@noy-db/hub 0.4.0 → 0.6.0-pre.0

package/dist/liberate-KICI7AJN.js

@@ -0,0 +1,24 @@
+import {
+  liberateVault
+} from "./chunk-JEM2IGS3.js";
+import "./chunk-JSRU5W2M.js";
+import "./chunk-4MQDV3HZ.js";
+import "./chunk-MC2LFTQM.js";
+import "./chunk-EK7DT5BT.js";
+import "./chunk-CYQOUTMY.js";
+import "./chunk-RLWY6Z44.js";
+import "./chunk-27TCYH6G.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  liberateVault
+};
+//# sourceMappingURL=liberate-KICI7AJN.js.map

package/dist/{link-set-CGYC3OH5.js → link-set-2TTP4VLO.js}

@@ -1,23 +1,23 @@
 import {
   LinkEndpointError,
   LinkSet
-} from "./chunk-TWPK7KUJ.js";
+} from "./chunk-F3GVO44K.js";
 import {
   LINK_COLLECTION_PREFIX,
   LinkIntegrityError,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-4JQK3L4V.js";
-import "./chunk-SU6SGWXM.js";
-import "./chunk-EFJAAFBW.js";
-import "./chunk-35NMVJ7I.js";
-import "./chunk-NFZGZ4AK.js";
-import "./chunk-QJNCB5SK.js";
+} from "./chunk-HNHCQ556.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AKKRXT23.js";
-import "./chunk-77AEMXFA.js";
-import "./chunk-QZWTRENR.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LINK_COLLECTION_PREFIX,
@@ -28,4 +28,4 @@ export {
   linkCollectionName,
   linkRowKey
 };
-//# sourceMappingURL=link-set-CGYC3OH5.js.map
+//# sourceMappingURL=link-set-2TTP4VLO.js.map

package/dist/managed-secret-EAOYWRYF.js

@@ -0,0 +1,27 @@
+import {
+  MemoryRecipientSealer,
+  MemorySealingKeyProvider,
+  SEALED_SECRET_RECORD_ID,
+  aesGcmOpen,
+  loadSealedSecret,
+  parseRsaOaepTlv,
+  parseSealedEnvelope,
+  resolveManagedSecret,
+  saveSealedSecret,
+  sealRsaOaepTlv
+} from "./chunk-MC2LFTQM.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  MemoryRecipientSealer,
+  MemorySealingKeyProvider,
+  SEALED_SECRET_RECORD_ID,
+  aesGcmOpen,
+  loadSealedSecret,
+  parseRsaOaepTlv,
+  parseSealedEnvelope,
+  resolveManagedSecret,
+  saveSealedSecret,
+  sealRsaOaepTlv
+};
+//# sourceMappingURL=managed-secret-EAOYWRYF.js.map

package/dist/materialized-views/index.js

@@ -1,47 +1,47 @@
 import {
   withMaterializedView
-} from "../chunk-MXUT7FTE.js";
+} from "../chunk-3HYWYLXL.js";
 import {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-7H3WWH6J.js";
+} from "../chunk-3UK6STWO.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-IVYQAVWO.js";
-import "../chunk-LRRX57UA.js";
+} from "../chunk-3IIPWA75.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-3HUYRN24.js";
+} from "../chunk-7F4DBNSP.js";
+import "../chunk-CCZJJ4I2.js";
+import "../chunk-ZXJXDHNK.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-V6UQZA2H.js";
-import "../chunk-KRCBZYTZ.js";
+import "../chunk-E6427JU2.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-CADUYBQD.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-OWHP3H5C.js";
-import "../chunk-UADPR6F4.js";
-import "../chunk-6UBZ6I5Z.js";
-import "../chunk-DQZXPGGZ.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+import "../chunk-XB7LUDKM.js";
+import "../chunk-7G6VDWXB.js";
+import "../chunk-UHXCLPGC.js";
+import "../chunk-24UICKTB.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,

package/dist/money/index.js

@@ -10,10 +10,10 @@ import {
   moneyNumber,
   mulRate,
   scaleForCurrency
-} from "../chunk-SGDPRCC4.js";
+} from "../chunk-MZ5ZFO2D.js";
 import "../chunk-IGJCYUT5.js";
-import "../chunk-6UBZ6I5Z.js";
-import "../chunk-QZWTRENR.js";
+import "../chunk-UHXCLPGC.js";
+import "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MoneyCurrencyError,

package/dist/noydb-6W2XGQCS.js

@@ -0,0 +1,83 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-3CLZY46Y.js";
+import "./chunk-HVQGCKY4.js";
+import "./chunk-4HDYQL3J.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-HNHCQ556.js";
+import "./chunk-GYGLAVCX.js";
+import "./chunk-MVOWXQHN.js";
+import "./chunk-ZGGVOADG.js";
+import "./chunk-6LJY7X5A.js";
+import "./chunk-GS5RT2KK.js";
+import "./chunk-PGAPBZEK.js";
+import "./chunk-FUHKW252.js";
+import "./chunk-DG27IUVI.js";
+import "./chunk-MC2LFTQM.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-2LGDCNFJ.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-V5C5NNBR.js";
+import "./chunk-TLNNHG3A.js";
+import "./chunk-T4GPR2IR.js";
+import "./chunk-ZXJXDHNK.js";
+import "./chunk-OF3L2SD6.js";
+import "./chunk-55LKVALY.js";
+import "./chunk-VJFMXYKP.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-LTU4FLHG.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-JXIDGFKS.js";
+import "./chunk-SMY5X46Z.js";
+import "./chunk-DZFQVICS.js";
+import "./chunk-35EBKWQU.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-XBLKM73C.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-NQCNSVGI.js";
+import "./chunk-3737A6EA.js";
+import "./chunk-E6427JU2.js";
+import "./chunk-P7NGLLUF.js";
+import "./chunk-JIUVJ4M7.js";
+import "./chunk-GQ3BX5EA.js";
+import "./chunk-NO272T7Q.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-YMUFFJCO.js";
+import "./chunk-CADUYBQD.js";
+import "./chunk-IGJCYUT5.js";
+import "./chunk-PVEWA2DU.js";
+import "./chunk-MSWYQLMQ.js";
+import "./chunk-XB7LUDKM.js";
+import "./chunk-7G6VDWXB.js";
+import "./chunk-UHXCLPGC.js";
+import "./chunk-DPJTDNUF.js";
+import "./chunk-NVU7ZMPN.js";
+import "./chunk-RLWY6Z44.js";
+import "./chunk-27TCYH6G.js";
+import "./chunk-AHLJSVRL.js";
+import "./chunk-W3TVWF6N.js";
+import "./chunk-VKQCVU2Z.js";
+import "./chunk-ZJADGNYF.js";
+import "./chunk-AFHQATY4.js";
+import "./chunk-ZK4CO2KZ.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-3FSX6LDG.js";
+import "./chunk-24UICKTB.js";
+import "./chunk-RPXL6KSX.js";
+import "./chunk-FAXZQ5UF.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-6W2XGQCS.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-MSMJJB4J.js";
-import {
-  OverlayedCollection
-} from "../chunk-ZTLOXFPB.js";
+} from "../chunk-2KIV7BEK.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-IG6KUWBX.js";
+} from "../chunk-FNSMZQS4.js";
+import {
+  OverlayedCollection
+} from "../chunk-OF3L2SD6.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -1,14 +1,13 @@
-import {
-  withPeriods
-} from "../chunk-JQ2AX4T5.js";
 import {
   NO_PERIODS,
   appendPeriodLedgerEntry,
   assertTsWritable,
   chainAnchor,
   loadPeriods,
-  validatePeriodName
-} from "../chunk-ZFG5EBI3.js";
+  purgeMarkersOn,
+  validatePeriodName,
+  withPeriods
+} from "../chunk-LTU4FLHG.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -16,19 +15,19 @@ import {
   PERIOD_FREEZES_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-NM5UYF6Q.js";
-import "../chunk-YGK2HMLR.js";
+} from "../chunk-JXIDGFKS.js";
+import "../chunk-ZK4CO2KZ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-DQZXPGGZ.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+import "../chunk-24UICKTB.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
-import "../chunk-QZWTRENR.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
+import "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_PERIODS,
@@ -41,6 +40,7 @@ export {
   chainAnchor,
   loadPeriods,
   periodExclusiveUpperBound,
+  purgeMarkersOn,
   validatePeriodName,
   withPeriods
 };

package/dist/pod/index.js

@@ -1,9 +1,50 @@
 import {
   createBundleStore,
   createPodStore,
+  followRedirects,
+  open,
+  signRedirect,
+  verifyRedirect,
   wrapBundleStore,
   wrapPodStore
-} from "../chunk-2J6UEN2V.js";
+} from "../chunk-MXZ5TSTR.js";
+import "../chunk-3CLZY46Y.js";
+import "../chunk-HVQGCKY4.js";
+import "../chunk-4HDYQL3J.js";
+import {
+  deriveSchemaManifest,
+  loadSchemaManifestEntry
+} from "../chunk-HS7HNYBD.js";
+import {
+  MANIFEST_COLLECTION,
+  isManifestReservedCollection
+} from "../chunk-EPFF7LOX.js";
+import "../chunk-HNHCQ556.js";
+import "../chunk-GYGLAVCX.js";
+import "../chunk-MVOWXQHN.js";
+import "../chunk-ZGGVOADG.js";
+import "../chunk-6LJY7X5A.js";
+import "../chunk-GS5RT2KK.js";
+import "../chunk-PGAPBZEK.js";
+import "../chunk-FUHKW252.js";
+import "../chunk-DG27IUVI.js";
+import "../chunk-MC2LFTQM.js";
+import "../chunk-KHKKD62N.js";
+import "../chunk-2LGDCNFJ.js";
+import "../chunk-Y2NBBT6K.js";
+import "../chunk-V5C5NNBR.js";
+import "../chunk-TLNNHG3A.js";
+import "../chunk-T4GPR2IR.js";
+import "../chunk-ZXJXDHNK.js";
+import "../chunk-OF3L2SD6.js";
+import "../chunk-55LKVALY.js";
+import "../chunk-VJFMXYKP.js";
+import "../chunk-PEOZ34EM.js";
+import "../chunk-LTU4FLHG.js";
+import "../chunk-GHVIKOHT.js";
+import "../chunk-JXIDGFKS.js";
+import "../chunk-SMY5X46Z.js";
+import "../chunk-DZFQVICS.js";
 import {
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
@@ -13,6 +54,7 @@ import {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
   NOYDB_BUNDLE_PREFIX_BYTES,
+  POD_SIG_ALG,
   encodeBundleHeader,
   hasNoydbBundleMagic,
   readNoydbBundle,
@@ -20,32 +62,78 @@ import {
   readPod,
   readPodCover,
   readPodHeader,
+  readPodRedirect,
   resetBrotliSupportCache,
+  signRecord,
+  signedBytes,
   validateBundleHeader,
+  verifyPodHeader,
+  verifyRecord,
   writeNoydbBundle,
   writePod
-} from "../chunk-JEI6JJNI.js";
-import "../chunk-Q36YXK77.js";
+} from "../chunk-EK7DT5BT.js";
+import "../chunk-CYQOUTMY.js";
+import "../chunk-35EBKWQU.js";
+import "../chunk-5D2ALSM5.js";
+import "../chunk-XBLKM73C.js";
+import "../chunk-AURFOK3D.js";
+import "../chunk-NQCNSVGI.js";
+import "../chunk-3737A6EA.js";
+import "../chunk-E6427JU2.js";
+import "../chunk-P7NGLLUF.js";
+import "../chunk-JIUVJ4M7.js";
+import "../chunk-GQ3BX5EA.js";
+import "../chunk-NO272T7Q.js";
+import "../chunk-XZHEOSQ2.js";
+import "../chunk-YMUFFJCO.js";
+import "../chunk-CADUYBQD.js";
+import "../chunk-IGJCYUT5.js";
+import "../chunk-PVEWA2DU.js";
+import "../chunk-MSWYQLMQ.js";
+import "../chunk-XB7LUDKM.js";
+import "../chunk-7G6VDWXB.js";
+import "../chunk-UHXCLPGC.js";
+import "../chunk-DPJTDNUF.js";
+import "../chunk-NVU7ZMPN.js";
+import "../chunk-RLWY6Z44.js";
+import "../chunk-27TCYH6G.js";
+import "../chunk-AHLJSVRL.js";
+import "../chunk-W3TVWF6N.js";
+import "../chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
 } from "../chunk-ZJADGNYF.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+import "../chunk-AFHQATY4.js";
+import "../chunk-ZK4CO2KZ.js";
+import "../chunk-I7FD46FF.js";
+import "../chunk-3FSX6LDG.js";
+import "../chunk-24UICKTB.js";
+import "../chunk-RPXL6KSX.js";
+import "../chunk-FAXZQ5UF.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   BackupCorruptedError,
   BackupLedgerError,
   BundleIntegrityError,
   BundleSealMismatchError,
   BundleVersionConflictError,
-  PodVersionConflictError
-} from "../chunk-QZWTRENR.js";
+  ManifestConflictError,
+  MigrationRequiredError,
+  PodHeaderVerificationError,
+  PodVersionConflictError,
+  RedirectBadSignatureError,
+  RedirectDepthExceededError,
+  RedirectLoopError,
+  RedirectUnreachableError
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BackupCorruptedError,
@@ -58,23 +146,44 @@ export {
   COMPRESSION_NONE,
   FLAG_COMPRESSED,
   FLAG_HAS_INTEGRITY_HASH,
+  MANIFEST_COLLECTION,
+  ManifestConflictError,
+  MigrationRequiredError,
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
   NOYDB_BUNDLE_PREFIX_BYTES,
+  POD_SIG_ALG,
+  PodHeaderVerificationError,
   PodVersionConflictError,
+  RedirectBadSignatureError,
+  RedirectDepthExceededError,
+  RedirectLoopError,
+  RedirectUnreachableError,
   createBundleStore,
   createPodStore,
+  deriveSchemaManifest,
   encodeBundleHeader,
+  followRedirects,
   generateULID,
   hasNoydbBundleMagic,
+  isManifestReservedCollection,
   isULID,
+  loadSchemaManifestEntry,
+  open,
   readNoydbBundle,
   readNoydbBundleHeader,
   readPod,
   readPodCover,
   readPodHeader,
+  readPodRedirect,
   resetBrotliSupportCache,
+  signRecord,
+  signRedirect,
+  signedBytes,
   validateBundleHeader,
+  verifyPodHeader,
+  verifyRecord,
+  verifyRedirect,
   wrapBundleStore,
   wrapPodStore,
   writeNoydbBundle,

package/dist/policy/index.js

@@ -6,20 +6,20 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "../chunk-DTFA5DO4.js";
+} from "../chunk-SKONR2OL.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "../chunk-Q2SEJMP2.js";
-import "../chunk-77AEMXFA.js";
+} from "../chunk-NVU7ZMPN.js";
+import "../chunk-24ZLWWEO.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,

package/dist/port/to/index.d.ts

@@ -16,4 +16,6 @@
  * tsup's per-entry bundling keeps class identity stable across subpaths.
  */
 export type { NoydbStore, NoydbBundleStore, NoydbPodStore, EncryptedEnvelope, VaultSnapshot, TxOp, StoreCapabilities, StoreCredentials, StoreCredentialSource, StoreTime, ListPageResult, } from '../../kernel/types.js';
-export { ConflictError, NetworkError, StoreCapabilityError, BundleVersionConflictError, PodVersionConflictError, } from '../../kernel/errors.js';
+export { ConflictError, NetworkError, StoreCapabilityError, BundleVersionConflictError, PodVersionConflictError, UnknownStoreKindError, DuplicateStoreKindError, } from '../../kernel/errors.js';
+export type { StoreClass, StoreDescriptor, StoreBinding, StoreFactory, StoreLocator } from './locator.js';
+export { createStoreLocator } from './locator.js';

package/dist/port/to/locator.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The Locator seam (#945 Task 1): a serializable, CREDENTIALLESS store
+ * descriptor plus a factory registry that reconstructs a `NoydbStore` from
+ * data.
+ *
+ * A `StoreDescriptor` is the pod-portable "what store and where" — kind,
+ * broad topology class, and a kind-specific serializable address/options
+ * bag. It is deliberately dumb data: no field on it is ever typed as a
+ * function, a `StoreCredentialSource`, or a `StoreCredentials` value, so a
+ * descriptor can be written into a pod / manifest / sync payload without an
+ * audit for leaked secrets. Anything that must resolve device-side or
+ * user-side — a short-lived credential, a device-local directory override,
+ * a mounted drive handle — travels out-of-band via `resolve()`'s `opts`,
+ * never through the descriptor itself.
+ *
+ * This module is pure TypeScript: no imports beyond the kernel's own types
+ * and errors, no Node built-ins, no crypto. It adds zero runtime
+ * dependencies to `@noy-db/hub/to`.
+ */
+import type { NoydbStore, StoreCredentialSource } from '../../kernel/types.js';
+/**
+ * The broad topology bucket a store descriptor's kind falls into —
+ * used by callers/UI to group or filter descriptors without knowing every
+ * concrete `kind` string.
+ */
+export type StoreClass = 'local' | 'browser' | 'lan' | 'cloud';
+/**
+ * A serializable, CREDENTIALLESS description of a store instance: enough
+ * data to reconstruct a `NoydbStore` via a registered `StoreFactory`, and
+ * safe to persist or transmit as-is.
+ *
+ * CREDENTIALLESS BY CONSTRUCTION: no field here may be typed as a function,
+ * a `StoreCredentialSource`, or a `StoreCredentials` value. Credentials
+ * NEVER ride the descriptor — they are supplied separately (as a
+ * `StoreCredentialSource`) to `StoreLocator.resolve()` at resolve time.
+ */
+export interface StoreDescriptor {
+    /** The registered factory key (e.g. `'file'`, `'aws-s3'`, `'webdav'`). */
+    readonly kind: string;
+    /** The broad topology bucket this kind falls into. */
+    readonly class: StoreClass;
+    /** Kind-specific serializable location (e.g. `{ dir }`, `{ bucket, region }`). */
+    readonly address: unknown;
+    /** Kind-specific serializable tuning options. */
+    readonly options?: unknown;
+}
+/**
+ * A kind-specific, device-local supplement to a `StoreDescriptor` — a
+ * directory override, a mount point, a drive handle — that is resolved
+ * device-side and never carried inside a pod alongside the descriptor.
+ */
+export type StoreBinding = unknown;
+/**
+ * Reconstructs a live `NoydbStore` from a `StoreDescriptor`. Registered
+ * against a `StoreLocator` under the descriptor's `kind`.
+ */
+export type StoreFactory = (descriptor: StoreDescriptor, opts: {
+    binding?: StoreBinding;
+    credentials?: StoreCredentialSource;
+}) => NoydbStore | Promise<NoydbStore>;
+/** A registry of `StoreFactory`s, keyed by `StoreDescriptor.kind`. */
+export interface StoreLocator {
+    /** Register a factory for `kind`. Throws if `kind` is already registered. */
+    register(kind: string, factory: StoreFactory): void;
+    /** Resolve `descriptor` to a live store via its kind's registered factory. */
+    resolve(descriptor: StoreDescriptor, opts?: {
+        binding?: StoreBinding;
+        credentials?: StoreCredentialSource;
+    }): NoydbStore | Promise<NoydbStore>;
+}
+/**
+ * Creates a fresh, empty `StoreLocator`.
+ *
+ * DUPLICATE REGISTRATION: `register()` throws if `kind` is already
+ * registered, rather than silently overwriting it (last-wins). A
+ * composition root that registers the same kind twice is almost always a
+ * mistake — a copy-pasted setup block, two satellite packages fighting
+ * over the same kind string — and last-wins would hide it behind whichever
+ * registration happened to run last. This mirrors the
+ * `DuplicateBehaviorNameError` philosophy (#947): fail loudly at the
+ * mistake's source instead of silently at some unrelated `resolve()` call
+ * later.
+ */
+export declare function createStoreLocator(): StoreLocator;

package/dist/port/with/device-seal-strategy.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Device-local sealer contract for the echo reveal-blob (spec decision 5,
+ * #940). Lives on the `/with` port (the one seam the kernel spine may
+ * import statically) so `NoydbOptions.deviceSeal` can reference this type
+ * without a spine→service static import. The concrete implementation
+ * (`MemoryDeviceSealProvider`) and the canonical re-export of this type
+ * live in `with-party/team/device-seal.ts`.
+ * @internal
+ */
+export interface DeviceSealProvider {
+    /** Non-sensitive identifier persisted as `provider_hint`. */
+    readonly id: string;
+    seal(plain: Uint8Array): Promise<Uint8Array>;
+    /** MUST throw on tamper or wrong provider. */
+    unseal(sealed: Uint8Array): Promise<Uint8Array>;
+}