@noy-db/hub 0.6.0-pre.21 → 0.6.0-pre.23

package/dist/{chunk-B6IYATME.js → chunk-DXJXVWWE.js}

@@ -3,19 +3,19 @@ import {
 } from "./chunk-XZHEOSQ2.js";
 import {
   reducerBuilder
-} from "./chunk-CADUYBQD.js";
+} from "./chunk-ATL3ZVXT.js";
 import {
   readPath
-} from "./chunk-IGJCYUT5.js";
+} from "./chunk-NSITFOCJ.js";
 import {
   applyI18nLocale
-} from "./chunk-WVE6YKMX.js";
+} from "./chunk-U5ZDYJLQ.js";
 import {
   viaBinder
-} from "./chunk-JNMTN5D5.js";
+} from "./chunk-LZHIYH32.js";
 import {
   GroupCardinalityError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-lookup/reduce/reduction.ts
 function reduceRecords(records, spec) {
@@ -361,4 +361,4 @@ export {
   groupAndReduce,
   GroupedReduction
 };
-//# sourceMappingURL=chunk-B6IYATME.js.map
+//# sourceMappingURL=chunk-DXJXVWWE.js.map

package/dist/{chunk-O742QBZZ.js → chunk-DZBZCFS7.js}

@@ -5,7 +5,7 @@ import {
   buildStringFieldEntries,
   extractSnippet,
   searchScan
-} from "./chunk-GTHVPVAR.js";
+} from "./chunk-VNPSPQNN.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
@@ -13,14 +13,14 @@ import {
   getAtPath,
   isStaticDictDescriptor,
   stripI18nFilled
-} from "./chunk-WVE6YKMX.js";
+} from "./chunk-U5ZDYJLQ.js";
 import {
   liveRecordIsElevated
-} from "./chunk-PPCOKVFA.js";
+} from "./chunk-6ZTPSVY7.js";
 import {
   EmbeddingDimMismatchError,
   EmbeddingModelMismatchError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-lookup/embeddings/cosine.ts
 function cosine(a, b) {
@@ -394,4 +394,4 @@ export {
   rebuildEmbeddings,
   syncTierSearch
 };
-//# sourceMappingURL=chunk-O742QBZZ.js.map
+//# sourceMappingURL=chunk-DZBZCFS7.js.map

package/dist/{chunk-FW7NGYLT.js → chunk-FNCX4N7X.js}

@@ -1,17 +1,17 @@
 import {
   freezeAndDeleteClosure,
   randomId
-} from "./chunk-5Q7AJ7DN.js";
+} from "./chunk-I3D67XD7.js";
 import {
   buildAccessibleBundle,
   resolveAccessibleCollections
-} from "./chunk-GBBDFE6C.js";
+} from "./chunk-7LWBD3NO.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
 import {
   NoydbError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-audit/portability/request-withdrawal.ts
 var WITHDRAWAL_REQUESTS_COLLECTION = "_user_withdrawal_requests";
@@ -158,4 +158,4 @@ export {
   approveWithdrawal,
   rejectWithdrawal
 };
-//# sourceMappingURL=chunk-FW7NGYLT.js.map
+//# sourceMappingURL=chunk-FNCX4N7X.js.map

package/dist/{chunk-OHOKBMTM.js → chunk-FUE2KPKM.js}

@@ -7,14 +7,14 @@ import {
   blindedEqual,
   openVdigPayload,
   sealVdigPayload
-} from "./chunk-GQXFOAYZ.js";
+} from "./chunk-OMXUQAZJ.js";
 import {
   dualReadSealedSlot,
   parseSealedSlot
-} from "./chunk-KV6JM2IA.js";
+} from "./chunk-PUGHLCBW.js";
 import {
   mintBidxTag
-} from "./chunk-TMBSPLUG.js";
+} from "./chunk-2LHPMFSR.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -35,7 +35,7 @@ import {
   generateSalt,
   unwrapCek,
   wrapCek
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-RQQIB7CD.js";
 import {
   NOYDB_FORMAT_VERSION,
   SealedHandle
@@ -48,7 +48,7 @@ import {
   SchemaValidationError,
   TamperedError,
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/kernel/enclave/record-aad.ts
 var SCHEME = "noydb-aad/2";
@@ -1340,4 +1340,4 @@ export {
   issueChallenge,
   verifyBrokerProof
 };
-//# sourceMappingURL=chunk-OHOKBMTM.js.map
+//# sourceMappingURL=chunk-FUE2KPKM.js.map

package/dist/{chunk-YALD3SST.js → chunk-G4577GK7.js}

@@ -1,20 +1,20 @@
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-FUE2KPKM.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
 import {
   encrypt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-RQQIB7CD.js";
 import {
   SequenceContentionError,
   SequenceNotEnabledError,
   SequenceOfflineError,
   ValidationError,
   isConflictError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-commit/sequence/active.ts
 function withSequence() {
@@ -201,4 +201,4 @@ export {
   resolveSequenceKey,
   SequenceStore
 };
-//# sourceMappingURL=chunk-YALD3SST.js.map
+//# sourceMappingURL=chunk-G4577GK7.js.map

package/dist/{chunk-DIZ6HM7Q.js → chunk-G6DAESDS.js}

@@ -2,21 +2,21 @@ import {
   ATTESTATIONS_COLLECTION,
   REVOKED_RECORD_ID,
   loadOrCreateSigner
-} from "./chunk-ESKIAXO2.js";
+} from "./chunk-23ODLABM.js";
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-FUE2KPKM.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
 import {
   encrypt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-RQQIB7CD.js";
 import {
   AttestationError,
   ConflictError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-audit/attestation/revoke.ts
 import { signRevocationList } from "@noy-db/attestation";
@@ -81,4 +81,4 @@ export {
   getRevokedDocIdsCore,
   publishRevocationListCore
 };
-//# sourceMappingURL=chunk-DIZ6HM7Q.js.map
+//# sourceMappingURL=chunk-G6DAESDS.js.map

package/dist/{chunk-HYYVT2KZ.js → chunk-GAZTPQ3D.js}

@@ -1,6 +1,6 @@
 import {
   ValidationError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-formula/overlay-views/with-overlayed-view.ts
 function withOverlayedView(spec) {
@@ -33,4 +33,4 @@ function withOverlayedView(spec) {
 export {
   withOverlayedView
 };
-//# sourceMappingURL=chunk-HYYVT2KZ.js.map
+//# sourceMappingURL=chunk-GAZTPQ3D.js.map

package/dist/{chunk-LX46B56Q.js → chunk-GJ5TMHKC.js}

@@ -1,19 +1,19 @@
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "./chunk-OHOKBMTM.js";
+} from "./chunk-FUE2KPKM.js";
 import {
   buildRecordEnvelope
 } from "./chunk-PENPHA45.js";
 import {
   encrypt
-} from "./chunk-AU3AUJIZ.js";
+} from "./chunk-RQQIB7CD.js";
 import {
   ConflictError,
   USER_ENVELOPE_COLLECTION,
   USER_ENVELOPE_MAX_BYTES,
   UserEnvelopeOversizedError
-} from "./chunk-CWM4GQD2.js";
+} from "./chunk-HKANJAOP.js";
 
 // src/with-party/directory/storage.ts
 var META_COLLECTION = "_meta";
@@ -142,4 +142,4 @@ export {
   deleteUserEnvelope,
   listUserEnvelopeIds
 };
-//# sourceMappingURL=chunk-LX46B56Q.js.map
+//# sourceMappingURL=chunk-GJ5TMHKC.js.map

package/dist/{chunk-KRVS7YWY.js → chunk-GNSLP7KA.js}

@@ -4,7 +4,7 @@ import {
   formatScaledInt,
   parseToScaledInt,
   rescaleScaledInt
-} from "./chunk-ICDHUUMQ.js";
+} from "./chunk-KF34JCIJ.js";
 
 // src/via/money/arith.ts
 function parseAmount(label, amount, scale, rounding) {
@@ -120,4 +120,4 @@ export {
   isMoneyString,
   moneyNumber
 };
-//# sourceMappingURL=chunk-KRVS7YWY.js.map
+//# sourceMappingURL=chunk-GNSLP7KA.js.map

package/dist/{chunk-CWM4GQD2.js → chunk-HKANJAOP.js}

@@ -77,13 +77,23 @@ var KeyringCorruptError = class extends NoydbError {
     this.intactCount = opts.intactCount;
   }
 };
+function keyringTamperedMessage(userId, reason) {
+  const head = `Keyring for "${userId}" failed roster authentication (${reason}). `;
+  switch (reason) {
+    case "canary-missing":
+    case "roster-key-missing":
+    case "roster-tag-missing":
+      return head + "This vault was most likely written before 0.6.0-pre.21, which is when the roster became authenticated \u2014 that format change ships without a migration, so an existing vault must be re-seeded. The same state is what an untrusted store would produce by deleting the field to escape verification, and the two are indistinguishable from here, so access is refused either way. If this vault has been opened by 0.6.0-pre.21 or later before, treat it as the second case.";
+    case "unparseable":
+      return head + "The file did not parse \u2014 truncation or corruption in transit or at rest is the likeliest cause, and a store serving deliberate garbage is indistinguishable from it. `verifyRoster()` reports which members are affected; `quarantineKeyring()` removes one.";
+    case "roster-tag-mismatch":
+      return head + "The roster tag is present but does not match the authority fields it protects, so those fields were altered after they were signed. Unlike a missing tag this is not a format-transition state \u2014 no released version wrote a mismatched tag \u2014 so the store serving this vault, or something between you and it, has changed a member's role, permissions or expiry.";
+  }
+}
 var KeyringTamperedError = class extends NoydbError {
   details;
   constructor(details) {
-    super(
-      "KEYRING_TAMPERED",
-      `Keyring for "${details.userId}" failed roster authentication (${details.reason}). The store serving this vault may have altered the roster.`
-    );
+    super("KEYRING_TAMPERED", keyringTamperedMessage(details.userId, details.reason));
     this.name = "KeyringTamperedError";
     this.details = details;
   }
@@ -1107,6 +1117,18 @@ var CrossJoinTooLargeError = class extends NoydbError {
     this.limit = opts.limit;
   }
 };
+var RefNotDeclaredError = class extends NoydbError {
+  /** Collection the join was issued from. */
+  collection;
+  /** Field the join tried to follow. */
+  field;
+  constructor(opts) {
+    super("REF_NOT_DECLARED", opts.message);
+    this.name = "RefNotDeclaredError";
+    this.collection = opts.collection;
+    this.field = opts.field;
+  }
+};
 var CrossJoinSourceUnknownError = class extends NoydbError {
   target;
   leftCollection;
@@ -1687,6 +1709,7 @@ export {
   SessionPolicyError,
   JoinTooLargeError,
   CrossJoinTooLargeError,
+  RefNotDeclaredError,
   CrossJoinSourceUnknownError,
   DanglingReferenceError,
   FilenameSanitizationError,
@@ -1729,4 +1752,4 @@ export {
   ClassifiedRotationError,
   SatelliteConfigError
 };
-//# sourceMappingURL=chunk-CWM4GQD2.js.map
+//# sourceMappingURL=chunk-HKANJAOP.js.map