@noy-db/hub 0.2.0-pre.4 → 0.2.0-pre.6

package/dist/index.d.cts

@@ -1,21 +1,21 @@
-import { aO as NoydbStore, bo as UserEnvelope, ba as PublicEnvelope, bp as GateName, bq as GatePolicy, br as VaultPolicy, bs as ActiveTier, bt as FactorProof, bu as SchemaUpdateStrategy, bv as TransformFn, bw as PersistedSchemaEnvelope, bx as UpdateDecision, by as DirectoryConfig, bz as UserVisibility, aM as UnlockedKeyring, bf as Vault, aV as DiffEntry } from './types-CSLcfytP.cjs';
-export { bA as AccessibleVault, bB as AffectedDocument, aS as AppendInput, ay as ArrayOutputSpec, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, bC as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, bD as BuiltInGateName, bc as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, bE as CacheOptions, bF as CacheStats, bG as ChangeEvent, aT as ChangeType, a7 as ClosePeriodOptions, aH as Collection, bH as CollectionChangeEvent, bI as CollectionConflictResolver, bJ as CollectionDescriptor, ao as CollectionFrame, aU as CollectionInstant, bK as CollectionStats, bL as Conflict, bM as ConflictPolicy, bN as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, bO as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bP as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bQ as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bR as DeepPartial, bS as DeepPartialOrNull, bT as DelegationToken, bU as DeleteManyResult, bV as DerivationDescriptor, aw as DerivationStrategy, aA as DerivationStrategyHandle, aB as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bW as DirtyEntry, bX as DryRunResult, bY as DumpSchemaOptions, bZ as ELEVATION_AUDIT_COLLECTION, b_ as ElevatedHandle, aQ as EncryptedEnvelope, b$ as EnrollAuthenticatorOptions, c0 as EnrollAuthenticatorWrappingDEKsOptions, c1 as EnrollAuthenticatorWrappingKEKOptions, c2 as EnrollRecoveryResult, c3 as ExportCapability, c4 as ExportChunk, c5 as ExportFormat, c6 as ExportStreamOptions, c7 as FactorKind, c8 as FactorProofBundle, c9 as FactorRequirement, ca as FenceDoc, cb as FenceState, cc as FieldChange, cd as FieldDescriptor, ce as FieldSource, cf as GhostRecord, cg as GrantOptions, ai as GuardChange, aj as GuardContext, ah as GuardStrategy, al as GuardStrategyHandle, ch as GuardViolation, ci as HistoryConfig, cj as HistoryEntry, aP as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, ck as INDEXED_STORE_POLICY, cl as ImportCapability, cm as InferOutput, cn as InternalCollectionStats, co as IssueDelegationOptions, cp as IssueMagicLinkGrantOptions, aW as JsonPatch, aX as JsonPatchOp, cq as KeyringAuthenticator, cr as KeyringAuthenticatorWrappingDEKs, cs as KeyringAuthenticatorWrappingKEK, ct as KeyringFile, aY as LedgerEntry, aZ as LedgerStore, cu as ListAccessibleVaultsOptions, cv as ListPageResult, cw as ListUsersOptions, cx as LiveUserEnvelope, cy as LocaleReadOptions, cz as Lru, cA as LruOptions, cB as LruStats, cC as MAGIC_LINK_CONTENT_INFO_PREFIX, cD as MAGIC_LINK_GRANTS_COLLECTION, cE as MAGIC_LINK_KEK_INFO_PREFIX, cF as MagicLinkGrantPayload, cG as MagicLinkGrantRecord, bl as MaterializedFromMeta, cH as MaterializedViewDescriptor, bm as MaterializedViewOutput, aE as MaterializedViewStrategy, aF as MaterializedViewStrategyHandle, cI as MemoryRecipientSealer, cJ as MemorySealingKeyProvider, cK as NOYDB_BACKUP_VERSION, cL as NOYDB_FORMAT_VERSION, cM as NOYDB_KEYRING_VERSION, cN as NOYDB_SYNC_VERSION, cO as Noydb, cP as NoydbBundleStore, cQ as NoydbEventMap, cR as NoydbOptions, a8 as OpenPeriodOptions, aC as OutputSpec, cS as OverlayViewDescriptor, aG as OverlayedViewStrategy, aJ as OverlayedViewStrategyHandle, a9 as PERIODS_COLLECTION, cT as PUBLIC_ENVELOPE_FIELDS, cU as PaperRecoveryDoc, cV as PaperRecoveryEntry, cW as PassphrasePolicy, cX as PassphraseValidationResult, aa as PeriodRecord, cY as Permission, cZ as Permissions, c_ as PersistedSchemaKind, c$ as PlaintextTranslatorContext, d0 as PlaintextTranslatorFn, P as PolicyEnforcer, d1 as PresenceHandle, d2 as PresencePeer, aR as PruneOptions, d3 as PublicEnvelopeField, d4 as PublicEnvelopeSchema, d5 as PublicEnvelopeText, d6 as PullMode, d7 as PullOptions, d8 as PullPolicy, d9 as PullResult, da as PushMode, db as PushOptions, dc as PushPolicy, dd as PushResult, de as PutManyItemOptions, df as PutManyOptions, dg as PutManyResult, dh as QueryAcrossOptions, di as QueryAcrossResult, dj as QuickUnlockState, dk as QuickUnlockStore, dl as ReAuthOperation, be as RecipientHint, bd as RecipientSealer, aD as RecordOutputSpec, dm as RecoverPassphraseInput, dn as RecoverPassphraseResult, dp as RecoverUserOptions, dq as RecoveryProof, dr as ResolvedPublicEnvelopeSchema, ds as RevokeOptions, aL as Role, dt as RotatePassphraseInput, du as RotateRecoveryOptions, dv as RotateRecoveryResult, dw as SEALED_PASSPHRASE_RECORD_ID, dx as SchemaDelta, dy as SchemaIntrospection, dz as SealedEnvelope, dA as SealedPassphrase, bb as SealingKeyProvider, dB as SessionPolicy, dC as SetPublicEnvelopeInput, dD as ShamirRecoveryDoc, dE as ShamirRecoveryEntry, bh as ShamirRecoveryProvider, U as SlotInfo, V as SlotRecord, dF as SlotRewrapCeremony, dG as SlotRewrapContext, dH as StandardSchemaV1, dI as StandardSchemaV1Issue, dJ as StandardSchemaV1SyncResult, dK as StoreAuth, dL as StoreAuthKind, dM as StoreCapabilities, dN as SyncEngine, dO as SyncMetadata, dP as SyncPolicy, dQ as SyncScheduler, dR as SyncSchedulerStatus, dS as SyncStatus, dT as SyncTarget, dU as SyncTargetRole, dV as SyncTransaction, dW as SyncTransactionResult, dX as TabChannel, dY as TabCoordinationOptions, dZ as TabLockManager, d_ as TabPresence, d$ as TabRole, e0 as TierMode, e1 as TranslatorAuditEntry, as as TxCollection, at as TxContext, e2 as TxOp, au as TxVault, e3 as USER_ENVELOPE_COLLECTION, e4 as USER_ENVELOPE_MAX_BYTES, bn as UnionSource, e5 as Unsubscribe, e6 as UpdateAuthenticatorOptions, e7 as UpdateContext, e8 as UpdateUserOptions, e9 as UserApi, ea as UserEnvelopeCheckGate, eb as UserEnvelopeOversizedError, ec as UserEnvelopePresented, ed as UserInfo, ee as VaultBackup, a_ as VaultEngine, ap as VaultFrame, a$ as VaultInstant, ef as VaultPolicyOnDisk, eg as VaultSchemaSnapshot, eh as VaultSnapshot, b0 as VerifyResult, W as VersionRecord, ei as WarningRules, ej as WeakPassphraseError, ek as WeakPassphraseReason, el as WrappedDeksBlob, em as WriteConflict, en as WriteEvent, eo as WriteHook, ep as WriteQueue, g as applyI18nLocale, b1 as applyPatch, eq as assertStrongPassphrase, er as buildRecipientKeyringFile, es as burnPaperRecoveryEntry, b2 as canonicalJson, b3 as computePatch, n as createEnforcer, et as createNoydb, eu as createStore, ev as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b4 as diff, ew as enrollAuthenticator, ex as estimateEntropy, ey as evaluateExportCapability, ez as evaluateImportCapability, eA as findAuthenticator, b5 as formatDiff, eB as hasExportCapability, eC as hasImportCapability, eD as hasRecoveryEnrolled, b6 as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, eE as isMagicLinkGrantExpired, eF as isPublicEnvelope, eG as issueDelegation, eH as keyringRecoverPassphrase, eI as keyringRotatePassphrase, eJ as listMagicLinkGrants, eK as listUsers, eL as listUsersWithEnvelopes, eM as loadActiveDelegations, eN as loadPaperRecoveryEntries, eO as loadSealedPassphrase, eP as loadShamirRecoveryEntries, eQ as magicLinkGrantRecordId, eR as mintPaperRecoveryEntry, eS as mintShamirRecoveryEntry, eT as mintWrappedDeksBlob, b7 as paddedIndex, b8 as parseIndex, eU as parseSealedEnvelope, eV as readMagicLinkGrantRecord, eW as recoverUser, eX as removeAuthenticator, r as resolveI18nText, eY as resolvePublicEnvelopeSchema, eZ as revokeDelegation, e_ as revokeMagicLinkGrant, av as runTransaction, e$ as savePaperRecoveryEntries, f0 as saveSealedPassphrase, f1 as saveShamirRecoveryEntries, b9 as sha256Hex, f2 as unwrapDeksFromBlob, f3 as unwrapDeksFromPaperEntry, f4 as unwrapDeksFromShamirEntry, f5 as unwrapMagicLinkGrant, v as validateI18nTextValue, f6 as validatePassphrase, f7 as validatePublicEnvelopeInput, f8 as validateSchemaInput, f9 as validateSchemaOutput, o as validateSessionPolicy, fa as writeMagicLinkGrant } from './types-CSLcfytP.cjs';
+import { aQ as NoydbStore, bq as UserEnvelope, bc as PublicEnvelope, br as GateName, bs as GatePolicy, bt as VaultPolicy, bu as ActiveTier, bv as FactorProof, bw as SchemaUpdateStrategy, bx as TransformFn, by as PersistedSchemaEnvelope, bz as UpdateDecision, bA as DirectoryConfig, bB as UserVisibility, aO as UnlockedKeyring, bh as Vault, aX as DiffEntry } from './types-DVlvNn2c.cjs';
+export { bC as AccessibleVault, bD as AffectedDocument, aU as AppendInput, aA as ArrayOutputSpec, q as BLOB_CHUNKS_COLLECTION, t as BLOB_COLLECTION, w as BLOB_INDEX_COLLECTION, x as BLOB_SLOTS_PREFIX, y as BLOB_VERSIONS_PREFIX, bE as BUNDLE_STORE_POLICY, E as BlobObject, F as BlobPutOptions, G as BlobResponseOptions, H as BlobSet, bF as BuiltInGateName, be as BundleRecipient, a0 as CONSENT_AUDIT_COLLECTION, bG as CacheOptions, bH as CacheStats, bI as ChangeEvent, aV as ChangeType, a9 as ClosePeriodOptions, aJ as Collection, bJ as CollectionChangeEvent, bK as CollectionConflictResolver, bL as CollectionDescriptor, aq as CollectionFrame, aW as CollectionInstant, bM as CollectionStats, bN as Conflict, bO as ConflictPolicy, bP as ConflictStrategy, a1 as ConsentAuditEntry, a2 as ConsentAuditFilter, a3 as ConsentContext, a4 as ConsentOp, bQ as CrossTierAccessEvent, N as DEFAULT_CHUNK_SIZE, bR as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bS as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bT as DeepPartial, bU as DeepPartialOrNull, bV as DelegationToken, bW as DeleteManyResult, bX as DerivationDescriptor, ay as DerivationStrategy, aC as DerivationStrategyHandle, aD as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bY as DirtyEntry, bZ as DryRunResult, b_ as DumpSchemaOptions, b$ as ELEVATION_AUDIT_COLLECTION, c0 as ElevatedHandle, aS as EncryptedEnvelope, c1 as EnrollAuthenticatorOptions, c2 as EnrollAuthenticatorWrappingDEKsOptions, c3 as EnrollAuthenticatorWrappingKEKOptions, c4 as EnrollRecoveryResult, c5 as ExportCapability, c6 as ExportChunk, c7 as ExportFormat, c8 as ExportStreamOptions, c9 as FactorKind, ca as FactorProofBundle, cb as FactorRequirement, cc as FenceDoc, cd as FenceState, ce as FieldChange, cf as FieldDescriptor, cg as FieldSource, ch as GhostRecord, ci as GrantOptions, ak as GuardChange, al as GuardContext, aj as GuardStrategy, an as GuardStrategyHandle, cj as GuardViolation, ck as HistoryConfig, cl as HistoryEntry, aR as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, cm as INDEXED_STORE_POLICY, cn as ImportCapability, co as InferOutput, cp as InternalCollectionStats, cq as IssueDelegationOptions, cr as IssueMagicLinkGrantOptions, aY as JsonPatch, aZ as JsonPatchOp, cs as KeyringAuthenticator, ct as KeyringAuthenticatorWrappingDEKs, cu as KeyringAuthenticatorWrappingKEK, cv as KeyringFile, a_ as LedgerEntry, a$ as LedgerStore, cw as ListAccessibleVaultsOptions, cx as ListPageResult, cy as ListUsersOptions, cz as LiveUserEnvelope, cA as LocaleReadOptions, cB as Lru, cC as LruOptions, cD as LruStats, cE as MAGIC_LINK_CONTENT_INFO_PREFIX, cF as MAGIC_LINK_GRANTS_COLLECTION, cG as MAGIC_LINK_KEK_INFO_PREFIX, cH as MagicLinkGrantPayload, cI as MagicLinkGrantRecord, bn as MaterializedFromMeta, cJ as MaterializedViewDescriptor, bo as MaterializedViewOutput, aG as MaterializedViewStrategy, aH as MaterializedViewStrategyHandle, cK as MemoryRecipientSealer, cL as MemorySealingKeyProvider, cM as NOYDB_BACKUP_VERSION, cN as NOYDB_FORMAT_VERSION, cO as NOYDB_KEYRING_VERSION, cP as NOYDB_SYNC_VERSION, cQ as Noydb, cR as NoydbBundleStore, cS as NoydbEventMap, cT as NoydbOptions, aa as OpenPeriodOptions, aE as OutputSpec, cU as OverlayViewDescriptor, aI as OverlayedViewStrategy, aL as OverlayedViewStrategyHandle, ab as PERIODS_COLLECTION, cV as PUBLIC_ENVELOPE_FIELDS, cW as PaperRecoveryDoc, cX as PaperRecoveryEntry, cY as PassphrasePolicy, cZ as PassphraseValidationResult, ac as PeriodRecord, c_ as Permission, c$ as Permissions, d0 as PersistedSchemaKind, d1 as PlaintextTranslatorContext, d2 as PlaintextTranslatorFn, P as PolicyEnforcer, d3 as PresenceHandle, d4 as PresencePeer, aT as PruneOptions, d5 as PublicEnvelopeField, d6 as PublicEnvelopeSchema, d7 as PublicEnvelopeText, d8 as PullMode, d9 as PullOptions, da as PullPolicy, db as PullResult, dc as PushMode, dd as PushOptions, de as PushPolicy, df as PushResult, dg as PutManyItemOptions, dh as PutManyOptions, di as PutManyResult, dj as QueryAcrossOptions, dk as QueryAcrossResult, dl as QuickUnlockState, dm as QuickUnlockStore, dn as ReAuthOperation, bg as RecipientHint, bf as RecipientSealer, aF as RecordOutputSpec, dp as RecoverPassphraseInput, dq as RecoverPassphraseResult, dr as RecoverUserOptions, ds as RecoveryProof, dt as ResolvedPublicEnvelopeSchema, du as RevokeOptions, aN as Role, dv as RotatePassphraseInput, dw as RotateRecoveryOptions, dx as RotateRecoveryResult, dy as SEALED_PASSPHRASE_RECORD_ID, dz as SchemaDelta, dA as SchemaIntrospection, dB as SealedEnvelope, dC as SealedPassphrase, bd as SealingKeyProvider, dD as SessionPolicy, dE as SetPublicEnvelopeInput, dF as ShamirRecoveryDoc, dG as ShamirRecoveryEntry, bj as ShamirRecoveryProvider, W as SlotInfo, X as SlotRecord, dH as SlotRewrapCeremony, dI as SlotRewrapContext, dJ as StandardSchemaV1, dK as StandardSchemaV1Issue, dL as StandardSchemaV1SyncResult, dM as StoreAuth, dN as StoreAuthKind, dO as StoreCapabilities, dP as SyncEngine, dQ as SyncMetadata, dR as SyncPolicy, dS as SyncScheduler, dT as SyncSchedulerStatus, dU as SyncStatus, dV as SyncTarget, dW as SyncTargetRole, dX as SyncTransaction, dY as SyncTransactionResult, dZ as TabChannel, d_ as TabCoordinationOptions, d$ as TabLockManager, e0 as TabPresence, e1 as TabRole, e2 as TierMode, e3 as TranslatorAuditEntry, au as TxCollection, av as TxContext, e4 as TxOp, aw as TxVault, e5 as USER_ENVELOPE_COLLECTION, e6 as USER_ENVELOPE_MAX_BYTES, bp as UnionSource, e7 as Unsubscribe, e8 as UpdateAuthenticatorOptions, e9 as UpdateContext, ea as UpdateUserOptions, eb as UserApi, ec as UserEnvelopeCheckGate, ed as UserEnvelopeOversizedError, ee as UserEnvelopePresented, ef as UserInfo, eg as VaultBackup, b0 as VaultEngine, ar as VaultFrame, b1 as VaultInstant, eh as VaultPolicyOnDisk, ei as VaultSchemaSnapshot, ej as VaultSnapshot, b2 as VerifyResult, Y as VersionRecord, ek as WarningRules, el as WeakPassphraseError, em as WeakPassphraseReason, en as WrappedDeksBlob, eo as WriteConflict, ep as WriteEvent, eq as WriteHook, er as WriteQueue, g as applyI18nLocale, b3 as applyPatch, es as assertStrongPassphrase, et as buildRecipientKeyringFile, eu as burnPaperRecoveryEntry, b4 as canonicalJson, b5 as computePatch, o as createEnforcer, ev as createNoydb, ew as createStore, ex as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b6 as diff, ey as enrollAuthenticator, ez as estimateEntropy, eA as evaluateExportCapability, eB as evaluateImportCapability, eC as findAuthenticator, b7 as formatDiff, eD as hasExportCapability, eE as hasImportCapability, eF as hasRecoveryEnrolled, b8 as hashEntry, k as i18nText, l as isDictCollectionName, m as isDictKeyDescriptor, n as isI18nTextDescriptor, eG as isMagicLinkGrantExpired, eH as isPublicEnvelope, eI as issueDelegation, eJ as keyringRecoverPassphrase, eK as keyringRotatePassphrase, eL as listMagicLinkGrants, eM as listUsers, eN as listUsersWithEnvelopes, eO as loadActiveDelegations, eP as loadPaperRecoveryEntries, eQ as loadSealedPassphrase, eR as loadShamirRecoveryEntries, eS as magicLinkGrantRecordId, eT as mintPaperRecoveryEntry, eU as mintShamirRecoveryEntry, eV as mintWrappedDeksBlob, b9 as paddedIndex, ba as parseIndex, eW as parseSealedEnvelope, eX as readMagicLinkGrantRecord, eY as recoverUser, eZ as removeAuthenticator, r as resolveI18nText, e_ as resolvePublicEnvelopeSchema, e$ as revokeDelegation, f0 as revokeMagicLinkGrant, ax as runTransaction, f1 as savePaperRecoveryEntries, f2 as saveSealedPassphrase, f3 as saveShamirRecoveryEntries, bb as sha256Hex, f4 as unwrapDeksFromBlob, f5 as unwrapDeksFromPaperEntry, f6 as unwrapDeksFromShamirEntry, f7 as unwrapMagicLinkGrant, v as validateI18nTextValue, f8 as validatePassphrase, f9 as validatePublicEnvelopeInput, fa as validateSchemaInput, fb as validateSchemaOutput, p as validateSessionPolicy, fc as writeMagicLinkGrant } from './types-DVlvNn2c.cjs';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.cjs';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.cjs';
-import { N as NoydbError } from './index-DVkvrgpm.cjs';
-export { x as AlreadyElevatedError, A as AmendmentForbiddenError, m as AttestationError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, C as ConflictError, y as DEFAULT_JOIN_MAX_ROWS, z as DanglingReferenceError, E as DecryptionError, G as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, H as DirectoryDisabledError, J as ElevationExpiredError, K as ExportCapabilityError, F as FieldFrozenError, U as FilenameSanitizationError, V as GroupCardinalityError, W as ImportCapabilityError, X as IndexRequiredError, Y as IndexWriteFailureError, Z as InvalidKeyError, I as InvariantError, _ as JoinContext, $ as JoinLeg, a0 as JoinStrategy, a1 as JoinTooLargeError, a2 as JoinableSource, a3 as KeyringCorruptError, a4 as KeyringExpiredError, a5 as LedgerContentionError, a6 as LiveQuery, a7 as LiveUpstream, L as LocaleNotSpecifiedError, t as MaterializedViewConfigError, u as MaterializedViewCycleError, v as MaterializedViewSourceUnknownError, w as MaterializedViewTooLargeError, a8 as MigrationRequiredError, M as MissingTranslationError, a9 as NetworkError, aa as NoAccessError, ab as NonAdditiveSchemaChangeError, ac as NotFoundError, ad as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, ae as PathEscapeError, af as PeriodClosedError, ag as PermissionDeniedError, ah as PrivilegeEscalationError, Q as Query, ai as QueryPlan, aj as QuerySource, ak as QuiesceTimeoutError, al as ReadOnlyAtInstantError, am as ReadOnlyError, an as ReadOnlyFrameError, d as RecordLockedError, ao as RefDescriptor, ap as RefIntegrityError, aq as RefMode, ar as RefRegistry, as as RefScopeError, at as RefViolation, R as ReservedCollectionNameError, au as ScanBuilder, av as ScanPageProvider, aw as SchemaFenceError, ax as SchemaLockedError, ay as SchemaUpdateError, az as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, aA as StoreCapabilityError, aB as TamperedError, aC as TierDemoteDeniedError, aD as TierNotGrantedError, T as TranslatorNotConfiguredError, aE as ValidationError, aF as applyJoins, aG as buildLiveQuery, aH as executePlan, aI as ref, aJ as resetJoinWarnings } from './index-DVkvrgpm.cjs';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-CG2YvAbg.cjs';
+import { N as NoydbError } from './index-5I0MZ0jQ.cjs';
+export { x as AlreadyElevatedError, A as AmendmentForbiddenError, m as AttestationError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, C as ConflictError, y as DEFAULT_JOIN_MAX_ROWS, z as DanglingReferenceError, E as DecryptionError, G as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, H as DirectoryDisabledError, J as ElevationExpiredError, K as ExportCapabilityError, F as FieldFrozenError, U as FilenameSanitizationError, V as GroupCardinalityError, W as ImportCapabilityError, X as IndexRequiredError, Y as IndexWriteFailureError, Z as InvalidKeyError, I as InvariantError, _ as JoinContext, $ as JoinLeg, a0 as JoinStrategy, a1 as JoinTooLargeError, a2 as JoinableSource, a3 as KeyringCorruptError, a4 as KeyringExpiredError, a5 as LedgerContentionError, a6 as LiveQuery, a7 as LiveUpstream, L as LocaleNotSpecifiedError, t as MaterializedViewConfigError, u as MaterializedViewCycleError, v as MaterializedViewSourceUnknownError, w as MaterializedViewTooLargeError, a8 as MigrationRequiredError, M as MissingTranslationError, a9 as NetworkError, aa as NoAccessError, ab as NonAdditiveSchemaChangeError, ac as NotFoundError, ad as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, ae as PathEscapeError, af as PeriodClosedError, ag as PermissionDeniedError, ah as PrivilegeEscalationError, Q as Query, ai as QueryPlan, aj as QuerySource, ak as QuiesceTimeoutError, al as ReadOnlyAtInstantError, am as ReadOnlyError, an as ReadOnlyFrameError, d as RecordLockedError, ao as RefDescriptor, ap as RefIntegrityError, aq as RefMode, ar as RefRegistry, as as RefScopeError, at as RefViolation, R as ReservedCollectionNameError, au as ScanBuilder, av as ScanPageProvider, aw as SchemaFenceError, ax as SchemaLockedError, ay as SchemaUpdateError, az as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, aA as StoreCapabilityError, aB as TamperedError, aC as TierDemoteDeniedError, aD as TierNotGrantedError, T as TranslatorNotConfiguredError, aE as ValidationError, aF as applyJoins, aG as buildLiveQuery, aH as executePlan, aI as ref, aJ as resetJoinWarnings } from './index-5I0MZ0jQ.cjs';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-r98nkjVd.cjs';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.cjs';
-export { w as withGuard } from './with-guard-DF_Ul3DT.cjs';
-export { w as withDerivation } from './with-derivation-DWajFh4K.cjs';
-export { w as withMaterializedView } from './with-materialized-view-_piodoIz.cjs';
-export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Dnu81tsS.cjs';
-export { w as withOverlayedView } from './with-overlayed-view-DwzCKxn2.cjs';
+export { w as withGuard } from './with-guard-DUnC3JDN.cjs';
+export { w as withDerivation } from './with-derivation-BMQ9pIHe.cjs';
+export { w as withMaterializedView } from './with-materialized-view-eMTZ65_J.cjs';
+export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-B0IKeBXx.cjs';
+export { w as withOverlayedView } from './with-overlayed-view-BoY6PB3n.cjs';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.cjs';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-De3mjQWv.cjs';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Dy1qVpkL.cjs';
 export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, R as Reducer, k as ReducerOptions, l as avg, n as count, o as groupAndReduce, p as max, q as min, r as reduceRecords, t as sum } from './strategy-DSTrsZ8t.cjs';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-vBCB0-Ps.cjs';
-import './lazy-builder-C-rPfWG0.cjs';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BgEQklQc.cjs';
+import './lazy-builder-DXlSCNCJ.cjs';
 import '@noy-db/attestation';
 
 /**
@@ -162,15 +162,14 @@ declare class PolicyDeniedError extends NoydbError {
  * MUST have at least one recovery path enrolled before being
  * production-ready (paper, shamir, multi-channel, or admin-mediated).
  *
- * The error references issue #10 in its message so a developer hitting
- * it gets a one-line pointer to the design.
+ * The error message carries a pointer to the recovery design docs.
  */
 declare class RecoveryNotEnrolledError extends NoydbError {
     constructor(message?: string);
 }
 /**
  * Raised by `openVault` when a managed-passphrase-mode vault has no
- * STRONG recovery profile enrolled (#195).
+ * STRONG recovery profile enrolled.
  *
  * Managed mode means the user never types a passphrase — the unlock
  * material lives in a `SealingKeyProvider` (`at-*` package). If that
@@ -196,9 +195,8 @@ declare class ManagedRecoveryNotEnrolledError extends NoydbError {
  * `db.rotateRecovery` when the developer requests a recovery profile
  * not yet wired in this hub release.
  *
- * Implemented: `paper` (#10, pre.5) and `shamir` (#196 slice 1, pre.16).
- * Pending: `multi-channel` and `admin-mediated` (tracked under #196
- * follow-up slices).
+ * Implemented: `paper` and `shamir`.
+ * Pending: `multi-channel` and `admin-mediated` (follow-up slices).
  *
  * The carried `profile` and `tracking` fields let consumers steer the
  * UI ("multi-channel recovery is not yet wired up — open issue #N to follow").
@@ -351,7 +349,7 @@ declare function lockSchema(opts?: {
     readonly fields?: readonly string[];
 }): SchemaUpdateStrategy;
 
-/** The coordinatedCutover update strategy (#232, single-step — no from/to). */
+/** The coordinatedCutover update strategy (single-step — no from/to). */
 
 declare function coordinatedCutover(opts: {
     readonly transform: TransformFn;
@@ -431,7 +429,7 @@ interface PersistSchemaResult {
     readonly skipped: boolean;
     /** The envelope that was either written or matched. */
     readonly envelope: PersistedSchemaEnvelope;
-    /** The update-strategy decision, present when strategies ran (#245). */
+    /** The update-strategy decision, present when strategies ran. */
     readonly decision?: UpdateDecision;
 }
 declare function persistSchemaIfNeeded(opts: {
@@ -444,7 +442,7 @@ declare function persistSchemaIfNeeded(opts: {
 }): Promise<PersistSchemaResult>;
 
 /**
- * Authentication introspection — issue #13.
+ * Authentication introspection.
  *
  * Three surfaces over the configured tier model and the actual
  * per-user enrollment state:

package/dist/index.d.ts

@@ -1,21 +1,21 @@
-import { aO as NoydbStore, bo as UserEnvelope, ba as PublicEnvelope, bp as GateName, bq as GatePolicy, br as VaultPolicy, bs as ActiveTier, bt as FactorProof, bu as SchemaUpdateStrategy, bv as TransformFn, bw as PersistedSchemaEnvelope, bx as UpdateDecision, by as DirectoryConfig, bz as UserVisibility, aM as UnlockedKeyring, bf as Vault, aV as DiffEntry } from './types-D9eB0Rvh.js';
-export { bA as AccessibleVault, bB as AffectedDocument, aS as AppendInput, ay as ArrayOutputSpec, p as BLOB_CHUNKS_COLLECTION, q as BLOB_COLLECTION, t as BLOB_INDEX_COLLECTION, u as BLOB_SLOTS_PREFIX, w as BLOB_VERSIONS_PREFIX, bC as BUNDLE_STORE_POLICY, A as BlobObject, C as BlobPutOptions, E as BlobResponseOptions, F as BlobSet, bD as BuiltInGateName, bc as BundleRecipient, _ as CONSENT_AUDIT_COLLECTION, bE as CacheOptions, bF as CacheStats, bG as ChangeEvent, aT as ChangeType, a7 as ClosePeriodOptions, aH as Collection, bH as CollectionChangeEvent, bI as CollectionConflictResolver, bJ as CollectionDescriptor, ao as CollectionFrame, aU as CollectionInstant, bK as CollectionStats, bL as Conflict, bM as ConflictPolicy, bN as ConflictStrategy, $ as ConsentAuditEntry, a0 as ConsentAuditFilter, a1 as ConsentContext, a2 as ConsentOp, bO as CrossTierAccessEvent, L as DEFAULT_CHUNK_SIZE, bP as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bQ as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bR as DeepPartial, bS as DeepPartialOrNull, bT as DelegationToken, bU as DeleteManyResult, bV as DerivationDescriptor, aw as DerivationStrategy, aA as DerivationStrategyHandle, aB as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bW as DirtyEntry, bX as DryRunResult, bY as DumpSchemaOptions, bZ as ELEVATION_AUDIT_COLLECTION, b_ as ElevatedHandle, aQ as EncryptedEnvelope, b$ as EnrollAuthenticatorOptions, c0 as EnrollAuthenticatorWrappingDEKsOptions, c1 as EnrollAuthenticatorWrappingKEKOptions, c2 as EnrollRecoveryResult, c3 as ExportCapability, c4 as ExportChunk, c5 as ExportFormat, c6 as ExportStreamOptions, c7 as FactorKind, c8 as FactorProofBundle, c9 as FactorRequirement, ca as FenceDoc, cb as FenceState, cc as FieldChange, cd as FieldDescriptor, ce as FieldSource, cf as GhostRecord, cg as GrantOptions, ai as GuardChange, aj as GuardContext, ah as GuardStrategy, al as GuardStrategyHandle, ch as GuardViolation, ci as HistoryConfig, cj as HistoryEntry, aP as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, ck as INDEXED_STORE_POLICY, cl as ImportCapability, cm as InferOutput, cn as InternalCollectionStats, co as IssueDelegationOptions, cp as IssueMagicLinkGrantOptions, aW as JsonPatch, aX as JsonPatchOp, cq as KeyringAuthenticator, cr as KeyringAuthenticatorWrappingDEKs, cs as KeyringAuthenticatorWrappingKEK, ct as KeyringFile, aY as LedgerEntry, aZ as LedgerStore, cu as ListAccessibleVaultsOptions, cv as ListPageResult, cw as ListUsersOptions, cx as LiveUserEnvelope, cy as LocaleReadOptions, cz as Lru, cA as LruOptions, cB as LruStats, cC as MAGIC_LINK_CONTENT_INFO_PREFIX, cD as MAGIC_LINK_GRANTS_COLLECTION, cE as MAGIC_LINK_KEK_INFO_PREFIX, cF as MagicLinkGrantPayload, cG as MagicLinkGrantRecord, bl as MaterializedFromMeta, cH as MaterializedViewDescriptor, bm as MaterializedViewOutput, aE as MaterializedViewStrategy, aF as MaterializedViewStrategyHandle, cI as MemoryRecipientSealer, cJ as MemorySealingKeyProvider, cK as NOYDB_BACKUP_VERSION, cL as NOYDB_FORMAT_VERSION, cM as NOYDB_KEYRING_VERSION, cN as NOYDB_SYNC_VERSION, cO as Noydb, cP as NoydbBundleStore, cQ as NoydbEventMap, cR as NoydbOptions, a8 as OpenPeriodOptions, aC as OutputSpec, cS as OverlayViewDescriptor, aG as OverlayedViewStrategy, aJ as OverlayedViewStrategyHandle, a9 as PERIODS_COLLECTION, cT as PUBLIC_ENVELOPE_FIELDS, cU as PaperRecoveryDoc, cV as PaperRecoveryEntry, cW as PassphrasePolicy, cX as PassphraseValidationResult, aa as PeriodRecord, cY as Permission, cZ as Permissions, c_ as PersistedSchemaKind, c$ as PlaintextTranslatorContext, d0 as PlaintextTranslatorFn, P as PolicyEnforcer, d1 as PresenceHandle, d2 as PresencePeer, aR as PruneOptions, d3 as PublicEnvelopeField, d4 as PublicEnvelopeSchema, d5 as PublicEnvelopeText, d6 as PullMode, d7 as PullOptions, d8 as PullPolicy, d9 as PullResult, da as PushMode, db as PushOptions, dc as PushPolicy, dd as PushResult, de as PutManyItemOptions, df as PutManyOptions, dg as PutManyResult, dh as QueryAcrossOptions, di as QueryAcrossResult, dj as QuickUnlockState, dk as QuickUnlockStore, dl as ReAuthOperation, be as RecipientHint, bd as RecipientSealer, aD as RecordOutputSpec, dm as RecoverPassphraseInput, dn as RecoverPassphraseResult, dp as RecoverUserOptions, dq as RecoveryProof, dr as ResolvedPublicEnvelopeSchema, ds as RevokeOptions, aL as Role, dt as RotatePassphraseInput, du as RotateRecoveryOptions, dv as RotateRecoveryResult, dw as SEALED_PASSPHRASE_RECORD_ID, dx as SchemaDelta, dy as SchemaIntrospection, dz as SealedEnvelope, dA as SealedPassphrase, bb as SealingKeyProvider, dB as SessionPolicy, dC as SetPublicEnvelopeInput, dD as ShamirRecoveryDoc, dE as ShamirRecoveryEntry, bh as ShamirRecoveryProvider, U as SlotInfo, V as SlotRecord, dF as SlotRewrapCeremony, dG as SlotRewrapContext, dH as StandardSchemaV1, dI as StandardSchemaV1Issue, dJ as StandardSchemaV1SyncResult, dK as StoreAuth, dL as StoreAuthKind, dM as StoreCapabilities, dN as SyncEngine, dO as SyncMetadata, dP as SyncPolicy, dQ as SyncScheduler, dR as SyncSchedulerStatus, dS as SyncStatus, dT as SyncTarget, dU as SyncTargetRole, dV as SyncTransaction, dW as SyncTransactionResult, dX as TabChannel, dY as TabCoordinationOptions, dZ as TabLockManager, d_ as TabPresence, d$ as TabRole, e0 as TierMode, e1 as TranslatorAuditEntry, as as TxCollection, at as TxContext, e2 as TxOp, au as TxVault, e3 as USER_ENVELOPE_COLLECTION, e4 as USER_ENVELOPE_MAX_BYTES, bn as UnionSource, e5 as Unsubscribe, e6 as UpdateAuthenticatorOptions, e7 as UpdateContext, e8 as UpdateUserOptions, e9 as UserApi, ea as UserEnvelopeCheckGate, eb as UserEnvelopeOversizedError, ec as UserEnvelopePresented, ed as UserInfo, ee as VaultBackup, a_ as VaultEngine, ap as VaultFrame, a$ as VaultInstant, ef as VaultPolicyOnDisk, eg as VaultSchemaSnapshot, eh as VaultSnapshot, b0 as VerifyResult, W as VersionRecord, ei as WarningRules, ej as WeakPassphraseError, ek as WeakPassphraseReason, el as WrappedDeksBlob, em as WriteConflict, en as WriteEvent, eo as WriteHook, ep as WriteQueue, g as applyI18nLocale, b1 as applyPatch, eq as assertStrongPassphrase, er as buildRecipientKeyringFile, es as burnPaperRecoveryEntry, b2 as canonicalJson, b3 as computePatch, n as createEnforcer, et as createNoydb, eu as createStore, ev as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b4 as diff, ew as enrollAuthenticator, ex as estimateEntropy, ey as evaluateExportCapability, ez as evaluateImportCapability, eA as findAuthenticator, b5 as formatDiff, eB as hasExportCapability, eC as hasImportCapability, eD as hasRecoveryEnrolled, b6 as hashEntry, j as i18nText, k as isDictCollectionName, l as isDictKeyDescriptor, m as isI18nTextDescriptor, eE as isMagicLinkGrantExpired, eF as isPublicEnvelope, eG as issueDelegation, eH as keyringRecoverPassphrase, eI as keyringRotatePassphrase, eJ as listMagicLinkGrants, eK as listUsers, eL as listUsersWithEnvelopes, eM as loadActiveDelegations, eN as loadPaperRecoveryEntries, eO as loadSealedPassphrase, eP as loadShamirRecoveryEntries, eQ as magicLinkGrantRecordId, eR as mintPaperRecoveryEntry, eS as mintShamirRecoveryEntry, eT as mintWrappedDeksBlob, b7 as paddedIndex, b8 as parseIndex, eU as parseSealedEnvelope, eV as readMagicLinkGrantRecord, eW as recoverUser, eX as removeAuthenticator, r as resolveI18nText, eY as resolvePublicEnvelopeSchema, eZ as revokeDelegation, e_ as revokeMagicLinkGrant, av as runTransaction, e$ as savePaperRecoveryEntries, f0 as saveSealedPassphrase, f1 as saveShamirRecoveryEntries, b9 as sha256Hex, f2 as unwrapDeksFromBlob, f3 as unwrapDeksFromPaperEntry, f4 as unwrapDeksFromShamirEntry, f5 as unwrapMagicLinkGrant, v as validateI18nTextValue, f6 as validatePassphrase, f7 as validatePublicEnvelopeInput, f8 as validateSchemaInput, f9 as validateSchemaOutput, o as validateSessionPolicy, fa as writeMagicLinkGrant } from './types-D9eB0Rvh.js';
+import { aQ as NoydbStore, bq as UserEnvelope, bc as PublicEnvelope, br as GateName, bs as GatePolicy, bt as VaultPolicy, bu as ActiveTier, bv as FactorProof, bw as SchemaUpdateStrategy, bx as TransformFn, by as PersistedSchemaEnvelope, bz as UpdateDecision, bA as DirectoryConfig, bB as UserVisibility, aO as UnlockedKeyring, bh as Vault, aX as DiffEntry } from './types-DlnZh1_i.js';
+export { bC as AccessibleVault, bD as AffectedDocument, aU as AppendInput, aA as ArrayOutputSpec, q as BLOB_CHUNKS_COLLECTION, t as BLOB_COLLECTION, w as BLOB_INDEX_COLLECTION, x as BLOB_SLOTS_PREFIX, y as BLOB_VERSIONS_PREFIX, bE as BUNDLE_STORE_POLICY, E as BlobObject, F as BlobPutOptions, G as BlobResponseOptions, H as BlobSet, bF as BuiltInGateName, be as BundleRecipient, a0 as CONSENT_AUDIT_COLLECTION, bG as CacheOptions, bH as CacheStats, bI as ChangeEvent, aV as ChangeType, a9 as ClosePeriodOptions, aJ as Collection, bJ as CollectionChangeEvent, bK as CollectionConflictResolver, bL as CollectionDescriptor, aq as CollectionFrame, aW as CollectionInstant, bM as CollectionStats, bN as Conflict, bO as ConflictPolicy, bP as ConflictStrategy, a1 as ConsentAuditEntry, a2 as ConsentAuditFilter, a3 as ConsentContext, a4 as ConsentOp, bQ as CrossTierAccessEvent, N as DEFAULT_CHUNK_SIZE, bR as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, bS as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, bT as DeepPartial, bU as DeepPartialOrNull, bV as DelegationToken, bW as DeleteManyResult, bX as DerivationDescriptor, ay as DerivationStrategy, aC as DerivationStrategyHandle, aD as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictionaryHandle, d as DictionaryOptions, bY as DirtyEntry, bZ as DryRunResult, b_ as DumpSchemaOptions, b$ as ELEVATION_AUDIT_COLLECTION, c0 as ElevatedHandle, aS as EncryptedEnvelope, c1 as EnrollAuthenticatorOptions, c2 as EnrollAuthenticatorWrappingDEKsOptions, c3 as EnrollAuthenticatorWrappingKEKOptions, c4 as EnrollRecoveryResult, c5 as ExportCapability, c6 as ExportChunk, c7 as ExportFormat, c8 as ExportStreamOptions, c9 as FactorKind, ca as FactorProofBundle, cb as FactorRequirement, cc as FenceDoc, cd as FenceState, ce as FieldChange, cf as FieldDescriptor, cg as FieldSource, ch as GhostRecord, ci as GrantOptions, ak as GuardChange, al as GuardContext, aj as GuardStrategy, an as GuardStrategyHandle, cj as GuardViolation, ck as HistoryConfig, cl as HistoryEntry, aR as HistoryOptions, e as I18nTextDescriptor, f as I18nTextOptions, cm as INDEXED_STORE_POLICY, cn as ImportCapability, co as InferOutput, cp as InternalCollectionStats, cq as IssueDelegationOptions, cr as IssueMagicLinkGrantOptions, aY as JsonPatch, aZ as JsonPatchOp, cs as KeyringAuthenticator, ct as KeyringAuthenticatorWrappingDEKs, cu as KeyringAuthenticatorWrappingKEK, cv as KeyringFile, a_ as LedgerEntry, a$ as LedgerStore, cw as ListAccessibleVaultsOptions, cx as ListPageResult, cy as ListUsersOptions, cz as LiveUserEnvelope, cA as LocaleReadOptions, cB as Lru, cC as LruOptions, cD as LruStats, cE as MAGIC_LINK_CONTENT_INFO_PREFIX, cF as MAGIC_LINK_GRANTS_COLLECTION, cG as MAGIC_LINK_KEK_INFO_PREFIX, cH as MagicLinkGrantPayload, cI as MagicLinkGrantRecord, bn as MaterializedFromMeta, cJ as MaterializedViewDescriptor, bo as MaterializedViewOutput, aG as MaterializedViewStrategy, aH as MaterializedViewStrategyHandle, cK as MemoryRecipientSealer, cL as MemorySealingKeyProvider, cM as NOYDB_BACKUP_VERSION, cN as NOYDB_FORMAT_VERSION, cO as NOYDB_KEYRING_VERSION, cP as NOYDB_SYNC_VERSION, cQ as Noydb, cR as NoydbBundleStore, cS as NoydbEventMap, cT as NoydbOptions, aa as OpenPeriodOptions, aE as OutputSpec, cU as OverlayViewDescriptor, aI as OverlayedViewStrategy, aL as OverlayedViewStrategyHandle, ab as PERIODS_COLLECTION, cV as PUBLIC_ENVELOPE_FIELDS, cW as PaperRecoveryDoc, cX as PaperRecoveryEntry, cY as PassphrasePolicy, cZ as PassphraseValidationResult, ac as PeriodRecord, c_ as Permission, c$ as Permissions, d0 as PersistedSchemaKind, d1 as PlaintextTranslatorContext, d2 as PlaintextTranslatorFn, P as PolicyEnforcer, d3 as PresenceHandle, d4 as PresencePeer, aT as PruneOptions, d5 as PublicEnvelopeField, d6 as PublicEnvelopeSchema, d7 as PublicEnvelopeText, d8 as PullMode, d9 as PullOptions, da as PullPolicy, db as PullResult, dc as PushMode, dd as PushOptions, de as PushPolicy, df as PushResult, dg as PutManyItemOptions, dh as PutManyOptions, di as PutManyResult, dj as QueryAcrossOptions, dk as QueryAcrossResult, dl as QuickUnlockState, dm as QuickUnlockStore, dn as ReAuthOperation, bg as RecipientHint, bf as RecipientSealer, aF as RecordOutputSpec, dp as RecoverPassphraseInput, dq as RecoverPassphraseResult, dr as RecoverUserOptions, ds as RecoveryProof, dt as ResolvedPublicEnvelopeSchema, du as RevokeOptions, aN as Role, dv as RotatePassphraseInput, dw as RotateRecoveryOptions, dx as RotateRecoveryResult, dy as SEALED_PASSPHRASE_RECORD_ID, dz as SchemaDelta, dA as SchemaIntrospection, dB as SealedEnvelope, dC as SealedPassphrase, bd as SealingKeyProvider, dD as SessionPolicy, dE as SetPublicEnvelopeInput, dF as ShamirRecoveryDoc, dG as ShamirRecoveryEntry, bj as ShamirRecoveryProvider, W as SlotInfo, X as SlotRecord, dH as SlotRewrapCeremony, dI as SlotRewrapContext, dJ as StandardSchemaV1, dK as StandardSchemaV1Issue, dL as StandardSchemaV1SyncResult, dM as StoreAuth, dN as StoreAuthKind, dO as StoreCapabilities, dP as SyncEngine, dQ as SyncMetadata, dR as SyncPolicy, dS as SyncScheduler, dT as SyncSchedulerStatus, dU as SyncStatus, dV as SyncTarget, dW as SyncTargetRole, dX as SyncTransaction, dY as SyncTransactionResult, dZ as TabChannel, d_ as TabCoordinationOptions, d$ as TabLockManager, e0 as TabPresence, e1 as TabRole, e2 as TierMode, e3 as TranslatorAuditEntry, au as TxCollection, av as TxContext, e4 as TxOp, aw as TxVault, e5 as USER_ENVELOPE_COLLECTION, e6 as USER_ENVELOPE_MAX_BYTES, bp as UnionSource, e7 as Unsubscribe, e8 as UpdateAuthenticatorOptions, e9 as UpdateContext, ea as UpdateUserOptions, eb as UserApi, ec as UserEnvelopeCheckGate, ed as UserEnvelopeOversizedError, ee as UserEnvelopePresented, ef as UserInfo, eg as VaultBackup, b0 as VaultEngine, ar as VaultFrame, b1 as VaultInstant, eh as VaultPolicyOnDisk, ei as VaultSchemaSnapshot, ej as VaultSnapshot, b2 as VerifyResult, Y as VersionRecord, ek as WarningRules, el as WeakPassphraseError, em as WeakPassphraseReason, en as WrappedDeksBlob, eo as WriteConflict, ep as WriteEvent, eq as WriteHook, er as WriteQueue, g as applyI18nLocale, b3 as applyPatch, es as assertStrongPassphrase, et as buildRecipientKeyringFile, eu as burnPaperRecoveryEntry, b4 as canonicalJson, b5 as computePatch, o as createEnforcer, ev as createNoydb, ew as createStore, ex as deriveMagicLinkContentKey, h as dictCollectionName, i as dictKey, b6 as diff, ey as enrollAuthenticator, ez as estimateEntropy, eA as evaluateExportCapability, eB as evaluateImportCapability, eC as findAuthenticator, b7 as formatDiff, eD as hasExportCapability, eE as hasImportCapability, eF as hasRecoveryEnrolled, b8 as hashEntry, k as i18nText, l as isDictCollectionName, m as isDictKeyDescriptor, n as isI18nTextDescriptor, eG as isMagicLinkGrantExpired, eH as isPublicEnvelope, eI as issueDelegation, eJ as keyringRecoverPassphrase, eK as keyringRotatePassphrase, eL as listMagicLinkGrants, eM as listUsers, eN as listUsersWithEnvelopes, eO as loadActiveDelegations, eP as loadPaperRecoveryEntries, eQ as loadSealedPassphrase, eR as loadShamirRecoveryEntries, eS as magicLinkGrantRecordId, eT as mintPaperRecoveryEntry, eU as mintShamirRecoveryEntry, eV as mintWrappedDeksBlob, b9 as paddedIndex, ba as parseIndex, eW as parseSealedEnvelope, eX as readMagicLinkGrantRecord, eY as recoverUser, eZ as removeAuthenticator, r as resolveI18nText, e_ as resolvePublicEnvelopeSchema, e$ as revokeDelegation, f0 as revokeMagicLinkGrant, ax as runTransaction, f1 as savePaperRecoveryEntries, f2 as saveSealedPassphrase, f3 as saveShamirRecoveryEntries, bb as sha256Hex, f4 as unwrapDeksFromBlob, f5 as unwrapDeksFromPaperEntry, f6 as unwrapDeksFromShamirEntry, f7 as unwrapMagicLinkGrant, v as validateI18nTextValue, f8 as validatePassphrase, f9 as validatePublicEnvelopeInput, fa as validateSchemaInput, fb as validateSchemaOutput, p as validateSessionPolicy, fc as writeMagicLinkGrant } from './types-DlnZh1_i.js';
 export { d as detectMagic, a as detectMimeType, i as isPreCompressed } from './mime-magic-CBBSOkjm.js';
 export { AgeRoute, BlobLifecyclePolicy, BlobStoreRoute, CircuitBreakerOptions, HealthCheckOptions, LogLevel, LoggingOptions, MetricsOptions, OverrideOptions, OverrideTarget, RetryOptions, RouteStatus, RouteStoreOptions, RoutedNoydbStore, StoreCacheOptions, StoreMiddleware, StoreOperation, SuspendOptions, WrapBundleStoreOptions, WrappedBundleNoydbStore, createBundleStore, routeStore, withCache, withCircuitBreaker, withHealthCheck, withLogging, withMetrics, withRetry, wrapBundleStore, wrapStore } from './store/index.js';
-import { N as NoydbError } from './index-BF1B2HB9.js';
-export { x as AlreadyElevatedError, A as AmendmentForbiddenError, m as AttestationError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, C as ConflictError, y as DEFAULT_JOIN_MAX_ROWS, z as DanglingReferenceError, E as DecryptionError, G as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, H as DirectoryDisabledError, J as ElevationExpiredError, K as ExportCapabilityError, F as FieldFrozenError, U as FilenameSanitizationError, V as GroupCardinalityError, W as ImportCapabilityError, X as IndexRequiredError, Y as IndexWriteFailureError, Z as InvalidKeyError, I as InvariantError, _ as JoinContext, $ as JoinLeg, a0 as JoinStrategy, a1 as JoinTooLargeError, a2 as JoinableSource, a3 as KeyringCorruptError, a4 as KeyringExpiredError, a5 as LedgerContentionError, a6 as LiveQuery, a7 as LiveUpstream, L as LocaleNotSpecifiedError, t as MaterializedViewConfigError, u as MaterializedViewCycleError, v as MaterializedViewSourceUnknownError, w as MaterializedViewTooLargeError, a8 as MigrationRequiredError, M as MissingTranslationError, a9 as NetworkError, aa as NoAccessError, ab as NonAdditiveSchemaChangeError, ac as NotFoundError, ad as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, ae as PathEscapeError, af as PeriodClosedError, ag as PermissionDeniedError, ah as PrivilegeEscalationError, Q as Query, ai as QueryPlan, aj as QuerySource, ak as QuiesceTimeoutError, al as ReadOnlyAtInstantError, am as ReadOnlyError, an as ReadOnlyFrameError, d as RecordLockedError, ao as RefDescriptor, ap as RefIntegrityError, aq as RefMode, ar as RefRegistry, as as RefScopeError, at as RefViolation, R as ReservedCollectionNameError, au as ScanBuilder, av as ScanPageProvider, aw as SchemaFenceError, ax as SchemaLockedError, ay as SchemaUpdateError, az as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, aA as StoreCapabilityError, aB as TamperedError, aC as TierDemoteDeniedError, aD as TierNotGrantedError, T as TranslatorNotConfiguredError, aE as ValidationError, aF as applyJoins, aG as buildLiveQuery, aH as executePlan, aI as ref, aJ as resetJoinWarnings } from './index-BF1B2HB9.js';
-export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-CiM2OAeM.js';
+import { N as NoydbError } from './index-fIPPh5dg.js';
+export { x as AlreadyElevatedError, A as AmendmentForbiddenError, m as AttestationError, B as BackupCorruptedError, o as BackupLedgerError, p as BundleIntegrityError, q as BundleSealMismatchError, r as BundleVersionConflictError, C as ConflictError, y as DEFAULT_JOIN_MAX_ROWS, z as DanglingReferenceError, E as DecryptionError, G as DelegationTargetMissingError, e as DerivationCapExceededError, f as DerivationCycleError, g as DerivationDepthError, h as DerivationOutputShapeError, i as DerivationOutputUnknownError, D as DictKeyInUseError, a as DictKeyMissingError, H as DirectoryDisabledError, J as ElevationExpiredError, K as ExportCapabilityError, F as FieldFrozenError, U as FilenameSanitizationError, V as GroupCardinalityError, W as ImportCapabilityError, X as IndexRequiredError, Y as IndexWriteFailureError, Z as InvalidKeyError, I as InvariantError, _ as JoinContext, $ as JoinLeg, a0 as JoinStrategy, a1 as JoinTooLargeError, a2 as JoinableSource, a3 as KeyringCorruptError, a4 as KeyringExpiredError, a5 as LedgerContentionError, a6 as LiveQuery, a7 as LiveUpstream, L as LocaleNotSpecifiedError, t as MaterializedViewConfigError, u as MaterializedViewCycleError, v as MaterializedViewSourceUnknownError, w as MaterializedViewTooLargeError, a8 as MigrationRequiredError, M as MissingTranslationError, a9 as NetworkError, aa as NoAccessError, ab as NonAdditiveSchemaChangeError, ac as NotFoundError, ad as OrderBy, O as OverlayBaseIsVirtualError, j as OverlayCollectionUnavailableError, k as OverlayIdMismatchError, l as OverlayNameCollisionError, ae as PathEscapeError, af as PeriodClosedError, ag as PermissionDeniedError, ah as PrivilegeEscalationError, Q as Query, ai as QueryPlan, aj as QuerySource, ak as QuiesceTimeoutError, al as ReadOnlyAtInstantError, am as ReadOnlyError, an as ReadOnlyFrameError, d as RecordLockedError, ao as RefDescriptor, ap as RefIntegrityError, aq as RefMode, ar as RefRegistry, as as RefScopeError, at as RefViolation, R as ReservedCollectionNameError, au as ScanBuilder, av as ScanPageProvider, aw as SchemaFenceError, ax as SchemaLockedError, ay as SchemaUpdateError, az as SchemaValidationError, S as SessionExpiredError, b as SessionNotFoundError, c as SessionPolicyError, aA as StoreCapabilityError, aB as TamperedError, aC as TierDemoteDeniedError, aD as TierNotGrantedError, T as TranslatorNotConfiguredError, aE as ValidationError, aF as applyJoins, aG as buildLiveQuery, aH as executePlan, aI as ref, aJ as resetJoinWarnings } from './index-fIPPh5dg.js';
+export { A as AutoCredential, n as AutoCredentialKind, c as CompressionAlgo, N as NOYDB_BUNDLE_FORMAT_VERSION, e as NOYDB_BUNDLE_MAGIC, f as NOYDB_BUNDLE_PREFIX_BYTES, g as NoydbBundleHeader, h as NoydbBundleReadResult, R as ReadNoydbBundleOptions, W as WriteNoydbBundleOptions, j as generateULID, o as hasNoydbBundleMagic, k as isULID, r as readNoydbBundle, l as readNoydbBundleHeader, p as readNoydbBundlePublicEnvelope, m as resetBrotliSupportCache, w as writeNoydbBundle } from './ulid-CzPONlhG.js';
 export { a as CrdtMode, b as CrdtState, L as LwwMapState, R as RgaState, Y as YjsState, m as mergeCrdtStates, r as resolveCrdtSnapshot } from './strategy-BSxFXGzb.js';
-export { w as withGuard } from './with-guard-DR7U-l4v.js';
-export { w as withDerivation } from './with-derivation-Bzpj6UTv.js';
-export { w as withMaterializedView } from './with-materialized-view-qtoJ3xKJ.js';
-export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-Dnu81tsS.js';
-export { w as withOverlayedView } from './with-overlayed-view-DFaRfgMr.js';
+export { w as withGuard } from './with-guard-DmT50nVG.js';
+export { w as withDerivation } from './with-derivation-B98shCV8.js';
+export { w as withMaterializedView } from './with-materialized-view-Bp_M3sNG.js';
+export { a as Clause, C as CollectionIndexes, F as FieldClause, b as FilterClause, G as GroupClause, H as HashIndex, I as IndexDef, O as Operator, e as evaluateClause, c as evaluateFieldClause, r as readPath } from './predicate-B0IKeBXx.js';
+export { w as withOverlayedView } from './with-overlayed-view-zzSnRQmS.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Cf2B7Kih.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Cvo-xCQC.js';
 export { a as AggregateResult, b as AggregateSpec, c as Aggregation, d as AggregationUpstream, G as GROUPBY_MAX_CARDINALITY, e as GROUPBY_WARN_CARDINALITY, f as GroupedAggregation, g as GroupedQuery, h as GroupedQueryN, i as GroupedRow, j as GroupedRowN, L as LiveAggregation, R as Reducer, k as ReducerOptions, l as avg, n as count, o as groupAndReduce, p as max, q as min, r as reduceRecords, t as sum } from './strategy-DSTrsZ8t.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-gVn_uKhp.js';
-import './lazy-builder-Rpd-V3jP.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-BAlWR4WD.js';
+import './lazy-builder-D1MyR1qH.js';
 import '@noy-db/attestation';
 
 /**
@@ -162,15 +162,14 @@ declare class PolicyDeniedError extends NoydbError {
  * MUST have at least one recovery path enrolled before being
  * production-ready (paper, shamir, multi-channel, or admin-mediated).
  *
- * The error references issue #10 in its message so a developer hitting
- * it gets a one-line pointer to the design.
+ * The error message carries a pointer to the recovery design docs.
  */
 declare class RecoveryNotEnrolledError extends NoydbError {
     constructor(message?: string);
 }
 /**
  * Raised by `openVault` when a managed-passphrase-mode vault has no
- * STRONG recovery profile enrolled (#195).
+ * STRONG recovery profile enrolled.
  *
  * Managed mode means the user never types a passphrase — the unlock
  * material lives in a `SealingKeyProvider` (`at-*` package). If that
@@ -196,9 +195,8 @@ declare class ManagedRecoveryNotEnrolledError extends NoydbError {
  * `db.rotateRecovery` when the developer requests a recovery profile
  * not yet wired in this hub release.
  *
- * Implemented: `paper` (#10, pre.5) and `shamir` (#196 slice 1, pre.16).
- * Pending: `multi-channel` and `admin-mediated` (tracked under #196
- * follow-up slices).
+ * Implemented: `paper` and `shamir`.
+ * Pending: `multi-channel` and `admin-mediated` (follow-up slices).
  *
  * The carried `profile` and `tracking` fields let consumers steer the
  * UI ("multi-channel recovery is not yet wired up — open issue #N to follow").
@@ -351,7 +349,7 @@ declare function lockSchema(opts?: {
     readonly fields?: readonly string[];
 }): SchemaUpdateStrategy;
 
-/** The coordinatedCutover update strategy (#232, single-step — no from/to). */
+/** The coordinatedCutover update strategy (single-step — no from/to). */
 
 declare function coordinatedCutover(opts: {
     readonly transform: TransformFn;
@@ -431,7 +429,7 @@ interface PersistSchemaResult {
     readonly skipped: boolean;
     /** The envelope that was either written or matched. */
     readonly envelope: PersistedSchemaEnvelope;
-    /** The update-strategy decision, present when strategies ran (#245). */
+    /** The update-strategy decision, present when strategies ran. */
     readonly decision?: UpdateDecision;
 }
 declare function persistSchemaIfNeeded(opts: {
@@ -444,7 +442,7 @@ declare function persistSchemaIfNeeded(opts: {
 }): Promise<PersistSchemaResult>;
 
 /**
- * Authentication introspection — issue #13.
+ * Authentication introspection.
  *
  * Three surfaces over the configured tier model and the actual
  * per-user enrollment state:

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-YK72A4IT.js";
+} from "./chunk-CKH247ZR.js";
 import {
   Collection,
   DEFAULT_FRESHNESS_MS,
@@ -39,7 +39,7 @@ import {
   saveVaultPolicy,
   validateSchemaInput,
   validateSchemaOutput
-} from "./chunk-T6HQMVML.js";
+} from "./chunk-W277AG6N.js";
 import {
   DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
   PUBLIC_ENVELOPE_FIELDS,
@@ -50,24 +50,24 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-GVXBHCZ2.js";
+} from "./chunk-LJO6Q3X6.js";
 import {
   withDerivation
-} from "./chunk-EMEX37ZN.js";
-import "./chunk-GD3BGKAR.js";
-import "./chunk-HGZ7DC5H.js";
+} from "./chunk-2GMRNNI3.js";
+import "./chunk-UGVDIOY7.js";
+import "./chunk-DFCINPB5.js";
 import {
   withMaterializedView
-} from "./chunk-ZC2AAE6J.js";
-import "./chunk-G7PAZ3TD.js";
-import "./chunk-GDTCGIPX.js";
-import "./chunk-BFI3RS42.js";
+} from "./chunk-LWFQYT4N.js";
+import "./chunk-YEHUEUNP.js";
+import "./chunk-7TX7HN42.js";
+import "./chunk-R7JTYCRX.js";
 import {
   withOverlayedView
-} from "./chunk-YL2DR3HY.js";
-import "./chunk-NGSPBLLE.js";
-import "./chunk-NSLTPGEN.js";
-import "./chunk-WRLHNG6H.js";
+} from "./chunk-25WFLKOH.js";
+import "./chunk-34XGYMQT.js";
+import "./chunk-CGJFCT3X.js";
+import "./chunk-RIHZBSWJ.js";
 import {
   mergeCrdtStates,
   resolveCrdtSnapshot
@@ -82,7 +82,7 @@ import {
   readNoydbBundlePublicEnvelope,
   resetBrotliSupportCache,
   writeNoydbBundle
-} from "./chunk-P6256WTJ.js";
+} from "./chunk-5QPF2MJ5.js";
 import {
   MemoryRecipientSealer,
   MemorySealingKeyProvider,
@@ -93,7 +93,7 @@ import {
   parseSealedEnvelope,
   savePersistedSchema,
   saveSealedPassphrase
-} from "./chunk-4X2S7PBF.js";
+} from "./chunk-E225X5CQ.js";
 import {
   PUBLIC_ENVELOPE_RECORD_ID,
   isPublicEnvelope,
@@ -101,39 +101,37 @@ import {
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-FS7A4XNF.js";
+} from "./chunk-WEA4TDTJ.js";
 import {
   CONSENT_AUDIT_COLLECTION
-} from "./chunk-K5PVGKE4.js";
+} from "./chunk-MDIC4FAU.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-GAUBWHAF.js";
+} from "./chunk-ZQMYB56Z.js";
 import "./chunk-UF3BUNQZ.js";
 import {
   withGuard
-} from "./chunk-5YHWBPOT.js";
-import "./chunk-EPK6A3WJ.js";
+} from "./chunk-ED3E3OLO.js";
+import "./chunk-A3JMGXPG.js";
 import "./chunk-UMLVJTYV.js";
-import "./chunk-SAVQ6E2O.js";
+import "./chunk-G26QAQNI.js";
 import {
   CollectionFrame,
   VaultFrame
-} from "./chunk-FCDO7UAO.js";
-import {
-  applyI18nLocale,
-  i18nText,
-  isI18nTextDescriptor,
-  resolveI18nText,
-  validateI18nTextValue
-} from "./chunk-A6SWRXUQ.js";
+} from "./chunk-R4LTCI6O.js";
 import {
   DICT_COLLECTION_PREFIX,
   DictionaryHandle,
+  applyI18nLocale,
   dictCollectionName,
   dictKey,
+  i18nText,
   isDictCollectionName,
-  isDictKeyDescriptor
-} from "./chunk-KMI2NBBF.js";
+  isDictKeyDescriptor,
+  isI18nTextDescriptor,
+  resolveI18nText,
+  validateI18nTextValue
+} from "./chunk-JICBEFBT.js";
 import {
   createBundleStore,
   routeStore,
@@ -145,7 +143,7 @@ import {
   withRetry,
   wrapBundleStore,
   wrapStore
-} from "./chunk-2XLVPKXG.js";
+} from "./chunk-YJ46RFCD.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   credentialStatus,
@@ -153,7 +151,7 @@ import {
   getCredential,
   listCredentials,
   putCredential
-} from "./chunk-4OQWR46B.js";
+} from "./chunk-CCC25PA7.js";
 import {
   MAGIC_LINK_CONTENT_INFO_PREFIX,
   MAGIC_LINK_GRANTS_COLLECTION,
@@ -188,17 +186,17 @@ import {
   unwrapDeksFromShamirEntry,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-2EYC3WDT.js";
+} from "./chunk-Y3P5DEMZ.js";
 import {
   assertTierAccess,
   dekKey,
   effectiveClearance
-} from "./chunk-6S3LLAQ5.js";
+} from "./chunk-TNBIWSQ7.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-LS3JLEIB.js";
+} from "./chunk-PS5G6A3Y.js";
 import {
   DIRECTORY_RECORD_ID,
   USER_ENVELOPE_COLLECTION,
@@ -226,7 +224,7 @@ import {
   saveUserEnvelope,
   validatePassphrase,
   visibilityRecordId
-} from "./chunk-TLFUDXVV.js";
+} from "./chunk-T6MTNGBM.js";
 import {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
@@ -246,7 +244,7 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-QAU5HM6Q.js";
+} from "./chunk-XVJFFGTG.js";
 import {
   generateULID,
   isULID
@@ -256,14 +254,14 @@ import {
   VaultInstant,
   diff,
   formatDiff
-} from "./chunk-IS5HWQO7.js";
+} from "./chunk-ARZAHCCF.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION,
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-74JEQFMT.js";
+} from "./chunk-6A4AMQ2H.js";
 import {
   canonicalJson,
   envelopePayloadHash,
@@ -271,7 +269,7 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-NCO2JGKK.js";
+} from "./chunk-Z6FNBOTC.js";
 import {
   DEFAULT_JOIN_MAX_ROWS,
   Query,
@@ -280,17 +278,17 @@ import {
   buildLiveQuery,
   executePlan,
   resetJoinWarnings
-} from "./chunk-4UBOTYP5.js";
+} from "./chunk-XDW37COG.js";
 import {
   CollectionIndexes
-} from "./chunk-YMYK7US4.js";
+} from "./chunk-HIELMTUK.js";
 import {
   avg,
   count,
   max,
   min,
   sum
-} from "./chunk-5ZGZ6HIZ.js";
+} from "./chunk-5VMTAX4Y.js";
 import {
   Aggregation,
   GROUPBY_MAX_CARDINALITY,
@@ -300,12 +298,12 @@ import {
   GroupedQueryN,
   groupAndReduce,
   reduceRecords
-} from "./chunk-KYKMKLJ6.js";
+} from "./chunk-PX3MJ6RB.js";
 import {
   evaluateClause,
   evaluateFieldClause,
   readPath
-} from "./chunk-MRIBLZL3.js";
+} from "./chunk-ICH4AIGL.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -317,15 +315,15 @@ import {
   detectMagic,
   detectMimeType,
   isPreCompressed
-} from "./chunk-FBMXWVGP.js";
-import "./chunk-LOL725S4.js";
+} from "./chunk-KGFV72WK.js";
+import "./chunk-JSYTGEX4.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION,
   NOYDB_KEYRING_VERSION,
   NOYDB_SYNC_VERSION,
   createStore
-} from "./chunk-FXQYZNOW.js";
+} from "./chunk-5OVIFUQE.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -334,7 +332,7 @@ import {
   derivePresenceKey,
   encryptBytes,
   encryptDeterministic
-} from "./chunk-UOF74WQY.js";
+} from "./chunk-EKTOYEZ3.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -409,7 +407,7 @@ import {
   TierNotGrantedError,
   TranslatorNotConfiguredError,
   ValidationError
-} from "./chunk-YDLAFP36.js";
+} from "./chunk-6HJ2ZALB.js";
 
 // src/schema-update/strategies.ts
 function blindUpdate() {