@noy-db/hub 0.2.0-pre.5 → 0.2.0-pre.7

package/dist/tx/index.d.ts

@@ -1,10 +1,10 @@
-import { aq as TxStrategy } from '../types-BV4AZKmx.js';
-export { ar as AmendmentTxOptions, as as TxCollection, at as TxContext, au as TxVault, av as runTransaction } from '../types-BV4AZKmx.js';
-import '../lazy-builder-D1MyR1qH.js';
-import '../predicate-B0IKeBXx.js';
+import { aw as TxStrategy } from '../types-DT7cXRHq.js';
+export { ax as AmendmentTxOptions, ay as TxCollection, az as TxContext, aA as TxVault, aB as runTransaction } from '../types-DT7cXRHq.js';
+import '../lazy-builder-7tIpFyWN.js';
+import '../predicate-BSAGEyu5.js';
 import '../strategy-DSTrsZ8t.js';
 import '../strategy-BSxFXGzb.js';
-import '../index-fIPPh5dg.js';
+import '../index-CmWQyC4e.js';
 import '@noy-db/attestation';
 
 /**

package/dist/tx/index.js

@@ -3,9 +3,9 @@ import {
   TxContext,
   TxVault,
   runTransaction
-} from "../chunk-LJO6Q3X6.js";
+} from "../chunk-OA6HE2RW.js";
 import "../chunk-FZU343FL.js";
-import "../chunk-6HJ2ZALB.js";
+import "../chunk-REQJJIPP.js";
 
 // src/tx/dry-run.ts
 var SEP = " ";
@@ -43,7 +43,7 @@ async function runDryRun(db, fn) {
     const gctx = { existing: before, vault: facade, userId: v.userId, role: v.role };
     try {
       await registry.runChecks(op.collectionName, after, gctx);
-      const { GuardExecutor } = await import("../executor-AWCHQ2KN.js");
+      const { GuardExecutor } = await import("../executor-V3DKOADS.js");
       for (const g of guards) {
         await GuardExecutor.checkFrozenFields(g, op.id, before, after);
       }

package/dist/{types-BV4AZKmx.d.ts → types-DT7cXRHq.d.ts}

@@ -1,8 +1,8 @@
-import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-D1MyR1qH.js';
+import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-7tIpFyWN.js';
 import { b as AggregateSpec, A as AggregateStrategy } from './strategy-DSTrsZ8t.js';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.js';
-import { N as NoydbError, Q as Query, ar as RefRegistry, ao as RefDescriptor, a2 as JoinableSource, at as RefViolation, au as ScanBuilder } from './index-fIPPh5dg.js';
-import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-B0IKeBXx.js';
+import { N as NoydbError, Q as Query, av as RefRegistry, as as RefDescriptor, a6 as JoinableSource, ax as RefViolation, ay as ScanBuilder } from './index-CmWQyC4e.js';
+import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BSAGEyu5.js';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
 /**
@@ -1769,17 +1769,34 @@ declare function validateI18nTextValue(value: unknown, field: string, descriptor
  */
 declare function resolveI18nText(value: Record<string, string>, locale: string, fallback?: string | readonly string[], field?: string): string | Record<string, string>;
 /**
- * Apply locale resolution to a single record, in-place over a copy.
+ * Return all leaf values at `path`, expanding `[].` array wildcards.
+ *
+ * - `'name'`              → `[obj.name]`
+ * - `'address.lineOne'`   → `[obj.address.lineOne]`
+ * - `'contacts[].title'`  → `[obj.contacts[0].title, obj.contacts[1].title, …]`
+ *
+ * Returns an empty array when the path does not resolve (missing key,
+ * wrong type, etc.). Used by `enforceI18nOnPut` to validate nested fields.
+ */
+declare function getAtPath(obj: Record<string, unknown>, path: string): unknown[];
+/**
+ * Mutate `obj` in-place, setting `value` at the nested `path`.
+ * Supports dot notation (`'address.lineOne'`) but not array wildcards —
+ * auto-translate on `contacts[].title` style paths is not supported.
+ */
+declare function setAtPathInPlace(obj: Record<string, unknown>, path: string, value: unknown): void;
+/**
+ * Apply locale resolution to a single record, returning a new copy.
  *
  * For each field registered as an `i18nText` descriptor:
  * - If `locale === 'raw'`, the field value is left as the stored map.
  * - Otherwise, the field value is replaced with the resolved string.
  *
- * Records that are not plain objects (null, array, primitives) are
- * returned unchanged.
+ * Field paths support dot notation (`'address.lineOne'`) and array
+ * wildcards (`'contacts[].title'`). Top-level fields work as before.
  *
  * @param record      The decrypted record.
- * @param i18nFields  Map of field name → `I18nTextDescriptor`.
+ * @param i18nFields  Map of field path → `I18nTextDescriptor`.
  * @param locale      The requested locale (or `'raw'`).
  * @param fallback    Fallback chain (optional).
  */
@@ -4344,6 +4361,36 @@ declare class QuickUnlockStore {
     private clearTimer;
 }
 
+interface SnapshotMeta {
+    readonly version: string;
+    readonly label?: string;
+    readonly note?: string;
+    readonly exportedAt: string;
+    readonly exportedBy: string;
+    readonly size: number;
+    /**
+     * `'verified'` — bundle was produced by `writeNoydbBundle(vault, {})`, which embeds
+     * ledgerHead metadata; `vault.load()` runs `verifyBackupIntegrity()` on restore.
+     * `'legacy-unverifiable'` — reserved for v2 import paths that read pre-existing bundles
+     * lacking a ledgerHead; not produced by the current engine.
+     */
+    readonly integrity: 'verified' | 'legacy-unverifiable';
+}
+interface RetentionPolicy {
+    readonly keepLast?: number;
+    readonly maxAgeDays?: number;
+    readonly prune?: boolean;
+}
+/** @internal */
+interface SnapshotStrategy {
+    snapshot(vault: unknown, by: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    listSnapshots(vaultId: string): Promise<SnapshotMeta[]>;
+    restoreSnapshot(vault: unknown, version: string): Promise<void>;
+}
+
 /**
  * Multi-record atomic transactions.
  *
@@ -4773,6 +4820,7 @@ declare class Noydb {
     private readonly txStrategy;
     private readonly sessionStrategy;
     private readonly syncStrategy;
+    private readonly snapshotStrategy;
     /**
      * Currently-running multi-record transaction, set by
      * `runTransaction` at the start of Phase 2 (commit) and cleared in
@@ -5744,6 +5792,27 @@ declare class Noydb {
      * should use {@link getKeyring}, which returns a defensive copy.
      */
     private getKeyringInternal;
+    /**
+     * Take an on-demand checkpoint of the given vault.
+     * Requires `snapshotStrategy: withSnapshots({ store })` in `createNoydb`.
+     * @throws ValidationError when the vault is not open
+     */
+    snapshot(vault: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    /**
+     * List all snapshots for the given vault, newest first.
+     * Reads only the sidecar index — does not download snapshot bytes.
+     */
+    listSnapshots(vault: string): Promise<SnapshotMeta[]>;
+    /**
+     * Restore the vault to a previously snapshotted state.
+     * Runs `verifyBackupIntegrity()` automatically on restore.
+     * @throws SnapshotNotFoundError when `version` doesn't exist in the store
+     * @throws ValidationError when the vault is not open
+     */
+    restoreSnapshot(vault: string, version: string): Promise<void>;
 }
 /** Create a new NOYDB instance. */
 declare function createNoydb(options: NoydbOptions): Promise<Noydb>;
@@ -12223,6 +12292,13 @@ interface NoydbOptions {
      * @internal
      */
     readonly syncStrategy?: SyncStrategy;
+    /**
+     * Tree-shake seam — optional snapshot-lifecycle subsystem. Pass
+     * `withSnapshots({ store })` from `@noy-db/hub/snapshots` to enable
+     * `db.snapshot()`, `db.listSnapshots()`, and `db.restoreSnapshot()`.
+     * When omitted, all three methods throw with a pointer at the subpath.
+     */
+    readonly snapshotStrategy?: SnapshotStrategy;
     /**
      * Optional guard strategies — collection-level write guards. Each
      * handle is the output of `withGuard()` from `@noy-db/hub/guards`.
@@ -12528,4 +12604,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ConsentAuditEntry as $, type BlobObject as A, type BlobStrategy as B, type BlobPutOptions as C, DICT_COLLECTION_PREFIX as D, type BlobResponseOptions as E, BlobSet as F, type BlobStrategyOpenArgs as G, type CompactRunOptions as H, type I18nStrategy as I, type CompactionContext as J, type CompactionResult as K, DEFAULT_CHUNK_SIZE as L, EXPORT_AUDIT_COLLECTION as M, ExportBlobsAbortedError as N, type ExportBlobsAuditEntry as O, PolicyEnforcer as P, type ExportBlobsHandle as Q, type ExportBlobsOptions as R, type SessionStrategy as S, type ExportedBlob as T, type SlotInfo as U, type SlotRecord as V, type VersionRecord as W, createExportBlobsHandle as X, runCompaction as Y, type ConsentStrategy as Z, CONSENT_AUDIT_COLLECTION as _, type DictEntry as a, VaultInstant as a$, type ConsentAuditFilter as a0, type ConsentContext as a1, type ConsentOp as a2, loadConsentEntries as a3, writeConsentEntry as a4, type PeriodsStrategy as a5, type CarryForwardContext as a6, type ClosePeriodOptions as a7, type OpenPeriodOptions as a8, PERIODS_COLLECTION as a9, type DerivationStrategyHandle as aA, type DerivedFromMeta as aB, type OutputSpec as aC, type RecordOutputSpec as aD, type MaterializedViewStrategy as aE, type MaterializedViewStrategyHandle as aF, type OverlayedViewStrategy as aG, Collection as aH, OverlayedViewRegistry as aI, type OverlayedViewStrategyHandle as aJ, type SyncStrategy as aK, type Role as aL, type UnlockedKeyring as aM, type HistoryStrategy as aN, type NoydbStore as aO, type HistoryOptions as aP, type EncryptedEnvelope as aQ, type PruneOptions as aR, type AppendInput as aS, type ChangeType as aT, CollectionInstant as aU, type DiffEntry as aV, type JsonPatch as aW, type JsonPatchOp as aX, type LedgerEntry as aY, LedgerStore as aZ, type VaultEngine as a_, type PeriodRecord as aa, type ReadOnlyCollection as ab, appendPeriodLedgerEntry as ac, assertTsWritable as ad, chainAnchor as ae, loadPeriods as af, validatePeriodName as ag, type GuardStrategy as ah, type GuardChange as ai, type GuardContext as aj, GuardRegistry as ak, type GuardStrategyHandle as al, ReadOnlyVaultFacade as am, type ShadowStrategy as an, CollectionFrame as ao, VaultFrame as ap, type TxStrategy as aq, type AmendmentTxOptions as ar, TxCollection as as, TxContext as at, TxVault as au, runTransaction as av, type DerivationStrategy as aw, type DerivationContext as ax, type ArrayOutputSpec as ay, DerivationRegistry as az, type DictKeyDescriptor as b, type EnrollAuthenticatorOptions as b$, type VerifyResult as b0, applyPatch as b1, canonicalJson as b2, computePatch as b3, diff as b4, formatDiff as b5, hashEntry as b6, paddedIndex as b7, parseIndex as b8, sha256Hex as b9, type AccessibleVault as bA, type AffectedDocument as bB, BUNDLE_STORE_POLICY as bC, type BuiltInGateName as bD, type CacheOptions as bE, type CacheStats as bF, type ChangeEvent as bG, type CollectionChangeEvent as bH, type CollectionConflictResolver as bI, type CollectionDescriptor as bJ, type CollectionStats as bK, type Conflict as bL, type ConflictPolicy as bM, type ConflictStrategy as bN, type CrossTierAccessEvent as bO, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bP, DELEGATIONS_COLLECTION as bQ, type DeepPartial as bR, type DeepPartialOrNull as bS, type DelegationToken as bT, type DeleteManyResult as bU, type DerivationDescriptor as bV, type DirtyEntry as bW, type DryRunResult as bX, type DumpSchemaOptions as bY, ELEVATION_AUDIT_COLLECTION as bZ, ElevatedHandle as b_, type PublicEnvelope as ba, type SealingKeyProvider as bb, type BundleRecipient as bc, type RecipientSealer as bd, type RecipientHint as be, Vault as bf, type RecoveryEnrollmentInput as bg, type ShamirRecoveryProvider as bh, type MVQueryContext as bi, type RegisteredMV as bj, MaterializedViewRegistry as bk, type MaterializedFromMeta as bl, type MaterializedViewOutput as bm, type UnionSource as bn, type UserEnvelope as bo, type GateName as bp, type GatePolicy as bq, type VaultPolicy as br, type ActiveTier as bs, type FactorProof as bt, type SchemaUpdateStrategy as bu, type TransformFn as bv, type PersistedSchemaEnvelope as bw, type UpdateDecision as bx, type DirectoryConfig as by, type UserVisibility as bz, DictionaryHandle as c, type PlaintextTranslatorContext as c$, type EnrollAuthenticatorWrappingDEKsOptions as c0, type EnrollAuthenticatorWrappingKEKOptions as c1, type EnrollRecoveryResult as c2, type ExportCapability as c3, type ExportChunk as c4, type ExportFormat as c5, type ExportStreamOptions as c6, type FactorKind as c7, type FactorProofBundle as c8, type FactorRequirement as c9, type LruOptions as cA, type LruStats as cB, MAGIC_LINK_CONTENT_INFO_PREFIX as cC, MAGIC_LINK_GRANTS_COLLECTION as cD, MAGIC_LINK_KEK_INFO_PREFIX as cE, type MagicLinkGrantPayload as cF, type MagicLinkGrantRecord as cG, type MaterializedViewDescriptor as cH, MemoryRecipientSealer as cI, MemorySealingKeyProvider as cJ, NOYDB_BACKUP_VERSION as cK, NOYDB_FORMAT_VERSION as cL, NOYDB_KEYRING_VERSION as cM, NOYDB_SYNC_VERSION as cN, Noydb as cO, type NoydbBundleStore as cP, type NoydbEventMap as cQ, type NoydbOptions as cR, type OverlayViewDescriptor as cS, PUBLIC_ENVELOPE_FIELDS as cT, type PaperRecoveryDoc as cU, type PaperRecoveryEntry as cV, type PassphrasePolicy as cW, type PassphraseValidationResult as cX, type Permission as cY, type Permissions as cZ, type PersistedSchemaKind as c_, type FenceDoc as ca, type FenceState as cb, type FieldChange as cc, type FieldDescriptor as cd, type FieldSource as ce, type GhostRecord as cf, type GrantOptions as cg, type GuardViolation as ch, type HistoryConfig as ci, type HistoryEntry as cj, INDEXED_STORE_POLICY as ck, type ImportCapability as cl, type InferOutput as cm, type InternalCollectionStats as cn, type IssueDelegationOptions as co, type IssueMagicLinkGrantOptions as cp, type KeyringAuthenticator as cq, type KeyringAuthenticatorWrappingDEKs as cr, type KeyringAuthenticatorWrappingKEK as cs, type KeyringFile as ct, type ListAccessibleVaultsOptions as cu, type ListPageResult as cv, type ListUsersOptions as cw, type LiveUserEnvelope as cx, type LocaleReadOptions as cy, Lru as cz, type DictionaryOptions as d, type TabRole as d$, type PlaintextTranslatorFn as d0, PresenceHandle as d1, type PresencePeer as d2, type PublicEnvelopeField as d3, type PublicEnvelopeSchema as d4, type PublicEnvelopeText as d5, type PullMode as d6, type PullOptions as d7, type PullPolicy as d8, type PullResult as d9, type SealedPassphrase as dA, type SessionPolicy as dB, type SetPublicEnvelopeInput as dC, type ShamirRecoveryDoc as dD, type ShamirRecoveryEntry as dE, type SlotRewrapCeremony as dF, type SlotRewrapContext as dG, type StandardSchemaV1 as dH, type StandardSchemaV1Issue as dI, type StandardSchemaV1SyncResult as dJ, type StoreAuth as dK, type StoreAuthKind as dL, type StoreCapabilities as dM, SyncEngine as dN, type SyncMetadata as dO, type SyncPolicy as dP, SyncScheduler as dQ, type SyncSchedulerStatus as dR, type SyncStatus as dS, type SyncTarget as dT, type SyncTargetRole as dU, SyncTransaction as dV, type SyncTransactionResult as dW, type TabChannel as dX, type TabCoordinationOptions as dY, type TabLockManager as dZ, type TabPresence as d_, type PushMode as da, type PushOptions as db, type PushPolicy as dc, type PushResult as dd, type PutManyItemOptions as de, type PutManyOptions as df, type PutManyResult as dg, type QueryAcrossOptions as dh, type QueryAcrossResult as di, type QuickUnlockState as dj, QuickUnlockStore as dk, type ReAuthOperation as dl, type RecoverPassphraseInput as dm, type RecoverPassphraseResult as dn, type RecoverUserOptions as dp, type RecoveryProof as dq, type ResolvedPublicEnvelopeSchema as dr, type RevokeOptions as ds, type RotatePassphraseInput as dt, type RotateRecoveryOptions as du, type RotateRecoveryResult as dv, SEALED_PASSPHRASE_RECORD_ID as dw, type SchemaDelta as dx, type SchemaIntrospection as dy, type SealedEnvelope as dz, type I18nTextDescriptor as e, savePaperRecoveryEntries as e$, type TierMode as e0, type TranslatorAuditEntry as e1, type TxOp as e2, USER_ENVELOPE_COLLECTION as e3, USER_ENVELOPE_MAX_BYTES as e4, type Unsubscribe as e5, type UpdateAuthenticatorOptions as e6, type UpdateContext as e7, type UpdateUserOptions as e8, UserApi as e9, findAuthenticator as eA, hasExportCapability as eB, hasImportCapability as eC, hasRecoveryEnrolled as eD, isMagicLinkGrantExpired as eE, isPublicEnvelope as eF, issueDelegation as eG, recoverPassphrase as eH, rotatePassphrase as eI, listMagicLinkGrants as eJ, listUsers as eK, listUsersWithEnvelopes as eL, loadActiveDelegations as eM, loadPaperRecoveryEntries as eN, loadSealedPassphrase as eO, loadShamirRecoveryEntries as eP, magicLinkGrantRecordId as eQ, mintPaperRecoveryEntry as eR, mintShamirRecoveryEntry as eS, mintWrappedDeksBlob as eT, parseSealedEnvelope as eU, readMagicLinkGrantRecord as eV, recoverUser as eW, removeAuthenticator as eX, resolveSchema as eY, revokeDelegation as eZ, revokeMagicLinkGrant as e_, type UserEnvelopeCheckGate as ea, UserEnvelopeOversizedError as eb, type UserEnvelopePresented as ec, type UserInfo as ed, type VaultBackup as ee, type VaultPolicyOnDisk as ef, type VaultSchemaSnapshot as eg, type VaultSnapshot as eh, type WarningRules as ei, WeakPassphraseError as ej, type WeakPassphraseReason as ek, type WrappedDeksBlob as el, type WriteConflict as em, type WriteEvent as en, type WriteHook as eo, type WriteQueue as ep, assertStrongPassphrase as eq, buildRecipientKeyringFile as er, burnPaperRecoveryEntry as es, createNoydb as et, createStore as eu, deriveMagicLinkContentKey as ev, enrollAuthenticator as ew, estimateEntropy as ex, evaluateExportCapability as ey, evaluateImportCapability as ez, type I18nTextOptions as f, saveSealedPassphrase as f0, saveShamirRecoveryEntries as f1, unwrapDeksFromBlob as f2, unwrapDeksFromPaperEntry as f3, unwrapDeksFromShamirEntry as f4, unwrapMagicLinkGrant as f5, validatePassphrase as f6, validatePublicEnvelopeInput as f7, validateSchemaInput as f8, validateSchemaOutput as f9, writeMagicLinkGrant as fa, changeSecret as fb, createOwnerKeyring as fc, ensureCollectionDEK as fd, grant as fe, loadKeyring as ff, persistKeyring as fg, revoke as fh, updateAuthenticator as fi, updateKeyringIdentity as fj, applyI18nLocale as g, dictCollectionName as h, dictKey as i, i18nText as j, isDictCollectionName as k, isDictKeyDescriptor as l, isI18nTextDescriptor as m, createEnforcer as n, validateSessionPolicy as o, BLOB_CHUNKS_COLLECTION as p, BLOB_COLLECTION as q, resolveI18nText as r, BLOB_EVICTION_AUDIT_COLLECTION as s, BLOB_INDEX_COLLECTION as t, BLOB_SLOTS_PREFIX as u, validateI18nTextValue as v, BLOB_VERSIONS_PREFIX as w, type BlobEvictionEntry as x, type BlobFieldPolicy as y, type BlobFieldsConfig as z };
+export { type ConsentStrategy as $, type BlobFieldPolicy as A, type BlobStrategy as B, type BlobFieldsConfig as C, DICT_COLLECTION_PREFIX as D, type BlobObject as E, type BlobPutOptions as F, type BlobResponseOptions as G, BlobSet as H, type I18nStrategy as I, type BlobStrategyOpenArgs as J, type CompactRunOptions as K, type CompactionContext as L, type CompactionResult as M, DEFAULT_CHUNK_SIZE as N, EXPORT_AUDIT_COLLECTION as O, PolicyEnforcer as P, ExportBlobsAbortedError as Q, type ExportBlobsAuditEntry as R, type SessionStrategy as S, type ExportBlobsHandle as T, type ExportBlobsOptions as U, type ExportedBlob as V, type SlotInfo as W, type SlotRecord as X, type VersionRecord as Y, createExportBlobsHandle as Z, runCompaction as _, type DictEntry as a, type DiffEntry as a$, CONSENT_AUDIT_COLLECTION as a0, type ConsentAuditEntry as a1, type ConsentAuditFilter as a2, type ConsentContext as a3, type ConsentOp as a4, loadConsentEntries as a5, writeConsentEntry as a6, type PeriodsStrategy as a7, type CarryForwardContext as a8, type ClosePeriodOptions as a9, TxVault as aA, runTransaction as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, OverlayedViewRegistry as aO, type OverlayedViewStrategyHandle as aP, type SyncStrategy as aQ, type Role as aR, type UnlockedKeyring as aS, type HistoryStrategy as aT, type NoydbStore as aU, type HistoryOptions as aV, type EncryptedEnvelope as aW, type PruneOptions as aX, type AppendInput as aY, type ChangeType as aZ, CollectionInstant as a_, type OpenPeriodOptions as aa, PERIODS_COLLECTION as ab, type PeriodRecord as ac, type ReadOnlyCollection as ad, appendPeriodLedgerEntry as ae, assertTsWritable as af, chainAnchor as ag, loadPeriods as ah, validatePeriodName as ai, type GuardStrategy as aj, type GuardChange as ak, type GuardContext as al, GuardRegistry as am, type GuardStrategyHandle as an, ReadOnlyVaultFacade as ao, type ShadowStrategy as ap, CollectionFrame as aq, VaultFrame as ar, type NoydbBundleStore as as, type RetentionPolicy as at, type SnapshotStrategy as au, type SnapshotMeta as av, type TxStrategy as aw, type AmendmentTxOptions as ax, TxCollection as ay, TxContext as az, type DictKeyDescriptor as b, type DerivationDescriptor as b$, type JsonPatch as b0, type JsonPatchOp as b1, type LedgerEntry as b2, LedgerStore as b3, type VaultEngine as b4, VaultInstant as b5, type VerifyResult as b6, applyPatch as b7, canonicalJson as b8, computePatch as b9, type SchemaUpdateStrategy as bA, type TransformFn as bB, type PersistedSchemaEnvelope as bC, type UpdateDecision as bD, type DirectoryConfig as bE, type UserVisibility as bF, type AccessibleVault as bG, type AffectedDocument as bH, BUNDLE_STORE_POLICY as bI, type BuiltInGateName as bJ, type CacheOptions as bK, type CacheStats as bL, type ChangeEvent as bM, type CollectionChangeEvent as bN, type CollectionConflictResolver as bO, type CollectionDescriptor as bP, type CollectionStats as bQ, type Conflict as bR, type ConflictPolicy as bS, type ConflictStrategy as bT, type CrossTierAccessEvent as bU, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bV, DELEGATIONS_COLLECTION as bW, type DeepPartial as bX, type DeepPartialOrNull as bY, type DelegationToken as bZ, type DeleteManyResult as b_, diff as ba, formatDiff as bb, hashEntry as bc, paddedIndex as bd, parseIndex as be, sha256Hex as bf, type PublicEnvelope as bg, type SealingKeyProvider as bh, type BundleRecipient as bi, type RecipientSealer as bj, type RecipientHint as bk, Vault as bl, type RecoveryEnrollmentInput as bm, type ShamirRecoveryProvider as bn, type MVQueryContext as bo, type RegisteredMV as bp, MaterializedViewRegistry as bq, type MaterializedFromMeta as br, type MaterializedViewOutput as bs, type UnionSource as bt, type UserEnvelope as bu, type GateName as bv, type GatePolicy as bw, type VaultPolicy as bx, type ActiveTier as by, type FactorProof as bz, DictionaryHandle as c, type PassphrasePolicy as c$, type DirtyEntry as c0, type DryRunResult as c1, type DumpSchemaOptions as c2, ELEVATION_AUDIT_COLLECTION as c3, ElevatedHandle as c4, type EnrollAuthenticatorOptions as c5, type EnrollAuthenticatorWrappingDEKsOptions as c6, type EnrollAuthenticatorWrappingKEKOptions as c7, type EnrollRecoveryResult as c8, type ExportCapability as c9, type ListAccessibleVaultsOptions as cA, type ListPageResult as cB, type ListUsersOptions as cC, type LiveUserEnvelope as cD, type LocaleReadOptions as cE, Lru as cF, type LruOptions as cG, type LruStats as cH, MAGIC_LINK_CONTENT_INFO_PREFIX as cI, MAGIC_LINK_GRANTS_COLLECTION as cJ, MAGIC_LINK_KEK_INFO_PREFIX as cK, type MagicLinkGrantPayload as cL, type MagicLinkGrantRecord as cM, type MaterializedViewDescriptor as cN, MemoryRecipientSealer as cO, MemorySealingKeyProvider as cP, NOYDB_BACKUP_VERSION as cQ, NOYDB_FORMAT_VERSION as cR, NOYDB_KEYRING_VERSION as cS, NOYDB_SYNC_VERSION as cT, Noydb as cU, type NoydbEventMap as cV, type NoydbOptions as cW, type OverlayViewDescriptor as cX, PUBLIC_ENVELOPE_FIELDS as cY, type PaperRecoveryDoc as cZ, type PaperRecoveryEntry as c_, type ExportChunk as ca, type ExportFormat as cb, type ExportStreamOptions as cc, type FactorKind as cd, type FactorProofBundle as ce, type FactorRequirement as cf, type FenceDoc as cg, type FenceState as ch, type FieldChange as ci, type FieldDescriptor as cj, type FieldSource as ck, type GhostRecord as cl, type GrantOptions as cm, type GuardViolation as cn, type HistoryConfig as co, type HistoryEntry as cp, INDEXED_STORE_POLICY as cq, type ImportCapability as cr, type InferOutput as cs, type InternalCollectionStats as ct, type IssueDelegationOptions as cu, type IssueMagicLinkGrantOptions as cv, type KeyringAuthenticator as cw, type KeyringAuthenticatorWrappingDEKs as cx, type KeyringAuthenticatorWrappingKEK as cy, type KeyringFile as cz, type DictionaryOptions as d, type SyncTransactionResult as d$, type PassphraseValidationResult as d0, type Permission as d1, type Permissions as d2, type PersistedSchemaKind as d3, type PlaintextTranslatorContext as d4, type PlaintextTranslatorFn as d5, PresenceHandle as d6, type PresencePeer as d7, type PublicEnvelopeField as d8, type PublicEnvelopeSchema as d9, type RotateRecoveryResult as dA, SEALED_PASSPHRASE_RECORD_ID as dB, type SchemaDelta as dC, type SchemaIntrospection as dD, type SealedEnvelope as dE, type SealedPassphrase as dF, type SessionPolicy as dG, type SetPublicEnvelopeInput as dH, type ShamirRecoveryDoc as dI, type ShamirRecoveryEntry as dJ, type SlotRewrapCeremony as dK, type SlotRewrapContext as dL, type StandardSchemaV1 as dM, type StandardSchemaV1Issue as dN, type StandardSchemaV1SyncResult as dO, type StoreAuth as dP, type StoreAuthKind as dQ, type StoreCapabilities as dR, SyncEngine as dS, type SyncMetadata as dT, type SyncPolicy as dU, SyncScheduler as dV, type SyncSchedulerStatus as dW, type SyncStatus as dX, type SyncTarget as dY, type SyncTargetRole as dZ, SyncTransaction as d_, type PublicEnvelopeText as da, type PullMode as db, type PullOptions as dc, type PullPolicy as dd, type PullResult as de, type PushMode as df, type PushOptions as dg, type PushPolicy as dh, type PushResult as di, type PutManyItemOptions as dj, type PutManyOptions as dk, type PutManyResult as dl, type QueryAcrossOptions as dm, type QueryAcrossResult as dn, type QuickUnlockState as dp, QuickUnlockStore as dq, type ReAuthOperation as dr, type RecoverPassphraseInput as ds, type RecoverPassphraseResult as dt, type RecoverUserOptions as du, type RecoveryProof as dv, type ResolvedPublicEnvelopeSchema as dw, type RevokeOptions as dx, type RotatePassphraseInput as dy, type RotateRecoveryOptions as dz, type I18nTextDescriptor as e, recoverUser as e$, type TabChannel as e0, type TabCoordinationOptions as e1, type TabLockManager as e2, type TabPresence as e3, type TabRole as e4, type TierMode as e5, type TranslatorAuditEntry as e6, type TxOp as e7, USER_ENVELOPE_COLLECTION as e8, USER_ENVELOPE_MAX_BYTES as e9, deriveMagicLinkContentKey as eA, enrollAuthenticator as eB, estimateEntropy as eC, evaluateExportCapability as eD, evaluateImportCapability as eE, findAuthenticator as eF, hasExportCapability as eG, hasImportCapability as eH, hasRecoveryEnrolled as eI, isMagicLinkGrantExpired as eJ, isPublicEnvelope as eK, issueDelegation as eL, recoverPassphrase as eM, rotatePassphrase as eN, listMagicLinkGrants as eO, listUsers as eP, listUsersWithEnvelopes as eQ, loadActiveDelegations as eR, loadPaperRecoveryEntries as eS, loadSealedPassphrase as eT, loadShamirRecoveryEntries as eU, magicLinkGrantRecordId as eV, mintPaperRecoveryEntry as eW, mintShamirRecoveryEntry as eX, mintWrappedDeksBlob as eY, parseSealedEnvelope as eZ, readMagicLinkGrantRecord as e_, type Unsubscribe as ea, type UpdateAuthenticatorOptions as eb, type UpdateContext as ec, type UpdateUserOptions as ed, UserApi as ee, type UserEnvelopeCheckGate as ef, UserEnvelopeOversizedError as eg, type UserEnvelopePresented as eh, type UserInfo as ei, type VaultBackup as ej, type VaultPolicyOnDisk as ek, type VaultSchemaSnapshot as el, type VaultSnapshot as em, type WarningRules as en, WeakPassphraseError as eo, type WeakPassphraseReason as ep, type WrappedDeksBlob as eq, type WriteConflict as er, type WriteEvent as es, type WriteHook as et, type WriteQueue as eu, assertStrongPassphrase as ev, buildRecipientKeyringFile as ew, burnPaperRecoveryEntry as ex, createNoydb as ey, createStore as ez, type I18nTextOptions as f, removeAuthenticator as f0, resolveSchema as f1, revokeDelegation as f2, revokeMagicLinkGrant as f3, savePaperRecoveryEntries as f4, saveSealedPassphrase as f5, saveShamirRecoveryEntries as f6, unwrapDeksFromBlob as f7, unwrapDeksFromPaperEntry as f8, unwrapDeksFromShamirEntry as f9, unwrapMagicLinkGrant as fa, validatePassphrase as fb, validatePublicEnvelopeInput as fc, validateSchemaInput as fd, validateSchemaOutput as fe, writeMagicLinkGrant as ff, changeSecret as fg, createOwnerKeyring as fh, ensureCollectionDEK as fi, grant as fj, loadKeyring as fk, persistKeyring as fl, revoke as fm, updateAuthenticator as fn, updateKeyringIdentity as fo, applyI18nLocale as g, dictCollectionName as h, dictKey as i, getAtPath as j, i18nText as k, isDictCollectionName as l, isDictKeyDescriptor as m, isI18nTextDescriptor as n, createEnforcer as o, validateSessionPolicy as p, BLOB_CHUNKS_COLLECTION as q, resolveI18nText as r, setAtPathInPlace as s, BLOB_COLLECTION as t, BLOB_EVICTION_AUDIT_COLLECTION as u, validateI18nTextValue as v, BLOB_INDEX_COLLECTION as w, BLOB_SLOTS_PREFIX as x, BLOB_VERSIONS_PREFIX as y, type BlobEvictionEntry as z };

package/dist/{types-BeKi0hCx.d.cts → types-r-y7TIqj.d.cts}

@@ -1,8 +1,8 @@
-import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-DXlSCNCJ.cjs';
+import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-wY4pMCEe.cjs';
 import { b as AggregateSpec, A as AggregateStrategy } from './strategy-DSTrsZ8t.cjs';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.cjs';
-import { N as NoydbError, Q as Query, ar as RefRegistry, ao as RefDescriptor, a2 as JoinableSource, at as RefViolation, au as ScanBuilder } from './index-5I0MZ0jQ.cjs';
-import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-B0IKeBXx.cjs';
+import { N as NoydbError, Q as Query, av as RefRegistry, as as RefDescriptor, a6 as JoinableSource, ax as RefViolation, ay as ScanBuilder } from './index-vB43MAt4.cjs';
+import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BSAGEyu5.cjs';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
 /**
@@ -1769,17 +1769,34 @@ declare function validateI18nTextValue(value: unknown, field: string, descriptor
  */
 declare function resolveI18nText(value: Record<string, string>, locale: string, fallback?: string | readonly string[], field?: string): string | Record<string, string>;
 /**
- * Apply locale resolution to a single record, in-place over a copy.
+ * Return all leaf values at `path`, expanding `[].` array wildcards.
+ *
+ * - `'name'`              → `[obj.name]`
+ * - `'address.lineOne'`   → `[obj.address.lineOne]`
+ * - `'contacts[].title'`  → `[obj.contacts[0].title, obj.contacts[1].title, …]`
+ *
+ * Returns an empty array when the path does not resolve (missing key,
+ * wrong type, etc.). Used by `enforceI18nOnPut` to validate nested fields.
+ */
+declare function getAtPath(obj: Record<string, unknown>, path: string): unknown[];
+/**
+ * Mutate `obj` in-place, setting `value` at the nested `path`.
+ * Supports dot notation (`'address.lineOne'`) but not array wildcards —
+ * auto-translate on `contacts[].title` style paths is not supported.
+ */
+declare function setAtPathInPlace(obj: Record<string, unknown>, path: string, value: unknown): void;
+/**
+ * Apply locale resolution to a single record, returning a new copy.
  *
  * For each field registered as an `i18nText` descriptor:
  * - If `locale === 'raw'`, the field value is left as the stored map.
  * - Otherwise, the field value is replaced with the resolved string.
  *
- * Records that are not plain objects (null, array, primitives) are
- * returned unchanged.
+ * Field paths support dot notation (`'address.lineOne'`) and array
+ * wildcards (`'contacts[].title'`). Top-level fields work as before.
  *
  * @param record      The decrypted record.
- * @param i18nFields  Map of field name → `I18nTextDescriptor`.
+ * @param i18nFields  Map of field path → `I18nTextDescriptor`.
  * @param locale      The requested locale (or `'raw'`).
  * @param fallback    Fallback chain (optional).
  */
@@ -4344,6 +4361,36 @@ declare class QuickUnlockStore {
     private clearTimer;
 }
 
+interface SnapshotMeta {
+    readonly version: string;
+    readonly label?: string;
+    readonly note?: string;
+    readonly exportedAt: string;
+    readonly exportedBy: string;
+    readonly size: number;
+    /**
+     * `'verified'` — bundle was produced by `writeNoydbBundle(vault, {})`, which embeds
+     * ledgerHead metadata; `vault.load()` runs `verifyBackupIntegrity()` on restore.
+     * `'legacy-unverifiable'` — reserved for v2 import paths that read pre-existing bundles
+     * lacking a ledgerHead; not produced by the current engine.
+     */
+    readonly integrity: 'verified' | 'legacy-unverifiable';
+}
+interface RetentionPolicy {
+    readonly keepLast?: number;
+    readonly maxAgeDays?: number;
+    readonly prune?: boolean;
+}
+/** @internal */
+interface SnapshotStrategy {
+    snapshot(vault: unknown, by: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    listSnapshots(vaultId: string): Promise<SnapshotMeta[]>;
+    restoreSnapshot(vault: unknown, version: string): Promise<void>;
+}
+
 /**
  * Multi-record atomic transactions.
  *
@@ -4773,6 +4820,7 @@ declare class Noydb {
     private readonly txStrategy;
     private readonly sessionStrategy;
     private readonly syncStrategy;
+    private readonly snapshotStrategy;
     /**
      * Currently-running multi-record transaction, set by
      * `runTransaction` at the start of Phase 2 (commit) and cleared in
@@ -5744,6 +5792,27 @@ declare class Noydb {
      * should use {@link getKeyring}, which returns a defensive copy.
      */
     private getKeyringInternal;
+    /**
+     * Take an on-demand checkpoint of the given vault.
+     * Requires `snapshotStrategy: withSnapshots({ store })` in `createNoydb`.
+     * @throws ValidationError when the vault is not open
+     */
+    snapshot(vault: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    /**
+     * List all snapshots for the given vault, newest first.
+     * Reads only the sidecar index — does not download snapshot bytes.
+     */
+    listSnapshots(vault: string): Promise<SnapshotMeta[]>;
+    /**
+     * Restore the vault to a previously snapshotted state.
+     * Runs `verifyBackupIntegrity()` automatically on restore.
+     * @throws SnapshotNotFoundError when `version` doesn't exist in the store
+     * @throws ValidationError when the vault is not open
+     */
+    restoreSnapshot(vault: string, version: string): Promise<void>;
 }
 /** Create a new NOYDB instance. */
 declare function createNoydb(options: NoydbOptions): Promise<Noydb>;
@@ -12223,6 +12292,13 @@ interface NoydbOptions {
      * @internal
      */
     readonly syncStrategy?: SyncStrategy;
+    /**
+     * Tree-shake seam — optional snapshot-lifecycle subsystem. Pass
+     * `withSnapshots({ store })` from `@noy-db/hub/snapshots` to enable
+     * `db.snapshot()`, `db.listSnapshots()`, and `db.restoreSnapshot()`.
+     * When omitted, all three methods throw with a pointer at the subpath.
+     */
+    readonly snapshotStrategy?: SnapshotStrategy;
     /**
      * Optional guard strategies — collection-level write guards. Each
      * handle is the output of `withGuard()` from `@noy-db/hub/guards`.
@@ -12528,4 +12604,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ConsentAuditEntry as $, type BlobObject as A, type BlobStrategy as B, type BlobPutOptions as C, DICT_COLLECTION_PREFIX as D, type BlobResponseOptions as E, BlobSet as F, type BlobStrategyOpenArgs as G, type CompactRunOptions as H, type I18nStrategy as I, type CompactionContext as J, type CompactionResult as K, DEFAULT_CHUNK_SIZE as L, EXPORT_AUDIT_COLLECTION as M, ExportBlobsAbortedError as N, type ExportBlobsAuditEntry as O, PolicyEnforcer as P, type ExportBlobsHandle as Q, type ExportBlobsOptions as R, type SessionStrategy as S, type ExportedBlob as T, type SlotInfo as U, type SlotRecord as V, type VersionRecord as W, createExportBlobsHandle as X, runCompaction as Y, type ConsentStrategy as Z, CONSENT_AUDIT_COLLECTION as _, type DictEntry as a, VaultInstant as a$, type ConsentAuditFilter as a0, type ConsentContext as a1, type ConsentOp as a2, loadConsentEntries as a3, writeConsentEntry as a4, type PeriodsStrategy as a5, type CarryForwardContext as a6, type ClosePeriodOptions as a7, type OpenPeriodOptions as a8, PERIODS_COLLECTION as a9, type DerivationStrategyHandle as aA, type DerivedFromMeta as aB, type OutputSpec as aC, type RecordOutputSpec as aD, type MaterializedViewStrategy as aE, type MaterializedViewStrategyHandle as aF, type OverlayedViewStrategy as aG, Collection as aH, OverlayedViewRegistry as aI, type OverlayedViewStrategyHandle as aJ, type SyncStrategy as aK, type Role as aL, type UnlockedKeyring as aM, type HistoryStrategy as aN, type NoydbStore as aO, type HistoryOptions as aP, type EncryptedEnvelope as aQ, type PruneOptions as aR, type AppendInput as aS, type ChangeType as aT, CollectionInstant as aU, type DiffEntry as aV, type JsonPatch as aW, type JsonPatchOp as aX, type LedgerEntry as aY, LedgerStore as aZ, type VaultEngine as a_, type PeriodRecord as aa, type ReadOnlyCollection as ab, appendPeriodLedgerEntry as ac, assertTsWritable as ad, chainAnchor as ae, loadPeriods as af, validatePeriodName as ag, type GuardStrategy as ah, type GuardChange as ai, type GuardContext as aj, GuardRegistry as ak, type GuardStrategyHandle as al, ReadOnlyVaultFacade as am, type ShadowStrategy as an, CollectionFrame as ao, VaultFrame as ap, type TxStrategy as aq, type AmendmentTxOptions as ar, TxCollection as as, TxContext as at, TxVault as au, runTransaction as av, type DerivationStrategy as aw, type DerivationContext as ax, type ArrayOutputSpec as ay, DerivationRegistry as az, type DictKeyDescriptor as b, type EnrollAuthenticatorOptions as b$, type VerifyResult as b0, applyPatch as b1, canonicalJson as b2, computePatch as b3, diff as b4, formatDiff as b5, hashEntry as b6, paddedIndex as b7, parseIndex as b8, sha256Hex as b9, type AccessibleVault as bA, type AffectedDocument as bB, BUNDLE_STORE_POLICY as bC, type BuiltInGateName as bD, type CacheOptions as bE, type CacheStats as bF, type ChangeEvent as bG, type CollectionChangeEvent as bH, type CollectionConflictResolver as bI, type CollectionDescriptor as bJ, type CollectionStats as bK, type Conflict as bL, type ConflictPolicy as bM, type ConflictStrategy as bN, type CrossTierAccessEvent as bO, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bP, DELEGATIONS_COLLECTION as bQ, type DeepPartial as bR, type DeepPartialOrNull as bS, type DelegationToken as bT, type DeleteManyResult as bU, type DerivationDescriptor as bV, type DirtyEntry as bW, type DryRunResult as bX, type DumpSchemaOptions as bY, ELEVATION_AUDIT_COLLECTION as bZ, ElevatedHandle as b_, type PublicEnvelope as ba, type SealingKeyProvider as bb, type BundleRecipient as bc, type RecipientSealer as bd, type RecipientHint as be, Vault as bf, type RecoveryEnrollmentInput as bg, type ShamirRecoveryProvider as bh, type MVQueryContext as bi, type RegisteredMV as bj, MaterializedViewRegistry as bk, type MaterializedFromMeta as bl, type MaterializedViewOutput as bm, type UnionSource as bn, type UserEnvelope as bo, type GateName as bp, type GatePolicy as bq, type VaultPolicy as br, type ActiveTier as bs, type FactorProof as bt, type SchemaUpdateStrategy as bu, type TransformFn as bv, type PersistedSchemaEnvelope as bw, type UpdateDecision as bx, type DirectoryConfig as by, type UserVisibility as bz, DictionaryHandle as c, type PlaintextTranslatorContext as c$, type EnrollAuthenticatorWrappingDEKsOptions as c0, type EnrollAuthenticatorWrappingKEKOptions as c1, type EnrollRecoveryResult as c2, type ExportCapability as c3, type ExportChunk as c4, type ExportFormat as c5, type ExportStreamOptions as c6, type FactorKind as c7, type FactorProofBundle as c8, type FactorRequirement as c9, type LruOptions as cA, type LruStats as cB, MAGIC_LINK_CONTENT_INFO_PREFIX as cC, MAGIC_LINK_GRANTS_COLLECTION as cD, MAGIC_LINK_KEK_INFO_PREFIX as cE, type MagicLinkGrantPayload as cF, type MagicLinkGrantRecord as cG, type MaterializedViewDescriptor as cH, MemoryRecipientSealer as cI, MemorySealingKeyProvider as cJ, NOYDB_BACKUP_VERSION as cK, NOYDB_FORMAT_VERSION as cL, NOYDB_KEYRING_VERSION as cM, NOYDB_SYNC_VERSION as cN, Noydb as cO, type NoydbBundleStore as cP, type NoydbEventMap as cQ, type NoydbOptions as cR, type OverlayViewDescriptor as cS, PUBLIC_ENVELOPE_FIELDS as cT, type PaperRecoveryDoc as cU, type PaperRecoveryEntry as cV, type PassphrasePolicy as cW, type PassphraseValidationResult as cX, type Permission as cY, type Permissions as cZ, type PersistedSchemaKind as c_, type FenceDoc as ca, type FenceState as cb, type FieldChange as cc, type FieldDescriptor as cd, type FieldSource as ce, type GhostRecord as cf, type GrantOptions as cg, type GuardViolation as ch, type HistoryConfig as ci, type HistoryEntry as cj, INDEXED_STORE_POLICY as ck, type ImportCapability as cl, type InferOutput as cm, type InternalCollectionStats as cn, type IssueDelegationOptions as co, type IssueMagicLinkGrantOptions as cp, type KeyringAuthenticator as cq, type KeyringAuthenticatorWrappingDEKs as cr, type KeyringAuthenticatorWrappingKEK as cs, type KeyringFile as ct, type ListAccessibleVaultsOptions as cu, type ListPageResult as cv, type ListUsersOptions as cw, type LiveUserEnvelope as cx, type LocaleReadOptions as cy, Lru as cz, type DictionaryOptions as d, type TabRole as d$, type PlaintextTranslatorFn as d0, PresenceHandle as d1, type PresencePeer as d2, type PublicEnvelopeField as d3, type PublicEnvelopeSchema as d4, type PublicEnvelopeText as d5, type PullMode as d6, type PullOptions as d7, type PullPolicy as d8, type PullResult as d9, type SealedPassphrase as dA, type SessionPolicy as dB, type SetPublicEnvelopeInput as dC, type ShamirRecoveryDoc as dD, type ShamirRecoveryEntry as dE, type SlotRewrapCeremony as dF, type SlotRewrapContext as dG, type StandardSchemaV1 as dH, type StandardSchemaV1Issue as dI, type StandardSchemaV1SyncResult as dJ, type StoreAuth as dK, type StoreAuthKind as dL, type StoreCapabilities as dM, SyncEngine as dN, type SyncMetadata as dO, type SyncPolicy as dP, SyncScheduler as dQ, type SyncSchedulerStatus as dR, type SyncStatus as dS, type SyncTarget as dT, type SyncTargetRole as dU, SyncTransaction as dV, type SyncTransactionResult as dW, type TabChannel as dX, type TabCoordinationOptions as dY, type TabLockManager as dZ, type TabPresence as d_, type PushMode as da, type PushOptions as db, type PushPolicy as dc, type PushResult as dd, type PutManyItemOptions as de, type PutManyOptions as df, type PutManyResult as dg, type QueryAcrossOptions as dh, type QueryAcrossResult as di, type QuickUnlockState as dj, QuickUnlockStore as dk, type ReAuthOperation as dl, type RecoverPassphraseInput as dm, type RecoverPassphraseResult as dn, type RecoverUserOptions as dp, type RecoveryProof as dq, type ResolvedPublicEnvelopeSchema as dr, type RevokeOptions as ds, type RotatePassphraseInput as dt, type RotateRecoveryOptions as du, type RotateRecoveryResult as dv, SEALED_PASSPHRASE_RECORD_ID as dw, type SchemaDelta as dx, type SchemaIntrospection as dy, type SealedEnvelope as dz, type I18nTextDescriptor as e, savePaperRecoveryEntries as e$, type TierMode as e0, type TranslatorAuditEntry as e1, type TxOp as e2, USER_ENVELOPE_COLLECTION as e3, USER_ENVELOPE_MAX_BYTES as e4, type Unsubscribe as e5, type UpdateAuthenticatorOptions as e6, type UpdateContext as e7, type UpdateUserOptions as e8, UserApi as e9, findAuthenticator as eA, hasExportCapability as eB, hasImportCapability as eC, hasRecoveryEnrolled as eD, isMagicLinkGrantExpired as eE, isPublicEnvelope as eF, issueDelegation as eG, recoverPassphrase as eH, rotatePassphrase as eI, listMagicLinkGrants as eJ, listUsers as eK, listUsersWithEnvelopes as eL, loadActiveDelegations as eM, loadPaperRecoveryEntries as eN, loadSealedPassphrase as eO, loadShamirRecoveryEntries as eP, magicLinkGrantRecordId as eQ, mintPaperRecoveryEntry as eR, mintShamirRecoveryEntry as eS, mintWrappedDeksBlob as eT, parseSealedEnvelope as eU, readMagicLinkGrantRecord as eV, recoverUser as eW, removeAuthenticator as eX, resolveSchema as eY, revokeDelegation as eZ, revokeMagicLinkGrant as e_, type UserEnvelopeCheckGate as ea, UserEnvelopeOversizedError as eb, type UserEnvelopePresented as ec, type UserInfo as ed, type VaultBackup as ee, type VaultPolicyOnDisk as ef, type VaultSchemaSnapshot as eg, type VaultSnapshot as eh, type WarningRules as ei, WeakPassphraseError as ej, type WeakPassphraseReason as ek, type WrappedDeksBlob as el, type WriteConflict as em, type WriteEvent as en, type WriteHook as eo, type WriteQueue as ep, assertStrongPassphrase as eq, buildRecipientKeyringFile as er, burnPaperRecoveryEntry as es, createNoydb as et, createStore as eu, deriveMagicLinkContentKey as ev, enrollAuthenticator as ew, estimateEntropy as ex, evaluateExportCapability as ey, evaluateImportCapability as ez, type I18nTextOptions as f, saveSealedPassphrase as f0, saveShamirRecoveryEntries as f1, unwrapDeksFromBlob as f2, unwrapDeksFromPaperEntry as f3, unwrapDeksFromShamirEntry as f4, unwrapMagicLinkGrant as f5, validatePassphrase as f6, validatePublicEnvelopeInput as f7, validateSchemaInput as f8, validateSchemaOutput as f9, writeMagicLinkGrant as fa, changeSecret as fb, createOwnerKeyring as fc, ensureCollectionDEK as fd, grant as fe, loadKeyring as ff, persistKeyring as fg, revoke as fh, updateAuthenticator as fi, updateKeyringIdentity as fj, applyI18nLocale as g, dictCollectionName as h, dictKey as i, i18nText as j, isDictCollectionName as k, isDictKeyDescriptor as l, isI18nTextDescriptor as m, createEnforcer as n, validateSessionPolicy as o, BLOB_CHUNKS_COLLECTION as p, BLOB_COLLECTION as q, resolveI18nText as r, BLOB_EVICTION_AUDIT_COLLECTION as s, BLOB_INDEX_COLLECTION as t, BLOB_SLOTS_PREFIX as u, validateI18nTextValue as v, BLOB_VERSIONS_PREFIX as w, type BlobEvictionEntry as x, type BlobFieldPolicy as y, type BlobFieldsConfig as z };
+export { type ConsentStrategy as $, type BlobFieldPolicy as A, type BlobStrategy as B, type BlobFieldsConfig as C, DICT_COLLECTION_PREFIX as D, type BlobObject as E, type BlobPutOptions as F, type BlobResponseOptions as G, BlobSet as H, type I18nStrategy as I, type BlobStrategyOpenArgs as J, type CompactRunOptions as K, type CompactionContext as L, type CompactionResult as M, DEFAULT_CHUNK_SIZE as N, EXPORT_AUDIT_COLLECTION as O, PolicyEnforcer as P, ExportBlobsAbortedError as Q, type ExportBlobsAuditEntry as R, type SessionStrategy as S, type ExportBlobsHandle as T, type ExportBlobsOptions as U, type ExportedBlob as V, type SlotInfo as W, type SlotRecord as X, type VersionRecord as Y, createExportBlobsHandle as Z, runCompaction as _, type DictEntry as a, type DiffEntry as a$, CONSENT_AUDIT_COLLECTION as a0, type ConsentAuditEntry as a1, type ConsentAuditFilter as a2, type ConsentContext as a3, type ConsentOp as a4, loadConsentEntries as a5, writeConsentEntry as a6, type PeriodsStrategy as a7, type CarryForwardContext as a8, type ClosePeriodOptions as a9, TxVault as aA, runTransaction as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, OverlayedViewRegistry as aO, type OverlayedViewStrategyHandle as aP, type SyncStrategy as aQ, type Role as aR, type UnlockedKeyring as aS, type HistoryStrategy as aT, type NoydbStore as aU, type HistoryOptions as aV, type EncryptedEnvelope as aW, type PruneOptions as aX, type AppendInput as aY, type ChangeType as aZ, CollectionInstant as a_, type OpenPeriodOptions as aa, PERIODS_COLLECTION as ab, type PeriodRecord as ac, type ReadOnlyCollection as ad, appendPeriodLedgerEntry as ae, assertTsWritable as af, chainAnchor as ag, loadPeriods as ah, validatePeriodName as ai, type GuardStrategy as aj, type GuardChange as ak, type GuardContext as al, GuardRegistry as am, type GuardStrategyHandle as an, ReadOnlyVaultFacade as ao, type ShadowStrategy as ap, CollectionFrame as aq, VaultFrame as ar, type NoydbBundleStore as as, type RetentionPolicy as at, type SnapshotStrategy as au, type SnapshotMeta as av, type TxStrategy as aw, type AmendmentTxOptions as ax, TxCollection as ay, TxContext as az, type DictKeyDescriptor as b, type DerivationDescriptor as b$, type JsonPatch as b0, type JsonPatchOp as b1, type LedgerEntry as b2, LedgerStore as b3, type VaultEngine as b4, VaultInstant as b5, type VerifyResult as b6, applyPatch as b7, canonicalJson as b8, computePatch as b9, type SchemaUpdateStrategy as bA, type TransformFn as bB, type PersistedSchemaEnvelope as bC, type UpdateDecision as bD, type DirectoryConfig as bE, type UserVisibility as bF, type AccessibleVault as bG, type AffectedDocument as bH, BUNDLE_STORE_POLICY as bI, type BuiltInGateName as bJ, type CacheOptions as bK, type CacheStats as bL, type ChangeEvent as bM, type CollectionChangeEvent as bN, type CollectionConflictResolver as bO, type CollectionDescriptor as bP, type CollectionStats as bQ, type Conflict as bR, type ConflictPolicy as bS, type ConflictStrategy as bT, type CrossTierAccessEvent as bU, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bV, DELEGATIONS_COLLECTION as bW, type DeepPartial as bX, type DeepPartialOrNull as bY, type DelegationToken as bZ, type DeleteManyResult as b_, diff as ba, formatDiff as bb, hashEntry as bc, paddedIndex as bd, parseIndex as be, sha256Hex as bf, type PublicEnvelope as bg, type SealingKeyProvider as bh, type BundleRecipient as bi, type RecipientSealer as bj, type RecipientHint as bk, Vault as bl, type RecoveryEnrollmentInput as bm, type ShamirRecoveryProvider as bn, type MVQueryContext as bo, type RegisteredMV as bp, MaterializedViewRegistry as bq, type MaterializedFromMeta as br, type MaterializedViewOutput as bs, type UnionSource as bt, type UserEnvelope as bu, type GateName as bv, type GatePolicy as bw, type VaultPolicy as bx, type ActiveTier as by, type FactorProof as bz, DictionaryHandle as c, type PassphrasePolicy as c$, type DirtyEntry as c0, type DryRunResult as c1, type DumpSchemaOptions as c2, ELEVATION_AUDIT_COLLECTION as c3, ElevatedHandle as c4, type EnrollAuthenticatorOptions as c5, type EnrollAuthenticatorWrappingDEKsOptions as c6, type EnrollAuthenticatorWrappingKEKOptions as c7, type EnrollRecoveryResult as c8, type ExportCapability as c9, type ListAccessibleVaultsOptions as cA, type ListPageResult as cB, type ListUsersOptions as cC, type LiveUserEnvelope as cD, type LocaleReadOptions as cE, Lru as cF, type LruOptions as cG, type LruStats as cH, MAGIC_LINK_CONTENT_INFO_PREFIX as cI, MAGIC_LINK_GRANTS_COLLECTION as cJ, MAGIC_LINK_KEK_INFO_PREFIX as cK, type MagicLinkGrantPayload as cL, type MagicLinkGrantRecord as cM, type MaterializedViewDescriptor as cN, MemoryRecipientSealer as cO, MemorySealingKeyProvider as cP, NOYDB_BACKUP_VERSION as cQ, NOYDB_FORMAT_VERSION as cR, NOYDB_KEYRING_VERSION as cS, NOYDB_SYNC_VERSION as cT, Noydb as cU, type NoydbEventMap as cV, type NoydbOptions as cW, type OverlayViewDescriptor as cX, PUBLIC_ENVELOPE_FIELDS as cY, type PaperRecoveryDoc as cZ, type PaperRecoveryEntry as c_, type ExportChunk as ca, type ExportFormat as cb, type ExportStreamOptions as cc, type FactorKind as cd, type FactorProofBundle as ce, type FactorRequirement as cf, type FenceDoc as cg, type FenceState as ch, type FieldChange as ci, type FieldDescriptor as cj, type FieldSource as ck, type GhostRecord as cl, type GrantOptions as cm, type GuardViolation as cn, type HistoryConfig as co, type HistoryEntry as cp, INDEXED_STORE_POLICY as cq, type ImportCapability as cr, type InferOutput as cs, type InternalCollectionStats as ct, type IssueDelegationOptions as cu, type IssueMagicLinkGrantOptions as cv, type KeyringAuthenticator as cw, type KeyringAuthenticatorWrappingDEKs as cx, type KeyringAuthenticatorWrappingKEK as cy, type KeyringFile as cz, type DictionaryOptions as d, type SyncTransactionResult as d$, type PassphraseValidationResult as d0, type Permission as d1, type Permissions as d2, type PersistedSchemaKind as d3, type PlaintextTranslatorContext as d4, type PlaintextTranslatorFn as d5, PresenceHandle as d6, type PresencePeer as d7, type PublicEnvelopeField as d8, type PublicEnvelopeSchema as d9, type RotateRecoveryResult as dA, SEALED_PASSPHRASE_RECORD_ID as dB, type SchemaDelta as dC, type SchemaIntrospection as dD, type SealedEnvelope as dE, type SealedPassphrase as dF, type SessionPolicy as dG, type SetPublicEnvelopeInput as dH, type ShamirRecoveryDoc as dI, type ShamirRecoveryEntry as dJ, type SlotRewrapCeremony as dK, type SlotRewrapContext as dL, type StandardSchemaV1 as dM, type StandardSchemaV1Issue as dN, type StandardSchemaV1SyncResult as dO, type StoreAuth as dP, type StoreAuthKind as dQ, type StoreCapabilities as dR, SyncEngine as dS, type SyncMetadata as dT, type SyncPolicy as dU, SyncScheduler as dV, type SyncSchedulerStatus as dW, type SyncStatus as dX, type SyncTarget as dY, type SyncTargetRole as dZ, SyncTransaction as d_, type PublicEnvelopeText as da, type PullMode as db, type PullOptions as dc, type PullPolicy as dd, type PullResult as de, type PushMode as df, type PushOptions as dg, type PushPolicy as dh, type PushResult as di, type PutManyItemOptions as dj, type PutManyOptions as dk, type PutManyResult as dl, type QueryAcrossOptions as dm, type QueryAcrossResult as dn, type QuickUnlockState as dp, QuickUnlockStore as dq, type ReAuthOperation as dr, type RecoverPassphraseInput as ds, type RecoverPassphraseResult as dt, type RecoverUserOptions as du, type RecoveryProof as dv, type ResolvedPublicEnvelopeSchema as dw, type RevokeOptions as dx, type RotatePassphraseInput as dy, type RotateRecoveryOptions as dz, type I18nTextDescriptor as e, recoverUser as e$, type TabChannel as e0, type TabCoordinationOptions as e1, type TabLockManager as e2, type TabPresence as e3, type TabRole as e4, type TierMode as e5, type TranslatorAuditEntry as e6, type TxOp as e7, USER_ENVELOPE_COLLECTION as e8, USER_ENVELOPE_MAX_BYTES as e9, deriveMagicLinkContentKey as eA, enrollAuthenticator as eB, estimateEntropy as eC, evaluateExportCapability as eD, evaluateImportCapability as eE, findAuthenticator as eF, hasExportCapability as eG, hasImportCapability as eH, hasRecoveryEnrolled as eI, isMagicLinkGrantExpired as eJ, isPublicEnvelope as eK, issueDelegation as eL, recoverPassphrase as eM, rotatePassphrase as eN, listMagicLinkGrants as eO, listUsers as eP, listUsersWithEnvelopes as eQ, loadActiveDelegations as eR, loadPaperRecoveryEntries as eS, loadSealedPassphrase as eT, loadShamirRecoveryEntries as eU, magicLinkGrantRecordId as eV, mintPaperRecoveryEntry as eW, mintShamirRecoveryEntry as eX, mintWrappedDeksBlob as eY, parseSealedEnvelope as eZ, readMagicLinkGrantRecord as e_, type Unsubscribe as ea, type UpdateAuthenticatorOptions as eb, type UpdateContext as ec, type UpdateUserOptions as ed, UserApi as ee, type UserEnvelopeCheckGate as ef, UserEnvelopeOversizedError as eg, type UserEnvelopePresented as eh, type UserInfo as ei, type VaultBackup as ej, type VaultPolicyOnDisk as ek, type VaultSchemaSnapshot as el, type VaultSnapshot as em, type WarningRules as en, WeakPassphraseError as eo, type WeakPassphraseReason as ep, type WrappedDeksBlob as eq, type WriteConflict as er, type WriteEvent as es, type WriteHook as et, type WriteQueue as eu, assertStrongPassphrase as ev, buildRecipientKeyringFile as ew, burnPaperRecoveryEntry as ex, createNoydb as ey, createStore as ez, type I18nTextOptions as f, removeAuthenticator as f0, resolveSchema as f1, revokeDelegation as f2, revokeMagicLinkGrant as f3, savePaperRecoveryEntries as f4, saveSealedPassphrase as f5, saveShamirRecoveryEntries as f6, unwrapDeksFromBlob as f7, unwrapDeksFromPaperEntry as f8, unwrapDeksFromShamirEntry as f9, unwrapMagicLinkGrant as fa, validatePassphrase as fb, validatePublicEnvelopeInput as fc, validateSchemaInput as fd, validateSchemaOutput as fe, writeMagicLinkGrant as ff, changeSecret as fg, createOwnerKeyring as fh, ensureCollectionDEK as fi, grant as fj, loadKeyring as fk, persistKeyring as fl, revoke as fm, updateAuthenticator as fn, updateKeyringIdentity as fo, applyI18nLocale as g, dictCollectionName as h, dictKey as i, getAtPath as j, i18nText as k, isDictCollectionName as l, isDictKeyDescriptor as m, isI18nTextDescriptor as n, createEnforcer as o, validateSessionPolicy as p, BLOB_CHUNKS_COLLECTION as q, resolveI18nText as r, setAtPathInPlace as s, BLOB_COLLECTION as t, BLOB_EVICTION_AUDIT_COLLECTION as u, validateI18nTextValue as v, BLOB_INDEX_COLLECTION as w, BLOB_SLOTS_PREFIX as x, BLOB_VERSIONS_PREFIX as y, type BlobEvictionEntry as z };

package/dist/{ulid-Cvljl7ZZ.d.cts → ulid-BkW3mLlz.d.cts}

@@ -1,4 +1,4 @@
-import { ba as PublicEnvelope, bb as SealingKeyProvider, bc as BundleRecipient, bd as RecipientSealer, be as RecipientHint, bf as Vault } from './types-BeKi0hCx.cjs';
+import { bg as PublicEnvelope, bh as SealingKeyProvider, bi as BundleRecipient, bj as RecipientSealer, bk as RecipientHint, bl as Vault } from './types-r-y7TIqj.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.

package/dist/{ulid-CQc0eBxE.d.ts → ulid-Dt55yn4s.d.ts}

@@ -1,4 +1,4 @@
-import { ba as PublicEnvelope, bb as SealingKeyProvider, bc as BundleRecipient, bd as RecipientSealer, be as RecipientHint, bf as Vault } from './types-BV4AZKmx.js';
+import { bg as PublicEnvelope, bh as SealingKeyProvider, bi as BundleRecipient, bj as RecipientSealer, bk as RecipientHint, bl as Vault } from './types-DT7cXRHq.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.