@noy-db/hub 0.7.0-pre.7 → 0.7.0-pre.9

package/dist/{chunk-ZTYG36DH.js → chunk-OHGCRKWA.js}

@@ -5,18 +5,18 @@ import {
   readDirectoryConfig,
   readUserVisibility,
   saveUserEnvelope
-} from "./chunk-26W5VETY.js";
+} from "./chunk-MV2OEK3K.js";
 import {
   parseDekKey
-} from "./chunk-POS53FG6.js";
+} from "./chunk-IZTU6RKH.js";
 import {
   envelopeOpensUnderAny,
   rekeyBlobSet,
   rekeyEnvelopeIfNeeded
-} from "./chunk-BYBB4ABD.js";
+} from "./chunk-DOPZWTMJ.js";
 import {
   buildRecordEnvelope
-} from "./chunk-QU3YUP2X.js";
+} from "./chunk-4RUFYGWG.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -31,10 +31,10 @@ import {
   generateSalt,
   unwrapKey,
   wrapKey
-} from "./chunk-W5LHQXZU.js";
+} from "./chunk-USKHHOIV.js";
 import {
   NOYDB_KEYRING_VERSION
-} from "./chunk-GU3LQYW2.js";
+} from "./chunk-N4CHCXDL.js";
 import {
   BLOB_ADDRESS_KEY_ID,
   DirectoryDisabledError,
@@ -51,7 +51,12 @@ import {
   USER_ENVELOPE_COLLECTION,
   ValidationError,
   WrongPromptError
-} from "./chunk-JBIV4FLR.js";
+} from "./chunk-SW4TOSJL.js";
+
+// src/with-party/team/roster-epoch.ts
+function nextRosterEpoch(current) {
+  return Number.isFinite(current) ? current + 1 : 1;
+}
 
 // src/with-party/team/roster-tag.ts
 function stable(value) {
@@ -89,7 +94,24 @@ function rosterCanonical(file) {
     pending_dek_slots: Object.keys(file.pending_deks ?? {}).sort(),
     expires_at: file.expires_at ?? null,
     export_capability: file.export_capability ?? null,
-    import_capability: file.import_capability ?? null
+    import_capability: file.import_capability ?? null,
+    // #1097 — the roster epoch, bound ONLY WHEN PRESENT.
+    //
+    // The conditional spread is the entire backward-compatibility story, not a
+    // style choice. `stable()` drops `undefined`, so a file written before the
+    // epoch existed produces the byte-identical canonical string it always did
+    // and its roster tag still verifies. Writing `file.roster_epoch ?? null` —
+    // the shape every other optional field above uses — would have changed that
+    // string for every existing keyring, failed every existing tag, and
+    // rendered every existing vault unopenable. #1115 took exactly that cost
+    // deliberately; there is no reason to take it again for a field that can be
+    // additive.
+    //
+    // A PRESENT epoch is authenticated: stripping it changes the canonical and
+    // the tag stops verifying, so a store cannot downgrade a file to the
+    // no-epoch shape. It can only replay a file that genuinely never had one,
+    // which is why absence must read as UNKNOWN rather than as zero.
+    ...file.roster_epoch !== void 0 ? { roster_epoch: file.roster_epoch } : {}
   });
 }
 async function mintRosterTag(file, rosterKey) {
@@ -531,13 +553,14 @@ async function createOwnerKeyring(store, vault, opts) {
       [BLOB_ADDRESS_KEY_ID]: wrappedBlobAddressKey
     }
   };
+  const withEpoch = { ...authorityWithDeks, roster_epoch: nextRosterEpoch(void 0) };
   const keyringFile = {
     _noydb_keyring: NOYDB_KEYRING_VERSION,
-    ...authorityWithDeks,
+    ...withEpoch,
     salt: bufferToBase64(salt),
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
     canary,
-    roster_tag: await mintRosterTag(authorityWithDeks, rosterKey),
+    roster_tag: await mintRosterTag(withEpoch, rosterKey),
     // The presence of this block is what makes the keyring an echo keyring —
     // `deriveKekForKeyring` reads it to refuse a single-string unlock (AG-1).
     ...typeof secret !== "string" ? {
@@ -637,15 +660,16 @@ async function grant(store, vault, callerKeyring, options) {
     ...options.importCapability !== void 0 && { import_capability: options.importCapability }
   };
   const authorityWithDeks = { ...authority, deks: wrappedDeks };
+  const withEpoch = { ...authorityWithDeks, roster_epoch: nextRosterEpoch(previousGrantFound?.file.roster_epoch) };
   const keyringFile = {
     _noydb_keyring: NOYDB_KEYRING_VERSION,
-    ...authorityWithDeks,
+    ...withEpoch,
     salt: bufferToBase64(newSalt),
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
     canary,
     // The grantee's own copy of the roster key rode in via the `_`-prefix
     // propagation loop above, so they can verify this tag on first unlock.
-    roster_tag: await mintRosterTag(authorityWithDeks, callerRosterKey)
+    roster_tag: await mintRosterTag(withEpoch, callerRosterKey)
   };
   await writeKeyringFile(store, vault, options.userId, keyringFile);
   if (previousDekNames !== null && options.userId !== callerKeyring.userId) {
@@ -873,7 +897,8 @@ async function updateKeyringIdentity(store, vault, callerKeyring, options) {
     },
     ...options.permissions !== void 0 && { permissions: options.permissions }
   };
-  const next = { ...edited, roster_tag: await mintRosterTag(edited, rosterKey) };
+  const withEpoch = { ...edited, roster_epoch: nextRosterEpoch(target.roster_epoch) };
+  const next = { ...withEpoch, roster_tag: await mintRosterTag(withEpoch, rosterKey) };
   await writeKeyringFile(store, vault, options.userId, next);
 }
 var HISTORY_COLLECTION = "_history";
@@ -1011,9 +1036,10 @@ async function rotateKeys(store, vault, callerKeyring, opts) {
       deks: updatedDeks,
       permissions: updatedPermissions
     };
+    const withEpoch = { ...edited, roster_epoch: nextRosterEpoch(userKeyringFile.roster_epoch) };
     const updatedKeyring = {
-      ...edited,
-      roster_tag: await mintRosterTag(edited, callerRosterKey)
+      ...withEpoch,
+      roster_tag: await mintRosterTag(withEpoch, callerRosterKey)
     };
     await writeKeyringFile(store, vault, userId, updatedKeyring);
   }
@@ -1050,13 +1076,14 @@ async function changeSecret(store, vault, keyring, opts) {
     ...existingAuthority?.import_capability !== void 0 && { import_capability: existingAuthority.import_capability }
   };
   const authorityWithDeks = { ...authority, deks: wrappedDeks };
+  const withEpoch = { ...authorityWithDeks, roster_epoch: nextRosterEpoch(existingAuthority?.roster_epoch) };
   const keyringFile = {
     _noydb_keyring: NOYDB_KEYRING_VERSION,
-    ...authorityWithDeks,
+    ...withEpoch,
     salt: bufferToBase64(newSalt),
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
     canary,
-    roster_tag: await mintRosterTag(authorityWithDeks, rosterKey)
+    roster_tag: await mintRosterTag(withEpoch, rosterKey)
   };
   await writeKeyringFile(store, vault, keyring.userId, keyringFile);
   return {
@@ -1124,15 +1151,16 @@ async function buildRecipientKeyringFile(callerKeyring, recipient) {
     ...recipient.expiresAt !== void 0 ? { expires_at: recipient.expiresAt } : {}
   };
   const authorityWithDeks = { ...authority, deks: wrappedDeks };
+  const withEpoch = { ...authorityWithDeks, roster_epoch: nextRosterEpoch(void 0) };
   return {
     _noydb_keyring: NOYDB_KEYRING_VERSION,
-    ...authorityWithDeks,
+    ...withEpoch,
     salt: bufferToBase64(newSalt),
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
     canary,
     // The recipient's copy of the roster key rode in via the `_`-prefix
     // propagation loop above, so the slot verifies on first unlock.
-    roster_tag: await mintRosterTag(authorityWithDeks, rosterKey),
+    roster_tag: await mintRosterTag(withEpoch, rosterKey),
     // The presence of this block is what makes the recipient's slot an
     // echo keyring — mirrors `createOwnerKeyring`'s same dance so the
     // ceremony (prompt → echo → key) travels with the pod, not just a
@@ -1291,13 +1319,14 @@ async function persistKeyring(store, vault, keyring) {
     deks: wrappedDeks,
     ...Object.keys(wrappedPending).length > 0 ? { pending_deks: wrappedPending } : {}
   };
+  const withEpoch = { ...authorityWithDeks, roster_epoch: nextRosterEpoch(existingFound?.file.roster_epoch) };
   const keyringFile = {
     _noydb_keyring: NOYDB_KEYRING_VERSION,
-    ...authorityWithDeks,
+    ...withEpoch,
     salt: bufferToBase64(keyring.salt),
     created_at: existingCreatedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
     canary,
-    roster_tag: await mintRosterTag(authorityWithDeks, rosterKey),
+    roster_tag: await mintRosterTag(withEpoch, rosterKey),
     ...keyring.authenticators.length > 0 && { authenticators: keyring.authenticators },
     ...keyring.policy !== void 0 && { policy: keyring.policy },
     ...existingEcho !== void 0 && { echo: existingEcho }
@@ -1342,6 +1371,11 @@ function resolvePermissions(role, explicit) {
   return explicit ?? {};
 }
 async function writeKeyringFile(store, vault, userId, keyringFile) {
+  if (keyringFile.roster_epoch === void 0) {
+    throw new Error(
+      `writeKeyringFile: refusing to write a keyring for "${userId}" with no roster_epoch (#1097). Stamp it with nextRosterEpoch(previous) onto the authority object BEFORE minting the roster tag, so it is covered by rosterCanonical.`
+    );
+  }
   const envelope = buildRecordEnvelope(
     { collection: "_keyring", id: userId, version: 1 },
     { iv: "", data: JSON.stringify(keyringFile) }
@@ -1350,6 +1384,7 @@ async function writeKeyringFile(store, vault, userId, keyringFile) {
 }
 
 export {
+  nextRosterEpoch,
   mintRosterTag,
   assertRosterAuthenticated,
   assertRosterTagValid,
@@ -1395,4 +1430,4 @@ export {
   hasImportCapability,
   evaluateImportCapability
 };
-//# sourceMappingURL=chunk-ZTYG36DH.js.map
+//# sourceMappingURL=chunk-OHGCRKWA.js.map