@noy-db/hub 0.2.0-pre.25 → 0.2.0-pre.27

package/dist/team/index.d.cts

@@ -1,5 +1,5 @@
-import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-BCYvhKzr.cjs';
-export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-BCYvhKzr.cjs';
+import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-CwrTuYFI.cjs';
+export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-CwrTuYFI.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
 import '../strategy-D1zjEV3n.cjs';

package/dist/team/index.d.ts

@@ -1,5 +1,5 @@
-import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-CCq0WHh9.js';
-export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-CCq0WHh9.js';
+import { aW as NoydbStore, aU as UnlockedKeyring } from '../types-CkSWJt0H.js';
+export { be as BundleRecipient, cd as EnrollAuthenticatorOptions, ce as EnrollAuthenticatorWrappingDEKsOptions, cf as EnrollAuthenticatorWrappingKEKOptions, cW as ListUsersOptions, dk as PaperRecoveryEntry, dt as PresenceHandle, dO as RecoverPassphraseInput, dP as RecoverPassphraseResult, dQ as RecoverUserOptions, dR as RecoveryProof, dX as RotatePassphraseInput, ed as SlotRewrapCeremony, ee as SlotRewrapContext, em as SyncEngine, eu as SyncTransaction, eK as UpdateAuthenticatorOptions, f3 as WrappedDeksBlob, fb as buildRecipientKeyringFile, fc as burnPaperRecoveryEntry, ga as changeSecret, gb as createOwnerKeyring, fg as deriveMagicLinkContentKey, fh as enrollAuthenticator, gc as ensureCollectionDEK, fk as evaluateExportCapability, fl as evaluateImportCapability, fn as findAuthenticator, gd as grant, fo as hasExportCapability, fp as hasImportCapability, fs as isMagicLinkGrantExpired, fy as listMagicLinkGrants, fz as listUsers, fA as listUsersWithEnvelopes, ge as loadKeyring, fD as loadPaperRecoveryEntries, fG as magicLinkGrantRecordId, fH as mintPaperRecoveryEntry, fJ as mintWrappedDeksBlob, gf as persistKeyring, fM as readMagicLinkGrantRecord, fv as recoverPassphrase, fN as recoverUser, fP as removeAuthenticator, gg as revoke, fU as revokeMagicLinkGrant, fw as rotatePassphrase, fW as savePaperRecoveryEntries, f_ as unwrapDeksFromBlob, f$ as unwrapDeksFromPaperEntry, g1 as unwrapMagicLinkGrant, gh as updateAuthenticator, gi as updateKeyringIdentity, g9 as writeMagicLinkGrant } from '../types-CkSWJt0H.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
 import '../strategy-YQ1qJWyq.js';

package/dist/team/index.js

@@ -5,7 +5,7 @@ import {
   getCredential,
   listCredentials,
   putCredential
-} from "../chunk-OCRDV3NU.js";
+} from "../chunk-5EITJMUJ.js";
 import {
   burnPaperRecoveryEntry,
   deriveMagicLinkContentKey,
@@ -29,13 +29,13 @@ import {
   unwrapMagicLinkGrant,
   updateAuthenticator,
   writeMagicLinkGrant
-} from "../chunk-2RHBFCWQ.js";
+} from "../chunk-IWGVH2RR.js";
 import "../chunk-J73KU4AE.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "../chunk-GPZHHTJU.js";
+} from "../chunk-DONPLWRC.js";
 import {
   buildRecipientKeyringFile,
   changeSecret,
@@ -52,9 +52,9 @@ import {
   persistKeyring,
   revoke,
   updateKeyringIdentity
-} from "../chunk-UNBX2HMA.js";
+} from "../chunk-LXA2E3VI.js";
 import "../chunk-2QR2PQTT.js";
-import "../chunk-LR7CODVN.js";
+import "../chunk-AD6RNBAW.js";
 import "../chunk-7JSP3E67.js";
 import "../chunk-DDOYOMAD.js";
 export {

package/dist/{transition-guard-BSLdikC_.d.ts → transition-guard-CJmb8O8q.d.ts}

@@ -1,4 +1,4 @@
-import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-CCq0WHh9.js';
+import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-CkSWJt0H.js';
 
 /**
  * Register a guard for a collection. Guards run on every `put()` /

package/dist/{transition-guard-DPs6al8h.d.cts → transition-guard-Dzj68JWC.d.cts}

@@ -1,4 +1,4 @@
-import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-BCYvhKzr.cjs';
+import { an as GuardStrategy, ar as GuardStrategyHandle, ao as GuardChange, ap as GuardContext } from './types-CwrTuYFI.cjs';
 
 /**
  * Register a guard for a collection. Guards run on every `put()` /

package/dist/tx/index.d.cts

@@ -1,5 +1,5 @@
-import { eC as TransactionInvariant, gj as TxStrategy } from '../types-BCYvhKzr.cjs';
-export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-BCYvhKzr.cjs';
+import { eC as TransactionInvariant, gj as TxStrategy } from '../types-CwrTuYFI.cjs';
+export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-CwrTuYFI.cjs';
 import '../lazy-builder-eYZzLEL1.cjs';
 import '../predicate-BmhBSPCH.cjs';
 import '../strategy-D1zjEV3n.cjs';

package/dist/tx/index.d.ts

@@ -1,5 +1,5 @@
-import { eC as TransactionInvariant, gj as TxStrategy } from '../types-CCq0WHh9.js';
-export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-CCq0WHh9.js';
+import { eC as TransactionInvariant, gj as TxStrategy } from '../types-CkSWJt0H.js';
+export { gk as AmendmentTxOptions, eE as TxCollection, bk as TxContext, eG as TxVault, fV as runTransaction } from '../types-CkSWJt0H.js';
 import '../lazy-builder-ChSqcF5t.js';
 import '../predicate-BmhBSPCH.js';
 import '../strategy-YQ1qJWyq.js';

package/dist/{types-CCq0WHh9.d.ts → types-CkSWJt0H.d.ts}

@@ -3121,12 +3121,99 @@ declare class SchemaUpdateGate {
  * pattern of `_meta/policy` (no PII — a counter + a state enum).
  */
 
-type FenceState = 'normal' | 'draining' | 'migrating' | 'complete';
+type FenceState$1 = 'normal' | 'draining' | 'migrating' | 'complete';
 interface FenceDoc {
     readonly currentSchemaVersion: number;
-    readonly fenceState: FenceState;
+    readonly fenceState: FenceState$1;
 }
 
+/**
+ * Kernel coordination port — the injected `CoordinationProvider` seam for the
+ * schema-fence drain-barrier (#469).
+ *
+ * The kernel defines this port; `@noy-db/by-tabs` / `@noy-db/by-peer` implement
+ * it for real-time quorum, and an external orchestrator (`@klum-db/lobby`)
+ * drives it through the `Noydb` handle without ever naming a `by-*` package.
+ * The dependency arrow is `by-* → kernel ← klum`, the app at the apex.
+ *
+ * This module carries only the port TYPES plus two pure-ish helpers:
+ * {@link isQuorum} (a pure quorum predicate extracted from the legacy
+ * `activeQuiesced`) and {@link runDrainBarrier} (the reusable barrier protocol
+ * the migration cutover and klum both call).
+ *
+ * @module
+ */
+
+/** Vault fence state (the existing FenceDoc shape). */
+interface FenceState {
+    readonly currentSchemaVersion: number;
+    readonly fenceState: 'normal' | 'draining' | 'migrating' | 'complete';
+}
+/** A writer's presence + ack, tagged with the session that owns it. */
+interface WriterPresence {
+    /** = today's clientId (one per tab/peer). */
+    readonly writerId: string;
+    /** Groups one user's writers across vaults (consolidation is klum's job). */
+    readonly sessionId: string;
+    readonly lastSeen: number;
+    readonly quiescedAtVersion: number | null;
+}
+/** Session-addressable drain-barrier coordination transport. Per-vault ops. */
+interface CoordinationProvider {
+    /** orchestrator → all writers */
+    setFence(vault: string, fence: FenceState): Promise<void>;
+    /**
+     * Fresh one-shot fence read for the write-path gate (`assertWritable`).
+     * A direct read (not a cached `observeFence` snapshot) avoids a staleness
+     * window and keeps the timing-sensitive cutover gate exact. The store
+     * default reads `_meta/schema-fence`; `by-*` return their last-pushed fence.
+     */
+    readFence(vault: string): Promise<FenceState>;
+    /** writer observes fence changes (default: poll-emit; by-*: push) */
+    observeFence(vault: string, onChange: (f: FenceState) => void): Unsubscribe$3;
+    /** writer → orchestrator: presence + ack (heartbeat + quiescedAtVersion) */
+    reportPresence(vault: string, p: WriterPresence): Promise<void>;
+    /** orchestrator observes presence changes (default: poll-emit; by-*: push) */
+    observePresence(vault: string, onChange: (writers: readonly WriterPresence[]) => void): Unsubscribe$3;
+    /** orchestrator one-shot snapshot of reachable writers (quorum input) */
+    reachableWriters(vault: string, o: {
+        staleMs: number;
+        now: number;
+    }): Promise<readonly WriterPresence[]>;
+}
+/**
+ * Pure quorum predicate: true when every writer (other than `excludeWriterId`)
+ * has acked at exactly `generation`. An empty set is trivially a quorum.
+ *
+ * Extracted from the legacy `activeQuiesced` store-polling check so the
+ * migration cutover, the store default provider, and `by-*` real-time
+ * providers all share one definition of "everyone has drained".
+ */
+declare function isQuorum(writers: readonly WriterPresence[], generation: number, excludeWriterId?: string): boolean;
+/** Inputs for {@link runDrainBarrier}. */
+interface DrainBarrierOptions {
+    readonly vault: string;
+    readonly generation: number;
+    readonly writerId: string;
+    readonly onFlush: () => Promise<void>;
+    readonly staleMs: number;
+    readonly quiesceTimeoutMs: number;
+    readonly now: () => number;
+    /** Optional seam (mainly for deterministic tests) run before each poll tick. */
+    readonly onPoll?: () => Promise<void>;
+}
+/**
+ * The reusable drain-barrier protocol shared by the migration cutover and klum:
+ *
+ *   drain self → setFence(draining) → await quorum (presence push + isQuorum,
+ *   polling as a fallback, or timeout) → run() → release-by-caller.
+ *
+ * Resolves once every reachable writer (excluding `writerId`) has quiesced at
+ * `generation`, at which point `run` is invoked exactly once. Rejects with
+ * {@link QuiesceTimeoutError} if `quiesceTimeoutMs` elapses first.
+ */
+declare function runDrainBarrier(provider: CoordinationProvider, o: DrainBarrierOptions, run: () => Promise<void>): Promise<void>;
+
 /**
  * Vault-level schema-fence controller.
  *
@@ -3135,6 +3222,11 @@ interface FenceDoc {
  * migrator). 3b: a cooperative ack-barrier — after `draining`, the
  * migrator waits for the active client set (registry heartbeats) to ack
  * the draining generation before transforming. No leader election.
+ *
+ * The transport is the injected {@link CoordinationProvider} port: the
+ * default {@link StoreCoordinationProvider} maps it onto today's
+ * `_meta/schema-fence` store ops, so behavior is byte-for-byte the same;
+ * `by-tabs` / `by-peer` swap in real-time push transports.
  */
 
 /** Runs one collection's transform; supplied by the Vault (binds to a Collection). */
@@ -3142,16 +3234,23 @@ type RunTransform = (collection: string, transform: TransformFn) => Promise<void
 declare class SchemaFenceController {
     #private;
     constructor(opts: {
-        store: NoydbStore;
+        coordination: CoordinationProvider;
         vault: string;
         onFlush: () => Promise<void>;
+        /** Stable per-instance id; the migrator excludes itself from the barrier. */
         clientId?: string;
+        /**
+         * Accepted for wiring symmetry with {@link FenceWatcher}, but the migrator
+         * never reports its own presence (it excludes itself from the barrier), so
+         * it carries no session of its own.
+         */
+        sessionId?: string;
         now?: () => number;
         staleMs?: number;
         quiesceTimeoutMs?: number;
         emit?: (e: {
             currentSchemaVersion: number;
-            fenceState: FenceState;
+            fenceState: FenceState$1;
         }) => void;
     });
     /** Capture the generation snapshot at vault-open. */
@@ -3164,8 +3263,8 @@ declare class SchemaFenceController {
      * Admin trigger. Drain → wait for the active set to quiesce (or time out)
      * → migrate each pending transform → bump → complete → normal. The
      * migrator excludes itself from the barrier (it drained synchronously
-     * here). `onPoll` (tests) advances other clients between barrier checks;
-     * production falls back to a short real delay.
+     * inside {@link runDrainBarrier}). `onPoll` (tests) advances other clients
+     * between barrier checks; production falls back to a short real delay.
      */
     runCutover(run: RunTransform, opts?: {
         onPoll?: () => Promise<void>;
@@ -5381,6 +5480,10 @@ declare class Noydb {
     private readonly writeHooks;
     private readonly subsystemBus;
     private readonly clientId;
+    /** Session that owns this instance's writers (one user's writers across vaults). */
+    private readonly sessionId;
+    /** Drain-barrier coordination transport for the schema fence (#469). */
+    private readonly coordinationProvider;
     private readonly vaultCache;
     private readonly keyringCache;
     private readonly syncEngines;
@@ -5883,6 +5986,14 @@ declare class Noydb {
     get _subsystemBus(): SubsystemBus;
     /** @internal Stable per-instance id for schema-cutover coordination. */
     get _clientId(): string;
+    /** @internal Session that owns this instance's writers (#469). */
+    get _sessionId(): string;
+    /**
+     * @internal Drain-barrier coordination transport for the schema fence (#469).
+     * The default store-backed provider reproduces today's fence behavior; a
+     * `by-*` real-time transport is injected via `coordinationStrategy`.
+     */
+    get coordination(): CoordinationProvider;
     /**
      * Soft-lock a single vault: clear its in-memory keyring, DEKs, vault
      * instance, sync engine, policy enforcer, and active-tier entry —
@@ -14577,6 +14688,25 @@ interface NoydbOptions {
      * Defaults to `'anonymous'` when not supplied.
      */
     readonly plaintextTranslatorName?: string;
+    /**
+     * Drain-barrier coordination transport for the schema fence (#469).
+     * When omitted, the kernel uses a {@link CoordinationProvider} backed by the
+     * primary store (`StoreCoordinationProvider`), reproducing today's
+     * store-polling fence behavior byte-for-byte. `@noy-db/by-tabs` /
+     * `@noy-db/by-peer` inject a real-time push transport here; an external
+     * orchestrator (`@klum-db/lobby`) drives it through the `Noydb` handle.
+     *
+     * @internal
+     */
+    readonly coordinationStrategy?: CoordinationProvider;
+    /**
+     * Stable id for the session that owns this instance's writers (one user's
+     * writers across vaults). Tags every {@link WriterPresence} the fence
+     * watcher reports. Defaults to a fresh ULID per `Noydb` instance.
+     *
+     * @internal
+     */
+    readonly sessionId?: string;
 }
 /** History configuration. */
 interface HistoryConfig {
@@ -14662,4 +14792,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type VersionRecord as $, type BlobPutOptions as A, type BlobStrategy as B, type BlobResponseOptions as C, DICT_COLLECTION_PREFIX as D, BlobSet as E, type BlobStrategyOpenArgs as F, type CompactRunOptions as G, type CompactionContext as H, type I18nStrategy as I, type CompactionResult as J, DEFAULT_CHUNK_SIZE as K, EXPORT_AUDIT_COLLECTION as L, ExportBlobsAbortedError as M, type ExportBlobsAuditEntry as N, type ExportBlobsHandle as O, PolicyEnforcer as P, type ExportBlobsOptions as Q, type ExportedBlob as R, type ScriptWarning as S, type ObjectListEntry as T, type ObjectMeta as U, type ObjectProjection as V, type ObjectUrlOptions as W, type PutObjectOptions as X, type PutUrlOptions as Y, type SlotInfo as Z, type SlotRecord as _, type DictEntry as a, type ChangeType as a$, createExportBlobsHandle as a0, memoryObjectProjection as a1, runCompaction as a2, type ConsentStrategy as a3, CONSENT_AUDIT_COLLECTION as a4, type ConsentAuditEntry as a5, type ConsentAuditFilter as a6, type ConsentContext as a7, type ConsentOp as a8, loadConsentEntries as a9, type SnapshotMeta as aA, type SnapshotMode as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, type OverlayFieldMergeMode as aO, type OverlayFieldMergeRule as aP, OverlayedViewRegistry as aQ, type OverlayedViewStrategyHandle as aR, type SyncStrategy as aS, type Role as aT, type UnlockedKeyring as aU, type HistoryStrategy as aV, type NoydbStore as aW, type HistoryOptions as aX, type EncryptedEnvelope as aY, type PruneOptions as aZ, type AppendInput as a_, writeConsentEntry as aa, type PeriodsStrategy as ab, type CarryForwardContext as ac, type ClosePeriodOptions as ad, type OpenPeriodOptions as ae, PERIODS_COLLECTION as af, type PeriodRecord as ag, type ReadOnlyCollection as ah, appendPeriodLedgerEntry as ai, assertTsWritable as aj, chainAnchor as ak, loadPeriods as al, validatePeriodName as am, type GuardStrategy as an, type GuardChange as ao, type GuardContext as ap, GuardRegistry as aq, type GuardStrategyHandle as ar, ReadOnlyVaultFacade as as, type ShadowStrategy as at, CollectionFrame as au, VaultFrame as av, type NoydbBundleStore as aw, type RetentionPolicy as ax, type SnapshotPolicy as ay, type SnapshotStrategy as az, type DictKeyDescriptor as b, CustodyApi as b$, CollectionInstant as b0, type DiffEntry as b1, type JsonPatch as b2, type JsonPatchOp as b3, LedgerStore as b4, type VaultEngine as b5, VaultInstant as b6, type VerifyResult as b7, applyPatch as b8, computePatch as b9, type PersistedSchemaEnvelope as bA, type UpdateDecision as bB, type DirectoryConfig as bC, type UserVisibility as bD, type AccessibleVault as bE, type AffectedDocument as bF, type ApproveWithdrawalOptions as bG, type ArchivePolicy as bH, type ArchiveResult as bI, type ArchiveRunOptions as bJ, type ArchiveStrategy as bK, BUNDLE_STORE_POLICY as bL, type BuiltInGateName as bM, type CacheOptions as bN, type CacheStats as bO, type ChangeEvent as bP, type CollectionChangeEvent as bQ, type CollectionConflictResolver as bR, type CollectionDescriptor as bS, type CollectionStats as bT, ComputedFieldError as bU, type ComputedFields as bV, type ComputedFn as bW, type Conflict as bX, type ConflictPolicy as bY, type ConflictStrategy as bZ, type CrossTierAccessEvent as b_, diff as ba, formatDiff as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, TxContext as bk, type MVQueryContext as bl, type RegisteredMV as bm, MaterializedViewRegistry as bn, type MaterializedFromMeta as bo, type MaterializedViewOutput as bp, type UnionArmJoin as bq, type UnionSource as br, type UserEnvelope as bs, type GateName as bt, type GatePolicy as bu, type VaultPolicy as bv, type ActiveTier as bw, type FactorProof as bx, type SchemaUpdateStrategy as by, type TransformFn as bz, DictionaryHandle as c, type LruStats as c$, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c0, DELEGATIONS_COLLECTION as c1, type DeepPartial as c2, type DeepPartialOrNull as c3, type DeferredNumberingConfig as c4, type DelegationToken as c5, type DeleteManyResult as c6, type DerivationDescriptor as c7, type DirtyEntry as c8, type DryRunResult as c9, type HistoryConfig as cA, type HistoryEntry as cB, INDEXED_STORE_POLICY as cC, type ImportCapability as cD, type InferOutput as cE, type InternalCollectionStats as cF, type IssueDelegationOptions as cG, type IssueMagicLinkGrantOptions as cH, type KeyringAuthenticator as cI, type KeyringAuthenticatorWrappingDEKs as cJ, type KeyringAuthenticatorWrappingKEK as cK, type KeyringFile as cL, type LiberateOptions as cM, type LiberateResult as cN, LinkEndpointError as cO, LinkIntegrityError as cP, type LinkOnDelete as cQ, type LinkRow as cR, type LinkSetHandle as cS, type LinkSpec as cT, type ListAccessibleVaultsOptions as cU, type ListPageResult as cV, type ListUsersOptions as cW, type LiveUserEnvelope as cX, type LocaleReadOptions as cY, Lru as cZ, type LruOptions as c_, type DumpSchemaOptions as ca, ELEVATION_AUDIT_COLLECTION as cb, ElevatedHandle as cc, type EnrollAuthenticatorOptions as cd, type EnrollAuthenticatorWrappingDEKsOptions as ce, type EnrollAuthenticatorWrappingKEKOptions as cf, type EnrollRecoveryResult as cg, type ExportAccessibleOptions as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type FormattedSequenceHandle as cu, type FrozenSnapshotRef as cv, type GhostRecord as cw, type GrantCustodianOptions as cx, type GrantOptions as cy, type GuardViolation as cz, type DictionaryOptions as d, type SchemaDelta as d$, MAGIC_LINK_CONTENT_INFO_PREFIX as d0, MAGIC_LINK_GRANTS_COLLECTION as d1, MAGIC_LINK_KEK_INFO_PREFIX as d2, type MagicLinkGrantPayload as d3, type MagicLinkGrantRecord as d4, type MaterializedViewDescriptor as d5, MemoryRecipientSealer as d6, MemorySealingKeyProvider as d7, NOYDB_BACKUP_VERSION as d8, NOYDB_FORMAT_VERSION as d9, type PullPolicy as dA, type PullResult as dB, type PushMode as dC, type PushOptions as dD, type PushPolicy as dE, type PushResult as dF, type PutManyItemOptions as dG, type PutManyOptions as dH, type PutManyResult as dI, type QueryAcrossOptions as dJ, type QueryAcrossResult as dK, type QuickUnlockState as dL, QuickUnlockStore as dM, type ReAuthOperation as dN, type RecoverPassphraseInput as dO, type RecoverPassphraseResult as dP, type RecoverUserOptions as dQ, type RecoveryProof as dR, type RejectWithdrawalOptions as dS, type RequestWithdrawalOptions as dT, type RequestWithdrawalResult as dU, type ResolvedPublicEnvelopeSchema as dV, type RevokeOptions as dW, type RotatePassphraseInput as dX, type RotateRecoveryOptions as dY, type RotateRecoveryResult as dZ, SEALED_PASSPHRASE_RECORD_ID as d_, NOYDB_KEYRING_VERSION as da, NOYDB_SYNC_VERSION as db, type NextOptions as dc, Noydb as dd, type NoydbEventMap as de, type NoydbOptions as df, type Assignment as dg, type OverlayViewDescriptor as dh, PUBLIC_ENVELOPE_FIELDS as di, type PaperRecoveryDoc as dj, type PaperRecoveryEntry as dk, type PassphrasePolicy as dl, type PassphraseValidationResult as dm, type Permission as dn, type Permissions as dp, type PersistedSchemaKind as dq, type PlaintextTranslatorContext as dr, type PlaintextTranslatorFn as ds, PresenceHandle as dt, type PresencePeer as du, type PublicEnvelopeField as dv, type PublicEnvelopeSchema as dw, type PublicEnvelopeText as dx, type PullMode as dy, type PullOptions as dz, type StaticDictDescriptor as e, type WithdrawResult as e$, type SchemaIntrospection as e0, type SealedEnvelope as e1, type SealedPassphrase as e2, type SearchEntry as e3, type SearchOptions as e4, type SearchResult as e5, type SequenceHandle as e6, type SequenceOptions as e7, SequenceStore as e8, type SessionPolicy as e9, type TabRole as eA, type TierMode as eB, type TransactionInvariant as eC, type TranslatorAuditEntry as eD, TxCollection as eE, type TxOp as eF, TxVault as eG, USER_ENVELOPE_COLLECTION as eH, USER_ENVELOPE_MAX_BYTES as eI, type Unsubscribe as eJ, type UpdateAuthenticatorOptions as eK, type UpdateContext as eL, type UpdateUserOptions as eM, UserApi as eN, type UserEnvelopeCheckGate as eO, UserEnvelopeOversizedError as eP, type UserEnvelopePresented as eQ, type UserInfo as eR, type VaultBackup as eS, type VaultPolicyOnDisk as eT, type VaultSchemaSnapshot as eU, type VaultSnapshot as eV, type WarningRules as eW, WeakPassphraseError as eX, type WeakPassphraseReason as eY, type WithArchiveOptions as eZ, type WithdrawAccessibleOptions as e_, type SetPublicEnvelopeInput as ea, type ShamirRecoveryDoc as eb, type ShamirRecoveryEntry as ec, type SlotRewrapCeremony as ed, type SlotRewrapContext as ee, type StandardSchemaV1 as ef, type StandardSchemaV1Issue as eg, type StandardSchemaV1SyncResult as eh, type StoreAuth as ei, type StoreAuthKind as ej, type StoreCapabilities as ek, type StoreTime as el, SyncEngine as em, type SyncMetadata as en, type SyncPolicy as eo, SyncScheduler as ep, type SyncSchedulerStatus as eq, type SyncStatus as er, type SyncTarget as es, type SyncTargetRole as et, SyncTransaction as eu, type SyncTransactionResult as ev, type TabChannel as ew, type TabCoordinationOptions as ex, type TabLockManager as ey, type TabPresence as ez, dictCollectionName as f, unwrapDeksFromPaperEntry as f$, type WithdrawalRequest as f0, WithdrawalRequestError as f1, type WithdrawalRequestStatus as f2, type WrappedDeksBlob as f3, type WriteConflict as f4, type WriteEvent as f5, type WriteHook as f6, type WriteQueue as f7, aesGcmOpen as f8, approveWithdrawal as f9, listUsersWithEnvelopes as fA, listWithdrawalRequests as fB, loadActiveDelegations as fC, loadPaperRecoveryEntries as fD, loadSealedPassphrase as fE, loadShamirRecoveryEntries as fF, magicLinkGrantRecordId as fG, mintPaperRecoveryEntry as fH, mintShamirRecoveryEntry as fI, mintWrappedDeksBlob as fJ, parseRsaOaepTlv as fK, parseSealedEnvelope as fL, readMagicLinkGrantRecord as fM, recoverUser as fN, rejectWithdrawal as fO, removeAuthenticator as fP, requestWithdrawal as fQ, resolveSchema as fR, resolveSequenceKey as fS, revokeDelegation as fT, revokeMagicLinkGrant as fU, runTransaction as fV, savePaperRecoveryEntries as fW, saveSealedPassphrase as fX, saveShamirRecoveryEntries as fY, sealRsaOaepTlv as fZ, unwrapDeksFromBlob as f_, assertStrongPassphrase as fa, buildRecipientKeyringFile as fb, burnPaperRecoveryEntry as fc, compileSequenceFormat as fd, createNoydb as fe, createStore as ff, deriveMagicLinkContentKey as fg, enrollAuthenticator as fh, estimateEntropy as fi, evalComputedFields as fj, evaluateExportCapability as fk, evaluateImportCapability as fl, exportAccessibleData as fm, findAuthenticator as fn, hasExportCapability as fo, hasImportCapability as fp, hasRecoveryEnrolled as fq, isLinkCollectionName as fr, isMagicLinkGrantExpired as fs, isPublicEnvelope as ft, issueDelegation as fu, recoverPassphrase as fv, rotatePassphrase as fw, liberateVault as fx, listMagicLinkGrants as fy, listUsers as fz, dictKey as g, unwrapDeksFromShamirEntry as g0, unwrapMagicLinkGrant as g1, validatePassphrase as g2, validatePublicEnvelopeInput as g3, validateSchemaInput as g4, validateSchemaOutput as g5, withArchive as g6, withDeferredNumbering as g7, withdrawAccessibleData as g8, writeMagicLinkGrant as g9, changeSecret as ga, createOwnerKeyring as gb, ensureCollectionDEK as gc, grant as gd, loadKeyring as ge, persistKeyring as gf, revoke as gg, updateAuthenticator as gh, updateKeyringIdentity as gi, type TxStrategy as gj, type AmendmentTxOptions as gk, enforceScript as h, inferScripts as i, isDictCollectionName as j, isDictKeyDescriptor as k, isStaticDictDescriptor as l, type SessionStrategy as m, createEnforcer as n, BLOB_CHUNKS_COLLECTION as o, BLOB_COLLECTION as p, BLOB_EVICTION_AUDIT_COLLECTION as q, BLOB_INDEX_COLLECTION as r, staticDict as s, BLOB_SLOTS_PREFIX as t, BLOB_VERSIONS_PREFIX as u, validateSessionPolicy as v, type BlobEvictionEntry as w, type BlobFieldPolicy as x, type BlobFieldsConfig as y, type BlobObject as z };
+export { type VersionRecord as $, type BlobPutOptions as A, type BlobStrategy as B, type BlobResponseOptions as C, DICT_COLLECTION_PREFIX as D, BlobSet as E, type BlobStrategyOpenArgs as F, type CompactRunOptions as G, type CompactionContext as H, type I18nStrategy as I, type CompactionResult as J, DEFAULT_CHUNK_SIZE as K, EXPORT_AUDIT_COLLECTION as L, ExportBlobsAbortedError as M, type ExportBlobsAuditEntry as N, type ExportBlobsHandle as O, PolicyEnforcer as P, type ExportBlobsOptions as Q, type ExportedBlob as R, type ScriptWarning as S, type ObjectListEntry as T, type ObjectMeta as U, type ObjectProjection as V, type ObjectUrlOptions as W, type PutObjectOptions as X, type PutUrlOptions as Y, type SlotInfo as Z, type SlotRecord as _, type DictEntry as a, type ChangeType as a$, createExportBlobsHandle as a0, memoryObjectProjection as a1, runCompaction as a2, type ConsentStrategy as a3, CONSENT_AUDIT_COLLECTION as a4, type ConsentAuditEntry as a5, type ConsentAuditFilter as a6, type ConsentContext as a7, type ConsentOp as a8, loadConsentEntries as a9, type SnapshotMeta as aA, type SnapshotMode as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, type OverlayFieldMergeMode as aO, type OverlayFieldMergeRule as aP, OverlayedViewRegistry as aQ, type OverlayedViewStrategyHandle as aR, type SyncStrategy as aS, type Role as aT, type UnlockedKeyring as aU, type HistoryStrategy as aV, type NoydbStore as aW, type HistoryOptions as aX, type EncryptedEnvelope as aY, type PruneOptions as aZ, type AppendInput as a_, writeConsentEntry as aa, type PeriodsStrategy as ab, type CarryForwardContext as ac, type ClosePeriodOptions as ad, type OpenPeriodOptions as ae, PERIODS_COLLECTION as af, type PeriodRecord as ag, type ReadOnlyCollection as ah, appendPeriodLedgerEntry as ai, assertTsWritable as aj, chainAnchor as ak, loadPeriods as al, validatePeriodName as am, type GuardStrategy as an, type GuardChange as ao, type GuardContext as ap, GuardRegistry as aq, type GuardStrategyHandle as ar, ReadOnlyVaultFacade as as, type ShadowStrategy as at, CollectionFrame as au, VaultFrame as av, type NoydbBundleStore as aw, type RetentionPolicy as ax, type SnapshotPolicy as ay, type SnapshotStrategy as az, type DictKeyDescriptor as b, CustodyApi as b$, CollectionInstant as b0, type DiffEntry as b1, type JsonPatch as b2, type JsonPatchOp as b3, LedgerStore as b4, type VaultEngine as b5, VaultInstant as b6, type VerifyResult as b7, applyPatch as b8, computePatch as b9, type PersistedSchemaEnvelope as bA, type UpdateDecision as bB, type DirectoryConfig as bC, type UserVisibility as bD, type AccessibleVault as bE, type AffectedDocument as bF, type ApproveWithdrawalOptions as bG, type ArchivePolicy as bH, type ArchiveResult as bI, type ArchiveRunOptions as bJ, type ArchiveStrategy as bK, BUNDLE_STORE_POLICY as bL, type BuiltInGateName as bM, type CacheOptions as bN, type CacheStats as bO, type ChangeEvent as bP, type CollectionChangeEvent as bQ, type CollectionConflictResolver as bR, type CollectionDescriptor as bS, type CollectionStats as bT, ComputedFieldError as bU, type ComputedFields as bV, type ComputedFn as bW, type Conflict as bX, type ConflictPolicy as bY, type ConflictStrategy as bZ, type CrossTierAccessEvent as b_, diff as ba, formatDiff as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, TxContext as bk, type MVQueryContext as bl, type RegisteredMV as bm, MaterializedViewRegistry as bn, type MaterializedFromMeta as bo, type MaterializedViewOutput as bp, type UnionArmJoin as bq, type UnionSource as br, type UserEnvelope as bs, type GateName as bt, type GatePolicy as bu, type VaultPolicy as bv, type ActiveTier as bw, type FactorProof as bx, type SchemaUpdateStrategy as by, type TransformFn as bz, DictionaryHandle as c, type LruStats as c$, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c0, DELEGATIONS_COLLECTION as c1, type DeepPartial as c2, type DeepPartialOrNull as c3, type DeferredNumberingConfig as c4, type DelegationToken as c5, type DeleteManyResult as c6, type DerivationDescriptor as c7, type DirtyEntry as c8, type DryRunResult as c9, type HistoryConfig as cA, type HistoryEntry as cB, INDEXED_STORE_POLICY as cC, type ImportCapability as cD, type InferOutput as cE, type InternalCollectionStats as cF, type IssueDelegationOptions as cG, type IssueMagicLinkGrantOptions as cH, type KeyringAuthenticator as cI, type KeyringAuthenticatorWrappingDEKs as cJ, type KeyringAuthenticatorWrappingKEK as cK, type KeyringFile as cL, type LiberateOptions as cM, type LiberateResult as cN, LinkEndpointError as cO, LinkIntegrityError as cP, type LinkOnDelete as cQ, type LinkRow as cR, type LinkSetHandle as cS, type LinkSpec as cT, type ListAccessibleVaultsOptions as cU, type ListPageResult as cV, type ListUsersOptions as cW, type LiveUserEnvelope as cX, type LocaleReadOptions as cY, Lru as cZ, type LruOptions as c_, type DumpSchemaOptions as ca, ELEVATION_AUDIT_COLLECTION as cb, ElevatedHandle as cc, type EnrollAuthenticatorOptions as cd, type EnrollAuthenticatorWrappingDEKsOptions as ce, type EnrollAuthenticatorWrappingKEKOptions as cf, type EnrollRecoveryResult as cg, type ExportAccessibleOptions as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState$1 as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type FormattedSequenceHandle as cu, type FrozenSnapshotRef as cv, type GhostRecord as cw, type GrantCustodianOptions as cx, type GrantOptions as cy, type GuardViolation as cz, type DictionaryOptions as d, type SchemaDelta as d$, MAGIC_LINK_CONTENT_INFO_PREFIX as d0, MAGIC_LINK_GRANTS_COLLECTION as d1, MAGIC_LINK_KEK_INFO_PREFIX as d2, type MagicLinkGrantPayload as d3, type MagicLinkGrantRecord as d4, type MaterializedViewDescriptor as d5, MemoryRecipientSealer as d6, MemorySealingKeyProvider as d7, NOYDB_BACKUP_VERSION as d8, NOYDB_FORMAT_VERSION as d9, type PullPolicy as dA, type PullResult as dB, type PushMode as dC, type PushOptions as dD, type PushPolicy as dE, type PushResult as dF, type PutManyItemOptions as dG, type PutManyOptions as dH, type PutManyResult as dI, type QueryAcrossOptions as dJ, type QueryAcrossResult as dK, type QuickUnlockState as dL, QuickUnlockStore as dM, type ReAuthOperation as dN, type RecoverPassphraseInput as dO, type RecoverPassphraseResult as dP, type RecoverUserOptions as dQ, type RecoveryProof as dR, type RejectWithdrawalOptions as dS, type RequestWithdrawalOptions as dT, type RequestWithdrawalResult as dU, type ResolvedPublicEnvelopeSchema as dV, type RevokeOptions as dW, type RotatePassphraseInput as dX, type RotateRecoveryOptions as dY, type RotateRecoveryResult as dZ, SEALED_PASSPHRASE_RECORD_ID as d_, NOYDB_KEYRING_VERSION as da, NOYDB_SYNC_VERSION as db, type NextOptions as dc, Noydb as dd, type NoydbEventMap as de, type NoydbOptions as df, type Assignment as dg, type OverlayViewDescriptor as dh, PUBLIC_ENVELOPE_FIELDS as di, type PaperRecoveryDoc as dj, type PaperRecoveryEntry as dk, type PassphrasePolicy as dl, type PassphraseValidationResult as dm, type Permission as dn, type Permissions as dp, type PersistedSchemaKind as dq, type PlaintextTranslatorContext as dr, type PlaintextTranslatorFn as ds, PresenceHandle as dt, type PresencePeer as du, type PublicEnvelopeField as dv, type PublicEnvelopeSchema as dw, type PublicEnvelopeText as dx, type PullMode as dy, type PullOptions as dz, type StaticDictDescriptor as e, type WithdrawResult as e$, type SchemaIntrospection as e0, type SealedEnvelope as e1, type SealedPassphrase as e2, type SearchEntry as e3, type SearchOptions as e4, type SearchResult as e5, type SequenceHandle as e6, type SequenceOptions as e7, SequenceStore as e8, type SessionPolicy as e9, type TabRole as eA, type TierMode as eB, type TransactionInvariant as eC, type TranslatorAuditEntry as eD, TxCollection as eE, type TxOp as eF, TxVault as eG, USER_ENVELOPE_COLLECTION as eH, USER_ENVELOPE_MAX_BYTES as eI, type Unsubscribe as eJ, type UpdateAuthenticatorOptions as eK, type UpdateContext as eL, type UpdateUserOptions as eM, UserApi as eN, type UserEnvelopeCheckGate as eO, UserEnvelopeOversizedError as eP, type UserEnvelopePresented as eQ, type UserInfo as eR, type VaultBackup as eS, type VaultPolicyOnDisk as eT, type VaultSchemaSnapshot as eU, type VaultSnapshot as eV, type WarningRules as eW, WeakPassphraseError as eX, type WeakPassphraseReason as eY, type WithArchiveOptions as eZ, type WithdrawAccessibleOptions as e_, type SetPublicEnvelopeInput as ea, type ShamirRecoveryDoc as eb, type ShamirRecoveryEntry as ec, type SlotRewrapCeremony as ed, type SlotRewrapContext as ee, type StandardSchemaV1 as ef, type StandardSchemaV1Issue as eg, type StandardSchemaV1SyncResult as eh, type StoreAuth as ei, type StoreAuthKind as ej, type StoreCapabilities as ek, type StoreTime as el, SyncEngine as em, type SyncMetadata as en, type SyncPolicy as eo, SyncScheduler as ep, type SyncSchedulerStatus as eq, type SyncStatus as er, type SyncTarget as es, type SyncTargetRole as et, SyncTransaction as eu, type SyncTransactionResult as ev, type TabChannel as ew, type TabCoordinationOptions as ex, type TabLockManager as ey, type TabPresence as ez, dictCollectionName as f, unwrapDeksFromPaperEntry as f$, type WithdrawalRequest as f0, WithdrawalRequestError as f1, type WithdrawalRequestStatus as f2, type WrappedDeksBlob as f3, type WriteConflict as f4, type WriteEvent as f5, type WriteHook as f6, type WriteQueue as f7, aesGcmOpen as f8, approveWithdrawal as f9, listUsersWithEnvelopes as fA, listWithdrawalRequests as fB, loadActiveDelegations as fC, loadPaperRecoveryEntries as fD, loadSealedPassphrase as fE, loadShamirRecoveryEntries as fF, magicLinkGrantRecordId as fG, mintPaperRecoveryEntry as fH, mintShamirRecoveryEntry as fI, mintWrappedDeksBlob as fJ, parseRsaOaepTlv as fK, parseSealedEnvelope as fL, readMagicLinkGrantRecord as fM, recoverUser as fN, rejectWithdrawal as fO, removeAuthenticator as fP, requestWithdrawal as fQ, resolveSchema as fR, resolveSequenceKey as fS, revokeDelegation as fT, revokeMagicLinkGrant as fU, runTransaction as fV, savePaperRecoveryEntries as fW, saveSealedPassphrase as fX, saveShamirRecoveryEntries as fY, sealRsaOaepTlv as fZ, unwrapDeksFromBlob as f_, assertStrongPassphrase as fa, buildRecipientKeyringFile as fb, burnPaperRecoveryEntry as fc, compileSequenceFormat as fd, createNoydb as fe, createStore as ff, deriveMagicLinkContentKey as fg, enrollAuthenticator as fh, estimateEntropy as fi, evalComputedFields as fj, evaluateExportCapability as fk, evaluateImportCapability as fl, exportAccessibleData as fm, findAuthenticator as fn, hasExportCapability as fo, hasImportCapability as fp, hasRecoveryEnrolled as fq, isLinkCollectionName as fr, isMagicLinkGrantExpired as fs, isPublicEnvelope as ft, issueDelegation as fu, recoverPassphrase as fv, rotatePassphrase as fw, liberateVault as fx, listMagicLinkGrants as fy, listUsers as fz, dictKey as g, unwrapDeksFromShamirEntry as g0, unwrapMagicLinkGrant as g1, validatePassphrase as g2, validatePublicEnvelopeInput as g3, validateSchemaInput as g4, validateSchemaOutput as g5, withArchive as g6, withDeferredNumbering as g7, withdrawAccessibleData as g8, writeMagicLinkGrant as g9, changeSecret as ga, createOwnerKeyring as gb, ensureCollectionDEK as gc, grant as gd, loadKeyring as ge, persistKeyring as gf, revoke as gg, updateAuthenticator as gh, updateKeyringIdentity as gi, type TxStrategy as gj, type AmendmentTxOptions as gk, type CoordinationProvider as gl, type DrainBarrierOptions as gm, type FenceState as gn, type WriterPresence as go, isQuorum as gp, runDrainBarrier as gq, enforceScript as h, inferScripts as i, isDictCollectionName as j, isDictKeyDescriptor as k, isStaticDictDescriptor as l, type SessionStrategy as m, createEnforcer as n, BLOB_CHUNKS_COLLECTION as o, BLOB_COLLECTION as p, BLOB_EVICTION_AUDIT_COLLECTION as q, BLOB_INDEX_COLLECTION as r, staticDict as s, BLOB_SLOTS_PREFIX as t, BLOB_VERSIONS_PREFIX as u, validateSessionPolicy as v, type BlobEvictionEntry as w, type BlobFieldPolicy as x, type BlobFieldsConfig as y, type BlobObject as z };

package/dist/{types-BCYvhKzr.d.cts → types-CwrTuYFI.d.cts}

@@ -3121,12 +3121,99 @@ declare class SchemaUpdateGate {
  * pattern of `_meta/policy` (no PII — a counter + a state enum).
  */
 
-type FenceState = 'normal' | 'draining' | 'migrating' | 'complete';
+type FenceState$1 = 'normal' | 'draining' | 'migrating' | 'complete';
 interface FenceDoc {
     readonly currentSchemaVersion: number;
-    readonly fenceState: FenceState;
+    readonly fenceState: FenceState$1;
 }
 
+/**
+ * Kernel coordination port — the injected `CoordinationProvider` seam for the
+ * schema-fence drain-barrier (#469).
+ *
+ * The kernel defines this port; `@noy-db/by-tabs` / `@noy-db/by-peer` implement
+ * it for real-time quorum, and an external orchestrator (`@klum-db/lobby`)
+ * drives it through the `Noydb` handle without ever naming a `by-*` package.
+ * The dependency arrow is `by-* → kernel ← klum`, the app at the apex.
+ *
+ * This module carries only the port TYPES plus two pure-ish helpers:
+ * {@link isQuorum} (a pure quorum predicate extracted from the legacy
+ * `activeQuiesced`) and {@link runDrainBarrier} (the reusable barrier protocol
+ * the migration cutover and klum both call).
+ *
+ * @module
+ */
+
+/** Vault fence state (the existing FenceDoc shape). */
+interface FenceState {
+    readonly currentSchemaVersion: number;
+    readonly fenceState: 'normal' | 'draining' | 'migrating' | 'complete';
+}
+/** A writer's presence + ack, tagged with the session that owns it. */
+interface WriterPresence {
+    /** = today's clientId (one per tab/peer). */
+    readonly writerId: string;
+    /** Groups one user's writers across vaults (consolidation is klum's job). */
+    readonly sessionId: string;
+    readonly lastSeen: number;
+    readonly quiescedAtVersion: number | null;
+}
+/** Session-addressable drain-barrier coordination transport. Per-vault ops. */
+interface CoordinationProvider {
+    /** orchestrator → all writers */
+    setFence(vault: string, fence: FenceState): Promise<void>;
+    /**
+     * Fresh one-shot fence read for the write-path gate (`assertWritable`).
+     * A direct read (not a cached `observeFence` snapshot) avoids a staleness
+     * window and keeps the timing-sensitive cutover gate exact. The store
+     * default reads `_meta/schema-fence`; `by-*` return their last-pushed fence.
+     */
+    readFence(vault: string): Promise<FenceState>;
+    /** writer observes fence changes (default: poll-emit; by-*: push) */
+    observeFence(vault: string, onChange: (f: FenceState) => void): Unsubscribe$3;
+    /** writer → orchestrator: presence + ack (heartbeat + quiescedAtVersion) */
+    reportPresence(vault: string, p: WriterPresence): Promise<void>;
+    /** orchestrator observes presence changes (default: poll-emit; by-*: push) */
+    observePresence(vault: string, onChange: (writers: readonly WriterPresence[]) => void): Unsubscribe$3;
+    /** orchestrator one-shot snapshot of reachable writers (quorum input) */
+    reachableWriters(vault: string, o: {
+        staleMs: number;
+        now: number;
+    }): Promise<readonly WriterPresence[]>;
+}
+/**
+ * Pure quorum predicate: true when every writer (other than `excludeWriterId`)
+ * has acked at exactly `generation`. An empty set is trivially a quorum.
+ *
+ * Extracted from the legacy `activeQuiesced` store-polling check so the
+ * migration cutover, the store default provider, and `by-*` real-time
+ * providers all share one definition of "everyone has drained".
+ */
+declare function isQuorum(writers: readonly WriterPresence[], generation: number, excludeWriterId?: string): boolean;
+/** Inputs for {@link runDrainBarrier}. */
+interface DrainBarrierOptions {
+    readonly vault: string;
+    readonly generation: number;
+    readonly writerId: string;
+    readonly onFlush: () => Promise<void>;
+    readonly staleMs: number;
+    readonly quiesceTimeoutMs: number;
+    readonly now: () => number;
+    /** Optional seam (mainly for deterministic tests) run before each poll tick. */
+    readonly onPoll?: () => Promise<void>;
+}
+/**
+ * The reusable drain-barrier protocol shared by the migration cutover and klum:
+ *
+ *   drain self → setFence(draining) → await quorum (presence push + isQuorum,
+ *   polling as a fallback, or timeout) → run() → release-by-caller.
+ *
+ * Resolves once every reachable writer (excluding `writerId`) has quiesced at
+ * `generation`, at which point `run` is invoked exactly once. Rejects with
+ * {@link QuiesceTimeoutError} if `quiesceTimeoutMs` elapses first.
+ */
+declare function runDrainBarrier(provider: CoordinationProvider, o: DrainBarrierOptions, run: () => Promise<void>): Promise<void>;
+
 /**
  * Vault-level schema-fence controller.
  *
@@ -3135,6 +3222,11 @@ interface FenceDoc {
  * migrator). 3b: a cooperative ack-barrier — after `draining`, the
  * migrator waits for the active client set (registry heartbeats) to ack
  * the draining generation before transforming. No leader election.
+ *
+ * The transport is the injected {@link CoordinationProvider} port: the
+ * default {@link StoreCoordinationProvider} maps it onto today's
+ * `_meta/schema-fence` store ops, so behavior is byte-for-byte the same;
+ * `by-tabs` / `by-peer` swap in real-time push transports.
  */
 
 /** Runs one collection's transform; supplied by the Vault (binds to a Collection). */
@@ -3142,16 +3234,23 @@ type RunTransform = (collection: string, transform: TransformFn) => Promise<void
 declare class SchemaFenceController {
     #private;
     constructor(opts: {
-        store: NoydbStore;
+        coordination: CoordinationProvider;
         vault: string;
         onFlush: () => Promise<void>;
+        /** Stable per-instance id; the migrator excludes itself from the barrier. */
         clientId?: string;
+        /**
+         * Accepted for wiring symmetry with {@link FenceWatcher}, but the migrator
+         * never reports its own presence (it excludes itself from the barrier), so
+         * it carries no session of its own.
+         */
+        sessionId?: string;
         now?: () => number;
         staleMs?: number;
         quiesceTimeoutMs?: number;
         emit?: (e: {
             currentSchemaVersion: number;
-            fenceState: FenceState;
+            fenceState: FenceState$1;
         }) => void;
     });
     /** Capture the generation snapshot at vault-open. */
@@ -3164,8 +3263,8 @@ declare class SchemaFenceController {
      * Admin trigger. Drain → wait for the active set to quiesce (or time out)
      * → migrate each pending transform → bump → complete → normal. The
      * migrator excludes itself from the barrier (it drained synchronously
-     * here). `onPoll` (tests) advances other clients between barrier checks;
-     * production falls back to a short real delay.
+     * inside {@link runDrainBarrier}). `onPoll` (tests) advances other clients
+     * between barrier checks; production falls back to a short real delay.
      */
     runCutover(run: RunTransform, opts?: {
         onPoll?: () => Promise<void>;
@@ -5381,6 +5480,10 @@ declare class Noydb {
     private readonly writeHooks;
     private readonly subsystemBus;
     private readonly clientId;
+    /** Session that owns this instance's writers (one user's writers across vaults). */
+    private readonly sessionId;
+    /** Drain-barrier coordination transport for the schema fence (#469). */
+    private readonly coordinationProvider;
     private readonly vaultCache;
     private readonly keyringCache;
     private readonly syncEngines;
@@ -5883,6 +5986,14 @@ declare class Noydb {
     get _subsystemBus(): SubsystemBus;
     /** @internal Stable per-instance id for schema-cutover coordination. */
     get _clientId(): string;
+    /** @internal Session that owns this instance's writers (#469). */
+    get _sessionId(): string;
+    /**
+     * @internal Drain-barrier coordination transport for the schema fence (#469).
+     * The default store-backed provider reproduces today's fence behavior; a
+     * `by-*` real-time transport is injected via `coordinationStrategy`.
+     */
+    get coordination(): CoordinationProvider;
     /**
      * Soft-lock a single vault: clear its in-memory keyring, DEKs, vault
      * instance, sync engine, policy enforcer, and active-tier entry —
@@ -14577,6 +14688,25 @@ interface NoydbOptions {
      * Defaults to `'anonymous'` when not supplied.
      */
     readonly plaintextTranslatorName?: string;
+    /**
+     * Drain-barrier coordination transport for the schema fence (#469).
+     * When omitted, the kernel uses a {@link CoordinationProvider} backed by the
+     * primary store (`StoreCoordinationProvider`), reproducing today's
+     * store-polling fence behavior byte-for-byte. `@noy-db/by-tabs` /
+     * `@noy-db/by-peer` inject a real-time push transport here; an external
+     * orchestrator (`@klum-db/lobby`) drives it through the `Noydb` handle.
+     *
+     * @internal
+     */
+    readonly coordinationStrategy?: CoordinationProvider;
+    /**
+     * Stable id for the session that owns this instance's writers (one user's
+     * writers across vaults). Tags every {@link WriterPresence} the fence
+     * watcher reports. Defaults to a fresh ULID per `Noydb` instance.
+     *
+     * @internal
+     */
+    readonly sessionId?: string;
 }
 /** History configuration. */
 interface HistoryConfig {
@@ -14662,4 +14792,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type VersionRecord as $, type BlobPutOptions as A, type BlobStrategy as B, type BlobResponseOptions as C, DICT_COLLECTION_PREFIX as D, BlobSet as E, type BlobStrategyOpenArgs as F, type CompactRunOptions as G, type CompactionContext as H, type I18nStrategy as I, type CompactionResult as J, DEFAULT_CHUNK_SIZE as K, EXPORT_AUDIT_COLLECTION as L, ExportBlobsAbortedError as M, type ExportBlobsAuditEntry as N, type ExportBlobsHandle as O, PolicyEnforcer as P, type ExportBlobsOptions as Q, type ExportedBlob as R, type ScriptWarning as S, type ObjectListEntry as T, type ObjectMeta as U, type ObjectProjection as V, type ObjectUrlOptions as W, type PutObjectOptions as X, type PutUrlOptions as Y, type SlotInfo as Z, type SlotRecord as _, type DictEntry as a, type ChangeType as a$, createExportBlobsHandle as a0, memoryObjectProjection as a1, runCompaction as a2, type ConsentStrategy as a3, CONSENT_AUDIT_COLLECTION as a4, type ConsentAuditEntry as a5, type ConsentAuditFilter as a6, type ConsentContext as a7, type ConsentOp as a8, loadConsentEntries as a9, type SnapshotMeta as aA, type SnapshotMode as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, type OverlayFieldMergeMode as aO, type OverlayFieldMergeRule as aP, OverlayedViewRegistry as aQ, type OverlayedViewStrategyHandle as aR, type SyncStrategy as aS, type Role as aT, type UnlockedKeyring as aU, type HistoryStrategy as aV, type NoydbStore as aW, type HistoryOptions as aX, type EncryptedEnvelope as aY, type PruneOptions as aZ, type AppendInput as a_, writeConsentEntry as aa, type PeriodsStrategy as ab, type CarryForwardContext as ac, type ClosePeriodOptions as ad, type OpenPeriodOptions as ae, PERIODS_COLLECTION as af, type PeriodRecord as ag, type ReadOnlyCollection as ah, appendPeriodLedgerEntry as ai, assertTsWritable as aj, chainAnchor as ak, loadPeriods as al, validatePeriodName as am, type GuardStrategy as an, type GuardChange as ao, type GuardContext as ap, GuardRegistry as aq, type GuardStrategyHandle as ar, ReadOnlyVaultFacade as as, type ShadowStrategy as at, CollectionFrame as au, VaultFrame as av, type NoydbBundleStore as aw, type RetentionPolicy as ax, type SnapshotPolicy as ay, type SnapshotStrategy as az, type DictKeyDescriptor as b, CustodyApi as b$, CollectionInstant as b0, type DiffEntry as b1, type JsonPatch as b2, type JsonPatchOp as b3, LedgerStore as b4, type VaultEngine as b5, VaultInstant as b6, type VerifyResult as b7, applyPatch as b8, computePatch as b9, type PersistedSchemaEnvelope as bA, type UpdateDecision as bB, type DirectoryConfig as bC, type UserVisibility as bD, type AccessibleVault as bE, type AffectedDocument as bF, type ApproveWithdrawalOptions as bG, type ArchivePolicy as bH, type ArchiveResult as bI, type ArchiveRunOptions as bJ, type ArchiveStrategy as bK, BUNDLE_STORE_POLICY as bL, type BuiltInGateName as bM, type CacheOptions as bN, type CacheStats as bO, type ChangeEvent as bP, type CollectionChangeEvent as bQ, type CollectionConflictResolver as bR, type CollectionDescriptor as bS, type CollectionStats as bT, ComputedFieldError as bU, type ComputedFields as bV, type ComputedFn as bW, type Conflict as bX, type ConflictPolicy as bY, type ConflictStrategy as bZ, type CrossTierAccessEvent as b_, diff as ba, formatDiff as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, TxContext as bk, type MVQueryContext as bl, type RegisteredMV as bm, MaterializedViewRegistry as bn, type MaterializedFromMeta as bo, type MaterializedViewOutput as bp, type UnionArmJoin as bq, type UnionSource as br, type UserEnvelope as bs, type GateName as bt, type GatePolicy as bu, type VaultPolicy as bv, type ActiveTier as bw, type FactorProof as bx, type SchemaUpdateStrategy as by, type TransformFn as bz, DictionaryHandle as c, type LruStats as c$, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c0, DELEGATIONS_COLLECTION as c1, type DeepPartial as c2, type DeepPartialOrNull as c3, type DeferredNumberingConfig as c4, type DelegationToken as c5, type DeleteManyResult as c6, type DerivationDescriptor as c7, type DirtyEntry as c8, type DryRunResult as c9, type HistoryConfig as cA, type HistoryEntry as cB, INDEXED_STORE_POLICY as cC, type ImportCapability as cD, type InferOutput as cE, type InternalCollectionStats as cF, type IssueDelegationOptions as cG, type IssueMagicLinkGrantOptions as cH, type KeyringAuthenticator as cI, type KeyringAuthenticatorWrappingDEKs as cJ, type KeyringAuthenticatorWrappingKEK as cK, type KeyringFile as cL, type LiberateOptions as cM, type LiberateResult as cN, LinkEndpointError as cO, LinkIntegrityError as cP, type LinkOnDelete as cQ, type LinkRow as cR, type LinkSetHandle as cS, type LinkSpec as cT, type ListAccessibleVaultsOptions as cU, type ListPageResult as cV, type ListUsersOptions as cW, type LiveUserEnvelope as cX, type LocaleReadOptions as cY, Lru as cZ, type LruOptions as c_, type DumpSchemaOptions as ca, ELEVATION_AUDIT_COLLECTION as cb, ElevatedHandle as cc, type EnrollAuthenticatorOptions as cd, type EnrollAuthenticatorWrappingDEKsOptions as ce, type EnrollAuthenticatorWrappingKEKOptions as cf, type EnrollRecoveryResult as cg, type ExportAccessibleOptions as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type FormattedSequenceHandle as cu, type FrozenSnapshotRef as cv, type GhostRecord as cw, type GrantCustodianOptions as cx, type GrantOptions as cy, type GuardViolation as cz, type DictionaryOptions as d, type SchemaDelta as d$, MAGIC_LINK_CONTENT_INFO_PREFIX as d0, MAGIC_LINK_GRANTS_COLLECTION as d1, MAGIC_LINK_KEK_INFO_PREFIX as d2, type MagicLinkGrantPayload as d3, type MagicLinkGrantRecord as d4, type MaterializedViewDescriptor as d5, MemoryRecipientSealer as d6, MemorySealingKeyProvider as d7, NOYDB_BACKUP_VERSION as d8, NOYDB_FORMAT_VERSION as d9, type PullPolicy as dA, type PullResult as dB, type PushMode as dC, type PushOptions as dD, type PushPolicy as dE, type PushResult as dF, type PutManyItemOptions as dG, type PutManyOptions as dH, type PutManyResult as dI, type QueryAcrossOptions as dJ, type QueryAcrossResult as dK, type QuickUnlockState as dL, QuickUnlockStore as dM, type ReAuthOperation as dN, type RecoverPassphraseInput as dO, type RecoverPassphraseResult as dP, type RecoverUserOptions as dQ, type RecoveryProof as dR, type RejectWithdrawalOptions as dS, type RequestWithdrawalOptions as dT, type RequestWithdrawalResult as dU, type ResolvedPublicEnvelopeSchema as dV, type RevokeOptions as dW, type RotatePassphraseInput as dX, type RotateRecoveryOptions as dY, type RotateRecoveryResult as dZ, SEALED_PASSPHRASE_RECORD_ID as d_, NOYDB_KEYRING_VERSION as da, NOYDB_SYNC_VERSION as db, type NextOptions as dc, Noydb as dd, type NoydbEventMap as de, type NoydbOptions as df, type Assignment as dg, type OverlayViewDescriptor as dh, PUBLIC_ENVELOPE_FIELDS as di, type PaperRecoveryDoc as dj, type PaperRecoveryEntry as dk, type PassphrasePolicy as dl, type PassphraseValidationResult as dm, type Permission as dn, type Permissions as dp, type PersistedSchemaKind as dq, type PlaintextTranslatorContext as dr, type PlaintextTranslatorFn as ds, PresenceHandle as dt, type PresencePeer as du, type PublicEnvelopeField as dv, type PublicEnvelopeSchema as dw, type PublicEnvelopeText as dx, type PullMode as dy, type PullOptions as dz, type StaticDictDescriptor as e, type WithdrawResult as e$, type SchemaIntrospection as e0, type SealedEnvelope as e1, type SealedPassphrase as e2, type SearchEntry as e3, type SearchOptions as e4, type SearchResult as e5, type SequenceHandle as e6, type SequenceOptions as e7, SequenceStore as e8, type SessionPolicy as e9, type TabRole as eA, type TierMode as eB, type TransactionInvariant as eC, type TranslatorAuditEntry as eD, TxCollection as eE, type TxOp as eF, TxVault as eG, USER_ENVELOPE_COLLECTION as eH, USER_ENVELOPE_MAX_BYTES as eI, type Unsubscribe as eJ, type UpdateAuthenticatorOptions as eK, type UpdateContext as eL, type UpdateUserOptions as eM, UserApi as eN, type UserEnvelopeCheckGate as eO, UserEnvelopeOversizedError as eP, type UserEnvelopePresented as eQ, type UserInfo as eR, type VaultBackup as eS, type VaultPolicyOnDisk as eT, type VaultSchemaSnapshot as eU, type VaultSnapshot as eV, type WarningRules as eW, WeakPassphraseError as eX, type WeakPassphraseReason as eY, type WithArchiveOptions as eZ, type WithdrawAccessibleOptions as e_, type SetPublicEnvelopeInput as ea, type ShamirRecoveryDoc as eb, type ShamirRecoveryEntry as ec, type SlotRewrapCeremony as ed, type SlotRewrapContext as ee, type StandardSchemaV1 as ef, type StandardSchemaV1Issue as eg, type StandardSchemaV1SyncResult as eh, type StoreAuth as ei, type StoreAuthKind as ej, type StoreCapabilities as ek, type StoreTime as el, SyncEngine as em, type SyncMetadata as en, type SyncPolicy as eo, SyncScheduler as ep, type SyncSchedulerStatus as eq, type SyncStatus as er, type SyncTarget as es, type SyncTargetRole as et, SyncTransaction as eu, type SyncTransactionResult as ev, type TabChannel as ew, type TabCoordinationOptions as ex, type TabLockManager as ey, type TabPresence as ez, dictCollectionName as f, unwrapDeksFromPaperEntry as f$, type WithdrawalRequest as f0, WithdrawalRequestError as f1, type WithdrawalRequestStatus as f2, type WrappedDeksBlob as f3, type WriteConflict as f4, type WriteEvent as f5, type WriteHook as f6, type WriteQueue as f7, aesGcmOpen as f8, approveWithdrawal as f9, listUsersWithEnvelopes as fA, listWithdrawalRequests as fB, loadActiveDelegations as fC, loadPaperRecoveryEntries as fD, loadSealedPassphrase as fE, loadShamirRecoveryEntries as fF, magicLinkGrantRecordId as fG, mintPaperRecoveryEntry as fH, mintShamirRecoveryEntry as fI, mintWrappedDeksBlob as fJ, parseRsaOaepTlv as fK, parseSealedEnvelope as fL, readMagicLinkGrantRecord as fM, recoverUser as fN, rejectWithdrawal as fO, removeAuthenticator as fP, requestWithdrawal as fQ, resolveSchema as fR, resolveSequenceKey as fS, revokeDelegation as fT, revokeMagicLinkGrant as fU, runTransaction as fV, savePaperRecoveryEntries as fW, saveSealedPassphrase as fX, saveShamirRecoveryEntries as fY, sealRsaOaepTlv as fZ, unwrapDeksFromBlob as f_, assertStrongPassphrase as fa, buildRecipientKeyringFile as fb, burnPaperRecoveryEntry as fc, compileSequenceFormat as fd, createNoydb as fe, createStore as ff, deriveMagicLinkContentKey as fg, enrollAuthenticator as fh, estimateEntropy as fi, evalComputedFields as fj, evaluateExportCapability as fk, evaluateImportCapability as fl, exportAccessibleData as fm, findAuthenticator as fn, hasExportCapability as fo, hasImportCapability as fp, hasRecoveryEnrolled as fq, isLinkCollectionName as fr, isMagicLinkGrantExpired as fs, isPublicEnvelope as ft, issueDelegation as fu, recoverPassphrase as fv, rotatePassphrase as fw, liberateVault as fx, listMagicLinkGrants as fy, listUsers as fz, dictKey as g, unwrapDeksFromShamirEntry as g0, unwrapMagicLinkGrant as g1, validatePassphrase as g2, validatePublicEnvelopeInput as g3, validateSchemaInput as g4, validateSchemaOutput as g5, withArchive as g6, withDeferredNumbering as g7, withdrawAccessibleData as g8, writeMagicLinkGrant as g9, changeSecret as ga, createOwnerKeyring as gb, ensureCollectionDEK as gc, grant as gd, loadKeyring as ge, persistKeyring as gf, revoke as gg, updateAuthenticator as gh, updateKeyringIdentity as gi, type TxStrategy as gj, type AmendmentTxOptions as gk, enforceScript as h, inferScripts as i, isDictCollectionName as j, isDictKeyDescriptor as k, isStaticDictDescriptor as l, type SessionStrategy as m, createEnforcer as n, BLOB_CHUNKS_COLLECTION as o, BLOB_COLLECTION as p, BLOB_EVICTION_AUDIT_COLLECTION as q, BLOB_INDEX_COLLECTION as r, staticDict as s, BLOB_SLOTS_PREFIX as t, BLOB_VERSIONS_PREFIX as u, validateSessionPolicy as v, type BlobEvictionEntry as w, type BlobFieldPolicy as x, type BlobFieldsConfig as y, type BlobObject as z };
+export { type VersionRecord as $, type BlobPutOptions as A, type BlobStrategy as B, type BlobResponseOptions as C, DICT_COLLECTION_PREFIX as D, BlobSet as E, type BlobStrategyOpenArgs as F, type CompactRunOptions as G, type CompactionContext as H, type I18nStrategy as I, type CompactionResult as J, DEFAULT_CHUNK_SIZE as K, EXPORT_AUDIT_COLLECTION as L, ExportBlobsAbortedError as M, type ExportBlobsAuditEntry as N, type ExportBlobsHandle as O, PolicyEnforcer as P, type ExportBlobsOptions as Q, type ExportedBlob as R, type ScriptWarning as S, type ObjectListEntry as T, type ObjectMeta as U, type ObjectProjection as V, type ObjectUrlOptions as W, type PutObjectOptions as X, type PutUrlOptions as Y, type SlotInfo as Z, type SlotRecord as _, type DictEntry as a, type ChangeType as a$, createExportBlobsHandle as a0, memoryObjectProjection as a1, runCompaction as a2, type ConsentStrategy as a3, CONSENT_AUDIT_COLLECTION as a4, type ConsentAuditEntry as a5, type ConsentAuditFilter as a6, type ConsentContext as a7, type ConsentOp as a8, loadConsentEntries as a9, type SnapshotMeta as aA, type SnapshotMode as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, type OverlayFieldMergeMode as aO, type OverlayFieldMergeRule as aP, OverlayedViewRegistry as aQ, type OverlayedViewStrategyHandle as aR, type SyncStrategy as aS, type Role as aT, type UnlockedKeyring as aU, type HistoryStrategy as aV, type NoydbStore as aW, type HistoryOptions as aX, type EncryptedEnvelope as aY, type PruneOptions as aZ, type AppendInput as a_, writeConsentEntry as aa, type PeriodsStrategy as ab, type CarryForwardContext as ac, type ClosePeriodOptions as ad, type OpenPeriodOptions as ae, PERIODS_COLLECTION as af, type PeriodRecord as ag, type ReadOnlyCollection as ah, appendPeriodLedgerEntry as ai, assertTsWritable as aj, chainAnchor as ak, loadPeriods as al, validatePeriodName as am, type GuardStrategy as an, type GuardChange as ao, type GuardContext as ap, GuardRegistry as aq, type GuardStrategyHandle as ar, ReadOnlyVaultFacade as as, type ShadowStrategy as at, CollectionFrame as au, VaultFrame as av, type NoydbBundleStore as aw, type RetentionPolicy as ax, type SnapshotPolicy as ay, type SnapshotStrategy as az, type DictKeyDescriptor as b, CustodyApi as b$, CollectionInstant as b0, type DiffEntry as b1, type JsonPatch as b2, type JsonPatchOp as b3, LedgerStore as b4, type VaultEngine as b5, VaultInstant as b6, type VerifyResult as b7, applyPatch as b8, computePatch as b9, type PersistedSchemaEnvelope as bA, type UpdateDecision as bB, type DirectoryConfig as bC, type UserVisibility as bD, type AccessibleVault as bE, type AffectedDocument as bF, type ApproveWithdrawalOptions as bG, type ArchivePolicy as bH, type ArchiveResult as bI, type ArchiveRunOptions as bJ, type ArchiveStrategy as bK, BUNDLE_STORE_POLICY as bL, type BuiltInGateName as bM, type CacheOptions as bN, type CacheStats as bO, type ChangeEvent as bP, type CollectionChangeEvent as bQ, type CollectionConflictResolver as bR, type CollectionDescriptor as bS, type CollectionStats as bT, ComputedFieldError as bU, type ComputedFields as bV, type ComputedFn as bW, type Conflict as bX, type ConflictPolicy as bY, type ConflictStrategy as bZ, type CrossTierAccessEvent as b_, diff as ba, formatDiff as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, TxContext as bk, type MVQueryContext as bl, type RegisteredMV as bm, MaterializedViewRegistry as bn, type MaterializedFromMeta as bo, type MaterializedViewOutput as bp, type UnionArmJoin as bq, type UnionSource as br, type UserEnvelope as bs, type GateName as bt, type GatePolicy as bu, type VaultPolicy as bv, type ActiveTier as bw, type FactorProof as bx, type SchemaUpdateStrategy as by, type TransformFn as bz, DictionaryHandle as c, type LruStats as c$, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c0, DELEGATIONS_COLLECTION as c1, type DeepPartial as c2, type DeepPartialOrNull as c3, type DeferredNumberingConfig as c4, type DelegationToken as c5, type DeleteManyResult as c6, type DerivationDescriptor as c7, type DirtyEntry as c8, type DryRunResult as c9, type HistoryConfig as cA, type HistoryEntry as cB, INDEXED_STORE_POLICY as cC, type ImportCapability as cD, type InferOutput as cE, type InternalCollectionStats as cF, type IssueDelegationOptions as cG, type IssueMagicLinkGrantOptions as cH, type KeyringAuthenticator as cI, type KeyringAuthenticatorWrappingDEKs as cJ, type KeyringAuthenticatorWrappingKEK as cK, type KeyringFile as cL, type LiberateOptions as cM, type LiberateResult as cN, LinkEndpointError as cO, LinkIntegrityError as cP, type LinkOnDelete as cQ, type LinkRow as cR, type LinkSetHandle as cS, type LinkSpec as cT, type ListAccessibleVaultsOptions as cU, type ListPageResult as cV, type ListUsersOptions as cW, type LiveUserEnvelope as cX, type LocaleReadOptions as cY, Lru as cZ, type LruOptions as c_, type DumpSchemaOptions as ca, ELEVATION_AUDIT_COLLECTION as cb, ElevatedHandle as cc, type EnrollAuthenticatorOptions as cd, type EnrollAuthenticatorWrappingDEKsOptions as ce, type EnrollAuthenticatorWrappingKEKOptions as cf, type EnrollRecoveryResult as cg, type ExportAccessibleOptions as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState$1 as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type FormattedSequenceHandle as cu, type FrozenSnapshotRef as cv, type GhostRecord as cw, type GrantCustodianOptions as cx, type GrantOptions as cy, type GuardViolation as cz, type DictionaryOptions as d, type SchemaDelta as d$, MAGIC_LINK_CONTENT_INFO_PREFIX as d0, MAGIC_LINK_GRANTS_COLLECTION as d1, MAGIC_LINK_KEK_INFO_PREFIX as d2, type MagicLinkGrantPayload as d3, type MagicLinkGrantRecord as d4, type MaterializedViewDescriptor as d5, MemoryRecipientSealer as d6, MemorySealingKeyProvider as d7, NOYDB_BACKUP_VERSION as d8, NOYDB_FORMAT_VERSION as d9, type PullPolicy as dA, type PullResult as dB, type PushMode as dC, type PushOptions as dD, type PushPolicy as dE, type PushResult as dF, type PutManyItemOptions as dG, type PutManyOptions as dH, type PutManyResult as dI, type QueryAcrossOptions as dJ, type QueryAcrossResult as dK, type QuickUnlockState as dL, QuickUnlockStore as dM, type ReAuthOperation as dN, type RecoverPassphraseInput as dO, type RecoverPassphraseResult as dP, type RecoverUserOptions as dQ, type RecoveryProof as dR, type RejectWithdrawalOptions as dS, type RequestWithdrawalOptions as dT, type RequestWithdrawalResult as dU, type ResolvedPublicEnvelopeSchema as dV, type RevokeOptions as dW, type RotatePassphraseInput as dX, type RotateRecoveryOptions as dY, type RotateRecoveryResult as dZ, SEALED_PASSPHRASE_RECORD_ID as d_, NOYDB_KEYRING_VERSION as da, NOYDB_SYNC_VERSION as db, type NextOptions as dc, Noydb as dd, type NoydbEventMap as de, type NoydbOptions as df, type Assignment as dg, type OverlayViewDescriptor as dh, PUBLIC_ENVELOPE_FIELDS as di, type PaperRecoveryDoc as dj, type PaperRecoveryEntry as dk, type PassphrasePolicy as dl, type PassphraseValidationResult as dm, type Permission as dn, type Permissions as dp, type PersistedSchemaKind as dq, type PlaintextTranslatorContext as dr, type PlaintextTranslatorFn as ds, PresenceHandle as dt, type PresencePeer as du, type PublicEnvelopeField as dv, type PublicEnvelopeSchema as dw, type PublicEnvelopeText as dx, type PullMode as dy, type PullOptions as dz, type StaticDictDescriptor as e, type WithdrawResult as e$, type SchemaIntrospection as e0, type SealedEnvelope as e1, type SealedPassphrase as e2, type SearchEntry as e3, type SearchOptions as e4, type SearchResult as e5, type SequenceHandle as e6, type SequenceOptions as e7, SequenceStore as e8, type SessionPolicy as e9, type TabRole as eA, type TierMode as eB, type TransactionInvariant as eC, type TranslatorAuditEntry as eD, TxCollection as eE, type TxOp as eF, TxVault as eG, USER_ENVELOPE_COLLECTION as eH, USER_ENVELOPE_MAX_BYTES as eI, type Unsubscribe as eJ, type UpdateAuthenticatorOptions as eK, type UpdateContext as eL, type UpdateUserOptions as eM, UserApi as eN, type UserEnvelopeCheckGate as eO, UserEnvelopeOversizedError as eP, type UserEnvelopePresented as eQ, type UserInfo as eR, type VaultBackup as eS, type VaultPolicyOnDisk as eT, type VaultSchemaSnapshot as eU, type VaultSnapshot as eV, type WarningRules as eW, WeakPassphraseError as eX, type WeakPassphraseReason as eY, type WithArchiveOptions as eZ, type WithdrawAccessibleOptions as e_, type SetPublicEnvelopeInput as ea, type ShamirRecoveryDoc as eb, type ShamirRecoveryEntry as ec, type SlotRewrapCeremony as ed, type SlotRewrapContext as ee, type StandardSchemaV1 as ef, type StandardSchemaV1Issue as eg, type StandardSchemaV1SyncResult as eh, type StoreAuth as ei, type StoreAuthKind as ej, type StoreCapabilities as ek, type StoreTime as el, SyncEngine as em, type SyncMetadata as en, type SyncPolicy as eo, SyncScheduler as ep, type SyncSchedulerStatus as eq, type SyncStatus as er, type SyncTarget as es, type SyncTargetRole as et, SyncTransaction as eu, type SyncTransactionResult as ev, type TabChannel as ew, type TabCoordinationOptions as ex, type TabLockManager as ey, type TabPresence as ez, dictCollectionName as f, unwrapDeksFromPaperEntry as f$, type WithdrawalRequest as f0, WithdrawalRequestError as f1, type WithdrawalRequestStatus as f2, type WrappedDeksBlob as f3, type WriteConflict as f4, type WriteEvent as f5, type WriteHook as f6, type WriteQueue as f7, aesGcmOpen as f8, approveWithdrawal as f9, listUsersWithEnvelopes as fA, listWithdrawalRequests as fB, loadActiveDelegations as fC, loadPaperRecoveryEntries as fD, loadSealedPassphrase as fE, loadShamirRecoveryEntries as fF, magicLinkGrantRecordId as fG, mintPaperRecoveryEntry as fH, mintShamirRecoveryEntry as fI, mintWrappedDeksBlob as fJ, parseRsaOaepTlv as fK, parseSealedEnvelope as fL, readMagicLinkGrantRecord as fM, recoverUser as fN, rejectWithdrawal as fO, removeAuthenticator as fP, requestWithdrawal as fQ, resolveSchema as fR, resolveSequenceKey as fS, revokeDelegation as fT, revokeMagicLinkGrant as fU, runTransaction as fV, savePaperRecoveryEntries as fW, saveSealedPassphrase as fX, saveShamirRecoveryEntries as fY, sealRsaOaepTlv as fZ, unwrapDeksFromBlob as f_, assertStrongPassphrase as fa, buildRecipientKeyringFile as fb, burnPaperRecoveryEntry as fc, compileSequenceFormat as fd, createNoydb as fe, createStore as ff, deriveMagicLinkContentKey as fg, enrollAuthenticator as fh, estimateEntropy as fi, evalComputedFields as fj, evaluateExportCapability as fk, evaluateImportCapability as fl, exportAccessibleData as fm, findAuthenticator as fn, hasExportCapability as fo, hasImportCapability as fp, hasRecoveryEnrolled as fq, isLinkCollectionName as fr, isMagicLinkGrantExpired as fs, isPublicEnvelope as ft, issueDelegation as fu, recoverPassphrase as fv, rotatePassphrase as fw, liberateVault as fx, listMagicLinkGrants as fy, listUsers as fz, dictKey as g, unwrapDeksFromShamirEntry as g0, unwrapMagicLinkGrant as g1, validatePassphrase as g2, validatePublicEnvelopeInput as g3, validateSchemaInput as g4, validateSchemaOutput as g5, withArchive as g6, withDeferredNumbering as g7, withdrawAccessibleData as g8, writeMagicLinkGrant as g9, changeSecret as ga, createOwnerKeyring as gb, ensureCollectionDEK as gc, grant as gd, loadKeyring as ge, persistKeyring as gf, revoke as gg, updateAuthenticator as gh, updateKeyringIdentity as gi, type TxStrategy as gj, type AmendmentTxOptions as gk, type CoordinationProvider as gl, type DrainBarrierOptions as gm, type FenceState as gn, type WriterPresence as go, isQuorum as gp, runDrainBarrier as gq, enforceScript as h, inferScripts as i, isDictCollectionName as j, isDictKeyDescriptor as k, isStaticDictDescriptor as l, type SessionStrategy as m, createEnforcer as n, BLOB_CHUNKS_COLLECTION as o, BLOB_COLLECTION as p, BLOB_EVICTION_AUDIT_COLLECTION as q, BLOB_INDEX_COLLECTION as r, staticDict as s, BLOB_SLOTS_PREFIX as t, BLOB_VERSIONS_PREFIX as u, validateSessionPolicy as v, type BlobEvictionEntry as w, type BlobFieldPolicy as x, type BlobFieldsConfig as y, type BlobObject as z };

package/dist/{with-materialized-view-DiD41wQp.d.ts → with-materialized-view-BVfcPlaE.d.ts}

@@ -1,4 +1,4 @@
-import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-CCq0WHh9.js';
+import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-CkSWJt0H.js';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-materialized-view-CTHe6uh9.d.cts → with-materialized-view-dPG213gd.d.cts}

@@ -1,4 +1,4 @@
-import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-BCYvhKzr.cjs';
+import { aK as MaterializedViewStrategy, aL as MaterializedViewStrategyHandle } from './types-CwrTuYFI.cjs';
 
 /**
  * Register a materialized view: a declared query whose result is

package/dist/{with-overlayed-view-Dlz5hcM8.d.cts → with-overlayed-view-CJ2UDBol.d.cts}

@@ -1,4 +1,4 @@
-import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-BCYvhKzr.cjs';
+import { aM as OverlayedViewStrategy, aR as OverlayedViewStrategyHandle } from './types-CwrTuYFI.cjs';
 
 /**
  * Register a read-shadow overlay: bind an MV-owned base collection to