@noy-db/hub 0.7.0-pre.1 → 0.7.0-pre.11

package/dist/cargo/index.js

@@ -5,11 +5,11 @@ import {
   describeExtraction,
   unsealDeks,
   withCargo
-} from "../chunk-H3VG6XBC.js";
+} from "../chunk-ESVREVWN.js";
 import {
   extractPartition,
   walkClosure
-} from "../chunk-OWLVBOWO.js";
+} from "../chunk-DJ3LNNZQ.js";
 import {
   diffVault
 } from "../chunk-LFUID7OW.js";
@@ -18,59 +18,61 @@ import {
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-KN4W2OQ4.js";
-import "../chunk-H7HP56F6.js";
-import "../chunk-DKWPJOYH.js";
+} from "../chunk-YCXICMOY.js";
+import "../chunk-QHW35ZON.js";
+import "../chunk-ZR2YMODS.js";
 import {
   NO_CARGO
-} from "../chunk-XJ3FEKEY.js";
-import "../chunk-Z2WK53N6.js";
+} from "../chunk-NQKIUNW5.js";
+import "../chunk-JUBWUJY5.js";
 import {
   isQuorum,
   runDrainBarrier
-} from "../chunk-CBRS2NEK.js";
-import "../chunk-YXA2TCTZ.js";
+} from "../chunk-VTFVLCUH.js";
+import "../chunk-WWNYSV7S.js";
 import {
   CustodyApi
-} from "../chunk-J4UJ5FRV.js";
-import "../chunk-6FOGTKBY.js";
-import "../chunk-LF6DMX4C.js";
+} from "../chunk-Y4MJQ2UG.js";
+import "../chunk-PKJ43CMD.js";
+import "../chunk-MLO75SFJ.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import "../chunk-ALB64CZM.js";
+import "../chunk-ZG4XLOKB.js";
 import {
   groupAndReduce,
   reduceRecords
-} from "../chunk-4G25SDQL.js";
+} from "../chunk-ZN4FD4PE.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-ATL3ZVXT.js";
 import {
   readPath
 } from "../chunk-NSITFOCJ.js";
-import "../chunk-X67FCULK.js";
-import "../chunk-XDVVBETV.js";
-import "../chunk-5W7YXFV5.js";
-import "../chunk-DFAUMLD7.js";
-import "../chunk-HTGRQZFB.js";
+import "../chunk-TRGTKX5E.js";
+import "../chunk-UXVWEX5L.js";
+import "../chunk-VNR2SNVJ.js";
+import "../chunk-YQWBEJCS.js";
+import "../chunk-UGTBXF5U.js";
 import {
   generateULID
 } from "../chunk-4AOERLTV.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-IESNYJXZ.js";
+import "../chunk-U7VPHXXO.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-RC4BROYR.js";
-import "../chunk-POS53FG6.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
-import "../chunk-FOG7YEJP.js";
-import "../chunk-KDJGJR7F.js";
-import "../chunk-LKFKXS5K.js";
+import "../chunk-IPFE6MVM.js";
+import "../chunk-JMGDHKQF.js";
+import "../chunk-CIGAQBJR.js";
+import "../chunk-4RUFYGWG.js";
+import "../chunk-BOWNCWZT.js";
+import "../chunk-YSRUYAVU.js";
+import "../chunk-RMF67KCG.js";
 import "../chunk-LP7BEXCT.js";
 import {
   sha256Hex
-} from "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+} from "../chunk-SL3JAAKN.js";
+import {
+  NOYDB_ENVELOPE_GENERATION
+} from "../chunk-N4CHCXDL.js";
 import {
   AdoptionStateError,
   CargoNotEnabledError,
@@ -85,7 +87,7 @@ import {
   UnknownShardError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "../chunk-JBIV4FLR.js";
+} from "../chunk-7O3Y4PPD.js";
 import "../chunk-PZ5AY32C.js";
 export {
   AdoptionStateError,
@@ -93,6 +95,7 @@ export {
   CrossShardJoinError,
   CustodyApi,
   DataResidencyError,
+  NOYDB_ENVELOPE_GENERATION,
   NO_CARGO,
   NoAccessError,
   PartitionExtractionError,

package/dist/{chunk-QI5NWLVW.js → chunk-2Z47NMFK.js}

@@ -7,28 +7,28 @@ import {
   deriveSchemaManifest,
   loadSchemaManifestEntry,
   saveSchemaManifest
-} from "./chunk-QHJKK77B.js";
+} from "./chunk-BBWVXF57.js";
 import {
   MANIFEST_COLLECTION
 } from "./chunk-EPFF7LOX.js";
 import {
   loadFence,
   saveFence
-} from "./chunk-Y6GZ2P4M.js";
+} from "./chunk-GM4IM7TC.js";
 import {
   derivePersistedSchema
-} from "./chunk-P6ASQOZR.js";
+} from "./chunk-URHRIAV6.js";
 import {
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-YXA2TCTZ.js";
+} from "./chunk-WWNYSV7S.js";
 import {
   envelopePayloadHash
-} from "./chunk-RC4BROYR.js";
+} from "./chunk-IPFE6MVM.js";
 import {
   ManifestConflictError,
   isConflictError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-7O3Y4PPD.js";
 
 // src/with-shape/persisted-schemas/field-ids.ts
 var BASE32URL_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
@@ -257,4 +257,4 @@ export {
   persistClassifiedMarker,
   persistSatelliteMarker
 };
-//# sourceMappingURL=chunk-QI5NWLVW.js.map
+//# sourceMappingURL=chunk-2Z47NMFK.js.map

package/dist/{chunk-AB5P32RE.js → chunk-4OZNXTO4.js}

@@ -1,7 +1,7 @@
 import {
   FieldFrozenError,
   InvariantError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-7O3Y4PPD.js";
 
 // src/with-audit/guards/executor.ts
 var GuardExecutor = {
@@ -77,4 +77,4 @@ function deepEqual(a, b) {
 export {
   GuardExecutor
 };
-//# sourceMappingURL=chunk-AB5P32RE.js.map
+//# sourceMappingURL=chunk-4OZNXTO4.js.map

package/dist/{chunk-N4CNVSUF.js → chunk-4RUFYGWG.js}

@@ -1,6 +1,6 @@
 import {
   NOYDB_FORMAT_VERSION
-} from "./chunk-RK7N4OQ5.js";
+} from "./chunk-N4CHCXDL.js";
 
 // src/kernel/enclave/record-envelope.ts
 function buildRecordEnvelope(identity, body) {
@@ -63,4 +63,4 @@ export {
   isDeleteMarker,
   buildDeleteMarker
 };
-//# sourceMappingURL=chunk-N4CNVSUF.js.map
+//# sourceMappingURL=chunk-4RUFYGWG.js.map

package/dist/{chunk-YMLQBZFJ.js → chunk-5FUULQ6F.js}

@@ -201,7 +201,7 @@ var engineCtx = (ctx) => ({
 function withClassified() {
   return {
     async reveal(ctx, id, field) {
-      const { revealSealedField } = await import("./reveal-XBIMHAXR.js");
+      const { revealSealedField } = await import("./reveal-DDQBDWPM.js");
       const value = await revealSealedField({
         collection: ctx.collection,
         encrypted: ctx.encrypted,
@@ -213,26 +213,26 @@ function withClassified() {
       return value;
     },
     async verify(ctx, id, field, candidate) {
-      const { verifyDigestField } = await import("./verify-WYOFLSNA.js");
+      const { verifyDigestField } = await import("./verify-JBXCAGDL.js");
       const verdict = await verifyDigestField(engineCtx(ctx), id, field, candidate, policyOf(ctx.spec));
       await ctx.onAccess?.("verify", id);
       return verdict;
     },
     async verifyText(ctx, id, field, candidate) {
-      const { verifyTextField } = await import("./verify-WYOFLSNA.js");
+      const { verifyTextField } = await import("./verify-JBXCAGDL.js");
       const verdict = await verifyTextField(engineCtx(ctx), id, field, candidate, ctx.spec.verifyNormalize ?? "password");
       await ctx.onAccess?.("verify", id);
       return verdict;
     },
     async matchGroup(ctx, id, answers, opts) {
-      const { matchGroupFields } = await import("./verify-WYOFLSNA.js");
+      const { matchGroupFields } = await import("./verify-JBXCAGDL.js");
       const members = (ctx.groupMembers ?? []).map((m) => ({ field: m.field, policy: policyOf(m.spec) }));
       const result = await matchGroupFields(engineCtx(ctx), id, answers, members, opts);
       await ctx.onAccess?.("verify", id);
       return result;
     },
     async computeTarget(ctx, field, candidate, costByte) {
-      const { computeBidxTarget } = await import("./find-SZBL2HPB.js");
+      const { computeBidxTarget } = await import("./find-LC7P63MX.js");
       const dek = await ctx.getDEK();
       return computeBidxTarget(candidate, policyOf(ctx.spec).normalize, dek, ctx.collection, field, costByte);
     }
@@ -244,4 +244,4 @@ export {
   classified,
   withClassified
 };
-//# sourceMappingURL=chunk-YMLQBZFJ.js.map
+//# sourceMappingURL=chunk-5FUULQ6F.js.map

package/dist/{chunk-PQ6Z2TAP.js → chunk-5UKIZIO3.js}

@@ -1,6 +1,6 @@
 import {
   buildRecordEnvelope
-} from "./chunk-N4CNVSUF.js";
+} from "./chunk-4RUFYGWG.js";
 
 // src/with-party/policy/storage.ts
 var META_COLLECTION = "_meta";
@@ -36,4 +36,4 @@ export {
   loadVaultPolicy,
   saveVaultPolicy
 };
-//# sourceMappingURL=chunk-PQ6Z2TAP.js.map
+//# sourceMappingURL=chunk-5UKIZIO3.js.map

package/dist/{chunk-UCUALOSM.js → chunk-6YXCPL4T.js}

@@ -1,6 +1,6 @@
 import {
   SealedRecordNotEnabledError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-7O3Y4PPD.js";
 
 // src/with-audit/sealed-record/strategy.ts
 var NO_SEALED_RECORD = {
@@ -18,4 +18,4 @@ var NO_SEALED_RECORD = {
 export {
   NO_SEALED_RECORD
 };
-//# sourceMappingURL=chunk-UCUALOSM.js.map
+//# sourceMappingURL=chunk-6YXCPL4T.js.map

package/dist/{chunk-S2VG3ABP.js → chunk-7MG2LHO5.js}

@@ -1,7 +1,7 @@
 import {
   applyJoins,
   splitAroundJoins
-} from "./chunk-XSN63FUS.js";
+} from "./chunk-ZORTV6NH.js";
 import {
   NO_REDUCE
 } from "./chunk-YMUFFJCO.js";
@@ -19,7 +19,7 @@ import {
   DanglingReferenceError,
   FieldNotQueryableError,
   RefNotDeclaredError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-7O3Y4PPD.js";
 
 // src/kernel/query/live.ts
 function buildLiveQuery(recompute, upstreams) {
@@ -1613,4 +1613,4 @@ export {
   executePlan,
   ScanBuilder
 };
-//# sourceMappingURL=chunk-S2VG3ABP.js.map
+//# sourceMappingURL=chunk-7MG2LHO5.js.map

package/dist/{chunk-JBIV4FLR.js → chunk-7O3Y4PPD.js}

@@ -82,6 +82,10 @@ var RE_SEED = " To re-seed: REMOVE THE VAULT FROM THIS DEVICE FIRST, then import
 function keyringTamperedMessage(userId, reason, format) {
   const head = `Keyring for "${userId}" failed roster authentication (${reason}). `;
   switch (reason) {
+    case "roster-epoch-absent":
+      return head + "The caller expected a roster epoch and this keyring carries none. That is what a replay of a keyring written before epochs existed looks like \u2014 it is NOT evidence of an attack on its own, and it is not treated as epoch zero either. Re-issue the credential that carries the expected epoch, or open without one if this vault predates the mechanism.";
+    case "roster-epoch-rewound":
+      return head + "This keyring is OLDER than the roster epoch the caller obtained out of band \u2014 the store served a superseded roster. A narrowing re-grant overwrites in place, so an earlier, BROADER file was legitimately minted by this vault and replaying it restores the old role. Refusing is the point. The epoch is bound into the authenticated canonical, so this value was not edited by the store; it came from a genuine, superseded file.";
     case "canary-missing":
     case "roster-key-missing":
     case "roster-tag-missing":
@@ -1757,4 +1761,4 @@ export {
   ClassifiedRotationError,
   SatelliteConfigError
 };
-//# sourceMappingURL=chunk-JBIV4FLR.js.map
+//# sourceMappingURL=chunk-7O3Y4PPD.js.map