@noy-db/hub 0.3.0-pre.1 → 0.3.0-pre.10

package/dist/{index-BF9_96A5.d.ts → index-qwuNvO2B.d.ts}

@@ -1,9 +1,30 @@
-import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, ex as CargoStrategy } from './index-BzUo1B6n.js';
+import { iA as RetrieveHit, c_ as NoydbStore, dn as SealingKeyProvider, c8 as UnlockedKeyring, eZ as CargoStrategy } from './index-DjWbxsjb.js';
 import './ulid-DRH25k3y.js';
 import './index-B9QdHytu.js';
-import './kernel/index.js';
-import './describe-aBkJR2sd.js';
-import './vault-diff-B5fYNBL7.js';
+import './vault-diff-Z2DUayMe.js';
+
+/**
+ * L3 — Reciprocal Rank Fusion. Merges N ranked `RetrieveHit` lists into
+ * one, scoring each id by Σ 1/(k + rank) across the lists it appears in. Pure,
+ * deterministic, no I/O — which is why it serves BOTH hybrid lexical⊕semantic
+ * fusion AND klum-db's cross-vault federation (the lists are per-vault). The
+ * fused `score` is the RRF score, NOT BM25 or cosine.
+ */
+
+interface FuseOptions {
+    /** Only 'rrf' in v1 (default). */
+    readonly strategy?: 'rrf';
+    /** RRF constant; larger flattens the rank weighting. Default 60. */
+    readonly k?: number;
+    /** Truncate the fused output to this many hits. */
+    readonly limit?: number;
+}
+/**
+ * Callers must supply hits with `rank >= 1` (the retrieve contract guarantees
+ * it; a federation caller passing `rank: 0` with `k: 0` would divide by zero).
+ * Doc-only note — no runtime guard; rank ≥ 1 is the retrieve contract.
+ */
+declare function fuseRetrieval<T>(lists: ReadonlyArray<ReadonlyArray<RetrieveHit<T>>>, opts?: FuseOptions): RetrieveHit<T>[];
 
 /**
  * Hub-core constants that must be referenceable without pulling any
@@ -120,4 +141,4 @@ declare function isDeedVault(store: NoydbStore, vault: string): Promise<boolean>
 
 declare function withCargo(): CargoStrategy;
 
-export { DEED_RECORD_ID as D, STATE_VAULT_NAME as S, USER_ENVELOPE_COLLECTION as U, type DeedMarker as a, USER_ENVELOPE_MAX_BYTES as b, createDeedOwner as c, isDeedVault as i, loadDeedMarker as l, withCargo as w };
+export { DEED_RECORD_ID as D, type FuseOptions as F, STATE_VAULT_NAME as S, USER_ENVELOPE_COLLECTION as U, type DeedMarker as a, USER_ENVELOPE_MAX_BYTES as b, createDeedOwner as c, fuseRetrieval as f, isDeedVault as i, loadDeedMarker as l, withCargo as w };

package/dist/index.d.ts

@@ -1,25 +1,25 @@
-import { e0 as SearchStrategy, e1 as SequenceStrategy, e2 as CustodyStrategy, cV as EncryptedEnvelope, e3 as SchemaUpdateStrategy, e4 as TransformFn, cT as NoydbStore, e5 as PersistedSchemaEnvelope, dj as EnclaveKey, e6 as UpdateDecision, dL as PublicEnvelope, e7 as UserEnvelope, e8 as VaultUserApi, e9 as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, ea as DeepPartialOrNull, eb as UserEnvelopePresented, ec as Unsubscribe, ed as LiveUserEnvelope, ee as RoundingMode, cF as UnlockedKeyring, ef as VaultPolicy, eg as ActiveTier, eh as FactorProof, ei as GateName, ej as PolicyDenyReason, ek as GatePolicy } from './index-BzUo1B6n.js';
-export { el as AccessibleVault, em as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, en as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eo as ArchivePolicy, ep as ArchiveResult, eq as ArchiveRunOptions, er as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, es as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, et as BuiltInGateName, dn as BundleIntegrityError, dM as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eu as CacheOptions, ev as CacheStats, ew as CargoNotEnabledError, ex as CargoStrategy, ey as ChangeEvent, cY as ChangeType, ez as Clause, bz as ClosePeriodOptions, ci as Collection, eA as CollectionChangeEvent, eB as CollectionConfig, eC as CollectionConflictResolver, eD as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eE as CollectionStats, eF as ComputedFieldError, eG as ComputedFields, eH as ComputedFn, eI as Conflict, eJ as ConflictError, eK as ConflictPolicy, eL as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, eM as CrossJoinSourceUnknownError, eN as CrossJoinTooLargeError, eO as CrossTierAccessEvent, eP as CustodyApi, eQ as CustodyHost, eR as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, eS as DEFAULT_CROSS_JOIN_MAX_ROWS, eT as DEFAULT_JOIN_MAX_ROWS, eU as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, eV as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, eW as DanglingReferenceError, eX as DataResidencyError, eY as DebugPlaintextError, eZ as DebugReservedFieldError, e_ as DecryptionError, e$ as DeepPartial, f0 as DeferredNumberingConfig, f1 as DelegationTargetMissingError, f2 as DelegationToken, f3 as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, f4 as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, f5 as DirectoryDisabledError, f6 as DirtyEntry, f7 as DryRunResult, f8 as DumpSchemaOptions, f9 as ELEVATION_AUDIT_COLLECTION, fa as ElevatedHandle, fb as ElevationExpiredError, fc as EmbeddingDescriptor, fd as EmbeddingDimMismatchError, fe as EmbeddingModelMismatchError, ff as EnclaveNotSupportedError, fg as EnrollAuthenticatorOptions, fh as EnrollAuthenticatorWrappingDEKsOptions, fi as EnrollAuthenticatorWrappingKEKOptions, fj as EnrollRecoveryResult, fk as ExportCapability, fl as ExportCapabilityError, fm as ExportChunk, cG as ExportFormat, fn as ExportStreamOptions, fo as FactorKind, fp as FactorProofBundle, fq as FactorRequirement, fr as FenceDoc, fs as FenceState, ft as FieldChange, fu as FieldClause, fv as FieldDescriptor, bN as FieldFrozenError, fw as FieldSource, fx as FilenameSanitizationError, fy as FilterClause, fz as ForgetStrategyNotConfiguredError, fA as FormattedSequenceHandle, fB as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fC as GhostRecord, fD as GrantCustodianOptions, fE as GrantOptions, fF as GroupCardinalityError, fG as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, fH as GuardViolation, az as HashIndex, fI as HistoryConfig, fJ as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, fK as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, fL as ImportCapability, fM as ImportCapabilityError, aB as IndexDef, fN as IndexFieldName, fO as IndexRequiredError, fP as IndexWriteFailureError, fQ as InferOutput, fR as InternalCollectionStats, fS as InvalidKeyError, bR as InvariantError, fT as IssueDelegationOptions, fU as IssueMagicLinkGrantOptions, fV as JoinContext, fW as JoinLeg, fX as JoinStrategy, fY as JoinTooLargeError, fZ as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, f_ as KeyringAuthenticator, f$ as KeyringAuthenticatorWrappingDEKs, g0 as KeyringAuthenticatorWrappingKEK, g1 as KeyringCorruptError, g2 as KeyringExpiredError, g3 as KeyringFile, L as Layer, g4 as LedgerContentionError, d0 as LedgerStore, g5 as LiberateOptions, g6 as LiberateResult, g7 as LinkEndpointError, g8 as LinkIntegrityError, g9 as LinkOnDelete, ga as LinkRow, gb as LinkSetHandle, gc as LinkSpec, gd as ListAccessibleVaultsOptions, ge as ListPageResult, gf as ListUsersOptions, a_ as LiveAggregation, gg as LiveQuery, gh as LiveUpstream, j as LocaleNotSpecifiedError, gi as LocaleReadOptions, gj as Lru, gk as LruOptions, gl as LruStats, bi as LwwMapState, gm as MAGIC_LINK_CONTENT_INFO_PREFIX, gn as MAGIC_LINK_GRANTS_COLLECTION, go as MAGIC_LINK_KEK_INFO_PREFIX, gp as MagicLinkGrantPayload, gq as MagicLinkGrantRecord, gr as ManagedRecoveryNotEnrolledError, dU as MaterializedFromMeta, dV as MaterializedViewConfigError, dW as MaterializedViewCycleError, gs as MaterializedViewDescriptor, dX as MaterializedViewOutput, dY as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, dZ as MaterializedViewTooLargeError, gt as MemoryRecipientSealer, gu as MemorySealingKeyProvider, gv as MigrationRequiredError, M as MissingTranslationError, gw as MoneyCurrencyError, gx as MoneyDescriptor, gy as MoneyOptions, gz as MoneyOptionsFixed, gA as MoneyOptionsMulti, gB as MoneyPrecisionError, gC as MoneyString, gD as MoneyUnsupportedError, gE as NOYDB_BACKUP_VERSION, gF as NOYDB_FORMAT_VERSION, gG as NOYDB_KEYRING_VERSION, gH as NOYDB_SYNC_VERSION, gI as NO_CARGO, gJ as NO_CUSTODY, gK as NO_SEARCH, gL as NO_SEQUENCE, gM as NetworkError, gN as NextOptions, gO as NoAccessError, gP as NonAdditiveSchemaChangeError, gQ as NotFoundError, gR as Noydb, gS as NoydbBundleStore, gT as NoydbError, gU as NoydbEventMap, gV as NoydbOptions, bX as NoydbPodStore, gW as NumberingAssignment, gX as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, gY as Operator, gZ as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, g_ as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, g$ as POD_STORE_POLICY, h0 as PUBLIC_ENVELOPE_FIELDS, h1 as PaperRecoveryDoc, h2 as PaperRecoveryEntry, h3 as PassphrasePolicy, h4 as PassphraseValidationResult, h5 as PathEscapeError, h6 as PeriodClosedError, bC as PeriodRecord, h7 as Permission, h8 as PermissionDeniedError, h9 as Permissions, ha as PersistedSchemaKind, hb as PlaintextTranslatorContext, hc as PlaintextTranslatorFn, du as PodVersionConflictError, hd as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, he as PresenceHandle, hf as PresencePeer, hg as PrivilegeEscalationError, cW as PruneOptions, hh as PublicEnvelopeField, hi as PublicEnvelopeSchema, hj as PublicEnvelopeText, hk as PullMode, hl as PullOptions, hm as PullPolicy, hn as PullResult, ho as PushMode, hp as PushOptions, hq as PushPolicy, hr as PushResult, hs as PutManyItemOptions, ht as PutManyOptions, hu as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, dS as Query, hv as QueryAcrossOptions, hw as QueryAcrossResult, hx as QueryField, hy as QueryPlan, hz as QuerySource, hA as QuickUnlockState, hB as QuickUnlockStore, hC as QuiesceTimeoutError, hD as ReAuthOperation, hE as ReadOnlyAtInstantError, hF as ReadOnlyError, hG as ReadOnlyFrameError, dO as RecipientHint, dN as RecipientSealer, hH as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, hI as RecoverPassphraseInput, hJ as RecoverPassphraseResult, hK as RecoverUserOptions, hL as RecoveryNotEnrolledError, hM as RecoveryProfileNotImplementedError, hN as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, hO as RefDescriptor, hP as RefIntegrityError, hQ as RefMode, hR as RefRegistry, hS as RefScopeError, hT as RefViolation, R as ReservedCollectionNameError, hU as ReservedVaultNameError, l as ResolveI18nOptions, hV as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, hW as RetrieveHit, hX as RetrieveOptions, hY as RevokeOptions, bj as RgaState, cR as Role, hZ as RotatePassphraseInput, h_ as RotateRecoveryOptions, h$ as RotateRecoveryResult, i0 as SEALED_PASSPHRASE_RECORD_ID, i1 as ScanBuilder, i2 as ScanPageProvider, i3 as SchemaDelta, i4 as SchemaFenceError, i5 as SchemaIntrospection, i6 as SchemaLockedError, i7 as SchemaUpdateError, i8 as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, i9 as Sealed, ia as SealedEnvelope, ib as SealedHandle, ic as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, id as SealedView, dg as SealingKeyProvider, ie as SearchEntry, ig as SearchNotEnabledError, ih as SearchOptions, ii as SearchResult, ij as SequenceContentionError, ik as SequenceHandle, il as SequenceNotEnabledError, im as SequenceOfflineError, io as SequenceOptions, ip as SequenceStore, iq as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, ir as SessionPolicy, N as SessionPolicyError, is as SetPublicEnvelopeInput, it as ShamirRecoveryDoc, iu as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iv as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iw as SlotRewrapCeremony, ix as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iy as StandardSchemaV1, iz as StandardSchemaV1Issue, iA as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iB as StoreAuth, iC as StoreAuthKind, iD as StoreCapabilities, iE as StoreCapabilityError, iF as StoreTime, iG as SyncEngine, iH as SyncMetadata, iI as SyncPolicy, iJ as SyncScheduler, iK as SyncSchedulerStatus, iL as SyncStatus, iM as SyncTarget, iN as SyncTargetRole, iO as SyncTransaction, iP as SyncTransactionResult, iQ as TabChannel, iR as TabCoordinationOptions, iS as TabLockManager, iT as TabPresence, iU as TabRole, iV as TamperedError, iW as TierDemoteDeniedError, iX as TierMode, iY as TierNotGrantedError, iZ as TiersNotEnabledError, i_ as TransactionInvariant, i$ as TranslatorAuditEntry, T as TranslatorNotConfiguredError, j0 as TxCollection, dP as TxContext, j1 as TxOp, j2 as TxVault, d_ as UnionArmJoin, d$ as UnionSource, j3 as UniqueConstraintError, U as UnknownDictCodeError, j4 as UnknownShardError, j5 as UnsupportedIndexOptionError, j6 as UpdateAuthenticatorOptions, j7 as UpdateContext, j8 as UpdateUserOptions, j9 as UserEnvelopeCheckGate, ja as UserEnvelopeOversizedError, jb as UserInfo, jc as ValidationError, V as Vault, jd as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, je as VaultPolicyOnDisk, jf as VaultSchemaSnapshot, jg as VaultSnapshot, jh as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, ji as WarningRules, jj as WeakPassphraseError, jk as WeakPassphraseReason, jl as WithArchiveOptions, jm as WithdrawalRequestError, jn as WrappedDeksBlob, jo as WriteConflict, jp as WriteQueue, bk as YjsState, jq as aesGcmOpen, p as applyI18nLocale, jr as applyJoins, d4 as applyPatch, js as approveWithdrawal, jt as asMoney, ju as assertStrongPassphrase, b2 as avg, jv as base64ToBuffer, jw as bufferToBase64, jx as buildLiveQuery, jy as buildRecipientKeyringFile, jz as burnPaperRecoveryEntry, jA as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jB as createNoydb, jC as createStore, jD as decryptBytes, jE as decryptDeterministic, jF as deriveMagicLinkContentKey, jG as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, jH as encryptBytes, jI as encryptDeterministic, s as enforceScript, jJ as enrollAuthenticator, jK as estimateEntropy, jL as evalComputedFields, jM as evaluateClause, jN as evaluateExportCapability, jO as evaluateFieldClause, jP as evaluateImportCapability, jQ as executePlan, jR as exportAccessibleData, jS as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, jT as hasExportCapability, jU as hasImportCapability, jV as hasRecoveryEnrolled, u as i18nText, v as inferScripts, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, jW as isLinkCollectionName, jX as isMagicLinkGrantExpired, jY as isMoneyDescriptor, jZ as isMoneyString, j_ as isPublicEnvelope, j$ as isRefArray, z as isStaticDictDescriptor, k0 as issueDelegation, k1 as keyringRecoverPassphrase, k2 as keyringRotatePassphrase, k3 as liberateVault, k4 as listMagicLinkGrants, k5 as listUsers, k6 as listUsersWithEnvelopes, k7 as listWithdrawalRequests, k8 as loadActiveDelegations, k9 as loadPaperRecoveryEntries, ka as loadSealedPassphrase, kb as loadShamirRecoveryEntries, kc as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, kd as mintPaperRecoveryEntry, ke as mintShamirRecoveryEntry, kf as mintWrappedDeksBlob, kg as money, b8 as moneyMax, b9 as moneyMin, kh as moneyNumber, ba as moneySum, ki as parseRsaOaepTlv, kj as parseSealedEnvelope, kk as readMagicLinkGrantRecord, kl as readPath, km as recoverUser, bb as reduceRecords, bc as reducerBuilder, kn as ref, ko as refArray, kp as rejectWithdrawal, kq as removeAuthenticator, kr as requestWithdrawal, ks as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kt as resolvePublicEnvelopeSchema, ku as resolveSequenceKey, kv as revokeDelegation, kw as revokeMagicLinkGrant, kx as runTransaction, ky as savePaperRecoveryEntries, kz as saveSealedPassphrase, kA as saveShamirRecoveryEntries, kB as sealRsaOaepTlv, E as staticDict, be as sum, kC as unwrapDeksFromBlob, kD as unwrapDeksFromPaperEntry, kE as unwrapDeksFromShamirEntry, kF as unwrapMagicLinkGrant, G as validateI18nTextValue, kG as validatePassphrase, kH as validatePublicEnvelopeInput, kI as validateSchemaInput, kJ as validateSchemaOutput, W as validateSessionPolicy, kK as withArchive, kL as withDeferredNumbering, kM as withdrawAccessibleData, kN as writeMagicLinkGrant } from './index-BzUo1B6n.js';
-export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-CGhw37_E.js';
+import { ep as SearchStrategy, eq as SequenceStrategy, er as ViaDescriptor, es as CustodyStrategy, d0 as EncryptedEnvelope, et as CollectionDescription, eu as SchemaUpdateStrategy, ev as TransformFn, c_ as NoydbStore, ew as PersistedSchemaEnvelope, dr as EnclaveKey, ex as UpdateDecision, ey as NoydbError, e7 as PublicEnvelope, ez as UserEnvelope, eA as VaultUserApi, eB as UserApiDeps, c1 as RequestWithdrawalOptions, c2 as RequestWithdrawalResult, c6 as WithdrawalRequestStatus, c5 as WithdrawalRequest, bY as ApproveWithdrawalOptions, c4 as WithdrawResult, c0 as RejectWithdrawalOptions, c3 as WithdrawAccessibleOptions, bZ as ExportAccessibleOptions, eC as DeepPartialOrNull, eD as UserEnvelopePresented, eE as Unsubscribe, eF as LiveUserEnvelope, eG as RoundingMode, c8 as UnlockedKeyring, eH as VaultPolicy, eI as ActiveTier, eJ as FactorProof, eK as GateName, eL as PolicyDenyReason, eM as GatePolicy } from './index-DjWbxsjb.js';
+export { eN as AccessibleVault, eO as AffectedDocument, aa as AggregateResult, ab as AggregateSpec, ac as Aggregation, ad as AggregationUpstream, eP as AlreadyElevatedError, bf as AmendmentForbiddenError, d2 as AppendInput, eQ as ArchivePolicy, eR as ArchiveResult, eS as ArchiveRunOptions, eT as ArchiveStrategy, bz as ArrayOutputSpec, dG as AttestationError, dH as AttestationNotEnabledError, e as BLOB_CHUNKS_COLLECTION, f as BLOB_COLLECTION, h as BLOB_INDEX_COLLECTION, i as BLOB_SLOTS_PREFIX, j as BLOB_VERSIONS_PREFIX, eU as BUNDLE_STORE_POLICY, dt as BackupCorruptedError, du as BackupLedgerError, n as BlobObject, o as BlobPutOptions, p as BlobResponseOptions, q as BlobSet, eV as BuiltInGateName, dv as BundleIntegrityError, e8 as BundleRecipient, dw as BundleSealMismatchError, dx as BundleVersionConflictError, aN as CONSENT_AUDIT_COLLECTION, eW as CacheOptions, eX as CacheStats, eY as CargoNotEnabledError, eZ as CargoStrategy, e_ as ChangeEvent, d3 as ChangeType, dU as ClassifiedConfigError, dV as ClassifiedEntry, dS as ClassifiedFieldSpec, dW as ClassifiedGroup, dX as ClassifiedList, e$ as ClassifiedNotEnabledError, dZ as ClassifiedRevealError, d$ as ClassifiedRotationError, e0 as ClassifiedStorage, e1 as ClassifiedVerdict, e3 as ClassifiedVerifyError, f0 as Clause, aW as ClosePeriodOptions, bN as Collection, f1 as CollectionChangeEvent, f2 as CollectionConfig, f3 as CollectionConflictResolver, f4 as CollectionDescriptor, bo as CollectionFrame, U as CollectionIndexes, d4 as CollectionInstant, f5 as CollectionMeta, f6 as CollectionStats, f7 as ComputedFieldEntry, f8 as ComputedFieldError, f9 as ComputedFields, fa as ComputedFn, fb as Conflict, fc as ConflictError, fd as ConflictPolicy, fe as ConflictStrategy, aO as ConsentAuditEntry, aP as ConsentAuditFilter, aQ as ConsentContext, aR as ConsentOp, aD as CrdtMode, aE as CrdtState, ff as CrossJoinSourceUnknownError, fg as CrossJoinTooLargeError, fh as CrossTierAccessEvent, fi as CustodyApi, fj as CustodyHost, fk as CustodyNotEnabledError, D as DEFAULT_CHUNK_SIZE, fl as DEFAULT_CROSS_JOIN_MAX_ROWS, fm as DEFAULT_JOIN_MAX_ROWS, fn as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, fo as DELEGATIONS_COLLECTION, cl as DICT_COLLECTION_PREFIX, fp as DanglingReferenceError, fq as DataResidencyError, fr as DebugPlaintextError, fs as DebugReservedFieldError, ft as DecryptionError, fu as DeepPartial, fv as DeferredNumberingConfig, fw as DelegationTargetMissingError, fx as DelegationToken, fy as DeleteManyResult, bA as DerivationCapExceededError, bB as DerivationCycleError, bC as DerivationDepthError, fz as DerivationDescriptor, bD as DerivationOutputShapeError, bE as DerivationOutputUnknownError, fA as DerivationSkippedFrozen, bx as DerivationStrategy, bG as DerivationStrategyHandle, bH as DerivedFromMeta, fB as DescribeOptions, fC as DescribedField, cm as DictEntry, cn as DictKeyDescriptor, co as DictKeyInUseError, cp as DictKeyMissingError, cq as DictionaryHandle, cr as DictionaryOptions, c7 as DiffEntry, fD as DirectoryDisabledError, fE as DirtyEntry, fF as DryRunResult, fG as DumpSchemaOptions, fH as ELEVATION_AUDIT_COLLECTION, fI as ElevatedHandle, fJ as ElevationExpiredError, fK as EmbeddingDescriptor, fL as EmbeddingDimMismatchError, fM as EmbeddingModelMismatchError, fN as EnclaveNotSupportedError, fO as EnrollAuthenticatorOptions, fP as EnrollAuthenticatorWrappingDEKsOptions, fQ as EnrollAuthenticatorWrappingKEKOptions, fR as EnrollRecoveryResult, fS as ErasureEnforcement, fT as ExportCapability, fU as ExportCapabilityError, fV as ExportChunk, c9 as ExportFormat, fW as ExportStreamOptions, fX as FactorKind, fY as FactorProofBundle, fZ as FactorRequirement, f_ as FenceDoc, f$ as FenceState, g0 as FieldChange, g1 as FieldClause, g2 as FieldDescriptor, bg as FieldFrozenError, g3 as FieldMeta, g4 as FieldNotQueryableError, g5 as FieldSource, g6 as FilenameSanitizationError, g7 as FilterClause, g8 as ForgetStrategyNotConfiguredError, g9 as FormattedSequenceHandle, ga as FrozenSnapshotRef, ae as GROUPBY_MAX_CARDINALITY, af as GROUPBY_WARN_CARDINALITY, gb as GhostRecord, gc as GrantCustodianOptions, gd as GrantOptions, ge as GroupCardinalityError, gf as GroupClause, ag as GroupedAggregation, ah as GroupedQuery, ai as GroupedQueryN, aj as GroupedRow, ak as GroupedRowN, bd as GuardChange, be as GuardContext, bc as GuardStrategy, bi as GuardStrategyHandle, gg as GuardViolation, W as HashIndex, gh as HistoryConfig, gi as HistoryEntry, c$ as HistoryOptions, cs as I18nMap, ct as I18nTextDescriptor, cu as I18nTextOptions, gj as INDEXED_STORE_POLICY, bj as IllegalTransitionError, gk as ImportCapability, gl as ImportCapabilityError, Y as IndexDef, gm as IndexFieldName, gn as IndexRequiredError, go as IndexWriteFailureError, gp as InferOutput, gq as InternalCollectionStats, gr as InvalidKeyError, bk as InvariantError, gs as IssueDelegationOptions, gt as IssueMagicLinkGrantOptions, gu as JoinContext, gv as JoinLeg, gw as JoinStrategy, gx as JoinTooLargeError, gy as JoinableSource, d5 as JsonPatch, d6 as JsonPatchOp, gz as KeyringAuthenticator, gA as KeyringAuthenticatorWrappingDEKs, gB as KeyringAuthenticatorWrappingKEK, gC as KeyringCorruptError, gD as KeyringExpiredError, gE as KeyringFile, cv as Layer, gF as LazyStrategy, gG as LedgerContentionError, d7 as LedgerStore, gH as LiberateOptions, gI as LiberateResult, gJ as LinkIntegrityError, gK as LinkOnDelete, gL as LinkRow, gM as LinkSetHandle, gN as LinkSpec, gO as ListAccessibleVaultsOptions, gP as ListPageResult, gQ as ListUsersOptions, al as LiveAggregation, gR as LiveQuery, gS as LiveUpstream, cw as LocaleNotSpecifiedError, gT as LocaleReadOptions, gU as LookupDescriptor, gV as Lru, gW as LruOptions, gX as LruStats, aF as LwwMapState, gY as MAGIC_LINK_CONTENT_INFO_PREFIX, gZ as MAGIC_LINK_GRANTS_COLLECTION, g_ as MAGIC_LINK_KEK_INFO_PREFIX, g$ as MagicLinkGrantPayload, h0 as MagicLinkGrantRecord, h1 as ManagedRecoveryNotEnrolledError, eh as MaterializedFromMeta, ei as MaterializedViewConfigError, ej as MaterializedViewCycleError, h2 as MaterializedViewDescriptor, ek as MaterializedViewOutput, el as MaterializedViewSourceUnknownError, bK as MaterializedViewStrategy, bL as MaterializedViewStrategyHandle, em as MaterializedViewTooLargeError, h3 as MemoryRecipientSealer, h4 as MemorySealingKeyProvider, h5 as MigrationRequiredError, cx as MissingTranslationError, h6 as MoneyCurrencyError, h7 as MoneyDescriptor, h8 as MoneyOptions, h9 as MoneyOptionsFixed, ha as MoneyOptionsMulti, hb as MoneyPrecisionError, hc as MoneyString, hd as MoneyUnsupportedError, he as NOYDB_BACKUP_VERSION, hf as NOYDB_FORMAT_VERSION, hg as NOYDB_KEYRING_VERSION, hh as NOYDB_SYNC_VERSION, hi as NO_CARGO, hj as NO_CUSTODY, hk as NO_SEARCH, hl as NO_SEQUENCE, hm as NO_TEAM, hn as NetworkError, ho as NextOptions, hp as NoAccessError, hq as NonAdditiveSchemaChangeError, hr as NotFoundError, hs as Noydb, ht as NoydbBundleStore, hu as NoydbEventMap, hv as NoydbOptions, bq as NoydbPodStore, hw as NumberingAssignment, hx as NumberingUncertaintyError, O as ObjectListEntry, A as ObjectMeta, F as ObjectProjection, G as ObjectUrlOptions, hy as OnDelete, cy as OnMissing, cz as OnMissingPolicy, aX as OpenPeriodOptions, hz as Operator, hA as OrderBy, bI as OutputSpec, bO as OverlayBaseIsVirtualError, bP as OverlayCollectionUnavailableError, bQ as OverlayFieldMergeMode, bR as OverlayFieldMergeRule, bS as OverlayIdMismatchError, bT as OverlayNameCollisionError, hB as OverlayViewDescriptor, bM as OverlayedViewStrategy, bV as OverlayedViewStrategyHandle, aY as PERIODS_COLLECTION, hC as POD_STORE_POLICY, hD as PUBLIC_ENVELOPE_FIELDS, hE as PaperRecoveryDoc, hF as PaperRecoveryEntry, hG as PassphrasePolicy, hH as PassphraseValidationResult, hI as PathEscapeError, hJ as PeriodClosedError, b2 as PeriodRecord, hK as Permission, hL as PermissionDeniedError, hM as Permissions, hN as PersistedSchemaKind, hO as PlaintextTranslatorContext, hP as PlaintextTranslatorFn, dB as PodVersionConflictError, hQ as PolicyDeniedError, P as PolicyEnforcer, b$ as PortabilityNotEnabledError, hR as PresenceHandle, hS as PresencePeer, hT as PrivilegeEscalationError, d1 as PruneOptions, hU as PublicEnvelopeField, hV as PublicEnvelopeSchema, hW as PublicEnvelopeText, hX as PullMode, hY as PullOptions, hZ as PullPolicy, h_ as PullResult, h$ as PushMode, i0 as PushOptions, i1 as PushPolicy, i2 as PushResult, i3 as PutManyItemOptions, i4 as PutManyOptions, i5 as PutManyResult, H as PutObjectOptions, I as PutUrlOptions, ef as Query, i6 as QueryAcrossOptions, i7 as QueryAcrossResult, i8 as QueryField, i9 as QueryPlan, ia as QuerySource, ib as QuickUnlockState, ic as QuickUnlockStore, id as QuiesceTimeoutError, ie as ReAuthOperation, ig as ReadOnlyAtInstantError, ih as ReadOnlyError, ii as ReadOnlyFrameError, ea as RecipientHint, e9 as RecipientSealer, ij as RecordCekNotFoundError, bm as RecordLockedError, bJ as RecordOutputSpec, ik as RecoverPassphraseInput, il as RecoverPassphraseResult, im as RecoverUserOptions, io as RecoveryNotEnrolledError, ip as RecoveryProfileNotImplementedError, iq as RecoveryProof, am as Reducer, an as ReducerBuilder, ao as ReducerOptions, ir as RefDescriptor, is as RefIntegrityError, it as RefMode, iu as RefRegistry, iv as RefScopeError, iw as RefViolation, cA as ReservedCollectionNameError, ix as ReservedVaultNameError, cB as ResolveI18nOptions, iy as ResolvedPublicEnvelopeSchema, iz as RestrictRefUnresolvableError, br as RetentionPolicy, iA as RetrieveHit, iB as RetrieveOptions, iC as RevokeOptions, aG as RgaState, cY as Role, iD as RotatePassphraseInput, iE as RotateRecoveryOptions, iF as RotateRecoveryResult, iG as SEALED_PASSPHRASE_RECORD_ID, iH as ScanBuilder, iI as ScanPageProvider, iJ as SchemaDelta, iK as SchemaFenceError, iL as SchemaIntrospection, iM as SchemaLockedError, iN as SchemaUpdateError, iO as SchemaValidationError, cC as ScriptViolationError, cD as ScriptWarning, iP as Sealed, iQ as SealedEnvelope, iR as SealedHandle, iS as SealedPassphrase, dj as SealedRecordExpiredError, dk as SealedRecordMismatchError, dl as SealedRecordNotEnabledError, iT as SealedView, dn as SealingKeyProvider, iU as SearchEntry, iV as SearchNotEnabledError, iW as SearchOptions, iX as SearchResult, iY as SemanticType, iZ as SequenceContentionError, i_ as SequenceHandle, i$ as SequenceNotEnabledError, j0 as SequenceOfflineError, j1 as SequenceOptions, j2 as SequenceStore, j3 as SequenceStoreOptions, a as SessionExpiredError, b as SessionNotFoundError, j4 as SessionPolicy, c as SessionPolicyError, j5 as SetPublicEnvelopeInput, j6 as ShamirRecoveryDoc, j7 as ShamirRecoveryEntry, dq as ShamirRecoveryProvider, j8 as ShardProvisioningError, J as SlotInfo, K as SlotRecord, j9 as SlotRewrapCeremony, ja as SlotRewrapContext, bu as SnapshotMeta, bw as SnapshotNotFoundError, jb as StandardSchemaV1, jc as StandardSchemaV1Issue, jd as StandardSchemaV1SyncResult, cE as StaticDictDescriptor, cF as StaticDictReadonlyError, je as StoreAuth, jf as StoreAuthKind, jg as StoreCapabilities, jh as StoreCapabilityError, ji as StoreTime, jj as SyncEngine, jk as SyncMetadata, jl as SyncPolicy, jm as SyncScheduler, jn as SyncSchedulerStatus, jo as SyncStatus, jp as SyncTarget, jq as SyncTargetRole, jr as SyncTransaction, js as SyncTransactionResult, jt as TabChannel, ju as TabCoordinationOptions, jv as TabLockManager, jw as TabPresence, jx as TabRole, jy as TamperedError, jz as TeamNotEnabledError, jA as TeamStrategy, jB as TierDemoteDeniedError, jC as TierMode, jD as TierNotGrantedError, jE as TiersNotEnabledError, jF as TransactionInvariant, jG as TranslatorAuditEntry, cG as TranslatorNotConfiguredError, jH as TxCollection, eb as TxContext, jI as TxOp, jJ as TxVault, en as UnionArmJoin, eo as UnionSource, jK as UniqueConstraintError, cH as UnknownDictCodeError, jL as UnknownLookupKeyError, jM as UnknownShardError, jN as UnsupportedIndexOptionError, jO as UpdateAuthenticatorOptions, jP as UpdateContext, jQ as UpdateUserOptions, jR as UserEnvelopeCheckGate, jS as UserEnvelopeOversizedError, jT as UserInfo, jU as ValidationError, V as Vault, jV as VaultBackup, d8 as VaultEngine, bp as VaultFrame, d9 as VaultInstant, jW as VaultMeta, jX as VaultPolicyOnDisk, jY as VaultSchemaSnapshot, jZ as VaultSnapshot, j_ as VaultTemplateNotFoundError, da as VerifyResult, L as VersionRecord, j$ as ViaFieldSpec, k0 as ViaPosture, k1 as Vocabulary, k2 as WarningRules, k3 as WeakPassphraseError, k4 as WeakPassphraseReason, k5 as WithArchiveOptions, k6 as WithdrawalRequestError, k7 as WrappedDeksBlob, k8 as WriteConflict, k9 as WriteQueue, aH as YjsState, ka as aesGcmOpen, cI as applyI18nLocale, kb as applyJoins, db as applyPatch, kc as approveWithdrawal, kd as asMoney, ke as assertStrongPassphrase, ap as avg, kf as base64ToBuffer, kg as bufferToBase64, kh as buildLiveQuery, ki as buildRecipientKeyringFile, kj as burnPaperRecoveryEntry, kk as compileSequenceFormat, dc as computePatch, ar as count, d as createEnforcer, kl as createNoydb, km as createStore, kn as decryptBytes, ko as decryptDeterministic, kp as deriveMagicLinkContentKey, kq as derivePresenceKey, kr as dict, cJ as dictCollectionName, cK as dictKey, dd as diff, ks as encryptBytes, kt as encryptDeterministic, cL as enforceScript, ku as enrollAuthenticator, kv as enum, kv as enumOf, kw as estimateEntropy, kx as evalComputedFields, ky as evaluateClause, kz as evaluateExportCapability, kA as evaluateFieldClause, kB as evaluateImportCapability, kC as executePlan, kD as exportAccessibleData, kE as findAuthenticator, de as formatDiff, as as groupAndReduce, kF as hasExportCapability, kG as hasImportCapability, kH as hasRecoveryEnrolled, cM as i18nText, cN as inferScripts, e5 as isClassifiedFieldSpec, e6 as isClassifiedGroup, cO as isDictCollectionName, cP as isDictKeyDescriptor, cQ as isI18nTextDescriptor, kI as isLinkCollectionName, kJ as isMagicLinkGrantExpired, kK as isMoneyDescriptor, kL as isMoneyString, kM as isPublicEnvelope, kN as isRefArray, cR as isStaticDictDescriptor, kO as isViaFieldSpec, kP as issueDelegation, kQ as keyringRecoverPassphrase, kR as keyringRotatePassphrase, kS as liberateVault, kT as listMagicLinkGrants, kU as listUsers, kV as listUsersWithEnvelopes, kW as listWithdrawalRequests, kX as loadActiveDelegations, kY as loadPaperRecoveryEntries, kZ as loadSealedPassphrase, k_ as loadShamirRecoveryEntries, k$ as lookup, l0 as magicLinkGrantRecordId, at as max, N as memoryObjectProjection, aK as mergeCrdtStates, au as min, l1 as mintPaperRecoveryEntry, l2 as mintShamirRecoveryEntry, l3 as mintWrappedDeksBlob, l4 as money, av as moneyMax, aw as moneyMin, l5 as moneyNumber, ax as moneySum, l6 as parseRsaOaepTlv, l7 as parseSealedEnvelope, l8 as readMagicLinkGrantRecord, l9 as readPath, la as recoverUser, ay as reduceRecords, az as reducerBuilder, lb as ref, lc as refArray, ld as rejectWithdrawal, le as removeAuthenticator, lf as requestWithdrawal, lg as resetJoinWarnings, aL as resolveCrdtSnapshot, cT as resolveI18nText, cU as resolvePolicy, lh as resolvePublicEnvelopeSchema, li as resolveSequenceKey, lj as revokeDelegation, lk as revokeMagicLinkGrant, ll as runTransaction, lm as savePaperRecoveryEntries, ln as saveSealedPassphrase, lo as saveShamirRecoveryEntries, lp as sealRsaOaepTlv, cV as staticDict, aB as sum, lq as unwrapDeksFromBlob, lr as unwrapDeksFromPaperEntry, ls as unwrapDeksFromShamirEntry, lt as unwrapMagicLinkGrant, cX as validateI18nTextValue, lu as validatePassphrase, lv as validatePublicEnvelopeInput, lw as validateSchemaInput, lx as validateSchemaOutput, v as validateSessionPolicy, ly as via, lz as withArchive, lA as withDeferredNumbering, lB as withdrawAccessibleData, lC as writeMagicLinkGrant } from './index-DjWbxsjb.js';
+export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-bBj5OgUC.js';
 export { WrapBundleStoreOptions, WrapPodStoreOptions, WrappedBundleNoydbStore, WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore } from './pod/index.js';
 export { W as WriteEvent, a as WriteHook } from './index-B9QdHytu.js';
-export { C as CollectionDescription, a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-aBkJR2sd.js';
-export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-BF9_96A5.js';
-export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-CH-H06dp.js';
+export { D as DEED_RECORD_ID, a as DeedMarker, F as FuseOptions, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, f as fuseRetrieval, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-qwuNvO2B.js';
+export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-D6GxiUfq.js';
 export { g as generateULID, i as isULID } from './ulid-DRH25k3y.js';
 export { D as DecryptedRecord, d as decryptExtractedPartition } from './decrypt-partition-IHtxEnTi.js';
-export { L as LedgerEntry, d as canonicalJson, h as hashEntry, p as paddedIndex, e as parseIndex, s as sha256Hex } from './subject-index-O75wKshW.js';
+export { L as LedgerEntry, d as canonicalJson, h as hashEntry, p as paddedIndex, e as parseIndex, s as sha256Hex } from './subject-index-CyOgGMJL.js';
+export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential, withTeam } from './team/index.js';
+export { withLazy } from './lazy/index.js';
 export { TransactionStrategyOptions } from './tx/index.js';
-export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C7ol6oPw.js';
-export { w as withDerivation, a as withRollup } from './with-rollup-BvQo3ROo.js';
-export { w as withMaterializedView } from './with-materialized-view-6p0Fk8bL.js';
-export { w as withOverlayedView } from './with-overlayed-view-BJ6mXGMd.js';
-export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-C9Ro3v_O.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-DI-krBsZ.js';
+export { w as withDerivation, a as withRollup } from './with-rollup-DEKGI9vb.js';
+export { w as withMaterializedView } from './with-materialized-view-BUmzlXue.js';
+export { w as withOverlayedView } from './with-overlayed-view-m4FaXXTO.js';
+export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, c as classified, l as luhnCheck, r as resolveClassifiedFields } from './validators-BUcli5Nh.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Bmm2pgJ0.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
-export { FuseOptions, fuseRetrieval } from './kernel/index.js';
-export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-B5fYNBL7.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-Cp5uwiox.js';
+export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-Z2DUayMe.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-DAJjMsCE.js';
 import '@noy-db/attestation';
 
 /**
@@ -90,6 +90,42 @@ declare function withSearch(): SearchStrategy;
 
 declare function withSequence(): SequenceStrategy;
 
+/**
+ * computed() — the declaration factory for a field whose value is DERIVED
+ * from other fields on the same record (#638 Task 7, spec §6). Composes
+ * with `via()` (the locked grammar since phase A: `via(computed(fn, { deps,
+ * mode }), money('EUR'))`), grouped by `_viaBrand` like every other via
+ * feature (`kernel/via/compose.ts#mergeViaFields`).
+ *
+ * `mode` picks where the function runs:
+ *  - `'materialized'` (default) — TODAY's stage-5 write-time eager compute
+ *    (`with-formula/computed/index.ts#evalComputedFields`), stored like any
+ *    other field. Byte-for-byte the existing `computed: { field: fn }` sugar.
+ *  - `'virtual'` — rides the `present` read phase (the money-`Formatted`/
+ *    i18n-`Label` precedent, seam map Part 4): computed fresh on every
+ *    read, NEVER stored, `queryable: 'none'`, excluded from export unless
+ *    its declared `deps` permit (identical taint rule to materialized —
+ *    see `via/computed/binding.ts`).
+ *
+ * `deps` names the OTHER fields `fn` reads — feeds `ViaGraph` (Task 1/2) so
+ * a source's taint (e.g. a classified field) propagates to this derived
+ * field. A depsless entry is fine UNLESS the collection also declares
+ * classified fields (`kernel/collection-config.ts#resolveComputedEdges`
+ * refuses it — closes the #636 opaque-function leak).
+ */
+
+interface ComputedDescriptor extends ViaDescriptor {
+    readonly _viaBrand: 'computed';
+    readonly fn: (record: Record<string, unknown>) => unknown;
+    readonly deps?: readonly string[];
+    readonly mode: 'materialized' | 'virtual';
+}
+declare function computed(fn: (record: Record<string, unknown>) => unknown, opts?: {
+    readonly deps?: readonly string[];
+    readonly mode?: 'materialized' | 'virtual';
+}): ComputedDescriptor;
+declare function isComputedDescriptor(x: unknown): x is ComputedDescriptor;
+
 /**
  * Enable the sovereign-custody (FR-6) capability.
  * Pass to `createNoydb({ custodyStrategy: withCustody() })` to make
@@ -127,6 +163,20 @@ declare function withCustody(): CustodyStrategy;
  */
 declare function readPlaintextRecord<T = Record<string, unknown>>(envelope: EncryptedEnvelope): T | null;
 
+/**
+ * `applyListProjection` — the ONE vetted read-projection for lists/exports.
+ * Replaces classified field values with their declared projection (omit /
+ * mask / rider) so no consumer re-implements redaction. Pure, non-mutating.
+ * Consumed by as-* exporters (#489) and available to any list renderer.
+ * @module
+ */
+
+interface ListProjectionOptions {
+    /** Also handle fields carrying only a plain sensitivity tag (pii/secret). */
+    readonly sensitivity?: 'omit' | 'mask';
+}
+declare function applyListProjection(desc: CollectionDescription, record: Record<string, unknown>, opts?: ListProjectionOptions): Record<string, unknown>;
+
 /** Allow any schema change. Explicit blind / back-compat. */
 declare function blindUpdate(): SchemaUpdateStrategy;
 /** Allow additive changes; reject non-additive ones. The safety backstop. */
@@ -223,8 +273,12 @@ interface BlobLifecyclePolicy {
 interface AgeRoute {
     /** Store for records older than the cutoff. */
     readonly cold: NoydbStore;
-    /** Days after last modification before a record is cold-eligible. */
-    readonly coldAfterDays: number;
+    /**
+     * Days after last modification before a record is cold-eligible for the
+     * ROLLING `compact(vault)` migrator. Omit for period-driven archival only
+     * (`compact(vault, { before })`), where the cutoff is supplied per call.
+     */
+    readonly coldAfterDays?: number;
     /**
      * Collections that participate in age tiering.
      * Empty array or omitted = all user collections (excluding `_` prefixed).
@@ -343,11 +397,14 @@ interface RouteStatus {
  */
 interface RoutedNoydbStore extends NoydbStore {
     /**
-     * Migrate records older than the age cutoff from the hot store to the
-     * cold store. Only applies when `age` is configured. Returns the number
-     * of records migrated.
+     * Migrate records to the cold store. Only applies when `age.cold` is
+     * configured. With `{ before }`, migrates records whose `_ts < before`
+     * (period-driven archival); without, uses the rolling `coldAfterDays`.
+     * Returns the number of records migrated.
      */
-    compact(vault: string): Promise<number>;
+    compact(vault: string, opts?: {
+        before?: string;
+    }): Promise<number>;
     /**
      * Override a named route at runtime.
      *
@@ -656,8 +713,15 @@ declare function loadPersistedSchema(store: NoydbStore, vault: string, collectio
  * Encrypt and persist a schema envelope for one collection. Always
  * overwrites any prior write (callers gate on hash equality before calling
  * to avoid no-op writes).
+ *
+ * Pass `expectedVersion` — the `version` from {@link loadPersistedSchemaEntry}
+ * captured at load time — to make the write an optimistic CAS: on a store with
+ * `casAtomic`, `store.put` throws {@link ConflictError} when the record was
+ * bumped concurrently, so a lost update on the shared `_schemas` record is
+ * rejected instead of silently clobbering the other writer's field (#583).
+ * When omitted, keeps the legacy unconditional last-writer-wins behaviour.
  */
-declare function savePersistedSchema(store: NoydbStore, vault: string, collection: string, dek: EnclaveKey, payload: PersistedSchemaEnvelope): Promise<void>;
+declare function savePersistedSchema(store: NoydbStore, vault: string, collection: string, dek: EnclaveKey, payload: PersistedSchemaEnvelope, expectedVersion?: number): Promise<void>;
 
 /**
  * Orchestrate the derive → hash → skip-or-write cycle for a collection's
@@ -694,6 +758,34 @@ declare function persistSchemaIfNeeded(opts: {
     readonly strategies?: readonly SchemaUpdateStrategy[];
 }): Promise<PersistSchemaResult>;
 
+/**
+ * `_links_*` reserved collections — managed bidirectional many-to-many
+ * junctions (design B).
+ *
+ * Where `refArray` (design A) stores an id-array on one owning record,
+ * `vault.link()` creates a first-class junction: a dedicated encrypted
+ * `_links_<name>` collection whose rows are `{ a, b, meta? }` link tuples.
+ * It is queryable from BOTH sides (`of(id)`), carries optional per-link
+ * metadata, and cascades on endpoint delete.
+ *
+ * Each link is slot-typed: `a` is an id in the `a` endpoint collection,
+ * `b` an id in the `b` endpoint collection (they may be the same
+ * collection for self-links). A link's identity is the ordered pair
+ * `(a, b)`; `of(id)` matches either slot.
+ *
+ * Rows are encrypted under a dedicated `_links_<name>` DEK — same
+ * zero-knowledge stack as every other collection (the store sees only
+ * ciphertext). Backup/restore rides the normal `loadAll` path.
+ */
+
+/** Thrown by `connect()` when an endpoint record does not exist. */
+declare class LinkEndpointError extends NoydbError {
+    readonly link: string;
+    readonly endpoint: string;
+    readonly missingId: string;
+    constructor(link: string, endpoint: string, missingId: string);
+}
+
 /**
  * Persistence helpers for `_meta/public-envelope`. Mirrors the
  * bypass-AES pattern used by `_meta/handle` and `_meta/policy` —
@@ -1411,4 +1503,4 @@ declare function loadVaultPolicy(store: NoydbStore, vault: string): Promise<Vaul
  */
 declare function saveVaultPolicy(store: NoydbStore, vault: string, policy: VaultPolicy): Promise<void>;
 
-export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };
+export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CollectionDescription, type ComputedDescriptor, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, LinkEndpointError, type ListProjectionOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbError, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, ViaDescriptor, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, applyListProjection, assertTierAccess, blindUpdate, checkGate, computed, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isComputedDescriptor, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };