@noy-db/hub 0.2.0-pre.7 → 0.2.0-pre.9

package/dist/{types-r-y7TIqj.d.cts → types-DyXYr8rE.d.cts}

@@ -1,7 +1,7 @@
 import { I as IndexStrategy, d as LazyQuery } from './lazy-builder-wY4pMCEe.cjs';
 import { b as AggregateSpec, A as AggregateStrategy } from './strategy-DSTrsZ8t.cjs';
 import { C as CrdtStrategy, a as CrdtMode, b as CrdtState } from './strategy-BSxFXGzb.cjs';
-import { N as NoydbError, Q as Query, av as RefRegistry, as as RefDescriptor, a6 as JoinableSource, ax as RefViolation, ay as ScanBuilder } from './index-vB43MAt4.cjs';
+import { N as NoydbError, Q as Query, aw as RefRegistry, at as RefDescriptor, a7 as JoinableSource, ay as RefViolation, az as ScanBuilder } from './index-4fBVt8j9.cjs';
 import { F as FieldClause, I as IndexDef, C as CollectionIndexes } from './predicate-BSAGEyu5.cjs';
 import { AttestationFieldSchema, RevocationList } from '@noy-db/attestation';
 
@@ -1644,6 +1644,51 @@ interface PeriodsStrategy {
     appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, periodName: string): Promise<void>;
 }
 
+/**
+ * Per-layer i18n resolution policy.
+ *
+ * `onMissing` governs what happens when a multilingual field is resolved
+ * to a target locale that is absent. It may be a single scalar policy or
+ * a per-layer map, so a field can be lenient at the app read boundary but
+ * strict inside a materialized view.
+ *
+ * Effective policy for layer `λ`:
+ *
+ * ```
+ * explicit(λ) = typeof onMissing === 'object' ? onMissing[λ] : undefined
+ * scalar      = typeof onMissing === 'string' ? onMissing : undefined
+ * policy(λ)   = explicit(λ) ?? layerDefault(λ) ?? scalar ?? 'throw'
+ * ```
+ *
+ * - `layerDefault('guard') = 'substitute'` — guards are lenient unless
+ *   EXPLICITLY overridden; they never inherit a scalar policy (a guard
+ *   reading a display value must not hard-fail on a missing locale).
+ * - every other layer has no default, so it inherits the scalar, else
+ *   falls back to `'throw'` (today's behavior — zero breaking change).
+ *
+ * @public
+ */
+type OnMissing = 'substitute' | 'null' | 'throw';
+/**
+ * The contexts in which a multilingual field is resolved. Each can carry
+ * its own `onMissing` policy.
+ *
+ * - `read`       — ordinary app reads (`get`/`list`/query projection).
+ * - `guard`      — a guard callback reading a value.
+ * - `join`       — a joined record expanded onto a row.
+ * - `mv`         — materialized-view input.
+ * - `derivation` — derivation input.
+ * - `export`     — bundle/public-envelope export.
+ */
+type Layer = 'read' | 'guard' | 'join' | 'mv' | 'derivation' | 'export';
+/** Field-level policy: a single scalar, or a per-layer map. */
+type OnMissingPolicy = OnMissing | Partial<Record<Layer, OnMissing>>;
+/**
+ * Resolve the effective `OnMissing` for a layer from a field's declared
+ * policy. See module docs for the resolution rule.
+ */
+declare function resolvePolicy(onMissing: OnMissingPolicy | undefined, layer: Layer): OnMissing;
+
 /**
  * i18nText schema type —
  *
@@ -1685,6 +1730,37 @@ interface PeriodsStrategy {
  * Pluralization, RTL rendering, date/number formatting, per-locale CRDT
  * merging.
  */
+
+/** Flatten an intersection into a single object literal for nicer hovers. */
+type Prettify<T> = {
+    [K in keyof T]: T[K];
+} & {};
+/**
+ * The stored shape of a multilingual field, inferred from its `required`
+ * mode — so the compiler forces you to handle an absent optional locale
+ * (`string | undefined`) instead of silently yielding `undefined`.
+ *
+ * Mirrors `i18nText({ languages, required })`:
+ * - `'all'` (default) — every locale required: `{ th: string; en: string }`
+ * - `'any'`           — every locale optional: `{ th?: string; en?: string }`
+ *   (the "at least one present" guarantee is runtime-only — not expressible
+ *   in TypeScript — so each key is optional)
+ * - `readonly L[]`    — listed locales required, the rest optional:
+ *   `I18nMap<'th'|'en', ['th']>` → `{ th: string; en?: string }`
+ *
+ * @example
+ * ```ts
+ * type Lang = 'th' | 'en'
+ * interface Contact {
+ *   name: I18nMap<Lang, 'any'>      // { th?: string; en?: string }
+ *   legalName: I18nMap<Lang, ['th']> // { th: string; en?: string }
+ *   slug: I18nMap<Lang>             // { th: string; en: string }
+ * }
+ * ```
+ *
+ * @public
+ */
+type I18nMap<Langs extends string, Required extends 'all' | 'any' | readonly Langs[] = 'all'> = Required extends 'all' ? Record<Langs, string> : Required extends 'any' ? Partial<Record<Langs, string>> : Required extends readonly (infer R extends Langs)[] ? Prettify<Record<R, string> & Partial<Record<Exclude<Langs, R>, string>>> : never;
 /**
  * Options for `i18nText()`.
  *
@@ -1713,6 +1789,38 @@ interface I18nTextOptions {
      * before `put()` if a translator is configured. Default: `false`.
      */
     readonly autoTranslate?: boolean;
+    /**
+     * What to do when this field is resolved to a locale that is absent.
+     * A single policy, or a per-layer map (read/guard/join/mv/derivation/
+     * export). Default `'throw'` — today's behavior, zero breaking change.
+     * See {@link OnMissingPolicy}.
+     *
+     * NOTE (current wiring): the `read` layer (`get`/`list`) is enforced.
+     * Guard, derivation, mv, join and export reads currently resolve
+     * through the same read path and so observe the `read`/scalar policy;
+     * dedicated per-layer enforcement for those contexts is a tracked
+     * follow-up (mv/join additionally require resolution to be injected
+     * into the query/aggregate pipeline, which today reads raw maps).
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /**
+     * Ordered preferred-substitute locales used when `onMissing` resolves
+     * to `'substitute'` and the target locale is absent. `'any'` as an
+     * element means "first non-empty value". A caller-supplied `fallback`
+     * at read time takes precedence over this declared list.
+     */
+    readonly substitute?: readonly string[];
+    /**
+     * Per-locale script enforcement (write-time). `'auto'` infers the
+     * allowed Unicode scripts per locale (asymmetric Latin tolerance); an
+     * object overrides per slot. Absent ⇒ no check. See `./script.ts`.
+     */
+    readonly script?: 'auto' | Partial<Record<string, readonly string[]>>;
+    /**
+     * What to do when a slot's value contains characters outside its
+     * allowed script set. Default `'reject'`.
+     */
+    readonly onScriptViolation?: 'reject' | 'filter' | 'warn';
 }
 /**
  * Descriptor returned by `i18nText()`. Attach to the collection's
@@ -1767,7 +1875,15 @@ declare function validateI18nTextValue(value: unknown, field: string, descriptor
  * @param field    Field name used in `LocaleNotSpecifiedError` messages.
  * @returns The resolved string, OR the original map when `locale === 'raw'`.
  */
+/** Options for the policy-aware form of {@link resolveI18nText}. */
+interface ResolveI18nOptions {
+    /** Effective policy for the resolution layer. Default `'throw'`. */
+    readonly policy?: OnMissing;
+    /** Declared substitute chain; applied only under policy `'substitute'`. */
+    readonly substitute?: readonly string[];
+}
 declare function resolveI18nText(value: Record<string, string>, locale: string, fallback?: string | readonly string[], field?: string): string | Record<string, string>;
+declare function resolveI18nText(value: Record<string, string>, locale: string, fallback: string | readonly string[] | undefined, field: string | undefined, opts: ResolveI18nOptions): string | Record<string, string> | null;
 /**
  * Return all leaf values at `path`, expanding `[].` array wildcards.
  *
@@ -1799,8 +1915,12 @@ declare function setAtPathInPlace(obj: Record<string, unknown>, path: string, va
  * @param i18nFields  Map of field path → `I18nTextDescriptor`.
  * @param locale      The requested locale (or `'raw'`).
  * @param fallback    Fallback chain (optional).
+ * @param layer       Resolution layer (default `'read'`). Each field's
+ *                    `onMissing` policy is resolved for this layer, so the
+ *                    same record resolves leniently on a get but strictly
+ *                    inside an mv/derivation.
  */
-declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+declare function applyI18nLocale(record: Record<string, unknown>, i18nFields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
 
 type EventHandler<T> = (data: T) => void;
 /** Typed event emitter for NOYDB events. */
@@ -2325,6 +2445,16 @@ interface DictKeyDescriptor<Keys extends string = string> {
     readonly name: string;
     /** Declared valid keys. When set, `put()` rejects keys not in this set. */
     readonly keys: readonly Keys[] | undefined;
+    /**
+     * What to do when a label is missing for the resolved locale. Mirrors
+     * `i18nText`'s `onMissing`. Default behavior (when unset) preserves the
+     * legacy contract: a missing label is omitted (scalar) or `null`
+     * (array element) — i.e. `'null'`. Set `'substitute'` to walk the
+     * declared `substitute` chain, or `'throw'` to raise.
+     */
+    readonly onMissing?: OnMissingPolicy;
+    /** Ordered preferred-substitute locales for label resolution. */
+    readonly substitute?: readonly string[];
 }
 /**
  * Create a `DictKeyDescriptor` for a dictionary-backed enum field.
@@ -2343,7 +2473,10 @@ interface DictKeyDescriptor<Keys extends string = string> {
  * })
  * ```
  */
-declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[]): DictKeyDescriptor<Keys>;
+declare function dictKey<Keys extends string>(name: string, keys?: readonly Keys[], opts?: {
+    onMissing?: OnMissingPolicy;
+    substitute?: readonly string[];
+}): DictKeyDescriptor<Keys>;
 /** Runtime predicate for detecting a DictKeyDescriptor. */
 declare function isDictKeyDescriptor(x: unknown): x is DictKeyDescriptor;
 /**
@@ -2487,6 +2620,32 @@ declare class DictionaryHandle<Keys extends string = string> {
     resolveLabel(key: string, locale: string, fallback?: string | readonly string[]): Promise<string | undefined>;
 }
 
+/**
+ * Infer the allowed Unicode scripts for a BCP-47 locale, with asymmetric
+ * Latin tolerance. A script subtag (`th-Latn`) wins over the base
+ * language. Unknown locales default to `['Latin']`.
+ */
+declare function inferScripts(locale: string): readonly string[];
+/** A non-fatal script violation recorded under `'filter'`/`'warn'` modes. */
+interface ScriptWarning {
+    readonly field: string;
+    readonly locale: string;
+    readonly expected: readonly string[];
+    readonly sample: string;
+}
+/**
+ * Enforce a field's script constraint over an i18nText value map.
+ *
+ * - No `script` option ⇒ returns the value unchanged.
+ * - `onScriptViolation: 'reject'` (default) ⇒ throws {@link ScriptViolationError}.
+ * - `'filter'` ⇒ returns a copy with disallowed characters stripped + warnings.
+ * - `'warn'` ⇒ returns the value unchanged + warnings.
+ */
+declare function enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+    value: Record<string, unknown>;
+    warnings: ScriptWarning[];
+};
+
 /**
  * Strategy seam for the optional i18n (multi-locale + dictionary)
  * subsystem. Core imports `I18nStrategy` type-only + `NO_I18N` stub;
@@ -2548,13 +2707,23 @@ interface I18nStrategy {
      * return a new object. Returns the input unchanged under
      * `NO_I18N`.
      */
-    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[]): Record<string, unknown>;
+    applyI18nLocale(record: Record<string, unknown>, fields: Record<string, I18nTextDescriptor>, locale: string, fallback?: string | readonly string[], layer?: Layer): Record<string, unknown>;
     /**
      * Validate that an i18nText field's value satisfies its descriptor
      * (required locales present, etc.). Throws under `NO_I18N` —
      * declaring i18nFields without opting in is a misconfiguration.
      */
     validateI18nTextValue(value: unknown, field: string, descriptor: I18nTextDescriptor): void;
+    /**
+     * Enforce per-locale script constraints over an i18nText value map
+     * (write-time). Returns the (possibly filtered) value plus any
+     * non-fatal warnings. Returns the value unchanged when the field has
+     * no `script` option, or under `NO_I18N`.
+     */
+    enforceScript(value: Record<string, unknown>, field: string, descriptor: I18nTextDescriptor): {
+        value: Record<string, unknown>;
+        warnings: ScriptWarning[];
+    };
     /**
      * Construct a typed `DictionaryHandle` for the named dictionary.
      * Throws under `NO_I18N`.
@@ -4361,6 +4530,30 @@ declare class QuickUnlockStore {
     private clearTimer;
 }
 
+/**
+ * Cadence policy for automatic snapshots. Borrows the vocabulary of the sync
+ * `SyncPolicy` (debounce / interval / minInterval / onUnload) but is a separate,
+ * snapshot-specific shape — automatic snapshots write the single rolling
+ * `<vault>__auto` key, never the immutable on-demand pool.
+ *
+ * Default mode is `'manual'`: no timers, snapshots stay on-demand.
+ */
+type SnapshotMode = 'manual' | 'debounce' | 'interval';
+interface SnapshotPolicy {
+    /** Trigger mode. Default `'manual'` — no automatic snapshots. */
+    readonly mode?: SnapshotMode;
+    /** Idle delay (ms) after a write before an auto-snapshot fires. `mode:'debounce'`. Default 30_000. */
+    readonly debounceMs?: number;
+    /** Fixed interval (ms). `mode:'interval'`. Default 300_000. */
+    readonly intervalMs?: number;
+    /** Hard floor (ms) between auto-snapshots regardless of mode. Default 0. */
+    readonly minIntervalMs?: number;
+    /** Flush a pending auto-snapshot on tab-hide / process exit. Default true for non-manual modes. */
+    readonly onUnload?: boolean;
+    /** Label applied to each auto-snapshot. Default `'auto'`. */
+    readonly label?: string;
+}
+
 interface SnapshotMeta {
     readonly version: string;
     readonly label?: string;
@@ -4375,6 +4568,8 @@ interface SnapshotMeta {
      * lacking a ledgerHead; not produced by the current engine.
      */
     readonly integrity: 'verified' | 'legacy-unverifiable';
+    /** `true` for the rolling auto-snapshot; absent on on-demand checkpoints. */
+    readonly auto?: true;
 }
 interface RetentionPolicy {
     readonly keepLast?: number;
@@ -4389,6 +4584,13 @@ interface SnapshotStrategy {
     }): Promise<SnapshotMeta>;
     listSnapshots(vaultId: string): Promise<SnapshotMeta[]>;
     restoreSnapshot(vault: unknown, version: string): Promise<void>;
+    /** Rolling auto-snapshot to the fixed `<vault>__auto` key. */
+    autoSnapshot(vault: unknown, by: string, opts?: {
+        label?: string;
+        note?: string;
+    }): Promise<SnapshotMeta>;
+    /** Configured cadence policy. Undefined or `mode:'manual'` ⇒ no scheduler is wired. */
+    readonly policy?: SnapshotPolicy;
 }
 
 /**
@@ -4821,6 +5023,8 @@ declare class Noydb {
     private readonly sessionStrategy;
     private readonly syncStrategy;
     private readonly snapshotStrategy;
+    private snapshotScheduler;
+    private readonly dirtySnapshotVaults;
     /**
      * Currently-running multi-record transaction, set by
      * `runTransaction` at the start of Phase 2 (commit) and cleared in
@@ -5801,6 +6005,13 @@ declare class Noydb {
         label?: string;
         note?: string;
     }): Promise<SnapshotMeta>;
+    /**
+     * Wire the automatic-snapshot cadence when a non-manual `snapshotPolicy` is
+     * configured. Subscribes to `onAfterWrite` to mark the written vault dirty and
+     * nudge the scheduler; the scheduler fires `autoSnapshot()` per dirty vault.
+     * No-op for `mode:'manual'` or no policy.
+     */
+    private initSnapshotCadence;
     /**
      * List all snapshots for the given vault, newest first.
      * Reads only the sidecar index — does not download snapshot bytes.
@@ -12604,4 +12815,4 @@ interface DeleteManyResult {
     }>;
 }
 
-export { type ConsentStrategy as $, type BlobFieldPolicy as A, type BlobStrategy as B, type BlobFieldsConfig as C, DICT_COLLECTION_PREFIX as D, type BlobObject as E, type BlobPutOptions as F, type BlobResponseOptions as G, BlobSet as H, type I18nStrategy as I, type BlobStrategyOpenArgs as J, type CompactRunOptions as K, type CompactionContext as L, type CompactionResult as M, DEFAULT_CHUNK_SIZE as N, EXPORT_AUDIT_COLLECTION as O, PolicyEnforcer as P, ExportBlobsAbortedError as Q, type ExportBlobsAuditEntry as R, type SessionStrategy as S, type ExportBlobsHandle as T, type ExportBlobsOptions as U, type ExportedBlob as V, type SlotInfo as W, type SlotRecord as X, type VersionRecord as Y, createExportBlobsHandle as Z, runCompaction as _, type DictEntry as a, type DiffEntry as a$, CONSENT_AUDIT_COLLECTION as a0, type ConsentAuditEntry as a1, type ConsentAuditFilter as a2, type ConsentContext as a3, type ConsentOp as a4, loadConsentEntries as a5, writeConsentEntry as a6, type PeriodsStrategy as a7, type CarryForwardContext as a8, type ClosePeriodOptions as a9, TxVault as aA, runTransaction as aB, type DerivationStrategy as aC, type DerivationContext as aD, type ArrayOutputSpec as aE, DerivationRegistry as aF, type DerivationStrategyHandle as aG, type DerivedFromMeta as aH, type OutputSpec as aI, type RecordOutputSpec as aJ, type MaterializedViewStrategy as aK, type MaterializedViewStrategyHandle as aL, type OverlayedViewStrategy as aM, Collection as aN, OverlayedViewRegistry as aO, type OverlayedViewStrategyHandle as aP, type SyncStrategy as aQ, type Role as aR, type UnlockedKeyring as aS, type HistoryStrategy as aT, type NoydbStore as aU, type HistoryOptions as aV, type EncryptedEnvelope as aW, type PruneOptions as aX, type AppendInput as aY, type ChangeType as aZ, CollectionInstant as a_, type OpenPeriodOptions as aa, PERIODS_COLLECTION as ab, type PeriodRecord as ac, type ReadOnlyCollection as ad, appendPeriodLedgerEntry as ae, assertTsWritable as af, chainAnchor as ag, loadPeriods as ah, validatePeriodName as ai, type GuardStrategy as aj, type GuardChange as ak, type GuardContext as al, GuardRegistry as am, type GuardStrategyHandle as an, ReadOnlyVaultFacade as ao, type ShadowStrategy as ap, CollectionFrame as aq, VaultFrame as ar, type NoydbBundleStore as as, type RetentionPolicy as at, type SnapshotStrategy as au, type SnapshotMeta as av, type TxStrategy as aw, type AmendmentTxOptions as ax, TxCollection as ay, TxContext as az, type DictKeyDescriptor as b, type DerivationDescriptor as b$, type JsonPatch as b0, type JsonPatchOp as b1, type LedgerEntry as b2, LedgerStore as b3, type VaultEngine as b4, VaultInstant as b5, type VerifyResult as b6, applyPatch as b7, canonicalJson as b8, computePatch as b9, type SchemaUpdateStrategy as bA, type TransformFn as bB, type PersistedSchemaEnvelope as bC, type UpdateDecision as bD, type DirectoryConfig as bE, type UserVisibility as bF, type AccessibleVault as bG, type AffectedDocument as bH, BUNDLE_STORE_POLICY as bI, type BuiltInGateName as bJ, type CacheOptions as bK, type CacheStats as bL, type ChangeEvent as bM, type CollectionChangeEvent as bN, type CollectionConflictResolver as bO, type CollectionDescriptor as bP, type CollectionStats as bQ, type Conflict as bR, type ConflictPolicy as bS, type ConflictStrategy as bT, type CrossTierAccessEvent as bU, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as bV, DELEGATIONS_COLLECTION as bW, type DeepPartial as bX, type DeepPartialOrNull as bY, type DelegationToken as bZ, type DeleteManyResult as b_, diff as ba, formatDiff as bb, hashEntry as bc, paddedIndex as bd, parseIndex as be, sha256Hex as bf, type PublicEnvelope as bg, type SealingKeyProvider as bh, type BundleRecipient as bi, type RecipientSealer as bj, type RecipientHint as bk, Vault as bl, type RecoveryEnrollmentInput as bm, type ShamirRecoveryProvider as bn, type MVQueryContext as bo, type RegisteredMV as bp, MaterializedViewRegistry as bq, type MaterializedFromMeta as br, type MaterializedViewOutput as bs, type UnionSource as bt, type UserEnvelope as bu, type GateName as bv, type GatePolicy as bw, type VaultPolicy as bx, type ActiveTier as by, type FactorProof as bz, DictionaryHandle as c, type PassphrasePolicy as c$, type DirtyEntry as c0, type DryRunResult as c1, type DumpSchemaOptions as c2, ELEVATION_AUDIT_COLLECTION as c3, ElevatedHandle as c4, type EnrollAuthenticatorOptions as c5, type EnrollAuthenticatorWrappingDEKsOptions as c6, type EnrollAuthenticatorWrappingKEKOptions as c7, type EnrollRecoveryResult as c8, type ExportCapability as c9, type ListAccessibleVaultsOptions as cA, type ListPageResult as cB, type ListUsersOptions as cC, type LiveUserEnvelope as cD, type LocaleReadOptions as cE, Lru as cF, type LruOptions as cG, type LruStats as cH, MAGIC_LINK_CONTENT_INFO_PREFIX as cI, MAGIC_LINK_GRANTS_COLLECTION as cJ, MAGIC_LINK_KEK_INFO_PREFIX as cK, type MagicLinkGrantPayload as cL, type MagicLinkGrantRecord as cM, type MaterializedViewDescriptor as cN, MemoryRecipientSealer as cO, MemorySealingKeyProvider as cP, NOYDB_BACKUP_VERSION as cQ, NOYDB_FORMAT_VERSION as cR, NOYDB_KEYRING_VERSION as cS, NOYDB_SYNC_VERSION as cT, Noydb as cU, type NoydbEventMap as cV, type NoydbOptions as cW, type OverlayViewDescriptor as cX, PUBLIC_ENVELOPE_FIELDS as cY, type PaperRecoveryDoc as cZ, type PaperRecoveryEntry as c_, type ExportChunk as ca, type ExportFormat as cb, type ExportStreamOptions as cc, type FactorKind as cd, type FactorProofBundle as ce, type FactorRequirement as cf, type FenceDoc as cg, type FenceState as ch, type FieldChange as ci, type FieldDescriptor as cj, type FieldSource as ck, type GhostRecord as cl, type GrantOptions as cm, type GuardViolation as cn, type HistoryConfig as co, type HistoryEntry as cp, INDEXED_STORE_POLICY as cq, type ImportCapability as cr, type InferOutput as cs, type InternalCollectionStats as ct, type IssueDelegationOptions as cu, type IssueMagicLinkGrantOptions as cv, type KeyringAuthenticator as cw, type KeyringAuthenticatorWrappingDEKs as cx, type KeyringAuthenticatorWrappingKEK as cy, type KeyringFile as cz, type DictionaryOptions as d, type SyncTransactionResult as d$, type PassphraseValidationResult as d0, type Permission as d1, type Permissions as d2, type PersistedSchemaKind as d3, type PlaintextTranslatorContext as d4, type PlaintextTranslatorFn as d5, PresenceHandle as d6, type PresencePeer as d7, type PublicEnvelopeField as d8, type PublicEnvelopeSchema as d9, type RotateRecoveryResult as dA, SEALED_PASSPHRASE_RECORD_ID as dB, type SchemaDelta as dC, type SchemaIntrospection as dD, type SealedEnvelope as dE, type SealedPassphrase as dF, type SessionPolicy as dG, type SetPublicEnvelopeInput as dH, type ShamirRecoveryDoc as dI, type ShamirRecoveryEntry as dJ, type SlotRewrapCeremony as dK, type SlotRewrapContext as dL, type StandardSchemaV1 as dM, type StandardSchemaV1Issue as dN, type StandardSchemaV1SyncResult as dO, type StoreAuth as dP, type StoreAuthKind as dQ, type StoreCapabilities as dR, SyncEngine as dS, type SyncMetadata as dT, type SyncPolicy as dU, SyncScheduler as dV, type SyncSchedulerStatus as dW, type SyncStatus as dX, type SyncTarget as dY, type SyncTargetRole as dZ, SyncTransaction as d_, type PublicEnvelopeText as da, type PullMode as db, type PullOptions as dc, type PullPolicy as dd, type PullResult as de, type PushMode as df, type PushOptions as dg, type PushPolicy as dh, type PushResult as di, type PutManyItemOptions as dj, type PutManyOptions as dk, type PutManyResult as dl, type QueryAcrossOptions as dm, type QueryAcrossResult as dn, type QuickUnlockState as dp, QuickUnlockStore as dq, type ReAuthOperation as dr, type RecoverPassphraseInput as ds, type RecoverPassphraseResult as dt, type RecoverUserOptions as du, type RecoveryProof as dv, type ResolvedPublicEnvelopeSchema as dw, type RevokeOptions as dx, type RotatePassphraseInput as dy, type RotateRecoveryOptions as dz, type I18nTextDescriptor as e, recoverUser as e$, type TabChannel as e0, type TabCoordinationOptions as e1, type TabLockManager as e2, type TabPresence as e3, type TabRole as e4, type TierMode as e5, type TranslatorAuditEntry as e6, type TxOp as e7, USER_ENVELOPE_COLLECTION as e8, USER_ENVELOPE_MAX_BYTES as e9, deriveMagicLinkContentKey as eA, enrollAuthenticator as eB, estimateEntropy as eC, evaluateExportCapability as eD, evaluateImportCapability as eE, findAuthenticator as eF, hasExportCapability as eG, hasImportCapability as eH, hasRecoveryEnrolled as eI, isMagicLinkGrantExpired as eJ, isPublicEnvelope as eK, issueDelegation as eL, recoverPassphrase as eM, rotatePassphrase as eN, listMagicLinkGrants as eO, listUsers as eP, listUsersWithEnvelopes as eQ, loadActiveDelegations as eR, loadPaperRecoveryEntries as eS, loadSealedPassphrase as eT, loadShamirRecoveryEntries as eU, magicLinkGrantRecordId as eV, mintPaperRecoveryEntry as eW, mintShamirRecoveryEntry as eX, mintWrappedDeksBlob as eY, parseSealedEnvelope as eZ, readMagicLinkGrantRecord as e_, type Unsubscribe as ea, type UpdateAuthenticatorOptions as eb, type UpdateContext as ec, type UpdateUserOptions as ed, UserApi as ee, type UserEnvelopeCheckGate as ef, UserEnvelopeOversizedError as eg, type UserEnvelopePresented as eh, type UserInfo as ei, type VaultBackup as ej, type VaultPolicyOnDisk as ek, type VaultSchemaSnapshot as el, type VaultSnapshot as em, type WarningRules as en, WeakPassphraseError as eo, type WeakPassphraseReason as ep, type WrappedDeksBlob as eq, type WriteConflict as er, type WriteEvent as es, type WriteHook as et, type WriteQueue as eu, assertStrongPassphrase as ev, buildRecipientKeyringFile as ew, burnPaperRecoveryEntry as ex, createNoydb as ey, createStore as ez, type I18nTextOptions as f, removeAuthenticator as f0, resolveSchema as f1, revokeDelegation as f2, revokeMagicLinkGrant as f3, savePaperRecoveryEntries as f4, saveSealedPassphrase as f5, saveShamirRecoveryEntries as f6, unwrapDeksFromBlob as f7, unwrapDeksFromPaperEntry as f8, unwrapDeksFromShamirEntry as f9, unwrapMagicLinkGrant as fa, validatePassphrase as fb, validatePublicEnvelopeInput as fc, validateSchemaInput as fd, validateSchemaOutput as fe, writeMagicLinkGrant as ff, changeSecret as fg, createOwnerKeyring as fh, ensureCollectionDEK as fi, grant as fj, loadKeyring as fk, persistKeyring as fl, revoke as fm, updateAuthenticator as fn, updateKeyringIdentity as fo, applyI18nLocale as g, dictCollectionName as h, dictKey as i, getAtPath as j, i18nText as k, isDictCollectionName as l, isDictKeyDescriptor as m, isI18nTextDescriptor as n, createEnforcer as o, validateSessionPolicy as p, BLOB_CHUNKS_COLLECTION as q, resolveI18nText as r, setAtPathInPlace as s, BLOB_COLLECTION as t, BLOB_EVICTION_AUDIT_COLLECTION as u, validateI18nTextValue as v, BLOB_INDEX_COLLECTION as w, BLOB_SLOTS_PREFIX as x, BLOB_VERSIONS_PREFIX as y, type BlobEvictionEntry as z };
+export { type ExportBlobsAuditEntry as $, BLOB_COLLECTION as A, type BlobStrategy as B, BLOB_EVICTION_AUDIT_COLLECTION as C, DICT_COLLECTION_PREFIX as D, BLOB_INDEX_COLLECTION as E, BLOB_SLOTS_PREFIX as F, BLOB_VERSIONS_PREFIX as G, type BlobEvictionEntry as H, type I18nStrategy as I, type BlobFieldPolicy as J, type BlobFieldsConfig as K, type Layer as L, type BlobObject as M, type BlobPutOptions as N, type OnMissing as O, PolicyEnforcer as P, type BlobResponseOptions as Q, type ResolveI18nOptions as R, type ScriptWarning as S, BlobSet as T, type BlobStrategyOpenArgs as U, type CompactRunOptions as V, type CompactionContext as W, type CompactionResult as X, DEFAULT_CHUNK_SIZE as Y, EXPORT_AUDIT_COLLECTION as Z, ExportBlobsAbortedError as _, type DictEntry as a, type SyncStrategy as a$, type ExportBlobsHandle as a0, type ExportBlobsOptions as a1, type ExportedBlob as a2, type SlotInfo as a3, type SlotRecord as a4, type VersionRecord as a5, createExportBlobsHandle as a6, runCompaction as a7, type ConsentStrategy as a8, CONSENT_AUDIT_COLLECTION as a9, VaultFrame as aA, type NoydbBundleStore as aB, type RetentionPolicy as aC, type SnapshotPolicy as aD, type SnapshotStrategy as aE, type SnapshotMeta as aF, type SnapshotMode as aG, type TxStrategy as aH, type AmendmentTxOptions as aI, TxCollection as aJ, TxContext as aK, TxVault as aL, runTransaction as aM, type DerivationStrategy as aN, type DerivationContext as aO, type ArrayOutputSpec as aP, DerivationRegistry as aQ, type DerivationStrategyHandle as aR, type DerivedFromMeta as aS, type OutputSpec as aT, type RecordOutputSpec as aU, type MaterializedViewStrategy as aV, type MaterializedViewStrategyHandle as aW, type OverlayedViewStrategy as aX, Collection as aY, OverlayedViewRegistry as aZ, type OverlayedViewStrategyHandle as a_, type ConsentAuditEntry as aa, type ConsentAuditFilter as ab, type ConsentContext as ac, type ConsentOp as ad, loadConsentEntries as ae, writeConsentEntry as af, type PeriodsStrategy as ag, type CarryForwardContext as ah, type ClosePeriodOptions as ai, type OpenPeriodOptions as aj, PERIODS_COLLECTION as ak, type PeriodRecord as al, type ReadOnlyCollection as am, appendPeriodLedgerEntry as an, assertTsWritable as ao, chainAnchor as ap, loadPeriods as aq, validatePeriodName as ar, type GuardStrategy as as, type GuardChange as at, type GuardContext as au, GuardRegistry as av, type GuardStrategyHandle as aw, ReadOnlyVaultFacade as ax, type ShadowStrategy as ay, CollectionFrame as az, type DictKeyDescriptor as b, type CollectionStats as b$, type Role as b0, type UnlockedKeyring as b1, type HistoryStrategy as b2, type NoydbStore as b3, type HistoryOptions as b4, type EncryptedEnvelope as b5, type PruneOptions as b6, type AppendInput as b7, type ChangeType as b8, CollectionInstant as b9, type RegisteredMV as bA, MaterializedViewRegistry as bB, type MaterializedFromMeta as bC, type MaterializedViewOutput as bD, type UnionSource as bE, type UserEnvelope as bF, type GateName as bG, type GatePolicy as bH, type VaultPolicy as bI, type ActiveTier as bJ, type FactorProof as bK, type SchemaUpdateStrategy as bL, type TransformFn as bM, type PersistedSchemaEnvelope as bN, type UpdateDecision as bO, type DirectoryConfig as bP, type UserVisibility as bQ, type AccessibleVault as bR, type AffectedDocument as bS, BUNDLE_STORE_POLICY as bT, type BuiltInGateName as bU, type CacheOptions as bV, type CacheStats as bW, type ChangeEvent as bX, type CollectionChangeEvent as bY, type CollectionConflictResolver as bZ, type CollectionDescriptor as b_, type DiffEntry as ba, type JsonPatch as bb, type JsonPatchOp as bc, type LedgerEntry as bd, LedgerStore as be, type VaultEngine as bf, VaultInstant as bg, type VerifyResult as bh, applyPatch as bi, canonicalJson as bj, computePatch as bk, diff as bl, formatDiff as bm, hashEntry as bn, paddedIndex as bo, parseIndex as bp, sha256Hex as bq, type PublicEnvelope as br, type SealingKeyProvider as bs, type BundleRecipient as bt, type RecipientSealer as bu, type RecipientHint as bv, Vault as bw, type RecoveryEnrollmentInput as bx, type ShamirRecoveryProvider as by, type MVQueryContext as bz, DictionaryHandle as c, NOYDB_BACKUP_VERSION as c$, type Conflict as c0, type ConflictPolicy as c1, type ConflictStrategy as c2, type CrossTierAccessEvent as c3, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as c4, DELEGATIONS_COLLECTION as c5, type DeepPartial as c6, type DeepPartialOrNull as c7, type DelegationToken as c8, type DeleteManyResult as c9, type HistoryEntry as cA, INDEXED_STORE_POLICY as cB, type ImportCapability as cC, type InferOutput as cD, type InternalCollectionStats as cE, type IssueDelegationOptions as cF, type IssueMagicLinkGrantOptions as cG, type KeyringAuthenticator as cH, type KeyringAuthenticatorWrappingDEKs as cI, type KeyringAuthenticatorWrappingKEK as cJ, type KeyringFile as cK, type ListAccessibleVaultsOptions as cL, type ListPageResult as cM, type ListUsersOptions as cN, type LiveUserEnvelope as cO, type LocaleReadOptions as cP, Lru as cQ, type LruOptions as cR, type LruStats as cS, MAGIC_LINK_CONTENT_INFO_PREFIX as cT, MAGIC_LINK_GRANTS_COLLECTION as cU, MAGIC_LINK_KEK_INFO_PREFIX as cV, type MagicLinkGrantPayload as cW, type MagicLinkGrantRecord as cX, type MaterializedViewDescriptor as cY, MemoryRecipientSealer as cZ, MemorySealingKeyProvider as c_, type DerivationDescriptor as ca, type DirtyEntry as cb, type DryRunResult as cc, type DumpSchemaOptions as cd, ELEVATION_AUDIT_COLLECTION as ce, ElevatedHandle as cf, type EnrollAuthenticatorOptions as cg, type EnrollAuthenticatorWrappingDEKsOptions as ch, type EnrollAuthenticatorWrappingKEKOptions as ci, type EnrollRecoveryResult as cj, type ExportCapability as ck, type ExportChunk as cl, type ExportFormat as cm, type ExportStreamOptions as cn, type FactorKind as co, type FactorProofBundle as cp, type FactorRequirement as cq, type FenceDoc as cr, type FenceState as cs, type FieldChange as ct, type FieldDescriptor as cu, type FieldSource as cv, type GhostRecord as cw, type GrantOptions as cx, type GuardViolation as cy, type HistoryConfig as cz, type DictionaryOptions as d, type StoreAuthKind as d$, NOYDB_FORMAT_VERSION as d0, NOYDB_KEYRING_VERSION as d1, NOYDB_SYNC_VERSION as d2, Noydb as d3, type NoydbEventMap as d4, type NoydbOptions as d5, type OverlayViewDescriptor as d6, PUBLIC_ENVELOPE_FIELDS as d7, type PaperRecoveryDoc as d8, type PaperRecoveryEntry as d9, type QuickUnlockState as dA, QuickUnlockStore as dB, type ReAuthOperation as dC, type RecoverPassphraseInput as dD, type RecoverPassphraseResult as dE, type RecoverUserOptions as dF, type RecoveryProof as dG, type ResolvedPublicEnvelopeSchema as dH, type RevokeOptions as dI, type RotatePassphraseInput as dJ, type RotateRecoveryOptions as dK, type RotateRecoveryResult as dL, SEALED_PASSPHRASE_RECORD_ID as dM, type SchemaDelta as dN, type SchemaIntrospection as dO, type SealedEnvelope as dP, type SealedPassphrase as dQ, type SessionPolicy as dR, type SetPublicEnvelopeInput as dS, type ShamirRecoveryDoc as dT, type ShamirRecoveryEntry as dU, type SlotRewrapCeremony as dV, type SlotRewrapContext as dW, type StandardSchemaV1 as dX, type StandardSchemaV1Issue as dY, type StandardSchemaV1SyncResult as dZ, type StoreAuth as d_, type PassphrasePolicy as da, type PassphraseValidationResult as db, type Permission as dc, type Permissions as dd, type PersistedSchemaKind as de, type PlaintextTranslatorContext as df, type PlaintextTranslatorFn as dg, PresenceHandle as dh, type PresencePeer as di, type PublicEnvelopeField as dj, type PublicEnvelopeSchema as dk, type PublicEnvelopeText as dl, type PullMode as dm, type PullOptions as dn, type PullPolicy as dp, type PullResult as dq, type PushMode as dr, type PushOptions as ds, type PushPolicy as dt, type PushResult as du, type PutManyItemOptions as dv, type PutManyOptions as dw, type PutManyResult as dx, type QueryAcrossOptions as dy, type QueryAcrossResult as dz, type I18nMap as e, listUsersWithEnvelopes as e$, type StoreCapabilities as e0, SyncEngine as e1, type SyncMetadata as e2, type SyncPolicy as e3, SyncScheduler as e4, type SyncSchedulerStatus as e5, type SyncStatus as e6, type SyncTarget as e7, type SyncTargetRole as e8, SyncTransaction as e9, type WeakPassphraseReason as eA, type WrappedDeksBlob as eB, type WriteConflict as eC, type WriteEvent as eD, type WriteHook as eE, type WriteQueue as eF, assertStrongPassphrase as eG, buildRecipientKeyringFile as eH, burnPaperRecoveryEntry as eI, createNoydb as eJ, createStore as eK, deriveMagicLinkContentKey as eL, enrollAuthenticator as eM, estimateEntropy as eN, evaluateExportCapability as eO, evaluateImportCapability as eP, findAuthenticator as eQ, hasExportCapability as eR, hasImportCapability as eS, hasRecoveryEnrolled as eT, isMagicLinkGrantExpired as eU, isPublicEnvelope as eV, issueDelegation as eW, recoverPassphrase as eX, rotatePassphrase as eY, listMagicLinkGrants as eZ, listUsers as e_, type SyncTransactionResult as ea, type TabChannel as eb, type TabCoordinationOptions as ec, type TabLockManager as ed, type TabPresence as ee, type TabRole as ef, type TierMode as eg, type TranslatorAuditEntry as eh, type TxOp as ei, USER_ENVELOPE_COLLECTION as ej, USER_ENVELOPE_MAX_BYTES as ek, type Unsubscribe as el, type UpdateAuthenticatorOptions as em, type UpdateContext as en, type UpdateUserOptions as eo, UserApi as ep, type UserEnvelopeCheckGate as eq, UserEnvelopeOversizedError as er, type UserEnvelopePresented as es, type UserInfo as et, type VaultBackup as eu, type VaultPolicyOnDisk as ev, type VaultSchemaSnapshot as ew, type VaultSnapshot as ex, type WarningRules as ey, WeakPassphraseError as ez, type I18nTextDescriptor as f, loadActiveDelegations as f0, loadPaperRecoveryEntries as f1, loadSealedPassphrase as f2, loadShamirRecoveryEntries as f3, magicLinkGrantRecordId as f4, mintPaperRecoveryEntry as f5, mintShamirRecoveryEntry as f6, mintWrappedDeksBlob as f7, parseSealedEnvelope as f8, readMagicLinkGrantRecord as f9, recoverUser as fa, removeAuthenticator as fb, resolveSchema as fc, revokeDelegation as fd, revokeMagicLinkGrant as fe, savePaperRecoveryEntries as ff, saveSealedPassphrase as fg, saveShamirRecoveryEntries as fh, unwrapDeksFromBlob as fi, unwrapDeksFromPaperEntry as fj, unwrapDeksFromShamirEntry as fk, unwrapMagicLinkGrant as fl, validatePassphrase as fm, validatePublicEnvelopeInput as fn, validateSchemaInput as fo, validateSchemaOutput as fp, writeMagicLinkGrant as fq, changeSecret as fr, createOwnerKeyring as fs, ensureCollectionDEK as ft, grant as fu, loadKeyring as fv, persistKeyring as fw, revoke as fx, updateAuthenticator as fy, updateKeyringIdentity as fz, type I18nTextOptions as g, type OnMissingPolicy as h, applyI18nLocale as i, dictCollectionName as j, dictKey as k, enforceScript as l, getAtPath as m, i18nText as n, inferScripts as o, isDictCollectionName as p, isDictKeyDescriptor as q, isI18nTextDescriptor as r, resolveI18nText as s, resolvePolicy as t, setAtPathInPlace as u, validateI18nTextValue as v, type SessionStrategy as w, createEnforcer as x, validateSessionPolicy as y, BLOB_CHUNKS_COLLECTION as z };

package/dist/{ulid-Dt55yn4s.d.ts → ulid-CJ8RzRrm.d.ts}

@@ -1,4 +1,4 @@
-import { bg as PublicEnvelope, bh as SealingKeyProvider, bi as BundleRecipient, bj as RecipientSealer, bk as RecipientHint, bl as Vault } from './types-DT7cXRHq.js';
+import { br as PublicEnvelope, bs as SealingKeyProvider, bt as BundleRecipient, bu as RecipientSealer, bv as RecipientHint, bw as Vault } from './types-Df28QFKb.js';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.

package/dist/{ulid-BkW3mLlz.d.cts → ulid-Drr7ykr6.d.cts}

@@ -1,4 +1,4 @@
-import { bg as PublicEnvelope, bh as SealingKeyProvider, bi as BundleRecipient, bj as RecipientSealer, bk as RecipientHint, bl as Vault } from './types-r-y7TIqj.cjs';
+import { br as PublicEnvelope, bs as SealingKeyProvider, bt as BundleRecipient, bu as RecipientSealer, bv as RecipientHint, bw as Vault } from './types-DyXYr8rE.cjs';
 
 /**
  * `.noydb` container format — byte layout, header schema, validators.