAC5C,YAAM,OAAO,MAAM,KAAK;AAExB,YAAMC,SAAQ,WAAyB,KAAK,KAAK;AACjD,YAAM,QAAQ,IAAkB,KAAK,KAAK;AAE1C,YAAM,cAAc,KAAK,UAAU,MAAM;AACvC,QAAAA,OAAM,QAAQ,KAAK;AACnB,cAAM,QAAQ,KAAK;AAAA,MACrB,CAAC;AAED,UAAI,UAAU;AACd,YAAM,OAAO,MAAY;AACvB,YAAI,QAAS;AACb,kBAAU;AACV,oBAAY;AACZ,aAAK,KAAK;AAAA,MACZ;AAMA,UAAI,gBAAgB,EAAG,gBAAe,IAAI;AAE1C,aAAO,EAAE,OAAAA,QAAO,OAAO,KAAK;AAAA,IAC9B;AAIA,UAAM,SAAwB,WAC1B,QAAQ,IACR,QAAQ,QAAQ;AAEpB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;;;AE9NA,SAAS,mBAAgG;AAgDzG,IAAM,eAAe;AAQd,SAAS,uBAAuB,MAA4C;AAIjF,MAAI,YAAmC;AACvC,WAAS,QAAwB;AAC/B,QAAI,CAAC,WAAW;AACd,mBAAa,YAA4B;AACvC,cAAM,SAAS,MAAM,KAAK,OAAO;AACjC,eAAO,YAAY;AAAA,UACjB,OAAO,KAAK;AAAA,UACZ,MAAM,KAAK;AAAA,UACX;AAAA,UACA,GAAG,KAAK;AAAA,QACV,CAAC;AAAA,MACH,GAAG;AAAA,IACL;AACA,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,oBAAI,IAA4B;AACnD,WAAS,eAAe,MAA8B;AACpD,QAAI,IAAI,WAAW,IAAI,IAAI;AAC3B,QAAI,CAAC,GAAG;AACN,UAAI,MAAM,EAAE,KAAK,CAAC,OAAO,GAAG,UAAU,IAAI,CAAC;AAC3C,iBAAW,IAAI,MAAM,CAAC;AAAA,IACxB;AACA,WAAO;AAAA,EACT;AAEA,SAAO,CAAC,YAAgC;AAKtC,UAAM,cAAe,QAAQ,QAA0C;AACvE,QAAI,CAAC,aAAa;AAEhB,cAAQ,MAAM,kBAAkB;AAChC;AAAA,IACF;AAEA,YAAQ,MAAM,kBAAkB;AAChC,YAAQ,MAAM,cAAc;AAK5B,UAAM,UAAU,oBAAI,IAAmB;AAIvC,UAAM,SAAS,YAA2B;AACxC,UAAI;AACF,cAAM,QAAQ,MAAM,eAAe,YAAY,KAAK;AACpD,cAAM,aAAoC,MAAM;AAAA,UAC9C,YAAY;AAAA,QACd;AAKA,cAAM,YAAY,MAAM,WAAW,IAAI,YAAY;AACnD,YAAI,WAAW;AACb,gBAAM,YAAY,YAAY,SACzB,YAAY,OAAO,MAAM,SAAS,IACnC;AACJ,gBAAM,SAAS,SAAS,WAAW,YAAY,OAAO;AACtD,kBAAQ,MAAM,OAAO,MAAM;AAAA,QAC7B;AAKA,gBAAQ,MAAM;AAAA,UACZ,CAAC,WAAW,UAAU;AACpB,kBAAM,SAAS,SAAS,OAAO,YAAY,OAAO;AAClD,kBAAM,IAAI,WAAW,IAAI,cAAc,MAAM,EAC1C,MAAM,CAAC,QAAiB;AACvB,sBAAQ,MAAM,cAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,YAChF,CAAC,EACA,QAAQ,MAAM;AACb,sBAAQ,OAAO,CAAC;AAAA,YAClB,CAAC;AACH,oBAAQ,IAAI,CAAC;AAAA,UACf;AAAA,UACA,EAAE,UAAU,KAAK;AAAA;AAAA,QACnB;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,MAAM,cAAc,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,MAChF;AAAA,IACF,GAAG;AAEH,YAAQ,MAAM,cAAc;AAM5B,YAAQ,MAAM,cAAc,YAA2B;AACrD,YAAM;AAGN,aAAO,QAAQ,OAAO,GAAG;AACvB,cAAM,QAAQ,IAAI,CAAC,GAAG,OAAO,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACF;AAaA,SAAS,SAAS,OAAkB,SAAkD;AACpF,MAAI,YAAY,UAAa,YAAY,KAAK;AAC5C,WAAO,EAAE,GAAG,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO,EAAE,CAAC,OAAO,GAAG,MAAM,OAAO,EAAE;AAAA,EACrC;AACA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,UAAM,MAAiB,CAAC;AACxB,eAAW,OAAO,SAAS;AACzB,UAAI,GAAa,IAAI,MAAM,GAAa;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,GAAG,MAAM;AACpB;;;ACnNA;AAAA,EACE,YAAAC;AAAA,EACA,mBAAAC;AAAA,EACA,kBAAAC;AAAA,EACA,OAAAC;AAAA,EACA,cAAAC;AAAA,EACA;AAAA,OAGK;AAKA,IAAM,iCAAiC;AAwGvC,SAAS,mBACd,YACA,SAC0B;AAC1B,QAAM,QAAQC,KAA0B,MAAM;AAC9C,QAAM,QAAQA,KAAkB,IAAI;AACpC,QAAM,YAAYC,YAAyC,IAAI;AAK/D,QAAM,YAAY,OAAO,WAAW;AAEpC,MAAI,cAAoD;AACxD,MAAI,0BAA+C;AACnD,MAAI,gBAA8B;AAClC,MAAI,UAAU;AAEd,iBAAe,eAA+B;AAC5C,QAAI,cAAe,QAAO;AAC1B,QAAI,OAAO,QAAQ,UAAU,UAAU;AACrC,YAAM,QAAQ,aAAa,IAAI;AAC/B,sBAAgB,MAAM,MAAM,UAAU,QAAQ,KAAK;AAAA,IACrD,OAAO;AACL,sBAAgB,QAAQ;AAAA,IAC1B;AAIA,kBAAc;AAAA,MACZ;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,WAAS,mBAAyB;AAChC,QAAI,aAAa;AACf,mBAAa,WAAW;AACxB,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,WAAS,eAAe,QAAqC;AAC3D,QAAI,CAAC,OAAO,UAAW;AACvB,UAAM,YAAY,IAAI,KAAK,OAAO,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI;AAClE,QAAI,aAAa,GAAG;AAClB,WAAK,aAAa,MAAM;AACxB;AAAA,IACF;AACA,qBAAiB;AACjB,kBAAc,WAAW,MAAM;AAAE,WAAK,aAAa,MAAM;AAAA,IAAE,GAAG,SAAS;AAAA,EACzE;AAEA,iBAAe,aAAa,QAA8C;AACxE,QAAI,QAAS;AACb,QAAI,MAAM,UAAU,UAAW;AAC/B,UAAM,QAAQ;AACd,QAAI;AACF,YAAM,QAAQ,YAAY;AAAA,QACxB;AAAA,QACA,OAAO;AAAA,QACP,OAAO;AAAA,MACT,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAAA,IAClE;AAGA,UAAM,QAAQ;AACd,cAAU,QAAQ;AAAA,EACpB;AAIA,QAAM,MAAMD,KAAI,KAAK,IAAI,CAAC;AAC1B,QAAM,YAAY,YACd,YAAY,MAAM;AAAE,QAAI,QAAQ,KAAK,IAAI;AAAA,EAAE,GAAG,GAAI,IAClD;AAEJ,QAAM,gBAAgBE,UAAS,MAAM;AACnC,QAAI,MAAM,UAAU,aAAa,CAAC,UAAU,OAAO,UAAW,QAAO;AAIrE,SAAK,IAAI;AACT,UAAM,KAAK,IAAI,KAAK,UAAU,MAAM,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI;AACpE,WAAO,KAAK,IAAI,KAAK;AAAA,EACvB,CAAC;AAKD;AAAA,IACE,MAAM,UAAU,OAAO;AAAA,IACvB,OAAO,OAAO;AACZ,UAAI,CAAC,aAAa,CAAC,MAAM,wBAAyB;AAClD,YAAM,QAAQ,MAAM,aAAa;AACjC,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,MACF;AACA,gCAA0B,KAAK;AAAA,QAC7B,CAAC,QAAsD;AACrD,cAAI,IAAI,SAAS,SAAS,IAAI,OAAO,GAAI;AACzC,gBAAM,UAAU,IAAI;AACpB,cAAI,CAAC,WAAW,QAAS;AACzB,oBAAU,QAAQ;AAClB,cAAI,QAAQ,WAAW,WAAW;AAChC,kBAAM,QAAQ;AACd,2BAAe,OAAO;AAAA,UACxB,WAAW,QAAQ,WAAW,cAAc,QAAQ,WAAW,WAAW;AACxE,kBAAM,QAAQ;AACd,6BAAiB;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,WAAW,MAAM;AAAA,EACrB;AAEA,iBAAe,UAAyB;AACtC,QAAI,MAAM,UAAU,QAAQ;AAC1B,YAAM,QAAQ,IAAI;AAAA,QAChB,kDAAkD,MAAM,KAAK;AAAA,MAC/D;AACA,YAAM,MAAM;AAAA,IACd;AACA,UAAM,QAAQ;AACd,QAAI,CAAC,UAAW;AAChB,QAAI;AACF,YAAM,QAAQ,MAAM,aAAa;AACjC,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,MACF;AACA,YAAM,KAAK,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACpF,YAAM,SAAgC;AAAA,QACpC;AAAA,QACA;AAAA,QACA,aAAa,MAAM;AAAA,QACnB,cAAc,QAAQ;AAAA,QACtB,QAAQ,QAAQ;AAAA,QAChB,OAAO,QAAQ;AAAA,QACf,QAAQ;AAAA,QACR,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACtC;AACA,YAAM,KAAK,IAAI,IAAI,MAAM;AACzB,gBAAU,QAAQ;AAClB,YAAM,QAAQ;AAAA,IAChB,SAAS,KAAK;AACZ,YAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AAEA,iBAAe,UAAyB;AACtC,UAAM,SAAS,UAAU;AACzB,QAAI,MAAM,UAAU,eAAe,CAAC,QAAQ;AAC1C,YAAM,QAAQ,IAAI;AAAA,QAChB,kDAAkD,MAAM,KAAK;AAAA,MAC/D;AACA,YAAM,MAAM;AAAA,IACd;AACA,UAAM,QAAQ;AACd,QAAI;AACF,YAAM,QAAQ,MAAM,aAAa;AACjC,UAAI,MAAM,SAAS,QAAQ,YAAY,MAAM,SAAS,SAAS;AAC7D,cAAM,IAAI;AAAA,UACR,oCAAoC,MAAM,IAAI,uBAAuB,QAAQ,QAAQ;AAAA,QACvF;AAAA,MACF;AACA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,YAAY,IAAI,KAAK,WAAW,QAAQ,IAAI,QAAQ,KAAK;AAC/D,YAAM,UAAiC;AAAA,QACrC,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,YAAY,MAAM;AAAA,QAClB,YAAY,WAAW,YAAY;AAAA,QACnC,WAAW,UAAU,YAAY;AAAA,MACnC;AACA,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,MACF;AACA,YAAM,KAAK,IAAI,OAAO,IAAI,OAAO;AACjC,gBAAU,QAAQ;AAClB,YAAM,QAAQ;AACd,qBAAe,OAAO;AACtB,YAAM,QAAQ,UAAU,EAAE,QAAQ,SAAS,MAAM,CAAC;AAAA,IACpD,SAAS,KAAK;AACZ,YAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AAEA,iBAAe,UAAyB;AACtC,UAAM,SAAS,UAAU;AACzB,QAAI,MAAM,UAAU,aAAa,CAAC,QAAQ;AAExC;AAAA,IACF;AACA,UAAM,QAAQ;AACd,QAAI;AACF,uBAAiB;AACjB,YAAM,QAAQ,MAAM,aAAa;AACjC,YAAM,WAAkC,EAAE,GAAG,QAAQ,QAAQ,WAAW;AACxE,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,MACF;AACA,YAAM,KAAK,IAAI,OAAO,IAAI,QAAQ;AAClC,gBAAU,QAAQ;AAClB,YAAM,QAAQ;AACd,YAAM,QAAQ,YAAY,EAAE,QAAQ,OAAO,OAAO,WAAW,CAAC;AAAA,IAChE,SAAS,KAAK;AACZ,YAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AAEA,MAAIC,iBAAgB,GAAG;AACrB,IAAAC,gBAAe,MAAM;AACnB,gBAAU;AACV,uBAAiB;AACjB,UAAI,UAAW,eAAc,SAAS;AACtC,gCAA0B;AAAA,IAC5B,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,OAAO,eAAe,OAAO,SAAS,SAAS,QAAQ;AAClE;","names":["id","items","computed","getCurrentScope","onScopeDispose","ref","shallowRef","ref","shallowRef","computed","getCurrentScope","onScopeDispose"]}

package/package.json

@@ -0,0 +1,74 @@
+{
+  "name": "@noy-db/in-pinia",
+  "version": "0.1.0-pre.3",
+  "description": "Pinia integration for noy-db — defineNoydbStore() and the augmentation plugin for existing stores",
+  "license": "MIT",
+  "author": "vLannaAi <vicio@lanna.ai>",
+  "homepage": "https://github.com/vLannaAi/noy-db/tree/main/packages/in-pinia#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vLannaAi/noy-db.git",
+    "directory": "packages/in-pinia"
+  },
+  "bugs": {
+    "url": "https://github.com/vLannaAi/noy-db/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "peerDependencies": {
+    "pinia": "^2.1.0 || ^3.0.0",
+    "vue": "^3.4.0",
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "devDependencies": {
+    "@vue/test-utils": "^2.4.6",
+    "happy-dom": "^15.11.7",
+    "pinia": "^3.0.1",
+    "vue": "^3.5.32",
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "keywords": [
+    "noy-db",
+    "pinia",
+    "vue",
+    "vue3",
+    "nuxt",
+    "store",
+    "encryption",
+    "zero-knowledge",
+    "offline-first"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}