@klum-db/lobby 0.3.0-pre.1 → 0.4.0-pre.0

package/README.md

@@ -167,26 +167,29 @@ The one-way law and the kernel seam are covered up top — here are the specific
 - **Federation** lives in the Lobby, not in hub — open fleets with `lobby.openVaultGroup` (`@noy-db/hub` no longer ships the `openVaultGroup` / `openStateManagementVault` / `withVaultTemplate` fleet methods).
 - **Enforced, not conventional:** an `@noy-db` package importing `@klum-db` fails noy-db's build-time architecture check.
 
-## Consumer requirements (hub >= 0.3.0-pre.1)
+## Consumer requirements (hub >= 0.4.0-pre.0)
 
-`@noy-db/hub` gates `extractPartition` (the primitive under `extractCrossVaultPartition`, `mergeCompartment`, `migrateThenMerge`, `exportSurface`/`applySurface`) and search/retrieval behind opt-in strategies. The Lobby never constructs your `Noydb`/`Vault` instances — you do — so **you** must opt in on any vault passed into these APIs:
+`@noy-db/hub` gates `extractPartition` (the primitive under `extractCrossVaultPartition`, `mergeCompartment`, `migrateThenMerge`, `exportSurface`/`applySurface`), search/retrieval, and multi-user grants behind opt-in strategies. The Lobby never constructs your `Noydb`/`Vault` instances — you do — so **you** must opt in on any vault passed into these APIs:
 
 - **Interchange** (`extractCrossVaultPartition`, `mergeCompartment`, `migrateThenMerge`, `exportSurface`, `applySurface`): every source vault involved must be created with `cargoStrategy: withCargo()` from `@noy-db/hub/cargo`, or these calls throw `CargoNotEnabledError`.
 - **Federated retrieve** (`ShardedCollection.retrieve()` across a `VaultGroup`): additionally requires `searchStrategy: withSearch()` from `@noy-db/hub` on every vault in the group, or lexical retrieve silently returns no hits and semantic/hybrid retrieve throws `SearchNotEnabledError`.
+- **Multi-user grants** (sharing shards/registry vaults across operators and advisors): the *granting* session must be created with `teamStrategy: withTeam()` from `@noy-db/hub/team`, or `grant`/`revoke`/`rotate` throw `TeamNotEnabledError`. Grantees opening an already-granted vault need no strategy.
 
 ```ts
 import { createNoydb, withSearch } from '@noy-db/hub'
 import { withCargo } from '@noy-db/hub/cargo'
+import { withTeam } from '@noy-db/hub/team'
 
 const db = await createNoydb({
   store, user, secret,
   cargoStrategy: withCargo(),     // required for interchange (extractPartition-backed APIs)
   searchStrategy: withSearch(),   // required for federated retrieve()
+  teamStrategy: withTeam(),       // required to grant/revoke/rotate multi-user access
 })
 ```
 
 ## Status
 
-Preview. `@klum-db/lobby` is its own repository and the sole publisher of `@klum-db/*` to npm. It depends on the **published** `@noy-db/*` packages through the stable `@noy-db/hub/kernel` boundary and versions **independently** (`0.2.0-pre.N`, decoupled from noy-db). Pilot-1 (FR-1…FR-9), the dock tier, and `Lobby.graduate()` are complete.
+Preview. `@klum-db/lobby` is its own repository and the sole publisher of `@klum-db/*` to npm. It depends on the **published** `@noy-db/*` packages through the stable `@noy-db/hub/cargo` + `/pod` boundaries and versions **independently** (`0.4.0-pre.N`, decoupled from noy-db). Pilot-1 (FR-1…FR-9), the dock tier, and `Lobby.graduate()` are complete.
 
 See [`docs/architecture.md`](docs/architecture.md) for the detailed noy-db ↔ klum-db boundary, [`docs/roadmap.md`](docs/roadmap.md) for what's next, and [`PROVENANCE.md`](./PROVENANCE.md) for origin and build history.

package/dist/index.cjs

@@ -72,6 +72,11 @@ function encodeMultiBundle(manifest, inner) {
   }
   return out;
 }
+function hasPodMagic(bytes) {
+  if (bytes.length < import_pod.NOYDB_BUNDLE_MAGIC.length) return false;
+  for (let i = 0; i < import_pod.NOYDB_BUNDLE_MAGIC.length; i++) if (bytes[i] !== import_pod.NOYDB_BUNDLE_MAGIC[i]) return false;
+  return true;
+}
 function hasMultiMagic(bytes) {
   if (bytes.length < NOYDB_MULTI_BUNDLE_MAGIC.length) return false;
   for (let i = 0; i < NOYDB_MULTI_BUNDLE_MAGIC.length; i++) if (bytes[i] !== NOYDB_MULTI_BUNDLE_MAGIC[i]) return false;
@@ -148,7 +153,7 @@ async function writeMultiVaultBundle(compartments, opts = {}) {
       );
     }
     if (c.disclose?.publicEnvelope === true) {
-      const env = (0, import_hub.readNoydbBundlePublicEnvelope)(innerBytes);
+      const env = (0, import_pod.readPodCover)(innerBytes);
       if (env !== void 0) entry.publicEnvelope = env;
     }
     const fence = await c.vault.schemaFenceState();
@@ -165,9 +170,9 @@ async function writeMultiVaultBundle(compartments, opts = {}) {
 }
 async function readNoydbBundleManifest(bytes) {
   if (hasMultiMagic(bytes)) return [...decodeMultiBundle(bytes).manifest.compartments];
-  if ((0, import_hub.hasNoydbBundleMagic)(bytes)) {
+  if (hasPodMagic(bytes)) {
     const header = (0, import_pod.readPodHeader)(bytes);
-    const env = (0, import_hub.readNoydbBundlePublicEnvelope)(bytes);
+    const env = (0, import_pod.readPodCover)(bytes);
     const entry = {
       handle: header.handle,
       innerBytes: bytes.length,
@@ -182,7 +187,7 @@ function readMultiVaultBundleCompartment(bytes, selector) {
   if (typeof selector === "number" && !Number.isInteger(selector)) {
     throw new Error(`readMultiVaultBundleCompartment: numeric selector must be an integer, got ${selector}.`);
   }
-  if ((0, import_hub.hasNoydbBundleMagic)(bytes) && !hasMultiMagic(bytes)) {
+  if (hasPodMagic(bytes) && !hasMultiMagic(bytes)) {
     const header = (0, import_pod.readPodHeader)(bytes);
     if (selector === 0 || selector === header.handle) return bytes;
     throw new Error(`readMultiVaultBundleCompartment: single v1 bundle has only compartment "${header.handle}".`);
@@ -192,13 +197,12 @@ function readMultiVaultBundleCompartment(bytes, selector) {
   if (idx < 0 || idx >= inner.length) throw new Error(`readMultiVaultBundleCompartment: no compartment ${typeof selector === "number" ? `at index ${selector}` : `"${selector}"`}.`);
   return inner[idx];
 }
-var import_cargo, import_pod, import_hub, NOYDB_MULTI_BUNDLE_MAGIC, NOYDB_MULTI_BUNDLE_PREFIX_BYTES, NOYDB_MULTI_BUNDLE_VERSION;
+var import_cargo, import_pod, NOYDB_MULTI_BUNDLE_MAGIC, NOYDB_MULTI_BUNDLE_PREFIX_BYTES, NOYDB_MULTI_BUNDLE_VERSION;
 var init_multi_bundle = __esm({
   "src/bundle/multi-bundle.ts"() {
     "use strict";
     import_cargo = require("@noy-db/hub/cargo");
     import_pod = require("@noy-db/hub/pod");
-    import_hub = require("@noy-db/hub");
     init_uint32();
     NOYDB_MULTI_BUNDLE_MAGIC = new Uint8Array([78, 68, 66, 77]);
     NOYDB_MULTI_BUNDLE_PREFIX_BYTES = 10;