@noy-db/hub 0.2.0-pre.12 → 0.2.0-pre.14

package/dist/{types-BGwjsDef.d.cts → types-V5R2-pd4.d.cts}

@@ -1,8 +1,8 @@
 import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-Ci5_YG73.cjs';
-import { a7 as NoydbError, o as LiveAggregation, f as AggregateSpec, e as AggregateResult, A as AggregateStrategy, au as MoneyDescriptor } from './strategy-rtpKDfTC.cjs';
+import { a7 as NoydbError, o as LiveAggregation, f as AggregateSpec, e as AggregateResult, A as AggregateStrategy, au as MoneyDescriptor } from './strategy-CrS7PnbE.cjs';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.cjs';
-import { L as LiveQuery, Q as Query, j as RefRegistry, R as RefDescriptor, d as JoinableSource, l as RefViolation, S as ScanBuilder } from './index-Cmop06zJ.cjs';
-import { O as Operator, F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-Bt5ft-9c.cjs';
+import { L as LiveQuery, Q as Query, c as JoinStrategy, j as RefRegistry, R as RefDescriptor, d as JoinableSource, l as RefViolation, S as ScanBuilder } from './index-CUVOMtgg.cjs';
+import { I as IndexDef, O as Operator, F as FieldClause, C as CollectionIndexes } from './predicate-Bt5ft-9c.cjs';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
 /**
@@ -140,6 +140,34 @@ declare function validateSchemaInput<Output>(schema: StandardSchemaV1<unknown, O
  */
 declare function validateSchemaOutput<Output>(schema: StandardSchemaV1<unknown, Output>, value: unknown, context: string): Promise<Output>;
 
+/**
+ * @category capability
+ * Deferred-numbering config descriptor. See
+ * docs/superpowers/specs/2026-06-08-sealed-numbering-and-store-clock-design.md.
+ */
+/** A registered deferred-numbering series. */
+interface DeferredNumberingConfig {
+    /** Series name — the key passed to `vault.sequence(series)`. */
+    readonly series: string;
+    /** Collection holding the records to number. */
+    readonly collection: string;
+    /** Field on each record where the assigned serial is written. */
+    readonly field: string;
+    /**
+     * Minimum wall-clock age (ms) before an entry is eligible at a pass, in
+     * addition to the interval commit-wait. Default 0 — the store-clock
+     * interval (`storeLatest ≤ now.earliest`) is the correctness mechanism.
+     */
+    readonly settleWindowMs: number;
+}
+/** Declare a deferred-numbering series. Pass the result in `createNoydb({ numbering: [...] })`. */
+declare function withDeferredNumbering(config: {
+    series: string;
+    collection: string;
+    field: string;
+    settleWindowMs?: number;
+}): DeferredNumberingConfig;
+
 /**
  * Sync scheduling policy.
  *
@@ -3708,6 +3736,170 @@ declare class SyncEngine {
     private persistMeta;
 }
 
+/**
+ * @category capability
+ * Multi-vault partition federation (MVF) — public types for VaultGroup
+ * transparent shard routing. See
+ * docs/superpowers/specs/2026-06-07-mvf-vaultgroup-routing-mvp-design.md.
+ */
+
+/**
+ * A schema blueprint for a class of shard vaults. `configure` is
+ * re-applied to every shard handle so all shards are configured
+ * identically (collections, indexes, schemas). `version` is recorded
+ * into each shard's registry row and drives the fan-out
+ * `minVersion` guard.
+ */
+interface VaultTemplate {
+    readonly version: number;
+    readonly configure: (vault: Vault) => void;
+}
+/** One row in the StateManagement `vault-registry` collection. */
+interface VaultRegistryRow {
+    readonly vaultId: string;
+    readonly partitionKey: string;
+    readonly templateName: string;
+    readonly schemaVersion: number;
+    readonly createdAt: number;
+    /** Which VaultGroup this shard belongs to (registry is shared across groups). */
+    readonly group: string;
+}
+/** How a VaultGroup maps records to shards. */
+interface ShardingConfig<T> {
+    /** Extract the partition key from a record. */
+    readonly keyOf: (record: T) => string;
+    /** Name of the template (registered via `withVaultTemplate`) shards are stamped from. */
+    readonly vaultTemplate: string;
+    /** When a write targets an unknown partition key, stamp a shard inline. Default `true`. */
+    readonly autoCreate?: boolean;
+}
+/** Options for `Noydb.openVaultGroup`. */
+interface VaultGroupOptions<T> {
+    /**
+     * The `vault-registry` collection (source of truth for shard discovery).
+     * Optional: when omitted, the reserved StateManagement vault's registry
+     * is auto-opened and used.
+     */
+    readonly registry?: Collection<VaultRegistryRow>;
+    readonly sharding: ShardingConfig<T>;
+}
+/** Options for a cross-shard fan-out read. */
+interface FanoutQueryOptions {
+    /** Skip shards whose registry `schemaVersion` is below this. */
+    readonly minVersion?: number;
+    /** Max shards queried in parallel (passed to queryAcross). Default 1. */
+    readonly concurrency?: number;
+}
+/** A shard excluded from a fan-out result, with the reason. */
+interface SkippedVault {
+    readonly vaultId: string;
+    readonly reason: 'schema-drift' | 'error' | 'no-grant';
+    readonly error?: Error;
+}
+/** The result of a cross-shard fan-out read. */
+interface FanoutResult<R> {
+    readonly results: R[];
+    readonly skippedVaults: SkippedVault[];
+}
+/** A single captured where-clause, replayed inside each shard. */
+interface WhereClause {
+    readonly field: string;
+    readonly op: Operator;
+    readonly value: unknown;
+}
+/** Options for the live/aggregate fan-out (extends the one-shot opts). */
+interface LiveQueryOptions extends FanoutQueryOptions {
+    /** Coalesce window before recompute. Default 0 (microtask). */
+    readonly debounceMs?: number;
+}
+/** A grouped aggregate output row: the grouped field + the reduced spec result. */
+type GroupedRow<F extends string, Spec extends AggregateSpec> = {
+    readonly [K in F]: unknown;
+} & AggregateResult<Spec>;
+/** Reactive cross-shard record (or grouped-row) query — array-shaped, mirrors LiveQuery<T>. */
+interface CrossVaultLiveQuery<T> extends LiveQuery<T> {
+    readonly skippedVaults: readonly SkippedVault[];
+    readonly ready: Promise<void>;
+}
+/** Reactive cross-shard scalar aggregate — mirrors LiveAggregation<R>. */
+interface CrossVaultLiveAggregation<R> extends LiveAggregation<R> {
+    readonly skippedVaults: readonly SkippedVault[];
+    readonly ready: Promise<void>;
+}
+/** A serializable blueprint captured from a VaultTemplate.configure run. */
+interface CapturedBlueprint {
+    /** Sorted collection names declared by the template. */
+    readonly collections: string[];
+    /** Per-collection index defs (key order canonicalized). */
+    readonly indexes: Record<string, IndexDef[]>;
+    /** Collections that declared `persistJsonSchema: true`. */
+    readonly persistJsonSchema: string[];
+}
+/** One row in the StateManagement `schema-manifest` collection, keyed by `${templateName}:${version}`. */
+interface SchemaManifestRow {
+    readonly templateName: string;
+    readonly version: number;
+    readonly collections: string[];
+    readonly indexes: Record<string, IndexDef[]>;
+    readonly persistJsonSchema: string[];
+    /** sha256 over the canonicalized serializable blueprint. */
+    readonly fingerprint: string;
+    readonly recordedAt: number;
+}
+/** One row in the append-only StateManagement `deployment-events` collection. */
+interface DeploymentEvent {
+    readonly id: string;
+    readonly ts: number;
+    readonly type: 'shard-created' | 'manifest-recorded' | 'group-opened';
+    readonly group: string;
+    readonly vaultId?: string;
+    readonly templateName?: string;
+    readonly version?: number;
+    readonly actor?: string;
+}
+
+/**
+ * @category capability
+ * StateManagement Vault — federation control plane (registry +
+ * schema-manifest + append-only deployment-events). See
+ * docs/superpowers/specs/2026-06-08-statemanagement-vault-design.md.
+ */
+
+declare class StateManagementVault {
+    #private;
+    readonly registry: Collection<VaultRegistryRow>;
+    readonly schemaManifest: Collection<SchemaManifestRow>;
+    private constructor();
+    /** Idempotently open the reserved state vault and bind the three control-plane collections. */
+    static open(db: Noydb): Promise<StateManagementVault>;
+    /** Read-only query over the append-only deployment-events log. */
+    queryEvents(): Query<DeploymentEvent>;
+    /**
+     * Append a deployment event with a fresh unique (ULID) id. This is the
+     * only write path to the events log; no update/delete is exposed.
+     * Callers should treat failures as non-fatal — this method does not
+     * swallow errors, so wrap the call site in try/catch where appropriate.
+     */
+    appendEvent(event: Omit<DeploymentEvent, 'id' | 'ts'> & {
+        ts?: number;
+    }): Promise<void>;
+    /**
+     * Ensure a manifest row exists for `(templateName, template.version)`.
+     * Safe to call repeatedly: the `fingerprint` is a deterministic hash of
+     * the template's declared shape (stable across calls), though each call
+     * refreshes `recordedAt`.
+     */
+    recordManifest(templateName: string, template: VaultTemplate): Promise<string>;
+    /**
+     * True when `template`'s current declared shape does not match the recorded
+     * manifest for `(templateName, template.version)`. Because shards carry no
+     * schema state independent of their template, this catches "a template's
+     * shape changed without bumping `version`" — not independent per-shard drift.
+     * A missing manifest is treated as drift (nothing to verify against).
+     */
+    detectDrift(templateName: string, template: VaultTemplate): Promise<boolean>;
+}
+
 /**
  * **Wrap-DEKs primitive** — a single canonical shape for the
  * pattern of "serialize a DEK set, encrypt it under a credential-derived
@@ -5080,89 +5272,49 @@ interface FactorProofBundle {
 /** Active session tier — what the engine compares against `gate.minTier`. */
 type ActiveTier = 1 | 2 | 3;
 
-/**
- * @category capability
- * Multi-vault partition federation (MVF) — public types for VaultGroup
- * transparent shard routing. See
- * docs/superpowers/specs/2026-06-07-mvf-vaultgroup-routing-mvp-design.md.
- */
-
-/**
- * A schema blueprint for a class of shard vaults. `configure` is
- * re-applied to every shard handle so all shards are configured
- * identically (collections, indexes, schemas). `version` is recorded
- * into each shard's registry row and drives the fan-out
- * `minVersion` guard.
- */
-interface VaultTemplate {
-    readonly version: number;
-    readonly configure: (vault: Vault) => void;
-}
-/** One row in the StateManagement `vault-registry` collection. */
-interface VaultRegistryRow {
-    readonly vaultId: string;
-    readonly partitionKey: string;
-    readonly templateName: string;
-    readonly schemaVersion: number;
-    readonly createdAt: number;
-}
-/** How a VaultGroup maps records to shards. */
-interface ShardingConfig<T> {
-    /** Extract the partition key from a record. */
-    readonly keyOf: (record: T) => string;
-    /** Name of the template (registered via `withVaultTemplate`) shards are stamped from. */
-    readonly vaultTemplate: string;
-    /** When a write targets an unknown partition key, stamp a shard inline. Default `true`. */
-    readonly autoCreate?: boolean;
-}
-/** Options for `Noydb.openVaultGroup`. */
-interface VaultGroupOptions<T> {
-    /** The `vault-registry` collection (source of truth for shard discovery). */
-    readonly registry: Collection<VaultRegistryRow>;
-    readonly sharding: ShardingConfig<T>;
-}
-/** Options for a cross-shard fan-out read. */
-interface FanoutQueryOptions {
-    /** Skip shards whose registry `schemaVersion` is below this. */
-    readonly minVersion?: number;
-    /** Max shards queried in parallel (passed to queryAcross). Default 1. */
-    readonly concurrency?: number;
-}
-/** A shard excluded from a fan-out result, with the reason. */
-interface SkippedVault {
-    readonly vaultId: string;
-    readonly reason: 'schema-drift' | 'error' | 'no-grant';
-    readonly error?: Error;
-}
-/** The result of a cross-shard fan-out read. */
-interface FanoutResult<R> {
-    readonly results: R[];
-    readonly skippedVaults: SkippedVault[];
-}
-/** A single captured where-clause, replayed inside each shard. */
-interface WhereClause {
+/** Public options for `ShardedQuery.crossShardJoin`. */
+interface CrossShardJoinOptions {
+    /** Alias key under which the joined same-shard record attaches. */
+    readonly as: string;
+    /** Per-shard row ceiling override (default DEFAULT_JOIN_MAX_ROWS). */
+    readonly maxRows?: number;
+    /** Planner strategy override, passed through to intra-vault `.join()`. */
+    readonly strategy?: JoinStrategy;
+}
+/**
+ * Minimal structural shape of a broadcast dimension source. A
+ * `Collection` satisfies this natively: `list()` hydrates and returns
+ * the decoded records. Kept as a one-method interface so plain test
+ * sources are trivial to construct.
+ */
+interface BroadcastSource {
+    list(): Promise<readonly unknown[]>;
+}
+/** Public options for `ShardedQuery.broadcastJoin`. */
+interface BroadcastJoinOptions {
+    /** Alias key under which the dimension record attaches. */
+    readonly as: string;
+    /** The shared dimension collection (an opened handle in another vault). */
+    readonly from: BroadcastSource;
+    /** Right-side key to match `field` against. Default 'id'. */
+    readonly on?: string;
+    /** Miss behavior. 'warn' (default) attaches null + one-shot warning; 'cascade' is silent. */
+    readonly mode?: 'warn' | 'cascade';
+}
+/** Internal co-partitioned leg carried on ShardedQuery. */
+interface CoPartitionedLeg {
     readonly field: string;
-    readonly op: Operator;
-    readonly value: unknown;
-}
-/** Options for the live/aggregate fan-out (extends the one-shot opts). */
-interface LiveQueryOptions extends FanoutQueryOptions {
-    /** Coalesce window before recompute. Default 0 (microtask). */
-    readonly debounceMs?: number;
+    readonly as: string;
+    readonly maxRows: number | undefined;
+    readonly strategy: JoinStrategy | undefined;
 }
-/** A grouped aggregate output row: the grouped field + the reduced spec result. */
-type GroupedRow<F extends string, Spec extends AggregateSpec> = {
-    readonly [K in F]: unknown;
-} & AggregateResult<Spec>;
-/** Reactive cross-shard record (or grouped-row) query — array-shaped, mirrors LiveQuery<T>. */
-interface CrossVaultLiveQuery<T> extends LiveQuery<T> {
-    readonly skippedVaults: readonly SkippedVault[];
-    readonly ready: Promise<void>;
-}
-/** Reactive cross-shard scalar aggregate — mirrors LiveAggregation<R>. */
-interface CrossVaultLiveAggregation<R> extends LiveAggregation<R> {
-    readonly skippedVaults: readonly SkippedVault[];
-    readonly ready: Promise<void>;
+/** Internal broadcast leg carried on ShardedQuery. */
+interface BroadcastLeg {
+    readonly field: string;
+    readonly as: string;
+    readonly from: BroadcastSource;
+    readonly on: string;
+    readonly mode: 'warn' | 'cascade';
 }
 
 /** A source that can fan out records across shards. Satisfied by ShardedQuery. */
@@ -5228,9 +5380,27 @@ declare class VaultGroup<T> {
     /** @internal */ registry: Collection<VaultRegistryRow>, 
     /** @internal */ sharding: ShardingConfig<T>, 
     /** @internal */ template: VaultTemplate);
+    /** @internal — set when the group is managed (no explicit registry). */
+    private stateVault;
+    /** @internal */
+    _attachStateVault(sv: StateManagementVault): void;
     /** Deterministic vault name for a partition key, namespaced by the group. */
     shardVaultId(partitionKey: string): string;
-    /** All registry rows (hydrates the registry collection first). */
+    /**
+     * @internal — group-qualified registry record key (avoids cross-group key
+     * collisions). Identical to the shard vault id by design — the registry row
+     * for a shard is keyed by that shard's vault id — so it delegates to
+     * `shardVaultId`, reusing its partition-key validation.
+     */
+    registryId(partitionKey: string): string;
+    /**
+     * Registry rows for THIS group (hydrates the registry collection first).
+     * The registry may be shared across groups (the auto-wired StateManagement
+     * vault holds one `vaultRegistry` for the whole instance), so rows are
+     * filtered by `group` — without this, a group's fan-out reads would leak
+     * across into other groups' shards. Mirrors the `${group}--` scoping that
+     * `liveBinding().isRelevant` already applies to the reactive path.
+     */
     allRows(): Promise<VaultRegistryRow[]>;
     /** Open an existing shard and apply the template. */
     openShard(partitionKey: string): Promise<Vault>;
@@ -5272,17 +5442,25 @@ declare class ShardedQuery<T, R = T> {
     private readonly group;
     private readonly collectionName;
     private readonly clauses;
-    constructor(group: VaultGroup<T>, collectionName: string, clauses: readonly WhereClause[]);
+    private readonly coPartitionedLegs;
+    private readonly broadcastLegs;
+    constructor(group: VaultGroup<T>, collectionName: string, clauses: readonly WhereClause[], coPartitionedLegs?: readonly CoPartitionedLeg[], broadcastLegs?: readonly BroadcastLeg[]);
     where(field: string, op: WhereClause['op'], value: unknown): ShardedQuery<T, R>;
+    /** Co-partitioned join: each shard joins its own same-vault right collection (resolved via ref()), then union. */
+    crossShardJoin(field: string, opts: CrossShardJoinOptions): ShardedQuery<T, R>;
+    /** Broadcast dimension join: enrich every merged row from a single shared collection. */
+    broadcastJoin(field: string, opts: BroadcastJoinOptions): ShardedQuery<T, R>;
     /** @internal — fan out the where-filtered records across eligible shards. */
     fanoutRecords(options?: FanoutQueryOptions): Promise<{
         records: R[];
         skippedVaults: SkippedVault[];
     }>;
-    /** Fan out across eligible shards and merge results. */
+    /** Fan out across eligible shards, merge, then apply any broadcast dimension legs. */
     toArray(options?: FanoutQueryOptions): Promise<FanoutResult<R>>;
     /** @internal — build the change-subscription + relevance binding for this query's group+collection. */
     liveBinding(): LiveBinding;
+    /** @internal — joined queries don't support reactive/aggregate surfaces in v1. */
+    private assertNoJoinLegs;
     /** Returns a reactive cross-shard live query — a facade over CrossVaultLive. */
     live(options?: LiveQueryOptions): CrossVaultLiveQuery<R>;
     /** One-shot distributed aggregate — central reduce over all shard records. */
@@ -5608,6 +5786,12 @@ declare class Noydb {
      * collection.
      */
     openVaultGroup<T>(name: string, opts: VaultGroupOptions<T>): Promise<VaultGroup<T>>;
+    /**
+     * Open the reserved StateManagement control-plane vault (registry +
+     * schema-manifest + deployment-events). Lazy-loaded so the federation
+     * chunk stays out of the core graph until used.
+     */
+    openStateManagementVault(): Promise<StateManagementVault>;
     /**
      * @internal — true when an encrypted shard vault is provisioned
      * (its keyring exists in the store).
@@ -7192,9 +7376,16 @@ declare class OverlayedViewRegistry {
  * to its record in the same operation.
  */
 
+/** Options for `SequenceHandle.next`. Deferred-numbering series use `for`; the CAS counter ignores all of these. */
+interface NextOptions {
+    /** Deferred mode: the record id to number. Ignored by the CAS counter. */
+    readonly for?: string;
+    /** Deferred mode: reject after this many ms if still unsealed (reserved; not yet enforced in this slice). */
+    readonly timeoutMs?: number;
+}
 interface SequenceHandle {
-    /** Atomically allocate and return the next value (1, 2, 3, …). */
-    next(): Promise<number>;
+    /** Atomically allocate and return the next value (1, 2, 3, …). Deferred series resolve at the next pass. */
+    next(opts?: NextOptions): Promise<number>;
     /** Read the current value without allocating. Returns 0 if never used. */
     peek(): Promise<number>;
 }
@@ -7229,6 +7420,17 @@ declare class SequenceStore {
     next(name: string): Promise<number>;
 }
 
+/**
+ * @category capability
+ * Deferred numbering engine — store-clock-ordered, gap-free serials assigned
+ * at an explicit numbering pass. See the design spec.
+ */
+
+interface Assignment {
+    recordId: string;
+    serial: number;
+}
+
 /**
  * Vault-internal singleton that holds the guard graph and dispatches
  * per-collection guard execution. Owned by `Vault`; not exported.
@@ -8282,6 +8484,10 @@ declare class Vault {
     private ledgerStore;
     /** Lazily-built atomic-sequence store. See {@link sequence}. */
     private sequenceStore;
+    /** Lazily-built deferred-numbering engine. See {@link runNumberingPass}. */
+    private deferredNumbering;
+    /** Registered deferred-numbering series, keyed by series name. */
+    private readonly numberingConfigs;
     /**
      * Background writes for persisted-schema envelopes (#schema-dump v0
      * slice 1). One promise per `collection({ persistJsonSchema: true })`
@@ -8404,6 +8610,7 @@ declare class Vault {
         i18nStrategy?: I18nStrategy | undefined;
         syncStrategy?: SyncStrategy | undefined;
         guardStrategies?: ReadonlyArray<GuardStrategyHandleAny> | undefined;
+        numberingConfigs?: ReadonlyArray<DeferredNumberingConfig> | undefined;
     });
     /**
      * Construct (or reconstruct) the lazy DEK resolver. Captures the
@@ -8740,6 +8947,14 @@ declare class Vault {
      * ```
      */
     sequence(name: string): SequenceHandle;
+    /** @internal — lazily build the deferred-numbering engine with a cache-coherent stamp. */
+    private deferred;
+    /**
+     * Run a deferred-numbering pass for `series`: assign gap-free serials to all
+     * records whose store-commit-time interval has settled, in store-time order.
+     * Returns the assignments made. See {@link sequence} / `withDeferredNumbering`.
+     */
+    runNumberingPass(series: string): Promise<Assignment[]>;
     compact(options?: CompactRunOptions): Promise<CompactionResult>;
     /**
      * Sweep records eligible by their collection's `archive` policy into the
@@ -10436,6 +10651,12 @@ declare class Collection<T> {
      *                each record is locale-resolved before being returned.
      */
     list(locale?: LocaleReadOptions): Promise<T[]>;
+    /**
+     * @internal — whether any read-side record transform is registered
+     * (money decode, i18nText resolution, dictKey labels). Gates the
+     * no-transform fast path in {@link list}.
+     */
+    private hasReadTransforms;
     /**
      * Put many records in one call. Each item is processed sequentially
      * through the normal `put()` path — meaning per-item validation,
@@ -11693,6 +11914,12 @@ interface NoydbStore {
     saveAll(vault: string, data: VaultSnapshot): Promise<void>;
     /** Optional connectivity check for sync engine. */
     ping?(): Promise<boolean>;
+    /**
+     * The store's authoritative time as a bounded-uncertainty interval.
+     * Present iff `capabilities.serverWriteTime` is true. Monotonic
+     * non-decreasing across calls on a single store.
+     */
+    getStoreTime?(): Promise<StoreTime>;
     /**
      * Optional: list record IDs in a collection that have `_ts` after `since`.
      * Used by partial sync (`pull({ modifiedSince })`). Stores that omit this
@@ -12896,6 +13123,17 @@ interface StoreAuth {
     required: boolean;
     flow: 'static' | 'oauth' | 'kerberos' | 'implicit';
 }
+/**
+ * The store's authoritative clock as a bounded-uncertainty interval
+ * (Spanner TrueTime model). True time is provably within [earliest, latest];
+ * `latest - earliest` is the clock-uncertainty bound ε. Used by deferred
+ * numbering to order records by store-commit-time and to commit-wait. Never
+ * the client wall clock.
+ */
+interface StoreTime {
+    readonly earliest: number;
+    readonly latest: number;
+}
 interface StoreCapabilities {
     /**
      * true — the store's expectedVersion check and write are atomic at the
@@ -12904,6 +13142,13 @@ interface StoreCapabilities {
      * false — check and write are separate operations with a race window.
      */
     casAtomic: boolean;
+    /**
+     * true — the store exposes an authoritative {@link NoydbStore.getStoreTime}
+     * clock and records are ordered by store-commit-time. Required for
+     * `withDeferredNumbering`. Absent/false — the store cannot back deferred
+     * numbering (use CAS `sequence().next()` or per-series).
+     */
+    serverWriteTime?: boolean;
     auth: StoreAuth;
     /**
      * true — the store implements {@link NoydbStore.tx} and commits
@@ -13078,6 +13323,12 @@ interface NoydbOptions {
      * in registration order on `collection.put()`.
      */
     readonly guardStrategies?: ReadonlyArray<GuardStrategyHandleAny>;
+    /**
+     * Deferred-numbering series declared via `withDeferredNumbering(...)`.
+     * `vault.sequence(series).next({ for })` then assigns gap-free serials at a
+     * numbering pass (`vault.runNumberingPass(series)`) instead of via CAS.
+     */
+    readonly numbering?: ReadonlyArray<DeferredNumberingConfig>;
     /**
      * Optional derivation strategies — source-to-output projections that
      * fire on `collection.put()`. Each handle is the output of
@@ -13376,4 +13627,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ExportBlobsAuditEntry as $, BLOB_COLLECTION as A, type BlobStrategy as B, BLOB_EVICTION_AUDIT_COLLECTION as C, DICT_COLLECTION_PREFIX as D, BLOB_INDEX_COLLECTION as E, BLOB_SLOTS_PREFIX as F, BLOB_VERSIONS_PREFIX as G, type BlobEvictionEntry as H, type I18nStrategy as I, type BlobFieldPolicy as J, type BlobFieldsConfig as K, type Layer as L, type BlobObject as M, type BlobPutOptions as N, type OnMissing as O, PolicyEnforcer as P, type BlobResponseOptions as Q, type ResolveI18nOptions as R, type ScriptWarning as S, BlobSet as T, type BlobStrategyOpenArgs as U, type CompactRunOptions as V, type CompactionContext as W, type CompactionResult as X, DEFAULT_CHUNK_SIZE as Y, EXPORT_AUDIT_COLLECTION as Z, ExportBlobsAbortedError as _, type DictEntry as a, type SyncStrategy as a$, type ExportBlobsHandle as a0, type ExportBlobsOptions as a1, type ExportedBlob as a2, type SlotInfo as a3, type SlotRecord as a4, type VersionRecord as a5, createExportBlobsHandle as a6, runCompaction as a7, type ConsentStrategy as a8, CONSENT_AUDIT_COLLECTION as a9, VaultFrame as aA, type NoydbBundleStore as aB, type RetentionPolicy as aC, type SnapshotPolicy as aD, type SnapshotStrategy as aE, type SnapshotMeta as aF, type SnapshotMode as aG, type TxStrategy as aH, type AmendmentTxOptions as aI, TxCollection as aJ, TxContext as aK, TxVault as aL, runTransaction as aM, type DerivationStrategy as aN, type DerivationContext as aO, type ArrayOutputSpec as aP, DerivationRegistry as aQ, type DerivationStrategyHandle as aR, type DerivedFromMeta as aS, type OutputSpec as aT, type RecordOutputSpec as aU, type MaterializedViewStrategy as aV, type MaterializedViewStrategyHandle as aW, type OverlayedViewStrategy as aX, Collection as aY, OverlayedViewRegistry as aZ, type OverlayedViewStrategyHandle as a_, type ConsentAuditEntry as aa, type ConsentAuditFilter as ab, type ConsentContext as ac, type ConsentOp as ad, loadConsentEntries as ae, writeConsentEntry as af, type PeriodsStrategy as ag, type CarryForwardContext as ah, type ClosePeriodOptions as ai, type OpenPeriodOptions as aj, PERIODS_COLLECTION as ak, type PeriodRecord as al, type ReadOnlyCollection as am, appendPeriodLedgerEntry as an, assertTsWritable as ao, chainAnchor as ap, loadPeriods as aq, validatePeriodName as ar, type GuardStrategy as as, type GuardChange as at, type GuardContext as au, GuardRegistry as av, type GuardStrategyHandle as aw, ReadOnlyVaultFacade as ax, type ShadowStrategy as ay, CollectionFrame as az, type DictKeyDescriptor as b, type ChangeEvent as b$, type Role as b0, type UnlockedKeyring as b1, type HistoryStrategy as b2, type NoydbStore as b3, type HistoryOptions as b4, type EncryptedEnvelope as b5, type PruneOptions as b6, type AppendInput as b7, type ChangeType as b8, CollectionInstant as b9, type RegisteredMV as bA, MaterializedViewRegistry as bB, type MaterializedFromMeta as bC, type MaterializedViewOutput as bD, type UnionSource as bE, type UserEnvelope as bF, type GateName as bG, type GatePolicy as bH, type VaultPolicy as bI, type ActiveTier as bJ, type FactorProof as bK, type SchemaUpdateStrategy as bL, type TransformFn as bM, type PersistedSchemaEnvelope as bN, type UpdateDecision as bO, type DirectoryConfig as bP, type UserVisibility as bQ, type AccessibleVault as bR, type AffectedDocument as bS, type ArchivePolicy as bT, type ArchiveResult as bU, type ArchiveRunOptions as bV, type ArchiveStrategy as bW, BUNDLE_STORE_POLICY as bX, type BuiltInGateName as bY, type CacheOptions as bZ, type CacheStats as b_, type DiffEntry as ba, type JsonPatch as bb, type JsonPatchOp as bc, type LedgerEntry as bd, LedgerStore as be, type VaultEngine as bf, VaultInstant as bg, type VerifyResult as bh, applyPatch as bi, canonicalJson as bj, computePatch as bk, diff as bl, formatDiff as bm, hashEntry as bn, paddedIndex as bo, parseIndex as bp, sha256Hex as bq, type PublicEnvelope as br, type SealingKeyProvider as bs, type BundleRecipient as bt, type RecipientSealer as bu, type RecipientHint as bv, Vault as bw, type RecoveryEnrollmentInput as bx, type ShamirRecoveryProvider as by, type MVQueryContext as bz, DictionaryHandle as c, type ListUsersOptions as c$, type CollectionChangeEvent as c0, type CollectionConflictResolver as c1, type CollectionDescriptor as c2, type CollectionStats as c3, ComputedFieldError as c4, type ComputedFields as c5, type ComputedFn as c6, type Conflict as c7, type ConflictPolicy as c8, type ConflictStrategy as c9, type FactorKind as cA, type FactorProofBundle as cB, type FactorRequirement as cC, type FanoutQueryOptions as cD, type FanoutResult as cE, type FenceDoc as cF, type FenceState as cG, type FieldChange as cH, type FieldDescriptor as cI, type FieldSource as cJ, type GhostRecord as cK, type GrantOptions as cL, type GuardViolation as cM, type HistoryConfig as cN, type HistoryEntry as cO, INDEXED_STORE_POLICY as cP, type ImportCapability as cQ, type InferOutput as cR, type InternalCollectionStats as cS, type IssueDelegationOptions as cT, type IssueMagicLinkGrantOptions as cU, type KeyringAuthenticator as cV, type KeyringAuthenticatorWrappingDEKs as cW, type KeyringAuthenticatorWrappingKEK as cX, type KeyringFile as cY, type ListAccessibleVaultsOptions as cZ, type ListPageResult as c_, type CrossTierAccessEvent as ca, CrossVaultAggregation as cb, CrossVaultGroupedAggregation as cc, type GroupedRow as cd, type CrossVaultLiveAggregation as ce, type CrossVaultLiveQuery as cf, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as cg, DELEGATIONS_COLLECTION as ch, type DeepPartial as ci, type DeepPartialOrNull as cj, type DelegationToken as ck, type DeleteManyResult as cl, type DerivationDescriptor as cm, type DirtyEntry as cn, type DryRunResult as co, type DumpSchemaOptions as cp, ELEVATION_AUDIT_COLLECTION as cq, ElevatedHandle as cr, type EnrollAuthenticatorOptions as cs, type EnrollAuthenticatorWrappingDEKsOptions as ct, type EnrollAuthenticatorWrappingKEKOptions as cu, type EnrollRecoveryResult as cv, type ExportCapability as cw, type ExportChunk as cx, type ExportFormat as cy, type ExportStreamOptions as cz, type DictionaryOptions as d, SEALED_PASSPHRASE_RECORD_ID as d$, type LiveQueryOptions as d0, type LiveUserEnvelope as d1, type LocaleReadOptions as d2, Lru as d3, type LruOptions as d4, type LruStats as d5, MAGIC_LINK_CONTENT_INFO_PREFIX as d6, MAGIC_LINK_GRANTS_COLLECTION as d7, MAGIC_LINK_KEK_INFO_PREFIX as d8, type MagicLinkGrantPayload as d9, type PublicEnvelopeSchema as dA, type PublicEnvelopeText as dB, type PullMode as dC, type PullOptions as dD, type PullPolicy as dE, type PullResult as dF, type PushMode as dG, type PushOptions as dH, type PushPolicy as dI, type PushResult as dJ, type PutManyItemOptions as dK, type PutManyOptions as dL, type PutManyResult as dM, type QueryAcrossOptions as dN, type QueryAcrossResult as dO, type QuickUnlockState as dP, QuickUnlockStore as dQ, type ReAuthOperation as dR, type RecoverPassphraseInput as dS, type RecoverPassphraseResult as dT, type RecoverUserOptions as dU, type RecoveryProof as dV, type ResolvedPublicEnvelopeSchema as dW, type RevokeOptions as dX, type RotatePassphraseInput as dY, type RotateRecoveryOptions as dZ, type RotateRecoveryResult as d_, type MagicLinkGrantRecord as da, type MaterializedViewDescriptor as db, MemoryRecipientSealer as dc, MemorySealingKeyProvider as dd, NOYDB_BACKUP_VERSION as de, NOYDB_FORMAT_VERSION as df, NOYDB_KEYRING_VERSION as dg, NOYDB_SYNC_VERSION as dh, Noydb as di, type NoydbEventMap as dj, type NoydbOptions as dk, type OverlayViewDescriptor as dl, PUBLIC_ENVELOPE_FIELDS as dm, type PaperRecoveryDoc as dn, type PaperRecoveryEntry as dp, type PassphrasePolicy as dq, type PassphraseValidationResult as dr, type Permission as ds, type Permissions as dt, type PersistedSchemaKind as du, type PlaintextTranslatorContext as dv, type PlaintextTranslatorFn as dw, PresenceHandle as dx, type PresencePeer as dy, type PublicEnvelopeField as dz, type I18nMap as e, type WithArchiveOptions as e$, type SchemaDelta as e0, type SchemaIntrospection as e1, type SealedEnvelope as e2, type SealedPassphrase as e3, type SequenceHandle as e4, SequenceStore as e5, type SessionPolicy as e6, type SetPublicEnvelopeInput as e7, type ShamirRecoveryDoc as e8, type ShamirRecoveryEntry as e9, type TabPresence as eA, type TabRole as eB, type TierMode as eC, type TranslatorAuditEntry as eD, type TxOp as eE, USER_ENVELOPE_COLLECTION as eF, USER_ENVELOPE_MAX_BYTES as eG, type Unsubscribe as eH, type UpdateAuthenticatorOptions as eI, type UpdateContext as eJ, type UpdateUserOptions as eK, UserApi as eL, type UserEnvelopeCheckGate as eM, UserEnvelopeOversizedError as eN, type UserEnvelopePresented as eO, type UserInfo as eP, type VaultBackup as eQ, VaultGroup as eR, type VaultGroupOptions as eS, type VaultPolicyOnDisk as eT, type VaultRegistryRow as eU, type VaultSchemaSnapshot as eV, type VaultSnapshot as eW, type VaultTemplate as eX, type WarningRules as eY, WeakPassphraseError as eZ, type WeakPassphraseReason as e_, ShardedCollection as ea, ShardedGroupedQuery as eb, ShardedQuery as ec, type ShardingConfig as ed, type SkippedVault as ee, type SlotRewrapCeremony as ef, type SlotRewrapContext as eg, type StandardSchemaV1 as eh, type StandardSchemaV1Issue as ei, type StandardSchemaV1SyncResult as ej, type StoreAuth as ek, type StoreAuthKind as el, type StoreCapabilities as em, SyncEngine as en, type SyncMetadata as eo, type SyncPolicy as ep, SyncScheduler as eq, type SyncSchedulerStatus as er, type SyncStatus as es, type SyncTarget as et, type SyncTargetRole as eu, SyncTransaction as ev, type SyncTransactionResult as ew, type TabChannel as ex, type TabCoordinationOptions as ey, type TabLockManager as ez, type I18nTextDescriptor as f, updateAuthenticator as f$, type WrappedDeksBlob as f0, type WriteConflict as f1, type WriteEvent as f2, type WriteHook as f3, type WriteQueue as f4, assertStrongPassphrase as f5, buildRecipientKeyringFile as f6, burnPaperRecoveryEntry as f7, createNoydb as f8, createStore as f9, parseSealedEnvelope as fA, readMagicLinkGrantRecord as fB, recoverUser as fC, removeAuthenticator as fD, resolveSchema as fE, revokeDelegation as fF, revokeMagicLinkGrant as fG, savePaperRecoveryEntries as fH, saveSealedPassphrase as fI, saveShamirRecoveryEntries as fJ, unwrapDeksFromBlob as fK, unwrapDeksFromPaperEntry as fL, unwrapDeksFromShamirEntry as fM, unwrapMagicLinkGrant as fN, validatePassphrase as fO, validatePublicEnvelopeInput as fP, validateSchemaInput as fQ, validateSchemaOutput as fR, withArchive as fS, writeMagicLinkGrant as fT, changeSecret as fU, createOwnerKeyring as fV, ensureCollectionDEK as fW, grant as fX, loadKeyring as fY, persistKeyring as fZ, revoke as f_, deriveMagicLinkContentKey as fa, enrollAuthenticator as fb, estimateEntropy as fc, evalComputedFields as fd, evaluateExportCapability as fe, evaluateImportCapability as ff, findAuthenticator as fg, hasExportCapability as fh, hasImportCapability as fi, hasRecoveryEnrolled as fj, isMagicLinkGrantExpired as fk, isPublicEnvelope as fl, issueDelegation as fm, recoverPassphrase as fn, rotatePassphrase as fo, listMagicLinkGrants as fp, listUsers as fq, listUsersWithEnvelopes as fr, loadActiveDelegations as fs, loadPaperRecoveryEntries as ft, loadSealedPassphrase as fu, loadShamirRecoveryEntries as fv, magicLinkGrantRecordId as fw, mintPaperRecoveryEntry as fx, mintShamirRecoveryEntry as fy, mintWrappedDeksBlob as fz, type I18nTextOptions as g, updateKeyringIdentity as g0, type OnMissingPolicy as h, applyI18nLocale as i, dictCollectionName as j, dictKey as k, enforceScript as l, getAtPath as m, i18nText as n, inferScripts as o, isDictCollectionName as p, isDictKeyDescriptor as q, isI18nTextDescriptor as r, resolveI18nText as s, resolvePolicy as t, setAtPathInPlace as u, validateI18nTextValue as v, type SessionStrategy as w, createEnforcer as x, validateSessionPolicy as y, BLOB_CHUNKS_COLLECTION as z };
+export { type ExportBlobsAuditEntry as $, BLOB_COLLECTION as A, type BlobStrategy as B, BLOB_EVICTION_AUDIT_COLLECTION as C, DICT_COLLECTION_PREFIX as D, BLOB_INDEX_COLLECTION as E, BLOB_SLOTS_PREFIX as F, BLOB_VERSIONS_PREFIX as G, type BlobEvictionEntry as H, type I18nStrategy as I, type BlobFieldPolicy as J, type BlobFieldsConfig as K, type Layer as L, type BlobObject as M, type BlobPutOptions as N, type OnMissing as O, PolicyEnforcer as P, type BlobResponseOptions as Q, type ResolveI18nOptions as R, type ScriptWarning as S, BlobSet as T, type BlobStrategyOpenArgs as U, type CompactRunOptions as V, type CompactionContext as W, type CompactionResult as X, DEFAULT_CHUNK_SIZE as Y, EXPORT_AUDIT_COLLECTION as Z, ExportBlobsAbortedError as _, type DictEntry as a, type SyncStrategy as a$, type ExportBlobsHandle as a0, type ExportBlobsOptions as a1, type ExportedBlob as a2, type SlotInfo as a3, type SlotRecord as a4, type VersionRecord as a5, createExportBlobsHandle as a6, runCompaction as a7, type ConsentStrategy as a8, CONSENT_AUDIT_COLLECTION as a9, VaultFrame as aA, type NoydbBundleStore as aB, type RetentionPolicy as aC, type SnapshotPolicy as aD, type SnapshotStrategy as aE, type SnapshotMeta as aF, type SnapshotMode as aG, type TxStrategy as aH, type AmendmentTxOptions as aI, TxCollection as aJ, TxContext as aK, TxVault as aL, runTransaction as aM, type DerivationStrategy as aN, type DerivationContext as aO, type ArrayOutputSpec as aP, DerivationRegistry as aQ, type DerivationStrategyHandle as aR, type DerivedFromMeta as aS, type OutputSpec as aT, type RecordOutputSpec as aU, type MaterializedViewStrategy as aV, type MaterializedViewStrategyHandle as aW, type OverlayedViewStrategy as aX, Collection as aY, OverlayedViewRegistry as aZ, type OverlayedViewStrategyHandle as a_, type ConsentAuditEntry as aa, type ConsentAuditFilter as ab, type ConsentContext as ac, type ConsentOp as ad, loadConsentEntries as ae, writeConsentEntry as af, type PeriodsStrategy as ag, type CarryForwardContext as ah, type ClosePeriodOptions as ai, type OpenPeriodOptions as aj, PERIODS_COLLECTION as ak, type PeriodRecord as al, type ReadOnlyCollection as am, appendPeriodLedgerEntry as an, assertTsWritable as ao, chainAnchor as ap, loadPeriods as aq, validatePeriodName as ar, type GuardStrategy as as, type GuardChange as at, type GuardContext as au, GuardRegistry as av, type GuardStrategyHandle as aw, ReadOnlyVaultFacade as ax, type ShadowStrategy as ay, CollectionFrame as az, type DictKeyDescriptor as b, type CapturedBlueprint as b$, type Role as b0, type UnlockedKeyring as b1, type HistoryStrategy as b2, type NoydbStore as b3, type HistoryOptions as b4, type EncryptedEnvelope as b5, type PruneOptions as b6, type AppendInput as b7, type ChangeType as b8, CollectionInstant as b9, type RegisteredMV as bA, MaterializedViewRegistry as bB, type MaterializedFromMeta as bC, type MaterializedViewOutput as bD, type UnionSource as bE, type UserEnvelope as bF, type GateName as bG, type GatePolicy as bH, type VaultPolicy as bI, type ActiveTier as bJ, type FactorProof as bK, type SchemaUpdateStrategy as bL, type TransformFn as bM, type PersistedSchemaEnvelope as bN, type UpdateDecision as bO, type DirectoryConfig as bP, type UserVisibility as bQ, type AccessibleVault as bR, type AffectedDocument as bS, type ArchivePolicy as bT, type ArchiveResult as bU, type ArchiveRunOptions as bV, type ArchiveStrategy as bW, BUNDLE_STORE_POLICY as bX, type BuiltInGateName as bY, type CacheOptions as bZ, type CacheStats as b_, type DiffEntry as ba, type JsonPatch as bb, type JsonPatchOp as bc, type LedgerEntry as bd, LedgerStore as be, type VaultEngine as bf, VaultInstant as bg, type VerifyResult as bh, applyPatch as bi, canonicalJson as bj, computePatch as bk, diff as bl, formatDiff as bm, hashEntry as bn, paddedIndex as bo, parseIndex as bp, sha256Hex as bq, type PublicEnvelope as br, type SealingKeyProvider as bs, type BundleRecipient as bt, type RecipientSealer as bu, type RecipientHint as bv, Vault as bw, type RecoveryEnrollmentInput as bx, type ShamirRecoveryProvider as by, type MVQueryContext as bz, DictionaryHandle as c, type KeyringFile as c$, type ChangeEvent as c0, type CollectionChangeEvent as c1, type CollectionConflictResolver as c2, type CollectionDescriptor as c3, type CollectionStats as c4, ComputedFieldError as c5, type ComputedFields as c6, type ComputedFn as c7, type Conflict as c8, type ConflictPolicy as c9, type ExportChunk as cA, type ExportFormat as cB, type ExportStreamOptions as cC, type FactorKind as cD, type FactorProofBundle as cE, type FactorRequirement as cF, type FanoutQueryOptions as cG, type FanoutResult as cH, type FenceDoc as cI, type FenceState as cJ, type FieldChange as cK, type FieldDescriptor as cL, type FieldSource as cM, type GhostRecord as cN, type GrantOptions as cO, type GuardViolation as cP, type HistoryConfig as cQ, type HistoryEntry as cR, INDEXED_STORE_POLICY as cS, type ImportCapability as cT, type InferOutput as cU, type InternalCollectionStats as cV, type IssueDelegationOptions as cW, type IssueMagicLinkGrantOptions as cX, type KeyringAuthenticator as cY, type KeyringAuthenticatorWrappingDEKs as cZ, type KeyringAuthenticatorWrappingKEK as c_, type ConflictStrategy as ca, type CrossTierAccessEvent as cb, CrossVaultAggregation as cc, CrossVaultGroupedAggregation as cd, type GroupedRow as ce, type CrossVaultLiveAggregation as cf, type CrossVaultLiveQuery as cg, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as ch, DELEGATIONS_COLLECTION as ci, type DeepPartial as cj, type DeepPartialOrNull as ck, type DeferredNumberingConfig as cl, type DelegationToken as cm, type DeleteManyResult as cn, type DeploymentEvent as co, type DerivationDescriptor as cp, type DirtyEntry as cq, type DryRunResult as cr, type DumpSchemaOptions as cs, ELEVATION_AUDIT_COLLECTION as ct, ElevatedHandle as cu, type EnrollAuthenticatorOptions as cv, type EnrollAuthenticatorWrappingDEKsOptions as cw, type EnrollAuthenticatorWrappingKEKOptions as cx, type EnrollRecoveryResult as cy, type ExportCapability as cz, type DictionaryOptions as d, type ResolvedPublicEnvelopeSchema as d$, type ListAccessibleVaultsOptions as d0, type ListPageResult as d1, type ListUsersOptions as d2, type LiveQueryOptions as d3, type LiveUserEnvelope as d4, type LocaleReadOptions as d5, Lru as d6, type LruOptions as d7, type LruStats as d8, MAGIC_LINK_CONTENT_INFO_PREFIX as d9, type PlaintextTranslatorContext as dA, type PlaintextTranslatorFn as dB, PresenceHandle as dC, type PresencePeer as dD, type PublicEnvelopeField as dE, type PublicEnvelopeSchema as dF, type PublicEnvelopeText as dG, type PullMode as dH, type PullOptions as dI, type PullPolicy as dJ, type PullResult as dK, type PushMode as dL, type PushOptions as dM, type PushPolicy as dN, type PushResult as dO, type PutManyItemOptions as dP, type PutManyOptions as dQ, type PutManyResult as dR, type QueryAcrossOptions as dS, type QueryAcrossResult as dT, type QuickUnlockState as dU, QuickUnlockStore as dV, type ReAuthOperation as dW, type RecoverPassphraseInput as dX, type RecoverPassphraseResult as dY, type RecoverUserOptions as dZ, type RecoveryProof as d_, MAGIC_LINK_GRANTS_COLLECTION as da, MAGIC_LINK_KEK_INFO_PREFIX as db, type MagicLinkGrantPayload as dc, type MagicLinkGrantRecord as dd, type MaterializedViewDescriptor as de, MemoryRecipientSealer as df, MemorySealingKeyProvider as dg, NOYDB_BACKUP_VERSION as dh, NOYDB_FORMAT_VERSION as di, NOYDB_KEYRING_VERSION as dj, NOYDB_SYNC_VERSION as dk, type NextOptions as dl, Noydb as dm, type NoydbEventMap as dn, type NoydbOptions as dp, type Assignment as dq, type OverlayViewDescriptor as dr, PUBLIC_ENVELOPE_FIELDS as ds, type PaperRecoveryDoc as dt, type PaperRecoveryEntry as du, type PassphrasePolicy as dv, type PassphraseValidationResult as dw, type Permission as dx, type Permissions as dy, type PersistedSchemaKind as dz, type I18nMap as e, type VaultPolicyOnDisk as e$, type RevokeOptions as e0, type RotatePassphraseInput as e1, type RotateRecoveryOptions as e2, type RotateRecoveryResult as e3, SEALED_PASSPHRASE_RECORD_ID as e4, type SchemaDelta as e5, type SchemaIntrospection as e6, type SchemaManifestRow as e7, type SealedEnvelope as e8, type SealedPassphrase as e9, type SyncStatus as eA, type SyncTarget as eB, type SyncTargetRole as eC, SyncTransaction as eD, type SyncTransactionResult as eE, type TabChannel as eF, type TabCoordinationOptions as eG, type TabLockManager as eH, type TabPresence as eI, type TabRole as eJ, type TierMode as eK, type TranslatorAuditEntry as eL, type TxOp as eM, USER_ENVELOPE_COLLECTION as eN, USER_ENVELOPE_MAX_BYTES as eO, type Unsubscribe as eP, type UpdateAuthenticatorOptions as eQ, type UpdateContext as eR, type UpdateUserOptions as eS, UserApi as eT, type UserEnvelopeCheckGate as eU, UserEnvelopeOversizedError as eV, type UserEnvelopePresented as eW, type UserInfo as eX, type VaultBackup as eY, VaultGroup as eZ, type VaultGroupOptions as e_, type SequenceHandle as ea, SequenceStore as eb, type SessionPolicy as ec, type SetPublicEnvelopeInput as ed, type ShamirRecoveryDoc as ee, type ShamirRecoveryEntry as ef, ShardedCollection as eg, ShardedGroupedQuery as eh, ShardedQuery as ei, type ShardingConfig as ej, type SkippedVault as ek, type SlotRewrapCeremony as el, type SlotRewrapContext as em, type StandardSchemaV1 as en, type StandardSchemaV1Issue as eo, type StandardSchemaV1SyncResult as ep, StateManagementVault as eq, type StoreAuth as er, type StoreAuthKind as es, type StoreCapabilities as et, type StoreTime as eu, SyncEngine as ev, type SyncMetadata as ew, type SyncPolicy as ex, SyncScheduler as ey, type SyncSchedulerStatus as ez, type I18nTextDescriptor as f, withDeferredNumbering as f$, type VaultRegistryRow as f0, type VaultSchemaSnapshot as f1, type VaultSnapshot as f2, type VaultTemplate as f3, type WarningRules as f4, WeakPassphraseError as f5, type WeakPassphraseReason as f6, type WithArchiveOptions as f7, type WrappedDeksBlob as f8, type WriteConflict as f9, loadActiveDelegations as fA, loadPaperRecoveryEntries as fB, loadSealedPassphrase as fC, loadShamirRecoveryEntries as fD, magicLinkGrantRecordId as fE, mintPaperRecoveryEntry as fF, mintShamirRecoveryEntry as fG, mintWrappedDeksBlob as fH, parseSealedEnvelope as fI, readMagicLinkGrantRecord as fJ, recoverUser as fK, removeAuthenticator as fL, resolveSchema as fM, revokeDelegation as fN, revokeMagicLinkGrant as fO, savePaperRecoveryEntries as fP, saveSealedPassphrase as fQ, saveShamirRecoveryEntries as fR, unwrapDeksFromBlob as fS, unwrapDeksFromPaperEntry as fT, unwrapDeksFromShamirEntry as fU, unwrapMagicLinkGrant as fV, validatePassphrase as fW, validatePublicEnvelopeInput as fX, validateSchemaInput as fY, validateSchemaOutput as fZ, withArchive as f_, type WriteEvent as fa, type WriteHook as fb, type WriteQueue as fc, assertStrongPassphrase as fd, buildRecipientKeyringFile as fe, burnPaperRecoveryEntry as ff, createNoydb as fg, createStore as fh, deriveMagicLinkContentKey as fi, enrollAuthenticator as fj, estimateEntropy as fk, evalComputedFields as fl, evaluateExportCapability as fm, evaluateImportCapability as fn, findAuthenticator as fo, hasExportCapability as fp, hasImportCapability as fq, hasRecoveryEnrolled as fr, isMagicLinkGrantExpired as fs, isPublicEnvelope as ft, issueDelegation as fu, recoverPassphrase as fv, rotatePassphrase as fw, listMagicLinkGrants as fx, listUsers as fy, listUsersWithEnvelopes as fz, type I18nTextOptions as g, writeMagicLinkGrant as g0, changeSecret as g1, createOwnerKeyring as g2, ensureCollectionDEK as g3, grant as g4, loadKeyring as g5, persistKeyring as g6, revoke as g7, updateAuthenticator as g8, updateKeyringIdentity as g9, type OnMissingPolicy as h, applyI18nLocale as i, dictCollectionName as j, dictKey as k, enforceScript as l, getAtPath as m, i18nText as n, inferScripts as o, isDictCollectionName as p, isDictKeyDescriptor as q, isI18nTextDescriptor as r, resolveI18nText as s, resolvePolicy as t, setAtPathInPlace as u, validateI18nTextValue as v, type SessionStrategy as w, createEnforcer as x, validateSessionPolicy as y, BLOB_CHUNKS_COLLECTION as z };

package/dist/{ulid-D4d0Xto3.d.cts → ulid-CwNf9e6-.d.cts}

@@ -1,4 +1,4 @@
-import { br as PublicEnvelope, bs as SealingKeyProvider, bt as BundleRecipient, bu as RecipientSealer, bv as RecipientHint, bw as Vault } from './types-BGwjsDef.cjs';
+import { br as PublicEnvelope, bs as SealingKeyProvider, bt as BundleRecipient, bu as RecipientSealer, bv as RecipientHint, bw as Vault } from './types-V5R2-pd4.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.

package/dist/{ulid-DOTPZ5_h.d.ts → ulid-p2nKiiKg.d.ts}

@@ -1,4 +1,4 @@
-import { br as PublicEnvelope, bs as SealingKeyProvider, bt as BundleRecipient, bu as RecipientSealer, bv as RecipientHint, bw as Vault } from './types-DRdfwgTG.js';
+import { br as PublicEnvelope, bs as SealingKeyProvider, bt as BundleRecipient, bu as RecipientSealer, bv as RecipientHint, bw as Vault } from './types-BFHQUjdy.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.