@noy-db/hub 0.4.0 → 0.6.0-pre.0

package/dist/signer-7KHD4OL2.js

@@ -0,0 +1,25 @@
+import {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+} from "./chunk-ZWMO5GL5.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+};
+//# sourceMappingURL=signer-7KHD4OL2.js.map

package/dist/snapshots/index.js

@@ -4,19 +4,19 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-JEI6JJNI.js";
-import "../chunk-Q36YXK77.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+} from "../chunk-EK7DT5BT.js";
+import "../chunk-CYQOUTMY.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/snapshots/engine.ts

package/dist/{stale-T3V7XEOB.js → stale-K734VACF.js}

@@ -6,17 +6,17 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-7H3WWH6J.js";
+} from "./chunk-3UK6STWO.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-SU6SGWXM.js";
-import "./chunk-EFJAAFBW.js";
-import "./chunk-35NMVJ7I.js";
-import "./chunk-NFZGZ4AK.js";
-import "./chunk-QJNCB5SK.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-AKKRXT23.js";
-import "./chunk-77AEMXFA.js";
-import "./chunk-QZWTRENR.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-T3V7XEOB.js.map
+//# sourceMappingURL=stale-K734VACF.js.map

package/dist/storage-4H2GF6RQ.js

@@ -0,0 +1,23 @@
+import {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+} from "./chunk-V5C5NNBR.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+};
+//# sourceMappingURL=storage-4H2GF6RQ.js.map

package/dist/{store-coordination-provider-AHGFEMFA.js → store-coordination-provider-4SKLSFUG.js}

@@ -1,10 +1,10 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-WK7ULBTP.js";
+} from "./chunk-MVOWXQHN.js";
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-77AEMXFA.js";
+} from "./chunk-24ZLWWEO.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -139,4 +139,4 @@ function unref(timer) {
 export {
   StoreCoordinationProvider
 };
-//# sourceMappingURL=store-coordination-provider-AHGFEMFA.js.map
+//# sourceMappingURL=store-coordination-provider-4SKLSFUG.js.map

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-NLYALJMY.js";
+} from "../chunk-TFZ7LLOQ.js";
 import {
   NO_SYNC
 } from "../chunk-55LKVALY.js";
-import "../chunk-NM5UYF6Q.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+import "../chunk-JXIDGFKS.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
-import "../chunk-QZWTRENR.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
+import "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -1,6 +1,8 @@
 import {
+  MemoryDeviceSealProvider,
+  beginEchoUnlock,
   withTeam
-} from "../chunk-SBHN6QUT.js";
+} from "../chunk-46V67XP5.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -29,9 +31,10 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-ZNWSG7XC.js";
-import "../chunk-Q2SEJMP2.js";
+} from "../chunk-DPJTDNUF.js";
+import "../chunk-NVU7ZMPN.js";
 import {
+  buildEchoBlock,
   buildRecipientKeyringFile,
   changeSecret,
   createOwnerKeyring,
@@ -45,26 +48,32 @@ import {
   listUsersWithEnvelopes,
   loadKeyring,
   persistKeyring,
+  resolveEchoReveal,
   revoke,
-  updateKeyringIdentity
-} from "../chunk-Q5YJCVJY.js";
-import "../chunk-2BET5QTS.js";
-import "../chunk-PTHKZWEH.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+  updateKeyringIdentity,
+  verifyPrompt,
+  verifyTypedEcho
+} from "../chunk-RLWY6Z44.js";
+import "../chunk-27TCYH6G.js";
+import "../chunk-AHLJSVRL.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   TeamNotEnabledError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
+  MemoryDeviceSealProvider,
   NO_TEAM,
   TeamNotEnabledError,
+  beginEchoUnlock,
+  buildEchoBlock,
   buildRecipientKeyringFile,
   burnPaperRecoveryEntry,
   changeSecret,
@@ -96,6 +105,7 @@ export {
   recoverSecret,
   recoverUser,
   removeAuthenticator,
+  resolveEchoReveal,
   revoke,
   revokeMagicLinkGrant,
   rotateSecret,
@@ -105,6 +115,8 @@ export {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   updateKeyringIdentity,
+  verifyPrompt,
+  verifyTypedEcho,
   withTeam,
   writeMagicLinkGrant
 };

package/dist/tiers/index.js

@@ -11,19 +11,19 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-RQ4ZI4ZI.js";
-import "../chunk-PTHKZWEH.js";
-import "../chunk-SU6SGWXM.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-35NMVJ7I.js";
-import "../chunk-NFZGZ4AK.js";
-import "../chunk-QJNCB5SK.js";
+} from "../chunk-PGAPBZEK.js";
+import "../chunk-AHLJSVRL.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-AKKRXT23.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   TiersNotEnabledError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -1,16 +1,41 @@
 import {
   BundleVersionConflictError,
   ConflictError,
+  DuplicateStoreKindError,
   NetworkError,
   PodVersionConflictError,
-  StoreCapabilityError
-} from "../chunk-QZWTRENR.js";
+  StoreCapabilityError,
+  UnknownStoreKindError
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
+
+// src/port/to/locator.ts
+function createStoreLocator() {
+  const factories = /* @__PURE__ */ new Map();
+  return {
+    register(kind, factory) {
+      if (factories.has(kind)) {
+        throw new DuplicateStoreKindError(kind);
+      }
+      factories.set(kind, factory);
+    },
+    resolve(descriptor, opts = {}) {
+      const factory = factories.get(descriptor.kind);
+      if (!factory) {
+        throw new UnknownStoreKindError(descriptor.kind, [...factories.keys()].sort());
+      }
+      return factory(descriptor, opts);
+    }
+  };
+}
 export {
   BundleVersionConflictError,
   ConflictError,
+  DuplicateStoreKindError,
   NetworkError,
   PodVersionConflictError,
-  StoreCapabilityError
+  StoreCapabilityError,
+  UnknownStoreKindError,
+  createStoreLocator
 };
 //# sourceMappingURL=index.js.map

package/dist/to/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../../src/port/to/locator.ts"],"sourcesContent":["/**\n * The Locator seam (#945 Task 1): a serializable, CREDENTIALLESS store\n * descriptor plus a factory registry that reconstructs a `NoydbStore` from\n * data.\n *\n * A `StoreDescriptor` is the pod-portable \"what store and where\" — kind,\n * broad topology class, and a kind-specific serializable address/options\n * bag. It is deliberately dumb data: no field on it is ever typed as a\n * function, a `StoreCredentialSource`, or a `StoreCredentials` value, so a\n * descriptor can be written into a pod / manifest / sync payload without an\n * audit for leaked secrets. Anything that must resolve device-side or\n * user-side — a short-lived credential, a device-local directory override,\n * a mounted drive handle — travels out-of-band via `resolve()`'s `opts`,\n * never through the descriptor itself.\n *\n * This module is pure TypeScript: no imports beyond the kernel's own types\n * and errors, no Node built-ins, no crypto. It adds zero runtime\n * dependencies to `@noy-db/hub/to`.\n */\nimport type { NoydbStore, StoreCredentialSource } from '../../kernel/types.js'\nimport { DuplicateStoreKindError, UnknownStoreKindError } from '../../kernel/errors.js'\n\n/**\n * The broad topology bucket a store descriptor's kind falls into —\n * used by callers/UI to group or filter descriptors without knowing every\n * concrete `kind` string.\n */\nexport type StoreClass = 'local' | 'browser' | 'lan' | 'cloud'\n\n/**\n * A serializable, CREDENTIALLESS description of a store instance: enough\n * data to reconstruct a `NoydbStore` via a registered `StoreFactory`, and\n * safe to persist or transmit as-is.\n *\n * CREDENTIALLESS BY CONSTRUCTION: no field here may be typed as a function,\n * a `StoreCredentialSource`, or a `StoreCredentials` value. Credentials\n * NEVER ride the descriptor — they are supplied separately (as a\n * `StoreCredentialSource`) to `StoreLocator.resolve()` at resolve time.\n */\nexport interface StoreDescriptor {\n  /** The registered factory key (e.g. `'file'`, `'aws-s3'`, `'webdav'`). */\n  readonly kind: string\n  /** The broad topology bucket this kind falls into. */\n  readonly class: StoreClass\n  /** Kind-specific serializable location (e.g. `{ dir }`, `{ bucket, region }`). */\n  readonly address: unknown\n  /** Kind-specific serializable tuning options. */\n  readonly options?: unknown\n}\n\n/**\n * A kind-specific, device-local supplement to a `StoreDescriptor` — a\n * directory override, a mount point, a drive handle — that is resolved\n * device-side and never carried inside a pod alongside the descriptor.\n */\nexport type StoreBinding = unknown\n\n/**\n * Reconstructs a live `NoydbStore` from a `StoreDescriptor`. Registered\n * against a `StoreLocator` under the descriptor's `kind`.\n */\nexport type StoreFactory = (\n  descriptor: StoreDescriptor,\n  opts: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n) => NoydbStore | Promise<NoydbStore>\n\n/** A registry of `StoreFactory`s, keyed by `StoreDescriptor.kind`. */\nexport interface StoreLocator {\n  /** Register a factory for `kind`. Throws if `kind` is already registered. */\n  register(kind: string, factory: StoreFactory): void\n  /** Resolve `descriptor` to a live store via its kind's registered factory. */\n  resolve(\n    descriptor: StoreDescriptor,\n    opts?: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n  ): NoydbStore | Promise<NoydbStore>\n}\n\n/**\n * Creates a fresh, empty `StoreLocator`.\n *\n * DUPLICATE REGISTRATION: `register()` throws if `kind` is already\n * registered, rather than silently overwriting it (last-wins). A\n * composition root that registers the same kind twice is almost always a\n * mistake — a copy-pasted setup block, two satellite packages fighting\n * over the same kind string — and last-wins would hide it behind whichever\n * registration happened to run last. This mirrors the\n * `DuplicateBehaviorNameError` philosophy (#947): fail loudly at the\n * mistake's source instead of silently at some unrelated `resolve()` call\n * later.\n */\nexport function createStoreLocator(): StoreLocator {\n  const factories = new Map<string, StoreFactory>()\n\n  return {\n    register(kind, factory) {\n      if (factories.has(kind)) {\n        throw new DuplicateStoreKindError(kind)\n      }\n      factories.set(kind, factory)\n    },\n    resolve(descriptor, opts = {}) {\n      const factory = factories.get(descriptor.kind)\n      if (!factory) {\n        throw new UnknownStoreKindError(descriptor.kind, [...factories.keys()].sort())\n      }\n      return factory(descriptor, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA0FO,SAAS,qBAAmC;AACjD,QAAM,YAAY,oBAAI,IAA0B;AAEhD,SAAO;AAAA,IACL,SAAS,MAAM,SAAS;AACtB,UAAI,UAAU,IAAI,IAAI,GAAG;AACvB,cAAM,IAAI,wBAAwB,IAAI;AAAA,MACxC;AACA,gBAAU,IAAI,MAAM,OAAO;AAAA,IAC7B;AAAA,IACA,QAAQ,YAAY,OAAO,CAAC,GAAG;AAC7B,YAAM,UAAU,UAAU,IAAI,WAAW,IAAI;AAC7C,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,sBAAsB,WAAW,MAAM,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,KAAK,CAAC;AAAA,MAC/E;AACA,aAAO,QAAQ,YAAY,IAAI;AAAA,IACjC;AAAA,EACF;AACF;","names":[]}

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-GTYFIVIZ.js";
+} from "../chunk-35EBKWQU.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-QZWTRENR.js";
+import "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-RM7XWQDU.js"));
+var loadGuardExecutor = lazy(() => import("../executor-CYJQLKKI.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-QZWTRENR.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/{verify-7XWHJWUN.js → verify-RO5RTZOJ.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-35NMVJ7I.js";
+} from "./chunk-HXGUIPQB.js";
 import {
   dualReadSealedSlot
-} from "./chunk-NFZGZ4AK.js";
+} from "./chunk-AR2JDFAE.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-AKKRXT23.js";
+} from "./chunk-VCETL77O.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-QZWTRENR.js";
+} from "./chunk-HNGSV2YC.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-7XWHJWUN.js.map
+//# sourceMappingURL=verify-RO5RTZOJ.js.map

package/dist/walk-MQHYNDLZ.js

@@ -0,0 +1,21 @@
+import {
+  dumpVaultSchema
+} from "./chunk-MJWCLSQL.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-2LGDCNFJ.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-V5C5NNBR.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-MQHYNDLZ.js.map

package/dist/with-audit/guards/registry.d.ts

@@ -24,9 +24,14 @@ type AnyGuard = GuardSpec<Record<string, unknown>>;
 type AnyChange = GuardChange<Record<string, unknown>>;
 export declare class GuardRegistry {
     private readonly _byCollection;
+    private readonly _byName;
     private _amendmentChanges;
     private _amendmentMeta;
-    /** Register a guard. Multiple guards per collection are allowed. */
+    /**
+     * Register a guard. Multiple guards per collection are allowed. If
+     * `spec.name` is given and already registered by another guard in this
+     * vault, throws {@link DuplicateBehaviorNameError} before indexing.
+     */
     register<T extends Record<string, unknown>>(spec: GuardSpec<T>): void;
     /** All guards registered against `collection` in registration order. */
     guardsFor(collection: string): ReadonlyArray<AnyGuard>;
@@ -35,6 +40,8 @@ export declare class GuardRegistry {
         collection: string;
         count: number;
     }[];
+    /** Every registered guard spec, in registration order. Used by `Vault.listBehaviors()` (#947). */
+    all(): ReadonlyArray<AnyGuard>;
     /**
      * Run every guard's `check` for this collection. First throw wins —
      * remaining guards are not invoked. Guards without a `check` skip.

package/dist/with-audit/guards/types.d.ts

@@ -76,6 +76,11 @@ export interface GuardStrategyAny {
 /** Public registration shape. See `withGuard()`. */
 export interface GuardSpec<T extends Record<string, unknown>> {
     collection: string;
+    /**
+     * Optional stable per-vault identifier; the behavior manifest
+     * references behaviors by this name. Must be unique within a vault.
+     */
+    readonly name?: string;
     /**
      * Fires on `Collection.put` (insert + update). The `incoming` argument
      * is the record being written. Throw to cancel the put.

package/dist/with-audit/periods/index.d.ts

@@ -14,7 +14,7 @@
  */
 export { withPeriods } from './active.js';
 export type { PeriodsStrategy } from './strategy.js';
-export { PERIODS_COLLECTION, PERIOD_FREEZES_COLLECTION, PERIOD_ARCHIVES_COLLECTION, PERIOD_TARGET_PURGES_COLLECTION, periodExclusiveUpperBound, loadPeriods, chainAnchor, assertTsWritable, validatePeriodName, appendPeriodLedgerEntry, } from './periods.js';
+export { PERIODS_COLLECTION, PERIOD_FREEZES_COLLECTION, PERIOD_ARCHIVES_COLLECTION, PERIOD_TARGET_PURGES_COLLECTION, periodExclusiveUpperBound, loadPeriods, chainAnchor, assertTsWritable, validatePeriodName, appendPeriodLedgerEntry, purgeMarkersOn, } from './periods.js';
 export type { PeriodRecord, PeriodFreezeRecord, PeriodArchiveRecord, PeriodTargetPurgeRecord, TargetPurgeCount, ClosePeriodOptions, OpenPeriodOptions, CarryForwardContext, ReadOnlyCollection, } from './periods.js';
 /** The un-opted-in stub for this service — exported so callers can compare against it (#844). */
 export { NO_PERIODS } from './strategy.js';

package/dist/with-audit/periods/periods.d.ts

@@ -400,3 +400,10 @@ export declare function validatePeriodName(name: string, existing: readonly Peri
  * @internal
  */
 export declare function appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, name: string, collection?: string): Promise<void>;
+/**
+ * @internal #615. Sweep delete markers with `_ts < before` off ANY store
+ * (the vault's local adapter, or a push-only sync target). Returns the count
+ * removed. Shared by `vault._purgeDeleteMarkers` (local) and
+ * `vault._purgePeriodTargets` (push-only targets).
+ */
+export declare function purgeMarkersOn(store: NoydbStore, vault: string, before: string, collections?: string[]): Promise<number>;

package/dist/with-commit/tx/atomic-eligibility.d.ts

@@ -28,17 +28,19 @@
  *     write set can't express "this key changes twice in sequence."
  *  4. Every touched collection reports `_txAtomicSafe(op.type)` — see that
  *     method's doc comment on `Collection` for what it excludes and why.
- *     Note it also excludes a collection with live user write-hooks or an
- *     `afterPut`/`afterDelete` bus handler: both fire inside `Collection.put()`
- *     / `.delete()`, the wrappers the atomic path bypasses, and a `beforeWrite`
- *     hook may REFUSE a write (#906).
- *     Delete in particular gates on `refEnforcer !== undefined` rather than
- *     a `RefRegistry.getInbound()` lookup: `Vault.enforceRefsOnDelete`
- *     cascades from THREE sources (lookup-ref edges, classic inbound refs,
- *     managed-link `onDelete`), and only the blanket check is at least as
- *     strict as all three — a `getInbound`-only check would be narrower
- *     and wrongly admit unsafe atomic deletes (see `with-shape/links/
- *     vault-facade.ts` `enforceRefsOnDelete`, lines ~180-263).
+ *     #931: of the wrapper-level write signals, only a live `onBeforeWrite`
+ *     hook still excludes — it may REFUSE a write, which only
+ *     `Collection.put()`/`.delete()` honors. After-hooks and the
+ *     `afterPut`/`afterDelete` observe bus are refusal-free observers, so
+ *     the atomic path fires them itself per leg post-finalize
+ *     (`Collection._fireAtomicAfterWrite`) instead of forfeiting the batch.
+ *     Delete gates on the enforcer's `_deleteCascadesPossible(name)` (#922):
+ *     `Vault.enforceRefsOnDelete` cascades from THREE sources (lookup-ref
+ *     edges, classic inbound refs, managed-link `onDelete`), and the Vault
+ *     predicate unions exactly those three — a `getInbound`-only check would
+ *     be narrower and wrongly admit unsafe atomic deletes, because
+ *     `_prepareDelete` runs the cascades DURING prepare (see
+ *     `with-shape/links/vault-facade.ts` `enforceRefsOnDelete`).
  *
  * @internal
  */

package/dist/with-formula/derivations/registry.d.ts

@@ -13,6 +13,12 @@ interface RegisteredStrategy {
 export declare class DerivationRegistry {
     private readonly _bySource;
     private readonly _byOutput;
+    private readonly _byName;
+    /**
+     * Register a derivation strategy. If `spec.name` is given and already
+     * registered by another derivation in this vault, throws
+     * {@link DuplicateBehaviorNameError} before indexing.
+     */
     register(spec: DerivationSpec<any, any>): Promise<void>;
     strategiesForSource(source: string): ReadonlyArray<RegisteredStrategy>;
     strategiesProducingOutput(collection: string): ReadonlyArray<RegisteredStrategy>;

package/dist/with-formula/derivations/types.d.ts

@@ -122,6 +122,11 @@ export type OutputSpec = RecordOutputSpec | ArrayOutputSpec;
 export interface DerivationSpec<TSource extends Record<string, unknown>, TOutputs extends Record<string, Record<string, unknown> | ReadonlyArray<Record<string, unknown>>>> {
     /** Source collection name. */
     source: string;
+    /**
+     * Optional stable per-vault identifier; the behavior manifest
+     * references behaviors by this name. Must be unique within a vault.
+     */
+    readonly name?: string;
     /**
      * Additional collections whose writes ALSO re-fire this derivation.
      * By default only writes to the single declared

package/dist/with-lookup/indexing/eager-indexes.d.ts

@@ -32,6 +32,16 @@ export type IndexDef = string | {
     readonly fields: readonly string[];
     readonly unique?: boolean;
 } | readonly string[];
+/**
+ * Normalize a declared `IndexDef[]` into a uniform `{ fields, unique? }`
+ * shape: `string` → `{fields:[s]}`, `string[]` → `{fields}`, object →
+ * passthrough. Pure — used by `Collection`'s sensitive-field leak check
+ * and by `getDeclaredIndexes()` (introspection).
+ */
+export declare function normalizeIndexDefs(defs: readonly IndexDef[]): ReadonlyArray<{
+    readonly fields: readonly string[];
+    readonly unique?: boolean;
+}>;
 /**
  * Internal representation of a built hash index.
  *

package/dist/with-party/team/device-seal.d.ts

@@ -0,0 +1,25 @@
+import type { DeviceSealProvider } from '../../port/with/device-seal-strategy.js';
+/**
+ * Device-local sealer for the echo reveal-blob (spec decision 5).
+ * DISTINCT from `SealingKeyProvider` (managed-secret mode, which seals
+ * the WHOLE secret): this seals only the echo part, and only so an
+ * enrolled device can display it during the unlock ceremony. The
+ * sealed bytes may sit in the (untrusted) keyring file — attacker-B
+ * resistance comes from `unseal` requiring this device's key store.
+ *
+ * The interface itself is declared on the `/with` port
+ * ({@link DeviceSealProvider} from `port/with/device-seal-strategy.js`)
+ * so the kernel spine can reference it without a static spine→service
+ * import; re-exported here as the canonical consumer-facing home.
+ */
+export type { DeviceSealProvider };
+/** In-memory test provider — AES-GCM under a per-instance random key. */
+export declare class MemoryDeviceSealProvider implements DeviceSealProvider {
+    readonly id: string;
+    private readonly keyPromise;
+    constructor(opts: {
+        id: string;
+    });
+    seal(plain: Uint8Array): Promise<Uint8Array>;
+    unseal(sealed: Uint8Array): Promise<Uint8Array>;
+}