mindoodb 0.0.64 → 0.0.65

package/dist/core/BaseMindooDB.js

@@ -101,7 +101,9 @@ const PREFETCH_MAX_RATE_LIMIT_DELAY_MS = 10000;
  */
 function networkErrorType(error) {
     const candidate = error;
-    if (!candidate || candidate.name !== "NetworkError" || typeof candidate.type !== "string") {
+    if (!candidate ||
+        candidate.name !== "NetworkError" ||
+        typeof candidate.type !== "string") {
         return null;
     }
     return candidate.type;
@@ -117,7 +119,9 @@ function rateLimitRetryDelayMs(error, attempt) {
         return null;
     }
     const retryAfterMs = error.retryAfterMs;
-    const requested = typeof retryAfterMs === "number" && Number.isFinite(retryAfterMs) ? retryAfterMs : 0;
+    const requested = typeof retryAfterMs === "number" && Number.isFinite(retryAfterMs)
+        ? retryAfterMs
+        : 0;
     return Math.min(Math.max(requested, PREFETCH_RATE_LIMIT_DELAYS_MS[attempt]), PREFETCH_MAX_RATE_LIMIT_DELAY_MS);
 }
 /**
@@ -176,10 +180,9 @@ const DOC_CACHE_HEADER_VERSION = 2;
  */
 /** @internal Exported for tests only; do not import from app code. */
 exports.CUSTOM_DOC_ID_INITIAL_CHANGE_BYTES = new Uint8Array([
-    133, 111, 74, 131, 181, 94, 251, 69, 1, 47, 0, 8, 0, 0, 0, 0,
-    0, 0, 0, 192, 1, 1, 0, 0, 0, 5, 21, 14, 52, 1, 66, 2,
-    86, 2, 112, 2, 127, 12, 95, 97, 116, 116, 97, 99, 104, 109, 101, 110,
-    116, 115, 1, 127, 2, 127, 0, 127, 0,
+    133, 111, 74, 131, 181, 94, 251, 69, 1, 47, 0, 8, 0, 0, 0, 0, 0, 0, 0, 192, 1,
+    1, 0, 0, 0, 5, 21, 14, 52, 1, 66, 2, 86, 2, 112, 2, 127, 12, 95, 97, 116, 116,
+    97, 99, 104, 109, 101, 110, 116, 115, 1, 127, 2, 127, 0, 127, 0,
 ]);
 /**
  * Returns the hard-coded initial Automerge change bytes used to seed every
@@ -513,7 +516,8 @@ class BaseMindooDB {
         this.tenant = tenant;
         this.store = store;
         this.attachmentStore = attachmentStore;
-        this.chunkSizeBytes = attachmentConfig?.chunkSizeBytes ?? DEFAULT_CHUNK_SIZE_BYTES;
+        this.chunkSizeBytes =
+            attachmentConfig?.chunkSizeBytes ?? DEFAULT_CHUNK_SIZE_BYTES;
         this._isAdminOnlyDb = adminOnlyDb;
         this.timeTravelDate = timeTravelDate;
         this.maxCachedDocs = Math.max(1, Math.floor(documentCacheConfig?.maxEntries ?? DEFAULT_MAX_CACHED_DOCS));
@@ -529,7 +533,8 @@ class BaseMindooDB {
                 : 0;
         this.cacheRestoreLimit = Math.max(1, Math.floor(documentCacheConfig?.restoreLimit ?? this.maxCachedDocs));
         this.cacheRestoreBatchSize = Math.max(1, Math.floor(documentCacheConfig?.restoreBatchSize ?? DEFAULT_RESTORE_BATCH_SIZE));
-        this.reconcileRestoredIndexOnInit = documentCacheConfig?.reconcileRestoredIndexOnInit ?? false;
+        this.reconcileRestoredIndexOnInit =
+            documentCacheConfig?.reconcileRestoredIndexOnInit ?? false;
         this.restoreToL2 = documentCacheConfig?.restoreToL2 ?? false;
         this.warmerBatchSize = Math.max(1, Math.floor(documentCacheConfig?.warmer?.batchSize ?? DEFAULT_WARMER_BATCH_SIZE));
         this.warmerScheduler =
@@ -538,8 +543,7 @@ class BaseMindooDB {
         this.snapshotCooldownMs = Math.max(0, Math.floor(snapshotConfig?.cooldownMs ?? DEFAULT_SNAPSHOT_COOLDOWN_MS));
         // Create logger if not provided (for backward compatibility)
         this.logger =
-            logger ||
-                new logging_1.MindooLogger((0, logging_1.getDefaultLogLevel)(), "BaseMindooDB", true);
+            logger || new logging_1.MindooLogger((0, logging_1.getDefaultLogLevel)(), "BaseMindooDB", true);
         this.performanceCallback = performanceCallback;
         // Summary auto-follow: piggybacks on the coalesced change events (one
         // per sync batch / event-loop turn). Costs a docId check per event for
@@ -617,7 +621,8 @@ class BaseMindooDB {
         let signerUsernameHash = null;
         let creatorUsernameHash = null;
         if (dbId === types_1.USER_DIRECTORY_DB_ID) {
-            signerUsernameHash = await this.resolveSignerUsernameHash(signerPublicKey);
+            signerUsernameHash =
+                await this.resolveSignerUsernameHash(signerPublicKey);
             this.signerUsernameHashByKey.set(signerPublicKey, signerUsernameHash);
             if ((0, builtinDbInvariants_1.isPersonalUserdirectoryDocId)(docId)) {
                 creatorUsernameHash =
@@ -652,7 +657,8 @@ class BaseMindooDB {
         let documentUsernameHash = null;
         let signerUsernameHash = null;
         let creatorUsernameHash = null;
-        if (dbId === types_1.USER_DIRECTORY_DB_ID && (0, builtinDbInvariants_1.isPersonalUserdirectoryDocId)(entry.docId)) {
+        if (dbId === types_1.USER_DIRECTORY_DB_ID &&
+            (0, builtinDbInvariants_1.isPersonalUserdirectoryDocId)(entry.docId)) {
             if (entryType !== "doc_create") {
                 creatorUsernameHash = await this.ensurePersonalDocCreatorHash(entry.docId);
                 signerUsernameHash = await this.ensureSignerUsernameHash(entry.createdByPublicKey);
@@ -675,6 +681,23 @@ class BaseMindooDB {
             creatorUsernameHash,
         });
     }
+    /**
+     * Would the builtin `directory` / `userdirectory` invariant forbid this
+     * entry? For callers that accept entries from somewhere other than a server
+     * — a peer sync — and therefore have to apply the admin/owner rules
+     * themselves.
+     *
+     * Deliberately the same check the load path uses, so an entry admitted here
+     * is one that will also materialize. The alternative, accepting on ingest
+     * and dropping on load, leaves the entry sitting in the store and pushes it
+     * on to the server at the next sync, where it is refused and fails the run.
+     *
+     * Returns false for databases without a builtin invariant, so callers can
+     * ask unconditionally.
+     */
+    async violatesBuiltinWriteInvariant(entry) {
+        return this.shouldSkipLoadedEntryForBuiltin(entry);
+    }
     async ensureSignerUsernameHash(signerKey) {
         if (this.signerUsernameHashByKey.has(signerKey)) {
             return this.signerUsernameHashByKey.get(signerKey) ?? null;
@@ -751,10 +774,12 @@ class BaseMindooDB {
         }
     }
     metadataVisibleAtTimeTravelDate(metadata) {
-        return this.timeTravelDate == null || metadata.createdAt < this.timeTravelDate;
+        return (this.timeTravelDate == null || metadata.createdAt < this.timeTravelDate);
     }
     applyTimeTravelFilter(metadata) {
-        return this.timeTravelDate == null ? metadata : metadata.filter((entry) => this.metadataVisibleAtTimeTravelDate(entry));
+        return this.timeTravelDate == null
+            ? metadata
+            : metadata.filter((entry) => this.metadataVisibleAtTimeTravelDate(entry));
     }
     mergeTimeTravelScanFilters(filters) {
         if (this.timeTravelDate == null) {
@@ -781,7 +806,9 @@ class BaseMindooDB {
     computeCachePrefix() {
         const cacheIdentity = this.store.getCacheIdentity?.() ?? this.store.getId();
         const base = `${this.tenant.getId()}/${cacheIdentity}`;
-        return this.timeTravelDate == null ? base : `${base}/tt/${this.timeTravelDate}`;
+        return this.timeTravelDate == null
+            ? base
+            : `${base}/tt/${this.timeTravelDate}`;
     }
     /**
      * Attach a CacheManager so this DB participates in periodic cache flushing.
@@ -856,7 +883,8 @@ class BaseMindooDB {
             return (0, types_4.sanitizeSummaryConfig)(doc.getData()[types_4.SUMMARY_SETUP_FIELD]) ?? null;
         }
         catch (error) {
-            if (error instanceof errors_1.DocumentNotFoundError || error instanceof errors_1.DocumentDeletedError) {
+            if (error instanceof errors_1.DocumentNotFoundError ||
+                error instanceof errors_1.DocumentDeletedError) {
                 return null;
             }
             throw error;
@@ -920,7 +948,9 @@ class BaseMindooDB {
         // indexing (DirectoryTimeTravelIndex) and its change events interleave
         // with access-control evaluation; admin-only databases hold no user
         // data worth summarizing. Explicit getSummaryStore() calls still work.
-        if (this._isAdminOnlyDb || this.store.getId() === types_1.DIRECTORY_DB_ID || this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
+        if (this._isAdminOnlyDb ||
+            this.store.getId() === types_1.DIRECTORY_DB_ID ||
+            this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
             return;
         }
         const hasSetupChange = changes.some((change) => change.docId === types_4.DB_SETUP_DOC_ID);
@@ -934,7 +964,9 @@ class BaseMindooDB {
     async activateSummaryFromSetupDoc() {
         try {
             const config = await this.getSummarySetup();
-            if (config === null || this.summaryStore || !this.summaryAutoUpdateEnabled) {
+            if (config === null ||
+                this.summaryStore ||
+                !this.summaryAutoUpdateEnabled) {
                 return;
             }
             // No explicit config: the store adopts the setup-document config on
@@ -962,7 +994,8 @@ class BaseMindooDB {
                 do {
                     this.summaryAutoUpdatePending = false;
                     await this.summaryStore?.update();
-                } while (this.summaryAutoUpdatePending && this.summaryAutoUpdateEnabled);
+                } while (this.summaryAutoUpdatePending &&
+                    this.summaryAutoUpdateEnabled);
             }
             catch (error) {
                 this.logger.warn(`Summary auto-update failed: ${error}`);
@@ -1011,10 +1044,11 @@ class BaseMindooDB {
     async getFulltextSetup() {
         try {
             const doc = await this.getDocument(types_4.DB_SETUP_DOC_ID);
-            return (0, types_5.sanitizeFulltextConfig)(doc.getData()[types_5.FULLTEXT_SETUP_FIELD]) ?? null;
+            return ((0, types_5.sanitizeFulltextConfig)(doc.getData()[types_5.FULLTEXT_SETUP_FIELD]) ?? null);
         }
         catch (error) {
-            if (error instanceof errors_1.DocumentNotFoundError || error instanceof errors_1.DocumentDeletedError) {
+            if (error instanceof errors_1.DocumentNotFoundError ||
+                error instanceof errors_1.DocumentDeletedError) {
                 return null;
             }
             throw error;
@@ -1034,7 +1068,7 @@ class BaseMindooDB {
      * resumable backfill — locally and, after sync, on every other replica.
      */
     async setFulltextSetup(config) {
-        const sanitized = config === null ? null : (0, types_5.sanitizeFulltextConfig)(config) ?? {};
+        const sanitized = config === null ? null : ((0, types_5.sanitizeFulltextConfig)(config) ?? {});
         const current = await this.getFulltextSetup();
         if (JSON.stringify(current) === JSON.stringify(sanitized)) {
             return;
@@ -1061,10 +1095,11 @@ class BaseMindooDB {
     async getExtractionSetup() {
         try {
             const doc = await this.getDocument(types_4.DB_SETUP_DOC_ID);
-            return (0, types_6.sanitizeExtractionConfig)(doc.getData()[types_6.EXTRACTION_SETUP_FIELD]) ?? null;
+            return ((0, types_6.sanitizeExtractionConfig)(doc.getData()[types_6.EXTRACTION_SETUP_FIELD]) ?? null);
         }
         catch (error) {
-            if (error instanceof errors_1.DocumentNotFoundError || error instanceof errors_1.DocumentDeletedError) {
+            if (error instanceof errors_1.DocumentNotFoundError ||
+                error instanceof errors_1.DocumentDeletedError) {
                 return null;
             }
             throw error;
@@ -1080,7 +1115,7 @@ class BaseMindooDB {
      * without producing changefeed/sync churn.
      */
     async setExtractionSetup(config) {
-        const sanitized = config === null ? null : (0, types_6.sanitizeExtractionConfig)(config) ?? {};
+        const sanitized = config === null ? null : ((0, types_6.sanitizeExtractionConfig)(config) ?? {});
         const current = await this.getExtractionSetup();
         if (JSON.stringify(current) === JSON.stringify(sanitized)) {
             return;
@@ -1155,7 +1190,9 @@ class BaseMindooDB {
             return;
         }
         // Same system-database exclusion as the summary auto-activation.
-        if (this._isAdminOnlyDb || this.store.getId() === types_1.DIRECTORY_DB_ID || this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
+        if (this._isAdminOnlyDb ||
+            this.store.getId() === types_1.DIRECTORY_DB_ID ||
+            this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
             return;
         }
         const hasSetupChange = changes.some((change) => change.docId === types_4.DB_SETUP_DOC_ID);
@@ -1198,7 +1235,8 @@ class BaseMindooDB {
                 do {
                     this.fulltextAutoUpdatePending = false;
                     await this.fulltextIndex?.update();
-                } while (this.fulltextAutoUpdatePending && this.fulltextAutoUpdateEnabled);
+                } while (this.fulltextAutoUpdatePending &&
+                    this.fulltextAutoUpdateEnabled);
             }
             catch (error) {
                 this.logger.warn(`Full-text auto-update failed: ${error}`);
@@ -1232,7 +1270,11 @@ class BaseMindooDB {
         if (this.changeListeners.size === 0) {
             return;
         }
-        this.pendingChangeNotifications.set(docId, { docId, isDeleted, lastModified });
+        this.pendingChangeNotifications.set(docId, {
+            docId,
+            isDeleted,
+            lastModified,
+        });
         this.scheduleChangeNotification();
     }
     scheduleChangeNotification() {
@@ -1475,9 +1517,7 @@ class BaseMindooDB {
      */
     async flushDirtyDocToCache(store, prefix, docId, internal) {
         const indexEntryIdx = this.getDocIndexPosition(docId);
-        const changeSeq = indexEntryIdx === undefined
-            ? 0
-            : this.index[indexEntryIdx].changeSeq;
+        const changeSeq = indexEntryIdx === undefined ? 0 : this.index[indexEntryIdx].changeSeq;
         const automergeHeads = automerge_adapter_1.Automerge.getHeads(internal.doc);
         // Skip the Automerge.save + L2 write when the exact same state was
         // already flushed (docs marked dirty by a load rather than a change).
@@ -1581,12 +1621,15 @@ class BaseMindooDB {
                 this.processedEntryIds = checkpoint.processedEntryIds;
             }
             this.lastReconciledKeyBagFingerprint =
-                typeof checkpoint.keyBagFingerprint === "string" ? checkpoint.keyBagFingerprint : null;
+                typeof checkpoint.keyBagFingerprint === "string"
+                    ? checkpoint.keyBagFingerprint
+                    : null;
             // Pending untrusted-author map. A checkpoint written before this field
             // existed may hide entries that were silently skipped because their
             // author was unknown at the time - flag it for the one-time heal scan.
             this.pendingUntrustedAuthors.clear();
-            if (checkpoint.pendingUntrustedAuthors && typeof checkpoint.pendingUntrustedAuthors === "object") {
+            if (checkpoint.pendingUntrustedAuthors &&
+                typeof checkpoint.pendingUntrustedAuthors === "object") {
                 this.legacyCheckpointNeedsAuthorTrustScan = false;
                 for (const [publicKey, docIds] of Object.entries(checkpoint.pendingUntrustedAuthors)) {
                     if (!Array.isArray(docIds))
@@ -1617,7 +1660,8 @@ class BaseMindooDB {
                 this.legacyCheckpointNeedsVisibilityTally = true;
             }
             this.syncScanCursors.clear();
-            if (checkpoint.syncScanCursors && typeof checkpoint.syncScanCursors === "object") {
+            if (checkpoint.syncScanCursors &&
+                typeof checkpoint.syncScanCursors === "object") {
                 for (const [key, value] of Object.entries(checkpoint.syncScanCursors)) {
                     if (typeof value?.sourceEpoch === "string" &&
                         typeof value?.targetEpoch === "string" &&
@@ -1626,7 +1670,10 @@ class BaseMindooDB {
                         this.syncScanCursors.set(key, {
                             sourceEpoch: value.sourceEpoch,
                             targetEpoch: value.targetEpoch,
-                            cursor: { receiptOrder: value.cursor.receiptOrder, id: value.cursor.id },
+                            cursor: {
+                                receiptOrder: value.cursor.receiptOrder,
+                                id: value.cursor.id,
+                            },
                         });
                     }
                 }
@@ -1655,7 +1702,8 @@ class BaseMindooDB {
                 this.indexLookup.set(this.index[i].docId, i);
             }
             if (this.index.length > 0 && this.nextChangeSeq <= this.index.length) {
-                this.nextChangeSeq = Math.max(...this.index.map(e => e.changeSeq)) + 1;
+                this.nextChangeSeq =
+                    Math.max(...this.index.map((e) => e.changeSeq)) + 1;
             }
             // Restore automergeHashToEntryId
             if (checkpoint.automergeHashToEntryId) {
@@ -1771,13 +1819,17 @@ class BaseMindooDB {
             lastModified: header.lastModified,
             decryptionKeyId: header.decryptionKeyId,
             isDeleted: header.isDeleted,
-            awaitingWitness: typeof header.awaitingWitness === "boolean" ? header.awaitingWitness : false,
+            awaitingWitness: typeof header.awaitingWitness === "boolean"
+                ? header.awaitingWitness
+                : false,
             witnessed: typeof header.witnessed === "boolean" ? header.witnessed : false,
         };
         return {
             internal,
             persistedChangeSeq: typeof header.changeSeq === "number" ? header.changeSeq : 0,
-            persistedHeads: Array.isArray(header.automergeHeads) ? header.automergeHeads : [],
+            persistedHeads: Array.isArray(header.automergeHeads)
+                ? header.automergeHeads
+                : [],
         };
     }
     /**
@@ -1791,10 +1843,12 @@ class BaseMindooDB {
     async getOrImportPublicKey(publicKey, trustedTime) {
         const directory = await this.tenant.openDirectory();
         let isTrusted = false;
-        if (trustedTime !== undefined && typeof directory.getDirectoryStateAt === "function") {
+        if (trustedTime !== undefined &&
+            typeof directory.getDirectoryStateAt === "function") {
             const node = await directory.getDirectoryStateAt(trustedTime);
             isTrusted =
-                !!(0, DirectoryStateNode_1.grantForSigningKey)(node, publicKey) || publicKey === this.getAdminPublicKey();
+                !!(0, DirectoryStateNode_1.grantForSigningKey)(node, publicKey) ||
+                    publicKey === this.getAdminPublicKey();
         }
         else {
             isTrusted = await directory.validatePublicSigningKey(publicKey);
@@ -1868,7 +1922,11 @@ class BaseMindooDB {
             lastChunkId: a.lastChunkId,
             size: a.size,
         }))
-            .sort((x, y) => x.attachmentId < y.attachmentId ? -1 : x.attachmentId > y.attachmentId ? 1 : 0);
+            .sort((x, y) => x.attachmentId < y.attachmentId
+            ? -1
+            : x.attachmentId > y.attachmentId
+                ? 1
+                : 0);
     }
     /**
      * Verify a store entry's author signature using a pre-imported CryptoKey,
@@ -2002,13 +2060,13 @@ class BaseMindooDB {
             // bypass this via forceChangeSeqBump: two changes within the same
             // millisecond would otherwise be indistinguishable here and the second
             // one would silently vanish from the changefeed.
-            if (!forceChangeSeqBump
-                && existingEntry.lastModified === lastModified
-                && existingEntry.isDeleted === isDeleted
-                && existingEntry.decryptionKeyId === decryptionKeyId
-                && existingEntry.accessState === accessState
-                && existingEntry.awaitingWitness === awaitingWitness
-                && existingEntry.witnessed === witnessed) {
+            if (!forceChangeSeqBump &&
+                existingEntry.lastModified === lastModified &&
+                existingEntry.isDeleted === isDeleted &&
+                existingEntry.decryptionKeyId === decryptionKeyId &&
+                existingEntry.accessState === accessState &&
+                existingEntry.awaitingWitness === awaitingWitness &&
+                existingEntry.witnessed === witnessed) {
                 return; // No change needed
             }
             // Remove from current position; positions after it are repaired lazily
@@ -2046,9 +2104,10 @@ class BaseMindooDB {
             ? Math.min(existingIndex, insertIndex)
             : insertIndex;
         if (shiftedFrom < this.index.length - 1) {
-            this.indexLookupStaleFrom = this.indexLookupStaleFrom === null
-                ? shiftedFrom
-                : Math.min(this.indexLookupStaleFrom, shiftedFrom);
+            this.indexLookupStaleFrom =
+                this.indexLookupStaleFrom === null
+                    ? shiftedFrom
+                    : Math.min(this.indexLookupStaleFrom, shiftedFrom);
         }
         // Reactive support: record the transition for coalesced change events.
         // Reached only when the index actually changed (identical replays
@@ -2246,7 +2305,8 @@ class BaseMindooDB {
                 // not expose a fingerprint so we never silently miss a key
                 // transition.
                 const currentFingerprint = await this.computeCurrentKeyBagFingerprint();
-                const fingerprintMatches = currentFingerprint !== null && currentFingerprint === this.lastReconciledKeyBagFingerprint;
+                const fingerprintMatches = currentFingerprint !== null &&
+                    currentFingerprint === this.lastReconciledKeyBagFingerprint;
                 if (!fingerprintMatches || this.legacyCheckpointNeedsVisibilityTally) {
                     this.legacyCheckpointNeedsVisibilityTally = false;
                     await this.reconcileKeyVisibility();
@@ -2297,10 +2357,14 @@ class BaseMindooDB {
         if (!this.isTimeTravelMode()) {
             return;
         }
-        if (!this.summaryAutoUpdateEnabled || this.summarySetupProbed || this.summaryStore) {
+        if (!this.summaryAutoUpdateEnabled ||
+            this.summarySetupProbed ||
+            this.summaryStore) {
             return;
         }
-        if (this._isAdminOnlyDb || this.store.getId() === types_1.DIRECTORY_DB_ID || this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
+        if (this._isAdminOnlyDb ||
+            this.store.getId() === types_1.DIRECTORY_DB_ID ||
+            this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
             return;
         }
         this.summarySetupProbed = true;
@@ -2331,10 +2395,14 @@ class BaseMindooDB {
      * {@link handleChangesForFulltextAutoUpdate}).
      */
     probeFulltextSetupAtOpen() {
-        if (!this.fulltextAutoUpdateEnabled || this.fulltextSetupProbed || this.fulltextIndex) {
+        if (!this.fulltextAutoUpdateEnabled ||
+            this.fulltextSetupProbed ||
+            this.fulltextIndex) {
             return;
         }
-        if (this._isAdminOnlyDb || this.store.getId() === types_1.DIRECTORY_DB_ID || this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
+        if (this._isAdminOnlyDb ||
+            this.store.getId() === types_1.DIRECTORY_DB_ID ||
+            this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
             return;
         }
         if (this.isTimeTravelMode()) {
@@ -2452,15 +2520,17 @@ class BaseMindooDB {
      * meaning there is nothing to reconcile.
      */
     deriveDocumentVisibilityMetadata(metadata) {
-        const lifecycleEntries = metadata.filter((entry) => entry.entryType === "doc_create"
-            || entry.entryType === "doc_change"
-            || entry.entryType === "doc_delete"
-            || entry.entryType === "doc_undelete"
-            || entry.entryType === "doc_snapshot");
+        const lifecycleEntries = metadata.filter((entry) => entry.entryType === "doc_create" ||
+            entry.entryType === "doc_change" ||
+            entry.entryType === "doc_delete" ||
+            entry.entryType === "doc_undelete" ||
+            entry.entryType === "doc_snapshot");
         if (lifecycleEntries.length === 0) {
             return null;
         }
-        lifecycleEntries.sort((left, right) => left.createdAt !== right.createdAt ? left.createdAt - right.createdAt : left.id.localeCompare(right.id));
+        lifecycleEntries.sort((left, right) => left.createdAt !== right.createdAt
+            ? left.createdAt - right.createdAt
+            : left.id.localeCompare(right.id));
         const replayEntries = metadata.filter((entry) => this.isDocumentReplayEntry(entry));
         const entriesForLastModified = replayEntries.length > 0 ? replayEntries : lifecycleEntries;
         return {
@@ -2544,11 +2614,11 @@ class BaseMindooDB {
         const lifecycleMetadata = await this.scanAllMetadata(this.store);
         const metadataByDoc = new Map();
         for (const entry of lifecycleMetadata) {
-            if (entry.entryType !== "doc_create"
-                && entry.entryType !== "doc_change"
-                && entry.entryType !== "doc_delete"
-                && entry.entryType !== "doc_undelete"
-                && entry.entryType !== "doc_snapshot") {
+            if (entry.entryType !== "doc_create" &&
+                entry.entryType !== "doc_change" &&
+                entry.entryType !== "doc_delete" &&
+                entry.entryType !== "doc_undelete" &&
+                entry.entryType !== "doc_snapshot") {
                 continue;
             }
             const entries = metadataByDoc.get(entry.docId) ?? [];
@@ -2687,11 +2757,11 @@ class BaseMindooDB {
             // next load rebuilds from the store with the now-trusted entries.
             await this.purgeMaterializedDocument(docId);
             const metadata = await this.scanAllMetadata(this.store, { docId });
-            const lifecycleEntries = metadata.filter((entry) => entry.entryType === "doc_create"
-                || entry.entryType === "doc_change"
-                || entry.entryType === "doc_delete"
-                || entry.entryType === "doc_undelete"
-                || entry.entryType === "doc_snapshot");
+            const lifecycleEntries = metadata.filter((entry) => entry.entryType === "doc_create" ||
+                entry.entryType === "doc_change" ||
+                entry.entryType === "doc_delete" ||
+                entry.entryType === "doc_undelete" ||
+                entry.entryType === "doc_snapshot");
             const visibility = this.deriveDocumentVisibilityMetadata(metadata);
             if (!visibility) {
                 continue;
@@ -2722,7 +2792,10 @@ class BaseMindooDB {
      *     directory was synced in a session that never opened this DB).
      */
     async reconcileAuthorTrustAtOpen() {
-        if (this.isTimeTravelMode() || this._isAdminOnlyDb || this.store.getId() === types_1.DIRECTORY_DB_ID || this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
+        if (this.isTimeTravelMode() ||
+            this._isAdminOnlyDb ||
+            this.store.getId() === types_1.DIRECTORY_DB_ID ||
+            this.store.getId() === types_1.USER_DIRECTORY_DB_ID) {
             return;
         }
         if (this.legacyCheckpointNeedsAuthorTrustScan) {
@@ -2775,7 +2848,7 @@ class BaseMindooDB {
             const headEntryIds = this.findActiveReplayHeadEntryIds(replayEntries);
             const hasUnappliedHead = headEntryIds.some((entryId) => {
                 const parsed = (0, idGeneration_1.parseDocEntryId)(entryId);
-                return parsed !== null && !(applied?.has(parsed.automergeHash));
+                return parsed !== null && !applied?.has(parsed.automergeHash);
             });
             if (!hasUnappliedHead) {
                 continue;
@@ -2796,11 +2869,11 @@ class BaseMindooDB {
     async reconcileRestoredIndexWithStore() {
         const lifecycleMetadata = await this.scanAllMetadata(this.store);
         const lifecycleDocIds = Array.from(new Set(lifecycleMetadata
-            .filter((entry) => entry.entryType === "doc_create"
-            || entry.entryType === "doc_change"
-            || entry.entryType === "doc_delete"
-            || entry.entryType === "doc_undelete"
-            || entry.entryType === "doc_snapshot")
+            .filter((entry) => entry.entryType === "doc_create" ||
+            entry.entryType === "doc_change" ||
+            entry.entryType === "doc_delete" ||
+            entry.entryType === "doc_undelete" ||
+            entry.entryType === "doc_snapshot")
             .map((entry) => entry.docId))).sort((left, right) => left.localeCompare(right));
         const missingDocIds = lifecycleDocIds.filter((docId) => !this.indexLookup.has(docId));
         if (missingDocIds.length === 0) {
@@ -2974,7 +3047,9 @@ class BaseMindooDB {
                             // the index, so record it for `getInaccessibleDocumentCount`.
                             this.noteInaccessibleDocument(docId);
                             const existingIndex = this.getDocIndexPosition(docId);
-                            const existing = existingIndex === undefined ? undefined : this.index[existingIndex];
+                            const existing = existingIndex === undefined
+                                ? undefined
+                                : this.index[existingIndex];
                             if (existing?.accessState === "visible") {
                                 await this.purgeMaterializedDocument(docId);
                                 this.updateIndex(docId, existing.lastModified, true, representativeEntry.decryptionKeyId, "inaccessible");
@@ -2992,7 +3067,9 @@ class BaseMindooDB {
                             const mutationEntries = allDocMetadata.filter((e) => this.isDocumentReplayEntry(e));
                             // Snapshots compact replay history but should not change the user-visible
                             // modification time when the original create/change/delete/undelete entries still exist.
-                            const entriesForLastModified = mutationEntries.length > 0 ? mutationEntries : docLifecycleEntries;
+                            const entriesForLastModified = mutationEntries.length > 0
+                                ? mutationEntries
+                                : docLifecycleEntries;
                             const lastModified = Math.max(...entriesForLastModified.map((e) => e.createdAt));
                             const isDeleted = this.computeIsDeletedFromMetadata(allDocMetadata);
                             const { awaitingWitness, witnessed } = (0, storeEntryTime_1.metadataWitnessState)(allDocMetadata);
@@ -3036,11 +3113,11 @@ class BaseMindooDB {
                     const existingIndex = this.getDocIndexPosition(docId);
                     const existing = existingIndex === undefined ? undefined : this.index[existingIndex];
                     if (existing?.accessState === "visible") {
-                        const lifecycleEntriesInBatch = entryMetadataList.filter((entry) => entry.entryType === "doc_create"
-                            || entry.entryType === "doc_change"
-                            || entry.entryType === "doc_delete"
-                            || entry.entryType === "doc_undelete"
-                            || entry.entryType === "doc_snapshot");
+                        const lifecycleEntriesInBatch = entryMetadataList.filter((entry) => entry.entryType === "doc_create" ||
+                            entry.entryType === "doc_change" ||
+                            entry.entryType === "doc_delete" ||
+                            entry.entryType === "doc_undelete" ||
+                            entry.entryType === "doc_snapshot");
                         // Prefer a lifecycle entry from the failing batch for the
                         // key id (they all share the same `decryptionKeyId` for a
                         // doc), then fall back to any entry, then to the existing
@@ -3058,7 +3135,7 @@ class BaseMindooDB {
                         this.cacheManager?.markDirty();
                     }
                     if (!this.supportsCursorScan(this.store)) {
-                        this.processedEntryIds.push(...entryMetadataList.map(em => em.id));
+                        this.processedEntryIds.push(...entryMetadataList.map((em) => em.id));
                     }
                     return;
                 }
@@ -3078,8 +3155,7 @@ class BaseMindooDB {
                 });
             }
         };
-        const documentEntries = Array.from(entriesByDoc.entries())
-            .sort((a, b) => {
+        const documentEntries = Array.from(entriesByDoc.entries()).sort((a, b) => {
             // Prefer the store's receiptOrder (unique, reflects the actual write
             // order) so a cold rebuild assigns changeSeqs in the same order the
             // live session did — `createdAt` has millisecond resolution and ties
@@ -3106,7 +3182,7 @@ class BaseMindooDB {
         // cursor-capable stores track progress via processedEntryCursor, so we
         // avoid growing an unbounded in-memory id list.
         if (!this.supportsCursorScan(this.store)) {
-            this.processedEntryIds.push(...newEntryMetadata.map(em => em.id));
+            this.processedEntryIds.push(...newEntryMetadata.map((em) => em.id));
         }
         this.processedEntryCursor = nextCursor;
         this.cacheMetaDirty = true;
@@ -3498,10 +3574,18 @@ class BaseMindooDB {
         this.logger.info(`Dense sync: ${missingIds.length} entries to transfer ` +
             `(${allNeededArray.length - missingIds.length} already present)`);
         if (missingIds.length === 0) {
-            return { transferred: 0, scanned: allNeededArray.length, cancelled: false };
+            return {
+                transferred: 0,
+                scanned: allNeededArray.length,
+                cancelled: false,
+            };
         }
         if (options?.signal?.aborted) {
-            return { transferred: 0, scanned: allNeededArray.length, cancelled: true };
+            return {
+                transferred: 0,
+                scanned: allNeededArray.length,
+                cancelled: true,
+            };
         }
         // ── Phase 5: transfer missing entries in pages ───────────────────
         const pageSize = options?.pageSize ?? 500;
@@ -3510,7 +3594,13 @@ class BaseMindooDB {
         const rejected = [];
         for (let offset = 0; offset < missingIds.length; offset += pageSize) {
             if (options?.signal?.aborted) {
-                return { transferred, transferredBytes, scanned: allNeededArray.length, cancelled: true, rejected };
+                return {
+                    transferred,
+                    transferredBytes,
+                    scanned: allNeededArray.length,
+                    cancelled: true,
+                    rejected,
+                };
             }
             const batch = missingIds.slice(offset, offset + pageSize);
             const entries = await sourceStore.getEntries(batch);
@@ -3526,7 +3616,9 @@ class BaseMindooDB {
             if (receipts.length > 0 && sourceStore.applyWitnessReceipts) {
                 await sourceStore.applyWitnessReceipts(receipts);
             }
-            const rejectedIds = batchRejected.length > 0 ? new Set(batchRejected.map((entry) => entry.id)) : null;
+            const rejectedIds = batchRejected.length > 0
+                ? new Set(batchRejected.map((entry) => entry.id))
+                : null;
             if (rejectedIds) {
                 rejected.push(...batchRejected);
                 this.logger.warn(`Dense sync: target rejected ${batchRejected.length} of ${entries.length} entries in batch at offset ${offset}`);
@@ -3549,7 +3641,13 @@ class BaseMindooDB {
         }
         this.logger.info(`Dense sync complete: transferred ${transferred} entries` +
             (rejected.length > 0 ? `, ${rejected.length} rejected by target` : ""));
-        return { transferred, transferredBytes, scanned: allNeededArray.length, cancelled: false, rejected };
+        return {
+            transferred,
+            transferredBytes,
+            scanned: allNeededArray.length,
+            cancelled: false,
+            rejected,
+        };
     }
     getStore() {
         return this.store;
@@ -3578,20 +3676,23 @@ class BaseMindooDB {
                 continue;
             }
             const liveDoc = await this.getDocument(ledger.docId).catch(() => null);
-            if (liveDoc?.getAttachments().some((attachment) => attachment.attachmentId === attachmentId)) {
+            if (liveDoc
+                ?.getAttachments()
+                .some((attachment) => attachment.attachmentId === attachmentId)) {
                 await this.clearPendingAttachmentUploadLedger(attachmentId);
                 result.keptCommittedUploads++;
                 continue;
             }
-            const docEntries = await this.scanAllMetadata(this.store, { docId: ledger.docId });
+            const docEntries = await this.scanAllMetadata(this.store, {
+                docId: ledger.docId,
+            });
             const mentionedByHistory = docEntries.some((entry) => entry.attachmentIds?.includes(attachmentId));
             if (mentionedByHistory) {
                 await this.clearPendingAttachmentUploadLedger(attachmentId);
                 result.keptCommittedUploads++;
                 continue;
             }
-            const deletedChunks = await this.getEffectiveAttachmentStore()
-                .deleteEntriesForAttachment?.(ledger.docId, attachmentId) ?? 0;
+            const deletedChunks = (await this.getEffectiveAttachmentStore().deleteEntriesForAttachment?.(ledger.docId, attachmentId)) ?? 0;
             await this.clearPendingAttachmentUploadLedger(attachmentId);
             result.reclaimedUploads++;
             result.reclaimedChunks += deletedChunks;
@@ -3617,7 +3718,11 @@ class BaseMindooDB {
      * @deprecated Use `createDocument({ signingKeyPair, signingKeyPassword, decryptionKeyId })` instead.
      */
     async createDocumentWithSigningKey(signingKeyPair, signingKeyPassword, decryptionKeyId) {
-        return this.createDocumentInternal({ signingKeyPair, signingKeyPassword, decryptionKeyId });
+        return this.createDocumentInternal({
+            signingKeyPair,
+            signingKeyPassword,
+            decryptionKeyId,
+        });
     }
     /**
      * Bulk-create documents in a single append-only store write.
@@ -3655,7 +3760,8 @@ class BaseMindooDB {
         // in the batch must reject the whole call without side effects.
         for (const input of inputs) {
             const options = input ?? {};
-            if ((options.signingKeyPair !== undefined) !== (options.signingKeyPassword !== undefined)) {
+            if ((options.signingKeyPair !== undefined) !==
+                (options.signingKeyPassword !== undefined)) {
                 throw new Error("createDocuments: signingKeyPair and signingKeyPassword must be provided together");
             }
             if (options.id !== undefined && !types_1.CUSTOM_DOC_ID_REGEX.test(options.id)) {
@@ -3839,7 +3945,9 @@ class BaseMindooDB {
         const createUsernameHash = this.usernameHashFromRecord(Object.fromEntries(initialValueEntries));
         // The id is settled before the write gate because it decides which rule
         // applies in `userdirectory`: a personal document is recognized by its id.
-        const docId = useCustomDocId ? options.id : this.generateUnusedDocId(options.idPrefix);
+        const docId = useCustomDocId
+            ? options.id
+            : this.generateUnusedDocId(options.idPrefix);
         await this.assertBuiltinWriteAllowed("doc_create", signerPublicKey, createUsernameHash, docId);
         // Idempotent create: when a caller-provided id already exists locally,
         // return the existing document instead of producing a duplicate doc_create.
@@ -3860,7 +3968,7 @@ class BaseMindooDB {
             }
         }
         const keyId = await this.resolveCreateKeyId(options, docId);
-        this.logger.debug(`Creating document ${docId} with key ${keyId}${useCustomSigningKey ? ' using custom signing key' : ''}${useCustomDocId ? ' with caller-provided id' : ''}`);
+        this.logger.debug(`Creating document ${docId} with key ${keyId}${useCustomSigningKey ? " using custom signing key" : ""}${useCustomDocId ? " with caller-provided id" : ""}`);
         // Build the initial Automerge document and its first change bytes.
         //
         // For UUID7 documents (and unique-by-assertion custom ids) we use the
@@ -3982,7 +4090,10 @@ class BaseMindooDB {
         // a later witness may stamp receivedAt, which resolveCreatorInfo picks up
         // on a cache miss. For the local writer, createdAt is sufficient: the
         // creating device is still granted.
-        this.creatorInfoCache.set(docId, { signingKey: createdByPublicKey, trustedTime: now });
+        this.creatorInfoCache.set(docId, {
+            signingKey: createdByPublicKey,
+            trustedTime: now,
+        });
         // Snapshot of attachments referenced by the freshly created doc (normally
         // empty; the public create API does not add attachments inline).
         const createAttachmentRefs = this.collectAttachmentRefs(newDoc);
@@ -4075,7 +4186,9 @@ class BaseMindooDB {
             : [];
         const signerPublicKey = await this.resolveSignerPublicKey(useCustomSigningKey ? signingKeyPair : undefined);
         const createUsernameHash = this.usernameHashFromRecord(Object.fromEntries(initialValueEntries));
-        const docId = useCustomDocId ? options.id : this.generateUnusedDocId(options.idPrefix);
+        const docId = useCustomDocId
+            ? options.id
+            : this.generateUnusedDocId(options.idPrefix);
         await this.assertBuiltinWriteAllowed("doc_create", signerPublicKey, createUsernameHash, docId);
         const now = (0, timeSource_1.semanticNow)();
         const keyId = await this.resolveCreateKeyId(options, docId);
@@ -4167,7 +4280,10 @@ class BaseMindooDB {
         // a later witness may stamp receivedAt, which resolveCreatorInfo picks up
         // on a cache miss. For the local writer, createdAt is sufficient: the
         // creating device is still granted.
-        this.creatorInfoCache.set(docId, { signingKey: createdByPublicKey, trustedTime: now });
+        this.creatorInfoCache.set(docId, {
+            signingKey: createdByPublicKey,
+            trustedTime: now,
+        });
         const createAttachmentRefs = this.collectAttachmentRefs(finalDoc);
         const entryMetadata = {
             entryType: "doc_create",
@@ -4187,10 +4303,12 @@ class BaseMindooDB {
         };
         // Bind the metadata with the author signature (audit finding #5).
         entryMetadata.metadataSignature = await this.computeEntryMetadataSignature(entryMetadata, useCustomSigningKey ? { signingKeyPair, signingKeyPassword } : undefined);
-        const entries = [{
+        const entries = [
+            {
                 ...entryMetadata,
                 encryptedData: encryptedPayload,
-            }];
+            },
+        ];
         // Register the mapping BEFORE building the follow-up change entry so its
         // dependency resolution finds the doc_create parent.
         this.registerAutomergeHashMapping(docId, createHash, entryId);
@@ -4263,12 +4381,12 @@ class BaseMindooDB {
         // consistent: the state at `timestamp` is the deterministic merge of all
         // complete causal chains up to that instant.
         const relevantEntries = (0, DocumentDagAnalysis_1.pruneToGroundedEntries)(allEntryMetadata
-            .filter((em) => em.createdAt <= timestamp
-            && (em.entryType === "doc_create"
-                || em.entryType === "doc_change"
-                || em.entryType === "doc_delete"
-                || em.entryType === "doc_undelete"
-                || em.entryType === "doc_snapshot"))
+            .filter((em) => em.createdAt <= timestamp &&
+            (em.entryType === "doc_create" ||
+                em.entryType === "doc_change" ||
+                em.entryType === "doc_delete" ||
+                em.entryType === "doc_undelete" ||
+                em.entryType === "doc_snapshot"))
             .sort((a, b) => a.createdAt - b.createdAt));
         if (relevantEntries.length === 0) {
             this.performanceCallback?.onHistoryOperation?.({
@@ -4284,7 +4402,7 @@ class BaseMindooDB {
         const materializationPlan = (0, MaterializationPlanner_1.computeDocumentMaterializationPlan)(docId, relevantEntries);
         let startFromSnapshot = materializationPlan.snapshotEntryId !== null;
         const snapshotMeta = materializationPlan.snapshotEntryId
-            ? (metadataById.get(materializationPlan.snapshotEntryId) || null)
+            ? metadataById.get(materializationPlan.snapshotEntryId) || null
             : null;
         if (startFromSnapshot && !snapshotMeta) {
             this.logger.warn(`Planner referenced snapshot ${materializationPlan.snapshotEntryId} not found in metadata for ${docId}; falling back to replay without snapshot`);
@@ -4363,9 +4481,9 @@ class BaseMindooDB {
         const firstReplayEntry = replayEntries.length > 0 ? replayEntries[0] : null;
         const lastReplayEntry = replayEntries.length > 0 ? replayEntries[replayEntries.length - 1] : null;
         const createdAt = firstReplayEntry?.createdAt ?? snapshotMeta?.createdAt ?? timestamp;
-        const decryptionKeyId = firstReplayEntry?.decryptionKeyId
-            ?? snapshotMeta?.decryptionKeyId
-            ?? "default";
+        const decryptionKeyId = firstReplayEntry?.decryptionKeyId ??
+            snapshotMeta?.decryptionKeyId ??
+            "default";
         const isDeleted = this.computeIsDeletedFromMetadata(relevantEntries);
         const lastModified = lastReplayEntry?.createdAt ?? snapshotMeta?.createdAt ?? timestamp;
         const internalDoc = {
@@ -4396,8 +4514,8 @@ class BaseMindooDB {
     async ingestSealedKeyFromEntries(entries) {
         if (entries.length === 0)
             return;
-        const keyId = entries.find((entry) => entry.entryType === "doc_create")?.decryptionKeyId
-            ?? entries[0].decryptionKeyId;
+        const keyId = entries.find((entry) => entry.entryType === "doc_create")
+            ?.decryptionKeyId ?? entries[0].decryptionKeyId;
         await this.tenant.ingestSealedFromEntries?.(keyId, entries);
     }
     /**
@@ -4411,7 +4529,9 @@ class BaseMindooDB {
         if (!(0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId)) {
             return false;
         }
-        const metas = await this.scanAllMetadata(this.store, { docId: internalDoc.id });
+        const metas = await this.scanAllMetadata(this.store, {
+            docId: internalDoc.id,
+        });
         await this.ingestSealedKeyFromEntries(metas);
         if (await this.tenant.hasDecryptionKey(internalDoc.decryptionKeyId)) {
             return false;
@@ -4454,10 +4574,10 @@ class BaseMindooDB {
             return; // Document has no history
         }
         // Load all entries
-        const entries = await this.store.getEntries(relevantEntries.map(em => em.id));
+        const entries = await this.store.getEntries(relevantEntries.map((em) => em.id));
         await this.ingestSealedKeyFromEntries(entries.length > 0 ? entries : relevantEntries);
         // Build a map for quick lookup
-        const entryMap = new Map(entries.map(e => [e.id, e]));
+        const entryMap = new Map(entries.map((e) => [e.id, e]));
         // Apply changes in order
         let currentDoc = null;
         let createdAt = null;
@@ -4494,7 +4614,11 @@ class BaseMindooDB {
                 decryptionKeyId = entryMetadata.decryptionKeyId;
             }
             // Check document heads before applying change (for non-first entries)
-            const headsBefore = isFirstEntry ? null : (currentDoc ? automerge_adapter_1.Automerge.getHeads(currentDoc) : null);
+            const headsBefore = isFirstEntry
+                ? null
+                : currentDoc
+                    ? automerge_adapter_1.Automerge.getHeads(currentDoc)
+                    : null;
             // Apply change using loadIncremental
             if (currentDoc === null) {
                 throw new Error("currentDoc should not be null at this point");
@@ -4505,12 +4629,15 @@ class BaseMindooDB {
             // For lifecycle terminal entries, always yield
             // For other entries, only yield if heads changed
             let shouldYield = false;
-            if (isFirstEntry || entryMetadata.entryType === "doc_delete" || entryMetadata.entryType === "doc_undelete") {
+            if (isFirstEntry ||
+                entryMetadata.entryType === "doc_delete" ||
+                entryMetadata.entryType === "doc_undelete") {
                 shouldYield = true;
             }
             else {
                 const headsAfter = automerge_adapter_1.Automerge.getHeads(currentDoc);
-                const headsChanged = headsBefore !== null && JSON.stringify(headsBefore) !== JSON.stringify(headsAfter);
+                const headsChanged = headsBefore !== null &&
+                    JSON.stringify(headsBefore) !== JSON.stringify(headsAfter);
                 shouldYield = headsChanged;
             }
             // Register automerge hash mapping
@@ -4739,7 +4866,7 @@ class BaseMindooDB {
             tt: (0, storeEntryTime_1.entryTrustedTime)(meta, now),
             witnessed: meta.receivedAt !== undefined,
         }))
-            .sort((a, b) => (a.tt !== b.tt ? a.tt - b.tt : a.meta.id.localeCompare(b.meta.id)));
+            .sort((a, b) => a.tt !== b.tt ? a.tt - b.tt : a.meta.id.localeCompare(b.meta.id));
         // First trusted-time position touched by a newly-discovered entry. From here
         // the doc's merged state (and every later revision) may have changed, so we
         // re-fold and re-emit the suffix; earlier revisions are unchanged.
@@ -4870,7 +4997,8 @@ class BaseMindooDB {
             };
         }
         // Cache miss: reconstruct from the best in-prefix snapshot + uncovered tail.
-        const prefixSnapshots = docAllMeta.filter((m) => m.entryType === "doc_snapshot" && this.snapshotRootsWithin(m, prefixIds));
+        const prefixSnapshots = docAllMeta.filter((m) => m.entryType === "doc_snapshot" &&
+            this.snapshotRootsWithin(m, prefixIds));
         const planInput = [...prefix, ...prefixSnapshots];
         const plan = (0, MaterializationPlanner_1.computeDocumentMaterializationPlan)(docId, planInput);
         const metadataById = new Map(planInput.map((m) => [m.id, m]));
@@ -4908,7 +5036,8 @@ class BaseMindooDB {
      * use as a seed without pulling in later changes).
      */
     snapshotRootsWithin(snapshotMeta, idSet) {
-        const roots = snapshotMeta.snapshotHeadEntryIds && snapshotMeta.snapshotHeadEntryIds.length > 0
+        const roots = snapshotMeta.snapshotHeadEntryIds &&
+            snapshotMeta.snapshotHeadEntryIds.length > 0
             ? snapshotMeta.snapshotHeadEntryIds
             : snapshotMeta.dependencyIds;
         if (!roots || roots.length === 0) {
@@ -5059,8 +5188,7 @@ class BaseMindooDB {
         if (allEntryMetadata.length > 0) {
             await this.ingestSealedKeyFromEntries(allEntryMetadata);
         }
-        const relevantEntries = allEntryMetadata
-            .filter((entry) => entry.createdAt <= resolvedTimestamp && (0, DocumentDagAnalysis_1.isDagEntry)(entry));
+        const relevantEntries = allEntryMetadata.filter((entry) => entry.createdAt <= resolvedTimestamp && (0, DocumentDagAnalysis_1.isDagEntry)(entry));
         const result = (0, DocumentDagAnalysis_1.computeDocumentDagAnalysis)(docId, relevantEntries, resolvedTimestamp);
         const actorIdByEntryId = await this.decodeAutomergeActorIds(relevantEntries);
         result.entries = result.entries.map((entry) => ({
@@ -5106,7 +5234,9 @@ class BaseMindooDB {
             }
             const decryptedPayload = await this.tenant.decryptPayload(entry.encryptedData, entry.decryptionKeyId);
             const decodedAutomergeChange = automerge_adapter_1.Automerge.decodeChange(decryptedPayload);
-            result.set(metadata.id, typeof decodedAutomergeChange.actor === "string" ? decodedAutomergeChange.actor : null);
+            result.set(metadata.id, typeof decodedAutomergeChange.actor === "string"
+                ? decodedAutomergeChange.actor
+                : null);
         }
         return result;
     }
@@ -5199,8 +5329,7 @@ class BaseMindooDB {
         const startedAt = Date.now();
         const resolvedTimestamp = this.resolveDagTimestamp(timestamp);
         const allEntryMetadata = await this.scanAllMetadata(this.store, { docId });
-        const relevantEntries = allEntryMetadata
-            .filter((entry) => entry.createdAt <= resolvedTimestamp && (0, DocumentDagAnalysis_1.isDagEntry)(entry));
+        const relevantEntries = allEntryMetadata.filter((entry) => entry.createdAt <= resolvedTimestamp && (0, DocumentDagAnalysis_1.isDagEntry)(entry));
         const plan = (0, DocumentDagAnalysis_1.computeBranchMaterializationPlan)(docId, relevantEntries, headEntryId);
         if (!plan) {
             this.performanceCallback?.onHistoryOperation?.({
@@ -5256,7 +5385,9 @@ class BaseMindooDB {
         }
         let decodedChange = null;
         if (metadata.entryType !== "doc_snapshot") {
-            const allEntryMetadata = await this.scanAllMetadata(this.store, { docId });
+            const allEntryMetadata = await this.scanAllMetadata(this.store, {
+                docId,
+            });
             if (allEntryMetadata.length > 0) {
                 await this.ingestSealedKeyFromEntries(allEntryMetadata);
             }
@@ -5330,7 +5461,9 @@ class BaseMindooDB {
             const docStartedAt = Date.now();
             yield { type: "docStart", docId };
             try {
-                const allEntryMetadata = await this.scanAllMetadata(this.store, { docId });
+                const allEntryMetadata = await this.scanAllMetadata(this.store, {
+                    docId,
+                });
                 yield {
                     type: "progress",
                     scannedDocs,
@@ -5731,9 +5864,10 @@ class BaseMindooDB {
             if (typeof entry.receiptOrder !== "number") {
                 continue;
             }
-            maxReceiptOrder = maxReceiptOrder === undefined
-                ? entry.receiptOrder
-                : Math.max(maxReceiptOrder, entry.receiptOrder);
+            maxReceiptOrder =
+                maxReceiptOrder === undefined
+                    ? entry.receiptOrder
+                    : Math.max(maxReceiptOrder, entry.receiptOrder);
         }
         return maxReceiptOrder;
     }
@@ -5799,7 +5933,9 @@ class BaseMindooDB {
                         conflicts.push({
                             docId,
                             location: {
-                                kind: change.entry.dependencyIds.length > 1 ? "merge-deps" : "active-heads",
+                                kind: change.entry.dependencyIds.length > 1
+                                    ? "merge-deps"
+                                    : "active-heads",
                                 entryId: change.entry.id,
                                 createdAt: change.entry.createdAt,
                                 receiptOrder: change.entry.receiptOrder,
@@ -5831,14 +5967,17 @@ class BaseMindooDB {
                 }
                 const pathString = (0, DocumentConflictAnalysis_1.formatDocumentConflictPath)(path);
                 const action = this.getConflictPatchAction(patch);
-                const isConflictPut = action === "put" && (this.isConflictPatch(patch) || this.hasDocumentConflictAtPath(afterDoc, path));
+                const isConflictPut = action === "put" &&
+                    (this.isConflictPatch(patch) ||
+                        this.hasDocumentConflictAtPath(afterDoc, path));
                 if (isConflictPut) {
                     const conflictPath = this.buildDocumentConflictPath(afterDoc, path, options.detail === "values");
                     detectedPaths.set(pathString, conflictPath);
                     activeConflictPaths.set(pathString, conflictPath);
                     continue;
                 }
-                if ((action === "put" || action === "del") && activeConflictPaths.has(pathString)) {
+                if ((action === "put" || action === "del") &&
+                    activeConflictPaths.has(pathString)) {
                     if (this.shouldEmitConflictObservation(change.entry, options)) {
                         resolutions.push({
                             type: "conflictResolved",
@@ -5854,7 +5993,8 @@ class BaseMindooDB {
                     activeConflictPaths.delete(pathString);
                 }
             }
-            if (detectedPaths.size > 0 && this.shouldEmitConflictObservation(change.entry, options)) {
+            if (detectedPaths.size > 0 &&
+                this.shouldEmitConflictObservation(change.entry, options)) {
                 conflicts.push({
                     docId,
                     location: {
@@ -5874,33 +6014,37 @@ class BaseMindooDB {
             doc = afterDoc;
             entriesApplied++;
             const conflictPathCount = conflicts.reduce((count, conflict) => count + conflict.paths.length, 0);
-            if (maxConflictsPerDoc !== undefined && conflictPathCount >= maxConflictsPerDoc) {
+            if (maxConflictsPerDoc !== undefined &&
+                conflictPathCount >= maxConflictsPerDoc) {
                 break;
             }
         }
         // If the document still has multiple active heads after replay, there may
         // be unresolved conflicts with no later patch to surface them. Do one final
         // tree scan in that bounded case so active conflicts are visible.
-        if (plan.activeHeadEntryIds.length > 1
-            && (maxConflictsPerDoc === undefined
-                || conflicts.reduce((count, conflict) => count + conflict.paths.length, 0) < maxConflictsPerDoc)) {
+        if (plan.activeHeadEntryIds.length > 1 &&
+            (maxConflictsPerDoc === undefined ||
+                conflicts.reduce((count, conflict) => count + conflict.paths.length, 0) < maxConflictsPerDoc)) {
             const alreadyReported = new Set(conflicts.flatMap((conflict) => conflict.paths.map((path) => path.pathString)));
             const activeConflictPaths = this.collectDocumentConflictPaths(doc, options.detail === "values").filter((path) => !alreadyReported.has(path.pathString));
             const remainingBudget = maxConflictsPerDoc === undefined
                 ? activeConflictPaths.length
-                : Math.max(0, maxConflictsPerDoc - conflicts.reduce((count, conflict) => count + conflict.paths.length, 0));
+                : Math.max(0, maxConflictsPerDoc -
+                    conflicts.reduce((count, conflict) => count + conflict.paths.length, 0));
             const boundedActiveConflictPaths = activeConflictPaths.slice(0, remainingBudget);
             if (boundedActiveConflictPaths.length > 0) {
                 const activeHeadEntries = plan.activeHeadEntryIds
                     .map((entryId) => plan.replayById.get(entryId))
                     .filter((entry) => entry !== undefined);
-                const latestActiveHeadEntry = activeHeadEntries
-                    .sort((left, right) => {
+                const latestActiveHeadEntry = activeHeadEntries.sort((left, right) => {
                     const leftOrder = left.receiptOrder ?? left.createdAt;
                     const rightOrder = right.receiptOrder ?? right.createdAt;
-                    return leftOrder !== rightOrder ? rightOrder - leftOrder : right.id.localeCompare(left.id);
+                    return leftOrder !== rightOrder
+                        ? rightOrder - leftOrder
+                        : right.id.localeCompare(left.id);
                 })[0];
-                if (options.includeUnresolvedFromBefore || this.shouldEmitConflictObservation(latestActiveHeadEntry, options)) {
+                if (options.includeUnresolvedFromBefore ||
+                    this.shouldEmitConflictObservation(latestActiveHeadEntry, options)) {
                     conflicts.push({
                         docId,
                         location: {
@@ -5932,8 +6076,8 @@ class BaseMindooDB {
         if (!entry) {
             return options.includeUnresolvedFromBefore === true;
         }
-        if (typeof entry.receiptOrder === "number"
-            && typeof options.since.storeReceiptOrderAsOf === "number") {
+        if (typeof entry.receiptOrder === "number" &&
+            typeof options.since.storeReceiptOrderAsOf === "number") {
             return entry.receiptOrder > options.since.storeReceiptOrderAsOf;
         }
         return entry.createdAt > options.since.takenAt;
@@ -6245,13 +6389,15 @@ class BaseMindooDB {
      * @returns JSON-safe scalar, array/object subset, or compact placeholder.
      */
     toJsonSafeConflictValue(value, depth = 0, seen = new WeakSet()) {
-        if (value === null
-            || typeof value === "string"
-            || typeof value === "number"
-            || typeof value === "boolean") {
+        if (value === null ||
+            typeof value === "string" ||
+            typeof value === "number" ||
+            typeof value === "boolean") {
             return value;
         }
-        if (value === undefined || typeof value === "function" || typeof value === "symbol") {
+        if (value === undefined ||
+            typeof value === "function" ||
+            typeof value === "symbol") {
             return undefined;
         }
         if (value instanceof Uint8Array) {
@@ -6268,7 +6414,9 @@ class BaseMindooDB {
         }
         seen.add(value);
         if (Array.isArray(value)) {
-            return value.slice(0, 50).map((item) => this.toJsonSafeConflictValue(item, depth + 1, seen));
+            return value
+                .slice(0, 50)
+                .map((item) => this.toJsonSafeConflictValue(item, depth + 1, seen));
         }
         const result = {};
         for (const [key, child] of Object.entries(value).slice(0, 50)) {
@@ -6379,9 +6527,9 @@ class BaseMindooDB {
         // and, on a time-travel instance, already reflects existence and deletion
         // at the cutoff (every scan feeding it is bounded by timeTravelDate). So
         // the scan below only has to supply dates, never lifecycle state.
-        const candidates = this.index.filter((entry) => entry.accessState === "visible"
-            && matchesLifecycle(entry.isDeleted)
-            && (idPrefix === undefined || (0, idGeneration_1.matchesDocIdPrefix)(entry.docId, idPrefix)));
+        const candidates = this.index.filter((entry) => entry.accessState === "visible" &&
+            matchesLifecycle(entry.isDeleted) &&
+            (idPrefix === undefined || (0, idGeneration_1.matchesDocIdPrefix)(entry.docId, idPrefix)));
         if (candidates.length === 0) {
             return [];
         }
@@ -6463,11 +6611,13 @@ class BaseMindooDB {
                 continue;
             }
             const createEntry = lifecycleEntries.find((entry) => entry.entryType === "doc_create");
-            if (createEntry && !(await this.tenant.hasDecryptionKey(createEntry.decryptionKeyId))) {
+            if (createEntry &&
+                !(await this.tenant.hasDecryptionKey(createEntry.decryptionKeyId))) {
                 continue;
             }
-            const terminalEntries = lifecycleEntries.filter((entry) => (entry.entryType === "doc_delete" || entry.entryType === "doc_undelete")
-                && entry.createdAt <= timestamp);
+            const terminalEntries = lifecycleEntries.filter((entry) => (entry.entryType === "doc_delete" ||
+                entry.entryType === "doc_undelete") &&
+                entry.createdAt <= timestamp);
             if (terminalEntries.length === 0) {
                 // Fast path (the vast majority of documents): no delete/undelete ever
                 // happened up to `timestamp`, so the document is alive and we never
@@ -6483,9 +6633,12 @@ class BaseMindooDB {
             // decided by id tie-break, which can disagree with causality and with
             // getDocumentAtTimestamp for the same instant. The extra per-doc
             // metadata scan is bounded by the number of ever-deleted documents.
-            const allEntryMetadata = await this.scanAllMetadata(this.store, { docId });
-            const relevantEntries = (0, DocumentDagAnalysis_1.pruneToGroundedEntries)(allEntryMetadata.filter((entry) => entry.createdAt <= timestamp
-                && (this.isDocumentReplayEntry(entry) || entry.entryType === "doc_snapshot")));
+            const allEntryMetadata = await this.scanAllMetadata(this.store, {
+                docId,
+            });
+            const relevantEntries = (0, DocumentDagAnalysis_1.pruneToGroundedEntries)(allEntryMetadata.filter((entry) => entry.createdAt <= timestamp &&
+                (this.isDocumentReplayEntry(entry) ||
+                    entry.entryType === "doc_snapshot")));
             if (!this.computeIsDeletedFromMetadata(relevantEntries)) {
                 docIds.push(docId);
             }
@@ -6517,7 +6670,8 @@ class BaseMindooDB {
         // One gate call per document id: inside `userdirectory` the applicable rule
         // depends on the id (personal documents are owned by their creator), so a
         // single batch-wide check would deny an owner deleting their own data.
-        if ((0, builtinDbInvariants_1.hasBuiltinWriteInvariant)(this.effectiveBuiltinDbId()) || this._isAdminOnlyDb) {
+        if ((0, builtinDbInvariants_1.hasBuiltinWriteInvariant)(this.effectiveBuiltinDbId()) ||
+            this._isAdminOnlyDb) {
             for (const docId of docIds) {
                 await this.assertLifecycleMutationAllowed("doc_delete", options.signingKeyPair, options.signingKeyPassword, undefined, docId);
             }
@@ -6625,7 +6779,9 @@ class BaseMindooDB {
             mutableDoc._lastModified = now;
         }));
         if (automerge_adapter_1.Automerge.getHeads(newDoc).every((head) => headsBefore.includes(head))) {
-            newDoc = automerge_adapter_1.Automerge.emptyChange(newDoc, { time: now });
+            newDoc = automerge_adapter_1.Automerge.emptyChange(newDoc, {
+                time: now,
+            });
         }
         const changeBytes = automerge_adapter_1.Automerge.getLastLocalChange(newDoc);
         if (!changeBytes) {
@@ -6669,7 +6825,9 @@ class BaseMindooDB {
             signature,
             originalSize: changeBytes.length,
             encryptedSize: encryptedPayload.length,
-            attachmentRefs: lifecycleAttachmentRefs.length > 0 ? lifecycleAttachmentRefs : undefined,
+            attachmentRefs: lifecycleAttachmentRefs.length > 0
+                ? lifecycleAttachmentRefs
+                : undefined,
             entryVersion: types_1.CURRENT_STORE_ENTRY_VERSION,
         };
         // Bind the metadata with the author signature (audit finding #5).
@@ -6716,7 +6874,7 @@ class BaseMindooDB {
      * per-document flush-before-evict write storm during large batches.
      */
     async applyLifecycleEntryLocally(prepared, options) {
-        const { internalDoc, entryType, newDoc, automergeHash, entryId, entryMetadata, now } = prepared;
+        const { internalDoc, entryType, newDoc, automergeHash, entryId, entryMetadata, now, } = prepared;
         const docId = internalDoc.id;
         this.registerAutomergeHashMapping(docId, automergeHash, entryId);
         // Keep the loaded document, cache, index, and sync dirty tracking in step
@@ -6726,10 +6884,12 @@ class BaseMindooDB {
         internalDoc.lastModified = now;
         // The delete/undelete entry just written is versioned and un-witnessed, so
         // the document is awaiting witness until pushed + stamped with a receipt.
-        internalDoc.awaitingWitness = (0, storeEntryTime_1.isProvisional)(entryMetadata) || (internalDoc.awaitingWitness ?? false);
+        internalDoc.awaitingWitness =
+            (0, storeEntryTime_1.isProvisional)(entryMetadata) || (internalDoc.awaitingWitness ?? false);
         // The doc is now witness-era (we just wrote a versioned entry), so it is
         // witnessed iff it is no longer awaiting a receipt.
-        internalDoc.witnessed = (0, storeEntryTime_1.isVersioned)(entryMetadata) && !internalDoc.awaitingWitness;
+        internalDoc.witnessed =
+            (0, storeEntryTime_1.isVersioned)(entryMetadata) && !internalDoc.awaitingWitness;
         // Force the changeSeq bump: a lifecycle entry was just written, so the
         // changefeed must re-emit the doc even if all tracked index fields happen
         // to match the previous state in the same millisecond.
@@ -6751,7 +6911,7 @@ class BaseMindooDB {
      */
     async deleteDocInternal(docId, signingKeyPair, signingKeyPassword, bypassPrecheck) {
         const useCustomSigningKey = signingKeyPair !== undefined && signingKeyPassword !== undefined;
-        this.logger.debug(`Deleting document ${docId}${useCustomSigningKey ? ' using custom signing key' : ''}`);
+        this.logger.debug(`Deleting document ${docId}${useCustomSigningKey ? " using custom signing key" : ""}`);
         await this.assertLifecycleMutationAllowed("doc_delete", signingKeyPair, signingKeyPassword, undefined, docId);
         // Get current document
         const internalDoc = await this.loadDocumentInternal(docId);
@@ -6763,7 +6923,7 @@ class BaseMindooDB {
     }
     async undeleteDocInternal(docId, signingKeyPair, signingKeyPassword, bypassPrecheck) {
         const useCustomSigningKey = signingKeyPair !== undefined && signingKeyPassword !== undefined;
-        this.logger.debug(`Undeleting document ${docId}${useCustomSigningKey ? ' using custom signing key' : ''}`);
+        this.logger.debug(`Undeleting document ${docId}${useCustomSigningKey ? " using custom signing key" : ""}`);
         const internalDoc = await this.loadDocumentInternal(docId);
         if (!internalDoc) {
             throw new errors_1.DocumentNotFoundError(docId);
@@ -6780,7 +6940,10 @@ class BaseMindooDB {
         return this.changeDocInternal(doc, changeFunc, options.signingKeyPair, options.signingKeyPassword, options.bypassAccessControlPrecheck);
     }
     async changeDocWithSigningKey(doc, changeFunc, signingKeyPair, signingKeyPassword) {
-        return this.changeDoc(doc, changeFunc, { signingKeyPair, signingKeyPassword });
+        return this.changeDoc(doc, changeFunc, {
+            signingKeyPair,
+            signingKeyPassword,
+        });
     }
     async applyTextPatch(doc, patch) {
         this.assertWritable("applyTextPatch");
@@ -7182,7 +7345,7 @@ class BaseMindooDB {
             throw new Error("changeDoc: signingKeyPair and signingKeyPassword must be provided together");
         }
         const useCustomKey = signingKeyPair !== undefined && signingKeyPassword !== undefined;
-        this.logger.debug(`===== ${useCustomKey ? 'changeDocWithSigningKey' : 'changeDoc'} called for document ${docId} =====`);
+        this.logger.debug(`===== ${useCustomKey ? "changeDocWithSigningKey" : "changeDoc"} called for document ${docId} =====`);
         // Get internal document from cache or load it
         let internalDoc = this.getCachedDocument(docId);
         if (!internalDoc) {
@@ -7192,7 +7355,7 @@ class BaseMindooDB {
                 throw new errors_1.DocumentNotFoundError(docId);
             }
             internalDoc = loadedDoc;
-            this.logger.debug(`Successfully loaded document ${docId} from store for ${useCustomKey ? 'changeDocWithSigningKey' : 'changeDoc'}`);
+            this.logger.debug(`Successfully loaded document ${docId} from store for ${useCustomKey ? "changeDocWithSigningKey" : "changeDoc"}`);
         }
         else {
             this.logger.debug(`Document ${docId} found in cache`);
@@ -7210,7 +7373,7 @@ class BaseMindooDB {
         // Automerge.change() requires synchronous modifications, so we'll:
         // 1. Execute the async callback to do any async work (like signing)
         // 2. Apply document modifications synchronously within Automerge.change()
-        // 
+        //
         // We use a two-phase approach: the callback can do async work and collect
         // what needs to be changed, then we apply those changes in Automerge.change()
         const pendingChanges = new Map();
@@ -7246,16 +7409,16 @@ class BaseMindooDB {
             isSealed: () => (0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId),
             getRecipients: () => (0, recipients_1.resolveRecipientsFromPayload)(internalDoc.doc, internalDoc.sealedRecipients),
             getRecipientEpoch: () => internalDoc.sealedRecipients?.epoch ?? 0,
-            isEncryptedFor: (users) => (0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId)
-                && (0, recipients_1.isPayloadEncryptedFor)(internalDoc.doc, internalDoc.sealedRecipients, Array.isArray(users) ? users : [users]),
+            isEncryptedFor: (users) => (0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId) &&
+                (0, recipients_1.isPayloadEncryptedFor)(internalDoc.doc, internalDoc.sealedRecipients, Array.isArray(users) ? users : [users]),
             getHeads: () => automerge_adapter_1.Automerge.getHeads(internalDoc.doc),
             getData: () => {
                 // Return a proxy that collects property assignments and deletions
                 const currentData = internalDoc.doc;
                 return new Proxy(currentData, {
                     set: (target, prop, value) => {
-                        throwIfCallbackInactive('set property');
-                        if (typeof prop === 'string') {
+                        throwIfCallbackInactive("set property");
+                        if (typeof prop === "string") {
                             // If this property was marked for deletion, remove it from deletions
                             pendingDeletions.delete(prop);
                             // Track the change
@@ -7266,8 +7429,8 @@ class BaseMindooDB {
                         return true;
                     },
                     deleteProperty: (target, prop) => {
-                        throwIfCallbackInactive('delete property');
-                        if (typeof prop === 'string') {
+                        throwIfCallbackInactive("delete property");
+                        if (typeof prop === "string") {
                             // Mark for deletion
                             pendingDeletions.add(prop);
                             // Remove from pending changes if it was there
@@ -7279,55 +7442,55 @@ class BaseMindooDB {
                     },
                     get: (target, prop) => {
                         // If marked for deletion, return undefined
-                        if (typeof prop === 'string' && pendingDeletions.has(prop)) {
+                        if (typeof prop === "string" && pendingDeletions.has(prop)) {
                             return undefined;
                         }
                         // Check pending changes first, then target
-                        if (typeof prop === 'string' && pendingChanges.has(prop)) {
+                        if (typeof prop === "string" && pendingChanges.has(prop)) {
                             return pendingChanges.get(prop);
                         }
                         return target[prop];
                     },
                     has: (target, prop) => {
                         // If marked for deletion, it doesn't exist
-                        if (typeof prop === 'string' && pendingDeletions.has(prop)) {
+                        if (typeof prop === "string" && pendingDeletions.has(prop)) {
                             return false;
                         }
                         // Check pending changes first, then target
-                        if (typeof prop === 'string' && pendingChanges.has(prop)) {
+                        if (typeof prop === "string" && pendingChanges.has(prop)) {
                             return true;
                         }
                         return prop in target;
-                    }
+                    },
                 });
             },
             // ========== Attachment Write Methods (work in changeDoc context) ==========
             addAttachment: async (fileData, fileName, mimeType, keyId) => {
-                throwIfCallbackInactive('addAttachment');
+                throwIfCallbackInactive("addAttachment");
                 const decryptionKeyId = keyId || internalDoc.decryptionKeyId;
                 const ref = await db.addAttachmentInternal(docId, fileData, fileName, mimeType, decryptionKeyId, now);
                 pendingAttachmentAdditions.push(ref);
                 return ref;
             },
             addAttachmentStream: async (dataStream, fileName, mimeType, keyId) => {
-                throwIfCallbackInactive('addAttachmentStream');
+                throwIfCallbackInactive("addAttachmentStream");
                 const decryptionKeyId = keyId || internalDoc.decryptionKeyId;
                 const ref = await db.addAttachmentStreamInternal(docId, dataStream, fileName, mimeType, decryptionKeyId, now);
                 pendingAttachmentAdditions.push(ref);
                 return ref;
             },
             removeAttachment: async (attachmentId) => {
-                throwIfCallbackInactive('removeAttachment');
+                throwIfCallbackInactive("removeAttachment");
                 // Check if attachment exists (either in current doc or pending additions)
                 const payload = internalDoc.doc;
                 const existingAttachments = payload._attachments || [];
-                const existsInDoc = existingAttachments.some(a => a.attachmentId === attachmentId);
-                const existsInPending = pendingAttachmentAdditions.some(a => a.attachmentId === attachmentId);
+                const existsInDoc = existingAttachments.some((a) => a.attachmentId === attachmentId);
+                const existsInPending = pendingAttachmentAdditions.some((a) => a.attachmentId === attachmentId);
                 if (!existsInDoc && !existsInPending) {
                     throw new Error(`Attachment ${attachmentId} not found in document ${docId}`);
                 }
                 // If it was added in this same changeDoc call, just remove from pending
-                const pendingIndex = pendingAttachmentAdditions.findIndex(a => a.attachmentId === attachmentId);
+                const pendingIndex = pendingAttachmentAdditions.findIndex((a) => a.attachmentId === attachmentId);
                 if (pendingIndex >= 0) {
                     const [pendingRef] = pendingAttachmentAdditions.splice(pendingIndex, 1);
                     await db.cleanupIncompleteAttachmentUpload(docId, pendingRef.attachmentId);
@@ -7362,28 +7525,33 @@ class BaseMindooDB {
              *   this changeDoc call), or when invoked after the callback finished.
              */
             setAttachmentExtractedText: (attachmentId, result) => {
-                throwIfCallbackInactive('setAttachmentExtractedText');
+                throwIfCallbackInactive("setAttachmentExtractedText");
                 const payload = internalDoc.doc;
                 const existingAttachments = payload._attachments || [];
-                const existsInDoc = existingAttachments.some((a) => a.attachmentId === attachmentId && !pendingAttachmentRemovals.has(attachmentId));
+                const existsInDoc = existingAttachments.some((a) => a.attachmentId === attachmentId &&
+                    !pendingAttachmentRemovals.has(attachmentId));
                 const existsInPending = pendingAttachmentAdditions.some((a) => a.attachmentId === attachmentId);
                 if (!existsInDoc && !existsInPending) {
                     throw new Error(`Attachment ${attachmentId} not found in document ${docId}`);
                 }
-                const cappedText = typeof result.text === "string" && result.text.length > types_1.ATTACHMENT_EXTRACTED_TEXT_MAX_CHARS
+                const cappedText = typeof result.text === "string" &&
+                    result.text.length > types_1.ATTACHMENT_EXTRACTED_TEXT_MAX_CHARS
                     ? result.text.slice(0, types_1.ATTACHMENT_EXTRACTED_TEXT_MAX_CHARS)
                     : result.text;
-                pendingAttachmentTextUpdates.set(attachmentId, { ...result, text: cappedText });
+                pendingAttachmentTextUpdates.set(attachmentId, {
+                    ...result,
+                    text: cappedText,
+                });
             },
             appendToAttachment: async (attachmentId, data) => {
-                throwIfCallbackInactive('appendToAttachment');
+                throwIfCallbackInactive("appendToAttachment");
                 // Find the attachment reference
                 const payload = internalDoc.doc;
                 const existingAttachments = payload._attachments || [];
-                let ref = existingAttachments.find(a => a.attachmentId === attachmentId);
+                let ref = existingAttachments.find((a) => a.attachmentId === attachmentId);
                 // Also check pending additions
                 if (!ref) {
-                    ref = pendingAttachmentAdditions.find(a => a.attachmentId === attachmentId);
+                    ref = pendingAttachmentAdditions.find((a) => a.attachmentId === attachmentId);
                 }
                 if (!ref) {
                     throw new Error(`Attachment ${attachmentId} not found in document ${docId}`);
@@ -7403,7 +7571,10 @@ class BaseMindooDB {
                     existingAppend.sizeIncrease += sizeIncrease;
                 }
                 else {
-                    pendingAttachmentAppends.set(attachmentId, { lastChunkId, sizeIncrease });
+                    pendingAttachmentAppends.set(attachmentId, {
+                        lastChunkId,
+                        sizeIncrease,
+                    });
                 }
             },
             // ========== Attachment Read Methods (also work in changeDoc context) ==========
@@ -7411,7 +7582,7 @@ class BaseMindooDB {
                 const payload = internalDoc.doc;
                 const existing = payload._attachments || [];
                 // Filter out removals and add pending additions
-                const filtered = existing.filter(a => !pendingAttachmentRemovals.has(a.attachmentId));
+                const filtered = existing.filter((a) => !pendingAttachmentRemovals.has(a.attachmentId));
                 return [...filtered, ...pendingAttachmentAdditions];
             },
             getAttachment: async (attachmentId) => {
@@ -7459,14 +7630,14 @@ class BaseMindooDB {
                     const attachments = automergeDoc._attachments;
                     // Remove attachments marked for removal
                     for (const attachmentId of pendingAttachmentRemovals) {
-                        const index = attachments.findIndex(a => a.attachmentId === attachmentId);
+                        const index = attachments.findIndex((a) => a.attachmentId === attachmentId);
                         if (index >= 0) {
                             attachments.splice(index, 1);
                         }
                     }
                     // Apply appends (update lastChunkId and size)
-                    for (const [attachmentId, { lastChunkId, sizeIncrease }] of pendingAttachmentAppends) {
-                        const attachment = attachments.find(a => a.attachmentId === attachmentId);
+                    for (const [attachmentId, { lastChunkId, sizeIncrease },] of pendingAttachmentAppends) {
+                        const attachment = attachments.find((a) => a.attachmentId === attachmentId);
                         if (attachment) {
                             attachment.lastChunkId = lastChunkId;
                             attachment.size += sizeIncrease;
@@ -7478,7 +7649,7 @@ class BaseMindooDB {
                     }
                     // Apply extraction results (setAttachmentExtractedText)
                     for (const [attachmentId, update] of pendingAttachmentTextUpdates) {
-                        const attachment = attachments.find(a => a.attachmentId === attachmentId);
+                        const attachment = attachments.find((a) => a.attachmentId === attachmentId);
                         if (!attachment) {
                             continue; // removed in the same changeDoc call
                         }
@@ -7525,7 +7696,9 @@ class BaseMindooDB {
                 useCustomKey: Boolean(useCustomKey),
                 signingKeyPair,
                 signingKeyPassword,
-                successMessage: useCustomKey ? "changed with custom signing key" : "changed",
+                successMessage: useCustomKey
+                    ? "changed with custom signing key"
+                    : "changed",
                 attachmentIds: pendingAttachmentAdditions.map((ref) => ref.attachmentId),
                 bypassPrecheck,
                 recipients: internalDoc.sealedRecipients,
@@ -7562,13 +7735,13 @@ class BaseMindooDB {
         }
     }
     validateJsonPatch(patch) {
-        const operationCount = (patch.set?.length ?? 0)
-            + (patch.unset?.length ?? 0)
-            + (patch.listDelete?.length ?? 0)
-            + (patch.listInsert?.length ?? 0)
-            + (patch.textSplice?.length ?? 0)
-            + (patch.textMark?.length ?? 0)
-            + (patch.textUnmark?.length ?? 0);
+        const operationCount = (patch.set?.length ?? 0) +
+            (patch.unset?.length ?? 0) +
+            (patch.listDelete?.length ?? 0) +
+            (patch.listInsert?.length ?? 0) +
+            (patch.textSplice?.length ?? 0) +
+            (patch.textMark?.length ?? 0) +
+            (patch.textUnmark?.length ?? 0);
         if (operationCount === 0) {
             throw new Error("JSON patch must include at least one operation");
         }
@@ -7583,7 +7756,8 @@ class BaseMindooDB {
             if (!Number.isInteger(operation.index) || operation.index < 0) {
                 throw new Error("JSON listDelete index must be a non-negative integer");
             }
-            if (!Number.isInteger(operation.deleteCount) || operation.deleteCount < 0) {
+            if (!Number.isInteger(operation.deleteCount) ||
+                operation.deleteCount < 0) {
                 throw new Error("JSON listDelete deleteCount must be a non-negative integer");
             }
         }
@@ -7601,10 +7775,12 @@ class BaseMindooDB {
             if (!Number.isInteger(operation.index) || operation.index < 0) {
                 throw new Error("JSON textSplice index must be a non-negative integer");
             }
-            if (!Number.isInteger(operation.deleteCount) || operation.deleteCount < 0) {
+            if (!Number.isInteger(operation.deleteCount) ||
+                operation.deleteCount < 0) {
                 throw new Error("JSON textSplice deleteCount must be a non-negative integer");
             }
-            if (operation.insert !== undefined && typeof operation.insert !== "string") {
+            if (operation.insert !== undefined &&
+                typeof operation.insert !== "string") {
                 throw new Error("JSON textSplice insert must be a string");
             }
         }
@@ -7616,7 +7792,9 @@ class BaseMindooDB {
             if (!Number.isInteger(operation.length) || operation.length <= 0) {
                 throw new Error("JSON textMark length must be a positive integer");
             }
-            if (!operation.marks || typeof operation.marks !== "object" || Array.isArray(operation.marks)) {
+            if (!operation.marks ||
+                typeof operation.marks !== "object" ||
+                Array.isArray(operation.marks)) {
                 throw new Error("JSON textMark marks must be an object");
             }
         }
@@ -7628,7 +7806,8 @@ class BaseMindooDB {
             if (!Number.isInteger(operation.length) || operation.length <= 0) {
                 throw new Error("JSON textUnmark length must be a positive integer");
             }
-            if (!Array.isArray(operation.names) || operation.names.some((name) => typeof name !== "string" || !name)) {
+            if (!Array.isArray(operation.names) ||
+                operation.names.some((name) => typeof name !== "string" || !name)) {
                 throw new Error("JSON textUnmark names must be non-empty strings");
             }
         }
@@ -7647,7 +7826,8 @@ class BaseMindooDB {
             this.validateRichTextSpans(patch.spans);
             return;
         }
-        if (!Array.isArray(patch.spansSequence) || patch.spansSequence.length === 0) {
+        if (!Array.isArray(patch.spansSequence) ||
+            patch.spansSequence.length === 0) {
             throw new Error("Rich-text patch spansSequence must be a non-empty array");
         }
         for (const spans of patch.spansSequence) {
@@ -7669,7 +7849,9 @@ class BaseMindooDB {
                 continue;
             }
             if (span.type === "block") {
-                if (!span.value || typeof span.value !== "object" || Array.isArray(span.value)) {
+                if (!span.value ||
+                    typeof span.value !== "object" ||
+                    Array.isArray(span.value)) {
                     throw new Error("Rich-text block span value must be an object");
                 }
                 continue;
@@ -7705,7 +7887,9 @@ class BaseMindooDB {
                 if (!Number.isInteger(markRange.length) || markRange.length <= 0) {
                     throw new Error("Rich-text mark range length must be a positive integer");
                 }
-                if (!markRange.marks || typeof markRange.marks !== "object" || Array.isArray(markRange.marks)) {
+                if (!markRange.marks ||
+                    typeof markRange.marks !== "object" ||
+                    Array.isArray(markRange.marks)) {
                     throw new Error("Rich-text mark range marks must be an object");
                 }
             }
@@ -8032,7 +8216,7 @@ class BaseMindooDB {
         }
     }
     async persistDocumentChange(options) {
-        const { internalDoc, newDoc, now, headsBeforeChange, useCustomKey, signingKeyPair, signingKeyPassword, successMessage, attachmentIds, bypassPrecheck, recipients } = options;
+        const { internalDoc, newDoc, now, headsBeforeChange, useCustomKey, signingKeyPair, signingKeyPassword, successMessage, attachmentIds, bypassPrecheck, recipients, } = options;
         const docId = internalDoc.id;
         this.logger.debug(`Getting change bytes from document ${docId}`);
         const changesSincePreviousHeads = headsBeforeChange
@@ -8063,9 +8247,10 @@ class BaseMindooDB {
         const { internalDoc, newDoc, now, changeBytesList, headsBeforeChange, useCustomKey, signingKeyPair, signingKeyPassword, successMessage, attachmentIds, bypassPrecheck, recipients, } = options;
         const docId = internalDoc.id;
         await this.assertCurrentSealedAccess(internalDoc);
-        const resolvedChangeBytesList = changeBytesList ?? (headsBeforeChange
-            ? automerge_adapter_1.Automerge.getChangesSince(newDoc, headsBeforeChange)
-            : []);
+        const resolvedChangeBytesList = changeBytesList ??
+            (headsBeforeChange
+                ? automerge_adapter_1.Automerge.getChangesSince(newDoc, headsBeforeChange)
+                : []);
         if (resolvedChangeBytesList.length === 0) {
             throw new Error("No Automerge changes to persist");
         }
@@ -8118,12 +8303,13 @@ class BaseMindooDB {
         internalDoc.lastModified = now;
         // The change entries just written are versioned and un-witnessed, so the
         // document is awaiting witness (until pushed + stamped with a receipt).
-        internalDoc.awaitingWitness = entries.some(storeEntryTime_1.isProvisional) || (internalDoc.awaitingWitness ?? false);
+        internalDoc.awaitingWitness =
+            entries.some(storeEntryTime_1.isProvisional) || (internalDoc.awaitingWitness ?? false);
         // `versioned` is sticky: any versioned entry (new or already reflected by a
         // prior awaiting/witnessed flag) keeps the doc in the witness-aware era.
-        const versioned = entries.some(storeEntryTime_1.isVersioned)
-            || internalDoc.awaitingWitness
-            || (internalDoc.witnessed ?? false);
+        const versioned = entries.some(storeEntryTime_1.isVersioned) ||
+            internalDoc.awaitingWitness ||
+            (internalDoc.witnessed ?? false);
         internalDoc.witnessed = versioned && !internalDoc.awaitingWitness;
         await this.storeCachedDocument(internalDoc);
         // Force the changeSeq bump: new change entries were just written, so the
@@ -8139,11 +8325,15 @@ class BaseMindooDB {
             ? signingKeyPair?.publicKey
             : (await this.tenant.getCurrentUserId()).userSigningPublicKey;
         await this.maybeWriteSnapshotForDocument(internalDoc, useCustomKey
-            ? { signingKeyPair, signingKeyPassword, createdByPublicKey: createdByPublicKey ?? "" }
+            ? {
+                signingKeyPair,
+                signingKeyPassword,
+                createdByPublicKey: createdByPublicKey ?? "",
+            }
             : { createdByPublicKey: createdByPublicKey ?? "" });
     }
     async buildDocChangeStoreEntry(options) {
-        const { internalDoc, changeBytes, now, useCustomKey, signingKeyPair, signingKeyPassword, attachmentIds, attachmentRefs, recipients } = options;
+        const { internalDoc, changeBytes, now, useCustomKey, signingKeyPair, signingKeyPassword, attachmentIds, attachmentRefs, recipients, } = options;
         const docId = internalDoc.id;
         this.logger.debug(`Got change bytes: ${changeBytes.length} bytes`);
         const decodedChange = automerge_adapter_1.Automerge.decodeChange(changeBytes);
@@ -8181,7 +8371,9 @@ class BaseMindooDB {
             originalSize: changeBytes.length,
             encryptedSize: encryptedPayload.length,
             attachmentIds: attachmentIds && attachmentIds.length > 0 ? attachmentIds : undefined,
-            attachmentRefs: attachmentRefs && attachmentRefs.length > 0 ? attachmentRefs : undefined,
+            attachmentRefs: attachmentRefs && attachmentRefs.length > 0
+                ? attachmentRefs
+                : undefined,
             recipients,
             entryVersion: types_1.CURRENT_STORE_ENTRY_VERSION,
         };
@@ -8259,13 +8451,19 @@ class BaseMindooDB {
                 signature,
                 originalSize: snapshotBytes.length,
                 encryptedSize: encryptedPayload.length,
-                attachmentRefs: snapshotAttachmentRefs.length > 0 ? snapshotAttachmentRefs : undefined,
+                attachmentRefs: snapshotAttachmentRefs.length > 0
+                    ? snapshotAttachmentRefs
+                    : undefined,
                 encryptedData: encryptedPayload,
             };
             // Bind the metadata with the author signature (audit finding #5).
-            snapshotEntry.metadataSignature = await this.computeEntryMetadataSignature(snapshotEntry, options.signingKeyPair && options.signingKeyPassword
-                ? { signingKeyPair: options.signingKeyPair, signingKeyPassword: options.signingKeyPassword }
-                : undefined);
+            snapshotEntry.metadataSignature =
+                await this.computeEntryMetadataSignature(snapshotEntry, options.signingKeyPair && options.signingKeyPassword
+                    ? {
+                        signingKeyPair: options.signingKeyPair,
+                        signingKeyPassword: options.signingKeyPassword,
+                    }
+                    : undefined);
             await this.store.putEntries([snapshotEntry]);
             this.writesSinceSnapshotCheck.set(docId, 0);
             this.logger.debug(`Created snapshot for document ${docId} with ${headHashes.length} heads and ${changesSinceSnapshot} changes since previous snapshot`);
@@ -8524,7 +8722,9 @@ class BaseMindooDB {
             if (!serialized) {
                 return null;
             }
-            return serialized.length > 80 ? `${serialized.slice(0, 77)}...` : serialized;
+            return serialized.length > 80
+                ? `${serialized.slice(0, 77)}...`
+                : serialized;
         }
         catch {
             return String(value);
@@ -8582,10 +8782,16 @@ class BaseMindooDB {
             }
             return;
         }
-        if (this.isPlainDiffObject(beforeValue) || this.isPlainDiffObject(afterValue)) {
-            const beforeObject = this.isPlainDiffObject(beforeValue) ? beforeValue : {};
+        if (this.isPlainDiffObject(beforeValue) ||
+            this.isPlainDiffObject(afterValue)) {
+            const beforeObject = this.isPlainDiffObject(beforeValue)
+                ? beforeValue
+                : {};
             const afterObject = this.isPlainDiffObject(afterValue) ? afterValue : {};
-            const childKeys = new Set([...Object.keys(beforeObject), ...Object.keys(afterObject)]);
+            const childKeys = new Set([
+                ...Object.keys(beforeObject),
+                ...Object.keys(afterObject),
+            ]);
             if (childKeys.size === 0 && basePath) {
                 results.add(basePath);
                 return;
@@ -8604,10 +8810,10 @@ class BaseMindooDB {
      * Returns true for diffable object literals and false for arrays/binary payloads.
      */
     isPlainDiffObject(value) {
-        return value !== null
-            && typeof value === "object"
-            && !Array.isArray(value)
-            && !(value instanceof Uint8Array);
+        return (value !== null &&
+            typeof value === "object" &&
+            !Array.isArray(value) &&
+            !(value instanceof Uint8Array));
     }
     /**
      * Extracts the terminal field name from a normalized path for loose key/path matching.
@@ -8625,7 +8831,9 @@ class BaseMindooDB {
      * the full decoded structure.
      */
     summarizeDecodedChange(decodedChange) {
-        const operations = Array.isArray(decodedChange.ops) ? decodedChange.ops : [];
+        const operations = Array.isArray(decodedChange.ops)
+            ? decodedChange.ops
+            : [];
         const actionCounts = {};
         const touchedKeys = new Set();
         const summarizedOperations = operations.slice(0, 12).map((operation) => {
@@ -8660,7 +8868,9 @@ class BaseMindooDB {
             actorId: typeof decodedChange.actor === "string" ? decodedChange.actor : null,
             hash: typeof decodedChange.hash === "string" ? decodedChange.hash : null,
             seq: typeof decodedChange.seq === "number" ? decodedChange.seq : null,
-            message: typeof decodedChange.message === "string" ? decodedChange.message : null,
+            message: typeof decodedChange.message === "string"
+                ? decodedChange.message
+                : null,
             dependencyHashes: Array.isArray(decodedChange.deps)
                 ? decodedChange.deps.filter((dep) => typeof dep === "string")
                 : [],
@@ -8686,7 +8896,9 @@ class BaseMindooDB {
         }
         const metadataById = new Map(allEntryMetadata.map((entry) => [entry.id, entry]));
         let startFromSnapshot = snapshotEntryId !== null;
-        const snapshotMeta = snapshotEntryId ? (metadataById.get(snapshotEntryId) || null) : null;
+        const snapshotMeta = snapshotEntryId
+            ? metadataById.get(snapshotEntryId) || null
+            : null;
         if (startFromSnapshot && !snapshotMeta) {
             this.logger.warn(`Materialization referenced snapshot ${snapshotEntryId} not found in metadata for ${docId}; falling back to replay without snapshot`);
             startFromSnapshot = false;
@@ -8758,16 +8970,24 @@ class BaseMindooDB {
                 this.registerAutomergeHashMapping(docId, parsed.automergeHash, entryData.id);
             }
         }
-        const orderedReplayEntries = [...replayEntriesForState].sort((left, right) => left.createdAt !== right.createdAt ? left.createdAt - right.createdAt : left.id.localeCompare(right.id));
+        const orderedReplayEntries = [...replayEntriesForState].sort((left, right) => left.createdAt !== right.createdAt
+            ? left.createdAt - right.createdAt
+            : left.id.localeCompare(right.id));
         const firstReplayEntry = orderedReplayEntries[0] ?? null;
         const lastReplayEntry = orderedReplayEntries[orderedReplayEntries.length - 1] ?? null;
         const witnessState = (0, storeEntryTime_1.metadataWitnessState)(replayEntriesForState);
         return {
             id: docId,
             doc,
-            createdAt: firstReplayEntry?.createdAt ?? snapshotMeta?.createdAt ?? fallbackTimestamp,
-            lastModified: lastReplayEntry?.createdAt ?? snapshotMeta?.createdAt ?? fallbackTimestamp,
-            decryptionKeyId: firstReplayEntry?.decryptionKeyId ?? snapshotMeta?.decryptionKeyId ?? "default",
+            createdAt: firstReplayEntry?.createdAt ??
+                snapshotMeta?.createdAt ??
+                fallbackTimestamp,
+            lastModified: lastReplayEntry?.createdAt ??
+                snapshotMeta?.createdAt ??
+                fallbackTimestamp,
+            decryptionKeyId: firstReplayEntry?.decryptionKeyId ??
+                snapshotMeta?.decryptionKeyId ??
+                "default",
             isDeleted: this.computeIsDeletedFromMetadata(replayEntriesForState),
             awaitingWitness: witnessState.awaitingWitness,
             witnessed: witnessState.witnessed,
@@ -8854,7 +9074,11 @@ class BaseMindooDB {
         const startedAt = Date.now();
         // Default to initial cursor if null is provided.
         // Prefer deterministic sequence-based cursoring; keep legacy fallback compatibility.
-        const actualCursor = cursor ?? { changeSeq: 0, lastModified: 0, docId: "" };
+        const actualCursor = cursor ?? {
+            changeSeq: 0,
+            lastModified: 0,
+            docId: "",
+        };
         const idPrefix = this.normalizeIdPrefixFilter(options?.idPrefix);
         this.logger.debug(`Starting iteration from cursor ${JSON.stringify(actualCursor)}`);
         // Use a stable snapshot of the index for this generator run so concurrent
@@ -8896,7 +9120,10 @@ class BaseMindooDB {
                         docId: entry.docId,
                     };
                     yieldedDocuments++;
-                    yield { doc: this.buildInaccessibleDoc(entry), cursor: inaccessibleCursor };
+                    yield {
+                        doc: this.buildInaccessibleDoc(entry),
+                        cursor: inaccessibleCursor,
+                    };
                     await prefetchFrom(i + 1);
                     continue;
                 }
@@ -9098,8 +9325,7 @@ class BaseMindooDB {
         // Update metadata
         const payload = updatedDoc;
         const lastEntryCreatedAt = entries.reduce((maxCreatedAt, entry) => Math.max(maxCreatedAt, entry.createdAt), cachedDoc.lastModified);
-        const lastModified = payload._lastModified ||
-            lastEntryCreatedAt;
+        const lastModified = payload._lastModified || lastEntryCreatedAt;
         const isDeleted = this.computeIsDeletedFromMetadata(allDocMetadata);
         const updatedInternalDoc = {
             id: docId,
@@ -9550,7 +9776,8 @@ class BaseMindooDB {
      * re-enters the directory for them.
      */
     async resolveCreateKeyId(options, docId) {
-        if (options.recipients !== undefined && options.decryptionKeyId !== undefined) {
+        if (options.recipients !== undefined &&
+            options.decryptionKeyId !== undefined) {
             throw new Error("createDocument: recipients and decryptionKeyId are mutually exclusive");
         }
         if (options.recipients !== undefined) {
@@ -9588,7 +9815,10 @@ class BaseMindooDB {
             docId,
             keyId,
             includeSelf: options.recipientOptions?.includeSelf !== false,
-            userTargets: resolved.targets.map((target) => ({ kind: target.kind, id: target.id })),
+            userTargets: resolved.targets.map((target) => ({
+                kind: target.kind,
+                id: target.id,
+            })),
             skipped: resolved.skipped,
         });
         const recipients = await (0, recipients_1.sealToTargets)({
@@ -9662,7 +9892,8 @@ class BaseMindooDB {
      */
     async canCreate(options = {}) {
         const keyId = await this.resolveCreateKeyId(options);
-        const useCustomSigningKey = options.signingKeyPair !== undefined && options.signingKeyPassword !== undefined;
+        const useCustomSigningKey = options.signingKeyPair !== undefined &&
+            options.signingKeyPassword !== undefined;
         const signerKey = useCustomSigningKey
             ? options.signingKeyPair.publicKey
             : (await this.tenant.getCurrentUserId()).userSigningPublicKey;
@@ -9713,7 +9944,9 @@ class BaseMindooDB {
     }
     async canChangeRecipients(doc, next) {
         const after = { ...doc.getData() };
-        after[sealedTypes_1.ENCRYPT_FOR_FIELD] = { ...(0, recipients_1.readEncryptFor)(after) };
+        after[sealedTypes_1.ENCRYPT_FOR_FIELD] = {
+            ...(0, recipients_1.readEncryptFor)(after),
+        };
         return this.canChange(doc, after);
     }
     async mutateRecipients(doc, mode, specs, options) {
@@ -9728,8 +9961,8 @@ class BaseMindooDB {
             throw new errors_1.DocumentNotFoundError(docId);
         }
         const now = (0, timeSource_1.semanticNow)();
-        const signer = options?.signingKeyPair?.publicKey
-            ?? (await this.tenant.getCurrentUserId()).userSigningPublicKey;
+        const signer = options?.signingKeyPair?.publicKey ??
+            (await this.tenant.getCurrentUserId()).userSigningPublicKey;
         const resolved = await (0, recipients_1.resolveRecipientSpecs)({
             tenant,
             specs,
@@ -9741,15 +9974,18 @@ class BaseMindooDB {
             now,
         });
         const currentMap = (0, recipients_1.readEncryptFor)(internalDoc.doc);
-        const activeIds = new Set(Object.entries(currentMap).filter(([, e]) => !e.removedAt).map(([id]) => id.split("#")[0]));
+        const activeIds = new Set(Object.entries(currentMap)
+            .filter(([, e]) => !e.removedAt)
+            .map(([id]) => id.split("#")[0]));
         const addedTargets = [];
         const removedStableIds = [];
         const matchesTarget = (id, entry, target) => {
             const base = id.split("#")[0];
-            return (target.stableId === base
-                || target.id === base
-                || (!!entry.label && target.id === entry.label)
-                || (!!entry.keyFingerprint && target.keyFingerprint === entry.keyFingerprint));
+            return (target.stableId === base ||
+                target.id === base ||
+                (!!entry.label && target.id === entry.label) ||
+                (!!entry.keyFingerprint &&
+                    target.keyFingerprint === entry.keyFingerprint));
         };
         if (mode === "add" || mode === "set") {
             for (const target of resolved.targets) {
@@ -9785,7 +10021,9 @@ class BaseMindooDB {
         let generations = currentGens;
         let epoch = internalDoc.sealedRecipients?.epoch ?? currentGens.length;
         if (rotate) {
-            const nextDek = tenant.getCryptoAdapter().getRandomValues(new Uint8Array(32));
+            const nextDek = tenant
+                .getCryptoAdapter()
+                .getRandomValues(new Uint8Array(32));
             generations = [nextDek, ...currentGens];
             epoch += 1;
         }
@@ -9811,7 +10049,9 @@ class BaseMindooDB {
         for (const id of removedStableIds) {
             remainingByStable.delete(id);
             for (const [stableId, target] of [...remainingByStable.entries()]) {
-                if (target.id === id || target.stableId === id || target.keyFingerprint === id) {
+                if (target.id === id ||
+                    target.stableId === id ||
+                    target.keyFingerprint === id) {
                     remainingByStable.delete(stableId);
                 }
             }
@@ -9874,7 +10114,9 @@ class BaseMindooDB {
         return {
             epoch,
             rotated: rotate,
-            added: wrapped.getRecipients().filter((r) => addedTargets.some((t) => t.keyFingerprint === r.keyFingerprint)),
+            added: wrapped
+                .getRecipients()
+                .filter((r) => addedTargets.some((t) => t.keyFingerprint === r.keyFingerprint)),
             removed: Object.entries((0, recipients_1.readEncryptFor)(internalDoc.doc))
                 .filter(([id, e]) => e.removedAt && removedStableIds.includes(id.split("#")[0]))
                 .map(([id, e]) => ({
@@ -10025,7 +10267,9 @@ class BaseMindooDB {
         // monotonicity across the entries we accept, in trusted-time order (§5.4).
         // A verify-only provider (no signer) routes receipts to the right scheme.
         const subtle = this.getSubtle();
-        const receiptVerifier = new Ed25519WitnessProvider_1.Ed25519WitnessProvider({ subtle }).createVerifier();
+        const receiptVerifier = new Ed25519WitnessProvider_1.Ed25519WitnessProvider({
+            subtle,
+        }).createVerifier();
         const nowMs = (0, timeSource_1.semanticNow)();
         // Lifecycle entries only, folded in deterministic causal order. Un-witnessed
         // entries (versioned or legacy) order by their author time `createdAt`, NOT
@@ -10103,10 +10347,15 @@ class BaseMindooDB {
             // from a currently-trusted witness, carry a valid signature, and respect
             // per-witness monotonicity and the future-time bound. Entries with no
             // receipt are local/not-yet-witnessed and pass this check.
-            if (getTrustedWitnessKeysAt && (meta.receivedAt !== undefined || meta.receivedByPublicKey)) {
+            if (getTrustedWitnessKeysAt &&
+                (meta.receivedAt !== undefined || meta.receivedByPublicKey)) {
                 try {
                     const trustedWitnessKeys = await getTrustedWitnessKeysAt(meta.receivedAt ?? meta.createdAt);
-                    const receiptResult = await receiptVerifier.validate(meta, { dbid, trustedWitnessKeys, nowMs });
+                    const receiptResult = await receiptVerifier.validate(meta, {
+                        dbid,
+                        trustedWitnessKeys,
+                        nowMs,
+                    });
                     if (!receiptResult.ok) {
                         quarantine(meta, "invalid_witness_receipt", receiptResult.reason ?? "invalid witness receipt");
                         continue;
@@ -10216,7 +10465,8 @@ class BaseMindooDB {
         const payload = currentDoc;
         const isDeleted = this.computeIsDeletedFromMetadata(acceptedMeta);
         const lastAccepted = acceptedMeta[acceptedMeta.length - 1];
-        const lastModified = payload._lastModified || (lastAccepted ? lastAccepted.createdAt : (0, timeSource_1.semanticNow)());
+        const lastModified = payload._lastModified ||
+            (lastAccepted ? lastAccepted.createdAt : (0, timeSource_1.semanticNow)());
         const witnessState = (0, storeEntryTime_1.metadataWitnessState)(acceptedMeta);
         return {
             doc: {
@@ -10244,7 +10494,8 @@ class BaseMindooDB {
         // contract of `loadDocumentInternal` aligned with `getDocument` /
         // `getAllDocumentIds`.
         const indexEntryIdx = this.getDocIndexPosition(docId);
-        if (indexEntryIdx !== undefined && this.index[indexEntryIdx].accessState === "inaccessible") {
+        if (indexEntryIdx !== undefined &&
+            this.index[indexEntryIdx].accessState === "inaccessible") {
             return null;
         }
         if (this.docCache.has(docId)) {
@@ -10331,13 +10582,16 @@ class BaseMindooDB {
             return null;
         }
         // Log all entry types
-        const entryTypes = allEntryMetadata.map(em => `${em.entryType}@${em.createdAt}`).join(', ');
+        const entryTypes = allEntryMetadata
+            .map((em) => `${em.entryType}@${em.createdAt}`)
+            .join(", ");
         this.logger.debug(`Entry types for ${docId}: ${entryTypes}`);
-        await this.tenant.ingestSealedFromEntries?.(allEntryMetadata.find((em) => em.entryType === "doc_create")?.decryptionKeyId
-            ?? allEntryMetadata[0].decryptionKeyId, allEntryMetadata);
-        const loadKeyId = allEntryMetadata.find((em) => em.entryType === "doc_create")?.decryptionKeyId
-            ?? allEntryMetadata[0].decryptionKeyId;
-        if ((0, sealedTypes_1.isSealedKeyId)(loadKeyId) && !(await this.tenant.hasDecryptionKey(loadKeyId))) {
+        await this.tenant.ingestSealedFromEntries?.(allEntryMetadata.find((em) => em.entryType === "doc_create")
+            ?.decryptionKeyId ?? allEntryMetadata[0].decryptionKeyId, allEntryMetadata);
+        const loadKeyId = allEntryMetadata.find((em) => em.entryType === "doc_create")
+            ?.decryptionKeyId ?? allEntryMetadata[0].decryptionKeyId;
+        if ((0, sealedTypes_1.isSealedKeyId)(loadKeyId) &&
+            !(await this.tenant.hasDecryptionKey(loadKeyId))) {
             this.logger.debug(`Document ${docId} is sealed and not unwrapable; treating as missing`);
             const existingIndex = this.getDocIndexPosition(docId);
             const existing = existingIndex === undefined ? undefined : this.index[existingIndex];
@@ -10398,7 +10652,7 @@ class BaseMindooDB {
         });
         let startFromSnapshot = materializationPlan.snapshotEntryId !== null;
         const snapshotMeta = materializationPlan.snapshotEntryId
-            ? (metadataById.get(materializationPlan.snapshotEntryId) || null)
+            ? metadataById.get(materializationPlan.snapshotEntryId) || null
             : null;
         if (startFromSnapshot && !snapshotMeta) {
             this.logger.warn(`Planner referenced snapshot ${materializationPlan.snapshotEntryId} not found in metadata for ${docId}; falling back to replay without snapshot`);
@@ -10487,10 +10741,10 @@ class BaseMindooDB {
         // Load and apply all entries
         this.logger.debug(`Fetching ${entriesToLoad.length} entries from store for document ${docId}`);
         const entryLoadStartedAt = Date.now();
-        const entries = await this.fetchEntries(entriesToLoad.map(em => em.id));
+        const entries = await this.fetchEntries(entriesToLoad.map((em) => em.id));
         entryLoadTime += Date.now() - entryLoadStartedAt;
         this.logger.debug(`Retrieved ${entries.length} entries from store for document ${docId}`);
-        this.logger.debug(`Loading document ${docId}: found ${entries.length} entries to apply (${startFromSnapshot ? 'starting from snapshot' : 'starting from scratch'})`);
+        this.logger.debug(`Loading document ${docId}: found ${entries.length} entries to apply (${startFromSnapshot ? "starting from snapshot" : "starting from scratch"})`);
         // Log current document state before applying entries
         if (this.isDebugEnabled())
             this.logger.debug(`Document state before applying entries: heads=${JSON.stringify(automerge_adapter_1.Automerge.getHeads(doc))}`);
@@ -10608,8 +10862,10 @@ class BaseMindooDB {
         this.logger.debug(`Document ${docId} isDeleted: ${isDeleted}`);
         // The authoritative decryptionKeyId comes from the doc_create entry's metadata,
         // not from the Automerge payload (which does not store encryption metadata).
-        const createEntry = allEntryMetadata.find(em => em.entryType === "doc_create");
-        const decryptionKeyId = createEntry ? createEntry.decryptionKeyId : "default";
+        const createEntry = allEntryMetadata.find((em) => em.entryType === "doc_create");
+        const decryptionKeyId = createEntry
+            ? createEntry.decryptionKeyId
+            : "default";
         // Get lastModified from payload, or use the timestamp of the last entry
         const lastEntry = entries.length > 0 ? entries[entries.length - 1] : null;
         const lastModified = payload._lastModified ||
@@ -10659,16 +10915,16 @@ class BaseMindooDB {
     convertAutomergeToJS(doc) {
         // Check if this document has a native Automerge handle attached
         // The native implementation attaches metadata with Symbol.for('_am_meta')
-        const STATE = Symbol.for('_am_meta');
+        const STATE = Symbol.for("_am_meta");
         const meta = doc[STATE];
-        if (meta && meta.handle && typeof meta.handle.materialize === 'function') {
+        if (meta && meta.handle && typeof meta.handle.materialize === "function") {
             // Use native materialize() which properly converts Text objects to strings
             try {
-                const materialized = meta.handle.materialize('/');
+                const materialized = meta.handle.materialize("/");
                 return materialized;
             }
             catch (error) {
-                console.error('[MindooDB] Failed to materialize document:', error);
+                console.error("[MindooDB] Failed to materialize document:", error);
                 // Fall through to direct access
             }
         }
@@ -10680,7 +10936,9 @@ class BaseMindooDB {
     convertAutomergeValueToJS(value, depth) {
         if (value === null || value === undefined)
             return value;
-        if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+        if (typeof value === "string" ||
+            typeof value === "number" ||
+            typeof value === "boolean")
             return value;
         if (value instanceof Uint8Array)
             return value;
@@ -10695,10 +10953,10 @@ class BaseMindooDB {
         if (typeof value !== "object")
             return value;
         const record = value;
-        if (typeof record.length === "number"
-            && typeof value.concat === "function"
-            && record.kind === undefined
-            && typeof value.toString === "function") {
+        if (typeof record.length === "number" &&
+            typeof value.concat === "function" &&
+            record.kind === undefined &&
+            typeof value.toString === "function") {
             const asString = String(value);
             if (asString && asString !== "[object Object]")
                 return asString;
@@ -10730,7 +10988,10 @@ class BaseMindooDB {
                 get: (target, prop) => {
                     const value = target[prop];
                     // Recursively wrap nested objects (but not arrays or special types)
-                    if (value !== null && typeof value === 'object' && !Array.isArray(value) && !(value instanceof Uint8Array)) {
+                    if (value !== null &&
+                        typeof value === "object" &&
+                        !Array.isArray(value) &&
+                        !(value instanceof Uint8Array)) {
                         return createReadOnlyProxy(value);
                     }
                     return value;
@@ -10750,8 +11011,8 @@ class BaseMindooDB {
             isSealed: () => (0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId),
             getRecipients: () => (0, recipients_1.resolveRecipientsFromPayload)(internalDoc.doc, internalDoc.sealedRecipients),
             getRecipientEpoch: () => internalDoc.sealedRecipients?.epoch ?? 0,
-            isEncryptedFor: (users) => (0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId)
-                && (0, recipients_1.isPayloadEncryptedFor)(internalDoc.doc, internalDoc.sealedRecipients, Array.isArray(users) ? users : [users]),
+            isEncryptedFor: (users) => (0, sealedTypes_1.isSealedKeyId)(internalDoc.decryptionKeyId) &&
+                (0, recipients_1.isPayloadEncryptedFor)(internalDoc.doc, internalDoc.sealedRecipients, Array.isArray(users) ? users : [users]),
             getHeads: () => automerge_adapter_1.Automerge.getHeads(internalDoc.doc),
             getData: () => {
                 // Convert Automerge document to plain JS object, converting Text
@@ -10759,7 +11020,8 @@ class BaseMindooDB {
                 // the document's Automerge heads, so repeated getData() calls on an
                 // unchanged doc skip the full re-materialization.
                 const headsKey = automerge_adapter_1.Automerge.getHeads(internalDoc.doc).join(",");
-                if (internalDoc.jsCache === undefined || internalDoc.jsCacheHeads !== headsKey) {
+                if (internalDoc.jsCache === undefined ||
+                    internalDoc.jsCacheHeads !== headsKey) {
                     internalDoc.jsCache = this.convertAutomergeToJS(internalDoc.doc);
                     internalDoc.jsCacheHeads = headsKey;
                 }
@@ -10849,7 +11111,7 @@ class BaseMindooDB {
      * Get an attachment reference by ID from a document's _attachments array.
      */
     async getAttachmentRefInternal(docId, attachmentId) {
-        const internalDoc = this.getCachedDocument(docId) ?? await this.loadDocumentInternal(docId);
+        const internalDoc = this.getCachedDocument(docId) ?? (await this.loadDocumentInternal(docId));
         if (!internalDoc) {
             throw new Error(`Document ${docId} not found while reading attachment ${attachmentId}`);
         }
@@ -10858,7 +11120,7 @@ class BaseMindooDB {
     getAttachmentRefFromDoc(internalDoc, attachmentId) {
         const payload = internalDoc.doc;
         const attachments = payload._attachments || [];
-        const ref = attachments.find(a => a.attachmentId === attachmentId);
+        const ref = attachments.find((a) => a.attachmentId === attachmentId);
         if (!ref) {
             throw new Error(`Attachment ${attachmentId} not found in document ${internalDoc.id}`);
         }
@@ -10908,7 +11170,9 @@ class BaseMindooDB {
     async getAttachmentForRefInternal(ref) {
         const store = this.getEffectiveAttachmentStore();
         // Resolve dependency chain to get all chunk IDs in order (oldest first)
-        const chunkIds = await store.resolveDependencies(ref.lastChunkId, { includeStart: true });
+        const chunkIds = await store.resolveDependencies(ref.lastChunkId, {
+            includeStart: true,
+        });
         this.logger.debug(`Resolved ${chunkIds.length} chunks for attachment ${ref.attachmentId}`);
         // Fetch all chunks
         const chunks = await store.getEntries(chunkIds);
@@ -11060,7 +11324,8 @@ class BaseMindooDB {
                 encryptedData,
             };
             // Bind the metadata with the author signature (audit finding #5).
-            chunkEntry.metadataSignature = await this.computeEntryMetadataSignature(chunkEntry);
+            chunkEntry.metadataSignature =
+                await this.computeEntryMetadataSignature(chunkEntry);
             chunks.push(chunkEntry);
             prevChunkId = chunkId;
         }
@@ -11122,7 +11387,8 @@ class BaseMindooDB {
             encryptedData,
         };
         // Bind the metadata with the author signature (audit finding #5).
-        ledgerEntry.metadataSignature = await this.computeEntryMetadataSignature(ledgerEntry);
+        ledgerEntry.metadataSignature =
+            await this.computeEntryMetadataSignature(ledgerEntry);
         await this.putEntriesWithRetry(this.store, [ledgerEntry], `pending ledger ${attachmentId}`);
     }
     async clearPendingAttachmentUploadLedger(attachmentId) {
@@ -11130,7 +11396,9 @@ class BaseMindooDB {
         if (!deleteEntriesById) {
             return;
         }
-        await deleteEntriesById.call(this.store, [this.pendingAttachmentUploadLedgerId(attachmentId)]);
+        await deleteEntriesById.call(this.store, [
+            this.pendingAttachmentUploadLedgerId(attachmentId),
+        ]);
     }
     async cleanupIncompleteAttachmentUpload(docId, attachmentId) {
         const store = this.getEffectiveAttachmentStore();
@@ -11200,7 +11468,8 @@ class BaseMindooDB {
                 encryptedData,
             };
             // Bind the metadata with the author signature (audit finding #5).
-            chunkEntry.metadataSignature = await this.computeEntryMetadataSignature(chunkEntry);
+            chunkEntry.metadataSignature =
+                await this.computeEntryMetadataSignature(chunkEntry);
             pendingEntries.push(chunkEntry);
             pendingEncryptedBytes += encryptedData.length;
             chunkCount++;
@@ -11299,7 +11568,8 @@ class BaseMindooDB {
                 encryptedData,
             };
             // Bind the metadata with the author signature (audit finding #5).
-            chunkEntry.metadataSignature = await this.computeEntryMetadataSignature(chunkEntry);
+            chunkEntry.metadataSignature =
+                await this.computeEntryMetadataSignature(chunkEntry);
             chunks.push(chunkEntry);
             prevChunkId = chunkId;
         }
@@ -11316,10 +11586,13 @@ class BaseMindooDB {
      * Accepts either a raw store or a MindooDB instance (calls getStore()).
      */
     getStoreForKind(storeKind = types_2.StoreKind.docs) {
-        return storeKind === types_2.StoreKind.attachments ? this.attachmentStore : this.store;
+        return storeKind === types_2.StoreKind.attachments
+            ? this.attachmentStore
+            : this.store;
     }
     resolveStore(remote, storeKind = types_2.StoreKind.docs) {
-        if ('getStore' in remote && typeof remote.getStore === 'function') {
+        if ("getStore" in remote &&
+            typeof remote.getStore === "function") {
             return storeKind === types_2.StoreKind.attachments
                 ? remote.getAttachmentStore()
                 : remote.getStore();
@@ -11415,7 +11688,8 @@ class BaseMindooDB {
             },
             hasWriteContentRules: async (op) => {
                 const directory = await this.tenant.openDirectory();
-                return (await directory.hasWriteContentRules?.(op, this.store.getId())) ?? false;
+                return ((await directory.hasWriteContentRules?.(op, this.store.getId())) ??
+                    false);
             },
             remapAttachmentPointers: (docId, lastChunkIdByAttachmentId, signing) => this.remapAttachmentPointers(docId, lastChunkIdByAttachmentId, signing),
         };
@@ -11481,8 +11755,11 @@ class BaseMindooDB {
         this.registerAutomergeHashMapping(docId, automerge_adapter_1.Automerge.decodeChange(changeBytes).hash, entry.id);
         internalDoc.doc = newDoc;
         internalDoc.lastModified = now;
-        internalDoc.awaitingWitness = (0, storeEntryTime_1.isProvisional)(entry) || (internalDoc.awaitingWitness ?? false);
-        const versioned = (0, storeEntryTime_1.isVersioned)(entry) || internalDoc.awaitingWitness || (internalDoc.witnessed ?? false);
+        internalDoc.awaitingWitness =
+            (0, storeEntryTime_1.isProvisional)(entry) || (internalDoc.awaitingWitness ?? false);
+        const versioned = (0, storeEntryTime_1.isVersioned)(entry) ||
+            internalDoc.awaitingWitness ||
+            (internalDoc.witnessed ?? false);
         internalDoc.witnessed = versioned && !internalDoc.awaitingWitness;
         await this.storeCachedDocument(internalDoc);
         this.updateIndex(docId, internalDoc.lastModified, internalDoc.isDeleted, internalDoc.decryptionKeyId, "visible", internalDoc.awaitingWitness, internalDoc.witnessed, true);
@@ -11567,7 +11844,8 @@ class BaseMindooDB {
         const storeKind = options?.storeKind ?? types_2.StoreKind.docs;
         const localStore = this.getStoreForKind(storeKind);
         const remoteStore = this.resolveStore(remote, storeKind);
-        if (localStore.getId() !== remoteStore.getId() || localStore.getStoreKind() !== remoteStore.getStoreKind()) {
+        if (localStore.getId() !== remoteStore.getId() ||
+            localStore.getStoreKind() !== remoteStore.getStoreKind()) {
             throw new Error(`[BaseMindooDB] Cannot pull entries from the incompatible store ${localStore.getId()}/${localStore.getStoreKind()}`);
         }
         this.logger.info(`Pulling entries from remote store ${remoteStore.getId()}/${remoteStore.getStoreKind()}`);
@@ -11590,10 +11868,15 @@ class BaseMindooDB {
                 if (storeKind === types_2.StoreKind.docs) {
                     await this.reconcileAfterDocsPull();
                 }
-                return { transferredEntries: 0, transferredBytes, scannedEntries: syncResult.scanned, cancelled: false };
+                return {
+                    transferredEntries: 0,
+                    transferredBytes,
+                    scannedEntries: syncResult.scanned,
+                    cancelled: false,
+                };
             }
             options?.onProgress?.({
-                phase: 'processing',
+                phase: "processing",
                 message: `Processing ${syncResult.transferred} new entries...`,
                 transferredEntries: syncResult.transferred,
                 transferredBytes,
@@ -11625,7 +11908,7 @@ class BaseMindooDB {
             }
             this.logger.info(`Pull complete, synced ${syncResult.transferred} entries`);
             options?.onProgress?.({
-                phase: 'complete',
+                phase: "complete",
                 message: `Pull complete: ${syncResult.transferred} ${storeKind} entries synced`,
                 transferredEntries: syncResult.transferred,
                 transferredBytes,
@@ -11682,7 +11965,8 @@ class BaseMindooDB {
         const storeKind = options?.storeKind ?? types_2.StoreKind.docs;
         const localStore = this.getStoreForKind(storeKind);
         const remoteStore = this.resolveStore(remote, storeKind);
-        if (localStore.getId() !== remoteStore.getId() || localStore.getStoreKind() !== remoteStore.getStoreKind()) {
+        if (localStore.getId() !== remoteStore.getId() ||
+            localStore.getStoreKind() !== remoteStore.getStoreKind()) {
             throw new Error(`[BaseMindooDB] Cannot push entries to the incompatible store ${localStore.getId()}/${localStore.getStoreKind()}`);
         }
         this.logger.info(`Pushing entries to remote store ${remoteStore.getId()}/${remoteStore.getStoreKind()}`);
@@ -11713,7 +11997,7 @@ class BaseMindooDB {
                 this.logger.info(`Pushed ${syncResult.transferred} entries to remote store`);
             }
             options?.onProgress?.({
-                phase: 'complete',
+                phase: "complete",
                 message: `Push complete: ${syncResult.transferred} entries transferred`,
                 transferredEntries: syncResult.transferred,
                 transferredBytes,