@noy-db/hub 0.2.0-pre.17 → 0.2.0-pre.19

package/dist/index.d.cts

@@ -1,25 +1,25 @@
-import { b2 as NoydbStore, bA as UserEnvelope, bk as PublicEnvelope, bB as GateName, bC as GatePolicy, bD as VaultPolicy, bE as ActiveTier, bF as FactorProof, bG as SchemaUpdateStrategy, bH as TransformFn, bI as PersistedSchemaEnvelope, bJ as UpdateDecision, bK as DirectoryConfig, bL as UserVisibility, b0 as UnlockedKeyring, bp as Vault, b9 as DiffEntry } from './types-CrSpRDuG.cjs';
-export { bM as AccessibleVault, bN as AffectedDocument, b6 as AppendInput, bO as ArchivePolicy, bP as ArchiveResult, bQ as ArchiveRunOptions, bR as ArchiveStrategy, aM as ArrayOutputSpec, E as BLOB_CHUNKS_COLLECTION, F as BLOB_COLLECTION, H as BLOB_INDEX_COLLECTION, J as BLOB_SLOTS_PREFIX, K as BLOB_VERSIONS_PREFIX, bS as BUNDLE_STORE_POLICY, T as BlobObject, U as BlobPutOptions, V as BlobResponseOptions, W as BlobSet, bT as BuiltInGateName, bm as BundleRecipient, ac as CONSENT_AUDIT_COLLECTION, bU as CacheOptions, bV as CacheStats, bW as CapturedBlueprint, bX as ChangeEvent, b7 as ChangeType, al as ClosePeriodOptions, aV as Collection, bY as CollectionChangeEvent, bZ as CollectionConflictResolver, b_ as CollectionDescriptor, aC as CollectionFrame, b8 as CollectionInstant, b$ as CollectionStats, c0 as ComputedFieldError, c1 as ComputedFields, c2 as ComputedFn, c3 as Conflict, c4 as ConflictPolicy, c5 as ConflictStrategy, ad as ConsentAuditEntry, ae as ConsentAuditFilter, af as ConsentContext, ag as ConsentOp, c6 as CrossTierAccessEvent, c7 as CrossVaultAggregation, c8 as CrossVaultGroupedAggregation, c9 as CrossVaultGroupedRow, ca as CrossVaultLiveAggregation, cb as CrossVaultLiveQuery, $ as DEFAULT_CHUNK_SIZE, cc as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, cd as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, ce as DeepPartial, cf as DeepPartialOrNull, cg as DeferredNumberingConfig, ch as DelegationToken, ci as DeleteManyResult, cj as DeploymentEvent, ck as DerivationDescriptor, aK as DerivationStrategy, aO as DerivationStrategyHandle, aP as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cl as DirtyEntry, cm as DryRunResult, cn as DumpSchemaOptions, co as ELEVATION_AUDIT_COLLECTION, cp as ElevatedHandle, b4 as EncryptedEnvelope, cq as EnrollAuthenticatorOptions, cr as EnrollAuthenticatorWrappingDEKsOptions, cs as EnrollAuthenticatorWrappingKEKOptions, ct as EnrollRecoveryResult, cu as ExportCapability, cv as ExportChunk, cw as ExportFormat, cx as ExportStreamOptions, cy as FactorKind, cz as FactorProofBundle, cA as FactorRequirement, cB as FanoutQueryOptions, cC as FanoutResult, cD as FenceDoc, cE as FenceState, cF as FieldChange, cG as FieldDescriptor, cH as FieldSource, cI as GhostRecord, cJ as GrantOptions, aw as GuardChange, ax as GuardContext, av as GuardStrategy, az as GuardStrategyHandle, cK as GuardViolation, cL as HistoryConfig, cM as HistoryEntry, b3 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cN as INDEXED_STORE_POLICY, cO as ImportCapability, cP as InferOutput, cQ as InternalCollectionStats, cR as IssueDelegationOptions, cS as IssueMagicLinkGrantOptions, ba as JsonPatch, bb as JsonPatchOp, cT as KeyringAuthenticator, cU as KeyringAuthenticatorWrappingDEKs, cV as KeyringAuthenticatorWrappingKEK, cW as KeyringFile, L as Layer, bc as LedgerStore, cX as ListAccessibleVaultsOptions, cY as ListPageResult, cZ as ListUsersOptions, c_ as LiveQueryOptions, c$ as LiveUserEnvelope, d0 as LocaleReadOptions, d1 as Lru, d2 as LruOptions, d3 as LruStats, d4 as MAGIC_LINK_CONTENT_INFO_PREFIX, d5 as MAGIC_LINK_GRANTS_COLLECTION, d6 as MAGIC_LINK_KEK_INFO_PREFIX, d7 as MagicLinkGrantPayload, d8 as MagicLinkGrantRecord, bw as MaterializedFromMeta, d9 as MaterializedViewDescriptor, bx as MaterializedViewOutput, aS as MaterializedViewStrategy, aT as MaterializedViewStrategyHandle, da as MemoryRecipientSealer, db as MemorySealingKeyProvider, dc as NOYDB_BACKUP_VERSION, dd as NOYDB_FORMAT_VERSION, de as NOYDB_KEYRING_VERSION, df as NOYDB_SYNC_VERSION, dg as NextOptions, dh as Noydb, aE as NoydbBundleStore, di as NoydbEventMap, dj as NoydbOptions, dk as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, am as OpenPeriodOptions, aQ as OutputSpec, aW as OverlayFieldMergeMode, aX as OverlayFieldMergeRule, dl as OverlayViewDescriptor, aU as OverlayedViewStrategy, aZ as OverlayedViewStrategyHandle, an as PERIODS_COLLECTION, dm as PUBLIC_ENVELOPE_FIELDS, dn as PaperRecoveryDoc, dp as PaperRecoveryEntry, dq as PassphrasePolicy, dr as PassphraseValidationResult, ao as PeriodRecord, ds as Permission, dt as Permissions, du as PersistedSchemaKind, dv as PlaintextTranslatorContext, dw as PlaintextTranslatorFn, P as PolicyEnforcer, dx as PresenceHandle, dy as PresencePeer, b5 as PruneOptions, dz as PublicEnvelopeField, dA as PublicEnvelopeSchema, dB as PublicEnvelopeText, dC as PullMode, dD as PullOptions, dE as PullPolicy, dF as PullResult, dG as PushMode, dH as PushOptions, dI as PushPolicy, dJ as PushResult, dK as PutManyItemOptions, dL as PutManyOptions, dM as PutManyResult, dN as QueryAcrossOptions, dO as QueryAcrossResult, dP as QuickUnlockState, dQ as QuickUnlockStore, dR as ReAuthOperation, bo as RecipientHint, bn as RecipientSealer, aR as RecordOutputSpec, dS as RecoverPassphraseInput, dT as RecoverPassphraseResult, dU as RecoverUserOptions, dV as RecoveryProof, R as ResolveI18nOptions, dW as ResolvedPublicEnvelopeSchema, aF as RetentionPolicy, dX as RevokeOptions, a$ as Role, dY as RotatePassphraseInput, dZ as RotateRecoveryOptions, d_ as RotateRecoveryResult, d$ as SEALED_PASSPHRASE_RECORD_ID, e0 as SchemaDelta, e1 as SchemaIntrospection, e2 as SchemaManifestRow, S as ScriptWarning, e3 as SealedEnvelope, e4 as SealedPassphrase, bl as SealingKeyProvider, e5 as SequenceHandle, e6 as SequenceOptions, e7 as SequenceStore, e8 as SessionPolicy, e9 as SetPublicEnvelopeInput, ea as ShamirRecoveryDoc, eb as ShamirRecoveryEntry, br as ShamirRecoveryProvider, ec as ShardedCollection, ed as ShardedGroupedQuery, ee as ShardedQuery, ef as ShardingConfig, eg as SkippedVault, a6 as SlotInfo, a7 as SlotRecord, eh as SlotRewrapCeremony, ei as SlotRewrapContext, aI as SnapshotMeta, ej as StandardSchemaV1, ek as StandardSchemaV1Issue, el as StandardSchemaV1SyncResult, em as StateManagementVault, i as StaticDictDescriptor, en as StoreAuth, eo as StoreAuthKind, ep as StoreCapabilities, eq as StoreTime, er as SyncEngine, es as SyncMetadata, et as SyncPolicy, eu as SyncScheduler, ev as SyncSchedulerStatus, ew as SyncStatus, ex as SyncTarget, ey as SyncTargetRole, ez as SyncTransaction, eA as SyncTransactionResult, eB as TabChannel, eC as TabCoordinationOptions, eD as TabLockManager, eE as TabPresence, eF as TabRole, eG as TierMode, eH as TransactionInvariant, eI as TranslatorAuditEntry, eJ as TxCollection, bs as TxContext, eK as TxOp, eL as TxVault, eM as USER_ENVELOPE_COLLECTION, eN as USER_ENVELOPE_MAX_BYTES, by as UnionArmJoin, bz as UnionSource, eO as Unsubscribe, eP as UpdateAuthenticatorOptions, eQ as UpdateContext, eR as UpdateUserOptions, eS as UserApi, eT as UserEnvelopeCheckGate, eU as UserEnvelopeOversizedError, eV as UserEnvelopePresented, eW as UserInfo, eX as VaultBackup, bd as VaultEngine, aD as VaultFrame, eY as VaultGroup, eZ as VaultGroupOptions, be as VaultInstant, e_ as VaultPolicyOnDisk, e$ as VaultRegistryRow, f0 as VaultSchemaSnapshot, f1 as VaultSnapshot, f2 as VaultTemplate, bf as VerifyResult, a8 as VersionRecord, f3 as WarningRules, f4 as WeakPassphraseError, f5 as WeakPassphraseReason, f6 as WithArchiveOptions, f7 as WrappedDeksBlob, f8 as WriteConflict, f9 as WriteEvent, fa as WriteHook, fb as WriteQueue, fc as aesGcmOpen, j as applyI18nLocale, bg as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bh as computePatch, A as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, k as dictCollectionName, l as dictKey, bi as diff, m as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bj as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, o as i18nText, p as inferScripts, q as isDictCollectionName, r as isDictKeyDescriptor, s as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, t as isStaticDictDescriptor, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, fI as parseRsaOaepTlv, fJ as parseSealedEnvelope, fK as readMagicLinkGrantRecord, fL as recoverUser, fM as removeAuthenticator, u as resolveI18nText, v as resolvePolicy, fN as resolvePublicEnvelopeSchema, fO as resolveSequenceKey, fP as revokeDelegation, fQ as revokeMagicLinkGrant, fR as runTransaction, fS as savePaperRecoveryEntries, fT as saveSealedPassphrase, fU as saveShamirRecoveryEntries, fV as sealRsaOaepTlv, x as staticDict, fW as unwrapDeksFromBlob, fX as unwrapDeksFromPaperEntry, fY as unwrapDeksFromShamirEntry, fZ as unwrapMagicLinkGrant, y as validateI18nTextValue, f_ as validatePassphrase, f$ as validatePublicEnvelopeInput, g0 as validateSchemaInput, g1 as validateSchemaOutput, B as validateSessionPolicy, g2 as withArchive, g3 as withDeferredNumbering, g4 as writeMagicLinkGrant } from './types-CrSpRDuG.cjs';
+import { aP as NoydbStore, bl as UserEnvelope, b5 as PublicEnvelope, bm as GateName, bn as GatePolicy, bo as VaultPolicy, bp as ActiveTier, bq as FactorProof, br as SchemaUpdateStrategy, bs as TransformFn, bt as PersistedSchemaEnvelope, bu as UpdateDecision, bv as DirectoryConfig, bw as UserVisibility, aN as UnlockedKeyring, ba as Vault, aW as DiffEntry } from './types-D-gr5t0G.cjs';
+export { bx as AccessibleVault, by as AffectedDocument, aT as AppendInput, bz as ArchivePolicy, bA as ArchiveResult, bB as ArchiveRunOptions, bC as ArchiveStrategy, ax as ArrayOutputSpec, o as BLOB_CHUNKS_COLLECTION, p as BLOB_COLLECTION, r as BLOB_INDEX_COLLECTION, t as BLOB_SLOTS_PREFIX, u as BLOB_VERSIONS_PREFIX, bD as BUNDLE_STORE_POLICY, z as BlobObject, A as BlobPutOptions, C as BlobResponseOptions, E as BlobSet, bE as BuiltInGateName, b7 as BundleRecipient, Z as CONSENT_AUDIT_COLLECTION, bF as CacheOptions, bG as CacheStats, bH as CapturedBlueprint, bI as ChangeEvent, aU as ChangeType, a6 as ClosePeriodOptions, aG as Collection, bJ as CollectionChangeEvent, bK as CollectionConflictResolver, bL as CollectionDescriptor, an as CollectionFrame, aV as CollectionInstant, bM as CollectionStats, bN as ComputedFieldError, bO as ComputedFields, bP as ComputedFn, bQ as Conflict, bR as ConflictPolicy, bS as ConflictStrategy, _ as ConsentAuditEntry, $ as ConsentAuditFilter, a0 as ConsentContext, a1 as ConsentOp, bT as CrossTierAccessEvent, bU as CrossVaultAggregation, bV as CrossVaultDerivationContext, bW as CrossVaultDerivationSpec, bX as CrossVaultGroupedAggregation, bY as CrossVaultGroupedRow, bZ as CrossVaultLiveAggregation, b_ as CrossVaultLiveQuery, K as DEFAULT_CHUNK_SIZE, b$ as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, c0 as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, c1 as DeepPartial, c2 as DeepPartialOrNull, c3 as DeferredNumberingConfig, c4 as DelegationToken, c5 as DeleteManyResult, c6 as DeploymentEvent, c7 as DerivationDescriptor, av as DerivationStrategy, az as DerivationStrategyHandle, aA as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, c8 as DirtyEntry, c9 as DryRunResult, ca as DumpSchemaOptions, cb as ELEVATION_AUDIT_COLLECTION, cc as ElevatedHandle, aR as EncryptedEnvelope, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cg as EnrollRecoveryResult, ch as ExportCapability, ci as ExportChunk, cj as ExportFormat, ck as ExportStreamOptions, cl as FactorKind, cm as FactorProofBundle, cn as FactorRequirement, co as FanoutQueryOptions, cp as FanoutResult, cq as FenceDoc, cr as FenceState, cs as FieldChange, ct as FieldDescriptor, cu as FieldSource, cv as FleetMigrationResult, cw as FormattedSequenceHandle, cx as GhostRecord, cy as GrantOptions, ah as GuardChange, ai as GuardContext, ag as GuardStrategy, ak as GuardStrategyHandle, cz as GuardViolation, cA as HistoryConfig, cB as HistoryEntry, aQ as HistoryOptions, cC as INDEXED_STORE_POLICY, cD as ImportCapability, cE as InferOutput, cF as InternalCollectionStats, cG as IssueDelegationOptions, cH as IssueMagicLinkGrantOptions, aX as JsonPatch, aY as JsonPatchOp, cI as KeyringAuthenticator, cJ as KeyringAuthenticatorWrappingDEKs, cK as KeyringAuthenticatorWrappingKEK, cL as KeyringFile, aZ as LedgerStore, cM as LinkEndpointError, cN as LinkIntegrityError, cO as LinkOnDelete, cP as LinkRow, cQ as LinkSetHandle, cR as LinkSpec, cS as ListAccessibleVaultsOptions, cT as ListPageResult, cU as ListUsersOptions, cV as LiveQueryOptions, cW as LiveUserEnvelope, cX as LocaleReadOptions, cY as Lru, cZ as LruOptions, c_ as LruStats, c$ as MAGIC_LINK_CONTENT_INFO_PREFIX, d0 as MAGIC_LINK_GRANTS_COLLECTION, d1 as MAGIC_LINK_KEK_INFO_PREFIX, d2 as MagicLinkGrantPayload, d3 as MagicLinkGrantRecord, bh as MaterializedFromMeta, d4 as MaterializedViewDescriptor, bi as MaterializedViewOutput, aD as MaterializedViewStrategy, aE as MaterializedViewStrategyHandle, d5 as MemoryRecipientSealer, d6 as MemorySealingKeyProvider, d7 as MigrationStatusRow, d8 as NOYDB_BACKUP_VERSION, d9 as NOYDB_FORMAT_VERSION, da as NOYDB_KEYRING_VERSION, db as NOYDB_SYNC_VERSION, dc as NextOptions, dd as Noydb, ap as NoydbBundleStore, de as NoydbEventMap, df as NoydbOptions, dg as NumberingAssignment, a7 as OpenPeriodOptions, aB as OutputSpec, aH as OverlayFieldMergeMode, aI as OverlayFieldMergeRule, dh as OverlayViewDescriptor, aF as OverlayedViewStrategy, aK as OverlayedViewStrategyHandle, a8 as PERIODS_COLLECTION, di as PUBLIC_ENVELOPE_FIELDS, dj as PaperRecoveryDoc, dk as PaperRecoveryEntry, dl as PassphrasePolicy, dm as PassphraseValidationResult, a9 as PeriodRecord, dn as Permission, dp as Permissions, dq as PersistedSchemaKind, dr as PlaintextTranslatorContext, ds as PlaintextTranslatorFn, P as PolicyEnforcer, dt as PresenceHandle, du as PresencePeer, aS as PruneOptions, dv as PublicEnvelopeField, dw as PublicEnvelopeSchema, dx as PublicEnvelopeText, dy as PullMode, dz as PullOptions, dA as PullPolicy, dB as PullResult, dC as PushMode, dD as PushOptions, dE as PushPolicy, dF as PushResult, dG as PutManyItemOptions, dH as PutManyOptions, dI as PutManyResult, dJ as QueryAcrossOptions, dK as QueryAcrossResult, dL as QuickUnlockState, dM as QuickUnlockStore, dN as ReAuthOperation, b9 as RecipientHint, b8 as RecipientSealer, aC as RecordOutputSpec, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dS as RefreshInsightsResult, dT as ResolvedPublicEnvelopeSchema, aq as RetentionPolicy, dU as RevokeOptions, aM as Role, dV as RotatePassphraseInput, dW as RotateRecoveryOptions, dX as RotateRecoveryResult, dY as SEALED_PASSPHRASE_RECORD_ID, dZ as SchemaDelta, d_ as SchemaIntrospection, d$ as SchemaManifestRow, S as ScriptWarning, e0 as SealedEnvelope, e1 as SealedPassphrase, b6 as SealingKeyProvider, e2 as SearchEntry, e3 as SearchOptions, e4 as SearchResult, e5 as SequenceHandle, e6 as SequenceOptions, e7 as SequenceStore, e8 as SessionPolicy, e9 as SetPublicEnvelopeInput, ea as ShamirRecoveryDoc, eb as ShamirRecoveryEntry, bc as ShamirRecoveryProvider, ec as ShardedCollection, ed as ShardedGroupedQuery, ee as ShardedQuery, ef as ShardingConfig, eg as SkippedVault, T as SlotInfo, U as SlotRecord, eh as SlotRewrapCeremony, ei as SlotRewrapContext, at as SnapshotMeta, ej as StandardSchemaV1, ek as StandardSchemaV1Issue, el as StandardSchemaV1SyncResult, em as StateManagementVault, e as StaticDictDescriptor, en as StoreAuth, eo as StoreAuthKind, ep as StoreCapabilities, eq as StoreTime, er as SyncEngine, es as SyncMetadata, et as SyncPolicy, eu as SyncScheduler, ev as SyncSchedulerStatus, ew as SyncStatus, ex as SyncTarget, ey as SyncTargetRole, ez as SyncTransaction, eA as SyncTransactionResult, eB as TabChannel, eC as TabCoordinationOptions, eD as TabLockManager, eE as TabPresence, eF as TabRole, eG as TierMode, eH as TransactionInvariant, eI as TranslatorAuditEntry, eJ as TxCollection, bd as TxContext, eK as TxOp, eL as TxVault, eM as USER_ENVELOPE_COLLECTION, eN as USER_ENVELOPE_MAX_BYTES, bj as UnionArmJoin, bk as UnionSource, eO as Unsubscribe, eP as UpdateAuthenticatorOptions, eQ as UpdateContext, eR as UpdateUserOptions, eS as UserApi, eT as UserEnvelopeCheckGate, eU as UserEnvelopeOversizedError, eV as UserEnvelopePresented, eW as UserInfo, eX as VaultBackup, a_ as VaultEngine, ao as VaultFrame, eY as VaultGroup, eZ as VaultGroupOptions, a$ as VaultInstant, e_ as VaultPolicyOnDisk, e$ as VaultRegistryRow, f0 as VaultSchemaSnapshot, f1 as VaultSnapshot, f2 as VaultTemplate, b0 as VerifyResult, V as VersionRecord, f3 as WarningRules, f4 as WeakPassphraseError, f5 as WeakPassphraseReason, f6 as WithArchiveOptions, f7 as WrappedDeksBlob, f8 as WriteConflict, f9 as WriteEvent, fa as WriteHook, fb as WriteQueue, fc as aesGcmOpen, b1 as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, fg as compileSequenceFormat, b2 as computePatch, n as createEnforcer, fh as createNoydb, fi as createStore, fj as deriveMagicLinkContentKey, f as dictCollectionName, g as dictKey, b3 as diff, h as enforceScript, fk as enrollAuthenticator, fl as estimateEntropy, fm as evalComputedFields, fn as evaluateExportCapability, fo as evaluateImportCapability, fp as findAuthenticator, b4 as formatDiff, fq as hasExportCapability, fr as hasImportCapability, fs as hasRecoveryEnrolled, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, ft as isLinkCollectionName, fu as isMagicLinkGrantExpired, fv as isPublicEnvelope, l as isStaticDictDescriptor, fw as issueDelegation, fx as keyringRecoverPassphrase, fy as keyringRotatePassphrase, fz as listMagicLinkGrants, fA as listUsers, fB as listUsersWithEnvelopes, fC as loadActiveDelegations, fD as loadPaperRecoveryEntries, fE as loadSealedPassphrase, fF as loadShamirRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fI as mintShamirRecoveryEntry, fJ as mintWrappedDeksBlob, fK as parseRsaOaepTlv, fL as parseSealedEnvelope, fM as readMagicLinkGrantRecord, fN as recoverUser, fO as removeAuthenticator, fP as resolvePublicEnvelopeSchema, fQ as resolveSequenceKey, fR as revokeDelegation, fS as revokeMagicLinkGrant, fT as runTransaction, fU as savePaperRecoveryEntries, fV as saveSealedPassphrase, fW as saveShamirRecoveryEntries, fX as sealRsaOaepTlv, s as staticDict, fY as unwrapDeksFromBlob, fZ as unwrapDeksFromPaperEntry, f_ as unwrapDeksFromShamirEntry, f$ as unwrapMagicLinkGrant, g0 as validatePassphrase, g1 as validatePublicEnvelopeInput, g2 as validateSchemaInput, g3 as validateSchemaOutput, v as validateSessionPolicy, g4 as withArchive, g5 as withDeferredNumbering, g6 as writeMagicLinkGrant } from './types-D-gr5t0G.cjs';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
-import { N as NoydbError } from './errors-Dz64FA65.cjs';
-export { G as AlreadyElevatedError, A as AmendmentForbiddenError, r as AttestationError, B as BackupCorruptedError, t as BackupLedgerError, u as BundleIntegrityError, v as BundleSealMismatchError, w as BundleVersionConflictError, H as ConflictError, J as CrossJoinSourceUnknownError, K as CrossJoinTooLargeError, Q as DanglingReferenceError, V as DecryptionError, W as DelegationTargetMissingError, h as DerivationCapExceededError, i as DerivationCycleError, j as DerivationDepthError, k as DerivationOutputShapeError, l as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, X as DirectoryDisabledError, Y as ElevationExpiredError, Z as ExportCapabilityError, F as FieldFrozenError, _ as FilenameSanitizationError, $ as ForgetStrategyNotConfiguredError, a0 as GroupCardinalityError, a1 as ImportCapabilityError, a2 as IndexRequiredError, a3 as IndexWriteFailureError, a4 as InvalidKeyError, I as InvariantError, a5 as JoinTooLargeError, a6 as KeyringCorruptError, a7 as KeyringExpiredError, a8 as LedgerContentionError, L as LocaleNotSpecifiedError, y as MaterializedViewConfigError, z as MaterializedViewCycleError, C as MaterializedViewSourceUnknownError, E as MaterializedViewTooLargeError, a9 as MigrationRequiredError, M as MissingTranslationError, aa as NetworkError, ab as NoAccessError, ac as NonAdditiveSchemaChangeError, ad as NotFoundError, ae as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, m as OverlayCollectionUnavailableError, n as OverlayIdMismatchError, o as OverlayNameCollisionError, af as PathEscapeError, ag as PeriodClosedError, ah as PermissionDeniedError, ai as PrivilegeEscalationError, aj as QuiesceTimeoutError, ak as ReadOnlyAtInstantError, al as ReadOnlyError, am as ReadOnlyFrameError, an as RecordCekNotFoundError, f as RecordLockedError, R as ReservedCollectionNameError, ao as ReservedVaultNameError, ap as SchemaFenceError, aq as SchemaLockedError, ar as SchemaUpdateError, as as SchemaValidationError, S as ScriptViolationError, p as SealedRecordExpiredError, q as SealedRecordMismatchError, at as SequenceContentionError, au as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, av as ShardProvisioningError, g as SnapshotNotFoundError, b as StaticDictReadonlyError, aw as StoreCapabilityError, ax as TamperedError, ay as TierDemoteDeniedError, az as TierNotGrantedError, T as TranslatorNotConfiguredError, aA as UniqueConstraintError, U as UnknownDictCodeError, aB as UnknownShardError, aC as UnsupportedIndexOptionError, aD as ValidationError, aE as VaultTemplateNotFoundError } from './errors-Dz64FA65.cjs';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-u-kWzSrL.cjs';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-CrI7PPbA.cjs';
-export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from './index-C-SSRIxP.cjs';
+import { N as NoydbError } from './errors-DL-zTrrF.cjs';
+export { H as AlreadyElevatedError, A as AmendmentForbiddenError, s as AttestationError, B as BackupCorruptedError, u as BackupLedgerError, v as BundleIntegrityError, w as BundleSealMismatchError, x as BundleVersionConflictError, J as ConflictError, K as CrossJoinSourceUnknownError, Q as CrossJoinTooLargeError, V as DanglingReferenceError, W as DataResidencyError, X as DecryptionError, Y as DelegationTargetMissingError, i as DerivationCapExceededError, j as DerivationCycleError, k as DerivationDepthError, l as DerivationOutputShapeError, m as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, Z as DirectoryDisabledError, _ as ElevationExpiredError, $ as ExportCapabilityError, F as FieldFrozenError, a0 as FilenameSanitizationError, a1 as ForgetStrategyNotConfiguredError, a2 as GroupCardinalityError, I as IllegalTransitionError, a3 as ImportCapabilityError, a4 as IndexRequiredError, a5 as IndexWriteFailureError, a6 as InvalidKeyError, f as InvariantError, a7 as JoinTooLargeError, a8 as KeyringCorruptError, a9 as KeyringExpiredError, aa as LedgerContentionError, L as LocaleNotSpecifiedError, z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError, ab as MigrationRequiredError, M as MissingTranslationError, ac as NetworkError, ad as NoAccessError, ae as NonAdditiveSchemaChangeError, af as NotFoundError, ag as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, n as OverlayCollectionUnavailableError, o as OverlayIdMismatchError, p as OverlayNameCollisionError, ah as PathEscapeError, ai as PeriodClosedError, aj as PermissionDeniedError, ak as PrivilegeEscalationError, al as QuiesceTimeoutError, am as ReadOnlyAtInstantError, an as ReadOnlyError, ao as ReadOnlyFrameError, ap as RecordCekNotFoundError, g as RecordLockedError, R as ReservedCollectionNameError, aq as ReservedVaultNameError, ar as SchemaFenceError, as as SchemaLockedError, at as SchemaUpdateError, au as SchemaValidationError, S as ScriptViolationError, q as SealedRecordExpiredError, r as SealedRecordMismatchError, av as SequenceContentionError, aw as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, ax as ShardProvisioningError, h as SnapshotNotFoundError, b as StaticDictReadonlyError, ay as StoreCapabilityError, az as TamperedError, aA as TierDemoteDeniedError, aB as TierNotGrantedError, T as TranslatorNotConfiguredError, aC as UniqueConstraintError, U as UnknownDictCodeError, aD as UnknownShardError, aE as UnsupportedIndexOptionError, aF as ValidationError, aG as VaultTemplateNotFoundError } from './errors-DL-zTrrF.cjs';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, q as isRefArray, r as ref, s as refArray, t as resetJoinWarnings } from './index-BM7O48Ur.cjs';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-DQnSAP5W.cjs';
+export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from './index-BMmajblo.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
 export { TransactionStrategyOptions } from './tx/index.cjs';
-export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-qN3zF8o1.cjs';
-export { w as withDerivation } from './with-derivation-Bozs8DmD.cjs';
-export { w as withMaterializedView } from './with-materialized-view-NzF71cG_.cjs';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-B1N82hMf.cjs';
+import { K as RoundingMode } from './strategy-C5ol6NdV.cjs';
+export { h as AggregateResult, j as AggregateSpec, k as Aggregation, l as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, m as GROUPBY_WARN_CARDINALITY, n as GroupedAggregation, o as GroupedQuery, p as GroupedQueryN, q as GroupedRow, t as GroupedRowN, I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, u as LiveAggregation, M as MoneyCurrencyError, N as MoneyDescriptor, P as MoneyOptions, Q as MoneyOptionsFixed, S as MoneyOptionsMulti, T as MoneyPrecisionError, U as MoneyUnsupportedError, O as OnMissing, c as OnMissingPolicy, w as Reducer, x as ReducerOptions, R as ResolveI18nOptions, d as applyI18nLocale, y as avg, B as count, C as groupAndReduce, i as i18nText, e as isI18nTextDescriptor, V as isMoneyDescriptor, D as max, E as min, W as money, F as reduceRecords, r as resolveI18nText, f as resolvePolicy, J as sum, v as validateI18nTextValue } from './strategy-C5ol6NdV.cjs';
+export { w as withDerivation, a as withRollup } from './with-rollup-aaxOZcIb.cjs';
+export { w as withMaterializedView } from './with-materialized-view-BboqxyV3.cjs';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-BmhBSPCH.cjs';
-export { w as withOverlayedView } from './with-overlayed-view-UI8qSGL4.cjs';
-import { u as RoundingMode } from './strategy-CLC1j79g.cjs';
-export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, M as MoneyCurrencyError, v as MoneyDescriptor, w as MoneyOptions, x as MoneyOptionsFixed, y as MoneyOptionsMulti, z as MoneyPrecisionError, B as MoneyUnsupportedError, R as Reducer, k as ReducerOptions, l as avg, n as count, o as groupAndReduce, C as isMoneyDescriptor, p as max, q as min, D as money, r as reduceRecords, t as sum } from './strategy-CLC1j79g.cjs';
+export { w as withOverlayedView } from './with-overlayed-view-mmsg5Of3.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-iXbYFAWl.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BR1rMOS-.cjs';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-tEcM5fnv.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BEUBmmI4.cjs';
 import './lazy-builder-eYZzLEL1.cjs';
 import '@noy-db/attestation';
 
@@ -77,6 +77,19 @@ declare function deleteUserEnvelope(store: NoydbStore, vault: string, keyringId:
  */
 declare function listUserEnvelopeIds(store: NoydbStore, vault: string): Promise<string[]>;
 
+/**
+ * Default text tokenizer for scan-mode search (#308).
+ *
+ * NFKC-normalize → lowercase → split on Unicode letter/number runs. This is a
+ * word-boundary tokenizer: it does **not** segment scripts written without
+ * inter-word spaces (Thai, Lao, Khmer, CJK) — those collapse to one token per
+ * run. For such data, a dictionary/ICU segmenter is the right `tokenizer`
+ * (the engine takes one as a parameter); substring/`contains` matching is the
+ * pragmatic fallback until then. See the #308 design note.
+ */
+type Tokenizer = (text: string) => string[];
+declare const tokenize: Tokenizer;
+
 /**
  * Cache policy helpers — parse human-friendly byte budgets into raw numbers.
  *
@@ -950,4 +963,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
 
-export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };
+export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, type Tokenizer, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId };

package/dist/index.d.ts

@@ -1,25 +1,25 @@
-import { b2 as NoydbStore, bA as UserEnvelope, bk as PublicEnvelope, bB as GateName, bC as GatePolicy, bD as VaultPolicy, bE as ActiveTier, bF as FactorProof, bG as SchemaUpdateStrategy, bH as TransformFn, bI as PersistedSchemaEnvelope, bJ as UpdateDecision, bK as DirectoryConfig, bL as UserVisibility, b0 as UnlockedKeyring, bp as Vault, b9 as DiffEntry } from './types-CljIHm_J.js';
-export { bM as AccessibleVault, bN as AffectedDocument, b6 as AppendInput, bO as ArchivePolicy, bP as ArchiveResult, bQ as ArchiveRunOptions, bR as ArchiveStrategy, aM as ArrayOutputSpec, E as BLOB_CHUNKS_COLLECTION, F as BLOB_COLLECTION, H as BLOB_INDEX_COLLECTION, J as BLOB_SLOTS_PREFIX, K as BLOB_VERSIONS_PREFIX, bS as BUNDLE_STORE_POLICY, T as BlobObject, U as BlobPutOptions, V as BlobResponseOptions, W as BlobSet, bT as BuiltInGateName, bm as BundleRecipient, ac as CONSENT_AUDIT_COLLECTION, bU as CacheOptions, bV as CacheStats, bW as CapturedBlueprint, bX as ChangeEvent, b7 as ChangeType, al as ClosePeriodOptions, aV as Collection, bY as CollectionChangeEvent, bZ as CollectionConflictResolver, b_ as CollectionDescriptor, aC as CollectionFrame, b8 as CollectionInstant, b$ as CollectionStats, c0 as ComputedFieldError, c1 as ComputedFields, c2 as ComputedFn, c3 as Conflict, c4 as ConflictPolicy, c5 as ConflictStrategy, ad as ConsentAuditEntry, ae as ConsentAuditFilter, af as ConsentContext, ag as ConsentOp, c6 as CrossTierAccessEvent, c7 as CrossVaultAggregation, c8 as CrossVaultGroupedAggregation, c9 as CrossVaultGroupedRow, ca as CrossVaultLiveAggregation, cb as CrossVaultLiveQuery, $ as DEFAULT_CHUNK_SIZE, cc as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, cd as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, ce as DeepPartial, cf as DeepPartialOrNull, cg as DeferredNumberingConfig, ch as DelegationToken, ci as DeleteManyResult, cj as DeploymentEvent, ck as DerivationDescriptor, aK as DerivationStrategy, aO as DerivationStrategyHandle, aP as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cl as DirtyEntry, cm as DryRunResult, cn as DumpSchemaOptions, co as ELEVATION_AUDIT_COLLECTION, cp as ElevatedHandle, b4 as EncryptedEnvelope, cq as EnrollAuthenticatorOptions, cr as EnrollAuthenticatorWrappingDEKsOptions, cs as EnrollAuthenticatorWrappingKEKOptions, ct as EnrollRecoveryResult, cu as ExportCapability, cv as ExportChunk, cw as ExportFormat, cx as ExportStreamOptions, cy as FactorKind, cz as FactorProofBundle, cA as FactorRequirement, cB as FanoutQueryOptions, cC as FanoutResult, cD as FenceDoc, cE as FenceState, cF as FieldChange, cG as FieldDescriptor, cH as FieldSource, cI as GhostRecord, cJ as GrantOptions, aw as GuardChange, ax as GuardContext, av as GuardStrategy, az as GuardStrategyHandle, cK as GuardViolation, cL as HistoryConfig, cM as HistoryEntry, b3 as HistoryOptions, e as I18nMap, f as I18nTextDescriptor, g as I18nTextOptions, cN as INDEXED_STORE_POLICY, cO as ImportCapability, cP as InferOutput, cQ as InternalCollectionStats, cR as IssueDelegationOptions, cS as IssueMagicLinkGrantOptions, ba as JsonPatch, bb as JsonPatchOp, cT as KeyringAuthenticator, cU as KeyringAuthenticatorWrappingDEKs, cV as KeyringAuthenticatorWrappingKEK, cW as KeyringFile, L as Layer, bc as LedgerStore, cX as ListAccessibleVaultsOptions, cY as ListPageResult, cZ as ListUsersOptions, c_ as LiveQueryOptions, c$ as LiveUserEnvelope, d0 as LocaleReadOptions, d1 as Lru, d2 as LruOptions, d3 as LruStats, d4 as MAGIC_LINK_CONTENT_INFO_PREFIX, d5 as MAGIC_LINK_GRANTS_COLLECTION, d6 as MAGIC_LINK_KEK_INFO_PREFIX, d7 as MagicLinkGrantPayload, d8 as MagicLinkGrantRecord, bw as MaterializedFromMeta, d9 as MaterializedViewDescriptor, bx as MaterializedViewOutput, aS as MaterializedViewStrategy, aT as MaterializedViewStrategyHandle, da as MemoryRecipientSealer, db as MemorySealingKeyProvider, dc as NOYDB_BACKUP_VERSION, dd as NOYDB_FORMAT_VERSION, de as NOYDB_KEYRING_VERSION, df as NOYDB_SYNC_VERSION, dg as NextOptions, dh as Noydb, aE as NoydbBundleStore, di as NoydbEventMap, dj as NoydbOptions, dk as NumberingAssignment, O as OnMissing, h as OnMissingPolicy, am as OpenPeriodOptions, aQ as OutputSpec, aW as OverlayFieldMergeMode, aX as OverlayFieldMergeRule, dl as OverlayViewDescriptor, aU as OverlayedViewStrategy, aZ as OverlayedViewStrategyHandle, an as PERIODS_COLLECTION, dm as PUBLIC_ENVELOPE_FIELDS, dn as PaperRecoveryDoc, dp as PaperRecoveryEntry, dq as PassphrasePolicy, dr as PassphraseValidationResult, ao as PeriodRecord, ds as Permission, dt as Permissions, du as PersistedSchemaKind, dv as PlaintextTranslatorContext, dw as PlaintextTranslatorFn, P as PolicyEnforcer, dx as PresenceHandle, dy as PresencePeer, b5 as PruneOptions, dz as PublicEnvelopeField, dA as PublicEnvelopeSchema, dB as PublicEnvelopeText, dC as PullMode, dD as PullOptions, dE as PullPolicy, dF as PullResult, dG as PushMode, dH as PushOptions, dI as PushPolicy, dJ as PushResult, dK as PutManyItemOptions, dL as PutManyOptions, dM as PutManyResult, dN as QueryAcrossOptions, dO as QueryAcrossResult, dP as QuickUnlockState, dQ as QuickUnlockStore, dR as ReAuthOperation, bo as RecipientHint, bn as RecipientSealer, aR as RecordOutputSpec, dS as RecoverPassphraseInput, dT as RecoverPassphraseResult, dU as RecoverUserOptions, dV as RecoveryProof, R as ResolveI18nOptions, dW as ResolvedPublicEnvelopeSchema, aF as RetentionPolicy, dX as RevokeOptions, a$ as Role, dY as RotatePassphraseInput, dZ as RotateRecoveryOptions, d_ as RotateRecoveryResult, d$ as SEALED_PASSPHRASE_RECORD_ID, e0 as SchemaDelta, e1 as SchemaIntrospection, e2 as SchemaManifestRow, S as ScriptWarning, e3 as SealedEnvelope, e4 as SealedPassphrase, bl as SealingKeyProvider, e5 as SequenceHandle, e6 as SequenceOptions, e7 as SequenceStore, e8 as SessionPolicy, e9 as SetPublicEnvelopeInput, ea as ShamirRecoveryDoc, eb as ShamirRecoveryEntry, br as ShamirRecoveryProvider, ec as ShardedCollection, ed as ShardedGroupedQuery, ee as ShardedQuery, ef as ShardingConfig, eg as SkippedVault, a6 as SlotInfo, a7 as SlotRecord, eh as SlotRewrapCeremony, ei as SlotRewrapContext, aI as SnapshotMeta, ej as StandardSchemaV1, ek as StandardSchemaV1Issue, el as StandardSchemaV1SyncResult, em as StateManagementVault, i as StaticDictDescriptor, en as StoreAuth, eo as StoreAuthKind, ep as StoreCapabilities, eq as StoreTime, er as SyncEngine, es as SyncMetadata, et as SyncPolicy, eu as SyncScheduler, ev as SyncSchedulerStatus, ew as SyncStatus, ex as SyncTarget, ey as SyncTargetRole, ez as SyncTransaction, eA as SyncTransactionResult, eB as TabChannel, eC as TabCoordinationOptions, eD as TabLockManager, eE as TabPresence, eF as TabRole, eG as TierMode, eH as TransactionInvariant, eI as TranslatorAuditEntry, eJ as TxCollection, bs as TxContext, eK as TxOp, eL as TxVault, eM as USER_ENVELOPE_COLLECTION, eN as USER_ENVELOPE_MAX_BYTES, by as UnionArmJoin, bz as UnionSource, eO as Unsubscribe, eP as UpdateAuthenticatorOptions, eQ as UpdateContext, eR as UpdateUserOptions, eS as UserApi, eT as UserEnvelopeCheckGate, eU as UserEnvelopeOversizedError, eV as UserEnvelopePresented, eW as UserInfo, eX as VaultBackup, bd as VaultEngine, aD as VaultFrame, eY as VaultGroup, eZ as VaultGroupOptions, be as VaultInstant, e_ as VaultPolicyOnDisk, e$ as VaultRegistryRow, f0 as VaultSchemaSnapshot, f1 as VaultSnapshot, f2 as VaultTemplate, bf as VerifyResult, a8 as VersionRecord, f3 as WarningRules, f4 as WeakPassphraseError, f5 as WeakPassphraseReason, f6 as WithArchiveOptions, f7 as WrappedDeksBlob, f8 as WriteConflict, f9 as WriteEvent, fa as WriteHook, fb as WriteQueue, fc as aesGcmOpen, j as applyI18nLocale, bg as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, bh as computePatch, A as createEnforcer, fg as createNoydb, fh as createStore, fi as deriveMagicLinkContentKey, k as dictCollectionName, l as dictKey, bi as diff, m as enforceScript, fj as enrollAuthenticator, fk as estimateEntropy, fl as evalComputedFields, fm as evaluateExportCapability, fn as evaluateImportCapability, fo as findAuthenticator, bj as formatDiff, fp as hasExportCapability, fq as hasImportCapability, fr as hasRecoveryEnrolled, o as i18nText, p as inferScripts, q as isDictCollectionName, r as isDictKeyDescriptor, s as isI18nTextDescriptor, fs as isMagicLinkGrantExpired, ft as isPublicEnvelope, t as isStaticDictDescriptor, fu as issueDelegation, fv as keyringRecoverPassphrase, fw as keyringRotatePassphrase, fx as listMagicLinkGrants, fy as listUsers, fz as listUsersWithEnvelopes, fA as loadActiveDelegations, fB as loadPaperRecoveryEntries, fC as loadSealedPassphrase, fD as loadShamirRecoveryEntries, fE as magicLinkGrantRecordId, fF as mintPaperRecoveryEntry, fG as mintShamirRecoveryEntry, fH as mintWrappedDeksBlob, fI as parseRsaOaepTlv, fJ as parseSealedEnvelope, fK as readMagicLinkGrantRecord, fL as recoverUser, fM as removeAuthenticator, u as resolveI18nText, v as resolvePolicy, fN as resolvePublicEnvelopeSchema, fO as resolveSequenceKey, fP as revokeDelegation, fQ as revokeMagicLinkGrant, fR as runTransaction, fS as savePaperRecoveryEntries, fT as saveSealedPassphrase, fU as saveShamirRecoveryEntries, fV as sealRsaOaepTlv, x as staticDict, fW as unwrapDeksFromBlob, fX as unwrapDeksFromPaperEntry, fY as unwrapDeksFromShamirEntry, fZ as unwrapMagicLinkGrant, y as validateI18nTextValue, f_ as validatePassphrase, f$ as validatePublicEnvelopeInput, g0 as validateSchemaInput, g1 as validateSchemaOutput, B as validateSessionPolicy, g2 as withArchive, g3 as withDeferredNumbering, g4 as writeMagicLinkGrant } from './types-CljIHm_J.js';
+import { aP as NoydbStore, bl as UserEnvelope, b5 as PublicEnvelope, bm as GateName, bn as GatePolicy, bo as VaultPolicy, bp as ActiveTier, bq as FactorProof, br as SchemaUpdateStrategy, bs as TransformFn, bt as PersistedSchemaEnvelope, bu as UpdateDecision, bv as DirectoryConfig, bw as UserVisibility, aN as UnlockedKeyring, ba as Vault, aW as DiffEntry } from './types-CraiZOyO.js';
+export { bx as AccessibleVault, by as AffectedDocument, aT as AppendInput, bz as ArchivePolicy, bA as ArchiveResult, bB as ArchiveRunOptions, bC as ArchiveStrategy, ax as ArrayOutputSpec, o as BLOB_CHUNKS_COLLECTION, p as BLOB_COLLECTION, r as BLOB_INDEX_COLLECTION, t as BLOB_SLOTS_PREFIX, u as BLOB_VERSIONS_PREFIX, bD as BUNDLE_STORE_POLICY, z as BlobObject, A as BlobPutOptions, C as BlobResponseOptions, E as BlobSet, bE as BuiltInGateName, b7 as BundleRecipient, Z as CONSENT_AUDIT_COLLECTION, bF as CacheOptions, bG as CacheStats, bH as CapturedBlueprint, bI as ChangeEvent, aU as ChangeType, a6 as ClosePeriodOptions, aG as Collection, bJ as CollectionChangeEvent, bK as CollectionConflictResolver, bL as CollectionDescriptor, an as CollectionFrame, aV as CollectionInstant, bM as CollectionStats, bN as ComputedFieldError, bO as ComputedFields, bP as ComputedFn, bQ as Conflict, bR as ConflictPolicy, bS as ConflictStrategy, _ as ConsentAuditEntry, $ as ConsentAuditFilter, a0 as ConsentContext, a1 as ConsentOp, bT as CrossTierAccessEvent, bU as CrossVaultAggregation, bV as CrossVaultDerivationContext, bW as CrossVaultDerivationSpec, bX as CrossVaultGroupedAggregation, bY as CrossVaultGroupedRow, bZ as CrossVaultLiveAggregation, b_ as CrossVaultLiveQuery, K as DEFAULT_CHUNK_SIZE, b$ as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, c0 as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, c1 as DeepPartial, c2 as DeepPartialOrNull, c3 as DeferredNumberingConfig, c4 as DelegationToken, c5 as DeleteManyResult, c6 as DeploymentEvent, c7 as DerivationDescriptor, av as DerivationStrategy, az as DerivationStrategyHandle, aA as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, c8 as DirtyEntry, c9 as DryRunResult, ca as DumpSchemaOptions, cb as ELEVATION_AUDIT_COLLECTION, cc as ElevatedHandle, aR as EncryptedEnvelope, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cg as EnrollRecoveryResult, ch as ExportCapability, ci as ExportChunk, cj as ExportFormat, ck as ExportStreamOptions, cl as FactorKind, cm as FactorProofBundle, cn as FactorRequirement, co as FanoutQueryOptions, cp as FanoutResult, cq as FenceDoc, cr as FenceState, cs as FieldChange, ct as FieldDescriptor, cu as FieldSource, cv as FleetMigrationResult, cw as FormattedSequenceHandle, cx as GhostRecord, cy as GrantOptions, ah as GuardChange, ai as GuardContext, ag as GuardStrategy, ak as GuardStrategyHandle, cz as GuardViolation, cA as HistoryConfig, cB as HistoryEntry, aQ as HistoryOptions, cC as INDEXED_STORE_POLICY, cD as ImportCapability, cE as InferOutput, cF as InternalCollectionStats, cG as IssueDelegationOptions, cH as IssueMagicLinkGrantOptions, aX as JsonPatch, aY as JsonPatchOp, cI as KeyringAuthenticator, cJ as KeyringAuthenticatorWrappingDEKs, cK as KeyringAuthenticatorWrappingKEK, cL as KeyringFile, aZ as LedgerStore, cM as LinkEndpointError, cN as LinkIntegrityError, cO as LinkOnDelete, cP as LinkRow, cQ as LinkSetHandle, cR as LinkSpec, cS as ListAccessibleVaultsOptions, cT as ListPageResult, cU as ListUsersOptions, cV as LiveQueryOptions, cW as LiveUserEnvelope, cX as LocaleReadOptions, cY as Lru, cZ as LruOptions, c_ as LruStats, c$ as MAGIC_LINK_CONTENT_INFO_PREFIX, d0 as MAGIC_LINK_GRANTS_COLLECTION, d1 as MAGIC_LINK_KEK_INFO_PREFIX, d2 as MagicLinkGrantPayload, d3 as MagicLinkGrantRecord, bh as MaterializedFromMeta, d4 as MaterializedViewDescriptor, bi as MaterializedViewOutput, aD as MaterializedViewStrategy, aE as MaterializedViewStrategyHandle, d5 as MemoryRecipientSealer, d6 as MemorySealingKeyProvider, d7 as MigrationStatusRow, d8 as NOYDB_BACKUP_VERSION, d9 as NOYDB_FORMAT_VERSION, da as NOYDB_KEYRING_VERSION, db as NOYDB_SYNC_VERSION, dc as NextOptions, dd as Noydb, ap as NoydbBundleStore, de as NoydbEventMap, df as NoydbOptions, dg as NumberingAssignment, a7 as OpenPeriodOptions, aB as OutputSpec, aH as OverlayFieldMergeMode, aI as OverlayFieldMergeRule, dh as OverlayViewDescriptor, aF as OverlayedViewStrategy, aK as OverlayedViewStrategyHandle, a8 as PERIODS_COLLECTION, di as PUBLIC_ENVELOPE_FIELDS, dj as PaperRecoveryDoc, dk as PaperRecoveryEntry, dl as PassphrasePolicy, dm as PassphraseValidationResult, a9 as PeriodRecord, dn as Permission, dp as Permissions, dq as PersistedSchemaKind, dr as PlaintextTranslatorContext, ds as PlaintextTranslatorFn, P as PolicyEnforcer, dt as PresenceHandle, du as PresencePeer, aS as PruneOptions, dv as PublicEnvelopeField, dw as PublicEnvelopeSchema, dx as PublicEnvelopeText, dy as PullMode, dz as PullOptions, dA as PullPolicy, dB as PullResult, dC as PushMode, dD as PushOptions, dE as PushPolicy, dF as PushResult, dG as PutManyItemOptions, dH as PutManyOptions, dI as PutManyResult, dJ as QueryAcrossOptions, dK as QueryAcrossResult, dL as QuickUnlockState, dM as QuickUnlockStore, dN as ReAuthOperation, b9 as RecipientHint, b8 as RecipientSealer, aC as RecordOutputSpec, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dS as RefreshInsightsResult, dT as ResolvedPublicEnvelopeSchema, aq as RetentionPolicy, dU as RevokeOptions, aM as Role, dV as RotatePassphraseInput, dW as RotateRecoveryOptions, dX as RotateRecoveryResult, dY as SEALED_PASSPHRASE_RECORD_ID, dZ as SchemaDelta, d_ as SchemaIntrospection, d$ as SchemaManifestRow, S as ScriptWarning, e0 as SealedEnvelope, e1 as SealedPassphrase, b6 as SealingKeyProvider, e2 as SearchEntry, e3 as SearchOptions, e4 as SearchResult, e5 as SequenceHandle, e6 as SequenceOptions, e7 as SequenceStore, e8 as SessionPolicy, e9 as SetPublicEnvelopeInput, ea as ShamirRecoveryDoc, eb as ShamirRecoveryEntry, bc as ShamirRecoveryProvider, ec as ShardedCollection, ed as ShardedGroupedQuery, ee as ShardedQuery, ef as ShardingConfig, eg as SkippedVault, T as SlotInfo, U as SlotRecord, eh as SlotRewrapCeremony, ei as SlotRewrapContext, at as SnapshotMeta, ej as StandardSchemaV1, ek as StandardSchemaV1Issue, el as StandardSchemaV1SyncResult, em as StateManagementVault, e as StaticDictDescriptor, en as StoreAuth, eo as StoreAuthKind, ep as StoreCapabilities, eq as StoreTime, er as SyncEngine, es as SyncMetadata, et as SyncPolicy, eu as SyncScheduler, ev as SyncSchedulerStatus, ew as SyncStatus, ex as SyncTarget, ey as SyncTargetRole, ez as SyncTransaction, eA as SyncTransactionResult, eB as TabChannel, eC as TabCoordinationOptions, eD as TabLockManager, eE as TabPresence, eF as TabRole, eG as TierMode, eH as TransactionInvariant, eI as TranslatorAuditEntry, eJ as TxCollection, bd as TxContext, eK as TxOp, eL as TxVault, eM as USER_ENVELOPE_COLLECTION, eN as USER_ENVELOPE_MAX_BYTES, bj as UnionArmJoin, bk as UnionSource, eO as Unsubscribe, eP as UpdateAuthenticatorOptions, eQ as UpdateContext, eR as UpdateUserOptions, eS as UserApi, eT as UserEnvelopeCheckGate, eU as UserEnvelopeOversizedError, eV as UserEnvelopePresented, eW as UserInfo, eX as VaultBackup, a_ as VaultEngine, ao as VaultFrame, eY as VaultGroup, eZ as VaultGroupOptions, a$ as VaultInstant, e_ as VaultPolicyOnDisk, e$ as VaultRegistryRow, f0 as VaultSchemaSnapshot, f1 as VaultSnapshot, f2 as VaultTemplate, b0 as VerifyResult, V as VersionRecord, f3 as WarningRules, f4 as WeakPassphraseError, f5 as WeakPassphraseReason, f6 as WithArchiveOptions, f7 as WrappedDeksBlob, f8 as WriteConflict, f9 as WriteEvent, fa as WriteHook, fb as WriteQueue, fc as aesGcmOpen, b1 as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, fg as compileSequenceFormat, b2 as computePatch, n as createEnforcer, fh as createNoydb, fi as createStore, fj as deriveMagicLinkContentKey, f as dictCollectionName, g as dictKey, b3 as diff, h as enforceScript, fk as enrollAuthenticator, fl as estimateEntropy, fm as evalComputedFields, fn as evaluateExportCapability, fo as evaluateImportCapability, fp as findAuthenticator, b4 as formatDiff, fq as hasExportCapability, fr as hasImportCapability, fs as hasRecoveryEnrolled, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, ft as isLinkCollectionName, fu as isMagicLinkGrantExpired, fv as isPublicEnvelope, l as isStaticDictDescriptor, fw as issueDelegation, fx as keyringRecoverPassphrase, fy as keyringRotatePassphrase, fz as listMagicLinkGrants, fA as listUsers, fB as listUsersWithEnvelopes, fC as loadActiveDelegations, fD as loadPaperRecoveryEntries, fE as loadSealedPassphrase, fF as loadShamirRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fI as mintShamirRecoveryEntry, fJ as mintWrappedDeksBlob, fK as parseRsaOaepTlv, fL as parseSealedEnvelope, fM as readMagicLinkGrantRecord, fN as recoverUser, fO as removeAuthenticator, fP as resolvePublicEnvelopeSchema, fQ as resolveSequenceKey, fR as revokeDelegation, fS as revokeMagicLinkGrant, fT as runTransaction, fU as savePaperRecoveryEntries, fV as saveSealedPassphrase, fW as saveShamirRecoveryEntries, fX as sealRsaOaepTlv, s as staticDict, fY as unwrapDeksFromBlob, fZ as unwrapDeksFromPaperEntry, f_ as unwrapDeksFromShamirEntry, f$ as unwrapMagicLinkGrant, g0 as validatePassphrase, g1 as validatePublicEnvelopeInput, g2 as validateSchemaInput, g3 as validateSchemaOutput, v as validateSessionPolicy, g4 as withArchive, g5 as withDeferredNumbering, g6 as writeMagicLinkGrant } from './types-CraiZOyO.js';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
-import { N as NoydbError } from './errors-Dz64FA65.js';
-export { G as AlreadyElevatedError, A as AmendmentForbiddenError, r as AttestationError, B as BackupCorruptedError, t as BackupLedgerError, u as BundleIntegrityError, v as BundleSealMismatchError, w as BundleVersionConflictError, H as ConflictError, J as CrossJoinSourceUnknownError, K as CrossJoinTooLargeError, Q as DanglingReferenceError, V as DecryptionError, W as DelegationTargetMissingError, h as DerivationCapExceededError, i as DerivationCycleError, j as DerivationDepthError, k as DerivationOutputShapeError, l as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, X as DirectoryDisabledError, Y as ElevationExpiredError, Z as ExportCapabilityError, F as FieldFrozenError, _ as FilenameSanitizationError, $ as ForgetStrategyNotConfiguredError, a0 as GroupCardinalityError, a1 as ImportCapabilityError, a2 as IndexRequiredError, a3 as IndexWriteFailureError, a4 as InvalidKeyError, I as InvariantError, a5 as JoinTooLargeError, a6 as KeyringCorruptError, a7 as KeyringExpiredError, a8 as LedgerContentionError, L as LocaleNotSpecifiedError, y as MaterializedViewConfigError, z as MaterializedViewCycleError, C as MaterializedViewSourceUnknownError, E as MaterializedViewTooLargeError, a9 as MigrationRequiredError, M as MissingTranslationError, aa as NetworkError, ab as NoAccessError, ac as NonAdditiveSchemaChangeError, ad as NotFoundError, ae as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, m as OverlayCollectionUnavailableError, n as OverlayIdMismatchError, o as OverlayNameCollisionError, af as PathEscapeError, ag as PeriodClosedError, ah as PermissionDeniedError, ai as PrivilegeEscalationError, aj as QuiesceTimeoutError, ak as ReadOnlyAtInstantError, al as ReadOnlyError, am as ReadOnlyFrameError, an as RecordCekNotFoundError, f as RecordLockedError, R as ReservedCollectionNameError, ao as ReservedVaultNameError, ap as SchemaFenceError, aq as SchemaLockedError, ar as SchemaUpdateError, as as SchemaValidationError, S as ScriptViolationError, p as SealedRecordExpiredError, q as SealedRecordMismatchError, at as SequenceContentionError, au as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, av as ShardProvisioningError, g as SnapshotNotFoundError, b as StaticDictReadonlyError, aw as StoreCapabilityError, ax as TamperedError, ay as TierDemoteDeniedError, az as TierNotGrantedError, T as TranslatorNotConfiguredError, aA as UniqueConstraintError, U as UnknownDictCodeError, aB as UnknownShardError, aC as UnsupportedIndexOptionError, aD as ValidationError, aE as VaultTemplateNotFoundError } from './errors-Dz64FA65.js';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, r as ref, q as resetJoinWarnings } from './index-DpU6KWof.js';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-CWfL2Vfv.js';
-export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from './index-C-SSRIxP.js';
+import { N as NoydbError } from './errors-DL-zTrrF.js';
+export { H as AlreadyElevatedError, A as AmendmentForbiddenError, s as AttestationError, B as BackupCorruptedError, u as BackupLedgerError, v as BundleIntegrityError, w as BundleSealMismatchError, x as BundleVersionConflictError, J as ConflictError, K as CrossJoinSourceUnknownError, Q as CrossJoinTooLargeError, V as DanglingReferenceError, W as DataResidencyError, X as DecryptionError, Y as DelegationTargetMissingError, i as DerivationCapExceededError, j as DerivationCycleError, k as DerivationDepthError, l as DerivationOutputShapeError, m as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, Z as DirectoryDisabledError, _ as ElevationExpiredError, $ as ExportCapabilityError, F as FieldFrozenError, a0 as FilenameSanitizationError, a1 as ForgetStrategyNotConfiguredError, a2 as GroupCardinalityError, I as IllegalTransitionError, a3 as ImportCapabilityError, a4 as IndexRequiredError, a5 as IndexWriteFailureError, a6 as InvalidKeyError, f as InvariantError, a7 as JoinTooLargeError, a8 as KeyringCorruptError, a9 as KeyringExpiredError, aa as LedgerContentionError, L as LocaleNotSpecifiedError, z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError, ab as MigrationRequiredError, M as MissingTranslationError, ac as NetworkError, ad as NoAccessError, ae as NonAdditiveSchemaChangeError, af as NotFoundError, ag as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, n as OverlayCollectionUnavailableError, o as OverlayIdMismatchError, p as OverlayNameCollisionError, ah as PathEscapeError, ai as PeriodClosedError, aj as PermissionDeniedError, ak as PrivilegeEscalationError, al as QuiesceTimeoutError, am as ReadOnlyAtInstantError, an as ReadOnlyError, ao as ReadOnlyFrameError, ap as RecordCekNotFoundError, g as RecordLockedError, R as ReservedCollectionNameError, aq as ReservedVaultNameError, ar as SchemaFenceError, as as SchemaLockedError, at as SchemaUpdateError, au as SchemaValidationError, S as ScriptViolationError, q as SealedRecordExpiredError, r as SealedRecordMismatchError, av as SequenceContentionError, aw as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, ax as ShardProvisioningError, h as SnapshotNotFoundError, b as StaticDictReadonlyError, ay as StoreCapabilityError, az as TamperedError, aA as TierDemoteDeniedError, aB as TierNotGrantedError, T as TranslatorNotConfiguredError, aC as UniqueConstraintError, U as UnknownDictCodeError, aD as UnknownShardError, aE as UnsupportedIndexOptionError, aF as ValidationError, aG as VaultTemplateNotFoundError } from './errors-DL-zTrrF.js';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, q as isRefArray, r as ref, s as refArray, t as resetJoinWarnings } from './index-BelbyUwz.js';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-FFRRHkVf.js';
+export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from './index-BMmajblo.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
 export { TransactionStrategyOptions } from './tx/index.js';
-export { I as ImmutableGuardConfig, i as immutableGuard, w as withGuard } from './immutable-guard-B5M95nbq.js';
-export { w as withDerivation } from './with-derivation-BZ2y4bzF.js';
-export { w as withMaterializedView } from './with-materialized-view-B892zYZV.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C__YeF3_.js';
+import { K as RoundingMode } from './strategy-BDxQnnTX.js';
+export { h as AggregateResult, j as AggregateSpec, k as Aggregation, l as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, m as GROUPBY_WARN_CARDINALITY, n as GroupedAggregation, o as GroupedQuery, p as GroupedQueryN, q as GroupedRow, t as GroupedRowN, I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, u as LiveAggregation, M as MoneyCurrencyError, N as MoneyDescriptor, P as MoneyOptions, Q as MoneyOptionsFixed, S as MoneyOptionsMulti, T as MoneyPrecisionError, U as MoneyUnsupportedError, O as OnMissing, c as OnMissingPolicy, w as Reducer, x as ReducerOptions, R as ResolveI18nOptions, d as applyI18nLocale, y as avg, B as count, C as groupAndReduce, i as i18nText, e as isI18nTextDescriptor, V as isMoneyDescriptor, D as max, E as min, W as money, F as reduceRecords, r as resolveI18nText, f as resolvePolicy, J as sum, v as validateI18nTextValue } from './strategy-BDxQnnTX.js';
+export { w as withDerivation, a as withRollup } from './with-rollup-_TyBzz3T.js';
+export { w as withMaterializedView } from './with-materialized-view-CguCeVcT.js';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-BmhBSPCH.js';
-export { w as withOverlayedView } from './with-overlayed-view-CR6m7CHe.js';
-import { u as RoundingMode } from './strategy-4M9jo172.js';
-export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, M as MoneyCurrencyError, v as MoneyDescriptor, w as MoneyOptions, x as MoneyOptionsFixed, y as MoneyOptionsMulti, z as MoneyPrecisionError, B as MoneyUnsupportedError, R as Reducer, k as ReducerOptions, l as avg, n as count, o as groupAndReduce, C as isMoneyDescriptor, p as max, q as min, D as money, r as reduceRecords, t as sum } from './strategy-4M9jo172.js';
+export { w as withOverlayedView } from './with-overlayed-view-DO08u_tx.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-CI1ijTML.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-whL49sxV.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-blk7Bkes.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-Dtb7FwWd.js';
 import './lazy-builder-ChSqcF5t.js';
 import '@noy-db/attestation';
 
@@ -77,6 +77,19 @@ declare function deleteUserEnvelope(store: NoydbStore, vault: string, keyringId:
  */
 declare function listUserEnvelopeIds(store: NoydbStore, vault: string): Promise<string[]>;
 
+/**
+ * Default text tokenizer for scan-mode search (#308).
+ *
+ * NFKC-normalize → lowercase → split on Unicode letter/number runs. This is a
+ * word-boundary tokenizer: it does **not** segment scripts written without
+ * inter-word spaces (Thai, Lao, Khmer, CJK) — those collapse to one token per
+ * run. For such data, a dictionary/ICU segmenter is the right `tokenizer`
+ * (the engine takes one as a parameter); substring/`contains` matching is the
+ * pragmatic fallback until then. See the #308 design note.
+ */
+type Tokenizer = (text: string) => string[];
+declare const tokenize: Tokenizer;
+
 /**
  * Cache policy helpers — parse human-friendly byte budgets into raw numbers.
  *
@@ -950,4 +963,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
 
-export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, visibilityRecordId };
+export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, type Tokenizer, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId };