@noy-db/hub 0.3.0-pre.3 → 0.3.0-pre.5

package/dist/{index-DTMUUwwW.d.ts → index-DRxk8q_7.d.ts}

@@ -1,9 +1,9 @@
-import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, eO as CargoStrategy } from './index-D05bV0_g.js';
+import { cT as NoydbStore, dg as SealingKeyProvider, cF as UnlockedKeyring, eP as CargoStrategy } from './index-D4GQe1Rx.js';
 import './ulid-DRH25k3y.js';
 import './index-B9QdHytu.js';
 import './kernel/index.js';
-import './describe-0tiXAjoO.js';
-import './vault-diff-Fn0WeY2w.js';
+import './describe-C6iHNlqJ.js';
+import './vault-diff-B1Ir6EGs.js';
 
 /**
  * Hub-core constants that must be referenceable without pulling any

package/dist/index.d.ts

@@ -1,27 +1,28 @@
-import { eh as SearchStrategy, ei as SequenceStrategy, ej as CustodyStrategy, cV as EncryptedEnvelope, ek as SchemaUpdateStrategy, el as TransformFn, cT as NoydbStore, em as PersistedSchemaEnvelope, dj as EnclaveKey, en as UpdateDecision, e0 as PublicEnvelope, eo as UserEnvelope, ep as VaultUserApi, eq as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, er as DeepPartialOrNull, es as UserEnvelopePresented, et as Unsubscribe, eu as LiveUserEnvelope, ev as RoundingMode, cF as UnlockedKeyring, ew as VaultPolicy, ex as ActiveTier, ey as FactorProof, ez as GateName, eA as PolicyDenyReason, eB as GatePolicy } from './index-D05bV0_g.js';
-export { eC as AccessibleVault, eD as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, eE as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eF as ArchivePolicy, eG as ArchiveResult, eH as ArchiveRunOptions, eI as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, eJ as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, eK as BuiltInGateName, dn as BundleIntegrityError, e1 as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eL as CacheOptions, eM as CacheStats, eN as CargoNotEnabledError, eO as CargoStrategy, eP as ChangeEvent, cY as ChangeType, dN as ClassifiedConfigError, dO as ClassifiedEntry, dL as ClassifiedFieldSpec, dP as ClassifiedGroup, dQ as ClassifiedList, eQ as ClassifiedNotEnabledError, dS as ClassifiedRevealError, dU as ClassifiedRotationError, dV as ClassifiedStorage, dW as ClassifiedVerdict, dY as ClassifiedVerifyError, eR as Clause, bz as ClosePeriodOptions, ci as Collection, eS as CollectionChangeEvent, eT as CollectionConfig, eU as CollectionConflictResolver, eV as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eW as CollectionStats, eX as ComputedFieldError, eY as ComputedFields, eZ as ComputedFn, e_ as Conflict, e$ as ConflictError, f0 as ConflictPolicy, f1 as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, f2 as CrossJoinSourceUnknownError, f3 as CrossJoinTooLargeError, f4 as CrossTierAccessEvent, f5 as CustodyApi, f6 as CustodyHost, f7 as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, f8 as DEFAULT_CROSS_JOIN_MAX_ROWS, f9 as DEFAULT_JOIN_MAX_ROWS, fa as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, fb as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, fc as DanglingReferenceError, fd as DataResidencyError, fe as DebugPlaintextError, ff as DebugReservedFieldError, fg as DecryptionError, fh as DeepPartial, fi as DeferredNumberingConfig, fj as DelegationTargetMissingError, fk as DelegationToken, fl as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, fm as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, fn as DirectoryDisabledError, fo as DirtyEntry, fp as DryRunResult, fq as DumpSchemaOptions, fr as ELEVATION_AUDIT_COLLECTION, fs as ElevatedHandle, ft as ElevationExpiredError, fu as EmbeddingDescriptor, fv as EmbeddingDimMismatchError, fw as EmbeddingModelMismatchError, fx as EnclaveNotSupportedError, fy as EnrollAuthenticatorOptions, fz as EnrollAuthenticatorWrappingDEKsOptions, fA as EnrollAuthenticatorWrappingKEKOptions, fB as EnrollRecoveryResult, fC as ExportCapability, fD as ExportCapabilityError, fE as ExportChunk, cG as ExportFormat, fF as ExportStreamOptions, fG as FactorKind, fH as FactorProofBundle, fI as FactorRequirement, fJ as FenceDoc, fK as FenceState, fL as FieldChange, fM as FieldClause, fN as FieldDescriptor, bN as FieldFrozenError, fO as FieldSource, fP as FilenameSanitizationError, fQ as FilterClause, fR as ForgetStrategyNotConfiguredError, fS as FormattedSequenceHandle, fT as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fU as GhostRecord, fV as GrantCustodianOptions, fW as GrantOptions, fX as GroupCardinalityError, fY as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, fZ as GuardViolation, az as HashIndex, f_ as HistoryConfig, f$ as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, g0 as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, g1 as ImportCapability, g2 as ImportCapabilityError, aB as IndexDef, g3 as IndexFieldName, g4 as IndexRequiredError, g5 as IndexWriteFailureError, g6 as InferOutput, g7 as InternalCollectionStats, g8 as InvalidKeyError, bR as InvariantError, g9 as IssueDelegationOptions, ga as IssueMagicLinkGrantOptions, gb as JoinContext, gc as JoinLeg, gd as JoinStrategy, ge as JoinTooLargeError, gf as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, gg as KeyringAuthenticator, gh as KeyringAuthenticatorWrappingDEKs, gi as KeyringAuthenticatorWrappingKEK, gj as KeyringCorruptError, gk as KeyringExpiredError, gl as KeyringFile, L as Layer, gm as LedgerContentionError, d0 as LedgerStore, gn as LiberateOptions, go as LiberateResult, gp as LinkEndpointError, gq as LinkIntegrityError, gr as LinkOnDelete, gs as LinkRow, gt as LinkSetHandle, gu as LinkSpec, gv as ListAccessibleVaultsOptions, gw as ListPageResult, gx as ListUsersOptions, a_ as LiveAggregation, gy as LiveQuery, gz as LiveUpstream, j as LocaleNotSpecifiedError, gA as LocaleReadOptions, gB as Lru, gC as LruOptions, gD as LruStats, bi as LwwMapState, gE as MAGIC_LINK_CONTENT_INFO_PREFIX, gF as MAGIC_LINK_GRANTS_COLLECTION, gG as MAGIC_LINK_KEK_INFO_PREFIX, gH as MagicLinkGrantPayload, gI as MagicLinkGrantRecord, gJ as ManagedRecoveryNotEnrolledError, e9 as MaterializedFromMeta, ea as MaterializedViewConfigError, eb as MaterializedViewCycleError, gK as MaterializedViewDescriptor, ec as MaterializedViewOutput, ed as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, ee as MaterializedViewTooLargeError, gL as MemoryRecipientSealer, gM as MemorySealingKeyProvider, gN as MigrationRequiredError, M as MissingTranslationError, gO as MoneyCurrencyError, gP as MoneyDescriptor, gQ as MoneyOptions, gR as MoneyOptionsFixed, gS as MoneyOptionsMulti, gT as MoneyPrecisionError, gU as MoneyString, gV as MoneyUnsupportedError, gW as NOYDB_BACKUP_VERSION, gX as NOYDB_FORMAT_VERSION, gY as NOYDB_KEYRING_VERSION, gZ as NOYDB_SYNC_VERSION, g_ as NO_CARGO, g$ as NO_CUSTODY, h0 as NO_SEARCH, h1 as NO_SEQUENCE, h2 as NetworkError, h3 as NextOptions, h4 as NoAccessError, h5 as NonAdditiveSchemaChangeError, h6 as NotFoundError, h7 as Noydb, h8 as NoydbBundleStore, h9 as NoydbError, ha as NoydbEventMap, hb as NoydbOptions, bX as NoydbPodStore, hc as NumberingAssignment, hd as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, he as Operator, hf as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, hg as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, hh as POD_STORE_POLICY, hi as PUBLIC_ENVELOPE_FIELDS, hj as PaperRecoveryDoc, hk as PaperRecoveryEntry, hl as PassphrasePolicy, hm as PassphraseValidationResult, hn as PathEscapeError, ho as PeriodClosedError, bC as PeriodRecord, hp as Permission, hq as PermissionDeniedError, hr as Permissions, hs as PersistedSchemaKind, ht as PlaintextTranslatorContext, hu as PlaintextTranslatorFn, du as PodVersionConflictError, hv as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, hw as PresenceHandle, hx as PresencePeer, hy as PrivilegeEscalationError, cW as PruneOptions, hz as PublicEnvelopeField, hA as PublicEnvelopeSchema, hB as PublicEnvelopeText, hC as PullMode, hD as PullOptions, hE as PullPolicy, hF as PullResult, hG as PushMode, hH as PushOptions, hI as PushPolicy, hJ as PushResult, hK as PutManyItemOptions, hL as PutManyOptions, hM as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, e7 as Query, hN as QueryAcrossOptions, hO as QueryAcrossResult, hP as QueryField, hQ as QueryPlan, hR as QuerySource, hS as QuickUnlockState, hT as QuickUnlockStore, hU as QuiesceTimeoutError, hV as ReAuthOperation, hW as ReadOnlyAtInstantError, hX as ReadOnlyError, hY as ReadOnlyFrameError, e3 as RecipientHint, e2 as RecipientSealer, hZ as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, h_ as RecoverPassphraseInput, h$ as RecoverPassphraseResult, i0 as RecoverUserOptions, i1 as RecoveryNotEnrolledError, i2 as RecoveryProfileNotImplementedError, i3 as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, i4 as RefDescriptor, i5 as RefIntegrityError, i6 as RefMode, i7 as RefRegistry, i8 as RefScopeError, i9 as RefViolation, R as ReservedCollectionNameError, ia as ReservedVaultNameError, l as ResolveI18nOptions, ib as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, ic as RetrieveHit, id as RetrieveOptions, ie as RevokeOptions, bj as RgaState, cR as Role, ig as RotatePassphraseInput, ih as RotateRecoveryOptions, ii as RotateRecoveryResult, ij as SEALED_PASSPHRASE_RECORD_ID, ik as ScanBuilder, il as ScanPageProvider, im as SchemaDelta, io as SchemaFenceError, ip as SchemaIntrospection, iq as SchemaLockedError, ir as SchemaUpdateError, is as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, it as Sealed, iu as SealedEnvelope, iv as SealedHandle, iw as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, ix as SealedView, dg as SealingKeyProvider, iy as SearchEntry, iz as SearchNotEnabledError, iA as SearchOptions, iB as SearchResult, iC as SequenceContentionError, iD as SequenceHandle, iE as SequenceNotEnabledError, iF as SequenceOfflineError, iG as SequenceOptions, iH as SequenceStore, iI as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, iJ as SessionPolicy, N as SessionPolicyError, iK as SetPublicEnvelopeInput, iL as ShamirRecoveryDoc, iM as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iN as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iO as SlotRewrapCeremony, iP as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iQ as StandardSchemaV1, iR as StandardSchemaV1Issue, iS as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iT as StoreAuth, iU as StoreAuthKind, iV as StoreCapabilities, iW as StoreCapabilityError, iX as StoreTime, iY as SyncEngine, iZ as SyncMetadata, i_ as SyncPolicy, i$ as SyncScheduler, j0 as SyncSchedulerStatus, j1 as SyncStatus, j2 as SyncTarget, j3 as SyncTargetRole, j4 as SyncTransaction, j5 as SyncTransactionResult, j6 as TabChannel, j7 as TabCoordinationOptions, j8 as TabLockManager, j9 as TabPresence, ja as TabRole, jb as TamperedError, jc as TierDemoteDeniedError, jd as TierMode, je as TierNotGrantedError, jf as TiersNotEnabledError, jg as TransactionInvariant, jh as TranslatorAuditEntry, T as TranslatorNotConfiguredError, ji as TxCollection, e4 as TxContext, jj as TxOp, jk as TxVault, ef as UnionArmJoin, eg as UnionSource, jl as UniqueConstraintError, U as UnknownDictCodeError, jm as UnknownShardError, jn as UnsupportedIndexOptionError, jo as UpdateAuthenticatorOptions, jp as UpdateContext, jq as UpdateUserOptions, jr as UserEnvelopeCheckGate, js as UserEnvelopeOversizedError, jt as UserInfo, ju as ValidationError, V as Vault, jv as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, jw as VaultPolicyOnDisk, jx as VaultSchemaSnapshot, jy as VaultSnapshot, jz as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, jA as WarningRules, jB as WeakPassphraseError, jC as WeakPassphraseReason, jD as WithArchiveOptions, jE as WithdrawalRequestError, jF as WrappedDeksBlob, jG as WriteConflict, jH as WriteQueue, bk as YjsState, jI as aesGcmOpen, p as applyI18nLocale, jJ as applyJoins, d4 as applyPatch, jK as approveWithdrawal, jL as asMoney, jM as assertStrongPassphrase, b2 as avg, jN as base64ToBuffer, jO as bufferToBase64, jP as buildLiveQuery, jQ as buildRecipientKeyringFile, jR as burnPaperRecoveryEntry, jS as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jT as createNoydb, jU as createStore, jV as decryptBytes, jW as decryptDeterministic, jX as deriveMagicLinkContentKey, jY as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, jZ as encryptBytes, j_ as encryptDeterministic, s as enforceScript, j$ as enrollAuthenticator, k0 as estimateEntropy, k1 as evalComputedFields, k2 as evaluateClause, k3 as evaluateExportCapability, k4 as evaluateFieldClause, k5 as evaluateImportCapability, k6 as executePlan, k7 as exportAccessibleData, k8 as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, k9 as hasExportCapability, ka as hasImportCapability, kb as hasRecoveryEnrolled, u as i18nText, v as inferScripts, d_ as isClassifiedFieldSpec, d$ as isClassifiedGroup, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, kc as isLinkCollectionName, kd as isMagicLinkGrantExpired, ke as isMoneyDescriptor, kf as isMoneyString, kg as isPublicEnvelope, kh as isRefArray, z as isStaticDictDescriptor, ki as issueDelegation, kj as keyringRecoverPassphrase, kk as keyringRotatePassphrase, kl as liberateVault, km as listMagicLinkGrants, kn as listUsers, ko as listUsersWithEnvelopes, kp as listWithdrawalRequests, kq as loadActiveDelegations, kr as loadPaperRecoveryEntries, ks as loadSealedPassphrase, kt as loadShamirRecoveryEntries, ku as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, kv as mintPaperRecoveryEntry, kw as mintShamirRecoveryEntry, kx as mintWrappedDeksBlob, ky as money, b8 as moneyMax, b9 as moneyMin, kz as moneyNumber, ba as moneySum, kA as parseRsaOaepTlv, kB as parseSealedEnvelope, kC as readMagicLinkGrantRecord, kD as readPath, kE as recoverUser, bb as reduceRecords, bc as reducerBuilder, kF as ref, kG as refArray, kH as rejectWithdrawal, kI as removeAuthenticator, kJ as requestWithdrawal, kK as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kL as resolvePublicEnvelopeSchema, kM as resolveSequenceKey, kN as revokeDelegation, kO as revokeMagicLinkGrant, kP as runTransaction, kQ as savePaperRecoveryEntries, kR as saveSealedPassphrase, kS as saveShamirRecoveryEntries, kT as sealRsaOaepTlv, E as staticDict, be as sum, kU as unwrapDeksFromBlob, kV as unwrapDeksFromPaperEntry, kW as unwrapDeksFromShamirEntry, kX as unwrapMagicLinkGrant, G as validateI18nTextValue, kY as validatePassphrase, kZ as validatePublicEnvelopeInput, k_ as validateSchemaInput, k$ as validateSchemaOutput, W as validateSessionPolicy, l0 as withArchive, l1 as withDeferredNumbering, l2 as withdrawAccessibleData, l3 as writeMagicLinkGrant } from './index-D05bV0_g.js';
-export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-Qr_4HjP6.js';
+import { eh as SearchStrategy, ei as SequenceStrategy, ej as CustodyStrategy, cV as EncryptedEnvelope, ek as SchemaUpdateStrategy, el as TransformFn, cT as NoydbStore, em as PersistedSchemaEnvelope, dj as EnclaveKey, en as UpdateDecision, eo as NoydbError, e0 as PublicEnvelope, ep as UserEnvelope, eq as VaultUserApi, er as UserApiDeps, cy as RequestWithdrawalOptions, cz as RequestWithdrawalResult, cD as WithdrawalRequestStatus, cC as WithdrawalRequest, ct as ApproveWithdrawalOptions, cB as WithdrawResult, cx as RejectWithdrawalOptions, cA as WithdrawAccessibleOptions, cu as ExportAccessibleOptions, es as DeepPartialOrNull, et as UserEnvelopePresented, eu as Unsubscribe, ev as LiveUserEnvelope, ew as RoundingMode, cF as UnlockedKeyring, ex as VaultPolicy, ey as ActiveTier, ez as FactorProof, eA as GateName, eB as PolicyDenyReason, eC as GatePolicy } from './index-D4GQe1Rx.js';
+export { eD as AccessibleVault, eE as AffectedDocument, aP as AggregateResult, aQ as AggregateSpec, aR as Aggregation, aS as AggregationUpstream, eF as AlreadyElevatedError, bM as AmendmentForbiddenError, cX as AppendInput, eG as ArchivePolicy, eH as ArchiveResult, eI as ArchiveRunOptions, eJ as ArchiveStrategy, c4 as ArrayOutputSpec, dz as AttestationError, dA as AttestationNotEnabledError, Y as BLOB_CHUNKS_COLLECTION, Z as BLOB_COLLECTION, $ as BLOB_INDEX_COLLECTION, a0 as BLOB_SLOTS_PREFIX, a1 as BLOB_VERSIONS_PREFIX, eK as BUNDLE_STORE_POLICY, dl as BackupCorruptedError, dm as BackupLedgerError, a5 as BlobObject, a6 as BlobPutOptions, a7 as BlobResponseOptions, a8 as BlobSet, eL as BuiltInGateName, dn as BundleIntegrityError, e1 as BundleRecipient, dp as BundleSealMismatchError, dq as BundleVersionConflictError, bq as CONSENT_AUDIT_COLLECTION, eM as CacheOptions, eN as CacheStats, eO as CargoNotEnabledError, eP as CargoStrategy, eQ as ChangeEvent, cY as ChangeType, dN as ClassifiedConfigError, dO as ClassifiedEntry, dL as ClassifiedFieldSpec, dP as ClassifiedGroup, dQ as ClassifiedList, eR as ClassifiedNotEnabledError, dS as ClassifiedRevealError, dU as ClassifiedRotationError, dV as ClassifiedStorage, dW as ClassifiedVerdict, dY as ClassifiedVerifyError, eS as Clause, bz as ClosePeriodOptions, ci as Collection, eT as CollectionChangeEvent, eU as CollectionConfig, eV as CollectionConflictResolver, eW as CollectionDescriptor, bV as CollectionFrame, ay as CollectionIndexes, cZ as CollectionInstant, eX as CollectionStats, eY as ComputedFieldError, eZ as ComputedFields, e_ as ComputedFn, e$ as Conflict, f0 as ConflictError, f1 as ConflictPolicy, f2 as ConflictStrategy, br as ConsentAuditEntry, bs as ConsentAuditFilter, bt as ConsentContext, bu as ConsentOp, bg as CrdtMode, bh as CrdtState, f3 as CrossJoinSourceUnknownError, f4 as CrossJoinTooLargeError, f5 as CrossTierAccessEvent, f6 as CustodyApi, f7 as CustodyHost, f8 as CustodyNotEnabledError, ad as DEFAULT_CHUNK_SIZE, f9 as DEFAULT_CROSS_JOIN_MAX_ROWS, fa as DEFAULT_JOIN_MAX_ROWS, fb as DEFAULT_PUBLIC_ENVELOPE_SCHEMA, fc as DELEGATIONS_COLLECTION, D as DICT_COLLECTION_PREFIX, fd as DanglingReferenceError, fe as DataResidencyError, ff as DebugPlaintextError, fg as DebugReservedFieldError, fh as DecryptionError, fi as DeepPartial, fj as DeferredNumberingConfig, fk as DelegationTargetMissingError, fl as DelegationToken, fm as DeleteManyResult, c5 as DerivationCapExceededError, c6 as DerivationCycleError, c7 as DerivationDepthError, fn as DerivationDescriptor, c8 as DerivationOutputShapeError, c9 as DerivationOutputUnknownError, c2 as DerivationStrategy, cb as DerivationStrategyHandle, cc as DerivedFromMeta, a as DictEntry, b as DictKeyDescriptor, c as DictKeyInUseError, d as DictKeyMissingError, e as DictionaryHandle, f as DictionaryOptions, cE as DiffEntry, fo as DirectoryDisabledError, fp as DirtyEntry, fq as DryRunResult, fr as DumpSchemaOptions, fs as ELEVATION_AUDIT_COLLECTION, ft as ElevatedHandle, fu as ElevationExpiredError, fv as EmbeddingDescriptor, fw as EmbeddingDimMismatchError, fx as EmbeddingModelMismatchError, fy as EnclaveNotSupportedError, fz as EnrollAuthenticatorOptions, fA as EnrollAuthenticatorWrappingDEKsOptions, fB as EnrollAuthenticatorWrappingKEKOptions, fC as EnrollRecoveryResult, fD as ExportCapability, fE as ExportCapabilityError, fF as ExportChunk, cG as ExportFormat, fG as ExportStreamOptions, fH as FactorKind, fI as FactorProofBundle, fJ as FactorRequirement, fK as FenceDoc, fL as FenceState, fM as FieldChange, fN as FieldClause, fO as FieldDescriptor, bN as FieldFrozenError, fP as FieldSource, fQ as FilenameSanitizationError, fR as FilterClause, fS as ForgetStrategyNotConfiguredError, fT as FormattedSequenceHandle, fU as FrozenSnapshotRef, aT as GROUPBY_MAX_CARDINALITY, aU as GROUPBY_WARN_CARDINALITY, fV as GhostRecord, fW as GrantCustodianOptions, fX as GrantOptions, fY as GroupCardinalityError, fZ as GroupClause, aV as GroupedAggregation, aW as GroupedQuery, aX as GroupedQueryN, aY as GroupedRow, aZ as GroupedRowN, bK as GuardChange, bL as GuardContext, bJ as GuardStrategy, bP as GuardStrategyHandle, f_ as GuardViolation, az as HashIndex, f$ as HistoryConfig, g0 as HistoryEntry, cU as HistoryOptions, g as I18nMap, h as I18nTextDescriptor, i as I18nTextOptions, g1 as INDEXED_STORE_POLICY, bQ as IllegalTransitionError, g2 as ImportCapability, g3 as ImportCapabilityError, aB as IndexDef, g4 as IndexFieldName, g5 as IndexRequiredError, g6 as IndexWriteFailureError, g7 as InferOutput, g8 as InternalCollectionStats, g9 as InvalidKeyError, bR as InvariantError, ga as IssueDelegationOptions, gb as IssueMagicLinkGrantOptions, gc as JoinContext, gd as JoinLeg, ge as JoinStrategy, gf as JoinTooLargeError, gg as JoinableSource, c_ as JsonPatch, c$ as JsonPatchOp, gh as KeyringAuthenticator, gi as KeyringAuthenticatorWrappingDEKs, gj as KeyringAuthenticatorWrappingKEK, gk as KeyringCorruptError, gl as KeyringExpiredError, gm as KeyringFile, L as Layer, gn as LazyStrategy, go as LedgerContentionError, d0 as LedgerStore, gp as LiberateOptions, gq as LiberateResult, gr as LinkIntegrityError, gs as LinkOnDelete, gt as LinkRow, gu as LinkSetHandle, gv as LinkSpec, gw as ListAccessibleVaultsOptions, gx as ListPageResult, gy as ListUsersOptions, a_ as LiveAggregation, gz as LiveQuery, gA as LiveUpstream, j as LocaleNotSpecifiedError, gB as LocaleReadOptions, gC as Lru, gD as LruOptions, gE as LruStats, bi as LwwMapState, gF as MAGIC_LINK_CONTENT_INFO_PREFIX, gG as MAGIC_LINK_GRANTS_COLLECTION, gH as MAGIC_LINK_KEK_INFO_PREFIX, gI as MagicLinkGrantPayload, gJ as MagicLinkGrantRecord, gK as ManagedRecoveryNotEnrolledError, e9 as MaterializedFromMeta, ea as MaterializedViewConfigError, eb as MaterializedViewCycleError, gL as MaterializedViewDescriptor, ec as MaterializedViewOutput, ed as MaterializedViewSourceUnknownError, cf as MaterializedViewStrategy, cg as MaterializedViewStrategyHandle, ee as MaterializedViewTooLargeError, gM as MemoryRecipientSealer, gN as MemorySealingKeyProvider, gO as MigrationRequiredError, M as MissingTranslationError, gP as MoneyCurrencyError, gQ as MoneyDescriptor, gR as MoneyOptions, gS as MoneyOptionsFixed, gT as MoneyOptionsMulti, gU as MoneyPrecisionError, gV as MoneyString, gW as MoneyUnsupportedError, gX as NOYDB_BACKUP_VERSION, gY as NOYDB_FORMAT_VERSION, gZ as NOYDB_KEYRING_VERSION, g_ as NOYDB_SYNC_VERSION, g$ as NO_CARGO, h0 as NO_CUSTODY, h1 as NO_SEARCH, h2 as NO_SEQUENCE, h3 as NO_TEAM, h4 as NetworkError, h5 as NextOptions, h6 as NoAccessError, h7 as NonAdditiveSchemaChangeError, h8 as NotFoundError, h9 as Noydb, ha as NoydbBundleStore, hb as NoydbEventMap, hc as NoydbOptions, bX as NoydbPodStore, hd as NumberingAssignment, he as NumberingUncertaintyError, ak as ObjectListEntry, al as ObjectMeta, am as ObjectProjection, an as ObjectUrlOptions, O as OnMissing, k as OnMissingPolicy, bA as OpenPeriodOptions, hf as Operator, hg as OrderBy, cd as OutputSpec, cj as OverlayBaseIsVirtualError, ck as OverlayCollectionUnavailableError, cl as OverlayFieldMergeMode, cm as OverlayFieldMergeRule, cn as OverlayIdMismatchError, co as OverlayNameCollisionError, hh as OverlayViewDescriptor, ch as OverlayedViewStrategy, cq as OverlayedViewStrategyHandle, bB as PERIODS_COLLECTION, hi as POD_STORE_POLICY, hj as PUBLIC_ENVELOPE_FIELDS, hk as PaperRecoveryDoc, hl as PaperRecoveryEntry, hm as PassphrasePolicy, hn as PassphraseValidationResult, ho as PathEscapeError, hp as PeriodClosedError, bC as PeriodRecord, hq as Permission, hr as PermissionDeniedError, hs as Permissions, ht as PersistedSchemaKind, hu as PlaintextTranslatorContext, hv as PlaintextTranslatorFn, du as PodVersionConflictError, hw as PolicyDeniedError, P as PolicyEnforcer, cw as PortabilityNotEnabledError, hx as PresenceHandle, hy as PresencePeer, hz as PrivilegeEscalationError, cW as PruneOptions, hA as PublicEnvelopeField, hB as PublicEnvelopeSchema, hC as PublicEnvelopeText, hD as PullMode, hE as PullOptions, hF as PullPolicy, hG as PullResult, hH as PushMode, hI as PushOptions, hJ as PushPolicy, hK as PushResult, hL as PutManyItemOptions, hM as PutManyOptions, hN as PutManyResult, ao as PutObjectOptions, ap as PutUrlOptions, e7 as Query, hO as QueryAcrossOptions, hP as QueryAcrossResult, hQ as QueryField, hR as QueryPlan, hS as QuerySource, hT as QuickUnlockState, hU as QuickUnlockStore, hV as QuiesceTimeoutError, hW as ReAuthOperation, hX as ReadOnlyAtInstantError, hY as ReadOnlyError, hZ as ReadOnlyFrameError, e3 as RecipientHint, e2 as RecipientSealer, h_ as RecordCekNotFoundError, bT as RecordLockedError, ce as RecordOutputSpec, h$ as RecoverPassphraseInput, i0 as RecoverPassphraseResult, i1 as RecoverUserOptions, i2 as RecoveryNotEnrolledError, i3 as RecoveryProfileNotImplementedError, i4 as RecoveryProof, a$ as Reducer, b0 as ReducerBuilder, b1 as ReducerOptions, i5 as RefDescriptor, i6 as RefIntegrityError, i7 as RefMode, i8 as RefRegistry, i9 as RefScopeError, ia as RefViolation, R as ReservedCollectionNameError, ib as ReservedVaultNameError, l as ResolveI18nOptions, ic as ResolvedPublicEnvelopeSchema, bY as RetentionPolicy, id as RetrieveHit, ie as RetrieveOptions, ig as RevokeOptions, bj as RgaState, cR as Role, ih as RotatePassphraseInput, ii as RotateRecoveryOptions, ij as RotateRecoveryResult, ik as SEALED_PASSPHRASE_RECORD_ID, il as ScanBuilder, im as ScanPageProvider, io as SchemaDelta, ip as SchemaFenceError, iq as SchemaIntrospection, ir as SchemaLockedError, is as SchemaUpdateError, it as SchemaValidationError, S as ScriptViolationError, m as ScriptWarning, iu as Sealed, iv as SealedEnvelope, iw as SealedHandle, ix as SealedPassphrase, dc as SealedRecordExpiredError, dd as SealedRecordMismatchError, de as SealedRecordNotEnabledError, iy as SealedView, dg as SealingKeyProvider, iz as SearchEntry, iA as SearchNotEnabledError, iB as SearchOptions, iC as SearchResult, iD as SequenceContentionError, iE as SequenceHandle, iF as SequenceNotEnabledError, iG as SequenceOfflineError, iH as SequenceOptions, iI as SequenceStore, iJ as SequenceStoreOptions, J as SessionExpiredError, K as SessionNotFoundError, iK as SessionPolicy, N as SessionPolicyError, iL as SetPublicEnvelopeInput, iM as ShamirRecoveryDoc, iN as ShamirRecoveryEntry, di as ShamirRecoveryProvider, iO as ShardProvisioningError, aq as SlotInfo, ar as SlotRecord, iP as SlotRewrapCeremony, iQ as SlotRewrapContext, b$ as SnapshotMeta, c1 as SnapshotNotFoundError, iR as StandardSchemaV1, iS as StandardSchemaV1Issue, iT as StandardSchemaV1SyncResult, n as StaticDictDescriptor, o as StaticDictReadonlyError, iU as StoreAuth, iV as StoreAuthKind, iW as StoreCapabilities, iX as StoreCapabilityError, iY as StoreTime, iZ as SyncEngine, i_ as SyncMetadata, i$ as SyncPolicy, j0 as SyncScheduler, j1 as SyncSchedulerStatus, j2 as SyncStatus, j3 as SyncTarget, j4 as SyncTargetRole, j5 as SyncTransaction, j6 as SyncTransactionResult, j7 as TabChannel, j8 as TabCoordinationOptions, j9 as TabLockManager, ja as TabPresence, jb as TabRole, jc as TamperedError, jd as TeamNotEnabledError, je as TeamStrategy, jf as TierDemoteDeniedError, jg as TierMode, jh as TierNotGrantedError, ji as TiersNotEnabledError, jj as TransactionInvariant, jk as TranslatorAuditEntry, T as TranslatorNotConfiguredError, jl as TxCollection, e4 as TxContext, jm as TxOp, jn as TxVault, ef as UnionArmJoin, eg as UnionSource, jo as UniqueConstraintError, U as UnknownDictCodeError, jp as UnknownShardError, jq as UnsupportedIndexOptionError, jr as UpdateAuthenticatorOptions, js as UpdateContext, jt as UpdateUserOptions, ju as UserEnvelopeCheckGate, jv as UserEnvelopeOversizedError, jw as UserInfo, jx as ValidationError, V as Vault, jy as VaultBackup, d1 as VaultEngine, bW as VaultFrame, d2 as VaultInstant, jz as VaultPolicyOnDisk, jA as VaultSchemaSnapshot, jB as VaultSnapshot, jC as VaultTemplateNotFoundError, d3 as VerifyResult, as as VersionRecord, jD as WarningRules, jE as WeakPassphraseError, jF as WeakPassphraseReason, jG as WithArchiveOptions, jH as WithdrawalRequestError, jI as WrappedDeksBlob, jJ as WriteConflict, jK as WriteQueue, bk as YjsState, jL as aesGcmOpen, p as applyI18nLocale, jM as applyJoins, d4 as applyPatch, jN as approveWithdrawal, jO as asMoney, jP as assertStrongPassphrase, b2 as avg, jQ as base64ToBuffer, jR as bufferToBase64, jS as buildLiveQuery, jT as buildRecipientKeyringFile, jU as burnPaperRecoveryEntry, jV as compileSequenceFormat, d5 as computePatch, b4 as count, Q as createEnforcer, jW as createNoydb, jX as createStore, jY as decryptBytes, jZ as decryptDeterministic, j_ as deriveMagicLinkContentKey, j$ as derivePresenceKey, q as dictCollectionName, r as dictKey, d6 as diff, k0 as encryptBytes, k1 as encryptDeterministic, s as enforceScript, k2 as enrollAuthenticator, k3 as estimateEntropy, k4 as evalComputedFields, k5 as evaluateClause, k6 as evaluateExportCapability, k7 as evaluateFieldClause, k8 as evaluateImportCapability, k9 as executePlan, ka as exportAccessibleData, kb as findAuthenticator, d7 as formatDiff, b5 as groupAndReduce, kc as hasExportCapability, kd as hasImportCapability, ke as hasRecoveryEnrolled, u as i18nText, v as inferScripts, d_ as isClassifiedFieldSpec, d$ as isClassifiedGroup, w as isDictCollectionName, x as isDictKeyDescriptor, y as isI18nTextDescriptor, kf as isLinkCollectionName, kg as isMagicLinkGrantExpired, kh as isMoneyDescriptor, ki as isMoneyString, kj as isPublicEnvelope, kk as isRefArray, z as isStaticDictDescriptor, kl as issueDelegation, km as keyringRecoverPassphrase, kn as keyringRotatePassphrase, ko as liberateVault, kp as listMagicLinkGrants, kq as listUsers, kr as listUsersWithEnvelopes, ks as listWithdrawalRequests, kt as loadActiveDelegations, ku as loadPaperRecoveryEntries, kv as loadSealedPassphrase, kw as loadShamirRecoveryEntries, kx as magicLinkGrantRecordId, b6 as max, au as memoryObjectProjection, bn as mergeCrdtStates, b7 as min, ky as mintPaperRecoveryEntry, kz as mintShamirRecoveryEntry, kA as mintWrappedDeksBlob, kB as money, b8 as moneyMax, b9 as moneyMin, kC as moneyNumber, ba as moneySum, kD as parseRsaOaepTlv, kE as parseSealedEnvelope, kF as readMagicLinkGrantRecord, kG as readPath, kH as recoverUser, bb as reduceRecords, bc as reducerBuilder, kI as ref, kJ as refArray, kK as rejectWithdrawal, kL as removeAuthenticator, kM as requestWithdrawal, kN as resetJoinWarnings, bo as resolveCrdtSnapshot, A as resolveI18nText, B as resolvePolicy, kO as resolvePublicEnvelopeSchema, kP as resolveSequenceKey, kQ as revokeDelegation, kR as revokeMagicLinkGrant, kS as runTransaction, kT as savePaperRecoveryEntries, kU as saveSealedPassphrase, kV as saveShamirRecoveryEntries, kW as sealRsaOaepTlv, E as staticDict, be as sum, kX as unwrapDeksFromBlob, kY as unwrapDeksFromPaperEntry, kZ as unwrapDeksFromShamirEntry, k_ as unwrapMagicLinkGrant, G as validateI18nTextValue, k$ as validatePassphrase, l0 as validatePublicEnvelopeInput, l1 as validateSchemaInput, l2 as validateSchemaOutput, W as validateSessionPolicy, l3 as withArchive, l4 as withDeferredNumbering, l5 as withdrawAccessibleData, l6 as writeMagicLinkGrant } from './index-D4GQe1Rx.js';
+export { I as ImportExternalOptions, a as ImportExternalResult, b as ImportableCollection, d as detectMagic, c as detectMimeType, i as importExternalObjects, e as isPreCompressed } from './mime-magic-DmwT7OzZ.js';
 export { WrapBundleStoreOptions, WrapPodStoreOptions, WrappedBundleNoydbStore, WrappedPodNoydbStore, createBundleStore, createPodStore, wrapBundleStore, wrapPodStore } from './pod/index.js';
 export { W as WriteEvent, a as WriteHook } from './index-B9QdHytu.js';
-import { C as CollectionDescription } from './describe-0tiXAjoO.js';
-export { a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-0tiXAjoO.js';
-export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-DTMUUwwW.js';
-export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-B-P3_Jvb.js';
+import { C as CollectionDescription } from './describe-C6iHNlqJ.js';
+export { a as CollectionMeta, D as DescribeOptions, b as DescribedField, F as FieldMeta, S as SemanticType, V as VaultMeta } from './describe-C6iHNlqJ.js';
+export { D as DEED_RECORD_ID, a as DeedMarker, S as STATE_VAULT_NAME, U as USER_ENVELOPE_COLLECTION, b as USER_ENVELOPE_MAX_BYTES, c as createDeedOwner, i as isDeedVault, l as loadDeedMarker, w as withCargo } from './index-DRxk8q_7.js';
+export { A as AutoCredential, q as AutoCredentialKind, d as CompressionAlgo, f as NOYDB_BUNDLE_FORMAT_VERSION, g as NOYDB_BUNDLE_MAGIC, h as NOYDB_BUNDLE_PREFIX_BYTES, i as NoydbBundleHeader, j as NoydbBundleReadResult, N as NoydbPodHeader, R as ReadNoydbBundleOptions, k as WriteNoydbBundleOptions, W as WritePodOptions, s as hasNoydbBundleMagic, m as readNoydbBundle, n as readNoydbBundleHeader, t as readNoydbBundlePublicEnvelope, r as readPod, a as readPodHeader, o as resetBrotliSupportCache, p as writeNoydbBundle, w as writePod } from './bundle-Bs13EZtX.js';
 export { g as generateULID, i as isULID } from './ulid-DRH25k3y.js';
 export { D as DecryptedRecord, d as decryptExtractedPartition } from './decrypt-partition-IHtxEnTi.js';
 export { L as LedgerEntry, d as canonicalJson, h as hashEntry, p as paddedIndex, e as parseIndex, s as sha256Hex } from './subject-index-O75wKshW.js';
+export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential, withTeam } from './team/index.js';
+export { withLazy } from './lazy/index.js';
 export { TransactionStrategyOptions } from './tx/index.js';
-export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C1Pyz8nH.js';
-export { w as withDerivation, a as withRollup } from './with-rollup-Bl0sRFEt.js';
-export { w as withMaterializedView } from './with-materialized-view-NKxs6iK5.js';
-export { w as withOverlayedView } from './with-overlayed-view-B4fPYHwV.js';
-export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, c as classified, l as luhnCheck, r as resolveClassifiedFields } from './validators-Dzn7T-3x.js';
-export { SYNC_CREDENTIALS_COLLECTION, SyncCredential, credentialStatus, deleteCredential, getCredential, listCredentials, putCredential } from './team/index.js';
-export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-B_s9DUWa.js';
+export { I as ImmutableGuardConfig, T as TransitionGuardConfig, i as immutableGuard, t as transitionGuard, w as withGuard } from './transition-guard-C4hvR-Ac.js';
+export { w as withDerivation, a as withRollup } from './with-rollup-bQRPc3y1.js';
+export { w as withMaterializedView } from './with-materialized-view-Bp65kKdQ.js';
+export { w as withOverlayedView } from './with-overlayed-view-BRhdQNrK.js';
+export { C as ClassifiedNeverStoredError, a as ClassifiedValidationError, c as classified, l as luhnCheck, r as resolveClassifiedFields } from './validators-Ctgkj5qd.js';
+export { C as CreateSessionOptions, a as CreateSessionResult, D as DevUnlockOptions, S as SessionToken, b as activeSessionCount, c as clearDevUnlock, d as createSession, e as enableDevUnlock, i as isDevUnlockActive, f as isSessionAlive, l as loadDevUnlock, r as resolveSession, g as revokeAllSessions, h as revokeSession } from './dev-unlock-Cqd5Xv5J.js';
 export { i as isDiscriminant } from './discriminant-BN9REW3o.js';
 export { FuseOptions, fuseRetrieval } from './kernel/index.js';
-export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-Fn0WeY2w.js';
-export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-CWxn7sf6.js';
+export { D as DiffCandidate, a as DiffOptions, V as VaultDiff, b as VaultDiffEntry, c as VaultDiffModifiedEntry, d as diffVault } from './vault-diff-B1Ir6EGs.js';
+export { L as LEDGER_COLLECTION, a as LEDGER_DELTAS_COLLECTION, e as envelopePayloadHash } from './hash-D8Q5MJLA.js';
 import '@noy-db/attestation';
 
 /**
@@ -672,8 +673,15 @@ declare function loadPersistedSchema(store: NoydbStore, vault: string, collectio
  * Encrypt and persist a schema envelope for one collection. Always
  * overwrites any prior write (callers gate on hash equality before calling
  * to avoid no-op writes).
+ *
+ * Pass `expectedVersion` — the `version` from {@link loadPersistedSchemaEntry}
+ * captured at load time — to make the write an optimistic CAS: on a store with
+ * `casAtomic`, `store.put` throws {@link ConflictError} when the record was
+ * bumped concurrently, so a lost update on the shared `_schemas` record is
+ * rejected instead of silently clobbering the other writer's field (#583).
+ * When omitted, keeps the legacy unconditional last-writer-wins behaviour.
  */
-declare function savePersistedSchema(store: NoydbStore, vault: string, collection: string, dek: EnclaveKey, payload: PersistedSchemaEnvelope): Promise<void>;
+declare function savePersistedSchema(store: NoydbStore, vault: string, collection: string, dek: EnclaveKey, payload: PersistedSchemaEnvelope, expectedVersion?: number): Promise<void>;
 
 /**
  * Orchestrate the derive → hash → skip-or-write cycle for a collection's
@@ -710,6 +718,34 @@ declare function persistSchemaIfNeeded(opts: {
     readonly strategies?: readonly SchemaUpdateStrategy[];
 }): Promise<PersistSchemaResult>;
 
+/**
+ * `_links_*` reserved collections — managed bidirectional many-to-many
+ * junctions (design B).
+ *
+ * Where `refArray` (design A) stores an id-array on one owning record,
+ * `vault.link()` creates a first-class junction: a dedicated encrypted
+ * `_links_<name>` collection whose rows are `{ a, b, meta? }` link tuples.
+ * It is queryable from BOTH sides (`of(id)`), carries optional per-link
+ * metadata, and cascades on endpoint delete.
+ *
+ * Each link is slot-typed: `a` is an id in the `a` endpoint collection,
+ * `b` an id in the `b` endpoint collection (they may be the same
+ * collection for self-links). A link's identity is the ordered pair
+ * `(a, b)`; `of(id)` matches either slot.
+ *
+ * Rows are encrypted under a dedicated `_links_<name>` DEK — same
+ * zero-knowledge stack as every other collection (the store sees only
+ * ciphertext). Backup/restore rides the normal `loadAll` path.
+ */
+
+/** Thrown by `connect()` when an endpoint record does not exist. */
+declare class LinkEndpointError extends NoydbError {
+    readonly link: string;
+    readonly endpoint: string;
+    readonly missingId: string;
+    constructor(link: string, endpoint: string, missingId: string);
+}
+
 /**
  * Persistence helpers for `_meta/public-envelope`. Mirrors the
  * bypass-AES pattern used by `_meta/handle` and `_meta/policy` —
@@ -1427,4 +1463,4 @@ declare function loadVaultPolicy(store: NoydbStore, vault: string): Promise<Vaul
  */
 declare function saveVaultPolicy(store: NoydbStore, vault: string, policy: VaultPolicy): Promise<void>;
 
-export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CollectionDescription, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, type ListProjectionOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, applyListProjection, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };
+export { ActiveTier, type AgeRoute, type AllocateOptions, ApproveWithdrawalOptions, type BlobLifecyclePolicy, type BlobStoreRoute, type CheckGateContext, type CircuitBreakerOptions, CollectionDescription, CustodyStrategy, DEFAULT_FRESHNESS_MS, DIRECTORY_RECORD_ID, DeepPartialOrNull, type DirectoryConfig, EncryptedEnvelope, ExportAccessibleOptions, FactorProof, type FxRates, GateName, GatePolicy, type HealthCheckOptions, LinkEndpointError, type ListProjectionOptions, LiveUserEnvelope, type LogLevel, type LoggingOptions, META_COLLECTION, type MetricsOptions, type MulRateOptions, NoydbError, NoydbStore, type OverrideOptions, type OverrideTarget, PERSONAL_POLICY, POLICY_RECORD_ID, PUBLIC_ENVELOPE_RECORD_ID, type PersistSchemaResult, PersistedSchemaEnvelope, PolicyDenyReason, PublicEnvelope, RejectWithdrawalOptions, RequestWithdrawalOptions, RequestWithdrawalResult, type RetryOptions, RoundingMode, type RouteStatus, type RouteStoreOptions, type RoutedNoydbStore, SCHEMAS_COLLECTION, STRICT_POLICY, SchemaUpdateStrategy, SearchStrategy, SequenceStrategy, type StoreCacheOptions, type StoreMiddleware, type StoreOperation, type SuspendOptions, type Tokenizer, UnlockedKeyring, Unsubscribe, UpdateDecision, UserApi, UserEnvelope, UserEnvelopePresented, type UserVisibility, VISIBILITY_RECORD_PREFIX, VaultPolicy, WithdrawAccessibleOptions, WithdrawResult, WithdrawalRequest, WithdrawalRequestStatus, additiveOnly, allocate, applyListProjection, assertTierAccess, blindUpdate, checkGate, coordinatedCutover, dekKey, deleteUserEnvelope, deleteUserVisibility, derivePersistedSchema, describeAllUsersAuth, describeAuthConfig, describeGate, describeUserAuth, diagramAuthConfig, effectiveClearance, estimateRecordBytes, isZodSchema, listUserEnvelopeIds, loadPersistedSchema, loadPublicEnvelope, loadUserEnvelope, loadVaultPolicy, lockSchema, memoryStore, mergePolicy, mulRate, parseBytes, persistDirectoryConfig, persistSchemaIfNeeded, persistUserVisibility, readDirectoryConfig, readPlaintextRecord, readPublicEnvelope, readUserVisibility, routeStore, savePersistedSchema, savePublicEnvelope, saveUserEnvelope, saveVaultPolicy, scaleForCurrency, tokenize, visibilityRecordId, withCache, withCircuitBreaker, withCustody, withHealthCheck, withLogging, withMetrics, withRetry, withSearch, withSequence, wrapStore };