@noy-db/hub 0.7.0-pre.2 → 0.7.0-pre.3

package/dist/sequence/index.js

@@ -5,15 +5,15 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "../chunk-CN6B5PEN.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
+} from "../chunk-N4NRT4LR.js";
+import "../chunk-7BUFWUX2.js";
+import "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import {
   SequenceNotEnabledError
 } from "../chunk-JBIV4FLR.js";

package/dist/session/index.js

@@ -17,14 +17,14 @@ import {
   NO_SESSION
 } from "../chunk-VKQCVU2Z.js";
 import "../chunk-4AOERLTV.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
+import "../chunk-7BUFWUX2.js";
+import "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import {
   SessionExpiredError,
   SessionNotFoundError,

package/dist/{signer-6XVS2AU3.js → signer-NSMW4SWL.js}

@@ -4,15 +4,15 @@ import {
   SIGNER_RECORD_ID,
   loadOrCreateSigner,
   loadSigner
-} from "./chunk-3L2MVE36.js";
-import "./chunk-2LPVI4PX.js";
-import "./chunk-N4CNVSUF.js";
+} from "./chunk-BCPZQDNV.js";
+import "./chunk-7BUFWUX2.js";
+import "./chunk-QUUWGF6T.js";
 import "./chunk-FOG7YEJP.js";
 import "./chunk-KDJGJR7F.js";
 import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-W5LHQXZU.js";
-import "./chunk-RK7N4OQ5.js";
+import "./chunk-WO7YGWEG.js";
 import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -22,4 +22,4 @@ export {
   loadOrCreateSigner,
   loadSigner
 };
-//# sourceMappingURL=signer-6XVS2AU3.js.map
+//# sourceMappingURL=signer-NSMW4SWL.js.map

package/dist/snapshots/index.js

@@ -4,16 +4,16 @@ import {
 import {
   readPod,
   writePod
-} from "../chunk-6FOGTKBY.js";
-import "../chunk-LF6DMX4C.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
+} from "../chunk-DEZZ6XLD.js";
+import "../chunk-LA6APPYL.js";
+import "../chunk-7BUFWUX2.js";
+import "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import {
   SnapshotNotFoundError
 } from "../chunk-JBIV4FLR.js";

package/dist/{stale-MCS46TFO.js → stale-IW5OSZSH.js}

@@ -6,16 +6,16 @@ import {
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "./chunk-PGFKIOR3.js";
+} from "./chunk-UNFHINQI.js";
 import "./chunk-5D2ALSM5.js";
-import "./chunk-2LPVI4PX.js";
-import "./chunk-N4CNVSUF.js";
+import "./chunk-7BUFWUX2.js";
+import "./chunk-QUUWGF6T.js";
 import "./chunk-FOG7YEJP.js";
 import "./chunk-KDJGJR7F.js";
 import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-W5LHQXZU.js";
-import "./chunk-RK7N4OQ5.js";
+import "./chunk-WO7YGWEG.js";
 import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -27,4 +27,4 @@ export {
   markMVStale,
   resolveStaleMVOnRead
 };
-//# sourceMappingURL=stale-MCS46TFO.js.map
+//# sourceMappingURL=stale-IW5OSZSH.js.map

package/dist/{storage-ZXUT476I.js → storage-GT3WNVMB.js}

@@ -3,15 +3,15 @@ import {
   loadPersistedSchema,
   loadPersistedSchemaEntry,
   savePersistedSchema
-} from "./chunk-YXA2TCTZ.js";
-import "./chunk-2LPVI4PX.js";
-import "./chunk-N4CNVSUF.js";
+} from "./chunk-KL2UUIDX.js";
+import "./chunk-7BUFWUX2.js";
+import "./chunk-QUUWGF6T.js";
 import "./chunk-FOG7YEJP.js";
 import "./chunk-KDJGJR7F.js";
 import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-W5LHQXZU.js";
-import "./chunk-RK7N4OQ5.js";
+import "./chunk-WO7YGWEG.js";
 import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -20,4 +20,4 @@ export {
   loadPersistedSchemaEntry,
   savePersistedSchema
 };
-//# sourceMappingURL=storage-ZXUT476I.js.map
+//# sourceMappingURL=storage-GT3WNVMB.js.map

package/dist/{store-coordination-provider-6FM26VQM.js → store-coordination-provider-IJXF72NL.js}

@@ -1,17 +1,17 @@
 import {
   loadFence,
   saveFence
-} from "./chunk-Y6GZ2P4M.js";
-import "./chunk-2LPVI4PX.js";
+} from "./chunk-BIB3FMKZ.js";
+import "./chunk-7BUFWUX2.js";
 import {
   buildRecordEnvelope
-} from "./chunk-N4CNVSUF.js";
+} from "./chunk-QUUWGF6T.js";
 import "./chunk-FOG7YEJP.js";
 import "./chunk-KDJGJR7F.js";
 import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-W5LHQXZU.js";
-import "./chunk-RK7N4OQ5.js";
+import "./chunk-WO7YGWEG.js";
 import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 
@@ -146,4 +146,4 @@ function unref(timer) {
 export {
   StoreMesh
 };
-//# sourceMappingURL=store-coordination-provider-6FM26VQM.js.map
+//# sourceMappingURL=store-coordination-provider-IJXF72NL.js.map

package/dist/sync/index.js

@@ -2,19 +2,19 @@ import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-H36KSN6X.js";
+} from "../chunk-QU6CNBV3.js";
 import {
   NO_SYNC
 } from "../chunk-T7IR4N2S.js";
 import "../chunk-Z7ZXZL6Y.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
+import "../chunk-7BUFWUX2.js";
+import "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 

package/dist/team/index.js

@@ -2,7 +2,7 @@ import {
   MemoryDeviceSeal,
   beginEchoUnlock,
   withTeam
-} from "../chunk-X62MEF2O.js";
+} from "../chunk-P2J6YCAI.js";
 import {
   NO_TEAM,
   burnPaperRecoveryEntry,
@@ -31,8 +31,8 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-H4M7ADXY.js";
-import "../chunk-PQ6Z2TAP.js";
+} from "../chunk-NTTJP7BJ.js";
+import "../chunk-MSUJXPAG.js";
 import {
   buildEchoBlock,
   buildRecipientKeyringFile,
@@ -53,18 +53,18 @@ import {
   updateKeyringIdentity,
   verifyPrompt,
   verifyTypedEcho
-} from "../chunk-5W7YXFV5.js";
-import "../chunk-DFAUMLD7.js";
+} from "../chunk-5MHTYFGJ.js";
+import "../chunk-UZOBUKOI.js";
 import "../chunk-HTGRQZFB.js";
 import "../chunk-POS53FG6.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
+import "../chunk-7BUFWUX2.js";
+import "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import {
   TeamNotEnabledError
 } from "../chunk-JBIV4FLR.js";

package/dist/tiers/index.js

@@ -11,17 +11,17 @@ import {
   putAtTier,
   syncDerivedOutputs,
   withTiers
-} from "../chunk-WK5FSW7T.js";
+} from "../chunk-5KV6OD5F.js";
 import "../chunk-HTGRQZFB.js";
 import "../chunk-POS53FG6.js";
-import "../chunk-2LPVI4PX.js";
-import "../chunk-N4CNVSUF.js";
+import "../chunk-7BUFWUX2.js";
+import "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
 import "../chunk-LP7BEXCT.js";
 import "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import {
   TiersNotEnabledError
 } from "../chunk-JBIV4FLR.js";

package/dist/to/index.js

@@ -1,3 +1,6 @@
+import {
+  NOYDB_ENVELOPE_GENERATION
+} from "../chunk-WO7YGWEG.js";
 import {
   ConflictError,
   DuplicateStoreKindError,
@@ -39,6 +42,7 @@ function createStoreLocator() {
 export {
   ConflictError,
   DuplicateStoreKindError,
+  NOYDB_ENVELOPE_GENERATION,
   NetworkError,
   PodVersionConflictError,
   StoreCapabilityError,

package/dist/to/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/port/to/locator.ts"],"sourcesContent":["/**\n * The Locator seam (#945 Task 1): a serializable, CREDENTIALLESS store\n * descriptor plus a factory registry that reconstructs a `NoydbStore` from\n * data.\n *\n * A `StoreDescriptor` is the pod-portable \"what store and where\" — kind,\n * broad topology class, and a kind-specific serializable address/options\n * bag. It is deliberately dumb data: no field on it is ever typed as a\n * function, a `StoreCredentialSource`, or a `StoreCredentials` value, so a\n * descriptor can be written into a pod / manifest / sync payload without an\n * audit for leaked secrets. Anything that must resolve device-side or\n * user-side — a short-lived credential, a device-local directory override,\n * a mounted drive handle — travels out-of-band via `resolve()`'s `opts`,\n * never through the descriptor itself.\n *\n * This module is pure TypeScript: no imports beyond the kernel's own types\n * and errors, no Node built-ins, no crypto. It adds zero runtime\n * dependencies to `@noy-db/hub/to`.\n */\nimport type { NoydbStore, NoydbPodStore, StoreCredentialSource } from '../../kernel/types.js'\nimport { DuplicateStoreKindError, UnknownStoreKindError } from '../../kernel/errors.js'\n\n/**\n * The broad topology bucket a store descriptor's kind falls into —\n * used by callers/UI to group or filter descriptors without knowing every\n * concrete `kind` string.\n */\nexport type StoreClass = 'local' | 'browser' | 'lan' | 'cloud'\n\n/**\n * A serializable, CREDENTIALLESS description of a store instance: enough\n * data to reconstruct a `NoydbStore` via a registered `StoreFactory`, and\n * safe to persist or transmit as-is.\n *\n * CREDENTIALLESS BY CONSTRUCTION: no field here may be typed as a function,\n * a `StoreCredentialSource`, or a `StoreCredentials` value. Credentials\n * NEVER ride the descriptor — they are supplied separately (as a\n * `StoreCredentialSource`) to `StoreLocator.resolve()` at resolve time.\n */\nexport interface StoreDescriptor {\n  /** The registered factory key (e.g. `'file'`, `'aws-s3'`, `'webdav'`). */\n  readonly kind: string\n  /** The broad topology bucket this kind falls into. */\n  readonly class: StoreClass\n  /** Kind-specific serializable location (e.g. `{ dir }`, `{ bucket, region }`). */\n  readonly address: unknown\n  /** Kind-specific serializable tuning options. */\n  readonly options?: unknown\n}\n\n/**\n * A kind-specific, device-local supplement to a `StoreDescriptor` — a\n * directory override, a mount point, a drive handle — that is resolved\n * device-side and never carried inside a pod alongside the descriptor.\n */\nexport type StoreBinding = unknown\n\n/**\n * Either store shape a factory may produce: the 6-method KV `NoydbStore`, or\n * the whole-vault `NoydbPodStore` implemented by `to-drive` / `to-icloud`.\n *\n * The two are DISJOINT, not sub/supertypes — a pod store has none of the six\n * KV methods — which is why moving between them needs a double cast and why\n * `isPodStore()` exists to narrow instead.\n */\nexport type AnyNoydbStore = NoydbStore | NoydbPodStore\n\n/**\n * Narrow an `AnyNoydbStore` to the pod shape. Discriminates on the\n * `kind: 'bundle'` tag `NoydbPodStore` carries for exactly this purpose; a\n * `NoydbStore` has no `kind` field at all.\n *\n * Use this at a `resolve()` boundary instead of casting — a store resolved\n * from a descriptor read out of a pod is only known to be one of the two\n * shapes at runtime.\n */\nexport function isPodStore(store: AnyNoydbStore): store is NoydbPodStore {\n  return (store as NoydbPodStore).kind === 'bundle'\n}\n\n/**\n * Reconstructs a live store from a `StoreDescriptor`. Registered against a\n * `StoreLocator` under the descriptor's `kind`.\n *\n * The type parameter says WHICH shape this factory builds. It defaults to\n * `NoydbStore`, so a bare `StoreFactory` means exactly what it always has;\n * a pod-store factory declares `StoreFactory<NoydbPodStore>` and registers\n * without a cast (#988).\n */\nexport type StoreFactory<S extends AnyNoydbStore = NoydbStore> = (\n  descriptor: StoreDescriptor,\n  opts: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n) => S | Promise<S>\n\n/** A registry of `StoreFactory`s, keyed by `StoreDescriptor.kind`. */\nexport interface StoreLocator {\n  /**\n   * Register a factory for `kind`. Throws if `kind` is already registered.\n   *\n   * Accepts a factory building EITHER store shape — `S` is inferred from the\n   * factory's own return type, so a `NoydbPodStore` factory needs no cast.\n   */\n  register<S extends AnyNoydbStore>(kind: string, factory: StoreFactory<S>): void\n  /**\n   * Resolve `descriptor` to a live store via its kind's registered factory.\n   *\n   * Returns `NoydbStore`. If the `kind` was registered with a pod-store\n   * factory, the resolved value is really a `NoydbPodStore`: this signature\n   * is the seam's remaining unsoundness, kept because widening it to\n   * `AnyNoydbStore` would break every existing caller. Where the descriptor's\n   * kind is not statically known, prefer `resolveAny()` and `isPodStore()`.\n   */\n  resolve(\n    descriptor: StoreDescriptor,\n    opts?: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n  ): NoydbStore | Promise<NoydbStore>\n  /**\n   * As `resolve()`, but typed honestly: the registry is keyed by a runtime\n   * `kind` string, so which of the two shapes comes back is not knowable\n   * statically. Narrow the result with `isPodStore()`.\n   */\n  resolveAny(\n    descriptor: StoreDescriptor,\n    opts?: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n  ): AnyNoydbStore | Promise<AnyNoydbStore>\n}\n\n/**\n * Creates a fresh, empty `StoreLocator`.\n *\n * DUPLICATE REGISTRATION: `register()` throws if `kind` is already\n * registered, rather than silently overwriting it (last-wins). A\n * composition root that registers the same kind twice is almost always a\n * mistake — a copy-pasted setup block, two satellite packages fighting\n * over the same kind string — and last-wins would hide it behind whichever\n * registration happened to run last. This mirrors the\n * `DuplicateBehaviorNameError` philosophy (#947): fail loudly at the\n * mistake's source instead of silently at some unrelated `resolve()` call\n * later.\n */\nexport function createStoreLocator(): StoreLocator {\n  const factories = new Map<string, StoreFactory<AnyNoydbStore>>()\n\n  function lookup(kind: string): StoreFactory<AnyNoydbStore> {\n    const factory = factories.get(kind)\n    if (!factory) {\n      throw new UnknownStoreKindError(kind, [...factories.keys()].sort())\n    }\n    return factory\n  }\n\n  return {\n    register(kind, factory) {\n      if (factories.has(kind)) {\n        throw new DuplicateStoreKindError(kind)\n      }\n      factories.set(kind, factory)\n    },\n    resolve(descriptor, opts = {}) {\n      // The one place the seam's `resolve(): NoydbStore` signature is paid\n      // for. A pod-store `kind` really returns a `NoydbPodStore`; the registry\n      // is keyed by a runtime string so nothing here can prove otherwise.\n      // Concentrated in the module that owns the invariant rather than\n      // duplicated as `as unknown as StoreFactory` in every pod-store package\n      // (#988). `resolveAny()` is the honest signature over the same call.\n      return lookup(descriptor.kind)(descriptor, opts) as NoydbStore | Promise<NoydbStore>\n    },\n    resolveAny(descriptor, opts = {}) {\n      return lookup(descriptor.kind)(descriptor, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;AA4EO,SAAS,WAAW,OAA8C;AACvE,SAAQ,MAAwB,SAAS;AAC3C;AA8DO,SAAS,qBAAmC;AACjD,QAAM,YAAY,oBAAI,IAAyC;AAE/D,WAAS,OAAO,MAA2C;AACzD,UAAM,UAAU,UAAU,IAAI,IAAI;AAClC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,sBAAsB,MAAM,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,KAAK,CAAC;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,SAAS,MAAM,SAAS;AACtB,UAAI,UAAU,IAAI,IAAI,GAAG;AACvB,cAAM,IAAI,wBAAwB,IAAI;AAAA,MACxC;AACA,gBAAU,IAAI,MAAM,OAAO;AAAA,IAC7B;AAAA,IACA,QAAQ,YAAY,OAAO,CAAC,GAAG;AAO7B,aAAO,OAAO,WAAW,IAAI,EAAE,YAAY,IAAI;AAAA,IACjD;AAAA,IACA,WAAW,YAAY,OAAO,CAAC,GAAG;AAChC,aAAO,OAAO,WAAW,IAAI,EAAE,YAAY,IAAI;AAAA,IACjD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/port/to/locator.ts"],"sourcesContent":["/**\n * The Locator seam (#945 Task 1): a serializable, CREDENTIALLESS store\n * descriptor plus a factory registry that reconstructs a `NoydbStore` from\n * data.\n *\n * A `StoreDescriptor` is the pod-portable \"what store and where\" — kind,\n * broad topology class, and a kind-specific serializable address/options\n * bag. It is deliberately dumb data: no field on it is ever typed as a\n * function, a `StoreCredentialSource`, or a `StoreCredentials` value, so a\n * descriptor can be written into a pod / manifest / sync payload without an\n * audit for leaked secrets. Anything that must resolve device-side or\n * user-side — a short-lived credential, a device-local directory override,\n * a mounted drive handle — travels out-of-band via `resolve()`'s `opts`,\n * never through the descriptor itself.\n *\n * This module is pure TypeScript: no imports beyond the kernel's own types\n * and errors, no Node built-ins, no crypto. It adds zero runtime\n * dependencies to `@noy-db/hub/to`.\n */\nimport type { NoydbStore, NoydbPodStore, StoreCredentialSource } from '../../kernel/types.js'\nimport { DuplicateStoreKindError, UnknownStoreKindError } from '../../kernel/errors.js'\n\n/**\n * The broad topology bucket a store descriptor's kind falls into —\n * used by callers/UI to group or filter descriptors without knowing every\n * concrete `kind` string.\n */\nexport type StoreClass = 'local' | 'browser' | 'lan' | 'cloud'\n\n/**\n * A serializable, CREDENTIALLESS description of a store instance: enough\n * data to reconstruct a `NoydbStore` via a registered `StoreFactory`, and\n * safe to persist or transmit as-is.\n *\n * CREDENTIALLESS BY CONSTRUCTION: no field here may be typed as a function,\n * a `StoreCredentialSource`, or a `StoreCredentials` value. Credentials\n * NEVER ride the descriptor — they are supplied separately (as a\n * `StoreCredentialSource`) to `StoreLocator.resolve()` at resolve time.\n */\nexport interface StoreDescriptor {\n  /** The registered factory key (e.g. `'file'`, `'aws-s3'`, `'webdav'`). */\n  readonly kind: string\n  /** The broad topology bucket this kind falls into. */\n  readonly class: StoreClass\n  /** Kind-specific serializable location (e.g. `{ dir }`, `{ bucket, region }`). */\n  readonly address: unknown\n  /** Kind-specific serializable tuning options. */\n  readonly options?: unknown\n}\n\n/**\n * A kind-specific, device-local supplement to a `StoreDescriptor` — a\n * directory override, a mount point, a drive handle — that is resolved\n * device-side and never carried inside a pod alongside the descriptor.\n */\nexport type StoreBinding = unknown\n\n/**\n * Either store shape a factory may produce: the 6-method KV `NoydbStore`, or\n * the whole-vault `NoydbPodStore` implemented by `to-drive` / `to-icloud`.\n *\n * The two are DISJOINT, not sub/supertypes — a pod store has none of the six\n * KV methods — which is why moving between them needs a double cast and why\n * `isPodStore()` exists to narrow instead.\n */\nexport type AnyNoydbStore = NoydbStore | NoydbPodStore\n\n/**\n * Narrow an `AnyNoydbStore` to the pod shape. Discriminates on the\n * `kind: 'bundle'` tag `NoydbPodStore` carries for exactly this purpose; a\n * `NoydbStore` has no `kind` field at all.\n *\n * Use this at a `resolve()` boundary instead of casting — a store resolved\n * from a descriptor read out of a pod is only known to be one of the two\n * shapes at runtime.\n */\nexport function isPodStore(store: AnyNoydbStore): store is NoydbPodStore {\n  return (store as NoydbPodStore).kind === 'bundle'\n}\n\n/**\n * Reconstructs a live store from a `StoreDescriptor`. Registered against a\n * `StoreLocator` under the descriptor's `kind`.\n *\n * The type parameter says WHICH shape this factory builds. It defaults to\n * `NoydbStore`, so a bare `StoreFactory` means exactly what it always has;\n * a pod-store factory declares `StoreFactory<NoydbPodStore>` and registers\n * without a cast (#988).\n */\nexport type StoreFactory<S extends AnyNoydbStore = NoydbStore> = (\n  descriptor: StoreDescriptor,\n  opts: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n) => S | Promise<S>\n\n/** A registry of `StoreFactory`s, keyed by `StoreDescriptor.kind`. */\nexport interface StoreLocator {\n  /**\n   * Register a factory for `kind`. Throws if `kind` is already registered.\n   *\n   * Accepts a factory building EITHER store shape — `S` is inferred from the\n   * factory's own return type, so a `NoydbPodStore` factory needs no cast.\n   */\n  register<S extends AnyNoydbStore>(kind: string, factory: StoreFactory<S>): void\n  /**\n   * Resolve `descriptor` to a live store via its kind's registered factory.\n   *\n   * Returns `NoydbStore`. If the `kind` was registered with a pod-store\n   * factory, the resolved value is really a `NoydbPodStore`: this signature\n   * is the seam's remaining unsoundness, kept because widening it to\n   * `AnyNoydbStore` would break every existing caller. Where the descriptor's\n   * kind is not statically known, prefer `resolveAny()` and `isPodStore()`.\n   */\n  resolve(\n    descriptor: StoreDescriptor,\n    opts?: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n  ): NoydbStore | Promise<NoydbStore>\n  /**\n   * As `resolve()`, but typed honestly: the registry is keyed by a runtime\n   * `kind` string, so which of the two shapes comes back is not knowable\n   * statically. Narrow the result with `isPodStore()`.\n   */\n  resolveAny(\n    descriptor: StoreDescriptor,\n    opts?: { binding?: StoreBinding; credentials?: StoreCredentialSource },\n  ): AnyNoydbStore | Promise<AnyNoydbStore>\n}\n\n/**\n * Creates a fresh, empty `StoreLocator`.\n *\n * DUPLICATE REGISTRATION: `register()` throws if `kind` is already\n * registered, rather than silently overwriting it (last-wins). A\n * composition root that registers the same kind twice is almost always a\n * mistake — a copy-pasted setup block, two satellite packages fighting\n * over the same kind string — and last-wins would hide it behind whichever\n * registration happened to run last. This mirrors the\n * `DuplicateBehaviorNameError` philosophy (#947): fail loudly at the\n * mistake's source instead of silently at some unrelated `resolve()` call\n * later.\n */\nexport function createStoreLocator(): StoreLocator {\n  const factories = new Map<string, StoreFactory<AnyNoydbStore>>()\n\n  function lookup(kind: string): StoreFactory<AnyNoydbStore> {\n    const factory = factories.get(kind)\n    if (!factory) {\n      throw new UnknownStoreKindError(kind, [...factories.keys()].sort())\n    }\n    return factory\n  }\n\n  return {\n    register(kind, factory) {\n      if (factories.has(kind)) {\n        throw new DuplicateStoreKindError(kind)\n      }\n      factories.set(kind, factory)\n    },\n    resolve(descriptor, opts = {}) {\n      // The one place the seam's `resolve(): NoydbStore` signature is paid\n      // for. A pod-store `kind` really returns a `NoydbPodStore`; the registry\n      // is keyed by a runtime string so nothing here can prove otherwise.\n      // Concentrated in the module that owns the invariant rather than\n      // duplicated as `as unknown as StoreFactory` in every pod-store package\n      // (#988). `resolveAny()` is the honest signature over the same call.\n      return lookup(descriptor.kind)(descriptor, opts) as NoydbStore | Promise<NoydbStore>\n    },\n    resolveAny(descriptor, opts = {}) {\n      return lookup(descriptor.kind)(descriptor, opts)\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA4EO,SAAS,WAAW,OAA8C;AACvE,SAAQ,MAAwB,SAAS;AAC3C;AA8DO,SAAS,qBAAmC;AACjD,QAAM,YAAY,oBAAI,IAAyC;AAE/D,WAAS,OAAO,MAA2C;AACzD,UAAM,UAAU,UAAU,IAAI,IAAI;AAClC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,sBAAsB,MAAM,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,KAAK,CAAC;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,SAAS,MAAM,SAAS;AACtB,UAAI,UAAU,IAAI,IAAI,GAAG;AACvB,cAAM,IAAI,wBAAwB,IAAI;AAAA,MACxC;AACA,gBAAU,IAAI,MAAM,OAAO;AAAA,IAC7B;AAAA,IACA,QAAQ,YAAY,OAAO,CAAC,GAAG;AAO7B,aAAO,OAAO,WAAW,IAAI,EAAE,YAAY,IAAI;AAAA,IACjD;AAAA,IACA,WAAW,YAAY,OAAO,CAAC,GAAG;AAChC,aAAO,OAAO,WAAW,IAAI,EAAE,YAAY,IAAI;AAAA,IACjD;AAAA,EACF;AACF;","names":[]}

package/dist/vault-head/index.js

@@ -6,10 +6,10 @@ import {
 import {
   buildRecordAad,
   openEnvelopeJson
-} from "../chunk-2LPVI4PX.js";
+} from "../chunk-7BUFWUX2.js";
 import {
   buildRecordEnvelope
-} from "../chunk-N4CNVSUF.js";
+} from "../chunk-QUUWGF6T.js";
 import "../chunk-FOG7YEJP.js";
 import "../chunk-KDJGJR7F.js";
 import "../chunk-LKFKXS5K.js";
@@ -17,7 +17,7 @@ import "../chunk-LP7BEXCT.js";
 import {
   encrypt
 } from "../chunk-W5LHQXZU.js";
-import "../chunk-RK7N4OQ5.js";
+import "../chunk-WO7YGWEG.js";
 import "../chunk-JBIV4FLR.js";
 import "../chunk-PZ5AY32C.js";
 

package/dist/{walk-JNEOYCAU.js → walk-FJH2777J.js}

@@ -1,21 +1,21 @@
 import {
   dumpVaultSchema
-} from "./chunk-HM4JSXX2.js";
+} from "./chunk-OYAF2WV3.js";
 import "./chunk-KHKKD62N.js";
 import "./chunk-P6ASQOZR.js";
 import "./chunk-Y2NBBT6K.js";
-import "./chunk-YXA2TCTZ.js";
-import "./chunk-2LPVI4PX.js";
-import "./chunk-N4CNVSUF.js";
+import "./chunk-KL2UUIDX.js";
+import "./chunk-7BUFWUX2.js";
+import "./chunk-QUUWGF6T.js";
 import "./chunk-FOG7YEJP.js";
 import "./chunk-KDJGJR7F.js";
 import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-W5LHQXZU.js";
-import "./chunk-RK7N4OQ5.js";
+import "./chunk-WO7YGWEG.js";
 import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
   dumpVaultSchema
 };
-//# sourceMappingURL=walk-JNEOYCAU.js.map
+//# sourceMappingURL=walk-FJH2777J.js.map

package/dist/with-cargo/index.d.ts

@@ -22,6 +22,7 @@ export type { DeedMarker } from '../with-party/team/deed.js';
 export type { NoydbSealer } from '../with-party/team/managed-secret.js';
 export { diffVault } from './vault-diff.js';
 export { STATE_VAULT_NAME } from '../kernel/constants.js';
+export { NOYDB_ENVELOPE_GENERATION } from '../kernel/types.js';
 export { withCargo } from './active.js';
 export { NO_CARGO } from './strategy.js';
 export type { CargoStrategy } from './strategy.js';

package/dist/{withdraw-accessible-ILTSXTIE.js → withdraw-accessible-TB7HL3W2.js}

@@ -4,18 +4,18 @@ import {
   freezeSnapshotOnly,
   randomId,
   withdrawAccessibleData
-} from "./chunk-H7HP56F6.js";
-import "./chunk-DKWPJOYH.js";
-import "./chunk-6FOGTKBY.js";
-import "./chunk-LF6DMX4C.js";
-import "./chunk-2LPVI4PX.js";
-import "./chunk-N4CNVSUF.js";
+} from "./chunk-RJGOYXU5.js";
+import "./chunk-LYI6NCN7.js";
+import "./chunk-DEZZ6XLD.js";
+import "./chunk-LA6APPYL.js";
+import "./chunk-7BUFWUX2.js";
+import "./chunk-QUUWGF6T.js";
 import "./chunk-FOG7YEJP.js";
 import "./chunk-KDJGJR7F.js";
 import "./chunk-LKFKXS5K.js";
 import "./chunk-LP7BEXCT.js";
 import "./chunk-W5LHQXZU.js";
-import "./chunk-RK7N4OQ5.js";
+import "./chunk-WO7YGWEG.js";
 import "./chunk-JBIV4FLR.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -25,4 +25,4 @@ export {
   randomId,
   withdrawAccessibleData
 };
-//# sourceMappingURL=withdraw-accessible-ILTSXTIE.js.map
+//# sourceMappingURL=withdraw-accessible-TB7HL3W2.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.7.0-pre.2",
+  "version": "0.7.0-pre.3",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -233,14 +233,14 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.7.0-pre.2"
+    "@noy-db/attestation": "0.7.0-pre.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^4.0.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.7.0-pre.2"
+    "@noy-db/on-shamir": "0.7.0-pre.3"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"