@noy-db/hub 0.2.0-pre.6 → 0.2.0-pre.8

package/dist/{types-DVlvNn2c.d.cts → types-DjunxzJa.d.cts}

@@ -1,8 +1,8 @@
-import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-DXlSCNCJ.cjs';
+import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-wY4pMCEe.cjs';
 import { b as AggregateSpec, A as AggregateStrategy } from './strategy-DSTrsZ8t.cjs';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.cjs';
-import { N as NoydbError, Q as Query, ar as RefRegistry, ao as RefDescriptor, a2 as JoinableSource, at as RefViolation, au as ScanBuilder } from './index-5I0MZ0jQ.cjs';
-import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-B0IKeBXx.cjs';
+import { N as NoydbError, Q as Query, aw as RefRegistry, at as RefDescriptor, a7 as JoinableSource, ay as RefViolation, az as ScanBuilder } from './index-4fBVt8j9.cjs';
+import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BSAGEyu5.cjs';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
 /**
@@ -1644,6 +1644,51 @@ interface PeriodsStrategy {
     appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, periodName: string): Promise<void>;
 }
 
+/**
+ * Per-layer i18n resolution policy.
+ *
+ * `onMissing` governs what happens when a multilingual field is resolved
+ * to a target locale that is absent. It may be a single scalar policy or
+ * a per-layer map, so a field can be lenient at the app read boundary but
+ * strict inside a materialized view.
+ *
+ * Effective policy for layer `λ`:
+ *
+ * ```
+ * explicit(λ) = typeof onMissing === 'object' ? onMissing[λ] : undefined
+ * scalar      = typeof onMissing === 'string' ? onMissing : undefined
+ * policy(λ)   = explicit(λ) ?? layerDefault(λ) ?? scalar ?? 'throw'
+ * ```
+ *
+ * - `layerDefault('guard') = 'substitute'` — guards are lenient unless
+ *   EXPLICITLY overridden; they never inherit a scalar policy (a guard
+ *   reading a display value must not hard-fail on a missing locale).
+ * - every other layer has no default, so it inherits the scalar, else
+ *   falls back to `'throw'` (today's behavior — zero breaking change).
+ *
+ * @public
+ */
+type OnMissing = 'substitute' | 'null' | 'throw';
+/**
+ * The contexts in which a multilingual field is resolved. Each can carry
+ * its own `onMissing` policy.
+ *
+ * - `read`       — ordinary app reads (`get`/`list`/query projection).
+ * - `guard`      — a guard callback reading a value.
+ * - `join`       — a joined record expanded onto a row.
+ * - `mv`         — materialized-view input.
+ * - `derivation` — derivation input.
+ * - `export`     — bundle/public-envelope export.
+ */
+type Layer = 'read' | 'guard' | 'join' | 'mv' | 'derivation' | 'export';
+/** Field-level policy: a single scalar, or a per-layer map. */
+type OnMissingPolicy = OnMissing | Partial<Record<Layer, OnMissing>>;
+/**
+ * Resolve the effective `OnMissing` for a layer from a field's declared
+ * policy. See module docs for the resolution rule.
+ */
+declare function resolvePolicy(onMissing: OnMissingPolicy | undefined, layer: Layer): OnMissing;
+
 /**
  * i18nText schema type —
  *
@@ -1685,6 +1730,37 @@ interface PeriodsStrategy {
  * Pluralization, RTL rendering, date/number formatting, per-locale CRDT
  * merging.
  */
+
+/** Flatten an intersection into a single object literal for nicer hovers. */
+type Prettify<T> = {
+    [K in keyof T]: T[K];
+} & {};
+/**
+ * The stored shape of a multilingual field, inferred from its `required`
+ * mode — so the compiler forces you to handle an absent optional locale
+ * (`string | undefined`) instead of silently yielding `undefined`.
+ *
+ * Mirrors `i18nText({ languages, required })`:
+ * - `'all'` (default) — every locale required: `{ th: string; en: string }`
+ * - `'any'`           — every locale optional: `{ th?: string; en?: string }`
+ *   (the "at least one present" guarantee is runtime-only — not expressible
+ *   in TypeScript — so each key is optional)
+ * - `readonly L[]`    — listed locales required, the rest optional:
+ *   `I18nMap<'th'|'en', ['th']>` → `{ th: string; en?: string }`
+ *
+ * @example
+ * ```ts
+ * type Lang = 'th' | 'en'
+ * interface Contact {
+ *   name: I18nMap<Lang, 'any'>      // { th?: string; en?: string }
+ *   legalName: I18nMap<Lang, ['th']> // { th: string; en?: string }
+ *   slug: I18nMap<Lang>             // { th: string; en: string }
+ * }
+ * ```
+ *
+ * @public
+ */
+type I18nMap<Langs extends string, Required extends 'all' | 'any' | readonly Langs[] = 'all'> = Required extends 'all' ? Record<Langs, string> : Required extends 'any' ? Partial<Record<Langs, string>> : Required extends readonly (infer R extends Langs)[] ? Prettify<Record<R, string> & Partial<Record<Exclude<Langs, R>, string>>> : never;
 /**
  * Options for `i18nText()`.
  *
@@ -1713,6 +1789,38 @@ interface I18nTextOptions {
      * before `put()` if a translator is configured. Default: `false`.
      */
     readonly autoTranslate?: boolean;
+    /**
+     * What to do when this field is resolved to a locale that is absent.
+     * A single policy, or a per-layer map (read/guard/join/mv/derivation/
+     * export). Default `'throw'` — today's behavior, zero breaking change.
+     * See {@link OnMissingPolicy}.
+     *
+     * NOTE (current wiring): the `read` layer (`get`/`list`) is enforced.
+     * Guard, derivation, mv, join and export reads currently resolve
+     * through the same read path and so observe the `read`/scalar policy;
+     * dedicated per-layer enforcement for those contexts is a tracked
+     * follow-up (mv/join additionally require resolution to be injected
+     * into the query/aggregate pipeline, which today reads raw maps).
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /**
+     * Ordered preferred-substitute locales used when `onMissing` resolves
+     * to `'substitute'` and the target locale is absent. `'any'` as an
+     * element means "first non-empty value". A caller-supplied `fallback`
+     * at read time takes precedence over this declared list.
+     */
+    readonly substitute?: readonly string[];
+    /**
+     * Per-locale script enforcement (write-time). `'auto'` infers the
+     * allowed Unicode scripts per locale (asymmetric Latin tolerance); an
+     * object overrides per slot. Absent ⇒ no check. See `./script.ts`.
+     */
+    readonly script?: 'auto' | Partial<Record<string, readonly string[]>>;
+    /**
+     * What to do when a slot's value contains characters outside its
+     * allowed script set. Default `'reject'`.
+     */
+    readonly onScriptViolation?: 'reject' | 'filter' | 'warn';
 }
 /**
  * Descriptor returned by `i18nText()`. Attach to the collection's
@@ -1767,7 +1875,15 @@ declare function validateI18nTextValue(value: unknown, field: string, descriptor
  * @param field    Field name used in `LocaleNotSpecifiedError` messages.
  * @returns The resolved string, OR the original map when `locale === 'raw'`.
  */
+/** Options for the policy-aware form of {@link resolveI18nText}. */
+interface ResolveI18nOptions {
+    /** Effective policy for the resolution layer. Default `'throw'`. */
+    readonly policy?: OnMissing;
+    /** Declared substitute chain; applied only under policy `'substitute'`. */
+    readonly substitute?: readonly string[];
+}
 declare function resolveI18nText(value: Record<string, string>, locale: string, fallback?: string | readonly string[], field?: string): string | Record<string, string>;
+declare function resolveI18nText(value: Record<string, string>, locale: string, fallback: string | readonly string[] | undefined, field: string | undefined, opts: ResolveI18nOptions): string | Record<string, string> | null;
 /**
  * Return all leaf values at `path`, expanding `[].` array wildcards.
  *
@@ -1799,8 +1915,12 @@ declare function setAtPathInPlace(obj: Record<string, unknown>, path: string, va
  * @param i18nFields  Map of field path → `I18nTextDescriptor`.
  * @param locale      The requested locale (or `'raw'`).
  * @param fallback    Fallback chain (optional).
+ * @param layer       Resolution layer (default `'read'`). Each field's
+ *                    `onMissing` policy is resolved for this layer, so the
+ *                    same record resolves leniently on a get but strictly
+ *                    inside an mv/derivation.
  */
-declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
 
 type EventHandler<T> = (data: T) => void;
 /** Typed event emitter for NOYDB events. */
@@ -2325,6 +2445,16 @@ interface DictKeyDescriptor<Keys extends string = string> {
     readonly name: string;
     /** Declared valid keys. When set, `put()` rejects keys not in this set. */
     readonly keys: readonly Keys[] | undefined;
+    /**
+     * What to do when a label is missing for the resolved locale. Mirrors
+     * `i18nText`'s `onMissing`. Default behavior (when unset) preserves the
+     * legacy contract: a missing label is omitted (scalar) or `null`
+     * (array element) — i.e. `'null'`. Set `'substitute'` to walk the
+     * declared `substitute` chain, or `'throw'` to raise.
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /** Ordered preferred-substitute locales for label resolution. */
+    readonly substitute?: readonly string[];
 }
 /**
  * Create a `DictKeyDescriptor` for a dictionary-backed enum field.
@@ -2343,7 +2473,10 @@ interface DictKeyDescriptor<Keys extends string = string> {
  * })
  * ```
  */
-declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[]): DictKeyDescriptor<Keys>;
+declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[], opts?: {
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+}): DictKeyDescriptor<Keys>;
 /** Runtime predicate for detecting a DictKeyDescriptor. */
 declare function isDictKeyDescriptor(x: unknown): x is DictKeyDescriptor;
 /**
@@ -2487,6 +2620,32 @@ declare class DictionaryHandle<Keys extends string = string> {
     resolveLabel(key: string, locale: string, fallback?: string | readonly string[]): Promise<string | undefined>;
 }
 
+/**
+ * Infer the allowed Unicode scripts for a BCP-47 locale, with asymmetric
+ * Latin tolerance. A script subtag (`th-Latn`) wins over the base
+ * language. Unknown locales default to `['Latin']`.
+ */
+declare function inferScripts(locale: string): readonly string[];
+/** A non-fatal script violation recorded under `'filter'`/`'warn'` modes. */
+interface ScriptWarning {
+    readonly field: string;
+    readonly locale: string;
+    readonly expected: readonly string[];
+    readonly sample: string;
+}
+/**
+ * Enforce a field's script constraint over an i18nText value map.
+ *
+ * - No `script` option ⇒ returns the value unchanged.
+ * - `onScriptViolation: 'reject'` (default) ⇒ throws {@link ScriptViolationError}.
+ * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
+ * - `'warn'` ⇒ returns the value unchanged + warnings.
+ */
+declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+    value: Record<string, unknown>;
+    warnings: ScriptWarning[];
+};
+
 /**
  * Strategy seam for the optional i18n (multi-locale + dictionary)
  * subsystem. Core imports `I18nStrategy` type-only + `NO_I18N` stub;
@@ -2548,13 +2707,23 @@ interface I18nStrategy {
      * return a new object. Returns the input unchanged under
      * `NO_I18N`.
      */
-    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
     /**
      * Validate that an i18nText field's value satisfies its descriptor
      * (required locales present, etc.). Throws under `NO_I18N` —
      * declaring i18nFields without opting in is a misconfiguration.
      */
     validateI18nTextValue(value: unknown, field: string, descriptor: I18nTextDescriptor): void;
+    /**
+     * Enforce per-locale script constraints over an i18nText value map
+     * (write-time). Returns the (possibly filtered) value plus any
+     * non-fatal warnings. Returns the value unchanged when the field has
+     * no `script` option, or under `NO_I18N`.
+     */
+    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+        value: Record<string, unknown>;
+        warnings: ScriptWarning[];
+    };
     /**
      * Construct a typed `DictionaryHandle` for the named dictionary.
      * Throws under `NO_I18N`.
@@ -4361,6 +4530,36 @@ declare class QuickUnlockStore {
     private clearTimer;
 }
 
+interface SnapshotMeta {
+    readonly version: string;
+    readonly label?: string;
+    readonly note?: string;
+    readonly exportedAt: string;
+    readonly exportedBy: string;
+    readonly size: number;
+    /**
+     * `'verified'` — bundle was produced by `writeNoydbBundle(vault, {})`, which embeds
+     * ledgerHead metadata; `vault.load()` runs `verifyBackupIntegrity()` on restore.
+     * `'legacy-unverifiable'` — reserved for v2 import paths that read pre-existing bundles
+     * lacking a ledgerHead; not produced by the current engine.
+     */
+    readonly integrity: 'verified' | 'legacy-unverifiable';
+}
+interface RetentionPolicy {
+    readonly keepLast?: number;
+    readonly maxAgeDays?: number;
+    readonly prune?: boolean;
+}
+/** @internal */
+interface SnapshotStrategy {
+    snapshot(vault: unknown, by: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    listSnapshots(vaultId: string): Promise<SnapshotMeta[]>;
+    restoreSnapshot(vault: unknown, version: string): Promise<void>;
+}
+
 /**
  * Multi-record atomic transactions.
  *
@@ -4790,6 +4989,7 @@ declare class Noydb {
     private readonly txStrategy;
     private readonly sessionStrategy;
     private readonly syncStrategy;
+    private readonly snapshotStrategy;
     /**
      * Currently-running multi-record transaction, set by
      * `runTransaction` at the start of Phase 2 (commit) and cleared in
@@ -5761,6 +5961,27 @@ declare class Noydb {
      * should use {@link getKeyring}, which returns a defensive copy.
      */
     private getKeyringInternal;
+    /**
+     * Take an on-demand checkpoint of the given vault.
+     * Requires `snapshotStrategy: withSnapshots({ store })` in `createNoydb`.
+     * @throws ValidationError when the vault is not open
+     */
+    snapshot(vault: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    /**
+     * List all snapshots for the given vault, newest first.
+     * Reads only the sidecar index — does not download snapshot bytes.
+     */
+    listSnapshots(vault: string): Promise<SnapshotMeta[]>;
+    /**
+     * Restore the vault to a previously snapshotted state.
+     * Runs `verifyBackupIntegrity()` automatically on restore.
+     * @throws SnapshotNotFoundError when `version` doesn't exist in the store
+     * @throws ValidationError when the vault is not open
+     */
+    restoreSnapshot(vault: string, version: string): Promise<void>;
 }
 /** Create a new NOYDB instance. */
 declare function createNoydb(options: NoydbOptions): Promise<Noydb>;
@@ -12240,6 +12461,13 @@ interface NoydbOptions {
      * @internal
      */
     readonly syncStrategy?: SyncStrategy;
+    /**
+     * Tree-shake seam — optional snapshot-lifecycle subsystem. Pass
+     * `withSnapshots({ store })` from `@noy-db/hub/snapshots` to enable
+     * `db.snapshot()`, `db.listSnapshots()`, and `db.restoreSnapshot()`.
+     * When omitted, all three methods throw with a pointer at the subpath.
+     */
+    readonly snapshotStrategy?: SnapshotStrategy;
     /**
      * Optional guard strategies — collection-level write guards. Each
      * handle is the output of `withGuard()` from `@noy-db/hub/guards`.
@@ -12545,4 +12773,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ConsentStrategy as $, type BlobFieldPolicy as A, type BlobStrategy as B, type BlobFieldsConfig as C, DICT_COLLECTION_PREFIX as D, type BlobObject as E, type BlobPutOptions as F, type BlobResponseOptions as G, BlobSet as H, type I18nStrategy as I, type BlobStrategyOpenArgs as J, type CompactRunOptions as K, type CompactionContext as L, type CompactionResult as M, DEFAULT_CHUNK_SIZE as N, EXPORT_AUDIT_COLLECTION as O, PolicyEnforcer as P, ExportBlobsAbortedError as Q, type ExportBlobsAuditEntry as R, type SessionStrategy as S, type ExportBlobsHandle as T, type ExportBlobsOptions as U, type ExportedBlob as V, type SlotInfo as W, type SlotRecord as X, type VersionRecord as Y, createExportBlobsHandle as Z, runCompaction as _, type DictEntry as a, LedgerStore as a$, CONSENT_AUDIT_COLLECTION as a0, type ConsentAuditEntry as a1, type ConsentAuditFilter as a2, type ConsentContext as a3, type ConsentOp as a4, loadConsentEntries as a5, writeConsentEntry as a6, type PeriodsStrategy as a7, type CarryForwardContext as a8, type ClosePeriodOptions as a9, type ArrayOutputSpec as aA, DerivationRegistry as aB, type DerivationStrategyHandle as aC, type DerivedFromMeta as aD, type OutputSpec as aE, type RecordOutputSpec as aF, type MaterializedViewStrategy as aG, type MaterializedViewStrategyHandle as aH, type OverlayedViewStrategy as aI, Collection as aJ, OverlayedViewRegistry as aK, type OverlayedViewStrategyHandle as aL, type SyncStrategy as aM, type Role as aN, type UnlockedKeyring as aO, type HistoryStrategy as aP, type NoydbStore as aQ, type HistoryOptions as aR, type EncryptedEnvelope as aS, type PruneOptions as aT, type AppendInput as aU, type ChangeType as aV, CollectionInstant as aW, type DiffEntry as aX, type JsonPatch as aY, type JsonPatchOp as aZ, type LedgerEntry as a_, type OpenPeriodOptions as aa, PERIODS_COLLECTION as ab, type PeriodRecord as ac, type ReadOnlyCollection as ad, appendPeriodLedgerEntry as ae, assertTsWritable as af, chainAnchor as ag, loadPeriods as ah, validatePeriodName as ai, type GuardStrategy as aj, type GuardChange as ak, type GuardContext as al, GuardRegistry as am, type GuardStrategyHandle as an, ReadOnlyVaultFacade as ao, type ShadowStrategy as ap, CollectionFrame as aq, VaultFrame as ar, type TxStrategy as as, type AmendmentTxOptions as at, TxCollection as au, TxContext as av, TxVault as aw, runTransaction as ax, type DerivationStrategy as ay, type DerivationContext as az, type DictKeyDescriptor as b, ELEVATION_AUDIT_COLLECTION as b$, type VaultEngine as b0, VaultInstant as b1, type VerifyResult as b2, applyPatch as b3, canonicalJson as b4, computePatch as b5, diff as b6, formatDiff as b7, hashEntry as b8, paddedIndex as b9, type DirectoryConfig as bA, type UserVisibility as bB, type AccessibleVault as bC, type AffectedDocument as bD, BUNDLE_STORE_POLICY as bE, type BuiltInGateName as bF, type CacheOptions as bG, type CacheStats as bH, type ChangeEvent as bI, type CollectionChangeEvent as bJ, type CollectionConflictResolver as bK, type CollectionDescriptor as bL, type CollectionStats as bM, type Conflict as bN, type ConflictPolicy as bO, type ConflictStrategy as bP, type CrossTierAccessEvent as bQ, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bR, DELEGATIONS_COLLECTION as bS, type DeepPartial as bT, type DeepPartialOrNull as bU, type DelegationToken as bV, type DeleteManyResult as bW, type DerivationDescriptor as bX, type DirtyEntry as bY, type DryRunResult as bZ, type DumpSchemaOptions as b_, parseIndex as ba, sha256Hex as bb, type PublicEnvelope as bc, type SealingKeyProvider as bd, type BundleRecipient as be, type RecipientSealer as bf, type RecipientHint as bg, Vault as bh, type RecoveryEnrollmentInput as bi, type ShamirRecoveryProvider as bj, type MVQueryContext as bk, type RegisteredMV as bl, MaterializedViewRegistry as bm, type MaterializedFromMeta as bn, type MaterializedViewOutput as bo, type UnionSource as bp, type UserEnvelope as bq, type GateName as br, type GatePolicy as bs, type VaultPolicy as bt, type ActiveTier as bu, type FactorProof as bv, type SchemaUpdateStrategy as bw, type TransformFn as bx, type PersistedSchemaEnvelope as by, type UpdateDecision as bz, DictionaryHandle as c, type Permissions as c$, ElevatedHandle as c0, type EnrollAuthenticatorOptions as c1, type EnrollAuthenticatorWrappingDEKsOptions as c2, type EnrollAuthenticatorWrappingKEKOptions as c3, type EnrollRecoveryResult as c4, type ExportCapability as c5, type ExportChunk as c6, type ExportFormat as c7, type ExportStreamOptions as c8, type FactorKind as c9, type LocaleReadOptions as cA, Lru as cB, type LruOptions as cC, type LruStats as cD, MAGIC_LINK_CONTENT_INFO_PREFIX as cE, MAGIC_LINK_GRANTS_COLLECTION as cF, MAGIC_LINK_KEK_INFO_PREFIX as cG, type MagicLinkGrantPayload as cH, type MagicLinkGrantRecord as cI, type MaterializedViewDescriptor as cJ, MemoryRecipientSealer as cK, MemorySealingKeyProvider as cL, NOYDB_BACKUP_VERSION as cM, NOYDB_FORMAT_VERSION as cN, NOYDB_KEYRING_VERSION as cO, NOYDB_SYNC_VERSION as cP, Noydb as cQ, type NoydbBundleStore as cR, type NoydbEventMap as cS, type NoydbOptions as cT, type OverlayViewDescriptor as cU, PUBLIC_ENVELOPE_FIELDS as cV, type PaperRecoveryDoc as cW, type PaperRecoveryEntry as cX, type PassphrasePolicy as cY, type PassphraseValidationResult as cZ, type Permission as c_, type FactorProofBundle as ca, type FactorRequirement as cb, type FenceDoc as cc, type FenceState as cd, type FieldChange as ce, type FieldDescriptor as cf, type FieldSource as cg, type GhostRecord as ch, type GrantOptions as ci, type GuardViolation as cj, type HistoryConfig as ck, type HistoryEntry as cl, INDEXED_STORE_POLICY as cm, type ImportCapability as cn, type InferOutput as co, type InternalCollectionStats as cp, type IssueDelegationOptions as cq, type IssueMagicLinkGrantOptions as cr, type KeyringAuthenticator as cs, type KeyringAuthenticatorWrappingDEKs as ct, type KeyringAuthenticatorWrappingKEK as cu, type KeyringFile as cv, type ListAccessibleVaultsOptions as cw, type ListPageResult as cx, type ListUsersOptions as cy, type LiveUserEnvelope as cz, type DictionaryOptions as d, type TabLockManager as d$, type PersistedSchemaKind as d0, type PlaintextTranslatorContext as d1, type PlaintextTranslatorFn as d2, PresenceHandle as d3, type PresencePeer as d4, type PublicEnvelopeField as d5, type PublicEnvelopeSchema as d6, type PublicEnvelopeText as d7, type PullMode as d8, type PullOptions as d9, type SchemaIntrospection as dA, type SealedEnvelope as dB, type SealedPassphrase as dC, type SessionPolicy as dD, type SetPublicEnvelopeInput as dE, type ShamirRecoveryDoc as dF, type ShamirRecoveryEntry as dG, type SlotRewrapCeremony as dH, type SlotRewrapContext as dI, type StandardSchemaV1 as dJ, type StandardSchemaV1Issue as dK, type StandardSchemaV1SyncResult as dL, type StoreAuth as dM, type StoreAuthKind as dN, type StoreCapabilities as dO, SyncEngine as dP, type SyncMetadata as dQ, type SyncPolicy as dR, SyncScheduler as dS, type SyncSchedulerStatus as dT, type SyncStatus as dU, type SyncTarget as dV, type SyncTargetRole as dW, SyncTransaction as dX, type SyncTransactionResult as dY, type TabChannel as dZ, type TabCoordinationOptions as d_, type PullPolicy as da, type PullResult as db, type PushMode as dc, type PushOptions as dd, type PushPolicy as de, type PushResult as df, type PutManyItemOptions as dg, type PutManyOptions as dh, type PutManyResult as di, type QueryAcrossOptions as dj, type QueryAcrossResult as dk, type QuickUnlockState as dl, QuickUnlockStore as dm, type ReAuthOperation as dn, type RecoverPassphraseInput as dp, type RecoverPassphraseResult as dq, type RecoverUserOptions as dr, type RecoveryProof as ds, type ResolvedPublicEnvelopeSchema as dt, type RevokeOptions as du, type RotatePassphraseInput as dv, type RotateRecoveryOptions as dw, type RotateRecoveryResult as dx, SEALED_PASSPHRASE_RECORD_ID as dy, type SchemaDelta as dz, type I18nTextDescriptor as e, revokeDelegation as e$, type TabPresence as e0, type TabRole as e1, type TierMode as e2, type TranslatorAuditEntry as e3, type TxOp as e4, USER_ENVELOPE_COLLECTION as e5, USER_ENVELOPE_MAX_BYTES as e6, type Unsubscribe as e7, type UpdateAuthenticatorOptions as e8, type UpdateContext as e9, evaluateExportCapability as eA, evaluateImportCapability as eB, findAuthenticator as eC, hasExportCapability as eD, hasImportCapability as eE, hasRecoveryEnrolled as eF, isMagicLinkGrantExpired as eG, isPublicEnvelope as eH, issueDelegation as eI, recoverPassphrase as eJ, rotatePassphrase as eK, listMagicLinkGrants as eL, listUsers as eM, listUsersWithEnvelopes as eN, loadActiveDelegations as eO, loadPaperRecoveryEntries as eP, loadSealedPassphrase as eQ, loadShamirRecoveryEntries as eR, magicLinkGrantRecordId as eS, mintPaperRecoveryEntry as eT, mintShamirRecoveryEntry as eU, mintWrappedDeksBlob as eV, parseSealedEnvelope as eW, readMagicLinkGrantRecord as eX, recoverUser as eY, removeAuthenticator as eZ, resolveSchema as e_, type UpdateUserOptions as ea, UserApi as eb, type UserEnvelopeCheckGate as ec, UserEnvelopeOversizedError as ed, type UserEnvelopePresented as ee, type UserInfo as ef, type VaultBackup as eg, type VaultPolicyOnDisk as eh, type VaultSchemaSnapshot as ei, type VaultSnapshot as ej, type WarningRules as ek, WeakPassphraseError as el, type WeakPassphraseReason as em, type WrappedDeksBlob as en, type WriteConflict as eo, type WriteEvent as ep, type WriteHook as eq, type WriteQueue as er, assertStrongPassphrase as es, buildRecipientKeyringFile as et, burnPaperRecoveryEntry as eu, createNoydb as ev, createStore as ew, deriveMagicLinkContentKey as ex, enrollAuthenticator as ey, estimateEntropy as ez, type I18nTextOptions as f, revokeMagicLinkGrant as f0, savePaperRecoveryEntries as f1, saveSealedPassphrase as f2, saveShamirRecoveryEntries as f3, unwrapDeksFromBlob as f4, unwrapDeksFromPaperEntry as f5, unwrapDeksFromShamirEntry as f6, unwrapMagicLinkGrant as f7, validatePassphrase as f8, validatePublicEnvelopeInput as f9, validateSchemaInput as fa, validateSchemaOutput as fb, writeMagicLinkGrant as fc, changeSecret as fd, createOwnerKeyring as fe, ensureCollectionDEK as ff, grant as fg, loadKeyring as fh, persistKeyring as fi, revoke as fj, updateAuthenticator as fk, updateKeyringIdentity as fl, applyI18nLocale as g, dictCollectionName as h, dictKey as i, getAtPath as j, i18nText as k, isDictCollectionName as l, isDictKeyDescriptor as m, isI18nTextDescriptor as n, createEnforcer as o, validateSessionPolicy as p, BLOB_CHUNKS_COLLECTION as q, resolveI18nText as r, setAtPathInPlace as s, BLOB_COLLECTION as t, BLOB_EVICTION_AUDIT_COLLECTION as u, validateI18nTextValue as v, BLOB_INDEX_COLLECTION as w, BLOB_SLOTS_PREFIX as x, BLOB_VERSIONS_PREFIX as y, type BlobEvictionEntry as z };
+export { type ExportBlobsAuditEntry as $, BLOB_COLLECTION as A, type BlobStrategy as B, BLOB_EVICTION_AUDIT_COLLECTION as C, DICT_COLLECTION_PREFIX as D, BLOB_INDEX_COLLECTION as E, BLOB_SLOTS_PREFIX as F, BLOB_VERSIONS_PREFIX as G, type BlobEvictionEntry as H, type I18nStrategy as I, type BlobFieldPolicy as J, type BlobFieldsConfig as K, type Layer as L, type BlobObject as M, type BlobPutOptions as N, type OnMissing as O, PolicyEnforcer as P, type BlobResponseOptions as Q, type ResolveI18nOptions as R, type ScriptWarning as S, BlobSet as T, type BlobStrategyOpenArgs as U, type CompactRunOptions as V, type CompactionContext as W, type CompactionResult as X, DEFAULT_CHUNK_SIZE as Y, EXPORT_AUDIT_COLLECTION as Z, ExportBlobsAbortedError as _, type DictEntry as a, type UnlockedKeyring as a$, type ExportBlobsHandle as a0, type ExportBlobsOptions as a1, type ExportedBlob as a2, type SlotInfo as a3, type SlotRecord as a4, type VersionRecord as a5, createExportBlobsHandle as a6, runCompaction as a7, type ConsentStrategy as a8, CONSENT_AUDIT_COLLECTION as a9, VaultFrame as aA, type NoydbBundleStore as aB, type RetentionPolicy as aC, type SnapshotStrategy as aD, type SnapshotMeta as aE, type TxStrategy as aF, type AmendmentTxOptions as aG, TxCollection as aH, TxContext as aI, TxVault as aJ, runTransaction as aK, type DerivationStrategy as aL, type DerivationContext as aM, type ArrayOutputSpec as aN, DerivationRegistry as aO, type DerivationStrategyHandle as aP, type DerivedFromMeta as aQ, type OutputSpec as aR, type RecordOutputSpec as aS, type MaterializedViewStrategy as aT, type MaterializedViewStrategyHandle as aU, type OverlayedViewStrategy as aV, Collection as aW, OverlayedViewRegistry as aX, type OverlayedViewStrategyHandle as aY, type SyncStrategy as aZ, type Role as a_, type ConsentAuditEntry as aa, type ConsentAuditFilter as ab, type ConsentContext as ac, type ConsentOp as ad, loadConsentEntries as ae, writeConsentEntry as af, type PeriodsStrategy as ag, type CarryForwardContext as ah, type ClosePeriodOptions as ai, type OpenPeriodOptions as aj, PERIODS_COLLECTION as ak, type PeriodRecord as al, type ReadOnlyCollection as am, appendPeriodLedgerEntry as an, assertTsWritable as ao, chainAnchor as ap, loadPeriods as aq, validatePeriodName as ar, type GuardStrategy as as, type GuardChange as at, type GuardContext as au, GuardRegistry as av, type GuardStrategyHandle as aw, ReadOnlyVaultFacade as ax, type ShadowStrategy as ay, CollectionFrame as az, type DictKeyDescriptor as b, type ConflictPolicy as b$, type HistoryStrategy as b0, type NoydbStore as b1, type HistoryOptions as b2, type EncryptedEnvelope as b3, type PruneOptions as b4, type AppendInput as b5, type ChangeType as b6, CollectionInstant as b7, type DiffEntry as b8, type JsonPatch as b9, type MaterializedFromMeta as bA, type MaterializedViewOutput as bB, type UnionSource as bC, type UserEnvelope as bD, type GateName as bE, type GatePolicy as bF, type VaultPolicy as bG, type ActiveTier as bH, type FactorProof as bI, type SchemaUpdateStrategy as bJ, type TransformFn as bK, type PersistedSchemaEnvelope as bL, type UpdateDecision as bM, type DirectoryConfig as bN, type UserVisibility as bO, type AccessibleVault as bP, type AffectedDocument as bQ, BUNDLE_STORE_POLICY as bR, type BuiltInGateName as bS, type CacheOptions as bT, type CacheStats as bU, type ChangeEvent as bV, type CollectionChangeEvent as bW, type CollectionConflictResolver as bX, type CollectionDescriptor as bY, type CollectionStats as bZ, type Conflict as b_, type JsonPatchOp as ba, type LedgerEntry as bb, LedgerStore as bc, type VaultEngine as bd, VaultInstant as be, type VerifyResult as bf, applyPatch as bg, canonicalJson as bh, computePatch as bi, diff as bj, formatDiff as bk, hashEntry as bl, paddedIndex as bm, parseIndex as bn, sha256Hex as bo, type PublicEnvelope as bp, type SealingKeyProvider as bq, type BundleRecipient as br, type RecipientSealer as bs, type RecipientHint as bt, Vault as bu, type RecoveryEnrollmentInput as bv, type ShamirRecoveryProvider as bw, type MVQueryContext as bx, type RegisteredMV as by, MaterializedViewRegistry as bz, DictionaryHandle as c, NOYDB_KEYRING_VERSION as c$, type ConflictStrategy as c0, type CrossTierAccessEvent as c1, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c2, DELEGATIONS_COLLECTION as c3, type DeepPartial as c4, type DeepPartialOrNull as c5, type DelegationToken as c6, type DeleteManyResult as c7, type DerivationDescriptor as c8, type DirtyEntry as c9, type ImportCapability as cA, type InferOutput as cB, type InternalCollectionStats as cC, type IssueDelegationOptions as cD, type IssueMagicLinkGrantOptions as cE, type KeyringAuthenticator as cF, type KeyringAuthenticatorWrappingDEKs as cG, type KeyringAuthenticatorWrappingKEK as cH, type KeyringFile as cI, type ListAccessibleVaultsOptions as cJ, type ListPageResult as cK, type ListUsersOptions as cL, type LiveUserEnvelope as cM, type LocaleReadOptions as cN, Lru as cO, type LruOptions as cP, type LruStats as cQ, MAGIC_LINK_CONTENT_INFO_PREFIX as cR, MAGIC_LINK_GRANTS_COLLECTION as cS, MAGIC_LINK_KEK_INFO_PREFIX as cT, type MagicLinkGrantPayload as cU, type MagicLinkGrantRecord as cV, type MaterializedViewDescriptor as cW, MemoryRecipientSealer as cX, MemorySealingKeyProvider as cY, NOYDB_BACKUP_VERSION as cZ, NOYDB_FORMAT_VERSION as c_, type DryRunResult as ca, type DumpSchemaOptions as cb, ELEVATION_AUDIT_COLLECTION as cc, ElevatedHandle as cd, type EnrollAuthenticatorOptions as ce, type EnrollAuthenticatorWrappingDEKsOptions as cf, type EnrollAuthenticatorWrappingKEKOptions as cg, type EnrollRecoveryResult as ch, type ExportCapability as ci, type ExportChunk as cj, type ExportFormat as ck, type ExportStreamOptions as cl, type FactorKind as cm, type FactorProofBundle as cn, type FactorRequirement as co, type FenceDoc as cp, type FenceState as cq, type FieldChange as cr, type FieldDescriptor as cs, type FieldSource as ct, type GhostRecord as cu, type GrantOptions as cv, type GuardViolation as cw, type HistoryConfig as cx, type HistoryEntry as cy, INDEXED_STORE_POLICY as cz, type DictionaryOptions as d, SyncEngine as d$, NOYDB_SYNC_VERSION as d0, Noydb as d1, type NoydbEventMap as d2, type NoydbOptions as d3, type OverlayViewDescriptor as d4, PUBLIC_ENVELOPE_FIELDS as d5, type PaperRecoveryDoc as d6, type PaperRecoveryEntry as d7, type PassphrasePolicy as d8, type PassphraseValidationResult as d9, type ReAuthOperation as dA, type RecoverPassphraseInput as dB, type RecoverPassphraseResult as dC, type RecoverUserOptions as dD, type RecoveryProof as dE, type ResolvedPublicEnvelopeSchema as dF, type RevokeOptions as dG, type RotatePassphraseInput as dH, type RotateRecoveryOptions as dI, type RotateRecoveryResult as dJ, SEALED_PASSPHRASE_RECORD_ID as dK, type SchemaDelta as dL, type SchemaIntrospection as dM, type SealedEnvelope as dN, type SealedPassphrase as dO, type SessionPolicy as dP, type SetPublicEnvelopeInput as dQ, type ShamirRecoveryDoc as dR, type ShamirRecoveryEntry as dS, type SlotRewrapCeremony as dT, type SlotRewrapContext as dU, type StandardSchemaV1 as dV, type StandardSchemaV1Issue as dW, type StandardSchemaV1SyncResult as dX, type StoreAuth as dY, type StoreAuthKind as dZ, type StoreCapabilities as d_, type Permission as da, type Permissions as db, type PersistedSchemaKind as dc, type PlaintextTranslatorContext as dd, type PlaintextTranslatorFn as de, PresenceHandle as df, type PresencePeer as dg, type PublicEnvelopeField as dh, type PublicEnvelopeSchema as di, type PublicEnvelopeText as dj, type PullMode as dk, type PullOptions as dl, type PullPolicy as dm, type PullResult as dn, type PushMode as dp, type PushOptions as dq, type PushPolicy as dr, type PushResult as ds, type PutManyItemOptions as dt, type PutManyOptions as du, type PutManyResult as dv, type QueryAcrossOptions as dw, type QueryAcrossResult as dx, type QuickUnlockState as dy, QuickUnlockStore as dz, type I18nMap as e, loadPaperRecoveryEntries as e$, type SyncMetadata as e0, type SyncPolicy as e1, SyncScheduler as e2, type SyncSchedulerStatus as e3, type SyncStatus as e4, type SyncTarget as e5, type SyncTargetRole as e6, SyncTransaction as e7, type SyncTransactionResult as e8, type TabChannel as e9, type WriteConflict as eA, type WriteEvent as eB, type WriteHook as eC, type WriteQueue as eD, assertStrongPassphrase as eE, buildRecipientKeyringFile as eF, burnPaperRecoveryEntry as eG, createNoydb as eH, createStore as eI, deriveMagicLinkContentKey as eJ, enrollAuthenticator as eK, estimateEntropy as eL, evaluateExportCapability as eM, evaluateImportCapability as eN, findAuthenticator as eO, hasExportCapability as eP, hasImportCapability as eQ, hasRecoveryEnrolled as eR, isMagicLinkGrantExpired as eS, isPublicEnvelope as eT, issueDelegation as eU, recoverPassphrase as eV, rotatePassphrase as eW, listMagicLinkGrants as eX, listUsers as eY, listUsersWithEnvelopes as eZ, loadActiveDelegations as e_, type TabCoordinationOptions as ea, type TabLockManager as eb, type TabPresence as ec, type TabRole as ed, type TierMode as ee, type TranslatorAuditEntry as ef, type TxOp as eg, USER_ENVELOPE_COLLECTION as eh, USER_ENVELOPE_MAX_BYTES as ei, type Unsubscribe as ej, type UpdateAuthenticatorOptions as ek, type UpdateContext as el, type UpdateUserOptions as em, UserApi as en, type UserEnvelopeCheckGate as eo, UserEnvelopeOversizedError as ep, type UserEnvelopePresented as eq, type UserInfo as er, type VaultBackup as es, type VaultPolicyOnDisk as et, type VaultSchemaSnapshot as eu, type VaultSnapshot as ev, type WarningRules as ew, WeakPassphraseError as ex, type WeakPassphraseReason as ey, type WrappedDeksBlob as ez, type I18nTextDescriptor as f, loadSealedPassphrase as f0, loadShamirRecoveryEntries as f1, magicLinkGrantRecordId as f2, mintPaperRecoveryEntry as f3, mintShamirRecoveryEntry as f4, mintWrappedDeksBlob as f5, parseSealedEnvelope as f6, readMagicLinkGrantRecord as f7, recoverUser as f8, removeAuthenticator as f9, resolveSchema as fa, revokeDelegation as fb, revokeMagicLinkGrant as fc, savePaperRecoveryEntries as fd, saveSealedPassphrase as fe, saveShamirRecoveryEntries as ff, unwrapDeksFromBlob as fg, unwrapDeksFromPaperEntry as fh, unwrapDeksFromShamirEntry as fi, unwrapMagicLinkGrant as fj, validatePassphrase as fk, validatePublicEnvelopeInput as fl, validateSchemaInput as fm, validateSchemaOutput as fn, writeMagicLinkGrant as fo, changeSecret as fp, createOwnerKeyring as fq, ensureCollectionDEK as fr, grant as fs, loadKeyring as ft, persistKeyring as fu, revoke as fv, updateAuthenticator as fw, updateKeyringIdentity as fx, type I18nTextOptions as g, type OnMissingPolicy as h, applyI18nLocale as i, dictCollectionName as j, dictKey as k, enforceScript as l, getAtPath as m, i18nText as n, inferScripts as o, isDictCollectionName as p, isDictKeyDescriptor as q, isI18nTextDescriptor as r, resolveI18nText as s, resolvePolicy as t, setAtPathInPlace as u, validateI18nTextValue as v, type SessionStrategy as w, createEnforcer as x, validateSessionPolicy as y, BLOB_CHUNKS_COLLECTION as z };

package/dist/{ulid-CzPONlhG.d.ts → ulid-BFJkYRRW.d.ts}

@@ -1,4 +1,4 @@
-import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DlnZh1_i.js';
+import { bp as PublicEnvelope, bq as SealingKeyProvider, br as BundleRecipient, bs as RecipientSealer, bt as RecipientHint, bu as Vault } from './types-DGU60JDt.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.

package/dist/{ulid-r98nkjVd.d.cts → ulid-DPeuPgi3.d.cts}

@@ -1,4 +1,4 @@
-import { bc as PublicEnvelope, bd as SealingKeyProvider, be as BundleRecipient, bf as RecipientSealer, bg as RecipientHint, bh as Vault } from './types-DVlvNn2c.cjs';
+import { bp as PublicEnvelope, bq as SealingKeyProvider, br as BundleRecipient, bs as RecipientSealer, bt as RecipientHint, bu as Vault } from './types-DjunxzJa.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.