@noy-db/hub 0.2.0-pre.20 → 0.2.0-pre.23

package/dist/{types-DLfWFr6U.d.ts → types-DONgts0n.d.ts}

@@ -5553,7 +5553,29 @@ type BuiltInGateName = 'rotate-passphrase' | 'recover-passphrase' | 'enroll-auth
  * mirrors `db.grant`'s hierarchy (admin cannot promote to owner)
  * regardless of this gate's settings.
  */
- | 'update-user';
+ | 'update-user'
+/**
+ * Authorize a non-owner's self-service **destructive** withdrawal —
+ * `vault.user.unilateralWithdrawal` (#199). The actor exports their
+ * own re-keyed copy and then removes (delete-closure) or freezes the
+ * source records. Because it both egresses data AND destroys the
+ * firm's live copy, it MUST fail closed: undefined in a policy = denied.
+ * Hosts opt in explicitly (and typically pin `minTier`/factor proofs).
+ */
+ | 'client-unilateral-withdraw'
+/**
+ * Authorize FILING a two-party withdrawal request —
+ * `vault.user.requestWithdrawal` (#199 P3). Non-destructive (writes a
+ * pending request only); enabled by default so a read-only client can ask.
+ */
+ | 'user-request-withdrawal'
+/**
+ * Authorize DECIDING a two-party withdrawal request (approve/reject) —
+ * `vault.user.approveWithdrawal` / `rejectWithdrawal` (#199 P3). The approve
+ * path is destructive (extract-and-dispose under firm authority), so it
+ * defaults to a tier-2 floor; owner/admin role is enforced structurally.
+ */
+ | 'approve-user-withdrawal';
 /** Either a built-in gate name or an `app:*` custom gate. */
 type GateName = BuiltInGateName | `app:${string}`;
 /**
@@ -8766,6 +8788,168 @@ interface UserVisibility {
     readonly hidden: boolean;
 }
 
+/**
+ * #199 P1 — `exportMyAccessibleData`: a non-owner user exports the scope they
+ * can decrypt as a portable, re-keyed `.noydb` bundle. Non-destructive and
+ * **always allowed** (the "data sovereignty by construction" property of
+ * sealing-at-dimension §11.11 — the firm cannot deny it) but **audited**.
+ *
+ * Reuses the existing bundle machinery: the access boundary is the caller's DEK
+ * set (operator/client → `keyring.permissions`; owner/admin/viewer → all), so a
+ * record outside the caller's keys can never enter the bundle. Re-keying to a
+ * new owner reuses `writeNoydbBundle`'s `exportPassphrase` shorthand.
+ */
+
+interface ExportAccessibleOptions {
+    /**
+     * Re-key the bundle so it is independently openable by a new owner with this
+     * passphrase (the receiving firm / the client themselves). Omit to inherit
+     * the source keyring (personal backup).
+     */
+    readonly reKey?: {
+        readonly passphrase: string;
+    };
+    /** Narrow the export to a subset of the caller's accessible collections. */
+    readonly scope?: {
+        readonly collections?: readonly string[];
+    };
+    readonly compression?: 'auto' | 'brotli' | 'gzip' | 'none';
+}
+/**
+ * Produce a re-keyed, access-scoped `.noydb` bundle of the caller's accessible
+ * data. Appends a tamper-evident audit entry (`reason: 'user-export:<userId>'`).
+ */
+declare function exportAccessibleData(vault: Vault, opts?: ExportAccessibleOptions): Promise<Uint8Array>;
+
+/**
+ * #199 P2 — `unilateralWithdrawal`: a non-owner extracts their accessible scope
+ * AND disposes of the source copy. Destructive; gated by the default-off
+ * fail-closed built-in `client-unilateral-withdraw` policy (checked in the
+ * UserApi wrapper).
+ *
+ * Two source dispositions (see the #199 design spec §9/§9b):
+ *  - 'delete'  — delete-closure: the records leave the source vault entirely.
+ *  - 'freeze'  — the firm retains a cryptographically-frozen, read-only, write-once
+ *                snapshot (hash-pinned in the tamper-evident ledger) while the live
+ *                records are removed.
+ *
+ * Ordering guarantees no data loss: the client's re-keyed export bundle (and the
+ * freeze snapshot) are produced BEFORE anything is deleted.
+ *
+ * The `freezeAndDeleteClosure` core is shared with the two-party approval path
+ * (#199 P3, `bundle/request-withdrawal.ts`).
+ */
+
+interface FrozenSnapshotRef {
+    readonly withdrawalId: string;
+    readonly sha256: string;
+    readonly recordCount: number;
+    readonly frozenAt: string;
+}
+interface WithdrawAccessibleOptions {
+    /** Legal/contractual basis recorded in the audit (e.g. 'gdpr-art-17'). */
+    readonly legalBasis: string;
+    /** Re-key the exported bundle to a new owner passphrase. */
+    readonly reKey?: {
+        readonly passphrase: string;
+    };
+    /** Source disposition. Default 'delete'. */
+    readonly disposition?: 'delete' | 'freeze';
+    readonly scope?: {
+        readonly collections?: readonly string[];
+    };
+    /** Stable id for idempotent resume (default random). */
+    readonly withdrawalId?: string;
+}
+interface WithdrawResult {
+    readonly bundle: Uint8Array;
+    readonly snapshot?: FrozenSnapshotRef;
+}
+declare function withdrawAccessibleData(vault: Vault, opts: WithdrawAccessibleOptions): Promise<WithdrawResult>;
+
+/**
+ * #199 P3 — two-party withdrawal ceremony.
+ *
+ * The conservative counterpart to `unilateralWithdrawal` (P2): a non-owner —
+ * including a read-only `client`/`viewer` who cannot self-serve a deletion —
+ * files a durable REQUEST; an owner/admin reviews it and either APPROVES
+ * (extract-and-dispose under firm authority) or REJECTS it. Every step is
+ * audited in the tamper-evident ledger.
+ *
+ *   requester:  vault.user.requestWithdrawal({ scope, disposition?, legalBasis? })
+ *   owner:      vault.user.listWithdrawalRequests()
+ *               vault.user.approveWithdrawal(requestId, { reKey })  → { bundle, snapshot? }
+ *               vault.user.rejectWithdrawal(requestId, { reason })
+ *
+ * Requests live in the reserved `_user_withdrawal_requests` namespace. The
+ * record body is plaintext metadata (collection names + disposition + legal
+ * basis — none secret in this trust model; the owner sees the data anyway) and
+ * carries NO passphrase: the re-key passphrase is supplied by the approver at
+ * approval time and conveyed to the requester out-of-band, so no secret is
+ * stored at rest.
+ */
+
+/** Raised when a request is missing, already decided, or expired. */
+declare class WithdrawalRequestError extends NoydbError {
+    constructor(message: string);
+}
+type WithdrawalRequestStatus = 'pending' | 'approved' | 'rejected';
+interface WithdrawalRequest {
+    readonly requestId: string;
+    readonly requester: string;
+    readonly collections: readonly string[];
+    readonly disposition: 'delete' | 'freeze';
+    readonly legalBasis?: string;
+    readonly status: WithdrawalRequestStatus;
+    readonly requestedAt: string;
+    readonly expiresAt?: string;
+    readonly decidedAt?: string;
+    readonly decidedBy?: string;
+    readonly rejectReason?: string;
+    readonly snapshotSha256?: string;
+}
+interface RequestWithdrawalOptions {
+    readonly scope?: {
+        readonly collections?: readonly string[];
+    };
+    readonly disposition?: 'delete' | 'freeze';
+    readonly legalBasis?: string;
+    /** Time-to-live in ms; after this the request can no longer be approved. */
+    readonly expiresInMs?: number;
+}
+interface RequestWithdrawalResult {
+    readonly requestId: string;
+    readonly status: WithdrawalRequestStatus;
+    readonly expiresAt?: string;
+}
+/**
+ * Requester side. Files a durable request for the caller's accessible scope.
+ * Gated by `user-request-withdrawal` (checked in the UserApi wrapper).
+ */
+declare function requestWithdrawal(vault: Vault, opts?: RequestWithdrawalOptions): Promise<RequestWithdrawalResult>;
+/** Owner side. List filed requests (optionally by status). */
+declare function listWithdrawalRequests(vault: Vault, opts?: {
+    status?: WithdrawalRequestStatus;
+}): Promise<WithdrawalRequest[]>;
+interface ApproveWithdrawalOptions {
+    /** Re-key the handed-back bundle to a passphrase the requester will use. */
+    readonly reKey?: {
+        readonly passphrase: string;
+    };
+}
+/**
+ * Owner side. Extract the requester's recorded scope under firm authority,
+ * dispose of the source per the request's disposition, mark the request
+ * approved, and return the re-keyed bundle to hand back. Gated by
+ * `approve-user-withdrawal` (checked in the UserApi wrapper) + owner/admin role.
+ */
+declare function approveWithdrawal(vault: Vault, requestId: string, opts?: ApproveWithdrawalOptions): Promise<WithdrawResult>;
+interface RejectWithdrawalOptions {
+    readonly reason?: string;
+}
+/** Owner side. Decline a pending request (no data is touched). */
+declare function rejectWithdrawal(vault: Vault, requestId: string, opts?: RejectWithdrawalOptions): Promise<WithdrawalRequest>;
+
 /**
  * Public `vault.user.*` API surface.
  *
@@ -8828,7 +9012,7 @@ interface UserEnvelopePresented {
  * delegates to `Noydb.checkGate(vault, gate, presented)`. In tests, a
  * no-op stub is fine.
  */
-type UserEnvelopeCheckGate = (gate: 'edit-own-profile' | 'view-team-profiles', presented?: UserEnvelopePresented) => Promise<void>;
+type UserEnvelopeCheckGate = (gate: 'edit-own-profile' | 'view-team-profiles' | 'client-unilateral-withdraw' | 'user-request-withdrawal' | 'approve-user-withdrawal', presented?: UserEnvelopePresented) => Promise<void>;
 /**
  * Reactive handle returned by `live()`. `current` is the most recently
  * observed value; `subscribe(cb)` fires on subsequent local writes.
@@ -8858,6 +9042,24 @@ declare class UserApi {
      * Production paths always wire the Noydb-backed implementation.
      */
     private readonly checkGate?;
+    /**
+     * Noydb-backed `exportMyAccessibleData` (#199), injected by the Vault
+     * (which holds the keyring + bundle machinery). Omitted in low-level tests.
+     */
+    private readonly exportAccessible?;
+    /**
+     * Noydb-backed `unilateralWithdrawal` (#199 P2), injected by the Vault.
+     * Destructive — extract + dispose (delete | freeze). Omitted in low-level tests.
+     */
+    private readonly unilateralWithdraw?;
+    /**
+     * Noydb-backed two-party withdrawal ceremony (#199 P3), injected by the
+     * Vault. requestWithdraw = requester side; the rest = owner side.
+     */
+    private readonly requestWithdraw?;
+    private readonly listWithdrawals?;
+    private readonly approveWithdraw?;
+    private readonly rejectWithdraw?;
     /** keyringId → set of listeners. Wildcard '*' fires on every change. */
     private readonly listeners;
     constructor(adapter: NoydbStore, vaultName: string, 
@@ -8868,7 +9070,59 @@ declare class UserApi {
      * for low-level tests that exercise the storage layer directly.
      * Production paths always wire the Noydb-backed implementation.
      */
-    checkGate?: UserEnvelopeCheckGate | undefined);
+    checkGate?: UserEnvelopeCheckGate | undefined, 
+    /**
+     * Noydb-backed `exportMyAccessibleData` (#199), injected by the Vault
+     * (which holds the keyring + bundle machinery). Omitted in low-level tests.
+     */
+    exportAccessible?: ((opts: ExportAccessibleOptions) => Promise<Uint8Array>) | undefined, 
+    /**
+     * Noydb-backed `unilateralWithdrawal` (#199 P2), injected by the Vault.
+     * Destructive — extract + dispose (delete | freeze). Omitted in low-level tests.
+     */
+    unilateralWithdraw?: ((opts: WithdrawAccessibleOptions) => Promise<WithdrawResult>) | undefined, 
+    /**
+     * Noydb-backed two-party withdrawal ceremony (#199 P3), injected by the
+     * Vault. requestWithdraw = requester side; the rest = owner side.
+     */
+    requestWithdraw?: ((opts: RequestWithdrawalOptions) => Promise<RequestWithdrawalResult>) | undefined, listWithdrawals?: ((opts: {
+        status?: WithdrawalRequestStatus;
+    }) => Promise<WithdrawalRequest[]>) | undefined, approveWithdraw?: ((requestId: string, opts: ApproveWithdrawalOptions) => Promise<WithdrawResult>) | undefined, rejectWithdraw?: ((requestId: string, opts: RejectWithdrawalOptions) => Promise<WithdrawalRequest>) | undefined);
+    /**
+     * #199 P3 — file a two-party withdrawal request for the caller's accessible
+     * scope. Non-destructive (writes a pending request); an owner later approves
+     * or rejects. This is the path for read-only roles (`client`/`viewer`) that
+     * cannot self-serve a destructive `unilateralWithdrawal`. Gated by
+     * `user-request-withdrawal` (enabled by default).
+     */
+    requestWithdrawal(opts?: RequestWithdrawalOptions): Promise<RequestWithdrawalResult>;
+    /** #199 P3 — owner side: list filed withdrawal requests (optionally by status). */
+    listWithdrawalRequests(opts?: {
+        status?: WithdrawalRequestStatus;
+    }): Promise<WithdrawalRequest[]>;
+    /**
+     * #199 P3 — owner side: approve a pending request. Extracts the requester's
+     * recorded scope under firm authority, disposes of the source per the
+     * request's disposition, and returns the re-keyed bundle to hand back. Gated
+     * by `approve-user-withdrawal` (tier-2 default) + owner/admin role.
+     */
+    approveWithdrawal(requestId: string, opts?: ApproveWithdrawalOptions): Promise<WithdrawResult>;
+    /** #199 P3 — owner side: reject a pending request (no data is touched). */
+    rejectWithdrawal(requestId: string, opts?: RejectWithdrawalOptions): Promise<WithdrawalRequest>;
+    /**
+     * #199 P2 — single-party withdrawal: export the caller's accessible scope
+     * (re-keyed) and dispose of the source (`delete` or `freeze`). Gated by the
+     * fail-closed built-in `client-unilateral-withdraw` policy — undefined or
+     * disabled → throws (use `requestWithdrawal`). The firm enables it at vault
+     * creation.
+     */
+    unilateralWithdrawal(opts: WithdrawAccessibleOptions): Promise<WithdrawResult>;
+    /**
+     * #199 — export the calling user's accessible scope as a portable, re-keyed
+     * `.noydb` bundle. Non-destructive and **always allowed** (data sovereignty
+     * by construction, §11.11) but audited. Scope = the caller's DEK access set.
+     */
+    exportMyAccessibleData(opts?: ExportAccessibleOptions): Promise<Uint8Array>;
     /** Read the writer's own envelope. Returns null if never written. */
     me<T = unknown>(): Promise<UserEnvelope<T> | null>;
     /**
@@ -9153,6 +9407,8 @@ interface VaultIntrospectState {
     readonly collectionCache: Map<string, Collection<unknown>>;
     readonly refRegistry: RefRegistry;
     readonly getDEK: (collectionName: string) => Promise<CryptoKey>;
+    /** The active unlocked keyring — role/permissions/userId for access-scoped ops. */
+    readonly keyring: UnlockedKeyring;
     readonly subsystems: Record<string, boolean>;
     readonly mvRegistry: unknown;
     readonly overlayRegistry: unknown;
@@ -14702,4 +14958,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type VersionRecord as $, type BlobPutOptions as A, type BlobStrategy as B, type BlobResponseOptions as C, DICT_COLLECTION_PREFIX as D, BlobSet as E, type BlobStrategyOpenArgs as F, type CompactRunOptions as G, type CompactionContext as H, type I18nStrategy as I, type CompactionResult as J, DEFAULT_CHUNK_SIZE as K, EXPORT_AUDIT_COLLECTION as L, ExportBlobsAbortedError as M, type ExportBlobsAuditEntry as N, type ExportBlobsHandle as O, PolicyEnforcer as P, type ExportBlobsOptions as Q, type ExportedBlob as R, type ScriptWarning as S, type ObjectListEntry as T, type ObjectMeta as U, type ObjectProjection as V, type ObjectUrlOptions as W, type PutObjectOptions as X, type PutUrlOptions as Y, type SlotInfo as Z, type SlotRecord as _, type DictEntry as a, type ChangeType as a$, createExportBlobsHandle as a0, memoryObjectProjection as a1, runCompaction as a2, type ConsentStrategy as a3, CONSENT_AUDIT_COLLECTION as a4, type ConsentAuditEntry as a5, type ConsentAuditFilter as a6, type ConsentContext as a7, type ConsentOp as a8, loadConsentEntries as a9, type SnapshotMeta as aA, type SnapshotMode as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, type OverlayFieldMergeMode as aO, type OverlayFieldMergeRule as aP, OverlayedViewRegistry as aQ, type OverlayedViewStrategyHandle as aR, type SyncStrategy as aS, type Role as aT, type UnlockedKeyring as aU, type HistoryStrategy as aV, type NoydbStore as aW, type HistoryOptions as aX, type EncryptedEnvelope as aY, type PruneOptions as aZ, type AppendInput as a_, writeConsentEntry as aa, type PeriodsStrategy as ab, type CarryForwardContext as ac, type ClosePeriodOptions as ad, type OpenPeriodOptions as ae, PERIODS_COLLECTION as af, type PeriodRecord as ag, type ReadOnlyCollection as ah, appendPeriodLedgerEntry as ai, assertTsWritable as aj, chainAnchor as ak, loadPeriods as al, validatePeriodName as am, type GuardStrategy as an, type GuardChange as ao, type GuardContext as ap, GuardRegistry as aq, type GuardStrategyHandle as ar, ReadOnlyVaultFacade as as, type ShadowStrategy as at, CollectionFrame as au, VaultFrame as av, type NoydbBundleStore as aw, type RetentionPolicy as ax, type SnapshotPolicy as ay, type SnapshotStrategy as az, type DictKeyDescriptor as b, CrossVaultAggregation as b$, CollectionInstant as b0, type DiffEntry as b1, type JsonPatch as b2, type JsonPatchOp as b3, LedgerStore as b4, type VaultEngine as b5, VaultInstant as b6, type VerifyResult as b7, applyPatch as b8, computePatch as b9, type PersistedSchemaEnvelope as bA, type UpdateDecision as bB, type DirectoryConfig as bC, type UserVisibility as bD, type AccessibleVault as bE, type AffectedDocument as bF, type ArchivePolicy as bG, type ArchiveResult as bH, type ArchiveRunOptions as bI, type ArchiveStrategy as bJ, BUNDLE_STORE_POLICY as bK, type BuiltInGateName as bL, type CacheOptions as bM, type CacheStats as bN, type CapturedBlueprint as bO, type ChangeEvent as bP, type CollectionChangeEvent as bQ, type CollectionConflictResolver as bR, type CollectionDescriptor as bS, type CollectionStats as bT, ComputedFieldError as bU, type ComputedFields as bV, type ComputedFn as bW, type Conflict as bX, type ConflictPolicy as bY, type ConflictStrategy as bZ, type CrossTierAccessEvent as b_, diff as ba, formatDiff as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, TxContext as bk, type MVQueryContext as bl, type RegisteredMV as bm, MaterializedViewRegistry as bn, type MaterializedFromMeta as bo, type MaterializedViewOutput as bp, type UnionArmJoin as bq, type UnionSource as br, type UserEnvelope as bs, type GateName as bt, type GatePolicy as bu, type VaultPolicy as bv, type ActiveTier as bw, type FactorProof as bx, type SchemaUpdateStrategy as by, type TransformFn as bz, DictionaryHandle as c, type ListUsersOptions as c$, type CrossVaultDerivationContext as c0, type CrossVaultDerivationSpec as c1, CrossVaultGroupedAggregation as c2, type GroupedRow as c3, type CrossVaultLiveAggregation as c4, type CrossVaultLiveQuery as c5, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c6, DELEGATIONS_COLLECTION as c7, type DeepPartial as c8, type DeepPartialOrNull as c9, type FieldDescriptor as cA, type FieldSource as cB, type FleetMigrationResult as cC, type FormattedSequenceHandle as cD, type GhostRecord as cE, type GrantOptions as cF, type GuardViolation as cG, type HistoryConfig as cH, type HistoryEntry as cI, INDEXED_STORE_POLICY as cJ, type ImportCapability as cK, type InferOutput as cL, type InternalCollectionStats as cM, type IssueDelegationOptions as cN, type IssueMagicLinkGrantOptions as cO, type KeyringAuthenticator as cP, type KeyringAuthenticatorWrappingDEKs as cQ, type KeyringAuthenticatorWrappingKEK as cR, type KeyringFile as cS, LinkEndpointError as cT, LinkIntegrityError as cU, type LinkOnDelete as cV, type LinkRow as cW, type LinkSetHandle as cX, type LinkSpec as cY, type ListAccessibleVaultsOptions as cZ, type ListPageResult as c_, type DeferredNumberingConfig as ca, type DelegationToken as cb, type DeleteManyResult as cc, type DeploymentEvent as cd, type DerivationDescriptor as ce, type DirtyEntry as cf, type DryRunResult as cg, type DumpSchemaOptions as ch, ELEVATION_AUDIT_COLLECTION as ci, ElevatedHandle as cj, type EnrollAuthenticatorOptions as ck, type EnrollAuthenticatorWrappingDEKsOptions as cl, type EnrollAuthenticatorWrappingKEKOptions as cm, type EnrollRecoveryResult as cn, type ExportCapability as co, type ExportChunk as cp, type ExportFormat as cq, type ExportStreamOptions as cr, type FactorKind as cs, type FactorProofBundle as ct, type FactorRequirement as cu, type FanoutQueryOptions as cv, type FanoutResult as cw, type FenceDoc as cx, type FenceState as cy, type FieldChange as cz, type DictionaryOptions as d, type RevokeOptions as d$, type LiveQueryOptions as d0, type LiveUserEnvelope as d1, type LocaleReadOptions as d2, Lru as d3, type LruOptions as d4, type LruStats as d5, MAGIC_LINK_CONTENT_INFO_PREFIX as d6, MAGIC_LINK_GRANTS_COLLECTION as d7, MAGIC_LINK_KEK_INFO_PREFIX as d8, type MagicLinkGrantPayload as d9, PresenceHandle as dA, type PresencePeer as dB, type PublicEnvelopeField as dC, type PublicEnvelopeSchema as dD, type PublicEnvelopeText as dE, type PullMode as dF, type PullOptions as dG, type PullPolicy as dH, type PullResult as dI, type PushMode as dJ, type PushOptions as dK, type PushPolicy as dL, type PushResult as dM, type PutManyItemOptions as dN, type PutManyOptions as dO, type PutManyResult as dP, type QueryAcrossOptions as dQ, type QueryAcrossResult as dR, type QuickUnlockState as dS, QuickUnlockStore as dT, type ReAuthOperation as dU, type RecoverPassphraseInput as dV, type RecoverPassphraseResult as dW, type RecoverUserOptions as dX, type RecoveryProof as dY, type RefreshInsightsResult as dZ, type ResolvedPublicEnvelopeSchema as d_, type MagicLinkGrantRecord as da, type MaterializedViewDescriptor as db, MemoryRecipientSealer as dc, MemorySealingKeyProvider as dd, type MigrationStatusRow as de, NOYDB_BACKUP_VERSION as df, NOYDB_FORMAT_VERSION as dg, NOYDB_KEYRING_VERSION as dh, NOYDB_SYNC_VERSION as di, type NextOptions as dj, Noydb as dk, type NoydbEventMap as dl, type NoydbOptions as dm, type Assignment as dn, type OverlayViewDescriptor as dp, PUBLIC_ENVELOPE_FIELDS as dq, type PaperRecoveryDoc as dr, type PaperRecoveryEntry as ds, type PassphrasePolicy as dt, type PassphraseValidationResult as du, type Permission as dv, type Permissions as dw, type PersistedSchemaKind as dx, type PlaintextTranslatorContext as dy, type PlaintextTranslatorFn as dz, type StaticDictDescriptor as e, UserEnvelopeOversizedError as e$, type RotatePassphraseInput as e0, type RotateRecoveryOptions as e1, type RotateRecoveryResult as e2, SEALED_PASSPHRASE_RECORD_ID as e3, type SchemaDelta as e4, type SchemaIntrospection as e5, type SchemaManifestRow as e6, type SealedEnvelope as e7, type SealedPassphrase as e8, type SearchEntry as e9, type SyncPolicy as eA, SyncScheduler as eB, type SyncSchedulerStatus as eC, type SyncStatus as eD, type SyncTarget as eE, type SyncTargetRole as eF, SyncTransaction as eG, type SyncTransactionResult as eH, type TabChannel as eI, type TabCoordinationOptions as eJ, type TabLockManager as eK, type TabPresence as eL, type TabRole as eM, type TierMode as eN, type TransactionInvariant as eO, type TranslatorAuditEntry as eP, TxCollection as eQ, type TxOp as eR, TxVault as eS, USER_ENVELOPE_COLLECTION as eT, USER_ENVELOPE_MAX_BYTES as eU, type Unsubscribe as eV, type UpdateAuthenticatorOptions as eW, type UpdateContext as eX, type UpdateUserOptions as eY, UserApi as eZ, type UserEnvelopeCheckGate as e_, type SearchOptions as ea, type SearchResult as eb, type SequenceHandle as ec, type SequenceOptions as ed, SequenceStore as ee, type SessionPolicy as ef, type SetPublicEnvelopeInput as eg, type ShamirRecoveryDoc as eh, type ShamirRecoveryEntry as ei, ShardedCollection as ej, ShardedGroupedQuery as ek, ShardedQuery as el, type ShardingConfig as em, type SkippedVault as en, type SlotRewrapCeremony as eo, type SlotRewrapContext as ep, type StandardSchemaV1 as eq, type StandardSchemaV1Issue as er, type StandardSchemaV1SyncResult as es, StateManagementVault as et, type StoreAuth as eu, type StoreAuthKind as ev, type StoreCapabilities as ew, type StoreTime as ex, SyncEngine as ey, type SyncMetadata as ez, dictCollectionName as f, savePaperRecoveryEntries as f$, type UserEnvelopePresented as f0, type UserInfo as f1, type VaultBackup as f2, VaultGroup as f3, type VaultGroupOptions as f4, type VaultPolicyOnDisk as f5, type VaultRegistryRow as f6, type VaultSchemaSnapshot as f7, type VaultSnapshot as f8, type VaultTemplate as f9, isLinkCollectionName as fA, isMagicLinkGrantExpired as fB, isPublicEnvelope as fC, issueDelegation as fD, recoverPassphrase as fE, rotatePassphrase as fF, listMagicLinkGrants as fG, listUsers as fH, listUsersWithEnvelopes as fI, loadActiveDelegations as fJ, loadPaperRecoveryEntries as fK, loadSealedPassphrase as fL, loadShamirRecoveryEntries as fM, magicLinkGrantRecordId as fN, mintPaperRecoveryEntry as fO, mintShamirRecoveryEntry as fP, mintWrappedDeksBlob as fQ, parseRsaOaepTlv as fR, parseSealedEnvelope as fS, readMagicLinkGrantRecord as fT, recoverUser as fU, removeAuthenticator as fV, resolveSchema as fW, resolveSequenceKey as fX, revokeDelegation as fY, revokeMagicLinkGrant as fZ, runTransaction as f_, type WarningRules as fa, WeakPassphraseError as fb, type WeakPassphraseReason as fc, type WithArchiveOptions as fd, type WrappedDeksBlob as fe, type WriteConflict as ff, type WriteEvent as fg, type WriteHook as fh, type WriteQueue as fi, aesGcmOpen as fj, assertStrongPassphrase as fk, buildRecipientKeyringFile as fl, burnPaperRecoveryEntry as fm, compileSequenceFormat as fn, createNoydb as fo, createStore as fp, deriveMagicLinkContentKey as fq, enrollAuthenticator as fr, estimateEntropy as fs, evalComputedFields as ft, evaluateExportCapability as fu, evaluateImportCapability as fv, findAuthenticator as fw, hasExportCapability as fx, hasImportCapability as fy, hasRecoveryEnrolled as fz, dictKey as g, saveSealedPassphrase as g0, saveShamirRecoveryEntries as g1, sealRsaOaepTlv as g2, unwrapDeksFromBlob as g3, unwrapDeksFromPaperEntry as g4, unwrapDeksFromShamirEntry as g5, unwrapMagicLinkGrant as g6, validatePassphrase as g7, validatePublicEnvelopeInput as g8, validateSchemaInput as g9, validateSchemaOutput as ga, withArchive as gb, withDeferredNumbering as gc, writeMagicLinkGrant as gd, changeSecret as ge, createOwnerKeyring as gf, ensureCollectionDEK as gg, grant as gh, loadKeyring as gi, persistKeyring as gj, revoke as gk, updateAuthenticator as gl, updateKeyringIdentity as gm, type TxStrategy as gn, type AmendmentTxOptions as go, enforceScript as h, inferScripts as i, isDictCollectionName as j, isDictKeyDescriptor as k, isStaticDictDescriptor as l, type SessionStrategy as m, createEnforcer as n, BLOB_CHUNKS_COLLECTION as o, BLOB_COLLECTION as p, BLOB_EVICTION_AUDIT_COLLECTION as q, BLOB_INDEX_COLLECTION as r, staticDict as s, BLOB_SLOTS_PREFIX as t, BLOB_VERSIONS_PREFIX as u, validateSessionPolicy as v, type BlobEvictionEntry as w, type BlobFieldPolicy as x, type BlobFieldsConfig as y, type BlobObject as z };
+export { type VersionRecord as $, type BlobPutOptions as A, type BlobStrategy as B, type BlobResponseOptions as C, DICT_COLLECTION_PREFIX as D, BlobSet as E, type BlobStrategyOpenArgs as F, type CompactRunOptions as G, type CompactionContext as H, type I18nStrategy as I, type CompactionResult as J, DEFAULT_CHUNK_SIZE as K, EXPORT_AUDIT_COLLECTION as L, ExportBlobsAbortedError as M, type ExportBlobsAuditEntry as N, type ExportBlobsHandle as O, PolicyEnforcer as P, type ExportBlobsOptions as Q, type ExportedBlob as R, type ScriptWarning as S, type ObjectListEntry as T, type ObjectMeta as U, type ObjectProjection as V, type ObjectUrlOptions as W, type PutObjectOptions as X, type PutUrlOptions as Y, type SlotInfo as Z, type SlotRecord as _, type DictEntry as a, type ChangeType as a$, createExportBlobsHandle as a0, memoryObjectProjection as a1, runCompaction as a2, type ConsentStrategy as a3, CONSENT_AUDIT_COLLECTION as a4, type ConsentAuditEntry as a5, type ConsentAuditFilter as a6, type ConsentContext as a7, type ConsentOp as a8, loadConsentEntries as a9, type SnapshotMeta as aA, type SnapshotMode as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, type OverlayFieldMergeMode as aO, type OverlayFieldMergeRule as aP, OverlayedViewRegistry as aQ, type OverlayedViewStrategyHandle as aR, type SyncStrategy as aS, type Role as aT, type UnlockedKeyring as aU, type HistoryStrategy as aV, type NoydbStore as aW, type HistoryOptions as aX, type EncryptedEnvelope as aY, type PruneOptions as aZ, type AppendInput as a_, writeConsentEntry as aa, type PeriodsStrategy as ab, type CarryForwardContext as ac, type ClosePeriodOptions as ad, type OpenPeriodOptions as ae, PERIODS_COLLECTION as af, type PeriodRecord as ag, type ReadOnlyCollection as ah, appendPeriodLedgerEntry as ai, assertTsWritable as aj, chainAnchor as ak, loadPeriods as al, validatePeriodName as am, type GuardStrategy as an, type GuardChange as ao, type GuardContext as ap, GuardRegistry as aq, type GuardStrategyHandle as ar, ReadOnlyVaultFacade as as, type ShadowStrategy as at, CollectionFrame as au, VaultFrame as av, type NoydbBundleStore as aw, type RetentionPolicy as ax, type SnapshotPolicy as ay, type SnapshotStrategy as az, type DictKeyDescriptor as b, type CrossTierAccessEvent as b$, CollectionInstant as b0, type DiffEntry as b1, type JsonPatch as b2, type JsonPatchOp as b3, LedgerStore as b4, type VaultEngine as b5, VaultInstant as b6, type VerifyResult as b7, applyPatch as b8, computePatch as b9, type PersistedSchemaEnvelope as bA, type UpdateDecision as bB, type DirectoryConfig as bC, type UserVisibility as bD, type AccessibleVault as bE, type AffectedDocument as bF, type ApproveWithdrawalOptions as bG, type ArchivePolicy as bH, type ArchiveResult as bI, type ArchiveRunOptions as bJ, type ArchiveStrategy as bK, BUNDLE_STORE_POLICY as bL, type BuiltInGateName as bM, type CacheOptions as bN, type CacheStats as bO, type CapturedBlueprint as bP, type ChangeEvent as bQ, type CollectionChangeEvent as bR, type CollectionConflictResolver as bS, type CollectionDescriptor as bT, type CollectionStats as bU, ComputedFieldError as bV, type ComputedFields as bW, type ComputedFn as bX, type Conflict as bY, type ConflictPolicy as bZ, type ConflictStrategy as b_, diff as ba, formatDiff as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, TxContext as bk, type MVQueryContext as bl, type RegisteredMV as bm, MaterializedViewRegistry as bn, type MaterializedFromMeta as bo, type MaterializedViewOutput as bp, type UnionArmJoin as bq, type UnionSource as br, type UserEnvelope as bs, type GateName as bt, type GatePolicy as bu, type VaultPolicy as bv, type ActiveTier as bw, type FactorProof as bx, type SchemaUpdateStrategy as by, type TransformFn as bz, DictionaryHandle as c, type LinkSpec as c$, CrossVaultAggregation as c0, type CrossVaultDerivationContext as c1, type CrossVaultDerivationSpec as c2, CrossVaultGroupedAggregation as c3, type GroupedRow as c4, type CrossVaultLiveAggregation as c5, type CrossVaultLiveQuery as c6, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c7, DELEGATIONS_COLLECTION as c8, type DeepPartial as c9, type FenceState as cA, type FieldChange as cB, type FieldDescriptor as cC, type FieldSource as cD, type FleetMigrationResult as cE, type FormattedSequenceHandle as cF, type FrozenSnapshotRef as cG, type GhostRecord as cH, type GrantOptions as cI, type GuardViolation as cJ, type HistoryConfig as cK, type HistoryEntry as cL, INDEXED_STORE_POLICY as cM, type ImportCapability as cN, type InferOutput as cO, type InternalCollectionStats as cP, type IssueDelegationOptions as cQ, type IssueMagicLinkGrantOptions as cR, type KeyringAuthenticator as cS, type KeyringAuthenticatorWrappingDEKs as cT, type KeyringAuthenticatorWrappingKEK as cU, type KeyringFile as cV, LinkEndpointError as cW, LinkIntegrityError as cX, type LinkOnDelete as cY, type LinkRow as cZ, type LinkSetHandle as c_, type DeepPartialOrNull as ca, type DeferredNumberingConfig as cb, type DelegationToken as cc, type DeleteManyResult as cd, type DeploymentEvent as ce, type DerivationDescriptor as cf, type DirtyEntry as cg, type DryRunResult as ch, type DumpSchemaOptions as ci, ELEVATION_AUDIT_COLLECTION as cj, ElevatedHandle as ck, type EnrollAuthenticatorOptions as cl, type EnrollAuthenticatorWrappingDEKsOptions as cm, type EnrollAuthenticatorWrappingKEKOptions as cn, type EnrollRecoveryResult as co, type ExportAccessibleOptions as cp, type ExportCapability as cq, type ExportChunk as cr, type ExportFormat as cs, type ExportStreamOptions as ct, type FactorKind as cu, type FactorProofBundle as cv, type FactorRequirement as cw, type FanoutQueryOptions as cx, type FanoutResult as cy, type FenceDoc as cz, type DictionaryOptions as d, type RecoveryProof as d$, type ListAccessibleVaultsOptions as d0, type ListPageResult as d1, type ListUsersOptions as d2, type LiveQueryOptions as d3, type LiveUserEnvelope as d4, type LocaleReadOptions as d5, Lru as d6, type LruOptions as d7, type LruStats as d8, MAGIC_LINK_CONTENT_INFO_PREFIX as d9, type PersistedSchemaKind as dA, type PlaintextTranslatorContext as dB, type PlaintextTranslatorFn as dC, PresenceHandle as dD, type PresencePeer as dE, type PublicEnvelopeField as dF, type PublicEnvelopeSchema as dG, type PublicEnvelopeText as dH, type PullMode as dI, type PullOptions as dJ, type PullPolicy as dK, type PullResult as dL, type PushMode as dM, type PushOptions as dN, type PushPolicy as dO, type PushResult as dP, type PutManyItemOptions as dQ, type PutManyOptions as dR, type PutManyResult as dS, type QueryAcrossOptions as dT, type QueryAcrossResult as dU, type QuickUnlockState as dV, QuickUnlockStore as dW, type ReAuthOperation as dX, type RecoverPassphraseInput as dY, type RecoverPassphraseResult as dZ, type RecoverUserOptions as d_, MAGIC_LINK_GRANTS_COLLECTION as da, MAGIC_LINK_KEK_INFO_PREFIX as db, type MagicLinkGrantPayload as dc, type MagicLinkGrantRecord as dd, type MaterializedViewDescriptor as de, MemoryRecipientSealer as df, MemorySealingKeyProvider as dg, type MigrationStatusRow as dh, NOYDB_BACKUP_VERSION as di, NOYDB_FORMAT_VERSION as dj, NOYDB_KEYRING_VERSION as dk, NOYDB_SYNC_VERSION as dl, type NextOptions as dm, Noydb as dn, type NoydbEventMap as dp, type NoydbOptions as dq, type Assignment as dr, type OverlayViewDescriptor as ds, PUBLIC_ENVELOPE_FIELDS as dt, type PaperRecoveryDoc as du, type PaperRecoveryEntry as dv, type PassphrasePolicy as dw, type PassphraseValidationResult as dx, type Permission as dy, type Permissions as dz, type StaticDictDescriptor as e, type Unsubscribe as e$, type RefreshInsightsResult as e0, type RejectWithdrawalOptions as e1, type RequestWithdrawalOptions as e2, type RequestWithdrawalResult as e3, type ResolvedPublicEnvelopeSchema as e4, type RevokeOptions as e5, type RotatePassphraseInput as e6, type RotateRecoveryOptions as e7, type RotateRecoveryResult as e8, SEALED_PASSPHRASE_RECORD_ID as e9, type StoreAuth as eA, type StoreAuthKind as eB, type StoreCapabilities as eC, type StoreTime as eD, SyncEngine as eE, type SyncMetadata as eF, type SyncPolicy as eG, SyncScheduler as eH, type SyncSchedulerStatus as eI, type SyncStatus as eJ, type SyncTarget as eK, type SyncTargetRole as eL, SyncTransaction as eM, type SyncTransactionResult as eN, type TabChannel as eO, type TabCoordinationOptions as eP, type TabLockManager as eQ, type TabPresence as eR, type TabRole as eS, type TierMode as eT, type TransactionInvariant as eU, type TranslatorAuditEntry as eV, TxCollection as eW, type TxOp as eX, TxVault as eY, USER_ENVELOPE_COLLECTION as eZ, USER_ENVELOPE_MAX_BYTES as e_, type SchemaDelta as ea, type SchemaIntrospection as eb, type SchemaManifestRow as ec, type SealedEnvelope as ed, type SealedPassphrase as ee, type SearchEntry as ef, type SearchOptions as eg, type SearchResult as eh, type SequenceHandle as ei, type SequenceOptions as ej, SequenceStore as ek, type SessionPolicy as el, type SetPublicEnvelopeInput as em, type ShamirRecoveryDoc as en, type ShamirRecoveryEntry as eo, ShardedCollection as ep, ShardedGroupedQuery as eq, ShardedQuery as er, type ShardingConfig as es, type SkippedVault as et, type SlotRewrapCeremony as eu, type SlotRewrapContext as ev, type StandardSchemaV1 as ew, type StandardSchemaV1Issue as ex, type StandardSchemaV1SyncResult as ey, StateManagementVault as ez, dictCollectionName as f, magicLinkGrantRecordId as f$, type UpdateAuthenticatorOptions as f0, type UpdateContext as f1, type UpdateUserOptions as f2, UserApi as f3, type UserEnvelopeCheckGate as f4, UserEnvelopeOversizedError as f5, type UserEnvelopePresented as f6, type UserInfo as f7, type VaultBackup as f8, VaultGroup as f9, createNoydb as fA, createStore as fB, deriveMagicLinkContentKey as fC, enrollAuthenticator as fD, estimateEntropy as fE, evalComputedFields as fF, evaluateExportCapability as fG, evaluateImportCapability as fH, exportAccessibleData as fI, findAuthenticator as fJ, hasExportCapability as fK, hasImportCapability as fL, hasRecoveryEnrolled as fM, isLinkCollectionName as fN, isMagicLinkGrantExpired as fO, isPublicEnvelope as fP, issueDelegation as fQ, recoverPassphrase as fR, rotatePassphrase as fS, listMagicLinkGrants as fT, listUsers as fU, listUsersWithEnvelopes as fV, listWithdrawalRequests as fW, loadActiveDelegations as fX, loadPaperRecoveryEntries as fY, loadSealedPassphrase as fZ, loadShamirRecoveryEntries as f_, type VaultGroupOptions as fa, type VaultPolicyOnDisk as fb, type VaultRegistryRow as fc, type VaultSchemaSnapshot as fd, type VaultSnapshot as fe, type VaultTemplate as ff, type WarningRules as fg, WeakPassphraseError as fh, type WeakPassphraseReason as fi, type WithArchiveOptions as fj, type WithdrawAccessibleOptions as fk, type WithdrawResult as fl, type WithdrawalRequest as fm, WithdrawalRequestError as fn, type WithdrawalRequestStatus as fo, type WrappedDeksBlob as fp, type WriteConflict as fq, type WriteEvent as fr, type WriteHook as fs, type WriteQueue as ft, aesGcmOpen as fu, approveWithdrawal as fv, assertStrongPassphrase as fw, buildRecipientKeyringFile as fx, burnPaperRecoveryEntry as fy, compileSequenceFormat as fz, dictKey as g, mintPaperRecoveryEntry as g0, mintShamirRecoveryEntry as g1, mintWrappedDeksBlob as g2, parseRsaOaepTlv as g3, parseSealedEnvelope as g4, readMagicLinkGrantRecord as g5, recoverUser as g6, rejectWithdrawal as g7, removeAuthenticator as g8, requestWithdrawal as g9, persistKeyring as gA, revoke as gB, updateAuthenticator as gC, updateKeyringIdentity as gD, type TxStrategy as gE, type AmendmentTxOptions as gF, resolveSchema as ga, resolveSequenceKey as gb, revokeDelegation as gc, revokeMagicLinkGrant as gd, runTransaction as ge, savePaperRecoveryEntries as gf, saveSealedPassphrase as gg, saveShamirRecoveryEntries as gh, sealRsaOaepTlv as gi, unwrapDeksFromBlob as gj, unwrapDeksFromPaperEntry as gk, unwrapDeksFromShamirEntry as gl, unwrapMagicLinkGrant as gm, validatePassphrase as gn, validatePublicEnvelopeInput as go, validateSchemaInput as gp, validateSchemaOutput as gq, withArchive as gr, withDeferredNumbering as gs, withdrawAccessibleData as gt, writeMagicLinkGrant as gu, changeSecret as gv, createOwnerKeyring as gw, ensureCollectionDEK as gx, grant as gy, loadKeyring as gz, enforceScript as h, inferScripts as i, isDictCollectionName as j, isDictKeyDescriptor as k, isStaticDictDescriptor as l, type SessionStrategy as m, createEnforcer as n, BLOB_CHUNKS_COLLECTION as o, BLOB_COLLECTION as p, BLOB_EVICTION_AUDIT_COLLECTION as q, BLOB_INDEX_COLLECTION as r, staticDict as s, BLOB_SLOTS_PREFIX as t, BLOB_VERSIONS_PREFIX as u, validateSessionPolicy as v, type BlobEvictionEntry as w, type BlobFieldPolicy as x, type BlobFieldsConfig as y, type BlobObject as z };

package/dist/{ulid-LaxfH2tK.d.cts → ulid-Bg-IBJyA.d.cts}

@@ -1,4 +1,4 @@
-import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DyOI6XZ_.cjs';
+import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-Bhs2i_Ll.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.

package/dist/{ulid-B2L_aqVA.d.ts → ulid-Dwt3JEcy.d.ts}

@@ -1,4 +1,4 @@
-import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DLfWFr6U.js';
+import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DONgts0n.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.

package/dist/{with-materialized-view-CeZYGJVf.d.cts → with-materialized-view-BYb3p9wT.d.cts}

@@ -1,4 +1,4 @@
-import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-DyOI6XZ_.cjs';
+import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-Bhs2i_Ll.cjs';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-materialized-view-DNULSxoP.d.ts → with-materialized-view-CyVLOr09.d.ts}

@@ -1,4 +1,4 @@
-import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-DLfWFr6U.js';
+import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-DONgts0n.js';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-overlayed-view-C9joG7UZ.d.ts → with-overlayed-view-BhLRxqwI.d.ts}

@@ -1,4 +1,4 @@
-import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-DLfWFr6U.js';
+import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-DONgts0n.js';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to

package/dist/{with-overlayed-view-kdcPGHih.d.cts → with-overlayed-view-LGrQ984e.d.cts}

@@ -1,4 +1,4 @@
-import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-DyOI6XZ_.cjs';
+import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-Bhs2i_Ll.cjs';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to

package/dist/{with-rollup-s58XAeWO.d.cts → with-rollup-Bj8c7ttB.d.cts}

@@ -1,4 +1,4 @@
-import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-DyOI6XZ_.cjs';
+import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-Bhs2i_Ll.cjs';
 
 /**
  * Register a deterministic derivation: one source collection → one or

package/dist/{with-rollup-DJDbrxjf.d.ts → with-rollup-CO8ibRcK.d.ts}

@@ -1,4 +1,4 @@
-import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-DLfWFr6U.js';
+import { aC as DerivationStrategy, aG as DerivationStrategyHandle } from './types-DONgts0n.js';
 
 /**
  * Register a deterministic derivation: one source collection → one or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/hub",
-  "version": "0.2.0-pre.20",
+  "version": "0.2.0-pre.23",
   "description": "Zero-knowledge, offline-first, encrypted document store — core library with AES-256-GCM, PBKDF2, multi-user keyring, and sync engine",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -289,14 +289,14 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@noy-db/attestation": "0.2.0-pre.20"
+    "@noy-db/attestation": "0.2.0-pre.23"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "zod": "^3.23.0",
     "zod-to-json-schema": "^3.25.2",
-    "@noy-db/on-shamir": "0.2.0-pre.20"
+    "@noy-db/on-shamir": "0.2.0-pre.23"
   },
   "peerDependencies": {
     "zod-to-json-schema": "^3.25.0"