@noy-db/hub 0.3.0-pre.1 → 0.3.0-pre.3

package/dist/{index-BzUo1B6n.d.ts → index-D05bV0_g.d.ts}

@@ -1,5 +1,5 @@
 import { L as LedgerEntry, F as ForgetStrategy, c as SubjectRef, a as ForgetResult } from './subject-index-O75wKshW.js';
-import { V as VaultMeta, a as CollectionMeta, F as FieldMeta, C as CollectionDescription, D as DescribeOptions } from './describe-aBkJR2sd.js';
+import { V as VaultMeta, a as CollectionMeta, F as FieldMeta, C as CollectionDescription, D as DescribeOptions } from './describe-0tiXAjoO.js';
 import { C as CoordinationProvider, W as WriteEvent, a as WriteHook, U as Unsubscribe$3, b as WriteHookRegistry } from './index-B9QdHytu.js';
 import { AttestationFieldSchema, QrPayload, RevocationList } from '@noy-db/attestation';
 
@@ -646,6 +646,8 @@ interface RecordCodecContext<T> {
     readonly sensitiveFields: ReadonlySet<string>;
     /** Declared deterministic-index fields, or null. */
     readonly deterministicFields: ReadonlySet<string> | null;
+    /** Digest-only classified fields → verify policy (stage 2). Null when none. */
+    readonly vdigFields: ReadonlyMap<string, VdigFieldPolicy> | null;
     /** CRDT mode (decrypt resolves CrdtState→snapshot when set). */
     readonly crdtMode: CrdtMode | undefined;
     /** CRDT strategy seam (resolveCrdtSnapshot). */
@@ -710,7 +712,10 @@ declare class RecordCodec<T> {
      * to pre-CEK behaviour, so non-adopting collections pay nothing.
      */
     encryptJsonString(json: string, version: number, cek?: EnclaveKey, source?: string, sourceTs?: string): Promise<EncryptedEnvelope>;
-    encryptRecord(record: T, version: number, cek?: EnclaveKey, source?: string, sourceTs?: string): Promise<EncryptedEnvelope>;
+    encryptRecord(record: T, version: number, cek?: EnclaveKey, source?: string, sourceTs?: string, vdig?: {
+        readonly id: string;
+        readonly prev: EncryptedEnvelope | null;
+    }): Promise<EncryptedEnvelope>;
     /**
      * Resolve the per-record CEK for a stored envelope, or `undefined` for a
      * legacy (`_cek`-absent) envelope. Unwraps `_cek` under the collection DEK and
@@ -3377,6 +3382,16 @@ declare class AttestationError extends NoydbError {
 declare class AttestationNotEnabledError extends NoydbError {
     constructor(message?: string);
 }
+/**
+ * Thrown when `collection.reveal()` is called without opting into the
+ * classified capability (the default `NO_CLASSIFIED` stub). Classified reveal
+ * is an opt-in, tree-shakeable capability: enable it with
+ * `classifiedStrategy: withClassified()` from "@noy-db/hub/classified" in
+ * createNoydb().
+ */
+declare class ClassifiedNotEnabledError extends NoydbError {
+    constructor(message?: string);
+}
 /**
  * Thrown when a hierarchical-tiers capability method (`putAtTier`, `getAtTier`,
  * `listAtTier`, `elevate`, `demote`) is called without opting into the tiers
@@ -3988,6 +4003,47 @@ declare class EnclaveNotSupportedError extends NoydbError {
     readonly group: 'sealing' | 'deterministic' | 'per-record-keys';
     constructor(group: 'sealing' | 'deterministic' | 'per-record-keys', detail?: string);
 }
+/**
+ * Raised when a collection's `classifiedFields` configuration is invalid
+ * (e.g. a claimed field name collides with a rider companion or another
+ * classified field). Homed in `kernel/errors.ts` (rather than
+ * `with-shape/classified/errors.ts`) so `kernel/enclave/classify/*` can throw
+ * it without importing with-*; `with-shape/classified/errors.ts` re-exports
+ * it under the same name for backward-compatible import paths.
+ */
+declare class ClassifiedConfigError extends Error {
+    readonly collection: string;
+    constructor(collection: string, message: string);
+}
+/**
+ * Raised by `collection.reveal()` when a field cannot be revealed — unknown
+ * field, `storage:'never'`, or missing record. See {@link ClassifiedConfigError}
+ * for why this lives in `kernel/errors.ts`.
+ */
+declare class ClassifiedRevealError extends Error {
+    readonly collection: string;
+    readonly field: string;
+    constructor(collection: string, field: string, detail: string);
+}
+/**
+ * Raised by the classified verify path (`storage:'digest-only'`, stage 2)
+ * when a field cannot be verified — unknown field, not digest-only, or no
+ * digest stored yet.
+ */
+declare class ClassifiedVerifyError extends Error {
+    readonly collection: string;
+    readonly field: string;
+    constructor(collection: string, field: string, detail: string);
+}
+/**
+ * Raised by the classified rotation path (stage 2) when a new value is
+ * refused — e.g. reuse of one of the last N values (`notLastN`).
+ */
+declare class ClassifiedRotationError extends Error {
+    readonly collection: string;
+    readonly field: string;
+    constructor(collection: string, field: string, detail: string);
+}
 
 /**
  * The `money()` field descriptor — a branded schema-layer descriptor, a
@@ -4854,7 +4910,7 @@ interface ConsentContext {
     readonly consentHash: string;
 }
 /** Access operation recorded in an audit entry. */
-type ConsentOp = 'get' | 'put' | 'delete';
+type ConsentOp = 'get' | 'put' | 'delete' | 'reveal' | 'verify';
 /** One consent-audit record, as decrypted for the caller. */
 interface ConsentAuditEntry {
     /** ULID — stable insertion-order key. */
@@ -5627,6 +5683,53 @@ interface PeriodsStrategy {
     appendPeriodLedgerEntry(ledger: LedgerStore | null, actor: string, envelope: EncryptedEnvelope, periodName: string): Promise<void>;
 }
 
+/**
+ * Classified fields — behavioral sensitive-field descriptors (stage 1).
+ * Design: docs/superpowers/specs/2026-07-04-classified-fields-design.md
+ * Law: open on write, declarative on read — read-side behavior is this
+ * closed vocabulary; there are no read-side callbacks.
+ * @module
+ */
+type ClassifiedStorage = 'recoverable' | 'never' | 'digest-only';
+type ClassifiedList = {
+    readonly kind: 'omit';
+} | {
+    readonly kind: 'mask';
+    readonly pattern: string;
+} | {
+    readonly kind: 'rider';
+    readonly rider: string;
+};
+type ClassifiedRider = (value: unknown) => unknown;
+interface ClassifiedFieldSpec {
+    readonly _noydbClassified: true;
+    readonly preset: string;
+    readonly storage: ClassifiedStorage;
+    readonly list: ClassifiedList;
+    readonly sensitivity: 'pii' | 'secret';
+    /** Write-time safe projections; companion field name is `<field>_<rider>`. */
+    readonly riders?: Record<string, ClassifiedRider>;
+    /** Write-time validator: error message, or null when valid. */
+    readonly validate?: (value: unknown) => string | null;
+    /** Digest-only verify policy (stage 2). Mode both sides normalize under. */
+    readonly verifyNormalize?: 'password' | 'secret-answer';
+    /** Decorate ok:true verdicts with mustRotate after this many days (I1). */
+    readonly rotateDays?: number;
+    /** Refuse reuse of the last N values on rotate (cap 8, spec Q4). */
+    readonly notLastN?: number;
+    /** Member of the collection's matchGroup (secretAnswer preset). */
+    readonly verifyGroupMember?: true;
+}
+interface ClassifiedGroup {
+    readonly _noydbClassifiedGroup: true;
+    readonly preset: string;
+    /** member record-field name -> spec (differential per-member policy). */
+    readonly members: Record<string, ClassifiedFieldSpec>;
+}
+type ClassifiedEntry = ClassifiedFieldSpec | ClassifiedGroup;
+declare function isClassifiedFieldSpec(x: unknown): x is ClassifiedFieldSpec;
+declare function isClassifiedGroup(x: unknown): x is ClassifiedGroup;
+
 /**
  * Computed scalar fields — schema-owned derived values evaluated on
  * write and materialized onto the record.
@@ -12823,6 +12926,44 @@ interface VaultIntrospectState {
     readonly hasCollectionArchive?: (col: string) => boolean;
 }
 
+/** The ② capability seam for classified read-egress ops (stage 1: reveal; stage 2: verify). @module */
+
+interface ClassifiedRevealCtx {
+    readonly collection: string;
+    readonly spec: ClassifiedFieldSpec;
+    /** True on an encrypted collection — false selects the plaintext-body read. */
+    readonly encrypted: boolean;
+    readonly getEnvelope: (id: string) => Promise<EncryptedEnvelope | null>;
+    readonly resolveCek: (env: EncryptedEnvelope) => Promise<EnclaveKey | undefined>;
+    readonly getDEK: () => Promise<EnclaveKey>;
+    readonly onAccess?: ((op: 'reveal', id: string) => Promise<void>) | undefined;
+}
+interface ClassifiedVerifyCtx {
+    readonly collection: string;
+    readonly spec: ClassifiedFieldSpec;
+    readonly getEnvelope: (id: string) => Promise<EncryptedEnvelope | null>;
+    readonly resolveCek: (env: EncryptedEnvelope) => Promise<EnclaveKey | undefined>;
+    readonly getDEK: () => Promise<EnclaveKey>;
+    readonly now: () => number;
+    /** Group members resolved by the collection (matchGroup only). */
+    readonly groupMembers?: ReadonlyArray<{
+        readonly field: string;
+        readonly spec: ClassifiedFieldSpec;
+    }>;
+    readonly onAccess?: ((op: 'verify', id: string) => Promise<void>) | undefined;
+}
+interface ClassifiedStrategy {
+    reveal(ctx: ClassifiedRevealCtx, id: string, field: string): Promise<unknown>;
+    verify(ctx: ClassifiedVerifyCtx, id: string, field: string, candidate: string): Promise<ClassifiedVerdict>;
+    verifyText(ctx: ClassifiedVerifyCtx, id: string, field: string, candidate: string): Promise<ClassifiedVerdict>;
+    matchGroup(ctx: ClassifiedVerifyCtx, id: string, answers: Record<string, string>, opts: {
+        readonly min: number;
+    }): Promise<{
+        readonly passed: boolean;
+    }>;
+}
+declare const NO_CLASSIFIED: ClassifiedStrategy;
+
 /** A vault (tenant namespace) containing collections. */
 declare class Vault {
     #private;
@@ -12884,6 +13025,7 @@ declare class Vault {
     private readonly forgetStrategy;
     private readonly i18nStrategy;
     private readonly syncStrategy;
+    private readonly classifiedStrategy;
     /**
      * Per-vault guard registry. `null` until `_initGuards()` runs; stays
      * `null` for vaults that never register any guard strategy. The
@@ -13133,6 +13275,7 @@ declare class Vault {
         numberingConfigs?: ReadonlyArray<DeferredNumberingConfig> | undefined;
         forgetStrategy?: ForgetStrategy | undefined;
         attestationStrategy?: AttestationStrategy | undefined;
+        classifiedStrategy?: ClassifiedStrategy | undefined;
         sealedRecordStrategy?: SealedRecordStrategy | undefined;
         portabilityStrategy?: PortabilityStrategy | undefined;
         sequenceStrategy?: SequenceStrategy | undefined;
@@ -13205,6 +13348,8 @@ declare class Vault {
         moneyFields?: MoneyFieldsOpt<T, M>;
         /** — declare computed scalar fields, evaluated on write (schema-owned). */
         computed?: ComputedFields<T>;
+        /** — declare classified() sensitive-field descriptors. See the classified-fields spec. */
+        classifiedFields?: Record<string, ClassifiedEntry>;
         /** — per-collection conflict resolution policy. */
         conflictPolicy?: ConflictPolicy<T>;
         /** — CRDT mode for collaborative editing without conflicts. */
@@ -16023,6 +16168,16 @@ interface CollectionOpts<T> {
     /** — outbound ref declarations (snapshot from vault refRegistry). Used by describe(). */
     declaredRefs?: Record<string, RefDescriptor> | undefined;
     computed?: ComputedFields | undefined;
+    /** — declare classified() sensitive-field descriptors (sealed + riders + projections). */
+    classifiedFields?: Record<string, ClassifiedEntry> | undefined;
+    /**
+     * The forget-cascade subject key for this collection (from
+     * `withForgetCascade({ subjects })`), plumbed by the Vault. Consumed by the
+     * classified refusal matrix (R4: a digest-only field cannot be the subject key).
+     */
+    subjectKeyField?: string | undefined;
+    /** — tree-shake seam for `collection.reveal()`. Defaults to `NO_CLASSIFIED`. */
+    classifiedStrategy?: ClassifiedStrategy | undefined;
     /**
      * async callback that resolves a dict key to its label
      * for a given locale. Provided by the Vault.
@@ -16079,7 +16234,7 @@ interface CollectionOpts<T> {
      * outside a consent scope the callback is a no-op. Awaited so a
      * thrown audit write surfaces to the caller.
      */
-    onAccess?: (op: 'get' | 'put' | 'delete', id: string) => Promise<void>;
+    onAccess?: (op: 'get' | 'put' | 'delete' | 'reveal' | 'verify', id: string) => Promise<void>;
     /**
      * invoked by `put`/`delete` before any adapter
      * write. Receives the prior envelope timestamp + decrypted
@@ -16461,6 +16616,32 @@ declare class Collection<T, S extends keyof T = never, Q extends keyof T & strin
      * the same MV-pre-creation reconcile as {@link moneyFields}.
      */
     private computed;
+    /**
+     * Resolved classified() sensitive-field descriptors, declared via the
+     * `classifiedFields` collection option. Mutable so {@link _applyClassifiedFields}
+     * can attach a declaration to a collection MV-analysis pre-created.
+     */
+    private classified;
+    /**
+     * Frozen construction-time facts the refusal matrix (R1-R5) checks against.
+     * Stored so {@link _applyClassifiedFields} — door 2, the reconcile seam —
+     * can re-run the SAME guard the config resolver ran at door 1 (C5's lesson:
+     * crdt/conflictPolicy/perRecordKeys are construction-only but
+     * classifiedFields can attach later).
+     */
+    private readonly classifiedGuardCtx;
+    /**
+     * Digest-only classified fields (`storage: 'digest-only'`), keyed by field
+     * name — the enclave-consumable policy map the codec's write path carries
+     * `_vdig` forward under (C6). `null` when the collection declares none.
+     */
+    private readonly vdigFields;
+    /**
+     * Tree-shake seam for `reveal()` — defaults to `NO_CLASSIFIED`, which
+     * throws `ClassifiedNotEnabledError`. Set via the `classifiedStrategy`
+     * `createNoydb()` option (opt in with `withClassified()`).
+     */
+    private readonly classifiedStrategy;
     /**
      * Async callback provided by the Vault that resolves a dict key
      * to its label for a given locale. Used by the locale-read path for
@@ -16666,6 +16847,17 @@ declare class Collection<T, S extends keyof T = never, Q extends keyof T & strin
     private describeAsync;
     /** JSON Schema for this collection with describe() metadata as x- extensions. */
     toJSONSchema(): Promise<object>;
+    /** Single-point audited reveal of one classified field. Requires withClassified(). */
+    reveal(id: string, field: string): Promise<unknown>;
+    /** Verify-without-reveal: verdict-only oracle for one classified field. Requires withClassified(). */
+    verify(id: string, field: string, candidate: string): Promise<ClassifiedVerdict>;
+    /** k-of-n challenge over the collection's secretAnswer members. Requires withClassified(). */
+    verifyGroup(id: string, answers: Record<string, string>, opts: {
+        readonly min: number;
+    }): Promise<{
+        readonly passed: boolean;
+    }>;
+    private _classifiedVerifyCtx;
     /**
      * @internal — attach money descriptors post-construction. MV dependency
      * analysis auto-creates a source collection (without options) during
@@ -16679,6 +16871,16 @@ declare class Collection<T, S extends keyof T = never, Q extends keyof T & strin
     _applyFieldMeta(fieldMeta: Record<string, FieldMeta>): void;
     /** @internal — attach collection-level meta post-construction. See {@link _applyMoneyFields}. First-wins. */
     _applyMeta(meta: CollectionMeta): void;
+    /**
+     * @internal — attach classified fields post-construction. See {@link _applyMoneyFields}.
+     * First-wins. Note: unlike money/computed/meta, this cannot retro-seal a
+     * collection that was already auto-created — `sensitiveFields` is frozen at
+     * construction time. A reconciled declaration is only accepted when none of
+     * its members are `storage: 'recoverable'` (those require sealing at first
+     * open); otherwise this throws rather than silently persisting the value as
+     * inline plaintext while `describe()` advertises protection.
+     */
+    _applyClassifiedFields(classifiedFields: Record<string, ClassifiedEntry>): void;
     /** @internal — used only in tests; do not read in production code. */
     get _ramCiphertext(): boolean;
     /**
@@ -16798,6 +17000,15 @@ declare class Collection<T, S extends keyof T = never, Q extends keyof T & strin
      * cache directly (no extra I/O), matching the previous behaviour exactly.
      */
     private resolvePriorValues;
+    /**
+     * Wraps {@link RecordCodec.toCacheRecord} with an additional strip for
+     * digest-only classified fields: the codec already omits them from `_data`
+     * on write, but the write path caches the pre-encrypt `record` object
+     * directly (to skip a redundant decrypt) — without this, a vdig field's
+     * plaintext would sit in the working-set cache and `get()` would leak it
+     * right back out, defeating C6.
+     */
+    private _toCacheableRecord;
     /** @internal Untracked put body — call {@link put}, not this. */
     private _putInternal;
     /**
@@ -17978,6 +18189,14 @@ interface EncryptedEnvelope {
      * map is absent and `_data` is unchanged (byte-identical to legacy output).
      */
     readonly _sealed?: Record<string, string>;
+    /**
+     * Verify-digest slots (classified stage 2). Map of digest-only field name →
+     * AES-256-GCM `iv:data` blob sealed under the HKDF(CEK) vdig slot key with
+     * AAD ['noydb-classify-vdig', collection, recordId, field]. The store sees
+     * only ciphertext; only the enclave verify path can read the digest. At most
+     * one of `_sealed[field]` / `_vdig[field]` exists per field (I4).
+     */
+    readonly _vdig?: Record<string, string>;
     /**
      * Per-record content-encryption key (CEK), base64 AES-KW-wrapped under
      * the collection (or tier) DEK. Present only on records written by a
@@ -18010,6 +18229,20 @@ interface EncryptedEnvelope {
      */
     readonly _debug?: typeof NOYDB_FORMAT_VERSION;
 }
+/** Spine policy for one digest-only classified field — the enclave-consumable
+ *  projection of a ClassifiedFieldSpec (the enclave never imports with-*). */
+interface VdigFieldPolicy {
+    readonly normalize: 'password' | 'secret-answer';
+    /** Ring size for reuse refusal; 0 = no ring. Cap 8 (spec Q4). */
+    readonly notLastN: number;
+    readonly rotateDays?: number;
+}
+/** Verdict-only egress of the enclave oracle (spec §3). */
+interface ClassifiedVerdict {
+    readonly ok: boolean;
+    /** I1: present ONLY when ok === true — never computed for a false verdict. */
+    readonly mustRotate?: true;
+}
 /**
  * Opaque access gate for a sealed (`sensitive`) field returned by a public
  * read (the access layer). The handle carries only the per-field
@@ -19814,6 +20047,13 @@ interface NoydbOptions {
      * signer engines are tree-shaken out.
      */
     readonly attestationStrategy?: AttestationStrategy;
+    /**
+     * Tree-shake seam — optional classified-field capability. Pass
+     * `withClassified()` from `@noy-db/hub/classified` to enable
+     * `collection.reveal()`. When omitted, `reveal()` throws
+     * `ClassifiedNotEnabledError` and the reveal engine is tree-shaken out.
+     */
+    readonly classifiedStrategy?: ClassifiedStrategy;
     /**
      * Tree-shake seam — optional sealed-record (grantor-side) capability. Pass
      * `withSealedRecord()` from `@noy-db/hub/sealed-record` to enable
@@ -20727,4 +20967,4 @@ interface NoydbPolicyDeps {
  */
 type NoydbPolicyFactory = (deps: NoydbPolicyDeps) => NoydbPolicyApi;
 
-export { BLOB_INDEX_COLLECTION as $, resolveI18nText as A, resolvePolicy as B, setAtPathInPlace as C, DICT_COLLECTION_PREFIX as D, staticDict as E, stripI18nFilled as F, validateI18nTextValue as G, type SessionStrategy as H, type I18nStrategy as I, SessionExpiredError as J, SessionNotFoundError as K, type Layer as L, MissingTranslationError as M, SessionPolicyError as N, type OnMissing as O, PolicyEnforcer as P, createEnforcer as Q, ReservedCollectionNameError as R, ScriptViolationError as S, TranslatorNotConfiguredError as T, UnknownDictCodeError as U, Vault as V, validateSessionPolicy as W, type BlobStrategy as X, BLOB_CHUNKS_COLLECTION as Y, BLOB_COLLECTION as Z, BLOB_EVICTION_AUDIT_COLLECTION as _, type DictEntry as a, type Reducer as a$, BLOB_SLOTS_PREFIX as a0, BLOB_VERSIONS_PREFIX as a1, type BlobEvictionEntry as a2, type BlobFieldPolicy as a3, type BlobFieldsConfig as a4, type BlobObject as a5, type BlobPutOptions as a6, type BlobResponseOptions as a7, BlobSet as a8, type BlobStrategyOpenArgs as a9, IDX_PREFIX as aA, type IndexDef as aB, type IndexState as aC, type IngestRow as aD, type LazyOrderBy as aE, LazyQuery as aF, type LazyQuerySource as aG, type OrderedEntry as aH, PersistedCollectionIndex as aI, type PersistedIndexDef as aJ, compositeKey as aK, decodeIdxId as aL, encodeIdxId as aM, isIdxId as aN, type AggregateStrategy as aO, type AggregateResult as aP, type AggregateSpec as aQ, Aggregation as aR, type AggregationUpstream as aS, GROUPBY_MAX_CARDINALITY as aT, GROUPBY_WARN_CARDINALITY as aU, GroupedAggregation as aV, GroupedQuery as aW, GroupedQueryN as aX, type GroupedRow as aY, type GroupedRowN as aZ, type LiveAggregation as a_, type CompactRunOptions as aa, type CompactionContext as ab, type CompactionResult as ac, DEFAULT_CHUNK_SIZE as ad, EXPORT_AUDIT_COLLECTION as ae, ExportBlobsAbortedError as af, type ExportBlobsAuditEntry as ag, type ExportBlobsHandle as ah, type ExportBlobsOptions as ai, type ExportedBlob as aj, type ObjectListEntry as ak, type ObjectMeta as al, type ObjectProjection as am, type ObjectUrlOptions as an, type PutObjectOptions as ao, type PutUrlOptions as ap, type SlotInfo as aq, type SlotRecord as ar, type VersionRecord as as, createExportBlobsHandle as at, memoryObjectProjection as au, runCompaction as av, type IndexStrategy as aw, COMPOSITE_DELIMITER as ax, CollectionIndexes as ay, type HashIndex as az, type DictKeyDescriptor as b, type SnapshotMeta as b$, type ReducerBuilder as b0, type ReducerOptions as b1, avg as b2, buildLiveAggregation as b3, count as b4, groupAndReduce as b5, max as b6, min as b7, moneyMax as b8, moneyMin as b9, type OpenPeriodOptions as bA, PERIODS_COLLECTION as bB, type PeriodRecord as bC, type ReadOnlyCollection as bD, appendPeriodLedgerEntry as bE, assertTsWritable as bF, chainAnchor as bG, loadPeriods as bH, validatePeriodName as bI, type GuardStrategy as bJ, type GuardChange as bK, type GuardContext as bL, AmendmentForbiddenError as bM, FieldFrozenError as bN, GuardRegistry as bO, type GuardStrategyHandle as bP, IllegalTransitionError as bQ, InvariantError as bR, ReadOnlyVaultFacade as bS, RecordLockedError as bT, type ShadowStrategy as bU, CollectionFrame as bV, VaultFrame as bW, type NoydbPodStore as bX, type RetentionPolicy as bY, type SnapshotPolicy as bZ, type SnapshotStrategy as b_, moneySum as ba, reduceRecords as bb, reducerBuilder as bc, resetGroupByWarnings as bd, sum as be, type CrdtStrategy as bf, type CrdtMode as bg, type CrdtState as bh, type LwwMapState as bi, type RgaState as bj, type YjsState as bk, buildLwwMapState as bl, buildRgaState as bm, mergeCrdtStates as bn, resolveCrdtSnapshot as bo, type ConsentStrategy as bp, CONSENT_AUDIT_COLLECTION as bq, type ConsentAuditEntry as br, type ConsentAuditFilter as bs, type ConsentContext as bt, type ConsentOp as bu, loadConsentEntries as bv, writeConsentEntry as bw, type PeriodsStrategy as bx, type CarryForwardContext as by, type ClosePeriodOptions as bz, DictKeyInUseError as c, type JsonPatchOp as c$, type SnapshotMode as c0, SnapshotNotFoundError as c1, type DerivationStrategy as c2, type DerivationContext as c3, type ArrayOutputSpec as c4, DerivationCapExceededError as c5, DerivationCycleError as c6, DerivationDepthError as c7, DerivationOutputShapeError as c8, DerivationOutputUnknownError as c9, type WithdrawAccessibleOptions as cA, type WithdrawResult as cB, type WithdrawalRequest as cC, type WithdrawalRequestStatus as cD, type DiffEntry as cE, type UnlockedKeyring as cF, type ExportFormat as cG, type BusHandler as cH, type GateDeleteEvent as cI, type GateEventMap as cJ, type GateHandler as cK, type GatePoint as cL, type GatePutEvent as cM, type LifecycleEventMap as cN, type LifecyclePoint as cO, ServiceBus as cP, SubsystemBus as cQ, type Role as cR, type HistoryStrategy as cS, type NoydbStore as cT, type HistoryOptions as cU, type EncryptedEnvelope as cV, type PruneOptions as cW, type AppendInput as cX, type ChangeType as cY, CollectionInstant as cZ, type JsonPatch as c_, DerivationRegistry as ca, type DerivationStrategyHandle as cb, type DerivedFromMeta as cc, type OutputSpec as cd, type RecordOutputSpec as ce, type MaterializedViewStrategy as cf, type MaterializedViewStrategyHandle as cg, type OverlayedViewStrategy as ch, Collection as ci, OverlayBaseIsVirtualError as cj, OverlayCollectionUnavailableError as ck, type OverlayFieldMergeMode as cl, type OverlayFieldMergeRule as cm, OverlayIdMismatchError as cn, OverlayNameCollisionError as co, OverlayedViewRegistry as cp, type OverlayedViewStrategyHandle as cq, type SyncStrategy as cr, type PortabilityStrategy as cs, type ApproveWithdrawalOptions as ct, type ExportAccessibleOptions as cu, NO_PORTABILITY as cv, PortabilityNotEnabledError as cw, type RejectWithdrawalOptions as cx, type RequestWithdrawalOptions as cy, type RequestWithdrawalResult as cz, DictKeyMissingError as d, type UnionSource as d$, LedgerStore as d0, type VaultEngine as d1, VaultInstant as d2, type VerifyResult as d3, applyPatch as d4, computePatch as d5, diff as d6, formatDiff as d7, type SealedRecordStrategy as d8, type SealedCekDeliveryEnvelope as d9, AttestationNotEnabledError as dA, type IssueArgs as dB, type IssueContext as dC, type IssueResult as dD, NO_ATTESTATION as dE, type RevokeContext as dF, getRevokedDocIdsCore as dG, issueAttestationCore as dH, publishRevocationListCore as dI, revokeDocCore as dJ, unrevokeDocCore as dK, type PublicEnvelope as dL, type BundleRecipient as dM, type RecipientSealer as dN, type RecipientHint as dO, TxContext as dP, type MVQueryContext as dQ, type RegisteredMV as dR, Query as dS, MaterializedViewRegistry as dT, type MaterializedFromMeta as dU, MaterializedViewConfigError as dV, MaterializedViewCycleError as dW, type MaterializedViewOutput as dX, MaterializedViewSourceUnknownError as dY, MaterializedViewTooLargeError as dZ, type UnionArmJoin as d_, NO_SEALED_RECORD as da, type SealedCekBinding as db, SealedRecordExpiredError as dc, SealedRecordMismatchError as dd, SealedRecordNotEnabledError as de, type WalkClosureOptions as df, type SealingKeyProvider as dg, type RecoveryEnrollmentInput as dh, type ShamirRecoveryProvider as di, type EnclaveKey as dj, AdoptionStateError as dk, BackupCorruptedError as dl, BackupLedgerError as dm, BundleIntegrityError as dn, BundleSealMismatchError as dp, BundleVersionConflictError as dq, type ClosureResult as dr, type ExtractPartitionResult as ds, PartitionExtractionError as dt, PodVersionConflictError as du, TransferSealError as dv, extractPartition as dw, walkClosure as dx, type AttestationStrategy as dy, AttestationError as dz, DictionaryHandle as e, type DeepPartial as e$, type SearchStrategy as e0, type SequenceStrategy as e1, type CustodyStrategy as e2, type SchemaUpdateStrategy as e3, type TransformFn as e4, type PersistedSchemaEnvelope as e5, type UpdateDecision as e6, type UserEnvelope as e7, type VaultUserApi as e8, type UserApiDeps as e9, type CollectionChangeEvent as eA, type CollectionConfig as eB, type CollectionConflictResolver as eC, type CollectionDescriptor as eD, type CollectionStats as eE, ComputedFieldError as eF, type ComputedFields as eG, type ComputedFn as eH, type Conflict as eI, ConflictError as eJ, type ConflictPolicy as eK, type ConflictStrategy as eL, CrossJoinSourceUnknownError as eM, CrossJoinTooLargeError as eN, type CrossTierAccessEvent as eO, CustodyApi as eP, type CustodyHost as eQ, CustodyNotEnabledError as eR, DEFAULT_CROSS_JOIN_MAX_ROWS as eS, DEFAULT_JOIN_MAX_ROWS as eT, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as eU, DELEGATIONS_COLLECTION as eV, DanglingReferenceError as eW, DataResidencyError as eX, DebugPlaintextError as eY, DebugReservedFieldError as eZ, DecryptionError as e_, type DeepPartialOrNull as ea, type UserEnvelopePresented as eb, type Unsubscribe as ec, type LiveUserEnvelope as ed, type RoundingMode as ee, type VaultPolicy as ef, type ActiveTier as eg, type FactorProof as eh, type GateName as ei, type PolicyDenyReason as ej, type GatePolicy as ek, type AccessibleVault as el, type AffectedDocument as em, AlreadyElevatedError as en, type ArchivePolicy as eo, type ArchiveResult as ep, type ArchiveRunOptions as eq, type ArchiveStrategy as er, BUNDLE_STORE_POLICY as es, type BuiltInGateName as et, type CacheOptions as eu, type CacheStats as ev, CargoNotEnabledError as ew, type CargoStrategy as ex, type ChangeEvent as ey, type Clause as ez, type DictionaryOptions as f, type KeyringAuthenticatorWrappingDEKs as f$, type DeferredNumberingConfig as f0, DelegationTargetMissingError as f1, type DelegationToken as f2, type DeleteManyResult as f3, type DerivationDescriptor as f4, DirectoryDisabledError as f5, type DirtyEntry as f6, type DryRunResult as f7, type DumpSchemaOptions as f8, ELEVATION_AUDIT_COLLECTION as f9, type FormattedSequenceHandle as fA, type FrozenSnapshotRef as fB, type GhostRecord as fC, type GrantCustodianOptions as fD, type GrantOptions as fE, GroupCardinalityError as fF, type GroupClause as fG, type GuardViolation as fH, type HistoryConfig as fI, type HistoryEntry as fJ, INDEXED_STORE_POLICY as fK, type ImportCapability as fL, ImportCapabilityError as fM, type IndexFieldName as fN, IndexRequiredError as fO, IndexWriteFailureError as fP, type InferOutput as fQ, type InternalCollectionStats as fR, InvalidKeyError as fS, type IssueDelegationOptions as fT, type IssueMagicLinkGrantOptions as fU, type JoinContext as fV, type JoinLeg as fW, type JoinStrategy as fX, JoinTooLargeError as fY, type JoinableSource as fZ, type KeyringAuthenticator as f_, ElevatedHandle as fa, ElevationExpiredError as fb, type EmbeddingDescriptor as fc, EmbeddingDimMismatchError as fd, EmbeddingModelMismatchError as fe, EnclaveNotSupportedError as ff, type EnrollAuthenticatorOptions as fg, type EnrollAuthenticatorWrappingDEKsOptions as fh, type EnrollAuthenticatorWrappingKEKOptions as fi, type EnrollRecoveryResult as fj, type ExportCapability as fk, ExportCapabilityError as fl, type ExportChunk as fm, type ExportStreamOptions as fn, type FactorKind as fo, type FactorProofBundle as fp, type FactorRequirement as fq, type FenceDoc as fr, type FenceState as fs, type FieldChange as ft, type FieldClause as fu, type FieldDescriptor as fv, type FieldSource as fw, FilenameSanitizationError as fx, type FilterClause as fy, ForgetStrategyNotConfiguredError as fz, type I18nMap as g, POD_STORE_POLICY as g$, type KeyringAuthenticatorWrappingKEK as g0, KeyringCorruptError as g1, KeyringExpiredError as g2, type KeyringFile as g3, LedgerContentionError as g4, type LiberateOptions as g5, type LiberateResult as g6, LinkEndpointError as g7, LinkIntegrityError as g8, type LinkOnDelete as g9, type MoneyOptionsMulti as gA, MoneyPrecisionError as gB, type MoneyString as gC, MoneyUnsupportedError as gD, NOYDB_BACKUP_VERSION as gE, NOYDB_FORMAT_VERSION as gF, NOYDB_KEYRING_VERSION as gG, NOYDB_SYNC_VERSION as gH, NO_CARGO as gI, NO_CUSTODY as gJ, NO_SEARCH as gK, NO_SEQUENCE as gL, NetworkError as gM, type NextOptions as gN, NoAccessError as gO, NonAdditiveSchemaChangeError as gP, NotFoundError as gQ, Noydb as gR, type NoydbBundleStore as gS, NoydbError as gT, type NoydbEventMap as gU, type NoydbOptions as gV, type Assignment as gW, NumberingUncertaintyError as gX, type Operator as gY, type OrderBy as gZ, type OverlayViewDescriptor as g_, type LinkRow as ga, type LinkSetHandle as gb, type LinkSpec as gc, type ListAccessibleVaultsOptions as gd, type ListPageResult as ge, type ListUsersOptions as gf, type LiveQuery as gg, type LiveUpstream as gh, type LocaleReadOptions as gi, Lru as gj, type LruOptions as gk, type LruStats as gl, MAGIC_LINK_CONTENT_INFO_PREFIX as gm, MAGIC_LINK_GRANTS_COLLECTION as gn, MAGIC_LINK_KEK_INFO_PREFIX as go, type MagicLinkGrantPayload as gp, type MagicLinkGrantRecord as gq, ManagedRecoveryNotEnrolledError as gr, type MaterializedViewDescriptor as gs, MemoryRecipientSealer as gt, MemorySealingKeyProvider as gu, MigrationRequiredError as gv, MoneyCurrencyError as gw, type MoneyDescriptor as gx, type MoneyOptions as gy, type MoneyOptionsFixed as gz, type I18nTextDescriptor as h, type RotateRecoveryResult as h$, PUBLIC_ENVELOPE_FIELDS as h0, type PaperRecoveryDoc as h1, type PaperRecoveryEntry as h2, type PassphrasePolicy as h3, type PassphraseValidationResult as h4, PathEscapeError as h5, PeriodClosedError as h6, type Permission as h7, PermissionDeniedError as h8, type Permissions as h9, type QuickUnlockState as hA, QuickUnlockStore as hB, QuiesceTimeoutError as hC, type ReAuthOperation as hD, ReadOnlyAtInstantError as hE, ReadOnlyError as hF, ReadOnlyFrameError as hG, RecordCekNotFoundError as hH, type RecoverPassphraseInput as hI, type RecoverPassphraseResult as hJ, type RecoverUserOptions as hK, RecoveryNotEnrolledError as hL, RecoveryProfileNotImplementedError as hM, type RecoveryProof as hN, type RefDescriptor as hO, RefIntegrityError as hP, type RefMode as hQ, RefRegistry as hR, RefScopeError as hS, type RefViolation as hT, ReservedVaultNameError as hU, type ResolvedPublicEnvelopeSchema as hV, type RetrieveHit as hW, type RetrieveOptions as hX, type RevokeOptions as hY, type RotatePassphraseInput as hZ, type RotateRecoveryOptions as h_, type PersistedSchemaKind as ha, type PlaintextTranslatorContext as hb, type PlaintextTranslatorFn as hc, PolicyDeniedError as hd, PresenceHandle as he, type PresencePeer as hf, PrivilegeEscalationError as hg, type PublicEnvelopeField as hh, type PublicEnvelopeSchema as hi, type PublicEnvelopeText as hj, type PullMode as hk, type PullOptions as hl, type PullPolicy as hm, type PullResult as hn, type PushMode as ho, type PushOptions as hp, type PushPolicy as hq, type PushResult as hr, type PutManyItemOptions as hs, type PutManyOptions as ht, type PutManyResult as hu, type QueryAcrossOptions as hv, type QueryAcrossResult as hw, type QueryField as hx, type QueryPlan as hy, type QuerySource as hz, type I18nTextOptions as i, type TranslatorAuditEntry as i$, SEALED_PASSPHRASE_RECORD_ID as i0, ScanBuilder as i1, type ScanPageProvider as i2, type SchemaDelta as i3, SchemaFenceError as i4, type SchemaIntrospection as i5, SchemaLockedError as i6, SchemaUpdateError as i7, SchemaValidationError as i8, type Sealed as i9, type StandardSchemaV1SyncResult as iA, type StoreAuth as iB, type StoreAuthKind as iC, type StoreCapabilities as iD, StoreCapabilityError as iE, type StoreTime as iF, SyncEngine as iG, type SyncMetadata as iH, type SyncPolicy as iI, SyncScheduler as iJ, type SyncSchedulerStatus as iK, type SyncStatus as iL, type SyncTarget as iM, type SyncTargetRole as iN, SyncTransaction as iO, type SyncTransactionResult as iP, type TabChannel as iQ, type TabCoordinationOptions as iR, type TabLockManager as iS, type TabPresence as iT, type TabRole as iU, TamperedError as iV, TierDemoteDeniedError as iW, type TierMode as iX, TierNotGrantedError as iY, TiersNotEnabledError as iZ, type TransactionInvariant as i_, type SealedEnvelope as ia, SealedHandle as ib, type SealedPassphrase as ic, type SealedView as id, type SearchEntry as ie, SearchNotEnabledError as ig, type SearchOptions as ih, type SearchResult as ii, SequenceContentionError as ij, type SequenceHandle as ik, SequenceNotEnabledError as il, SequenceOfflineError as im, type SequenceOptions as io, SequenceStore as ip, type SequenceStoreOptions as iq, type SessionPolicy as ir, type SetPublicEnvelopeInput as is, type ShamirRecoveryDoc as it, type ShamirRecoveryEntry as iu, ShardProvisioningError as iv, type SlotRewrapCeremony as iw, type SlotRewrapContext as ix, type StandardSchemaV1 as iy, type StandardSchemaV1Issue as iz, LocaleNotSpecifiedError as j, isRefArray as j$, TxCollection as j0, type TxOp as j1, TxVault as j2, UniqueConstraintError as j3, UnknownShardError as j4, UnsupportedIndexOptionError as j5, type UpdateAuthenticatorOptions as j6, type UpdateContext as j7, type UpdateUserOptions as j8, type UserEnvelopeCheckGate as j9, compileSequenceFormat as jA, createNoydb as jB, createStore as jC, decryptBytes as jD, decryptDeterministic as jE, deriveMagicLinkContentKey as jF, derivePresenceKey as jG, encryptBytes as jH, encryptDeterministic as jI, enrollAuthenticator as jJ, estimateEntropy as jK, evalComputedFields as jL, evaluateClause as jM, evaluateExportCapability as jN, evaluateFieldClause as jO, evaluateImportCapability as jP, executePlan as jQ, exportAccessibleData as jR, findAuthenticator as jS, hasExportCapability as jT, hasImportCapability as jU, hasRecoveryEnrolled as jV, isLinkCollectionName as jW, isMagicLinkGrantExpired as jX, isMoneyDescriptor as jY, isMoneyString as jZ, isPublicEnvelope as j_, UserEnvelopeOversizedError as ja, type UserInfo as jb, ValidationError as jc, type VaultBackup as jd, type VaultPolicyOnDisk as je, type VaultSchemaSnapshot as jf, type VaultSnapshot as jg, VaultTemplateNotFoundError as jh, type WarningRules as ji, WeakPassphraseError as jj, type WeakPassphraseReason as jk, type WithArchiveOptions as jl, WithdrawalRequestError as jm, type WrappedDeksBlob as jn, type WriteConflict as jo, type WriteQueue as jp, aesGcmOpen as jq, applyJoins as jr, approveWithdrawal as js, asMoney as jt, assertStrongPassphrase as ju, base64ToBuffer as jv, bufferToBase64 as jw, buildLiveQuery as jx, buildRecipientKeyringFile as jy, burnPaperRecoveryEntry as jz, type OnMissingPolicy as k, type CrossJoinClause as k$, issueDelegation as k0, recoverPassphrase as k1, rotatePassphrase as k2, liberateVault as k3, listMagicLinkGrants as k4, listUsers as k5, listUsersWithEnvelopes as k6, listWithdrawalRequests as k7, loadActiveDelegations as k8, loadPaperRecoveryEntries as k9, saveShamirRecoveryEntries as kA, sealRsaOaepTlv as kB, unwrapDeksFromBlob as kC, unwrapDeksFromPaperEntry as kD, unwrapDeksFromShamirEntry as kE, unwrapMagicLinkGrant as kF, validatePassphrase as kG, validatePublicEnvelopeInput as kH, validateSchemaInput as kI, validateSchemaOutput as kJ, withArchive as kK, withDeferredNumbering as kL, withdrawAccessibleData as kM, writeMagicLinkGrant as kN, changeSecret as kO, createOwnerKeyring as kP, ensureCollectionDEK as kQ, grant as kR, loadKeyring as kS, persistKeyring as kT, revoke as kU, updateAuthenticator as kV, updateKeyringIdentity as kW, type TxStrategy as kX, type AmendmentTxOptions as kY, CrossShardJoinError as kZ, sha256Hex as k_, loadSealedPassphrase as ka, loadShamirRecoveryEntries as kb, magicLinkGrantRecordId as kc, mintPaperRecoveryEntry as kd, mintShamirRecoveryEntry as ke, mintWrappedDeksBlob as kf, money as kg, moneyNumber as kh, parseRsaOaepTlv as ki, parseSealedEnvelope as kj, readMagicLinkGrantRecord as kk, readPath as kl, recoverUser as km, ref as kn, refArray as ko, rejectWithdrawal as kp, removeAuthenticator as kq, requestWithdrawal as kr, resetJoinWarnings as ks, resolveSchema as kt, resolveSequenceKey as ku, revokeDelegation as kv, revokeMagicLinkGrant as kw, runTransaction as kx, savePaperRecoveryEntries as ky, saveSealedPassphrase as kz, type ResolveI18nOptions as l, NO_TIERS as l0, type TiersContext as l1, type TiersStrategy as l2, assertDeclaredTier as l3, assertTiersEnabled as l4, classifySealedShred as l5, demote as l6, elevate as l7, getAtTier as l8, listAtTier as l9, putAtTier as la, withTiers as lb, type ScriptWarning as m, type StaticDictDescriptor as n, StaticDictReadonlyError as o, applyI18nLocale as p, dictCollectionName as q, dictKey as r, enforceScript as s, getAtPath as t, i18nText as u, inferScripts as v, isDictCollectionName as w, isDictKeyDescriptor as x, isI18nTextDescriptor as y, isStaticDictDescriptor as z };
+export { BLOB_INDEX_COLLECTION as $, resolveI18nText as A, resolvePolicy as B, setAtPathInPlace as C, DICT_COLLECTION_PREFIX as D, staticDict as E, stripI18nFilled as F, validateI18nTextValue as G, type SessionStrategy as H, type I18nStrategy as I, SessionExpiredError as J, SessionNotFoundError as K, type Layer as L, MissingTranslationError as M, SessionPolicyError as N, type OnMissing as O, PolicyEnforcer as P, createEnforcer as Q, ReservedCollectionNameError as R, ScriptViolationError as S, TranslatorNotConfiguredError as T, UnknownDictCodeError as U, Vault as V, validateSessionPolicy as W, type BlobStrategy as X, BLOB_CHUNKS_COLLECTION as Y, BLOB_COLLECTION as Z, BLOB_EVICTION_AUDIT_COLLECTION as _, type DictEntry as a, type Reducer as a$, BLOB_SLOTS_PREFIX as a0, BLOB_VERSIONS_PREFIX as a1, type BlobEvictionEntry as a2, type BlobFieldPolicy as a3, type BlobFieldsConfig as a4, type BlobObject as a5, type BlobPutOptions as a6, type BlobResponseOptions as a7, BlobSet as a8, type BlobStrategyOpenArgs as a9, IDX_PREFIX as aA, type IndexDef as aB, type IndexState as aC, type IngestRow as aD, type LazyOrderBy as aE, LazyQuery as aF, type LazyQuerySource as aG, type OrderedEntry as aH, PersistedCollectionIndex as aI, type PersistedIndexDef as aJ, compositeKey as aK, decodeIdxId as aL, encodeIdxId as aM, isIdxId as aN, type AggregateStrategy as aO, type AggregateResult as aP, type AggregateSpec as aQ, Aggregation as aR, type AggregationUpstream as aS, GROUPBY_MAX_CARDINALITY as aT, GROUPBY_WARN_CARDINALITY as aU, GroupedAggregation as aV, GroupedQuery as aW, GroupedQueryN as aX, type GroupedRow as aY, type GroupedRowN as aZ, type LiveAggregation as a_, type CompactRunOptions as aa, type CompactionContext as ab, type CompactionResult as ac, DEFAULT_CHUNK_SIZE as ad, EXPORT_AUDIT_COLLECTION as ae, ExportBlobsAbortedError as af, type ExportBlobsAuditEntry as ag, type ExportBlobsHandle as ah, type ExportBlobsOptions as ai, type ExportedBlob as aj, type ObjectListEntry as ak, type ObjectMeta as al, type ObjectProjection as am, type ObjectUrlOptions as an, type PutObjectOptions as ao, type PutUrlOptions as ap, type SlotInfo as aq, type SlotRecord as ar, type VersionRecord as as, createExportBlobsHandle as at, memoryObjectProjection as au, runCompaction as av, type IndexStrategy as aw, COMPOSITE_DELIMITER as ax, CollectionIndexes as ay, type HashIndex as az, type DictKeyDescriptor as b, type SnapshotMeta as b$, type ReducerBuilder as b0, type ReducerOptions as b1, avg as b2, buildLiveAggregation as b3, count as b4, groupAndReduce as b5, max as b6, min as b7, moneyMax as b8, moneyMin as b9, type OpenPeriodOptions as bA, PERIODS_COLLECTION as bB, type PeriodRecord as bC, type ReadOnlyCollection as bD, appendPeriodLedgerEntry as bE, assertTsWritable as bF, chainAnchor as bG, loadPeriods as bH, validatePeriodName as bI, type GuardStrategy as bJ, type GuardChange as bK, type GuardContext as bL, AmendmentForbiddenError as bM, FieldFrozenError as bN, GuardRegistry as bO, type GuardStrategyHandle as bP, IllegalTransitionError as bQ, InvariantError as bR, ReadOnlyVaultFacade as bS, RecordLockedError as bT, type ShadowStrategy as bU, CollectionFrame as bV, VaultFrame as bW, type NoydbPodStore as bX, type RetentionPolicy as bY, type SnapshotPolicy as bZ, type SnapshotStrategy as b_, moneySum as ba, reduceRecords as bb, reducerBuilder as bc, resetGroupByWarnings as bd, sum as be, type CrdtStrategy as bf, type CrdtMode as bg, type CrdtState as bh, type LwwMapState as bi, type RgaState as bj, type YjsState as bk, buildLwwMapState as bl, buildRgaState as bm, mergeCrdtStates as bn, resolveCrdtSnapshot as bo, type ConsentStrategy as bp, CONSENT_AUDIT_COLLECTION as bq, type ConsentAuditEntry as br, type ConsentAuditFilter as bs, type ConsentContext as bt, type ConsentOp as bu, loadConsentEntries as bv, writeConsentEntry as bw, type PeriodsStrategy as bx, type CarryForwardContext as by, type ClosePeriodOptions as bz, DictKeyInUseError as c, type JsonPatchOp as c$, type SnapshotMode as c0, SnapshotNotFoundError as c1, type DerivationStrategy as c2, type DerivationContext as c3, type ArrayOutputSpec as c4, DerivationCapExceededError as c5, DerivationCycleError as c6, DerivationDepthError as c7, DerivationOutputShapeError as c8, DerivationOutputUnknownError as c9, type WithdrawAccessibleOptions as cA, type WithdrawResult as cB, type WithdrawalRequest as cC, type WithdrawalRequestStatus as cD, type DiffEntry as cE, type UnlockedKeyring as cF, type ExportFormat as cG, type BusHandler as cH, type GateDeleteEvent as cI, type GateEventMap as cJ, type GateHandler as cK, type GatePoint as cL, type GatePutEvent as cM, type LifecycleEventMap as cN, type LifecyclePoint as cO, ServiceBus as cP, SubsystemBus as cQ, type Role as cR, type HistoryStrategy as cS, type NoydbStore as cT, type HistoryOptions as cU, type EncryptedEnvelope as cV, type PruneOptions as cW, type AppendInput as cX, type ChangeType as cY, CollectionInstant as cZ, type JsonPatch as c_, DerivationRegistry as ca, type DerivationStrategyHandle as cb, type DerivedFromMeta as cc, type OutputSpec as cd, type RecordOutputSpec as ce, type MaterializedViewStrategy as cf, type MaterializedViewStrategyHandle as cg, type OverlayedViewStrategy as ch, Collection as ci, OverlayBaseIsVirtualError as cj, OverlayCollectionUnavailableError as ck, type OverlayFieldMergeMode as cl, type OverlayFieldMergeRule as cm, OverlayIdMismatchError as cn, OverlayNameCollisionError as co, OverlayedViewRegistry as cp, type OverlayedViewStrategyHandle as cq, type SyncStrategy as cr, type PortabilityStrategy as cs, type ApproveWithdrawalOptions as ct, type ExportAccessibleOptions as cu, NO_PORTABILITY as cv, PortabilityNotEnabledError as cw, type RejectWithdrawalOptions as cx, type RequestWithdrawalOptions as cy, type RequestWithdrawalResult as cz, DictKeyMissingError as d, isClassifiedGroup as d$, LedgerStore as d0, type VaultEngine as d1, VaultInstant as d2, type VerifyResult as d3, applyPatch as d4, computePatch as d5, diff as d6, formatDiff as d7, type SealedRecordStrategy as d8, type SealedCekDeliveryEnvelope as d9, AttestationNotEnabledError as dA, type IssueArgs as dB, type IssueContext as dC, type IssueResult as dD, NO_ATTESTATION as dE, type RevokeContext as dF, getRevokedDocIdsCore as dG, issueAttestationCore as dH, publishRevocationListCore as dI, revokeDocCore as dJ, unrevokeDocCore as dK, type ClassifiedFieldSpec as dL, type ClassifiedStrategy as dM, ClassifiedConfigError as dN, type ClassifiedEntry as dO, type ClassifiedGroup as dP, type ClassifiedList as dQ, type ClassifiedRevealCtx as dR, ClassifiedRevealError as dS, type ClassifiedRider as dT, ClassifiedRotationError as dU, type ClassifiedStorage as dV, type ClassifiedVerdict as dW, type ClassifiedVerifyCtx as dX, ClassifiedVerifyError as dY, NO_CLASSIFIED as dZ, isClassifiedFieldSpec as d_, NO_SEALED_RECORD as da, type SealedCekBinding as db, SealedRecordExpiredError as dc, SealedRecordMismatchError as dd, SealedRecordNotEnabledError as de, type WalkClosureOptions as df, type SealingKeyProvider as dg, type RecoveryEnrollmentInput as dh, type ShamirRecoveryProvider as di, type EnclaveKey as dj, AdoptionStateError as dk, BackupCorruptedError as dl, BackupLedgerError as dm, BundleIntegrityError as dn, BundleSealMismatchError as dp, BundleVersionConflictError as dq, type ClosureResult as dr, type ExtractPartitionResult as ds, PartitionExtractionError as dt, PodVersionConflictError as du, TransferSealError as dv, extractPartition as dw, walkClosure as dx, type AttestationStrategy as dy, AttestationError as dz, DictionaryHandle as e, ConflictError as e$, type PublicEnvelope as e0, type BundleRecipient as e1, type RecipientSealer as e2, type RecipientHint as e3, TxContext as e4, type MVQueryContext as e5, type RegisteredMV as e6, Query as e7, MaterializedViewRegistry as e8, type MaterializedFromMeta as e9, type PolicyDenyReason as eA, type GatePolicy as eB, type AccessibleVault as eC, type AffectedDocument as eD, AlreadyElevatedError as eE, type ArchivePolicy as eF, type ArchiveResult as eG, type ArchiveRunOptions as eH, type ArchiveStrategy as eI, BUNDLE_STORE_POLICY as eJ, type BuiltInGateName as eK, type CacheOptions as eL, type CacheStats as eM, CargoNotEnabledError as eN, type CargoStrategy as eO, type ChangeEvent as eP, ClassifiedNotEnabledError as eQ, type Clause as eR, type CollectionChangeEvent as eS, type CollectionConfig as eT, type CollectionConflictResolver as eU, type CollectionDescriptor as eV, type CollectionStats as eW, ComputedFieldError as eX, type ComputedFields as eY, type ComputedFn as eZ, type Conflict as e_, MaterializedViewConfigError as ea, MaterializedViewCycleError as eb, type MaterializedViewOutput as ec, MaterializedViewSourceUnknownError as ed, MaterializedViewTooLargeError as ee, type UnionArmJoin as ef, type UnionSource as eg, type SearchStrategy as eh, type SequenceStrategy as ei, type CustodyStrategy as ej, type SchemaUpdateStrategy as ek, type TransformFn as el, type PersistedSchemaEnvelope as em, type UpdateDecision as en, type UserEnvelope as eo, type VaultUserApi as ep, type UserApiDeps as eq, type DeepPartialOrNull as er, type UserEnvelopePresented as es, type Unsubscribe as et, type LiveUserEnvelope as eu, type RoundingMode as ev, type VaultPolicy as ew, type ActiveTier as ex, type FactorProof as ey, type GateName as ez, type DictionaryOptions as f, type HistoryEntry as f$, type ConflictPolicy as f0, type ConflictStrategy as f1, CrossJoinSourceUnknownError as f2, CrossJoinTooLargeError as f3, type CrossTierAccessEvent as f4, CustodyApi as f5, type CustodyHost as f6, CustodyNotEnabledError as f7, DEFAULT_CROSS_JOIN_MAX_ROWS as f8, DEFAULT_JOIN_MAX_ROWS as f9, type EnrollAuthenticatorWrappingKEKOptions as fA, type EnrollRecoveryResult as fB, type ExportCapability as fC, ExportCapabilityError as fD, type ExportChunk as fE, type ExportStreamOptions as fF, type FactorKind as fG, type FactorProofBundle as fH, type FactorRequirement as fI, type FenceDoc as fJ, type FenceState as fK, type FieldChange as fL, type FieldClause as fM, type FieldDescriptor as fN, type FieldSource as fO, FilenameSanitizationError as fP, type FilterClause as fQ, ForgetStrategyNotConfiguredError as fR, type FormattedSequenceHandle as fS, type FrozenSnapshotRef as fT, type GhostRecord as fU, type GrantCustodianOptions as fV, type GrantOptions as fW, GroupCardinalityError as fX, type GroupClause as fY, type GuardViolation as fZ, type HistoryConfig as f_, DEFAULT_PUBLIC_ENVELOPE_SCHEMA as fa, DELEGATIONS_COLLECTION as fb, DanglingReferenceError as fc, DataResidencyError as fd, DebugPlaintextError as fe, DebugReservedFieldError as ff, DecryptionError as fg, type DeepPartial as fh, type DeferredNumberingConfig as fi, DelegationTargetMissingError as fj, type DelegationToken as fk, type DeleteManyResult as fl, type DerivationDescriptor as fm, DirectoryDisabledError as fn, type DirtyEntry as fo, type DryRunResult as fp, type DumpSchemaOptions as fq, ELEVATION_AUDIT_COLLECTION as fr, ElevatedHandle as fs, ElevationExpiredError as ft, type EmbeddingDescriptor as fu, EmbeddingDimMismatchError as fv, EmbeddingModelMismatchError as fw, EnclaveNotSupportedError as fx, type EnrollAuthenticatorOptions as fy, type EnrollAuthenticatorWrappingDEKsOptions as fz, type I18nMap as g, NO_CUSTODY as g$, INDEXED_STORE_POLICY as g0, type ImportCapability as g1, ImportCapabilityError as g2, type IndexFieldName as g3, IndexRequiredError as g4, IndexWriteFailureError as g5, type InferOutput as g6, type InternalCollectionStats as g7, InvalidKeyError as g8, type IssueDelegationOptions as g9, type LocaleReadOptions as gA, Lru as gB, type LruOptions as gC, type LruStats as gD, MAGIC_LINK_CONTENT_INFO_PREFIX as gE, MAGIC_LINK_GRANTS_COLLECTION as gF, MAGIC_LINK_KEK_INFO_PREFIX as gG, type MagicLinkGrantPayload as gH, type MagicLinkGrantRecord as gI, ManagedRecoveryNotEnrolledError as gJ, type MaterializedViewDescriptor as gK, MemoryRecipientSealer as gL, MemorySealingKeyProvider as gM, MigrationRequiredError as gN, MoneyCurrencyError as gO, type MoneyDescriptor as gP, type MoneyOptions as gQ, type MoneyOptionsFixed as gR, type MoneyOptionsMulti as gS, MoneyPrecisionError as gT, type MoneyString as gU, MoneyUnsupportedError as gV, NOYDB_BACKUP_VERSION as gW, NOYDB_FORMAT_VERSION as gX, NOYDB_KEYRING_VERSION as gY, NOYDB_SYNC_VERSION as gZ, NO_CARGO as g_, type IssueMagicLinkGrantOptions as ga, type JoinContext as gb, type JoinLeg as gc, type JoinStrategy as gd, JoinTooLargeError as ge, type JoinableSource as gf, type KeyringAuthenticator as gg, type KeyringAuthenticatorWrappingDEKs as gh, type KeyringAuthenticatorWrappingKEK as gi, KeyringCorruptError as gj, KeyringExpiredError as gk, type KeyringFile as gl, LedgerContentionError as gm, type LiberateOptions as gn, type LiberateResult as go, LinkEndpointError as gp, LinkIntegrityError as gq, type LinkOnDelete as gr, type LinkRow as gs, type LinkSetHandle as gt, type LinkSpec as gu, type ListAccessibleVaultsOptions as gv, type ListPageResult as gw, type ListUsersOptions as gx, type LiveQuery as gy, type LiveUpstream as gz, type I18nTextDescriptor as h, type RecoverPassphraseResult as h$, NO_SEARCH as h0, NO_SEQUENCE as h1, NetworkError as h2, type NextOptions as h3, NoAccessError as h4, NonAdditiveSchemaChangeError as h5, NotFoundError as h6, Noydb as h7, type NoydbBundleStore as h8, NoydbError as h9, type PublicEnvelopeSchema as hA, type PublicEnvelopeText as hB, type PullMode as hC, type PullOptions as hD, type PullPolicy as hE, type PullResult as hF, type PushMode as hG, type PushOptions as hH, type PushPolicy as hI, type PushResult as hJ, type PutManyItemOptions as hK, type PutManyOptions as hL, type PutManyResult as hM, type QueryAcrossOptions as hN, type QueryAcrossResult as hO, type QueryField as hP, type QueryPlan as hQ, type QuerySource as hR, type QuickUnlockState as hS, QuickUnlockStore as hT, QuiesceTimeoutError as hU, type ReAuthOperation as hV, ReadOnlyAtInstantError as hW, ReadOnlyError as hX, ReadOnlyFrameError as hY, RecordCekNotFoundError as hZ, type RecoverPassphraseInput as h_, type NoydbEventMap as ha, type NoydbOptions as hb, type Assignment as hc, NumberingUncertaintyError as hd, type Operator as he, type OrderBy as hf, type OverlayViewDescriptor as hg, POD_STORE_POLICY as hh, PUBLIC_ENVELOPE_FIELDS as hi, type PaperRecoveryDoc as hj, type PaperRecoveryEntry as hk, type PassphrasePolicy as hl, type PassphraseValidationResult as hm, PathEscapeError as hn, PeriodClosedError as ho, type Permission as hp, PermissionDeniedError as hq, type Permissions as hr, type PersistedSchemaKind as hs, type PlaintextTranslatorContext as ht, type PlaintextTranslatorFn as hu, PolicyDeniedError as hv, PresenceHandle as hw, type PresencePeer as hx, PrivilegeEscalationError as hy, type PublicEnvelopeField as hz, type I18nTextOptions as i, SyncScheduler as i$, type RecoverUserOptions as i0, RecoveryNotEnrolledError as i1, RecoveryProfileNotImplementedError as i2, type RecoveryProof as i3, type RefDescriptor as i4, RefIntegrityError as i5, type RefMode as i6, RefRegistry as i7, RefScopeError as i8, type RefViolation as i9, type SearchOptions as iA, type SearchResult as iB, SequenceContentionError as iC, type SequenceHandle as iD, SequenceNotEnabledError as iE, SequenceOfflineError as iF, type SequenceOptions as iG, SequenceStore as iH, type SequenceStoreOptions as iI, type SessionPolicy as iJ, type SetPublicEnvelopeInput as iK, type ShamirRecoveryDoc as iL, type ShamirRecoveryEntry as iM, ShardProvisioningError as iN, type SlotRewrapCeremony as iO, type SlotRewrapContext as iP, type StandardSchemaV1 as iQ, type StandardSchemaV1Issue as iR, type StandardSchemaV1SyncResult as iS, type StoreAuth as iT, type StoreAuthKind as iU, type StoreCapabilities as iV, StoreCapabilityError as iW, type StoreTime as iX, SyncEngine as iY, type SyncMetadata as iZ, type SyncPolicy as i_, ReservedVaultNameError as ia, type ResolvedPublicEnvelopeSchema as ib, type RetrieveHit as ic, type RetrieveOptions as id, type RevokeOptions as ie, type RotatePassphraseInput as ig, type RotateRecoveryOptions as ih, type RotateRecoveryResult as ii, SEALED_PASSPHRASE_RECORD_ID as ij, ScanBuilder as ik, type ScanPageProvider as il, type SchemaDelta as im, SchemaFenceError as io, type SchemaIntrospection as ip, SchemaLockedError as iq, SchemaUpdateError as ir, SchemaValidationError as is, type Sealed as it, type SealedEnvelope as iu, SealedHandle as iv, type SealedPassphrase as iw, type SealedView as ix, type SearchEntry as iy, SearchNotEnabledError as iz, LocaleNotSpecifiedError as j, enrollAuthenticator as j$, type SyncSchedulerStatus as j0, type SyncStatus as j1, type SyncTarget as j2, type SyncTargetRole as j3, SyncTransaction as j4, type SyncTransactionResult as j5, type TabChannel as j6, type TabCoordinationOptions as j7, type TabLockManager as j8, type TabPresence as j9, type WarningRules as jA, WeakPassphraseError as jB, type WeakPassphraseReason as jC, type WithArchiveOptions as jD, WithdrawalRequestError as jE, type WrappedDeksBlob as jF, type WriteConflict as jG, type WriteQueue as jH, aesGcmOpen as jI, applyJoins as jJ, approveWithdrawal as jK, asMoney as jL, assertStrongPassphrase as jM, base64ToBuffer as jN, bufferToBase64 as jO, buildLiveQuery as jP, buildRecipientKeyringFile as jQ, burnPaperRecoveryEntry as jR, compileSequenceFormat as jS, createNoydb as jT, createStore as jU, decryptBytes as jV, decryptDeterministic as jW, deriveMagicLinkContentKey as jX, derivePresenceKey as jY, encryptBytes as jZ, encryptDeterministic as j_, type TabRole as ja, TamperedError as jb, TierDemoteDeniedError as jc, type TierMode as jd, TierNotGrantedError as je, TiersNotEnabledError as jf, type TransactionInvariant as jg, type TranslatorAuditEntry as jh, TxCollection as ji, type TxOp as jj, TxVault as jk, UniqueConstraintError as jl, UnknownShardError as jm, UnsupportedIndexOptionError as jn, type UpdateAuthenticatorOptions as jo, type UpdateContext as jp, type UpdateUserOptions as jq, type UserEnvelopeCheckGate as jr, UserEnvelopeOversizedError as js, type UserInfo as jt, ValidationError as ju, type VaultBackup as jv, type VaultPolicyOnDisk as jw, type VaultSchemaSnapshot as jx, type VaultSnapshot as jy, VaultTemplateNotFoundError as jz, type OnMissingPolicy as k, validateSchemaOutput as k$, estimateEntropy as k0, evalComputedFields as k1, evaluateClause as k2, evaluateExportCapability as k3, evaluateFieldClause as k4, evaluateImportCapability as k5, executePlan as k6, exportAccessibleData as k7, findAuthenticator as k8, hasExportCapability as k9, parseRsaOaepTlv as kA, parseSealedEnvelope as kB, readMagicLinkGrantRecord as kC, readPath as kD, recoverUser as kE, ref as kF, refArray as kG, rejectWithdrawal as kH, removeAuthenticator as kI, requestWithdrawal as kJ, resetJoinWarnings as kK, resolveSchema as kL, resolveSequenceKey as kM, revokeDelegation as kN, revokeMagicLinkGrant as kO, runTransaction as kP, savePaperRecoveryEntries as kQ, saveSealedPassphrase as kR, saveShamirRecoveryEntries as kS, sealRsaOaepTlv as kT, unwrapDeksFromBlob as kU, unwrapDeksFromPaperEntry as kV, unwrapDeksFromShamirEntry as kW, unwrapMagicLinkGrant as kX, validatePassphrase as kY, validatePublicEnvelopeInput as kZ, validateSchemaInput as k_, hasImportCapability as ka, hasRecoveryEnrolled as kb, isLinkCollectionName as kc, isMagicLinkGrantExpired as kd, isMoneyDescriptor as ke, isMoneyString as kf, isPublicEnvelope as kg, isRefArray as kh, issueDelegation as ki, recoverPassphrase as kj, rotatePassphrase as kk, liberateVault as kl, listMagicLinkGrants as km, listUsers as kn, listUsersWithEnvelopes as ko, listWithdrawalRequests as kp, loadActiveDelegations as kq, loadPaperRecoveryEntries as kr, loadSealedPassphrase as ks, loadShamirRecoveryEntries as kt, magicLinkGrantRecordId as ku, mintPaperRecoveryEntry as kv, mintShamirRecoveryEntry as kw, mintWrappedDeksBlob as kx, money as ky, moneyNumber as kz, type ResolveI18nOptions as l, withArchive as l0, withDeferredNumbering as l1, withdrawAccessibleData as l2, writeMagicLinkGrant as l3, changeSecret as l4, createOwnerKeyring as l5, ensureCollectionDEK as l6, grant as l7, loadKeyring as l8, persistKeyring as l9, revoke as la, updateAuthenticator as lb, updateKeyringIdentity as lc, type TxStrategy as ld, type AmendmentTxOptions as le, CrossShardJoinError as lf, sha256Hex as lg, type CrossJoinClause as lh, NO_TIERS as li, type TiersContext as lj, type TiersStrategy as lk, assertDeclaredTier as ll, assertTiersEnabled as lm, classifySealedShred as ln, demote as lo, elevate as lp, getAtTier as lq, listAtTier as lr, putAtTier as ls, withTiers as lt, type ScriptWarning as m, type StaticDictDescriptor as n, StaticDictReadonlyError as o, applyI18nLocale as p, dictCollectionName as q, dictKey as r, enforceScript as s, getAtPath as t, i18nText as u, inferScripts as v, isDictCollectionName as w, isDictKeyDescriptor as x, isI18nTextDescriptor as y, isStaticDictDescriptor as z };

package/dist/{index-BF9_96A5.d.ts → index-DTMUUwwW.d.ts}

@@ -1,9 +1,9 @@
-import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, ex as CargoStrategy } from './index-BzUo1B6n.js';
+import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, eO as CargoStrategy } from './index-D05bV0_g.js';
 import './ulid-DRH25k3y.js';
 import './index-B9QdHytu.js';
 import './kernel/index.js';
-import './describe-aBkJR2sd.js';
-import './vault-diff-B5fYNBL7.js';
+import './describe-0tiXAjoO.js';
+import './vault-diff-Fn0WeY2w.js';
 
 /**
  * Hub-core constants that must be referenceable without pulling any