@noy-db/hub 0.3.0-pre.2 → 0.3.0-pre.3

package/dist/index.d.ts

@@ -1,25 +1,27 @@
-import { e0 as SearchStrategy, e1 as SequenceStrategy, e2 as CustodyStrategy, cV as EncryptedEnvelope, e3 as SchemaUpdateStrategy, e4 as TransformFn, cT as NoydbStore, e5 as PersistedSchemaEnvelope, dj as EnclaveKey, e6 as UpdateDecision, dL as PublicEnvelope, e7 as UserEnvelope, e8 as VaultUserApi, e9 as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, ea as DeepPartialOrNull, eb as UserEnvelopePresented, ec as Unsubscribe, ed as LiveUserEnvelope, ee as RoundingMode, cF as UnlockedKeyring, ef as VaultPolicy, eg as ActiveTier, eh as FactorProof, ei as GateName, ej as PolicyDenyReason, ek as GatePolicy } from './index-_6At2_9_.js';
-export { el as AccessibleVault, em as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, en as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eo as ArchivePolicy, ep as ArchiveResult, eq as ArchiveRunOptions, er as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, es as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, et as BuiltInGateName, dn as BundleIntegrityError, dM as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eu as CacheOptions, ev as CacheStats, ew as CargoNotEnabledError, ex as CargoStrategy, ey as ChangeEvent, cY as ChangeType, ez as Clause, bz as ClosePeriodOptions, ci as Collection, eA as CollectionChangeEvent, eB as CollectionConfig, eC as CollectionConflictResolver, eD as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eE as CollectionStats, eF as ComputedFieldError, eG as ComputedFields, eH as ComputedFn, eI as Conflict, eJ as ConflictError, eK as ConflictPolicy, eL as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, eM as CrossJoinSourceUnknownError, eN as CrossJoinTooLargeError, eO as CrossTierAccessEvent, eP as CustodyApi, eQ as CustodyHost, eR as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, eS as DEFAULT_CROSS_JOIN_MAX_ROWS, eT as DEFAULT_JOIN_MAX_ROWS, eU as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, eV as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, eW as DanglingReferenceError, eX as DataResidencyError, eY as DebugPlaintextError, eZ as DebugReservedFieldError, e_ as DecryptionError, e$ as DeepPartial, f0 as DeferredNumberingConfig, f1 as DelegationTargetMissingError, f2 as DelegationToken, f3 as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, f4 as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, f5 as DirectoryDisabledError, f6 as DirtyEntry, f7 as DryRunResult, f8 as DumpSchemaOptions, f9 as ELEVATION_AUDIT_COLLECTION, fa as ElevatedHandle, fb as ElevationExpiredError, fc as EmbeddingDescriptor, fd as EmbeddingDimMismatchError, fe as EmbeddingModelMismatchError, ff as EnclaveNotSupportedError, fg as EnrollAuthenticatorOptions, fh as EnrollAuthenticatorWrappingDEKsOptions, fi as EnrollAuthenticatorWrappingKEKOptions, fj as EnrollRecoveryResult, fk as ExportCapability, fl as ExportCapabilityError, fm as ExportChunk, cG as ExportFormat, fn as ExportStreamOptions, fo as FactorKind, fp as FactorProofBundle, fq as FactorRequirement, fr as FenceDoc, fs as FenceState, ft as FieldChange, fu as FieldClause, fv as FieldDescriptor, bN as FieldFrozenError, fw as FieldSource, fx as FilenameSanitizationError, fy as FilterClause, fz as ForgetStrategyNotConfiguredError, fA as FormattedSequenceHandle, fB as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fC as GhostRecord, fD as GrantCustodianOptions, fE as GrantOptions, fF as GroupCardinalityError, fG as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, fH as GuardViolation, az as HashIndex, fI as HistoryConfig, fJ as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, fK as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, fL as ImportCapability, fM as ImportCapabilityError, aB as IndexDef, fN as IndexFieldName, fO as IndexRequiredError, fP as IndexWriteFailureError, fQ as InferOutput, fR as InternalCollectionStats, fS as InvalidKeyError, bR as InvariantError, fT as IssueDelegationOptions, fU as IssueMagicLinkGrantOptions, fV as JoinContext, fW as JoinLeg, fX as JoinStrategy, fY as JoinTooLargeError, fZ as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, f_ as KeyringAuthenticator, f$ as KeyringAuthenticatorWrappingDEKs, g0 as KeyringAuthenticatorWrappingKEK, g1 as KeyringCorruptError, g2 as KeyringExpiredError, g3 as KeyringFile, L as Layer, g4 as LedgerContentionError, d0 as LedgerStore, g5 as LiberateOptions, g6 as LiberateResult, g7 as LinkEndpointError, g8 as LinkIntegrityError, g9 as LinkOnDelete, ga as LinkRow, gb as LinkSetHandle, gc as LinkSpec, gd as ListAccessibleVaultsOptions, ge as ListPageResult, gf as ListUsersOptions, a_ as LiveAggregation, gg as LiveQuery, gh as LiveUpstream, j as LocaleNotSpecifiedError, gi as LocaleReadOptions, gj as Lru, gk as LruOptions, gl as LruStats, bi as LwwMapState, gm as MAGIC_LINK_CONTENT_INFO_PREFIX, gn as MAGIC_LINK_GRANTS_COLLECTION, go as MAGIC_LINK_KEK_INFO_PREFIX, gp as MagicLinkGrantPayload, gq as MagicLinkGrantRecord, gr as ManagedRecoveryNotEnrolledError, dU as MaterializedFromMeta, dV as MaterializedViewConfigError, dW as MaterializedViewCycleError, gs as MaterializedViewDescriptor, dX as MaterializedViewOutput, dY as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, dZ as MaterializedViewTooLargeError, gt as MemoryRecipientSealer, gu as MemorySealingKeyProvider, gv as MigrationRequiredError, M as MissingTranslationError, gw as MoneyCurrencyError, gx as MoneyDescriptor, gy as MoneyOptions, gz as MoneyOptionsFixed, gA as MoneyOptionsMulti, gB as MoneyPrecisionError, gC as MoneyString, gD as MoneyUnsupportedError, gE as NOYDB_BACKUP_VERSION, gF as NOYDB_FORMAT_VERSION, gG as NOYDB_KEYRING_VERSION, gH as NOYDB_SYNC_VERSION, gI as NO_CARGO, gJ as NO_CUSTODY, gK as NO_SEARCH, gL as NO_SEQUENCE, gM as NetworkError, gN as NextOptions, gO as NoAccessError, gP as NonAdditiveSchemaChangeError, gQ as NotFoundError, gR as Noydb, gS as NoydbBundleStore, gT as NoydbError, gU as NoydbEventMap, gV as NoydbOptions, bX as NoydbPodStore, gW as NumberingAssignment, gX as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, gY as Operator, gZ as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, g_ as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, g$ as POD_STORE_POLICY, h0 as PUBLIC_ENVELOPE_FIELDS, h1 as PaperRecoveryDoc, h2 as PaperRecoveryEntry, h3 as PassphrasePolicy, h4 as PassphraseValidationResult, h5 as PathEscapeError, h6 as PeriodClosedError, bC as PeriodRecord, h7 as Permission, h8 as PermissionDeniedError, h9 as Permissions, ha as PersistedSchemaKind, hb as PlaintextTranslatorContext, hc as PlaintextTranslatorFn, du as PodVersionConflictError, hd as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, he as PresenceHandle, hf as PresencePeer, hg as PrivilegeEscalationError, cW as PruneOptions, hh as PublicEnvelopeField, hi as PublicEnvelopeSchema, hj as PublicEnvelopeText, hk as PullMode, hl as PullOptions, hm as PullPolicy, hn as PullResult, ho as PushMode, hp as PushOptions, hq as PushPolicy, hr as PushResult, hs as PutManyItemOptions, ht as PutManyOptions, hu as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, dS as Query, hv as QueryAcrossOptions, hw as QueryAcrossResult, hx as QueryField, hy as QueryPlan, hz as QuerySource, hA as QuickUnlockState, hB as QuickUnlockStore, hC as QuiesceTimeoutError, hD as ReAuthOperation, hE as ReadOnlyAtInstantError, hF as ReadOnlyError, hG as ReadOnlyFrameError, dO as RecipientHint, dN as RecipientSealer, hH as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, hI as RecoverPassphraseInput, hJ as RecoverPassphraseResult, hK as RecoverUserOptions, hL as RecoveryNotEnrolledError, hM as RecoveryProfileNotImplementedError, hN as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, hO as RefDescriptor, hP as RefIntegrityError, hQ as RefMode, hR as RefRegistry, hS as RefScopeError, hT as RefViolation, R as ReservedCollectionNameError, hU as ReservedVaultNameError, l as ResolveI18nOptions, hV as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, hW as RetrieveHit, hX as RetrieveOptions, hY as RevokeOptions, bj as RgaState, cR as Role, hZ as RotatePassphraseInput, h_ as RotateRecoveryOptions, h$ as RotateRecoveryResult, i0 as SEALED_PASSPHRASE_RECORD_ID, i1 as ScanBuilder, i2 as ScanPageProvider, i3 as SchemaDelta, i4 as SchemaFenceError, i5 as SchemaIntrospection, i6 as SchemaLockedError, i7 as SchemaUpdateError, i8 as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, i9 as Sealed, ia as SealedEnvelope, ib as SealedHandle, ic as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, id as SealedView, dg as SealingKeyProvider, ie as SearchEntry, ig as SearchNotEnabledError, ih as SearchOptions, ii as SearchResult, ij as SequenceContentionError, ik as SequenceHandle, il as SequenceNotEnabledError, im as SequenceOfflineError, io as SequenceOptions, ip as SequenceStore, iq as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, ir as SessionPolicy, N as SessionPolicyError, is as SetPublicEnvelopeInput, it as ShamirRecoveryDoc, iu as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iv as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iw as SlotRewrapCeremony, ix as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iy as StandardSchemaV1, iz as StandardSchemaV1Issue, iA as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iB as StoreAuth, iC as StoreAuthKind, iD as StoreCapabilities, iE as StoreCapabilityError, iF as StoreTime, iG as SyncEngine, iH as SyncMetadata, iI as SyncPolicy, iJ as SyncScheduler, iK as SyncSchedulerStatus, iL as SyncStatus, iM as SyncTarget, iN as SyncTargetRole, iO as SyncTransaction, iP as SyncTransactionResult, iQ as TabChannel, iR as TabCoordinationOptions, iS as TabLockManager, iT as TabPresence, iU as TabRole, iV as TamperedError, iW as TierDemoteDeniedError, iX as TierMode, iY as TierNotGrantedError, iZ as TiersNotEnabledError, i_ as TransactionInvariant, i$ as TranslatorAuditEntry, T as TranslatorNotConfiguredError, j0 as TxCollection, dP as TxContext, j1 as TxOp, j2 as TxVault, d_ as UnionArmJoin, d$ as UnionSource, j3 as UniqueConstraintError, U as UnknownDictCodeError, j4 as UnknownShardError, j5 as UnsupportedIndexOptionError, j6 as UpdateAuthenticatorOptions, j7 as UpdateContext, j8 as UpdateUserOptions, j9 as UserEnvelopeCheckGate, ja as UserEnvelopeOversizedError, jb as UserInfo, jc as ValidationError, V as Vault, jd as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, je as VaultPolicyOnDisk, jf as VaultSchemaSnapshot, jg as VaultSnapshot, jh as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, ji as WarningRules, jj as WeakPassphraseError, jk as WeakPassphraseReason, jl as WithArchiveOptions, jm as WithdrawalRequestError, jn as WrappedDeksBlob, jo as WriteConflict, jp as WriteQueue, bk as YjsState, jq as aesGcmOpen, p as applyI18nLocale, jr as applyJoins, d4 as applyPatch, js as approveWithdrawal, jt as asMoney, ju as assertStrongPassphrase, b2 as avg, jv as base64ToBuffer, jw as bufferToBase64, jx as buildLiveQuery, jy as buildRecipientKeyringFile, jz as burnPaperRecoveryEntry, jA as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jB as createNoydb, jC as createStore, jD as decryptBytes, jE as decryptDeterministic, jF as deriveMagicLinkContentKey, jG as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, jH as encryptBytes, jI as encryptDeterministic, s as enforceScript, jJ as enrollAuthenticator, jK as estimateEntropy, jL as evalComputedFields, jM as evaluateClause, jN as evaluateExportCapability, jO as evaluateFieldClause, jP as evaluateImportCapability, jQ as executePlan, jR as exportAccessibleData, jS as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, jT as hasExportCapability, jU as hasImportCapability, jV as hasRecoveryEnrolled, u as i18nText, v as inferScripts, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, jW as isLinkCollectionName, jX as isMagicLinkGrantExpired, jY as isMoneyDescriptor, jZ as isMoneyString, j_ as isPublicEnvelope, j$ as isRefArray, z as isStaticDictDescriptor, k0 as issueDelegation, k1 as keyringRecoverPassphrase, k2 as keyringRotatePassphrase, k3 as liberateVault, k4 as listMagicLinkGrants, k5 as listUsers, k6 as listUsersWithEnvelopes, k7 as listWithdrawalRequests, k8 as loadActiveDelegations, k9 as loadPaperRecoveryEntries, ka as loadSealedPassphrase, kb as loadShamirRecoveryEntries, kc as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, kd as mintPaperRecoveryEntry, ke as mintShamirRecoveryEntry, kf as mintWrappedDeksBlob, kg as money, b8 as moneyMax, b9 as moneyMin, kh as moneyNumber, ba as moneySum, ki as parseRsaOaepTlv, kj as parseSealedEnvelope, kk as readMagicLinkGrantRecord, kl as readPath, km as recoverUser, bb as reduceRecords, bc as reducerBuilder, kn as ref, ko as refArray, kp as rejectWithdrawal, kq as removeAuthenticator, kr as requestWithdrawal, ks as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kt as resolvePublicEnvelopeSchema, ku as resolveSequenceKey, kv as revokeDelegation, kw as revokeMagicLinkGrant, kx as runTransaction, ky as savePaperRecoveryEntries, kz as saveSealedPassphrase, kA as saveShamirRecoveryEntries, kB as sealRsaOaepTlv, E as staticDict, be as sum, kC as unwrapDeksFromBlob, kD as unwrapDeksFromPaperEntry, kE as unwrapDeksFromShamirEntry, kF as unwrapMagicLinkGrant, G as validateI18nTextValue, kG as validatePassphrase, kH as validatePublicEnvelopeInput, kI as validateSchemaInput, kJ as validateSchemaOutput, W as validateSessionPolicy, kK as withArchive, kL as withDeferredNumbering, kM as withdrawAccessibleData, kN as writeMagicLinkGrant } from './index-_6At2_9_.js';
-export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-B4RoFj3B.js';
+import { eh as SearchStrategy, ei as SequenceStrategy, ej as CustodyStrategy, cV as EncryptedEnvelope, ek as SchemaUpdateStrategy, el as TransformFn, cT as NoydbStore, em as PersistedSchemaEnvelope, dj as EnclaveKey, en as UpdateDecision, e0 as PublicEnvelope, eo as UserEnvelope, ep as VaultUserApi, eq as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, er as DeepPartialOrNull, es as UserEnvelopePresented, et as Unsubscribe, eu as LiveUserEnvelope, ev as RoundingMode, cF as UnlockedKeyring, ew as VaultPolicy, ex as ActiveTier, ey as FactorProof, ez as GateName, eA as PolicyDenyReason, eB as GatePolicy } from './index-D05bV0_g.js';
+export { eC as AccessibleVault, eD as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, eE as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eF as ArchivePolicy, eG as ArchiveResult, eH as ArchiveRunOptions, eI as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, eJ as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, eK as BuiltInGateName, dn as BundleIntegrityError, e1 as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eL as CacheOptions, eM as CacheStats, eN as CargoNotEnabledError, eO as CargoStrategy, eP as ChangeEvent, cY as ChangeType, dN as ClassifiedConfigError, dO as ClassifiedEntry, dL as ClassifiedFieldSpec, dP as ClassifiedGroup, dQ as ClassifiedList, eQ as ClassifiedNotEnabledError, dS as ClassifiedRevealError, dU as ClassifiedRotationError, dV as ClassifiedStorage, dW as ClassifiedVerdict, dY as ClassifiedVerifyError, eR as Clause, bz as ClosePeriodOptions, ci as Collection, eS as CollectionChangeEvent, eT as CollectionConfig, eU as CollectionConflictResolver, eV as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eW as CollectionStats, eX as ComputedFieldError, eY as ComputedFields, eZ as ComputedFn, e_ as Conflict, e$ as ConflictError, f0 as ConflictPolicy, f1 as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, f2 as CrossJoinSourceUnknownError, f3 as CrossJoinTooLargeError, f4 as CrossTierAccessEvent, f5 as CustodyApi, f6 as CustodyHost, f7 as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, f8 as DEFAULT_CROSS_JOIN_MAX_ROWS, f9 as DEFAULT_JOIN_MAX_ROWS, fa as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, fb as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, fc as DanglingReferenceError, fd as DataResidencyError, fe as DebugPlaintextError, ff as DebugReservedFieldError, fg as DecryptionError, fh as DeepPartial, fi as DeferredNumberingConfig, fj as DelegationTargetMissingError, fk as DelegationToken, fl as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, fm as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, fn as DirectoryDisabledError, fo as DirtyEntry, fp as DryRunResult, fq as DumpSchemaOptions, fr as ELEVATION_AUDIT_COLLECTION, fs as ElevatedHandle, ft as ElevationExpiredError, fu as EmbeddingDescriptor, fv as EmbeddingDimMismatchError, fw as EmbeddingModelMismatchError, fx as EnclaveNotSupportedError, fy as EnrollAuthenticatorOptions, fz as EnrollAuthenticatorWrappingDEKsOptions, fA as EnrollAuthenticatorWrappingKEKOptions, fB as EnrollRecoveryResult, fC as ExportCapability, fD as ExportCapabilityError, fE as ExportChunk, cG as ExportFormat, fF as ExportStreamOptions, fG as FactorKind, fH as FactorProofBundle, fI as FactorRequirement, fJ as FenceDoc, fK as FenceState, fL as FieldChange, fM as FieldClause, fN as FieldDescriptor, bN as FieldFrozenError, fO as FieldSource, fP as FilenameSanitizationError, fQ as FilterClause, fR as ForgetStrategyNotConfiguredError, fS as FormattedSequenceHandle, fT as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fU as GhostRecord, fV as GrantCustodianOptions, fW as GrantOptions, fX as GroupCardinalityError, fY as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, fZ as GuardViolation, az as HashIndex, f_ as HistoryConfig, f$ as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, g0 as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, g1 as ImportCapability, g2 as ImportCapabilityError, aB as IndexDef, g3 as IndexFieldName, g4 as IndexRequiredError, g5 as IndexWriteFailureError, g6 as InferOutput, g7 as InternalCollectionStats, g8 as InvalidKeyError, bR as InvariantError, g9 as IssueDelegationOptions, ga as IssueMagicLinkGrantOptions, gb as JoinContext, gc as JoinLeg, gd as JoinStrategy, ge as JoinTooLargeError, gf as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, gg as KeyringAuthenticator, gh as KeyringAuthenticatorWrappingDEKs, gi as KeyringAuthenticatorWrappingKEK, gj as KeyringCorruptError, gk as KeyringExpiredError, gl as KeyringFile, L as Layer, gm as LedgerContentionError, d0 as LedgerStore, gn as LiberateOptions, go as LiberateResult, gp as LinkEndpointError, gq as LinkIntegrityError, gr as LinkOnDelete, gs as LinkRow, gt as LinkSetHandle, gu as LinkSpec, gv as ListAccessibleVaultsOptions, gw as ListPageResult, gx as ListUsersOptions, a_ as LiveAggregation, gy as LiveQuery, gz as LiveUpstream, j as LocaleNotSpecifiedError, gA as LocaleReadOptions, gB as Lru, gC as LruOptions, gD as LruStats, bi as LwwMapState, gE as MAGIC_LINK_CONTENT_INFO_PREFIX, gF as MAGIC_LINK_GRANTS_COLLECTION, gG as MAGIC_LINK_KEK_INFO_PREFIX, gH as MagicLinkGrantPayload, gI as MagicLinkGrantRecord, gJ as ManagedRecoveryNotEnrolledError, e9 as MaterializedFromMeta, ea as MaterializedViewConfigError, eb as MaterializedViewCycleError, gK as MaterializedViewDescriptor, ec as MaterializedViewOutput, ed as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, ee as MaterializedViewTooLargeError, gL as MemoryRecipientSealer, gM as MemorySealingKeyProvider, gN as MigrationRequiredError, M as MissingTranslationError, gO as MoneyCurrencyError, gP as MoneyDescriptor, gQ as MoneyOptions, gR as MoneyOptionsFixed, gS as MoneyOptionsMulti, gT as MoneyPrecisionError, gU as MoneyString, gV as MoneyUnsupportedError, gW as NOYDB_BACKUP_VERSION, gX as NOYDB_FORMAT_VERSION, gY as NOYDB_KEYRING_VERSION, gZ as NOYDB_SYNC_VERSION, g_ as NO_CARGO, g$ as NO_CUSTODY, h0 as NO_SEARCH, h1 as NO_SEQUENCE, h2 as NetworkError, h3 as NextOptions, h4 as NoAccessError, h5 as NonAdditiveSchemaChangeError, h6 as NotFoundError, h7 as Noydb, h8 as NoydbBundleStore, h9 as NoydbError, ha as NoydbEventMap, hb as NoydbOptions, bX as NoydbPodStore, hc as NumberingAssignment, hd as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, he as Operator, hf as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, hg as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, hh as POD_STORE_POLICY, hi as PUBLIC_ENVELOPE_FIELDS, hj as PaperRecoveryDoc, hk as PaperRecoveryEntry, hl as PassphrasePolicy, hm as PassphraseValidationResult, hn as PathEscapeError, ho as PeriodClosedError, bC as PeriodRecord, hp as Permission, hq as PermissionDeniedError, hr as Permissions, hs as PersistedSchemaKind, ht as PlaintextTranslatorContext, hu as PlaintextTranslatorFn, du as PodVersionConflictError, hv as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, hw as PresenceHandle, hx as PresencePeer, hy as PrivilegeEscalationError, cW as PruneOptions, hz as PublicEnvelopeField, hA as PublicEnvelopeSchema, hB as PublicEnvelopeText, hC as PullMode, hD as PullOptions, hE as PullPolicy, hF as PullResult, hG as PushMode, hH as PushOptions, hI as PushPolicy, hJ as PushResult, hK as PutManyItemOptions, hL as PutManyOptions, hM as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, e7 as Query, hN as QueryAcrossOptions, hO as QueryAcrossResult, hP as QueryField, hQ as QueryPlan, hR as QuerySource, hS as QuickUnlockState, hT as QuickUnlockStore, hU as QuiesceTimeoutError, hV as ReAuthOperation, hW as ReadOnlyAtInstantError, hX as ReadOnlyError, hY as ReadOnlyFrameError, e3 as RecipientHint, e2 as RecipientSealer, hZ as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, h_ as RecoverPassphraseInput, h$ as RecoverPassphraseResult, i0 as RecoverUserOptions, i1 as RecoveryNotEnrolledError, i2 as RecoveryProfileNotImplementedError, i3 as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, i4 as RefDescriptor, i5 as RefIntegrityError, i6 as RefMode, i7 as RefRegistry, i8 as RefScopeError, i9 as RefViolation, R as ReservedCollectionNameError, ia as ReservedVaultNameError, l as ResolveI18nOptions, ib as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, ic as RetrieveHit, id as RetrieveOptions, ie as RevokeOptions, bj as RgaState, cR as Role, ig as RotatePassphraseInput, ih as RotateRecoveryOptions, ii as RotateRecoveryResult, ij as SEALED_PASSPHRASE_RECORD_ID, ik as ScanBuilder, il as ScanPageProvider, im as SchemaDelta, io as SchemaFenceError, ip as SchemaIntrospection, iq as SchemaLockedError, ir as SchemaUpdateError, is as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, it as Sealed, iu as SealedEnvelope, iv as SealedHandle, iw as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, ix as SealedView, dg as SealingKeyProvider, iy as SearchEntry, iz as SearchNotEnabledError, iA as SearchOptions, iB as SearchResult, iC as SequenceContentionError, iD as SequenceHandle, iE as SequenceNotEnabledError, iF as SequenceOfflineError, iG as SequenceOptions, iH as SequenceStore, iI as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, iJ as SessionPolicy, N as SessionPolicyError, iK as SetPublicEnvelopeInput, iL as ShamirRecoveryDoc, iM as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iN as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iO as SlotRewrapCeremony, iP as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iQ as StandardSchemaV1, iR as StandardSchemaV1Issue, iS as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iT as StoreAuth, iU as StoreAuthKind, iV as StoreCapabilities, iW as StoreCapabilityError, iX as StoreTime, iY as SyncEngine, iZ as SyncMetadata, i_ as SyncPolicy, i$ as SyncScheduler, j0 as SyncSchedulerStatus, j1 as SyncStatus, j2 as SyncTarget, j3 as SyncTargetRole, j4 as SyncTransaction, j5 as SyncTransactionResult, j6 as TabChannel, j7 as TabCoordinationOptions, j8 as TabLockManager, j9 as TabPresence, ja as TabRole, jb as TamperedError, jc as TierDemoteDeniedError, jd as TierMode, je as TierNotGrantedError, jf as TiersNotEnabledError, jg as TransactionInvariant, jh as TranslatorAuditEntry, T as TranslatorNotConfiguredError, ji as TxCollection, e4 as TxContext, jj as TxOp, jk as TxVault, ef as UnionArmJoin, eg as UnionSource, jl as UniqueConstraintError, U as UnknownDictCodeError, jm as UnknownShardError, jn as UnsupportedIndexOptionError, jo as UpdateAuthenticatorOptions, jp as UpdateContext, jq as UpdateUserOptions, jr as UserEnvelopeCheckGate, js as UserEnvelopeOversizedError, jt as UserInfo, ju as ValidationError, V as Vault, jv as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, jw as VaultPolicyOnDisk, jx as VaultSchemaSnapshot, jy as VaultSnapshot, jz as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, jA as WarningRules, jB as WeakPassphraseError, jC as WeakPassphraseReason, jD as WithArchiveOptions, jE as WithdrawalRequestError, jF as WrappedDeksBlob, jG as WriteConflict, jH as WriteQueue, bk as YjsState, jI as aesGcmOpen, p as applyI18nLocale, jJ as applyJoins, d4 as applyPatch, jK as approveWithdrawal, jL as asMoney, jM as assertStrongPassphrase, b2 as avg, jN as base64ToBuffer, jO as bufferToBase64, jP as buildLiveQuery, jQ as buildRecipientKeyringFile, jR as burnPaperRecoveryEntry, jS as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jT as createNoydb, jU as createStore, jV as decryptBytes, jW as decryptDeterministic, jX as deriveMagicLinkContentKey, jY as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, jZ as encryptBytes, j_ as encryptDeterministic, s as enforceScript, j$ as enrollAuthenticator, k0 as estimateEntropy, k1 as evalComputedFields, k2 as evaluateClause, k3 as evaluateExportCapability, k4 as evaluateFieldClause, k5 as evaluateImportCapability, k6 as executePlan, k7 as exportAccessibleData, k8 as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, k9 as hasExportCapability, ka as hasImportCapability, kb as hasRecoveryEnrolled, u as i18nText, v as inferScripts, d_ as isClassifiedFieldSpec, d$ as isClassifiedGroup, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, kc as isLinkCollectionName, kd as isMagicLinkGrantExpired, ke as isMoneyDescriptor, kf as isMoneyString, kg as isPublicEnvelope, kh as isRefArray, z as isStaticDictDescriptor, ki as issueDelegation, kj as keyringRecoverPassphrase, kk as keyringRotatePassphrase, kl as liberateVault, km as listMagicLinkGrants, kn as listUsers, ko as listUsersWithEnvelopes, kp as listWithdrawalRequests, kq as loadActiveDelegations, kr as loadPaperRecoveryEntries, ks as loadSealedPassphrase, kt as loadShamirRecoveryEntries, ku as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, kv as mintPaperRecoveryEntry, kw as mintShamirRecoveryEntry, kx as mintWrappedDeksBlob, ky as money, b8 as moneyMax, b9 as moneyMin, kz as moneyNumber, ba as moneySum, kA as parseRsaOaepTlv, kB as parseSealedEnvelope, kC as readMagicLinkGrantRecord, kD as readPath, kE as recoverUser, bb as reduceRecords, bc as reducerBuilder, kF as ref, kG as refArray, kH as rejectWithdrawal, kI as removeAuthenticator, kJ as requestWithdrawal, kK as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kL as resolvePublicEnvelopeSchema, kM as resolveSequenceKey, kN as revokeDelegation, kO as revokeMagicLinkGrant, kP as runTransaction, kQ as savePaperRecoveryEntries, kR as saveSealedPassphrase, kS as saveShamirRecoveryEntries, kT as sealRsaOaepTlv, E as staticDict, be as sum, kU as unwrapDeksFromBlob, kV as unwrapDeksFromPaperEntry, kW as unwrapDeksFromShamirEntry, kX as unwrapMagicLinkGrant, G as validateI18nTextValue, kY as validatePassphrase, kZ as validatePublicEnvelopeInput, k_ as validateSchemaInput, k$ as validateSchemaOutput, W as validateSessionPolicy, l0 as withArchive, l1 as withDeferredNumbering, l2 as withdrawAccessibleData, l3 as writeMagicLinkGrant } from './index-D05bV0_g.js';
+export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-Qr_4HjP6.js';
 export { WrapBundleStoreOptions, WrapPodStoreOptions, WrappedBundleNoydbStore, WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore } from './pod/index.js';
 export { W as WriteEvent, a as WriteHook } from './index-B9QdHytu.js';
-export { C as CollectionDescription, a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-Ccd1hS7a.js';
-export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-CGLLRtFc.js';
-export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-PwBGkhpe.js';
+import { C as CollectionDescription } from './describe-0tiXAjoO.js';
+export { a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-0tiXAjoO.js';
+export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-DTMUUwwW.js';
+export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-B-P3_Jvb.js';
 export { g as generateULID, i as isULID } from './ulid-DRH25k3y.js';
 export { D as DecryptedRecord, d as decryptExtractedPartition } from './decrypt-partition-IHtxEnTi.js';
 export { L as LedgerEntry, d as canonicalJson, h as hashEntry, p as paddedIndex, e as parseIndex, s as sha256Hex } from './subject-index-O75wKshW.js';
 export { TransactionStrategyOptions } from './tx/index.js';
-export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-DqodPNKw.js';
-export { w as withDerivation, a as withRollup } from './with-rollup-em2wxoHP.js';
-export { w as withMaterializedView } from './with-materialized-view-DMmWtYfJ.js';
-export { w as withOverlayedView } from './with-overlayed-view-D_IB2nkM.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C1Pyz8nH.js';
+export { w as withDerivation, a as withRollup } from './with-rollup-Bl0sRFEt.js';
+export { w as withMaterializedView } from './with-materialized-view-NKxs6iK5.js';
+export { w as withOverlayedView } from './with-overlayed-view-B4fPYHwV.js';
+export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, c as classified, l as luhnCheck, r as resolveClassifiedFields } from './validators-Dzn7T-3x.js';
 export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-h0K-UZTk.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-B_s9DUWa.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
 export { FuseOptions, fuseRetrieval } from './kernel/index.js';
-export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-BtpiBvic.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-CdSr06sm.js';
+export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-Fn0WeY2w.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-CWxn7sf6.js';
 import '@noy-db/attestation';
 
 /**
@@ -127,6 +129,20 @@ declare function withCustody(): CustodyStrategy;
  */
 declare function readPlaintextRecord<T = Record<string, unknown>>(envelope: EncryptedEnvelope): T | null;
 
+/**
+ * `applyListProjection` — the ONE vetted read-projection for lists/exports.
+ * Replaces classified field values with their declared projection (omit /
+ * mask / rider) so no consumer re-implements redaction. Pure, non-mutating.
+ * Consumed by as-* exporters (#489) and available to any list renderer.
+ * @module
+ */
+
+interface ListProjectionOptions {
+    /** Also handle fields carrying only a plain sensitivity tag (pii/secret). */
+    readonly sensitivity?: 'omit' | 'mask';
+}
+declare function applyListProjection(desc: CollectionDescription, record: Record<string, unknown>, opts?: ListProjectionOptions): Record<string, unknown>;
+
 /** Allow any schema change. Explicit blind / back-compat. */
 declare function blindUpdate(): SchemaUpdateStrategy;
 /** Allow additive changes; reject non-additive ones. The safety backstop. */
@@ -1411,4 +1427,4 @@ declare function loadVaultPolicy(store: NoydbStore, vault: string): Promise<Vaul
  */
 declare function saveVaultPolicy(store: NoydbStore, vault: string, policy: VaultPolicy): Promise<void>;
 
-export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };
+export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CollectionDescription, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, type ListProjectionOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, applyListProjection, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };

package/dist/index.js

@@ -1,3 +1,6 @@
+import {
+  UserApi
+} from "./chunk-MCJAUQGE.js";
 import {
   DEFAULT_FRESHNESS_MS,
   PERSONAL_POLICY,
@@ -5,7 +8,7 @@ import {
   checkGate,
   describeGate,
   mergePolicy
-} from "./chunk-5N6CZTCY.js";
+} from "./chunk-2ZORB5RW.js";
 import {
   Collection,
   ComputedFieldError,
@@ -37,19 +40,19 @@ import {
   ref,
   refArray,
   withArchive
-} from "./chunk-PSHOXR6C.js";
+} from "./chunk-ADBMJDBW.js";
 import {
   META_COLLECTION,
   POLICY_RECORD_ID,
   loadVaultPolicy,
   saveVaultPolicy
-} from "./chunk-SM3AVUHC.js";
+} from "./chunk-LES2Z7B4.js";
 import {
   DELEGATIONS_COLLECTION,
   issueDelegation,
   loadActiveDelegations,
   revokeDelegation
-} from "./chunk-VFQGRQIH.js";
+} from "./chunk-YDP2SA5K.js";
 import {
   DEFAULT_PUBLIC_ENVELOPE_SCHEMA,
   PUBLIC_ENVELOPE_FIELDS,
@@ -61,113 +64,121 @@ import {
   compileSequenceFormat,
   resolveSequenceKey,
   withSequence
-} from "./chunk-GYGWYIOZ.js";
-import {
-  UserApi
-} from "./chunk-UDRIWL7A.js";
+} from "./chunk-6I2YPLAG.js";
 import {
   WithdrawalRequestError,
   approveWithdrawal,
   listWithdrawalRequests,
   rejectWithdrawal,
   requestWithdrawal
-} from "./chunk-XXYIOFUB.js";
-import "./chunk-IAGBDSCS.js";
+} from "./chunk-IIK7W3AN.js";
+import "./chunk-4NZCZUGL.js";
 import {
   NO_SEARCH,
   tokenize,
   withSearch
-} from "./chunk-TEILUWOI.js";
-import "./chunk-5R3ERCDH.js";
+} from "./chunk-UP6EMMDI.js";
+import "./chunk-YN66UOXT.js";
 import {
   isDiscriminant
 } from "./chunk-PY4KJPYU.js";
-import "./chunk-WYSO2NIH.js";
-import "./chunk-IPB7FTQX.js";
-import "./chunk-KVOXU4T5.js";
+import "./chunk-ZRDYQZYH.js";
+import {
+  classified,
+  luhnCheck
+} from "./chunk-NTHKOFVL.js";
+import {
+  ClassifiedNeverStoredError,
+  ClassifiedValidationError,
+  isClassifiedFieldSpec,
+  isClassifiedGroup,
+  resolveClassifiedFields
+} from "./chunk-MIOLJG2R.js";
+import "./chunk-4DZGZ7II.js";
+import "./chunk-HGQG3VIP.js";
 import {
   withCargo
-} from "./chunk-M6OST55S.js";
+} from "./chunk-5ZPWVNL3.js";
 import {
   CustodyApi,
   NO_CARGO,
   NO_CUSTODY,
   withCustody
-} from "./chunk-TJYQIGAP.js";
+} from "./chunk-Z44OY24N.js";
 import {
   DEED_RECORD_ID,
   createDeedOwner,
   isDeedVault,
   liberateVault,
   loadDeedMarker
-} from "./chunk-KXGNJJXB.js";
+} from "./chunk-BV7KNFJY.js";
+import {
+  diffVault
+} from "./chunk-LB7FD65R.js";
 import {
   withdrawAccessibleData
-} from "./chunk-PSMV73A5.js";
+} from "./chunk-6CNLU4TO.js";
 import {
   exportAccessibleData
-} from "./chunk-HCIPRAGS.js";
-import {
-  diffVault
-} from "./chunk-LB7FD65R.js";
+} from "./chunk-7MHVHGQZ.js";
 import "./chunk-BGIZAFY7.js";
 import {
   fuseRetrieval
 } from "./chunk-AURFOK3D.js";
-import "./chunk-QHJW5EXU.js";
+import "./chunk-JFYIHLU3.js";
 import {
   immutableGuard,
   transitionGuard,
   withGuard
-} from "./chunk-TA66UMI4.js";
+} from "./chunk-46YGCU6Z.js";
 import "./chunk-YMUGBZN2.js";
 import "./chunk-RUIMKQTA.js";
-import "./chunk-RUEKROOS.js";
+import "./chunk-DGUR3CC4.js";
 import {
   CollectionFrame,
   VaultFrame
-} from "./chunk-NF5JWERG.js";
+} from "./chunk-BZIWKN74.js";
 import {
   TxCollection,
   TxContext,
   TxVault,
   runTransaction
-} from "./chunk-SKF73JOP.js";
+} from "./chunk-4NMFWOS2.js";
 import {
   withDerivation,
   withRollup
-} from "./chunk-LMTH2RM6.js";
-import "./chunk-Q7SS3IME.js";
-import "./chunk-PKHL44ER.js";
+} from "./chunk-ZNI3RTFV.js";
+import "./chunk-P6UXDALK.js";
+import "./chunk-ZD4D7UM6.js";
 import {
   withMaterializedView
-} from "./chunk-3YFXJ3ZP.js";
-import "./chunk-AQTBSL7R.js";
-import "./chunk-62QYRORB.js";
-import "./chunk-BG3SPSR4.js";
+} from "./chunk-U5DWHU3S.js";
+import "./chunk-CVXLJIAV.js";
+import "./chunk-5Z3RNFJC.js";
+import "./chunk-BYW7EU5L.js";
 import {
   withOverlayedView
-} from "./chunk-EIZUR2XW.js";
-import "./chunk-CMGR4ZEW.js";
-import "./chunk-VCTFO5CO.js";
+} from "./chunk-XRE4JOEO.js";
+import "./chunk-NMRKAGHE.js";
+import "./chunk-ZAWD6O46.js";
 import {
   importExternalObjects,
   memoryObjectProjection
 } from "./chunk-4Q6HSHHL.js";
-import "./chunk-Y22T3KQE.js";
-import "./chunk-V7RWQRG7.js";
+import "./chunk-2KSPDSWI.js";
+import "./chunk-LKBLAUOB.js";
 import {
   mergeCrdtStates,
   resolveCrdtSnapshot
 } from "./chunk-6S7T6WC4.js";
 import {
   decryptExtractedPartition
-} from "./chunk-QZISFCVG.js";
+} from "./chunk-6DP5HBQD.js";
 import {
   SCHEMAS_COLLECTION,
   loadPersistedSchema,
   savePersistedSchema
-} from "./chunk-26LGBE4T.js";
+} from "./chunk-U6OM4E67.js";
 import {
   MemoryRecipientSealer,
   MemorySealingKeyProvider,
@@ -178,7 +189,7 @@ import {
   parseSealedEnvelope,
   saveSealedPassphrase,
   sealRsaOaepTlv
-} from "./chunk-ZCGAHGUS.js";
+} from "./chunk-AY4P6PHN.js";
 import {
   BLOB_CHUNKS_COLLECTION,
   BLOB_COLLECTION,
@@ -190,13 +201,13 @@ import {
   detectMagic,
   detectMimeType,
   isPreCompressed
-} from "./chunk-DFEMTNPJ.js";
+} from "./chunk-55HDKLI3.js";
 import {
   createBundleStore,
   createPodStore,
   wrapBundleStore,
   wrapPodStore
-} from "./chunk-AZAOEIKW.js";
+} from "./chunk-VHEEU4ZO.js";
 import {
   NOYDB_BUNDLE_FORMAT_VERSION,
   NOYDB_BUNDLE_MAGIC,
@@ -210,7 +221,7 @@ import {
   resetBrotliSupportCache,
   writeNoydbBundle,
   writePod
-} from "./chunk-FISN7WE4.js";
+} from "./chunk-3UDPDRUC.js";
 import {
   PUBLIC_ENVELOPE_RECORD_ID,
   isPublicEnvelope,
@@ -218,14 +229,14 @@ import {
   readPublicEnvelope,
   savePublicEnvelope,
   validatePublicEnvelopeInput
-} from "./chunk-SMXWYP24.js";
+} from "./chunk-VBYVKOMJ.js";
 import {
   CONSENT_AUDIT_COLLECTION
-} from "./chunk-MTMJVJ5W.js";
-import "./chunk-CWPPNPOH.js";
+} from "./chunk-ZFME46HJ.js";
+import "./chunk-DA34OEZU.js";
 import {
   PERIODS_COLLECTION
-} from "./chunk-IELYAOGG.js";
+} from "./chunk-YTIAXSUE.js";
 import "./chunk-GHVIKOHT.js";
 import {
   DICT_COLLECTION_PREFIX,
@@ -236,7 +247,7 @@ import {
   isDictKeyDescriptor,
   isStaticDictDescriptor,
   staticDict
-} from "./chunk-LFLXAY2W.js";
+} from "./chunk-PYWW4KLO.js";
 import {
   SYNC_CREDENTIALS_COLLECTION,
   credentialStatus,
@@ -244,7 +255,7 @@ import {
   getCredential,
   listCredentials,
   putCredential
-} from "./chunk-DGDI2D4M.js";
+} from "./chunk-NIA5VQ7G.js";
 import {
   MAGIC_LINK_CONTENT_INFO_PREFIX,
   MAGIC_LINK_GRANTS_COLLECTION,
@@ -263,7 +274,7 @@ import {
   rotatePassphrase,
   unwrapMagicLinkGrant,
   writeMagicLinkGrant
-} from "./chunk-UPJNJGGA.js";
+} from "./chunk-OVIVYAQL.js";
 import {
   burnPaperRecoveryEntry,
   hasRecoveryEnrolled,
@@ -277,17 +288,17 @@ import {
   unwrapDeksFromBlob,
   unwrapDeksFromPaperEntry,
   unwrapDeksFromShamirEntry
-} from "./chunk-IGUYVGGI.js";
+} from "./chunk-IJW6K6UX.js";
 import {
   assertTierAccess,
   dekKey,
   effectiveClearance
-} from "./chunk-IO6GRPT6.js";
+} from "./chunk-O5DNEXQC.js";
 import {
   PresenceHandle,
   SyncEngine,
   SyncTransaction
-} from "./chunk-IUEN57TV.js";
+} from "./chunk-LHYQE3BP.js";
 import {
   BUNDLE_STORE_POLICY,
   INDEXED_STORE_POLICY,
@@ -306,7 +317,7 @@ import {
   listUsers,
   listUsersWithEnvelopes,
   validatePassphrase
-} from "./chunk-WWGT2MDV.js";
+} from "./chunk-5A6TC3RQ.js";
 import {
   DIRECTORY_RECORD_ID,
   VISIBILITY_RECORD_PREFIX,
@@ -320,7 +331,7 @@ import {
   readUserVisibility,
   saveUserEnvelope,
   visibilityRecordId
-} from "./chunk-ITNUCOXM.js";
+} from "./chunk-2N4MUSF3.js";
 import {
   PolicyEnforcer,
   activeSessionCount,
@@ -335,7 +346,7 @@ import {
   revokeAllSessions,
   revokeSession,
   validateSessionPolicy
-} from "./chunk-UAG5KWVA.js";
+} from "./chunk-PJDK2PPQ.js";
 import {
   generateULID,
   isULID
@@ -343,7 +354,7 @@ import {
 import {
   CollectionInstant,
   VaultInstant
-} from "./chunk-MD3Y6J3L.js";
+} from "./chunk-WVIIJPTJ.js";
 import {
   diff,
   formatDiff
@@ -352,7 +363,7 @@ import {
   LedgerStore,
   applyPatch,
   computePatch
-} from "./chunk-LXQT4WMP.js";
+} from "./chunk-DHIN36UC.js";
 import {
   LEDGER_COLLECTION,
   LEDGER_DELTAS_COLLECTION
@@ -364,9 +375,15 @@ import {
   paddedIndex,
   parseIndex,
   sha256Hex
-} from "./chunk-AIWULCUO.js";
-import "./chunk-SRB2XEWB.js";
-import "./chunk-UV5MFVO3.js";
+} from "./chunk-6EVZXETK.js";
+import "./chunk-6OQ7NKMZ.js";
+import "./chunk-FELHYKIO.js";
+import {
+  validateSchemaInput,
+  validateSchemaOutput
+} from "./chunk-5EZAJEES.js";
+import "./chunk-6RASM2J4.js";
+import "./chunk-CPAROOKP.js";
 import {
   base64ToBuffer,
   bufferToBase64,
@@ -374,10 +391,8 @@ import {
   decryptDeterministic,
   derivePresenceKey,
   encryptBytes,
-  encryptDeterministic,
-  validateSchemaInput,
-  validateSchemaOutput
-} from "./chunk-5O3AOPDT.js";
+  encryptDeterministic
+} from "./chunk-L4IRFTIF.js";
 import {
   NOYDB_BACKUP_VERSION,
   NOYDB_FORMAT_VERSION,
@@ -385,7 +400,7 @@ import {
   NOYDB_SYNC_VERSION,
   SealedHandle,
   createStore
-} from "./chunk-5TDJ56JE.js";
+} from "./chunk-OCDUQUAP.js";
 import {
   DEFAULT_CROSS_JOIN_MAX_ROWS,
   DEFAULT_JOIN_MAX_ROWS,
@@ -395,10 +410,10 @@ import {
   buildLiveQuery,
   executePlan,
   resetJoinWarnings
-} from "./chunk-UIU2THRG.js";
+} from "./chunk-N2FP26NH.js";
 import {
   CollectionIndexes
-} from "./chunk-I3TIKTJO.js";
+} from "./chunk-TICO2I2O.js";
 import {
   Aggregation,
   GROUPBY_MAX_CARDINALITY,
@@ -417,7 +432,7 @@ import {
   reduceRecords,
   reducerBuilder,
   sum
-} from "./chunk-LV7M27WM.js";
+} from "./chunk-NPVICKZE.js";
 import {
   MoneyCurrencyError,
   MoneyPrecisionError,
@@ -432,7 +447,7 @@ import {
   readPath,
   rescaleScaledInt,
   scaleForCurrency
-} from "./chunk-M2YKN37S.js";
+} from "./chunk-QLQS5A7X.js";
 import {
   applyI18nLocale,
   enforceScript,
@@ -442,7 +457,7 @@ import {
   resolveI18nText,
   resolvePolicy,
   validateI18nTextValue
-} from "./chunk-5LUY7UTV.js";
+} from "./chunk-7IP75FP2.js";
 import {
   AlreadyElevatedError,
   AmendmentForbiddenError,
@@ -454,6 +469,11 @@ import {
   BundleSealMismatchError,
   BundleVersionConflictError,
   CargoNotEnabledError,
+  ClassifiedConfigError,
+  ClassifiedNotEnabledError,
+  ClassifiedRevealError,
+  ClassifiedRotationError,
+  ClassifiedVerifyError,
   ConflictError,
   CrossJoinSourceUnknownError,
   CrossJoinTooLargeError,
@@ -560,7 +580,7 @@ import {
   UserEnvelopeOversizedError,
   ValidationError,
   VaultTemplateNotFoundError
-} from "./chunk-ZYUC53LT.js";
+} from "./chunk-BLZRNHMG.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/kernel/debug.ts
@@ -581,6 +601,34 @@ function readPlaintextRecord(envelope) {
   return JSON.parse(envelope._data);
 }
 
+// src/with-shape/introspection/projection.ts
+function applyListProjection(desc, record, opts) {
+  const out = { ...record };
+  for (const f of desc.fields) {
+    if (f.classified !== void 0) {
+      const list = f.classified.list;
+      if (list === "omit") {
+        delete out[f.key];
+        continue;
+      }
+      if ("mask" in list) {
+        out[f.key] = list.mask.replace(/\$\{(\w+)\}/g, (_m, rider) => {
+          const v = record[`${f.key}_${rider}`];
+          return v === void 0 || v === null ? "\u2022" : `${v}`;
+        });
+        continue;
+      }
+      out[f.key] = record[`${f.key}_${list.rider}`];
+      continue;
+    }
+    if (opts?.sensitivity !== void 0 && (f.sensitivity === "pii" || f.sensitivity === "secret")) {
+      if (opts.sensitivity === "omit") delete out[f.key];
+      else out[f.key] = "\u2022\u2022\u2022";
+    }
+  }
+  return out;
+}
+
 // src/with-shape/schema-update/strategies.ts
 function blindUpdate() {
   return { name: "blindUpdate", onSchemaDelta: () => ({ action: "allow" }) };
@@ -1410,6 +1458,13 @@ export {
   BundleVersionConflictError,
   CONSENT_AUDIT_COLLECTION,
   CargoNotEnabledError,
+  ClassifiedConfigError,
+  ClassifiedNeverStoredError,
+  ClassifiedNotEnabledError,
+  ClassifiedRevealError,
+  ClassifiedRotationError,
+  ClassifiedValidationError,
+  ClassifiedVerifyError,
   Collection,
   CollectionFrame,
   CollectionIndexes,
@@ -1606,6 +1661,7 @@ export {
   allocate,
   applyI18nLocale,
   applyJoins,
+  applyListProjection,
   applyPatch,
   approveWithdrawal,
   asMoney,
@@ -1620,6 +1676,7 @@ export {
   burnPaperRecoveryEntry,
   canonicalJson,
   checkGate,
+  classified,
   clearDevUnlock,
   compileSequenceFormat,
   computePatch,
@@ -1685,6 +1742,8 @@ export {
   immutableGuard,
   importExternalObjects,
   inferScripts,
+  isClassifiedFieldSpec,
+  isClassifiedGroup,
   isDeedVault,
   isDevUnlockActive,
   isDictCollectionName,
@@ -1723,6 +1782,7 @@ export {
   loadUserEnvelope,
   loadVaultPolicy,
   lockSchema,
+  luhnCheck,
   magicLinkGrantRecordId,
   max,
   memoryObjectProjection,
@@ -1769,6 +1829,7 @@ export {
   requestWithdrawal,
   resetBrotliSupportCache,
   resetJoinWarnings,
+  resolveClassifiedFields,
   resolveCrdtSnapshot,
   resolveI18nText,
   resolvePolicy,