@noy-db/hub 0.2.0-pre.12 → 0.2.0-pre.13

package/dist/index.d.cts

@@ -1,21 +1,21 @@
-import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-BGwjsDef.cjs';
-export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c0 as CollectionChangeEvent, c1 as CollectionConflictResolver, c2 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c3 as CollectionStats, c4 as ComputedFieldError, c5 as ComputedFields, c6 as ComputedFn, c7 as Conflict, c8 as ConflictPolicy, c9 as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, ca as CrossTierAccessEvent, cb as CrossVaultAggregation, cc as CrossVaultGroupedAggregation, cd as CrossVaultGroupedRow, ce as CrossVaultLiveAggregation, cf as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, cg as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ch as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, ci as DeepPartial, cj as DeepPartialOrNull, ck as DelegationToken, cl as DeleteManyResult, cm as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cn as DirtyEntry, co as DryRunResult, cp as DumpSchemaOptions, cq as ELEVATION_AUDIT_COLLECTION, cr as ElevatedHandle, b5 as EncryptedEnvelope, cs as EnrollAuthenticatorOptions, ct as EnrollAuthenticatorWrappingDEKsOptions, cu as EnrollAuthenticatorWrappingKEKOptions, cv as EnrollRecoveryResult, cw as ExportCapability, cx as ExportChunk, cy as ExportFormat, cz as ExportStreamOptions, cA as FactorKind, cB as FactorProofBundle, cC as FactorRequirement, cD as FanoutQueryOptions, cE as FanoutResult, cF as FenceDoc, cG as FenceState, cH as FieldChange, cI as FieldDescriptor, cJ as FieldSource, cK as GhostRecord, cL as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cM as GuardViolation, cN as HistoryConfig, cO as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cP as INDEXED_STORE_POLICY, cQ as ImportCapability, cR as InferOutput, cS as InternalCollectionStats, cT as IssueDelegationOptions, cU as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cV as KeyringAuthenticator, cW as KeyringAuthenticatorWrappingDEKs, cX as KeyringAuthenticatorWrappingKEK, cY as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, cZ as ListAccessibleVaultsOptions, c_ as ListPageResult, c$ as ListUsersOptions, d0 as LiveQueryOptions, d1 as LiveUserEnvelope, d2 as LocaleReadOptions, d3 as Lru, d4 as LruOptions, d5 as LruStats, d6 as MAGIC_LINK_CONTENT_INFO_PREFIX, d7 as MAGIC_LINK_GRANTS_COLLECTION, d8 as MAGIC_LINK_KEK_INFO_PREFIX, d9 as MagicLinkGrantPayload, da as MagicLinkGrantRecord, bC as MaterializedFromMeta, db as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, dc as MemoryRecipientSealer, dd as MemorySealingKeyProvider, de as NOYDB_BACKUP_VERSION, df as NOYDB_FORMAT_VERSION, dg as NOYDB_KEYRING_VERSION, dh as NOYDB_SYNC_VERSION, di as Noydb, aB as NoydbBundleStore, dj as NoydbEventMap, dk as NoydbOptions, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dl as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, dm as PUBLIC_ENVELOPE_FIELDS, dn as PaperRecoveryDoc, dp as PaperRecoveryEntry, dq as PassphrasePolicy, dr as PassphraseValidationResult, al as PeriodRecord, ds as Permission, dt as Permissions, du as PersistedSchemaKind, dv as PlaintextTranslatorContext, dw as PlaintextTranslatorFn, P as PolicyEnforcer, dx as PresenceHandle, dy as PresencePeer, b6 as PruneOptions, dz as PublicEnvelopeField, dA as PublicEnvelopeSchema, dB as PublicEnvelopeText, dC as PullMode, dD as PullOptions, dE as PullPolicy, dF as PullResult, dG as PushMode, dH as PushOptions, dI as PushPolicy, dJ as PushResult, dK as PutManyItemOptions, dL as PutManyOptions, dM as PutManyResult, dN as QueryAcrossOptions, dO as QueryAcrossResult, dP as QuickUnlockState, dQ as QuickUnlockStore, dR as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dS as RecoverPassphraseInput, dT as RecoverPassphraseResult, dU as RecoverUserOptions, dV as RecoveryProof, R as ResolveI18nOptions, dW as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, dX as RevokeOptions, b0 as Role, dY as RotatePassphraseInput, dZ as RotateRecoveryOptions, d_ as RotateRecoveryResult, d$ as SEALED_PASSPHRASE_RECORD_ID, e0 as SchemaDelta, e1 as SchemaIntrospection, S as ScriptWarning, e2 as SealedEnvelope, e3 as SealedPassphrase, bs as SealingKeyProvider, e4 as SequenceHandle, e5 as SequenceStore, e6 as SessionPolicy, e7 as SetPublicEnvelopeInput, e8 as ShamirRecoveryDoc, e9 as ShamirRecoveryEntry, by as ShamirRecoveryProvider, ea as ShardedCollection, eb as ShardedGroupedQuery, ec as ShardedQuery, ed as ShardingConfig, ee as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, ef as SlotRewrapCeremony, eg as SlotRewrapContext, aF as SnapshotMeta, eh as StandardSchemaV1, ei as StandardSchemaV1Issue, ej as StandardSchemaV1SyncResult, ek as StoreAuth, el as StoreAuthKind, em as StoreCapabilities, en as SyncEngine, eo as SyncMetadata, ep as SyncPolicy, eq as SyncScheduler, er as SyncSchedulerStatus, es as SyncStatus, et as SyncTarget, eu as SyncTargetRole, ev as SyncTransaction, ew as SyncTransactionResult, ex as TabChannel, ey as TabCoordinationOptions, ez as TabLockManager, eA as TabPresence, eB as TabRole, eC as TierMode, eD as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eE as TxOp, aL as TxVault, eF as USER_ENVELOPE_COLLECTION, eG as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eH as Unsubscribe, eI as UpdateAuthenticatorOptions, eJ as UpdateContext, eK as UpdateUserOptions, eL as UserApi, eM as UserEnvelopeCheckGate, eN as UserEnvelopeOversizedError, eO as UserEnvelopePresented, eP as UserInfo, eQ as VaultBackup, bf as VaultEngine, aA as VaultFrame, eR as VaultGroup, eS as VaultGroupOptions, bg as VaultInstant, eT as VaultPolicyOnDisk, eU as VaultRegistryRow, eV as VaultSchemaSnapshot, eW as VaultSnapshot, eX as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, eY as WarningRules, eZ as WeakPassphraseError, e_ as WeakPassphraseReason, e$ as WithArchiveOptions, f0 as WrappedDeksBlob, f1 as WriteConflict, f2 as WriteEvent, f3 as WriteHook, f4 as WriteQueue, i as applyI18nLocale, bi as applyPatch, f5 as assertStrongPassphrase, f6 as buildRecipientKeyringFile, f7 as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, f8 as createNoydb, f9 as createStore, fa as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fb as enrollAuthenticator, fc as estimateEntropy, fd as evalComputedFields, fe as evaluateExportCapability, ff as evaluateImportCapability, fg as findAuthenticator, bm as formatDiff, fh as hasExportCapability, fi as hasImportCapability, fj as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fk as isMagicLinkGrantExpired, fl as isPublicEnvelope, fm as issueDelegation, fn as keyringRecoverPassphrase, fo as keyringRotatePassphrase, fp as listMagicLinkGrants, fq as listUsers, fr as listUsersWithEnvelopes, fs as loadActiveDelegations, ft as loadPaperRecoveryEntries, fu as loadSealedPassphrase, fv as loadShamirRecoveryEntries, fw as magicLinkGrantRecordId, fx as mintPaperRecoveryEntry, fy as mintShamirRecoveryEntry, fz as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fA as parseSealedEnvelope, fB as readMagicLinkGrantRecord, fC as recoverUser, fD as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fE as resolvePublicEnvelopeSchema, fF as revokeDelegation, fG as revokeMagicLinkGrant, aM as runTransaction, fH as savePaperRecoveryEntries, fI as saveSealedPassphrase, fJ as saveShamirRecoveryEntries, bq as sha256Hex, fK as unwrapDeksFromBlob, fL as unwrapDeksFromPaperEntry, fM as unwrapDeksFromShamirEntry, fN as unwrapMagicLinkGrant, v as validateI18nTextValue, fO as validatePassphrase, fP as validatePublicEnvelopeInput, fQ as validateSchemaInput, fR as validateSchemaOutput, y as validateSessionPolicy, fS as withArchive, fT as writeMagicLinkGrant } from './types-BGwjsDef.cjs';
+import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-CDwSSXiI.cjs';
+export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as CapturedBlueprint, c0 as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c1 as CollectionChangeEvent, c2 as CollectionConflictResolver, c3 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c4 as CollectionStats, c5 as ComputedFieldError, c6 as ComputedFields, c7 as ComputedFn, c8 as Conflict, c9 as ConflictPolicy, ca as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, cb as CrossTierAccessEvent, cc as CrossVaultAggregation, cd as CrossVaultGroupedAggregation, ce as CrossVaultGroupedRow, cf as CrossVaultLiveAggregation, cg as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, ch as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ci as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, cj as DeepPartial, ck as DeepPartialOrNull, cl as DeferredNumberingConfig, cm as DelegationToken, cn as DeleteManyResult, co as DeploymentEvent, cp as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cq as DirtyEntry, cr as DryRunResult, cs as DumpSchemaOptions, ct as ELEVATION_AUDIT_COLLECTION, cu as ElevatedHandle, b5 as EncryptedEnvelope, cv as EnrollAuthenticatorOptions, cw as EnrollAuthenticatorWrappingDEKsOptions, cx as EnrollAuthenticatorWrappingKEKOptions, cy as EnrollRecoveryResult, cz as ExportCapability, cA as ExportChunk, cB as ExportFormat, cC as ExportStreamOptions, cD as FactorKind, cE as FactorProofBundle, cF as FactorRequirement, cG as FanoutQueryOptions, cH as FanoutResult, cI as FenceDoc, cJ as FenceState, cK as FieldChange, cL as FieldDescriptor, cM as FieldSource, cN as GhostRecord, cO as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cP as GuardViolation, cQ as HistoryConfig, cR as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cS as INDEXED_STORE_POLICY, cT as ImportCapability, cU as InferOutput, cV as InternalCollectionStats, cW as IssueDelegationOptions, cX as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cY as KeyringAuthenticator, cZ as KeyringAuthenticatorWrappingDEKs, c_ as KeyringAuthenticatorWrappingKEK, c$ as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, d0 as ListAccessibleVaultsOptions, d1 as ListPageResult, d2 as ListUsersOptions, d3 as LiveQueryOptions, d4 as LiveUserEnvelope, d5 as LocaleReadOptions, d6 as Lru, d7 as LruOptions, d8 as LruStats, d9 as MAGIC_LINK_CONTENT_INFO_PREFIX, da as MAGIC_LINK_GRANTS_COLLECTION, db as MAGIC_LINK_KEK_INFO_PREFIX, dc as MagicLinkGrantPayload, dd as MagicLinkGrantRecord, bC as MaterializedFromMeta, de as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, df as MemoryRecipientSealer, dg as MemorySealingKeyProvider, dh as NOYDB_BACKUP_VERSION, di as NOYDB_FORMAT_VERSION, dj as NOYDB_KEYRING_VERSION, dk as NOYDB_SYNC_VERSION, dl as NextOptions, dm as Noydb, aB as NoydbBundleStore, dn as NoydbEventMap, dp as NoydbOptions, dq as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dr as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, ds as PUBLIC_ENVELOPE_FIELDS, dt as PaperRecoveryDoc, du as PaperRecoveryEntry, dv as PassphrasePolicy, dw as PassphraseValidationResult, al as PeriodRecord, dx as Permission, dy as Permissions, dz as PersistedSchemaKind, dA as PlaintextTranslatorContext, dB as PlaintextTranslatorFn, P as PolicyEnforcer, dC as PresenceHandle, dD as PresencePeer, b6 as PruneOptions, dE as PublicEnvelopeField, dF as PublicEnvelopeSchema, dG as PublicEnvelopeText, dH as PullMode, dI as PullOptions, dJ as PullPolicy, dK as PullResult, dL as PushMode, dM as PushOptions, dN as PushPolicy, dO as PushResult, dP as PutManyItemOptions, dQ as PutManyOptions, dR as PutManyResult, dS as QueryAcrossOptions, dT as QueryAcrossResult, dU as QuickUnlockState, dV as QuickUnlockStore, dW as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dX as RecoverPassphraseInput, dY as RecoverPassphraseResult, dZ as RecoverUserOptions, d_ as RecoveryProof, R as ResolveI18nOptions, d$ as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, e0 as RevokeOptions, b0 as Role, e1 as RotatePassphraseInput, e2 as RotateRecoveryOptions, e3 as RotateRecoveryResult, e4 as SEALED_PASSPHRASE_RECORD_ID, e5 as SchemaDelta, e6 as SchemaIntrospection, e7 as SchemaManifestRow, S as ScriptWarning, e8 as SealedEnvelope, e9 as SealedPassphrase, bs as SealingKeyProvider, ea as SequenceHandle, eb as SequenceStore, ec as SessionPolicy, ed as SetPublicEnvelopeInput, ee as ShamirRecoveryDoc, ef as ShamirRecoveryEntry, by as ShamirRecoveryProvider, eg as ShardedCollection, eh as ShardedGroupedQuery, ei as ShardedQuery, ej as ShardingConfig, ek as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, el as SlotRewrapCeremony, em as SlotRewrapContext, aF as SnapshotMeta, en as StandardSchemaV1, eo as StandardSchemaV1Issue, ep as StandardSchemaV1SyncResult, eq as StateManagementVault, er as StoreAuth, es as StoreAuthKind, et as StoreCapabilities, eu as StoreTime, ev as SyncEngine, ew as SyncMetadata, ex as SyncPolicy, ey as SyncScheduler, ez as SyncSchedulerStatus, eA as SyncStatus, eB as SyncTarget, eC as SyncTargetRole, eD as SyncTransaction, eE as SyncTransactionResult, eF as TabChannel, eG as TabCoordinationOptions, eH as TabLockManager, eI as TabPresence, eJ as TabRole, eK as TierMode, eL as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eM as TxOp, aL as TxVault, eN as USER_ENVELOPE_COLLECTION, eO as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eP as Unsubscribe, eQ as UpdateAuthenticatorOptions, eR as UpdateContext, eS as UpdateUserOptions, eT as UserApi, eU as UserEnvelopeCheckGate, eV as UserEnvelopeOversizedError, eW as UserEnvelopePresented, eX as UserInfo, eY as VaultBackup, bf as VaultEngine, aA as VaultFrame, eZ as VaultGroup, e_ as VaultGroupOptions, bg as VaultInstant, e$ as VaultPolicyOnDisk, f0 as VaultRegistryRow, f1 as VaultSchemaSnapshot, f2 as VaultSnapshot, f3 as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, f4 as WarningRules, f5 as WeakPassphraseError, f6 as WeakPassphraseReason, f7 as WithArchiveOptions, f8 as WrappedDeksBlob, f9 as WriteConflict, fa as WriteEvent, fb as WriteHook, fc as WriteQueue, i as applyI18nLocale, bi as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bm as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fI as parseSealedEnvelope, fJ as readMagicLinkGrantRecord, fK as recoverUser, fL as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fM as resolvePublicEnvelopeSchema, fN as revokeDelegation, fO as revokeMagicLinkGrant, aM as runTransaction, fP as savePaperRecoveryEntries, fQ as saveSealedPassphrase, fR as saveShamirRecoveryEntries, bq as sha256Hex, fS as unwrapDeksFromBlob, fT as unwrapDeksFromPaperEntry, fU as unwrapDeksFromShamirEntry, fV as unwrapMagicLinkGrant, v as validateI18nTextValue, fW as validatePassphrase, fX as validatePublicEnvelopeInput, fY as validateSchemaInput, fZ as validateSchemaOutput, y as validateSessionPolicy, f_ as withArchive, f$ as withDeferredNumbering, g0 as writeMagicLinkGrant } from './types-CDwSSXiI.cjs';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
-import { a7 as NoydbError } from './strategy-rtpKDfTC.cjs';
-export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a8 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a9 as ConflictError, aa as CrossJoinSourceUnknownError, ab as CrossJoinTooLargeError, ac as DanglingReferenceError, ad as DecryptionError, ae as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, af as DirectoryDisabledError, ag as ElevationExpiredError, ah as ExportCapabilityError, F as FieldFrozenError, ai as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, aj as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, ak as ImportCapabilityError, al as IndexRequiredError, am as IndexWriteFailureError, an as InvalidKeyError, I as InvariantError, ao as JoinTooLargeError, ap as KeyringCorruptError, aq as KeyringExpiredError, ar as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, as as MigrationRequiredError, M as MissingTranslationError, at as MoneyCurrencyError, au as MoneyDescriptor, av as MoneyOptions, aw as MoneyOptionsFixed, ax as MoneyOptionsMulti, ay as MoneyPrecisionError, az as MoneyUnsupportedError, aA as NetworkError, aB as NoAccessError, aC as NonAdditiveSchemaChangeError, aD as NotFoundError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aE as PathEscapeError, aF as PeriodClosedError, aG as PermissionDeniedError, aH as PrivilegeEscalationError, aI as QuiesceTimeoutError, aJ as ReadOnlyAtInstantError, aK as ReadOnlyError, aL as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aM as RoundingMode, aN as SchemaFenceError, aO as SchemaLockedError, aP as SchemaUpdateError, aQ as SchemaValidationError, S as ScriptViolationError, aR as SequenceContentionError, aS as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aT as ShardProvisioningError, E as SnapshotNotFoundError, aU as StoreCapabilityError, aV as TamperedError, aW as TierDemoteDeniedError, aX as TierNotGrantedError, T as TranslatorNotConfiguredError, aY as UniqueConstraintError, aZ as UnknownShardError, a_ as UnsupportedIndexOptionError, a$ as ValidationError, b0 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b1 as isMoneyDescriptor, v as max, w as min, b2 as money, x as reduceRecords, z as sum } from './strategy-rtpKDfTC.cjs';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-D4d0Xto3.cjs';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-Cmop06zJ.cjs';
+import { a7 as NoydbError } from './strategy-CrS7PnbE.cjs';
+export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a8 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a9 as ConflictError, aa as CrossJoinSourceUnknownError, ab as CrossJoinTooLargeError, ac as DanglingReferenceError, ad as DecryptionError, ae as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, af as DirectoryDisabledError, ag as ElevationExpiredError, ah as ExportCapabilityError, F as FieldFrozenError, ai as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, aj as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, ak as ImportCapabilityError, al as IndexRequiredError, am as IndexWriteFailureError, an as InvalidKeyError, I as InvariantError, ao as JoinTooLargeError, ap as KeyringCorruptError, aq as KeyringExpiredError, ar as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, as as MigrationRequiredError, M as MissingTranslationError, at as MoneyCurrencyError, au as MoneyDescriptor, av as MoneyOptions, aw as MoneyOptionsFixed, ax as MoneyOptionsMulti, ay as MoneyPrecisionError, az as MoneyUnsupportedError, aA as NetworkError, aB as NoAccessError, aC as NonAdditiveSchemaChangeError, aD as NotFoundError, aE as NumberingUncertaintyError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aF as PathEscapeError, aG as PeriodClosedError, aH as PermissionDeniedError, aI as PrivilegeEscalationError, aJ as QuiesceTimeoutError, aK as ReadOnlyAtInstantError, aL as ReadOnlyError, aM as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aN as ReservedVaultNameError, aO as RoundingMode, aP as SchemaFenceError, aQ as SchemaLockedError, aR as SchemaUpdateError, aS as SchemaValidationError, S as ScriptViolationError, aT as SequenceContentionError, aU as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aV as ShardProvisioningError, E as SnapshotNotFoundError, aW as StoreCapabilityError, aX as TamperedError, aY as TierDemoteDeniedError, aZ as TierNotGrantedError, T as TranslatorNotConfiguredError, a_ as UniqueConstraintError, a$ as UnknownShardError, b0 as UnsupportedIndexOptionError, b1 as ValidationError, b2 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b3 as isMoneyDescriptor, v as max, w as min, b4 as money, x as reduceRecords, z as sum } from './strategy-CrS7PnbE.cjs';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-7bCSgIgb.cjs';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-CUVOMtgg.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
-export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-C51vAHuh.cjs';
-export { w as withDerivation } from './with-derivation-CB1EdcFF.cjs';
-export { w as withMaterializedView } from './with-materialized-view-CzRg1Dpr.cjs';
+export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-BZIcYhYX.cjs';
+export { w as withDerivation } from './with-derivation-D8wFlb6V.cjs';
+export { w as withMaterializedView } from './with-materialized-view-5QMF1rS_.cjs';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Bt5ft-9c.cjs';
-export { w as withOverlayedView } from './with-overlayed-view-C9YFKXzn.cjs';
+export { w as withOverlayedView } from './with-overlayed-view-DDNflPvC.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-ckqa_Nso.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-a7SOtaV0.cjs';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-rDSSd_oW.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-B0cLQcq_.cjs';
 import './lazy-builder-Ci5_YG73.cjs';
 import '@noy-db/attestation';
 
@@ -106,6 +106,15 @@ declare function parseBytes(input: number | string): number;
  */
 declare function estimateRecordBytes(record: unknown): number;
 
+/**
+ * @category capability
+ * Zero-dependency federation constants. Kept import-free so the core
+ * graph can reference reserved names without pulling the (dynamically
+ * imported) federation chunk. See the StateManagement Vault design spec.
+ */
+/** Reserved fleet-wide control-plane vault name. */
+declare const STATE_VAULT_NAME = "__noydb_state__";
+
 /**
  * Persistence helpers for `_meta/public-envelope`. Mirrors the
  * bypass-AES pattern used by `_meta/handle` and `_meta/policy` —
@@ -807,4 +816,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
 
-export { ActiveTier, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };
+export { ActiveTier, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };

package/dist/index.d.ts

@@ -1,21 +1,21 @@
-import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-DRdfwgTG.js';
-export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c0 as CollectionChangeEvent, c1 as CollectionConflictResolver, c2 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c3 as CollectionStats, c4 as ComputedFieldError, c5 as ComputedFields, c6 as ComputedFn, c7 as Conflict, c8 as ConflictPolicy, c9 as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, ca as CrossTierAccessEvent, cb as CrossVaultAggregation, cc as CrossVaultGroupedAggregation, cd as CrossVaultGroupedRow, ce as CrossVaultLiveAggregation, cf as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, cg as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ch as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, ci as DeepPartial, cj as DeepPartialOrNull, ck as DelegationToken, cl as DeleteManyResult, cm as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cn as DirtyEntry, co as DryRunResult, cp as DumpSchemaOptions, cq as ELEVATION_AUDIT_COLLECTION, cr as ElevatedHandle, b5 as EncryptedEnvelope, cs as EnrollAuthenticatorOptions, ct as EnrollAuthenticatorWrappingDEKsOptions, cu as EnrollAuthenticatorWrappingKEKOptions, cv as EnrollRecoveryResult, cw as ExportCapability, cx as ExportChunk, cy as ExportFormat, cz as ExportStreamOptions, cA as FactorKind, cB as FactorProofBundle, cC as FactorRequirement, cD as FanoutQueryOptions, cE as FanoutResult, cF as FenceDoc, cG as FenceState, cH as FieldChange, cI as FieldDescriptor, cJ as FieldSource, cK as GhostRecord, cL as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cM as GuardViolation, cN as HistoryConfig, cO as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cP as INDEXED_STORE_POLICY, cQ as ImportCapability, cR as InferOutput, cS as InternalCollectionStats, cT as IssueDelegationOptions, cU as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cV as KeyringAuthenticator, cW as KeyringAuthenticatorWrappingDEKs, cX as KeyringAuthenticatorWrappingKEK, cY as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, cZ as ListAccessibleVaultsOptions, c_ as ListPageResult, c$ as ListUsersOptions, d0 as LiveQueryOptions, d1 as LiveUserEnvelope, d2 as LocaleReadOptions, d3 as Lru, d4 as LruOptions, d5 as LruStats, d6 as MAGIC_LINK_CONTENT_INFO_PREFIX, d7 as MAGIC_LINK_GRANTS_COLLECTION, d8 as MAGIC_LINK_KEK_INFO_PREFIX, d9 as MagicLinkGrantPayload, da as MagicLinkGrantRecord, bC as MaterializedFromMeta, db as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, dc as MemoryRecipientSealer, dd as MemorySealingKeyProvider, de as NOYDB_BACKUP_VERSION, df as NOYDB_FORMAT_VERSION, dg as NOYDB_KEYRING_VERSION, dh as NOYDB_SYNC_VERSION, di as Noydb, aB as NoydbBundleStore, dj as NoydbEventMap, dk as NoydbOptions, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dl as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, dm as PUBLIC_ENVELOPE_FIELDS, dn as PaperRecoveryDoc, dp as PaperRecoveryEntry, dq as PassphrasePolicy, dr as PassphraseValidationResult, al as PeriodRecord, ds as Permission, dt as Permissions, du as PersistedSchemaKind, dv as PlaintextTranslatorContext, dw as PlaintextTranslatorFn, P as PolicyEnforcer, dx as PresenceHandle, dy as PresencePeer, b6 as PruneOptions, dz as PublicEnvelopeField, dA as PublicEnvelopeSchema, dB as PublicEnvelopeText, dC as PullMode, dD as PullOptions, dE as PullPolicy, dF as PullResult, dG as PushMode, dH as PushOptions, dI as PushPolicy, dJ as PushResult, dK as PutManyItemOptions, dL as PutManyOptions, dM as PutManyResult, dN as QueryAcrossOptions, dO as QueryAcrossResult, dP as QuickUnlockState, dQ as QuickUnlockStore, dR as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dS as RecoverPassphraseInput, dT as RecoverPassphraseResult, dU as RecoverUserOptions, dV as RecoveryProof, R as ResolveI18nOptions, dW as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, dX as RevokeOptions, b0 as Role, dY as RotatePassphraseInput, dZ as RotateRecoveryOptions, d_ as RotateRecoveryResult, d$ as SEALED_PASSPHRASE_RECORD_ID, e0 as SchemaDelta, e1 as SchemaIntrospection, S as ScriptWarning, e2 as SealedEnvelope, e3 as SealedPassphrase, bs as SealingKeyProvider, e4 as SequenceHandle, e5 as SequenceStore, e6 as SessionPolicy, e7 as SetPublicEnvelopeInput, e8 as ShamirRecoveryDoc, e9 as ShamirRecoveryEntry, by as ShamirRecoveryProvider, ea as ShardedCollection, eb as ShardedGroupedQuery, ec as ShardedQuery, ed as ShardingConfig, ee as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, ef as SlotRewrapCeremony, eg as SlotRewrapContext, aF as SnapshotMeta, eh as StandardSchemaV1, ei as StandardSchemaV1Issue, ej as StandardSchemaV1SyncResult, ek as StoreAuth, el as StoreAuthKind, em as StoreCapabilities, en as SyncEngine, eo as SyncMetadata, ep as SyncPolicy, eq as SyncScheduler, er as SyncSchedulerStatus, es as SyncStatus, et as SyncTarget, eu as SyncTargetRole, ev as SyncTransaction, ew as SyncTransactionResult, ex as TabChannel, ey as TabCoordinationOptions, ez as TabLockManager, eA as TabPresence, eB as TabRole, eC as TierMode, eD as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eE as TxOp, aL as TxVault, eF as USER_ENVELOPE_COLLECTION, eG as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eH as Unsubscribe, eI as UpdateAuthenticatorOptions, eJ as UpdateContext, eK as UpdateUserOptions, eL as UserApi, eM as UserEnvelopeCheckGate, eN as UserEnvelopeOversizedError, eO as UserEnvelopePresented, eP as UserInfo, eQ as VaultBackup, bf as VaultEngine, aA as VaultFrame, eR as VaultGroup, eS as VaultGroupOptions, bg as VaultInstant, eT as VaultPolicyOnDisk, eU as VaultRegistryRow, eV as VaultSchemaSnapshot, eW as VaultSnapshot, eX as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, eY as WarningRules, eZ as WeakPassphraseError, e_ as WeakPassphraseReason, e$ as WithArchiveOptions, f0 as WrappedDeksBlob, f1 as WriteConflict, f2 as WriteEvent, f3 as WriteHook, f4 as WriteQueue, i as applyI18nLocale, bi as applyPatch, f5 as assertStrongPassphrase, f6 as buildRecipientKeyringFile, f7 as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, f8 as createNoydb, f9 as createStore, fa as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fb as enrollAuthenticator, fc as estimateEntropy, fd as evalComputedFields, fe as evaluateExportCapability, ff as evaluateImportCapability, fg as findAuthenticator, bm as formatDiff, fh as hasExportCapability, fi as hasImportCapability, fj as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fk as isMagicLinkGrantExpired, fl as isPublicEnvelope, fm as issueDelegation, fn as keyringRecoverPassphrase, fo as keyringRotatePassphrase, fp as listMagicLinkGrants, fq as listUsers, fr as listUsersWithEnvelopes, fs as loadActiveDelegations, ft as loadPaperRecoveryEntries, fu as loadSealedPassphrase, fv as loadShamirRecoveryEntries, fw as magicLinkGrantRecordId, fx as mintPaperRecoveryEntry, fy as mintShamirRecoveryEntry, fz as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fA as parseSealedEnvelope, fB as readMagicLinkGrantRecord, fC as recoverUser, fD as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fE as resolvePublicEnvelopeSchema, fF as revokeDelegation, fG as revokeMagicLinkGrant, aM as runTransaction, fH as savePaperRecoveryEntries, fI as saveSealedPassphrase, fJ as saveShamirRecoveryEntries, bq as sha256Hex, fK as unwrapDeksFromBlob, fL as unwrapDeksFromPaperEntry, fM as unwrapDeksFromShamirEntry, fN as unwrapMagicLinkGrant, v as validateI18nTextValue, fO as validatePassphrase, fP as validatePublicEnvelopeInput, fQ as validateSchemaInput, fR as validateSchemaOutput, y as validateSessionPolicy, fS as withArchive, fT as writeMagicLinkGrant } from './types-DRdfwgTG.js';
+import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-pax34sec.js';
+export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as CapturedBlueprint, c0 as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c1 as CollectionChangeEvent, c2 as CollectionConflictResolver, c3 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c4 as CollectionStats, c5 as ComputedFieldError, c6 as ComputedFields, c7 as ComputedFn, c8 as Conflict, c9 as ConflictPolicy, ca as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, cb as CrossTierAccessEvent, cc as CrossVaultAggregation, cd as CrossVaultGroupedAggregation, ce as CrossVaultGroupedRow, cf as CrossVaultLiveAggregation, cg as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, ch as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ci as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, cj as DeepPartial, ck as DeepPartialOrNull, cl as DeferredNumberingConfig, cm as DelegationToken, cn as DeleteManyResult, co as DeploymentEvent, cp as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cq as DirtyEntry, cr as DryRunResult, cs as DumpSchemaOptions, ct as ELEVATION_AUDIT_COLLECTION, cu as ElevatedHandle, b5 as EncryptedEnvelope, cv as EnrollAuthenticatorOptions, cw as EnrollAuthenticatorWrappingDEKsOptions, cx as EnrollAuthenticatorWrappingKEKOptions, cy as EnrollRecoveryResult, cz as ExportCapability, cA as ExportChunk, cB as ExportFormat, cC as ExportStreamOptions, cD as FactorKind, cE as FactorProofBundle, cF as FactorRequirement, cG as FanoutQueryOptions, cH as FanoutResult, cI as FenceDoc, cJ as FenceState, cK as FieldChange, cL as FieldDescriptor, cM as FieldSource, cN as GhostRecord, cO as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cP as GuardViolation, cQ as HistoryConfig, cR as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cS as INDEXED_STORE_POLICY, cT as ImportCapability, cU as InferOutput, cV as InternalCollectionStats, cW as IssueDelegationOptions, cX as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cY as KeyringAuthenticator, cZ as KeyringAuthenticatorWrappingDEKs, c_ as KeyringAuthenticatorWrappingKEK, c$ as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, d0 as ListAccessibleVaultsOptions, d1 as ListPageResult, d2 as ListUsersOptions, d3 as LiveQueryOptions, d4 as LiveUserEnvelope, d5 as LocaleReadOptions, d6 as Lru, d7 as LruOptions, d8 as LruStats, d9 as MAGIC_LINK_CONTENT_INFO_PREFIX, da as MAGIC_LINK_GRANTS_COLLECTION, db as MAGIC_LINK_KEK_INFO_PREFIX, dc as MagicLinkGrantPayload, dd as MagicLinkGrantRecord, bC as MaterializedFromMeta, de as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, df as MemoryRecipientSealer, dg as MemorySealingKeyProvider, dh as NOYDB_BACKUP_VERSION, di as NOYDB_FORMAT_VERSION, dj as NOYDB_KEYRING_VERSION, dk as NOYDB_SYNC_VERSION, dl as NextOptions, dm as Noydb, aB as NoydbBundleStore, dn as NoydbEventMap, dp as NoydbOptions, dq as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dr as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, ds as PUBLIC_ENVELOPE_FIELDS, dt as PaperRecoveryDoc, du as PaperRecoveryEntry, dv as PassphrasePolicy, dw as PassphraseValidationResult, al as PeriodRecord, dx as Permission, dy as Permissions, dz as PersistedSchemaKind, dA as PlaintextTranslatorContext, dB as PlaintextTranslatorFn, P as PolicyEnforcer, dC as PresenceHandle, dD as PresencePeer, b6 as PruneOptions, dE as PublicEnvelopeField, dF as PublicEnvelopeSchema, dG as PublicEnvelopeText, dH as PullMode, dI as PullOptions, dJ as PullPolicy, dK as PullResult, dL as PushMode, dM as PushOptions, dN as PushPolicy, dO as PushResult, dP as PutManyItemOptions, dQ as PutManyOptions, dR as PutManyResult, dS as QueryAcrossOptions, dT as QueryAcrossResult, dU as QuickUnlockState, dV as QuickUnlockStore, dW as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dX as RecoverPassphraseInput, dY as RecoverPassphraseResult, dZ as RecoverUserOptions, d_ as RecoveryProof, R as ResolveI18nOptions, d$ as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, e0 as RevokeOptions, b0 as Role, e1 as RotatePassphraseInput, e2 as RotateRecoveryOptions, e3 as RotateRecoveryResult, e4 as SEALED_PASSPHRASE_RECORD_ID, e5 as SchemaDelta, e6 as SchemaIntrospection, e7 as SchemaManifestRow, S as ScriptWarning, e8 as SealedEnvelope, e9 as SealedPassphrase, bs as SealingKeyProvider, ea as SequenceHandle, eb as SequenceStore, ec as SessionPolicy, ed as SetPublicEnvelopeInput, ee as ShamirRecoveryDoc, ef as ShamirRecoveryEntry, by as ShamirRecoveryProvider, eg as ShardedCollection, eh as ShardedGroupedQuery, ei as ShardedQuery, ej as ShardingConfig, ek as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, el as SlotRewrapCeremony, em as SlotRewrapContext, aF as SnapshotMeta, en as StandardSchemaV1, eo as StandardSchemaV1Issue, ep as StandardSchemaV1SyncResult, eq as StateManagementVault, er as StoreAuth, es as StoreAuthKind, et as StoreCapabilities, eu as StoreTime, ev as SyncEngine, ew as SyncMetadata, ex as SyncPolicy, ey as SyncScheduler, ez as SyncSchedulerStatus, eA as SyncStatus, eB as SyncTarget, eC as SyncTargetRole, eD as SyncTransaction, eE as SyncTransactionResult, eF as TabChannel, eG as TabCoordinationOptions, eH as TabLockManager, eI as TabPresence, eJ as TabRole, eK as TierMode, eL as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eM as TxOp, aL as TxVault, eN as USER_ENVELOPE_COLLECTION, eO as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eP as Unsubscribe, eQ as UpdateAuthenticatorOptions, eR as UpdateContext, eS as UpdateUserOptions, eT as UserApi, eU as UserEnvelopeCheckGate, eV as UserEnvelopeOversizedError, eW as UserEnvelopePresented, eX as UserInfo, eY as VaultBackup, bf as VaultEngine, aA as VaultFrame, eZ as VaultGroup, e_ as VaultGroupOptions, bg as VaultInstant, e$ as VaultPolicyOnDisk, f0 as VaultRegistryRow, f1 as VaultSchemaSnapshot, f2 as VaultSnapshot, f3 as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, f4 as WarningRules, f5 as WeakPassphraseError, f6 as WeakPassphraseReason, f7 as WithArchiveOptions, f8 as WrappedDeksBlob, f9 as WriteConflict, fa as WriteEvent, fb as WriteHook, fc as WriteQueue, i as applyI18nLocale, bi as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bm as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fI as parseSealedEnvelope, fJ as readMagicLinkGrantRecord, fK as recoverUser, fL as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fM as resolvePublicEnvelopeSchema, fN as revokeDelegation, fO as revokeMagicLinkGrant, aM as runTransaction, fP as savePaperRecoveryEntries, fQ as saveSealedPassphrase, fR as saveShamirRecoveryEntries, bq as sha256Hex, fS as unwrapDeksFromBlob, fT as unwrapDeksFromPaperEntry, fU as unwrapDeksFromShamirEntry, fV as unwrapMagicLinkGrant, v as validateI18nTextValue, fW as validatePassphrase, fX as validatePublicEnvelopeInput, fY as validateSchemaInput, fZ as validateSchemaOutput, y as validateSessionPolicy, f_ as withArchive, f$ as withDeferredNumbering, g0 as writeMagicLinkGrant } from './types-pax34sec.js';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
-import { a7 as NoydbError } from './strategy-rtpKDfTC.js';
-export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a8 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a9 as ConflictError, aa as CrossJoinSourceUnknownError, ab as CrossJoinTooLargeError, ac as DanglingReferenceError, ad as DecryptionError, ae as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, af as DirectoryDisabledError, ag as ElevationExpiredError, ah as ExportCapabilityError, F as FieldFrozenError, ai as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, aj as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, ak as ImportCapabilityError, al as IndexRequiredError, am as IndexWriteFailureError, an as InvalidKeyError, I as InvariantError, ao as JoinTooLargeError, ap as KeyringCorruptError, aq as KeyringExpiredError, ar as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, as as MigrationRequiredError, M as MissingTranslationError, at as MoneyCurrencyError, au as MoneyDescriptor, av as MoneyOptions, aw as MoneyOptionsFixed, ax as MoneyOptionsMulti, ay as MoneyPrecisionError, az as MoneyUnsupportedError, aA as NetworkError, aB as NoAccessError, aC as NonAdditiveSchemaChangeError, aD as NotFoundError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aE as PathEscapeError, aF as PeriodClosedError, aG as PermissionDeniedError, aH as PrivilegeEscalationError, aI as QuiesceTimeoutError, aJ as ReadOnlyAtInstantError, aK as ReadOnlyError, aL as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aM as RoundingMode, aN as SchemaFenceError, aO as SchemaLockedError, aP as SchemaUpdateError, aQ as SchemaValidationError, S as ScriptViolationError, aR as SequenceContentionError, aS as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aT as ShardProvisioningError, E as SnapshotNotFoundError, aU as StoreCapabilityError, aV as TamperedError, aW as TierDemoteDeniedError, aX as TierNotGrantedError, T as TranslatorNotConfiguredError, aY as UniqueConstraintError, aZ as UnknownShardError, a_ as UnsupportedIndexOptionError, a$ as ValidationError, b0 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b1 as isMoneyDescriptor, v as max, w as min, b2 as money, x as reduceRecords, z as sum } from './strategy-rtpKDfTC.js';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-DOTPZ5_h.js';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-CkFHr4OP.js';
+import { a7 as NoydbError } from './strategy-CrS7PnbE.js';
+export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a8 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a9 as ConflictError, aa as CrossJoinSourceUnknownError, ab as CrossJoinTooLargeError, ac as DanglingReferenceError, ad as DecryptionError, ae as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, af as DirectoryDisabledError, ag as ElevationExpiredError, ah as ExportCapabilityError, F as FieldFrozenError, ai as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, aj as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, ak as ImportCapabilityError, al as IndexRequiredError, am as IndexWriteFailureError, an as InvalidKeyError, I as InvariantError, ao as JoinTooLargeError, ap as KeyringCorruptError, aq as KeyringExpiredError, ar as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, as as MigrationRequiredError, M as MissingTranslationError, at as MoneyCurrencyError, au as MoneyDescriptor, av as MoneyOptions, aw as MoneyOptionsFixed, ax as MoneyOptionsMulti, ay as MoneyPrecisionError, az as MoneyUnsupportedError, aA as NetworkError, aB as NoAccessError, aC as NonAdditiveSchemaChangeError, aD as NotFoundError, aE as NumberingUncertaintyError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aF as PathEscapeError, aG as PeriodClosedError, aH as PermissionDeniedError, aI as PrivilegeEscalationError, aJ as QuiesceTimeoutError, aK as ReadOnlyAtInstantError, aL as ReadOnlyError, aM as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aN as ReservedVaultNameError, aO as RoundingMode, aP as SchemaFenceError, aQ as SchemaLockedError, aR as SchemaUpdateError, aS as SchemaValidationError, S as ScriptViolationError, aT as SequenceContentionError, aU as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aV as ShardProvisioningError, E as SnapshotNotFoundError, aW as StoreCapabilityError, aX as TamperedError, aY as TierDemoteDeniedError, aZ as TierNotGrantedError, T as TranslatorNotConfiguredError, a_ as UniqueConstraintError, a$ as UnknownShardError, b0 as UnsupportedIndexOptionError, b1 as ValidationError, b2 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b3 as isMoneyDescriptor, v as max, w as min, b4 as money, x as reduceRecords, z as sum } from './strategy-CrS7PnbE.js';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-C_t4hL3d.js';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-Cqzp4tt9.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
-export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-DyD0qg2k.js';
-export { w as withDerivation } from './with-derivation-B082Y_WQ.js';
-export { w as withMaterializedView } from './with-materialized-view-Dw4SwjKl.js';
+export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-B0h-ipLz.js';
+export { w as withDerivation } from './with-derivation-BjdOxUBn.js';
+export { w as withMaterializedView } from './with-materialized-view-DJb-HO65.js';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Bt5ft-9c.js';
-export { w as withOverlayedView } from './with-overlayed-view-CaCXeW26.js';
+export { w as withOverlayedView } from './with-overlayed-view-CkqTefbz.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-D3mpVFRc.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BW0GNBEV.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-CTZVkXLx.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-uMNIAAW8.js';
 import './lazy-builder-D5GU14TS.js';
 import '@noy-db/attestation';
 
@@ -106,6 +106,15 @@ declare function parseBytes(input: number | string): number;
  */
 declare function estimateRecordBytes(record: unknown): number;
 
+/**
+ * @category capability
+ * Zero-dependency federation constants. Kept import-free so the core
+ * graph can reference reserved names without pulling the (dynamically
+ * imported) federation chunk. See the StateManagement Vault design spec.
+ */
+/** Reserved fleet-wide control-plane vault name. */
+declare const STATE_VAULT_NAME = "__noydb_state__";
+
 /**
  * Persistence helpers for `_meta/public-envelope`. Mirrors the
  * bypass-AES pattern used by `_meta/handle` and `_meta/policy` —
@@ -807,4 +816,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
 
-export { ActiveTier, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };
+export { ActiveTier, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-BXOUVUES.js";
+} from "./chunk-KHQ3N5AB.js";
 import {
   Collection,
   ComputedFieldError,
@@ -43,7 +43,10 @@ import {
   validateSchemaInput,
   validateSchemaOutput,
   withArchive
-} from "./chunk-TMHJEYW7.js";
+} from "./chunk-P5MW7BG2.js";
+import {
+  STATE_VAULT_NAME
+} from "./chunk-ZC7J6ZYV.js";
 import {
   DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
   PUBLIC_ENVELOPE_FIELDS,
@@ -54,27 +57,27 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-M45IRXDM.js";
+} from "./chunk-M6KXHRIA.js";
 import {
   withDerivation
-} from "./chunk-VOXMU6LB.js";
-import "./chunk-L6BYRCYB.js";
-import "./chunk-5ARRXIVR.js";
+} from "./chunk-NIUXQDWD.js";
+import "./chunk-QFYVGJLI.js";
+import "./chunk-GL3Z7LH7.js";
 import {
   withMaterializedView
-} from "./chunk-CHBXWJZQ.js";
-import "./chunk-ZCFS7U4J.js";
-import "./chunk-EKNUBIIQ.js";
-import "./chunk-C2CIIQRG.js";
+} from "./chunk-4YDZ7JPZ.js";
+import "./chunk-AYNF7PVX.js";
+import "./chunk-CWFQTAD4.js";
+import "./chunk-KKB42D3Q.js";
 import {
   withOverlayedView
-} from "./chunk-XSIFXX54.js";
-import "./chunk-RHQYVHFH.js";
-import "./chunk-4BHFNKTP.js";
+} from "./chunk-4VCQH32J.js";
+import "./chunk-UNQEWORI.js";
+import "./chunk-3XZRRBFW.js";
 import {
   isDiscriminant
 } from "./chunk-STNPB3UM.js";
-import "./chunk-P4EDT5ZP.js";
+import "./chunk-D5Y3HIC6.js";
 import {
   mergeCrdtStates,
   resolveCrdtSnapshot
@@ -89,7 +92,7 @@ import {
   parseSealedEnvelope,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-XHM2SARW.js";
+} from "./chunk-HHZ77DHM.js";
 import {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
@@ -100,7 +103,7 @@ import {
   readNoydbBundlePublicEnvelope,
   resetBrotliSupportCache,
   writeNoydbBundle
-} from "./chunk-LSEW3ZZ2.js";
+} from "./chunk-PW26DAXS.js";
 import {
   PUBLIC_ENVELOPE_RECORD_ID,
   isPublicEnvelope,
@@ -108,29 +111,29 @@ import {
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-UA6G45ME.js";
+} from "./chunk-KJF7EPUE.js";
 import {
   CONSENT_AUDIT_COLLECTION
-} from "./chunk-P3Z5Y2TS.js";
+} from "./chunk-3OUCWHV6.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-RRDWXNBQ.js";
+} from "./chunk-J67BP5EP.js";
 import "./chunk-UF3BUNQZ.js";
 import {
   immutableGuard,
   withGuard
-} from "./chunk-WNRGOVLG.js";
+} from "./chunk-FNVFT4HZ.js";
 import "./chunk-A3JMGXPG.js";
 import "./chunk-UMLVJTYV.js";
-import "./chunk-HLGDYFWR.js";
+import "./chunk-JPOQMXGT.js";
 import {
   CollectionFrame,
   VaultFrame
-} from "./chunk-CILT6V3V.js";
+} from "./chunk-ILWQGTNH.js";
 import {
   enforceScript,
   inferScripts
-} from "./chunk-B7GGYNKQ.js";
+} from "./chunk-5NISHSBO.js";
 import {
   DICT_COLLECTION_PREFIX,
   DictionaryHandle,
@@ -144,7 +147,7 @@ import {
   resolveI18nText,
   resolvePolicy,
   validateI18nTextValue
-} from "./chunk-O53RIZCC.js";
+} from "./chunk-7TEI2K2A.js";
 import {
   createBundleStore,
   routeStore,
@@ -156,7 +159,7 @@ import {
   withRetry,
   wrapBundleStore,
   wrapStore
-} from "./chunk-IEPT7HVP.js";
+} from "./chunk-JWFNOD2T.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   credentialStatus,
@@ -164,7 +167,7 @@ import {
   getCredential,
   listCredentials,
   putCredential
-} from "./chunk-LOA2VCMS.js";
+} from "./chunk-VAK6NQAK.js";
 import {
   MAGIC_LINK_CONTENT_INFO_PREFIX,
   MAGIC_LINK_GRANTS_COLLECTION,
@@ -199,17 +202,17 @@ import {
   unwrapDeksFromShamirEntry,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-DLTU4M2I.js";
+} from "./chunk-SYSKC237.js";
 import {
   assertTierAccess,
   dekKey,
   effectiveClearance
-} from "./chunk-ZC7MNVYN.js";
+} from "./chunk-SJ24GHID.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-WUG3E423.js";
+} from "./chunk-GZJ5JBED.js";
 import {
   DIRECTORY_RECORD_ID,
   USER_ENVELOPE_COLLECTION,
@@ -237,7 +240,7 @@ import {
   saveUserEnvelope,
   validatePassphrase,
   visibilityRecordId
-} from "./chunk-GFPR7VJS.js";
+} from "./chunk-C3WRKABE.js";
 import {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
@@ -257,7 +260,7 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-LWSD4QPT.js";
+} from "./chunk-O2JW656W.js";
 import {
   generateULID,
   isULID
@@ -267,14 +270,14 @@ import {
   VaultInstant,
   diff,
   formatDiff
-} from "./chunk-6BYBVRZU.js";
+} from "./chunk-QIVFGU2M.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION,
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-SJJQKNMP.js";
+} from "./chunk-HQXOEWLZ.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -292,7 +295,7 @@ import {
   buildLiveQuery,
   executePlan,
   resetJoinWarnings
-} from "./chunk-UOC7JMZO.js";
+} from "./chunk-NJMKHRQI.js";
 import {
   CollectionIndexes
 } from "./chunk-WIBHRONM.js";
@@ -318,7 +321,7 @@ import {
   money,
   reduceRecords,
   scaleForCurrency
-} from "./chunk-OPDTLHFA.js";
+} from "./chunk-YWBHS25M.js";
 import {
   evaluateClause,
   evaluateFieldClause,
@@ -335,15 +338,15 @@ import {
   detectMagic,
   detectMimeType,
   isPreCompressed
-} from "./chunk-HBAJDI2N.js";
-import "./chunk-6AD5TBF2.js";
+} from "./chunk-QAWCVWCX.js";
+import "./chunk-TDECYU4Y.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION,
   NOYDB_KEYRING_VERSION,
   NOYDB_SYNC_VERSION,
   createStore
-} from "./chunk-LYNNZEQD.js";
+} from "./chunk-GC4V7RU7.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -352,7 +355,7 @@ import {
   derivePresenceKey,
   encryptBytes,
   encryptDeterministic
-} from "./chunk-IUBHXEPJ.js";
+} from "./chunk-E3DIBDKA.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -402,6 +405,7 @@ import {
   NonAdditiveSchemaChangeError,
   NotFoundError,
   NoydbError,
+  NumberingUncertaintyError,
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
@@ -416,6 +420,7 @@ import {
   ReadOnlyFrameError,
   RecordLockedError,
   ReservedCollectionNameError,
+  ReservedVaultNameError,
   SchemaFenceError,
   SchemaLockedError,
   SchemaUpdateError,
@@ -438,7 +443,7 @@ import {
   UnsupportedIndexOptionError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "./chunk-AGRC7NQQ.js";
+} from "./chunk-NKGY3C53.js";
 
 // src/schema-update/strategies.ts
 function blindUpdate() {
@@ -491,6 +496,16 @@ function coordinatedCutover(opts) {
   };
 }
 
+// src/numbering/descriptor.ts
+function withDeferredNumbering(config) {
+  return {
+    series: config.series,
+    collection: config.collection,
+    field: config.field,
+    settleWindowMs: config.settleWindowMs ?? 0
+  };
+}
+
 // src/vault-diff.ts
 async function diffVault(vault, candidate, options = {}) {
   const idKey = options.idKey ?? "id";
@@ -744,6 +759,7 @@ export {
   NotFoundError,
   Noydb,
   NoydbError,
+  NumberingUncertaintyError,
   OverlayBaseIsVirtualError,
   OverlayCollectionUnavailableError,
   OverlayIdMismatchError,
@@ -773,8 +789,10 @@ export {
   RefRegistry,
   RefScopeError,
   ReservedCollectionNameError,
+  ReservedVaultNameError,
   SCHEMAS_COLLECTION,
   SEALED_PASSPHRASE_RECORD_ID,
+  STATE_VAULT_NAME,
   STRICT_POLICY,
   SYNC_CREDENTIALS_COLLECTION,
   ScanBuilder,
@@ -986,6 +1004,7 @@ export {
   withArchive,
   withCache,
   withCircuitBreaker,
+  withDeferredNumbering,
   withDerivation,
   withGuard,
   withHealthCheck,