npm - @noy-db/hub - Versions diffs - 0.2.0-pre.19 → 0.2.0-pre.20 - Mend

@noy-db/hub 0.2.0-pre.19 → 0.2.0-pre.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (272) hide show

package/dist/index.d.cts CHANGED Viewed

@@ -1,25 +1,25 @@
-import { aP as NoydbStore, bl as UserEnvelope, b5 as PublicEnvelope, bm as GateName, bn as GatePolicy, bo as VaultPolicy, bp as ActiveTier, bq as FactorProof, br as SchemaUpdateStrategy, bs as TransformFn, bt as PersistedSchemaEnvelope, bu as UpdateDecision, bv as DirectoryConfig, bw as UserVisibility, aN as UnlockedKeyring, ba as Vault, aW as DiffEntry } from './types-D-gr5t0G.cjs';
-export { bx as AccessibleVault, by as AffectedDocument, aT as AppendInput, bz as ArchivePolicy, bA as ArchiveResult, bB as ArchiveRunOptions, bC as ArchiveStrategy, ax as ArrayOutputSpec, o as BLOB_CHUNKS_COLLECTION, p as BLOB_COLLECTION, r as BLOB_INDEX_COLLECTION, t as BLOB_SLOTS_PREFIX, u as BLOB_VERSIONS_PREFIX, bD as BUNDLE_STORE_POLICY, z as BlobObject, A as BlobPutOptions, C as BlobResponseOptions, E as BlobSet, bE as BuiltInGateName, b7 as BundleRecipient, Z as CONSENT_AUDIT_COLLECTION, bF as CacheOptions, bG as CacheStats, bH as CapturedBlueprint, bI as ChangeEvent, aU as ChangeType, a6 as ClosePeriodOptions, aG as Collection, bJ as CollectionChangeEvent, bK as CollectionConflictResolver, bL as CollectionDescriptor, an as CollectionFrame, aV as CollectionInstant, bM as CollectionStats, bN as ComputedFieldError, bO as ComputedFields, bP as ComputedFn, bQ as Conflict, bR as ConflictPolicy, bS as ConflictStrategy, _ as ConsentAuditEntry, $ as ConsentAuditFilter, a0 as ConsentContext, a1 as ConsentOp, bT as CrossTierAccessEvent, bU as CrossVaultAggregation, bV as CrossVaultDerivationContext, bW as CrossVaultDerivationSpec, bX as CrossVaultGroupedAggregation, bY as CrossVaultGroupedRow, bZ as CrossVaultLiveAggregation, b_ as CrossVaultLiveQuery, K as DEFAULT_CHUNK_SIZE, b$ as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, c0 as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, c1 as DeepPartial, c2 as DeepPartialOrNull, c3 as DeferredNumberingConfig, c4 as DelegationToken, c5 as DeleteManyResult, c6 as DeploymentEvent, c7 as DerivationDescriptor, av as DerivationStrategy, az as DerivationStrategyHandle, aA as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, c8 as DirtyEntry, c9 as DryRunResult, ca as DumpSchemaOptions, cb as ELEVATION_AUDIT_COLLECTION, cc as ElevatedHandle, aR as EncryptedEnvelope, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cg as EnrollRecoveryResult, ch as ExportCapability, ci as ExportChunk, cj as ExportFormat, ck as ExportStreamOptions, cl as FactorKind, cm as FactorProofBundle, cn as FactorRequirement, co as FanoutQueryOptions, cp as FanoutResult, cq as FenceDoc, cr as FenceState, cs as FieldChange, ct as FieldDescriptor, cu as FieldSource, cv as FleetMigrationResult, cw as FormattedSequenceHandle, cx as GhostRecord, cy as GrantOptions, ah as GuardChange, ai as GuardContext, ag as GuardStrategy, ak as GuardStrategyHandle, cz as GuardViolation, cA as HistoryConfig, cB as HistoryEntry, aQ as HistoryOptions, cC as INDEXED_STORE_POLICY, cD as ImportCapability, cE as InferOutput, cF as InternalCollectionStats, cG as IssueDelegationOptions, cH as IssueMagicLinkGrantOptions, aX as JsonPatch, aY as JsonPatchOp, cI as KeyringAuthenticator, cJ as KeyringAuthenticatorWrappingDEKs, cK as KeyringAuthenticatorWrappingKEK, cL as KeyringFile, aZ as LedgerStore, cM as LinkEndpointError, cN as LinkIntegrityError, cO as LinkOnDelete, cP as LinkRow, cQ as LinkSetHandle, cR as LinkSpec, cS as ListAccessibleVaultsOptions, cT as ListPageResult, cU as ListUsersOptions, cV as LiveQueryOptions, cW as LiveUserEnvelope, cX as LocaleReadOptions, cY as Lru, cZ as LruOptions, c_ as LruStats, c$ as MAGIC_LINK_CONTENT_INFO_PREFIX, d0 as MAGIC_LINK_GRANTS_COLLECTION, d1 as MAGIC_LINK_KEK_INFO_PREFIX, d2 as MagicLinkGrantPayload, d3 as MagicLinkGrantRecord, bh as MaterializedFromMeta, d4 as MaterializedViewDescriptor, bi as MaterializedViewOutput, aD as MaterializedViewStrategy, aE as MaterializedViewStrategyHandle, d5 as MemoryRecipientSealer, d6 as MemorySealingKeyProvider, d7 as MigrationStatusRow, d8 as NOYDB_BACKUP_VERSION, d9 as NOYDB_FORMAT_VERSION, da as NOYDB_KEYRING_VERSION, db as NOYDB_SYNC_VERSION, dc as NextOptions, dd as Noydb, ap as NoydbBundleStore, de as NoydbEventMap, df as NoydbOptions, dg as NumberingAssignment, a7 as OpenPeriodOptions, aB as OutputSpec, aH as OverlayFieldMergeMode, aI as OverlayFieldMergeRule, dh as OverlayViewDescriptor, aF as OverlayedViewStrategy, aK as OverlayedViewStrategyHandle, a8 as PERIODS_COLLECTION, di as PUBLIC_ENVELOPE_FIELDS, dj as PaperRecoveryDoc, dk as PaperRecoveryEntry, dl as PassphrasePolicy, dm as PassphraseValidationResult, a9 as PeriodRecord, dn as Permission, dp as Permissions, dq as PersistedSchemaKind, dr as PlaintextTranslatorContext, ds as PlaintextTranslatorFn, P as PolicyEnforcer, dt as PresenceHandle, du as PresencePeer, aS as PruneOptions, dv as PublicEnvelopeField, dw as PublicEnvelopeSchema, dx as PublicEnvelopeText, dy as PullMode, dz as PullOptions, dA as PullPolicy, dB as PullResult, dC as PushMode, dD as PushOptions, dE as PushPolicy, dF as PushResult, dG as PutManyItemOptions, dH as PutManyOptions, dI as PutManyResult, dJ as QueryAcrossOptions, dK as QueryAcrossResult, dL as QuickUnlockState, dM as QuickUnlockStore, dN as ReAuthOperation, b9 as RecipientHint, b8 as RecipientSealer, aC as RecordOutputSpec, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dS as RefreshInsightsResult, dT as ResolvedPublicEnvelopeSchema, aq as RetentionPolicy, dU as RevokeOptions, aM as Role, dV as RotatePassphraseInput, dW as RotateRecoveryOptions, dX as RotateRecoveryResult, dY as SEALED_PASSPHRASE_RECORD_ID, dZ as SchemaDelta, d_ as SchemaIntrospection, d$ as SchemaManifestRow, S as ScriptWarning, e0 as SealedEnvelope, e1 as SealedPassphrase, b6 as SealingKeyProvider, e2 as SearchEntry, e3 as SearchOptions, e4 as SearchResult, e5 as SequenceHandle, e6 as SequenceOptions, e7 as SequenceStore, e8 as SessionPolicy, e9 as SetPublicEnvelopeInput, ea as ShamirRecoveryDoc, eb as ShamirRecoveryEntry, bc as ShamirRecoveryProvider, ec as ShardedCollection, ed as ShardedGroupedQuery, ee as ShardedQuery, ef as ShardingConfig, eg as SkippedVault, T as SlotInfo, U as SlotRecord, eh as SlotRewrapCeremony, ei as SlotRewrapContext, at as SnapshotMeta, ej as StandardSchemaV1, ek as StandardSchemaV1Issue, el as StandardSchemaV1SyncResult, em as StateManagementVault, e as StaticDictDescriptor, en as StoreAuth, eo as StoreAuthKind, ep as StoreCapabilities, eq as StoreTime, er as SyncEngine, es as SyncMetadata, et as SyncPolicy, eu as SyncScheduler, ev as SyncSchedulerStatus, ew as SyncStatus, ex as SyncTarget, ey as SyncTargetRole, ez as SyncTransaction, eA as SyncTransactionResult, eB as TabChannel, eC as TabCoordinationOptions, eD as TabLockManager, eE as TabPresence, eF as TabRole, eG as TierMode, eH as TransactionInvariant, eI as TranslatorAuditEntry, eJ as TxCollection, bd as TxContext, eK as TxOp, eL as TxVault, eM as USER_ENVELOPE_COLLECTION, eN as USER_ENVELOPE_MAX_BYTES, bj as UnionArmJoin, bk as UnionSource, eO as Unsubscribe, eP as UpdateAuthenticatorOptions, eQ as UpdateContext, eR as UpdateUserOptions, eS as UserApi, eT as UserEnvelopeCheckGate, eU as UserEnvelopeOversizedError, eV as UserEnvelopePresented, eW as UserInfo, eX as VaultBackup, a_ as VaultEngine, ao as VaultFrame, eY as VaultGroup, eZ as VaultGroupOptions, a$ as VaultInstant, e_ as VaultPolicyOnDisk, e$ as VaultRegistryRow, f0 as VaultSchemaSnapshot, f1 as VaultSnapshot, f2 as VaultTemplate, b0 as VerifyResult, V as VersionRecord, f3 as WarningRules, f4 as WeakPassphraseError, f5 as WeakPassphraseReason, f6 as WithArchiveOptions, f7 as WrappedDeksBlob, f8 as WriteConflict, f9 as WriteEvent, fa as WriteHook, fb as WriteQueue, fc as aesGcmOpen, b1 as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, fg as compileSequenceFormat, b2 as computePatch, n as createEnforcer, fh as createNoydb, fi as createStore, fj as deriveMagicLinkContentKey, f as dictCollectionName, g as dictKey, b3 as diff, h as enforceScript, fk as enrollAuthenticator, fl as estimateEntropy, fm as evalComputedFields, fn as evaluateExportCapability, fo as evaluateImportCapability, fp as findAuthenticator, b4 as formatDiff, fq as hasExportCapability, fr as hasImportCapability, fs as hasRecoveryEnrolled, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, ft as isLinkCollectionName, fu as isMagicLinkGrantExpired, fv as isPublicEnvelope, l as isStaticDictDescriptor, fw as issueDelegation, fx as keyringRecoverPassphrase, fy as keyringRotatePassphrase, fz as listMagicLinkGrants, fA as listUsers, fB as listUsersWithEnvelopes, fC as loadActiveDelegations, fD as loadPaperRecoveryEntries, fE as loadSealedPassphrase, fF as loadShamirRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fI as mintShamirRecoveryEntry, fJ as mintWrappedDeksBlob, fK as parseRsaOaepTlv, fL as parseSealedEnvelope, fM as readMagicLinkGrantRecord, fN as recoverUser, fO as removeAuthenticator, fP as resolvePublicEnvelopeSchema, fQ as resolveSequenceKey, fR as revokeDelegation, fS as revokeMagicLinkGrant, fT as runTransaction, fU as savePaperRecoveryEntries, fV as saveSealedPassphrase, fW as saveShamirRecoveryEntries, fX as sealRsaOaepTlv, s as staticDict, fY as unwrapDeksFromBlob, fZ as unwrapDeksFromPaperEntry, f_ as unwrapDeksFromShamirEntry, f$ as unwrapMagicLinkGrant, g0 as validatePassphrase, g1 as validatePublicEnvelopeInput, g2 as validateSchemaInput, g3 as validateSchemaOutput, v as validateSessionPolicy, g4 as withArchive, g5 as withDeferredNumbering, g6 as writeMagicLinkGrant } from './types-D-gr5t0G.cjs';
-export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
+import { aW as NoydbStore, bs as UserEnvelope, bc as PublicEnvelope, bt as GateName, bu as GatePolicy, bv as VaultPolicy, bw as ActiveTier, bx as FactorProof, aY as EncryptedEnvelope, by as SchemaUpdateStrategy, bz as TransformFn, bA as PersistedSchemaEnvelope, bB as UpdateDecision, bC as DirectoryConfig, bD as UserVisibility, aU as UnlockedKeyring, bh as Vault, b1 as DiffEntry } from './types-DyOI6XZ_.cjs';
+export { bE as AccessibleVault, bF as AffectedDocument, a_ as AppendInput, bG as ArchivePolicy, bH as ArchiveResult, bI as ArchiveRunOptions, bJ as ArchiveStrategy, aE as ArrayOutputSpec, o as BLOB_CHUNKS_COLLECTION, p as BLOB_COLLECTION, r as BLOB_INDEX_COLLECTION, t as BLOB_SLOTS_PREFIX, u as BLOB_VERSIONS_PREFIX, bK as BUNDLE_STORE_POLICY, z as BlobObject, A as BlobPutOptions, C as BlobResponseOptions, E as BlobSet, bL as BuiltInGateName, be as BundleRecipient, a4 as CONSENT_AUDIT_COLLECTION, bM as CacheOptions, bN as CacheStats, bO as CapturedBlueprint, bP as ChangeEvent, a$ as ChangeType, ad as ClosePeriodOptions, aN as Collection, bQ as CollectionChangeEvent, bR as CollectionConflictResolver, bS as CollectionDescriptor, au as CollectionFrame, b0 as CollectionInstant, bT as CollectionStats, bU as ComputedFieldError, bV as ComputedFields, bW as ComputedFn, bX as Conflict, bY as ConflictPolicy, bZ as ConflictStrategy, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, b_ as CrossTierAccessEvent, b$ as CrossVaultAggregation, c0 as CrossVaultDerivationContext, c1 as CrossVaultDerivationSpec, c2 as CrossVaultGroupedAggregation, c3 as CrossVaultGroupedRow, c4 as CrossVaultLiveAggregation, c5 as CrossVaultLiveQuery, K as DEFAULT_CHUNK_SIZE, c6 as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, c7 as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, c8 as DeepPartial, c9 as DeepPartialOrNull, ca as DeferredNumberingConfig, cb as DelegationToken, cc as DeleteManyResult, cd as DeploymentEvent, ce as DerivationDescriptor, aC as DerivationStrategy, aG as DerivationStrategyHandle, aH as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cf as DirtyEntry, cg as DryRunResult, ch as DumpSchemaOptions, ci as ELEVATION_AUDIT_COLLECTION, cj as ElevatedHandle, ck as EnrollAuthenticatorOptions, cl as EnrollAuthenticatorWrappingDEKsOptions, cm as EnrollAuthenticatorWrappingKEKOptions, cn as EnrollRecoveryResult, co as ExportCapability, cp as ExportChunk, cq as ExportFormat, cr as ExportStreamOptions, cs as FactorKind, ct as FactorProofBundle, cu as FactorRequirement, cv as FanoutQueryOptions, cw as FanoutResult, cx as FenceDoc, cy as FenceState, cz as FieldChange, cA as FieldDescriptor, cB as FieldSource, cC as FleetMigrationResult, cD as FormattedSequenceHandle, cE as GhostRecord, cF as GrantOptions, ao as GuardChange, ap as GuardContext, an as GuardStrategy, ar as GuardStrategyHandle, cG as GuardViolation, cH as HistoryConfig, cI as HistoryEntry, aX as HistoryOptions, cJ as INDEXED_STORE_POLICY, cK as ImportCapability, cL as InferOutput, cM as InternalCollectionStats, cN as IssueDelegationOptions, cO as IssueMagicLinkGrantOptions, b2 as JsonPatch, b3 as JsonPatchOp, cP as KeyringAuthenticator, cQ as KeyringAuthenticatorWrappingDEKs, cR as KeyringAuthenticatorWrappingKEK, cS as KeyringFile, b4 as LedgerStore, cT as LinkEndpointError, cU as LinkIntegrityError, cV as LinkOnDelete, cW as LinkRow, cX as LinkSetHandle, cY as LinkSpec, cZ as ListAccessibleVaultsOptions, c_ as ListPageResult, c$ as ListUsersOptions, d0 as LiveQueryOptions, d1 as LiveUserEnvelope, d2 as LocaleReadOptions, d3 as Lru, d4 as LruOptions, d5 as LruStats, d6 as MAGIC_LINK_CONTENT_INFO_PREFIX, d7 as MAGIC_LINK_GRANTS_COLLECTION, d8 as MAGIC_LINK_KEK_INFO_PREFIX, d9 as MagicLinkGrantPayload, da as MagicLinkGrantRecord, bo as MaterializedFromMeta, db as MaterializedViewDescriptor, bp as MaterializedViewOutput, aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle, dc as MemoryRecipientSealer, dd as MemorySealingKeyProvider, de as MigrationStatusRow, df as NOYDB_BACKUP_VERSION, dg as NOYDB_FORMAT_VERSION, dh as NOYDB_KEYRING_VERSION, di as NOYDB_SYNC_VERSION, dj as NextOptions, dk as Noydb, aw as NoydbBundleStore, dl as NoydbEventMap, dm as NoydbOptions, dn as NumberingAssignment, T as ObjectListEntry, U as ObjectMeta, V as ObjectProjection, W as ObjectUrlOptions, ae as OpenPeriodOptions, aI as OutputSpec, aO as OverlayFieldMergeMode, aP as OverlayFieldMergeRule, dp as OverlayViewDescriptor, aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle, af as PERIODS_COLLECTION, dq as PUBLIC_ENVELOPE_FIELDS, dr as PaperRecoveryDoc, ds as PaperRecoveryEntry, dt as PassphrasePolicy, du as PassphraseValidationResult, ag as PeriodRecord, dv as Permission, dw as Permissions, dx as PersistedSchemaKind, dy as PlaintextTranslatorContext, dz as PlaintextTranslatorFn, P as PolicyEnforcer, dA as PresenceHandle, dB as PresencePeer, aZ as PruneOptions, dC as PublicEnvelopeField, dD as PublicEnvelopeSchema, dE as PublicEnvelopeText, dF as PullMode, dG as PullOptions, dH as PullPolicy, dI as PullResult, dJ as PushMode, dK as PushOptions, dL as PushPolicy, dM as PushResult, dN as PutManyItemOptions, dO as PutManyOptions, dP as PutManyResult, X as PutObjectOptions, Y as PutUrlOptions, dQ as QueryAcrossOptions, dR as QueryAcrossResult, dS as QuickUnlockState, dT as QuickUnlockStore, dU as ReAuthOperation, bg as RecipientHint, bf as RecipientSealer, aJ as RecordOutputSpec, dV as RecoverPassphraseInput, dW as RecoverPassphraseResult, dX as RecoverUserOptions, dY as RecoveryProof, dZ as RefreshInsightsResult, d_ as ResolvedPublicEnvelopeSchema, ax as RetentionPolicy, d$ as RevokeOptions, aT as Role, e0 as RotatePassphraseInput, e1 as RotateRecoveryOptions, e2 as RotateRecoveryResult, e3 as SEALED_PASSPHRASE_RECORD_ID, e4 as SchemaDelta, e5 as SchemaIntrospection, e6 as SchemaManifestRow, S as ScriptWarning, e7 as SealedEnvelope, e8 as SealedPassphrase, bd as SealingKeyProvider, e9 as SearchEntry, ea as SearchOptions, eb as SearchResult, ec as SequenceHandle, ed as SequenceOptions, ee as SequenceStore, ef as SessionPolicy, eg as SetPublicEnvelopeInput, eh as ShamirRecoveryDoc, ei as ShamirRecoveryEntry, bj as ShamirRecoveryProvider, ej as ShardedCollection, ek as ShardedGroupedQuery, el as ShardedQuery, em as ShardingConfig, en as SkippedVault, Z as SlotInfo, _ as SlotRecord, eo as SlotRewrapCeremony, ep as SlotRewrapContext, aA as SnapshotMeta, eq as StandardSchemaV1, er as StandardSchemaV1Issue, es as StandardSchemaV1SyncResult, et as StateManagementVault, e as StaticDictDescriptor, eu as StoreAuth, ev as StoreAuthKind, ew as StoreCapabilities, ex as StoreTime, ey as SyncEngine, ez as SyncMetadata, eA as SyncPolicy, eB as SyncScheduler, eC as SyncSchedulerStatus, eD as SyncStatus, eE as SyncTarget, eF as SyncTargetRole, eG as SyncTransaction, eH as SyncTransactionResult, eI as TabChannel, eJ as TabCoordinationOptions, eK as TabLockManager, eL as TabPresence, eM as TabRole, eN as TierMode, eO as TransactionInvariant, eP as TranslatorAuditEntry, eQ as TxCollection, bk as TxContext, eR as TxOp, eS as TxVault, eT as USER_ENVELOPE_COLLECTION, eU as USER_ENVELOPE_MAX_BYTES, bq as UnionArmJoin, br as UnionSource, eV as Unsubscribe, eW as UpdateAuthenticatorOptions, eX as UpdateContext, eY as UpdateUserOptions, eZ as UserApi, e_ as UserEnvelopeCheckGate, e$ as UserEnvelopeOversizedError, f0 as UserEnvelopePresented, f1 as UserInfo, f2 as VaultBackup, b5 as VaultEngine, av as VaultFrame, f3 as VaultGroup, f4 as VaultGroupOptions, b6 as VaultInstant, f5 as VaultPolicyOnDisk, f6 as VaultRegistryRow, f7 as VaultSchemaSnapshot, f8 as VaultSnapshot, f9 as VaultTemplate, b7 as VerifyResult, $ as VersionRecord, fa as WarningRules, fb as WeakPassphraseError, fc as WeakPassphraseReason, fd as WithArchiveOptions, fe as WrappedDeksBlob, ff as WriteConflict, fg as WriteEvent, fh as WriteHook, fi as WriteQueue, fj as aesGcmOpen, b8 as applyPatch, fk as assertStrongPassphrase, fl as buildRecipientKeyringFile, fm as burnPaperRecoveryEntry, fn as compileSequenceFormat, b9 as computePatch, n as createEnforcer, fo as createNoydb, fp as createStore, fq as deriveMagicLinkContentKey, f as dictCollectionName, g as dictKey, ba as diff, h as enforceScript, fr as enrollAuthenticator, fs as estimateEntropy, ft as evalComputedFields, fu as evaluateExportCapability, fv as evaluateImportCapability, fw as findAuthenticator, bb as formatDiff, fx as hasExportCapability, fy as hasImportCapability, fz as hasRecoveryEnrolled, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, fA as isLinkCollectionName, fB as isMagicLinkGrantExpired, fC as isPublicEnvelope, l as isStaticDictDescriptor, fD as issueDelegation, fE as keyringRecoverPassphrase, fF as keyringRotatePassphrase, fG as listMagicLinkGrants, fH as listUsers, fI as listUsersWithEnvelopes, fJ as loadActiveDelegations, fK as loadPaperRecoveryEntries, fL as loadSealedPassphrase, fM as loadShamirRecoveryEntries, fN as magicLinkGrantRecordId, a1 as memoryObjectProjection, fO as mintPaperRecoveryEntry, fP as mintShamirRecoveryEntry, fQ as mintWrappedDeksBlob, fR as parseRsaOaepTlv, fS as parseSealedEnvelope, fT as readMagicLinkGrantRecord, fU as recoverUser, fV as removeAuthenticator, fW as resolvePublicEnvelopeSchema, fX as resolveSequenceKey, fY as revokeDelegation, fZ as revokeMagicLinkGrant, f_ as runTransaction, f$ as savePaperRecoveryEntries, g0 as saveSealedPassphrase, g1 as saveShamirRecoveryEntries, g2 as sealRsaOaepTlv, s as staticDict, g3 as unwrapDeksFromBlob, g4 as unwrapDeksFromPaperEntry, g5 as unwrapDeksFromShamirEntry, g6 as unwrapMagicLinkGrant, g7 as validatePassphrase, g8 as validatePublicEnvelopeInput, g9 as validateSchemaInput, ga as validateSchemaOutput, v as validateSessionPolicy, gb as withArchive, gc as withDeferredNumbering, gd as writeMagicLinkGrant } from './types-DyOI6XZ_.cjs';
+export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-BnJCGJzB.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
-import { N as NoydbError } from './errors-DL-zTrrF.cjs';
-export { H as AlreadyElevatedError, A as AmendmentForbiddenError, s as AttestationError, B as BackupCorruptedError, u as BackupLedgerError, v as BundleIntegrityError, w as BundleSealMismatchError, x as BundleVersionConflictError, J as ConflictError, K as CrossJoinSourceUnknownError, Q as CrossJoinTooLargeError, V as DanglingReferenceError, W as DataResidencyError, X as DecryptionError, Y as DelegationTargetMissingError, i as DerivationCapExceededError, j as DerivationCycleError, k as DerivationDepthError, l as DerivationOutputShapeError, m as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, Z as DirectoryDisabledError, _ as ElevationExpiredError, $ as ExportCapabilityError, F as FieldFrozenError, a0 as FilenameSanitizationError, a1 as ForgetStrategyNotConfiguredError, a2 as GroupCardinalityError, I as IllegalTransitionError, a3 as ImportCapabilityError, a4 as IndexRequiredError, a5 as IndexWriteFailureError, a6 as InvalidKeyError, f as InvariantError, a7 as JoinTooLargeError, a8 as KeyringCorruptError, a9 as KeyringExpiredError, aa as LedgerContentionError, L as LocaleNotSpecifiedError, z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError, ab as MigrationRequiredError, M as MissingTranslationError, ac as NetworkError, ad as NoAccessError, ae as NonAdditiveSchemaChangeError, af as NotFoundError, ag as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, n as OverlayCollectionUnavailableError, o as OverlayIdMismatchError, p as OverlayNameCollisionError, ah as PathEscapeError, ai as PeriodClosedError, aj as PermissionDeniedError, ak as PrivilegeEscalationError, al as QuiesceTimeoutError, am as ReadOnlyAtInstantError, an as ReadOnlyError, ao as ReadOnlyFrameError, ap as RecordCekNotFoundError, g as RecordLockedError, R as ReservedCollectionNameError, aq as ReservedVaultNameError, ar as SchemaFenceError, as as SchemaLockedError, at as SchemaUpdateError, au as SchemaValidationError, S as ScriptViolationError, q as SealedRecordExpiredError, r as SealedRecordMismatchError, av as SequenceContentionError, aw as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, ax as ShardProvisioningError, h as SnapshotNotFoundError, b as StaticDictReadonlyError, ay as StoreCapabilityError, az as TamperedError, aA as TierDemoteDeniedError, aB as TierNotGrantedError, T as TranslatorNotConfiguredError, aC as UniqueConstraintError, U as UnknownDictCodeError, aD as UnknownShardError, aE as UnsupportedIndexOptionError, aF as ValidationError, aG as VaultTemplateNotFoundError } from './errors-DL-zTrrF.cjs';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, q as isRefArray, r as ref, s as refArray, t as resetJoinWarnings } from './index-BM7O48Ur.cjs';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-DQnSAP5W.cjs';
+import { N as NoydbError } from './errors-Dkc_fi-S.cjs';
+export { H as AlreadyElevatedError, A as AmendmentForbiddenError, s as AttestationError, B as BackupCorruptedError, u as BackupLedgerError, v as BundleIntegrityError, w as BundleSealMismatchError, x as BundleVersionConflictError, J as ConflictError, K as CrossJoinSourceUnknownError, Q as CrossJoinTooLargeError, V as DanglingReferenceError, W as DataResidencyError, X as DebugPlaintextError, Y as DebugReservedFieldError, Z as DecryptionError, _ as DelegationTargetMissingError, i as DerivationCapExceededError, j as DerivationCycleError, k as DerivationDepthError, l as DerivationOutputShapeError, m as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, $ as DirectoryDisabledError, a0 as ElevationExpiredError, a1 as ExportCapabilityError, F as FieldFrozenError, a2 as FilenameSanitizationError, a3 as ForgetStrategyNotConfiguredError, a4 as GroupCardinalityError, I as IllegalTransitionError, a5 as ImportCapabilityError, a6 as IndexRequiredError, a7 as IndexWriteFailureError, a8 as InvalidKeyError, f as InvariantError, a9 as JoinTooLargeError, aa as KeyringCorruptError, ab as KeyringExpiredError, ac as LedgerContentionError, L as LocaleNotSpecifiedError, z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError, ad as MigrationRequiredError, M as MissingTranslationError, ae as NetworkError, af as NoAccessError, ag as NonAdditiveSchemaChangeError, ah as NotFoundError, ai as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, n as OverlayCollectionUnavailableError, o as OverlayIdMismatchError, p as OverlayNameCollisionError, aj as PathEscapeError, ak as PeriodClosedError, al as PermissionDeniedError, am as PrivilegeEscalationError, an as QuiesceTimeoutError, ao as ReadOnlyAtInstantError, ap as ReadOnlyError, aq as ReadOnlyFrameError, ar as RecordCekNotFoundError, g as RecordLockedError, R as ReservedCollectionNameError, as as ReservedVaultNameError, at as SchemaFenceError, au as SchemaLockedError, av as SchemaUpdateError, aw as SchemaValidationError, S as ScriptViolationError, q as SealedRecordExpiredError, r as SealedRecordMismatchError, ax as SequenceContentionError, ay as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, az as ShardProvisioningError, h as SnapshotNotFoundError, b as StaticDictReadonlyError, aA as StoreCapabilityError, aB as TamperedError, aC as TierDemoteDeniedError, aD as TierNotGrantedError, T as TranslatorNotConfiguredError, aE as UniqueConstraintError, U as UnknownDictCodeError, aF as UnknownShardError, aG as UnsupportedIndexOptionError, aH as ValidationError, aI as VaultTemplateNotFoundError } from './errors-Dkc_fi-S.cjs';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, q as isRefArray, r as ref, s as refArray, t as resetJoinWarnings } from './index-tZqVB9g5.cjs';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-LaxfH2tK.cjs';
 export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from './index-BMmajblo.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
 export { TransactionStrategyOptions } from './tx/index.cjs';
-export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-B1N82hMf.cjs';
-import { K as RoundingMode } from './strategy-C5ol6NdV.cjs';
-export { h as AggregateResult, j as AggregateSpec, k as Aggregation, l as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, m as GROUPBY_WARN_CARDINALITY, n as GroupedAggregation, o as GroupedQuery, p as GroupedQueryN, q as GroupedRow, t as GroupedRowN, I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, u as LiveAggregation, M as MoneyCurrencyError, N as MoneyDescriptor, P as MoneyOptions, Q as MoneyOptionsFixed, S as MoneyOptionsMulti, T as MoneyPrecisionError, U as MoneyUnsupportedError, O as OnMissing, c as OnMissingPolicy, w as Reducer, x as ReducerOptions, R as ResolveI18nOptions, d as applyI18nLocale, y as avg, B as count, C as groupAndReduce, i as i18nText, e as isI18nTextDescriptor, V as isMoneyDescriptor, D as max, E as min, W as money, F as reduceRecords, r as resolveI18nText, f as resolvePolicy, J as sum, v as validateI18nTextValue } from './strategy-C5ol6NdV.cjs';
-export { w as withDerivation, a as withRollup } from './with-rollup-aaxOZcIb.cjs';
-export { w as withMaterializedView } from './with-materialized-view-BboqxyV3.cjs';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-Dmpqzg-_.cjs';
+import { K as RoundingMode } from './strategy-WtB-jXYv.cjs';
+export { h as AggregateResult, j as AggregateSpec, k as Aggregation, l as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, m as GROUPBY_WARN_CARDINALITY, n as GroupedAggregation, o as GroupedQuery, p as GroupedQueryN, q as GroupedRow, t as GroupedRowN, I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, u as LiveAggregation, M as MoneyCurrencyError, N as MoneyDescriptor, P as MoneyOptions, Q as MoneyOptionsFixed, S as MoneyOptionsMulti, T as MoneyPrecisionError, U as MoneyUnsupportedError, O as OnMissing, c as OnMissingPolicy, w as Reducer, x as ReducerOptions, R as ResolveI18nOptions, d as applyI18nLocale, y as avg, B as count, C as groupAndReduce, i as i18nText, e as isI18nTextDescriptor, V as isMoneyDescriptor, D as max, E as min, W as money, F as reduceRecords, r as resolveI18nText, f as resolvePolicy, J as sum, v as validateI18nTextValue } from './strategy-WtB-jXYv.cjs';
+export { w as withDerivation, a as withRollup } from './with-rollup-s58XAeWO.cjs';
+export { w as withMaterializedView } from './with-materialized-view-CeZYGJVf.cjs';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-BmhBSPCH.cjs';
-export { w as withOverlayedView } from './with-overlayed-view-mmsg5Of3.cjs';
+export { w as withOverlayedView } from './with-overlayed-view-kdcPGHih.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-BR1rMOS-.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-CY0HIZA0.cjs';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BEUBmmI4.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BSd0-_L8.cjs';
 import './lazy-builder-eYZzLEL1.cjs';
 import '@noy-db/attestation';
@@ -364,6 +364,32 @@ declare function loadVaultPolicy(store: NoydbStore, vault: string): Promise<Vaul
  */
 declare function saveVaultPolicy(store: NoydbStore, vault: string, policy: VaultPolicy): Promise<void>;
+/**
+ * Helpers for reading records out of a *plaintext* store (`encrypt: false`)
+ * with native tooling — the programmatic core of a `noydb cat`-style unwrap.
+ * See the plaintext/debug-store-mode design.
+ */
+/**
+ * Extract the record from a plaintext stored envelope, handling both layouts:
+ *
+ *   - **classic plaintext** (`encrypt: false`): the record is JSON in `_data`.
+ *   - **debugPlaintext**: the record's fields are inlined beside the
+ *     `_`-prefixed metadata (marked by `_debug`).
+ *
+ * Returns `null` for an empty/absent body. Throws if handed an **encrypted**
+ * envelope (non-empty `_iv`) — there is no key here; decrypt through the vault
+ * instead. Intended for record envelopes, not blob chunks.
+ *
+ * @example
+ * ```ts
+ * // node script over a to-file store, no vault needed:
+ * const env = JSON.parse(readFileSync('data/acme/invoices/inv-1.json', 'utf8'))
+ * console.log(readPlaintextRecord(env)) // → { id: 'inv-1', total: '120.00', … }
+ * ```
+ */
+declare function readPlaintextRecord<T = Record<string, unknown>>(envelope: EncryptedEnvelope): T | null;
 /** Allow any schema change. Explicit blind / back-compat. */
 declare function blindUpdate(): SchemaUpdateStrategy;
 /** Allow additive changes; reject non-additive ones. The safety backstop. */
@@ -963,4 +989,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
-export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, type Tokenizer, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId };
+export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, EncryptedEnvelope, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, type Tokenizer, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId };

package/dist/index.d.ts CHANGED Viewed

@@ -1,25 +1,25 @@
-import { aP as NoydbStore, bl as UserEnvelope, b5 as PublicEnvelope, bm as GateName, bn as GatePolicy, bo as VaultPolicy, bp as ActiveTier, bq as FactorProof, br as SchemaUpdateStrategy, bs as TransformFn, bt as PersistedSchemaEnvelope, bu as UpdateDecision, bv as DirectoryConfig, bw as UserVisibility, aN as UnlockedKeyring, ba as Vault, aW as DiffEntry } from './types-CraiZOyO.js';
-export { bx as AccessibleVault, by as AffectedDocument, aT as AppendInput, bz as ArchivePolicy, bA as ArchiveResult, bB as ArchiveRunOptions, bC as ArchiveStrategy, ax as ArrayOutputSpec, o as BLOB_CHUNKS_COLLECTION, p as BLOB_COLLECTION, r as BLOB_INDEX_COLLECTION, t as BLOB_SLOTS_PREFIX, u as BLOB_VERSIONS_PREFIX, bD as BUNDLE_STORE_POLICY, z as BlobObject, A as BlobPutOptions, C as BlobResponseOptions, E as BlobSet, bE as BuiltInGateName, b7 as BundleRecipient, Z as CONSENT_AUDIT_COLLECTION, bF as CacheOptions, bG as CacheStats, bH as CapturedBlueprint, bI as ChangeEvent, aU as ChangeType, a6 as ClosePeriodOptions, aG as Collection, bJ as CollectionChangeEvent, bK as CollectionConflictResolver, bL as CollectionDescriptor, an as CollectionFrame, aV as CollectionInstant, bM as CollectionStats, bN as ComputedFieldError, bO as ComputedFields, bP as ComputedFn, bQ as Conflict, bR as ConflictPolicy, bS as ConflictStrategy, _ as ConsentAuditEntry, $ as ConsentAuditFilter, a0 as ConsentContext, a1 as ConsentOp, bT as CrossTierAccessEvent, bU as CrossVaultAggregation, bV as CrossVaultDerivationContext, bW as CrossVaultDerivationSpec, bX as CrossVaultGroupedAggregation, bY as CrossVaultGroupedRow, bZ as CrossVaultLiveAggregation, b_ as CrossVaultLiveQuery, K as DEFAULT_CHUNK_SIZE, b$ as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, c0 as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, c1 as DeepPartial, c2 as DeepPartialOrNull, c3 as DeferredNumberingConfig, c4 as DelegationToken, c5 as DeleteManyResult, c6 as DeploymentEvent, c7 as DerivationDescriptor, av as DerivationStrategy, az as DerivationStrategyHandle, aA as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, c8 as DirtyEntry, c9 as DryRunResult, ca as DumpSchemaOptions, cb as ELEVATION_AUDIT_COLLECTION, cc as ElevatedHandle, aR as EncryptedEnvelope, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cg as EnrollRecoveryResult, ch as ExportCapability, ci as ExportChunk, cj as ExportFormat, ck as ExportStreamOptions, cl as FactorKind, cm as FactorProofBundle, cn as FactorRequirement, co as FanoutQueryOptions, cp as FanoutResult, cq as FenceDoc, cr as FenceState, cs as FieldChange, ct as FieldDescriptor, cu as FieldSource, cv as FleetMigrationResult, cw as FormattedSequenceHandle, cx as GhostRecord, cy as GrantOptions, ah as GuardChange, ai as GuardContext, ag as GuardStrategy, ak as GuardStrategyHandle, cz as GuardViolation, cA as HistoryConfig, cB as HistoryEntry, aQ as HistoryOptions, cC as INDEXED_STORE_POLICY, cD as ImportCapability, cE as InferOutput, cF as InternalCollectionStats, cG as IssueDelegationOptions, cH as IssueMagicLinkGrantOptions, aX as JsonPatch, aY as JsonPatchOp, cI as KeyringAuthenticator, cJ as KeyringAuthenticatorWrappingDEKs, cK as KeyringAuthenticatorWrappingKEK, cL as KeyringFile, aZ as LedgerStore, cM as LinkEndpointError, cN as LinkIntegrityError, cO as LinkOnDelete, cP as LinkRow, cQ as LinkSetHandle, cR as LinkSpec, cS as ListAccessibleVaultsOptions, cT as ListPageResult, cU as ListUsersOptions, cV as LiveQueryOptions, cW as LiveUserEnvelope, cX as LocaleReadOptions, cY as Lru, cZ as LruOptions, c_ as LruStats, c$ as MAGIC_LINK_CONTENT_INFO_PREFIX, d0 as MAGIC_LINK_GRANTS_COLLECTION, d1 as MAGIC_LINK_KEK_INFO_PREFIX, d2 as MagicLinkGrantPayload, d3 as MagicLinkGrantRecord, bh as MaterializedFromMeta, d4 as MaterializedViewDescriptor, bi as MaterializedViewOutput, aD as MaterializedViewStrategy, aE as MaterializedViewStrategyHandle, d5 as MemoryRecipientSealer, d6 as MemorySealingKeyProvider, d7 as MigrationStatusRow, d8 as NOYDB_BACKUP_VERSION, d9 as NOYDB_FORMAT_VERSION, da as NOYDB_KEYRING_VERSION, db as NOYDB_SYNC_VERSION, dc as NextOptions, dd as Noydb, ap as NoydbBundleStore, de as NoydbEventMap, df as NoydbOptions, dg as NumberingAssignment, a7 as OpenPeriodOptions, aB as OutputSpec, aH as OverlayFieldMergeMode, aI as OverlayFieldMergeRule, dh as OverlayViewDescriptor, aF as OverlayedViewStrategy, aK as OverlayedViewStrategyHandle, a8 as PERIODS_COLLECTION, di as PUBLIC_ENVELOPE_FIELDS, dj as PaperRecoveryDoc, dk as PaperRecoveryEntry, dl as PassphrasePolicy, dm as PassphraseValidationResult, a9 as PeriodRecord, dn as Permission, dp as Permissions, dq as PersistedSchemaKind, dr as PlaintextTranslatorContext, ds as PlaintextTranslatorFn, P as PolicyEnforcer, dt as PresenceHandle, du as PresencePeer, aS as PruneOptions, dv as PublicEnvelopeField, dw as PublicEnvelopeSchema, dx as PublicEnvelopeText, dy as PullMode, dz as PullOptions, dA as PullPolicy, dB as PullResult, dC as PushMode, dD as PushOptions, dE as PushPolicy, dF as PushResult, dG as PutManyItemOptions, dH as PutManyOptions, dI as PutManyResult, dJ as QueryAcrossOptions, dK as QueryAcrossResult, dL as QuickUnlockState, dM as QuickUnlockStore, dN as ReAuthOperation, b9 as RecipientHint, b8 as RecipientSealer, aC as RecordOutputSpec, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dS as RefreshInsightsResult, dT as ResolvedPublicEnvelopeSchema, aq as RetentionPolicy, dU as RevokeOptions, aM as Role, dV as RotatePassphraseInput, dW as RotateRecoveryOptions, dX as RotateRecoveryResult, dY as SEALED_PASSPHRASE_RECORD_ID, dZ as SchemaDelta, d_ as SchemaIntrospection, d$ as SchemaManifestRow, S as ScriptWarning, e0 as SealedEnvelope, e1 as SealedPassphrase, b6 as SealingKeyProvider, e2 as SearchEntry, e3 as SearchOptions, e4 as SearchResult, e5 as SequenceHandle, e6 as SequenceOptions, e7 as SequenceStore, e8 as SessionPolicy, e9 as SetPublicEnvelopeInput, ea as ShamirRecoveryDoc, eb as ShamirRecoveryEntry, bc as ShamirRecoveryProvider, ec as ShardedCollection, ed as ShardedGroupedQuery, ee as ShardedQuery, ef as ShardingConfig, eg as SkippedVault, T as SlotInfo, U as SlotRecord, eh as SlotRewrapCeremony, ei as SlotRewrapContext, at as SnapshotMeta, ej as StandardSchemaV1, ek as StandardSchemaV1Issue, el as StandardSchemaV1SyncResult, em as StateManagementVault, e as StaticDictDescriptor, en as StoreAuth, eo as StoreAuthKind, ep as StoreCapabilities, eq as StoreTime, er as SyncEngine, es as SyncMetadata, et as SyncPolicy, eu as SyncScheduler, ev as SyncSchedulerStatus, ew as SyncStatus, ex as SyncTarget, ey as SyncTargetRole, ez as SyncTransaction, eA as SyncTransactionResult, eB as TabChannel, eC as TabCoordinationOptions, eD as TabLockManager, eE as TabPresence, eF as TabRole, eG as TierMode, eH as TransactionInvariant, eI as TranslatorAuditEntry, eJ as TxCollection, bd as TxContext, eK as TxOp, eL as TxVault, eM as USER_ENVELOPE_COLLECTION, eN as USER_ENVELOPE_MAX_BYTES, bj as UnionArmJoin, bk as UnionSource, eO as Unsubscribe, eP as UpdateAuthenticatorOptions, eQ as UpdateContext, eR as UpdateUserOptions, eS as UserApi, eT as UserEnvelopeCheckGate, eU as UserEnvelopeOversizedError, eV as UserEnvelopePresented, eW as UserInfo, eX as VaultBackup, a_ as VaultEngine, ao as VaultFrame, eY as VaultGroup, eZ as VaultGroupOptions, a$ as VaultInstant, e_ as VaultPolicyOnDisk, e$ as VaultRegistryRow, f0 as VaultSchemaSnapshot, f1 as VaultSnapshot, f2 as VaultTemplate, b0 as VerifyResult, V as VersionRecord, f3 as WarningRules, f4 as WeakPassphraseError, f5 as WeakPassphraseReason, f6 as WithArchiveOptions, f7 as WrappedDeksBlob, f8 as WriteConflict, f9 as WriteEvent, fa as WriteHook, fb as WriteQueue, fc as aesGcmOpen, b1 as applyPatch, fd as assertStrongPassphrase, fe as buildRecipientKeyringFile, ff as burnPaperRecoveryEntry, fg as compileSequenceFormat, b2 as computePatch, n as createEnforcer, fh as createNoydb, fi as createStore, fj as deriveMagicLinkContentKey, f as dictCollectionName, g as dictKey, b3 as diff, h as enforceScript, fk as enrollAuthenticator, fl as estimateEntropy, fm as evalComputedFields, fn as evaluateExportCapability, fo as evaluateImportCapability, fp as findAuthenticator, b4 as formatDiff, fq as hasExportCapability, fr as hasImportCapability, fs as hasRecoveryEnrolled, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, ft as isLinkCollectionName, fu as isMagicLinkGrantExpired, fv as isPublicEnvelope, l as isStaticDictDescriptor, fw as issueDelegation, fx as keyringRecoverPassphrase, fy as keyringRotatePassphrase, fz as listMagicLinkGrants, fA as listUsers, fB as listUsersWithEnvelopes, fC as loadActiveDelegations, fD as loadPaperRecoveryEntries, fE as loadSealedPassphrase, fF as loadShamirRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fI as mintShamirRecoveryEntry, fJ as mintWrappedDeksBlob, fK as parseRsaOaepTlv, fL as parseSealedEnvelope, fM as readMagicLinkGrantRecord, fN as recoverUser, fO as removeAuthenticator, fP as resolvePublicEnvelopeSchema, fQ as resolveSequenceKey, fR as revokeDelegation, fS as revokeMagicLinkGrant, fT as runTransaction, fU as savePaperRecoveryEntries, fV as saveSealedPassphrase, fW as saveShamirRecoveryEntries, fX as sealRsaOaepTlv, s as staticDict, fY as unwrapDeksFromBlob, fZ as unwrapDeksFromPaperEntry, f_ as unwrapDeksFromShamirEntry, f$ as unwrapMagicLinkGrant, g0 as validatePassphrase, g1 as validatePublicEnvelopeInput, g2 as validateSchemaInput, g3 as validateSchemaOutput, v as validateSessionPolicy, g4 as withArchive, g5 as withDeferredNumbering, g6 as writeMagicLinkGrant } from './types-CraiZOyO.js';
-export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
+import { aW as NoydbStore, bs as UserEnvelope, bc as PublicEnvelope, bt as GateName, bu as GatePolicy, bv as VaultPolicy, bw as ActiveTier, bx as FactorProof, aY as EncryptedEnvelope, by as SchemaUpdateStrategy, bz as TransformFn, bA as PersistedSchemaEnvelope, bB as UpdateDecision, bC as DirectoryConfig, bD as UserVisibility, aU as UnlockedKeyring, bh as Vault, b1 as DiffEntry } from './types-DLfWFr6U.js';
+export { bE as AccessibleVault, bF as AffectedDocument, a_ as AppendInput, bG as ArchivePolicy, bH as ArchiveResult, bI as ArchiveRunOptions, bJ as ArchiveStrategy, aE as ArrayOutputSpec, o as BLOB_CHUNKS_COLLECTION, p as BLOB_COLLECTION, r as BLOB_INDEX_COLLECTION, t as BLOB_SLOTS_PREFIX, u as BLOB_VERSIONS_PREFIX, bK as BUNDLE_STORE_POLICY, z as BlobObject, A as BlobPutOptions, C as BlobResponseOptions, E as BlobSet, bL as BuiltInGateName, be as BundleRecipient, a4 as CONSENT_AUDIT_COLLECTION, bM as CacheOptions, bN as CacheStats, bO as CapturedBlueprint, bP as ChangeEvent, a$ as ChangeType, ad as ClosePeriodOptions, aN as Collection, bQ as CollectionChangeEvent, bR as CollectionConflictResolver, bS as CollectionDescriptor, au as CollectionFrame, b0 as CollectionInstant, bT as CollectionStats, bU as ComputedFieldError, bV as ComputedFields, bW as ComputedFn, bX as Conflict, bY as ConflictPolicy, bZ as ConflictStrategy, a5 as ConsentAuditEntry, a6 as ConsentAuditFilter, a7 as ConsentContext, a8 as ConsentOp, b_ as CrossTierAccessEvent, b$ as CrossVaultAggregation, c0 as CrossVaultDerivationContext, c1 as CrossVaultDerivationSpec, c2 as CrossVaultGroupedAggregation, c3 as CrossVaultGroupedRow, c4 as CrossVaultLiveAggregation, c5 as CrossVaultLiveQuery, K as DEFAULT_CHUNK_SIZE, c6 as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, c7 as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, c8 as DeepPartial, c9 as DeepPartialOrNull, ca as DeferredNumberingConfig, cb as DelegationToken, cc as DeleteManyResult, cd as DeploymentEvent, ce as DerivationDescriptor, aC as DerivationStrategy, aG as DerivationStrategyHandle, aH as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, cf as DirtyEntry, cg as DryRunResult, ch as DumpSchemaOptions, ci as ELEVATION_AUDIT_COLLECTION, cj as ElevatedHandle, ck as EnrollAuthenticatorOptions, cl as EnrollAuthenticatorWrappingDEKsOptions, cm as EnrollAuthenticatorWrappingKEKOptions, cn as EnrollRecoveryResult, co as ExportCapability, cp as ExportChunk, cq as ExportFormat, cr as ExportStreamOptions, cs as FactorKind, ct as FactorProofBundle, cu as FactorRequirement, cv as FanoutQueryOptions, cw as FanoutResult, cx as FenceDoc, cy as FenceState, cz as FieldChange, cA as FieldDescriptor, cB as FieldSource, cC as FleetMigrationResult, cD as FormattedSequenceHandle, cE as GhostRecord, cF as GrantOptions, ao as GuardChange, ap as GuardContext, an as GuardStrategy, ar as GuardStrategyHandle, cG as GuardViolation, cH as HistoryConfig, cI as HistoryEntry, aX as HistoryOptions, cJ as INDEXED_STORE_POLICY, cK as ImportCapability, cL as InferOutput, cM as InternalCollectionStats, cN as IssueDelegationOptions, cO as IssueMagicLinkGrantOptions, b2 as JsonPatch, b3 as JsonPatchOp, cP as KeyringAuthenticator, cQ as KeyringAuthenticatorWrappingDEKs, cR as KeyringAuthenticatorWrappingKEK, cS as KeyringFile, b4 as LedgerStore, cT as LinkEndpointError, cU as LinkIntegrityError, cV as LinkOnDelete, cW as LinkRow, cX as LinkSetHandle, cY as LinkSpec, cZ as ListAccessibleVaultsOptions, c_ as ListPageResult, c$ as ListUsersOptions, d0 as LiveQueryOptions, d1 as LiveUserEnvelope, d2 as LocaleReadOptions, d3 as Lru, d4 as LruOptions, d5 as LruStats, d6 as MAGIC_LINK_CONTENT_INFO_PREFIX, d7 as MAGIC_LINK_GRANTS_COLLECTION, d8 as MAGIC_LINK_KEK_INFO_PREFIX, d9 as MagicLinkGrantPayload, da as MagicLinkGrantRecord, bo as MaterializedFromMeta, db as MaterializedViewDescriptor, bp as MaterializedViewOutput, aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle, dc as MemoryRecipientSealer, dd as MemorySealingKeyProvider, de as MigrationStatusRow, df as NOYDB_BACKUP_VERSION, dg as NOYDB_FORMAT_VERSION, dh as NOYDB_KEYRING_VERSION, di as NOYDB_SYNC_VERSION, dj as NextOptions, dk as Noydb, aw as NoydbBundleStore, dl as NoydbEventMap, dm as NoydbOptions, dn as NumberingAssignment, T as ObjectListEntry, U as ObjectMeta, V as ObjectProjection, W as ObjectUrlOptions, ae as OpenPeriodOptions, aI as OutputSpec, aO as OverlayFieldMergeMode, aP as OverlayFieldMergeRule, dp as OverlayViewDescriptor, aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle, af as PERIODS_COLLECTION, dq as PUBLIC_ENVELOPE_FIELDS, dr as PaperRecoveryDoc, ds as PaperRecoveryEntry, dt as PassphrasePolicy, du as PassphraseValidationResult, ag as PeriodRecord, dv as Permission, dw as Permissions, dx as PersistedSchemaKind, dy as PlaintextTranslatorContext, dz as PlaintextTranslatorFn, P as PolicyEnforcer, dA as PresenceHandle, dB as PresencePeer, aZ as PruneOptions, dC as PublicEnvelopeField, dD as PublicEnvelopeSchema, dE as PublicEnvelopeText, dF as PullMode, dG as PullOptions, dH as PullPolicy, dI as PullResult, dJ as PushMode, dK as PushOptions, dL as PushPolicy, dM as PushResult, dN as PutManyItemOptions, dO as PutManyOptions, dP as PutManyResult, X as PutObjectOptions, Y as PutUrlOptions, dQ as QueryAcrossOptions, dR as QueryAcrossResult, dS as QuickUnlockState, dT as QuickUnlockStore, dU as ReAuthOperation, bg as RecipientHint, bf as RecipientSealer, aJ as RecordOutputSpec, dV as RecoverPassphraseInput, dW as RecoverPassphraseResult, dX as RecoverUserOptions, dY as RecoveryProof, dZ as RefreshInsightsResult, d_ as ResolvedPublicEnvelopeSchema, ax as RetentionPolicy, d$ as RevokeOptions, aT as Role, e0 as RotatePassphraseInput, e1 as RotateRecoveryOptions, e2 as RotateRecoveryResult, e3 as SEALED_PASSPHRASE_RECORD_ID, e4 as SchemaDelta, e5 as SchemaIntrospection, e6 as SchemaManifestRow, S as ScriptWarning, e7 as SealedEnvelope, e8 as SealedPassphrase, bd as SealingKeyProvider, e9 as SearchEntry, ea as SearchOptions, eb as SearchResult, ec as SequenceHandle, ed as SequenceOptions, ee as SequenceStore, ef as SessionPolicy, eg as SetPublicEnvelopeInput, eh as ShamirRecoveryDoc, ei as ShamirRecoveryEntry, bj as ShamirRecoveryProvider, ej as ShardedCollection, ek as ShardedGroupedQuery, el as ShardedQuery, em as ShardingConfig, en as SkippedVault, Z as SlotInfo, _ as SlotRecord, eo as SlotRewrapCeremony, ep as SlotRewrapContext, aA as SnapshotMeta, eq as StandardSchemaV1, er as StandardSchemaV1Issue, es as StandardSchemaV1SyncResult, et as StateManagementVault, e as StaticDictDescriptor, eu as StoreAuth, ev as StoreAuthKind, ew as StoreCapabilities, ex as StoreTime, ey as SyncEngine, ez as SyncMetadata, eA as SyncPolicy, eB as SyncScheduler, eC as SyncSchedulerStatus, eD as SyncStatus, eE as SyncTarget, eF as SyncTargetRole, eG as SyncTransaction, eH as SyncTransactionResult, eI as TabChannel, eJ as TabCoordinationOptions, eK as TabLockManager, eL as TabPresence, eM as TabRole, eN as TierMode, eO as TransactionInvariant, eP as TranslatorAuditEntry, eQ as TxCollection, bk as TxContext, eR as TxOp, eS as TxVault, eT as USER_ENVELOPE_COLLECTION, eU as USER_ENVELOPE_MAX_BYTES, bq as UnionArmJoin, br as UnionSource, eV as Unsubscribe, eW as UpdateAuthenticatorOptions, eX as UpdateContext, eY as UpdateUserOptions, eZ as UserApi, e_ as UserEnvelopeCheckGate, e$ as UserEnvelopeOversizedError, f0 as UserEnvelopePresented, f1 as UserInfo, f2 as VaultBackup, b5 as VaultEngine, av as VaultFrame, f3 as VaultGroup, f4 as VaultGroupOptions, b6 as VaultInstant, f5 as VaultPolicyOnDisk, f6 as VaultRegistryRow, f7 as VaultSchemaSnapshot, f8 as VaultSnapshot, f9 as VaultTemplate, b7 as VerifyResult, $ as VersionRecord, fa as WarningRules, fb as WeakPassphraseError, fc as WeakPassphraseReason, fd as WithArchiveOptions, fe as WrappedDeksBlob, ff as WriteConflict, fg as WriteEvent, fh as WriteHook, fi as WriteQueue, fj as aesGcmOpen, b8 as applyPatch, fk as assertStrongPassphrase, fl as buildRecipientKeyringFile, fm as burnPaperRecoveryEntry, fn as compileSequenceFormat, b9 as computePatch, n as createEnforcer, fo as createNoydb, fp as createStore, fq as deriveMagicLinkContentKey, f as dictCollectionName, g as dictKey, ba as diff, h as enforceScript, fr as enrollAuthenticator, fs as estimateEntropy, ft as evalComputedFields, fu as evaluateExportCapability, fv as evaluateImportCapability, fw as findAuthenticator, bb as formatDiff, fx as hasExportCapability, fy as hasImportCapability, fz as hasRecoveryEnrolled, i as inferScripts, j as isDictCollectionName, k as isDictKeyDescriptor, fA as isLinkCollectionName, fB as isMagicLinkGrantExpired, fC as isPublicEnvelope, l as isStaticDictDescriptor, fD as issueDelegation, fE as keyringRecoverPassphrase, fF as keyringRotatePassphrase, fG as listMagicLinkGrants, fH as listUsers, fI as listUsersWithEnvelopes, fJ as loadActiveDelegations, fK as loadPaperRecoveryEntries, fL as loadSealedPassphrase, fM as loadShamirRecoveryEntries, fN as magicLinkGrantRecordId, a1 as memoryObjectProjection, fO as mintPaperRecoveryEntry, fP as mintShamirRecoveryEntry, fQ as mintWrappedDeksBlob, fR as parseRsaOaepTlv, fS as parseSealedEnvelope, fT as readMagicLinkGrantRecord, fU as recoverUser, fV as removeAuthenticator, fW as resolvePublicEnvelopeSchema, fX as resolveSequenceKey, fY as revokeDelegation, fZ as revokeMagicLinkGrant, f_ as runTransaction, f$ as savePaperRecoveryEntries, g0 as saveSealedPassphrase, g1 as saveShamirRecoveryEntries, g2 as sealRsaOaepTlv, s as staticDict, g3 as unwrapDeksFromBlob, g4 as unwrapDeksFromPaperEntry, g5 as unwrapDeksFromShamirEntry, g6 as unwrapMagicLinkGrant, g7 as validatePassphrase, g8 as validatePublicEnvelopeInput, g9 as validateSchemaInput, ga as validateSchemaOutput, v as validateSessionPolicy, gb as withArchive, gc as withDeferredNumbering, gd as writeMagicLinkGrant } from './types-DLfWFr6U.js';
+export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-CjSyakO4.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
-import { N as NoydbError } from './errors-DL-zTrrF.js';
-export { H as AlreadyElevatedError, A as AmendmentForbiddenError, s as AttestationError, B as BackupCorruptedError, u as BackupLedgerError, v as BundleIntegrityError, w as BundleSealMismatchError, x as BundleVersionConflictError, J as ConflictError, K as CrossJoinSourceUnknownError, Q as CrossJoinTooLargeError, V as DanglingReferenceError, W as DataResidencyError, X as DecryptionError, Y as DelegationTargetMissingError, i as DerivationCapExceededError, j as DerivationCycleError, k as DerivationDepthError, l as DerivationOutputShapeError, m as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, Z as DirectoryDisabledError, _ as ElevationExpiredError, $ as ExportCapabilityError, F as FieldFrozenError, a0 as FilenameSanitizationError, a1 as ForgetStrategyNotConfiguredError, a2 as GroupCardinalityError, I as IllegalTransitionError, a3 as ImportCapabilityError, a4 as IndexRequiredError, a5 as IndexWriteFailureError, a6 as InvalidKeyError, f as InvariantError, a7 as JoinTooLargeError, a8 as KeyringCorruptError, a9 as KeyringExpiredError, aa as LedgerContentionError, L as LocaleNotSpecifiedError, z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError, ab as MigrationRequiredError, M as MissingTranslationError, ac as NetworkError, ad as NoAccessError, ae as NonAdditiveSchemaChangeError, af as NotFoundError, ag as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, n as OverlayCollectionUnavailableError, o as OverlayIdMismatchError, p as OverlayNameCollisionError, ah as PathEscapeError, ai as PeriodClosedError, aj as PermissionDeniedError, ak as PrivilegeEscalationError, al as QuiesceTimeoutError, am as ReadOnlyAtInstantError, an as ReadOnlyError, ao as ReadOnlyFrameError, ap as RecordCekNotFoundError, g as RecordLockedError, R as ReservedCollectionNameError, aq as ReservedVaultNameError, ar as SchemaFenceError, as as SchemaLockedError, at as SchemaUpdateError, au as SchemaValidationError, S as ScriptViolationError, q as SealedRecordExpiredError, r as SealedRecordMismatchError, av as SequenceContentionError, aw as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, ax as ShardProvisioningError, h as SnapshotNotFoundError, b as StaticDictReadonlyError, ay as StoreCapabilityError, az as TamperedError, aA as TierDemoteDeniedError, aB as TierNotGrantedError, T as TranslatorNotConfiguredError, aC as UniqueConstraintError, U as UnknownDictCodeError, aD as UnknownShardError, aE as UnsupportedIndexOptionError, aF as ValidationError, aG as VaultTemplateNotFoundError } from './errors-DL-zTrrF.js';
-export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, q as isRefArray, r as ref, s as refArray, t as resetJoinWarnings } from './index-BelbyUwz.js';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-FFRRHkVf.js';
+import { N as NoydbError } from './errors-Dkc_fi-S.js';
+export { H as AlreadyElevatedError, A as AmendmentForbiddenError, s as AttestationError, B as BackupCorruptedError, u as BackupLedgerError, v as BundleIntegrityError, w as BundleSealMismatchError, x as BundleVersionConflictError, J as ConflictError, K as CrossJoinSourceUnknownError, Q as CrossJoinTooLargeError, V as DanglingReferenceError, W as DataResidencyError, X as DebugPlaintextError, Y as DebugReservedFieldError, Z as DecryptionError, _ as DelegationTargetMissingError, i as DerivationCapExceededError, j as DerivationCycleError, k as DerivationDepthError, l as DerivationOutputShapeError, m as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, $ as DirectoryDisabledError, a0 as ElevationExpiredError, a1 as ExportCapabilityError, F as FieldFrozenError, a2 as FilenameSanitizationError, a3 as ForgetStrategyNotConfiguredError, a4 as GroupCardinalityError, I as IllegalTransitionError, a5 as ImportCapabilityError, a6 as IndexRequiredError, a7 as IndexWriteFailureError, a8 as InvalidKeyError, f as InvariantError, a9 as JoinTooLargeError, aa as KeyringCorruptError, ab as KeyringExpiredError, ac as LedgerContentionError, L as LocaleNotSpecifiedError, z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError, ad as MigrationRequiredError, M as MissingTranslationError, ae as NetworkError, af as NoAccessError, ag as NonAdditiveSchemaChangeError, ah as NotFoundError, ai as NumberingUncertaintyError, O as OverlayBaseIsVirtualError, n as OverlayCollectionUnavailableError, o as OverlayIdMismatchError, p as OverlayNameCollisionError, aj as PathEscapeError, ak as PeriodClosedError, al as PermissionDeniedError, am as PrivilegeEscalationError, an as QuiesceTimeoutError, ao as ReadOnlyAtInstantError, ap as ReadOnlyError, aq as ReadOnlyFrameError, ar as RecordCekNotFoundError, g as RecordLockedError, R as ReservedCollectionNameError, as as ReservedVaultNameError, at as SchemaFenceError, au as SchemaLockedError, av as SchemaUpdateError, aw as SchemaValidationError, S as ScriptViolationError, q as SealedRecordExpiredError, r as SealedRecordMismatchError, ax as SequenceContentionError, ay as SequenceOfflineError, c as SessionExpiredError, d as SessionNotFoundError, e as SessionPolicyError, az as ShardProvisioningError, h as SnapshotNotFoundError, b as StaticDictReadonlyError, aA as StoreCapabilityError, aB as TamperedError, aC as TierDemoteDeniedError, aD as TierNotGrantedError, T as TranslatorNotConfiguredError, aE as UniqueConstraintError, U as UnknownDictCodeError, aF as UnknownShardError, aG as UnsupportedIndexOptionError, aH as ValidationError, aI as VaultTemplateNotFoundError } from './errors-Dkc_fi-S.js';
+export { D as DEFAULT_CROSS_JOIN_MAX_ROWS, a as DEFAULT_JOIN_MAX_ROWS, J as JoinContext, b as JoinLeg, c as JoinStrategy, d as JoinableSource, L as LiveQuery, e as LiveUpstream, O as OrderBy, Q as Query, f as QueryPlan, g as QuerySource, R as RefDescriptor, h as RefIntegrityError, i as RefMode, j as RefRegistry, k as RefScopeError, l as RefViolation, S as ScanBuilder, m as ScanPageProvider, n as applyJoins, o as buildLiveQuery, p as executePlan, q as isRefArray, r as ref, s as refArray, t as resetJoinWarnings } from './index-Bm9hIY7t.js';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-B2L_aqVA.js';
 export { L as LedgerEntry, c as canonicalJson, h as hashEntry, p as paddedIndex, a as parseIndex, s as sha256Hex } from './index-BMmajblo.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
 export { TransactionStrategyOptions } from './tx/index.js';
-export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C__YeF3_.js';
-import { K as RoundingMode } from './strategy-BDxQnnTX.js';
-export { h as AggregateResult, j as AggregateSpec, k as Aggregation, l as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, m as GROUPBY_WARN_CARDINALITY, n as GroupedAggregation, o as GroupedQuery, p as GroupedQueryN, q as GroupedRow, t as GroupedRowN, I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, u as LiveAggregation, M as MoneyCurrencyError, N as MoneyDescriptor, P as MoneyOptions, Q as MoneyOptionsFixed, S as MoneyOptionsMulti, T as MoneyPrecisionError, U as MoneyUnsupportedError, O as OnMissing, c as OnMissingPolicy, w as Reducer, x as ReducerOptions, R as ResolveI18nOptions, d as applyI18nLocale, y as avg, B as count, C as groupAndReduce, i as i18nText, e as isI18nTextDescriptor, V as isMoneyDescriptor, D as max, E as min, W as money, F as reduceRecords, r as resolveI18nText, f as resolvePolicy, J as sum, v as validateI18nTextValue } from './strategy-BDxQnnTX.js';
-export { w as withDerivation, a as withRollup } from './with-rollup-_TyBzz3T.js';
-export { w as withMaterializedView } from './with-materialized-view-CguCeVcT.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-D4bfIAiW.js';
+import { K as RoundingMode } from './strategy-54eIwox5.js';
+export { h as AggregateResult, j as AggregateSpec, k as Aggregation, l as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, m as GROUPBY_WARN_CARDINALITY, n as GroupedAggregation, o as GroupedQuery, p as GroupedQueryN, q as GroupedRow, t as GroupedRowN, I as I18nMap, a as I18nTextDescriptor, b as I18nTextOptions, L as Layer, u as LiveAggregation, M as MoneyCurrencyError, N as MoneyDescriptor, P as MoneyOptions, Q as MoneyOptionsFixed, S as MoneyOptionsMulti, T as MoneyPrecisionError, U as MoneyUnsupportedError, O as OnMissing, c as OnMissingPolicy, w as Reducer, x as ReducerOptions, R as ResolveI18nOptions, d as applyI18nLocale, y as avg, B as count, C as groupAndReduce, i as i18nText, e as isI18nTextDescriptor, V as isMoneyDescriptor, D as max, E as min, W as money, F as reduceRecords, r as resolveI18nText, f as resolvePolicy, J as sum, v as validateI18nTextValue } from './strategy-54eIwox5.js';
+export { w as withDerivation, a as withRollup } from './with-rollup-DJDbrxjf.js';
+export { w as withMaterializedView } from './with-materialized-view-DNULSxoP.js';
 export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-BmhBSPCH.js';
-export { w as withOverlayedView } from './with-overlayed-view-DO08u_tx.js';
+export { w as withOverlayedView } from './with-overlayed-view-C9joG7UZ.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-whL49sxV.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-CpKSkl2c.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-Dtb7FwWd.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BnBQx39y.js';
 import './lazy-builder-ChSqcF5t.js';
 import '@noy-db/attestation';
@@ -364,6 +364,32 @@ declare function loadVaultPolicy(store: NoydbStore, vault: string): Promise<Vaul
  */
 declare function saveVaultPolicy(store: NoydbStore, vault: string, policy: VaultPolicy): Promise<void>;
+/**
+ * Helpers for reading records out of a *plaintext* store (`encrypt: false`)
+ * with native tooling — the programmatic core of a `noydb cat`-style unwrap.
+ * See the plaintext/debug-store-mode design.
+ */
+/**
+ * Extract the record from a plaintext stored envelope, handling both layouts:
+ *
+ *   - **classic plaintext** (`encrypt: false`): the record is JSON in `_data`.
+ *   - **debugPlaintext**: the record's fields are inlined beside the
+ *     `_`-prefixed metadata (marked by `_debug`).
+ *
+ * Returns `null` for an empty/absent body. Throws if handed an **encrypted**
+ * envelope (non-empty `_iv`) — there is no key here; decrypt through the vault
+ * instead. Intended for record envelopes, not blob chunks.
+ *
+ * @example
+ * ```ts
+ * // node script over a to-file store, no vault needed:
+ * const env = JSON.parse(readFileSync('data/acme/invoices/inv-1.json', 'utf8'))
+ * console.log(readPlaintextRecord(env)) // → { id: 'inv-1', total: '120.00', … }
+ * ```
+ */
+declare function readPlaintextRecord<T = Record<string, unknown>>(envelope: EncryptedEnvelope): T | null;
 /** Allow any schema change. Explicit blind / back-compat. */
 declare function blindUpdate(): SchemaUpdateStrategy;
 /** Allow additive changes; reject non-additive ones. The safety backstop. */
@@ -963,4 +989,4 @@ type DiffCandidate<T = unknown> = Vault | Record<string, readonly T[]> | string;
  */
 declare function diffVault<T = unknown>(vault: Vault, candidate: DiffCandidate<T>, options?: DiffOptions): Promise<VaultDiff<T>>;
-export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, type Tokenizer, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId };
+export { ActiveTier, type AllocateOptions, type CheckGateContext, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, type DiffCandidate, DiffEntry, type DiffOptions, DirectoryConfig, EncryptedEnvelope, FactorProof, type FxRates, GateName, GatePolicy, META_COLLECTION, ManagedRecoveryNotEnrolledError, type MoneyString, type MulRateOptions, NoydbError, NoydbStore, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDeniedError, type PolicyDenyReason, PublicEnvelope, RecoveryNotEnrolledError, RecoveryProfileNotImplementedError, RoundingMode, SCHEMAS_COLLECTION, STATE_VAULT_NAME, STRICT_POLICY, SchemaUpdateStrategy, type Tokenizer, UnlockedKeyring, UpdateDecision, UserEnvelope, UserVisibility, VISIBILITY_RECORD_PREFIX, Vault, type VaultDiff, type VaultDiffEntry, type VaultDiffModifiedEntry, VaultPolicy, additiveOnly, allocate, asMoney, assertTierAccess, base64ToBuffer, blindUpdate, bufferToBase64, checkGate, coordinatedCutover, decryptBytes, decryptDeterministic, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, derivePresenceKey, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, diffVault, effectiveClearance, encryptBytes, encryptDeterministic, estimateRecordBytes, isMoneyString, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, mergePolicy, moneyNumber, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId };