@noy-db/hub 0.3.0-pre.1 → 0.3.0-pre.11

package/dist/kernel/via/taint-binding.d.ts

@@ -0,0 +1,66 @@
+import type { ViaBinding, ViaPosture } from './index.js';
+/**
+ * Narrow the graph's raw per-field effective postures (`ViaGraph.
+ * taintedPostures`) down to the enforcement-facing overlay `ViaPipeline.
+ * build`'s `taint.postures` carries:
+ *  - entries whose effective posture equals `DEFAULT_POSTURE` are DROPPED —
+ *    nothing to enforce, and (#553) keeping `postureFor` returning
+ *    `undefined` for an all-plain-sourced computed field matters: it is what
+ *    lets a collection with ONLY plain-sourced computed fields keep
+ *    `this.via === undefined` (see `applyTaintOverlay`'s no-op-when-empty
+ *    contract below).
+ *  - a `sealed` entry's `queryable` is clamped to `'none'`, regardless of
+ *    what the graph's fold inherited (e.g. classified's own `'det-exact'`):
+ *    `'det-exact'` presumes a purpose-built blind index the SOURCE binding
+ *    (classified) builds for its own declared fields — this generic
+ *    taint-seal never builds an equivalent index for the DERIVED field, so a
+ *    derived+sealed field is, in truth, unqueryable by any means. This
+ *    matches the query DSL's existing PARITY behavior for classified's own
+ *    `'det-exact'` fields (`.where()` silently matches nothing, never
+ *    throws) — a derived field has no such fallback because its stored form
+ *    is opaque ciphertext, not a plain (if index-less) value, so `'none'`
+ *    (explicit refusal) is the honest posture, not `'det-exact'`.
+ *
+ * Returns `undefined` when nothing survives the filter (equivalent to "no
+ * taint on this collection").
+ */
+export declare function buildTaintOverlay(rawPostures: ReadonlyMap<string, ViaPosture>, sealFields: ReadonlySet<string>): ReadonlyMap<string, ViaPosture> | undefined;
+/**
+ * The `taint` binding: seals `sealFields` at rest via `ctx.sealedSlots`,
+ * presenting them as sealed handles on read — exactly as classified does,
+ * reusing the same phase-B capability. `covers` = membership in `sealFields`
+ * OR `presentRedactFields` (the brief's contract) — used by
+ * `hasAtRestHooks`/`eraseSealed`'s posture-driven bookkeeping, NEVER by
+ * `postureFor` (the taint OVERLAY short-circuits `postureFor` before any
+ * binding's `covers`/`.posture` is consulted — see `ViaPipeline.postureFor`).
+ * `erase` is intentionally unimplemented: today's crypto-shred
+ * (`Collection._writeTombstone`) overwrites the whole envelope — `_sealed`
+ * included — regardless of via bindings, so a taint-sealed field is already
+ * erased on `forget()` with no extra participation; per-field erasure
+ * bookkeeping (residue/shredded counts) is Task 6's (#622 forget fanout)
+ * concern if ever needed.
+ *
+ * `presentRedactFields` (#638 Task 7, default empty) — tainted VIRTUAL
+ * computed fields (never sealed — nothing to encodeAtRest/decodeAtRest;
+ * `via/graph-wiring.ts#applyTaintOverlay` computes this set as
+ * `graph.virtualFields(name) ∩ { field : postures.get(field).exportable ===
+ * false }`). This binding is appended AFTER whatever `compileViaBindings`
+ * built (including the `computed` binding), so its `present` hook — when
+ * `presentRedactFields` is non-empty — runs LAST and overwrites a virtual
+ * field's freshly-computed value with `EXPORT_REDACTION_MARKER`,
+ * unconditionally, closing the read-time leak the same way `SealedHandle`
+ * closes it for a materialized-sealed field. `encodeAtRest`/`decodeAtRest`/
+ * `present` are all conditionally OMITTED (not just no-op) when their
+ * respective field set is empty — a collection with ONLY a tainted virtual
+ * field (no materialized-sealed field) must NOT flip
+ * `ViaPipeline.hasAtRestHooks`, which would wrongly route it onto the async
+ * at-rest-hook codec path for nothing to seal.
+ *
+ * `sealAllFields` (#642, default `false`) — whole-record seal for a
+ * `'*'`-defaulted derivation/MV/overlay OUTPUT collection: `covers` claims
+ * every non-`_`-prefixed field, and `encodeAtRest`/`decodeAtRest` route
+ * through {@link encodeTaintAtRestAll}/{@link decodeTaintAtRestAll} instead
+ * of the fixed `sealFields` list (moot in this mode — sealing everything is
+ * already a superset of any field-specific taint on the same collection).
+ */
+export declare function taintBinding(sealFields: ReadonlySet<string>, presentRedactFields?: ReadonlySet<string>, sealAllFields?: boolean): ViaBinding;

package/dist/kernel/write-queue.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Observable write-queue.
+ *
+ * Tracks outstanding in-flight *logical* writes (a full Collection.put /
+ * delete, including ledger + cache + derivation + MV dispatch — not just
+ * the adapter call). The hub holds one tracker per instance; it is
+ * framework-agnostic (no Vue/React dependency). UI layers subscribe via
+ * onChange(); the migration drain (Slice 2) quiesces via onFlush().
+ */
+/** Public, read-only view of the hub's write-queue. */
+export interface WriteQueue {
+    /** True while one or more writes are in flight (`depth > 0`). */
+    readonly pending: boolean;
+    /** Count of outstanding write operations. */
+    readonly depth: number;
+    /**
+     * Subscribe to depth changes (fires on every begin and settle).
+     * Returns an unsubscribe function. Intended for reactive wrappers
+     * (e.g. `@noy-db/in-vue` turns this into a `ref`).
+     */
+    onChange(handler: () => void): () => void;
+    /**
+     * Resolves once `depth` reaches 0. If a write settled with an error
+     * while this flush was waiting, the returned promise REJECTS with that
+     * error instead — so a drain caller surfaces the failure rather than
+     * hanging. Resolves immediately when already idle and error-free.
+     */
+    onFlush(): Promise<void>;
+}
+export declare class WriteQueueTracker implements WriteQueue {
+    #private;
+    get pending(): boolean;
+    get depth(): number;
+    /** Mark one write as started. */
+    begin(): void;
+    /** Mark one write as finished. Pass the error if it failed. */
+    settle(error?: Error): void;
+    onChange(handler: () => void): () => void;
+    onFlush(): Promise<void>;
+    /**
+     * Run `fn` as a tracked write: depth++ on entry, depth-- on settle
+     * (success or failure). The fn's resolved value is returned; a thrown
+     * error is re-thrown after the queue is decremented.
+     */
+    track<R>(fn: () => Promise<R>): Promise<R>;
+}

package/dist/lazy/index.js

@@ -0,0 +1,12 @@
+import {
+  withLazy
+} from "../chunk-THNJ3IKU.js";
+import {
+  IMPLICIT_LAZY
+} from "../chunk-NO272T7Q.js";
+import "../chunk-PZ5AY32C.js";
+export {
+  IMPLICIT_LAZY,
+  withLazy
+};
+//# sourceMappingURL=index.js.map

package/dist/ledger-FU6GH5EH.js

@@ -0,0 +1,42 @@
+import "./chunk-GHVIKOHT.js";
+import {
+  LedgerStore,
+  applyPatch,
+  computePatch
+} from "./chunk-OEAATWH5.js";
+import {
+  LEDGER_COLLECTION,
+  LEDGER_DELTAS_COLLECTION
+} from "./chunk-I7FD46FF.js";
+import {
+  canonicalJson,
+  envelopePayloadHash,
+  hashEntry,
+  paddedIndex,
+  parseIndex,
+  sha256Hex
+} from "./chunk-25NDNMQ7.js";
+import "./chunk-QQJXBZCO.js";
+import "./chunk-FQQF23MC.js";
+import "./chunk-MSPNM2OM.js";
+import "./chunk-SYMS4546.js";
+import "./chunk-X6CMGUAG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HUS3J5WM.js";
+import "./chunk-CKZW6P5V.js";
+import "./chunk-FH542DDY.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  LEDGER_COLLECTION,
+  LEDGER_DELTAS_COLLECTION,
+  LedgerStore,
+  applyPatch,
+  canonicalJson,
+  computePatch,
+  envelopePayloadHash,
+  hashEntry,
+  paddedIndex,
+  parseIndex,
+  sha256Hex
+};
+//# sourceMappingURL=ledger-FU6GH5EH.js.map

package/dist/legacy/bundle.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @noy-db/hub/bundle — DEPRECATED compatibility alias.
+ *
+ * @category capability
+ * @deprecated The `/bundle` subpath has been split into two services:
+ *   the `.noydb` artifact format now lives at `@noy-db/hub/pod`, and the
+ *   partition-transfer ops at `@noy-db/hub/cargo`. This barrel re-exports
+ *   the union so existing `@noy-db/hub/bundle` pins keep resolving the
+ *   same surface. Prefer `/pod` and `/cargo` in new code.
+ *
+ * `/adapter` and `/describe` were retired (and their `src/legacy/*.ts` files
+ * deleted) in the same sweep that left this one standing — `/bundle` survives
+ * as a published subpath until klum-db's interchange migrates off it (tracked
+ * as phase 2/3). `kernel.ts` also remains in this folder, but only as
+ * `/cargo`'s internal re-export floor — it is no longer a published subpath.
+ */
+export { writePod, readPod, readPodHeader, writeNoydbBundle, readNoydbBundle, readNoydbBundleHeader, resetBrotliSupportCache, NOYDB_BUNDLE_MAGIC, NOYDB_BUNDLE_PREFIX_BYTES, NOYDB_BUNDLE_FORMAT_VERSION, FLAG_COMPRESSED, FLAG_HAS_INTEGRITY_HASH, COMPRESSION_NONE, COMPRESSION_GZIP, COMPRESSION_BROTLI, validateBundleHeader, encodeBundleHeader, generateULID, isULID, } from '../with-pod/index.js';
+export type { WritePodOptions, WriteNoydbBundleOptions, ReadNoydbBundleOptions, NoydbBundleReadResult, CompressionAlgo, NoydbPodHeader, NoydbBundleHeader, } from '../with-pod/index.js';
+export { walkClosure } from '../with-cargo/walk-closure.js';
+export type { WalkClosureOptions, ClosureResult } from '../with-cargo/walk-closure.js';
+export { describeExtraction } from '../with-cargo/describe-extraction.js';
+export type { ExtractionPreview } from '../with-cargo/describe-extraction.js';
+export { extractPartition } from '../with-cargo/extract-partition.js';
+export type { ExtractPartitionResult } from '../with-cargo/extract-partition.js';
+export { adoptPartition, unsealDeks, createOwnerOnAdoptedPartition } from '../with-cargo/adopt-partition.js';
+export { decryptExtractedPartition } from '../with-cargo/decrypt-partition.js';
+export type { DecryptedRecord } from '../with-cargo/decrypt-partition.js';
+export type { AdoptPartitionOptions, AdoptPartitionResult, CreateOwnerResult, CreateOwnerOptions, CreateOwnerStandardOptions, CreateOwnerManagedOptions, } from '../with-cargo/adopt-partition.js';
+export { TransferSealError, AdoptionStateError } from '../kernel/errors.js';
+export { BundleIntegrityError, BundleSealMismatchError, PodVersionConflictError, BundleVersionConflictError, BackupLedgerError, BackupCorruptedError, PartitionExtractionError, } from '../kernel/errors.js';

package/dist/legacy/kernel.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The `@noy-db/hub/kernel` published subpath has been retired (coordinated
+ * removal; consumers migrated to `@noy-db/hub/cargo`). This file survives
+ * unpublished as `/cargo`'s internal re-export floor — `with-cargo/index.ts`
+ * does `export * from '../legacy/kernel.js'` to consolidate this runtime-helper
+ * / error-class / type surface into the cargo seam, and
+ * `cargo-surface-golden.test.ts` reads this file directly as part of that
+ * union. Do not reintroduce it as a tsup entry or package.json export.
+ *
+ * @packageDocumentation
+ */
+export { readPath } from '../kernel/query/predicate.js';
+export { reduceRecords } from '../with-lookup/aggregate/aggregation.js';
+export { groupAndReduce } from '../with-lookup/aggregate/groupby.js';
+export { generateULID } from '../with-pod/ulid.js';
+export { sha256Hex } from '../kernel/enclave/index.js';
+export { isQuorum, runDrainBarrier } from '../port/by/index.js';
+export { fuseRetrieval } from '../with-lookup/search/fuse.js';
+export { CrossShardJoinError, DataResidencyError, NoAccessError, ReservedVaultNameError, ShardProvisioningError, UnknownShardError, ValidationError, VaultTemplateNotFoundError, } from '../kernel/errors.js';
+export type { CollectionMeta, VaultMeta } from '../with-shape/introspection/meta.js';
+export type { ChangeEvent } from '../kernel/types.js';
+export type { Vault } from '../kernel/vault.js';
+export type { Collection } from '../kernel/collection.js';
+export type { Noydb } from '../kernel/noydb.js';
+export type { Operator } from '../kernel/query/predicate.js';
+export type { Query } from '../kernel/query/builder.js';
+export type { JoinStrategy } from '../kernel/query/join.js';
+export type { LiveQuery } from '../kernel/query/live.js';
+export type { AggregateResult, AggregateSpec, LiveAggregation, } from '../with-lookup/aggregate/aggregation.js';
+export type { IndexDef } from '../with-lookup/indexing/eager-indexes.js';
+export type { FuseOptions } from '../with-lookup/search/fuse.js';
+export type { RetrieveHit, RetrieveOptions } from '../with-lookup/search/retrieve-types.js';
+export type { CoordinationProvider, WriterPresence, FenceState, DrainBarrierOptions, } from '../port/by/index.js';

package/dist/liberate-YUN7W5QG.js

@@ -0,0 +1,24 @@
+import {
+  liberateVault
+} from "./chunk-PXWVF7MC.js";
+import "./chunk-7NS43EXZ.js";
+import "./chunk-BCYQA5BK.js";
+import "./chunk-KPGX66PM.js";
+import "./chunk-K62IUKOD.js";
+import "./chunk-5XIPOCQC.js";
+import "./chunk-5ZOSG3RJ.js";
+import "./chunk-4N5QFSNQ.js";
+import "./chunk-QQJXBZCO.js";
+import "./chunk-FQQF23MC.js";
+import "./chunk-MSPNM2OM.js";
+import "./chunk-SYMS4546.js";
+import "./chunk-X6CMGUAG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HUS3J5WM.js";
+import "./chunk-CKZW6P5V.js";
+import "./chunk-FH542DDY.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  liberateVault
+};
+//# sourceMappingURL=liberate-YUN7W5QG.js.map

package/dist/link-set-MNADSH5M.js

@@ -0,0 +1,31 @@
+import {
+  LinkEndpointError,
+  LinkSet
+} from "./chunk-57V5S7PW.js";
+import {
+  LINK_COLLECTION_PREFIX,
+  LinkIntegrityError,
+  isLinkCollectionName,
+  linkCollectionName,
+  linkRowKey
+} from "./chunk-AWB5JZW6.js";
+import "./chunk-QQJXBZCO.js";
+import "./chunk-FQQF23MC.js";
+import "./chunk-MSPNM2OM.js";
+import "./chunk-SYMS4546.js";
+import "./chunk-X6CMGUAG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HUS3J5WM.js";
+import "./chunk-CKZW6P5V.js";
+import "./chunk-FH542DDY.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  LINK_COLLECTION_PREFIX,
+  LinkEndpointError,
+  LinkIntegrityError,
+  LinkSet,
+  isLinkCollectionName,
+  linkCollectionName,
+  linkRowKey
+};
+//# sourceMappingURL=link-set-MNADSH5M.js.map

package/dist/materialized-views/index.js

@@ -1,33 +1,43 @@
 import {
   withMaterializedView
-} from "../chunk-3YFXJ3ZP.js";
+} from "../chunk-UTLEAJXC.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-AQTBSL7R.js";
+} from "../chunk-2JMMY7HZ.js";
+import "../chunk-DGH65E7Q.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-62QYRORB.js";
+} from "../chunk-3G4KMVUN.js";
 import {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-BG3SPSR4.js";
-import "../chunk-5O3AOPDT.js";
-import "../chunk-5TDJ56JE.js";
-import "../chunk-LV7M27WM.js";
-import "../chunk-M2YKN37S.js";
-import "../chunk-5LUY7UTV.js";
+} from "../chunk-TPH5EO6L.js";
+import "../chunk-IGJHJYM6.js";
+import "../chunk-IGJCYUT5.js";
+import "../chunk-ELNBMFOS.js";
+import "../chunk-BE7N3AXA.js";
+import "../chunk-ARSAMO24.js";
+import "../chunk-25NDNMQ7.js";
+import "../chunk-QQJXBZCO.js";
+import "../chunk-FQQF23MC.js";
+import "../chunk-MSPNM2OM.js";
+import "../chunk-SYMS4546.js";
+import "../chunk-X6CMGUAG.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-HUS3J5WM.js";
+import "../chunk-CKZW6P5V.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-ZYUC53LT.js";
+} from "../chunk-FH542DDY.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,

package/dist/noydb-6JLBZU4U.js

@@ -0,0 +1,67 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-A2QF4JUE.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-5JB73NMC.js";
+import "./chunk-DIRRS7WP.js";
+import "./chunk-AWB5JZW6.js";
+import "./chunk-7ITPJFGC.js";
+import "./chunk-Q3XSMOZM.js";
+import "./chunk-P5RY4ZWD.js";
+import "./chunk-QLLKLFE2.js";
+import "./chunk-GYGLAVCX.js";
+import "./chunk-BZO4WCJI.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-JOQ53DMI.js";
+import "./chunk-D26JB3LZ.js";
+import "./chunk-A2Y6YFVN.js";
+import "./chunk-XHV25KBM.js";
+import "./chunk-PR5LC5YX.js";
+import "./chunk-H6HM6CVR.js";
+import "./chunk-ODJWBC5I.js";
+import "./chunk-FXK4X4BL.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-H44ZE4IE.js";
+import "./chunk-7QIXUSDQ.js";
+import "./chunk-DGH65E7Q.js";
+import "./chunk-H6CZSDWK.js";
+import "./chunk-QYPKGVT4.js";
+import "./chunk-3CNQ7FQ3.js";
+import "./chunk-KPZS5QAQ.js";
+import "./chunk-NO272T7Q.js";
+import "./chunk-IGJHJYM6.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-KPGX66PM.js";
+import "./chunk-7VSGW5KJ.js";
+import "./chunk-ELNBMFOS.js";
+import "./chunk-BE7N3AXA.js";
+import "./chunk-ARSAMO24.js";
+import "./chunk-IP2QBAGS.js";
+import "./chunk-6QILBDZU.js";
+import "./chunk-VQNJ7UZL.js";
+import "./chunk-4R4Q64W5.js";
+import "./chunk-5ZOSG3RJ.js";
+import "./chunk-4N5QFSNQ.js";
+import "./chunk-WTUNZACT.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-OEAATWH5.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-25NDNMQ7.js";
+import "./chunk-DJ3VKYFA.js";
+import "./chunk-CIKY6I4W.js";
+import "./chunk-QQJXBZCO.js";
+import "./chunk-FQQF23MC.js";
+import "./chunk-MSPNM2OM.js";
+import "./chunk-SYMS4546.js";
+import "./chunk-X6CMGUAG.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-HUS3J5WM.js";
+import "./chunk-CKZW6P5V.js";
+import "./chunk-FH542DDY.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-6JLBZU4U.js.map

package/dist/on/index.js

@@ -1,9 +1,15 @@
 import {
   mintPaperRecoveryEntry
-} from "../chunk-IGUYVGGI.js";
-import "../chunk-5O3AOPDT.js";
-import "../chunk-5TDJ56JE.js";
-import "../chunk-ZYUC53LT.js";
+} from "../chunk-6QILBDZU.js";
+import "../chunk-QQJXBZCO.js";
+import "../chunk-FQQF23MC.js";
+import "../chunk-MSPNM2OM.js";
+import "../chunk-SYMS4546.js";
+import "../chunk-X6CMGUAG.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-HUS3J5WM.js";
+import "../chunk-CKZW6P5V.js";
+import "../chunk-FH542DDY.js";
 import "../chunk-PZ5AY32C.js";
 export {
   mintPaperRecoveryEntry

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-EIZUR2XW.js";
+} from "../chunk-YXOUQ2H7.js";
 import {
   OverlayedCollection
-} from "../chunk-CMGR4ZEW.js";
+} from "../chunk-A2Y6YFVN.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-VCTFO5CO.js";
+} from "../chunk-OFJ5GPNA.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-ZYUC53LT.js";
+} from "../chunk-FH542DDY.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -1,28 +1,42 @@
 import {
   withPeriods
-} from "../chunk-CWPPNPOH.js";
+} from "../chunk-O2DYPAZY.js";
 import {
   PERIODS_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
   appendPeriodLedgerEntry,
   assertTsWritable,
   chainAnchor,
   loadPeriods,
+  periodExclusiveUpperBound,
   validatePeriodName
-} from "../chunk-IELYAOGG.js";
+} from "../chunk-FXK4X4BL.js";
 import "../chunk-GHVIKOHT.js";
-import "../chunk-LXQT4WMP.js";
+import "../chunk-OEAATWH5.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-AIWULCUO.js";
-import "../chunk-5O3AOPDT.js";
-import "../chunk-5TDJ56JE.js";
-import "../chunk-ZYUC53LT.js";
+import "../chunk-25NDNMQ7.js";
+import "../chunk-QQJXBZCO.js";
+import "../chunk-FQQF23MC.js";
+import "../chunk-MSPNM2OM.js";
+import "../chunk-SYMS4546.js";
+import "../chunk-X6CMGUAG.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-HUS3J5WM.js";
+import "../chunk-CKZW6P5V.js";
+import "../chunk-FH542DDY.js";
 import "../chunk-PZ5AY32C.js";
 export {
   PERIODS_COLLECTION,
+  PERIOD_ARCHIVES_COLLECTION,
+  PERIOD_FREEZES_COLLECTION,
+  PERIOD_TARGET_PURGES_COLLECTION,
   appendPeriodLedgerEntry,
   assertTsWritable,
   chainAnchor,
   loadPeriods,
+  periodExclusiveUpperBound,
   validatePeriodName,
   withPeriods
 };

package/dist/pod/index.js

@@ -4,7 +4,7 @@ import {
   createPodStore,
   wrapBundleStore,
   wrapPodStore
-} from "../chunk-AZAOEIKW.js";
+} from "../chunk-7E67FJ33.js";
 import {
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
@@ -23,15 +23,21 @@ import {
   validateBundleHeader,
   writeNoydbBundle,
   writePod
-} from "../chunk-FISN7WE4.js";
-import "../chunk-SMXWYP24.js";
+} from "../chunk-K62IUKOD.js";
+import "../chunk-5XIPOCQC.js";
 import {
   generateULID,
   isULID
 } from "../chunk-ZJADGNYF.js";
-import "../chunk-5O3AOPDT.js";
-import "../chunk-5TDJ56JE.js";
-import "../chunk-ZYUC53LT.js";
+import "../chunk-QQJXBZCO.js";
+import "../chunk-FQQF23MC.js";
+import "../chunk-MSPNM2OM.js";
+import "../chunk-SYMS4546.js";
+import "../chunk-X6CMGUAG.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-HUS3J5WM.js";
+import "../chunk-CKZW6P5V.js";
+import "../chunk-FH542DDY.js";
 import "../chunk-PZ5AY32C.js";
 export {
   COMPRESSION_BROTLI,

package/dist/policy-JTFOPPUU.js

@@ -0,0 +1,41 @@
+import {
+  DEFAULT_FRESHNESS_MS,
+  PERSONAL_POLICY,
+  STRICT_POLICY,
+  checkGate,
+  createNoydbPolicy,
+  describeGate,
+  mergePolicy
+} from "./chunk-MCEKIAO4.js";
+import {
+  META_COLLECTION,
+  POLICY_RECORD_ID,
+  loadVaultPolicy,
+  saveVaultPolicy
+} from "./chunk-DIRRS7WP.js";
+import "./chunk-CKZW6P5V.js";
+import {
+  ManagedRecoveryNotEnrolledError,
+  PolicyDeniedError,
+  RecoveryNotEnrolledError,
+  RecoveryProfileNotImplementedError
+} from "./chunk-FH542DDY.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  DEFAULT_FRESHNESS_MS,
+  META_COLLECTION,
+  ManagedRecoveryNotEnrolledError,
+  PERSONAL_POLICY,
+  POLICY_RECORD_ID,
+  PolicyDeniedError,
+  RecoveryNotEnrolledError,
+  RecoveryProfileNotImplementedError,
+  STRICT_POLICY,
+  checkGate,
+  createNoydbPolicy,
+  describeGate,
+  loadVaultPolicy,
+  mergePolicy,
+  saveVaultPolicy
+};
+//# sourceMappingURL=policy-JTFOPPUU.js.map

package/dist/port/as/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @noy-db/hub/as — the as-* exporter family port.
+ *
+ * An export-format package (`as-csv`, `as-xlsx`, `as-json`, `as-noydb`
+ * bundle, `as-sql`, …) binds ONLY to this subpath: the shared import/merge
+ * diff primitive (`diffVault`/`VaultDiff`, ungated shared infra — see
+ * `with-cargo/vault-diff.ts`) plus the `.noydb` pod read/write primitives
+ * (`writePod`/`readPod`/`readPodHeader`, always-on infra — see
+ * `with-pod/index.ts`) and the `Vault` handle type those primitives close
+ * over.
+ *
+ * LAYER PORT (not a kernel spine port): this file lives at `src/port/as/`, a
+ * sibling of the other family ports, not the kernel spine. It may import
+ * `with-*` services directly — same tier as `with-cargo`/`with-pod`
+ * themselves — because `scripts/check-architecture.mjs`'s port-layering
+ * check only restricts port→port imports; it never restricted a port's
+ * with-* service imports in the first place.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit and
+ * tsup's per-entry bundling keeps class identity stable across subpaths.
+ */
+export { diffVault } from '../../with-cargo/vault-diff.js';
+export type { VaultDiff } from '../../with-cargo/vault-diff.js';
+export { writePod, readPod, readPodHeader } from '../../with-pod/index.js';
+export type { WritePodOptions, NoydbPodHeader } from '../../with-pod/index.js';
+export type { Vault } from '../../kernel/vault.js';

package/dist/port/at/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @noy-db/hub/at — the at-* sealing family port.
+ *
+ * A sealing-key provider (`at-env`, `at-aws-kms`, `at-gcp-kms`, …) binds
+ * ONLY to this subpath: the `SealingKeyProvider` contract concrete
+ * providers implement to seal/unseal a hub-generated random passphrase
+ * for managed-passphrase mode. Its two methods (`seal`/`unseal`) close
+ * over only `Uint8Array`/`Promise`/`string` — no additional option or
+ * result types to re-export.
+ *
+ * NOTE: `SealingKeyProvider` is implemented in `with-party/team/*` (the
+ * managed-passphrase service), not the kernel spine proper — same
+ * precedent as `@noy-db/hub/ui` re-exporting from `with-shape/introspection`.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit and
+ * tsup's per-entry bundling keeps class identity stable across subpaths.
+ */
+export type { SealingKeyProvider } from '../../with-party/team/managed-passphrase.js';

package/dist/port/by/default-provider.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Lazy factory for the store-backed default {@link CoordinationProvider}.
+ * `with-shape/schema-update` is service-layer code the kernel spine may not
+ * statically import — the dynamic `import()` below is the port-layering
+ * law's sanctioned escape hatch for this exact case.
+ */
+import type { NoydbStore } from '../../kernel/types.js';
+export type { CoordinationProvider } from './types.js';
+export declare function createDefaultCoordinationProvider(store: NoydbStore): Promise<import("../../with-shape/schema-update/store-coordination-provider.js").StoreCoordinationProvider>;