@noy-db/hub 0.9.0-pre.1 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,64 @@
 # Changelog — hub
 
+## 0.9.0
+
+**The stable release of the 0.9 line.** It is `0.9.0-pre.2` promoted unchanged; everything below was
+shipped and exercised across `pre.0`, `pre.1` and `pre.2`, whose sections carry the detail. The theme
+of the line is **replication you can trust with a keyring** — a `sync-peer` target became a full
+replica, and the races that made that unsafe were closed.
+
+**What the line delivers.** A `sync-peer` target is now a full replica: the roster travels in both
+directions, `openVault` on an empty local store consults the target before deciding new-vs-existing,
+and `db.realign(vault)` repairs a corrupted local envelope from the target's healthy copy. Every role
+can mint its own cloud-store credentials (`@noy-db/hub/broker`). `_keyring` writes are
+compare-and-swap for both update and **create**, so two concurrent grants of the same new member no
+longer silently discard one. `@noy-db/ports` replaces the six conformance kits with one package and
+one subpath per port. Sync gained `sync:progress`, and three refusals that used to fail silently now
+throw.
+
+**⛔ Four things to check before upgrading.** None is a format break — stored data reads unchanged —
+but each is visible to a compiler or to an operator:
+
+- **`EnclaveNotSupportedError.group` widened to `CapsuleGroup`**, and `capabilities()` now reports
+  **ten** groups rather than nine (`per-record-keys` was implemented and under-reported). An
+  exhaustive `switch` on either has more cases.
+- **The six `@noy-db/test-*-conformance` shims are no longer published.** Already-published versions
+  stay installable; migrate to the matching `@noy-db/ports` subpath — `/to`, `/as`, `/at`, `/on`,
+  `/by`, `/capsule`.
+- **The fourteen `in-*` framework bindings are not on this version line.** They live in `noy-db/in`
+  and cut on their own clock; nothing about `@noy-db/hub` changed for them.
+- **Existing members need a re-grant** (or magic-link recovery) to be enrolled for member-scoped
+  broker credentials. The admin path is byte-identical and needs nothing.
+
+**⚠️ Two guarantees with a stated boundary, because a silent partial guarantee is worse than a named
+one.** The keyring CAS guarantee holds only once **every writer is a new hub** — an older hub writes
+keyrings with no `expectedVersion` and clobbers a new hub's compare-and-swap. And `hasSealedBody`
+tests `_iv`, not `_data`: a sealed body has no `_iv`, which is why the two kinds of `Envelope` body
+are now documented explicitly.
+
+**Adapter authors:** the contracted answer for a must-not-exist write is that the **first create
+succeeds**. Do not implement absence by throwing — if your backend's conditional write rejects a
+missing item, OR in an existence check the way `to-aws-dynamo` does. `@noy-db/ports/to` asserts both
+halves, and `noy-db/to` ran it green across 19 adapters before this line changed.
+
+## 0.9.0-pre.2
+
+**A small, deliberate release: two keyring correctness items and the removal of six shim packages.** No format change, no new surface.
+
+⛔ **A keyring CREATE is now race-safe** (core#134, completing core#132). `writeKeyringFile` writes with `expectedVersion: 0`. core#132 made keyring writes CAS against the version they were computed from, which caught concurrent **updates** to one member; the **create** race stayed open, so two concurrent grants of the same new `userId` both succeeded and the second silently replaced the first — a member who appeared granted, holding a keyring nobody else's view agreed with.
+
+⭐ That limit had been attributed to the store contract being unable to express *"write only if absent"*. Measured, the claim was **wrong**: hub never stores a version below 1, so `expectedVersion: 0` lets the first create through and conflicts every later one — an exact must-not-exist, with **no sentinel added to `put`'s signature and no seventh method on the six-method store contract**. Both were costed; neither was needed. What was missing was an **assertion**, not a mechanism: `@noy-db/ports/to` now holds the absent case (core#138), and `noy-db/to` ran it green across **19 adapters** before this line changed.
+
+⚠️ **Adapter authors:** the contracted answer is that the FIRST create SUCCEEDS. Do not implement absence by throwing — if your backend's conditional write rejects a missing item, OR in an existence check the way `to-aws-dynamo` does. The kit case asserts both halves, so that failure mode reddens rather than passing as "safe".
+
+⛔ **Not closable here: a mixed fleet.** An older hub writes keyrings at `_v: 1` with no `expectedVersion` at all, so it clobbers a new hub's CAS — create or update alike. The guarantee is real only once every writer is a new hub.
+
+**`KeyringTamperedError`'s re-seed guidance leads with PRESERVE** (core#143). It used to say *remove the vault from this device first*. That is safe on a local store — a hostile local store means the device is already owned — but on a **remote, separately administered** store the identical error can mean the store altered the keyring, and deleting the local copy destroys the only evidence; on a thin client there is nothing local to remove at all. The remedy now leads with preserving a copy of the raw store contents and names the remote case explicitly. Deliberately **not** conditioned on the store type: the branch that most needs the warning is the one hub cannot classify. No behaviour change; the test's property is now the ORDER of the two instructions.
+
+⛔ **The six `@noy-db/test-*-conformance` re-export shims are removed** (family#39 step 5). They were 8-line `export * from '@noy-db/ports/<port>'` packages kept published while the family's satellites moved off them; `to`, `as`, `on`, `at` and `daemon` all bind `@noy-db/ports/<port>` directly as of 2026-09-25.
+
+⚠️ **Already-published versions are unaffected.** `@noy-db/test-adapter-conformance@0.9.0-pre.1` and every earlier version stay installable; what stops is the publication of *new* ones. A consumer still pinning a shim keeps resolving it, and should migrate to the matching `@noy-db/ports` subpath — `/to`, `/as`, `/at`, `/on`, `/by`, `/capsule`.
+
 ## 0.9.0-pre.1
 
 **A correctness release on the 0.9 line. The headline is a keyring race that surfaced as a tamper alarm on the user's own data** (core#132) — everything else is additive.

package/dist/api-H4B7ZQXP.js

@@ -0,0 +1,18 @@
+import {
+  UserApi,
+  createUserApi
+} from "./chunk-S2ORTQGS.js";
+import "./chunk-6BEBWHNL.js";
+import "./chunk-WRLWEYHY.js";
+import "./chunk-O6VOR4NH.js";
+import "./chunk-VZFTON37.js";
+import "./chunk-NH2UOV3B.js";
+import "./chunk-HTRLQ4ZZ.js";
+import "./chunk-EPPAEGH5.js";
+import "./chunk-URGHKZPL.js";
+import "./chunk-2RH5SEY7.js";
+export {
+  UserApi,
+  createUserApi
+};
+//# sourceMappingURL=api-H4B7ZQXP.js.map

package/dist/as/index.js

@@ -13,15 +13,15 @@ import "../chunk-UORWAG7K.js";
 import "../chunk-Y2NBBT6K.js";
 import "../chunk-IF2M43G4.js";
 import "../chunk-WRLWEYHY.js";
-import "../chunk-ZD7WFMV2.js";
-import "../chunk-RRTQAQ3N.js";
+import "../chunk-O6VOR4NH.js";
+import "../chunk-VZFTON37.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-ZF6JECDT.js";
-import "../chunk-THQ3BHLM.js";
-import "../chunk-XX4R7TUB.js";
+import "../chunk-HTRLQ4ZZ.js";
+import "../chunk-EPPAEGH5.js";
+import "../chunk-URGHKZPL.js";
 import {
   ValidationError
-} from "../chunk-IKPQ2GGB.js";
+} from "../chunk-2RH5SEY7.js";
 
 // src/port/as/active.ts
 function redactChunk(chunk, ctx, redact) {

package/dist/at/index.js

@@ -3,15 +3,15 @@ import {
   MemorySealer,
   SEALED_SECRET_RECORD_ID,
   parseSealedEnvelope
-} from "../chunk-NTVKHQ3L.js";
+} from "../chunk-GU6QXHPZ.js";
 import "../chunk-WRLWEYHY.js";
-import "../chunk-ZD7WFMV2.js";
-import "../chunk-RRTQAQ3N.js";
+import "../chunk-O6VOR4NH.js";
+import "../chunk-VZFTON37.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-ZF6JECDT.js";
-import "../chunk-THQ3BHLM.js";
-import "../chunk-XX4R7TUB.js";
-import "../chunk-IKPQ2GGB.js";
+import "../chunk-HTRLQ4ZZ.js";
+import "../chunk-EPPAEGH5.js";
+import "../chunk-URGHKZPL.js";
+import "../chunk-2RH5SEY7.js";
 export {
   MemoryRecipientSealer,
   MemorySealer,

package/dist/attestation/index.js

@@ -1,19 +1,19 @@
 import {
   issueAttestationCore
-} from "../chunk-OYEBSWLE.js";
+} from "../chunk-5SMCBPJ2.js";
 import {
   getRevokedDocIdsCore,
   publishRevocationListCore,
   revokeDocCore,
   unrevokeDocCore
-} from "../chunk-XPNJH7GN.js";
+} from "../chunk-UADW5NOU.js";
 import "../chunk-B6EWMGFX.js";
 import {
   ATTESTATIONS_COLLECTION
-} from "../chunk-ZUTUNVFD.js";
+} from "../chunk-IPF5ORDI.js";
 import {
   NO_ATTESTATION
-} from "../chunk-FMINS2B6.js";
+} from "../chunk-LZN6DTFI.js";
 import {
   decodeQr,
   isRevoked,
@@ -23,26 +23,26 @@ import {
 } from "../chunk-GMKGGY7V.js";
 import "../chunk-4AOERLTV.js";
 import "../chunk-WRLWEYHY.js";
-import "../chunk-ZD7WFMV2.js";
-import "../chunk-RRTQAQ3N.js";
+import "../chunk-O6VOR4NH.js";
+import "../chunk-VZFTON37.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-ZF6JECDT.js";
-import "../chunk-THQ3BHLM.js";
-import "../chunk-XX4R7TUB.js";
+import "../chunk-HTRLQ4ZZ.js";
+import "../chunk-EPPAEGH5.js";
+import "../chunk-URGHKZPL.js";
 import {
   AttestationError,
   AttestationNotEnabledError
-} from "../chunk-IKPQ2GGB.js";
+} from "../chunk-2RH5SEY7.js";
 
 // src/with-audit/attestation/active.ts
 function withAttestation() {
   return {
     async issueAttestation(ctx, args) {
-      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-4ZPSY44M.js");
+      const { issueAttestationCore: issueAttestationCore2 } = await import("../issue-5ZHXK4HJ.js");
       return issueAttestationCore2(ctx, args);
     },
     async getDocumentSigningPublicKey(deps) {
-      const { loadSigner, loadOrCreateSigner } = await import("../signer-NYR4I3FO.js");
+      const { loadSigner, loadOrCreateSigner } = await import("../signer-TW5MAQJP.js");
       const existing = await loadSigner(deps.adapter, deps.vault, deps.getDEK);
       if (existing) return { keyId: existing.keyId, publicKeyB64: existing.publicKeyB64 };
       if (deps.role !== "owner") {
@@ -52,19 +52,19 @@ function withAttestation() {
       return { keyId: signer.keyId, publicKeyB64: signer.publicKeyB64 };
     },
     async revokeAttestation(ctx, docId) {
-      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-QUT7WWG3.js");
+      const { revokeDocCore: revokeDocCore2 } = await import("../revoke-6AFVXTWF.js");
       return revokeDocCore2(ctx, docId);
     },
     async unrevokeAttestation(ctx, docId) {
-      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-QUT7WWG3.js");
+      const { unrevokeDocCore: unrevokeDocCore2 } = await import("../revoke-6AFVXTWF.js");
       return unrevokeDocCore2(ctx, docId);
     },
     async getRevokedDocIds(ctx) {
-      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-QUT7WWG3.js");
+      const { getRevokedDocIdsCore: getRevokedDocIdsCore2 } = await import("../revoke-6AFVXTWF.js");
       return getRevokedDocIdsCore2(ctx);
     },
     async publishRevocationList(ctx) {
-      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-QUT7WWG3.js");
+      const { publishRevocationListCore: publishRevocationListCore2 } = await import("../revoke-6AFVXTWF.js");
       return publishRevocationListCore2(ctx);
     }
   };

package/dist/{backup-RJBFQSHE.js → backup-E3GBMNDA.js}

@@ -10,10 +10,10 @@ import {
   PERIOD_FREEZES_COLLECTION,
   PERIOD_REOPENS_COLLECTION,
   PERIOD_TARGET_PURGES_COLLECTION
-} from "./chunk-FPF5HRBE.js";
+} from "./chunk-A52BK5AY.js";
 import {
   SEQUENCE_COLLECTION
-} from "./chunk-BVRJYMFZ.js";
+} from "./chunk-CLOSXHR4.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -21,18 +21,18 @@ import {
 import {
   buildRecordEnvelope
 } from "./chunk-WRLWEYHY.js";
-import "./chunk-ZD7WFMV2.js";
-import "./chunk-RRTQAQ3N.js";
+import "./chunk-O6VOR4NH.js";
+import "./chunk-VZFTON37.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-ZF6JECDT.js";
-import "./chunk-THQ3BHLM.js";
+import "./chunk-HTRLQ4ZZ.js";
+import "./chunk-EPPAEGH5.js";
 import {
   NOYDB_BACKUP_VERSION
-} from "./chunk-XX4R7TUB.js";
+} from "./chunk-URGHKZPL.js";
 import {
   BackupCorruptedError,
   BackupLedgerError
-} from "./chunk-IKPQ2GGB.js";
+} from "./chunk-2RH5SEY7.js";
 
 // src/with-pod/backup.ts
 function internalCollectionNames(dataCollections) {
@@ -327,4 +327,4 @@ export {
   loadVault,
   verifyBackupIntegrity
 };
-//# sourceMappingURL=backup-RJBFQSHE.js.map
+//# sourceMappingURL=backup-E3GBMNDA.js.map

package/dist/blobs/index.js

@@ -10,7 +10,7 @@ import {
   createExportBlobsHandle,
   reportOrphanBlobChunks,
   runCompaction
-} from "../chunk-ZWMOHANW.js";
+} from "../chunk-ZK2WT532.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -25,20 +25,20 @@ import {
   detectMimeType,
   isPreCompressed,
   memoryBlobPinStore
-} from "../chunk-QFW4MYGN.js";
-import "../chunk-NCTN2FW4.js";
-import "../chunk-NXQEOC3X.js";
-import "../chunk-2LBS62AC.js";
+} from "../chunk-7IV7GVOS.js";
+import "../chunk-PIO6NW7O.js";
+import "../chunk-XQGKS4OW.js";
+import "../chunk-LJ744WXU.js";
 import "../chunk-WRLWEYHY.js";
-import "../chunk-ZD7WFMV2.js";
-import "../chunk-RRTQAQ3N.js";
+import "../chunk-O6VOR4NH.js";
+import "../chunk-VZFTON37.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-ZF6JECDT.js";
-import "../chunk-THQ3BHLM.js";
-import "../chunk-XX4R7TUB.js";
+import "../chunk-HTRLQ4ZZ.js";
+import "../chunk-EPPAEGH5.js";
+import "../chunk-URGHKZPL.js";
 import {
   BlobOfflineError
-} from "../chunk-IKPQ2GGB.js";
+} from "../chunk-2RH5SEY7.js";
 
 // src/via/blob/active.ts
 function withBlobs(options = {}) {

package/dist/broker/index.js

@@ -1,21 +1,21 @@
 import {
   NO_BROKER
-} from "../chunk-25FXU6WS.js";
+} from "../chunk-FVKQ5QUC.js";
 import {
   issueChallenge,
   verifyBrokerProof
 } from "../chunk-WRLWEYHY.js";
-import "../chunk-ZD7WFMV2.js";
-import "../chunk-RRTQAQ3N.js";
+import "../chunk-O6VOR4NH.js";
+import "../chunk-VZFTON37.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-ZF6JECDT.js";
-import "../chunk-THQ3BHLM.js";
-import "../chunk-XX4R7TUB.js";
+import "../chunk-HTRLQ4ZZ.js";
+import "../chunk-EPPAEGH5.js";
+import "../chunk-URGHKZPL.js";
 import {
   BrokerEnrolmentError,
   BrokerNotEnabledError,
   BrokerProofError
-} from "../chunk-IKPQ2GGB.js";
+} from "../chunk-2RH5SEY7.js";
 
 // src/with-party/broker/active.ts
 var DEFAULT_SKEW_MS = 6e4;
@@ -28,7 +28,7 @@ function withBroker(config) {
   const cache = /* @__PURE__ */ new Map();
   return {
     async enroll(ctx) {
-      const { enrollSeed } = await import("../seed-GFLA4FCK.js");
+      const { enrollSeed } = await import("../seed-BVYDPVIW.js");
       return enrollSeed({ ...ctx, config });
     },
     async rotate(ctx) {
@@ -37,15 +37,15 @@ function withBroker(config) {
       const inFlight = scoped.map(([, e]) => e.inFlight).filter((p) => p !== void 0);
       await Promise.allSettled(inFlight);
       for (const [key] of scoped) cache.delete(key);
-      const { rotateSeed } = await import("../seed-GFLA4FCK.js");
+      const { rotateSeed } = await import("../seed-BVYDPVIW.js");
       return rotateSeed({ ...ctx, config });
     },
     async enrolMember(ctx, member) {
-      const { enrolMemberSeed } = await import("../seed-GFLA4FCK.js");
+      const { enrolMemberSeed } = await import("../seed-BVYDPVIW.js");
       return enrolMemberSeed({ ...ctx, config }, member);
     },
     async revokeMember(ctx, userId) {
-      const { revokeMemberSeed } = await import("../seed-GFLA4FCK.js");
+      const { revokeMemberSeed } = await import("../seed-BVYDPVIW.js");
       return revokeMemberSeed({ ...ctx, config }, userId);
     },
     credentialSource(ctx, profile) {
@@ -62,7 +62,7 @@ function withBroker(config) {
         const skewMs = config.skewMs ?? DEFAULT_SKEW_MS;
         const capturedEntry = entry;
         const inFlight = (async () => {
-          const { mintStoreCredentials } = await import("../seed-GFLA4FCK.js");
+          const { mintStoreCredentials } = await import("../seed-BVYDPVIW.js");
           const creds = await mintStoreCredentials({ ...ctx, config }, profile);
           capturedEntry.cached = { creds, validUntil: cacheFloor(creds, skewMs) };
           return creds;

package/dist/by/index.js

@@ -1,8 +1,8 @@
 import {
   isQuorum,
   runDrainBarrier
-} from "../chunk-4CHM2TRS.js";
-import "../chunk-IKPQ2GGB.js";
+} from "../chunk-PWAMX5KU.js";
+import "../chunk-2RH5SEY7.js";
 export {
   isQuorum,
   runDrainBarrier

package/dist/capsule/contract.js

@@ -1,12 +1,12 @@
 import {
   CapsuleNotSupportedError,
   assertCapsuleSupports
-} from "../chunk-ZD7WFMV2.js";
+} from "../chunk-O6VOR4NH.js";
 import {
   generateSigningKeyPair,
   signBytes,
   verifyBytes
-} from "../chunk-RRTQAQ3N.js";
+} from "../chunk-VZFTON37.js";
 import {
   evaluateKofN
 } from "../chunk-NH2UOV3B.js";
@@ -29,7 +29,7 @@ import {
   recordAadFor,
   requireSealedBody,
   sealedBodyArgs
-} from "../chunk-ZF6JECDT.js";
+} from "../chunk-HTRLQ4ZZ.js";
 import {
   KEY_BITS,
   base64ToBuffer,
@@ -47,9 +47,9 @@ import {
   normalizeForVerify,
   sha256Bytes,
   sha256Hex
-} from "../chunk-THQ3BHLM.js";
-import "../chunk-XX4R7TUB.js";
-import "../chunk-IKPQ2GGB.js";
+} from "../chunk-EPPAEGH5.js";
+import "../chunk-URGHKZPL.js";
+import "../chunk-2RH5SEY7.js";
 export {
   CapsuleNotSupportedError,
   KEY_BITS,

package/dist/capsule/enclave-aes/index.js

@@ -1,6 +1,6 @@
 import {
   computeBidxTarget
-} from "../../chunk-72FQ46VW.js";
+} from "../../chunk-ODBOHPZU.js";
 import {
   aesCapsule,
   checkCanary,
@@ -38,18 +38,18 @@ import {
   unwrapKey,
   wrapCek,
   wrapKey
-} from "../../chunk-YH4OUOSI.js";
+} from "../../chunk-5A3HOTP5.js";
 import {
   deriveClassifyIndexKey,
   deriveClassifyIndexSalt,
   mintBidxTag,
   pbkdf2VerifyDigest
-} from "../../chunk-MBPZMZVB.js";
+} from "../../chunk-Q4DBU5RM.js";
 import {
   generateSigningKeyPair,
   signBytes,
   verifyBytes
-} from "../../chunk-RRTQAQ3N.js";
+} from "../../chunk-VZFTON37.js";
 import {
   evaluateKofN
 } from "../../chunk-NH2UOV3B.js";
@@ -70,7 +70,7 @@ import {
   recordAadFor,
   requireSealedBody,
   sealedBodyArgs
-} from "../../chunk-ZF6JECDT.js";
+} from "../../chunk-HTRLQ4ZZ.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -86,11 +86,11 @@ import {
   hmacSignHex,
   sha256Bytes,
   sha256Hex
-} from "../../chunk-THQ3BHLM.js";
-import "../../chunk-XX4R7TUB.js";
+} from "../../chunk-EPPAEGH5.js";
+import "../../chunk-URGHKZPL.js";
 import {
   ValidationError
-} from "../../chunk-IKPQ2GGB.js";
+} from "../../chunk-2RH5SEY7.js";
 
 // src/capsule/enclave-aes/broker/proof.ts
 var subtle = globalThis.crypto.subtle;

package/dist/{capsule-6LJAVQNM.js → capsule-YQKQZPH7.js}

@@ -102,13 +102,13 @@ import {
 } from "./chunk-WRLWEYHY.js";
 import {
   CapsuleNotSupportedError
-} from "./chunk-ZD7WFMV2.js";
-import "./chunk-RRTQAQ3N.js";
+} from "./chunk-O6VOR4NH.js";
+import "./chunk-VZFTON37.js";
 import "./chunk-NH2UOV3B.js";
-import "./chunk-ZF6JECDT.js";
-import "./chunk-THQ3BHLM.js";
-import "./chunk-XX4R7TUB.js";
-import "./chunk-IKPQ2GGB.js";
+import "./chunk-HTRLQ4ZZ.js";
+import "./chunk-EPPAEGH5.js";
+import "./chunk-URGHKZPL.js";
+import "./chunk-2RH5SEY7.js";
 export {
   CapsuleNotSupportedError,
   RecordCodec,
@@ -212,4 +212,4 @@ export {
   wrapKey,
   writeEnvelopeBody
 };
-//# sourceMappingURL=capsule-6LJAVQNM.js.map
+//# sourceMappingURL=capsule-YQKQZPH7.js.map

package/dist/cargo/index.js

@@ -5,11 +5,11 @@ import {
   describeExtraction,
   unsealDeks,
   withCargo
-} from "../chunk-B7Y2BRQA.js";
+} from "../chunk-K5JNK63R.js";
 import {
   extractPartition,
   walkClosure
-} from "../chunk-UL6MTRMJ.js";
+} from "../chunk-ICHHNI5E.js";
 import {
   diffVault
 } from "../chunk-LFUID7OW.js";
@@ -18,64 +18,64 @@ import {
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "../chunk-LUCQY3OM.js";
-import "../chunk-R2ZULFXU.js";
-import "../chunk-KN4LUMH6.js";
+} from "../chunk-LMC5L3MM.js";
+import "../chunk-FUHUGKDN.js";
+import "../chunk-U43RSPPX.js";
 import {
   groupAndReduce,
   reduceRecords
-} from "../chunk-SCH2F7R2.js";
+} from "../chunk-4WLI37WK.js";
 import {
   NO_CARGO
-} from "../chunk-WBUHHMLN.js";
-import "../chunk-NTVKHQ3L.js";
+} from "../chunk-IFUYLIEY.js";
+import "../chunk-GU6QXHPZ.js";
 import {
   isQuorum,
   runDrainBarrier
-} from "../chunk-4CHM2TRS.js";
+} from "../chunk-PWAMX5KU.js";
 import {
   CustodyApi
-} from "../chunk-GYZICGRU.js";
+} from "../chunk-AI35LNWQ.js";
 import "../chunk-IF2M43G4.js";
-import "../chunk-XPW7T2GN.js";
-import "../chunk-DMIEKD24.js";
+import "../chunk-4N4OIVK3.js";
+import "../chunk-WQUIJPN4.js";
 import "../chunk-GMKGGY7V.js";
 import {
   fuseRetrieval
 } from "../chunk-AURFOK3D.js";
-import "../chunk-QFW4MYGN.js";
+import "../chunk-7IV7GVOS.js";
 import "../chunk-XZHEOSQ2.js";
-import "../chunk-AGGPT4UE.js";
+import "../chunk-4KYKRYRT.js";
 import "../chunk-SUZKW6UR.js";
 import "../chunk-VHM7HCKB.js";
-import "../chunk-66GD7XXU.js";
+import "../chunk-O3NGOHXQ.js";
 import {
   readPath
-} from "../chunk-GIQJGXV7.js";
-import "../chunk-PR7ILCIH.js";
-import "../chunk-NCTN2FW4.js";
-import "../chunk-V7AKGAXY.js";
-import "../chunk-QT5ITL25.js";
-import "../chunk-NXQEOC3X.js";
+} from "../chunk-SXPLIRQH.js";
+import "../chunk-UQRKAM2R.js";
+import "../chunk-PIO6NW7O.js";
+import "../chunk-QVUMKG3Z.js";
+import "../chunk-6BEBWHNL.js";
+import "../chunk-XQGKS4OW.js";
 import {
   generateULID
 } from "../chunk-4AOERLTV.js";
 import "../chunk-SVLR4POP.js";
-import "../chunk-ONZ3B5EW.js";
+import "../chunk-Y22JWHCP.js";
 import "../chunk-I7FD46FF.js";
 import "../chunk-QHG7GQKM.js";
-import "../chunk-2LBS62AC.js";
+import "../chunk-LJ744WXU.js";
 import {
   sha256Hex
 } from "../chunk-WRLWEYHY.js";
-import "../chunk-ZD7WFMV2.js";
-import "../chunk-RRTQAQ3N.js";
+import "../chunk-O6VOR4NH.js";
+import "../chunk-VZFTON37.js";
 import "../chunk-NH2UOV3B.js";
-import "../chunk-ZF6JECDT.js";
-import "../chunk-THQ3BHLM.js";
+import "../chunk-HTRLQ4ZZ.js";
+import "../chunk-EPPAEGH5.js";
 import {
   NOYDB_ENVELOPE_GENERATION
-} from "../chunk-XX4R7TUB.js";
+} from "../chunk-URGHKZPL.js";
 import {
   AdoptionStateError,
   CargoNotEnabledError,
@@ -90,7 +90,7 @@ import {
   UnknownShardError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "../chunk-IKPQ2GGB.js";
+} from "../chunk-2RH5SEY7.js";
 export {
   AdoptionStateError,
   CargoNotEnabledError,

package/dist/{chunk-OOPSMQX5.js → chunk-27NCEPKM.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-WRLWEYHY.js";
 
 // src/with-formula/materialized-views/stale.ts
-var loadMVExecutor = lazy(() => import("./executor-6PQ7WAGV.js"));
+var loadMVExecutor = lazy(() => import("./executor-SNHW4ELF.js"));
 var _staleByRegistry = /* @__PURE__ */ new WeakMap();
 function markMVStale(registry, mvName) {
   let set = _staleByRegistry.get(registry);
@@ -134,4 +134,4 @@ export {
   clearMVStale,
   clearMVStaleFully
 };
-//# sourceMappingURL=chunk-OOPSMQX5.js.map
+//# sourceMappingURL=chunk-27NCEPKM.js.map

package/dist/{chunk-TRHUNPXP.js → chunk-2IASHJPS.js}

@@ -1,6 +1,6 @@
 import {
   DuplicateBehaviorNameError
-} from "./chunk-IKPQ2GGB.js";
+} from "./chunk-2RH5SEY7.js";
 
 // src/with-audit/guards/registry.ts
 var GuardRegistry = class {
@@ -141,4 +141,4 @@ var GuardRegistry = class {
 export {
   GuardRegistry
 };
-//# sourceMappingURL=chunk-TRHUNPXP.js.map
+//# sourceMappingURL=chunk-2IASHJPS.js.map