@noy-db/hub 0.6.0 → 0.7.0-pre.1

package/dist/{chunk-JYPRZWCZ.js → chunk-3SMSERQU.js}

@@ -1,84 +1,86 @@
+import {
+  resolveStaleOnRead
+} from "./chunk-VAG47QHV.js";
+import {
+  isManifestReservedCollection
+} from "./chunk-EPFF7LOX.js";
 import {
   LinkIntegrityError,
   declareLink,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-PFWE7FJG.js";
+} from "./chunk-WLLUM35R.js";
 import {
   hashFields,
   validateSatelliteDeclaration
-} from "./chunk-QVXZFJBU.js";
+} from "./chunk-JVLSU7S2.js";
 import {
-  resolveStaleOnRead
-} from "./chunk-B4CRUZPR.js";
-import {
-  isManifestReservedCollection
-} from "./chunk-EPFF7LOX.js";
+  loadFence
+} from "./chunk-Y6GZ2P4M.js";
 import {
   VectorSet,
   buildPersistedIndexCallbacks,
   encodeVecId,
   syncTierSearch
-} from "./chunk-M7WBE3OR.js";
+} from "./chunk-L6GTLZRK.js";
 import {
   isBaseLive,
   liveBaseIdSet
 } from "./chunk-GYGLAVCX.js";
-import {
-  loadFence
-} from "./chunk-DNKVKO7K.js";
-import {
-  fallbackDerivationName,
-  jsonSchemaToFields
-} from "./chunk-KHKKD62N.js";
-import {
-  derivePersistedSchema,
-  isZod4Schema
-} from "./chunk-6NR36UNB.js";
 import {
   SchemaUpdateGate
 } from "./chunk-6LJY7X5A.js";
 import {
   NO_ATTESTATION
-} from "./chunk-MPKP6L5E.js";
+} from "./chunk-E6YA6UAP.js";
 import {
   NO_CLASSIFIED,
   guardClassifiedCompat,
   resolveClassifiedFields
-} from "./chunk-AJGGBXWA.js";
+} from "./chunk-GK4DRVUD.js";
 import {
   NO_TIERS,
   classifySealedShred,
   syncDerivedOutputs
-} from "./chunk-ZIMQDXTQ.js";
+} from "./chunk-WK5FSW7T.js";
 import {
   NO_PORTABILITY
-} from "./chunk-OCJ3JA4O.js";
+} from "./chunk-J4MN6XIU.js";
 import {
-  NO_CARGO,
-  runDrainBarrier
-} from "./chunk-LC6NE4IQ.js";
+  NO_CARGO
+} from "./chunk-XJ3FEKEY.js";
 import {
   saveSealedSecret
-} from "./chunk-S2I5MYSA.js";
+} from "./chunk-Z2WK53N6.js";
+import {
+  runDrainBarrier
+} from "./chunk-CBRS2NEK.js";
+import {
+  fallbackDerivationName,
+  jsonSchemaToFields
+} from "./chunk-KHKKD62N.js";
+import {
+  derivePersistedSchema,
+  isZod4Schema
+} from "./chunk-P6ASQOZR.js";
 import {
   loadPersistedSchema
-} from "./chunk-KM6ZXG7U.js";
+} from "./chunk-YXA2TCTZ.js";
 import {
   NO_SEQUENCE,
   SEQUENCE_COLLECTION,
   compileSequenceFormat,
   resolveSequenceKey
-} from "./chunk-W3HAIN6U.js";
+} from "./chunk-CN6B5PEN.js";
 import {
   CustodyApi,
   NO_CUSTODY
-} from "./chunk-HWI7GHJZ.js";
+} from "./chunk-J4UJ5FRV.js";
 import {
   DEFAULT_POSTURE,
   ViaGraph
-} from "./chunk-65JXA63J.js";
+} from "./chunk-5263OEM3.js";
 import {
   buildLookupAltIndex,
   buildLookupSnapshotRows,
@@ -102,10 +104,10 @@ import {
   selfWriteFieldEqual,
   touchFor,
   updateReferencingRecords
-} from "./chunk-K6CPIK3R.js";
+} from "./chunk-VTG7327U.js";
 import {
   OverlayedCollection
-} from "./chunk-HOPNIR5R.js";
+} from "./chunk-3QARDAYW.js";
 import {
   INDEXED_STORE_POLICY,
   NO_SYNC
@@ -120,7 +122,7 @@ import {
   resolvePeriodKey,
   resolveReopenState,
   samePartition
-} from "./chunk-5ATC6UT4.js";
+} from "./chunk-PCQDY6QN.js";
 import {
   PERIODS_COLLECTION,
   PERIOD_ARCHIVES_COLLECTION,
@@ -128,7 +130,7 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "./chunk-5O5ZSW7N.js";
+} from "./chunk-Z7ZXZL6Y.js";
 import {
   NO_SHADOW
 } from "./chunk-SMY5X46Z.js";
@@ -138,7 +140,7 @@ import {
 import {
   TxContext,
   bestEffortRevert
-} from "./chunk-QH47SQLD.js";
+} from "./chunk-VFIWDPXZ.js";
 import {
   lazy
 } from "./chunk-5D2ALSM5.js";
@@ -146,26 +148,26 @@ import {
   InvertedIndex,
   MemoryIndexStore,
   NO_SEARCH
-} from "./chunk-7OBIBPCV.js";
+} from "./chunk-S35S77YU.js";
 import {
   NO_SEALED_RECORD
-} from "./chunk-323MN67Z.js";
+} from "./chunk-UCUALOSM.js";
 import {
   Query,
   ScanBuilder
-} from "./chunk-EHW7NLGD.js";
+} from "./chunk-S2VG3ABP.js";
 import {
   EXPORT_AUDIT_COLLECTION,
   NO_BLOBS,
   createExportBlobsHandle,
   runCompaction
-} from "./chunk-LIR2DJWP.js";
+} from "./chunk-F23WQK3G.js";
 import {
   LazyQuery,
   NO_INDEXING,
   decodeIdxId,
   encodeIdxId
-} from "./chunk-S7PM7Z4K.js";
+} from "./chunk-F7ZFRPGQ.js";
 import {
   normalizeIndexDefs
 } from "./chunk-I3ISCYT7.js";
@@ -188,7 +190,7 @@ import {
 } from "./chunk-PVEWA2DU.js";
 import {
   dictCollectionName
-} from "./chunk-FNYCT27B.js";
+} from "./chunk-57JTHWLQ.js";
 import {
   NO_I18N,
   getAtPath,
@@ -196,11 +198,11 @@ import {
   isDictKeyDescriptor,
   isI18nTextDescriptor,
   isStaticDictDescriptor
-} from "./chunk-XPEPMK4Y.js";
+} from "./chunk-X67FCULK.js";
 import {
   isViaInstalled,
   viaBinder
-} from "./chunk-C3XWJCG7.js";
+} from "./chunk-XDVVBETV.js";
 import {
   NO_TEAM,
   describeAllUsersAuth,
@@ -223,7 +225,7 @@ import {
   saveShamirRecoveryEntries,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "./chunk-YTUFV7U7.js";
+} from "./chunk-H4M7ADXY.js";
 import {
   assertKeyringOpenAllowed,
   buildRecipientKeyringFile,
@@ -238,15 +240,15 @@ import {
   listUsers,
   loadKeyring,
   updateKeyringIdentity
-} from "./chunk-J6I5VR6P.js";
+} from "./chunk-5W7YXFV5.js";
 import {
   persistDirectoryConfig,
   readDirectoryConfig
-} from "./chunk-ZJUZOJVW.js";
+} from "./chunk-DFAUMLD7.js";
 import {
   NO_BROKER,
   buildCredentialBrokerHandle
-} from "./chunk-YCGLAANM.js";
+} from "./chunk-4A4TYISP.js";
 import {
   NO_SESSION
 } from "./chunk-VKQCVU2Z.js";
@@ -255,16 +257,16 @@ import {
 } from "./chunk-4AOERLTV.js";
 import {
   NO_HISTORY
-} from "./chunk-7ZGPQOFV.js";
+} from "./chunk-6EW2UCVF.js";
 import {
   sha256Hex
-} from "./chunk-BZ3WMOYX.js";
+} from "./chunk-RC4BROYR.js";
 import {
   assertCutoverTierSafe,
   assertTierWritable,
   dekKey,
   liveRecordIsElevated
-} from "./chunk-D2YFQ7XG.js";
+} from "./chunk-POS53FG6.js";
 import {
   NO_VAULT_HEAD
 } from "./chunk-HK67PX4J.js";
@@ -276,7 +278,7 @@ import {
   readDottedPath,
   rebuildSubjectIndex,
   removeSubjectRef
-} from "./chunk-HSJBJIB2.js";
+} from "./chunk-467SKJ65.js";
 import {
   RecordCodec,
   SEALED_CEK_NS,
@@ -292,20 +294,20 @@ import {
   rewrapBodyToDek,
   validateSchemaInput,
   verifyRecordIdentity
-} from "./chunk-CXPOG3ZY.js";
+} from "./chunk-2LPVI4PX.js";
 import {
   buildDeleteMarker,
   buildRecordEnvelope,
   buildTombstone,
   isDeleteMarker,
   isTombstone
-} from "./chunk-FX3UIDCS.js";
+} from "./chunk-N4CNVSUF.js";
 import {
   encrypt
-} from "./chunk-ONPVHX2Y.js";
+} from "./chunk-W5LHQXZU.js";
 import {
   SealedHandle
-} from "./chunk-UJ4Z67UQ.js";
+} from "./chunk-RK7N4OQ5.js";
 import {
   AlreadyElevatedError,
   AttestationError,
@@ -348,7 +350,7 @@ import {
   UnsupportedTierCompositionError,
   ValidationError,
   isConflictError
-} from "./chunk-Z3BZXPRO.js";
+} from "./chunk-JBIV4FLR.js";
 
 // src/kernel/merge-authority.ts
 function buildMergeAuthority(keyring) {
@@ -379,6 +381,25 @@ function buildMergeAuthority(keyring) {
   };
 }
 
+// src/port/with/formats-strategy.ts
+var FormatsNotEnabledError = class extends Error {
+  constructor(op) {
+    super(
+      `vault.${op}() requires the formats service. Import { withFormats } from "@noy-db/hub/as" and pass formatsStrategy: withFormats() to createNoydb().`
+    );
+    this.name = "FormatsNotEnabledError";
+  }
+};
+var NO_FORMATS = {
+  enabled: false,
+  exportWith() {
+    throw new FormatsNotEnabledError("export");
+  },
+  importWith() {
+    throw new FormatsNotEnabledError("import");
+  }
+};
+
 // src/with-commit/tx/strategy.ts
 var NOT_ENABLED = new Error(
   'Multi-record transactions require the tx strategy. Import `{ withTransactions }` from "@noy-db/hub/transactions" and pass it to `createNoydb({ transactionsStrategy: withTransactions() })`.'
@@ -402,6 +423,7 @@ var NO_ARCHIVE = {
 
 // src/port/with/strategies.ts
 var STRATEGY_DEFAULTS = {
+  formats: NO_FORMATS,
   reduce: NO_REDUCE,
   archive: NO_ARCHIVE,
   attestation: NO_ATTESTATION,
@@ -463,7 +485,7 @@ function validateSecretModeOptions(options) {
     }
     if (!options.sealingKey) {
       throw new ValidationError(
-        '`secretMode: "managed"` requires `sealingKey: SealingKeyProvider` (see @noy-db/seal-macos-keychain / @noy-db/seal-aws-kms / etc.).'
+        '`secretMode: "managed"` requires `sealingKey: NoydbSealer` (see @noy-db/seal-macos-keychain / @noy-db/seal-aws-kms / etc.).'
       );
     }
   }
@@ -508,7 +530,7 @@ function validateSecretModeOptions(options) {
 }
 async function resolveEffectiveSecret(options, store, vault) {
   if (options.secretMode === "managed") {
-    const { resolveManagedSecret } = await import("./managed-secret-ETDG6AAE.js");
+    const { resolveManagedSecret } = await import("./managed-secret-6YC32VXG.js");
     return resolveManagedSecret(store, vault, options.sealingKey);
   }
   return options.secret;
@@ -525,9 +547,9 @@ function ownerKeyringOptions(options, secret) {
 }
 
 // src/port/by/default-provider.ts
-async function createDefaultCoordinationProvider(store) {
-  const { StoreCoordinationProvider } = await import("./store-coordination-provider-R27VRD6K.js");
-  return new StoreCoordinationProvider(store);
+async function createDefaultMesh(store) {
+  const { StoreMesh } = await import("./store-coordination-provider-6FM26VQM.js");
+  return new StoreMesh(store);
 }
 
 // src/port/with/collection-registries.ts
@@ -586,11 +608,11 @@ var ViaPipeline = class _ViaPipeline {
   constructor(bindings, taint) {
     this.bindings = bindings;
     this.taint = taint;
-    const moneyBindings = bindings.filter((b) => b.brand === "money");
-    const computedBindings = bindings.filter((b) => b.brand === "computed");
+    const moneyVias = bindings.filter((b) => b.brand === "money");
+    const computedVias = bindings.filter((b) => b.brand === "computed");
     const restBindings = bindings.filter((b) => b.brand !== "money" && b.brand !== "computed");
-    this._presentOrder = [...moneyBindings, ...computedBindings, ...restBindings];
-    this._presentLateBoundary = moneyBindings.length + computedBindings.length;
+    this._presentOrder = [...moneyVias, ...computedVias, ...restBindings];
+    this._presentLateBoundary = moneyVias.length + computedVias.length;
   }
   bindings;
   taint;
@@ -602,7 +624,7 @@ var ViaPipeline = class _ViaPipeline {
    * everything else (existing relative order). `present()` folds over this
    * instead of `bindings` so a `mode: 'virtual'` computed field's value
    * exists before i18n/lookup's dressing `present()` hooks run on it
-   * (today's `compileViaBindings` order is money→i18n→lookup→classified→
+   * (today's `compileVias` order is money→i18n→lookup→classified→
    * blob→computed, `collection-config.ts:554`, so dressing unconditionally
    * ran BEFORE the value it dresses existed). This reorder is binding-level,
    * not conditioned on any particular field composition — it applies to
@@ -641,7 +663,7 @@ var ViaPipeline = class _ViaPipeline {
    * Money-dressing a virtual computed field's OWN output (the composed
    * `computed(virtual) + money` case) is NOT resolved by this partition
    * alone — #669 resolves it with a separate mid-fold hook instead:
-   * `ViaBinding.presentLate` runs after every binding's `present()` in this
+   * `NoydbVia.presentLate` runs after every binding's `present()` in this
    * money+computed segment, before the "everything else" segment below, so
    * money can quantize/reinterpret a virtual field's fresh MAJOR-UNITS
    * output as if it were a stored value, without perturbing this ordering
@@ -650,7 +672,7 @@ var ViaPipeline = class _ViaPipeline {
    */
   _presentOrder;
   /** #669 — index into `_presentOrder` where the money+computed segment ends and the
-   *  "everything else" segment begins (`moneyBindings.length + computedBindings.length`);
+   *  "everything else" segment begins (`moneyVias.length + computedVias.length`);
    *  `present()` runs every binding's `presentLate` at exactly this boundary. */
   _presentLateBoundary;
   /** undefined when there is nothing to enforce — the zero-via fast path is
@@ -2072,7 +2094,7 @@ var VIA_FIELD_MAP_FAMILY = {
   blobFields: "blob",
   computed: "computed"
 };
-function guardCrossBindingFieldCollisions(fieldMaps, callerPrefix = "compileViaBindings()") {
+function guardCrossBindingFieldCollisions(fieldMaps, callerPrefix = "compileVias()") {
   const claimantsByField = /* @__PURE__ */ new Map();
   for (const [sourceKey, map] of Object.entries(fieldMaps)) {
     for (const field of Object.keys(map ?? {})) {
@@ -2126,7 +2148,7 @@ function computedEntryParts(entry) {
 function unifyComputedFields(opts, viaComputedFields) {
   return { ...opts.computed ?? {}, ...viaComputedFields ?? {} };
 }
-function compileViaBindings(opts, classifiedGuardCtx, eraseCfgOut) {
+function compileVias(opts, classifiedGuardCtx, eraseCfgOut) {
   const { moneyFields, i18nFields, dictKeyFields, computedFields, lookupFields } = mergeViaFields(opts);
   const allComputedFields = unifyComputedFields(opts, computedFields);
   guardCrossBindingFieldCollisions({
@@ -2249,7 +2271,7 @@ function resolveComputedEdges(collectionName, computed, hasClassifiedFields, kno
   }
   return edges;
 }
-function resolveViaBindingDepsEdges(collectionName, bindings, knownFields) {
+function resolveViaDepsEdges(collectionName, bindings, knownFields) {
   const edges = [];
   for (const binding of bindings) {
     if (!binding.deps || binding.deps.length === 0) continue;
@@ -2369,7 +2391,7 @@ function resolveCollectionConfig(opts) {
   const perRecordCek = opts.perRecordKeys === true;
   const cekCache = perRecordCek ? new Lru({ maxRecords: 4096 }) : null;
   const viaEraseCfgOut = {};
-  const via2 = ViaPipeline.build(compileViaBindings(opts, classifiedGuardCtx, viaEraseCfgOut));
+  const via2 = ViaPipeline.build(compileVias(opts, classifiedGuardCtx, viaEraseCfgOut));
   const knownFields = collectKnownFieldNames({
     moneyFields: effectiveViaFields.moneyFields,
     i18nFields: effectiveViaFields.i18nFields,
@@ -2379,7 +2401,7 @@ function resolveCollectionConfig(opts) {
     lookupFields: effectiveViaFields.lookupFields
   });
   const computedEdges = resolveComputedEdges(opts.name, allComputed, resolvedClassified !== void 0, knownFields);
-  const viaDepsEdges = resolveViaBindingDepsEdges(opts.name, via2?.bindings ?? [], knownFields);
+  const viaDepsEdges = resolveViaDepsEdges(opts.name, via2?.bindings ?? [], knownFields);
   return {
     adapter: opts.adapter,
     vault: opts.vault,
@@ -2460,7 +2482,7 @@ function resolveCollectionConfig(opts) {
 }
 
 // src/with-formula/computed/lazy.ts
-var loadComputed = lazy(() => import("./computed-VG2PCM4L.js"));
+var loadComputed = lazy(() => import("./computed-ASBNTLOK.js"));
 async function loadEvalComputedFields() {
   return (await loadComputed()).evalComputedFields;
 }
@@ -3243,7 +3265,7 @@ var Collection = class {
     }
     await this.onAccess?.("find", "*");
     if (hits.length === 0) return [];
-    const { verifyDigestField } = await import("./verify-M5LQH43C.js");
+    const { verifyDigestField } = await import("./verify-WYOFLSNA.js");
     const policy = {
       normalize: spec.verifyNormalize ?? "password",
       notLastN: spec.notLastN ?? 0,
@@ -3331,7 +3353,7 @@ var Collection = class {
    * `openVault`, before the user's `collection(name, { moneyFields })`
    * declaration; this reconciles that ordering. First-wins. Not public.
    *
-   * PREPENDS money rather than appending: {@link compileViaBindings} always
+   * PREPENDS money rather than appending: {@link compileVias} always
    * compiles money before i18n (money-first pipeline order — see its
    * docstring), and by the time this reconcile runs an i18n binding may
    * already be sitting in `this.via.bindings` (declared at construction).
@@ -3455,7 +3477,7 @@ var Collection = class {
       }
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-TH7SSVRV.js");
+      const { resolveStaleMVOnRead } = await import("./stale-MCS46TFO.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     let record;
@@ -3986,7 +4008,7 @@ var Collection = class {
    */
   async dispatchMaterializedViews(id, record, wave) {
     if (this.materializedViewSource === void 0) return;
-    const { dispatchMaterializedViews } = await import("./dispatch-TNM5CRLZ.js");
+    const { dispatchMaterializedViews } = await import("./dispatch-VR4LRXZ7.js");
     return dispatchMaterializedViews(this.#mvDispatchCtx(this.materializedViewSource), id, record, wave);
   }
   /**
@@ -4159,7 +4181,7 @@ var Collection = class {
    *  dispatch wave's per-target dedup; `undefined` on the local-write path (byte-identical). */
   async dispatchDerivations(id, record, version, wave) {
     if (this.derivationSource === void 0) return;
-    const { dispatchDerivations } = await import("./dispatch-3ZA733EY.js");
+    const { dispatchDerivations } = await import("./dispatch-4AP4PUZU.js");
     return dispatchDerivations({
       ...this.#derivationDeleteCtx(this.derivationSource),
       via: this.via,
@@ -4474,7 +4496,7 @@ var Collection = class {
    */
   async dispatchArrayDerivationsOnDelete(id, eraseRecordShapeToo = false) {
     if (this.derivationSource === void 0) return 0;
-    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-3ZA733EY.js");
+    const { dispatchArrayDerivationsOnDelete } = await import("./dispatch-4AP4PUZU.js");
     return dispatchArrayDerivationsOnDelete(this.#derivationDeleteCtx(this.derivationSource), id, eraseRecordShapeToo);
   }
   /**
@@ -4488,7 +4510,7 @@ var Collection = class {
    */
   async dispatchMaterializedViewsOnDelete(id) {
     if (this.materializedViewSource === void 0) return { deleted: 0, residueUndecodable: [], residueDeclined: [] };
-    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-TNM5CRLZ.js");
+    const { dispatchMaterializedViewsOnDelete } = await import("./dispatch-VR4LRXZ7.js");
     return dispatchMaterializedViewsOnDelete(this.#mvDispatchCtx(this.materializedViewSource), id);
   }
   /**
@@ -4508,7 +4530,7 @@ var Collection = class {
       );
     }
     if (this.materializedViewSource !== void 0) {
-      const { resolveStaleMVOnRead } = await import("./stale-TH7SSVRV.js");
+      const { resolveStaleMVOnRead } = await import("./stale-MCS46TFO.js");
       await resolveStaleMVOnRead(this.materializedViewSource, this.name, this.#dispatchCtx({ collection: this.name, id: "resolve-on-read" }));
     }
     await this.ensureHydrated();
@@ -5618,14 +5640,14 @@ var Collection = class {
   /** C-A/R10: persist the classified marker once per classified handle (store I/O in config-drift.ts). */
   async _ensureClassifiedMarker() {
     if (this._markerPersisted || this.vdigFields === null) return;
-    const { persistClassifiedMarkerForFields } = await import("./classified-marker-AZDSDG6V.js");
+    const { persistClassifiedMarkerForFields } = await import("./classified-marker-BSQHU4JT.js");
     await persistClassifiedMarkerForFields(this.adapter, this.vault, this.name, this.vdigFields, await this.getDEK(this.name));
     this._markerPersisted = true;
   }
   /** C-A/R10 drift signal — the marker's declared digest-only set, memoized to one store read per handle (see config-drift.ts). */
   async _classifiedMarkerDigestOnly() {
     if (this._markerDigestOnlyCache !== void 0) return this._markerDigestOnlyCache;
-    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-AZDSDG6V.js");
+    const { readClassifiedMarkerDigestOnly } = await import("./classified-marker-BSQHU4JT.js");
     this._markerDigestOnlyCache = await readClassifiedMarkerDigestOnly(this.adapter, this.vault, this.name, await this.getDEK(this.name));
     return this._markerDigestOnlyCache;
   }
@@ -7251,7 +7273,7 @@ var VaultLinks = class {
 // src/with-shape/links/lazy-handle.ts
 function makeLazyLinkSetHandle(d) {
   let engine = null;
-  const load = () => engine ??= import("./link-set-5PJBBR63.js").then(
+  const load = () => engine ??= import("./link-set-76JZ6YB4.js").then(
     ({ LinkSet }) => new LinkSet(d.adapter, d.vault, d.name, d.spec, d.encrypted, d.getDEK, d.actor, d.emitter, d.endpointExists)
   );
   return {
@@ -7369,7 +7391,7 @@ function registerCollectionGraphSources(graph, name, opts) {
     ...Object.keys(cfg.i18nFields ?? {}),
     ...Object.keys(cfg.dictKeyFields ?? {}),
     // #650 Task 2 — native lookup()/enumOf()/dict() fields register their
-    // posture (`lookupBinding().posture`) the same generic way every other
+    // posture (`lookupVia().posture`) the same generic way every other
     // binding does; no `'ref'` EdgeKind / graph edge yet (Task 5).
     ...Object.keys(cfg.lookupFields ?? {}),
     ...cfg.classified !== void 0 ? Object.keys(cfg.classified.byField) : []
@@ -7481,16 +7503,16 @@ var EMPTY_POSTURE_MAP = /* @__PURE__ */ new Map();
 function hasI18nBinding(coll) {
   return (coll._via?.bindings ?? []).some((b) => b.brand === "i18n");
 }
-function insertI18nBinding(existing, i18nBinding) {
+function insertI18nBinding(existing, i18nVia) {
   const idx = existing.findIndex((b) => b.brand === "lookup" || b.brand === "classified" || b.brand === "blob" || b.brand === "computed" || b.brand === "taint");
-  return idx === -1 ? [...existing, i18nBinding] : [...existing.slice(0, idx), i18nBinding, ...existing.slice(idx)];
+  return idx === -1 ? [...existing, i18nVia] : [...existing.slice(0, idx), i18nVia, ...existing.slice(idx)];
 }
 function hasLookupBinding(coll) {
   return (coll._via?.bindings ?? []).some((b) => b.brand === "lookup");
 }
-function insertLookupBinding(existing, lookupBindingObj) {
+function insertLookupBinding(existing, lookupViaObj) {
   const idx = existing.findIndex((b) => b.brand === "classified" || b.brand === "blob" || b.brand === "computed" || b.brand === "taint");
-  return idx === -1 ? [...existing, lookupBindingObj] : [...existing.slice(0, idx), lookupBindingObj, ...existing.slice(idx)];
+  return idx === -1 ? [...existing, lookupViaObj] : [...existing.slice(0, idx), lookupViaObj, ...existing.slice(idx)];
 }
 function refuseUnattachableMatrixLookupFields(vaultCtx, lookupFields) {
   for (const [field, desc] of Object.entries(lookupFields)) {
@@ -7902,7 +7924,7 @@ function declareSatellite(ctx, collectionName, options, existingRegistry) {
   ctx.forEachSyncEngine((e) => e.remirrorPairResolvers([spec.base, spec.satellite]));
   const registry = reg;
   const baseSchema = ctx.getBaseSchema(spec.base);
-  void import("./post-register-QCJYRMIK.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
+  void import("./post-register-53O7AJRZ.js").then((m) => m.postRegister(ctx.adapter, ctx.vaultName, spec, ctx.getDEK, baseSchema, registry)).catch(() => {
   });
   return reg;
 }
@@ -8659,7 +8681,7 @@ var Vault = class {
     this.keyring = opts.keyring;
     this.encrypted = opts.encrypted;
     this.schemaFence = new SchemaFenceController({
-      coordination: this.noydb.coordination,
+      coordination: this.noydb.mesh,
       vault: this.name,
       onFlush: () => this.noydb._writeQueueTracker.onFlush(),
       clientId: this.noydb._clientId,
@@ -8877,7 +8899,7 @@ var Vault = class {
         const strategies = options.schemaUpdate ?? [];
         const work = (async () => {
           const dek = await this.getDEK(collectionName);
-          const { persistSchemaIfNeeded } = await import("./register-JBOEHTVX.js");
+          const { persistSchemaIfNeeded } = await import("./register-6TCBR6XD.js");
           const result = await persistSchemaIfNeeded({
             store: this.adapter,
             vault: this.name,
@@ -9027,7 +9049,7 @@ var Vault = class {
         const work = (async () => {
           try {
             const dek = await this.getDEK(collectionName);
-            await (await import("./register-JBOEHTVX.js")).persistSchemaIfNeeded({
+            await (await import("./register-6TCBR6XD.js")).persistSchemaIfNeeded({
               store: this.adapter,
               vault: this.name,
               collectionName,
@@ -9073,7 +9095,7 @@ var Vault = class {
    * writes (unfenced walk — see `with-shape/satellites/migrate-cek.ts`); resumable.
    */
   async migrateSatellitePerRecordKeys(satelliteName) {
-    const { migrateSatelliteCek } = await import("./migrate-cek-V3VDRV24.js");
+    const { migrateSatelliteCek } = await import("./migrate-cek-LBRKYUZZ.js");
     return migrateSatelliteCek(satelliteName, this.collection(satelliteName, { perRecordKeys: true }));
   }
   /**
@@ -9255,10 +9277,10 @@ var Vault = class {
   async _ensureFenceCoordination() {
     if (this.#fenceCoordinationStarted) return;
     this.#fenceCoordinationStarted = true;
-    const { FenceWatcher } = await import("./fence-watcher-DHQ775JB.js");
+    const { FenceWatcher } = await import("./fence-watcher-ZVSMLKQD.js");
     if (!this.#fenceCoordinationStarted) return;
     this.#fenceWatcher = new FenceWatcher({
-      coordination: this.noydb.coordination,
+      coordination: this.noydb.mesh,
       vault: this.name,
       clientId: this.noydb._clientId,
       sessionId: this.noydb._sessionId,
@@ -9704,7 +9726,7 @@ var Vault = class {
    */
   // eslint-disable-next-line @typescript-eslint/consistent-type-imports
   async _loadPodSigner() {
-    const { loadSigner } = await import("./signer-53AQ3BU2.js");
+    const { loadSigner } = await import("./signer-6XVS2AU3.js");
     return loadSigner(this.adapter, this.name, this.getDEK);
   }
   async writeExportAudit(entry) {
@@ -10194,7 +10216,7 @@ var Vault = class {
   async _initGuards(handles) {
     if (handles.length === 0) return;
     const [{ GuardRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-5DYHQFJS.js"),
+      import("./registry-IWFMXCHX.js"),
       import("./read-only-facade-CHCKSEPD.js")
     ]);
     const registry = new GuardRegistry();
@@ -10222,7 +10244,7 @@ var Vault = class {
   async _initDerivations(handles) {
     if (handles.length === 0) return;
     const [{ DerivationRegistry }, { ReadOnlyVaultFacade }] = await Promise.all([
-      import("./registry-R23SQUQH.js"),
+      import("./registry-DH2L4O2V.js"),
       import("./read-only-facade-CHCKSEPD.js")
     ]);
     const registry = new DerivationRegistry();
@@ -10254,7 +10276,7 @@ var Vault = class {
    */
   async _initMaterializedViews(handles) {
     if (handles.length === 0) return;
-    const { MaterializedViewRegistry } = await import("./registry-J25H6VB4.js");
+    const { MaterializedViewRegistry } = await import("./registry-YC3IFG3A.js");
     const registry = new MaterializedViewRegistry();
     this.materializedViewRegistry = registry;
     const db = this;
@@ -10279,7 +10301,7 @@ var Vault = class {
    */
   async _initOverlayedViews(handles) {
     if (handles.length === 0) return;
-    const { OverlayedViewRegistry } = await import("./registry-EANV44W2.js");
+    const { OverlayedViewRegistry } = await import("./registry-Q3FG3OAX.js");
     const registry = new OverlayedViewRegistry();
     const mvRegistry = this.materializedViewRegistry;
     const overlayNames = /* @__PURE__ */ new Set();
@@ -10342,14 +10364,14 @@ var Vault = class {
     if (!reg) {
       throw new Error(`refreshView: no MV registered with name "${name}"`);
     }
-    const { MaterializedViewExecutor } = await import("./executor-ZUTUMTPA.js");
+    const { MaterializedViewExecutor } = await import("./executor-3KFRQETS.js");
     const result = await MaterializedViewExecutor.refresh(reg, {
       getCollection: (n) => this.collection(n),
       getActiveTxContext: () => this.noydb._activeTxContextOrNull,
       getQueryContext: () => this,
       dispatchCtx: this._dispatchCtx({ collection: name, id: "refreshView" })
     });
-    const { clearMVStaleFully } = await import("./stale-TH7SSVRV.js");
+    const { clearMVStaleFully } = await import("./stale-MCS46TFO.js");
     await clearMVStaleFully(this.adapter, this.name, registry, name);
     return result;
   }
@@ -10362,7 +10384,7 @@ var Vault = class {
     if (registry === null) return { derived: 0, failed: 0, skippedFrozen: 0 };
     const strategies = registry.strategiesForSource(sourceCollection);
     if (strategies.length === 0) return { derived: 0, failed: 0, skippedFrozen: 0 };
-    const { DerivationExecutor } = await import("./executor-BBEEUFO3.js");
+    const { DerivationExecutor } = await import("./executor-YYDW6XQI.js");
     const sourceColl = this.collection(sourceCollection);
     const records = await sourceColl.list();
     const ctx = { vault: this.derivationFacade ?? new (await import("./read-only-facade-CHCKSEPD.js")).ReadOnlyVaultFacade(this, "derivation") };
@@ -10389,7 +10411,7 @@ var Vault = class {
           if (!outSpec) continue;
           const outputColl = this.collection(outSpec.collection);
           if (out.kind === "array") {
-            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-3QZU7ZZX.js");
+            const { loadFanoutSidecar, saveFanoutSidecar } = await import("./fanout-sidecar-IWP3R4RC.js");
             const prior = await loadFanoutSidecar(this.adapter, this.name, spec.source, id, key, this.getDEK, this.encrypted);
             const prevKeys = new Set(prior?.keys ?? []);
             const newKeysList = out.entries.map((e) => e.key);
@@ -10616,7 +10638,7 @@ var Vault = class {
    * collection.
    */
   async delegate(opts) {
-    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-5F36DRDH.js");
+    const { issueDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-XWRPYODW.js");
     if (!this.keyring.kek) {
       throw new ValidationError(
         "issueDelegation: keyring.kek is null \u2014 issuing a delegation requires a tier-1 unlock. Re-authenticate at tier 1 (secret) first."
@@ -10638,7 +10660,7 @@ var Vault = class {
    * if the id does not exist.
    */
   async revokeDelegation(id) {
-    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-5F36DRDH.js");
+    const { revokeDelegation, DELEGATIONS_COLLECTION } = await import("./delegation-XWRPYODW.js");
     await revokeDelegation(this.adapter, this.name, id);
     void DELEGATIONS_COLLECTION;
   }
@@ -10654,9 +10676,9 @@ var Vault = class {
    *   - The keyring must already carry a wrap for the target tier on
    *     at least one collection (or be `owner` / `admin`, who can
    *     auto-mint). Otherwise throws {@link TierNotGrantedError}.
-   *   - Per-collection capability gates (`canExportPlaintext`,
-   *     `canExportBundle`) are NOT bypassed — elevation is a tier
-   *     projection, not a privilege escalation path.
+   *   - The export gates (`assertCanExport('plaintext', fmt)` and
+   *     `assertCanExport('bundle')`) are NOT bypassed — elevation is a
+   *     tier projection, not a privilege escalation path.
    *   - Only one elevation can be active per vault at a time.
    *     Calling `elevate(...)` while another is live throws
    *     {@link AlreadyElevatedError}.
@@ -10891,7 +10913,7 @@ var Vault = class {
    * @see design-history/2026-05-22-schema-dump-design.md
    */
   async dumpSchema(opts = {}) {
-    const { dumpVaultSchema } = await import("./walk-NABCHDZN.js");
+    const { dumpVaultSchema } = await import("./walk-JNEOYCAU.js");
     return dumpVaultSchema(this, opts);
   }
   /**
@@ -10987,7 +11009,7 @@ var Vault = class {
    * separate vault instances now.
    */
   async getPodHandle() {
-    const { buildPodHandle } = await import("./pod-handle-AZ3CXY5Y.js");
+    const { buildPodHandle } = await import("./pod-handle-P6DPBM5U.js");
     return buildPodHandle(this.adapter, this.name);
   }
   /**
@@ -11019,7 +11041,7 @@ var Vault = class {
    * both modes round-trip cleanly.
    */
   async dump() {
-    const { dumpVault } = await import("./backup-VL4GRIEW.js");
+    const { dumpVault } = await import("./backup-Z7ZBTAQ6.js");
     return dumpVault(this.backupContext());
   }
   /**
@@ -11071,7 +11093,7 @@ var Vault = class {
    * — there's no chain to verify against.
    */
   async load(backupJson) {
-    const { loadVault } = await import("./backup-VL4GRIEW.js");
+    const { loadVault } = await import("./backup-Z7ZBTAQ6.js");
     return loadVault(this.backupContext(), backupJson);
   }
   /**
@@ -11103,7 +11125,7 @@ var Vault = class {
    * way to detect tampering of an in-place vault.
    */
   async verifyBackupIntegrity() {
-    const { verifyBackupIntegrity } = await import("./backup-VL4GRIEW.js");
+    const { verifyBackupIntegrity } = await import("./backup-Z7ZBTAQ6.js");
     return verifyBackupIntegrity(this.backupContext());
   }
   /**
@@ -11168,6 +11190,18 @@ var Vault = class {
    * }
    * ```
    */
+  /**
+   * Serialise this vault through an `as-*` format. The gate runs before a
+   * record is read and the format never receives a vault — see
+   * `docs/adr/0004-as-format-port.md` and `port/as/active.ts`.
+   */
+  async export(format, options) {
+    return this.strategies.formats.exportWith(this, format, options);
+  }
+  /** Plan an import from an `as-*` format. Nothing is written until `apply()`. */
+  async import(format, input, options) {
+    return this.strategies.formats.importWith(this, format, input, options);
+  }
   async *exportStream(opts = {}) {
     const granularity = opts.granularity ?? "collection";
     const exportLocale = opts.resolveLabels;
@@ -11321,7 +11355,7 @@ var Vault = class {
    * is the live validator object, not a serialization of it).
    */
   async exportJSON(opts = {}) {
-    const { exportVaultJSON } = await import("./backup-VL4GRIEW.js");
+    const { exportVaultJSON } = await import("./backup-Z7ZBTAQ6.js");
     return exportVaultJSON(this.backupContext(), opts);
   }
 };
@@ -12197,7 +12231,7 @@ var TeamFacade = class {
     const p = this.deps.options.shamirRecovery;
     if (!p) {
       throw new Error(
-        "shamir recovery requires a ShamirRecoveryProvider \u2014 pass shamirRecovery: shamirRecoveryProvider() from '@noy-db/on-shamir' to createNoydb()"
+        "shamir recovery requires a NoydbShamir \u2014 pass shamirRecovery: shamirRecoveryProvider() from '@noy-db/on-shamir' to createNoydb()"
       );
     }
     return p;
@@ -12460,7 +12494,7 @@ var TeamFacade = class {
         "rotate-secret",
         "disabled",
         { minTier: 1, enabled: false },
-        "Managed-secret mode (#14): the secret is hub-generated and sealed under the SealingKeyProvider \u2014 there is no plaintext to rotate. Use the recovery flow (follow-up issue) to mint a fresh sealed secret."
+        "Managed-secret mode (#14): the secret is hub-generated and sealed under the NoydbSealer \u2014 there is no plaintext to rotate. Use the recovery flow (follow-up issue) to mint a fresh sealed secret."
       );
     }
     await this.deps.checkGate(vault, "rotate-secret", factors);
@@ -12638,7 +12672,7 @@ var TeamFacade = class {
    * const db = await createNoydb({
    *   store, user: 'alice',
    *   secretMode: 'managed',
-   *   sealingKey: macosKeychainSealingProvider({ ... }),
+   *   sealingKey: atMacosKeychain({ ... }),
    * })
    *
    * const { vault, recoveryEnrollments } = await db.team.openVaultAndEnrollRecovery('acme', {
@@ -12690,7 +12724,7 @@ var TeamFacade = class {
    *
    * Replaces the sealed secret of a managed-mode vault with a
    * fresh 256-bit random, sealed under the configured
-   * `SealingKeyProvider`. The user never sees the new secret.
+   * `NoydbSealer`. The user never sees the new secret.
    *
    * Internally:
    *   1. Verify the recovery proof (Shamir today) and unwrap the
@@ -12988,8 +13022,8 @@ var Noydb = class {
   /** Session that owns this instance's writers (one user's writers across vaults). */
   sessionId;
   /** Drain-barrier coordination transport for the schema fence. */
-  coordinationProvider;
-  /** Pre-resolved `vault.user` API factory (mirrors `coordinationProvider` above). Public so `Vault` can call it. */
+  meshPort;
+  /** Pre-resolved `vault.user` API factory (mirrors `meshPort` above). Public so `Vault` can call it. */
   userApiFactory;
   vaultCache = /* @__PURE__ */ new Map();
   /**
@@ -13050,7 +13084,7 @@ var Noydb = class {
   }
   snapshots;
   policyManager;
-  /** Pre-resolved policy-gate engine function (mirrors `coordinationProvider`/`userApiFactory` above). */
+  /** Pre-resolved policy-gate engine function (mirrors `meshPort`/`userApiFactory` above). */
   policyCheckGate;
   /**
    * Credential and multi-user operations — enrolment, secret rotation,
@@ -13097,12 +13131,12 @@ var Noydb = class {
       );
     }
     this.sessionId = options.sessionId ?? generateULID();
-    if (!options.coordinationStrategy) {
+    if (!options.mesh) {
       throw new ValidationError(
-        "Noydb must be constructed via createNoydb(), which resolves the default coordination provider."
+        "Noydb must be constructed via createNoydb(), which resolves the default mesh."
       );
     }
-    this.coordinationProvider = options.coordinationStrategy;
+    this.meshPort = options.mesh;
     if (!options.userApiFactory) throw new ValidationError("Noydb must be constructed via createNoydb(), which resolves the default user-envelope API factory.");
     this.userApiFactory = options.userApiFactory;
     if (!options.policyFactory || !options.policyCheckGateFn) throw new ValidationError("Noydb must be constructed via createNoydb(), which resolves the default policy service.");
@@ -13249,7 +13283,7 @@ var Noydb = class {
       if (!facade) return;
       const ctx = { existing, vault: facade, userId: e.userId, role: e.role };
       await registry.runChecks(e.collection, incoming, ctx);
-      const { GuardExecutor } = await import("./executor-G6G3YEWR.js");
+      const { GuardExecutor } = await import("./executor-AFHQYRAU.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, e.docId, existing, incoming, e.computedFieldNames);
       }
@@ -14247,10 +14281,10 @@ var Noydb = class {
   /**
    * @internal Drain-barrier coordination transport for the schema fence.
    * The default store-backed provider reproduces today's fence behavior; a
-   * `by-*` real-time transport is injected via `coordinationStrategy`.
+   * `by-*` real-time transport is injected via `mesh`.
    */
-  get coordination() {
-    return this.coordinationProvider;
+  get mesh() {
+    return this.meshPort;
   }
   /**
    * #693: true when multi-tab coordination is active at all — presence/election
@@ -14620,8 +14654,8 @@ var Noydb = class {
 async function createNoydb(options) {
   if (!options.store) options = { ...options, store: memoryStore() };
   validateSecretModeOptions(options);
-  if (!options.coordinationStrategy) options = { ...options, coordinationStrategy: await createDefaultCoordinationProvider(options.store) };
-  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-6X2VLZ7J.js")).createUserApi };
+  if (!options.mesh) options = { ...options, mesh: await createDefaultMesh(options.store) };
+  if (!options.userApiFactory) options = { ...options, userApiFactory: (await import("./api-EQYRTZO2.js")).createUserApi };
   if (!options.policyFactory) {
     const policyModule = await import("./policy/index.js");
     options = { ...options, policyFactory: policyModule.createNoydbPolicy, policyCheckGateFn: policyModule.checkGate };
@@ -14656,4 +14690,4 @@ export {
   Noydb,
   createNoydb
 };
-//# sourceMappingURL=chunk-JYPRZWCZ.js.map
+//# sourceMappingURL=chunk-3SMSERQU.js.map