@noy-db/hub 0.5.0 → 0.6.0-pre.0

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-WFYKIDCS.js";
+} from "../chunk-TFZ7LLOQ.js";
 import {
   NO_SYNC
 } from "../chunk-55LKVALY.js";
-import "../chunk-SBGXQK5I.js";
-import "../chunk-623QEHDB.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-MYSNNMJ3.js";
-import "../chunk-L67H6FAQ.js";
-import "../chunk-GIGLOQL7.js";
+import "../chunk-JXIDGFKS.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-RPWMDIGK.js";
-import "../chunk-77AEMXFA.js";
-import "../chunk-AR5D76T2.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
+import "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -1,6 +1,8 @@
 import {
+  MemoryDeviceSealProvider,
+  beginEchoUnlock,
   withTeam
-} from "../chunk-US2AR4BI.js";
+} from "../chunk-46V67XP5.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -29,9 +31,10 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-IHYSIPEK.js";
-import "../chunk-Q2SEJMP2.js";
+} from "../chunk-DPJTDNUF.js";
+import "../chunk-NVU7ZMPN.js";
 import {
+  buildEchoBlock,
   buildRecipientKeyringFile,
   changeSecret,
   createOwnerKeyring,
@@ -45,26 +48,32 @@ import {
   listUsersWithEnvelopes,
   loadKeyring,
   persistKeyring,
+  resolveEchoReveal,
   revoke,
-  updateKeyringIdentity
-} from "../chunk-FZAP4JNC.js";
-import "../chunk-6PFST3FC.js";
-import "../chunk-PZRYKOKP.js";
-import "../chunk-623QEHDB.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-MYSNNMJ3.js";
-import "../chunk-L67H6FAQ.js";
-import "../chunk-GIGLOQL7.js";
+  updateKeyringIdentity,
+  verifyPrompt,
+  verifyTypedEcho
+} from "../chunk-RLWY6Z44.js";
+import "../chunk-27TCYH6G.js";
+import "../chunk-AHLJSVRL.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-RPWMDIGK.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   TeamNotEnabledError
-} from "../chunk-AR5D76T2.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
+  MemoryDeviceSealProvider,
   NO_TEAM,
   TeamNotEnabledError,
+  beginEchoUnlock,
+  buildEchoBlock,
   buildRecipientKeyringFile,
   burnPaperRecoveryEntry,
   changeSecret,
@@ -96,6 +105,7 @@ export {
   recoverSecret,
   recoverUser,
   removeAuthenticator,
+  resolveEchoReveal,
   revoke,
   revokeMagicLinkGrant,
   rotateSecret,
@@ -105,6 +115,8 @@ export {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   updateKeyringIdentity,
+  verifyPrompt,
+  verifyTypedEcho,
   withTeam,
   writeMagicLinkGrant
 };

package/dist/tiers/index.js

@@ -11,19 +11,19 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-QITP2JGX.js";
-import "../chunk-PZRYKOKP.js";
-import "../chunk-623QEHDB.js";
-import "../chunk-EFJAAFBW.js";
-import "../chunk-MYSNNMJ3.js";
-import "../chunk-L67H6FAQ.js";
-import "../chunk-GIGLOQL7.js";
+} from "../chunk-PGAPBZEK.js";
+import "../chunk-AHLJSVRL.js";
+import "../chunk-FY343IZR.js";
+import "../chunk-NQRJ5AJO.js";
+import "../chunk-HXGUIPQB.js";
+import "../chunk-AR2JDFAE.js";
+import "../chunk-747LRSOO.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-RPWMDIGK.js";
-import "../chunk-77AEMXFA.js";
+import "../chunk-VCETL77O.js";
+import "../chunk-24ZLWWEO.js";
 import {
   TiersNotEnabledError
-} from "../chunk-AR5D76T2.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -1,16 +1,41 @@
 import {
   BundleVersionConflictError,
   ConflictError,
+  DuplicateStoreKindError,
   NetworkError,
   PodVersionConflictError,
-  StoreCapabilityError
-} from "../chunk-AR5D76T2.js";
+  StoreCapabilityError,
+  UnknownStoreKindError
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
+
+// src/port/to/locator.ts
+function createStoreLocator() {
+  const factories = /* @__PURE__ */ new Map();
+  return {
+    register(kind, factory) {
+      if (factories.has(kind)) {
+        throw new DuplicateStoreKindError(kind);
+      }
+      factories.set(kind, factory);
+    },
+    resolve(descriptor, opts = {}) {
+      const factory = factories.get(descriptor.kind);
+      if (!factory) {
+        throw new UnknownStoreKindError(descriptor.kind, [...factories.keys()].sort());
+      }
+      return factory(descriptor, opts);
+    }
+  };
+}
 export {
   BundleVersionConflictError,
   ConflictError,
+  DuplicateStoreKindError,
   NetworkError,
   PodVersionConflictError,
-  StoreCapabilityError
+  StoreCapabilityError,
+  UnknownStoreKindError,
+  createStoreLocator
 };
 //# sourceMappingURL=index.js.map

package/dist/to/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../../src/port/to/locator.ts"],"sourcesContent":["/**\n * The Locator seam (#945 Task 1): a serializable, CREDENTIALLESS store\n * descriptor plus a factory registry that reconstructs a `NoydbStore` from\n * data.\n *\n * A `StoreDescriptor` is the pod-portable \"what store and where\" — kind,\n * broad topology class, and a kind-specific serializable address/options\n * bag. It is deliberately dumb data: no field on it is ever typed as a\n * function, a `StoreCredentialSource`, or a `StoreCredentials` value, so a\n * descriptor can be written into a pod / manifest / sync payload without an\n * audit for leaked secrets. Anything that must resolve device-side or\n * user-side — a short-lived credential, a device-local directory override,\n * a mounted drive handle — travels out-of-band via `resolve()`'s `opts`,\n * never through the descriptor itself.\n *\n * This module is pure TypeScript: no imports beyond the kernel's own types\n * and errors, no Node built-ins, no crypto. It adds zero runtime\n * dependencies to `@noy-db/hub/to`.\n */\nimport type { NoydbStore, StoreCredentialSource } from '../../kernel/types.js'\nimport { DuplicateStoreKindError, UnknownStoreKindError } from '../../kernel/errors.js'\n\n/**\n * The broad topology bucket a store descriptor's kind falls into —\n * used by callers/UI to group or filter descriptors without knowing every\n * concrete `kind` string.\n */\nexport type StoreClass = 'local' | 'browser' | 'lan' | 'cloud'\n\n/**\n * A serializable, CREDENTIALLESS description of a store instance: enough\n * data to reconstruct a `NoydbStore` via a registered `StoreFactory`, and\n * safe to persist or transmit as-is.\n *\n * CREDENTIALLESS BY CONSTRUCTION: no field here may be typed as a function,\n * a `StoreCredentialSource`, or a `StoreCredentials` value. Credentials\n * NEVER ride the descriptor — they are supplied separately (as a\n * `StoreCredentialSource`) to `StoreLocator.resolve()` at resolve time.\n */\nexport interface StoreDescriptor {\n  /** The registered factory key (e.g. `'file'`, `'aws-s3'`, `'webdav'`). */\n  readonly kind: string\n  /** The broad topology bucket this kind falls into. */\n  readonly class: StoreClass\n  /** Kind-specific serializable location (e.g. `{ dir }`, `{ bucket, region }`). */\n  readonly address: unknown\n  /** Kind-specific serializable tuning options. */\n  readonly options?: unknown\n}\n\n/**\n * A kind-specific, device-local supplement to a `StoreDescriptor` — a\n * directory override, a mount point, a drive handle — that is resolved\n * device-side and never carried inside a pod alongside the descriptor.\n */\nexport type StoreBinding = unknown\n\n/**\n * Reconstructs a live `NoydbStore` from a `StoreDescriptor`. Registered\n * against a `StoreLocator` under the descriptor's `kind`.\n */\nexport type StoreFactory = (\n  descriptor: StoreDescriptor,\n  opts: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n) => NoydbStore | Promise<NoydbStore>\n\n/** A registry of `StoreFactory`s, keyed by `StoreDescriptor.kind`. */\nexport interface StoreLocator {\n  /** Register a factory for `kind`. Throws if `kind` is already registered. */\n  register(kind: string, factory: StoreFactory): void\n  /** Resolve `descriptor` to a live store via its kind's registered factory. */\n  resolve(\n    descriptor: StoreDescriptor,\n    opts?: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n  ): NoydbStore | Promise<NoydbStore>\n}\n\n/**\n * Creates a fresh, empty `StoreLocator`.\n *\n * DUPLICATE REGISTRATION: `register()` throws if `kind` is already\n * registered, rather than silently overwriting it (last-wins). A\n * composition root that registers the same kind twice is almost always a\n * mistake — a copy-pasted setup block, two satellite packages fighting\n * over the same kind string — and last-wins would hide it behind whichever\n * registration happened to run last. This mirrors the\n * `DuplicateBehaviorNameError` philosophy (#947): fail loudly at the\n * mistake's source instead of silently at some unrelated `resolve()` call\n * later.\n */\nexport function createStoreLocator(): StoreLocator {\n  const factories = new Map<string, StoreFactory>()\n\n  return {\n    register(kind, factory) {\n      if (factories.has(kind)) {\n        throw new DuplicateStoreKindError(kind)\n      }\n      factories.set(kind, factory)\n    },\n    resolve(descriptor, opts = {}) {\n      const factory = factories.get(descriptor.kind)\n      if (!factory) {\n        throw new UnknownStoreKindError(descriptor.kind, [...factories.keys()].sort())\n      }\n      return factory(descriptor, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA0FO,SAAS,qBAAmC;AACjD,QAAM,YAAY,oBAAI,IAA0B;AAEhD,SAAO;AAAA,IACL,SAAS,MAAM,SAAS;AACtB,UAAI,UAAU,IAAI,IAAI,GAAG;AACvB,cAAM,IAAI,wBAAwB,IAAI;AAAA,MACxC;AACA,gBAAU,IAAI,MAAM,OAAO;AAAA,IAC7B;AAAA,IACA,QAAQ,YAAY,OAAO,CAAC,GAAG;AAC7B,YAAM,UAAU,UAAU,IAAI,WAAW,IAAI;AAC7C,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,sBAAsB,WAAW,MAAM,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,KAAK,CAAC;AAAA,MAC/E;AACA,aAAO,QAAQ,YAAY,IAAI;AAAA,IACjC;AAAA,EACF;AACF;","names":[]}

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-NWK6SVBM.js";
+} from "../chunk-35EBKWQU.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-ZJADGNYF.js";
-import "../chunk-AR5D76T2.js";
+import "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-YBK3I2OT.js"));
+var loadGuardExecutor = lazy(() => import("../executor-CYJQLKKI.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-AR5D76T2.js";
+} from "../chunk-HNGSV2YC.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/{verify-JEIXSK5U.js → verify-RO5RTZOJ.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-MYSNNMJ3.js";
+} from "./chunk-HXGUIPQB.js";
 import {
   dualReadSealedSlot
-} from "./chunk-L67H6FAQ.js";
+} from "./chunk-AR2JDFAE.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-RPWMDIGK.js";
+} from "./chunk-VCETL77O.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-AR5D76T2.js";
+} from "./chunk-HNGSV2YC.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-JEIXSK5U.js.map
+//# sourceMappingURL=verify-RO5RTZOJ.js.map

package/dist/walk-MQHYNDLZ.js

@@ -0,0 +1,21 @@
+import {
+  dumpVaultSchema
+} from "./chunk-MJWCLSQL.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-2LGDCNFJ.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-V5C5NNBR.js";
+import "./chunk-FY343IZR.js";
+import "./chunk-NQRJ5AJO.js";
+import "./chunk-HXGUIPQB.js";
+import "./chunk-AR2JDFAE.js";
+import "./chunk-747LRSOO.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-VCETL77O.js";
+import "./chunk-24ZLWWEO.js";
+import "./chunk-HNGSV2YC.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  dumpVaultSchema
+};
+//# sourceMappingURL=walk-MQHYNDLZ.js.map

package/dist/with-audit/guards/registry.d.ts

@@ -24,9 +24,14 @@ type AnyGuard = GuardSpec<Record<string, unknown>>;
 type AnyChange = GuardChange<Record<string, unknown>>;
 export declare class GuardRegistry {
     private readonly _byCollection;
+    private readonly _byName;
     private _amendmentChanges;
     private _amendmentMeta;
-    /** Register a guard. Multiple guards per collection are allowed. */
+    /**
+     * Register a guard. Multiple guards per collection are allowed. If
+     * `spec.name` is given and already registered by another guard in this
+     * vault, throws {@link DuplicateBehaviorNameError} before indexing.
+     */
     register<T extends Record<string, unknown>>(spec: GuardSpec<T>): void;
     /** All guards registered against `collection` in registration order. */
     guardsFor(collection: string): ReadonlyArray<AnyGuard>;
@@ -35,6 +40,8 @@ export declare class GuardRegistry {
         collection: string;
         count: number;
     }[];
+    /** Every registered guard spec, in registration order. Used by `Vault.listBehaviors()` (#947). */
+    all(): ReadonlyArray<AnyGuard>;
     /**
      * Run every guard's `check` for this collection. First throw wins —
      * remaining guards are not invoked. Guards without a `check` skip.

package/dist/with-audit/guards/types.d.ts

@@ -76,6 +76,11 @@ export interface GuardStrategyAny {
 /** Public registration shape. See `withGuard()`. */
 export interface GuardSpec<T extends Record<string, unknown>> {
     collection: string;
+    /**
+     * Optional stable per-vault identifier; the behavior manifest
+     * references behaviors by this name. Must be unique within a vault.
+     */
+    readonly name?: string;
     /**
      * Fires on `Collection.put` (insert + update). The `incoming` argument
      * is the record being written. Throw to cancel the put.

package/dist/with-audit/periods/index.d.ts

@@ -14,7 +14,7 @@
  */
 export { withPeriods } from './active.js';
 export type { PeriodsStrategy } from './strategy.js';
-export { PERIODS_COLLECTION, PERIOD_FREEZES_COLLECTION, PERIOD_ARCHIVES_COLLECTION, PERIOD_TARGET_PURGES_COLLECTION, periodExclusiveUpperBound, loadPeriods, chainAnchor, assertTsWritable, validatePeriodName, appendPeriodLedgerEntry, } from './periods.js';
+export { PERIODS_COLLECTION, PERIOD_FREEZES_COLLECTION, PERIOD_ARCHIVES_COLLECTION, PERIOD_TARGET_PURGES_COLLECTION, periodExclusiveUpperBound, loadPeriods, chainAnchor, assertTsWritable, validatePeriodName, appendPeriodLedgerEntry, purgeMarkersOn, } from './periods.js';
 export type { PeriodRecord, PeriodFreezeRecord, PeriodArchiveRecord, PeriodTargetPurgeRecord, TargetPurgeCount, ClosePeriodOptions, OpenPeriodOptions, CarryForwardContext, ReadOnlyCollection, } from './periods.js';
 /** The un-opted-in stub for this service — exported so callers can compare against it (#844). */
 export { NO_PERIODS } from './strategy.js';

package/dist/with-audit/periods/periods.d.ts

@@ -400,3 +400,10 @@ export declare function validatePeriodName(name: string, existing: readonly Peri
  * @internal
  */
 export declare function appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, name: string, collection?: string): Promise<void>;
+/**
+ * @internal #615. Sweep delete markers with `_ts < before` off ANY store
+ * (the vault's local adapter, or a push-only sync target). Returns the count
+ * removed. Shared by `vault._purgeDeleteMarkers` (local) and
+ * `vault._purgePeriodTargets` (push-only targets).
+ */
+export declare function purgeMarkersOn(store: NoydbStore, vault: string, before: string, collections?: string[]): Promise<number>;

package/dist/with-formula/derivations/registry.d.ts

@@ -13,6 +13,12 @@ interface RegisteredStrategy {
 export declare class DerivationRegistry {
     private readonly _bySource;
     private readonly _byOutput;
+    private readonly _byName;
+    /**
+     * Register a derivation strategy. If `spec.name` is given and already
+     * registered by another derivation in this vault, throws
+     * {@link DuplicateBehaviorNameError} before indexing.
+     */
     register(spec: DerivationSpec<any, any>): Promise<void>;
     strategiesForSource(source: string): ReadonlyArray<RegisteredStrategy>;
     strategiesProducingOutput(collection: string): ReadonlyArray<RegisteredStrategy>;

package/dist/with-formula/derivations/types.d.ts

@@ -122,6 +122,11 @@ export type OutputSpec = RecordOutputSpec | ArrayOutputSpec;
 export interface DerivationSpec<TSource extends Record<string, unknown>, TOutputs extends Record<string, Record<string, unknown> | ReadonlyArray<Record<string, unknown>>>> {
     /** Source collection name. */
     source: string;
+    /**
+     * Optional stable per-vault identifier; the behavior manifest
+     * references behaviors by this name. Must be unique within a vault.
+     */
+    readonly name?: string;
     /**
      * Additional collections whose writes ALSO re-fire this derivation.
      * By default only writes to the single declared

package/dist/with-lookup/indexing/eager-indexes.d.ts

@@ -32,6 +32,16 @@ export type IndexDef = string | {
     readonly fields: readonly string[];
     readonly unique?: boolean;
 } | readonly string[];
+/**
+ * Normalize a declared `IndexDef[]` into a uniform `{ fields, unique? }`
+ * shape: `string` → `{fields:[s]}`, `string[]` → `{fields}`, object →
+ * passthrough. Pure — used by `Collection`'s sensitive-field leak check
+ * and by `getDeclaredIndexes()` (introspection).
+ */
+export declare function normalizeIndexDefs(defs: readonly IndexDef[]): ReadonlyArray<{
+    readonly fields: readonly string[];
+    readonly unique?: boolean;
+}>;
 /**
  * Internal representation of a built hash index.
  *

package/dist/with-party/team/device-seal.d.ts

@@ -0,0 +1,25 @@
+import type { DeviceSealProvider } from '../../port/with/device-seal-strategy.js';
+/**
+ * Device-local sealer for the echo reveal-blob (spec decision 5).
+ * DISTINCT from `SealingKeyProvider` (managed-secret mode, which seals
+ * the WHOLE secret): this seals only the echo part, and only so an
+ * enrolled device can display it during the unlock ceremony. The
+ * sealed bytes may sit in the (untrusted) keyring file — attacker-B
+ * resistance comes from `unseal` requiring this device's key store.
+ *
+ * The interface itself is declared on the `/with` port
+ * ({@link DeviceSealProvider} from `port/with/device-seal-strategy.js`)
+ * so the kernel spine can reference it without a static spine→service
+ * import; re-exported here as the canonical consumer-facing home.
+ */
+export type { DeviceSealProvider };
+/** In-memory test provider — AES-GCM under a per-instance random key. */
+export declare class MemoryDeviceSealProvider implements DeviceSealProvider {
+    readonly id: string;
+    private readonly keyPromise;
+    constructor(opts: {
+        id: string;
+    });
+    seal(plain: Uint8Array): Promise<Uint8Array>;
+    unseal(sealed: Uint8Array): Promise<Uint8Array>;
+}

package/dist/with-party/team/echo-ceremony.d.ts

@@ -0,0 +1,74 @@
+/**
+ * `beginEchoUnlock` — the interactive ceremony API (spec
+ * docs/superpowers/specs/2026-08-02-echo-secret-design.md, #940, Task 6).
+ *
+ * Split out of `echo-secret.ts` (which owns only the block builders +
+ * verifiers) because this module orchestrates BOTH `echo-secret.ts`
+ * (`verifyPrompt`/`resolveEchoReveal`/`verifyTypedEcho`) AND `keyring.ts`
+ * (`loadKeyring`) — and `keyring.ts` itself imports `buildEchoBlock` from
+ * `echo-secret.ts`. Keeping the ceremony here instead of inside
+ * `echo-secret.ts` yields a clean DAG (`echo-ceremony.ts` → {`echo-secret.ts`,
+ * `keyring.ts`}; `keyring.ts` → `echo-secret.ts`) instead of a two-file
+ * cycle, and restores `echo-secret.ts`'s documented charter (builders +
+ * verifiers only).
+ *
+ * @module
+ */
+import type { NoydbStore } from '../../kernel/types.js';
+import type { DeviceSealProvider } from './device-seal.js';
+import { type UnlockedKeyring } from './keyring.js';
+/** Options for {@link beginEchoUnlock}. */
+export interface BeginEchoUnlockOptions {
+    readonly userId: string;
+    readonly prompt: string;
+    readonly deviceSeal?: DeviceSealProvider;
+}
+/**
+ * A prompt-verified, in-progress echo unlock. Stateless w.r.t. attempts —
+ * `complete()` may be called more than once (e.g. retry after a wrong key).
+ */
+export interface EchoCeremony {
+    /**
+     * Echo to display for owner recognition; null ⇒ degraded: ask the owner to
+     * TYPE it.
+     *
+     * Conforming-player contract (spec
+     * docs/superpowers/specs/2026-08-02-echo-secret-design.md, "Ceremony"):
+     * when the owner does NOT recognize the revealed echo, the player MUST show
+     * a hard phishing warning — do not continue, open the official app, rotate
+     * the secret immediately — MUST NOT offer any skip or
+     * "verification unavailable" fallback, and MUST simply abandon the ceremony
+     * by never calling {@link EchoCeremony.complete}. The kernel cannot enforce
+     * this terminal state; it is the player's obligation.
+     */
+    readonly reveal: string | null;
+    readonly maskHint: string | undefined;
+    /** Complete the ceremony. `echo` is REQUIRED when `reveal` is null. */
+    complete(input: {
+        readonly echo?: string;
+        readonly key: string;
+    }): Promise<UnlockedKeyring>;
+}
+/**
+ * Begin the interactive anti-phishing unlock ceremony (spec decision 4):
+ * prompt → echo reveal → key. Fetches and parses the `_keyring/{userId}`
+ * row (same store path as `loadKeyring`), verifies the prompt, and resolves
+ * the echo for display (or degrades to the typed-echo path when the reveal
+ * cannot be resolved — sealed reveal under a foreign device).
+ *
+ * Conforming-player contract (spec
+ * docs/superpowers/specs/2026-08-02-echo-secret-design.md): an owner who does
+ * not recognize `ceremony.reveal` is looking at a phish. The player MUST then
+ * show a hard warning (stop, open the official app, rotate the secret now),
+ * MUST NOT offer a skip / "verification unavailable" fallback or any
+ * single-field secret entry, and MUST abandon the ceremony without calling
+ * `complete()`.
+ *
+ * @throws NoAccessError when no keyring exists for `userId` (mirrors
+ * `loadKeyring`'s missing-row error).
+ * @throws KeyringExpiredError when the slot is past its `expires_at` —
+ * checked before the prompt is verified, so an expired slot never reveals.
+ * @throws ValidationError when the keyring is not an echo keyring.
+ * @throws WrongPromptError when the prompt fails its verifier.
+ */
+export declare function beginEchoUnlock(store: NoydbStore, vault: string, opts: BeginEchoUnlockOptions): Promise<EchoCeremony>;

package/dist/with-party/team/echo-secret.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Echo-block builders + verifiers (spec
+ * docs/superpowers/specs/2026-08-02-echo-secret-design.md, #940).
+ *
+ * Builds and verifies the on-keyring {@link KeyringEchoBlock} declaration
+ * for the 3-part echo ceremony (prompt → echo → key). This module owns:
+ *
+ *   - Minting the prompt/echo canary verifiers (the "canary trick": AES-KW
+ *     wrap a constant 32-byte key under `deriveSecretKey(part, salt, …)`;
+ *     verify = unwrap succeeds).
+ *   - Building the reveal blob per the hybrid reveal policy (spec decision
+ *     4): `portable` (AES-GCM under the prompt, own salt), `sealed`
+ *     (opaque to hub, unsealed only by the enrolling device's
+ *     {@link DeviceSealProvider}), or `none`.
+ *   - Resolving the echo for display (`resolveEchoReveal`, `null` ⇒
+ *     degraded typed-echo path) and verifying a typed echo
+ *     (`verifyTypedEcho`) for that degraded path.
+ *
+ * Deriving the actual KEK from all three parts together is
+ * `deriveEchoKey`/`encodeEchoParts` (`kernel/enclave/crypto.ts`) — a
+ * separate concern from this module's per-part verifiers.
+ *
+ * Known, accepted disclosure: `prompt_verifier` and `echo_verifier` are
+ * offline brute-force oracles for anyone holding the keyring file (600K
+ * PBKDF2 per guess), and the `sealed` reveal blob is unpadded so its length
+ * discloses the echo's UTF-8 byte length — see the threat model in
+ * `docs/superpowers/specs/2026-08-02-echo-secret-design.md`.
+ *
+ * @module
+ */
+import { type EchoSecretParts } from '../../kernel/enclave/index.js';
+import type { KeyringEchoBlock } from '../../kernel/types.js';
+import type { DeviceSealProvider } from './device-seal.js';
+/** Same iteration floor as the KEK (spec resolved question 1). */
+export declare const ECHO_KDF_ITERATIONS = 600000;
+export type EchoRevealChoice = {
+    readonly kind: 'portable';
+} | {
+    readonly kind: 'sealed';
+    readonly deviceSeal: DeviceSealProvider;
+} | {
+    readonly kind: 'none';
+};
+/** Build the on-keyring echo declaration for a fresh enrollment. */
+export declare function buildEchoBlock(parts: EchoSecretParts, reveal: EchoRevealChoice, maskHint?: string): Promise<KeyringEchoBlock>;
+export declare function verifyPrompt(block: KeyringEchoBlock, prompt: string): Promise<boolean>;
+/**
+ * Resolve the echo for display. `null` ⇒ degraded path: the player
+ * must ask the owner to TYPE the echo (verify via {@link verifyTypedEcho}).
+ * Callers MUST verify the prompt first — this assumes it.
+ *
+ * @throws WrongPromptError when the prompt cannot open the portable reveal
+ * (callers should verifyPrompt first for a boolean check).
+ */
+export declare function resolveEchoReveal(block: KeyringEchoBlock, prompt: string, deviceSeal?: DeviceSealProvider): Promise<string | null>;
+export declare function verifyTypedEcho(block: KeyringEchoBlock, echo: string): Promise<boolean>;

package/dist/with-party/team/index.d.ts

@@ -32,4 +32,12 @@ export type { WrappedDeksBlob } from './wrapped-deks.js';
 export { writeMagicLinkGrant, readMagicLinkGrantRecord, listMagicLinkGrants, unwrapMagicLinkGrant, revokeMagicLinkGrant, deriveMagicLinkContentKey, magicLinkGrantRecordId, isMagicLinkGrantExpired, } from './magic-link-grant.js';
 export { hasExportCapability, evaluateExportCapability, } from './keyring.js';
 export { hasImportCapability, evaluateImportCapability, } from './keyring.js';
+export { buildEchoBlock, verifyPrompt, resolveEchoReveal, verifyTypedEcho, } from './echo-secret.js';
+export type { EchoRevealChoice } from './echo-secret.js';
+export { beginEchoUnlock } from './echo-ceremony.js';
+export type { BeginEchoUnlockOptions, EchoCeremony } from './echo-ceremony.js';
+export { MemoryDeviceSealProvider } from './device-seal.js';
+export type { DeviceSealProvider } from './device-seal.js';
+export type { EchoSecretParts } from '../../kernel/enclave/index.js';
+export type { KeyringEchoBlock, NoydbStore } from '../../kernel/types.js';
 export { describeAuthConfig, diagramAuthConfig, describeUserAuth, describeAllUsersAuth, } from '../auth-introspection/index.js';