@noy-db/hub 0.6.0 → 0.7.0-pre.0

package/dist/on/index.js

@@ -0,0 +1 @@
+//# sourceMappingURL=index.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-YYV53EHO.js";
+} from "../chunk-OPXR4PB2.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-5IHGJHWC.js";
+} from "../chunk-5ACAVJUI.js";
 import {
   OverlayedCollection
-} from "../chunk-HOPNIR5R.js";
+} from "../chunk-3QARDAYW.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -11,7 +11,7 @@ import {
   samePartition,
   validatePeriodName,
   withPeriods
-} from "../chunk-5ATC6UT4.js";
+} from "../chunk-PCQDY6QN.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -20,19 +20,19 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-5O5ZSW7N.js";
-import "../chunk-JXHNUYQO.js";
+} from "../chunk-Z7ZXZL6Y.js";
+import "../chunk-IESNYJXZ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-BZ3WMOYX.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-RC4BROYR.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_PERIODS,

package/dist/pod/index.js

@@ -5,43 +5,44 @@ import {
   signRedirect,
   verifyRedirect,
   wrapPodStore
-} from "../chunk-ZYZJLYNS.js";
-import "../chunk-JYPRZWCZ.js";
-import "../chunk-PFWE7FJG.js";
-import "../chunk-QVXZFJBU.js";
-import "../chunk-B4CRUZPR.js";
+} from "../chunk-ATV637J7.js";
+import "../chunk-Y3YLJORD.js";
+import "../chunk-VAG47QHV.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
-} from "../chunk-DECNV4QK.js";
+} from "../chunk-QHJKK77B.js";
 import {
   MANIFEST_COLLECTION,
   isManifestReservedCollection
 } from "../chunk-EPFF7LOX.js";
-import "../chunk-M7WBE3OR.js";
+import "../chunk-WLLUM35R.js";
+import "../chunk-JVLSU7S2.js";
+import "../chunk-Y6GZ2P4M.js";
+import "../chunk-L6GTLZRK.js";
 import "../chunk-GYGLAVCX.js";
-import "../chunk-DNKVKO7K.js";
-import "../chunk-KHKKD62N.js";
-import "../chunk-6NR36UNB.js";
 import "../chunk-6LJY7X5A.js";
+import "../chunk-E6YA6UAP.js";
+import "../chunk-GK4DRVUD.js";
+import "../chunk-WK5FSW7T.js";
+import "../chunk-J4MN6XIU.js";
+import "../chunk-XJ3FEKEY.js";
+import "../chunk-Z2WK53N6.js";
+import "../chunk-CBRS2NEK.js";
+import "../chunk-KHKKD62N.js";
+import "../chunk-P6ASQOZR.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-MPKP6L5E.js";
-import "../chunk-AJGGBXWA.js";
-import "../chunk-ZIMQDXTQ.js";
-import "../chunk-OCJ3JA4O.js";
-import "../chunk-LC6NE4IQ.js";
-import "../chunk-S2I5MYSA.js";
-import "../chunk-KM6ZXG7U.js";
-import "../chunk-W3HAIN6U.js";
-import "../chunk-HWI7GHJZ.js";
-import "../chunk-65JXA63J.js";
-import "../chunk-K6CPIK3R.js";
-import "../chunk-HOPNIR5R.js";
+import "../chunk-YXA2TCTZ.js";
+import "../chunk-CN6B5PEN.js";
+import "../chunk-J4UJ5FRV.js";
+import "../chunk-5263OEM3.js";
+import "../chunk-VTG7327U.js";
+import "../chunk-3QARDAYW.js";
 import "../chunk-T7IR4N2S.js";
 import "../chunk-PEOZ34EM.js";
-import "../chunk-5ATC6UT4.js";
+import "../chunk-PCQDY6QN.js";
 import "../chunk-GHVIKOHT.js";
-import "../chunk-5O5ZSW7N.js";
+import "../chunk-Z7ZXZL6Y.js";
 import "../chunk-SMY5X46Z.js";
 import "../chunk-DZFQVICS.js";
 import {
@@ -67,18 +68,18 @@ import {
   verifyPodHeader,
   verifyRecord,
   writePod
-} from "../chunk-GCU42IG7.js";
-import "../chunk-2ZT4INZ4.js";
-import "../chunk-QH47SQLD.js";
+} from "../chunk-6FOGTKBY.js";
+import "../chunk-LF6DMX4C.js";
+import "../chunk-VFIWDPXZ.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-7OBIBPCV.js";
+import "../chunk-S35S77YU.js";
 import "../chunk-AURFOK3D.js";
-import "../chunk-323MN67Z.js";
-import "../chunk-EHW7NLGD.js";
-import "../chunk-EV2TDHQZ.js";
-import "../chunk-LIR2DJWP.js";
-import "../chunk-JMJSCI7U.js";
-import "../chunk-S7PM7Z4K.js";
+import "../chunk-UCUALOSM.js";
+import "../chunk-S2VG3ABP.js";
+import "../chunk-XSN63FUS.js";
+import "../chunk-F23WQK3G.js";
+import "../chunk-ALB64CZM.js";
+import "../chunk-F7ZFRPGQ.js";
 import "../chunk-I3ISCYT7.js";
 import "../chunk-NO272T7Q.js";
 import "../chunk-XZHEOSQ2.js";
@@ -86,36 +87,36 @@ import "../chunk-YMUFFJCO.js";
 import "../chunk-ATL3ZVXT.js";
 import "../chunk-NSITFOCJ.js";
 import "../chunk-PVEWA2DU.js";
-import "../chunk-XINT4VJA.js";
-import "../chunk-FNYCT27B.js";
-import "../chunk-XPEPMK4Y.js";
-import "../chunk-C3XWJCG7.js";
-import "../chunk-YTUFV7U7.js";
-import "../chunk-ZY6P7M52.js";
-import "../chunk-J6I5VR6P.js";
-import "../chunk-ZJUZOJVW.js";
-import "../chunk-3YGUHUJA.js";
-import "../chunk-YCGLAANM.js";
+import "../chunk-2GXEQUEX.js";
+import "../chunk-57JTHWLQ.js";
+import "../chunk-X67FCULK.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-H4M7ADXY.js";
+import "../chunk-PQ6Z2TAP.js";
+import "../chunk-5W7YXFV5.js";
+import "../chunk-DFAUMLD7.js";
+import "../chunk-HTGRQZFB.js";
+import "../chunk-4A4TYISP.js";
 import "../chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
 } from "../chunk-4AOERLTV.js";
-import "../chunk-7ZGPQOFV.js";
-import "../chunk-JXHNUYQO.js";
+import "../chunk-6EW2UCVF.js";
+import "../chunk-IESNYJXZ.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-BZ3WMOYX.js";
-import "../chunk-D2YFQ7XG.js";
+import "../chunk-RC4BROYR.js";
+import "../chunk-POS53FG6.js";
 import "../chunk-HK67PX4J.js";
-import "../chunk-HSJBJIB2.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-467SKJ65.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   BackupCorruptedError,
   BackupLedgerError,
@@ -129,7 +130,7 @@ import {
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   BackupCorruptedError,

package/dist/{pod-handle-AZ3CXY5Y.js → pod-handle-P6DPBM5U.js}

@@ -1,14 +1,14 @@
-import "./chunk-CXPOG3ZY.js";
+import "./chunk-2LPVI4PX.js";
 import {
   buildRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
-import "./chunk-Z3BZXPRO.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-pod/pod-handle.ts
@@ -38,4 +38,4 @@ async function buildPodHandle(adapter, name) {
 export {
   buildPodHandle
 };
-//# sourceMappingURL=pod-handle-AZ3CXY5Y.js.map
+//# sourceMappingURL=pod-handle-P6DPBM5U.js.map

package/dist/policy/index.js

@@ -6,27 +6,27 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "../chunk-POFYIGQ2.js";
+} from "../chunk-LR4Z47QD.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "../chunk-ZY6P7M52.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-PQ6Z2TAP.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   DEFAULT_FRESHNESS_MS,

package/dist/port/as/active.d.ts

@@ -0,0 +1,10 @@
+import type { FormatsStrategy } from '../with/formats-strategy.js';
+/**
+ * Enable `vault.export()` / `vault.import()`.
+ *
+ * ```ts
+ * const db = await createNoydb({ store, user, secret, formatsStrategy: withFormats() })
+ * const csv = await vault.export(asCsv(), { collections: ['invoices'] })
+ * ```
+ */
+export declare function withFormats(): FormatsStrategy;

package/dist/port/as/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `@noy-db/hub/as` — the format port (the `as-*` family port).
+ *
+ * A serialization format — `as-csv`, `as-json`, a third party's — binds ONLY
+ * this subpath: the {@link NoydbFormat} contract plus the import types hub
+ * owns. Mirrors `@noy-db/hub/to` for stores and `/at` for sealers.
+ *
+ * ## Why this seam exists NOW and did not before
+ *
+ * `/as` shipped in 0.3.0 and was removed in 0.4.0 — "family port removed, it
+ * had zero importers" — alongside `/at`, `/in`, `/on` and `/ui`. It was a
+ * second place to find types already on the root barrel.
+ *
+ * What is different is not the subpath, it is what stands behind it. `/as` now
+ * carries types that exist NOWHERE ELSE: `ImportPolicy` was declared six times
+ * across satellites and not at all in hub, and `ImportPlan` was declared per
+ * package around a hub-owned `VaultDiff`. Consolidating them is the seam's
+ * substance — this is not a re-export of the root barrel, it is the first
+ * hub-side home the import contract has ever had.
+ *
+ * See `docs/adr/0004-as-format-port.md` for the measurements, and for why the
+ * port reaches five of ten `as-*` packages rather than all of them.
+ *
+ * ⚠️ Re-introducing a retired subpath is declared, not incidental: the
+ * `unretired` list in `codemods/0.7.0-pre.json` records it, and
+ * `codemod-map.test.ts` refuses the claim unless the subpath really resolves.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit.
+ */
+export { withFormats } from './active.js';
+export type { FormatsStrategy, FormatExportOptions, FormatImportOptions, } from '../with/formats-strategy.js';
+export type { NoydbFormat, DecodedChunk, ImportPolicy, ImportPlan, ExportChunk, ExportFormat, VaultDiff, } from './types.js';

package/dist/port/as/types.d.ts

@@ -0,0 +1,113 @@
+/**
+ * The `as-*` family port — the contract a format implements, and the types
+ * hub owns on both sides of it.
+ *
+ * See `docs/adr/0004-as-format-port.md`. In short: `as-*` is export AND
+ * import — data, schema, validation — and both halves were duplicated per
+ * package. The import half was the worse of the two:
+ *
+ *     ImportPolicy      declared SIX times across as-* packages,
+ *                       byte-identical, and absent from hub entirely
+ *     As<X>ImportPlan   declared per package, byte-identical
+ *     VaultDiff         hub-owned — so a plan was HALF hub-owned
+ *                       and half copy-pasted
+ *
+ * Consolidating them here is non-breaking: each package re-exports these
+ * instead of redeclaring them, so six independent definitions that nothing
+ * compared become one that the compiler enforces.
+ *
+ * @module
+ */
+import type { ExportChunk, ExportFormat } from '../../kernel/types.js';
+import type { VaultDiff } from '../../with-cargo/vault-diff.js';
+/**
+ * How an import reconciles with what the collection already holds.
+ *
+ * Hub-owned as of 0.7. Previously declared independently in `as-csv`,
+ * `as-json`, `as-ndjson`, `as-xml`, `as-xlsx` and `as-zip` — six copies of one
+ * line, with no mechanism that would have noticed them drifting apart.
+ */
+export type ImportPolicy = 'merge' | 'replace' | 'insert-only';
+/**
+ * A planned-but-not-applied import.
+ *
+ * Read the `plan` to show a diff, then `apply()` to commit it. The two-phase
+ * shape is deliberate: an import that writes before the caller has seen what
+ * it would change is not reviewable, and every `as-*` package had already
+ * converged on this independently — which is the argument for hub owning it
+ * rather than each of them re-deriving it.
+ */
+export interface ImportPlan {
+    /** What would change. Safe to render; nothing has been written. */
+    readonly plan: VaultDiff;
+    /** The reconciliation the plan was computed under. */
+    readonly policy: ImportPolicy;
+    /** Commit the plan. */
+    apply(): Promise<void>;
+}
+/**
+ * What a format produces from bytes: records, per collection.
+ *
+ * Deliberately NOT a `VaultDiff` — computing the diff needs the vault's
+ * current contents, which a format does not have and must not need. The
+ * format's job ends at "these are the records the input describes"; hub
+ * turns that into a plan.
+ */
+export interface DecodedChunk {
+    readonly collection: string;
+    readonly records: readonly unknown[];
+}
+/**
+ * A serialization format for vault data — the `as-*` family port.
+ *
+ * **Pure by construction.** A format receives records and returns bytes, or
+ * receives bytes and returns records. It never holds a `Vault`, which is what
+ * makes the export gate unskippable rather than merely checked: there is no
+ * vault in scope to read past `assertCanExport`.
+ *
+ * That property is the whole point of the inversion. The conformance kit it
+ * replaces could only check implementors who ran it; a format that cannot
+ * reach a vault is gated whether its author cooperated or not — including
+ * third-party formats this family will never see.
+ *
+ * Records arrive **already redacted**: hub applies the projection before
+ * `encode`, because five packages were each calling
+ * `vault.collection(x).describe()` and `applyListProjection` to do it
+ * themselves.
+ *
+ * @typeParam Out - `string` for text formats, `Uint8Array` for binary ones.
+ */
+export interface NoydbFormat<Out extends string | Uint8Array = string | Uint8Array> {
+    /**
+     * Stable identifier, e.g. `'csv'`.
+     *
+     * A format declares its own id rather than being named by hub's
+     * `ExportFormat` union, which is closed — under the old shape a new format
+     * needed a hub release just to be nameable.
+     */
+    readonly id: string;
+    /** File extension without the dot, e.g. `'csv'`. Used by `download`/`write`. */
+    readonly extension: string;
+    /** MIME type, e.g. `'text/csv;charset=utf-8'`. Used by `download`. */
+    readonly mimeType: string;
+    /**
+     * The capability tier hub gates this format under. `'plaintext'` for a
+     * readable projection; `'bundle'` for encrypted output.
+     *
+     * Not inferred from anything: `as-noydb` emits an encrypted pod and gates on
+     * `'bundle'`, and a format that quietly gated on the wrong tier would be a
+     * silent downgrade.
+     */
+    readonly tier: 'plaintext' | 'bundle';
+    /** Records → bytes. Pure. */
+    encode(chunks: readonly ExportChunk[]): Out | Promise<Out>;
+    /**
+     * Bytes → records. Pure.
+     *
+     * Optional on an implementation, not on the contract: `as-sql` is
+     * export-only today. A format that omits it makes `vault.import` throw with
+     * its id named, rather than failing somewhere less legible.
+     */
+    decode?(input: Out): readonly DecodedChunk[] | Promise<readonly DecodedChunk[]>;
+}
+export type { ExportChunk, ExportFormat, VaultDiff };

package/dist/port/at/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * `@noy-db/hub/at` — the sealing-key port (the `at-*` family port).
+ *
+ * A sealing-key provider — `at-env`, `at-aws-kms`, `at-gcp-kms`,
+ * `at-macos-keychain`, `at-azure-keyvault`, or a third party's — binds ONLY
+ * this subpath: the {@link NoydbSealer} contract plus the in-memory double an
+ * implementor develops against. Mirrors `@noy-db/hub/to` for stores.
+ *
+ * ## Why this seam exists NOW and did not before
+ *
+ * `/at` shipped in 0.3.0 and was removed in 0.4.0 — "family port removed, it
+ * had zero importers" — along with `/as`, `/in`, `/on` and `/ui`. Only `/to`
+ * survived, and the difference is not taste: `/to` had a contract, a registry
+ * and a conformance kit behind it, so a store author had a reason to bind it.
+ * `/at` was a second place to find a type already on the root barrel.
+ *
+ * What changed is not the subpath, it is what stands behind it:
+ * `@noy-db/test-sealer-conformance` publishes the contract as an executable
+ * suite, so "implements NoydbSealer" now means one checkable thing. The seam
+ * follows the port rather than preceding it — which is the ordering 0.4
+ * demonstrated the hard way.
+ *
+ * ⚠️ Re-introducing a retired subpath is declared, not incidental: the
+ * `unretired` list in `codemods/0.7.0-pre.json` records it, and
+ * `codemod-map.test.ts` refuses to accept the claim unless the subpath really
+ * resolves. Consumers who followed the 0.4 codemod row onto the root barrel
+ * are untouched — this is additive, and the root barrel and `/cargo` keep
+ * exporting everything they did.
+ *
+ * Named re-exports only (no `export *`) so the published surface is explicit
+ * and tsup's per-entry bundling keeps class identity stable across subpaths.
+ */
+export type { NoydbSealer } from '../../with-party/team/managed-secret.js';
+export { MemorySealer, MemoryRecipientSealer } from '../../with-party/team/managed-secret.js';
+export type { RecipientSealer } from '../../kernel/types.js';
+export type { SealedSecret, SealedEnvelope, RecipientHint } from '../../with-party/team/managed-secret.js';
+export { parseSealedEnvelope, SEALED_SECRET_RECORD_ID } from '../../with-party/team/managed-secret.js';

package/dist/port/by/default-provider.d.ts

@@ -1,9 +1,9 @@
 /**
- * Lazy factory for the store-backed default {@link CoordinationProvider}.
+ * Lazy factory for the store-backed default {@link NoydbMesh}.
  * `with-shape/schema-update` is service-layer code the kernel spine may not
  * statically import — the dynamic `import()` below is the port-layering
  * law's sanctioned escape hatch for this exact case.
  */
 import type { NoydbStore } from '../../kernel/types.js';
-export type { CoordinationProvider } from './types.js';
-export declare function createDefaultCoordinationProvider(store: NoydbStore): Promise<import("../../with-shape/schema-update/store-coordination-provider.js").StoreCoordinationProvider>;
+export type { NoydbMesh } from './types.js';
+export declare function createDefaultMesh(store: NoydbStore): Promise<import("../../with-shape/schema-update/store-coordination-provider.js").StoreMesh>;

package/dist/port/by/index.d.ts

@@ -1,17 +1,39 @@
 /**
- * @noy-db/hub/by — the coordination port for `by-*` transports (the `by-*`
- * family port).
+ * `@noy-db/hub/by` — the mesh port for `by-*` session-share transports.
  *
- * A session-share transport (`by-tabs`, `by-peer`) binds ONLY to this
- * subpath: the drain-barrier coordination contract for the schema-fence
- * cutover. `@klum-db/lobby` drives the same port through the `Noydb` handle
- * without ever naming a `by-*` package. `StoreCoordinationProvider` (the
- * store-backed default implementation) lives in `with-shape/schema-update`
- * — its only consumer — and is intentionally NOT exported here.
+ * A `by-*` transport (`by-tabs`, `by-peer`) binds ONLY to this subpath: the
+ * drain-barrier contract for the schema-fence cutover — who is live, and what
+ * generation are they on. `@klum-db/lobby` drives the same port through the
+ * `Noydb` handle (`db.mesh`) without ever naming a `by-*` package.
+ *
+ * `StoreMesh` — the store-polling default — lives in
+ * `with-shape/schema-update`, its only consumer, and is intentionally NOT
+ * exported here. That is a real cost, recorded rather than worked around: it
+ * is hub's own implementation of this port and the one most consumers actually
+ * run, and because it is not on the published surface,
+ * `@noy-db/test-mesh-conformance` cannot import it. **A port's in-hub default
+ * is coverable by its published kit only if it is on the published surface.**
+ *
+ * ## Why this subpath exists again
+ *
+ * It shipped in 0.3.0 and was pruned in 0.4.0 for "zero importers" — correct at
+ * the time, because it was a second place to find types that were already on
+ * the root barrel. It returns in the 0.7 line because something now stands
+ * behind it: the contract is published as an executable suite, and two
+ * transports implement it. Ports first, then seams.
+ *
+ * ⚠️ That last sentence was FALSE when this seam first shipped (#1171).
+ * `by-peer`, `by-tabs` and the conformance kit all imported `NoydbMesh` from
+ * `@noy-db/hub/cargo`, so `/by` was republished with **zero binders** — the
+ * exact condition it was pruned for — while this comment claimed otherwise. A
+ * subpath resolves whether or not anyone imports it, so nothing was red. The
+ * three were migrated, and `family-port-has-binder` in check-architecture.mjs
+ * now asks the question on every run rather than trusting the sentence.
  *
  * Named re-exports only (no `export *`) so the published surface is explicit
  * and tsup's per-entry bundling keeps class identity stable across subpaths.
- * Supersedes the (already-deprecated) coordination re-exports on `/kernel`.
+ * Everything here also remains on `/cargo`, which is where the 0.4 codemod row
+ * sends a consumer — this is additive, and that row stays true.
  */
 export { isQuorum, runDrainBarrier } from './types.js';
-export type { CoordinationProvider, WriterPresence, FenceState, DrainBarrierOptions, } from './types.js';
+export type { NoydbMesh, WriterPresence, FenceDoc, DrainBarrierOptions, } from './types.js';

package/dist/port/by/types.d.ts

@@ -1,5 +1,5 @@
 /**
- * Kernel coordination port — the injected `CoordinationProvider` seam for the
+ * Kernel coordination port — the injected `NoydbMesh` seam for the
  * schema-fence drain-barrier.
  *
  * The kernel defines this port; `@noy-db/by-tabs` / `@noy-db/by-peer` implement
@@ -15,11 +15,29 @@
  * @module
  */
 import type { Unsubscribe } from '../with/write-hooks.js';
-/** Vault fence state (the existing FenceDoc shape). */
-export interface FenceState {
-    readonly currentSchemaVersion: number;
-    readonly fenceState: 'normal' | 'draining' | 'migrating' | 'complete';
-}
+import type { FenceDoc } from '../../with-shape/schema-update/fence.js';
+/**
+ * What the mesh carries about the fence: the vault's schema generation and its
+ * drain phase. This is the vault's OWN fence document — `@noy-db/hub/by`
+ * re-exports it rather than declaring a parallel type.
+ *
+ * Through 0.6 this port declared its own `FenceState` interface with the same
+ * two fields. Two problems, and only the first was visible (#1188):
+ *
+ *  1. `FenceState` ALSO names an unrelated string union
+ *     (`'normal' | 'draining' | …`) on `.` and `./cargo`. A consumer importing
+ *     from `@noy-db/hub` and one importing from `@noy-db/hub/by` got different
+ *     types, both compiling, failing only where they met.
+ *  2. It was a hand-copy — its own comment said "the existing FenceDoc shape" —
+ *     and it had already drifted, missing the `schemaHash` field #946 added.
+ *     Measured mutually assignable with `FenceDoc` under `--strict
+ *     --exactOptionalPropertyTypes`, so there was no type to preserve.
+ *
+ * Re-exporting fixes both: one name, one meaning, one definition to keep
+ * current. `FenceState` on the root barrel is untouched and still means the
+ * string union.
+ */
+export type { FenceDoc };
 /** A writer's presence + ack, tagged with the session that owns it. */
 export interface WriterPresence {
     /** = today's clientId (one per tab/peer). */
@@ -30,18 +48,18 @@ export interface WriterPresence {
     readonly quiescedAtVersion: number | null;
 }
 /** Session-addressable drain-barrier coordination transport. Per-vault ops. */
-export interface CoordinationProvider {
+export interface NoydbMesh {
     /** orchestrator → all writers */
-    setFence(vault: string, fence: FenceState): Promise<void>;
+    setFence(vault: string, fence: FenceDoc): Promise<void>;
     /**
      * Fresh one-shot fence read for the write-path gate (`assertWritable`).
      * A direct read (not a cached `observeFence` snapshot) avoids a staleness
      * window and keeps the timing-sensitive cutover gate exact. The store
      * default reads `_meta/schema-fence`; `by-*` return their last-pushed fence.
      */
-    readFence(vault: string): Promise<FenceState>;
+    readFence(vault: string): Promise<FenceDoc>;
     /** writer observes fence changes (default: poll-emit; by-*: push) */
-    observeFence(vault: string, onChange: (f: FenceState) => void): Unsubscribe;
+    observeFence(vault: string, onChange: (f: FenceDoc) => void): Unsubscribe;
     /** writer → orchestrator: presence + ack (heartbeat + quiescedAtVersion) */
     reportPresence(vault: string, p: WriterPresence): Promise<void>;
     /** orchestrator observes presence changes (default: poll-emit; by-*: push) */
@@ -83,4 +101,4 @@ export interface DrainBarrierOptions {
  * `generation`, at which point `run` is invoked exactly once. Rejects with
  * {@link QuiesceTimeoutError} if `quiesceTimeoutMs` elapses first.
  */
-export declare function runDrainBarrier(provider: CoordinationProvider, o: DrainBarrierOptions, run: () => Promise<void>): Promise<void>;
+export declare function runDrainBarrier(provider: NoydbMesh, o: DrainBarrierOptions, run: () => Promise<void>): Promise<void>;