@noy-db/hub 0.6.0 → 0.7.0-pre.1

package/dist/kernel/types.d.ts

@@ -60,14 +60,15 @@ import type { SecretPolicy, EchoSecretPolicy } from './validation.js';
 import type { CoverSchema } from '../with-party/directory/cover/types.js';
 import type { MaterializedViewStrategy } from '../with-formula/materialized-views/types.js';
 import type { OverlayedViewStrategy } from '../with-formula/overlay-views/types.js';
-import type { SealingKeyProvider, RecipientHint } from '../with-party/team/managed-secret.js';
-import type { ShamirRecoveryProvider } from '../with-party/team/shamir-recovery-provider.js';
+import type { NoydbSealer, RecipientHint } from '../with-party/team/managed-secret.js';
+import type { NoydbShamir } from '../with-party/team/noydb-shamir.js';
 import type { ObjectProjection } from '../with-shape/blobs/object-projection.js';
-import type { CoordinationProvider } from '../port/by/types.js';
+import type { FormatsStrategy } from '../port/with/formats-strategy.js';
+import type { NoydbMesh } from '../port/by/types.js';
 import type { ScriptWarning } from '../port/with/i18n-strategy.js';
 import type { ViaDescriptor } from './via/index.js';
 import type { EnclaveKey, EchoSecretParts } from './enclave/index.js';
-import type { DeviceSealProvider } from '../port/with/device-seal-strategy.js';
+import type { NoydbDeviceSeal } from '../port/with/device-seal-strategy.js';
 export type { EchoSecretParts };
 /** Format version for encrypted record envelopes. */
 export declare const NOYDB_FORMAT_VERSION: 1;
@@ -404,7 +405,7 @@ export declare class SealedHandle<V> implements Sealed<V> {
  * implement this — the §11.2 capability matrix lives in the type system.
  *
  * Per foundation §11.4. A function that requires recipient-target sealing
- * takes `RecipientSealer`, not `SealingKeyProvider` — the compiler rejects
+ * takes `RecipientSealer`, not `NoydbSealer` — the compiler rejects
  * passing a self-only provider at the spec site.
  */
 export interface RecipientSealer {
@@ -413,7 +414,7 @@ export interface RecipientSealer {
     publishRecipientHint(): Promise<RecipientHint>;
     /**
      * Seal plaintext for the recipient described by `hint`. Returns opaque
-     * bytes — same contract as `SealingKeyProvider.seal()`. The bundle
+     * bytes — same contract as `NoydbSealer.seal()`. The bundle
      * layer base64-encodes the bytes into `SealedAutoUnlockEntry.sealed`
      * without inspecting them.
      */
@@ -705,8 +706,20 @@ export declare function createStore<TOptions>(factory: (options: TOptions) => No
 /**
  * Interchange formats `@noy-db/as-*` packages can produce. `'*'` is a
  * wildcard granting every current + future plaintext format.
+ *
+ * OPEN, not closed. The literals below are the formats hub ships bindings
+ * for and exist so editors autocomplete them; `(string & {})` admits any
+ * other `NoydbFormat.id`, including one from a third-party package hub has
+ * never heard of. Closing this union would mean a third-party format could
+ * be *checked* by `assertCanExport` but never *granted* — forcing owners
+ * onto the `'*'` wildcard, which is strictly worse than a name hub does
+ * not recognise.
+ *
+ * The cost, stated: a typo in a grant (`'csvv'`) typechecks. It then fails
+ * closed at runtime, because the gate is an exact-match lookup — the safe
+ * direction for a security capability.
  */
-export type ExportFormat = 'xlsx' | 'csv' | 'json' | 'ndjson' | 'xml' | 'sql' | 'pdf' | 'blob' | 'zip' | '*';
+export type ExportFormat = 'xlsx' | 'csv' | 'json' | 'ndjson' | 'xml' | 'sql' | 'pdf' | 'blob' | 'zip' | '*' | (string & {});
 /**
  * Owner-granted export capability on a keyring.
  *
@@ -2761,13 +2774,13 @@ export interface NoydbOptions {
      * (`@noy-db/seal-macos-keychain`, `@noy-db/seal-wincred`,
      * `@noy-db/seal-libsecret`, `@noy-db/seal-aws-kms`, …).
      */
-    readonly sealingKey?: SealingKeyProvider;
+    readonly sealingKey?: NoydbSealer;
     /**
      * Device-local sealer for the echo reveal-blob. Echo mode only.
      * Absent ⇒ live keyrings enroll `reveal: 'portable'`; present ⇒
      * `sealed` (attacker-B resistance). Spec resolved question 4.
      */
-    readonly deviceSeal?: DeviceSealProvider;
+    readonly deviceSeal?: NoydbDeviceSeal;
     /**
      * Echo enrollment only: optional display hint for the masked echo,
      * threaded to the owner keyring's `KeyringEchoBlock.mask_hint` (surfaced
@@ -2781,7 +2794,7 @@ export interface NoydbOptions {
     readonly echoMaskHint?: string;
     /** Required to use `profile: 'shamir'` recovery. Pass
      *  `shamirRecoveryProvider()` from `@noy-db/on-shamir`. */
-    readonly shamirRecovery?: ShamirRecoveryProvider;
+    readonly shamirRecovery?: NoydbShamir;
     /** Enable encryption. Default: true. */
     readonly encrypt?: boolean;
     /**
@@ -2930,20 +2943,26 @@ export interface NoydbOptions {
     readonly plaintextTranslatorName?: string;
     /**
      * Drain-barrier coordination transport for the schema fence.
-     * When omitted, the kernel uses a {@link CoordinationProvider} backed by the
-     * primary store (`StoreCoordinationProvider`), reproducing today's
+     * When omitted, the kernel uses a {@link NoydbMesh} backed by the
+     * primary store (`StoreMesh`), reproducing today's
      * store-polling fence behavior byte-for-byte. `@noy-db/by-tabs` /
      * `@noy-db/by-peer` inject a real-time push transport here; an external
      * orchestrator (`@klum-db/lobby`) drives it through the `Noydb` handle.
      *
      * @internal
      */
-    readonly coordinationStrategy?: CoordinationProvider;
+    /**
+     * Enables `vault.export(format)` / `vault.import(format, input)` — the
+     * `as-*` format port. Opt-in: a vault that never exports ships none of it.
+     * `withFormats()` from `@noy-db/hub/as`.
+     */
+    readonly formatsStrategy?: FormatsStrategy;
+    readonly mesh?: NoydbMesh;
     /**
      * Pre-resolved factory for the `vault.user` per-principal user-envelope
      * API. `createNoydb()` always resolves this itself (dynamically
      * importing `with-party/directory/user-envelope/api.js`) before
-     * constructing `Noydb` — mirrors the {@link coordinationStrategy}
+     * constructing `Noydb` — mirrors the {@link mesh}
      * pre-resolve above. There is no supported way to override it; it exists
      * as an options-bag field only so `createNoydb()` can thread the
      * pre-resolved value into the constructor without a second parameter.
@@ -2956,7 +2975,7 @@ export interface NoydbOptions {
      * read/update/bootstrap + session-policy enforcer wiring).
      * `createNoydb()` always resolves this itself (dynamically importing
      * `with-party/policy/index.js`) before constructing `Noydb` — mirrors the
-     * {@link coordinationStrategy} / {@link userApiFactory} pre-resolves
+     * {@link mesh} / {@link userApiFactory} pre-resolves
      * above. There is no supported way to override it.
      *
      * @internal

package/dist/kernel/vault.d.ts

@@ -1,5 +1,6 @@
 import type { OpenCollectionOptions } from '../port/with/collection-options.js';
 import type { StrategyBag } from '../port/with/strategies.js';
+import type { NoydbFormat, ImportPlan, FormatExportOptions, FormatImportOptions } from '../port/with/formats-strategy.js';
 import type { NoydbStore, EncryptedEnvelope, HistoryConfig, ExportStreamOptions, ExportChunk, CollectionConflictResolver, CrossTierAccessEvent, Role, VaultUserApi, CollectionShape, SensitiveOf, IndexedOf, MoneyOf } from './types.js';
 import type { Noydb } from './noydb.js';
 import type { IssueDelegationOptions, DelegationToken } from '../with-party/team/delegation.js';
@@ -1164,9 +1165,9 @@ export declare class Vault {
      *   - The keyring must already carry a wrap for the target tier on
      *     at least one collection (or be `owner` / `admin`, who can
      *     auto-mint). Otherwise throws {@link TierNotGrantedError}.
-     *   - Per-collection capability gates (`canExportPlaintext`,
-     *     `canExportBundle`) are NOT bypassed — elevation is a tier
-     *     projection, not a privilege escalation path.
+     *   - The export gates (`assertCanExport('plaintext', fmt)` and
+     *     `assertCanExport('bundle')`) are NOT bypassed — elevation is a
+     *     tier projection, not a privilege escalation path.
      *   - Only one elevation can be active per vault at a time.
      *     Calling `elevate(...)` while another is live throws
      *     {@link AlreadyElevatedError}.
@@ -1498,6 +1499,14 @@ export declare class Vault {
      * }
      * ```
      */
+    /**
+     * Serialise this vault through an `as-*` format. The gate runs before a
+     * record is read and the format never receives a vault — see
+     * `docs/adr/0004-as-format-port.md` and `port/as/active.ts`.
+     */
+    export<Out extends string | Uint8Array>(format: NoydbFormat<Out>, options?: FormatExportOptions): Promise<Out>;
+    /** Plan an import from an `as-*` format. Nothing is written until `apply()`. */
+    import<Out extends string | Uint8Array>(format: NoydbFormat<Out>, input: Out, options?: FormatImportOptions): Promise<ImportPlan>;
     exportStream(opts?: ExportStreamOptions): AsyncIterableIterator<ExportChunk>;
     /**
      * Convenience wrapper that consumes `exportStream()` and serializes the

package/dist/kernel/via/compose.d.ts

@@ -47,7 +47,7 @@ export interface MergedViaFields {
 /**
  * Merge `viaFields` (the {@link via} composer) with the money/i18n sugar
  * keys into the effective maps every consumer reads — the kernel's
- * `compileViaBindings` (the `ViaPipeline` bindings) and `vault.ts`'s own
+ * `compileVias` (the `ViaPipeline` bindings) and `vault.ts`'s own
  * i18n/dict registries (put-time validation, dict-join/search resolution)
  * both call this so a field declared via `viaFields` behaves identically to
  * one declared under its feature's sugar key.
@@ -65,7 +65,7 @@ export declare function mergeViaFields(sources: ViaFieldSources): MergedViaField
  * `blobFields`) resolves silently by compile-order first-wins in `ViaPipeline`'s per-field
  * posture/clause lookup — undefined pipeline behavior for a config that is almost certainly a
  * mistake. `mergeViaFields` already guards sugar-vs-`viaFields` and `dictKeyFields`-vs-
- * `lookupFields` collisions (#623 Task 9); this runs one step later, in `compileViaBindings`
+ * `lookupFields` collisions (#623 Task 9); this runs one step later, in `compileVias`
  * (fresh construction) or {@link guardReconcileCollisions} (late-attach reconcile), because
  * those are the only seams that also see `classifiedFields`/`blobFields` — neither is part of
  * `ViaFieldSources`, so `mergeViaFields` never sees them.
@@ -127,7 +127,7 @@ export declare function guardCrossBindingFieldCollisions(fieldMaps: Readonly<Rec
  *    THIS call's incoming family map claims the SAME field for a DIFFERENT family (e.g. call-1
  *    `classifiedFields:['ssn']`, call-2 `moneyFields:{ssn}`) — undetectable by (a) alone since
  *    the collision spans two calls. Read via the LIVE collection's compiled bindings
- *    (`coll._via.bindings`): each `ViaBinding.covers(field)` (`via/index.ts`) plus its `brand` tells us
+ *    (`coll._via.bindings`): each `NoydbVia.covers(field)` (`via/index.ts`) plus its `brand` tells us
  *    which family already owns the field, mapped through the SAME {@link VIA_FIELD_MAP_FAMILY}
  *    the incoming side uses — no new collection.ts surface needed.
  *

package/dist/kernel/via/index.d.ts

@@ -85,15 +85,15 @@ export interface ViaEraseReport {
  * e.g. quantizeMoneyFields(record, moneyFields)). All hooks optional;
  * absent = passthrough. Query-participation hooks are SYNC (#553).
  */
-export interface ViaBinding {
+export interface NoydbVia {
     readonly brand: string;
     readonly posture: ViaPosture;
     /** Declared dependencies (field paths / cross-record specs). MANDATORY for any future
      *  derive-bearing binding — phase C validates well-formedness (strings, non-empty,
      *  reference declared fields) and graph-registers a derived edge for each covered
-     *  field at declare time, right after `compileViaBindings` builds the bindings
+     *  field at declare time, right after `compileVias` builds the bindings
      *  (unknown source field throws `ValidationError`). See
-     *  `kernel/collection-config.ts`'s `resolveViaBindingDepsEdges`. */
+     *  `kernel/collection-config.ts`'s `resolveViaDepsEdges`. */
     readonly deps?: readonly string[];
     /** Collection-name prefixes this binding's `reservedEnvelopes` capability may address (e.g. `_dict_`). */
     readonly reservedPrefixes?: readonly string[];
@@ -199,7 +199,7 @@ export interface ViaBinding {
     describeFragment?(): Record<string, unknown>;
 }
 /** Binder: constructs a binding from a collection's declared config. Installed by the feature's declaration factory. */
-export type ViaBinder = (config: unknown) => ViaBinding;
+export type ViaBinder = (config: unknown) => NoydbVia;
 /** @internal — called (idempotently, first-wins) by a feature's declaration factory, e.g. money(). */
 export declare function installViaBinder(brand: string, binder: ViaBinder): void;
 /** @internal — registry presence check. Used by tests (mirrors isMoneyEngineInstalled) and by vault's i18n validator delegators as a no-i18n-ever-declared fast path. */

package/dist/kernel/via/pipeline.d.ts

@@ -1,4 +1,4 @@
-import type { ViaBinding, ViaPosture, ViaWriteCtx, ViaReadCtx, ViaCryptoCtx, SealedSlotRef, ViaEraseCtx, ViaEraseReport } from './index.js';
+import type { NoydbVia, ViaPosture, ViaWriteCtx, ViaReadCtx, ViaCryptoCtx, SealedSlotRef, ViaEraseCtx, ViaEraseReport } from './index.js';
 /** Opaque per-clause query payload carried on FieldClause (replaces the money-only slot). */
 export interface ViaClause {
     readonly brand: string;
@@ -23,7 +23,7 @@ export interface ViaTaintOverlay {
     readonly defaultPosture?: ViaPosture;
 }
 export declare class ViaPipeline {
-    readonly bindings: readonly ViaBinding[];
+    readonly bindings: readonly NoydbVia[];
     readonly taint?: ViaTaintOverlay | undefined;
     /**
      * Present-phase-ONLY order (#665, corrected under #665 review) — a stable
@@ -33,7 +33,7 @@ export declare class ViaPipeline {
      * everything else (existing relative order). `present()` folds over this
      * instead of `bindings` so a `mode: 'virtual'` computed field's value
      * exists before i18n/lookup's dressing `present()` hooks run on it
-     * (today's `compileViaBindings` order is money→i18n→lookup→classified→
+     * (today's `compileVias` order is money→i18n→lookup→classified→
      * blob→computed, `collection-config.ts:554`, so dressing unconditionally
      * ran BEFORE the value it dresses existed). This reorder is binding-level,
      * not conditioned on any particular field composition — it applies to
@@ -72,7 +72,7 @@ export declare class ViaPipeline {
      * Money-dressing a virtual computed field's OWN output (the composed
      * `computed(virtual) + money` case) is NOT resolved by this partition
      * alone — #669 resolves it with a separate mid-fold hook instead:
-     * `ViaBinding.presentLate` runs after every binding's `present()` in this
+     * `NoydbVia.presentLate` runs after every binding's `present()` in this
      * money+computed segment, before the "everything else" segment below, so
      * money can quantize/reinterpret a virtual field's fresh MAJOR-UNITS
      * output as if it were a stored value, without perturbing this ordering
@@ -81,7 +81,7 @@ export declare class ViaPipeline {
      */
     private readonly _presentOrder;
     /** #669 — index into `_presentOrder` where the money+computed segment ends and the
-     *  "everything else" segment begins (`moneyBindings.length + computedBindings.length`);
+     *  "everything else" segment begins (`moneyVias.length + computedVias.length`);
      *  `present()` runs every binding's `presentLate` at exactly this boundary. */
     private readonly _presentLateBoundary;
     private constructor();
@@ -89,7 +89,7 @@ export declare class ViaPipeline {
      *  `this.via === undefined` (#553: keeps an all-plain collection sync). A
      *  `'*'`-defaulted output collection (#642) counts as "something to enforce"
      *  even with zero field-specific postures and zero bindings. */
-    static build(bindings: readonly ViaBinding[], taint?: ViaTaintOverlay): ViaPipeline | undefined;
+    static build(bindings: readonly NoydbVia[], taint?: ViaTaintOverlay): ViaPipeline | undefined;
     /** Refuse a write before crypto runs: awaits each binding's `enforceWrite` in order — first throw wins. */
     enforceWrite(record: Record<string, unknown>, ctx: ViaWriteCtx): Promise<void>;
     ingest(record: Record<string, unknown>): Record<string, unknown>;

package/dist/kernel/via/reconcile.d.ts

@@ -17,7 +17,7 @@
  *     as before;
  *  4. wires i18n/dictKey late-attach via {@link reconcileI18nFields}/{@link reconcileDictKeyFields}
  *     — rebuilding the pipeline through {@link Collection._setVia} (#666's writer seam), mirroring
- *     the fresh-construction wiring (`collection-config.ts#compileViaBindings`'s i18n slot +
+ *     the fresh-construction wiring (`collection-config.ts#compileVias`'s i18n slot +
  *     `vault.ts`'s registry population) without duplicating it in a second place;
  *  5. (#664 Part 2b) wires lookup()/enumOf()/dict() late-attach via {@link reconcileLookupFields}
  *     — tier-scoped: enum/static tiers are a clean, self-contained attach; the reserved (dict)
@@ -104,7 +104,7 @@ export interface ViaReconcileVaultCtx {
  * that binding came from fresh construction or an earlier reconcile call. `dictKeyFields` is an
  * optional SECOND family arriving in the SAME `vault.collection()` call (`mergeViaFields` already
  * combined them for this one call) — passed through so ONE binding rebuild covers both, exactly
- * like `compileViaBindings` builds ONE 'i18n' binding from both maps at fresh construction.
+ * like `compileVias` builds ONE 'i18n' binding from both maps at fresh construction.
  */
 export declare function reconcileI18nFields(coll: ReconcilableCollection, vaultCtx: ViaReconcileVaultCtx, name: string, i18nFields: Record<string, I18nTextDescriptor> | undefined, dictKeyFields?: Record<string, DictKeyDescriptor | StaticDictDescriptor>): void;
 /**

package/dist/kernel/via/taint-binding.d.ts

@@ -1,4 +1,4 @@
-import type { ViaBinding, ViaPosture } from './index.js';
+import type { NoydbVia, ViaPosture } from './index.js';
 /**
  * Narrow the graph's raw per-field effective postures (`ViaGraph.
  * taintedPostures`) down to the enforcement-facing overlay `ViaPipeline.
@@ -44,7 +44,7 @@ export declare function buildTaintOverlay(rawPostures: ReadonlyMap<string, ViaPo
  * computed fields (never sealed — nothing to encodeAtRest/decodeAtRest;
  * `via/graph-wiring.ts#applyTaintOverlay` computes this set as
  * `graph.virtualFields(name) ∩ { field : postures.get(field).exportable ===
- * false }`). This binding is appended AFTER whatever `compileViaBindings`
+ * false }`). This binding is appended AFTER whatever `compileVias`
  * built (including the `computed` binding), so its `present` hook — when
  * `presentRedactFields` is non-empty — runs LAST and overwrites a virtual
  * field's freshly-computed value with `EXPORT_REDACTION_MARKER`,
@@ -63,4 +63,4 @@ export declare function buildTaintOverlay(rawPostures: ReadonlyMap<string, ViaPo
  * of the fixed `sealFields` list (moot in this mode — sealing everything is
  * already a superset of any field-specific taint on the same collection).
  */
-export declare function taintBinding(sealFields: ReadonlySet<string>, presentRedactFields?: ReadonlySet<string>, sealAllFields?: boolean): ViaBinding;
+export declare function taintBinding(sealFields: ReadonlySet<string>, presentRedactFields?: ReadonlySet<string>, sealAllFields?: boolean): NoydbVia;

package/dist/{ledger-MQIIOTZB.js → ledger-T5K4P2D7.js}

@@ -3,7 +3,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-JXHNUYQO.js";
+} from "./chunk-IESNYJXZ.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -15,16 +15,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-BZ3WMOYX.js";
-import "./chunk-CXPOG3ZY.js";
-import "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-RC4BROYR.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
-import "./chunk-Z3BZXPRO.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LEDGER_COLLECTION,
@@ -39,4 +39,4 @@ export {
   parseIndex,
   sha256Hex
 };
-//# sourceMappingURL=ledger-MQIIOTZB.js.map
+//# sourceMappingURL=ledger-T5K4P2D7.js.map

package/dist/liberate-VEOZRESE.js

@@ -0,0 +1,25 @@
+import {
+  liberateVault
+} from "./chunk-KN4W2OQ4.js";
+import "./chunk-H7HP56F6.js";
+import "./chunk-DKWPJOYH.js";
+import "./chunk-Z2WK53N6.js";
+import "./chunk-6FOGTKBY.js";
+import "./chunk-LF6DMX4C.js";
+import "./chunk-5W7YXFV5.js";
+import "./chunk-DFAUMLD7.js";
+import "./chunk-POS53FG6.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  liberateVault
+};
+//# sourceMappingURL=liberate-VEOZRESE.js.map

package/dist/{link-set-5PJBBR63.js → link-set-76JZ6YB4.js}

@@ -1,23 +1,23 @@
 import {
   LinkEndpointError,
   LinkSet
-} from "./chunk-3OE2QNSM.js";
+} from "./chunk-5AFMP532.js";
 import {
   LINK_COLLECTION_PREFIX,
   LinkIntegrityError,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-PFWE7FJG.js";
-import "./chunk-CXPOG3ZY.js";
-import "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-WLLUM35R.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
-import "./chunk-Z3BZXPRO.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LINK_COLLECTION_PREFIX,
@@ -28,4 +28,4 @@ export {
   linkCollectionName,
   linkRowKey
 };
-//# sourceMappingURL=link-set-5PJBBR63.js.map
+//# sourceMappingURL=link-set-76JZ6YB4.js.map

package/dist/{managed-secret-ETDG6AAE.js → managed-secret-6YC32VXG.js}

@@ -1,6 +1,6 @@
 import {
   MemoryRecipientSealer,
-  MemorySealingKeyProvider,
+  MemorySealer,
   SEALED_SECRET_RECORD_ID,
   aesGcmOpen,
   loadSealedSecret,
@@ -9,20 +9,20 @@ import {
   resolveManagedSecret,
   saveSealedSecret,
   sealRsaOaepTlv
-} from "./chunk-S2I5MYSA.js";
-import "./chunk-CXPOG3ZY.js";
-import "./chunk-FX3UIDCS.js";
-import "./chunk-CKKN25P2.js";
-import "./chunk-7Q3RHOA5.js";
-import "./chunk-4K6BIMLF.js";
+} from "./chunk-Z2WK53N6.js";
+import "./chunk-2LPVI4PX.js";
+import "./chunk-N4CNVSUF.js";
+import "./chunk-FOG7YEJP.js";
+import "./chunk-KDJGJR7F.js";
+import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-ONPVHX2Y.js";
-import "./chunk-UJ4Z67UQ.js";
-import "./chunk-Z3BZXPRO.js";
+import "./chunk-W5LHQXZU.js";
+import "./chunk-RK7N4OQ5.js";
+import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MemoryRecipientSealer,
-  MemorySealingKeyProvider,
+  MemorySealer,
   SEALED_SECRET_RECORD_ID,
   aesGcmOpen,
   loadSealedSecret,
@@ -32,4 +32,4 @@ export {
   saveSealedSecret,
   sealRsaOaepTlv
 };
-//# sourceMappingURL=managed-secret-ETDG6AAE.js.map
+//# sourceMappingURL=managed-secret-6YC32VXG.js.map

package/dist/materialized-views/index.js

@@ -1,48 +1,48 @@
 import {
   withMaterializedView
-} from "../chunk-5OT4G5N5.js";
+} from "../chunk-PUJTKLPL.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-64WHKBMP.js";
-import {
-  clearMVStale,
-  isMVStale,
-  markMVStale,
-  resolveStaleMVOnRead
-} from "../chunk-EQOTJL76.js";
+} from "../chunk-QGJ4XIA7.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-GANFIM2M.js";
-import "../chunk-GKTW3KLV.js";
-import "../chunk-K6CPIK3R.js";
+} from "../chunk-4ZPE6SKS.js";
+import {
+  clearMVStale,
+  isMVStale,
+  markMVStale,
+  resolveStaleMVOnRead
+} from "../chunk-PGFKIOR3.js";
+import "../chunk-TOV6VMHF.js";
+import "../chunk-VTG7327U.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-EV2TDHQZ.js";
-import "../chunk-2CBFYXJX.js";
+import "../chunk-XSN63FUS.js";
+import "../chunk-4G25SDQL.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-ATL3ZVXT.js";
 import "../chunk-NSITFOCJ.js";
-import "../chunk-FNYCT27B.js";
-import "../chunk-XPEPMK4Y.js";
-import "../chunk-C3XWJCG7.js";
-import "../chunk-BZ3WMOYX.js";
-import "../chunk-CXPOG3ZY.js";
-import "../chunk-FX3UIDCS.js";
-import "../chunk-CKKN25P2.js";
-import "../chunk-7Q3RHOA5.js";
-import "../chunk-4K6BIMLF.js";
+import "../chunk-57JTHWLQ.js";
+import "../chunk-X67FCULK.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-RC4BROYR.js";
+import "../chunk-2LPVI4PX.js";
+import "../chunk-N4CNVSUF.js";
+import "../chunk-FOG7YEJP.js";
+import "../chunk-KDJGJR7F.js";
+import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-ONPVHX2Y.js";
-import "../chunk-UJ4Z67UQ.js";
+import "../chunk-W5LHQXZU.js";
+import "../chunk-RK7N4OQ5.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-Z3BZXPRO.js";
+} from "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,

package/dist/{migrate-cek-V3VDRV24.js → migrate-cek-LBRKYUZZ.js}

@@ -1,6 +1,6 @@
 import {
   SatelliteConfigError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/migrate-cek.ts
@@ -16,4 +16,4 @@ async function migrateSatelliteCek(name, coll) {
 export {
   migrateSatelliteCek
 };
-//# sourceMappingURL=migrate-cek-V3VDRV24.js.map
+//# sourceMappingURL=migrate-cek-LBRKYUZZ.js.map

package/dist/money/index.js

@@ -4,7 +4,7 @@ import {
   isMoneyString,
   moneyNumber,
   mulRate
-} from "../chunk-TKBB62DN.js";
+} from "../chunk-Z2PWOSCJ.js";
 import {
   MoneyCurrencyError,
   MoneyPrecisionError,
@@ -13,10 +13,10 @@ import {
   isMoneyDescriptor,
   money,
   scaleForCurrency
-} from "../chunk-GKTW3KLV.js";
+} from "../chunk-TOV6VMHF.js";
 import "../chunk-NSITFOCJ.js";
-import "../chunk-C3XWJCG7.js";
-import "../chunk-Z3BZXPRO.js";
+import "../chunk-XDVVBETV.js";
+import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MoneyCurrencyError,