@noy-db/hub 0.7.0-pre.7 → 0.7.0-pre.9

package/dist/introspection/index.js

@@ -1,25 +1,25 @@
 import "../chunk-UBSFPGVJ.js";
 import {
   dumpVaultSchema
-} from "../chunk-XWNLKG6R.js";
+} from "../chunk-PCIBCL26.js";
 import {
   applyListProjection
 } from "../chunk-VG2ZSFYD.js";
 import {
   jsonSchemaToFields
 } from "../chunk-KHKKD62N.js";
-import "../chunk-P6ASQOZR.js";
+import "../chunk-VT4DTCK5.js";
 import "../chunk-Y2NBBT6K.js";
-import "../chunk-626TSARM.js";
-import "../chunk-BYBB4ABD.js";
-import "../chunk-QU3YUP2X.js";
-import "../chunk-FOG7YEJP.js";
-import "../chunk-KDJGJR7F.js";
-import "../chunk-LKFKXS5K.js";
+import "../chunk-I5LSKXT6.js";
+import "../chunk-DOPZWTMJ.js";
+import "../chunk-4RUFYGWG.js";
+import "../chunk-XGXVPCYW.js";
+import "../chunk-CWFH36SI.js";
+import "../chunk-KZTPL7NL.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-W5LHQXZU.js";
-import "../chunk-GU3LQYW2.js";
-import "../chunk-JBIV4FLR.js";
+import "../chunk-USKHHOIV.js";
+import "../chunk-N4CHCXDL.js";
+import "../chunk-SW4TOSJL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   applyListProjection,

package/dist/issue-64N6OG7U.js

@@ -0,0 +1,19 @@
+import {
+  issueAttestationCore
+} from "./chunk-LUVGSKXE.js";
+import "./chunk-GKOJR53Y.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-DOPZWTMJ.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-XGXVPCYW.js";
+import "./chunk-CWFH36SI.js";
+import "./chunk-KZTPL7NL.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-USKHHOIV.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-SW4TOSJL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  issueAttestationCore
+};
+//# sourceMappingURL=issue-64N6OG7U.js.map

package/dist/kernel/errors.d.ts

@@ -236,6 +236,23 @@ export type KeyringTamperedReason = 'canary-missing' | 'roster-key-missing' | 'r
  * rewrites the plaintext version field changes the wording and nothing else.
  */
  | 'format-superseded'
+/**
+ * The caller supplied an expected roster epoch and the file carries NONE
+ * (#1097). Distinct from `roster-epoch-rewound`, and the distinction is the
+ * point: this is what a replay of a PRE-EPOCH file looks like. Reporting it
+ * as a rewind would name an attack that may not have happened; collapsing it
+ * into "fine" would accept exactly the replay the epoch exists to refuse.
+ * Absence is UNKNOWN, never zero.
+ */
+ | 'roster-epoch-absent'
+/**
+ * The file's roster epoch is OLDER than the floor the caller obtained out of
+ * band (#1097) — a rewound roster, re-served by a store that kept a copy.
+ * The one reason in this union a store cannot produce by editing: the epoch
+ * is bound into `rosterCanonical`, so a rewound value arrives only on a file
+ * that genuinely carried it.
+ */
+ | 'roster-epoch-rewound'
 /**
  * The file did not parse at all (#1121). Never thrown by
  * `assertRosterAuthenticated` — which cannot reach a file it could not read —

package/dist/kernel/types.d.ts

@@ -985,6 +985,33 @@ export interface KeyringFile {
      * in the normal committed state.
      */
     readonly pending_deks?: Record<string, string>;
+    /**
+     * Monotonic roster epoch (#1097).
+     *
+     * Bumped on every roster write and bound into `rosterCanonical`, so a store
+     * can neither edit nor strip it. It exists because a roster tag authenticates
+     * the roster's CONTENTS and makes no claim about being CURRENT: there is no
+     * role-change API, so narrowing a user's standing means calling `grant` again
+     * with a lower role, and that write overwrites in place. The previous,
+     * broader file was legitimately minted by this vault — so a store that kept a
+     * copy can re-serve it, the KEK unwraps, the canary checks out, the tag
+     * verifies, and the replayed file restores the OLD ROLE, usably.
+     *
+     * The epoch alone does not close that: a rewound file carries a rewound
+     * epoch, and the store controls both. It becomes an anchor only when compared
+     * against a value that reached the reader by a SECOND CHANNEL the store does
+     * not carry — an invite, a provisioning step. Hub owns the epoch and the
+     * comparison; who carries the expectation is deliberately the consumer's
+     * problem, because hub cannot know which channel a deployment trusts.
+     *
+     * OPTIONAL, and absent on every keyring written before this existed. Absence
+     * is **UNKNOWN, never zero** (see `assertRosterEpochCurrent`). Binding it
+     * conditionally is what keeps this additive: `stable()` drops `undefined`, so
+     * a file without an epoch canonicalises exactly as before and its existing
+     * tag still verifies. Binding it unconditionally would have failed every
+     * pre-existing keyring's tag and rendered every existing vault unopenable.
+     */
+    readonly roster_epoch?: number;
     readonly salt: string;
     readonly created_at: string;
     readonly granted_by: string;

package/dist/{ledger-4X5ZH43X.js → ledger-ZAFULLAF.js}

@@ -3,7 +3,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-UPJMBMCR.js";
+} from "./chunk-OKCQNMO6.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -15,16 +15,16 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-WLFABTZ6.js";
-import "./chunk-BYBB4ABD.js";
-import "./chunk-QU3YUP2X.js";
-import "./chunk-FOG7YEJP.js";
-import "./chunk-KDJGJR7F.js";
-import "./chunk-LKFKXS5K.js";
+} from "./chunk-JRWLUWDM.js";
+import "./chunk-DOPZWTMJ.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-XGXVPCYW.js";
+import "./chunk-CWFH36SI.js";
+import "./chunk-KZTPL7NL.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-W5LHQXZU.js";
-import "./chunk-GU3LQYW2.js";
-import "./chunk-JBIV4FLR.js";
+import "./chunk-USKHHOIV.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-SW4TOSJL.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LEDGER_COLLECTION,
@@ -39,4 +39,4 @@ export {
   parseIndex,
   sha256Hex
 };
-//# sourceMappingURL=ledger-4X5ZH43X.js.map
+//# sourceMappingURL=ledger-ZAFULLAF.js.map

package/dist/liberate-XL6NSGOL.js

@@ -0,0 +1,25 @@
+import {
+  liberateVault
+} from "./chunk-HLFLJCDX.js";
+import "./chunk-5EC7X5QA.js";
+import "./chunk-P22XPNFW.js";
+import "./chunk-JUBWUJY5.js";
+import "./chunk-RCONOOVF.js";
+import "./chunk-NMDMSHBF.js";
+import "./chunk-OHGCRKWA.js";
+import "./chunk-MV2OEK3K.js";
+import "./chunk-IZTU6RKH.js";
+import "./chunk-DOPZWTMJ.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-XGXVPCYW.js";
+import "./chunk-CWFH36SI.js";
+import "./chunk-KZTPL7NL.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-USKHHOIV.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-SW4TOSJL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  liberateVault
+};
+//# sourceMappingURL=liberate-XL6NSGOL.js.map

package/dist/{link-set-WHTYVTOV.js → link-set-LQI2IJX6.js}

@@ -1,23 +1,23 @@
 import {
   LinkEndpointError,
   LinkSet
-} from "./chunk-BOFRKAUS.js";
+} from "./chunk-Q2OAAREU.js";
 import {
   LINK_COLLECTION_PREFIX,
   LinkIntegrityError,
   isLinkCollectionName,
   linkCollectionName,
   linkRowKey
-} from "./chunk-WLLUM35R.js";
-import "./chunk-BYBB4ABD.js";
-import "./chunk-QU3YUP2X.js";
-import "./chunk-FOG7YEJP.js";
-import "./chunk-KDJGJR7F.js";
-import "./chunk-LKFKXS5K.js";
+} from "./chunk-KQIDBIZL.js";
+import "./chunk-DOPZWTMJ.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-XGXVPCYW.js";
+import "./chunk-CWFH36SI.js";
+import "./chunk-KZTPL7NL.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-W5LHQXZU.js";
-import "./chunk-GU3LQYW2.js";
-import "./chunk-JBIV4FLR.js";
+import "./chunk-USKHHOIV.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-SW4TOSJL.js";
 import "./chunk-PZ5AY32C.js";
 export {
   LINK_COLLECTION_PREFIX,
@@ -28,4 +28,4 @@ export {
   linkCollectionName,
   linkRowKey
 };
-//# sourceMappingURL=link-set-WHTYVTOV.js.map
+//# sourceMappingURL=link-set-LQI2IJX6.js.map

package/dist/{managed-secret-CXALLEUB.js → managed-secret-7OH7HKXV.js}

@@ -9,16 +9,16 @@ import {
   resolveManagedSecret,
   saveSealedSecret,
   sealRsaOaepTlv
-} from "./chunk-2QNKXGUS.js";
-import "./chunk-BYBB4ABD.js";
-import "./chunk-QU3YUP2X.js";
-import "./chunk-FOG7YEJP.js";
-import "./chunk-KDJGJR7F.js";
-import "./chunk-LKFKXS5K.js";
+} from "./chunk-JUBWUJY5.js";
+import "./chunk-DOPZWTMJ.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-XGXVPCYW.js";
+import "./chunk-CWFH36SI.js";
+import "./chunk-KZTPL7NL.js";
 import "./chunk-LP7BEXCT.js";
-import "./chunk-W5LHQXZU.js";
-import "./chunk-GU3LQYW2.js";
-import "./chunk-JBIV4FLR.js";
+import "./chunk-USKHHOIV.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-SW4TOSJL.js";
 import "./chunk-PZ5AY32C.js";
 export {
   MemoryRecipientSealer,
@@ -32,4 +32,4 @@ export {
   saveSealedSecret,
   sealRsaOaepTlv
 };
-//# sourceMappingURL=managed-secret-CXALLEUB.js.map
+//# sourceMappingURL=managed-secret-7OH7HKXV.js.map

package/dist/materialized-views/index.js

@@ -1,48 +1,48 @@
 import {
   withMaterializedView
-} from "../chunk-PUJTKLPL.js";
+} from "../chunk-UL7TLJ54.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-XLPXGN66.js";
+} from "../chunk-3SWP2FYA.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-4ZPE6SKS.js";
+} from "../chunk-75WNTBZL.js";
 import {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-EXDIHWFO.js";
-import "../chunk-TOV6VMHF.js";
-import "../chunk-VVAVTSTR.js";
+} from "../chunk-MENI33ZV.js";
+import "../chunk-U3RMWOXY.js";
+import "../chunk-FRIVOR5N.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-XSN63FUS.js";
-import "../chunk-4G25SDQL.js";
+import "../chunk-AW4KTQA4.js";
+import "../chunk-4U52PMEL.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-ATL3ZVXT.js";
 import "../chunk-NSITFOCJ.js";
-import "../chunk-XBFEKTIY.js";
-import "../chunk-X67FCULK.js";
-import "../chunk-XDVVBETV.js";
-import "../chunk-WLFABTZ6.js";
-import "../chunk-BYBB4ABD.js";
-import "../chunk-QU3YUP2X.js";
-import "../chunk-FOG7YEJP.js";
-import "../chunk-KDJGJR7F.js";
-import "../chunk-LKFKXS5K.js";
+import "../chunk-TQGT5BZE.js";
+import "../chunk-DIVY2CJZ.js";
+import "../chunk-YHIAWECL.js";
+import "../chunk-JRWLUWDM.js";
+import "../chunk-DOPZWTMJ.js";
+import "../chunk-4RUFYGWG.js";
+import "../chunk-XGXVPCYW.js";
+import "../chunk-CWFH36SI.js";
+import "../chunk-KZTPL7NL.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-W5LHQXZU.js";
-import "../chunk-GU3LQYW2.js";
+import "../chunk-USKHHOIV.js";
+import "../chunk-N4CHCXDL.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-JBIV4FLR.js";
+} from "../chunk-SW4TOSJL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MaterializedViewConfigError,

package/dist/{migrate-cek-LBRKYUZZ.js → migrate-cek-QHZ75E6E.js}

@@ -1,6 +1,6 @@
 import {
   SatelliteConfigError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-SW4TOSJL.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/with-shape/satellites/migrate-cek.ts
@@ -16,4 +16,4 @@ async function migrateSatelliteCek(name, coll) {
 export {
   migrateSatelliteCek
 };
-//# sourceMappingURL=migrate-cek-LBRKYUZZ.js.map
+//# sourceMappingURL=migrate-cek-QHZ75E6E.js.map

package/dist/money/index.js

@@ -4,7 +4,7 @@ import {
   isMoneyString,
   moneyNumber,
   mulRate
-} from "../chunk-Z2PWOSCJ.js";
+} from "../chunk-DNMTN46H.js";
 import {
   MoneyCurrencyError,
   MoneyPrecisionError,
@@ -13,10 +13,10 @@ import {
   isMoneyDescriptor,
   money,
   scaleForCurrency
-} from "../chunk-TOV6VMHF.js";
+} from "../chunk-U3RMWOXY.js";
 import "../chunk-NSITFOCJ.js";
-import "../chunk-XDVVBETV.js";
-import "../chunk-JBIV4FLR.js";
+import "../chunk-YHIAWECL.js";
+import "../chunk-SW4TOSJL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MoneyCurrencyError,

package/dist/noydb-SWUGPFBK.js

@@ -0,0 +1,86 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-6L5IMNJX.js";
+import "./chunk-J6FXVDKC.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-KQIDBIZL.js";
+import "./chunk-JY4U6CYV.js";
+import "./chunk-GM4IM7TC.js";
+import "./chunk-QJLOWGOU.js";
+import "./chunk-GYGLAVCX.js";
+import "./chunk-6LJY7X5A.js";
+import "./chunk-FLRLZ4XZ.js";
+import "./chunk-P2RJAVMR.js";
+import "./chunk-5NKHCJU5.js";
+import "./chunk-UTFY6W6X.js";
+import "./chunk-FKQCC4C5.js";
+import "./chunk-JUBWUJY5.js";
+import "./chunk-GHADG5QZ.js";
+import "./chunk-KHKKD62N.js";
+import "./chunk-VT4DTCK5.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-I5LSKXT6.js";
+import "./chunk-H5GVPOB4.js";
+import "./chunk-K432FT7T.js";
+import "./chunk-XJP66QEN.js";
+import "./chunk-FRIVOR5N.js";
+import "./chunk-FYT3DXPN.js";
+import "./chunk-T7IR4N2S.js";
+import "./chunk-PEOZ34EM.js";
+import "./chunk-SWFIXQF5.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-Q2ZN5DWZ.js";
+import "./chunk-SMY5X46Z.js";
+import "./chunk-DZFQVICS.js";
+import "./chunk-RPX2H2OL.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-IAHDSFFA.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-P7KJME6C.js";
+import "./chunk-LAI7ENPW.js";
+import "./chunk-AW4KTQA4.js";
+import "./chunk-IS5LFHV2.js";
+import "./chunk-HS3LEVT4.js";
+import "./chunk-ZB2K3FV7.js";
+import "./chunk-I3ISCYT7.js";
+import "./chunk-NO272T7Q.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-YMUFFJCO.js";
+import "./chunk-ATL3ZVXT.js";
+import "./chunk-NSITFOCJ.js";
+import "./chunk-PVEWA2DU.js";
+import "./chunk-JFSUYGNE.js";
+import "./chunk-TQGT5BZE.js";
+import "./chunk-DIVY2CJZ.js";
+import "./chunk-YHIAWECL.js";
+import "./chunk-VTTDPGEK.js";
+import "./chunk-5UKIZIO3.js";
+import "./chunk-OHGCRKWA.js";
+import "./chunk-MV2OEK3K.js";
+import "./chunk-DZPMKY3J.js";
+import "./chunk-PV7XXAXK.js";
+import "./chunk-VKQCVU2Z.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-TAJZ7GXO.js";
+import "./chunk-OKCQNMO6.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-JRWLUWDM.js";
+import "./chunk-IZTU6RKH.js";
+import "./chunk-HK67PX4J.js";
+import "./chunk-HOIWW2LV.js";
+import "./chunk-DOPZWTMJ.js";
+import "./chunk-4RUFYGWG.js";
+import "./chunk-XGXVPCYW.js";
+import "./chunk-CWFH36SI.js";
+import "./chunk-KZTPL7NL.js";
+import "./chunk-LP7BEXCT.js";
+import "./chunk-USKHHOIV.js";
+import "./chunk-N4CHCXDL.js";
+import "./chunk-SW4TOSJL.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-SWUGPFBK.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-OPXR4PB2.js";
+} from "../chunk-XKA6UH5V.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-5ACAVJUI.js";
+} from "../chunk-MTTPHBIE.js";
 import {
   OverlayedCollection
-} from "../chunk-3QARDAYW.js";
+} from "../chunk-FYT3DXPN.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-JBIV4FLR.js";
+} from "../chunk-SW4TOSJL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OverlayBaseIsVirtualError,

package/dist/periods/index.js

@@ -11,7 +11,7 @@ import {
   samePartition,
   validatePeriodName,
   withPeriods
-} from "../chunk-6NRVFD55.js";
+} from "../chunk-SWFIXQF5.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -20,19 +20,19 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-Z7ZXZL6Y.js";
-import "../chunk-UPJMBMCR.js";
+} from "../chunk-Q2ZN5DWZ.js";
+import "../chunk-OKCQNMO6.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-WLFABTZ6.js";
-import "../chunk-BYBB4ABD.js";
-import "../chunk-QU3YUP2X.js";
-import "../chunk-FOG7YEJP.js";
-import "../chunk-KDJGJR7F.js";
-import "../chunk-LKFKXS5K.js";
+import "../chunk-JRWLUWDM.js";
+import "../chunk-DOPZWTMJ.js";
+import "../chunk-4RUFYGWG.js";
+import "../chunk-XGXVPCYW.js";
+import "../chunk-CWFH36SI.js";
+import "../chunk-KZTPL7NL.js";
 import "../chunk-LP7BEXCT.js";
-import "../chunk-W5LHQXZU.js";
-import "../chunk-GU3LQYW2.js";
-import "../chunk-JBIV4FLR.js";
+import "../chunk-USKHHOIV.js";
+import "../chunk-N4CHCXDL.js";
+import "../chunk-SW4TOSJL.js";
 import "../chunk-PZ5AY32C.js";
 export {
   NO_PERIODS,