@noy-db/hub 0.3.0-pre.2 → 0.3.0-pre.4

package/dist/{index-CGLLRtFc.d.ts → index-DRxk8q_7.d.ts}

@@ -1,9 +1,9 @@
-import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, ex as CargoStrategy } from './index-_6At2_9_.js';
+import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, eP as CargoStrategy } from './index-D4GQe1Rx.js';
 import './ulid-DRH25k3y.js';
 import './index-B9QdHytu.js';
 import './kernel/index.js';
-import './describe-Ccd1hS7a.js';
-import './vault-diff-BtpiBvic.js';
+import './describe-C6iHNlqJ.js';
+import './vault-diff-B1Ir6EGs.js';
 
 /**
  * Hub-core constants that must be referenceable without pulling any

package/dist/index.d.ts

@@ -1,25 +1,28 @@
-import { e0 as SearchStrategy, e1 as SequenceStrategy, e2 as CustodyStrategy, cV as EncryptedEnvelope, e3 as SchemaUpdateStrategy, e4 as TransformFn, cT as NoydbStore, e5 as PersistedSchemaEnvelope, dj as EnclaveKey, e6 as UpdateDecision, dL as PublicEnvelope, e7 as UserEnvelope, e8 as VaultUserApi, e9 as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, ea as DeepPartialOrNull, eb as UserEnvelopePresented, ec as Unsubscribe, ed as LiveUserEnvelope, ee as RoundingMode, cF as UnlockedKeyring, ef as VaultPolicy, eg as ActiveTier, eh as FactorProof, ei as GateName, ej as PolicyDenyReason, ek as GatePolicy } from './index-_6At2_9_.js';
-export { el as AccessibleVault, em as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, en as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eo as ArchivePolicy, ep as ArchiveResult, eq as ArchiveRunOptions, er as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, es as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, et as BuiltInGateName, dn as BundleIntegrityError, dM as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eu as CacheOptions, ev as CacheStats, ew as CargoNotEnabledError, ex as CargoStrategy, ey as ChangeEvent, cY as ChangeType, ez as Clause, bz as ClosePeriodOptions, ci as Collection, eA as CollectionChangeEvent, eB as CollectionConfig, eC as CollectionConflictResolver, eD as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eE as CollectionStats, eF as ComputedFieldError, eG as ComputedFields, eH as ComputedFn, eI as Conflict, eJ as ConflictError, eK as ConflictPolicy, eL as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, eM as CrossJoinSourceUnknownError, eN as CrossJoinTooLargeError, eO as CrossTierAccessEvent, eP as CustodyApi, eQ as CustodyHost, eR as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, eS as DEFAULT_CROSS_JOIN_MAX_ROWS, eT as DEFAULT_JOIN_MAX_ROWS, eU as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, eV as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, eW as DanglingReferenceError, eX as DataResidencyError, eY as DebugPlaintextError, eZ as DebugReservedFieldError, e_ as DecryptionError, e$ as DeepPartial, f0 as DeferredNumberingConfig, f1 as DelegationTargetMissingError, f2 as DelegationToken, f3 as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, f4 as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, f5 as DirectoryDisabledError, f6 as DirtyEntry, f7 as DryRunResult, f8 as DumpSchemaOptions, f9 as ELEVATION_AUDIT_COLLECTION, fa as ElevatedHandle, fb as ElevationExpiredError, fc as EmbeddingDescriptor, fd as EmbeddingDimMismatchError, fe as EmbeddingModelMismatchError, ff as EnclaveNotSupportedError, fg as EnrollAuthenticatorOptions, fh as EnrollAuthenticatorWrappingDEKsOptions, fi as EnrollAuthenticatorWrappingKEKOptions, fj as EnrollRecoveryResult, fk as ExportCapability, fl as ExportCapabilityError, fm as ExportChunk, cG as ExportFormat, fn as ExportStreamOptions, fo as FactorKind, fp as FactorProofBundle, fq as FactorRequirement, fr as FenceDoc, fs as FenceState, ft as FieldChange, fu as FieldClause, fv as FieldDescriptor, bN as FieldFrozenError, fw as FieldSource, fx as FilenameSanitizationError, fy as FilterClause, fz as ForgetStrategyNotConfiguredError, fA as FormattedSequenceHandle, fB as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fC as GhostRecord, fD as GrantCustodianOptions, fE as GrantOptions, fF as GroupCardinalityError, fG as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, fH as GuardViolation, az as HashIndex, fI as HistoryConfig, fJ as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, fK as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, fL as ImportCapability, fM as ImportCapabilityError, aB as IndexDef, fN as IndexFieldName, fO as IndexRequiredError, fP as IndexWriteFailureError, fQ as InferOutput, fR as InternalCollectionStats, fS as InvalidKeyError, bR as InvariantError, fT as IssueDelegationOptions, fU as IssueMagicLinkGrantOptions, fV as JoinContext, fW as JoinLeg, fX as JoinStrategy, fY as JoinTooLargeError, fZ as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, f_ as KeyringAuthenticator, f$ as KeyringAuthenticatorWrappingDEKs, g0 as KeyringAuthenticatorWrappingKEK, g1 as KeyringCorruptError, g2 as KeyringExpiredError, g3 as KeyringFile, L as Layer, g4 as LedgerContentionError, d0 as LedgerStore, g5 as LiberateOptions, g6 as LiberateResult, g7 as LinkEndpointError, g8 as LinkIntegrityError, g9 as LinkOnDelete, ga as LinkRow, gb as LinkSetHandle, gc as LinkSpec, gd as ListAccessibleVaultsOptions, ge as ListPageResult, gf as ListUsersOptions, a_ as LiveAggregation, gg as LiveQuery, gh as LiveUpstream, j as LocaleNotSpecifiedError, gi as LocaleReadOptions, gj as Lru, gk as LruOptions, gl as LruStats, bi as LwwMapState, gm as MAGIC_LINK_CONTENT_INFO_PREFIX, gn as MAGIC_LINK_GRANTS_COLLECTION, go as MAGIC_LINK_KEK_INFO_PREFIX, gp as MagicLinkGrantPayload, gq as MagicLinkGrantRecord, gr as ManagedRecoveryNotEnrolledError, dU as MaterializedFromMeta, dV as MaterializedViewConfigError, dW as MaterializedViewCycleError, gs as MaterializedViewDescriptor, dX as MaterializedViewOutput, dY as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, dZ as MaterializedViewTooLargeError, gt as MemoryRecipientSealer, gu as MemorySealingKeyProvider, gv as MigrationRequiredError, M as MissingTranslationError, gw as MoneyCurrencyError, gx as MoneyDescriptor, gy as MoneyOptions, gz as MoneyOptionsFixed, gA as MoneyOptionsMulti, gB as MoneyPrecisionError, gC as MoneyString, gD as MoneyUnsupportedError, gE as NOYDB_BACKUP_VERSION, gF as NOYDB_FORMAT_VERSION, gG as NOYDB_KEYRING_VERSION, gH as NOYDB_SYNC_VERSION, gI as NO_CARGO, gJ as NO_CUSTODY, gK as NO_SEARCH, gL as NO_SEQUENCE, gM as NetworkError, gN as NextOptions, gO as NoAccessError, gP as NonAdditiveSchemaChangeError, gQ as NotFoundError, gR as Noydb, gS as NoydbBundleStore, gT as NoydbError, gU as NoydbEventMap, gV as NoydbOptions, bX as NoydbPodStore, gW as NumberingAssignment, gX as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, gY as Operator, gZ as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, g_ as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, g$ as POD_STORE_POLICY, h0 as PUBLIC_ENVELOPE_FIELDS, h1 as PaperRecoveryDoc, h2 as PaperRecoveryEntry, h3 as PassphrasePolicy, h4 as PassphraseValidationResult, h5 as PathEscapeError, h6 as PeriodClosedError, bC as PeriodRecord, h7 as Permission, h8 as PermissionDeniedError, h9 as Permissions, ha as PersistedSchemaKind, hb as PlaintextTranslatorContext, hc as PlaintextTranslatorFn, du as PodVersionConflictError, hd as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, he as PresenceHandle, hf as PresencePeer, hg as PrivilegeEscalationError, cW as PruneOptions, hh as PublicEnvelopeField, hi as PublicEnvelopeSchema, hj as PublicEnvelopeText, hk as PullMode, hl as PullOptions, hm as PullPolicy, hn as PullResult, ho as PushMode, hp as PushOptions, hq as PushPolicy, hr as PushResult, hs as PutManyItemOptions, ht as PutManyOptions, hu as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, dS as Query, hv as QueryAcrossOptions, hw as QueryAcrossResult, hx as QueryField, hy as QueryPlan, hz as QuerySource, hA as QuickUnlockState, hB as QuickUnlockStore, hC as QuiesceTimeoutError, hD as ReAuthOperation, hE as ReadOnlyAtInstantError, hF as ReadOnlyError, hG as ReadOnlyFrameError, dO as RecipientHint, dN as RecipientSealer, hH as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, hI as RecoverPassphraseInput, hJ as RecoverPassphraseResult, hK as RecoverUserOptions, hL as RecoveryNotEnrolledError, hM as RecoveryProfileNotImplementedError, hN as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, hO as RefDescriptor, hP as RefIntegrityError, hQ as RefMode, hR as RefRegistry, hS as RefScopeError, hT as RefViolation, R as ReservedCollectionNameError, hU as ReservedVaultNameError, l as ResolveI18nOptions, hV as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, hW as RetrieveHit, hX as RetrieveOptions, hY as RevokeOptions, bj as RgaState, cR as Role, hZ as RotatePassphraseInput, h_ as RotateRecoveryOptions, h$ as RotateRecoveryResult, i0 as SEALED_PASSPHRASE_RECORD_ID, i1 as ScanBuilder, i2 as ScanPageProvider, i3 as SchemaDelta, i4 as SchemaFenceError, i5 as SchemaIntrospection, i6 as SchemaLockedError, i7 as SchemaUpdateError, i8 as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, i9 as Sealed, ia as SealedEnvelope, ib as SealedHandle, ic as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, id as SealedView, dg as SealingKeyProvider, ie as SearchEntry, ig as SearchNotEnabledError, ih as SearchOptions, ii as SearchResult, ij as SequenceContentionError, ik as SequenceHandle, il as SequenceNotEnabledError, im as SequenceOfflineError, io as SequenceOptions, ip as SequenceStore, iq as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, ir as SessionPolicy, N as SessionPolicyError, is as SetPublicEnvelopeInput, it as ShamirRecoveryDoc, iu as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iv as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iw as SlotRewrapCeremony, ix as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iy as StandardSchemaV1, iz as StandardSchemaV1Issue, iA as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iB as StoreAuth, iC as StoreAuthKind, iD as StoreCapabilities, iE as StoreCapabilityError, iF as StoreTime, iG as SyncEngine, iH as SyncMetadata, iI as SyncPolicy, iJ as SyncScheduler, iK as SyncSchedulerStatus, iL as SyncStatus, iM as SyncTarget, iN as SyncTargetRole, iO as SyncTransaction, iP as SyncTransactionResult, iQ as TabChannel, iR as TabCoordinationOptions, iS as TabLockManager, iT as TabPresence, iU as TabRole, iV as TamperedError, iW as TierDemoteDeniedError, iX as TierMode, iY as TierNotGrantedError, iZ as TiersNotEnabledError, i_ as TransactionInvariant, i$ as TranslatorAuditEntry, T as TranslatorNotConfiguredError, j0 as TxCollection, dP as TxContext, j1 as TxOp, j2 as TxVault, d_ as UnionArmJoin, d$ as UnionSource, j3 as UniqueConstraintError, U as UnknownDictCodeError, j4 as UnknownShardError, j5 as UnsupportedIndexOptionError, j6 as UpdateAuthenticatorOptions, j7 as UpdateContext, j8 as UpdateUserOptions, j9 as UserEnvelopeCheckGate, ja as UserEnvelopeOversizedError, jb as UserInfo, jc as ValidationError, V as Vault, jd as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, je as VaultPolicyOnDisk, jf as VaultSchemaSnapshot, jg as VaultSnapshot, jh as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, ji as WarningRules, jj as WeakPassphraseError, jk as WeakPassphraseReason, jl as WithArchiveOptions, jm as WithdrawalRequestError, jn as WrappedDeksBlob, jo as WriteConflict, jp as WriteQueue, bk as YjsState, jq as aesGcmOpen, p as applyI18nLocale, jr as applyJoins, d4 as applyPatch, js as approveWithdrawal, jt as asMoney, ju as assertStrongPassphrase, b2 as avg, jv as base64ToBuffer, jw as bufferToBase64, jx as buildLiveQuery, jy as buildRecipientKeyringFile, jz as burnPaperRecoveryEntry, jA as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jB as createNoydb, jC as createStore, jD as decryptBytes, jE as decryptDeterministic, jF as deriveMagicLinkContentKey, jG as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, jH as encryptBytes, jI as encryptDeterministic, s as enforceScript, jJ as enrollAuthenticator, jK as estimateEntropy, jL as evalComputedFields, jM as evaluateClause, jN as evaluateExportCapability, jO as evaluateFieldClause, jP as evaluateImportCapability, jQ as executePlan, jR as exportAccessibleData, jS as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, jT as hasExportCapability, jU as hasImportCapability, jV as hasRecoveryEnrolled, u as i18nText, v as inferScripts, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, jW as isLinkCollectionName, jX as isMagicLinkGrantExpired, jY as isMoneyDescriptor, jZ as isMoneyString, j_ as isPublicEnvelope, j$ as isRefArray, z as isStaticDictDescriptor, k0 as issueDelegation, k1 as keyringRecoverPassphrase, k2 as keyringRotatePassphrase, k3 as liberateVault, k4 as listMagicLinkGrants, k5 as listUsers, k6 as listUsersWithEnvelopes, k7 as listWithdrawalRequests, k8 as loadActiveDelegations, k9 as loadPaperRecoveryEntries, ka as loadSealedPassphrase, kb as loadShamirRecoveryEntries, kc as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, kd as mintPaperRecoveryEntry, ke as mintShamirRecoveryEntry, kf as mintWrappedDeksBlob, kg as money, b8 as moneyMax, b9 as moneyMin, kh as moneyNumber, ba as moneySum, ki as parseRsaOaepTlv, kj as parseSealedEnvelope, kk as readMagicLinkGrantRecord, kl as readPath, km as recoverUser, bb as reduceRecords, bc as reducerBuilder, kn as ref, ko as refArray, kp as rejectWithdrawal, kq as removeAuthenticator, kr as requestWithdrawal, ks as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kt as resolvePublicEnvelopeSchema, ku as resolveSequenceKey, kv as revokeDelegation, kw as revokeMagicLinkGrant, kx as runTransaction, ky as savePaperRecoveryEntries, kz as saveSealedPassphrase, kA as saveShamirRecoveryEntries, kB as sealRsaOaepTlv, E as staticDict, be as sum, kC as unwrapDeksFromBlob, kD as unwrapDeksFromPaperEntry, kE as unwrapDeksFromShamirEntry, kF as unwrapMagicLinkGrant, G as validateI18nTextValue, kG as validatePassphrase, kH as validatePublicEnvelopeInput, kI as validateSchemaInput, kJ as validateSchemaOutput, W as validateSessionPolicy, kK as withArchive, kL as withDeferredNumbering, kM as withdrawAccessibleData, kN as writeMagicLinkGrant } from './index-_6At2_9_.js';
-export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-B4RoFj3B.js';
+import { eh as SearchStrategy, ei as SequenceStrategy, ej as CustodyStrategy, cV as EncryptedEnvelope, ek as SchemaUpdateStrategy, el as TransformFn, cT as NoydbStore, em as PersistedSchemaEnvelope, dj as EnclaveKey, en as UpdateDecision, eo as NoydbError, e0 as PublicEnvelope, ep as UserEnvelope, eq as VaultUserApi, er as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, es as DeepPartialOrNull, et as UserEnvelopePresented, eu as Unsubscribe, ev as LiveUserEnvelope, ew as RoundingMode, cF as UnlockedKeyring, ex as VaultPolicy, ey as ActiveTier, ez as FactorProof, eA as GateName, eB as PolicyDenyReason, eC as GatePolicy } from './index-D4GQe1Rx.js';
+export { eD as AccessibleVault, eE as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, eF as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eG as ArchivePolicy, eH as ArchiveResult, eI as ArchiveRunOptions, eJ as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, eK as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, eL as BuiltInGateName, dn as BundleIntegrityError, e1 as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eM as CacheOptions, eN as CacheStats, eO as CargoNotEnabledError, eP as CargoStrategy, eQ as ChangeEvent, cY as ChangeType, dN as ClassifiedConfigError, dO as ClassifiedEntry, dL as ClassifiedFieldSpec, dP as ClassifiedGroup, dQ as ClassifiedList, eR as ClassifiedNotEnabledError, dS as ClassifiedRevealError, dU as ClassifiedRotationError, dV as ClassifiedStorage, dW as ClassifiedVerdict, dY as ClassifiedVerifyError, eS as Clause, bz as ClosePeriodOptions, ci as Collection, eT as CollectionChangeEvent, eU as CollectionConfig, eV as CollectionConflictResolver, eW as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eX as CollectionStats, eY as ComputedFieldError, eZ as ComputedFields, e_ as ComputedFn, e$ as Conflict, f0 as ConflictError, f1 as ConflictPolicy, f2 as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, f3 as CrossJoinSourceUnknownError, f4 as CrossJoinTooLargeError, f5 as CrossTierAccessEvent, f6 as CustodyApi, f7 as CustodyHost, f8 as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, f9 as DEFAULT_CROSS_JOIN_MAX_ROWS, fa as DEFAULT_JOIN_MAX_ROWS, fb as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, fc as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, fd as DanglingReferenceError, fe as DataResidencyError, ff as DebugPlaintextError, fg as DebugReservedFieldError, fh as DecryptionError, fi as DeepPartial, fj as DeferredNumberingConfig, fk as DelegationTargetMissingError, fl as DelegationToken, fm as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, fn as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, fo as DirectoryDisabledError, fp as DirtyEntry, fq as DryRunResult, fr as DumpSchemaOptions, fs as ELEVATION_AUDIT_COLLECTION, ft as ElevatedHandle, fu as ElevationExpiredError, fv as EmbeddingDescriptor, fw as EmbeddingDimMismatchError, fx as EmbeddingModelMismatchError, fy as EnclaveNotSupportedError, fz as EnrollAuthenticatorOptions, fA as EnrollAuthenticatorWrappingDEKsOptions, fB as EnrollAuthenticatorWrappingKEKOptions, fC as EnrollRecoveryResult, fD as ExportCapability, fE as ExportCapabilityError, fF as ExportChunk, cG as ExportFormat, fG as ExportStreamOptions, fH as FactorKind, fI as FactorProofBundle, fJ as FactorRequirement, fK as FenceDoc, fL as FenceState, fM as FieldChange, fN as FieldClause, fO as FieldDescriptor, bN as FieldFrozenError, fP as FieldSource, fQ as FilenameSanitizationError, fR as FilterClause, fS as ForgetStrategyNotConfiguredError, fT as FormattedSequenceHandle, fU as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fV as GhostRecord, fW as GrantCustodianOptions, fX as GrantOptions, fY as GroupCardinalityError, fZ as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, f_ as GuardViolation, az as HashIndex, f$ as HistoryConfig, g0 as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, g1 as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, g2 as ImportCapability, g3 as ImportCapabilityError, aB as IndexDef, g4 as IndexFieldName, g5 as IndexRequiredError, g6 as IndexWriteFailureError, g7 as InferOutput, g8 as InternalCollectionStats, g9 as InvalidKeyError, bR as InvariantError, ga as IssueDelegationOptions, gb as IssueMagicLinkGrantOptions, gc as JoinContext, gd as JoinLeg, ge as JoinStrategy, gf as JoinTooLargeError, gg as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, gh as KeyringAuthenticator, gi as KeyringAuthenticatorWrappingDEKs, gj as KeyringAuthenticatorWrappingKEK, gk as KeyringCorruptError, gl as KeyringExpiredError, gm as KeyringFile, L as Layer, gn as LazyStrategy, go as LedgerContentionError, d0 as LedgerStore, gp as LiberateOptions, gq as LiberateResult, gr as LinkIntegrityError, gs as LinkOnDelete, gt as LinkRow, gu as LinkSetHandle, gv as LinkSpec, gw as ListAccessibleVaultsOptions, gx as ListPageResult, gy as ListUsersOptions, a_ as LiveAggregation, gz as LiveQuery, gA as LiveUpstream, j as LocaleNotSpecifiedError, gB as LocaleReadOptions, gC as Lru, gD as LruOptions, gE as LruStats, bi as LwwMapState, gF as MAGIC_LINK_CONTENT_INFO_PREFIX, gG as MAGIC_LINK_GRANTS_COLLECTION, gH as MAGIC_LINK_KEK_INFO_PREFIX, gI as MagicLinkGrantPayload, gJ as MagicLinkGrantRecord, gK as ManagedRecoveryNotEnrolledError, e9 as MaterializedFromMeta, ea as MaterializedViewConfigError, eb as MaterializedViewCycleError, gL as MaterializedViewDescriptor, ec as MaterializedViewOutput, ed as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, ee as MaterializedViewTooLargeError, gM as MemoryRecipientSealer, gN as MemorySealingKeyProvider, gO as MigrationRequiredError, M as MissingTranslationError, gP as MoneyCurrencyError, gQ as MoneyDescriptor, gR as MoneyOptions, gS as MoneyOptionsFixed, gT as MoneyOptionsMulti, gU as MoneyPrecisionError, gV as MoneyString, gW as MoneyUnsupportedError, gX as NOYDB_BACKUP_VERSION, gY as NOYDB_FORMAT_VERSION, gZ as NOYDB_KEYRING_VERSION, g_ as NOYDB_SYNC_VERSION, g$ as NO_CARGO, h0 as NO_CUSTODY, h1 as NO_SEARCH, h2 as NO_SEQUENCE, h3 as NO_TEAM, h4 as NetworkError, h5 as NextOptions, h6 as NoAccessError, h7 as NonAdditiveSchemaChangeError, h8 as NotFoundError, h9 as Noydb, ha as NoydbBundleStore, hb as NoydbEventMap, hc as NoydbOptions, bX as NoydbPodStore, hd as NumberingAssignment, he as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, hf as Operator, hg as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, hh as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, hi as POD_STORE_POLICY, hj as PUBLIC_ENVELOPE_FIELDS, hk as PaperRecoveryDoc, hl as PaperRecoveryEntry, hm as PassphrasePolicy, hn as PassphraseValidationResult, ho as PathEscapeError, hp as PeriodClosedError, bC as PeriodRecord, hq as Permission, hr as PermissionDeniedError, hs as Permissions, ht as PersistedSchemaKind, hu as PlaintextTranslatorContext, hv as PlaintextTranslatorFn, du as PodVersionConflictError, hw as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, hx as PresenceHandle, hy as PresencePeer, hz as PrivilegeEscalationError, cW as PruneOptions, hA as PublicEnvelopeField, hB as PublicEnvelopeSchema, hC as PublicEnvelopeText, hD as PullMode, hE as PullOptions, hF as PullPolicy, hG as PullResult, hH as PushMode, hI as PushOptions, hJ as PushPolicy, hK as PushResult, hL as PutManyItemOptions, hM as PutManyOptions, hN as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, e7 as Query, hO as QueryAcrossOptions, hP as QueryAcrossResult, hQ as QueryField, hR as QueryPlan, hS as QuerySource, hT as QuickUnlockState, hU as QuickUnlockStore, hV as QuiesceTimeoutError, hW as ReAuthOperation, hX as ReadOnlyAtInstantError, hY as ReadOnlyError, hZ as ReadOnlyFrameError, e3 as RecipientHint, e2 as RecipientSealer, h_ as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, h$ as RecoverPassphraseInput, i0 as RecoverPassphraseResult, i1 as RecoverUserOptions, i2 as RecoveryNotEnrolledError, i3 as RecoveryProfileNotImplementedError, i4 as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, i5 as RefDescriptor, i6 as RefIntegrityError, i7 as RefMode, i8 as RefRegistry, i9 as RefScopeError, ia as RefViolation, R as ReservedCollectionNameError, ib as ReservedVaultNameError, l as ResolveI18nOptions, ic as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, id as RetrieveHit, ie as RetrieveOptions, ig as RevokeOptions, bj as RgaState, cR as Role, ih as RotatePassphraseInput, ii as RotateRecoveryOptions, ij as RotateRecoveryResult, ik as SEALED_PASSPHRASE_RECORD_ID, il as ScanBuilder, im as ScanPageProvider, io as SchemaDelta, ip as SchemaFenceError, iq as SchemaIntrospection, ir as SchemaLockedError, is as SchemaUpdateError, it as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, iu as Sealed, iv as SealedEnvelope, iw as SealedHandle, ix as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, iy as SealedView, dg as SealingKeyProvider, iz as SearchEntry, iA as SearchNotEnabledError, iB as SearchOptions, iC as SearchResult, iD as SequenceContentionError, iE as SequenceHandle, iF as SequenceNotEnabledError, iG as SequenceOfflineError, iH as SequenceOptions, iI as SequenceStore, iJ as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, iK as SessionPolicy, N as SessionPolicyError, iL as SetPublicEnvelopeInput, iM as ShamirRecoveryDoc, iN as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iO as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iP as SlotRewrapCeremony, iQ as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iR as StandardSchemaV1, iS as StandardSchemaV1Issue, iT as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iU as StoreAuth, iV as StoreAuthKind, iW as StoreCapabilities, iX as StoreCapabilityError, iY as StoreTime, iZ as SyncEngine, i_ as SyncMetadata, i$ as SyncPolicy, j0 as SyncScheduler, j1 as SyncSchedulerStatus, j2 as SyncStatus, j3 as SyncTarget, j4 as SyncTargetRole, j5 as SyncTransaction, j6 as SyncTransactionResult, j7 as TabChannel, j8 as TabCoordinationOptions, j9 as TabLockManager, ja as TabPresence, jb as TabRole, jc as TamperedError, jd as TeamNotEnabledError, je as TeamStrategy, jf as TierDemoteDeniedError, jg as TierMode, jh as TierNotGrantedError, ji as TiersNotEnabledError, jj as TransactionInvariant, jk as TranslatorAuditEntry, T as TranslatorNotConfiguredError, jl as TxCollection, e4 as TxContext, jm as TxOp, jn as TxVault, ef as UnionArmJoin, eg as UnionSource, jo as UniqueConstraintError, U as UnknownDictCodeError, jp as UnknownShardError, jq as UnsupportedIndexOptionError, jr as UpdateAuthenticatorOptions, js as UpdateContext, jt as UpdateUserOptions, ju as UserEnvelopeCheckGate, jv as UserEnvelopeOversizedError, jw as UserInfo, jx as ValidationError, V as Vault, jy as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, jz as VaultPolicyOnDisk, jA as VaultSchemaSnapshot, jB as VaultSnapshot, jC as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, jD as WarningRules, jE as WeakPassphraseError, jF as WeakPassphraseReason, jG as WithArchiveOptions, jH as WithdrawalRequestError, jI as WrappedDeksBlob, jJ as WriteConflict, jK as WriteQueue, bk as YjsState, jL as aesGcmOpen, p as applyI18nLocale, jM as applyJoins, d4 as applyPatch, jN as approveWithdrawal, jO as asMoney, jP as assertStrongPassphrase, b2 as avg, jQ as base64ToBuffer, jR as bufferToBase64, jS as buildLiveQuery, jT as buildRecipientKeyringFile, jU as burnPaperRecoveryEntry, jV as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jW as createNoydb, jX as createStore, jY as decryptBytes, jZ as decryptDeterministic, j_ as deriveMagicLinkContentKey, j$ as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, k0 as encryptBytes, k1 as encryptDeterministic, s as enforceScript, k2 as enrollAuthenticator, k3 as estimateEntropy, k4 as evalComputedFields, k5 as evaluateClause, k6 as evaluateExportCapability, k7 as evaluateFieldClause, k8 as evaluateImportCapability, k9 as executePlan, ka as exportAccessibleData, kb as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, kc as hasExportCapability, kd as hasImportCapability, ke as hasRecoveryEnrolled, u as i18nText, v as inferScripts, d_ as isClassifiedFieldSpec, d$ as isClassifiedGroup, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, kf as isLinkCollectionName, kg as isMagicLinkGrantExpired, kh as isMoneyDescriptor, ki as isMoneyString, kj as isPublicEnvelope, kk as isRefArray, z as isStaticDictDescriptor, kl as issueDelegation, km as keyringRecoverPassphrase, kn as keyringRotatePassphrase, ko as liberateVault, kp as listMagicLinkGrants, kq as listUsers, kr as listUsersWithEnvelopes, ks as listWithdrawalRequests, kt as loadActiveDelegations, ku as loadPaperRecoveryEntries, kv as loadSealedPassphrase, kw as loadShamirRecoveryEntries, kx as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, ky as mintPaperRecoveryEntry, kz as mintShamirRecoveryEntry, kA as mintWrappedDeksBlob, kB as money, b8 as moneyMax, b9 as moneyMin, kC as moneyNumber, ba as moneySum, kD as parseRsaOaepTlv, kE as parseSealedEnvelope, kF as readMagicLinkGrantRecord, kG as readPath, kH as recoverUser, bb as reduceRecords, bc as reducerBuilder, kI as ref, kJ as refArray, kK as rejectWithdrawal, kL as removeAuthenticator, kM as requestWithdrawal, kN as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kO as resolvePublicEnvelopeSchema, kP as resolveSequenceKey, kQ as revokeDelegation, kR as revokeMagicLinkGrant, kS as runTransaction, kT as savePaperRecoveryEntries, kU as saveSealedPassphrase, kV as saveShamirRecoveryEntries, kW as sealRsaOaepTlv, E as staticDict, be as sum, kX as unwrapDeksFromBlob, kY as unwrapDeksFromPaperEntry, kZ as unwrapDeksFromShamirEntry, k_ as unwrapMagicLinkGrant, G as validateI18nTextValue, k$ as validatePassphrase, l0 as validatePublicEnvelopeInput, l1 as validateSchemaInput, l2 as validateSchemaOutput, W as validateSessionPolicy, l3 as withArchive, l4 as withDeferredNumbering, l5 as withdrawAccessibleData, l6 as writeMagicLinkGrant } from './index-D4GQe1Rx.js';
+export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-DmwT7OzZ.js';
 export { WrapBundleStoreOptions, WrapPodStoreOptions, WrappedBundleNoydbStore, WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore } from './pod/index.js';
 export { W as WriteEvent, a as WriteHook } from './index-B9QdHytu.js';
-export { C as CollectionDescription, a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-Ccd1hS7a.js';
-export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-CGLLRtFc.js';
-export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-PwBGkhpe.js';
+import { C as CollectionDescription } from './describe-C6iHNlqJ.js';
+export { a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-C6iHNlqJ.js';
+export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-DRxk8q_7.js';
+export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-Bs13EZtX.js';
 export { g as generateULID, i as isULID } from './ulid-DRH25k3y.js';
 export { D as DecryptedRecord, d as decryptExtractedPartition } from './decrypt-partition-IHtxEnTi.js';
 export { L as LedgerEntry, d as canonicalJson, h as hashEntry, p as paddedIndex, e as parseIndex, s as sha256Hex } from './subject-index-O75wKshW.js';
+export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential, withTeam } from './team/index.js';
+export { withLazy } from './lazy/index.js';
 export { TransactionStrategyOptions } from './tx/index.js';
-export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-DqodPNKw.js';
-export { w as withDerivation, a as withRollup } from './with-rollup-em2wxoHP.js';
-export { w as withMaterializedView } from './with-materialized-view-DMmWtYfJ.js';
-export { w as withOverlayedView } from './with-overlayed-view-D_IB2nkM.js';
-export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-h0K-UZTk.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C4hvR-Ac.js';
+export { w as withDerivation, a as withRollup } from './with-rollup-bQRPc3y1.js';
+export { w as withMaterializedView } from './with-materialized-view-Bp65kKdQ.js';
+export { w as withOverlayedView } from './with-overlayed-view-BRhdQNrK.js';
+export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, c as classified, l as luhnCheck, r as resolveClassifiedFields } from './validators-Ctgkj5qd.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Cqd5Xv5J.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
 export { FuseOptions, fuseRetrieval } from './kernel/index.js';
-export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-BtpiBvic.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-CdSr06sm.js';
+export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-B1Ir6EGs.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-D8Q5MJLA.js';
 import '@noy-db/attestation';
 
 /**
@@ -127,6 +130,20 @@ declare function withCustody(): CustodyStrategy;
  */
 declare function readPlaintextRecord<T = Record<string, unknown>>(envelope: EncryptedEnvelope): T | null;
 
+/**
+ * `applyListProjection` — the ONE vetted read-projection for lists/exports.
+ * Replaces classified field values with their declared projection (omit /
+ * mask / rider) so no consumer re-implements redaction. Pure, non-mutating.
+ * Consumed by as-* exporters (#489) and available to any list renderer.
+ * @module
+ */
+
+interface ListProjectionOptions {
+    /** Also handle fields carrying only a plain sensitivity tag (pii/secret). */
+    readonly sensitivity?: 'omit' | 'mask';
+}
+declare function applyListProjection(desc: CollectionDescription, record: Record<string, unknown>, opts?: ListProjectionOptions): Record<string, unknown>;
+
 /** Allow any schema change. Explicit blind / back-compat. */
 declare function blindUpdate(): SchemaUpdateStrategy;
 /** Allow additive changes; reject non-additive ones. The safety backstop. */
@@ -694,6 +711,34 @@ declare function persistSchemaIfNeeded(opts: {
     readonly strategies?: readonly SchemaUpdateStrategy[];
 }): Promise<PersistSchemaResult>;
 
+/**
+ * `_links_*` reserved collections — managed bidirectional many-to-many
+ * junctions (design B).
+ *
+ * Where `refArray` (design A) stores an id-array on one owning record,
+ * `vault.link()` creates a first-class junction: a dedicated encrypted
+ * `_links_<name>` collection whose rows are `{ a, b, meta? }` link tuples.
+ * It is queryable from BOTH sides (`of(id)`), carries optional per-link
+ * metadata, and cascades on endpoint delete.
+ *
+ * Each link is slot-typed: `a` is an id in the `a` endpoint collection,
+ * `b` an id in the `b` endpoint collection (they may be the same
+ * collection for self-links). A link's identity is the ordered pair
+ * `(a, b)`; `of(id)` matches either slot.
+ *
+ * Rows are encrypted under a dedicated `_links_<name>` DEK — same
+ * zero-knowledge stack as every other collection (the store sees only
+ * ciphertext). Backup/restore rides the normal `loadAll` path.
+ */
+
+/** Thrown by `connect()` when an endpoint record does not exist. */
+declare class LinkEndpointError extends NoydbError {
+    readonly link: string;
+    readonly endpoint: string;
+    readonly missingId: string;
+    constructor(link: string, endpoint: string, missingId: string);
+}
+
 /**
  * Persistence helpers for `_meta/public-envelope`. Mirrors the
  * bypass-AES pattern used by `_meta/handle` and `_meta/policy` —
@@ -1411,4 +1456,4 @@ declare function loadVaultPolicy(store: NoydbStore, vault: string): Promise<Vaul
  */
 declare function saveVaultPolicy(store: NoydbStore, vault: string, policy: VaultPolicy): Promise<void>;
 
-export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };
+export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CollectionDescription, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, LinkEndpointError, type ListProjectionOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbError, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, applyListProjection, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };