@noy-db/hub 0.2.0-pre.1 → 0.2.0-pre.2

package/dist/index.d.cts

@@ -1,21 +1,22 @@
-import { aO as NoydbStore, bg as UserEnvelope, bh as PublicEnvelope, bi as GateName, bj as GatePolicy, bk as VaultPolicy, bl as ActiveTier, bm as FactorProof, bn as PersistedSchemaEnvelope, bo as DirectoryConfig, bp as UserVisibility, aM as UnlockedKeyring, bq as Vault, aV as DiffEntry } from './types-C4lwMKKF.cjs';
-export { br as AccessibleVault, aS as AppendInput, ay as ArrayOutputSpec, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, bs as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, bt as BuiltInGateName, bu as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, bv as CacheOptions, bw as CacheStats, bx as ChangeEvent, aT as ChangeType, a7 as ClosePeriodOptions, aH as Collection, by as CollectionChangeEvent, bz as CollectionConflictResolver, bA as CollectionDescriptor, ao as CollectionFrame, aU as CollectionInstant, bB as CollectionStats, bC as Conflict, bD as ConflictPolicy, bE as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, bF as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bG as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bH as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bI as DeepPartial, bJ as DeepPartialOrNull, bK as DelegationToken, bL as DeleteManyResult, bM as DerivationDescriptor, aw as DerivationStrategy, aA as DerivationStrategyHandle, aB as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bN as DirtyEntry, bO as DumpSchemaOptions, bP as ELEVATION_AUDIT_COLLECTION, bQ as ElevatedHandle, aQ as EncryptedEnvelope, bR as EnrollAuthenticatorOptions, bS as EnrollAuthenticatorWrappingDEKsOptions, bT as EnrollAuthenticatorWrappingKEKOptions, bU as EnrollRecoveryResult, bV as ExportCapability, bW as ExportChunk, bX as ExportFormat, bY as ExportStreamOptions, bZ as FactorKind, b_ as FactorProofBundle, b$ as FactorRequirement, c0 as FieldDescriptor, c1 as FieldSource, c2 as GhostRecord, c3 as GrantOptions, ai as GuardChange, aj as GuardContext, ah as GuardStrategy, al as GuardStrategyHandle, c4 as HistoryConfig, c5 as HistoryEntry, aP as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, c6 as INDEXED_STORE_POLICY, c7 as ImportCapability, c8 as InferOutput, c9 as InternalCollectionStats, ca as IssueDelegationOptions, cb as IssueMagicLinkGrantOptions, aW as JsonPatch, aX as JsonPatchOp, cc as KeyringAuthenticator, cd as KeyringAuthenticatorWrappingDEKs, ce as KeyringAuthenticatorWrappingKEK, cf as KeyringFile, aY as LedgerEntry, aZ as LedgerStore, cg as ListAccessibleVaultsOptions, ch as ListPageResult, ci as ListUsersOptions, cj as LiveUserEnvelope, ck as LocaleReadOptions, cl as Lru, cm as LruOptions, cn as LruStats, co as MAGIC_LINK_CONTENT_INFO_PREFIX, cp as MAGIC_LINK_GRANTS_COLLECTION, cq as MAGIC_LINK_KEK_INFO_PREFIX, cr as MagicLinkGrantPayload, cs as MagicLinkGrantRecord, bd as MaterializedFromMeta, ct as MaterializedViewDescriptor, be as MaterializedViewOutput, aE as MaterializedViewStrategy, aF as MaterializedViewStrategyHandle, cu as MemorySealingKeyProvider, cv as NOYDB_BACKUP_VERSION, cw as NOYDB_FORMAT_VERSION, cx as NOYDB_KEYRING_VERSION, cy as NOYDB_SYNC_VERSION, cz as Noydb, cA as NoydbBundleStore, cB as NoydbEventMap, cC as NoydbOptions, a8 as OpenPeriodOptions, aC as OutputSpec, cD as OverlayViewDescriptor, aG as OverlayedViewStrategy, aJ as OverlayedViewStrategyHandle, a9 as PERIODS_COLLECTION, cE as PUBLIC_ENVELOPE_FIELDS, cF as PaperRecoveryDoc, cG as PaperRecoveryEntry, cH as PassphrasePolicy, cI as PassphraseValidationResult, aa as PeriodRecord, cJ as Permission, cK as Permissions, cL as PersistedSchemaKind, cM as PlaintextTranslatorContext, cN as PlaintextTranslatorFn, P as PolicyEnforcer, cO as PresenceHandle, cP as PresencePeer, aR as PruneOptions, cQ as PublicEnvelopeField, cR as PublicEnvelopeSchema, cS as PublicEnvelopeText, cT as PullMode, cU as PullOptions, cV as PullPolicy, cW as PullResult, cX as PushMode, cY as PushOptions, cZ as PushPolicy, c_ as PushResult, c$ as PutManyItemOptions, d0 as PutManyOptions, d1 as PutManyResult, d2 as QueryAcrossOptions, d3 as QueryAcrossResult, d4 as QuickUnlockState, d5 as QuickUnlockStore, d6 as ReAuthOperation, aD as RecordOutputSpec, d7 as RecoverPassphraseInput, d8 as RecoverPassphraseResult, d9 as RecoverUserOptions, da as RecoveryProof, db as ResolvedPublicEnvelopeSchema, dc as RevokeOptions, aL as Role, dd as RotatePassphraseInput, de as RotateRecoveryOptions, df as RotateRecoveryResult, dg as SEALED_PASSPHRASE_RECORD_ID, dh as SealedEnvelope, di as SealedPassphrase, dj as SealingKeyProvider, dk as SessionPolicy, dl as SetPublicEnvelopeInput, dm as ShamirRecoveryDoc, dn as ShamirRecoveryEntry, dp as ShamirRecoveryProvider, U as SlotInfo, V as SlotRecord, dq as SlotRewrapCeremony, dr as SlotRewrapContext, ds as StandardSchemaV1, dt as StandardSchemaV1Issue, du as StandardSchemaV1SyncResult, dv as StoreAuth, dw as StoreAuthKind, dx as StoreCapabilities, dy as SyncEngine, dz as SyncMetadata, dA as SyncPolicy, dB as SyncScheduler, dC as SyncSchedulerStatus, dD as SyncStatus, dE as SyncTarget, dF as SyncTargetRole, dG as SyncTransaction, dH as SyncTransactionResult, dI as TierMode, dJ as TranslatorAuditEntry, as as TxCollection, at as TxContext, dK as TxOp, au as TxVault, dL as USER_ENVELOPE_COLLECTION, dM as USER_ENVELOPE_MAX_BYTES, bf as UnionSource, dN as Unsubscribe, dO as UpdateAuthenticatorOptions, dP as UpdateUserOptions, dQ as UserApi, dR as UserEnvelopeCheckGate, dS as UserEnvelopeOversizedError, dT as UserEnvelopePresented, dU as UserInfo, dV as VaultBackup, a_ as VaultEngine, ap as VaultFrame, a$ as VaultInstant, dW as VaultPolicyOnDisk, dX as VaultSchemaSnapshot, dY as VaultSnapshot, b0 as VerifyResult, W as VersionRecord, dZ as WarningRules, d_ as WeakPassphraseError, d$ as WeakPassphraseReason, e0 as WrappedDeksBlob, g as applyI18nLocale, b1 as applyPatch, e1 as assertStrongPassphrase, e2 as buildRecipientKeyringFile, e3 as burnPaperRecoveryEntry, b2 as canonicalJson, b3 as computePatch, n as createEnforcer, e4 as createNoydb, e5 as createStore, e6 as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b4 as diff, e7 as enrollAuthenticator, e8 as estimateEntropy, e9 as evaluateExportCapability, ea as evaluateImportCapability, eb as findAuthenticator, b5 as formatDiff, ec as hasExportCapability, ed as hasImportCapability, ee as hasRecoveryEnrolled, b6 as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, ef as isMagicLinkGrantExpired, eg as isPublicEnvelope, eh as issueDelegation, ei as keyringRecoverPassphrase, ej as keyringRotatePassphrase, ek as listMagicLinkGrants, el as listUsers, em as listUsersWithEnvelopes, en as loadActiveDelegations, eo as loadPaperRecoveryEntries, ep as loadSealedPassphrase, eq as loadShamirRecoveryEntries, er as magicLinkGrantRecordId, es as mintPaperRecoveryEntry, et as mintShamirRecoveryEntry, eu as mintWrappedDeksBlob, b7 as paddedIndex, b8 as parseIndex, ev as parseSealedEnvelope, ew as readMagicLinkGrantRecord, ex as recoverUser, ey as removeAuthenticator, r as resolveI18nText, ez as resolvePublicEnvelopeSchema, eA as revokeDelegation, eB as revokeMagicLinkGrant, av as runTransaction, eC as savePaperRecoveryEntries, eD as saveSealedPassphrase, eE as saveShamirRecoveryEntries, b9 as sha256Hex, eF as unwrapDeksFromBlob, eG as unwrapDeksFromPaperEntry, eH as unwrapDeksFromShamirEntry, eI as unwrapMagicLinkGrant, v as validateI18nTextValue, eJ as validatePassphrase, eK as validatePublicEnvelopeInput, eL as validateSchemaInput, eM as validateSchemaOutput, o as validateSessionPolicy, eN as writeMagicLinkGrant } from './types-C4lwMKKF.cjs';
+import { aO as NoydbStore, bo as UserEnvelope, ba as PublicEnvelope, bp as GateName, bq as GatePolicy, br as VaultPolicy, bs as ActiveTier, bt as FactorProof, bu as PersistedSchemaEnvelope, bv as DirectoryConfig, bw as UserVisibility, aM as UnlockedKeyring, bf as Vault, aV as DiffEntry } from './types-DJG8HG6F.cjs';
+export { bx as AccessibleVault, aS as AppendInput, ay as ArrayOutputSpec, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, by as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, bz as BuiltInGateName, bc as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, bA as CacheOptions, bB as CacheStats, bC as ChangeEvent, aT as ChangeType, a7 as ClosePeriodOptions, aH as Collection, bD as CollectionChangeEvent, bE as CollectionConflictResolver, bF as CollectionDescriptor, ao as CollectionFrame, aU as CollectionInstant, bG as CollectionStats, bH as Conflict, bI as ConflictPolicy, bJ as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, bK as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bL as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bM as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bN as DeepPartial, bO as DeepPartialOrNull, bP as DelegationToken, bQ as DeleteManyResult, bR as DerivationDescriptor, aw as DerivationStrategy, aA as DerivationStrategyHandle, aB as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bS as DirtyEntry, bT as DumpSchemaOptions, bU as ELEVATION_AUDIT_COLLECTION, bV as ElevatedHandle, aQ as EncryptedEnvelope, bW as EnrollAuthenticatorOptions, bX as EnrollAuthenticatorWrappingDEKsOptions, bY as EnrollAuthenticatorWrappingKEKOptions, bZ as EnrollRecoveryResult, b_ as ExportCapability, b$ as ExportChunk, c0 as ExportFormat, c1 as ExportStreamOptions, c2 as FactorKind, c3 as FactorProofBundle, c4 as FactorRequirement, c5 as FieldDescriptor, c6 as FieldSource, c7 as GhostRecord, c8 as GrantOptions, ai as GuardChange, aj as GuardContext, ah as GuardStrategy, al as GuardStrategyHandle, c9 as HistoryConfig, ca as HistoryEntry, aP as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, cb as INDEXED_STORE_POLICY, cc as ImportCapability, cd as InferOutput, ce as InternalCollectionStats, cf as IssueDelegationOptions, cg as IssueMagicLinkGrantOptions, aW as JsonPatch, aX as JsonPatchOp, ch as KeyringAuthenticator, ci as KeyringAuthenticatorWrappingDEKs, cj as KeyringAuthenticatorWrappingKEK, ck as KeyringFile, aY as LedgerEntry, aZ as LedgerStore, cl as ListAccessibleVaultsOptions, cm as ListPageResult, cn as ListUsersOptions, co as LiveUserEnvelope, cp as LocaleReadOptions, cq as Lru, cr as LruOptions, cs as LruStats, ct as MAGIC_LINK_CONTENT_INFO_PREFIX, cu as MAGIC_LINK_GRANTS_COLLECTION, cv as MAGIC_LINK_KEK_INFO_PREFIX, cw as MagicLinkGrantPayload, cx as MagicLinkGrantRecord, bl as MaterializedFromMeta, cy as MaterializedViewDescriptor, bm as MaterializedViewOutput, aE as MaterializedViewStrategy, aF as MaterializedViewStrategyHandle, cz as MemoryRecipientSealer, cA as MemorySealingKeyProvider, cB as NOYDB_BACKUP_VERSION, cC as NOYDB_FORMAT_VERSION, cD as NOYDB_KEYRING_VERSION, cE as NOYDB_SYNC_VERSION, cF as Noydb, cG as NoydbBundleStore, cH as NoydbEventMap, cI as NoydbOptions, a8 as OpenPeriodOptions, aC as OutputSpec, cJ as OverlayViewDescriptor, aG as OverlayedViewStrategy, aJ as OverlayedViewStrategyHandle, a9 as PERIODS_COLLECTION, cK as PUBLIC_ENVELOPE_FIELDS, cL as PaperRecoveryDoc, cM as PaperRecoveryEntry, cN as PassphrasePolicy, cO as PassphraseValidationResult, aa as PeriodRecord, cP as Permission, cQ as Permissions, cR as PersistedSchemaKind, cS as PlaintextTranslatorContext, cT as PlaintextTranslatorFn, P as PolicyEnforcer, cU as PresenceHandle, cV as PresencePeer, aR as PruneOptions, cW as PublicEnvelopeField, cX as PublicEnvelopeSchema, cY as PublicEnvelopeText, cZ as PullMode, c_ as PullOptions, c$ as PullPolicy, d0 as PullResult, d1 as PushMode, d2 as PushOptions, d3 as PushPolicy, d4 as PushResult, d5 as PutManyItemOptions, d6 as PutManyOptions, d7 as PutManyResult, d8 as QueryAcrossOptions, d9 as QueryAcrossResult, da as QuickUnlockState, db as QuickUnlockStore, dc as ReAuthOperation, be as RecipientHint, bd as RecipientSealer, aD as RecordOutputSpec, dd as RecoverPassphraseInput, de as RecoverPassphraseResult, df as RecoverUserOptions, dg as RecoveryProof, dh as ResolvedPublicEnvelopeSchema, di as RevokeOptions, aL as Role, dj as RotatePassphraseInput, dk as RotateRecoveryOptions, dl as RotateRecoveryResult, dm as SEALED_PASSPHRASE_RECORD_ID, dn as SealedEnvelope, dp as SealedPassphrase, bb as SealingKeyProvider, dq as SessionPolicy, dr as SetPublicEnvelopeInput, ds as ShamirRecoveryDoc, dt as ShamirRecoveryEntry, bh as ShamirRecoveryProvider, U as SlotInfo, V as SlotRecord, du as SlotRewrapCeremony, dv as SlotRewrapContext, dw as StandardSchemaV1, dx as StandardSchemaV1Issue, dy as StandardSchemaV1SyncResult, dz as StoreAuth, dA as StoreAuthKind, dB as StoreCapabilities, dC as SyncEngine, dD as SyncMetadata, dE as SyncPolicy, dF as SyncScheduler, dG as SyncSchedulerStatus, dH as SyncStatus, dI as SyncTarget, dJ as SyncTargetRole, dK as SyncTransaction, dL as SyncTransactionResult, dM as TierMode, dN as TranslatorAuditEntry, as as TxCollection, at as TxContext, dO as TxOp, au as TxVault, dP as USER_ENVELOPE_COLLECTION, dQ as USER_ENVELOPE_MAX_BYTES, bn as UnionSource, dR as Unsubscribe, dS as UpdateAuthenticatorOptions, dT as UpdateUserOptions, dU as UserApi, dV as UserEnvelopeCheckGate, dW as UserEnvelopeOversizedError, dX as UserEnvelopePresented, dY as UserInfo, dZ as VaultBackup, a_ as VaultEngine, ap as VaultFrame, a$ as VaultInstant, d_ as VaultPolicyOnDisk, d$ as VaultSchemaSnapshot, e0 as VaultSnapshot, b0 as VerifyResult, W as VersionRecord, e1 as WarningRules, e2 as WeakPassphraseError, e3 as WeakPassphraseReason, e4 as WrappedDeksBlob, g as applyI18nLocale, b1 as applyPatch, e5 as assertStrongPassphrase, e6 as buildRecipientKeyringFile, e7 as burnPaperRecoveryEntry, b2 as canonicalJson, b3 as computePatch, n as createEnforcer, e8 as createNoydb, e9 as createStore, ea as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b4 as diff, eb as enrollAuthenticator, ec as estimateEntropy, ed as evaluateExportCapability, ee as evaluateImportCapability, ef as findAuthenticator, b5 as formatDiff, eg as hasExportCapability, eh as hasImportCapability, ei as hasRecoveryEnrolled, b6 as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, ej as isMagicLinkGrantExpired, ek as isPublicEnvelope, el as issueDelegation, em as keyringRecoverPassphrase, en as keyringRotatePassphrase, eo as listMagicLinkGrants, ep as listUsers, eq as listUsersWithEnvelopes, er as loadActiveDelegations, es as loadPaperRecoveryEntries, et as loadSealedPassphrase, eu as loadShamirRecoveryEntries, ev as magicLinkGrantRecordId, ew as mintPaperRecoveryEntry, ex as mintShamirRecoveryEntry, ey as mintWrappedDeksBlob, b7 as paddedIndex, b8 as parseIndex, ez as parseSealedEnvelope, eA as readMagicLinkGrantRecord, eB as recoverUser, eC as removeAuthenticator, r as resolveI18nText, eD as resolvePublicEnvelopeSchema, eE as revokeDelegation, eF as revokeMagicLinkGrant, av as runTransaction, eG as savePaperRecoveryEntries, eH as saveSealedPassphrase, eI as saveShamirRecoveryEntries, b9 as sha256Hex, eJ as unwrapDeksFromBlob, eK as unwrapDeksFromPaperEntry, eL as unwrapDeksFromShamirEntry, eM as unwrapMagicLinkGrant, v as validateI18nTextValue, eN as validatePassphrase, eO as validatePublicEnvelopeInput, eP as validateSchemaInput, eQ as validateSchemaOutput, o as validateSessionPolicy, eR as writeMagicLinkGrant } from './types-DJG8HG6F.cjs';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
-import { N as NoydbError } from './index-CmVgTkqk.cjs';
-export { q as AlreadyElevatedError, A as AmendmentForbiddenError, B as BackupCorruptedError, r as BackupLedgerError, s as BundleIntegrityError, t as BundleSealMismatchError, u as BundleVersionConflictError, C as ConflictError, v as DEFAULT_JOIN_MAX_ROWS, w as DanglingReferenceError, x as DecryptionError, y as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, z as DirectoryDisabledError, E as ElevationExpiredError, G as ExportCapabilityError, F as FieldFrozenError, H as FilenameSanitizationError, J as GroupCardinalityError, K as ImportCapabilityError, P as IndexRequiredError, U as IndexWriteFailureError, V as InvalidKeyError, I as InvariantError, W as JoinContext, X as JoinLeg, Y as JoinStrategy, Z as JoinTooLargeError, _ as JoinableSource, $ as KeyringCorruptError, a0 as KeyringExpiredError, a1 as LedgerContentionError, a2 as LiveQuery, a3 as LiveUpstream, L as LocaleNotSpecifiedError, m as MaterializedViewConfigError, n as MaterializedViewCycleError, o as MaterializedViewSourceUnknownError, p as MaterializedViewTooLargeError, M as MissingTranslationError, a4 as NetworkError, a5 as NoAccessError, a6 as NotFoundError, a7 as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, a8 as PathEscapeError, a9 as PeriodClosedError, aa as PermissionDeniedError, ab as PrivilegeEscalationError, Q as Query, ac as QueryPlan, ad as QuerySource, ae as ReadOnlyAtInstantError, af as ReadOnlyError, ag as ReadOnlyFrameError, d as RecordLockedError, ah as RefDescriptor, ai as RefIntegrityError, aj as RefMode, ak as RefRegistry, al as RefScopeError, am as RefViolation, R as ReservedCollectionNameError, an as ScanBuilder, ao as ScanPageProvider, ap as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, aq as StoreCapabilityError, ar as TamperedError, as as TierDemoteDeniedError, at as TierNotGrantedError, T as TranslatorNotConfiguredError, au as ValidationError, av as applyJoins, aw as buildLiveQuery, ax as executePlan, ay as ref, az as resetJoinWarnings } from './index-CmVgTkqk.cjs';
-export { A as AutoCredential, a as AutoCredentialKind, C as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, b as NOYDB_BUNDLE_MAGIC, c as NOYDB_BUNDLE_PREFIX_BYTES, d as NoydbBundleHeader, e as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, g as generateULID, h as hasNoydbBundleMagic, i as isULID, r as readNoydbBundle, f as readNoydbBundleHeader, j as readNoydbBundlePublicEnvelope, k as resetBrotliSupportCache, w as writeNoydbBundle } from './index-hdFvZkBP.cjs';
+import { N as NoydbError } from './index-BMjrzNZr.cjs';
+export { x as AlreadyElevatedError, A as AmendmentForbiddenError, m as AttestationError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, C as ConflictError, y as DEFAULT_JOIN_MAX_ROWS, z as DanglingReferenceError, E as DecryptionError, G as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, H as DirectoryDisabledError, J as ElevationExpiredError, K as ExportCapabilityError, F as FieldFrozenError, U as FilenameSanitizationError, V as GroupCardinalityError, W as ImportCapabilityError, X as IndexRequiredError, Y as IndexWriteFailureError, Z as InvalidKeyError, I as InvariantError, _ as JoinContext, $ as JoinLeg, a0 as JoinStrategy, a1 as JoinTooLargeError, a2 as JoinableSource, a3 as KeyringCorruptError, a4 as KeyringExpiredError, a5 as LedgerContentionError, a6 as LiveQuery, a7 as LiveUpstream, L as LocaleNotSpecifiedError, t as MaterializedViewConfigError, u as MaterializedViewCycleError, v as MaterializedViewSourceUnknownError, w as MaterializedViewTooLargeError, M as MissingTranslationError, a8 as NetworkError, a9 as NoAccessError, aa as NotFoundError, ab as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, ac as PathEscapeError, ad as PeriodClosedError, ae as PermissionDeniedError, af as PrivilegeEscalationError, Q as Query, ag as QueryPlan, ah as QuerySource, ai as ReadOnlyAtInstantError, aj as ReadOnlyError, ak as ReadOnlyFrameError, d as RecordLockedError, al as RefDescriptor, am as RefIntegrityError, an as RefMode, ao as RefRegistry, ap as RefScopeError, aq as RefViolation, R as ReservedCollectionNameError, ar as ScanBuilder, as as ScanPageProvider, at as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, au as StoreCapabilityError, av as TamperedError, aw as TierDemoteDeniedError, ax as TierNotGrantedError, T as TranslatorNotConfiguredError, ay as ValidationError, az as applyJoins, aA as buildLiveQuery, aB as executePlan, aC as ref, aD as resetJoinWarnings } from './index-BMjrzNZr.cjs';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-C7ms9oli.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
-export { w as withGuard } from './with-guard-jI1x9Z3k.cjs';
-export { w as withDerivation } from './with-derivation-C8LDlV7t.cjs';
-export { w as withMaterializedView } from './with-materialized-view-DcTx4H3j.cjs';
+export { w as withGuard } from './with-guard-DQme5DKE.cjs';
+export { w as withDerivation } from './with-derivation-BjQ7q4NE.cjs';
+export { w as withMaterializedView } from './with-materialized-view-BbEPFIIJ.cjs';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Dnu81tsS.cjs';
-export { w as withOverlayedView } from './with-overlayed-view-D-6oWAgM.cjs';
+export { w as withOverlayedView } from './with-overlayed-view-bwlmmFjx.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-DRwVSy2S.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-DQCNDfFp.cjs';
 export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, R as Reducer, k as ReducerOptions, l as avg, n as count, o as groupAndReduce, p as max, q as min, r as reduceRecords, t as sum } from './strategy-DSTrsZ8t.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-DtRih9MQ.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-jDowCrK2.cjs';
 import './lazy-builder-C-rPfWG0.cjs';
+import '@noy-db/attestation';
 
 /**
  * Persistence helpers for per-principal user envelopes stored at

package/dist/index.d.ts

@@ -1,21 +1,22 @@
-import { aO as NoydbStore, bg as UserEnvelope, bh as PublicEnvelope, bi as GateName, bj as GatePolicy, bk as VaultPolicy, bl as ActiveTier, bm as FactorProof, bn as PersistedSchemaEnvelope, bo as DirectoryConfig, bp as UserVisibility, aM as UnlockedKeyring, bq as Vault, aV as DiffEntry } from './types-DW9RGSSs.js';
-export { br as AccessibleVault, aS as AppendInput, ay as ArrayOutputSpec, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, bs as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, bt as BuiltInGateName, bu as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, bv as CacheOptions, bw as CacheStats, bx as ChangeEvent, aT as ChangeType, a7 as ClosePeriodOptions, aH as Collection, by as CollectionChangeEvent, bz as CollectionConflictResolver, bA as CollectionDescriptor, ao as CollectionFrame, aU as CollectionInstant, bB as CollectionStats, bC as Conflict, bD as ConflictPolicy, bE as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, bF as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bG as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bH as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bI as DeepPartial, bJ as DeepPartialOrNull, bK as DelegationToken, bL as DeleteManyResult, bM as DerivationDescriptor, aw as DerivationStrategy, aA as DerivationStrategyHandle, aB as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bN as DirtyEntry, bO as DumpSchemaOptions, bP as ELEVATION_AUDIT_COLLECTION, bQ as ElevatedHandle, aQ as EncryptedEnvelope, bR as EnrollAuthenticatorOptions, bS as EnrollAuthenticatorWrappingDEKsOptions, bT as EnrollAuthenticatorWrappingKEKOptions, bU as EnrollRecoveryResult, bV as ExportCapability, bW as ExportChunk, bX as ExportFormat, bY as ExportStreamOptions, bZ as FactorKind, b_ as FactorProofBundle, b$ as FactorRequirement, c0 as FieldDescriptor, c1 as FieldSource, c2 as GhostRecord, c3 as GrantOptions, ai as GuardChange, aj as GuardContext, ah as GuardStrategy, al as GuardStrategyHandle, c4 as HistoryConfig, c5 as HistoryEntry, aP as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, c6 as INDEXED_STORE_POLICY, c7 as ImportCapability, c8 as InferOutput, c9 as InternalCollectionStats, ca as IssueDelegationOptions, cb as IssueMagicLinkGrantOptions, aW as JsonPatch, aX as JsonPatchOp, cc as KeyringAuthenticator, cd as KeyringAuthenticatorWrappingDEKs, ce as KeyringAuthenticatorWrappingKEK, cf as KeyringFile, aY as LedgerEntry, aZ as LedgerStore, cg as ListAccessibleVaultsOptions, ch as ListPageResult, ci as ListUsersOptions, cj as LiveUserEnvelope, ck as LocaleReadOptions, cl as Lru, cm as LruOptions, cn as LruStats, co as MAGIC_LINK_CONTENT_INFO_PREFIX, cp as MAGIC_LINK_GRANTS_COLLECTION, cq as MAGIC_LINK_KEK_INFO_PREFIX, cr as MagicLinkGrantPayload, cs as MagicLinkGrantRecord, bd as MaterializedFromMeta, ct as MaterializedViewDescriptor, be as MaterializedViewOutput, aE as MaterializedViewStrategy, aF as MaterializedViewStrategyHandle, cu as MemorySealingKeyProvider, cv as NOYDB_BACKUP_VERSION, cw as NOYDB_FORMAT_VERSION, cx as NOYDB_KEYRING_VERSION, cy as NOYDB_SYNC_VERSION, cz as Noydb, cA as NoydbBundleStore, cB as NoydbEventMap, cC as NoydbOptions, a8 as OpenPeriodOptions, aC as OutputSpec, cD as OverlayViewDescriptor, aG as OverlayedViewStrategy, aJ as OverlayedViewStrategyHandle, a9 as PERIODS_COLLECTION, cE as PUBLIC_ENVELOPE_FIELDS, cF as PaperRecoveryDoc, cG as PaperRecoveryEntry, cH as PassphrasePolicy, cI as PassphraseValidationResult, aa as PeriodRecord, cJ as Permission, cK as Permissions, cL as PersistedSchemaKind, cM as PlaintextTranslatorContext, cN as PlaintextTranslatorFn, P as PolicyEnforcer, cO as PresenceHandle, cP as PresencePeer, aR as PruneOptions, cQ as PublicEnvelopeField, cR as PublicEnvelopeSchema, cS as PublicEnvelopeText, cT as PullMode, cU as PullOptions, cV as PullPolicy, cW as PullResult, cX as PushMode, cY as PushOptions, cZ as PushPolicy, c_ as PushResult, c$ as PutManyItemOptions, d0 as PutManyOptions, d1 as PutManyResult, d2 as QueryAcrossOptions, d3 as QueryAcrossResult, d4 as QuickUnlockState, d5 as QuickUnlockStore, d6 as ReAuthOperation, aD as RecordOutputSpec, d7 as RecoverPassphraseInput, d8 as RecoverPassphraseResult, d9 as RecoverUserOptions, da as RecoveryProof, db as ResolvedPublicEnvelopeSchema, dc as RevokeOptions, aL as Role, dd as RotatePassphraseInput, de as RotateRecoveryOptions, df as RotateRecoveryResult, dg as SEALED_PASSPHRASE_RECORD_ID, dh as SealedEnvelope, di as SealedPassphrase, dj as SealingKeyProvider, dk as SessionPolicy, dl as SetPublicEnvelopeInput, dm as ShamirRecoveryDoc, dn as ShamirRecoveryEntry, dp as ShamirRecoveryProvider, U as SlotInfo, V as SlotRecord, dq as SlotRewrapCeremony, dr as SlotRewrapContext, ds as StandardSchemaV1, dt as StandardSchemaV1Issue, du as StandardSchemaV1SyncResult, dv as StoreAuth, dw as StoreAuthKind, dx as StoreCapabilities, dy as SyncEngine, dz as SyncMetadata, dA as SyncPolicy, dB as SyncScheduler, dC as SyncSchedulerStatus, dD as SyncStatus, dE as SyncTarget, dF as SyncTargetRole, dG as SyncTransaction, dH as SyncTransactionResult, dI as TierMode, dJ as TranslatorAuditEntry, as as TxCollection, at as TxContext, dK as TxOp, au as TxVault, dL as USER_ENVELOPE_COLLECTION, dM as USER_ENVELOPE_MAX_BYTES, bf as UnionSource, dN as Unsubscribe, dO as UpdateAuthenticatorOptions, dP as UpdateUserOptions, dQ as UserApi, dR as UserEnvelopeCheckGate, dS as UserEnvelopeOversizedError, dT as UserEnvelopePresented, dU as UserInfo, dV as VaultBackup, a_ as VaultEngine, ap as VaultFrame, a$ as VaultInstant, dW as VaultPolicyOnDisk, dX as VaultSchemaSnapshot, dY as VaultSnapshot, b0 as VerifyResult, W as VersionRecord, dZ as WarningRules, d_ as WeakPassphraseError, d$ as WeakPassphraseReason, e0 as WrappedDeksBlob, g as applyI18nLocale, b1 as applyPatch, e1 as assertStrongPassphrase, e2 as buildRecipientKeyringFile, e3 as burnPaperRecoveryEntry, b2 as canonicalJson, b3 as computePatch, n as createEnforcer, e4 as createNoydb, e5 as createStore, e6 as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b4 as diff, e7 as enrollAuthenticator, e8 as estimateEntropy, e9 as evaluateExportCapability, ea as evaluateImportCapability, eb as findAuthenticator, b5 as formatDiff, ec as hasExportCapability, ed as hasImportCapability, ee as hasRecoveryEnrolled, b6 as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, ef as isMagicLinkGrantExpired, eg as isPublicEnvelope, eh as issueDelegation, ei as keyringRecoverPassphrase, ej as keyringRotatePassphrase, ek as listMagicLinkGrants, el as listUsers, em as listUsersWithEnvelopes, en as loadActiveDelegations, eo as loadPaperRecoveryEntries, ep as loadSealedPassphrase, eq as loadShamirRecoveryEntries, er as magicLinkGrantRecordId, es as mintPaperRecoveryEntry, et as mintShamirRecoveryEntry, eu as mintWrappedDeksBlob, b7 as paddedIndex, b8 as parseIndex, ev as parseSealedEnvelope, ew as readMagicLinkGrantRecord, ex as recoverUser, ey as removeAuthenticator, r as resolveI18nText, ez as resolvePublicEnvelopeSchema, eA as revokeDelegation, eB as revokeMagicLinkGrant, av as runTransaction, eC as savePaperRecoveryEntries, eD as saveSealedPassphrase, eE as saveShamirRecoveryEntries, b9 as sha256Hex, eF as unwrapDeksFromBlob, eG as unwrapDeksFromPaperEntry, eH as unwrapDeksFromShamirEntry, eI as unwrapMagicLinkGrant, v as validateI18nTextValue, eJ as validatePassphrase, eK as validatePublicEnvelopeInput, eL as validateSchemaInput, eM as validateSchemaOutput, o as validateSessionPolicy, eN as writeMagicLinkGrant } from './types-DW9RGSSs.js';
+import { aO as NoydbStore, bo as UserEnvelope, ba as PublicEnvelope, bp as GateName, bq as GatePolicy, br as VaultPolicy, bs as ActiveTier, bt as FactorProof, bu as PersistedSchemaEnvelope, bv as DirectoryConfig, bw as UserVisibility, aM as UnlockedKeyring, bf as Vault, aV as DiffEntry } from './types-BoFFiskX.js';
+export { bx as AccessibleVault, aS as AppendInput, ay as ArrayOutputSpec, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, by as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, bz as BuiltInGateName, bc as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, bA as CacheOptions, bB as CacheStats, bC as ChangeEvent, aT as ChangeType, a7 as ClosePeriodOptions, aH as Collection, bD as CollectionChangeEvent, bE as CollectionConflictResolver, bF as CollectionDescriptor, ao as CollectionFrame, aU as CollectionInstant, bG as CollectionStats, bH as Conflict, bI as ConflictPolicy, bJ as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, bK as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bL as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bM as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bN as DeepPartial, bO as DeepPartialOrNull, bP as DelegationToken, bQ as DeleteManyResult, bR as DerivationDescriptor, aw as DerivationStrategy, aA as DerivationStrategyHandle, aB as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bS as DirtyEntry, bT as DumpSchemaOptions, bU as ELEVATION_AUDIT_COLLECTION, bV as ElevatedHandle, aQ as EncryptedEnvelope, bW as EnrollAuthenticatorOptions, bX as EnrollAuthenticatorWrappingDEKsOptions, bY as EnrollAuthenticatorWrappingKEKOptions, bZ as EnrollRecoveryResult, b_ as ExportCapability, b$ as ExportChunk, c0 as ExportFormat, c1 as ExportStreamOptions, c2 as FactorKind, c3 as FactorProofBundle, c4 as FactorRequirement, c5 as FieldDescriptor, c6 as FieldSource, c7 as GhostRecord, c8 as GrantOptions, ai as GuardChange, aj as GuardContext, ah as GuardStrategy, al as GuardStrategyHandle, c9 as HistoryConfig, ca as HistoryEntry, aP as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, cb as INDEXED_STORE_POLICY, cc as ImportCapability, cd as InferOutput, ce as InternalCollectionStats, cf as IssueDelegationOptions, cg as IssueMagicLinkGrantOptions, aW as JsonPatch, aX as JsonPatchOp, ch as KeyringAuthenticator, ci as KeyringAuthenticatorWrappingDEKs, cj as KeyringAuthenticatorWrappingKEK, ck as KeyringFile, aY as LedgerEntry, aZ as LedgerStore, cl as ListAccessibleVaultsOptions, cm as ListPageResult, cn as ListUsersOptions, co as LiveUserEnvelope, cp as LocaleReadOptions, cq as Lru, cr as LruOptions, cs as LruStats, ct as MAGIC_LINK_CONTENT_INFO_PREFIX, cu as MAGIC_LINK_GRANTS_COLLECTION, cv as MAGIC_LINK_KEK_INFO_PREFIX, cw as MagicLinkGrantPayload, cx as MagicLinkGrantRecord, bl as MaterializedFromMeta, cy as MaterializedViewDescriptor, bm as MaterializedViewOutput, aE as MaterializedViewStrategy, aF as MaterializedViewStrategyHandle, cz as MemoryRecipientSealer, cA as MemorySealingKeyProvider, cB as NOYDB_BACKUP_VERSION, cC as NOYDB_FORMAT_VERSION, cD as NOYDB_KEYRING_VERSION, cE as NOYDB_SYNC_VERSION, cF as Noydb, cG as NoydbBundleStore, cH as NoydbEventMap, cI as NoydbOptions, a8 as OpenPeriodOptions, aC as OutputSpec, cJ as OverlayViewDescriptor, aG as OverlayedViewStrategy, aJ as OverlayedViewStrategyHandle, a9 as PERIODS_COLLECTION, cK as PUBLIC_ENVELOPE_FIELDS, cL as PaperRecoveryDoc, cM as PaperRecoveryEntry, cN as PassphrasePolicy, cO as PassphraseValidationResult, aa as PeriodRecord, cP as Permission, cQ as Permissions, cR as PersistedSchemaKind, cS as PlaintextTranslatorContext, cT as PlaintextTranslatorFn, P as PolicyEnforcer, cU as PresenceHandle, cV as PresencePeer, aR as PruneOptions, cW as PublicEnvelopeField, cX as PublicEnvelopeSchema, cY as PublicEnvelopeText, cZ as PullMode, c_ as PullOptions, c$ as PullPolicy, d0 as PullResult, d1 as PushMode, d2 as PushOptions, d3 as PushPolicy, d4 as PushResult, d5 as PutManyItemOptions, d6 as PutManyOptions, d7 as PutManyResult, d8 as QueryAcrossOptions, d9 as QueryAcrossResult, da as QuickUnlockState, db as QuickUnlockStore, dc as ReAuthOperation, be as RecipientHint, bd as RecipientSealer, aD as RecordOutputSpec, dd as RecoverPassphraseInput, de as RecoverPassphraseResult, df as RecoverUserOptions, dg as RecoveryProof, dh as ResolvedPublicEnvelopeSchema, di as RevokeOptions, aL as Role, dj as RotatePassphraseInput, dk as RotateRecoveryOptions, dl as RotateRecoveryResult, dm as SEALED_PASSPHRASE_RECORD_ID, dn as SealedEnvelope, dp as SealedPassphrase, bb as SealingKeyProvider, dq as SessionPolicy, dr as SetPublicEnvelopeInput, ds as ShamirRecoveryDoc, dt as ShamirRecoveryEntry, bh as ShamirRecoveryProvider, U as SlotInfo, V as SlotRecord, du as SlotRewrapCeremony, dv as SlotRewrapContext, dw as StandardSchemaV1, dx as StandardSchemaV1Issue, dy as StandardSchemaV1SyncResult, dz as StoreAuth, dA as StoreAuthKind, dB as StoreCapabilities, dC as SyncEngine, dD as SyncMetadata, dE as SyncPolicy, dF as SyncScheduler, dG as SyncSchedulerStatus, dH as SyncStatus, dI as SyncTarget, dJ as SyncTargetRole, dK as SyncTransaction, dL as SyncTransactionResult, dM as TierMode, dN as TranslatorAuditEntry, as as TxCollection, at as TxContext, dO as TxOp, au as TxVault, dP as USER_ENVELOPE_COLLECTION, dQ as USER_ENVELOPE_MAX_BYTES, bn as UnionSource, dR as Unsubscribe, dS as UpdateAuthenticatorOptions, dT as UpdateUserOptions, dU as UserApi, dV as UserEnvelopeCheckGate, dW as UserEnvelopeOversizedError, dX as UserEnvelopePresented, dY as UserInfo, dZ as VaultBackup, a_ as VaultEngine, ap as VaultFrame, a$ as VaultInstant, d_ as VaultPolicyOnDisk, d$ as VaultSchemaSnapshot, e0 as VaultSnapshot, b0 as VerifyResult, W as VersionRecord, e1 as WarningRules, e2 as WeakPassphraseError, e3 as WeakPassphraseReason, e4 as WrappedDeksBlob, g as applyI18nLocale, b1 as applyPatch, e5 as assertStrongPassphrase, e6 as buildRecipientKeyringFile, e7 as burnPaperRecoveryEntry, b2 as canonicalJson, b3 as computePatch, n as createEnforcer, e8 as createNoydb, e9 as createStore, ea as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b4 as diff, eb as enrollAuthenticator, ec as estimateEntropy, ed as evaluateExportCapability, ee as evaluateImportCapability, ef as findAuthenticator, b5 as formatDiff, eg as hasExportCapability, eh as hasImportCapability, ei as hasRecoveryEnrolled, b6 as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, ej as isMagicLinkGrantExpired, ek as isPublicEnvelope, el as issueDelegation, em as keyringRecoverPassphrase, en as keyringRotatePassphrase, eo as listMagicLinkGrants, ep as listUsers, eq as listUsersWithEnvelopes, er as loadActiveDelegations, es as loadPaperRecoveryEntries, et as loadSealedPassphrase, eu as loadShamirRecoveryEntries, ev as magicLinkGrantRecordId, ew as mintPaperRecoveryEntry, ex as mintShamirRecoveryEntry, ey as mintWrappedDeksBlob, b7 as paddedIndex, b8 as parseIndex, ez as parseSealedEnvelope, eA as readMagicLinkGrantRecord, eB as recoverUser, eC as removeAuthenticator, r as resolveI18nText, eD as resolvePublicEnvelopeSchema, eE as revokeDelegation, eF as revokeMagicLinkGrant, av as runTransaction, eG as savePaperRecoveryEntries, eH as saveSealedPassphrase, eI as saveShamirRecoveryEntries, b9 as sha256Hex, eJ as unwrapDeksFromBlob, eK as unwrapDeksFromPaperEntry, eL as unwrapDeksFromShamirEntry, eM as unwrapMagicLinkGrant, v as validateI18nTextValue, eN as validatePassphrase, eO as validatePublicEnvelopeInput, eP as validateSchemaInput, eQ as validateSchemaOutput, o as validateSessionPolicy, eR as writeMagicLinkGrant } from './types-BoFFiskX.js';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
-import { N as NoydbError } from './index-CNwA-B6-.js';
-export { q as AlreadyElevatedError, A as AmendmentForbiddenError, B as BackupCorruptedError, r as BackupLedgerError, s as BundleIntegrityError, t as BundleSealMismatchError, u as BundleVersionConflictError, C as ConflictError, v as DEFAULT_JOIN_MAX_ROWS, w as DanglingReferenceError, x as DecryptionError, y as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, z as DirectoryDisabledError, E as ElevationExpiredError, G as ExportCapabilityError, F as FieldFrozenError, H as FilenameSanitizationError, J as GroupCardinalityError, K as ImportCapabilityError, P as IndexRequiredError, U as IndexWriteFailureError, V as InvalidKeyError, I as InvariantError, W as JoinContext, X as JoinLeg, Y as JoinStrategy, Z as JoinTooLargeError, _ as JoinableSource, $ as KeyringCorruptError, a0 as KeyringExpiredError, a1 as LedgerContentionError, a2 as LiveQuery, a3 as LiveUpstream, L as LocaleNotSpecifiedError, m as MaterializedViewConfigError, n as MaterializedViewCycleError, o as MaterializedViewSourceUnknownError, p as MaterializedViewTooLargeError, M as MissingTranslationError, a4 as NetworkError, a5 as NoAccessError, a6 as NotFoundError, a7 as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, a8 as PathEscapeError, a9 as PeriodClosedError, aa as PermissionDeniedError, ab as PrivilegeEscalationError, Q as Query, ac as QueryPlan, ad as QuerySource, ae as ReadOnlyAtInstantError, af as ReadOnlyError, ag as ReadOnlyFrameError, d as RecordLockedError, ah as RefDescriptor, ai as RefIntegrityError, aj as RefMode, ak as RefRegistry, al as RefScopeError, am as RefViolation, R as ReservedCollectionNameError, an as ScanBuilder, ao as ScanPageProvider, ap as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, aq as StoreCapabilityError, ar as TamperedError, as as TierDemoteDeniedError, at as TierNotGrantedError, T as TranslatorNotConfiguredError, au as ValidationError, av as applyJoins, aw as buildLiveQuery, ax as executePlan, ay as ref, az as resetJoinWarnings } from './index-CNwA-B6-.js';
-export { A as AutoCredential, a as AutoCredentialKind, C as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, b as NOYDB_BUNDLE_MAGIC, c as NOYDB_BUNDLE_PREFIX_BYTES, d as NoydbBundleHeader, e as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, g as generateULID, h as hasNoydbBundleMagic, i as isULID, r as readNoydbBundle, f as readNoydbBundleHeader, j as readNoydbBundlePublicEnvelope, k as resetBrotliSupportCache, w as writeNoydbBundle } from './index-4agOpzqd.js';
+import { N as NoydbError } from './index-BCKdioeh.js';
+export { x as AlreadyElevatedError, A as AmendmentForbiddenError, m as AttestationError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, C as ConflictError, y as DEFAULT_JOIN_MAX_ROWS, z as DanglingReferenceError, E as DecryptionError, G as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, H as DirectoryDisabledError, J as ElevationExpiredError, K as ExportCapabilityError, F as FieldFrozenError, U as FilenameSanitizationError, V as GroupCardinalityError, W as ImportCapabilityError, X as IndexRequiredError, Y as IndexWriteFailureError, Z as InvalidKeyError, I as InvariantError, _ as JoinContext, $ as JoinLeg, a0 as JoinStrategy, a1 as JoinTooLargeError, a2 as JoinableSource, a3 as KeyringCorruptError, a4 as KeyringExpiredError, a5 as LedgerContentionError, a6 as LiveQuery, a7 as LiveUpstream, L as LocaleNotSpecifiedError, t as MaterializedViewConfigError, u as MaterializedViewCycleError, v as MaterializedViewSourceUnknownError, w as MaterializedViewTooLargeError, M as MissingTranslationError, a8 as NetworkError, a9 as NoAccessError, aa as NotFoundError, ab as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, ac as PathEscapeError, ad as PeriodClosedError, ae as PermissionDeniedError, af as PrivilegeEscalationError, Q as Query, ag as QueryPlan, ah as QuerySource, ai as ReadOnlyAtInstantError, aj as ReadOnlyError, ak as ReadOnlyFrameError, d as RecordLockedError, al as RefDescriptor, am as RefIntegrityError, an as RefMode, ao as RefRegistry, ap as RefScopeError, aq as RefViolation, R as ReservedCollectionNameError, ar as ScanBuilder, as as ScanPageProvider, at as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, au as StoreCapabilityError, av as TamperedError, aw as TierDemoteDeniedError, ax as TierNotGrantedError, T as TranslatorNotConfiguredError, ay as ValidationError, az as applyJoins, aA as buildLiveQuery, aB as executePlan, aC as ref, aD as resetJoinWarnings } from './index-BCKdioeh.js';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-BmBgooGm.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
-export { w as withGuard } from './with-guard-DWOCK4Ca.js';
-export { w as withDerivation } from './with-derivation-g-pGoMzL.js';
-export { w as withMaterializedView } from './with-materialized-view-DaKR-N6J.js';
+export { w as withGuard } from './with-guard-C25yNjzd.js';
+export { w as withDerivation } from './with-derivation-BKXXa8Vt.js';
+export { w as withMaterializedView } from './with-materialized-view-CqnRwI2S.js';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Dnu81tsS.js';
-export { w as withOverlayedView } from './with-overlayed-view-N7jYuNOS.js';
+export { w as withOverlayedView } from './with-overlayed-view-Ct1fSJt-.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-D9s-loPr.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-utkybTKb.js';
 export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, R as Reducer, k as ReducerOptions, l as avg, n as count, o as groupAndReduce, p as max, q as min, r as reduceRecords, t as sum } from './strategy-DSTrsZ8t.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-DXXXusyk.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-DcoYWfJ_.js';
 import './lazy-builder-Rpd-V3jP.js';
+import '@noy-db/attestation';
 
 /**
  * Persistence helpers for per-principal user envelopes stored at