@noy-db/hub 0.6.0-pre.9 → 0.7.0-pre.0

package/dist/pod/index.js

@@ -1,48 +1,48 @@
 import {
-  createBundleStore,
   createPodStore,
   followRedirects,
   open,
   signRedirect,
   verifyRedirect,
-  wrapBundleStore,
   wrapPodStore
-} from "../chunk-BWVKEOPE.js";
-import "../chunk-2GAJGUNM.js";
-import "../chunk-HVQGCKY4.js";
-import "../chunk-4HDYQL3J.js";
+} from "../chunk-ATV637J7.js";
+import "../chunk-Y3YLJORD.js";
+import "../chunk-VAG47QHV.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
-} from "../chunk-2DHSSLOD.js";
+} from "../chunk-QHJKK77B.js";
 import {
   MANIFEST_COLLECTION,
   isManifestReservedCollection
 } from "../chunk-EPFF7LOX.js";
-import "../chunk-HNHCQ556.js";
+import "../chunk-WLLUM35R.js";
+import "../chunk-JVLSU7S2.js";
+import "../chunk-Y6GZ2P4M.js";
+import "../chunk-L6GTLZRK.js";
 import "../chunk-GYGLAVCX.js";
-import "../chunk-6BU3L4UE.js";
-import "../chunk-G6S5VVHP.js";
 import "../chunk-6LJY7X5A.js";
-import "../chunk-QULVCV3M.js";
-import "../chunk-6NVPFKN3.js";
-import "../chunk-FUHKW252.js";
-import "../chunk-DG27IUVI.js";
-import "../chunk-XWX7GL56.js";
+import "../chunk-E6YA6UAP.js";
+import "../chunk-GK4DRVUD.js";
+import "../chunk-WK5FSW7T.js";
+import "../chunk-J4MN6XIU.js";
+import "../chunk-XJ3FEKEY.js";
+import "../chunk-Z2WK53N6.js";
+import "../chunk-CBRS2NEK.js";
 import "../chunk-KHKKD62N.js";
-import "../chunk-Z45YRGFO.js";
+import "../chunk-P6ASQOZR.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-CDB2HVQW.js";
-import "../chunk-ADW22QSB.js";
-import "../chunk-7TSYBD3E.js";
-import "../chunk-5ZKS6ZE2.js";
-import "../chunk-OF3L2SD6.js";
-import "../chunk-55LKVALY.js";
-import "../chunk-VJFMXYKP.js";
+import "../chunk-YXA2TCTZ.js";
+import "../chunk-CN6B5PEN.js";
+import "../chunk-J4UJ5FRV.js";
+import "../chunk-5263OEM3.js";
+import "../chunk-VTG7327U.js";
+import "../chunk-3QARDAYW.js";
+import "../chunk-T7IR4N2S.js";
 import "../chunk-PEOZ34EM.js";
-import "../chunk-5O5HRRTV.js";
+import "../chunk-PCQDY6QN.js";
 import "../chunk-GHVIKOHT.js";
-import "../chunk-HPLWFNG4.js";
+import "../chunk-Z7ZXZL6Y.js";
 import "../chunk-SMY5X46Z.js";
 import "../chunk-DZFQVICS.js";
 import {
@@ -51,14 +51,12 @@ import {
   COMPRESSION_NONE,
   FLAG_COMPRESSED,
   FLAG_HAS_INTEGRITY_HASH,
-  NOYDB_BUNDLE_FORMAT_VERSION,
-  NOYDB_BUNDLE_MAGIC,
-  NOYDB_BUNDLE_PREFIX_BYTES,
+  NOYDB_POD_FORMAT_VERSION,
+  NOYDB_POD_MAGIC,
+  NOYDB_POD_PREFIX_BYTES,
   POD_SIG_ALG,
-  encodeBundleHeader,
-  hasNoydbBundleMagic,
-  readNoydbBundle,
-  readNoydbBundleHeader,
+  encodePodHeader,
+  hasNoydbPodMagic,
   readPod,
   readPodCover,
   readPodHeader,
@@ -66,81 +64,77 @@ import {
   resetBrotliSupportCache,
   signRecord,
   signedBytes,
-  validateBundleHeader,
+  validatePodHeaderFields,
   verifyPodHeader,
   verifyRecord,
-  writeNoydbBundle,
   writePod
-} from "../chunk-4VUPLMZ6.js";
-import "../chunk-2BMRJ6LQ.js";
-import "../chunk-35EBKWQU.js";
+} from "../chunk-6FOGTKBY.js";
+import "../chunk-LF6DMX4C.js";
+import "../chunk-VFIWDPXZ.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-3JVXVJ7L.js";
+import "../chunk-S35S77YU.js";
 import "../chunk-AURFOK3D.js";
-import "../chunk-7MNBICB5.js";
-import "../chunk-3737A6EA.js";
-import "../chunk-E6427JU2.js";
-import "../chunk-WASHZV34.js";
-import "../chunk-JIUVJ4M7.js";
-import "../chunk-GQ3BX5EA.js";
+import "../chunk-UCUALOSM.js";
+import "../chunk-S2VG3ABP.js";
+import "../chunk-XSN63FUS.js";
+import "../chunk-F23WQK3G.js";
+import "../chunk-ALB64CZM.js";
+import "../chunk-F7ZFRPGQ.js";
+import "../chunk-I3ISCYT7.js";
 import "../chunk-NO272T7Q.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-YMUFFJCO.js";
-import "../chunk-CADUYBQD.js";
-import "../chunk-IGJCYUT5.js";
+import "../chunk-ATL3ZVXT.js";
+import "../chunk-NSITFOCJ.js";
 import "../chunk-PVEWA2DU.js";
-import "../chunk-MSWYQLMQ.js";
-import "../chunk-WFUIE565.js";
-import "../chunk-7G6VDWXB.js";
-import "../chunk-UHXCLPGC.js";
-import "../chunk-O2ERS4UJ.js";
-import "../chunk-3IXIU6FP.js";
-import "../chunk-JRKZTEZZ.js";
-import "../chunk-5JY5TSVY.js";
-import "../chunk-AHLJSVRL.js";
-import "../chunk-W3TVWF6N.js";
+import "../chunk-2GXEQUEX.js";
+import "../chunk-57JTHWLQ.js";
+import "../chunk-X67FCULK.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-H4M7ADXY.js";
+import "../chunk-PQ6Z2TAP.js";
+import "../chunk-5W7YXFV5.js";
+import "../chunk-DFAUMLD7.js";
+import "../chunk-HTGRQZFB.js";
+import "../chunk-4A4TYISP.js";
 import "../chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
-} from "../chunk-ZJADGNYF.js";
-import "../chunk-AFHQATY4.js";
-import "../chunk-Q6TEJXBX.js";
+} from "../chunk-4AOERLTV.js";
+import "../chunk-6EW2UCVF.js";
+import "../chunk-IESNYJXZ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-3FSX6LDG.js";
-import "../chunk-6SAFL5YE.js";
-import "../chunk-WLZ47GSL.js";
-import "../chunk-FAXZQ5UF.js";
-import "../chunk-3URQC7EH.js";
-import "../chunk-7H73RIE3.js";
-import "../chunk-HXGUIPQB.js";
-import "../chunk-AR2JDFAE.js";
-import "../chunk-747LRSOO.js";
+import "../chunk-RC4BROYR.js";
+import "../chunk-POS53FG6.js";
+import "../chunk-HK67PX4J.js";
+import "../chunk-467SKJ65.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-VCETL77O.js";
-import "../chunk-YPYHVOXP.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   BackupCorruptedError,
   BackupLedgerError,
-  BundleIntegrityError,
-  BundleSealMismatchError,
-  BundleVersionConflictError,
   ManifestConflictError,
   MigrationRequiredError,
   PodHeaderVerificationError,
+  PodIntegrityError,
+  PodSealMismatchError,
   PodVersionConflictError,
   RedirectBadSignatureError,
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError
-} from "../chunk-HNGSV2YC.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BackupCorruptedError,
   BackupLedgerError,
-  BundleIntegrityError,
-  BundleSealMismatchError,
-  BundleVersionConflictError,
   COMPRESSION_BROTLI,
   COMPRESSION_GZIP,
   COMPRESSION_NONE,
@@ -149,29 +143,28 @@ export {
   MANIFEST_COLLECTION,
   ManifestConflictError,
   MigrationRequiredError,
-  NOYDB_BUNDLE_FORMAT_VERSION,
-  NOYDB_BUNDLE_MAGIC,
-  NOYDB_BUNDLE_PREFIX_BYTES,
+  NOYDB_POD_FORMAT_VERSION,
+  NOYDB_POD_MAGIC,
+  NOYDB_POD_PREFIX_BYTES,
   POD_SIG_ALG,
   PodHeaderVerificationError,
+  PodIntegrityError,
+  PodSealMismatchError,
   PodVersionConflictError,
   RedirectBadSignatureError,
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError,
-  createBundleStore,
   createPodStore,
   deriveSchemaManifest,
-  encodeBundleHeader,
+  encodePodHeader,
   followRedirects,
   generateULID,
-  hasNoydbBundleMagic,
+  hasNoydbPodMagic,
   isManifestReservedCollection,
   isULID,
   loadSchemaManifestEntry,
   open,
-  readNoydbBundle,
-  readNoydbBundleHeader,
   readPod,
   readPodCover,
   readPodHeader,
@@ -180,13 +173,11 @@ export {
   signRecord,
   signRedirect,
   signedBytes,
-  validateBundleHeader,
+  validatePodHeaderFields,
   verifyPodHeader,
   verifyRecord,
   verifyRedirect,
-  wrapBundleStore,
   wrapPodStore,
-  writeNoydbBundle,
   writePod
 };
 //# sourceMappingURL=index.js.map

package/dist/pod-handle-P6DPBM5U.js

@@ -0,0 +1,41 @@
+import "./chunk-2LPVI4PX.js";
+import {
+  buildRecordEnvelope
+} from "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/with-pod/pod-handle.ts
+async function buildPodHandle(adapter, name) {
+  const existing = await adapter.get(name, "_meta", "handle");
+  if (existing) {
+    try {
+      const parsed = JSON.parse(existing._data);
+      if (parsed !== null && typeof parsed === "object" && "handle" in parsed) {
+        const handle2 = parsed.handle;
+        if (typeof handle2 === "string" && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle2)) {
+          return handle2;
+        }
+      }
+    } catch {
+    }
+  }
+  const { generateULID } = await import("./ulid-VQW6ERQN.js");
+  const handle = generateULID();
+  const envelope = buildRecordEnvelope(
+    { collection: "_meta", id: "handle", version: 1 },
+    { iv: "", data: JSON.stringify({ handle }) }
+  );
+  await adapter.put(name, "_meta", "handle", envelope);
+  return handle;
+}
+export {
+  buildPodHandle
+};
+//# sourceMappingURL=pod-handle-P6DPBM5U.js.map

package/dist/pod-handle-P6DPBM5U.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../kernel/enclave/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data) as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle', version: 1 },\n    { iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,KAAK;AACxC,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,EAAE;AAAA,IAChD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EAC7C;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}

package/dist/policy/index.js

@@ -6,20 +6,27 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "../chunk-U5O6GIWZ.js";
+} from "../chunk-LR4Z47QD.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "../chunk-3IXIU6FP.js";
-import "../chunk-YPYHVOXP.js";
+} from "../chunk-PQ6Z2TAP.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
+import "../chunk-LP7BEXCT.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "../chunk-HNGSV2YC.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,

package/dist/port/as/active.d.ts

@@ -0,0 +1,10 @@
+import type { FormatsStrategy } from '../with/formats-strategy.js';
+/**
+ * Enable `vault.export()` / `vault.import()`.
+ *
+ * ```ts
+ * const db = await createNoydb({ store, user, secret, formatsStrategy: withFormats() })
+ * const csv = await vault.export(asCsv(), { collections: ['invoices'] })
+ * ```
+ */
+export declare function withFormats(): FormatsStrategy;

package/dist/port/as/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `@noy-db/hub/as` — the format port (the `as-*` family port).
+ *
+ * A serialization format — `as-csv`, `as-json`, a third party's — binds ONLY
+ * this subpath: the {@link NoydbFormat} contract plus the import types hub
+ * owns. Mirrors `@noy-db/hub/to` for stores and `/at` for sealers.
+ *
+ * ## Why this seam exists NOW and did not before
+ *
+ * `/as` shipped in 0.3.0 and was removed in 0.4.0 — "family port removed, it
+ * had zero importers" — alongside `/at`, `/in`, `/on` and `/ui`. It was a
+ * second place to find types already on the root barrel.
+ *
+ * What is different is not the subpath, it is what stands behind it. `/as` now
+ * carries types that exist NOWHERE ELSE: `ImportPolicy` was declared six times
+ * across satellites and not at all in hub, and `ImportPlan` was declared per
+ * package around a hub-owned `VaultDiff`. Consolidating them is the seam's
+ * substance — this is not a re-export of the root barrel, it is the first
+ * hub-side home the import contract has ever had.
+ *
+ * See `docs/adr/0004-as-format-port.md` for the measurements, and for why the
+ * port reaches five of ten `as-*` packages rather than all of them.
+ *
+ * ⚠️ Re-introducing a retired subpath is declared, not incidental: the
+ * `unretired` list in `codemods/0.7.0-pre.json` records it, and
+ * `codemod-map.test.ts` refuses the claim unless the subpath really resolves.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit.
+ */
+export { withFormats } from './active.js';
+export type { FormatsStrategy, FormatExportOptions, FormatImportOptions, } from '../with/formats-strategy.js';
+export type { NoydbFormat, DecodedChunk, ImportPolicy, ImportPlan, ExportChunk, ExportFormat, VaultDiff, } from './types.js';

package/dist/port/as/types.d.ts

@@ -0,0 +1,113 @@
+/**
+ * The `as-*` family port — the contract a format implements, and the types
+ * hub owns on both sides of it.
+ *
+ * See `docs/adr/0004-as-format-port.md`. In short: `as-*` is export AND
+ * import — data, schema, validation — and both halves were duplicated per
+ * package. The import half was the worse of the two:
+ *
+ *     ImportPolicy      declared SIX times across as-* packages,
+ *                       byte-identical, and absent from hub entirely
+ *     As<X>ImportPlan   declared per package, byte-identical
+ *     VaultDiff         hub-owned — so a plan was HALF hub-owned
+ *                       and half copy-pasted
+ *
+ * Consolidating them here is non-breaking: each package re-exports these
+ * instead of redeclaring them, so six independent definitions that nothing
+ * compared become one that the compiler enforces.
+ *
+ * @module
+ */
+import type { ExportChunk, ExportFormat } from '../../kernel/types.js';
+import type { VaultDiff } from '../../with-cargo/vault-diff.js';
+/**
+ * How an import reconciles with what the collection already holds.
+ *
+ * Hub-owned as of 0.7. Previously declared independently in `as-csv`,
+ * `as-json`, `as-ndjson`, `as-xml`, `as-xlsx` and `as-zip` — six copies of one
+ * line, with no mechanism that would have noticed them drifting apart.
+ */
+export type ImportPolicy = 'merge' | 'replace' | 'insert-only';
+/**
+ * A planned-but-not-applied import.
+ *
+ * Read the `plan` to show a diff, then `apply()` to commit it. The two-phase
+ * shape is deliberate: an import that writes before the caller has seen what
+ * it would change is not reviewable, and every `as-*` package had already
+ * converged on this independently — which is the argument for hub owning it
+ * rather than each of them re-deriving it.
+ */
+export interface ImportPlan {
+    /** What would change. Safe to render; nothing has been written. */
+    readonly plan: VaultDiff;
+    /** The reconciliation the plan was computed under. */
+    readonly policy: ImportPolicy;
+    /** Commit the plan. */
+    apply(): Promise<void>;
+}
+/**
+ * What a format produces from bytes: records, per collection.
+ *
+ * Deliberately NOT a `VaultDiff` — computing the diff needs the vault's
+ * current contents, which a format does not have and must not need. The
+ * format's job ends at "these are the records the input describes"; hub
+ * turns that into a plan.
+ */
+export interface DecodedChunk {
+    readonly collection: string;
+    readonly records: readonly unknown[];
+}
+/**
+ * A serialization format for vault data — the `as-*` family port.
+ *
+ * **Pure by construction.** A format receives records and returns bytes, or
+ * receives bytes and returns records. It never holds a `Vault`, which is what
+ * makes the export gate unskippable rather than merely checked: there is no
+ * vault in scope to read past `assertCanExport`.
+ *
+ * That property is the whole point of the inversion. The conformance kit it
+ * replaces could only check implementors who ran it; a format that cannot
+ * reach a vault is gated whether its author cooperated or not — including
+ * third-party formats this family will never see.
+ *
+ * Records arrive **already redacted**: hub applies the projection before
+ * `encode`, because five packages were each calling
+ * `vault.collection(x).describe()` and `applyListProjection` to do it
+ * themselves.
+ *
+ * @typeParam Out - `string` for text formats, `Uint8Array` for binary ones.
+ */
+export interface NoydbFormat<Out extends string | Uint8Array = string | Uint8Array> {
+    /**
+     * Stable identifier, e.g. `'csv'`.
+     *
+     * A format declares its own id rather than being named by hub's
+     * `ExportFormat` union, which is closed — under the old shape a new format
+     * needed a hub release just to be nameable.
+     */
+    readonly id: string;
+    /** File extension without the dot, e.g. `'csv'`. Used by `download`/`write`. */
+    readonly extension: string;
+    /** MIME type, e.g. `'text/csv;charset=utf-8'`. Used by `download`. */
+    readonly mimeType: string;
+    /**
+     * The capability tier hub gates this format under. `'plaintext'` for a
+     * readable projection; `'bundle'` for encrypted output.
+     *
+     * Not inferred from anything: `as-noydb` emits an encrypted pod and gates on
+     * `'bundle'`, and a format that quietly gated on the wrong tier would be a
+     * silent downgrade.
+     */
+    readonly tier: 'plaintext' | 'bundle';
+    /** Records → bytes. Pure. */
+    encode(chunks: readonly ExportChunk[]): Out | Promise<Out>;
+    /**
+     * Bytes → records. Pure.
+     *
+     * Optional on an implementation, not on the contract: `as-sql` is
+     * export-only today. A format that omits it makes `vault.import` throw with
+     * its id named, rather than failing somewhere less legible.
+     */
+    decode?(input: Out): readonly DecodedChunk[] | Promise<readonly DecodedChunk[]>;
+}
+export type { ExportChunk, ExportFormat, VaultDiff };

package/dist/port/at/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * `@noy-db/hub/at` — the sealing-key port (the `at-*` family port).
+ *
+ * A sealing-key provider — `at-env`, `at-aws-kms`, `at-gcp-kms`,
+ * `at-macos-keychain`, `at-azure-keyvault`, or a third party's — binds ONLY
+ * this subpath: the {@link NoydbSealer} contract plus the in-memory double an
+ * implementor develops against. Mirrors `@noy-db/hub/to` for stores.
+ *
+ * ## Why this seam exists NOW and did not before
+ *
+ * `/at` shipped in 0.3.0 and was removed in 0.4.0 — "family port removed, it
+ * had zero importers" — along with `/as`, `/in`, `/on` and `/ui`. Only `/to`
+ * survived, and the difference is not taste: `/to` had a contract, a registry
+ * and a conformance kit behind it, so a store author had a reason to bind it.
+ * `/at` was a second place to find a type already on the root barrel.
+ *
+ * What changed is not the subpath, it is what stands behind it:
+ * `@noy-db/test-sealer-conformance` publishes the contract as an executable
+ * suite, so "implements NoydbSealer" now means one checkable thing. The seam
+ * follows the port rather than preceding it — which is the ordering 0.4
+ * demonstrated the hard way.
+ *
+ * ⚠️ Re-introducing a retired subpath is declared, not incidental: the
+ * `unretired` list in `codemods/0.7.0-pre.json` records it, and
+ * `codemod-map.test.ts` refuses to accept the claim unless the subpath really
+ * resolves. Consumers who followed the 0.4 codemod row onto the root barrel
+ * are untouched — this is additive, and the root barrel and `/cargo` keep
+ * exporting everything they did.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit
+ * and tsup's per-entry bundling keeps class identity stable across subpaths.
+ */
+export type { NoydbSealer } from '../../with-party/team/managed-secret.js';
+export { MemorySealer, MemoryRecipientSealer } from '../../with-party/team/managed-secret.js';
+export type { RecipientSealer } from '../../kernel/types.js';
+export type { SealedSecret, SealedEnvelope, RecipientHint } from '../../with-party/team/managed-secret.js';
+export { parseSealedEnvelope, SEALED_SECRET_RECORD_ID } from '../../with-party/team/managed-secret.js';

package/dist/port/by/default-provider.d.ts

@@ -1,9 +1,9 @@
 /**
- * Lazy factory for the store-backed default {@link CoordinationProvider}.
+ * Lazy factory for the store-backed default {@link NoydbMesh}.
  * `with-shape/schema-update` is service-layer code the kernel spine may not
  * statically import — the dynamic `import()` below is the port-layering
  * law's sanctioned escape hatch for this exact case.
  */
 import type { NoydbStore } from '../../kernel/types.js';
-export type { CoordinationProvider } from './types.js';
-export declare function createDefaultCoordinationProvider(store: NoydbStore): Promise<import("../../with-shape/schema-update/store-coordination-provider.js").StoreCoordinationProvider>;
+export type { NoydbMesh } from './types.js';
+export declare function createDefaultMesh(store: NoydbStore): Promise<import("../../with-shape/schema-update/store-coordination-provider.js").StoreMesh>;

package/dist/port/by/index.d.ts

@@ -1,17 +1,39 @@
 /**
- * @noy-db/hub/by — the coordination port for `by-*` transports (the `by-*`
- * family port).
+ * `@noy-db/hub/by` — the mesh port for `by-*` session-share transports.
  *
- * A session-share transport (`by-tabs`, `by-peer`) binds ONLY to this
- * subpath: the drain-barrier coordination contract for the schema-fence
- * cutover. `@klum-db/lobby` drives the same port through the `Noydb` handle
- * without ever naming a `by-*` package. `StoreCoordinationProvider` (the
- * store-backed default implementation) lives in `with-shape/schema-update`
- * — its only consumer — and is intentionally NOT exported here.
+ * A `by-*` transport (`by-tabs`, `by-peer`) binds ONLY to this subpath: the
+ * drain-barrier contract for the schema-fence cutover — who is live, and what
+ * generation are they on. `@klum-db/lobby` drives the same port through the
+ * `Noydb` handle (`db.mesh`) without ever naming a `by-*` package.
+ *
+ * `StoreMesh` — the store-polling default — lives in
+ * `with-shape/schema-update`, its only consumer, and is intentionally NOT
+ * exported here. That is a real cost, recorded rather than worked around: it
+ * is hub's own implementation of this port and the one most consumers actually
+ * run, and because it is not on the published surface,
+ * `@noy-db/test-mesh-conformance` cannot import it. **A port's in-hub default
+ * is coverable by its published kit only if it is on the published surface.**
+ *
+ * ## Why this subpath exists again
+ *
+ * It shipped in 0.3.0 and was pruned in 0.4.0 for "zero importers" — correct at
+ * the time, because it was a second place to find types that were already on
+ * the root barrel. It returns in the 0.7 line because something now stands
+ * behind it: the contract is published as an executable suite, and two
+ * transports implement it. Ports first, then seams.
+ *
+ * ⚠️ That last sentence was FALSE when this seam first shipped (#1171).
+ * `by-peer`, `by-tabs` and the conformance kit all imported `NoydbMesh` from
+ * `@noy-db/hub/cargo`, so `/by` was republished with **zero binders** — the
+ * exact condition it was pruned for — while this comment claimed otherwise. A
+ * subpath resolves whether or not anyone imports it, so nothing was red. The
+ * three were migrated, and `family-port-has-binder` in check-architecture.mjs
+ * now asks the question on every run rather than trusting the sentence.
  *
  * Named re-exports only (no `export *`) so the published surface is explicit
  * and tsup's per-entry bundling keeps class identity stable across subpaths.
- * Supersedes the (already-deprecated) coordination re-exports on `/kernel`.
+ * Everything here also remains on `/cargo`, which is where the 0.4 codemod row
+ * sends a consumer — this is additive, and that row stays true.
  */
 export { isQuorum, runDrainBarrier } from './types.js';
-export type { CoordinationProvider, WriterPresence, FenceState, DrainBarrierOptions, } from './types.js';
+export type { NoydbMesh, WriterPresence, FenceDoc, DrainBarrierOptions, } from './types.js';