@noy-db/hub 0.8.0-pre.0 → 0.9.0-pre.0

package/dist/noydb-F2AUF6KL.js

@@ -0,0 +1,98 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-FSQNGPHH.js";
+import "./chunk-EPFF7LOX.js";
+import "./chunk-UAKY6E4N.js";
+import "./chunk-WFWFXDNS.js";
+import "./chunk-SFCD6OU7.js";
+import "./chunk-BMHQHH7Q.js";
+import "./chunk-5HNW4ZTA.js";
+import "./chunk-PFCTSXHU.js";
+import "./chunk-6LJY7X5A.js";
+import "./chunk-Z3ZXVB2Y.js";
+import "./chunk-OK57EATL.js";
+import "./chunk-QGSNJD3B.js";
+import "./chunk-XKBTJGFP.js";
+import "./chunk-UNSQZSZP.js";
+import "./chunk-RWFQVNXR.js";
+import "./chunk-RXLYKVTF.js";
+import "./chunk-GOJQ5DZA.js";
+import "./chunk-ZMVSKYTJ.js";
+import "./chunk-TFMM5DBB.js";
+import "./chunk-YKGJ44Z7.js";
+import "./chunk-K673OO6B.js";
+import "./chunk-QJNAHPVT.js";
+import "./chunk-VYYM3MEN.js";
+import "./chunk-J4KAPKBJ.js";
+import "./chunk-Y2NBBT6K.js";
+import "./chunk-H3YM66EI.js";
+import "./chunk-CAD7N6HQ.js";
+import "./chunk-GETUTTZU.js";
+import "./chunk-ZHQJAV6D.js";
+import "./chunk-JBMMWYOH.js";
+import "./chunk-6QLCS7ET.js";
+import "./chunk-NV4OESHC.js";
+import "./chunk-IVMFIKNA.js";
+import "./chunk-GHVIKOHT.js";
+import "./chunk-6WS35E6X.js";
+import "./chunk-SMY5X46Z.js";
+import "./chunk-DZFQVICS.js";
+import "./chunk-7CT6SX4M.js";
+import "./chunk-5D2ALSM5.js";
+import "./chunk-TZYTMZZY.js";
+import "./chunk-AURFOK3D.js";
+import "./chunk-NYMLINRP.js";
+import "./chunk-BYHCKX73.js";
+import "./chunk-G5EDYVSE.js";
+import "./chunk-QXJXG7DN.js";
+import "./chunk-NYJBYVBG.js";
+import "./chunk-66TQOPFM.js";
+import "./chunk-V4PXLYWM.js";
+import "./chunk-XZHEOSQ2.js";
+import "./chunk-PVEWA2DU.js";
+import "./chunk-GSAK56VF.js";
+import "./chunk-GRS2HIV6.js";
+import "./chunk-BKT776R5.js";
+import "./chunk-3V6LZHUO.js";
+import "./chunk-YFFMPZPY.js";
+import "./chunk-SUZKW6UR.js";
+import "./chunk-XBKH4FOC.js";
+import "./chunk-4CFHL5RY.js";
+import "./chunk-QGFEBNHO.js";
+import "./chunk-ZVSKSUGI.js";
+import "./chunk-3TDUWVWB.js";
+import "./chunk-DHU2AQ6T.js";
+import "./chunk-BUE7R3B5.js";
+import "./chunk-JSWKVZCR.js";
+import "./chunk-NZULV7LK.js";
+import "./chunk-V55JASXO.js";
+import "./chunk-PTJY5R3O.js";
+import "./chunk-APFFJN5T.js";
+import "./chunk-DL6BZKP3.js";
+import "./chunk-45VHWE4C.js";
+import "./chunk-FZXRLNJO.js";
+import "./chunk-UHFGK6YA.js";
+import "./chunk-72XBVN4J.js";
+import "./chunk-VKQCVU2Z.js";
+import "./chunk-4AOERLTV.js";
+import "./chunk-2A56DSRI.js";
+import "./chunk-L2F3CFCH.js";
+import "./chunk-I7FD46FF.js";
+import "./chunk-2WJKJZSO.js";
+import "./chunk-RIZTZJX6.js";
+import "./chunk-OFD2HD6F.js";
+import "./chunk-ZWF3EWZA.js";
+import "./chunk-4J3MNVVX.js";
+import "./chunk-ZBUAX4EF.js";
+import "./chunk-SPPOUJLN.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-OM3SEDI4.js";
+import "./chunk-PUBI455O.js";
+import "./chunk-2ELOCEXE.js";
+import "./chunk-VSUQI5Q6.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-F2AUF6KL.js.map

package/dist/on/index.js

@@ -1 +1,26 @@
+import {
+  beginEchoUnlock
+} from "../chunk-G66YXUTY.js";
+import "../chunk-45VHWE4C.js";
+import "../chunk-FZXRLNJO.js";
+import "../chunk-UHFGK6YA.js";
+import "../chunk-RIZTZJX6.js";
+import "../chunk-4J3MNVVX.js";
+import "../chunk-ZBUAX4EF.js";
+import "../chunk-SPPOUJLN.js";
+import "../chunk-NH2UOV3B.js";
+import "../chunk-OM3SEDI4.js";
+import "../chunk-PUBI455O.js";
+import "../chunk-2ELOCEXE.js";
+import {
+  EchoCeremonyRequiredError,
+  WrongEchoError,
+  WrongPromptError
+} from "../chunk-VSUQI5Q6.js";
+export {
+  EchoCeremonyRequiredError,
+  WrongEchoError,
+  WrongPromptError,
+  beginEchoUnlock
+};
 //# sourceMappingURL=index.js.map

package/dist/overlay-views/index.js

@@ -1,18 +1,18 @@
 import {
   withOverlayedView
-} from "../chunk-B57AFBY2.js";
+} from "../chunk-XXQ5XIYY.js";
 import {
   OverlayedViewRegistry
-} from "../chunk-BK2HHQGN.js";
+} from "../chunk-QSHATAXJ.js";
 import {
   OverlayedCollection
-} from "../chunk-MLPHLJIQ.js";
+} from "../chunk-ZHQJAV6D.js";
 import {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
   OverlayNameCollisionError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-VSUQI5Q6.js";
 export {
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,

package/dist/periods/index.js

@@ -11,7 +11,7 @@ import {
   samePartition,
   validatePeriodName,
   withPeriods
-} from "../chunk-NRT6QZQB.js";
+} from "../chunk-IVMFIKNA.js";
 import "../chunk-GHVIKOHT.js";
 import {
   PERIODS_COLLECTION,
@@ -20,19 +20,18 @@ import {
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION,
   periodExclusiveUpperBound
-} from "../chunk-FW22ZCXT.js";
-import "../chunk-ZXABPVM6.js";
+} from "../chunk-6WS35E6X.js";
+import "../chunk-L2F3CFCH.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-CKNGS5MH.js";
-import "../chunk-KJFW62P4.js";
-import "../chunk-SEE332EV.js";
-import "../chunk-6QSQQLSE.js";
-import "../chunk-DE4DH2RZ.js";
-import "../chunk-LQ4ZHOKP.js";
-import "../chunk-LP7BEXCT.js";
-import "../chunk-UYB234ZR.js";
-import "../chunk-ODVPTDPK.js";
-import "../chunk-244VXYPG.js";
+import "../chunk-2WJKJZSO.js";
+import "../chunk-4J3MNVVX.js";
+import "../chunk-ZBUAX4EF.js";
+import "../chunk-SPPOUJLN.js";
+import "../chunk-NH2UOV3B.js";
+import "../chunk-OM3SEDI4.js";
+import "../chunk-PUBI455O.js";
+import "../chunk-2ELOCEXE.js";
+import "../chunk-VSUQI5Q6.js";
 export {
   NO_PERIODS,
   PERIODS_COLLECTION,

package/dist/pod/index.js

@@ -5,33 +5,49 @@ import {
   signRedirect,
   verifyRedirect,
   wrapPodStore
-} from "../chunk-LGRLME4M.js";
-import "../chunk-T2LBQ5DV.js";
-import "../chunk-AOWGXU6D.js";
-import "../chunk-6K7DPM7D.js";
-import "../chunk-TROR3ALR.js";
+} from "../chunk-X2RP4TO5.js";
+import "../chunk-FSQNGPHH.js";
 import {
   deriveSchemaManifest,
   loadSchemaManifestEntry
-} from "../chunk-SYVZW77S.js";
+} from "../chunk-5LMCVBMY.js";
 import {
   MANIFEST_COLLECTION,
   isManifestReservedCollection
 } from "../chunk-EPFF7LOX.js";
-import "../chunk-L7DOS3TE.js";
-import "../chunk-6LNL42F5.js";
-import "../chunk-GYGLAVCX.js";
+import "../chunk-UAKY6E4N.js";
+import "../chunk-WFWFXDNS.js";
+import "../chunk-SFCD6OU7.js";
+import "../chunk-BMHQHH7Q.js";
+import "../chunk-5HNW4ZTA.js";
+import "../chunk-PFCTSXHU.js";
 import "../chunk-6LJY7X5A.js";
-import "../chunk-UPD5NWI5.js";
-import "../chunk-ZUVBC32X.js";
-import "../chunk-A6IJU4TK.js";
+import "../chunk-Z3ZXVB2Y.js";
+import "../chunk-OK57EATL.js";
+import "../chunk-QGSNJD3B.js";
+import "../chunk-XKBTJGFP.js";
+import "../chunk-UNSQZSZP.js";
+import "../chunk-RWFQVNXR.js";
 import "../chunk-RXLYKVTF.js";
-import "../chunk-ENAG3IY7.js";
-import "../chunk-3JWHAR6E.js";
-import "../chunk-K6W7BVZ6.js";
-import "../chunk-MLPHLJIQ.js";
-import "../chunk-T7IR4N2S.js";
-import "../chunk-X4773RBR.js";
+import "../chunk-GOJQ5DZA.js";
+import "../chunk-ZMVSKYTJ.js";
+import "../chunk-TFMM5DBB.js";
+import "../chunk-YKGJ44Z7.js";
+import "../chunk-K673OO6B.js";
+import "../chunk-QJNAHPVT.js";
+import "../chunk-VYYM3MEN.js";
+import "../chunk-J4KAPKBJ.js";
+import "../chunk-Y2NBBT6K.js";
+import "../chunk-H3YM66EI.js";
+import "../chunk-CAD7N6HQ.js";
+import "../chunk-GETUTTZU.js";
+import "../chunk-ZHQJAV6D.js";
+import "../chunk-JBMMWYOH.js";
+import "../chunk-6QLCS7ET.js";
+import "../chunk-NV4OESHC.js";
+import "../chunk-IVMFIKNA.js";
+import "../chunk-GHVIKOHT.js";
+import "../chunk-6WS35E6X.js";
 import "../chunk-SMY5X46Z.js";
 import "../chunk-DZFQVICS.js";
 import {
@@ -57,78 +73,64 @@ import {
   verifyPodHeader,
   verifyRecord,
   writePod
-} from "../chunk-HBPPGWUM.js";
-import "../chunk-IUWCVHQ7.js";
-import "../chunk-5FDLC6G7.js";
+} from "../chunk-RDOEOPOI.js";
+import "../chunk-YQFBH5ZJ.js";
+import "../chunk-GMKGGY7V.js";
+import "../chunk-7CT6SX4M.js";
 import "../chunk-5D2ALSM5.js";
-import "../chunk-I3JDRCMW.js";
+import "../chunk-TZYTMZZY.js";
 import "../chunk-AURFOK3D.js";
-import "../chunk-M522UYZ2.js";
-import "../chunk-B6SJIBQK.js";
-import "../chunk-UD5EVGZ7.js";
-import "../chunk-TFMM5DBB.js";
-import "../chunk-MDWKM2XC.js";
-import "../chunk-VYYM3MEN.js";
-import "../chunk-PSIV7CJV.js";
-import "../chunk-Y2NBBT6K.js";
-import "../chunk-3H5KLDZN.js";
-import "../chunk-FH2L2E34.js";
-import "../chunk-QOOUUR4A.js";
 import "../chunk-NYMLINRP.js";
-import "../chunk-HBRLNOHL.js";
+import "../chunk-BYHCKX73.js";
+import "../chunk-G5EDYVSE.js";
+import "../chunk-QXJXG7DN.js";
+import "../chunk-NYJBYVBG.js";
 import "../chunk-66TQOPFM.js";
 import "../chunk-V4PXLYWM.js";
 import "../chunk-XZHEOSQ2.js";
 import "../chunk-PVEWA2DU.js";
-import "../chunk-PEOZ34EM.js";
-import "../chunk-RHVMZSUU.js";
-import "../chunk-NRT6QZQB.js";
-import "../chunk-GHVIKOHT.js";
-import "../chunk-FW22ZCXT.js";
-import "../chunk-PDCG6PR5.js";
+import "../chunk-GSAK56VF.js";
+import "../chunk-GRS2HIV6.js";
 import "../chunk-BKT776R5.js";
-import "../chunk-YSK2CU2Q.js";
-import "../chunk-ORDURZBU.js";
+import "../chunk-3V6LZHUO.js";
+import "../chunk-YFFMPZPY.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-XBKH4FOC.js";
-import "../chunk-LGNDFRYC.js";
-import "../chunk-F24ZZTHQ.js";
-import "../chunk-7JE7BDYJ.js";
+import "../chunk-4CFHL5RY.js";
+import "../chunk-QGFEBNHO.js";
+import "../chunk-ZVSKSUGI.js";
 import "../chunk-3TDUWVWB.js";
-import "../chunk-5O7D6ZTW.js";
-import "../chunk-HLEK5VAN.js";
-import "../chunk-GF5BZ7D4.js";
-import "../chunk-ANWPSTZU.js";
-import "../chunk-TKUOEU2F.js";
-import "../chunk-DF73H4UN.js";
-import "../chunk-GHLTDZRS.js";
-import "../chunk-Z5HTYMMQ.js";
-import "../chunk-ZE4CHIED.js";
-import "../chunk-DC5QVPV7.js";
-import "../chunk-M7NI3IWE.js";
-import "../chunk-7VCXZDA4.js";
-import "../chunk-SOIQ4MM4.js";
-import "../chunk-4AF3TUMP.js";
+import "../chunk-DHU2AQ6T.js";
+import "../chunk-BUE7R3B5.js";
+import "../chunk-JSWKVZCR.js";
+import "../chunk-NZULV7LK.js";
+import "../chunk-V55JASXO.js";
+import "../chunk-PTJY5R3O.js";
+import "../chunk-APFFJN5T.js";
+import "../chunk-DL6BZKP3.js";
+import "../chunk-45VHWE4C.js";
+import "../chunk-FZXRLNJO.js";
+import "../chunk-UHFGK6YA.js";
+import "../chunk-72XBVN4J.js";
 import "../chunk-VKQCVU2Z.js";
 import {
   generateULID,
   isULID
 } from "../chunk-4AOERLTV.js";
-import "../chunk-QWGU66MP.js";
-import "../chunk-ZXABPVM6.js";
+import "../chunk-2A56DSRI.js";
+import "../chunk-L2F3CFCH.js";
 import "../chunk-I7FD46FF.js";
-import "../chunk-CKNGS5MH.js";
-import "../chunk-JCN44NCY.js";
-import "../chunk-HK67PX4J.js";
-import "../chunk-J6UOHJY5.js";
-import "../chunk-KJFW62P4.js";
-import "../chunk-SEE332EV.js";
-import "../chunk-6QSQQLSE.js";
-import "../chunk-DE4DH2RZ.js";
-import "../chunk-LQ4ZHOKP.js";
-import "../chunk-LP7BEXCT.js";
-import "../chunk-UYB234ZR.js";
-import "../chunk-ODVPTDPK.js";
+import "../chunk-2WJKJZSO.js";
+import "../chunk-RIZTZJX6.js";
+import "../chunk-OFD2HD6F.js";
+import "../chunk-ZWF3EWZA.js";
+import "../chunk-4J3MNVVX.js";
+import "../chunk-ZBUAX4EF.js";
+import "../chunk-SPPOUJLN.js";
+import "../chunk-NH2UOV3B.js";
+import "../chunk-OM3SEDI4.js";
+import "../chunk-PUBI455O.js";
+import "../chunk-2ELOCEXE.js";
 import {
   BackupCorruptedError,
   BackupLedgerError,
@@ -142,7 +144,7 @@ import {
   RedirectDepthExceededError,
   RedirectLoopError,
   RedirectUnreachableError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-VSUQI5Q6.js";
 export {
   BackupCorruptedError,
   BackupLedgerError,

package/dist/{pod-handle-WGDFB4C2.js → pod-handle-YE7CT66T.js}

@@ -1,21 +1,20 @@
-import "./chunk-KJFW62P4.js";
 import {
   buildRecordEnvelope
-} from "./chunk-SEE332EV.js";
-import "./chunk-6QSQQLSE.js";
-import "./chunk-DE4DH2RZ.js";
-import "./chunk-LQ4ZHOKP.js";
-import "./chunk-LP7BEXCT.js";
-import "./chunk-UYB234ZR.js";
-import "./chunk-ODVPTDPK.js";
-import "./chunk-244VXYPG.js";
+} from "./chunk-4J3MNVVX.js";
+import "./chunk-ZBUAX4EF.js";
+import "./chunk-SPPOUJLN.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-OM3SEDI4.js";
+import "./chunk-PUBI455O.js";
+import "./chunk-2ELOCEXE.js";
+import "./chunk-VSUQI5Q6.js";
 
 // src/with-pod/pod-handle.ts
 async function buildPodHandle(adapter, name) {
   const existing = await adapter.get(name, "_meta", "handle");
   if (existing) {
     try {
-      const parsed = JSON.parse(existing._data);
+      const parsed = JSON.parse(existing._data ?? "");
       if (parsed !== null && typeof parsed === "object" && "handle" in parsed) {
         const handle2 = parsed.handle;
         if (typeof handle2 === "string" && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle2)) {
@@ -37,4 +36,4 @@ async function buildPodHandle(adapter, name) {
 export {
   buildPodHandle
 };
-//# sourceMappingURL=pod-handle-WGDFB4C2.js.map
+//# sourceMappingURL=pod-handle-YE7CT66T.js.map

package/dist/pod-handle-YE7CT66T.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/with-pod/pod-handle.ts"],"sourcesContent":["/**\n * Vault bundle handle — the stable opaque ULID identifying a vault\n * across `.noydb` exports.\n *\n * Behaviour is byte-identical to the inline `Vault.getPodHandle`\n * method this function replaced. `Vault` keeps the public method as\n * a thin delegator.\n *\n * Internal — reached through `vault.getPodHandle()`.\n */\nimport type { NoydbStore, EncryptedEnvelope } from '../kernel/types.js'\nimport { buildRecordEnvelope } from '../capsule/index.js'\n\n/**\n * Return the stable opaque bundle handle for the given vault adapter,\n * generating and persisting a fresh ULID on first call.\n *\n * See {@link import('../kernel/vault.js').Vault.getPodHandle} for\n * the full rationale and storage-path documentation.\n */\nexport async function buildPodHandle(adapter: NoydbStore, name: string): Promise<string> {\n  const existing = await adapter.get(name, '_meta', 'handle')\n  if (existing) {\n    try {\n      const parsed = JSON.parse(existing._data ?? '') as unknown\n      if (parsed !== null && typeof parsed === 'object' && 'handle' in parsed) {\n        const handle = (parsed as { handle: unknown }).handle\n        if (typeof handle === 'string' && /^[0-9A-HJKMNP-TV-Z]{26}$/.test(handle)) {\n          return handle\n        }\n      }\n    } catch {\n      // Fall through to regenerate — corrupted handle envelope\n      // is treated as missing, not as an error. The new handle\n      // overwrites the bad one.\n    }\n  }\n  const { generateULID } = await import('./ulid.js')\n  const handle = generateULID()\n  const envelope: EncryptedEnvelope = buildRecordEnvelope(\n    { collection: '_meta', id: 'handle', version: 1 },\n    { iv: '', data: JSON.stringify({ handle }) },\n  )\n  await adapter.put(name, '_meta', 'handle', envelope)\n  return handle\n}\n"],"mappings":";;;;;;;;;;;;AAoBA,eAAsB,eAAe,SAAqB,MAA+B;AACvF,QAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,SAAS,QAAQ;AAC1D,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS,SAAS,EAAE;AAC9C,UAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,YAAY,QAAQ;AACvE,cAAMA,UAAU,OAA+B;AAC/C,YAAI,OAAOA,YAAW,YAAY,2BAA2B,KAAKA,OAAM,GAAG;AACzE,iBAAOA;AAAA,QACT;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,oBAAW;AACjD,QAAM,SAAS,aAAa;AAC5B,QAAM,WAA8B;AAAA,IAClC,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,EAAE;AAAA,IAChD,EAAE,IAAI,IAAI,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC,EAAE;AAAA,EAC7C;AACA,QAAM,QAAQ,IAAI,MAAM,SAAS,UAAU,QAAQ;AACnD,SAAO;AACT;","names":["handle"]}

package/dist/policy/index.js

@@ -6,27 +6,26 @@ import {
   createNoydbPolicy,
   describeGate,
   mergePolicy
-} from "../chunk-F7XGHL5O.js";
+} from "../chunk-TMIJAR2X.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "../chunk-DC5QVPV7.js";
-import "../chunk-KJFW62P4.js";
-import "../chunk-SEE332EV.js";
-import "../chunk-6QSQQLSE.js";
-import "../chunk-DE4DH2RZ.js";
-import "../chunk-LQ4ZHOKP.js";
-import "../chunk-LP7BEXCT.js";
-import "../chunk-UYB234ZR.js";
-import "../chunk-ODVPTDPK.js";
+} from "../chunk-DL6BZKP3.js";
+import "../chunk-4J3MNVVX.js";
+import "../chunk-ZBUAX4EF.js";
+import "../chunk-SPPOUJLN.js";
+import "../chunk-NH2UOV3B.js";
+import "../chunk-OM3SEDI4.js";
+import "../chunk-PUBI455O.js";
+import "../chunk-2ELOCEXE.js";
 import {
   ManagedRecoveryNotEnrolledError,
   PolicyDeniedError,
   RecoveryNotEnrolledError,
   RecoveryProfileNotImplementedError
-} from "../chunk-244VXYPG.js";
+} from "../chunk-VSUQI5Q6.js";
 export {
   DEFAULT_FRESHNESS_MS,
   META_COLLECTION,

package/dist/port/as/active.d.ts

@@ -6,5 +6,9 @@ import type { FormatsStrategy } from '../with/formats-strategy.js';
  * const db = await createNoydb({ store, user, secret, formatsStrategy: withFormats() })
  * const csv = await vault.export(asCsv(), { collections: ['invoices'] })
  * ```
+ *
+ * ⭐ `collections` scopes the READ: an excluded collection is neither fetched
+ * nor decrypted (core#45b, since 0.8 — through 0.7 it filtered output after a
+ * full decrypt).
  */
 export declare function withFormats(): FormatsStrategy;

package/dist/port/as/index.d.ts

@@ -28,5 +28,6 @@
  * Named re-exports only (no `export *`) so the published surface is explicit.
  */
 export { withFormats } from './active.js';
+export { FormatsNotEnabledError } from '../with/formats-strategy.js';
 export type { FormatsStrategy, FormatExportOptions, FormatImportOptions, } from '../with/formats-strategy.js';
 export type { NoydbFormat, DecodedChunk, ImportPolicy, ImportPlan, ExportChunk, ExportFormat, VaultDiff, } from './types.js';

package/dist/port/by/index.d.ts

@@ -8,11 +8,19 @@
  *
  * `StoreMesh` — the store-polling default — lives in
  * `with-shape/schema-update`, its only consumer, and is intentionally NOT
- * exported here. That is a real cost, recorded rather than worked around: it
- * is hub's own implementation of this port and the one most consumers actually
- * run, and because it is not on the published surface,
- * `@noy-db/test-mesh-conformance` cannot import it. **A port's in-hub default
- * is coverable by its published kit only if it is on the published surface.**
+ * exported here. It is hub's own implementation of this port and the one most
+ * consumers actually run, and `@noy-db/test-mesh-conformance` cannot import
+ * it.
+ *
+ * ⚠️ That was recorded here as a coverage cost, generalised to *"a port's
+ * in-hub default is coverable by its published kit only if it is on the
+ * published surface"*. The generalisation is FALSE and the kit now proves it
+ * (core#46): `createNoydb()` installs this default and `db.mesh` hands it
+ * back, so the kit runs the contract against `StoreMesh` — two clients over
+ * one store — while importing nothing from `with-shape/`. **REACHABILITY
+ * decides, not exportedness**, and the two come apart wherever a port's
+ * default is installed by a constructor. The export decision below is
+ * unchanged; only the cost attributed to it was wrong.
  *
  * ## Why this subpath exists again
  *
@@ -36,4 +44,5 @@
  * sends a consumer — this is additive, and that row stays true.
  */
 export { isQuorum, runDrainBarrier } from './types.js';
+export type { Unsubscribe } from '../with/write-hooks.js';
 export type { NoydbMesh, WriterPresence, FenceDoc, DrainBarrierOptions, } from './types.js';

package/dist/port/on/index.d.ts

@@ -22,6 +22,29 @@
  * that every package in the family binds it — `/to` already carries two
  * instance types, and nobody reads that as one contract.
  *
+ * ## The charter: contracts an unlock method implements AND the API a player calls
+ *
+ * Both halves, deliberately. A method implementer binds the callback types
+ * ({@link SlotRewrapCeremony}) and never drives a ceremony; an unlock *player*
+ * — the app running the anti-phishing echo flow — calls
+ * {@link beginEchoUnlock} and catches what it throws. Until 0.8.x the echo
+ * half lived on the root barrel alone, so a player naming an
+ * {@link EchoCeremony} still had to import the whole library to obtain one,
+ * and the seam removed nothing.
+ *
+ * ⛔ Do not re-narrow this to types-only. `/on` held no value export until
+ * now, which reads like a rule and was an accident of what the extraction
+ * happened to need — `/to` exports four, `/at` two, `/as` and `/by` one each.
+ * **A seam a consumer cannot bind alone is not a seam**, so the function and
+ * the errors a player catches belong here with the types.
+ *
+ * ⚠️ The three error classes are re-exported from the root barrel too, and
+ * `instanceof` must hold across both. That is exactly the case
+ * `tsup.config.ts`'s `splitting: true` protects: shared modules become one
+ * chunk with one class definition, so an `EchoCeremonyRequiredError` thrown
+ * through `dist/index.js` still matches the class imported from
+ * `dist/on/index.js`. Do not "simplify" that build flag.
+ *
  * ## Why it exists NOW and did not before
  *
  * `/on` shipped in 0.3.0 and was pruned in 0.4.0 for "zero importers",
@@ -47,4 +70,7 @@ export type { NoydbShamir } from '../../with-party/team/noydb-shamir.js';
 export type { SlotRewrapCeremony, SlotRewrapContext, EnrollAuthenticatorOptions, } from '../../with-party/team/index.js';
 export type { KeyringAuthenticator } from '../../kernel/types.js';
 export type { UnlockedKeyring } from '../../with-party/team/keyring.js';
-export type { EnclaveKey } from '../../kernel/enclave/index.js';
+export type { EnclaveKey } from '../../capsule/index.js';
+export type { EchoCeremony, BeginEchoUnlockOptions } from '../../with-party/team/echo-ceremony.js';
+export { beginEchoUnlock } from '../../with-party/team/echo-ceremony.js';
+export { EchoCeremonyRequiredError, WrongPromptError, WrongEchoError } from '../../kernel/errors.js';

package/dist/port/to/index.d.ts

@@ -16,7 +16,7 @@
  * tsup's per-entry bundling keeps class identity stable across subpaths.
  */
 import type { NoydbStore as NoydbStoreType } from '../../kernel/types.js';
-export type { NoydbStore, NoydbPodStore, EncryptedEnvelope, VaultSnapshot, TxOp, StoreCapabilities, StoreCredentials, StoreCredentialSource, StoreTime, ListPageResult, } from '../../kernel/types.js';
+export type { NoydbStore, NoydbPodStore, Envelope, EncryptedEnvelope, VaultSnapshot, TxOp, StoreCapabilities, StoreAuth, StoreAuthKind, StoreCredentials, StoreCredentialSource, StoreTime, ListPageResult, } from '../../kernel/types.js';
 export { ConflictError, NetworkError, StoreCapabilityError, PodVersionConflictError, UnknownStoreKindError, DuplicateStoreKindError, } from '../../kernel/errors.js';
 export { isConflictError } from '../../kernel/errors.js';
 export type { StoreClass, StoreDescriptor, StoreBinding, StoreFactory, StoreLocator, AnyNoydbStore, } from './locator.js';

package/dist/port/with/blob-strategy.d.ts

@@ -21,7 +21,7 @@ import type { BlobSet } from '../../with-shape/blobs/blob-set.js';
 import type { NoydbStore } from '../../kernel/types.js';
 import type { ObjectProjection } from '../../with-shape/blobs/object-projection.js';
 import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js';
-import type { EnclaveKey } from '../../kernel/enclave/index.js';
+import type { EnclaveKey } from '../../capsule/index.js';
 import type { BlobCacheStats } from '../../with-shape/blobs/blob-pinning.js';
 import type { UnlockedKeyring } from '../../with-party/team/keyring.js';
 /**

package/dist/port/with/broker-strategy.d.ts

@@ -66,6 +66,20 @@ export interface BrokerStrategy {
     enroll(ctx: BrokerCtx): Promise<void>;
     rotate(ctx: BrokerCtx): Promise<void>;
     credentialSource(ctx: BrokerCtx, profile?: string): StoreCredentialSource;
+    /**
+     * core#73 — called by the kernel right after `grant()`: register the
+     * grantee with the broker host under its own per-member key. Needs the
+     * grantee's `secret` because the member's `_broker_member` DEK can only be
+     * opened with it, and only at this moment does the grantor hold it. A
+     * no-op for owner/admin grantees (they use the shared seed) and for the
+     * floor stub (no broker ⇒ nothing to register).
+     */
+    enrolMember(ctx: BrokerCtx, member: {
+        readonly userId: string;
+        readonly secret: string;
+    }): Promise<void>;
+    /** core#73 — called by the kernel right after `revoke()`: de-register the member with the host and drop its record. */
+    revokeMember(ctx: BrokerCtx, userId: string): Promise<void>;
 }
 /**
  * No-op stub — the floor default. Every broker operation throws

package/dist/port/with/classified-strategy.d.ts

@@ -17,7 +17,7 @@
  */
 import type { ClassifiedFieldSpec } from '../../via/classified/descriptor.js';
 import type { EncryptedEnvelope } from '../../kernel/types.js';
-import type { EnclaveKey } from '../../kernel/enclave/index.js';
+import type { EnclaveKey } from '../../capsule/index.js';
 export type { ClassifiedViaConfig } from '../../via/classified/binding.js';
 export type { ClassifiedVerdict } from '../../kernel/types.js';
 import type { ClassifiedVerdict } from '../../kernel/types.js';

package/dist/port/with/collection-options.d.ts

@@ -29,7 +29,7 @@ import type { DictKeyDescriptor, I18nTextDescriptor, StaticDictDescriptor } from
 import type { LookupDescriptor } from '../../via/lookup/descriptor.js';
 import type { ArchivePolicy } from '../../with-fork/archive/index.js';
 import type { SchemaUpdateStrategy } from '../../with-shape/schema-update/types.js';
-import type { AttestationFieldSchema } from '@noy-db/attestation';
+import type { AttestationFieldSchema } from '../../with-audit/attestation/types.js';
 /**
  * Options for {@link Vault.collection} — opening or declaring a collection.
  *

package/dist/port/with/collection-registries.d.ts

@@ -18,7 +18,7 @@
  *
  * @internal
  */
-import type { AttestationFieldSchema } from '@noy-db/attestation';
+import type { AttestationFieldSchema } from '../../with-audit/attestation/types.js';
 import type { BlobFieldsConfig } from '../../with-shape/blobs/blob-compaction.js';
 import type { ArchivePolicy } from '../../with-fork/archive/index.js';
 import type { OpenCollectionOptions } from './collection-options.js';