@noy-db/hub 0.2.0-pre.13 → 0.2.0-pre.15

package/dist/index.d.cts

@@ -1,22 +1,22 @@
-import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-CDwSSXiI.cjs';
-export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as CapturedBlueprint, c0 as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c1 as CollectionChangeEvent, c2 as CollectionConflictResolver, c3 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c4 as CollectionStats, c5 as ComputedFieldError, c6 as ComputedFields, c7 as ComputedFn, c8 as Conflict, c9 as ConflictPolicy, ca as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, cb as CrossTierAccessEvent, cc as CrossVaultAggregation, cd as CrossVaultGroupedAggregation, ce as CrossVaultGroupedRow, cf as CrossVaultLiveAggregation, cg as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, ch as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ci as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, cj as DeepPartial, ck as DeepPartialOrNull, cl as DeferredNumberingConfig, cm as DelegationToken, cn as DeleteManyResult, co as DeploymentEvent, cp as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cq as DirtyEntry, cr as DryRunResult, cs as DumpSchemaOptions, ct as ELEVATION_AUDIT_COLLECTION, cu as ElevatedHandle, b5 as EncryptedEnvelope, cv as EnrollAuthenticatorOptions, cw as EnrollAuthenticatorWrappingDEKsOptions, cx as EnrollAuthenticatorWrappingKEKOptions, cy as EnrollRecoveryResult, cz as ExportCapability, cA as ExportChunk, cB as ExportFormat, cC as ExportStreamOptions, cD as FactorKind, cE as FactorProofBundle, cF as FactorRequirement, cG as FanoutQueryOptions, cH as FanoutResult, cI as FenceDoc, cJ as FenceState, cK as FieldChange, cL as FieldDescriptor, cM as FieldSource, cN as GhostRecord, cO as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cP as GuardViolation, cQ as HistoryConfig, cR as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cS as INDEXED_STORE_POLICY, cT as ImportCapability, cU as InferOutput, cV as InternalCollectionStats, cW as IssueDelegationOptions, cX as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cY as KeyringAuthenticator, cZ as KeyringAuthenticatorWrappingDEKs, c_ as KeyringAuthenticatorWrappingKEK, c$ as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, d0 as ListAccessibleVaultsOptions, d1 as ListPageResult, d2 as ListUsersOptions, d3 as LiveQueryOptions, d4 as LiveUserEnvelope, d5 as LocaleReadOptions, d6 as Lru, d7 as LruOptions, d8 as LruStats, d9 as MAGIC_LINK_CONTENT_INFO_PREFIX, da as MAGIC_LINK_GRANTS_COLLECTION, db as MAGIC_LINK_KEK_INFO_PREFIX, dc as MagicLinkGrantPayload, dd as MagicLinkGrantRecord, bC as MaterializedFromMeta, de as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, df as MemoryRecipientSealer, dg as MemorySealingKeyProvider, dh as NOYDB_BACKUP_VERSION, di as NOYDB_FORMAT_VERSION, dj as NOYDB_KEYRING_VERSION, dk as NOYDB_SYNC_VERSION, dl as NextOptions, dm as Noydb, aB as NoydbBundleStore, dn as NoydbEventMap, dp as NoydbOptions, dq as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dr as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, ds as PUBLIC_ENVELOPE_FIELDS, dt as PaperRecoveryDoc, du as PaperRecoveryEntry, dv as PassphrasePolicy, dw as PassphraseValidationResult, al as PeriodRecord, dx as Permission, dy as Permissions, dz as PersistedSchemaKind, dA as PlaintextTranslatorContext, dB as PlaintextTranslatorFn, P as PolicyEnforcer, dC as PresenceHandle, dD as PresencePeer, b6 as PruneOptions, dE as PublicEnvelopeField, dF as PublicEnvelopeSchema, dG as PublicEnvelopeText, dH as PullMode, dI as PullOptions, dJ as PullPolicy, dK as PullResult, dL as PushMode, dM as PushOptions, dN as PushPolicy, dO as PushResult, dP as PutManyItemOptions, dQ as PutManyOptions, dR as PutManyResult, dS as QueryAcrossOptions, dT as QueryAcrossResult, dU as QuickUnlockState, dV as QuickUnlockStore, dW as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dX as RecoverPassphraseInput, dY as RecoverPassphraseResult, dZ as RecoverUserOptions, d_ as RecoveryProof, R as ResolveI18nOptions, d$ as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, e0 as RevokeOptions, b0 as Role, e1 as RotatePassphraseInput, e2 as RotateRecoveryOptions, e3 as RotateRecoveryResult, e4 as SEALED_PASSPHRASE_RECORD_ID, e5 as SchemaDelta, e6 as SchemaIntrospection, e7 as SchemaManifestRow, S as ScriptWarning, e8 as SealedEnvelope, e9 as SealedPassphrase, bs as SealingKeyProvider, ea as SequenceHandle, eb as SequenceStore, ec as SessionPolicy, ed as SetPublicEnvelopeInput, ee as ShamirRecoveryDoc, ef as ShamirRecoveryEntry, by as ShamirRecoveryProvider, eg as ShardedCollection, eh as ShardedGroupedQuery, ei as ShardedQuery, ej as ShardingConfig, ek as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, el as SlotRewrapCeremony, em as SlotRewrapContext, aF as SnapshotMeta, en as StandardSchemaV1, eo as StandardSchemaV1Issue, ep as StandardSchemaV1SyncResult, eq as StateManagementVault, er as StoreAuth, es as StoreAuthKind, et as StoreCapabilities, eu as StoreTime, ev as SyncEngine, ew as SyncMetadata, ex as SyncPolicy, ey as SyncScheduler, ez as SyncSchedulerStatus, eA as SyncStatus, eB as SyncTarget, eC as SyncTargetRole, eD as SyncTransaction, eE as SyncTransactionResult, eF as TabChannel, eG as TabCoordinationOptions, eH as TabLockManager, eI as TabPresence, eJ as TabRole, eK as TierMode, eL as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eM as TxOp, aL as TxVault, eN as USER_ENVELOPE_COLLECTION, eO as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eP as Unsubscribe, eQ as UpdateAuthenticatorOptions, eR as UpdateContext, eS as UpdateUserOptions, eT as UserApi, eU as UserEnvelopeCheckGate, eV as UserEnvelopeOversizedError, eW as UserEnvelopePresented, eX as UserInfo, eY as VaultBackup, bf as VaultEngine, aA as VaultFrame, eZ as VaultGroup, e_ as VaultGroupOptions, bg as VaultInstant, e$ as VaultPolicyOnDisk, f0 as VaultRegistryRow, f1 as VaultSchemaSnapshot, f2 as VaultSnapshot, f3 as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, f4 as WarningRules, f5 as WeakPassphraseError, f6 as WeakPassphraseReason, f7 as WithArchiveOptions, f8 as WrappedDeksBlob, f9 as WriteConflict, fa as WriteEvent, fb as WriteHook, fc as WriteQueue, i as applyI18nLocale, bi as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bm as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fI as parseSealedEnvelope, fJ as readMagicLinkGrantRecord, fK as recoverUser, fL as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fM as resolvePublicEnvelopeSchema, fN as revokeDelegation, fO as revokeMagicLinkGrant, aM as runTransaction, fP as savePaperRecoveryEntries, fQ as saveSealedPassphrase, fR as saveShamirRecoveryEntries, bq as sha256Hex, fS as unwrapDeksFromBlob, fT as unwrapDeksFromPaperEntry, fU as unwrapDeksFromShamirEntry, fV as unwrapMagicLinkGrant, v as validateI18nTextValue, fW as validatePassphrase, fX as validatePublicEnvelopeInput, fY as validateSchemaInput, fZ as validateSchemaOutput, y as validateSessionPolicy, f_ as withArchive, f$ as withDeferredNumbering, g0 as writeMagicLinkGrant } from './types-CDwSSXiI.cjs';
+import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-BpPV5uyy.cjs';
+export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as CapturedBlueprint, c0 as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c1 as CollectionChangeEvent, c2 as CollectionConflictResolver, c3 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c4 as CollectionStats, c5 as ComputedFieldError, c6 as ComputedFields, c7 as ComputedFn, c8 as Conflict, c9 as ConflictPolicy, ca as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, cb as CrossTierAccessEvent, cc as CrossVaultAggregation, cd as CrossVaultGroupedAggregation, ce as CrossVaultGroupedRow, cf as CrossVaultLiveAggregation, cg as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, ch as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ci as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, cj as DeepPartial, ck as DeepPartialOrNull, cl as DeferredNumberingConfig, cm as DelegationToken, cn as DeleteManyResult, co as DeploymentEvent, cp as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cq as DirtyEntry, cr as DryRunResult, cs as DumpSchemaOptions, ct as ELEVATION_AUDIT_COLLECTION, cu as ElevatedHandle, b5 as EncryptedEnvelope, cv as EnrollAuthenticatorOptions, cw as EnrollAuthenticatorWrappingDEKsOptions, cx as EnrollAuthenticatorWrappingKEKOptions, cy as EnrollRecoveryResult, cz as ExportCapability, cA as ExportChunk, cB as ExportFormat, cC as ExportStreamOptions, cD as FactorKind, cE as FactorProofBundle, cF as FactorRequirement, cG as FanoutQueryOptions, cH as FanoutResult, cI as FenceDoc, cJ as FenceState, cK as FieldChange, cL as FieldDescriptor, cM as FieldSource, cN as GhostRecord, cO as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cP as GuardViolation, cQ as HistoryConfig, cR as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cS as INDEXED_STORE_POLICY, cT as ImportCapability, cU as InferOutput, cV as InternalCollectionStats, cW as IssueDelegationOptions, cX as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cY as KeyringAuthenticator, cZ as KeyringAuthenticatorWrappingDEKs, c_ as KeyringAuthenticatorWrappingKEK, c$ as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, d0 as ListAccessibleVaultsOptions, d1 as ListPageResult, d2 as ListUsersOptions, d3 as LiveQueryOptions, d4 as LiveUserEnvelope, d5 as LocaleReadOptions, d6 as Lru, d7 as LruOptions, d8 as LruStats, d9 as MAGIC_LINK_CONTENT_INFO_PREFIX, da as MAGIC_LINK_GRANTS_COLLECTION, db as MAGIC_LINK_KEK_INFO_PREFIX, dc as MagicLinkGrantPayload, dd as MagicLinkGrantRecord, bC as MaterializedFromMeta, de as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, df as MemoryRecipientSealer, dg as MemorySealingKeyProvider, dh as NOYDB_BACKUP_VERSION, di as NOYDB_FORMAT_VERSION, dj as NOYDB_KEYRING_VERSION, dk as NOYDB_SYNC_VERSION, dl as NextOptions, dm as Noydb, aB as NoydbBundleStore, dn as NoydbEventMap, dp as NoydbOptions, dq as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dr as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, ds as PUBLIC_ENVELOPE_FIELDS, dt as PaperRecoveryDoc, du as PaperRecoveryEntry, dv as PassphrasePolicy, dw as PassphraseValidationResult, al as PeriodRecord, dx as Permission, dy as Permissions, dz as PersistedSchemaKind, dA as PlaintextTranslatorContext, dB as PlaintextTranslatorFn, P as PolicyEnforcer, dC as PresenceHandle, dD as PresencePeer, b6 as PruneOptions, dE as PublicEnvelopeField, dF as PublicEnvelopeSchema, dG as PublicEnvelopeText, dH as PullMode, dI as PullOptions, dJ as PullPolicy, dK as PullResult, dL as PushMode, dM as PushOptions, dN as PushPolicy, dO as PushResult, dP as PutManyItemOptions, dQ as PutManyOptions, dR as PutManyResult, dS as QueryAcrossOptions, dT as QueryAcrossResult, dU as QuickUnlockState, dV as QuickUnlockStore, dW as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dX as RecoverPassphraseInput, dY as RecoverPassphraseResult, dZ as RecoverUserOptions, d_ as RecoveryProof, R as ResolveI18nOptions, d$ as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, e0 as RevokeOptions, b0 as Role, e1 as RotatePassphraseInput, e2 as RotateRecoveryOptions, e3 as RotateRecoveryResult, e4 as SEALED_PASSPHRASE_RECORD_ID, e5 as SchemaDelta, e6 as SchemaIntrospection, e7 as SchemaManifestRow, S as ScriptWarning, e8 as SealedEnvelope, e9 as SealedPassphrase, bs as SealingKeyProvider, ea as SequenceHandle, eb as SequenceStore, ec as SessionPolicy, ed as SetPublicEnvelopeInput, ee as ShamirRecoveryDoc, ef as ShamirRecoveryEntry, by as ShamirRecoveryProvider, eg as ShardedCollection, eh as ShardedGroupedQuery, ei as ShardedQuery, ej as ShardingConfig, ek as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, el as SlotRewrapCeremony, em as SlotRewrapContext, aF as SnapshotMeta, en as StandardSchemaV1, eo as StandardSchemaV1Issue, ep as StandardSchemaV1SyncResult, eq as StateManagementVault, er as StoreAuth, es as StoreAuthKind, et as StoreCapabilities, eu as StoreTime, ev as SyncEngine, ew as SyncMetadata, ex as SyncPolicy, ey as SyncScheduler, ez as SyncSchedulerStatus, eA as SyncStatus, eB as SyncTarget, eC as SyncTargetRole, eD as SyncTransaction, eE as SyncTransactionResult, eF as TabChannel, eG as TabCoordinationOptions, eH as TabLockManager, eI as TabPresence, eJ as TabRole, eK as TierMode, eL as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eM as TxOp, aL as TxVault, eN as USER_ENVELOPE_COLLECTION, eO as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eP as Unsubscribe, eQ as UpdateAuthenticatorOptions, eR as UpdateContext, eS as UpdateUserOptions, eT as UserApi, eU as UserEnvelopeCheckGate, eV as UserEnvelopeOversizedError, eW as UserEnvelopePresented, eX as UserInfo, eY as VaultBackup, bf as VaultEngine, aA as VaultFrame, eZ as VaultGroup, e_ as VaultGroupOptions, bg as VaultInstant, e$ as VaultPolicyOnDisk, f0 as VaultRegistryRow, f1 as VaultSchemaSnapshot, f2 as VaultSnapshot, f3 as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, f4 as WarningRules, f5 as WeakPassphraseError, f6 as WeakPassphraseReason, f7 as WithArchiveOptions, f8 as WrappedDeksBlob, f9 as WriteConflict, fa as WriteEvent, fb as WriteHook, fc as WriteQueue, i as applyI18nLocale, bi as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bm as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fI as parseSealedEnvelope, fJ as readMagicLinkGrantRecord, fK as recoverUser, fL as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fM as resolvePublicEnvelopeSchema, fN as revokeDelegation, fO as revokeMagicLinkGrant, aM as runTransaction, fP as savePaperRecoveryEntries, fQ as saveSealedPassphrase, fR as saveShamirRecoveryEntries, bq as sha256Hex, fS as unwrapDeksFromBlob, fT as unwrapDeksFromPaperEntry, fU as unwrapDeksFromShamirEntry, fV as unwrapMagicLinkGrant, v as validateI18nTextValue, fW as validatePassphrase, fX as validatePublicEnvelopeInput, fY as validateSchemaInput, fZ as validateSchemaOutput, y as validateSessionPolicy, f_ as withArchive, f$ as withDeferredNumbering, g0 as writeMagicLinkGrant } from './types-BpPV5uyy.cjs';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
-import { a7 as NoydbError } from './strategy-CrS7PnbE.cjs';
-export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a8 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a9 as ConflictError, aa as CrossJoinSourceUnknownError, ab as CrossJoinTooLargeError, ac as DanglingReferenceError, ad as DecryptionError, ae as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, af as DirectoryDisabledError, ag as ElevationExpiredError, ah as ExportCapabilityError, F as FieldFrozenError, ai as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, aj as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, ak as ImportCapabilityError, al as IndexRequiredError, am as IndexWriteFailureError, an as InvalidKeyError, I as InvariantError, ao as JoinTooLargeError, ap as KeyringCorruptError, aq as KeyringExpiredError, ar as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, as as MigrationRequiredError, M as MissingTranslationError, at as MoneyCurrencyError, au as MoneyDescriptor, av as MoneyOptions, aw as MoneyOptionsFixed, ax as MoneyOptionsMulti, ay as MoneyPrecisionError, az as MoneyUnsupportedError, aA as NetworkError, aB as NoAccessError, aC as NonAdditiveSchemaChangeError, aD as NotFoundError, aE as NumberingUncertaintyError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aF as PathEscapeError, aG as PeriodClosedError, aH as PermissionDeniedError, aI as PrivilegeEscalationError, aJ as QuiesceTimeoutError, aK as ReadOnlyAtInstantError, aL as ReadOnlyError, aM as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aN as ReservedVaultNameError, aO as RoundingMode, aP as SchemaFenceError, aQ as SchemaLockedError, aR as SchemaUpdateError, aS as SchemaValidationError, S as ScriptViolationError, aT as SequenceContentionError, aU as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aV as ShardProvisioningError, E as SnapshotNotFoundError, aW as StoreCapabilityError, aX as TamperedError, aY as TierDemoteDeniedError, aZ as TierNotGrantedError, T as TranslatorNotConfiguredError, a_ as UniqueConstraintError, a$ as UnknownShardError, b0 as UnsupportedIndexOptionError, b1 as ValidationError, b2 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b3 as isMoneyDescriptor, v as max, w as min, b4 as money, x as reduceRecords, z as sum } from './strategy-CrS7PnbE.cjs';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-7bCSgIgb.cjs';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-CUVOMtgg.cjs';
+import { a7 as NoydbError, a8 as RoundingMode } from './strategy-CbneC7bS.cjs';
+export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a9 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, aa as ConflictError, ab as CrossJoinSourceUnknownError, ac as CrossJoinTooLargeError, ad as DanglingReferenceError, ae as DecryptionError, af as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, ag as DirectoryDisabledError, ah as ElevationExpiredError, ai as ExportCapabilityError, F as FieldFrozenError, aj as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, ak as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, al as ImportCapabilityError, am as IndexRequiredError, an as IndexWriteFailureError, ao as InvalidKeyError, I as InvariantError, ap as JoinTooLargeError, aq as KeyringCorruptError, ar as KeyringExpiredError, as as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, at as MigrationRequiredError, M as MissingTranslationError, au as MoneyCurrencyError, av as MoneyDescriptor, aw as MoneyOptions, ax as MoneyOptionsFixed, ay as MoneyOptionsMulti, az as MoneyPrecisionError, aA as MoneyUnsupportedError, aB as NetworkError, aC as NoAccessError, aD as NonAdditiveSchemaChangeError, aE as NotFoundError, aF as NumberingUncertaintyError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aG as PathEscapeError, aH as PeriodClosedError, aI as PermissionDeniedError, aJ as PrivilegeEscalationError, aK as QuiesceTimeoutError, aL as ReadOnlyAtInstantError, aM as ReadOnlyError, aN as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aO as ReservedVaultNameError, aP as SchemaFenceError, aQ as SchemaLockedError, aR as SchemaUpdateError, aS as SchemaValidationError, S as ScriptViolationError, aT as SequenceContentionError, aU as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aV as ShardProvisioningError, E as SnapshotNotFoundError, aW as StoreCapabilityError, aX as TamperedError, aY as TierDemoteDeniedError, aZ as TierNotGrantedError, T as TranslatorNotConfiguredError, a_ as UniqueConstraintError, a$ as UnknownShardError, b0 as UnsupportedIndexOptionError, b1 as ValidationError, b2 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b3 as isMoneyDescriptor, v as max, w as min, b4 as money, x as reduceRecords, z as sum } from './strategy-CbneC7bS.cjs';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-D95VK1Qy.cjs';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-CiPrpGqm.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
-export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-BZIcYhYX.cjs';
-export { w as withDerivation } from './with-derivation-D8wFlb6V.cjs';
-export { w as withMaterializedView } from './with-materialized-view-5QMF1rS_.cjs';
-export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Bt5ft-9c.cjs';
-export { w as withOverlayedView } from './with-overlayed-view-DDNflPvC.cjs';
+export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-yBEOYmif.cjs';
+export { w as withDerivation } from './with-derivation-DBqJB3dQ.cjs';
+export { w as withMaterializedView } from './with-materialized-view-NzuxYPDF.cjs';
+export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-BmhBSPCH.cjs';
+export { w as withOverlayedView } from './with-overlayed-view-CC0_ocy-.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-a7SOtaV0.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-nVkuRLLe.cjs';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-B0cLQcq_.cjs';
-import './lazy-builder-Ci5_YG73.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-Cv6byZs7.cjs';
+import './lazy-builder-eYZzLEL1.cjs';
 import '@noy-db/attestation';
 
 /**
@@ -662,6 +662,136 @@ declare function scaleForCurrency(code: string): number | null;
 
 type FxRates = Record<string, number | string>;
 
+/**
+ * Exact money arithmetic helpers (#337) — `mulRate` and `allocate`.
+ *
+ * Both operate on the canonical decoded string form that `get()`
+ * returns (`'10000.00'`), entirely in scaled-`BigInt` space — no
+ * floating-point step anywhere, exact past 2^53. They are pure
+ * functions with no vault or descriptor dependency: the working scale
+ * is inferred from the amount's fractional digits (a canonical money
+ * string always carries exactly the field's scale) or pinned with
+ * `opts.scale`.
+ *
+ * Why these two: app-side invariants of the form
+ * `Σ parts === whole` (receipt totals, net-zero WHT pairs, proration)
+ * carry ±0.01 tolerances ONLY because the math is major-unit floats +
+ * round2. `mulRate` (VAT-style rate application with explicit
+ * rounding) and `allocate` (largest-remainder split — parts sum to the
+ * input EXACTLY, by construction) make those tolerances zero.
+ */
+
+interface MulRateOptions {
+    /**
+     * Output scale (fraction digits). Defaults to the amount's own
+     * fractional digits — for a canonical money string that IS the
+     * field's scale.
+     */
+    readonly scale?: number;
+    /** Rounding for the final re-scale. Default `'half-up'`. */
+    readonly rounding?: RoundingMode;
+}
+interface AllocateOptions {
+    /** Working scale. Defaults to the amount's own fractional digits. */
+    readonly scale?: number;
+}
+/**
+ * Multiply a money amount by a decimal rate, exactly.
+ *
+ * The rate is parsed at its OWN full precision (`0.07` → `7` at scale
+ * 2), the product computed in `BigInt` at `amountScale + rateScale`,
+ * then re-scaled back to the output scale with the requested rounding —
+ * one rounding step, at the very end.
+ *
+ * ```ts
+ * mulRate('10000.00', 0.07)                       // '700.00'  (VAT)
+ * mulRate('33.33', '0.07')                        // '2.33'    (half-up)
+ * mulRate('33.33', 0.07, { rounding: 'floor' })   // '2.33'
+ * mulRate(100, 0.07, { scale: 2 })                // '7.00'
+ * ```
+ */
+declare function mulRate(amount: number | string, rate: number | string, opts?: MulRateOptions): string;
+/**
+ * Split a money amount across weighted buckets with ZERO drift: the
+ * returned parts sum to the input exactly, by construction
+ * (largest-remainder method).
+ *
+ * Each bucket gets `floor(amount × weightᵢ / Σweights)`; the leftover
+ * minor units (always fewer than the bucket count) go one each to the
+ * buckets with the largest truncated remainders — ties broken by
+ * position, earlier bucket first. Weights are parsed as exact decimals
+ * (no float division anywhere); they must be non-negative with a
+ * positive sum.
+ *
+ * ```ts
+ * allocate('100.00', [1, 1, 1])   // ['33.34', '33.33', '33.33']
+ * allocate('0.05', [3, 7])        // ['0.02', '0.03']
+ * allocate('-100.00', [1, 1, 1])  // ['-33.34', '-33.33', '-33.33']
+ * ```
+ */
+declare function allocate(amount: number | string, weights: ReadonlyArray<number | string>, opts?: AllocateOptions): string[];
+
+/**
+ * Branded money output type (#338).
+ *
+ * The decoded read shape of a money field is an exact decimal STRING
+ * (`'10000.00'`) — but a hand-written schema types it `string | number`,
+ * which is honest about the input side and unhelpful on the output
+ * side: every read site hand-coerces, and a missed coercion passes
+ * typecheck silently (then surfaces as a runtime template warning, or
+ * worse, as `'10000.00' * 100` arithmetic).
+ *
+ * {@link MoneyString} is the output-side brand: a `string` that has
+ * been through noy-db's decode (or {@link asMoney}'s guard). Branding
+ * is type-level only — zero runtime cost on the read path.
+ *
+ * ## Wiring the brand through a validator (the input/output asymmetry)
+ *
+ * Keep the permissive `string | number` on the INPUT side so write
+ * sites are untouched, and brand the OUTPUT side. With Zod:
+ *
+ * ```ts
+ * import type { MoneyString } from '@noy-db/hub'
+ *
+ * const moneyValue = z.union([z.number(), z.string()]) as unknown as
+ *   z.ZodType<MoneyString, z.ZodTypeDef, string | number>
+ *
+ * const Invoice = z.object({ id: z.string(), total: moneyValue })
+ * type InvoiceOut = z.output<typeof Invoice> // total: MoneyString
+ * type InvoiceIn  = z.input<typeof Invoice>  // total: string | number
+ * ```
+ *
+ * The cast is sound for fields declared in `moneyFields`: reads pass
+ * through `decodeMoneyFields`, which always produces the canonical
+ * decimal string.
+ */
+declare const MONEY_BRAND: unique symbol;
+/**
+ * An exact decimal string produced by noy-db's money decode
+ * (`'10000.00'`). The brand exists only at the type level — at runtime
+ * a `MoneyString` is a plain string.
+ */
+type MoneyString = string & {
+    readonly [MONEY_BRAND]: true;
+};
+/**
+ * Runtime-guarded cast to {@link MoneyString}. Accepts a decimal string
+ * or a number, returns the canonical decimal string branded — throws
+ * `MoneyUnsupportedError` on anything non-finite / non-decimal. Use at
+ * trust boundaries (deserialized JSON, route params); values read
+ * through `get()`/`list()` are already canonical.
+ */
+declare function asMoney(value: string | number): MoneyString;
+/** Type guard: is `value` a decimal string acceptable as money? */
+declare function isMoneyString(value: unknown): value is MoneyString;
+/**
+ * The ONE sanctioned escape hatch to a JS `number` — explicit because
+ * the conversion is lossy past 2^53. For display math and chart axes;
+ * never feed the result back into stored amounts (use `mulRate` /
+ * `allocate` for exact arithmetic).
+ */
+declare function moneyNumber(value: MoneyString | string | number): number;
+
 /**
  * Hierarchical access — tier-aware keyring helpers.
  *
@@ -816,4 +946,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
 
-export { ActiveTier, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };
+export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };

package/dist/index.d.ts

@@ -1,22 +1,22 @@
-import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-pax34sec.js';
-export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as CapturedBlueprint, c0 as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c1 as CollectionChangeEvent, c2 as CollectionConflictResolver, c3 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c4 as CollectionStats, c5 as ComputedFieldError, c6 as ComputedFields, c7 as ComputedFn, c8 as Conflict, c9 as ConflictPolicy, ca as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, cb as CrossTierAccessEvent, cc as CrossVaultAggregation, cd as CrossVaultGroupedAggregation, ce as CrossVaultGroupedRow, cf as CrossVaultLiveAggregation, cg as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, ch as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ci as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, cj as DeepPartial, ck as DeepPartialOrNull, cl as DeferredNumberingConfig, cm as DelegationToken, cn as DeleteManyResult, co as DeploymentEvent, cp as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cq as DirtyEntry, cr as DryRunResult, cs as DumpSchemaOptions, ct as ELEVATION_AUDIT_COLLECTION, cu as ElevatedHandle, b5 as EncryptedEnvelope, cv as EnrollAuthenticatorOptions, cw as EnrollAuthenticatorWrappingDEKsOptions, cx as EnrollAuthenticatorWrappingKEKOptions, cy as EnrollRecoveryResult, cz as ExportCapability, cA as ExportChunk, cB as ExportFormat, cC as ExportStreamOptions, cD as FactorKind, cE as FactorProofBundle, cF as FactorRequirement, cG as FanoutQueryOptions, cH as FanoutResult, cI as FenceDoc, cJ as FenceState, cK as FieldChange, cL as FieldDescriptor, cM as FieldSource, cN as GhostRecord, cO as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cP as GuardViolation, cQ as HistoryConfig, cR as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cS as INDEXED_STORE_POLICY, cT as ImportCapability, cU as InferOutput, cV as InternalCollectionStats, cW as IssueDelegationOptions, cX as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cY as KeyringAuthenticator, cZ as KeyringAuthenticatorWrappingDEKs, c_ as KeyringAuthenticatorWrappingKEK, c$ as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, d0 as ListAccessibleVaultsOptions, d1 as ListPageResult, d2 as ListUsersOptions, d3 as LiveQueryOptions, d4 as LiveUserEnvelope, d5 as LocaleReadOptions, d6 as Lru, d7 as LruOptions, d8 as LruStats, d9 as MAGIC_LINK_CONTENT_INFO_PREFIX, da as MAGIC_LINK_GRANTS_COLLECTION, db as MAGIC_LINK_KEK_INFO_PREFIX, dc as MagicLinkGrantPayload, dd as MagicLinkGrantRecord, bC as MaterializedFromMeta, de as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, df as MemoryRecipientSealer, dg as MemorySealingKeyProvider, dh as NOYDB_BACKUP_VERSION, di as NOYDB_FORMAT_VERSION, dj as NOYDB_KEYRING_VERSION, dk as NOYDB_SYNC_VERSION, dl as NextOptions, dm as Noydb, aB as NoydbBundleStore, dn as NoydbEventMap, dp as NoydbOptions, dq as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dr as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, ds as PUBLIC_ENVELOPE_FIELDS, dt as PaperRecoveryDoc, du as PaperRecoveryEntry, dv as PassphrasePolicy, dw as PassphraseValidationResult, al as PeriodRecord, dx as Permission, dy as Permissions, dz as PersistedSchemaKind, dA as PlaintextTranslatorContext, dB as PlaintextTranslatorFn, P as PolicyEnforcer, dC as PresenceHandle, dD as PresencePeer, b6 as PruneOptions, dE as PublicEnvelopeField, dF as PublicEnvelopeSchema, dG as PublicEnvelopeText, dH as PullMode, dI as PullOptions, dJ as PullPolicy, dK as PullResult, dL as PushMode, dM as PushOptions, dN as PushPolicy, dO as PushResult, dP as PutManyItemOptions, dQ as PutManyOptions, dR as PutManyResult, dS as QueryAcrossOptions, dT as QueryAcrossResult, dU as QuickUnlockState, dV as QuickUnlockStore, dW as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dX as RecoverPassphraseInput, dY as RecoverPassphraseResult, dZ as RecoverUserOptions, d_ as RecoveryProof, R as ResolveI18nOptions, d$ as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, e0 as RevokeOptions, b0 as Role, e1 as RotatePassphraseInput, e2 as RotateRecoveryOptions, e3 as RotateRecoveryResult, e4 as SEALED_PASSPHRASE_RECORD_ID, e5 as SchemaDelta, e6 as SchemaIntrospection, e7 as SchemaManifestRow, S as ScriptWarning, e8 as SealedEnvelope, e9 as SealedPassphrase, bs as SealingKeyProvider, ea as SequenceHandle, eb as SequenceStore, ec as SessionPolicy, ed as SetPublicEnvelopeInput, ee as ShamirRecoveryDoc, ef as ShamirRecoveryEntry, by as ShamirRecoveryProvider, eg as ShardedCollection, eh as ShardedGroupedQuery, ei as ShardedQuery, ej as ShardingConfig, ek as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, el as SlotRewrapCeremony, em as SlotRewrapContext, aF as SnapshotMeta, en as StandardSchemaV1, eo as StandardSchemaV1Issue, ep as StandardSchemaV1SyncResult, eq as StateManagementVault, er as StoreAuth, es as StoreAuthKind, et as StoreCapabilities, eu as StoreTime, ev as SyncEngine, ew as SyncMetadata, ex as SyncPolicy, ey as SyncScheduler, ez as SyncSchedulerStatus, eA as SyncStatus, eB as SyncTarget, eC as SyncTargetRole, eD as SyncTransaction, eE as SyncTransactionResult, eF as TabChannel, eG as TabCoordinationOptions, eH as TabLockManager, eI as TabPresence, eJ as TabRole, eK as TierMode, eL as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eM as TxOp, aL as TxVault, eN as USER_ENVELOPE_COLLECTION, eO as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eP as Unsubscribe, eQ as UpdateAuthenticatorOptions, eR as UpdateContext, eS as UpdateUserOptions, eT as UserApi, eU as UserEnvelopeCheckGate, eV as UserEnvelopeOversizedError, eW as UserEnvelopePresented, eX as UserInfo, eY as VaultBackup, bf as VaultEngine, aA as VaultFrame, eZ as VaultGroup, e_ as VaultGroupOptions, bg as VaultInstant, e$ as VaultPolicyOnDisk, f0 as VaultRegistryRow, f1 as VaultSchemaSnapshot, f2 as VaultSnapshot, f3 as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, f4 as WarningRules, f5 as WeakPassphraseError, f6 as WeakPassphraseReason, f7 as WithArchiveOptions, f8 as WrappedDeksBlob, f9 as WriteConflict, fa as WriteEvent, fb as WriteHook, fc as WriteQueue, i as applyI18nLocale, bi as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bm as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fI as parseSealedEnvelope, fJ as readMagicLinkGrantRecord, fK as recoverUser, fL as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fM as resolvePublicEnvelopeSchema, fN as revokeDelegation, fO as revokeMagicLinkGrant, aM as runTransaction, fP as savePaperRecoveryEntries, fQ as saveSealedPassphrase, fR as saveShamirRecoveryEntries, bq as sha256Hex, fS as unwrapDeksFromBlob, fT as unwrapDeksFromPaperEntry, fU as unwrapDeksFromShamirEntry, fV as unwrapMagicLinkGrant, v as validateI18nTextValue, fW as validatePassphrase, fX as validatePublicEnvelopeInput, fY as validateSchemaInput, fZ as validateSchemaOutput, y as validateSessionPolicy, f_ as withArchive, f$ as withDeferredNumbering, g0 as writeMagicLinkGrant } from './types-pax34sec.js';
+import { b3 as NoydbStore, bF as UserEnvelope, br as PublicEnvelope, bG as GateName, bH as GatePolicy, bI as VaultPolicy, bJ as ActiveTier, bK as FactorProof, bL as SchemaUpdateStrategy, bM as TransformFn, bN as PersistedSchemaEnvelope, bO as UpdateDecision, bP as DirectoryConfig, bQ as UserVisibility, b1 as UnlockedKeyring, bw as Vault, ba as DiffEntry } from './types-4t1-tWS4.js';
+export { bR as AccessibleVault, bS as AffectedDocument, b7 as AppendInput, bT as ArchivePolicy, bU as ArchiveResult, bV as ArchiveRunOptions, bW as ArchiveStrategy, aP as ArrayOutputSpec, z as BLOB_CHUNKS_COLLECTION, A as BLOB_COLLECTION, E as BLOB_INDEX_COLLECTION, F as BLOB_SLOTS_PREFIX, G as BLOB_VERSIONS_PREFIX, bX as BUNDLE_STORE_POLICY, M as BlobObject, N as BlobPutOptions, Q as BlobResponseOptions, T as BlobSet, bY as BuiltInGateName, bt as BundleRecipient, a9 as CONSENT_AUDIT_COLLECTION, bZ as CacheOptions, b_ as CacheStats, b$ as CapturedBlueprint, c0 as ChangeEvent, b8 as ChangeType, ai as ClosePeriodOptions, aY as Collection, c1 as CollectionChangeEvent, c2 as CollectionConflictResolver, c3 as CollectionDescriptor, az as CollectionFrame, b9 as CollectionInstant, c4 as CollectionStats, c5 as ComputedFieldError, c6 as ComputedFields, c7 as ComputedFn, c8 as Conflict, c9 as ConflictPolicy, ca as ConflictStrategy, aa as ConsentAuditEntry, ab as ConsentAuditFilter, ac as ConsentContext, ad as ConsentOp, cb as CrossTierAccessEvent, cc as CrossVaultAggregation, cd as CrossVaultGroupedAggregation, ce as CrossVaultGroupedRow, cf as CrossVaultLiveAggregation, cg as CrossVaultLiveQuery, Y as DEFAULT_CHUNK_SIZE, ch as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, ci as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, cj as DeepPartial, ck as DeepPartialOrNull, cl as DeferredNumberingConfig, cm as DelegationToken, cn as DeleteManyResult, co as DeploymentEvent, cp as DerivationDescriptor, aN as DerivationStrategy, aR as DerivationStrategyHandle, aS as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cq as DirtyEntry, cr as DryRunResult, cs as DumpSchemaOptions, ct as ELEVATION_AUDIT_COLLECTION, cu as ElevatedHandle, b5 as EncryptedEnvelope, cv as EnrollAuthenticatorOptions, cw as EnrollAuthenticatorWrappingDEKsOptions, cx as EnrollAuthenticatorWrappingKEKOptions, cy as EnrollRecoveryResult, cz as ExportCapability, cA as ExportChunk, cB as ExportFormat, cC as ExportStreamOptions, cD as FactorKind, cE as FactorProofBundle, cF as FactorRequirement, cG as FanoutQueryOptions, cH as FanoutResult, cI as FenceDoc, cJ as FenceState, cK as FieldChange, cL as FieldDescriptor, cM as FieldSource, cN as GhostRecord, cO as GrantOptions, at as GuardChange, au as GuardContext, as as GuardStrategy, aw as GuardStrategyHandle, cP as GuardViolation, cQ as HistoryConfig, cR as HistoryEntry, b4 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cS as INDEXED_STORE_POLICY, cT as ImportCapability, cU as InferOutput, cV as InternalCollectionStats, cW as IssueDelegationOptions, cX as IssueMagicLinkGrantOptions, bb as JsonPatch, bc as JsonPatchOp, cY as KeyringAuthenticator, cZ as KeyringAuthenticatorWrappingDEKs, c_ as KeyringAuthenticatorWrappingKEK, c$ as KeyringFile, L as Layer, bd as LedgerEntry, be as LedgerStore, d0 as ListAccessibleVaultsOptions, d1 as ListPageResult, d2 as ListUsersOptions, d3 as LiveQueryOptions, d4 as LiveUserEnvelope, d5 as LocaleReadOptions, d6 as Lru, d7 as LruOptions, d8 as LruStats, d9 as MAGIC_LINK_CONTENT_INFO_PREFIX, da as MAGIC_LINK_GRANTS_COLLECTION, db as MAGIC_LINK_KEK_INFO_PREFIX, dc as MagicLinkGrantPayload, dd as MagicLinkGrantRecord, bC as MaterializedFromMeta, de as MaterializedViewDescriptor, bD as MaterializedViewOutput, aV as MaterializedViewStrategy, aW as MaterializedViewStrategyHandle, df as MemoryRecipientSealer, dg as MemorySealingKeyProvider, dh as NOYDB_BACKUP_VERSION, di as NOYDB_FORMAT_VERSION, dj as NOYDB_KEYRING_VERSION, dk as NOYDB_SYNC_VERSION, dl as NextOptions, dm as Noydb, aB as NoydbBundleStore, dn as NoydbEventMap, dp as NoydbOptions, dq as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, aj as OpenPeriodOptions, aT as OutputSpec, dr as OverlayViewDescriptor, aX as OverlayedViewStrategy, a_ as OverlayedViewStrategyHandle, ak as PERIODS_COLLECTION, ds as PUBLIC_ENVELOPE_FIELDS, dt as PaperRecoveryDoc, du as PaperRecoveryEntry, dv as PassphrasePolicy, dw as PassphraseValidationResult, al as PeriodRecord, dx as Permission, dy as Permissions, dz as PersistedSchemaKind, dA as PlaintextTranslatorContext, dB as PlaintextTranslatorFn, P as PolicyEnforcer, dC as PresenceHandle, dD as PresencePeer, b6 as PruneOptions, dE as PublicEnvelopeField, dF as PublicEnvelopeSchema, dG as PublicEnvelopeText, dH as PullMode, dI as PullOptions, dJ as PullPolicy, dK as PullResult, dL as PushMode, dM as PushOptions, dN as PushPolicy, dO as PushResult, dP as PutManyItemOptions, dQ as PutManyOptions, dR as PutManyResult, dS as QueryAcrossOptions, dT as QueryAcrossResult, dU as QuickUnlockState, dV as QuickUnlockStore, dW as ReAuthOperation, bv as RecipientHint, bu as RecipientSealer, aU as RecordOutputSpec, dX as RecoverPassphraseInput, dY as RecoverPassphraseResult, dZ as RecoverUserOptions, d_ as RecoveryProof, R as ResolveI18nOptions, d$ as ResolvedPublicEnvelopeSchema, aC as RetentionPolicy, e0 as RevokeOptions, b0 as Role, e1 as RotatePassphraseInput, e2 as RotateRecoveryOptions, e3 as RotateRecoveryResult, e4 as SEALED_PASSPHRASE_RECORD_ID, e5 as SchemaDelta, e6 as SchemaIntrospection, e7 as SchemaManifestRow, S as ScriptWarning, e8 as SealedEnvelope, e9 as SealedPassphrase, bs as SealingKeyProvider, ea as SequenceHandle, eb as SequenceStore, ec as SessionPolicy, ed as SetPublicEnvelopeInput, ee as ShamirRecoveryDoc, ef as ShamirRecoveryEntry, by as ShamirRecoveryProvider, eg as ShardedCollection, eh as ShardedGroupedQuery, ei as ShardedQuery, ej as ShardingConfig, ek as SkippedVault, a3 as SlotInfo, a4 as SlotRecord, el as SlotRewrapCeremony, em as SlotRewrapContext, aF as SnapshotMeta, en as StandardSchemaV1, eo as StandardSchemaV1Issue, ep as StandardSchemaV1SyncResult, eq as StateManagementVault, er as StoreAuth, es as StoreAuthKind, et as StoreCapabilities, eu as StoreTime, ev as SyncEngine, ew as SyncMetadata, ex as SyncPolicy, ey as SyncScheduler, ez as SyncSchedulerStatus, eA as SyncStatus, eB as SyncTarget, eC as SyncTargetRole, eD as SyncTransaction, eE as SyncTransactionResult, eF as TabChannel, eG as TabCoordinationOptions, eH as TabLockManager, eI as TabPresence, eJ as TabRole, eK as TierMode, eL as TranslatorAuditEntry, aJ as TxCollection, aK as TxContext, eM as TxOp, aL as TxVault, eN as USER_ENVELOPE_COLLECTION, eO as USER_ENVELOPE_MAX_BYTES, bE as UnionSource, eP as Unsubscribe, eQ as UpdateAuthenticatorOptions, eR as UpdateContext, eS as UpdateUserOptions, eT as UserApi, eU as UserEnvelopeCheckGate, eV as UserEnvelopeOversizedError, eW as UserEnvelopePresented, eX as UserInfo, eY as VaultBackup, bf as VaultEngine, aA as VaultFrame, eZ as VaultGroup, e_ as VaultGroupOptions, bg as VaultInstant, e$ as VaultPolicyOnDisk, f0 as VaultRegistryRow, f1 as VaultSchemaSnapshot, f2 as VaultSnapshot, f3 as VaultTemplate, bh as VerifyResult, a5 as VersionRecord, f4 as WarningRules, f5 as WeakPassphraseError, f6 as WeakPassphraseReason, f7 as WithArchiveOptions, f8 as WrappedDeksBlob, f9 as WriteConflict, fa as WriteEvent, fb as WriteHook, fc as WriteQueue, i as applyI18nLocale, bi as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bj as canonicalJson, bk as computePatch, x as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, j as dictCollectionName, k as dictKey, bl as diff, l as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bm as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, bn as hashEntry, n as i18nText, o as inferScripts, p as isDictCollectionName, q as isDictKeyDescriptor, r as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, bo as paddedIndex, bp as parseIndex, fI as parseSealedEnvelope, fJ as readMagicLinkGrantRecord, fK as recoverUser, fL as removeAuthenticator, s as resolveI18nText, t as resolvePolicy, fM as resolvePublicEnvelopeSchema, fN as revokeDelegation, fO as revokeMagicLinkGrant, aM as runTransaction, fP as savePaperRecoveryEntries, fQ as saveSealedPassphrase, fR as saveShamirRecoveryEntries, bq as sha256Hex, fS as unwrapDeksFromBlob, fT as unwrapDeksFromPaperEntry, fU as unwrapDeksFromShamirEntry, fV as unwrapMagicLinkGrant, v as validateI18nTextValue, fW as validatePassphrase, fX as validatePublicEnvelopeInput, fY as validateSchemaInput, fZ as validateSchemaOutput, y as validateSessionPolicy, f_ as withArchive, f$ as withDeferredNumbering, g0 as writeMagicLinkGrant } from './types-4t1-tWS4.js';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
-import { a7 as NoydbError } from './strategy-CrS7PnbE.js';
-export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a8 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, a9 as ConflictError, aa as CrossJoinSourceUnknownError, ab as CrossJoinTooLargeError, ac as DanglingReferenceError, ad as DecryptionError, ae as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, af as DirectoryDisabledError, ag as ElevationExpiredError, ah as ExportCapabilityError, F as FieldFrozenError, ai as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, aj as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, ak as ImportCapabilityError, al as IndexRequiredError, am as IndexWriteFailureError, an as InvalidKeyError, I as InvariantError, ao as JoinTooLargeError, ap as KeyringCorruptError, aq as KeyringExpiredError, ar as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, as as MigrationRequiredError, M as MissingTranslationError, at as MoneyCurrencyError, au as MoneyDescriptor, av as MoneyOptions, aw as MoneyOptionsFixed, ax as MoneyOptionsMulti, ay as MoneyPrecisionError, az as MoneyUnsupportedError, aA as NetworkError, aB as NoAccessError, aC as NonAdditiveSchemaChangeError, aD as NotFoundError, aE as NumberingUncertaintyError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aF as PathEscapeError, aG as PeriodClosedError, aH as PermissionDeniedError, aI as PrivilegeEscalationError, aJ as QuiesceTimeoutError, aK as ReadOnlyAtInstantError, aL as ReadOnlyError, aM as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aN as ReservedVaultNameError, aO as RoundingMode, aP as SchemaFenceError, aQ as SchemaLockedError, aR as SchemaUpdateError, aS as SchemaValidationError, S as ScriptViolationError, aT as SequenceContentionError, aU as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aV as ShardProvisioningError, E as SnapshotNotFoundError, aW as StoreCapabilityError, aX as TamperedError, aY as TierDemoteDeniedError, aZ as TierNotGrantedError, T as TranslatorNotConfiguredError, a_ as UniqueConstraintError, a$ as UnknownShardError, b0 as UnsupportedIndexOptionError, b1 as ValidationError, b2 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b3 as isMoneyDescriptor, v as max, w as min, b4 as money, x as reduceRecords, z as sum } from './strategy-CrS7PnbE.js';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-C_t4hL3d.js';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-Cqzp4tt9.js';
+import { a7 as NoydbError, a8 as RoundingMode } from './strategy-CbneC7bS.js';
+export { e as AggregateResult, f as AggregateSpec, g as Aggregation, h as AggregationUpstream, a9 as AlreadyElevatedError, B as AmendmentForbiddenError, W as AttestationError, Y as BackupCorruptedError, Z as BackupLedgerError, _ as BundleIntegrityError, $ as BundleSealMismatchError, a0 as BundleVersionConflictError, aa as ConflictError, ab as CrossJoinSourceUnknownError, ac as CrossJoinTooLargeError, ad as DanglingReferenceError, ae as DecryptionError, af as DelegationTargetMissingError, H as DerivationCapExceededError, J as DerivationCycleError, K as DerivationDepthError, N as DerivationOutputShapeError, O as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, ag as DirectoryDisabledError, ah as ElevationExpiredError, ai as ExportCapabilityError, F as FieldFrozenError, aj as FilenameSanitizationError, G as GROUPBY_MAX_CARDINALITY, i as GROUPBY_WARN_CARDINALITY, ak as GroupCardinalityError, j as GroupedAggregation, k as GroupedQuery, l as GroupedQueryN, m as GroupedRow, n as GroupedRowN, al as ImportCapabilityError, am as IndexRequiredError, an as IndexWriteFailureError, ao as InvalidKeyError, I as InvariantError, ap as JoinTooLargeError, aq as KeyringCorruptError, ar as KeyringExpiredError, as as LedgerContentionError, o as LiveAggregation, L as LocaleNotSpecifiedError, a3 as MaterializedViewConfigError, a4 as MaterializedViewCycleError, a5 as MaterializedViewSourceUnknownError, a6 as MaterializedViewTooLargeError, at as MigrationRequiredError, M as MissingTranslationError, au as MoneyCurrencyError, av as MoneyDescriptor, aw as MoneyOptions, ax as MoneyOptionsFixed, ay as MoneyOptionsMulti, az as MoneyPrecisionError, aA as MoneyUnsupportedError, aB as NetworkError, aC as NoAccessError, aD as NonAdditiveSchemaChangeError, aE as NotFoundError, aF as NumberingUncertaintyError, P as OverlayBaseIsVirtualError, Q as OverlayCollectionUnavailableError, U as OverlayIdMismatchError, V as OverlayNameCollisionError, aG as PathEscapeError, aH as PeriodClosedError, aI as PermissionDeniedError, aJ as PrivilegeEscalationError, aK as QuiesceTimeoutError, aL as ReadOnlyAtInstantError, aM as ReadOnlyError, aN as ReadOnlyFrameError, C as RecordLockedError, p as Reducer, q as ReducerOptions, R as ReservedCollectionNameError, aO as ReservedVaultNameError, aP as SchemaFenceError, aQ as SchemaLockedError, aR as SchemaUpdateError, aS as SchemaValidationError, S as ScriptViolationError, aT as SequenceContentionError, aU as SequenceOfflineError, b as SessionExpiredError, c as SessionNotFoundError, d as SessionPolicyError, aV as ShardProvisioningError, E as SnapshotNotFoundError, aW as StoreCapabilityError, aX as TamperedError, aY as TierDemoteDeniedError, aZ as TierNotGrantedError, T as TranslatorNotConfiguredError, a_ as UniqueConstraintError, a$ as UnknownShardError, b0 as UnsupportedIndexOptionError, b1 as ValidationError, b2 as VaultTemplateNotFoundError, r as avg, t as count, u as groupAndReduce, b3 as isMoneyDescriptor, v as max, w as min, b4 as money, x as reduceRecords, z as sum } from './strategy-CbneC7bS.js';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-XNB2r6bX.js';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-DAfenvFd.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
-export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-B0h-ipLz.js';
-export { w as withDerivation } from './with-derivation-BjdOxUBn.js';
-export { w as withMaterializedView } from './with-materialized-view-DJb-HO65.js';
-export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Bt5ft-9c.js';
-export { w as withOverlayedView } from './with-overlayed-view-CkqTefbz.js';
+export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-BehB1YGB.js';
+export { w as withDerivation } from './with-derivation-OK9M2sJE.js';
+export { w as withMaterializedView } from './with-materialized-view-Dt-ufPWQ.js';
+export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-BmhBSPCH.js';
+export { w as withOverlayedView } from './with-overlayed-view-eDvMs6LO.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BW0GNBEV.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-iAS8z9jc.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-uMNIAAW8.js';
-import './lazy-builder-D5GU14TS.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-DHOnRarj.js';
+import './lazy-builder-ChSqcF5t.js';
 import '@noy-db/attestation';
 
 /**
@@ -662,6 +662,136 @@ declare function scaleForCurrency(code: string): number | null;
 
 type FxRates = Record<string, number | string>;
 
+/**
+ * Exact money arithmetic helpers (#337) — `mulRate` and `allocate`.
+ *
+ * Both operate on the canonical decoded string form that `get()`
+ * returns (`'10000.00'`), entirely in scaled-`BigInt` space — no
+ * floating-point step anywhere, exact past 2^53. They are pure
+ * functions with no vault or descriptor dependency: the working scale
+ * is inferred from the amount's fractional digits (a canonical money
+ * string always carries exactly the field's scale) or pinned with
+ * `opts.scale`.
+ *
+ * Why these two: app-side invariants of the form
+ * `Σ parts === whole` (receipt totals, net-zero WHT pairs, proration)
+ * carry ±0.01 tolerances ONLY because the math is major-unit floats +
+ * round2. `mulRate` (VAT-style rate application with explicit
+ * rounding) and `allocate` (largest-remainder split — parts sum to the
+ * input EXACTLY, by construction) make those tolerances zero.
+ */
+
+interface MulRateOptions {
+    /**
+     * Output scale (fraction digits). Defaults to the amount's own
+     * fractional digits — for a canonical money string that IS the
+     * field's scale.
+     */
+    readonly scale?: number;
+    /** Rounding for the final re-scale. Default `'half-up'`. */
+    readonly rounding?: RoundingMode;
+}
+interface AllocateOptions {
+    /** Working scale. Defaults to the amount's own fractional digits. */
+    readonly scale?: number;
+}
+/**
+ * Multiply a money amount by a decimal rate, exactly.
+ *
+ * The rate is parsed at its OWN full precision (`0.07` → `7` at scale
+ * 2), the product computed in `BigInt` at `amountScale + rateScale`,
+ * then re-scaled back to the output scale with the requested rounding —
+ * one rounding step, at the very end.
+ *
+ * ```ts
+ * mulRate('10000.00', 0.07)                       // '700.00'  (VAT)
+ * mulRate('33.33', '0.07')                        // '2.33'    (half-up)
+ * mulRate('33.33', 0.07, { rounding: 'floor' })   // '2.33'
+ * mulRate(100, 0.07, { scale: 2 })                // '7.00'
+ * ```
+ */
+declare function mulRate(amount: number | string, rate: number | string, opts?: MulRateOptions): string;
+/**
+ * Split a money amount across weighted buckets with ZERO drift: the
+ * returned parts sum to the input exactly, by construction
+ * (largest-remainder method).
+ *
+ * Each bucket gets `floor(amount × weightᵢ / Σweights)`; the leftover
+ * minor units (always fewer than the bucket count) go one each to the
+ * buckets with the largest truncated remainders — ties broken by
+ * position, earlier bucket first. Weights are parsed as exact decimals
+ * (no float division anywhere); they must be non-negative with a
+ * positive sum.
+ *
+ * ```ts
+ * allocate('100.00', [1, 1, 1])   // ['33.34', '33.33', '33.33']
+ * allocate('0.05', [3, 7])        // ['0.02', '0.03']
+ * allocate('-100.00', [1, 1, 1])  // ['-33.34', '-33.33', '-33.33']
+ * ```
+ */
+declare function allocate(amount: number | string, weights: ReadonlyArray<number | string>, opts?: AllocateOptions): string[];
+
+/**
+ * Branded money output type (#338).
+ *
+ * The decoded read shape of a money field is an exact decimal STRING
+ * (`'10000.00'`) — but a hand-written schema types it `string | number`,
+ * which is honest about the input side and unhelpful on the output
+ * side: every read site hand-coerces, and a missed coercion passes
+ * typecheck silently (then surfaces as a runtime template warning, or
+ * worse, as `'10000.00' * 100` arithmetic).
+ *
+ * {@link MoneyString} is the output-side brand: a `string` that has
+ * been through noy-db's decode (or {@link asMoney}'s guard). Branding
+ * is type-level only — zero runtime cost on the read path.
+ *
+ * ## Wiring the brand through a validator (the input/output asymmetry)
+ *
+ * Keep the permissive `string | number` on the INPUT side so write
+ * sites are untouched, and brand the OUTPUT side. With Zod:
+ *
+ * ```ts
+ * import type { MoneyString } from '@noy-db/hub'
+ *
+ * const moneyValue = z.union([z.number(), z.string()]) as unknown as
+ *   z.ZodType<MoneyString, z.ZodTypeDef, string | number>
+ *
+ * const Invoice = z.object({ id: z.string(), total: moneyValue })
+ * type InvoiceOut = z.output<typeof Invoice> // total: MoneyString
+ * type InvoiceIn  = z.input<typeof Invoice>  // total: string | number
+ * ```
+ *
+ * The cast is sound for fields declared in `moneyFields`: reads pass
+ * through `decodeMoneyFields`, which always produces the canonical
+ * decimal string.
+ */
+declare const MONEY_BRAND: unique symbol;
+/**
+ * An exact decimal string produced by noy-db's money decode
+ * (`'10000.00'`). The brand exists only at the type level — at runtime
+ * a `MoneyString` is a plain string.
+ */
+type MoneyString = string & {
+    readonly [MONEY_BRAND]: true;
+};
+/**
+ * Runtime-guarded cast to {@link MoneyString}. Accepts a decimal string
+ * or a number, returns the canonical decimal string branded — throws
+ * `MoneyUnsupportedError` on anything non-finite / non-decimal. Use at
+ * trust boundaries (deserialized JSON, route params); values read
+ * through `get()`/`list()` are already canonical.
+ */
+declare function asMoney(value: string | number): MoneyString;
+/** Type guard: is `value` a decimal string acceptable as money? */
+declare function isMoneyString(value: unknown): value is MoneyString;
+/**
+ * The ONE sanctioned escape hatch to a JS `number` — explicit because
+ * the conversion is lossy past 2^53. For display math and chart axes;
+ * never feed the result back into stored amounts (use `mulRate` /
+ * `allocate` for exact arithmetic).
+ */
+declare function moneyNumber(value: MoneyString | string | number): number;
+
 /**
  * Hierarchical access — tier-aware keyring helpers.
  *
@@ -816,4 +946,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
 
-export { ActiveTier, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };
+export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };