@noy-db/hub 0.2.0-pre.21 → 0.2.0-pre.24

package/dist/materialized-views/index.d.cts

@@ -1,11 +1,11 @@
-export { w as withMaterializedView } from '../with-materialized-view-CeZYGJVf.cjs';
-import { aN as Collection, bk as TxContext, bl as MVQueryContext, bm as RegisteredMV, bn as MaterializedViewRegistry } from '../types-DyOI6XZ_.cjs';
-export { bo as MaterializedFromMeta, bp as MaterializedViewOutput, aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle, bq as UnionArmJoin, br as UnionSource } from '../types-DyOI6XZ_.cjs';
-import { Q as Query } from '../index-tZqVB9g5.cjs';
-export { z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError } from '../errors-Dkc_fi-S.cjs';
+export { w as withMaterializedView } from '../with-materialized-view-D4U-KrBH.cjs';
+import { aN as Collection, bk as TxContext, bl as MVQueryContext, bm as RegisteredMV, bn as MaterializedViewRegistry } from '../types-COQ6qJZh.cjs';
+export { bo as MaterializedFromMeta, bp as MaterializedViewOutput, aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle, bq as UnionArmJoin, br as UnionSource } from '../types-COQ6qJZh.cjs';
+import { Q as Query } from '../index-BthnP2MA.cjs';
+export { z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError } from '../errors-B2tUcRPg.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
-import '../strategy-WtB-jXYv.cjs';
+import '../strategy-BWmgRPA2.cjs';
 import '../strategy-BSxFXGzb.cjs';
 import '../index-BMmajblo.cjs';
 import '@noy-db/attestation';

package/dist/materialized-views/index.d.ts

@@ -1,11 +1,11 @@
-export { w as withMaterializedView } from '../with-materialized-view-DNULSxoP.js';
-import { aN as Collection, bk as TxContext, bl as MVQueryContext, bm as RegisteredMV, bn as MaterializedViewRegistry } from '../types-DLfWFr6U.js';
-export { bo as MaterializedFromMeta, bp as MaterializedViewOutput, aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle, bq as UnionArmJoin, br as UnionSource } from '../types-DLfWFr6U.js';
-import { Q as Query } from '../index-Bm9hIY7t.js';
-export { z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError } from '../errors-Dkc_fi-S.js';
+export { w as withMaterializedView } from '../with-materialized-view-Cj-6fuav.js';
+import { aN as Collection, bk as TxContext, bl as MVQueryContext, bm as RegisteredMV, bn as MaterializedViewRegistry } from '../types-BGRX6sPT.js';
+export { bo as MaterializedFromMeta, bp as MaterializedViewOutput, aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle, bq as UnionArmJoin, br as UnionSource } from '../types-BGRX6sPT.js';
+import { Q as Query } from '../index-BLff_E35.js';
+export { z as MaterializedViewConfigError, C as MaterializedViewCycleError, E as MaterializedViewSourceUnknownError, G as MaterializedViewTooLargeError } from '../errors-B2tUcRPg.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
-import '../strategy-54eIwox5.js';
+import '../strategy-D47TC5X6.js';
 import '../strategy-BSxFXGzb.js';
 import '../index-BMmajblo.js';
 import '@noy-db/attestation';

package/dist/materialized-views/index.js

@@ -1,31 +1,31 @@
 import {
   withMaterializedView
-} from "../chunk-6QE4DUYC.js";
+} from "../chunk-ZDITTESU.js";
 import {
   MaterializedViewExecutor
-} from "../chunk-5YTXYPES.js";
+} from "../chunk-5A2FVGHT.js";
 import {
   MaterializedViewRegistry,
   analyzeDependencies,
   canonicalizeQueryPlan,
   computeQueryHash,
   summarizeQueryPlan
-} from "../chunk-KOAJ3TZM.js";
+} from "../chunk-RFEXGW3L.js";
 import {
   clearMVStale,
   isMVStale,
   markMVStale,
   resolveStaleMVOnRead
-} from "../chunk-IW4L4X65.js";
-import "../chunk-JYNH4FIM.js";
-import "../chunk-U2XSUCDF.js";
-import "../chunk-TNH5SLCD.js";
+} from "../chunk-P5A4E53B.js";
+import "../chunk-77WF53XY.js";
+import "../chunk-GEWIFM4J.js";
+import "../chunk-HD4QCT2O.js";
 import {
   MaterializedViewConfigError,
   MaterializedViewCycleError,
   MaterializedViewSourceUnknownError,
   MaterializedViewTooLargeError
-} from "../chunk-OTWT6BAJ.js";
+} from "../chunk-4BB4T3O7.js";
 export {
   MaterializedViewConfigError,
   MaterializedViewCycleError,

package/dist/{mime-magic-CjSyakO4.d.ts → mime-magic-BswIvWkR.d.ts}

@@ -1,4 +1,4 @@
-import { V as ObjectProjection } from './types-DLfWFr6U.js';
+import { V as ObjectProjection } from './types-BGRX6sPT.js';
 
 /**
  * Import / bootstrap (reverse projection) — walk an existing bucket/prefix in an

package/dist/{mime-magic-BnJCGJzB.d.cts → mime-magic-CCrP-iXJ.d.cts}

@@ -1,4 +1,4 @@
-import { V as ObjectProjection } from './types-DyOI6XZ_.cjs';
+import { V as ObjectProjection } from './types-COQ6qJZh.cjs';
 
 /**
  * Import / bootstrap (reverse projection) — walk an existing bucket/prefix in an

package/dist/{ulid-B2L_aqVA.d.ts → multi-bundle-6s5nKAZX.d.ts}

@@ -1,4 +1,4 @@
-import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DLfWFr6U.js';
+import { bg as PublicEnvelope, bh as BundleRecipient, bd as SealingKeyProvider, bi as RecipientSealer, bj as RecipientHint, bc as Vault } from './types-BGRX6sPT.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.
@@ -535,69 +535,125 @@ declare function readNoydbBundlePublicEnvelope(bytes: Uint8Array, opts?: {
  */
 declare function readNoydbBundle(bytes: Uint8Array, opts?: ReadNoydbBundleOptions): Promise<NoydbBundleReadResult>;
 
+/** One decrypted record from an extracted-partition compartment. */
+interface DecryptedRecord {
+    readonly id: string;
+    readonly record: Record<string, unknown>;
+    /** Source envelope write timestamp (ISO) — for last-write-wins merges. */
+    readonly ts: string;
+    /** Source envelope version. */
+    readonly version: number;
+    /** Provenance source id (FR-5). Present only when the source collection had provenance:true and a source was supplied on put. */
+    readonly source?: string;
+    /** ISO-8601 timestamp the provenance source was recorded (FR-5). */
+    readonly sourceTs?: string;
+}
 /**
- * Minimal ULID generator — zero dependencies, Web Crypto API only.
- *
- *. Used by the bundle writer to generate stable opaque
- * handles for `.noydb` containers.
- *
- * **What's a ULID?** A 128-bit identifier encoded as 26 Crockford
- * base32 characters. Layout:
- *
- * ```
- *   01HYABCDEFGHJKMNPQRSTVWXYZ
- *   |--------||---------------|
- *    48-bit     80-bit
- *    timestamp  randomness
- * ```
- *
- * The first 10 chars encode a millisecond Unix timestamp (so ULIDs
- * sort lexicographically by creation time), and the remaining 16
- * chars are random. Crockford base32 omits I/L/O/U to avoid
- * ambiguity in handwriting and URLs.
- *
- * **Why hand-roll instead of pulling in `ulid`?** The package adds
- * a dep, the implementation is ~30 lines, and the bundle module
- * is the only consumer. Adding `ulid` would also drag in its own
- * crypto polyfill that we don't need on Node 18+ or modern
- * browsers.
+ * Decrypt every record of an extracted-partition bundle to plaintext,
+ * grouped by collection. Throws if the bundle isn't an
+ * extracted-partition or the transfer key is wrong.
+ */
+declare function decryptExtractedPartition(bundleBytes: Uint8Array, transferKey: Uint8Array): Promise<Record<string, DecryptedRecord[]>>;
+
+/**
+ * Multi-compartment `.noydb` bundle (`NDBM`). A thin outer container
+ * that embeds N standard single-vault `.noydb` bundles plus an
+ * unencrypted, owner-curated **manifest**. The v1 single-vault format
+ * is untouched; each compartment is a complete v1 bundle, produced by
+ * `writeNoydbBundle` and read by `readNoydbBundle`.
  *
- * **Privacy consideration:** the timestamp prefix is observable in
- * the bundle header. This is a deliberate trade-off:
- *   - Pro: lexicographic sortability lets bundle adapters list
- *     newest-first without an extra index.
- *   - Con: a casual observer can read the bundle's creation time
- *     from the handle. They cannot read it from any OTHER field
- *     (the header explicitly forbids `_exported_at`), and a
- *     creation timestamp is the same kind of metadata that
- *     filesystem mtime would already expose for a downloaded
- *     bundle. The leak is therefore equivalent to what's already
- *     visible from the file's mtime — not a new exposure.
+ * Layout: magic 'NDBM'(4) · version(1) · reserved(1) · manifestLen(4 BE)
+ *         · manifest JSON · concat(inner v1 bundles, in manifest order).
  *
- * If a future use case needs timestamp-free handles, a v2 of the
- * format could specify "use the random portion only" without a
- * format break — `validateBundleHeader` only checks the regex
- * shape, not the encoded timestamp.
+ * @packageDocumentation
  */
+
+/** Magic bytes 'NDBM' — NOYDB Multi-compartment bundle. */
+declare const NOYDB_MULTI_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
+/** Fixed prefix: magic(4) + version(1) + reserved(1) + manifestLen(4). */
+declare const NOYDB_MULTI_BUNDLE_PREFIX_BYTES = 10;
+/** Current multi-bundle layout version. */
+declare const NOYDB_MULTI_BUNDLE_VERSION = 1;
+/** One compartment's entry in the pre-decrypt manifest. */
+interface CompartmentManifest {
+    /** The inner v1 bundle's stable ULID handle. */
+    readonly handle: string;
+    /** Owner-curated classification (e.g. 'shard', 'pool'). Opt-in. */
+    readonly roleTag?: string;
+    /** ISO export timestamp. Always set by the writer; absent for a v1 bundle read as a 1-entry manifest. */
+    readonly exportedAt?: string;
+    /** Compartment (vault) name. Opt-in disclosure. */
+    readonly name?: string;
+    /** Collection names + record counts. Opt-in disclosure. */
+    readonly collections?: readonly {
+        readonly name: string;
+        readonly count: number;
+    }[];
+    /** Inner bundle's owner-curated public envelope, surfaced. Opt-in. */
+    readonly publicEnvelope?: PublicEnvelope;
+    /** Byte length of the inner v1 bundle (drives framing). */
+    readonly innerBytes: number;
+    /** SHA-256 (lowercase hex) of the inner v1 bundle bytes — pre-decrypt integrity. */
+    readonly innerSha256: string;
+    /** Source vault's schema fence version at extract time (FR-8). Opt-in; absent on older bundles. */
+    readonly schemaVersion?: number;
+}
+/** The unencrypted manifest of a multi-compartment bundle. */
+interface MultiBundleManifest {
+    readonly multiFormatVersion: number;
+    /** Opaque ULID for the outer container. */
+    readonly handle: string;
+    readonly compartments: readonly CompartmentManifest[];
+}
+/** Assemble the `NDBM` container from a manifest + inner bundle bytes (in manifest order). */
+declare function encodeMultiBundle(manifest: MultiBundleManifest, inner: readonly Uint8Array[]): Uint8Array;
+/** Parse the `NDBM` container into its manifest + raw inner bundle byte slices. */
+declare function decodeMultiBundle(bytes: Uint8Array): {
+    manifest: MultiBundleManifest;
+    inner: Uint8Array[];
+};
+/** Per-compartment input to {@link writeMultiVaultBundle}. */
+interface MultiVaultCompartmentInput {
+    readonly vault: Vault;
+    /** Owner-curated classification surfaced in the manifest (e.g. 'shard', 'pool'). */
+    readonly roleTag?: string;
+    /** ISO timestamp for the manifest; defaults to now. */
+    readonly exportedAt?: string;
+    /** Opt-in pre-decrypt disclosure for this compartment. */
+    readonly disclose?: {
+        /** `true` → use `vault.name`; a string → that explicit name. */
+        readonly name?: boolean | string;
+        /** `true` → include collection names + record counts. */
+        readonly collections?: boolean;
+        /** `true` → surface the inner bundle's public envelope into the manifest. */
+        readonly publicEnvelope?: boolean;
+    };
+    /** Options forwarded to `writeNoydbBundle` for this compartment's inner bundle. */
+    readonly bundleOptions?: WriteNoydbBundleOptions;
+}
+/** Write N vaults into one `NDBM` multi-compartment bundle. */
+declare function writeMultiVaultBundle(compartments: readonly MultiVaultCompartmentInput[], opts?: {
+    readonly handle?: string;
+}): Promise<Uint8Array>;
 /**
- * Generate a fresh ULID. Uses `crypto.getRandomValues` for the
- * randomness portion — same Web Crypto API the rest of the
- * codebase uses for IVs and salt.
- *
- * Returns a 26-character string. Calling twice in the same
- * millisecond produces two distinct ULIDs (the random portion
- * differs); ULIDs from the same millisecond are NOT guaranteed
- * to be monotonically ordered relative to each other, only
- * relative to ULIDs from a different millisecond. The bundle
- * format never relies on intra-millisecond ordering.
+ * Read the pre-decrypt manifest of a bundle WITHOUT decrypting any
+ * compartment. Accepts a multi-compartment `NDBM` bundle (returns its
+ * N entries) OR a single v1 `NDB1` bundle (returns a 1-entry manifest,
+ * for uniform handling). Throws on anything else.
  */
-declare function generateULID(): string;
+declare function readNoydbBundleManifest(bytes: Uint8Array): Promise<CompartmentManifest[]>;
 /**
- * Validate that a string is a syntactically well-formed ULID. Used
- * by the bundle header validator. Does NOT verify that the
- * timestamp portion decodes to a sensible date — the format only
- * cares about the encoding shape.
+ * Extract one compartment's inner v1 `.noydb` bundle bytes, ready to
+ * pass to `readNoydbBundle`. `selector` is a compartment `handle` or a
+ * zero-based index. For a single v1 bundle, the bundle itself is the
+ * only compartment.
+ *
+ * Does NOT verify the manifest `innerSha256` — it returns the raw
+ * slice. Integrity is enforced downstream: `readNoydbBundle` verifies
+ * the inner bundle's own `bodySha256`. Callers wanting an early,
+ * pre-decrypt check can hash the returned bytes against the
+ * compartment's `innerSha256`.
  */
-declare function isULID(value: string): boolean;
+declare function readMultiVaultBundleCompartment(bytes: Uint8Array, selector: string | number): Uint8Array;
 
-export { type AutoCredential as A, COMPRESSION_BROTLI as C, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompressionAlgo as c, FLAG_HAS_INTEGRITY_HASH as d, NOYDB_BUNDLE_MAGIC as e, NOYDB_BUNDLE_PREFIX_BYTES as f, type NoydbBundleHeader as g, type NoydbBundleReadResult as h, encodeBundleHeader as i, generateULID as j, isULID as k, readNoydbBundleHeader as l, resetBrotliSupportCache as m, type AutoCredentialKind as n, hasNoydbBundleMagic as o, readNoydbBundlePublicEnvelope as p, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };
+export { type AutoCredential as A, hasNoydbBundleMagic as B, COMPRESSION_BROTLI as C, type DecryptedRecord as D, readNoydbBundlePublicEnvelope as E, FLAG_COMPRESSED as F, type MultiBundleManifest as M, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompartmentManifest as c, type CompressionAlgo as d, FLAG_HAS_INTEGRITY_HASH as e, type MultiVaultCompartmentInput as f, NOYDB_BUNDLE_MAGIC as g, NOYDB_BUNDLE_PREFIX_BYTES as h, NOYDB_MULTI_BUNDLE_MAGIC as i, NOYDB_MULTI_BUNDLE_PREFIX_BYTES as j, NOYDB_MULTI_BUNDLE_VERSION as k, type NoydbBundleHeader as l, type NoydbBundleReadResult as m, decodeMultiBundle as n, decryptExtractedPartition as o, encodeBundleHeader as p, encodeMultiBundle as q, readMultiVaultBundleCompartment as r, readNoydbBundle as s, readNoydbBundleHeader as t, readNoydbBundleManifest as u, resetBrotliSupportCache as v, validateBundleHeader as w, writeMultiVaultBundle as x, writeNoydbBundle as y, type AutoCredentialKind as z };

package/dist/{ulid-LaxfH2tK.d.cts → multi-bundle-WhYiJEgV.d.cts}

@@ -1,4 +1,4 @@
-import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DyOI6XZ_.cjs';
+import { bg as PublicEnvelope, bh as BundleRecipient, bd as SealingKeyProvider, bi as RecipientSealer, bj as RecipientHint, bc as Vault } from './types-COQ6qJZh.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.
@@ -535,69 +535,125 @@ declare function readNoydbBundlePublicEnvelope(bytes: Uint8Array, opts?: {
  */
 declare function readNoydbBundle(bytes: Uint8Array, opts?: ReadNoydbBundleOptions): Promise<NoydbBundleReadResult>;
 
+/** One decrypted record from an extracted-partition compartment. */
+interface DecryptedRecord {
+    readonly id: string;
+    readonly record: Record<string, unknown>;
+    /** Source envelope write timestamp (ISO) — for last-write-wins merges. */
+    readonly ts: string;
+    /** Source envelope version. */
+    readonly version: number;
+    /** Provenance source id (FR-5). Present only when the source collection had provenance:true and a source was supplied on put. */
+    readonly source?: string;
+    /** ISO-8601 timestamp the provenance source was recorded (FR-5). */
+    readonly sourceTs?: string;
+}
 /**
- * Minimal ULID generator — zero dependencies, Web Crypto API only.
- *
- *. Used by the bundle writer to generate stable opaque
- * handles for `.noydb` containers.
- *
- * **What's a ULID?** A 128-bit identifier encoded as 26 Crockford
- * base32 characters. Layout:
- *
- * ```
- *   01HYABCDEFGHJKMNPQRSTVWXYZ
- *   |--------||---------------|
- *    48-bit     80-bit
- *    timestamp  randomness
- * ```
- *
- * The first 10 chars encode a millisecond Unix timestamp (so ULIDs
- * sort lexicographically by creation time), and the remaining 16
- * chars are random. Crockford base32 omits I/L/O/U to avoid
- * ambiguity in handwriting and URLs.
- *
- * **Why hand-roll instead of pulling in `ulid`?** The package adds
- * a dep, the implementation is ~30 lines, and the bundle module
- * is the only consumer. Adding `ulid` would also drag in its own
- * crypto polyfill that we don't need on Node 18+ or modern
- * browsers.
+ * Decrypt every record of an extracted-partition bundle to plaintext,
+ * grouped by collection. Throws if the bundle isn't an
+ * extracted-partition or the transfer key is wrong.
+ */
+declare function decryptExtractedPartition(bundleBytes: Uint8Array, transferKey: Uint8Array): Promise<Record<string, DecryptedRecord[]>>;
+
+/**
+ * Multi-compartment `.noydb` bundle (`NDBM`). A thin outer container
+ * that embeds N standard single-vault `.noydb` bundles plus an
+ * unencrypted, owner-curated **manifest**. The v1 single-vault format
+ * is untouched; each compartment is a complete v1 bundle, produced by
+ * `writeNoydbBundle` and read by `readNoydbBundle`.
  *
- * **Privacy consideration:** the timestamp prefix is observable in
- * the bundle header. This is a deliberate trade-off:
- *   - Pro: lexicographic sortability lets bundle adapters list
- *     newest-first without an extra index.
- *   - Con: a casual observer can read the bundle's creation time
- *     from the handle. They cannot read it from any OTHER field
- *     (the header explicitly forbids `_exported_at`), and a
- *     creation timestamp is the same kind of metadata that
- *     filesystem mtime would already expose for a downloaded
- *     bundle. The leak is therefore equivalent to what's already
- *     visible from the file's mtime — not a new exposure.
+ * Layout: magic 'NDBM'(4) · version(1) · reserved(1) · manifestLen(4 BE)
+ *         · manifest JSON · concat(inner v1 bundles, in manifest order).
  *
- * If a future use case needs timestamp-free handles, a v2 of the
- * format could specify "use the random portion only" without a
- * format break — `validateBundleHeader` only checks the regex
- * shape, not the encoded timestamp.
+ * @packageDocumentation
  */
+
+/** Magic bytes 'NDBM' — NOYDB Multi-compartment bundle. */
+declare const NOYDB_MULTI_BUNDLE_MAGIC: Uint8Array<ArrayBuffer>;
+/** Fixed prefix: magic(4) + version(1) + reserved(1) + manifestLen(4). */
+declare const NOYDB_MULTI_BUNDLE_PREFIX_BYTES = 10;
+/** Current multi-bundle layout version. */
+declare const NOYDB_MULTI_BUNDLE_VERSION = 1;
+/** One compartment's entry in the pre-decrypt manifest. */
+interface CompartmentManifest {
+    /** The inner v1 bundle's stable ULID handle. */
+    readonly handle: string;
+    /** Owner-curated classification (e.g. 'shard', 'pool'). Opt-in. */
+    readonly roleTag?: string;
+    /** ISO export timestamp. Always set by the writer; absent for a v1 bundle read as a 1-entry manifest. */
+    readonly exportedAt?: string;
+    /** Compartment (vault) name. Opt-in disclosure. */
+    readonly name?: string;
+    /** Collection names + record counts. Opt-in disclosure. */
+    readonly collections?: readonly {
+        readonly name: string;
+        readonly count: number;
+    }[];
+    /** Inner bundle's owner-curated public envelope, surfaced. Opt-in. */
+    readonly publicEnvelope?: PublicEnvelope;
+    /** Byte length of the inner v1 bundle (drives framing). */
+    readonly innerBytes: number;
+    /** SHA-256 (lowercase hex) of the inner v1 bundle bytes — pre-decrypt integrity. */
+    readonly innerSha256: string;
+    /** Source vault's schema fence version at extract time (FR-8). Opt-in; absent on older bundles. */
+    readonly schemaVersion?: number;
+}
+/** The unencrypted manifest of a multi-compartment bundle. */
+interface MultiBundleManifest {
+    readonly multiFormatVersion: number;
+    /** Opaque ULID for the outer container. */
+    readonly handle: string;
+    readonly compartments: readonly CompartmentManifest[];
+}
+/** Assemble the `NDBM` container from a manifest + inner bundle bytes (in manifest order). */
+declare function encodeMultiBundle(manifest: MultiBundleManifest, inner: readonly Uint8Array[]): Uint8Array;
+/** Parse the `NDBM` container into its manifest + raw inner bundle byte slices. */
+declare function decodeMultiBundle(bytes: Uint8Array): {
+    manifest: MultiBundleManifest;
+    inner: Uint8Array[];
+};
+/** Per-compartment input to {@link writeMultiVaultBundle}. */
+interface MultiVaultCompartmentInput {
+    readonly vault: Vault;
+    /** Owner-curated classification surfaced in the manifest (e.g. 'shard', 'pool'). */
+    readonly roleTag?: string;
+    /** ISO timestamp for the manifest; defaults to now. */
+    readonly exportedAt?: string;
+    /** Opt-in pre-decrypt disclosure for this compartment. */
+    readonly disclose?: {
+        /** `true` → use `vault.name`; a string → that explicit name. */
+        readonly name?: boolean | string;
+        /** `true` → include collection names + record counts. */
+        readonly collections?: boolean;
+        /** `true` → surface the inner bundle's public envelope into the manifest. */
+        readonly publicEnvelope?: boolean;
+    };
+    /** Options forwarded to `writeNoydbBundle` for this compartment's inner bundle. */
+    readonly bundleOptions?: WriteNoydbBundleOptions;
+}
+/** Write N vaults into one `NDBM` multi-compartment bundle. */
+declare function writeMultiVaultBundle(compartments: readonly MultiVaultCompartmentInput[], opts?: {
+    readonly handle?: string;
+}): Promise<Uint8Array>;
 /**
- * Generate a fresh ULID. Uses `crypto.getRandomValues` for the
- * randomness portion — same Web Crypto API the rest of the
- * codebase uses for IVs and salt.
- *
- * Returns a 26-character string. Calling twice in the same
- * millisecond produces two distinct ULIDs (the random portion
- * differs); ULIDs from the same millisecond are NOT guaranteed
- * to be monotonically ordered relative to each other, only
- * relative to ULIDs from a different millisecond. The bundle
- * format never relies on intra-millisecond ordering.
+ * Read the pre-decrypt manifest of a bundle WITHOUT decrypting any
+ * compartment. Accepts a multi-compartment `NDBM` bundle (returns its
+ * N entries) OR a single v1 `NDB1` bundle (returns a 1-entry manifest,
+ * for uniform handling). Throws on anything else.
  */
-declare function generateULID(): string;
+declare function readNoydbBundleManifest(bytes: Uint8Array): Promise<CompartmentManifest[]>;
 /**
- * Validate that a string is a syntactically well-formed ULID. Used
- * by the bundle header validator. Does NOT verify that the
- * timestamp portion decodes to a sensible date — the format only
- * cares about the encoding shape.
+ * Extract one compartment's inner v1 `.noydb` bundle bytes, ready to
+ * pass to `readNoydbBundle`. `selector` is a compartment `handle` or a
+ * zero-based index. For a single v1 bundle, the bundle itself is the
+ * only compartment.
+ *
+ * Does NOT verify the manifest `innerSha256` — it returns the raw
+ * slice. Integrity is enforced downstream: `readNoydbBundle` verifies
+ * the inner bundle's own `bodySha256`. Callers wanting an early,
+ * pre-decrypt check can hash the returned bytes against the
+ * compartment's `innerSha256`.
  */
-declare function isULID(value: string): boolean;
+declare function readMultiVaultBundleCompartment(bytes: Uint8Array, selector: string | number): Uint8Array;
 
-export { type AutoCredential as A, COMPRESSION_BROTLI as C, FLAG_COMPRESSED as F, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompressionAlgo as c, FLAG_HAS_INTEGRITY_HASH as d, NOYDB_BUNDLE_MAGIC as e, NOYDB_BUNDLE_PREFIX_BYTES as f, type NoydbBundleHeader as g, type NoydbBundleReadResult as h, encodeBundleHeader as i, generateULID as j, isULID as k, readNoydbBundleHeader as l, resetBrotliSupportCache as m, type AutoCredentialKind as n, hasNoydbBundleMagic as o, readNoydbBundlePublicEnvelope as p, readNoydbBundle as r, validateBundleHeader as v, writeNoydbBundle as w };
+export { type AutoCredential as A, hasNoydbBundleMagic as B, COMPRESSION_BROTLI as C, type DecryptedRecord as D, readNoydbBundlePublicEnvelope as E, FLAG_COMPRESSED as F, type MultiBundleManifest as M, NOYDB_BUNDLE_FORMAT_VERSION as N, type ReadNoydbBundleOptions as R, type TransferSealPayload as T, type WriteNoydbBundleOptions as W, COMPRESSION_GZIP as a, COMPRESSION_NONE as b, type CompartmentManifest as c, type CompressionAlgo as d, FLAG_HAS_INTEGRITY_HASH as e, type MultiVaultCompartmentInput as f, NOYDB_BUNDLE_MAGIC as g, NOYDB_BUNDLE_PREFIX_BYTES as h, NOYDB_MULTI_BUNDLE_MAGIC as i, NOYDB_MULTI_BUNDLE_PREFIX_BYTES as j, NOYDB_MULTI_BUNDLE_VERSION as k, type NoydbBundleHeader as l, type NoydbBundleReadResult as m, decodeMultiBundle as n, decryptExtractedPartition as o, encodeBundleHeader as p, encodeMultiBundle as q, readMultiVaultBundleCompartment as r, readNoydbBundle as s, readNoydbBundleHeader as t, readNoydbBundleManifest as u, resetBrotliSupportCache as v, validateBundleHeader as w, writeMultiVaultBundle as x, writeNoydbBundle as y, type AutoCredentialKind as z };

package/dist/noydb-2PI2ZBX6.js

@@ -0,0 +1,38 @@
+import {
+  Noydb,
+  createNoydb
+} from "./chunk-QOXZM3L2.js";
+import "./chunk-EMIGCR7X.js";
+import "./chunk-BCMHJYVT.js";
+import "./chunk-CCNRFAL3.js";
+import "./chunk-3XJU3OHE.js";
+import "./chunk-FG6IQ3ZL.js";
+import "./chunk-U6LTLN7O.js";
+import "./chunk-JKM2AVVH.js";
+import "./chunk-TQMQZOMX.js";
+import "./chunk-77WF53XY.js";
+import "./chunk-GEWIFM4J.js";
+import "./chunk-XC32SZPW.js";
+import "./chunk-4TCMCCC3.js";
+import "./chunk-P7OL22JP.js";
+import "./chunk-DCA2BDHA.js";
+import "./chunk-HHJ5DZCZ.js";
+import "./chunk-UF3BUNQZ.js";
+import "./chunk-7X4EF35A.js";
+import "./chunk-HD4QCT2O.js";
+import "./chunk-OWAMTSAI.js";
+import "./chunk-TOMSCJRV.js";
+import "./chunk-B5CSNGSE.js";
+import "./chunk-2QR2PQTT.js";
+import "./chunk-FZU343FL.js";
+import "./chunk-AONK5GCC.js";
+import "./chunk-PDVP3C2I.js";
+import "./chunk-35U5YNRR.js";
+import "./chunk-LR7CODVN.js";
+import "./chunk-WQ3KAGOV.js";
+import "./chunk-4BB4T3O7.js";
+export {
+  Noydb,
+  createNoydb
+};
+//# sourceMappingURL=noydb-2PI2ZBX6.js.map