@noy-db/hub 0.6.0 → 0.7.0-pre.0

package/dist/sequence/index.js

@@ -5,18 +5,18 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "../chunk-W3HAIN6U.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-CN6B5PEN.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   SequenceNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_SEQUENCE,

package/dist/session/index.js

@@ -12,24 +12,24 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "../chunk-WPZ5FVAS.js";
+} from "../chunk-T3PHCEN4.js";
 import {
   NO_SESSION
 } from "../chunk-VKQCVU2Z.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,
   SessionPolicyError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-party/session/active.ts

package/dist/shadow/index.js

@@ -1,11 +1,11 @@
 import {
   CollectionFrame,
   VaultFrame
-} from "../chunk-OR2FYRYR.js";
+} from "../chunk-XVU7J43V.js";
 import {
   NO_SHADOW
 } from "../chunk-SMY5X46Z.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/shadow/active.ts

package/dist/signer-6XVS2AU3.js

@@ -0,0 +1,25 @@
+import {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+} from "./chunk-3L2MVE36.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  ATTESTATIONS_COLLECTION,
+  REVOKED_RECORD_ID,
+  SIGNER_RECORD_ID,
+  loadOrCreateSigner,
+  loadSigner
+};
+//# sourceMappingURL=signer-6XVS2AU3.js.map

package/dist/snapshots/index.js

@@ -4,19 +4,19 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-GCU42IG7.js";
-import "../chunk-2ZT4INZ4.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-6FOGTKBY.js";
+import "../chunk-LF6DMX4C.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   SnapshotNotFoundError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-fork/snapshots/engine.ts

package/dist/{stale-TH7SSVRV.js → stale-MCS46TFO.js}

@@ -6,17 +6,17 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-EQOTJL76.js";
+} from "./chunk-PGFKIOR3.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-CXPOG3ZY.js";
-import "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
-import "./chunk-Z3BZXPRO.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MV_STALE_COLLECTION,
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-TH7SSVRV.js.map
+//# sourceMappingURL=stale-MCS46TFO.js.map

package/dist/stale-MCS46TFO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/storage-ZXUT476I.js

@@ -0,0 +1,23 @@
+import {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+} from "./chunk-YXA2TCTZ.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  SCHEMAS_COLLECTION,
+  loadPersistedSchema,
+  loadPersistedSchemaEntry,
+  savePersistedSchema
+};
+//# sourceMappingURL=storage-ZXUT476I.js.map

package/dist/storage-ZXUT476I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{store-coordination-provider-R27VRD6K.js → store-coordination-provider-6FM26VQM.js}

@@ -1,18 +1,18 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-DNKVKO7K.js";
-import "./chunk-CXPOG3ZY.js";
+} from "./chunk-Y6GZ2P4M.js";
+import "./chunk-2LPVI4PX.js";
 import {
   buildRecordEnvelope
-} from "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
-import "./chunk-Z3BZXPRO.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/schema-update/client-registry.ts
@@ -68,7 +68,7 @@ function presenceListEqual(a, b) {
   const bk = new Set(b.map(key));
   return a.every((w) => bk.has(key(w)));
 }
-var StoreCoordinationProvider = class {
+var StoreMesh = class {
   #store;
   #pollIntervalMs;
   constructor(store, opts) {
@@ -76,7 +76,8 @@ var StoreCoordinationProvider = class {
     this.#pollIntervalMs = opts?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
   }
   async setFence(vault, fence) {
-    await saveFence(this.#store, vault, fence);
+    const current = await loadFence(this.#store, vault);
+    await saveFence(this.#store, vault, { ...current, ...fence });
   }
   async readFence(vault) {
     return loadFence(this.#store, vault);
@@ -143,6 +144,6 @@ function unref(timer) {
   if (typeof t.unref === "function") t.unref();
 }
 export {
-  StoreCoordinationProvider
+  StoreMesh
 };
-//# sourceMappingURL=store-coordination-provider-R27VRD6K.js.map
+//# sourceMappingURL=store-coordination-provider-6FM26VQM.js.map

package/dist/store-coordination-provider-6FM26VQM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-shape/schema-update/client-registry.ts","../src/with-shape/schema-update/store-coordination-provider.ts"],"sourcesContent":["/**\n * Schema-cutover client registry. Each client keeps a\n * heartbeat doc at `_meta/schema-fence:client:<clientId>` carrying its\n * liveness (`lastSeen`) and the fence generation it has quiesced for\n * (`quiescedAtVersion`). Plaintext envelope, like the fence doc.\n */\nimport type { NoydbStore } from '../../kernel/types.js'\nimport { buildRecordEnvelope } from '../../kernel/enclave/index.js'\n\nconst META_COLLECTION = '_meta'\nconst CLIENT_PREFIX = 'schema-fence:client:'\n\nexport interface ClientDoc {\n  readonly clientId: string\n  readonly lastSeen: number\n  readonly quiescedAtVersion: number | null\n  /**\n   * Session that owns this writer (one user's writers across vaults). Additive\n   * and optional so legacy client docs (written without it) keep parsing;\n   * readers default it.\n   */\n  readonly sessionId?: string\n}\n\nexport async function writeClientDoc(\n  store: NoydbStore,\n  vault: string,\n  clientId: string,\n  doc: { lastSeen: number; quiescedAtVersion: number | null; sessionId?: string },\n): Promise<void> {\n  const recordId = `${CLIENT_PREFIX}${clientId}`\n  const envelope = buildRecordEnvelope(\n    { collection: META_COLLECTION, id: recordId, version: 1 },\n    { iv: '', data: JSON.stringify({ clientId, ...doc }) },\n  )\n  await store.put(vault, META_COLLECTION, recordId, envelope)\n}\n\nexport async function listClientDocs(store: NoydbStore, vault: string): Promise<ClientDoc[]> {\n  const ids = await store.list(vault, META_COLLECTION)\n  const out: ClientDoc[] = []\n  for (const id of ids) {\n    if (!id.startsWith(CLIENT_PREFIX)) continue\n    const env = await store.get(vault, META_COLLECTION, id)\n    if (!env) continue\n    try {\n      const parsed = JSON.parse(env._data) as unknown\n      if (isClientDoc(parsed)) out.push(parsed)\n    } catch { /* skip corrupt */ }\n  }\n  return out\n}\n\n/**\n * True when every *active* client (lastSeen within staleMs of now) has\n * `quiescedAtVersion === generation`. Stale clients are ignored. An empty\n * active set is vacuously quiesced.\n */\nexport async function activeQuiesced(\n  store: NoydbStore,\n  vault: string,\n  opts: { generation: number; now: number; staleMs: number; excludeClientId?: string },\n): Promise<boolean> {\n  const docs = await listClientDocs(store, vault)\n  const active = docs.filter(\n    d => d.lastSeen >= opts.now - opts.staleMs && d.clientId !== opts.excludeClientId,\n  )\n  return active.every(d => d.quiescedAtVersion === opts.generation)\n}\n\nfunction isClientDoc(x: unknown): x is ClientDoc {\n  if (x === null || typeof x !== 'object') return false\n  const o = x as Record<string, unknown>\n  return typeof o['clientId'] === 'string'\n    && typeof o['lastSeen'] === 'number'\n    && (o['quiescedAtVersion'] === null || typeof o['quiescedAtVersion'] === 'number')\n    && (o['sessionId'] === undefined || typeof o['sessionId'] === 'string')\n}\n","/**\n * Store-backed default {@link NoydbMesh}.\n *\n * Maps the five coordination-port methods onto today's `_meta/schema-fence`\n * store ops so that, with no `by-*` provider injected, the fence service\n * reproduces its current store-polling behavior byte-for-byte. The `observe*`\n * methods are poll-emit (the legacy {@link FenceWatcher} model); `by-tabs` /\n * `by-peer` override them with real-time push.\n *\n * @module\n */\n\nimport type { NoydbStore } from '../../kernel/types.js'\nimport type { Unsubscribe } from '../../port/with/write-hooks.js'\nimport { loadFence, saveFence, type FenceDoc } from './fence.js'\nimport { writeClientDoc, listClientDocs, type ClientDoc } from './client-registry.js'\nimport type { NoydbMesh, WriterPresence } from '../../port/by/types.js'\n\n/**\n * Default poll cadence for the `observe*` fallbacks (ms). Matches the\n * store-poll granularity the fence-controller uses while waiting for quorum\n * (`delay(50)`); the same value the migration cutover falls back to when no\n * real-time provider is injected.\n */\nconst DEFAULT_POLL_INTERVAL_MS = 50\n\n/** Map a stored {@link ClientDoc} to the port's {@link WriterPresence}. */\nfunction toPresence(doc: ClientDoc): WriterPresence {\n  return {\n    writerId: doc.clientId,\n    // Legacy docs written without a sessionId (and explicit empty) have no\n    // session — fall back to the writerId so every presence is session-addressable.\n    sessionId: doc.sessionId && doc.sessionId.length > 0 ? doc.sessionId : doc.clientId,\n    lastSeen: doc.lastSeen,\n    quiescedAtVersion: doc.quiescedAtVersion,\n  }\n}\n\nfunction fenceEqual(a: FenceDoc, b: FenceDoc): boolean {\n  return a.currentSchemaVersion === b.currentSchemaVersion && a.fenceState === b.fenceState\n}\n\nfunction presenceListEqual(a: readonly WriterPresence[], b: readonly WriterPresence[]): boolean {\n  if (a.length !== b.length) return false\n  const key = (w: WriterPresence) => `${w.writerId}\\u0000${w.sessionId}\\u0000${w.lastSeen}\\u0000${String(w.quiescedAtVersion)}`\n  const bk = new Set(b.map(key))\n  return a.every((w) => bk.has(key(w)))\n}\n\nexport class StoreMesh implements NoydbMesh {\n  readonly #store: NoydbStore\n  readonly #pollIntervalMs: number\n\n  constructor(store: NoydbStore, opts?: { pollIntervalMs?: number }) {\n    this.#store = store\n    this.#pollIntervalMs = opts?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS\n  }\n\n  async setFence(vault: string, fence: FenceDoc): Promise<void> {\n    // RE-READ AND SPREAD, never write the caller's doc whole (#1197).\n    //\n    // `saveFence` serialises what it is given and does a full `store.put` — no\n    // merge. Callers legitimately construct a PARTIAL doc: `FenceController`\n    // builds `{ currentSchemaVersion, fenceState }`, which is a valid `FenceDoc`\n    // because `schemaHash` is optional. Writing that whole silently erased the\n    // hash #946 added, so \"which schema is generation N is answerable from\n    // schemaFenceState() alone\" held only until the first drain.\n    //\n    // The type cannot see the loss: for an optional field, \"absent\" and\n    // \"deliberately cleared\" are the same value.\n    //\n    // Mirrors `persisted-schemas/register.ts:136`, which re-reads for the same\n    // reason and documents it — a stale snapshot would roll back a concurrent\n    // cutover's version. Re-reading NARROWS that window rather than closing it;\n    // fence transitions are orchestrator-driven and serialised, so the residual\n    // is the same one that path already accepts.\n    const current = await loadFence(this.#store, vault)\n    await saveFence(this.#store, vault, { ...current, ...fence })\n  }\n\n  async readFence(vault: string): Promise<FenceDoc> {\n    return loadFence(this.#store, vault)\n  }\n\n  observeFence(vault: string, onChange: (f: FenceDoc) => void): Unsubscribe {\n    let last: FenceDoc | null = null\n    let busy = false\n    const poll = async () => {\n      if (busy) return\n      busy = true\n      try {\n        const fence = await loadFence(this.#store, vault)\n        if (last === null || !fenceEqual(last, fence)) {\n          last = fence\n          onChange(fence)\n        }\n      } catch {\n        /* transient store error — retry next tick */\n      } finally {\n        busy = false\n      }\n    }\n    void poll() // emit current state once immediately\n    const timer = setInterval(() => void poll(), this.#pollIntervalMs)\n    unref(timer)\n    return () => clearInterval(timer)\n  }\n\n  async reportPresence(vault: string, p: WriterPresence): Promise<void> {\n    await writeClientDoc(this.#store, vault, p.writerId, {\n      lastSeen: p.lastSeen,\n      quiescedAtVersion: p.quiescedAtVersion,\n      sessionId: p.sessionId,\n    })\n  }\n\n  observePresence(vault: string, onChange: (writers: readonly WriterPresence[]) => void): Unsubscribe {\n    let last: readonly WriterPresence[] | null = null\n    let busy = false\n    const poll = async () => {\n      if (busy) return\n      busy = true\n      try {\n        const docs = await listClientDocs(this.#store, vault)\n        const writers = docs.map(toPresence)\n        if (last === null || !presenceListEqual(last, writers)) {\n          last = writers\n          onChange(writers)\n        }\n      } catch {\n        /* transient store error — retry next tick */\n      } finally {\n        busy = false\n      }\n    }\n    void poll() // emit current set once immediately\n    const timer = setInterval(() => void poll(), this.#pollIntervalMs)\n    unref(timer)\n    return () => clearInterval(timer)\n  }\n\n  async reachableWriters(vault: string, o: { staleMs: number; now: number }): Promise<readonly WriterPresence[]> {\n    const docs = await listClientDocs(this.#store, vault)\n    return docs.map(toPresence).filter((w) => o.now - w.lastSeen <= o.staleMs)\n  }\n}\n\n/** Best-effort `unref` so a poll timer never holds the process open (Node only). */\nfunction unref(timer: ReturnType<typeof setInterval>): void {\n  const t = timer as unknown as { unref?: () => void }\n  if (typeof t.unref === 'function') t.unref()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AASA,IAAM,kBAAkB;AACxB,IAAM,gBAAgB;AActB,eAAsB,eACpB,OACA,OACA,UACA,KACe;AACf,QAAM,WAAW,GAAG,aAAa,GAAG,QAAQ;AAC5C,QAAM,WAAW;AAAA,IACf,EAAE,YAAY,iBAAiB,IAAI,UAAU,SAAS,EAAE;AAAA,IACxD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC,EAAE;AAAA,EACvD;AACA,QAAM,MAAM,IAAI,OAAO,iBAAiB,UAAU,QAAQ;AAC5D;AAEA,eAAsB,eAAe,OAAmB,OAAqC;AAC3F,QAAM,MAAM,MAAM,MAAM,KAAK,OAAO,eAAe;AACnD,QAAM,MAAmB,CAAC;AAC1B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,WAAW,aAAa,EAAG;AACnC,UAAM,MAAM,MAAM,MAAM,IAAI,OAAO,iBAAiB,EAAE;AACtD,QAAI,CAAC,IAAK;AACV,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI,KAAK;AACnC,UAAI,YAAY,MAAM,EAAG,KAAI,KAAK,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAAqB;AAAA,EAC/B;AACA,SAAO;AACT;AAmBA,SAAS,YAAY,GAA4B;AAC/C,MAAI,MAAM,QAAQ,OAAO,MAAM,SAAU,QAAO;AAChD,QAAM,IAAI;AACV,SAAO,OAAO,EAAE,UAAU,MAAM,YAC3B,OAAO,EAAE,UAAU,MAAM,aACxB,EAAE,mBAAmB,MAAM,QAAQ,OAAO,EAAE,mBAAmB,MAAM,cACrE,EAAE,WAAW,MAAM,UAAa,OAAO,EAAE,WAAW,MAAM;AAClE;;;ACrDA,IAAM,2BAA2B;AAGjC,SAAS,WAAW,KAAgC;AAClD,SAAO;AAAA,IACL,UAAU,IAAI;AAAA;AAAA;AAAA,IAGd,WAAW,IAAI,aAAa,IAAI,UAAU,SAAS,IAAI,IAAI,YAAY,IAAI;AAAA,IAC3E,UAAU,IAAI;AAAA,IACd,mBAAmB,IAAI;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,GAAa,GAAsB;AACrD,SAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,eAAe,EAAE;AACjF;AAEA,SAAS,kBAAkB,GAA8B,GAAuC;AAC9F,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,QAAM,MAAM,CAAC,MAAsB,GAAG,EAAE,QAAQ,KAAS,EAAE,SAAS,KAAS,EAAE,QAAQ,KAAS,OAAO,EAAE,iBAAiB,CAAC;AAC3H,QAAM,KAAK,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC;AAC7B,SAAO,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;AACtC;AAEO,IAAM,YAAN,MAAqC;AAAA,EACjC;AAAA,EACA;AAAA,EAET,YAAY,OAAmB,MAAoC;AACjE,SAAK,SAAS;AACd,SAAK,kBAAkB,MAAM,kBAAkB;AAAA,EACjD;AAAA,EAEA,MAAM,SAAS,OAAe,OAAgC;AAkB5D,UAAM,UAAU,MAAM,UAAU,KAAK,QAAQ,KAAK;AAClD,UAAM,UAAU,KAAK,QAAQ,OAAO,EAAE,GAAG,SAAS,GAAG,MAAM,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAM,UAAU,OAAkC;AAChD,WAAO,UAAU,KAAK,QAAQ,KAAK;AAAA,EACrC;AAAA,EAEA,aAAa,OAAe,UAA8C;AACxE,QAAI,OAAwB;AAC5B,QAAI,OAAO;AACX,UAAM,OAAO,YAAY;AACvB,UAAI,KAAM;AACV,aAAO;AACP,UAAI;AACF,cAAM,QAAQ,MAAM,UAAU,KAAK,QAAQ,KAAK;AAChD,YAAI,SAAS,QAAQ,CAAC,WAAW,MAAM,KAAK,GAAG;AAC7C,iBAAO;AACP,mBAAS,KAAK;AAAA,QAChB;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,SAAK,KAAK;AACV,UAAM,QAAQ,YAAY,MAAM,KAAK,KAAK,GAAG,KAAK,eAAe;AACjE,UAAM,KAAK;AACX,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC;AAAA,EAEA,MAAM,eAAe,OAAe,GAAkC;AACpE,UAAM,eAAe,KAAK,QAAQ,OAAO,EAAE,UAAU;AAAA,MACnD,UAAU,EAAE;AAAA,MACZ,mBAAmB,EAAE;AAAA,MACrB,WAAW,EAAE;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,gBAAgB,OAAe,UAAqE;AAClG,QAAI,OAAyC;AAC7C,QAAI,OAAO;AACX,UAAM,OAAO,YAAY;AACvB,UAAI,KAAM;AACV,aAAO;AACP,UAAI;AACF,cAAM,OAAO,MAAM,eAAe,KAAK,QAAQ,KAAK;AACpD,cAAM,UAAU,KAAK,IAAI,UAAU;AACnC,YAAI,SAAS,QAAQ,CAAC,kBAAkB,MAAM,OAAO,GAAG;AACtD,iBAAO;AACP,mBAAS,OAAO;AAAA,QAClB;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,SAAK,KAAK;AACV,UAAM,QAAQ,YAAY,MAAM,KAAK,KAAK,GAAG,KAAK,eAAe;AACjE,UAAM,KAAK;AACX,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC;AAAA,EAEA,MAAM,iBAAiB,OAAe,GAAyE;AAC7G,UAAM,OAAO,MAAM,eAAe,KAAK,QAAQ,KAAK;AACpD,WAAO,KAAK,IAAI,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO;AAAA,EAC3E;AACF;AAGA,SAAS,MAAM,OAA6C;AAC1D,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,UAAU,WAAY,GAAE,MAAM;AAC7C;","names":[]}

package/dist/sync/index.js

@@ -2,20 +2,20 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-4ATF4BLF.js";
+} from "../chunk-H36KSN6X.js";
 import {
   NO_SYNC
 } from "../chunk-T7IR4N2S.js";
-import "../chunk-5O5ZSW7N.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-Z7ZXZL6Y.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-sync/active.ts

package/dist/team/index.js

@@ -1,8 +1,8 @@
 import {
-  MemoryDeviceSealProvider,
+  MemoryDeviceSeal,
   beginEchoUnlock,
   withTeam
-} from "../chunk-IWKCJCLP.js";
+} from "../chunk-X62MEF2O.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,8 +31,8 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-YTUFV7U7.js";
-import "../chunk-ZY6P7M52.js";
+} from "../chunk-H4M7ADXY.js";
+import "../chunk-PQ6Z2TAP.js";
 import {
   buildEchoBlock,
   buildRecipientKeyringFile,
@@ -53,24 +53,24 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-J6I5VR6P.js";
-import "../chunk-ZJUZOJVW.js";
-import "../chunk-3YGUHUJA.js";
-import "../chunk-D2YFQ7XG.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-5W7YXFV5.js";
+import "../chunk-DFAUMLD7.js";
+import "../chunk-HTGRQZFB.js";
+import "../chunk-POS53FG6.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   TeamNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
-  MemoryDeviceSealProvider,
+  MemoryDeviceSeal,
   NO_TEAM,
   TeamNotEnabledError,
   beginEchoUnlock,

package/dist/tiers/index.js

@@ -11,20 +11,20 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-ZIMQDXTQ.js";
-import "../chunk-3YGUHUJA.js";
-import "../chunk-D2YFQ7XG.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-WK5FSW7T.js";
+import "../chunk-HTGRQZFB.js";
+import "../chunk-POS53FG6.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   TiersNotEnabledError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_TIERS,

package/dist/to/index.js

@@ -5,7 +5,7 @@ import {
   PodVersionConflictError,
   StoreCapabilityError,
   UnknownStoreKindError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/port/to/locator.ts

package/dist/transactions/index.js

@@ -3,16 +3,16 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-QH47SQLD.js";
+} from "../chunk-VFIWDPXZ.js";
 import {
   lazy
 } from "../chunk-5D2ALSM5.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/tx/dry-run.ts
-var loadGuardExecutor = lazy(() => import("../executor-G6G3YEWR.js"));
+var loadGuardExecutor = lazy(() => import("../executor-AFHQYRAU.js"));
 var SEP = " ";
 var keyOf = (op) => `${op.vaultName}${SEP}${op.collectionName}${SEP}${op.id}`;
 async function runDryRun(db, fn) {

package/dist/util/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-PY4KJPYU.js";
 import {
   FilenameSanitizationError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/kernel/util/sanitize-filename.ts

package/dist/vault-diff-FE5J35NJ.js

@@ -0,0 +1,9 @@
+import {
+  diffVault
+} from "./chunk-LFUID7OW.js";
+import "./chunk-SVLR4POP.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  diffVault
+};
+//# sourceMappingURL=vault-diff-FE5J35NJ.js.map

package/dist/vault-diff-FE5J35NJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/vault-head/index.js

@@ -6,19 +6,19 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "../chunk-CXPOG3ZY.js";
+} from "../chunk-2LPVI4PX.js";
 import {
   buildRecordEnvelope
-} from "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+} from "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import {
   encrypt
-} from "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
-import "../chunk-Z3BZXPRO.js";
+} from "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/with-commit/vault-head/head.ts

package/dist/{verify-M5LQH43C.js → verify-WYOFLSNA.js}

@@ -2,10 +2,10 @@ import {
   blindedEqual,
   evaluateKofN,
   openVdigPayload
-} from "./chunk-CKKN25P2.js";
+} from "./chunk-FOG7YEJP.js";
 import {
   dualReadSealedSlot
-} from "./chunk-7Q3RHOA5.js";
+} from "./chunk-KDJGJR7F.js";
 import {
   VDIG_ITERATIONS,
   normalizeForVerify,
@@ -14,11 +14,11 @@ import {
 import {
   base64ToBuffer,
   generateSalt
-} from "./chunk-ONPVHX2Y.js";
+} from "./chunk-W5LHQXZU.js";
 import {
   ClassifiedConfigError,
   ClassifiedVerifyError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/enclave/classify/verify.ts
@@ -137,4 +137,4 @@ export {
   verifyDigestField,
   verifyTextField
 };
-//# sourceMappingURL=verify-M5LQH43C.js.map
+//# sourceMappingURL=verify-WYOFLSNA.js.map

package/dist/via/blob/binding.d.ts

@@ -1,5 +1,5 @@
 /**
- * The blob `ViaBinding` (#629 Task 7) — wires the `blobFields` declaration
+ * The blob `NoydbVia` (#629 Task 7) — wires the `blobFields` declaration
  * into the kernel's generic Via port as a deliberately THIN binding:
  * declaration + posture + `describeFragment` + `erase` glue, and nothing
  * else. Blob content is fully out-of-band (`collection.blob(id)` →
@@ -18,7 +18,7 @@
  * EAGER — `port/with/blob-strategy.ts` calls {@link linkBlobVia} at module
  * load. `blobFields` policies are plain object literals (there is no
  * `blob.*()` declaration factory to hang a lazy link on), so the binder
- * must be installed before `compileViaBindings` ever sees one.
+ * must be installed before `compileVias` ever sees one.
  *
  * There is no `declare`-time validation: `blobFields` has never had a
  * construction-time refusal matrix (policies are consulted lazily by
@@ -31,7 +31,7 @@
  * `queryable: 'none'`); it does not participate in clause building or
  * evaluation.
  */
-import type { ViaBinding, ViaEraseReport } from '../../kernel/via/index.js';
+import type { NoydbVia, ViaEraseReport } from '../../kernel/via/index.js';
 import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js';
 /**
  * Config a blob collection's `blobFields` declaration resolves to — the
@@ -42,7 +42,7 @@ import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js
  * `retainedShared` become counts, each residue eTag becomes a tagged
  * `{kind: 'blob-residue', eTag}` entry.
  *
- * DELIBERATELY left unwired by `compileViaBindings` (#629 Task 10, resolved
+ * DELIBERATELY left unwired by `compileVias` (#629 Task 10, resolved
  * within parity-first — see task-10-report.md "blob purge" section):
  * `per-blob-cek.test.ts`/`forget.test.ts` prove blob-shred-on-forget is
  * gated SOLELY on the vault's `blobsStrategy` being configured, never on a
@@ -62,7 +62,7 @@ export interface BlobViaConfig {
 }
 /**
  * One field's blob knobs as they appear on `describeFragment()`'s payload
- * (#657 — the second real `ViaBinding.describeFragment` consumer after
+ * (#657 — the second real `NoydbVia.describeFragment` consumer after
  * `lookup`'s; see `with-shape/introspection/describe.ts`'s `buildDescription`).
  * Declarative scalars (`retainDays`/`external`/`public`/`backlink`) verbatim;
  * predicate knobs (`evictWhen`/`legalHold`/`retainUntil` — functions over the
@@ -82,5 +82,5 @@ export interface BlobDescribeFragmentEntry {
 export interface BlobDescribeFragment {
     readonly blobFields: Record<string, BlobDescribeFragmentEntry>;
 }
-export declare function blobBinding(cfg: BlobViaConfig): ViaBinding;
+export declare function blobVia(cfg: BlobViaConfig): NoydbVia;
 export declare function linkBlobVia(): void;

package/dist/via/classified/binding.d.ts

@@ -1,5 +1,5 @@
 /**
- * The classified `ViaBinding` (#629 Task 5, LIVE since Task 6) — wires
+ * The classified `NoydbVia` (#629 Task 5, LIVE since Task 6) — wires
  * classified-fields declaration/write-enforcement/at-rest sealing/erasure
  * into the kernel's generic Via port. Mirrors `via/money/binding.ts`'s
  * inline declaration-time validation and `via/i18n/binding.ts`'s
@@ -7,10 +7,10 @@
  * (`port/with/classified-strategy.ts` calls `linkClassifiedVia()` at module
  * load, not lazily from a `classified.*()` preset call): several fixtures
  * build a raw `ClassifiedFieldSpec` literal without ever calling a preset,
- * and the binder must be installed before `compileViaBindings` needs it
+ * and the binder must be installed before `compileVias` needs it
  * regardless.
  *
- * `compileViaBindings` (`kernel/collection-config.ts`) compiles this binding
+ * `compileVias` (`kernel/collection-config.ts`) compiles this binding
  * in whenever a collection declares `classifiedFields` — money then i18n
  * then classified, order pinned. `kernel/collection.ts`'s `_putInternal`
  * runs `enforceClassifiedWrite`'s effect via the pipeline's `enforceWrite`
@@ -18,13 +18,13 @@
  * replace the inline `sensitiveFields` seal path for any collection this
  * binding is compiled into.
  *
- * `declare` — `classifiedBinding(cfg)` runs `resolveClassifiedFields` +
+ * `declare` — `classifiedVia(cfg)` runs `resolveClassifiedFields` +
  * `guardClassifiedCompat` at CONSTRUCTION time (the same #553 pattern
- * `moneyBinding`'s `validateMoneyFieldPaths(moneyFields)` call uses) —
+ * `moneyVia`'s `validateMoneyFieldPaths(moneyFields)` call uses) —
  * mirrors today's "door 1" (`collection-config.ts`'s
  * `resolveCollectionConfig`). Both may throw `ClassifiedConfigError`.
  */
-import type { ViaBinding } from '../../kernel/via/index.js';
+import type { NoydbVia } from '../../kernel/via/index.js';
 import { type ClassifiedEntry } from './resolve.js';
 import { type ClassifiedGuardCtx } from './guards.js';
 /**
@@ -58,7 +58,7 @@ export interface ClassifiedViaConfig {
      * completeness (see that method's doc comment for the shreddable/
      * dekResidue/both-class semantics). `live` is `ViaEraseCtx.live`'s opaque
      * envelope, passed straight through. NOT `readonly` (#629 Task 10):
-     * `compileViaBindings` builds this cfg before the owning `Collection`'s
+     * `compileVias` builds this cfg before the owning `Collection`'s
      * `RecordCodec` exists, so `Collection`'s constructor mutates this field
      * in place once `this.codec` is available — the closure `eraseClassified`
      * reads is looked up at CALL time, not at binding-construction time, so
@@ -71,7 +71,7 @@ export interface ClassifiedViaConfig {
      * Vault-provided closure that purges every `_sealed_cek/<collection>/<id>/*`
      * host-delivery envelope for one record (mirrors `rotateRecordCek`'s own
      * prefix-delete) and returns the count purged. Deliberately left UNWIRED
-     * by `compileViaBindings` (#629 Task 10) — `forget-sealed-erasure.test.ts`
+     * by `compileVias` (#629 Task 10) — `forget-sealed-erasure.test.ts`
      * proves this purge is UNCONDITIONAL on `sealRecordToHost` usage alone,
      * independent of whether `classifiedFields` is declared (a bare
      * `sensitive: [...]` collection exercises it with no classified binding
@@ -79,5 +79,5 @@ export interface ClassifiedViaConfig {
      */
     readonly purgeSealedCekEnvelopes?: (id: string) => Promise<number>;
 }
-export declare function classifiedBinding(cfg: ClassifiedViaConfig): ViaBinding;
+export declare function classifiedVia(cfg: ClassifiedViaConfig): NoydbVia;
 export declare function linkClassifiedVia(): void;